File:  [ELWIX - Embedded LightWeight unIX -] / fwsync / driver / fwsync.c
Revision 1.8: download - view: text, annotated - select for diffs - revision graph
Wed Aug 10 00:03:49 2022 UTC (22 months, 1 week ago) by misho
Branches: MAIN
CVS tags: HEAD
change protocol
new sync method by ruleset on check-state

    1: /*************************************************************************
    2: * (C) 2022 CloudSigma AG - Sofia/Bulgaria
    3: *  by Michael Pounov <misho@elwix.org>
    4: **************************************************************************/
    5: #include "fwsync.h"
    6: 
    7: 
    8: static void
    9: fwsync_edge_proc(void *arg)
   10: {
   11: 	int e, rcvflg = 0;
   12: 	struct uio uio;
   13: 	struct mbuf *m = NULL;
   14: 	struct fws_proto *pkt;
   15: 
   16: 	DTRACE();
   17: 
   18: 	callout_schedule(&fws_co, hz);
   19: 
   20: 	memset(&uio, 0, sizeof uio);
   21: 	uio.uio_resid = 1000000000;
   22: 	uio.uio_td = curthread;
   23: 
   24: 	if ((fws_cfg.cfg.on & CFG_SYNC_EDGE) && (fws_ctx.config & CTX_EDGE_READY)) {
   25: 		rcvflg = MSG_DONTWAIT;
   26: 		e = soreceive(fws_ctx.sockz[CFG_SYNC_ADDR_EDGE], NULL, &uio, &m, NULL, &rcvflg);
   27: 		if (e) {
   28: 			if (e != EAGAIN)
   29: 				printf("error in edge handler #%d\n", e);
   30: 			return;
   31: 		}
   32: 		pkt = mtod(m, struct fws_proto*);
   33: 		if (m_length(m, NULL) != sizeof(struct fws_proto)) {
   34: 			printf("FWSync packet length=%d isn't match expected %lu\n", 
   35: 					m_length(m, NULL), sizeof(struct fws_proto));
   36: 			m_freem(m);
   37: 			return;
   38: 		}
   39: 
   40: 		printf("%u...-> %s version=%c\n", m->m_len, m->m_data, pkt->fws_version);
   41: 
   42: 		switch (pkt->fws_version) {
   43: 			case FWS_PKTVER_STATE:
   44: 				fwsync_add_state(pkt);
   45: 				break;
   46: 			case FWS_PKTVER_ALIAS:
   47: 				fwsync_add_alias(pkt);
   48: 				break;
   49: 			default:
   50: 				printf("FWSync packet was discarded due to wrong version\n");
   51: 				break;
   52: 		}
   53: 
   54: 		m_freem(m);
   55: 	}
   56: }
   57: 
   58: int
   59: fwsync_cfg(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
   60: {
   61: 	ipfw_obj_header *oh;
   62: 	struct ipfw_sync_cfg *ucfg;
   63: 	size_t sz;
   64: 	int e;
   65: 
   66: 	DTRACE();
   67: 
   68: 	sz = sizeof(*oh) + sizeof(*ucfg);
   69: 	/* Check minimum header size */
   70: 	if (sd->valsize < sz)
   71: 		return (EINVAL);
   72: 
   73: 	oh = (ipfw_obj_header*) sd->kbuf;
   74: 
   75: 	/* Basic length checks for TLVs */
   76: 	if (oh->ntlv.head.length != sizeof(oh->ntlv))
   77: 		return (EINVAL);
   78: 
   79: 	ucfg = (struct ipfw_sync_cfg*) (oh + 1);
   80: 
   81: 	/* Check if name is properly terminated */
   82: 	if (strnlen(ucfg->name, sizeof(ucfg->name)) == sizeof(ucfg->name))
   83: 		return (EINVAL);
   84: 
   85: 	if (ucfg->mode == CFG_SYNC_EDGE && !fws_cfg.cfg.edge && !(fws_ctx.config & CTX_CFG_EDGE) && 
   86: 			!strcmp(ucfg->name, "edge") && ucfg->addrs == 1) {
   87: 		fws_cfg.cfg.edge = 1;
   88: 		memcpy(&fws_cfg.cfg_addr[CFG_SYNC_ADDR_EDGE], &ucfg->addr[CFG_SYNC_ADDR_EDGE], 
   89: 				sizeof fws_cfg.cfg_addr[CFG_SYNC_ADDR_EDGE]);
   90: 		fws_ctx.config |= CTX_CFG_EDGE;
   91: 
   92: 		e = socreate((fws_cfg.cfg_addr[CFG_SYNC_ADDR_EDGE].addr.sa_family == AF_INET) ? AF_INET : AF_INET6, 
   93: 				&fws_ctx.sockz[CFG_SYNC_ADDR_EDGE], SOCK_DGRAM, IPPROTO_UDP, curthread->td_ucred, curthread);
   94: 		if (e) {
   95: 			printf("fwsync edge socreate failed #%d\n", e);
   96: 			return e;
   97: 		}
   98: 
   99: 		e = sobind(fws_ctx.sockz[CFG_SYNC_ADDR_EDGE], &fws_cfg.cfg_addr[CFG_SYNC_ADDR_EDGE].addr, curthread);
  100: 		if (e) {
  101: 			if (e != EADDRINUSE)
  102: 				printf("fwsync edge sobind failed #%d\n", e);
  103: 			else
  104: 				printf("fwsync edge address in use!\n");
  105: 			return e;
  106: 		} else
  107: 			fws_ctx.config |= CTX_EDGE_READY;
  108: 	} else if (ucfg->mode == CFG_SYNC_COLLECTOR && !(fws_ctx.config & CTX_CFG_COLLECTOR_1) && 
  109: 			!strcmp(ucfg->name, "collector") && ucfg->addrs > 0 && ucfg->addrs < 3) {
  110: 		fws_cfg.cfg.collector = 1;
  111: 		fws_cfg.cfg.addrs = ucfg->addrs;
  112: 		memcpy(&fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_1], &ucfg->addr[CFG_SYNC_ADDR_COLLECTOR_1], 
  113: 				sizeof fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_1]);
  114: 
  115: 		fws_ctx.config |= CTX_CFG_COLLECTOR_1;
  116: 
  117: 		e = socreate((fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_1].addr.sa_family == AF_INET) ? AF_INET : AF_INET6, 
  118: 				&fws_ctx.sockz[CFG_SYNC_ADDR_COLLECTOR_1], SOCK_DGRAM, IPPROTO_UDP, curthread->td_ucred, curthread);
  119: 		if (e) {
  120: 			printf("fwsync collector %d socreate failed #%d\n", e, CFG_SYNC_ADDR_COLLECTOR_1);
  121: 			return e;
  122: 		} else
  123: 			fws_ctx.config |= CTX_COLLECTOR_1_READY;
  124: 
  125: 		if (fws_cfg.cfg.addrs > 1) {
  126: 			memcpy(&fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_2], &ucfg->addr[CFG_SYNC_ADDR_COLLECTOR_2], 
  127: 					sizeof fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_2]);
  128: 
  129: 			fws_ctx.config |= CTX_CFG_COLLECTOR_2;
  130: 
  131: 			e = socreate((fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_2].addr.sa_family == AF_INET) ? AF_INET : AF_INET6, 
  132: 					&fws_ctx.sockz[CFG_SYNC_ADDR_COLLECTOR_2], SOCK_DGRAM, IPPROTO_UDP, curthread->td_ucred, curthread);
  133: 			if (e) {
  134: 				printf("fwsync collector %d socreate failed #%d\n", e, CFG_SYNC_ADDR_COLLECTOR_2);
  135: 				return e;
  136: 			} else
  137: 				fws_ctx.config |= CTX_COLLECTOR_2_READY;
  138: 		}
  139: 	} else
  140: 		return (EINVAL);
  141: 
  142: 	return 0;
  143: }
  144: 
  145: int
  146: fwsync_destroy(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
  147: {
  148: 	int *n;
  149: 	ipfw_obj_header *oh;
  150: 	size_t sz;
  151: 
  152: 	DTRACE();
  153: 
  154: 	sz = sizeof(*oh) + sizeof(int);
  155: 	/* Check minimum header size */
  156: 	if (sd->valsize < sz)
  157: 		return (EINVAL);
  158: 
  159: 	oh = (ipfw_obj_header*) sd->kbuf;
  160: 
  161: 	/* Basic length checks for TLVs */
  162: 	if (oh->ntlv.head.length != sizeof(oh->ntlv))
  163: 		return (EINVAL);
  164: 
  165: 	n = (int*) (oh + 1);
  166: 	if (*n & CFG_SYNC_EDGE) {
  167: 		fws_cfg.cfg.on &= ~CFG_SYNC_EDGE;
  168: 		fws_cfg.cfg.edge = 0;
  169: 		fws_cfg.cfg.addrs = 0;
  170: 		memset(fws_cfg.cfg_addr, 0, sizeof fws_cfg.cfg_addr[0]);
  171: 
  172: 		if (fws_ctx.config & CTX_EDGE_ONLINE) {
  173: 			callout_drain(&fws_co);
  174: 			ipfw_unregister_state_sync();
  175: 			soshutdown(fws_ctx.sockz[CFG_SYNC_ADDR_EDGE], SHUT_RD);
  176: 			soclose(fws_ctx.sockz[CFG_SYNC_ADDR_EDGE]);
  177: 		}
  178: 	}
  179: 	if (*n & CFG_SYNC_COLLECTOR) {
  180: 		if (fws_ctx.config & (CTX_COLLECTOR_1_ONLINE | CTX_COLLECTOR_2_ONLINE)) {
  181: 			ipfw_unregister_state_hook();
  182: 			ipfw_unregister_alias_hook();
  183: 		}
  184: 
  185: 		taskqueue_drain(fws_tq, &fws_sndpkt_task);
  186: 
  187: 		fws_cfg.cfg.on &= ~CFG_SYNC_COLLECTOR;
  188: 		fws_cfg.cfg.collector = 0;
  189: 		fws_cfg.cfg.addrs = 0;
  190: 		memset(fws_cfg.cfg_addr + 1, 0, sizeof fws_cfg.cfg_addr[0] * 2);
  191: 
  192: 		if (fws_ctx.config & CTX_COLLECTOR_2_READY)
  193: 			soclose(fws_ctx.sockz[CFG_SYNC_ADDR_COLLECTOR_2]);
  194: 		if (fws_ctx.config & CTX_COLLECTOR_1_READY)
  195: 			soclose(fws_ctx.sockz[CFG_SYNC_ADDR_COLLECTOR_1]);
  196: 	}
  197: 
  198: 	fws_ctx.config ^= fws_ctx.config;
  199: 
  200: 	return 0;
  201: }
  202: 
  203: int
  204: fwsync_get_cfg(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
  205: {
  206: 	ipfw_obj_header *oh;
  207: 	struct ipfw_sync_cfg *ucfg;
  208: 	size_t sz;
  209: 
  210: 	DTRACE();
  211: 
  212: 	sz = sizeof(*oh) + sizeof(*ucfg);
  213: 	/* Check minimum header size */
  214: 	if (sd->valsize < sz)
  215: 		return (EINVAL);
  216: 
  217: 	oh = (struct _ipfw_obj_header*) ipfw_get_sopt_header(sd, sz);
  218: 
  219: 	/* Basic length checks for TLVs */
  220: 	if (oh->ntlv.head.length != sizeof(oh->ntlv))
  221: 		return (EINVAL);
  222: 
  223: 	ucfg = (struct ipfw_sync_cfg*) (oh + 1);
  224: 
  225: 	/* Check if name is properly terminated */
  226: 	if (strnlen(ucfg->name, sizeof(ucfg->name)) == sizeof(ucfg->name))
  227: 		return (EINVAL);
  228: 
  229: 	snprintf(ucfg->name, sizeof ucfg->name, "%d", fws_cfg.cfg.on);
  230: 	ucfg->mode = 0;
  231: 	if (fws_cfg.cfg.edge)
  232: 		ucfg->mode |= CFG_SYNC_EDGE;
  233: 	if (fws_cfg.cfg.collector)
  234: 		ucfg->mode |= CFG_SYNC_COLLECTOR;
  235: 	ucfg->addrs = (fws_cfg.cfg.addrs != 1) ? fws_cfg.cfg.addrs : 1;
  236: 	memcpy(ucfg->addr, fws_cfg.cfg_addr, sizeof ucfg->addr);
  237: 
  238: 	return 0;
  239: }
  240: 
  241: int
  242: fwsync_list(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
  243: {
  244: 	DTRACE();
  245: 
  246: 	return 0;
  247: }
  248: 
  249: int
  250: fwsync_start(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
  251: {
  252: 	int *n;
  253: 	ipfw_obj_header *oh;
  254: 	size_t sz;
  255: 
  256: 	DTRACE();
  257: 
  258: 	sz = sizeof(*oh) + sizeof(int);
  259: 	/* Check minimum header size */
  260: 	if (sd->valsize < sz)
  261: 		return (EINVAL);
  262: 
  263: 	oh = (ipfw_obj_header*) sd->kbuf;
  264: 
  265: 	/* Basic length checks for TLVs */
  266: 	if (oh->ntlv.head.length != sizeof(oh->ntlv))
  267: 		return (EINVAL);
  268: 
  269: 	n = (int*) (oh + 1);
  270: 
  271: 	if ((*n & CFG_SYNC_EDGE) && (fws_ctx.config & CTX_EDGE_READY)) {
  272: 		fws_cfg.cfg.on |= CFG_SYNC_EDGE;
  273: 
  274: 		callout_reset(&fws_co, hz, fwsync_edge_proc, NULL);
  275: 
  276: 		if (!(fws_ctx.config & CTX_EDGE_ONLINE))
  277: 			ipfw_register_state_sync(fwsync_state_sync);
  278: 
  279: 		fws_ctx.config |= CTX_EDGE_ONLINE;
  280: 	}
  281: 
  282: 	if ((*n & CFG_SYNC_COLLECTOR) && (fws_ctx.config & CTX_COLLECTOR_1_READY)) {
  283: 		fws_cfg.cfg.on |= CFG_SYNC_COLLECTOR;
  284: 
  285: 		if (!(fws_ctx.config & (CTX_COLLECTOR_1_ONLINE | CTX_COLLECTOR_2_ONLINE))) {
  286: 			ipfw_register_state_hook(fwsync_state_handler);
  287: 			ipfw_register_alias_hook(fwsync_alias_handler);
  288: 		}
  289: 
  290: 		fws_ctx.config |= CTX_COLLECTOR_1_ONLINE;
  291: 	}
  292: 
  293: 	if ((*n & CFG_SYNC_COLLECTOR) && (fws_ctx.config & CTX_COLLECTOR_2_READY)) {
  294: 		fws_cfg.cfg.on |= CFG_SYNC_COLLECTOR;
  295: 
  296: 		if (!(fws_ctx.config & (CTX_COLLECTOR_1_ONLINE | CTX_COLLECTOR_2_ONLINE))) {
  297: 			ipfw_register_state_hook(fwsync_state_handler);
  298: 			ipfw_register_alias_hook(fwsync_alias_handler);
  299: 		}
  300: 
  301: 		fws_ctx.config |= CTX_COLLECTOR_2_ONLINE;
  302: 	}
  303: 
  304: 	return 0;
  305: }
  306: 
  307: int
  308: fwsync_stop(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
  309: {
  310: 	int *n;
  311: 	ipfw_obj_header *oh;
  312: 	size_t sz;
  313: 
  314: 	DTRACE();
  315: 
  316: 	sz = sizeof(*oh) + sizeof(int);
  317: 	/* Check minimum header size */
  318: 	if (sd->valsize < sz)
  319: 		return (EINVAL);
  320: 
  321: 	oh = (ipfw_obj_header*) sd->kbuf;
  322: 
  323: 	/* Basic length checks for TLVs */
  324: 	if (oh->ntlv.head.length != sizeof(oh->ntlv))
  325: 		return (EINVAL);
  326: 
  327: 	n = (int*) (oh + 1);
  328: 
  329: 	if ((*n & CFG_SYNC_EDGE) && (fws_ctx.config & CTX_CFG_EDGE)) {
  330: 		fws_cfg.cfg.on &= ~CFG_SYNC_EDGE;
  331: 		fws_ctx.config &= ~CTX_EDGE_ONLINE;
  332: 
  333: 		callout_drain(&fws_co);
  334: 
  335: 		ipfw_unregister_state_sync();
  336: 	}
  337: 
  338: 	if ((*n & CFG_SYNC_COLLECTOR) && (fws_ctx.config & CTX_COLLECTOR_2_ONLINE))
  339: 		fws_ctx.config &= ~CTX_COLLECTOR_2_ONLINE;
  340: 	if ((*n & CFG_SYNC_COLLECTOR) && (fws_ctx.config & CTX_COLLECTOR_1_ONLINE))
  341: 		fws_ctx.config &= ~CTX_COLLECTOR_1_ONLINE;
  342: 
  343: 	if ((*n & CFG_SYNC_COLLECTOR) && 
  344: 			!(fws_ctx.config & (CTX_COLLECTOR_1_ONLINE | CTX_COLLECTOR_2_ONLINE))) {
  345: 		fws_cfg.cfg.on &= ~CFG_SYNC_COLLECTOR;
  346: 
  347: 		ipfw_unregister_state_hook();
  348: 		ipfw_unregister_alias_hook();
  349: 
  350: 		taskqueue_drain(fws_tq, &fws_sndpkt_task);
  351: 	}
  352: 
  353: 	return 0;
  354: }

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>