1: /*************************************************************************
2: * (C) 2022 CloudSigma AG - Sofia/Bulgaria
3: * by Michael Pounov <misho@elwix.org>
4: **************************************************************************/
5: #include "fwsync.h"
6:
7:
8: static void
9: fwsync_edge_proc(void *arg)
10: {
11: int e, rcvflg = 0;
12: struct uio uio;
13: struct mbuf *m = NULL;
14: struct fws_proto *pkt;
15:
16: DTRACE();
17:
18: callout_schedule(&fws_co, hz);
19:
20: memset(&uio, 0, sizeof uio);
21: uio.uio_resid = 1000000000;
22: uio.uio_td = curthread;
23:
24: if ((fws_cfg.cfg.on & CFG_SYNC_EDGE) && (fws_ctx.config & CTX_EDGE_READY)) {
25: rcvflg = MSG_DONTWAIT;
26: e = soreceive(fws_ctx.sockz[CFG_SYNC_ADDR_EDGE], NULL, &uio, &m, NULL, &rcvflg);
27: if (e) {
28: if (e != EAGAIN)
29: printf("error in edge handler #%d\n", e);
30: return;
31: }
32: pkt = mtod(m, struct fws_proto*);
33: if (m_length(m, NULL) != sizeof(struct fws_proto)) {
34: printf("FWSync packet length=%d isn't match expected %lu\n",
35: m_length(m, NULL), sizeof(struct fws_proto));
36: m_freem(m);
37: return;
38: }
39:
40: printf("%u...-> %s version=%c\n", m->m_len, m->m_data, pkt->fws_version);
41:
42: switch (pkt->fws_version) {
43: case FWS_PKTVER_STATE:
44: fwsync_add_state(pkt);
45: break;
46: case FWS_PKTVER_ALIAS:
47: fwsync_add_alias(pkt);
48: break;
49: default:
50: printf("FWSync packet was discarded due to wrong version\n");
51: break;
52: }
53:
54: m_freem(m);
55: }
56: }
57:
58: int
59: fwsync_cfg(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
60: {
61: ipfw_obj_header *oh;
62: struct ipfw_sync_cfg *ucfg;
63: size_t sz;
64: int e;
65:
66: DTRACE();
67:
68: sz = sizeof(*oh) + sizeof(*ucfg);
69: /* Check minimum header size */
70: if (sd->valsize < sz)
71: return (EINVAL);
72:
73: oh = (ipfw_obj_header*) sd->kbuf;
74:
75: /* Basic length checks for TLVs */
76: if (oh->ntlv.head.length != sizeof(oh->ntlv))
77: return (EINVAL);
78:
79: ucfg = (struct ipfw_sync_cfg*) (oh + 1);
80:
81: /* Check if name is properly terminated */
82: if (strnlen(ucfg->name, sizeof(ucfg->name)) == sizeof(ucfg->name))
83: return (EINVAL);
84:
85: if (ucfg->mode == CFG_SYNC_EDGE && !fws_cfg.cfg.edge && !(fws_ctx.config & CTX_CFG_EDGE) &&
86: !strcmp(ucfg->name, "edge") && ucfg->addrs == 1) {
87: fws_cfg.cfg.edge = 1;
88: memcpy(&fws_cfg.cfg_addr[CFG_SYNC_ADDR_EDGE], &ucfg->addr[CFG_SYNC_ADDR_EDGE],
89: sizeof fws_cfg.cfg_addr[CFG_SYNC_ADDR_EDGE]);
90: fws_ctx.config |= CTX_CFG_EDGE;
91:
92: e = socreate((fws_cfg.cfg_addr[CFG_SYNC_ADDR_EDGE].addr.sa_family == AF_INET) ? AF_INET : AF_INET6,
93: &fws_ctx.sockz[CFG_SYNC_ADDR_EDGE], SOCK_DGRAM, IPPROTO_UDP, curthread->td_ucred, curthread);
94: if (e) {
95: printf("fwsync edge socreate failed #%d\n", e);
96: return e;
97: }
98:
99: e = sobind(fws_ctx.sockz[CFG_SYNC_ADDR_EDGE], &fws_cfg.cfg_addr[CFG_SYNC_ADDR_EDGE].addr, curthread);
100: if (e) {
101: if (e != EADDRINUSE)
102: printf("fwsync edge sobind failed #%d\n", e);
103: else
104: printf("fwsync edge address in use!\n");
105: return e;
106: } else
107: fws_ctx.config |= CTX_EDGE_READY;
108: } else if (ucfg->mode == CFG_SYNC_COLLECTOR && !(fws_ctx.config & CTX_CFG_COLLECTOR_1) &&
109: !strcmp(ucfg->name, "collector") && ucfg->addrs > 0 && ucfg->addrs < 3) {
110: fws_cfg.cfg.collector = 1;
111: fws_cfg.cfg.addrs = ucfg->addrs;
112: memcpy(&fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_1], &ucfg->addr[CFG_SYNC_ADDR_COLLECTOR_1],
113: sizeof fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_1]);
114:
115: fws_ctx.config |= CTX_CFG_COLLECTOR_1;
116:
117: e = socreate((fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_1].addr.sa_family == AF_INET) ? AF_INET : AF_INET6,
118: &fws_ctx.sockz[CFG_SYNC_ADDR_COLLECTOR_1], SOCK_DGRAM, IPPROTO_UDP, curthread->td_ucred, curthread);
119: if (e) {
120: printf("fwsync collector %d socreate failed #%d\n", e, CFG_SYNC_ADDR_COLLECTOR_1);
121: return e;
122: } else
123: fws_ctx.config |= CTX_COLLECTOR_1_READY;
124:
125: if (fws_cfg.cfg.addrs > 1) {
126: memcpy(&fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_2], &ucfg->addr[CFG_SYNC_ADDR_COLLECTOR_2],
127: sizeof fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_2]);
128:
129: fws_ctx.config |= CTX_CFG_COLLECTOR_2;
130:
131: e = socreate((fws_cfg.cfg_addr[CFG_SYNC_ADDR_COLLECTOR_2].addr.sa_family == AF_INET) ? AF_INET : AF_INET6,
132: &fws_ctx.sockz[CFG_SYNC_ADDR_COLLECTOR_2], SOCK_DGRAM, IPPROTO_UDP, curthread->td_ucred, curthread);
133: if (e) {
134: printf("fwsync collector %d socreate failed #%d\n", e, CFG_SYNC_ADDR_COLLECTOR_2);
135: return e;
136: } else
137: fws_ctx.config |= CTX_COLLECTOR_2_READY;
138: }
139: } else
140: return (EINVAL);
141:
142: return 0;
143: }
144:
145: int
146: fwsync_destroy(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
147: {
148: int *n;
149: ipfw_obj_header *oh;
150: size_t sz;
151:
152: DTRACE();
153:
154: sz = sizeof(*oh) + sizeof(int);
155: /* Check minimum header size */
156: if (sd->valsize < sz)
157: return (EINVAL);
158:
159: oh = (ipfw_obj_header*) sd->kbuf;
160:
161: /* Basic length checks for TLVs */
162: if (oh->ntlv.head.length != sizeof(oh->ntlv))
163: return (EINVAL);
164:
165: n = (int*) (oh + 1);
166: if (*n & CFG_SYNC_EDGE) {
167: fws_cfg.cfg.on &= ~CFG_SYNC_EDGE;
168: fws_cfg.cfg.edge = 0;
169: fws_cfg.cfg.addrs = 0;
170: memset(fws_cfg.cfg_addr, 0, sizeof fws_cfg.cfg_addr[0]);
171:
172: if (fws_ctx.config & CTX_EDGE_ONLINE) {
173: callout_drain(&fws_co);
174: ipfw_unregister_state_sync();
175: soshutdown(fws_ctx.sockz[CFG_SYNC_ADDR_EDGE], SHUT_RD);
176: soclose(fws_ctx.sockz[CFG_SYNC_ADDR_EDGE]);
177: }
178: }
179: if (*n & CFG_SYNC_COLLECTOR) {
180: if (fws_ctx.config & (CTX_COLLECTOR_1_ONLINE | CTX_COLLECTOR_2_ONLINE)) {
181: ipfw_unregister_state_hook();
182: ipfw_unregister_alias_hook();
183: }
184:
185: taskqueue_drain(fws_tq, &fws_sndpkt_task);
186:
187: fws_cfg.cfg.on &= ~CFG_SYNC_COLLECTOR;
188: fws_cfg.cfg.collector = 0;
189: fws_cfg.cfg.addrs = 0;
190: memset(fws_cfg.cfg_addr + 1, 0, sizeof fws_cfg.cfg_addr[0] * 2);
191:
192: if (fws_ctx.config & CTX_COLLECTOR_2_READY)
193: soclose(fws_ctx.sockz[CFG_SYNC_ADDR_COLLECTOR_2]);
194: if (fws_ctx.config & CTX_COLLECTOR_1_READY)
195: soclose(fws_ctx.sockz[CFG_SYNC_ADDR_COLLECTOR_1]);
196: }
197:
198: fws_ctx.config ^= fws_ctx.config;
199:
200: return 0;
201: }
202:
203: int
204: fwsync_get_cfg(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
205: {
206: ipfw_obj_header *oh;
207: struct ipfw_sync_cfg *ucfg;
208: size_t sz;
209:
210: DTRACE();
211:
212: sz = sizeof(*oh) + sizeof(*ucfg);
213: /* Check minimum header size */
214: if (sd->valsize < sz)
215: return (EINVAL);
216:
217: oh = (struct _ipfw_obj_header*) ipfw_get_sopt_header(sd, sz);
218:
219: /* Basic length checks for TLVs */
220: if (oh->ntlv.head.length != sizeof(oh->ntlv))
221: return (EINVAL);
222:
223: ucfg = (struct ipfw_sync_cfg*) (oh + 1);
224:
225: /* Check if name is properly terminated */
226: if (strnlen(ucfg->name, sizeof(ucfg->name)) == sizeof(ucfg->name))
227: return (EINVAL);
228:
229: snprintf(ucfg->name, sizeof ucfg->name, "%d", fws_cfg.cfg.on);
230: ucfg->mode = 0;
231: if (fws_cfg.cfg.edge)
232: ucfg->mode |= CFG_SYNC_EDGE;
233: if (fws_cfg.cfg.collector)
234: ucfg->mode |= CFG_SYNC_COLLECTOR;
235: ucfg->addrs = (fws_cfg.cfg.addrs != 1) ? fws_cfg.cfg.addrs : 1;
236: memcpy(ucfg->addr, fws_cfg.cfg_addr, sizeof ucfg->addr);
237:
238: return 0;
239: }
240:
241: int
242: fwsync_list(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
243: {
244: DTRACE();
245:
246: return 0;
247: }
248:
249: int
250: fwsync_start(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
251: {
252: int *n;
253: ipfw_obj_header *oh;
254: size_t sz;
255:
256: DTRACE();
257:
258: sz = sizeof(*oh) + sizeof(int);
259: /* Check minimum header size */
260: if (sd->valsize < sz)
261: return (EINVAL);
262:
263: oh = (ipfw_obj_header*) sd->kbuf;
264:
265: /* Basic length checks for TLVs */
266: if (oh->ntlv.head.length != sizeof(oh->ntlv))
267: return (EINVAL);
268:
269: n = (int*) (oh + 1);
270:
271: if ((*n & CFG_SYNC_EDGE) && (fws_ctx.config & CTX_EDGE_READY)) {
272: fws_cfg.cfg.on |= CFG_SYNC_EDGE;
273:
274: callout_reset(&fws_co, hz, fwsync_edge_proc, NULL);
275:
276: if (!(fws_ctx.config & CTX_EDGE_ONLINE))
277: ipfw_register_state_sync(fwsync_state_sync);
278:
279: fws_ctx.config |= CTX_EDGE_ONLINE;
280: }
281:
282: if ((*n & CFG_SYNC_COLLECTOR) && (fws_ctx.config & CTX_COLLECTOR_1_READY)) {
283: fws_cfg.cfg.on |= CFG_SYNC_COLLECTOR;
284:
285: if (!(fws_ctx.config & (CTX_COLLECTOR_1_ONLINE | CTX_COLLECTOR_2_ONLINE))) {
286: ipfw_register_state_hook(fwsync_state_handler);
287: ipfw_register_alias_hook(fwsync_alias_handler);
288: }
289:
290: fws_ctx.config |= CTX_COLLECTOR_1_ONLINE;
291: }
292:
293: if ((*n & CFG_SYNC_COLLECTOR) && (fws_ctx.config & CTX_COLLECTOR_2_READY)) {
294: fws_cfg.cfg.on |= CFG_SYNC_COLLECTOR;
295:
296: if (!(fws_ctx.config & (CTX_COLLECTOR_1_ONLINE | CTX_COLLECTOR_2_ONLINE))) {
297: ipfw_register_state_hook(fwsync_state_handler);
298: ipfw_register_alias_hook(fwsync_alias_handler);
299: }
300:
301: fws_ctx.config |= CTX_COLLECTOR_2_ONLINE;
302: }
303:
304: return 0;
305: }
306:
307: int
308: fwsync_stop(struct ip_fw_chain *ch, ip_fw3_opheader *op3, struct sockopt_data *sd)
309: {
310: int *n;
311: ipfw_obj_header *oh;
312: size_t sz;
313:
314: DTRACE();
315:
316: sz = sizeof(*oh) + sizeof(int);
317: /* Check minimum header size */
318: if (sd->valsize < sz)
319: return (EINVAL);
320:
321: oh = (ipfw_obj_header*) sd->kbuf;
322:
323: /* Basic length checks for TLVs */
324: if (oh->ntlv.head.length != sizeof(oh->ntlv))
325: return (EINVAL);
326:
327: n = (int*) (oh + 1);
328:
329: if ((*n & CFG_SYNC_EDGE) && (fws_ctx.config & CTX_CFG_EDGE)) {
330: fws_cfg.cfg.on &= ~CFG_SYNC_EDGE;
331: fws_ctx.config &= ~CTX_EDGE_ONLINE;
332:
333: callout_drain(&fws_co);
334:
335: ipfw_unregister_state_sync();
336: }
337:
338: if ((*n & CFG_SYNC_COLLECTOR) && (fws_ctx.config & CTX_COLLECTOR_2_ONLINE))
339: fws_ctx.config &= ~CTX_COLLECTOR_2_ONLINE;
340: if ((*n & CFG_SYNC_COLLECTOR) && (fws_ctx.config & CTX_COLLECTOR_1_ONLINE))
341: fws_ctx.config &= ~CTX_COLLECTOR_1_ONLINE;
342:
343: if ((*n & CFG_SYNC_COLLECTOR) &&
344: !(fws_ctx.config & (CTX_COLLECTOR_1_ONLINE | CTX_COLLECTOR_2_ONLINE))) {
345: fws_cfg.cfg.on &= ~CFG_SYNC_COLLECTOR;
346:
347: ipfw_unregister_state_hook();
348: ipfw_unregister_alias_hook();
349:
350: taskqueue_drain(fws_tq, &fws_sndpkt_task);
351: }
352:
353: return 0;
354: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>