main.cpp 72 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776
  1. #include "common.h"
  2. #include "network.h"
  3. #include "log.h"
  4. #include "lib/md5.h"
  5. char local_address[100]="0.0.0.0", remote_address[100]="255.255.255.255",source_address[100]="0.0.0.0";
  6. u32_t local_address_uint32,remote_address_uint32,source_address_uint32;
  7. int source_port=0,local_port = -1, remote_port = -1;
  8. id_t const_id=0;
  9. const int disable_conv_clear=0;
  10. const int disable_conn_clear=0;
  11. enum server_current_state_t {server_idle=0,server_handshake1,server_ready};
  12. enum client_current_state_t {client_idle=0,client_tcp_handshake,client_handshake1,client_handshake2,client_ready};
  13. union current_state_t
  14. {
  15. server_current_state_t server_current_state;
  16. client_current_state_t client_current_state;
  17. };
  18. int udp_fd=-1; //for client only
  19. int bind_fd=-1; //bind only,never send or recv
  20. int epollfd=-1;
  21. int timer_fd=-1;
  22. int fail_time_counter=0;
  23. int epoll_trigger_counter=0;
  24. int debug_flag=0;
  25. int auto_add_iptables_rule=0;
  26. int generate_iptables_rule=0;
  27. int debug_resend=0;
  28. int disable_anti_replay=0;
  29. char key_string[1000]= "secret key";
  30. char key[16];//,key2[16];
  31. //uint64_t current_time_rough=0;
  32. int VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV;
  33. ////////==============================variable divider=============================================================
  34. struct anti_replay_t
  35. {
  36. u64_t max_packet_received;
  37. char window[anti_replay_window_size];
  38. anti_replay_seq_t anti_replay_seq;
  39. anti_replay_seq_t get_new_seq_for_send()
  40. {
  41. return anti_replay_seq++;
  42. }
  43. anti_replay_t()
  44. {
  45. max_packet_received=0;
  46. anti_replay_seq=get_true_random_number_64()/10;//random first seq
  47. //memset(window,0,sizeof(window)); //not necessary
  48. }
  49. void re_init()
  50. {
  51. max_packet_received=0;
  52. //memset(window,0,sizeof(window));
  53. }
  54. int is_vaild(u64_t seq)
  55. {
  56. if(disable_anti_replay) return 1;
  57. //if(disabled) return 0;
  58. if(seq==max_packet_received) return 0;
  59. else if(seq>max_packet_received)
  60. {
  61. if(seq-max_packet_received>=anti_replay_window_size)
  62. {
  63. memset(window,0,sizeof(window));
  64. window[seq%anti_replay_window_size]=1;
  65. }
  66. else
  67. {
  68. for (u64_t i=max_packet_received+1;i<seq;i++)
  69. window[i%anti_replay_window_size]=0;
  70. window[seq%anti_replay_window_size]=1;
  71. }
  72. max_packet_received=seq;
  73. return 1;
  74. }
  75. else if(seq<max_packet_received)
  76. {
  77. if(max_packet_received-seq>=anti_replay_window_size) return 0;
  78. else
  79. {
  80. if (window[seq%anti_replay_window_size]==1) return 0;
  81. else
  82. {
  83. window[seq%anti_replay_window_size]=1;
  84. return 1;
  85. }
  86. }
  87. }
  88. return 0; //for complier check
  89. }
  90. };//anti_replay;
  91. void server_clear_function(u64_t u64);
  92. struct conv_manager_t //TODO change map to unordered map
  93. {
  94. //typedef hash_map map;
  95. unordered_map<u64_t,u32_t> u64_to_conv; //conv and u64 are both supposed to be uniq
  96. unordered_map<u32_t,u64_t> conv_to_u64;
  97. unordered_map<u32_t,u64_t> conv_last_active_time;
  98. unordered_map<u32_t,u64_t>::iterator clear_it;
  99. unordered_map<u32_t,u64_t>::iterator it;
  100. unordered_map<u32_t,u64_t>::iterator old_it;
  101. //void (*clear_function)(uint64_t u64) ;
  102. long long last_clear_time;
  103. conv_manager_t()
  104. {
  105. clear_it=conv_last_active_time.begin();
  106. long long last_clear_time=0;
  107. //clear_function=0;
  108. }
  109. ~conv_manager_t()
  110. {
  111. clear();
  112. }
  113. int get_size()
  114. {
  115. return conv_to_u64.size();
  116. }
  117. void reserve()
  118. {
  119. u64_to_conv.reserve(10007);
  120. conv_to_u64.reserve(10007);
  121. conv_last_active_time.reserve(10007);
  122. }
  123. void clear()
  124. {
  125. if(disable_conv_clear) return ;
  126. if(program_mode==server_mode)
  127. {
  128. for(it=conv_to_u64.begin();it!=conv_to_u64.end();it++)
  129. {
  130. //int fd=int((it->second<<32u)>>32u);
  131. server_clear_function( it->second);
  132. }
  133. }
  134. u64_to_conv.clear();
  135. conv_to_u64.clear();
  136. conv_last_active_time.clear();
  137. clear_it=conv_last_active_time.begin();
  138. }
  139. u32_t get_new_conv()
  140. {
  141. u32_t conv=get_true_random_number_nz();
  142. while(conv_to_u64.find(conv)!=conv_to_u64.end())
  143. {
  144. conv=get_true_random_number_nz();
  145. }
  146. return conv;
  147. }
  148. int is_conv_used(u32_t conv)
  149. {
  150. return conv_to_u64.find(conv)!=conv_to_u64.end();
  151. }
  152. int is_u64_used(u64_t u64)
  153. {
  154. return u64_to_conv.find(u64)!=u64_to_conv.end();
  155. }
  156. u32_t find_conv_by_u64(u64_t u64)
  157. {
  158. return u64_to_conv[u64];
  159. }
  160. u64_t find_u64_by_conv(u32_t conv)
  161. {
  162. return conv_to_u64[conv];
  163. }
  164. int update_active_time(u32_t conv)
  165. {
  166. return conv_last_active_time[conv]=get_current_time();
  167. }
  168. int insert_conv(u32_t conv,u64_t u64)
  169. {
  170. u64_to_conv[u64]=conv;
  171. conv_to_u64[conv]=u64;
  172. conv_last_active_time[conv]=get_current_time();
  173. return 0;
  174. }
  175. int erase_conv(u32_t conv)
  176. {
  177. if(disable_conv_clear) return 0;
  178. u64_t u64=conv_to_u64[conv];
  179. if(program_mode==server_mode)
  180. {
  181. server_clear_function(u64);
  182. }
  183. conv_to_u64.erase(conv);
  184. u64_to_conv.erase(u64);
  185. conv_last_active_time.erase(conv);
  186. return 0;
  187. }
  188. int clear_inactive(char * ip_port=0)
  189. {
  190. if(get_current_time()-last_clear_time>conv_clear_interval)
  191. {
  192. last_clear_time=get_current_time();
  193. return clear_inactive0(ip_port);
  194. }
  195. return 0;
  196. }
  197. int clear_inactive0(char * ip_port)
  198. {
  199. if(disable_conv_clear) return 0;
  200. //map<uint32_t,uint64_t>::iterator it;
  201. int cnt=0;
  202. it=clear_it;
  203. int size=conv_last_active_time.size();
  204. int num_to_clean=size/conv_clear_ratio+conv_clear_min; //clear 1/10 each time,to avoid latency glitch
  205. u64_t current_time=get_current_time();
  206. for(;;)
  207. {
  208. if(cnt>=num_to_clean) break;
  209. if(conv_last_active_time.begin()==conv_last_active_time.end()) break;
  210. if(it==conv_last_active_time.end())
  211. {
  212. it=conv_last_active_time.begin();
  213. }
  214. if( current_time -it->second >conv_timeout )
  215. {
  216. //mylog(log_info,"inactive conv %u cleared \n",it->first);
  217. old_it=it;
  218. it++;
  219. u32_t conv= old_it->first;
  220. erase_conv(old_it->first);
  221. if(ip_port==0)
  222. {
  223. mylog(log_info,"conv %x cleared\n",conv);
  224. }
  225. else
  226. {
  227. mylog(log_info,"[%s]conv %x cleared\n",ip_port,conv);
  228. }
  229. }
  230. else
  231. {
  232. it++;
  233. }
  234. cnt++;
  235. }
  236. return 0;
  237. }
  238. };//g_conv_manager;
  239. struct blob_t
  240. {
  241. conv_manager_t conv_manager;
  242. anti_replay_t anti_replay;
  243. };
  244. struct conn_info_t
  245. {
  246. current_state_t state;
  247. raw_info_t raw_info;
  248. u64_t last_state_time;
  249. u64_t last_hb_sent_time; //client re-use this for retry
  250. u64_t last_hb_recv_time;
  251. //long long last_resent_time;
  252. id_t my_id;
  253. id_t oppsite_id;
  254. int timer_fd;
  255. id_t oppsite_const_id;
  256. blob_t *blob;
  257. /*
  258. const uint32_t &ip=raw_info.recv_info.src_ip;
  259. const uint16_t &port=raw_info.recv_info.src_port;
  260. */
  261. void recover(const conn_info_t &conn_info)
  262. {
  263. raw_info=conn_info.raw_info;
  264. last_state_time=conn_info.last_state_time;
  265. last_hb_recv_time=conn_info.last_hb_recv_time;
  266. last_hb_sent_time=conn_info.last_hb_sent_time;
  267. my_id=conn_info.my_id;
  268. oppsite_id=conn_info.oppsite_id;
  269. blob->anti_replay.re_init();
  270. }
  271. conn_info_t()
  272. {
  273. //send_packet_info.protocol=g_packet_info_send.protocol;
  274. if(program_mode==server_mode)
  275. state.server_current_state=server_idle;
  276. else
  277. state.client_current_state=client_idle;
  278. last_state_time=0;
  279. oppsite_const_id=0;
  280. blob=0;
  281. timer_fd=0;
  282. }
  283. void prepare()
  284. {
  285. blob=new blob_t;
  286. }
  287. conn_info_t(const conn_info_t&b)
  288. {
  289. //mylog(log_error,"called!!!!!!!!!!!!!\n");
  290. *this=b;
  291. if(blob!=0)
  292. {
  293. blob=new blob_t(*b.blob);
  294. }
  295. }
  296. conn_info_t& operator=(const conn_info_t& b)
  297. {
  298. mylog(log_fatal,"not allowed\n");
  299. myexit(-1);
  300. return *this;
  301. }
  302. ~conn_info_t();
  303. };//g_conn_info;
  304. struct conn_manager_t
  305. {
  306. u32_t ready_num;
  307. unordered_map<int,conn_info_t *> udp_fd_mp; //a bit dirty to used pointer,but can void unordered_map search
  308. unordered_map<int,conn_info_t *> timer_fd_mp;//we can use pointer here since unordered_map.rehash() uses shallow copy
  309. unordered_map<id_t,conn_info_t *> const_id_mp;
  310. unordered_map<u64_t,conn_info_t*> mp; //put it at end so that it de-consturcts first
  311. unordered_map<u64_t,conn_info_t*>::iterator clear_it;
  312. long long last_clear_time;
  313. conn_manager_t()
  314. {
  315. ready_num=0;
  316. mp.reserve(10007);
  317. clear_it=mp.begin();
  318. timer_fd_mp.reserve(10007);
  319. const_id_mp.reserve(10007);
  320. udp_fd_mp.reserve(100007);
  321. last_clear_time=0;
  322. //current_ready_ip=0;
  323. // current_ready_port=0;
  324. }
  325. int exist(u32_t ip,uint16_t port)
  326. {
  327. u64_t u64=0;
  328. u64=ip;
  329. u64<<=32u;
  330. u64|=port;
  331. if(mp.find(u64)!=mp.end())
  332. {
  333. return 1;
  334. }
  335. return 0;
  336. }
  337. /*
  338. int insert(uint32_t ip,uint16_t port)
  339. {
  340. uint64_t u64=0;
  341. u64=ip;
  342. u64<<=32u;
  343. u64|=port;
  344. mp[u64];
  345. return 0;
  346. }*/
  347. conn_info_t *& find_insert_p(u32_t ip,uint16_t port) //be aware,the adress may change after rehash
  348. {
  349. u64_t u64=0;
  350. u64=ip;
  351. u64<<=32u;
  352. u64|=port;
  353. unordered_map<u64_t,conn_info_t*>::iterator it=mp.find(u64);
  354. if(it==mp.end())
  355. {
  356. mp[u64]=new conn_info_t;
  357. }
  358. return mp[u64];
  359. }
  360. conn_info_t & find_insert(u32_t ip,uint16_t port) //be aware,the adress may change after rehash
  361. {
  362. u64_t u64=0;
  363. u64=ip;
  364. u64<<=32u;
  365. u64|=port;
  366. unordered_map<u64_t,conn_info_t*>::iterator it=mp.find(u64);
  367. if(it==mp.end())
  368. {
  369. mp[u64]=new conn_info_t;
  370. }
  371. return *mp[u64];
  372. }
  373. int erase(unordered_map<u64_t,conn_info_t*>::iterator erase_it)
  374. {
  375. if(erase_it->second->state.server_current_state==server_ready)
  376. {
  377. ready_num--;
  378. assert(i32_t(ready_num)!=-1);
  379. assert(erase_it->second!=0);
  380. assert(erase_it->second->timer_fd !=0);
  381. assert(erase_it->second->oppsite_const_id!=0);
  382. assert(const_id_mp.find(erase_it->second->oppsite_const_id)!=const_id_mp.end());
  383. assert(timer_fd_mp.find(erase_it->second->timer_fd)!=timer_fd_mp.end());
  384. const_id_mp.erase(erase_it->second->oppsite_const_id);
  385. timer_fd_mp.erase(erase_it->second->timer_fd);
  386. close(erase_it->second->timer_fd);// close will auto delte it from epoll
  387. delete(erase_it->second);
  388. mp.erase(erase_it->first);
  389. }
  390. else
  391. {
  392. assert(erase_it->second->blob==0);
  393. assert(erase_it->second->timer_fd ==0);
  394. assert(erase_it->second->oppsite_const_id==0);
  395. delete(erase_it->second);
  396. mp.erase(erase_it->first);
  397. }
  398. return 0;
  399. }
  400. int clear_inactive()
  401. {
  402. if(get_current_time()-last_clear_time>conn_clear_interval)
  403. {
  404. last_clear_time=get_current_time();
  405. return clear_inactive0();
  406. }
  407. return 0;
  408. }
  409. int clear_inactive0()
  410. {
  411. unordered_map<u64_t,conn_info_t*>::iterator it;
  412. unordered_map<u64_t,conn_info_t*>::iterator old_it;
  413. if(disable_conn_clear) return 0;
  414. //map<uint32_t,uint64_t>::iterator it;
  415. int cnt=0;
  416. it=clear_it;
  417. int size=mp.size();
  418. int num_to_clean=size/conn_clear_ratio+conn_clear_min; //clear 1/10 each time,to avoid latency glitch
  419. mylog(log_trace,"mp.size() %d\n", size);
  420. num_to_clean=min(num_to_clean,(int)mp.size());
  421. u64_t current_time=get_current_time();
  422. for(;;)
  423. {
  424. if(cnt>=num_to_clean) break;
  425. if(mp.begin()==mp.end()) break;
  426. if(it==mp.end())
  427. {
  428. it=mp.begin();
  429. }
  430. if(it->second->state.server_current_state==server_ready &&current_time - it->second->last_hb_recv_time <=server_conn_timeout)
  431. {
  432. it++;
  433. }
  434. else if(it->second->state.server_current_state!=server_ready&& current_time - it->second->last_state_time <=server_handshake_timeout )
  435. {
  436. it++;
  437. }
  438. else if(it->second->blob!=0&&it->second->blob->conv_manager.get_size() >0)
  439. {
  440. assert(it->second->state.server_current_state==server_ready);
  441. it++;
  442. }
  443. else
  444. {
  445. mylog(log_info,"[%s:%d]inactive conn cleared \n",my_ntoa(it->second->raw_info.recv_info.src_ip),it->second->raw_info.recv_info.src_port);
  446. old_it=it;
  447. it++;
  448. erase(old_it);
  449. }
  450. cnt++;
  451. }
  452. return 0;
  453. }
  454. }conn_manager;
  455. conn_info_t::~conn_info_t()
  456. {
  457. if(program_mode==server_mode)
  458. {
  459. if(state.server_current_state==server_ready)
  460. {
  461. assert(blob!=0);
  462. assert(oppsite_const_id!=0);
  463. //assert(conn_manager.const_id_mp.find(oppsite_const_id)!=conn_manager.const_id_mp.end()); // conn_manager 's deconstuction function erases it
  464. }
  465. else
  466. {
  467. assert(blob==0);
  468. assert(oppsite_const_id==0);
  469. }
  470. }
  471. //if(oppsite_const_id!=0) //do this at conn_manager 's deconstuction function
  472. //conn_manager.const_id_mp.erase(oppsite_const_id);
  473. if(blob!=0)
  474. delete blob;
  475. //send_packet_info.protocol=g_packet_info_send.protocol;
  476. }
  477. int TTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTT;
  478. ////////==========================type divider=======================================================
  479. int server_on_raw_recv_pre_ready(conn_info_t &conn_info,char * ip_port,u32_t tmp_oppsite_const_id);
  480. int server_on_raw_recv_ready(conn_info_t &conn_info,char * ip_port,char *data,int data_len);
  481. int server_on_raw_recv_handshake1(conn_info_t &conn_info,char * ip_port,char * data, int data_len);
  482. int DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD;
  483. ////////////////=======================declear divider=============================
  484. void server_clear_function(u64_t u64)
  485. {
  486. int fd=int(u64);
  487. int ret;
  488. assert(fd!=0);
  489. /*
  490. epoll_event ev;
  491. ev.events = EPOLLIN;
  492. ev.data.u64 = u64;
  493. ret = epoll_ctl(epollfd, EPOLL_CTL_DEL, fd, &ev);
  494. if (ret!=0)
  495. {
  496. mylog(log_fatal,"fd:%d epoll delete failed!!!!\n",fd);
  497. myexit(-1); //this shouldnt happen
  498. }*/ //no need
  499. ret= close(fd); //closed fd should be auto removed from epoll
  500. if (ret!=0)
  501. {
  502. mylog(log_fatal,"close fd %d failed !!!!\n",fd);
  503. myexit(-1); //this shouldnt happen
  504. }
  505. //mylog(log_fatal,"size:%d !!!!\n",conn_manager.udp_fd_mp.size());
  506. assert(conn_manager.udp_fd_mp.find(fd)!=conn_manager.udp_fd_mp.end());
  507. conn_manager.udp_fd_mp.erase(fd);
  508. }
  509. int send_bare(raw_info_t &raw_info,const char* data,int len)
  510. {
  511. if(len<0)
  512. {
  513. mylog(log_debug,"input_len <0\n");
  514. return -1;
  515. }
  516. packet_info_t &send_info=raw_info.send_info;
  517. packet_info_t &recv_info=raw_info.recv_info;
  518. char send_data_buf[buf_len]; //buf for send data and send hb
  519. char send_data_buf2[buf_len];
  520. //static send_bare[buf_len];
  521. iv_t iv=get_true_random_number_64();
  522. padding_t padding=get_true_random_number_64();
  523. memcpy(send_data_buf,&iv,sizeof(iv));
  524. memcpy(send_data_buf+sizeof(iv),&padding,sizeof(padding));
  525. send_data_buf[sizeof(iv)+sizeof(padding)]='b';
  526. memcpy(send_data_buf+sizeof(iv)+sizeof(padding)+1,data,len);
  527. int new_len=len+sizeof(iv)+sizeof(padding)+1;
  528. if(my_encrypt(send_data_buf,send_data_buf2,new_len,key)!=0)
  529. {
  530. return -1;
  531. }
  532. send_raw0(raw_info,send_data_buf2,new_len);
  533. return 0;
  534. }
  535. int parse_bare(const char *input,int input_len,char* & data,int & len) //allow overlap
  536. {
  537. static char recv_data_buf[buf_len];
  538. if(input_len<0)
  539. {
  540. mylog(log_debug,"input_len <0\n");
  541. return -1;
  542. }
  543. if(my_decrypt(input,recv_data_buf,input_len,key)!=0)
  544. {
  545. mylog(log_debug,"decrypt_fail in recv bare\n");
  546. return -1;
  547. }
  548. if(recv_data_buf[sizeof(iv_t)+sizeof(padding_t)]!='b')
  549. {
  550. mylog(log_debug,"not a bare packet\n");
  551. return -1;
  552. }
  553. len=input_len;
  554. data=recv_data_buf+sizeof(iv_t)+sizeof(padding_t)+1;
  555. len-=sizeof(iv_t)+sizeof(padding_t)+1;
  556. if(len<0)
  557. {
  558. mylog(log_debug,"len <0\n");
  559. return -1;
  560. }
  561. return 0;
  562. }
  563. int recv_bare(raw_info_t &raw_info,char* & data,int & len)
  564. {
  565. packet_info_t &send_info=raw_info.send_info;
  566. packet_info_t &recv_info=raw_info.recv_info;
  567. if(recv_raw0(raw_info,data,len)<0)
  568. {
  569. //printf("recv_raw_fail in recv bare\n");
  570. return -1;
  571. }
  572. if ((raw_mode == mode_faketcp && (recv_info.syn == 1 || recv_info.ack != 1)))
  573. {
  574. mylog(log_debug,"unexpect packet type recv_info.syn=%d recv_info.ack=%d \n",recv_info.syn,recv_info.ack);
  575. return -1;
  576. }
  577. return parse_bare(data,len,data,len);
  578. }
  579. int send_handshake(raw_info_t &raw_info,id_t id1,id_t id2,id_t id3)
  580. {
  581. packet_info_t &send_info=raw_info.send_info;
  582. packet_info_t &recv_info=raw_info.recv_info;
  583. char * data;int len;
  584. //len=sizeof(id_t)*3;
  585. if(numbers_to_char(id1,id2,id3,data,len)!=0) return -1;
  586. if(send_bare(raw_info,data,len)!=0) {mylog(log_warn,"send bare fail\n");return -1;}
  587. return 0;
  588. }
  589. /*
  590. int recv_handshake(packet_info_t &info,id_t &id1,id_t &id2,id_t &id3)
  591. {
  592. char * data;int len;
  593. if(recv_bare(info,data,len)!=0) return -1;
  594. if(char_to_numbers(data,len,id1,id2,id3)!=0) return -1;
  595. return 0;
  596. }*/
  597. int send_safer(conn_info_t &conn_info,const char* data,int len)
  598. {
  599. packet_info_t &send_info=conn_info.raw_info.send_info;
  600. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  601. if(data[0]!='h'&&data[0]!='d')
  602. {
  603. mylog(log_warn,"first byte is not h or d ,%x\n",data[0]);
  604. return -1;
  605. }
  606. char send_data_buf[buf_len]; //buf for send data and send hb
  607. char send_data_buf2[buf_len];
  608. id_t n_tmp_id=htonl(conn_info.my_id);
  609. memcpy(send_data_buf,&n_tmp_id,sizeof(n_tmp_id));
  610. n_tmp_id=htonl(conn_info.oppsite_id);
  611. memcpy(send_data_buf+sizeof(n_tmp_id),&n_tmp_id,sizeof(n_tmp_id));
  612. anti_replay_seq_t n_seq=hton64(conn_info.blob->anti_replay.get_new_seq_for_send());
  613. memcpy(send_data_buf+sizeof(n_tmp_id)*2,&n_seq,sizeof(n_seq));
  614. memcpy(send_data_buf+sizeof(n_tmp_id)*2+sizeof(n_seq),data,len);//data;
  615. int new_len=len+sizeof(n_seq)+sizeof(n_tmp_id)*2;
  616. if(my_encrypt(send_data_buf,send_data_buf2,new_len,key)!=0)
  617. {
  618. return -1;
  619. }
  620. if(send_raw0(conn_info.raw_info,send_data_buf2,new_len)!=0) return -1;
  621. if(after_send_raw0(conn_info.raw_info)!=0) return -1;
  622. return 0;
  623. }
  624. int send_data_safer(conn_info_t &conn_info,const char* data,int len,u32_t conv_num)
  625. {
  626. packet_info_t &send_info=conn_info.raw_info.send_info;
  627. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  628. char send_data_buf[buf_len];
  629. send_data_buf[0]='d';
  630. u32_t n_conv_num=htonl(conv_num);
  631. memcpy(send_data_buf+1,&n_conv_num,sizeof(n_conv_num));
  632. memcpy(send_data_buf+1+sizeof(n_conv_num),data,len);
  633. int new_len=len+1+sizeof(n_conv_num);
  634. send_safer(conn_info,send_data_buf,new_len);
  635. return 0;
  636. }
  637. int parse_safer(conn_info_t &conn_info,const char * input,int input_len,char* &data,int &len)//allow overlap
  638. {
  639. static char recv_data_buf0[buf_len];
  640. char *recv_data_buf=recv_data_buf0; //fix strict alias warning
  641. if(my_decrypt(input,recv_data_buf,input_len,key)!=0)
  642. {
  643. //printf("decrypt fail\n");
  644. return -1;
  645. }
  646. //char *a=recv_data_buf;
  647. id_t h_oppiste_id= ntohl ( *((id_t * )(recv_data_buf)) );
  648. id_t h_my_id= ntohl ( *((id_t * )(recv_data_buf+sizeof(id_t))) );
  649. anti_replay_seq_t h_seq= ntoh64 ( *((anti_replay_seq_t * )(recv_data_buf +sizeof(id_t) *2 )) );
  650. if(h_oppiste_id!=conn_info.oppsite_id||h_my_id!=conn_info.my_id)
  651. {
  652. mylog(log_debug,"id and oppsite_id verification failed %x %x %x %x \n",h_oppiste_id,conn_info.oppsite_id,h_my_id,conn_info.my_id);
  653. return -1;
  654. }
  655. if (conn_info.blob->anti_replay.is_vaild(h_seq) != 1) {
  656. mylog(log_debug,"dropped replay packet\n");
  657. return -1;
  658. }
  659. //printf("recv _len %d\n ",recv_len);
  660. data=recv_data_buf+sizeof(anti_replay_seq_t)+sizeof(id_t)*2;
  661. len=input_len-(sizeof(anti_replay_seq_t)+sizeof(id_t)*2 );
  662. if(data[0]!='h'&&data[0]!='d')
  663. {
  664. mylog(log_debug,"first byte is not h or d ,%x\n",data[0]);
  665. return -1;
  666. }
  667. if(len<0)
  668. {
  669. mylog(log_debug,"len <0 ,%d\n",len);
  670. return -1;
  671. }
  672. if(after_recv_raw0(conn_info.raw_info)!=0) return -1;
  673. return 0;
  674. }
  675. int recv_safer(conn_info_t &conn_info,char* &data,int &len)
  676. {
  677. packet_info_t &send_info=conn_info.raw_info.send_info;
  678. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  679. char * recv_data;int recv_len;
  680. static char recv_data_buf[buf_len];
  681. if(recv_raw0(conn_info.raw_info,recv_data,recv_len)!=0) return -1;
  682. return parse_safer(conn_info,recv_data,recv_len,data,len);
  683. }
  684. int try_to_list_and_bind(int port)
  685. {
  686. int old_bind_fd=bind_fd;
  687. if(raw_mode==mode_faketcp)
  688. {
  689. bind_fd=socket(AF_INET,SOCK_STREAM,0);
  690. }
  691. else if(raw_mode==mode_udp||raw_mode==mode_icmp)
  692. {
  693. bind_fd=socket(AF_INET,SOCK_DGRAM,0);
  694. }
  695. if(old_bind_fd!=-1)
  696. {
  697. close(old_bind_fd);
  698. }
  699. struct sockaddr_in temp_bind_addr;
  700. bzero(&temp_bind_addr, sizeof(temp_bind_addr));
  701. temp_bind_addr.sin_family = AF_INET;
  702. temp_bind_addr.sin_port = htons(port);
  703. temp_bind_addr.sin_addr.s_addr = local_address_uint32;
  704. if (bind(bind_fd, (struct sockaddr*)&temp_bind_addr, sizeof(temp_bind_addr)) !=0)
  705. {
  706. mylog(log_debug,"bind fail\n");
  707. return -1;
  708. }
  709. if(raw_mode==mode_faketcp)
  710. {
  711. if (listen(bind_fd, SOMAXCONN) != 0) {
  712. mylog(log_warn,"listen fail\n");
  713. return -1;
  714. }
  715. }
  716. return 0;
  717. }
  718. int client_bind_to_a_new_port()
  719. {
  720. int raw_send_port=10000+get_true_random_number()%(65535-10000);
  721. for(int i=0;i<1000;i++)//try 1000 times at max,this should be enough
  722. {
  723. if (try_to_list_and_bind(raw_send_port)==0)
  724. {
  725. return raw_send_port;
  726. }
  727. }
  728. mylog(log_fatal,"bind port fail\n");
  729. myexit(-1);
  730. return -1;////for compiler check
  731. }
  732. int set_timer(int epollfd,int &timer_fd)
  733. {
  734. int ret;
  735. epoll_event ev;
  736. itimerspec its;
  737. memset(&its,0,sizeof(its));
  738. if((timer_fd=timerfd_create(CLOCK_MONOTONIC,TFD_NONBLOCK)) < 0)
  739. {
  740. mylog(log_fatal,"timer_fd create error\n");
  741. myexit(1);
  742. }
  743. its.it_interval.tv_sec=(timer_interval/1000);
  744. its.it_interval.tv_nsec=(timer_interval%1000)*1000ll*1000ll;
  745. its.it_value.tv_nsec=1; //imidiately
  746. timerfd_settime(timer_fd,0,&its,0);
  747. ev.events = EPOLLIN;
  748. ev.data.u64 = timer_fd;
  749. ret=epoll_ctl(epollfd, EPOLL_CTL_ADD, timer_fd, &ev);
  750. if (ret < 0) {
  751. mylog(log_fatal,"epoll_ctl return %d\n", ret);
  752. myexit(-1);
  753. }
  754. return 0;
  755. }
  756. int set_timer_server(int epollfd,int &timer_fd)
  757. {
  758. int ret;
  759. epoll_event ev;
  760. itimerspec its;
  761. memset(&its,0,sizeof(its));
  762. if((timer_fd=timerfd_create(CLOCK_MONOTONIC,TFD_NONBLOCK)) < 0)
  763. {
  764. mylog(log_fatal,"timer_fd create error\n");
  765. myexit(1);
  766. }
  767. its.it_interval.tv_sec=(timer_interval/1000);
  768. its.it_interval.tv_nsec=(timer_interval%1000)*1000ll*1000ll;
  769. its.it_value.tv_nsec=1; //imidiately
  770. timerfd_settime(timer_fd,0,&its,0);
  771. ev.events = EPOLLIN;
  772. ev.data.u64 = pack_u64(2,timer_fd);
  773. ret=epoll_ctl(epollfd, EPOLL_CTL_ADD, timer_fd, &ev);
  774. if (ret < 0) {
  775. mylog(log_fatal,"epoll_ctl return %d\n", ret);
  776. myexit(-1);
  777. }
  778. return 0;
  779. }
  780. int client_on_timer(conn_info_t &conn_info) //for client
  781. {
  782. packet_info_t &send_info=conn_info.raw_info.send_info;
  783. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  784. raw_info_t &raw_info=conn_info.raw_info;
  785. conn_info.blob->conv_manager.clear_inactive();
  786. mylog(log_trace,"timer!\n");
  787. mylog(log_trace,"<client_on_timer,send_info.ts_ack= %u>\n",send_info.ts_ack);
  788. if(conn_info.state.client_current_state==client_idle)
  789. {
  790. fail_time_counter++;
  791. if(max_fail_time>0&&fail_time_counter>max_fail_time)
  792. {
  793. mylog(log_fatal,"max_fail_time exceed\n");
  794. myexit(-1);
  795. }
  796. conn_info.blob->anti_replay.re_init();
  797. conn_info.my_id = get_true_random_number_nz(); ///todo no need to do this everytime
  798. if (source_port == 0)
  799. {
  800. send_info.src_port = client_bind_to_a_new_port();
  801. }
  802. else
  803. {
  804. send_info.src_port = source_port;
  805. }
  806. if (raw_mode == mode_icmp)
  807. {
  808. send_info.dst_port = send_info.src_port;
  809. }
  810. mylog(log_info, "using port %d\n", send_info.src_port);
  811. init_filter(send_info.src_port);
  812. if(raw_mode==mode_icmp||raw_mode==mode_udp)
  813. {
  814. conn_info.state.client_current_state=client_handshake1;
  815. mylog(log_info,"state changed from client_idle to client_pre_handshake\n");
  816. }
  817. if(raw_mode==mode_faketcp)
  818. {
  819. conn_info.state.client_current_state=client_tcp_handshake;
  820. mylog(log_info,"state changed from client_idle to client_tcp_handshake\n");
  821. }
  822. conn_info.last_state_time=get_current_time();
  823. conn_info.last_hb_sent_time=0;
  824. //dont return;
  825. }
  826. if(conn_info.state.client_current_state==client_tcp_handshake) //send and resend syn
  827. {
  828. assert(raw_mode==mode_faketcp);
  829. if (get_current_time() - conn_info.last_state_time > client_handshake_timeout)
  830. {
  831. conn_info.state.client_current_state = client_idle;
  832. mylog(log_info, "state back to client_idle from client_tcp_handshake\n");
  833. return 0;
  834. }
  835. else if (get_current_time() - conn_info.last_hb_sent_time > client_retry_interval)
  836. {
  837. if (raw_mode == mode_faketcp)
  838. {
  839. if (conn_info.last_hb_sent_time == 0)
  840. {
  841. send_info.psh = 0;
  842. send_info.syn = 1;
  843. send_info.ack = 0;
  844. send_info.ts_ack =0;
  845. send_info.seq=get_true_random_number();
  846. send_info.ack_seq=get_true_random_number();
  847. }
  848. }
  849. send_raw0(raw_info, 0, 0);
  850. conn_info.last_hb_sent_time = get_current_time();
  851. mylog(log_info, "(re)sent tcp syn\n");
  852. return 0;
  853. }
  854. else
  855. {
  856. return 0;
  857. }
  858. return 0;
  859. }
  860. else if(conn_info.state.client_current_state==client_handshake1)//send and resend handshake1
  861. {
  862. if(get_current_time()-conn_info.last_state_time>client_handshake_timeout)
  863. {
  864. conn_info.state.client_current_state=client_idle;
  865. mylog(log_info,"state back to client_idle from client_handshake1\n");
  866. return 0;
  867. }
  868. else if(get_current_time()-conn_info.last_hb_sent_time>client_retry_interval)
  869. {
  870. if(raw_mode==mode_faketcp)
  871. {
  872. if(conn_info.last_hb_sent_time==0)
  873. {
  874. send_info.seq++;
  875. send_info.ack_seq=recv_info.seq+1;
  876. send_info.ts_ack=recv_info.ts;
  877. raw_info.reserved_seq=send_info.seq;
  878. }
  879. send_info.seq=raw_info.reserved_seq;
  880. send_info.psh = 0;
  881. send_info.syn = 0;
  882. send_info.ack = 1;
  883. send_raw0(raw_info, 0, 0);
  884. send_handshake(raw_info,conn_info.my_id,0,const_id);
  885. send_info.seq+=raw_info.last_send_len;
  886. }
  887. else
  888. {
  889. send_handshake(raw_info,conn_info.my_id,0,const_id);
  890. if(raw_mode==mode_icmp)
  891. send_info.icmp_seq++;
  892. }
  893. conn_info.last_hb_sent_time=get_current_time();
  894. mylog(log_info,"(re)sent handshake1\n");
  895. return 0;
  896. }
  897. else
  898. {
  899. return 0;
  900. }
  901. return 0;
  902. }
  903. else if(conn_info.state.client_current_state==client_handshake2)
  904. {
  905. if(get_current_time()-conn_info.last_state_time>client_handshake_timeout)
  906. {
  907. conn_info.state.client_current_state=client_idle;
  908. mylog(log_info,"state back to client_idle from client_handshake2\n");
  909. return 0;
  910. }
  911. else if(get_current_time()-conn_info.last_hb_sent_time>client_retry_interval)
  912. {
  913. if(raw_mode==mode_faketcp)
  914. {
  915. if(conn_info.last_hb_sent_time==0)
  916. {
  917. send_info.ack_seq=recv_info.seq+raw_info.last_recv_len;
  918. send_info.ts_ack=recv_info.ts;
  919. raw_info.reserved_seq=send_info.seq;
  920. }
  921. send_info.seq=raw_info.reserved_seq;
  922. send_handshake(raw_info,conn_info.my_id,conn_info.oppsite_id,const_id);
  923. send_info.seq+=raw_info.last_send_len;
  924. }
  925. else
  926. {
  927. send_handshake(raw_info,conn_info.my_id,conn_info.oppsite_id,const_id);
  928. if(raw_mode==mode_icmp)
  929. send_info.icmp_seq++;
  930. }
  931. conn_info.last_hb_sent_time=get_current_time();
  932. mylog(log_info,"(re)sent handshake2\n");
  933. return 0;
  934. }
  935. else
  936. {
  937. return 0;
  938. }
  939. return 0;
  940. }
  941. else if(conn_info.state.client_current_state==client_ready)
  942. {
  943. fail_time_counter=0;
  944. mylog(log_trace,"time %llu,%llu\n",get_current_time(),conn_info.last_state_time);
  945. if(get_current_time()-conn_info.last_hb_recv_time>client_conn_timeout)
  946. {
  947. conn_info.state.client_current_state=client_idle;
  948. conn_info.my_id=get_true_random_number_nz();
  949. mylog(log_info,"state back to client_idle from client_ready\n");
  950. return 0;
  951. }
  952. if(get_current_time()-conn_info.last_hb_sent_time<heartbeat_interval)
  953. {
  954. return 0;
  955. }
  956. mylog(log_debug,"heartbeat sent <%x,%x>\n",conn_info.oppsite_id,conn_info.my_id);
  957. send_safer(conn_info,(char *)"h",1);/////////////send
  958. conn_info.last_hb_sent_time=get_current_time();
  959. return 0;
  960. }
  961. else
  962. {
  963. mylog(log_fatal,"unknown state,this shouldnt happen.\n");
  964. myexit(-1);
  965. }
  966. return 0;
  967. }
  968. int server_on_timer_multi(conn_info_t &conn_info,char * ip_port)
  969. {
  970. mylog(log_trace,"server timer!\n");
  971. raw_info_t &raw_info=conn_info.raw_info;
  972. assert(conn_info.state.server_current_state==server_ready);
  973. if(conn_info.state.server_current_state==server_ready)
  974. {
  975. conn_info.blob->conv_manager.clear_inactive(ip_port);
  976. /*
  977. if( get_current_time()-conn_info.last_hb_recv_time>heartbeat_timeout )
  978. {
  979. mylog(log_trace,"%lld %lld\n",get_current_time(),conn_info.last_state_time);
  980. conn_info.server_current_state=server_nothing;
  981. //conn_manager.current_ready_ip=0;
  982. //conn_manager.current_ready_port=0;
  983. mylog(log_info,"changed state to server_nothing\n");
  984. return 0;
  985. }*/ //dont need to do this at server,conn_manger will clear expired connections
  986. if(get_current_time()-conn_info.last_hb_sent_time<heartbeat_interval)
  987. {
  988. return 0;
  989. }
  990. send_safer(conn_info,(char *)"h",1); /////////////send
  991. conn_info.last_hb_sent_time=get_current_time();
  992. mylog(log_debug,"heart beat sent<%x,%x>\n",conn_info.my_id,conn_info.oppsite_id);
  993. }
  994. else
  995. {
  996. mylog(log_fatal,"this shouldnt happen!\n");
  997. myexit(-1);
  998. }
  999. return 0;
  1000. }
  1001. int client_on_raw_recv(conn_info_t &conn_info)
  1002. {
  1003. char* data;int data_len;
  1004. packet_info_t &send_info=conn_info.raw_info.send_info;
  1005. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1006. raw_info_t &raw_info=conn_info.raw_info;
  1007. mylog(log_trace,"<client_on_raw_recv,send_info.ts_ack= %u>\n",send_info.ts_ack);
  1008. if(conn_info.state.client_current_state==client_idle )
  1009. {
  1010. recv(raw_recv_fd, 0,0, 0 );
  1011. }
  1012. else if(conn_info.state.client_current_state==client_tcp_handshake)//received syn ack
  1013. {
  1014. assert(raw_mode==mode_faketcp);
  1015. if(recv_raw0(raw_info,data,data_len)<0)
  1016. {
  1017. return -1;
  1018. }
  1019. if(recv_info.src_ip!=send_info.dst_ip||recv_info.src_port!=send_info.dst_port)
  1020. {
  1021. mylog(log_debug,"unexpected adress %x %x %d %d\n",recv_info.src_ip,send_info.dst_ip,recv_info.src_port,send_info.dst_port);
  1022. return -1;
  1023. }
  1024. if(data_len==0&&raw_info.recv_info.syn==1&&raw_info.recv_info.ack==1)
  1025. {
  1026. if(recv_info.ack_seq!=send_info.seq+1)
  1027. {
  1028. mylog(log_debug,"seq ack_seq mis match\n");
  1029. return -1;
  1030. }
  1031. conn_info.state.client_current_state = client_handshake1;
  1032. mylog(log_info,"state changed from client_tcp_handshake to client_handshake1\n");
  1033. conn_info.last_state_time = get_current_time();
  1034. conn_info.last_hb_sent_time=0;
  1035. client_on_timer(conn_info);
  1036. return 0;
  1037. }
  1038. else
  1039. {
  1040. mylog(log_debug,"unexpected packet type,expected:syn ack\n");
  1041. return -1;
  1042. }
  1043. }
  1044. else if(conn_info.state.client_current_state==client_handshake1)//recevied respond of handshake1
  1045. {
  1046. if(recv_bare(raw_info,data,data_len)!=0)
  1047. {
  1048. mylog(log_debug,"recv_bare failed!\n");
  1049. return -1;
  1050. }
  1051. if(recv_info.src_ip!=send_info.dst_ip||recv_info.src_port!=send_info.dst_port)
  1052. {
  1053. mylog(log_debug,"unexpected adress %x %x %d %d\n",recv_info.src_ip,send_info.dst_ip,recv_info.src_port,send_info.dst_port);
  1054. return -1;
  1055. }
  1056. if(data_len<int( 3*sizeof(id_t)))
  1057. {
  1058. mylog(log_debug,"too short to be a handshake\n");
  1059. return -1;
  1060. }
  1061. id_t tmp_oppsite_id= ntohl(* ((u32_t *)&data[0]));
  1062. id_t tmp_my_id=ntohl(* ((u32_t *)&data[sizeof(id_t)]));
  1063. id_t tmp_oppsite_const_id=ntohl(* ((u32_t *)&data[sizeof(id_t)*2]));
  1064. if(tmp_my_id!=conn_info.my_id)
  1065. {
  1066. mylog(log_debug,"tmp_my_id doesnt match\n");
  1067. return -1;
  1068. }
  1069. if(raw_mode==mode_faketcp)
  1070. {
  1071. if(recv_info.ack_seq!=send_info.seq)
  1072. {
  1073. mylog(log_debug,"seq ack_seq mis match\n");
  1074. return -1;
  1075. }
  1076. if(recv_info.seq!=send_info.ack_seq)
  1077. {
  1078. mylog(log_debug,"seq ack_seq mis match\n");
  1079. return -1;
  1080. }
  1081. }
  1082. conn_info.oppsite_id=tmp_oppsite_id;
  1083. mylog(log_info,"changed state from to client_handshake1 to client_handshake2,my_id is %x,oppsite id is %x\n",conn_info.my_id,conn_info.oppsite_id);
  1084. //send_handshake(raw_info,conn_info.my_id,conn_info.oppsite_id,const_id); //////////////send
  1085. conn_info.state.client_current_state = client_handshake2;
  1086. conn_info.last_state_time = get_current_time();
  1087. conn_info.last_hb_sent_time=0;
  1088. client_on_timer(conn_info);
  1089. return 0;
  1090. }
  1091. else if(conn_info.state.client_current_state==client_handshake2||conn_info.state.client_current_state==client_ready)//received heartbeat or data
  1092. {
  1093. if(recv_safer(conn_info,data,data_len)!=0)
  1094. {
  1095. mylog(log_debug,"recv_safer failed!\n");
  1096. return -1;
  1097. }
  1098. if(recv_info.src_ip!=send_info.dst_ip||recv_info.src_port!=send_info.dst_port)
  1099. {
  1100. mylog(log_warn,"unexpected adress %x %x %d %d,this shouldnt happen.\n",recv_info.src_ip,send_info.dst_ip,recv_info.src_port,send_info.dst_port);
  1101. return -1;
  1102. }
  1103. if(conn_info.state.client_current_state==client_handshake2)
  1104. {
  1105. mylog(log_info,"changed state from to client_handshake2 to client_ready\n");
  1106. conn_info.state.client_current_state=client_ready;
  1107. conn_info.last_hb_sent_time=0;
  1108. conn_info.last_hb_recv_time=get_current_time();
  1109. client_on_timer(conn_info);
  1110. }
  1111. if(data_len==1&&data[0]=='h')
  1112. {
  1113. mylog(log_debug,"[hb]heart beat received\n");
  1114. conn_info.last_hb_recv_time=get_current_time();
  1115. return 0;
  1116. }
  1117. else if(data_len>= int( sizeof(u32_t)+1 )&&data[0]=='d')
  1118. {
  1119. mylog(log_trace,"received a data from fake tcp,len:%d\n",data_len);
  1120. conn_info.last_hb_recv_time=get_current_time();
  1121. u32_t tmp_conv_id= ntohl(* ((u32_t *)&data[1]));
  1122. if(!conn_info.blob->conv_manager.is_conv_used(tmp_conv_id))
  1123. {
  1124. mylog(log_info,"unknow conv %d,ignore\n",tmp_conv_id);
  1125. return 0;
  1126. }
  1127. conn_info.blob->conv_manager.update_active_time(tmp_conv_id);
  1128. u64_t u64=conn_info.blob->conv_manager.find_u64_by_conv(tmp_conv_id);
  1129. sockaddr_in tmp_sockaddr;
  1130. tmp_sockaddr.sin_family = AF_INET;
  1131. tmp_sockaddr.sin_addr.s_addr=(u64>>32u);
  1132. tmp_sockaddr.sin_port= htons(uint16_t((u64<<32u)>>32u));
  1133. int ret=sendto(udp_fd,data+1+sizeof(u32_t),data_len -(1+sizeof(u32_t)),0,(struct sockaddr *)&tmp_sockaddr,sizeof(tmp_sockaddr));
  1134. if(ret<0)
  1135. {
  1136. mylog(log_warn,"sento returned %d\n",ret);
  1137. //perror("ret<0");
  1138. }
  1139. mylog(log_trace,"%s :%d\n",inet_ntoa(tmp_sockaddr.sin_addr),ntohs(tmp_sockaddr.sin_port));
  1140. mylog(log_trace,"%d byte sent\n",ret);
  1141. }
  1142. else
  1143. {
  1144. mylog(log_warn,"unknown packet,this shouldnt happen.\n");
  1145. return -1;
  1146. }
  1147. return 0;
  1148. }
  1149. else
  1150. {
  1151. mylog(log_fatal,"unknown state,this shouldnt happen.\n");
  1152. myexit(-1);
  1153. }
  1154. return 0;
  1155. }
  1156. int server_on_raw_recv_multi()
  1157. {
  1158. char dummy_buf[buf_len];
  1159. packet_info_t peek_info;
  1160. if(peek_raw(peek_info)<0)
  1161. {
  1162. recv(raw_recv_fd, 0,0, 0 );//
  1163. //struct sockaddr saddr;
  1164. //socklen_t saddr_size;
  1165. ///recvfrom(raw_recv_fd, 0,0, 0 ,&saddr , &saddr_size);//
  1166. mylog(log_trace,"peek_raw failed\n");
  1167. return -1;
  1168. }
  1169. u32_t ip=peek_info.src_ip;uint16_t port=peek_info.src_port;
  1170. char ip_port[40];
  1171. sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1172. mylog(log_trace,"[%s]peek_raw\n",ip_port);
  1173. int data_len; char *data;
  1174. if(raw_mode==mode_faketcp&&peek_info.syn==1)
  1175. {
  1176. if(!conn_manager.exist(ip,port)||conn_manager.find_insert(ip,port).state.server_current_state!=server_ready)
  1177. {//reply any syn ,before state become ready
  1178. raw_info_t tmp_raw_info;
  1179. if(recv_raw0(tmp_raw_info,data,data_len)<0)
  1180. {
  1181. return 0;
  1182. }
  1183. raw_info_t &raw_info=tmp_raw_info;
  1184. packet_info_t &send_info=raw_info.send_info;
  1185. packet_info_t &recv_info=raw_info.recv_info;
  1186. send_info.src_ip=recv_info.dst_ip;
  1187. send_info.src_port=recv_info.dst_port;
  1188. send_info.dst_port = recv_info.src_port;
  1189. send_info.dst_ip = recv_info.src_ip;
  1190. if(data_len==0&&raw_info.recv_info.syn==1&&raw_info.recv_info.ack==0)
  1191. {
  1192. send_info.ack_seq = recv_info.seq + 1;
  1193. send_info.psh = 0;
  1194. send_info.syn = 1;
  1195. send_info.ack = 1;
  1196. send_info.ts_ack=recv_info.ts;
  1197. mylog(log_info,"[%s]received syn,sent syn ack back\n",ip_port);
  1198. send_raw0(raw_info, 0, 0);
  1199. return 0;
  1200. }
  1201. }
  1202. return 0;
  1203. }
  1204. if(!conn_manager.exist(ip,port))
  1205. {
  1206. if(conn_manager.mp.size()>=max_handshake_conn_num)
  1207. {
  1208. mylog(log_info,"[%s]reached max_handshake_conn_num,ignored new handshake\n",ip_port);
  1209. recv(raw_recv_fd, 0,0, 0 );//
  1210. return 0;
  1211. }
  1212. raw_info_t tmp_raw_info;
  1213. if(raw_mode==mode_icmp)
  1214. {
  1215. tmp_raw_info.send_info.dst_port=tmp_raw_info.send_info.src_port=port;
  1216. }
  1217. if(recv_bare(tmp_raw_info,data,data_len)<0)
  1218. {
  1219. return 0;
  1220. }
  1221. if(data_len<int( 3*sizeof(id_t)))
  1222. {
  1223. mylog(log_debug,"[%s]too short to be a handshake\n",ip_port);
  1224. return -1;
  1225. }
  1226. id_t zero=ntohl(* ((u32_t *)&data[sizeof(id_t)]));
  1227. if(zero!=0)
  1228. {
  1229. mylog(log_debug,"[%s]not a invalid initial handshake\n",ip_port);
  1230. return -1;
  1231. }
  1232. mylog(log_info,"[%s]got packet from a new ip\n",ip_port);
  1233. conn_info_t &conn_info=conn_manager.find_insert(ip,port);
  1234. conn_info.raw_info=tmp_raw_info;
  1235. packet_info_t &send_info=conn_info.raw_info.send_info;
  1236. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1237. raw_info_t &raw_info=conn_info.raw_info;
  1238. send_info.src_ip=recv_info.dst_ip;
  1239. send_info.src_port=recv_info.dst_port;
  1240. send_info.dst_port = recv_info.src_port;
  1241. send_info.dst_ip = recv_info.src_ip;
  1242. //id_t tmp_oppsite_id= ntohl(* ((u32_t *)&data[0]));
  1243. //mylog(log_info,"[%s]handshake1 received %x\n",ip_port,tmp_oppsite_id);
  1244. conn_info.my_id=get_true_random_number_nz();
  1245. mylog(log_info,"[%s]created new conn,state: server_handshake1,my_id is %x\n",ip_port,conn_info.my_id);
  1246. conn_info.state.server_current_state = server_handshake1;
  1247. conn_info.last_state_time = get_current_time();
  1248. server_on_raw_recv_handshake1(conn_info,ip_port,data,data_len);
  1249. return 0;
  1250. }
  1251. conn_info_t & conn_info=conn_manager.find_insert(ip,port);//insert if not exist
  1252. packet_info_t &send_info=conn_info.raw_info.send_info;
  1253. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1254. raw_info_t &raw_info=conn_info.raw_info;
  1255. if(conn_info.state.server_current_state==server_handshake1)
  1256. {
  1257. if(recv_bare(raw_info,data,data_len)!=0)
  1258. {
  1259. return -1;
  1260. }
  1261. server_on_raw_recv_handshake1(conn_info,ip_port,data,data_len);
  1262. }
  1263. if(conn_info.state.server_current_state==server_ready)
  1264. {
  1265. if (recv_safer(conn_info, data, data_len) != 0) {
  1266. return -1;
  1267. }
  1268. return server_on_raw_recv_ready(conn_info,ip_port,data,data_len);
  1269. }
  1270. return 0;
  1271. }
  1272. /*
  1273. int server_on_raw_recv_handshake1(conn_info_t &conn_info,id_t tmp_oppsite_id )
  1274. {
  1275. packet_info_t &send_info=conn_info.raw_info.send_info;
  1276. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1277. raw_info_t &raw_info=conn_info.raw_info;
  1278. return 0;
  1279. }*/
  1280. int server_on_raw_recv_handshake1(conn_info_t &conn_info,char * ip_port,char * data, int data_len)
  1281. {
  1282. packet_info_t &send_info=conn_info.raw_info.send_info;
  1283. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1284. raw_info_t &raw_info=conn_info.raw_info;
  1285. //u32_t ip=conn_info.raw_info.recv_info.src_ip;
  1286. //uint16_t port=conn_info.raw_info.recv_info.src_port;
  1287. //char ip_port[40];
  1288. //sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1289. if(data_len<int( 3*sizeof(id_t)))
  1290. {
  1291. mylog(log_debug,"[%s] data_len=%d too short to be a handshake\n",ip_port,data_len);
  1292. return -1;
  1293. }
  1294. id_t tmp_oppsite_id= ntohl(* ((u32_t *)&data[0]));
  1295. id_t tmp_my_id=ntohl(* ((u32_t *)&data[sizeof(id_t)]));
  1296. if(tmp_my_id==0) //received init handshake again
  1297. {
  1298. if(raw_mode==mode_faketcp)
  1299. {
  1300. send_info.seq=recv_info.ack_seq;
  1301. send_info.ack_seq=recv_info.seq+raw_info.last_recv_len;
  1302. send_info.ts_ack=recv_info.ts;
  1303. }
  1304. if(raw_mode==mode_icmp)
  1305. {
  1306. send_info.icmp_seq=recv_info.icmp_seq;
  1307. }
  1308. send_handshake(raw_info,conn_info.my_id,tmp_oppsite_id,const_id); //////////////send
  1309. mylog(log_info,"[%s]changed state to server_handshake1,my_id is %x\n",ip_port,conn_info.my_id);
  1310. }
  1311. else if(tmp_my_id==conn_info.my_id)
  1312. {
  1313. conn_info.oppsite_id=tmp_oppsite_id;
  1314. id_t tmp_oppsite_const_id=ntohl(* ((u32_t *)&data[sizeof(id_t)*2]));
  1315. if(raw_mode==mode_faketcp)
  1316. {
  1317. send_info.seq=recv_info.ack_seq;
  1318. send_info.ack_seq=recv_info.seq+raw_info.last_recv_len;
  1319. send_info.ts_ack=recv_info.ts;
  1320. }
  1321. if(raw_mode==mode_icmp)
  1322. {
  1323. send_info.icmp_seq=recv_info.icmp_seq;
  1324. }
  1325. server_on_raw_recv_pre_ready(conn_info,ip_port,tmp_oppsite_const_id);
  1326. }
  1327. else
  1328. {
  1329. mylog(log_debug,"[%s]invalid my_id %x,my_id is %x\n",ip_port,tmp_my_id,conn_info.my_id);
  1330. }
  1331. return 0;
  1332. }
  1333. int server_on_raw_recv_ready(conn_info_t &conn_info,char * ip_port,char *data,int data_len)
  1334. {
  1335. raw_info_t &raw_info = conn_info.raw_info;
  1336. packet_info_t &send_info = conn_info.raw_info.send_info;
  1337. packet_info_t &recv_info = conn_info.raw_info.recv_info;
  1338. //char ip_port[40];
  1339. //sprintf(ip_port,"%s:%d",my_ntoa(recv_info.src_ip),recv_info.src_port);
  1340. /*
  1341. if (recv_info.src_ip != send_info.dst_ip
  1342. || recv_info.src_port != send_info.dst_port) {
  1343. mylog(log_debug, "unexpected adress\n");
  1344. return 0;
  1345. }*/
  1346. if (data[0] == 'h' && data_len == 1) {
  1347. u32_t tmp = ntohl(*((u32_t *) &data[1 + sizeof(u32_t)]));
  1348. mylog(log_debug,"[%s][hb]received hb \n",ip_port);
  1349. conn_info.last_hb_recv_time = get_current_time();
  1350. return 0;
  1351. } else if (data[0] == 'd' && data_len >=int( sizeof(u32_t) + 1))
  1352. {
  1353. u32_t tmp_conv_id = ntohl(*((u32_t *) &data[1]));
  1354. conn_info.last_hb_recv_time = get_current_time();
  1355. mylog(log_trace, "conv:%u\n", tmp_conv_id);
  1356. if (!conn_info.blob->conv_manager.is_conv_used(tmp_conv_id)) {
  1357. if (conn_info.blob->conv_manager.get_size() >= max_conv_num) {
  1358. mylog(log_warn,
  1359. "[%s]ignored new conv %x connect bc max_conv_num exceed\n",ip_port,
  1360. tmp_conv_id);
  1361. return 0;
  1362. }
  1363. struct sockaddr_in remote_addr_in;
  1364. socklen_t slen = sizeof(sockaddr_in);
  1365. memset(&remote_addr_in, 0, sizeof(remote_addr_in));
  1366. remote_addr_in.sin_family = AF_INET;
  1367. remote_addr_in.sin_port = htons(remote_port);
  1368. remote_addr_in.sin_addr.s_addr = remote_address_uint32;
  1369. int new_udp_fd = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1370. if (new_udp_fd < 0) {
  1371. mylog(log_warn, "[%s]create udp_fd error\n",ip_port);
  1372. return -1;
  1373. }
  1374. setnonblocking(new_udp_fd);
  1375. set_buf_size(new_udp_fd);
  1376. mylog(log_debug, "[%s]created new udp_fd %d\n",ip_port, new_udp_fd);
  1377. int ret = connect(new_udp_fd, (struct sockaddr *) &remote_addr_in,
  1378. slen);
  1379. if (ret != 0) {
  1380. mylog(log_warn, "udp fd connect fail\n");
  1381. close(new_udp_fd);
  1382. return -1;
  1383. }
  1384. struct epoll_event ev;
  1385. u64_t u64 = (u32_t(new_udp_fd))+(1llu<<32u);
  1386. mylog(log_trace, "[%s]u64: %lld\n",ip_port, u64);
  1387. ev.events = EPOLLIN;
  1388. ev.data.u64 = u64;
  1389. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, new_udp_fd, &ev);
  1390. if (ret != 0) {
  1391. mylog(log_warn, "[%s]add udp_fd error\n",ip_port);
  1392. close(new_udp_fd);
  1393. return -1;
  1394. }
  1395. conn_info.blob->conv_manager.insert_conv(tmp_conv_id, new_udp_fd);
  1396. assert(conn_manager.udp_fd_mp.find(new_udp_fd)==conn_manager.udp_fd_mp.end());
  1397. conn_manager.udp_fd_mp[new_udp_fd] = &conn_info;
  1398. //pack_u64(conn_info.raw_info.recv_info.src_ip,conn_info.raw_info.recv_info.src_port);
  1399. mylog(log_info, "[%s]new conv conv_id=%x, assigned fd=%d\n",ip_port,
  1400. tmp_conv_id, new_udp_fd);
  1401. }
  1402. u64_t u64 = conn_info.blob->conv_manager.find_u64_by_conv(tmp_conv_id);
  1403. conn_info.blob->conv_manager.update_active_time(tmp_conv_id);
  1404. int fd = int((u64 << 32u) >> 32u);
  1405. mylog(log_trace, "[%s]received a data from fake tcp,len:%d\n",ip_port, data_len);
  1406. int ret = send(fd, data + 1 + sizeof(u32_t),
  1407. data_len - (1 + sizeof(u32_t)), 0);
  1408. mylog(log_trace, "[%s]%d byte sent ,fd :%d\n ",ip_port, ret, fd);
  1409. if (ret < 0) {
  1410. mylog(log_warn, "send returned %d\n", ret);
  1411. //perror("what happened????");
  1412. }
  1413. return 0;
  1414. }
  1415. return 0;
  1416. }
  1417. int server_on_raw_recv_pre_ready(conn_info_t &conn_info,char * ip_port,u32_t tmp_oppsite_const_id)
  1418. {
  1419. //u32_t ip;uint16_t port;
  1420. //ip=conn_info.raw_info.recv_info.src_ip;
  1421. //port=conn_info.raw_info.recv_info.src_port;
  1422. //char ip_port[40];
  1423. //sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1424. mylog(log_info,"[%s]received handshake oppsite_id:%x my_id:%x\n",ip_port,conn_info.oppsite_id,conn_info.my_id);
  1425. mylog(log_info,"[%s]oppsite const_id:%x \n",ip_port,tmp_oppsite_const_id);
  1426. if(conn_manager.const_id_mp.find(tmp_oppsite_const_id)==conn_manager.const_id_mp.end())
  1427. {
  1428. //conn_manager.const_id_mp=
  1429. if(conn_manager.ready_num>=max_ready_conn_num)
  1430. {
  1431. mylog(log_info,"[%s]max_ready_conn_num,cant turn to ready\n",ip_port);
  1432. conn_info.state.server_current_state =server_idle;
  1433. return 0;
  1434. }
  1435. conn_info.prepare();
  1436. conn_info.state.server_current_state = server_ready;
  1437. conn_info.oppsite_const_id=tmp_oppsite_const_id;
  1438. conn_manager.ready_num++;
  1439. conn_manager.const_id_mp[tmp_oppsite_const_id]=&conn_info;
  1440. //conn_info.last_state_time=get_current_time(); //dont change this!!!!!!!!!!!!!!!!!!!!!!!!!
  1441. //conn_manager.current_ready_ip=ip;
  1442. //conn_manager.current_ready_port=port;
  1443. //my_id=conn_info.my_id;
  1444. //oppsite_id=conn_info.oppsite_id;
  1445. conn_info.last_hb_recv_time = get_current_time();
  1446. conn_info.last_hb_sent_time = conn_info.last_hb_recv_time;//=get_current_time()
  1447. send_safer(conn_info, (char *) "h", 1); /////////////send
  1448. mylog(log_info, "[%s]changed state to server_ready\n",ip_port);
  1449. conn_info.blob->anti_replay.re_init();
  1450. //g_conn_info=conn_info;
  1451. int new_timer_fd;
  1452. set_timer_server(epollfd, new_timer_fd);
  1453. conn_info.timer_fd=new_timer_fd;
  1454. assert(conn_manager.timer_fd_mp.find(new_timer_fd)==conn_manager.timer_fd_mp.end());
  1455. conn_manager.timer_fd_mp[new_timer_fd] = &conn_info;//pack_u64(ip,port);
  1456. //timer_fd_mp[new_timer_fd]
  1457. /*
  1458. if(oppsite_const_id!=0&&tmp_oppsite_const_id!=oppsite_const_id) //TODO MOVE TO READY
  1459. {
  1460. mylog(log_info,"cleared all conv bc of const id doesnt match\n");
  1461. conv_manager.clear();
  1462. }*/
  1463. //oppsite_const_id=tmp_oppsite_const_id;
  1464. }
  1465. else
  1466. {
  1467. conn_info_t &ori_conn_info=*conn_manager.const_id_mp[tmp_oppsite_const_id];
  1468. if(ori_conn_info.state.server_current_state==server_ready)
  1469. {
  1470. if(conn_info.last_state_time<ori_conn_info.last_state_time)
  1471. {
  1472. mylog(log_info,"[%s]conn_info.last_state_time<ori_conn_info.last_state_time. ignored new handshake\n",ip_port);
  1473. conn_info.state.server_current_state=server_idle;
  1474. conn_info.oppsite_const_id=0;
  1475. return 0;
  1476. }
  1477. if(!conn_manager.exist(ori_conn_info.raw_info.recv_info.src_ip,ori_conn_info.raw_info.recv_info.src_port))//TODO remove this
  1478. {
  1479. mylog(log_fatal,"[%s]this shouldnt happen\n",ip_port);
  1480. myexit(-1);
  1481. }
  1482. if(!conn_manager.exist(conn_info.raw_info.recv_info.src_ip,conn_info.raw_info.recv_info.src_port))//TODO remove this
  1483. {
  1484. mylog(log_fatal,"[%s]this shouldnt happen2\n",ip_port);
  1485. myexit(-1);
  1486. }
  1487. conn_info_t *&p_ori=conn_manager.find_insert_p(ori_conn_info.raw_info.recv_info.src_ip,ori_conn_info.raw_info.recv_info.src_port);
  1488. conn_info_t *&p=conn_manager.find_insert_p(conn_info.raw_info.recv_info.src_ip,conn_info.raw_info.recv_info.src_port);
  1489. conn_info_t *tmp=p;
  1490. p=p_ori;
  1491. p_ori=tmp;
  1492. mylog(log_info,"[%s]grabbed a connection\n",ip_port);
  1493. //ori_conn_info.state.server_current_state=server_ready;
  1494. ori_conn_info.recover(conn_info);
  1495. send_safer(ori_conn_info, (char *) "h", 1);
  1496. //ori_conn_info.blob->anti_replay.re_init();
  1497. conn_info.state.server_current_state=server_idle;
  1498. conn_info.oppsite_const_id=0;
  1499. }
  1500. else
  1501. {
  1502. mylog(log_fatal,"[%s]this should never happen\n",ip_port);
  1503. myexit(-1);
  1504. }
  1505. return 0;
  1506. }
  1507. return 0;
  1508. }
  1509. int get_src_adress(u32_t &ip)
  1510. {
  1511. struct sockaddr_in remote_addr_in;
  1512. socklen_t slen = sizeof(sockaddr_in);
  1513. memset(&remote_addr_in, 0, sizeof(remote_addr_in));
  1514. remote_addr_in.sin_family = AF_INET;
  1515. remote_addr_in.sin_port = htons(remote_port);
  1516. remote_addr_in.sin_addr.s_addr = remote_address_uint32;
  1517. int new_udp_fd=socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1518. if(new_udp_fd<0)
  1519. {
  1520. mylog(log_warn,"create udp_fd error\n");
  1521. return -1;
  1522. }
  1523. set_buf_size(new_udp_fd);
  1524. mylog(log_debug,"created new udp_fd %d\n",new_udp_fd);
  1525. int ret = connect(new_udp_fd, (struct sockaddr *) &remote_addr_in, slen);
  1526. if(ret!=0)
  1527. {
  1528. mylog(log_warn,"udp fd connect fail\n");
  1529. close(new_udp_fd);
  1530. return -1;
  1531. }
  1532. struct sockaddr_in my_addr;
  1533. unsigned int len=sizeof(my_addr);
  1534. if(getsockname(new_udp_fd, (struct sockaddr *) &my_addr, &len)!=0) return -1;
  1535. ip=my_addr.sin_addr.s_addr;
  1536. close(new_udp_fd);
  1537. return 0;
  1538. }
  1539. int client_event_loop()
  1540. {
  1541. char buf[buf_len];
  1542. conn_info_t conn_info;
  1543. conn_info.my_id=get_true_random_number_nz();
  1544. conn_info.prepare();
  1545. packet_info_t &send_info=conn_info.raw_info.send_info;
  1546. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1547. //printf("?????\n");
  1548. if(source_address_uint32==0)
  1549. {
  1550. mylog(log_info,"get_src_adress called\n");
  1551. if(get_src_adress(source_address_uint32)!=0)
  1552. {
  1553. mylog(log_fatal,"the trick to auto get source ip failed,you should specific an ip by --source-ip\n");
  1554. myexit(-1);
  1555. }
  1556. }
  1557. in_addr tmp;
  1558. tmp.s_addr=source_address_uint32;
  1559. mylog(log_info,"source ip = %s\n",inet_ntoa(tmp));
  1560. //printf("done\n");
  1561. if(try_to_list_and_bind(source_port)!=0)
  1562. {
  1563. mylog(log_fatal,"bind to source_port:%d fail\n ",source_port);
  1564. myexit(-1);
  1565. }
  1566. send_info.src_port=source_port;
  1567. send_info.src_ip = source_address_uint32;
  1568. int i, j, k;int ret;
  1569. init_raw_socket();
  1570. //init_filter(source_port);
  1571. send_info.dst_ip=remote_address_uint32;
  1572. send_info.dst_port=remote_port;
  1573. //g_packet_info.src_ip=source_address_uint32;
  1574. //g_packet_info.src_port=source_port;
  1575. udp_fd=socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1576. set_buf_size(udp_fd);
  1577. int yes = 1;
  1578. //setsockopt(udp_fd, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes));
  1579. struct sockaddr_in local_me;
  1580. socklen_t slen = sizeof(sockaddr_in);
  1581. memset(&local_me, 0, sizeof(local_me));
  1582. local_me.sin_family = AF_INET;
  1583. local_me.sin_port = htons(local_port);
  1584. local_me.sin_addr.s_addr = local_address_uint32;
  1585. if (bind(udp_fd, (struct sockaddr*) &local_me, slen) == -1) {
  1586. mylog(log_fatal,"socket bind error\n");
  1587. //perror("socket bind error");
  1588. myexit(1);
  1589. }
  1590. setnonblocking(udp_fd);
  1591. epollfd = epoll_create1(0);
  1592. const int max_events = 4096;
  1593. struct epoll_event ev, events[max_events];
  1594. if (epollfd < 0) {
  1595. mylog(log_fatal,"epoll return %d\n", epollfd);
  1596. myexit(-1);
  1597. }
  1598. ev.events = EPOLLIN;
  1599. ev.data.u64 = udp_fd;
  1600. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, udp_fd, &ev);
  1601. if (ret!=0) {
  1602. mylog(log_fatal,"add udp_listen_fd error\n");
  1603. myexit(-1);
  1604. }
  1605. ev.events = EPOLLIN;
  1606. ev.data.u64 = raw_recv_fd;
  1607. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, raw_recv_fd, &ev);
  1608. if (ret!= 0) {
  1609. mylog(log_fatal,"add raw_fd error\n");
  1610. myexit(-1);
  1611. }
  1612. ////add_timer for fake_tcp_keep_connection_client
  1613. //sleep(10);
  1614. //memset(&udp_old_addr_in,0,sizeof(sockaddr_in));
  1615. int unbind=1;
  1616. set_timer(epollfd,timer_fd);
  1617. mylog(log_debug,"send_raw : from %x %d to %x %d\n",send_info.src_ip,send_info.src_port,send_info.dst_ip,send_info.dst_port);
  1618. while(1)////////////////////////
  1619. {
  1620. if(about_to_exit) myexit(0);
  1621. epoll_trigger_counter++;
  1622. int nfds = epoll_wait(epollfd, events, max_events, 180 * 1000);
  1623. if (nfds < 0) { //allow zero
  1624. if(errno==EINTR )
  1625. {
  1626. mylog(log_info,"epoll interrupted by signal\n");
  1627. myexit(0);
  1628. }
  1629. else
  1630. {
  1631. mylog(log_fatal,"epoll_wait return %d\n", nfds);
  1632. myexit(-1);
  1633. }
  1634. }
  1635. int idx;
  1636. for (idx = 0; idx < nfds; ++idx) {
  1637. if (events[idx].data.u64 == (u64_t)raw_recv_fd)
  1638. {
  1639. iphdr *iph;tcphdr *tcph;
  1640. client_on_raw_recv(conn_info);
  1641. }
  1642. else if(events[idx].data.u64 ==(u64_t)timer_fd)
  1643. {
  1644. u64_t value;
  1645. read(timer_fd, &value, 8);
  1646. client_on_timer(conn_info);
  1647. mylog(log_trace,"epoll_trigger_counter: %d \n",epoll_trigger_counter);
  1648. epoll_trigger_counter=0;
  1649. }
  1650. else if (events[idx].data.u64 == (u64_t)udp_fd)
  1651. {
  1652. int recv_len;
  1653. struct sockaddr_in udp_new_addr_in;
  1654. if ((recv_len = recvfrom(udp_fd, buf, buf_len, 0,
  1655. (struct sockaddr *) &udp_new_addr_in, &slen)) == -1) {
  1656. mylog(log_error,"recv_from error,this shouldnt happen at client\n");
  1657. myexit(1);
  1658. };
  1659. mylog(log_trace,"Received packet from %s:%d,len: %d\n", inet_ntoa(udp_new_addr_in.sin_addr),
  1660. ntohs(udp_new_addr_in.sin_port),recv_len);
  1661. /*
  1662. if(udp_old_addr_in.sin_addr.s_addr==0&&udp_old_addr_in.sin_port==0)
  1663. {
  1664. memcpy(&udp_old_addr_in,&udp_new_addr_in,sizeof(udp_new_addr_in));
  1665. }
  1666. else if(udp_new_addr_in.sin_addr.s_addr!=udp_old_addr_in.sin_addr.s_addr
  1667. ||udp_new_addr_in.sin_port!=udp_old_addr_in.sin_port)
  1668. {
  1669. if(get_current_time()- last_udp_recv_time <udp_timeout)
  1670. {
  1671. printf("new <ip,port> connected in,ignored,bc last connection is still active\n");
  1672. continue;
  1673. }
  1674. else
  1675. {
  1676. printf("new <ip,port> connected in,accpeted\n");
  1677. memcpy(&udp_old_addr_in,&udp_new_addr_in,sizeof(udp_new_addr_in));
  1678. conv_id++;
  1679. }
  1680. }*/
  1681. //last_udp_recv_time=get_current_time();
  1682. u64_t u64=((u64_t(udp_new_addr_in.sin_addr.s_addr))<<32u)+ntohs(udp_new_addr_in.sin_port);
  1683. u32_t conv;
  1684. if(!conn_info.blob->conv_manager.is_u64_used(u64))
  1685. {
  1686. if(conn_info.blob->conv_manager.get_size() >=max_conv_num)
  1687. {
  1688. mylog(log_warn,"ignored new udp connect bc max_conv_num exceed\n");
  1689. continue;
  1690. }
  1691. conv=conn_info.blob->conv_manager.get_new_conv();
  1692. conn_info.blob->conv_manager.insert_conv(conv,u64);
  1693. mylog(log_info,"new packet from %s:%d,conv_id=%x\n",inet_ntoa(udp_new_addr_in.sin_addr),ntohs(udp_new_addr_in.sin_port),conv);
  1694. }
  1695. else
  1696. {
  1697. conv=conn_info.blob->conv_manager.find_conv_by_u64(u64);
  1698. }
  1699. conn_info.blob->conv_manager.update_active_time(conv);
  1700. if(conn_info.state.client_current_state==client_ready)
  1701. {
  1702. /*
  1703. char buf2[6000];
  1704. int ret1=send_raw(conn_info.raw_info,buf2,40);
  1705. int ret2=send_raw(conn_info.raw_info,buf2,500);
  1706. int ret3=send_raw(conn_info.raw_info,buf2,1000);
  1707. int ret4=send_raw(conn_info.raw_info,buf2,2000);
  1708. mylog(log_warn,"ret= %d %d %d %d\n",ret1,ret2,ret3,ret4);*/
  1709. send_data_safer(conn_info,buf,recv_len,conv);
  1710. }
  1711. }
  1712. else
  1713. {
  1714. mylog(log_fatal,"unknown fd,this should never happen\n");
  1715. myexit(-1);
  1716. }
  1717. }
  1718. }
  1719. return 0;
  1720. }
  1721. int server_event_loop()
  1722. {
  1723. char buf[buf_len];
  1724. int i, j, k;int ret;
  1725. bind_address_uint32=local_address_uint32;//only server has bind adress,client sets it to zero
  1726. if(raw_mode==mode_faketcp)
  1727. {
  1728. bind_fd=socket(AF_INET,SOCK_STREAM,0);
  1729. }
  1730. else if(raw_mode==mode_udp||raw_mode==mode_icmp)//bind an adress to avoid collision,for icmp,there is no port,just bind a udp port
  1731. {
  1732. bind_fd=socket(AF_INET,SOCK_DGRAM,0);
  1733. }
  1734. struct sockaddr_in temp_bind_addr;
  1735. bzero(&temp_bind_addr, sizeof(temp_bind_addr));
  1736. temp_bind_addr.sin_family = AF_INET;
  1737. temp_bind_addr.sin_port = htons(local_port);
  1738. temp_bind_addr.sin_addr.s_addr = local_address_uint32;
  1739. if (bind(bind_fd, (struct sockaddr*)&temp_bind_addr, sizeof(temp_bind_addr)) !=0)
  1740. {
  1741. mylog(log_fatal,"bind fail\n");
  1742. myexit(-1);
  1743. }
  1744. if(raw_mode==mode_faketcp)
  1745. {
  1746. if(listen(bind_fd, SOMAXCONN) != 0 )
  1747. {
  1748. mylog(log_fatal,"listen fail\n");
  1749. myexit(-1);
  1750. }
  1751. }
  1752. init_raw_socket();
  1753. init_filter(local_port);//bpf filter
  1754. epollfd = epoll_create1(0);
  1755. const int max_events = 4096;
  1756. struct epoll_event ev, events[max_events];
  1757. if (epollfd < 0) {
  1758. mylog(log_fatal,"epoll return %d\n", epollfd);
  1759. myexit(-1);
  1760. }
  1761. ev.events = EPOLLIN;
  1762. ev.data.u64 = raw_recv_fd;
  1763. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, raw_recv_fd, &ev);
  1764. if (ret!= 0) {
  1765. mylog(log_fatal,"add raw_fd error\n");
  1766. myexit(-1);
  1767. }
  1768. int timer_fd;
  1769. set_timer(epollfd,timer_fd);
  1770. u64_t begin_time=0;
  1771. u64_t end_time=0;
  1772. while(1)////////////////////////
  1773. {
  1774. if(about_to_exit) myexit(0);
  1775. int nfds = epoll_wait(epollfd, events, max_events, 180 * 1000);
  1776. if (nfds < 0) { //allow zero
  1777. if(errno==EINTR )
  1778. {
  1779. mylog(log_info,"epoll interrupted by signal\n");
  1780. myexit(0);
  1781. }
  1782. else
  1783. {
  1784. mylog(log_fatal,"epoll_wait return %d\n", nfds);
  1785. myexit(-1);
  1786. }
  1787. }
  1788. int idx;
  1789. for (idx = 0; idx < nfds; ++idx)
  1790. {
  1791. //mylog(log_debug,"ndfs: %d \n",nfds);
  1792. epoll_trigger_counter++;
  1793. //printf("%d %d %d %d\n",timer_fd,raw_recv_fd,raw_send_fd,n);
  1794. if ((events[idx].data.u64 ) == (u64_t)timer_fd)
  1795. {
  1796. if(debug_flag)begin_time=get_current_time();
  1797. conn_manager.clear_inactive();
  1798. u64_t dummy;
  1799. read(timer_fd, &dummy, 8);
  1800. //current_time_rough=get_current_time();
  1801. if(debug_flag)
  1802. {
  1803. end_time=get_current_time();
  1804. mylog(log_debug,"timer_fd,%llu,%llu,%llu\n",begin_time,end_time,end_time-begin_time);
  1805. }
  1806. mylog(log_trace,"epoll_trigger_counter: %d \n",epoll_trigger_counter);
  1807. epoll_trigger_counter=0;
  1808. }
  1809. else if (events[idx].data.u64 == (u64_t)raw_recv_fd)
  1810. {
  1811. if(debug_flag)begin_time=get_current_time();
  1812. server_on_raw_recv_multi();
  1813. if(debug_flag)
  1814. {
  1815. end_time=get_current_time();
  1816. mylog(log_debug,"raw_recv_fd,%llu,%llu,%llu \n",begin_time,end_time,end_time-begin_time);
  1817. }
  1818. }
  1819. else if ((events[idx].data.u64 >>32u) == 2u)
  1820. {
  1821. if(debug_flag)begin_time=get_current_time();
  1822. int fd=get_u64_l(events[idx].data.u64);
  1823. u64_t dummy;
  1824. read(fd, &dummy, 8);
  1825. if(conn_manager.timer_fd_mp.find(fd)==conn_manager.timer_fd_mp.end()) //this can happen,when fd is a just closed fd
  1826. {
  1827. mylog(log_info,"timer_fd no longer exits\n");
  1828. continue;
  1829. }
  1830. conn_info_t* p_conn_info=conn_manager.timer_fd_mp[fd];
  1831. u32_t ip=p_conn_info->raw_info.recv_info.src_ip;
  1832. u32_t port=p_conn_info->raw_info.recv_info.src_port;
  1833. assert(conn_manager.exist(ip,port));//TODO remove this for peformance
  1834. assert(p_conn_info->state.server_current_state == server_ready); //TODO remove this for peformance
  1835. //conn_info_t &conn_info=conn_manager.find(ip,port);
  1836. char ip_port[40];
  1837. sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1838. server_on_timer_multi(*p_conn_info,ip_port);
  1839. if(debug_flag)
  1840. {
  1841. end_time=get_current_time();
  1842. mylog(log_debug,"(events[idx].data.u64 >>32u) == 2u ,%llu,%llu,%llu \n",begin_time,end_time,end_time-begin_time);
  1843. }
  1844. }
  1845. else if ((events[idx].data.u64 >>32u) == 1u)
  1846. {
  1847. //uint32_t conv_id=events[n].data.u64>>32u;
  1848. if(debug_flag)begin_time=get_current_time();
  1849. int fd=int((events[idx].data.u64<<32u)>>32u);
  1850. if(conn_manager.udp_fd_mp.find(fd)==conn_manager.udp_fd_mp.end()) //this can happen,when fd is a just closed fd
  1851. {
  1852. mylog(log_debug,"fd no longer exists in udp_fd_mp,udp fd %d\n",fd);
  1853. recv(fd,0,0,0);
  1854. continue;
  1855. }
  1856. conn_info_t* p_conn_info=conn_manager.udp_fd_mp[fd];
  1857. u32_t ip=p_conn_info->raw_info.recv_info.src_ip;
  1858. u32_t port=p_conn_info->raw_info.recv_info.src_port;
  1859. if(!conn_manager.exist(ip,port))//TODO remove this for peformance
  1860. {
  1861. mylog(log_fatal,"ip port no longer exits 2!!!this shouldnt happen\n");
  1862. myexit(-1);
  1863. }
  1864. if(p_conn_info->state.server_current_state!=server_ready)//TODO remove this for peformance
  1865. {
  1866. mylog(log_fatal,"p_conn_info->state.server_current_state!=server_ready!!!this shouldnt happen\n");
  1867. myexit(-1);
  1868. }
  1869. conn_info_t &conn_info=*p_conn_info;
  1870. if(!conn_info.blob->conv_manager.is_u64_used(fd))
  1871. {
  1872. mylog(log_debug,"conv no longer exists,udp fd %d\n",fd);
  1873. int recv_len=recv(fd,0,0,0); ///////////TODO ,delete this
  1874. continue;
  1875. }
  1876. u32_t conv_id=conn_info.blob->conv_manager.find_conv_by_u64(fd);
  1877. int recv_len=recv(fd,buf,buf_len,0);
  1878. mylog(log_trace,"received a packet from udp_fd,len:%d\n",recv_len);
  1879. if(recv_len<0)
  1880. {
  1881. mylog(log_debug,"udp fd,recv_len<0 continue\n");
  1882. continue;
  1883. }
  1884. //conn_info.conv_manager->update_active_time(conv_id); server dosnt update from upd side,only update from raw side. (client updates at both side)
  1885. if(conn_info.state.server_current_state==server_ready)
  1886. {
  1887. send_data_safer(conn_info,buf,recv_len,conv_id);
  1888. //send_data(g_packet_info_send,buf,recv_len,my_id,oppsite_id,conv_id);
  1889. mylog(log_trace,"send_data_safer ,sent !!\n");
  1890. }
  1891. if(debug_flag)
  1892. {
  1893. end_time=get_current_time();
  1894. mylog(log_debug,"(events[idx].data.u64 >>32u) == 1u,%lld,%lld,%lld \n",begin_time,end_time,end_time-begin_time);
  1895. }
  1896. }
  1897. else
  1898. {
  1899. mylog(log_fatal,"unknown fd,this should never happen\n");
  1900. myexit(-1);
  1901. }
  1902. }
  1903. }
  1904. return 0;
  1905. }
  1906. void print_help()
  1907. {
  1908. printf("udp2raw-tunnel\n");
  1909. printf("version: %s %s\n",__DATE__,__TIME__);
  1910. printf("repository: https://github.com/wangyu-/udp2raw-tunnel\n");
  1911. printf("\n");
  1912. printf("usage:\n");
  1913. printf(" run as client : ./this_program -c -l local_listen_ip:local_port -r server_ip:server_port [options]\n");
  1914. printf(" run as server : ./this_program -s -l server_listen_ip:server_port -r remote_ip:remote_port [options]\n");
  1915. printf("\n");
  1916. printf("common options,these options must be same on both side:\n");
  1917. printf(" --raw-mode <string> avaliable values:faketcp(default),udp,icmp\n");
  1918. printf(" -k,--key <string> password to gen symetric key,default:\"secret key\"\n");
  1919. printf(" --auth-mode <string> avaliable values:aes128cbc(default),xor,none\n");
  1920. printf(" --cipher-mode <string> avaliable values:md5(default),crc32,simple,none\n");
  1921. printf(" -a,--auto-rule auto add (and delete) iptables rule\n");
  1922. printf(" -g,--gen-rule generate iptables rule then exit\n");
  1923. printf(" --disable-anti-replay disable anti-replay,not suggested\n");
  1924. //printf("\n");
  1925. printf("client options:\n");
  1926. printf(" --source-ip <ip> force source-ip for raw socket\n");
  1927. printf(" --source-port <port> force source-port for raw socket,tcp/udp only\n");
  1928. printf(" this option disables port changing while re-connecting\n");
  1929. // printf(" \n");
  1930. printf("other options:\n");
  1931. printf(" --log-level <number> 0:never 1:fatal 2:error 3:warn \n");
  1932. printf(" 4:info (default) 5:debug 6:trace\n");
  1933. // printf("\n");
  1934. printf(" --log-position enable file name,function name,line number in log\n");
  1935. printf(" --disable-color disable log color\n");
  1936. printf(" --disable-bpf disable the kernel space filter,most time its not necessary\n");
  1937. printf(" unless you suspect there is a bug\n");
  1938. // printf("\n");
  1939. printf(" --sock-buf <number> buf size for socket,>=10 and <=10240,unit:kbyte,default:1024\n");
  1940. printf(" --seqmode <number> seq increase mode for faketcp:\n");
  1941. printf(" 0:dont increase\n");
  1942. printf(" 1:increase every packet\n");
  1943. printf(" 2:increase randomly, about every 3 packets (default)\n");
  1944. // printf("\n");
  1945. printf(" -h,--help print this help message\n");
  1946. //printf("common options,these options must be same on both side\n");
  1947. }
  1948. void process_arg(int argc, char *argv[])
  1949. {
  1950. int i,j,k,opt;
  1951. static struct option long_options[] =
  1952. {
  1953. /* These options set a flag. */
  1954. {"source-ip", required_argument, 0, 1},
  1955. {"source-port", required_argument, 0, 1},
  1956. {"log-level", required_argument, 0, 1},
  1957. {"key", required_argument, 0, 'k'},
  1958. {"auth-mode", required_argument, 0, 1},
  1959. {"cipher-mode", required_argument, 0, 1},
  1960. {"raw-mode", required_argument, 0, 1},
  1961. {"disable-color", no_argument, 0, 1},
  1962. {"log-position", no_argument, 0, 1},
  1963. {"disable-bpf", no_argument, 0, 1},
  1964. {"disable-anti-replay", no_argument, 0, 1},
  1965. {"auto-rule", no_argument, 0, 'a'},
  1966. {"gen-rule", no_argument, 0, 'g'},
  1967. {"debug", no_argument, 0, 1},
  1968. {"clear", no_argument, 0, 1},
  1969. {"sock-buf", required_argument, 0, 1},
  1970. {"seq-mode", required_argument, 0, 1},
  1971. {NULL, 0, 0, 0}
  1972. };
  1973. int option_index = 0;
  1974. for (i = 0; i < argc; i++)
  1975. {
  1976. if(strcmp(argv[i],"-h")==0||strcmp(argv[i],"--help")==0)
  1977. {
  1978. print_help();
  1979. myexit(0);
  1980. }
  1981. }
  1982. for (i = 0; i < argc; i++)
  1983. {
  1984. if(strcmp(argv[i],"--log-level")==0)
  1985. {
  1986. if(i<argc -1)
  1987. {
  1988. sscanf(argv[i+1],"%d",&log_level);
  1989. if(0<=log_level&&log_level<log_end)
  1990. {
  1991. }
  1992. else
  1993. {
  1994. log_bare(log_fatal,"invalid log_level\n");
  1995. myexit(-1);
  1996. }
  1997. }
  1998. }
  1999. if(strcmp(argv[i],"--disable-color")==0)
  2000. {
  2001. enable_log_color=0;
  2002. }
  2003. }
  2004. mylog(log_info,"argc=%d ", argc);
  2005. for (i = 0; i < argc; i++) {
  2006. log_bare(log_info, "%s ", argv[i]);
  2007. }
  2008. log_bare(log_info, "\n");
  2009. if (argc == 1)
  2010. {
  2011. print_help();
  2012. myexit(-1);
  2013. }
  2014. int no_l = 1, no_r = 1;
  2015. while ((opt = getopt_long(argc, argv, "l:r:schk:ag",long_options,&option_index)) != -1) {
  2016. //string opt_key;
  2017. //opt_key+=opt;
  2018. switch (opt) {
  2019. case 'l':
  2020. no_l = 0;
  2021. if (strchr(optarg, ':') != 0) {
  2022. sscanf(optarg, "%[^:]:%d", local_address, &local_port);
  2023. if(local_port==22)
  2024. {
  2025. mylog(log_fatal,"port 22 not allowed\n");
  2026. myexit(-1);
  2027. }
  2028. } else {
  2029. mylog(log_fatal,"invalid parameter for -l ,%s,should be ip:port\n",optarg);
  2030. myexit(-1);
  2031. }
  2032. break;
  2033. case 'r':
  2034. no_r = 0;
  2035. if (strchr(optarg, ':') != 0) {
  2036. sscanf(optarg, "%[^:]:%d", remote_address, &remote_port);
  2037. if(remote_port==22)
  2038. {
  2039. mylog(log_fatal,"port 22 not allowed\n");
  2040. myexit(-1);
  2041. }
  2042. } else {
  2043. mylog(log_fatal,"invalid parameter for -r ,%s,should be ip:port\n",optarg);
  2044. myexit(-1);
  2045. }
  2046. break;
  2047. case 's':
  2048. if(program_mode==0)
  2049. {
  2050. program_mode=server_mode;
  2051. }
  2052. else
  2053. {
  2054. mylog(log_fatal,"-s /-c has already been set,conflict\n");
  2055. myexit(-1);
  2056. }
  2057. break;
  2058. case 'c':
  2059. if(program_mode==0)
  2060. {
  2061. program_mode=client_mode;
  2062. }
  2063. else
  2064. {
  2065. mylog(log_fatal,"-s /-c has already been set,conflict\n");
  2066. myexit(-1);
  2067. }
  2068. break;
  2069. case 'h':
  2070. break;
  2071. case 'a':
  2072. auto_add_iptables_rule=1;
  2073. break;
  2074. case 'g':
  2075. generate_iptables_rule=1;
  2076. break;
  2077. case 'k':
  2078. mylog(log_debug,"parsing key option\n");
  2079. sscanf(optarg,"%s",key_string);
  2080. break;
  2081. case 1:
  2082. mylog(log_debug,"option_index: %d\n",option_index);
  2083. if(strcmp(long_options[option_index].name,"clear")==0)
  2084. {
  2085. int ret =system("iptables-save |grep udp2raw_dWRwMnJhdw|sed -n 's/^-A/iptables -D/p'|sh");
  2086. //system("iptables-save |grep udp2raw_dWRwMnJhdw|sed 's/^-A/iptables -D/'|sh");
  2087. //system("iptables-save|grep -v udp2raw_dWRwMnJhdw|iptables-restore");
  2088. mylog(log_info,"tried to clear all iptables rule created previously,return value %d\n",ret);
  2089. myexit(-1);
  2090. }
  2091. else if(strcmp(long_options[option_index].name,"source-ip")==0)
  2092. {
  2093. mylog(log_debug,"parsing long option :source-ip\n");
  2094. sscanf(optarg, "%s", source_address);
  2095. mylog(log_debug,"source: %s\n",source_address);
  2096. }
  2097. else if(strcmp(long_options[option_index].name,"source-port")==0)
  2098. {
  2099. mylog(log_debug,"parsing long option :source-port\n");
  2100. sscanf(optarg, "%d", &source_port);
  2101. mylog(log_info,"source: %d\n",source_port);
  2102. }
  2103. else if(strcmp(long_options[option_index].name,"raw-mode")==0)
  2104. {
  2105. for(i=0;i<mode_end;i++)
  2106. {
  2107. if(strcmp(optarg,raw_mode_tostring[i])==0)
  2108. {
  2109. //printf("%d i\n",i);
  2110. //printf("%s",raw_mode_tostring[i]);
  2111. raw_mode=(raw_mode_t)i;
  2112. break;
  2113. }
  2114. }
  2115. if(i==mode_end)
  2116. {
  2117. mylog(log_fatal,"no such raw_mode %s\n",optarg);
  2118. myexit(-1);
  2119. }
  2120. }
  2121. else if(strcmp(long_options[option_index].name,"auth-mode")==0)
  2122. {
  2123. for(i=0;i<auth_end;i++)
  2124. {
  2125. if(strcmp(optarg,auth_mode_tostring[i])==0)
  2126. {
  2127. auth_mode=(auth_mode_t)i;
  2128. break;
  2129. }
  2130. }
  2131. if(i==auth_end)
  2132. {
  2133. mylog(log_fatal,"no such auth_mode %s\n",optarg);
  2134. myexit(-1);
  2135. }
  2136. }
  2137. else if(strcmp(long_options[option_index].name,"cipher-mode")==0)
  2138. {
  2139. for(i=0;i<cipher_end;i++)
  2140. {
  2141. if(strcmp(optarg,cipher_mode_tostring[i])==0)
  2142. {
  2143. cipher_mode=(cipher_mode_t)i;
  2144. break;
  2145. }
  2146. }
  2147. if(i==cipher_end)
  2148. {
  2149. mylog(log_fatal,"no such cipher_mode %s\n",optarg);
  2150. myexit(-1);
  2151. }
  2152. }
  2153. else if(strcmp(long_options[option_index].name,"log-level")==0)
  2154. {
  2155. }
  2156. else if(strcmp(long_options[option_index].name,"disable-color")==0)
  2157. {
  2158. //enable_log_color=0;
  2159. }
  2160. else if(strcmp(long_options[option_index].name,"debug")==0)
  2161. {
  2162. debug_flag=1;
  2163. //enable_log_color=0;
  2164. }
  2165. else if(strcmp(long_options[option_index].name,"debug-resend")==0)
  2166. {
  2167. //debug_resend=1;
  2168. //enable_log_color=0;
  2169. }
  2170. else if(strcmp(long_options[option_index].name,"log-position")==0)
  2171. {
  2172. enable_log_position=1;
  2173. }
  2174. else if(strcmp(long_options[option_index].name,"disable-bpf")==0)
  2175. {
  2176. disable_bpf_filter=1;
  2177. }
  2178. else if(strcmp(long_options[option_index].name,"disable-anti-replay")==0)
  2179. {
  2180. disable_anti_replay=1;
  2181. }
  2182. else if(strcmp(long_options[option_index].name,"sock-buf")==0)
  2183. {
  2184. int tmp=-1;
  2185. sscanf(optarg,"%d",&tmp);
  2186. if(10<=tmp&&tmp<=10*1024)
  2187. {
  2188. socket_buf_size=tmp*1024;
  2189. }
  2190. else
  2191. {
  2192. mylog(log_fatal,"sock-buf value must be between 1 and 10240 (kbyte) \n");
  2193. myexit(-1);
  2194. }
  2195. }
  2196. else if(strcmp(long_options[option_index].name,"seq-mode")==0)
  2197. {
  2198. sscanf(optarg,"%d",&seq_mode);
  2199. if(0<=seq_mode&&seq_mode<=2)
  2200. {
  2201. }
  2202. else
  2203. {
  2204. mylog(log_fatal,"seq_mode value must be 0,1,or 2 \n");
  2205. myexit(-1);
  2206. }
  2207. }
  2208. else
  2209. {
  2210. mylog(log_warn,"ignored unknown long option ,option_index:%d code:<%x>\n",option_index, optopt);
  2211. }
  2212. break;
  2213. default:
  2214. mylog(log_fatal,"unknown option ,code:<%c>,<%x>\n",optopt, optopt);
  2215. myexit(-1);
  2216. }
  2217. }
  2218. if (no_l)
  2219. mylog(log_fatal,"error: -l not found\n");
  2220. if (no_r)
  2221. mylog(log_fatal,"error: -r not found\n");
  2222. if(program_mode==0)
  2223. mylog(log_fatal,"error: -c /-s hasnt been set\n");
  2224. if (no_l || no_r||program_mode==0)
  2225. {
  2226. print_help();
  2227. myexit(-1);
  2228. }
  2229. mylog(log_info,"important variables: ");
  2230. log_bare(log_info,"log_level=%d:%s ",log_level,log_text[log_level]);
  2231. log_bare(log_info,"raw_mode=%s ",raw_mode_tostring[raw_mode]);
  2232. log_bare(log_info,"cipher_mode=%s ",cipher_mode_tostring[cipher_mode]);
  2233. log_bare(log_info,"auth_mode=%s ",auth_mode_tostring[auth_mode]);
  2234. log_bare(log_info,"key=%s ",key_string);
  2235. log_bare(log_info,"local_ip=%s ",local_address);
  2236. log_bare(log_info,"local_port=%d ",local_port);
  2237. log_bare(log_info,"remote_ip=%s ",remote_address);
  2238. log_bare(log_info,"remote_port=%d ",remote_port);
  2239. log_bare(log_info,"source_ip=%s ",source_address);
  2240. log_bare(log_info,"source_port=%d ",source_port);
  2241. log_bare(log_info,"socket_buf_size=%d ",socket_buf_size);
  2242. log_bare(log_info,"\n");
  2243. }
  2244. void iptables_rule()
  2245. {
  2246. char rule[200];
  2247. if(program_mode==client_mode)
  2248. {
  2249. if(raw_mode==mode_faketcp)
  2250. {
  2251. sprintf(rule,"INPUT -s %s/32 -p tcp -m tcp --sport %d -j DROP",remote_address,remote_port);
  2252. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -s %s/32 -p tcp -m tcp --sport %d -j DROP\n",remote_address,remote_port);
  2253. }
  2254. if(raw_mode==mode_udp)
  2255. {
  2256. sprintf(rule,"INPUT -s %s/32 -p udp -m udp --sport %d -j DROP",remote_address,remote_port);
  2257. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -s %s/32 -p udp -m udp --sport %d -j DROP\n",remote_address,remote_port);
  2258. }
  2259. if(raw_mode==mode_icmp)
  2260. {
  2261. sprintf(rule,"INPUT -s %s/32 -p icmp -j DROP",remote_address);
  2262. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -s %s/32 -p icmp -j DROP\n",remote_address);
  2263. }
  2264. }
  2265. if(program_mode==server_mode)
  2266. {
  2267. if(raw_mode==mode_faketcp)
  2268. {
  2269. sprintf(rule,"INPUT -p tcp -m tcp --dport %d -j DROP",local_port);
  2270. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -p tcp -m tcp --dport %d -j DROP\n",local_port);
  2271. }
  2272. if(raw_mode==mode_udp)
  2273. {
  2274. sprintf(rule,"INPUT -p udp -m udp --dport %d -j DROP",local_port);
  2275. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -p udp -m udp --udp %d -j DROP\n",local_port);
  2276. }
  2277. if(raw_mode==mode_icmp)
  2278. {
  2279. if(local_address_uint32==0)
  2280. {
  2281. sprintf(rule,"INPUT -p icmp -j DROP");
  2282. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -p icmp -j DROP\n");
  2283. }
  2284. else
  2285. {
  2286. sprintf(rule,"INPUT -d %s/32 -p icmp -j DROP",local_address);
  2287. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -d %s/32 -p icmp -j DROP\n",local_address);
  2288. }
  2289. }
  2290. }
  2291. if(generate_iptables_rule)
  2292. {
  2293. printf("generated iptables rule:\n");
  2294. printf("iptables -I %s\n",rule);
  2295. myexit(-1);
  2296. }
  2297. else if(auto_add_iptables_rule)
  2298. {
  2299. strcat(rule," -m comment --comment udp2raw_dWRwMnJhdw_");
  2300. char const_id_str[100];
  2301. sprintf(const_id_str,"%x_",const_id);
  2302. strcat(rule,const_id_str);
  2303. time_t timer;
  2304. char buffer[26];
  2305. struct tm* tm_info;
  2306. time(&timer);
  2307. tm_info = localtime(&timer);
  2308. strftime(buffer, 26, "%Y-%m-%d-%H:%M:%S", tm_info);
  2309. strcat(rule,buffer);
  2310. add_iptables_rule(rule);
  2311. }
  2312. else
  2313. {
  2314. mylog(log_warn,"make sure you have run once: iptables -I %s\n",rule);
  2315. }
  2316. }
  2317. int main(int argc, char *argv[])
  2318. {
  2319. //printf("%d %d %d %d",larger_than_u32(1,2),larger_than_u32(2,1),larger_than_u32(0xeeaaeebb,2),larger_than_u32(2,0xeeaaeebb));
  2320. //assert(0==1);
  2321. dup2(1, 2);//redirect stderr to stdout
  2322. signal(SIGINT, signal_handler);
  2323. signal(SIGHUP, signal_handler);
  2324. signal(SIGKILL, signal_handler);
  2325. signal(SIGTERM, signal_handler);
  2326. signal(SIGQUIT, signal_handler);
  2327. process_arg(argc,argv);
  2328. local_address_uint32=inet_addr(local_address);
  2329. remote_address_uint32=inet_addr(remote_address);
  2330. source_address_uint32=inet_addr(source_address);
  2331. //current_time_rough=get_current_time();
  2332. init_random_number_fd();
  2333. srand(get_true_random_number_nz());
  2334. const_id=get_true_random_number_nz();
  2335. mylog(log_info,"const_id:%x\n",const_id);
  2336. char tmp[1000]="";
  2337. strcat(tmp,key_string);
  2338. strcat(tmp,"key1");
  2339. md5((uint8_t*)tmp,strlen(tmp),(uint8_t*)key);
  2340. /*
  2341. tmp[0]=0;
  2342. strcat(tmp,key_string);
  2343. strcat(tmp,"key2");
  2344. md5((uint8_t*)tmp,strlen(tmp),(uint8_t*)key2);*/
  2345. iptables_rule();
  2346. if(program_mode==client_mode)
  2347. {
  2348. client_event_loop();
  2349. }
  2350. else
  2351. {
  2352. server_event_loop();
  2353. }
  2354. return 0;
  2355. }