mirror of
https://github.com/zerotier/ZeroTierOne.git
synced 2024-12-22 06:17:48 +00:00
228 lines
8.3 KiB
C++
228 lines
8.3 KiB
C++
/*
|
|
* ZeroTier One - Network Virtualization Everywhere
|
|
* Copyright (C) 2011-2015 ZeroTier, Inc.
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef ZT_SQLITENETWORKCONTROLLER_HPP
|
|
#define ZT_SQLITENETWORKCONTROLLER_HPP
|
|
|
|
#include <stdint.h>
|
|
|
|
#include <string>
|
|
#include <map>
|
|
#include <vector>
|
|
#include <set>
|
|
#include <list>
|
|
#include <thread>
|
|
#include <unordered_map>
|
|
#include <atomic>
|
|
|
|
#include "../node/Constants.hpp"
|
|
#include "../node/NetworkController.hpp"
|
|
#include "../node/Utils.hpp"
|
|
#include "../node/Address.hpp"
|
|
#include "../node/InetAddress.hpp"
|
|
#include "../node/NonCopyable.hpp"
|
|
|
|
#include "../osdep/OSUtils.hpp"
|
|
#include "../osdep/Thread.hpp"
|
|
#include "../osdep/BlockingQueue.hpp"
|
|
|
|
#include "../ext/json/json.hpp"
|
|
|
|
#include "DB.hpp"
|
|
#include "FileDB.hpp"
|
|
#ifdef ZT_CONTROLLER_USE_RETHINKDB
|
|
#include "RethinkDB.hpp"
|
|
#endif
|
|
|
|
namespace ZeroTier {
|
|
|
|
class Node;
|
|
|
|
class EmbeddedNetworkController : public NetworkController
|
|
{
|
|
public:
|
|
/**
|
|
* @param node Parent node
|
|
* @param dbPath Database path (file path or database credentials)
|
|
*/
|
|
EmbeddedNetworkController(Node *node,const char *dbPath);
|
|
virtual ~EmbeddedNetworkController();
|
|
|
|
virtual void init(const Identity &signingId,Sender *sender);
|
|
|
|
virtual void request(
|
|
uint64_t nwid,
|
|
const InetAddress &fromAddr,
|
|
uint64_t requestPacketId,
|
|
const Identity &identity,
|
|
const Dictionary<ZT_NETWORKCONFIG_METADATA_DICT_CAPACITY> &metaData);
|
|
|
|
unsigned int handleControlPlaneHttpGET(
|
|
const std::vector<std::string> &path,
|
|
const std::map<std::string,std::string> &urlArgs,
|
|
const std::map<std::string,std::string> &headers,
|
|
const std::string &body,
|
|
std::string &responseBody,
|
|
std::string &responseContentType);
|
|
unsigned int handleControlPlaneHttpPOST(
|
|
const std::vector<std::string> &path,
|
|
const std::map<std::string,std::string> &urlArgs,
|
|
const std::map<std::string,std::string> &headers,
|
|
const std::string &body,
|
|
std::string &responseBody,
|
|
std::string &responseContentType);
|
|
unsigned int handleControlPlaneHttpDELETE(
|
|
const std::vector<std::string> &path,
|
|
const std::map<std::string,std::string> &urlArgs,
|
|
const std::map<std::string,std::string> &headers,
|
|
const std::string &body,
|
|
std::string &responseBody,
|
|
std::string &responseContentType);
|
|
|
|
void handleRemoteTrace(const ZT_RemoteTrace &rt);
|
|
|
|
// Called on update via POST or by JSONDB on external update of network or network member records
|
|
void onNetworkUpdate(const uint64_t networkId);
|
|
void onNetworkMemberUpdate(const uint64_t networkId,const uint64_t memberId);
|
|
void onNetworkMemberDeauthorize(const uint64_t networkId,const uint64_t memberId);
|
|
|
|
private:
|
|
void _request(uint64_t nwid,const InetAddress &fromAddr,uint64_t requestPacketId,const Identity &identity,const Dictionary<ZT_NETWORKCONFIG_METADATA_DICT_CAPACITY> &metaData);
|
|
void _startThreads();
|
|
|
|
// These init objects with default and static/informational fields
|
|
inline void _initMember(nlohmann::json &member)
|
|
{
|
|
if (!member.count("authorized")) member["authorized"] = false;
|
|
if (!member.count("ipAssignments")) member["ipAssignments"] = nlohmann::json::array();
|
|
if (!member.count("activeBridge")) member["activeBridge"] = false;
|
|
if (!member.count("tags")) member["tags"] = nlohmann::json::array();
|
|
if (!member.count("capabilities")) member["capabilities"] = nlohmann::json::array();
|
|
if (!member.count("creationTime")) member["creationTime"] = OSUtils::now();
|
|
if (!member.count("noAutoAssignIps")) member["noAutoAssignIps"] = false;
|
|
if (!member.count("revision")) member["revision"] = 0ULL;
|
|
if (!member.count("lastDeauthorizedTime")) member["lastDeauthorizedTime"] = 0ULL;
|
|
if (!member.count("lastAuthorizedTime")) member["lastAuthorizedTime"] = 0ULL;
|
|
if (!member.count("lastAuthorizedCredentialType")) member["lastAuthorizedCredentialType"] = nlohmann::json();
|
|
if (!member.count("lastAuthorizedCredential")) member["lastAuthorizedCredential"] = nlohmann::json();
|
|
if (!member.count("vMajor")) member["vMajor"] = -1;
|
|
if (!member.count("vMinor")) member["vMinor"] = -1;
|
|
if (!member.count("vRev")) member["vRev"] = -1;
|
|
if (!member.count("vProto")) member["vProto"] = -1;
|
|
if (!member.count("remoteTraceTarget")) member["remoteTraceTarget"] = nlohmann::json();
|
|
if (!member.count("removeTraceLevel")) member["remoteTraceLevel"] = 0;
|
|
member["objtype"] = "member";
|
|
}
|
|
inline void _initNetwork(nlohmann::json &network)
|
|
{
|
|
if (!network.count("private")) network["private"] = true;
|
|
if (!network.count("creationTime")) network["creationTime"] = OSUtils::now();
|
|
if (!network.count("name")) network["name"] = "";
|
|
if (!network.count("multicastLimit")) network["multicastLimit"] = (uint64_t)32;
|
|
if (!network.count("enableBroadcast")) network["enableBroadcast"] = true;
|
|
if (!network.count("v4AssignMode")) network["v4AssignMode"] = {{"zt",false}};
|
|
if (!network.count("v6AssignMode")) network["v6AssignMode"] = {{"rfc4193",false},{"zt",false},{"6plane",false}};
|
|
if (!network.count("authTokens")) network["authTokens"] = {{}};
|
|
if (!network.count("capabilities")) network["capabilities"] = nlohmann::json::array();
|
|
if (!network.count("tags")) network["tags"] = nlohmann::json::array();
|
|
if (!network.count("routes")) network["routes"] = nlohmann::json::array();
|
|
if (!network.count("ipAssignmentPools")) network["ipAssignmentPools"] = nlohmann::json::array();
|
|
if (!network.count("mtu")) network["mtu"] = ZT_DEFAULT_MTU;
|
|
if (!network.count("remoteTraceTarget")) network["remoteTraceTarget"] = nlohmann::json();
|
|
if (!network.count("removeTraceLevel")) network["remoteTraceLevel"] = 0;
|
|
if (!network.count("rules")) {
|
|
// If unspecified, rules are set to allow anything and behave like a flat L2 segment
|
|
network["rules"] = {{
|
|
{ "not",false },
|
|
{ "or", false },
|
|
{ "type","ACTION_ACCEPT" }
|
|
}};
|
|
}
|
|
network["objtype"] = "network";
|
|
}
|
|
inline void _cleanNetwork(nlohmann::json &network)
|
|
{
|
|
network.erase("clock");
|
|
network.erase("authorizedMemberCount");
|
|
network.erase("activeMemberCount");
|
|
network.erase("totalMemberCount");
|
|
network.erase("lastModified");
|
|
}
|
|
inline void _cleanMember(nlohmann::json &member)
|
|
{
|
|
member.erase("clock");
|
|
member.erase("physicalAddr");
|
|
member.erase("recentLog");
|
|
member.erase("lastModified");
|
|
member.erase("lastRequestMetaData");
|
|
}
|
|
|
|
struct _RQEntry
|
|
{
|
|
uint64_t nwid;
|
|
uint64_t requestPacketId;
|
|
InetAddress fromAddr;
|
|
Identity identity;
|
|
Dictionary<ZT_NETWORKCONFIG_METADATA_DICT_CAPACITY> metaData;
|
|
enum {
|
|
RQENTRY_TYPE_REQUEST = 0
|
|
} type;
|
|
};
|
|
struct _MemberStatusKey
|
|
{
|
|
_MemberStatusKey() : networkId(0),nodeId(0) {}
|
|
_MemberStatusKey(const uint64_t nwid,const uint64_t nid) : networkId(nwid),nodeId(nid) {}
|
|
uint64_t networkId;
|
|
uint64_t nodeId;
|
|
inline bool operator==(const _MemberStatusKey &k) const { return ((k.networkId == networkId)&&(k.nodeId == nodeId)); }
|
|
};
|
|
struct _MemberStatus
|
|
{
|
|
_MemberStatus() : lastRequestTime(0),vMajor(-1),vMinor(-1),vRev(-1),vProto(-1) {}
|
|
uint64_t lastRequestTime;
|
|
int vMajor,vMinor,vRev,vProto;
|
|
Dictionary<ZT_NETWORKCONFIG_METADATA_DICT_CAPACITY> lastRequestMetaData;
|
|
Identity identity;
|
|
inline bool online(const int64_t now) const { return ((now - lastRequestTime) < (ZT_NETWORK_AUTOCONF_DELAY * 2)); }
|
|
};
|
|
struct _MemberStatusHash
|
|
{
|
|
inline std::size_t operator()(const _MemberStatusKey &networkIdNodeId) const
|
|
{
|
|
return (std::size_t)(networkIdNodeId.networkId + networkIdNodeId.nodeId);
|
|
}
|
|
};
|
|
|
|
const int64_t _startTime;
|
|
Node *const _node;
|
|
std::string _path;
|
|
Identity _signingId;
|
|
std::string _signingIdAddressString;
|
|
NetworkController::Sender *_sender;
|
|
std::unique_ptr<DB> _db;
|
|
BlockingQueue< _RQEntry * > _queue;
|
|
std::vector<std::thread> _threads;
|
|
std::mutex _threads_l;
|
|
std::unordered_map< _MemberStatusKey,_MemberStatus,_MemberStatusHash > _memberStatus;
|
|
std::mutex _memberStatus_l;
|
|
};
|
|
|
|
} // namespace ZeroTier
|
|
|
|
#endif
|