mirror of
https://github.com/ZeroTier/ZeroTierOne
synced 2025-07-07 13:31:45 -07:00
Netconf service code, interacts with our MySQL database.
This commit is contained in:
Adam Ierymenko
parent
f260c2839c
commit
ee9a811b81
3 changed files with 232 additions and 13 deletions
|
|
@ -52,8 +52,12 @@
|
|||
|
||||
#include <stdio.h>
|
||||
#include <stdlib.h>
|
||||
#include <unistd.h>
|
||||
#include <string.h>
|
||||
#include <stdint.h>
|
||||
#include <unistd.h>
|
||||
#include <sys/stat.h>
|
||||
#include <sys/types.h>
|
||||
#include <arpa/inet.h>
|
||||
|
||||
#include <iostream>
|
||||
#include <string>
|
||||
|
|
@ -62,32 +66,35 @@
|
|||
#include <vector>
|
||||
#include <algorithm>
|
||||
|
||||
#include <mysql++.h>
|
||||
#include <mysql++/mysql++.h>
|
||||
|
||||
#include "../node/Dictionary.hpp"
|
||||
#include "../node/Identity.hpp"
|
||||
#include "../node/Utils.hpp"
|
||||
|
||||
using namespace ZeroTier;
|
||||
using namespace mysqlpp;
|
||||
|
||||
static Connection *dbCon = (Connection *)0;
|
||||
static char mysqlHost[64],mysqlPort[64],mysqlDatabase[64],mysqlUser[64],mysqlPassword[64];
|
||||
|
||||
static void connectOrReconnect()
|
||||
{
|
||||
if (dbCon)
|
||||
delete dbCon;
|
||||
dbCon = new Connection(mysqlDatabase,mysqlHost,mysqlUser,mysqlPassword,(unsigned int)strtol(mysqlPort,(char **)0,10));
|
||||
if (dbCon->connected())
|
||||
break;
|
||||
else {
|
||||
fprintf(stderr,"Unable to connect to database server.\n");
|
||||
usleep(1000);
|
||||
for(;;) {
|
||||
if (dbCon)
|
||||
delete dbCon;
|
||||
dbCon = new Connection(mysqlDatabase,mysqlHost,mysqlUser,mysqlPassword,(unsigned int)strtol(mysqlPort,(char **)0,10));
|
||||
if (dbCon->connected())
|
||||
break;
|
||||
else {
|
||||
fprintf(stderr,"Unable to connect to database server.\n");
|
||||
usleep(1000);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
int main(int argc,char **argv)
|
||||
{
|
||||
char mysqlHost[64],mysqlPort[64],mysqlDatabase[64],mysqlUser[64],mysqlPassword[64];
|
||||
|
||||
{
|
||||
char *ee = getenv("ZT_NETCONF_MYSQL_HOST");
|
||||
if (!ee) {
|
||||
|
|
@ -96,7 +103,7 @@ int main(int argc,char **argv)
|
|||
}
|
||||
strcpy(mysqlHost,ee);
|
||||
ee = getenv("ZT_NETCONF_MYSQL_PORT");
|
||||
if (ee == null)
|
||||
if (!ee)
|
||||
strcpy(mysqlPort,"3306");
|
||||
else strcpy(mysqlPort,ee);
|
||||
ee = getenv("ZT_NETCONF_MYSQL_DATABASE");
|
||||
|
|
@ -119,9 +126,172 @@ int main(int argc,char **argv)
|
|||
strcpy(mysqlPassword,ee);
|
||||
}
|
||||
|
||||
char buf[4096];
|
||||
std::string dictBuf;
|
||||
|
||||
connectOrReconnect();
|
||||
for(;;) {
|
||||
if (read(STDIN_FILENO,buf,4) != 4) {
|
||||
fprintf(stderr,"Error reading frame size from stdin\n");
|
||||
return -1;
|
||||
}
|
||||
unsigned int fsize = (unsigned int)ntohl(*((const uint32_t *)buf));
|
||||
while (dictBuf.length() < fsize) {
|
||||
int n = (int)read(STDIN_FILENO,buf,std::min((int)sizeof(buf),(int)(fsize - dictBuf.length())));
|
||||
for(int i=0;i<n;++i)
|
||||
dictBuf.push_back(buf[i]);
|
||||
}
|
||||
Dictionary msg(dictBuf);
|
||||
dictBuf = "";
|
||||
|
||||
if (!dbCon->connected())
|
||||
connectOrReconnect();
|
||||
|
||||
try {
|
||||
const std::string &command = msg.get("command");
|
||||
if (command == "config") { // NETWORK_CONFIG_REQUEST packet
|
||||
Identity peerIdentity(msg.get("peerIdentity"));
|
||||
uint64_t nwid = strtoull(msg.get("nwid").c_str(),(char **)0,16);
|
||||
Dictionary meta;
|
||||
if (msg.contains("meta"))
|
||||
meta.fromString(msg.get("meta"));
|
||||
|
||||
// Do quick signature check / sanity check
|
||||
if (!peerIdentity.locallyValidate(false)) {
|
||||
fprintf(stderr,"identity failed signature check: %s",peerIdentity.toString(false).c_str());
|
||||
continue;
|
||||
}
|
||||
|
||||
// Save identity if unknown
|
||||
{
|
||||
Query q = dbCon->query();
|
||||
q << "SELECT identity,identityValidated FROM Node WHERE id = " << peerIdentity.address().toInt();
|
||||
StoreQueryResult rs = q.store();
|
||||
if (rs.num_rows() > 0) {
|
||||
if (rs[0]["identity"] != peerIdentity.toString(false)) {
|
||||
// TODO: handle collisions...
|
||||
continue;
|
||||
} else if ((int)rs[0]["identityValidated"] == 0) {
|
||||
// TODO: launch background validation
|
||||
}
|
||||
} else {
|
||||
q = dbCon->query();
|
||||
uint64_t now = Utils::now();
|
||||
q << "INSERT INTO Node (id,creationTime,lastSeen,identity) VALUES (" << peerIdentity.address().toInt() << "," << now << "," << now << "," << peerIdentity.toString(false) << ")";
|
||||
if (!q.exec()) {
|
||||
fprintf(stderr,"Error inserting Node row for peer %s, aborting netconf request",peerIdentity.address().toString().c_str());
|
||||
continue;
|
||||
}
|
||||
// TODO: launch background validation
|
||||
}
|
||||
}
|
||||
|
||||
bool isOpen = false;
|
||||
{
|
||||
Query q = dbCon->query();
|
||||
q << "SELECT isOpen FROM Network WHERE id = " << nwid;
|
||||
StoreQueryResult rs = q.store();
|
||||
if (rs.num_rows() > 0)
|
||||
isOpen = ((int)rs[0]["isOpen"] > 0);
|
||||
}
|
||||
|
||||
Dictionary netconf;
|
||||
|
||||
netconf["peer"] = peerIdentity.address().toString();
|
||||
sprintf(buf,"%.16llx",(unsigned long long)nwid);
|
||||
netconf["nwid"] = buf;
|
||||
netconf["isOpen"] = (isOpen ? "1" : "0");
|
||||
|
||||
if (!isOpen) {
|
||||
// TODO: handle closed networks, look up private membership,
|
||||
// generate signed cert.
|
||||
}
|
||||
|
||||
std::string ipv4Static,ipv6Static;
|
||||
|
||||
{
|
||||
// Check for IPv4 static assignments
|
||||
Query q = dbCon->query();
|
||||
q << "SELECT INET_NTOA(ip) AS ip,netmaskBits FROM IPv4Static WHERE Node_id = " << peerIdentity.address().toInt() << " AND Network_id = " << nwid;
|
||||
StoreQueryResult rs = q.store();
|
||||
if (rs.num_rows() > 0) {
|
||||
for(int i=0;i<rs.num_rows();++i) {
|
||||
if (ipv4Static.length())
|
||||
ipv4Static.push_back(',');
|
||||
ipv4Static.append(rs[i]["ip"].c_str());
|
||||
ipv4Static.push_back('/');
|
||||
ipv4Static.append(rs[i]["netmaskBits"].c_str());
|
||||
}
|
||||
}
|
||||
|
||||
// Try to auto-assign if there's any auto-assign networks with space
|
||||
// available.
|
||||
if (!ipv4Static.length()) {
|
||||
unsigned char addressBytes[5];
|
||||
peerIdentity.address().copyTo(addressBytes,5);
|
||||
|
||||
q = dbCon->query();
|
||||
q << "SELECT ipNet,netmaskBits FROM IPv4AutoAssign WHERE Network_id = " << nwid;
|
||||
rs = q.store();
|
||||
if (rs.num_rows() > 0) {
|
||||
for(int aaRow=0;aaRow<rs.num_rows();++aaRow) {
|
||||
uint32_t ipNet = (uint32_t)((unsigned long)rs[aaRow]["ipNet"]);
|
||||
unsigned int netmaskBits = (unsigned int)rs[aaRow]["netmaskBits"];
|
||||
|
||||
uint32_t tryIp = (((uint32_t)addressBytes[1]) << 24) |
|
||||
(((uint32_t)addressBytes[2]) << 16) |
|
||||
(((uint32_t)addressBytes[3]) << 8) |
|
||||
((((uint32_t)addressBytes[4]) % 254) + 1);
|
||||
tryIp &= (0xffffffff >> netmaskBits);
|
||||
tryIp |= ipNet;
|
||||
|
||||
for(int k=0;k<100000;++k) {
|
||||
Query q2 = dbCon->query();
|
||||
q2 << "INSERT INTO IPv4Static (Network_id,Node_id,ip,netmaskBits) VALUES (" << nwid << "," << peerIdentity.address().toInt() << "," << tryIp << "," << netmaskBits << ")";
|
||||
if (q2.exec()) {
|
||||
sprintf(buf,"%u.%u.%u.%u",(unsigned int)((tryIp >> 24) & 0xff),(unsigned int)((tryIp >> 16) & 0xff),(unsigned int)((tryIp >> 8) & 0xff),(unsigned int)(tryIp & 0xff));
|
||||
if (ipv4Static.length())
|
||||
ipv4Static.push_back(',');
|
||||
ipv4Static.append(buf);
|
||||
ipv4Static.push_back('/');
|
||||
sprintf(buf,"%u",netmaskBits);
|
||||
ipv4Static.append(buf);
|
||||
break;
|
||||
} else { // insert will fail if IP is in use due to uniqueness constraints in DB
|
||||
++tryIp;
|
||||
if ((tryIp & 0xff) == 0)
|
||||
tryIp |= 1;
|
||||
tryIp &= (0xffffffff >> netmaskBits);
|
||||
tryIp |= ipNet;
|
||||
}
|
||||
}
|
||||
|
||||
if (ipv4Static.length())
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if (ipv4Static.length())
|
||||
netconf["ipv4Static"] = ipv4Static;
|
||||
if (ipv6Static.length())
|
||||
netconf["ipv6Static"] = ipv6Static;
|
||||
|
||||
Dictionary resp;
|
||||
resp["peer"] = peerIdentity.address().toString();
|
||||
resp["nwid"] = msg.get("nwid");
|
||||
resp["requestId"] = msg.get("requestId");
|
||||
resp["netconf"] = netconf.toString();
|
||||
std::string respm = resp.toString();
|
||||
uint32_t respml = (uint32_t)htonl((uint32_t)respm.length());
|
||||
write(STDOUT_FILENO,&respml,4);
|
||||
write(STDOUT_FILENO,respm.data(),respm.length());
|
||||
}
|
||||
} catch (std::exception &exc) {
|
||||
fprintf(stderr,"unexpected exception handling message: %s",exc.what());
|
||||
} catch ( ... ) {
|
||||
fprintf(stderr,"unexpected exception handling message: unknown exception");
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue