main.cpp 74 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776277727782779278027812782278327842785278627872788278927902791279227932794279527962797279827992800280128022803280428052806280728082809281028112812281328142815281628172818281928202821282228232824282528262827282828292830283128322833283428352836283728382839284028412842284328442845284628472848284928502851285228532854285528562857
  1. #include "common.h"
  2. #include "network.h"
  3. #include "log.h"
  4. #include "lib/md5.h"
  5. char local_address[100]="0.0.0.0", remote_address[100]="255.255.255.255",source_address[100]="0.0.0.0";
  6. u32_t local_address_uint32,remote_address_uint32,source_address_uint32;
  7. int source_port=0,local_port = -1, remote_port = -1;
  8. id_t const_id=0;
  9. const int disable_conv_clear=0;
  10. const int disable_conn_clear=0;
  11. enum server_current_state_t {server_idle=0,server_handshake1,server_ready};
  12. enum client_current_state_t {client_idle=0,client_tcp_handshake,client_handshake1,client_handshake2,client_ready};
  13. union current_state_t
  14. {
  15. server_current_state_t server_current_state;
  16. client_current_state_t client_current_state;
  17. };
  18. int udp_fd=-1; //for client only
  19. int bind_fd=-1; //bind only,never send or recv
  20. int epollfd=-1;
  21. int timer_fd=-1;
  22. int fail_time_counter=0;
  23. int epoll_trigger_counter=0;
  24. int debug_flag=0;
  25. int auto_add_iptables_rule=0;
  26. int generate_iptables_rule=0;
  27. int debug_resend=0;
  28. int disable_anti_replay=0;
  29. char key_string[1000]= "secret key";
  30. char key[16];//,key2[16];
  31. int mtu_warn=1375;
  32. //uint64_t current_time_rough=0;
  33. int VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV;
  34. ////////==============================variable divider=============================================================
  35. struct anti_replay_t
  36. {
  37. u64_t max_packet_received;
  38. char window[anti_replay_window_size];
  39. anti_replay_seq_t anti_replay_seq;
  40. anti_replay_seq_t get_new_seq_for_send()
  41. {
  42. return anti_replay_seq++;
  43. }
  44. anti_replay_t()
  45. {
  46. max_packet_received=0;
  47. anti_replay_seq=get_true_random_number_64()/10;//random first seq
  48. //memset(window,0,sizeof(window)); //not necessary
  49. }
  50. void re_init()
  51. {
  52. max_packet_received=0;
  53. //memset(window,0,sizeof(window));
  54. }
  55. int is_vaild(u64_t seq)
  56. {
  57. if(disable_anti_replay) return 1;
  58. //if(disabled) return 0;
  59. if(seq==max_packet_received) return 0;
  60. else if(seq>max_packet_received)
  61. {
  62. if(seq-max_packet_received>=anti_replay_window_size)
  63. {
  64. memset(window,0,sizeof(window));
  65. window[seq%anti_replay_window_size]=1;
  66. }
  67. else
  68. {
  69. for (u64_t i=max_packet_received+1;i<seq;i++)
  70. window[i%anti_replay_window_size]=0;
  71. window[seq%anti_replay_window_size]=1;
  72. }
  73. max_packet_received=seq;
  74. return 1;
  75. }
  76. else if(seq<max_packet_received)
  77. {
  78. if(max_packet_received-seq>=anti_replay_window_size) return 0;
  79. else
  80. {
  81. if (window[seq%anti_replay_window_size]==1) return 0;
  82. else
  83. {
  84. window[seq%anti_replay_window_size]=1;
  85. return 1;
  86. }
  87. }
  88. }
  89. return 0; //for complier check
  90. }
  91. };//anti_replay;
  92. void server_clear_function(u64_t u64);
  93. struct conv_manager_t //TODO change map to unordered map
  94. {
  95. //typedef hash_map map;
  96. unordered_map<u64_t,u32_t> u64_to_conv; //conv and u64 are both supposed to be uniq
  97. unordered_map<u32_t,u64_t> conv_to_u64;
  98. unordered_map<u32_t,u64_t> conv_last_active_time;
  99. unordered_map<u32_t,u64_t>::iterator clear_it;
  100. unordered_map<u32_t,u64_t>::iterator it;
  101. unordered_map<u32_t,u64_t>::iterator old_it;
  102. //void (*clear_function)(uint64_t u64) ;
  103. long long last_clear_time;
  104. conv_manager_t()
  105. {
  106. clear_it=conv_last_active_time.begin();
  107. long long last_clear_time=0;
  108. //clear_function=0;
  109. }
  110. ~conv_manager_t()
  111. {
  112. clear();
  113. }
  114. int get_size()
  115. {
  116. return conv_to_u64.size();
  117. }
  118. void reserve()
  119. {
  120. u64_to_conv.reserve(10007);
  121. conv_to_u64.reserve(10007);
  122. conv_last_active_time.reserve(10007);
  123. }
  124. void clear()
  125. {
  126. if(disable_conv_clear) return ;
  127. if(program_mode==server_mode)
  128. {
  129. for(it=conv_to_u64.begin();it!=conv_to_u64.end();it++)
  130. {
  131. //int fd=int((it->second<<32u)>>32u);
  132. server_clear_function( it->second);
  133. }
  134. }
  135. u64_to_conv.clear();
  136. conv_to_u64.clear();
  137. conv_last_active_time.clear();
  138. clear_it=conv_last_active_time.begin();
  139. }
  140. u32_t get_new_conv()
  141. {
  142. u32_t conv=get_true_random_number_nz();
  143. while(conv_to_u64.find(conv)!=conv_to_u64.end())
  144. {
  145. conv=get_true_random_number_nz();
  146. }
  147. return conv;
  148. }
  149. int is_conv_used(u32_t conv)
  150. {
  151. return conv_to_u64.find(conv)!=conv_to_u64.end();
  152. }
  153. int is_u64_used(u64_t u64)
  154. {
  155. return u64_to_conv.find(u64)!=u64_to_conv.end();
  156. }
  157. u32_t find_conv_by_u64(u64_t u64)
  158. {
  159. return u64_to_conv[u64];
  160. }
  161. u64_t find_u64_by_conv(u32_t conv)
  162. {
  163. return conv_to_u64[conv];
  164. }
  165. int update_active_time(u32_t conv)
  166. {
  167. return conv_last_active_time[conv]=get_current_time();
  168. }
  169. int insert_conv(u32_t conv,u64_t u64)
  170. {
  171. u64_to_conv[u64]=conv;
  172. conv_to_u64[conv]=u64;
  173. conv_last_active_time[conv]=get_current_time();
  174. return 0;
  175. }
  176. int erase_conv(u32_t conv)
  177. {
  178. if(disable_conv_clear) return 0;
  179. u64_t u64=conv_to_u64[conv];
  180. if(program_mode==server_mode)
  181. {
  182. server_clear_function(u64);
  183. }
  184. conv_to_u64.erase(conv);
  185. u64_to_conv.erase(u64);
  186. conv_last_active_time.erase(conv);
  187. return 0;
  188. }
  189. int clear_inactive(char * ip_port=0)
  190. {
  191. if(get_current_time()-last_clear_time>conv_clear_interval)
  192. {
  193. last_clear_time=get_current_time();
  194. return clear_inactive0(ip_port);
  195. }
  196. return 0;
  197. }
  198. int clear_inactive0(char * ip_port)
  199. {
  200. if(disable_conv_clear) return 0;
  201. //map<uint32_t,uint64_t>::iterator it;
  202. int cnt=0;
  203. it=clear_it;
  204. int size=conv_last_active_time.size();
  205. int num_to_clean=size/conv_clear_ratio+conv_clear_min; //clear 1/10 each time,to avoid latency glitch
  206. u64_t current_time=get_current_time();
  207. for(;;)
  208. {
  209. if(cnt>=num_to_clean) break;
  210. if(conv_last_active_time.begin()==conv_last_active_time.end()) break;
  211. if(it==conv_last_active_time.end())
  212. {
  213. it=conv_last_active_time.begin();
  214. }
  215. if( current_time -it->second >conv_timeout )
  216. {
  217. //mylog(log_info,"inactive conv %u cleared \n",it->first);
  218. old_it=it;
  219. it++;
  220. u32_t conv= old_it->first;
  221. erase_conv(old_it->first);
  222. if(ip_port==0)
  223. {
  224. mylog(log_info,"conv %x cleared\n",conv);
  225. }
  226. else
  227. {
  228. mylog(log_info,"[%s]conv %x cleared\n",ip_port,conv);
  229. }
  230. }
  231. else
  232. {
  233. it++;
  234. }
  235. cnt++;
  236. }
  237. return 0;
  238. }
  239. };//g_conv_manager;
  240. struct blob_t
  241. {
  242. conv_manager_t conv_manager;
  243. anti_replay_t anti_replay;
  244. };
  245. struct conn_info_t
  246. {
  247. current_state_t state;
  248. raw_info_t raw_info;
  249. u64_t last_state_time;
  250. u64_t last_hb_sent_time; //client re-use this for retry
  251. u64_t last_hb_recv_time;
  252. //long long last_resent_time;
  253. id_t my_id;
  254. id_t oppsite_id;
  255. int timer_fd;
  256. id_t oppsite_const_id;
  257. blob_t *blob;
  258. uint8_t my_roller;
  259. uint8_t oppsite_roller;
  260. u64_t last_oppsite_roller_time;
  261. /*
  262. const uint32_t &ip=raw_info.recv_info.src_ip;
  263. const uint16_t &port=raw_info.recv_info.src_port;
  264. */
  265. void recover(const conn_info_t &conn_info)
  266. {
  267. raw_info=conn_info.raw_info;
  268. last_state_time=conn_info.last_state_time;
  269. last_hb_recv_time=conn_info.last_hb_recv_time;
  270. last_hb_sent_time=conn_info.last_hb_sent_time;
  271. my_id=conn_info.my_id;
  272. oppsite_id=conn_info.oppsite_id;
  273. blob->anti_replay.re_init();
  274. my_roller=0;//no need to set,but for easier debug,set it to zero
  275. oppsite_roller=0;//same as above
  276. last_oppsite_roller_time=0;
  277. }
  278. void re_init()
  279. {
  280. //send_packet_info.protocol=g_packet_info_send.protocol;
  281. if(program_mode==server_mode)
  282. state.server_current_state=server_idle;
  283. else
  284. state.client_current_state=client_idle;
  285. last_state_time=0;
  286. oppsite_const_id=0;
  287. timer_fd=0;
  288. my_roller=0;
  289. oppsite_roller=0;
  290. last_oppsite_roller_time=0;
  291. }
  292. conn_info_t()
  293. {
  294. blob=0;
  295. re_init();
  296. }
  297. void prepare()
  298. {
  299. blob=new blob_t;
  300. }
  301. conn_info_t(const conn_info_t&b)
  302. {
  303. //mylog(log_error,"called!!!!!!!!!!!!!\n");
  304. *this=b;
  305. if(blob!=0)
  306. {
  307. blob=new blob_t(*b.blob);
  308. }
  309. }
  310. conn_info_t& operator=(const conn_info_t& b)
  311. {
  312. mylog(log_fatal,"not allowed\n");
  313. myexit(-1);
  314. return *this;
  315. }
  316. ~conn_info_t();
  317. };//g_conn_info;
  318. struct conn_manager_t
  319. {
  320. u32_t ready_num;
  321. unordered_map<int,conn_info_t *> udp_fd_mp; //a bit dirty to used pointer,but can void unordered_map search
  322. unordered_map<int,conn_info_t *> timer_fd_mp;//we can use pointer here since unordered_map.rehash() uses shallow copy
  323. unordered_map<id_t,conn_info_t *> const_id_mp;
  324. unordered_map<u64_t,conn_info_t*> mp; //put it at end so that it de-consturcts first
  325. unordered_map<u64_t,conn_info_t*>::iterator clear_it;
  326. long long last_clear_time;
  327. conn_manager_t()
  328. {
  329. ready_num=0;
  330. mp.reserve(10007);
  331. clear_it=mp.begin();
  332. timer_fd_mp.reserve(10007);
  333. const_id_mp.reserve(10007);
  334. udp_fd_mp.reserve(100007);
  335. last_clear_time=0;
  336. //current_ready_ip=0;
  337. // current_ready_port=0;
  338. }
  339. int exist(u32_t ip,uint16_t port)
  340. {
  341. u64_t u64=0;
  342. u64=ip;
  343. u64<<=32u;
  344. u64|=port;
  345. if(mp.find(u64)!=mp.end())
  346. {
  347. return 1;
  348. }
  349. return 0;
  350. }
  351. /*
  352. int insert(uint32_t ip,uint16_t port)
  353. {
  354. uint64_t u64=0;
  355. u64=ip;
  356. u64<<=32u;
  357. u64|=port;
  358. mp[u64];
  359. return 0;
  360. }*/
  361. conn_info_t *& find_insert_p(u32_t ip,uint16_t port) //be aware,the adress may change after rehash
  362. {
  363. u64_t u64=0;
  364. u64=ip;
  365. u64<<=32u;
  366. u64|=port;
  367. unordered_map<u64_t,conn_info_t*>::iterator it=mp.find(u64);
  368. if(it==mp.end())
  369. {
  370. mp[u64]=new conn_info_t;
  371. }
  372. return mp[u64];
  373. }
  374. conn_info_t & find_insert(u32_t ip,uint16_t port) //be aware,the adress may change after rehash
  375. {
  376. u64_t u64=0;
  377. u64=ip;
  378. u64<<=32u;
  379. u64|=port;
  380. unordered_map<u64_t,conn_info_t*>::iterator it=mp.find(u64);
  381. if(it==mp.end())
  382. {
  383. mp[u64]=new conn_info_t;
  384. }
  385. return *mp[u64];
  386. }
  387. int erase(unordered_map<u64_t,conn_info_t*>::iterator erase_it)
  388. {
  389. if(erase_it->second->state.server_current_state==server_ready)
  390. {
  391. ready_num--;
  392. assert(i32_t(ready_num)!=-1);
  393. assert(erase_it->second!=0);
  394. assert(erase_it->second->timer_fd !=0);
  395. assert(erase_it->second->oppsite_const_id!=0);
  396. assert(const_id_mp.find(erase_it->second->oppsite_const_id)!=const_id_mp.end());
  397. assert(timer_fd_mp.find(erase_it->second->timer_fd)!=timer_fd_mp.end());
  398. const_id_mp.erase(erase_it->second->oppsite_const_id);
  399. timer_fd_mp.erase(erase_it->second->timer_fd);
  400. close(erase_it->second->timer_fd);// close will auto delte it from epoll
  401. delete(erase_it->second);
  402. mp.erase(erase_it->first);
  403. }
  404. else
  405. {
  406. assert(erase_it->second->blob==0);
  407. assert(erase_it->second->timer_fd ==0);
  408. assert(erase_it->second->oppsite_const_id==0);
  409. delete(erase_it->second);
  410. mp.erase(erase_it->first);
  411. }
  412. return 0;
  413. }
  414. int clear_inactive()
  415. {
  416. if(get_current_time()-last_clear_time>conn_clear_interval)
  417. {
  418. last_clear_time=get_current_time();
  419. return clear_inactive0();
  420. }
  421. return 0;
  422. }
  423. int clear_inactive0()
  424. {
  425. unordered_map<u64_t,conn_info_t*>::iterator it;
  426. unordered_map<u64_t,conn_info_t*>::iterator old_it;
  427. if(disable_conn_clear) return 0;
  428. //map<uint32_t,uint64_t>::iterator it;
  429. int cnt=0;
  430. it=clear_it;
  431. int size=mp.size();
  432. int num_to_clean=size/conn_clear_ratio+conn_clear_min; //clear 1/10 each time,to avoid latency glitch
  433. mylog(log_trace,"mp.size() %d\n", size);
  434. num_to_clean=min(num_to_clean,(int)mp.size());
  435. u64_t current_time=get_current_time();
  436. for(;;)
  437. {
  438. if(cnt>=num_to_clean) break;
  439. if(mp.begin()==mp.end()) break;
  440. if(it==mp.end())
  441. {
  442. it=mp.begin();
  443. }
  444. if(it->second->state.server_current_state==server_ready &&current_time - it->second->last_hb_recv_time <=server_conn_timeout)
  445. {
  446. it++;
  447. }
  448. else if(it->second->state.server_current_state!=server_ready&& current_time - it->second->last_state_time <=server_handshake_timeout )
  449. {
  450. it++;
  451. }
  452. else if(it->second->blob!=0&&it->second->blob->conv_manager.get_size() >0)
  453. {
  454. assert(it->second->state.server_current_state==server_ready);
  455. it++;
  456. }
  457. else
  458. {
  459. mylog(log_info,"[%s:%d]inactive conn cleared \n",my_ntoa(it->second->raw_info.recv_info.src_ip),it->second->raw_info.recv_info.src_port);
  460. old_it=it;
  461. it++;
  462. erase(old_it);
  463. }
  464. cnt++;
  465. }
  466. return 0;
  467. }
  468. }conn_manager;
  469. conn_info_t::~conn_info_t()
  470. {
  471. if(program_mode==server_mode)
  472. {
  473. if(state.server_current_state==server_ready)
  474. {
  475. assert(blob!=0);
  476. assert(oppsite_const_id!=0);
  477. //assert(conn_manager.const_id_mp.find(oppsite_const_id)!=conn_manager.const_id_mp.end()); // conn_manager 's deconstuction function erases it
  478. }
  479. else
  480. {
  481. assert(blob==0);
  482. assert(oppsite_const_id==0);
  483. }
  484. }
  485. //if(oppsite_const_id!=0) //do this at conn_manager 's deconstuction function
  486. //conn_manager.const_id_mp.erase(oppsite_const_id);
  487. if(blob!=0)
  488. delete blob;
  489. //send_packet_info.protocol=g_packet_info_send.protocol;
  490. }
  491. int TTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTT;
  492. ////////==========================type divider=======================================================
  493. int server_on_raw_recv_pre_ready(conn_info_t &conn_info,char * ip_port,u32_t tmp_oppsite_const_id);
  494. int server_on_raw_recv_ready(conn_info_t &conn_info,char * ip_port,char type,char *data,int data_len);
  495. int server_on_raw_recv_handshake1(conn_info_t &conn_info,char * ip_port,char * data, int data_len);
  496. int DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD;
  497. ////////////////=======================declear divider=============================
  498. void server_clear_function(u64_t u64)
  499. {
  500. int fd=int(u64);
  501. int ret;
  502. assert(fd!=0);
  503. /*
  504. epoll_event ev;
  505. ev.events = EPOLLIN;
  506. ev.data.u64 = u64;
  507. ret = epoll_ctl(epollfd, EPOLL_CTL_DEL, fd, &ev);
  508. if (ret!=0)
  509. {
  510. mylog(log_fatal,"fd:%d epoll delete failed!!!!\n",fd);
  511. myexit(-1); //this shouldnt happen
  512. }*/ //no need
  513. ret= close(fd); //closed fd should be auto removed from epoll
  514. if (ret!=0)
  515. {
  516. mylog(log_fatal,"close fd %d failed !!!!\n",fd);
  517. myexit(-1); //this shouldnt happen
  518. }
  519. //mylog(log_fatal,"size:%d !!!!\n",conn_manager.udp_fd_mp.size());
  520. assert(conn_manager.udp_fd_mp.find(fd)!=conn_manager.udp_fd_mp.end());
  521. conn_manager.udp_fd_mp.erase(fd);
  522. }
  523. int send_bare(raw_info_t &raw_info,const char* data,int len)
  524. {
  525. if(len<0)
  526. {
  527. mylog(log_debug,"input_len <0\n");
  528. return -1;
  529. }
  530. packet_info_t &send_info=raw_info.send_info;
  531. packet_info_t &recv_info=raw_info.recv_info;
  532. char send_data_buf[buf_len]; //buf for send data and send hb
  533. char send_data_buf2[buf_len];
  534. //static send_bare[buf_len];
  535. iv_t iv=get_true_random_number_64();
  536. padding_t padding=get_true_random_number_64();
  537. memcpy(send_data_buf,&iv,sizeof(iv));
  538. memcpy(send_data_buf+sizeof(iv),&padding,sizeof(padding));
  539. send_data_buf[sizeof(iv)+sizeof(padding)]='b';
  540. memcpy(send_data_buf+sizeof(iv)+sizeof(padding)+1,data,len);
  541. int new_len=len+sizeof(iv)+sizeof(padding)+1;
  542. if(my_encrypt(send_data_buf,send_data_buf2,new_len,key)!=0)
  543. {
  544. return -1;
  545. }
  546. send_raw0(raw_info,send_data_buf2,new_len);
  547. return 0;
  548. }
  549. int parse_bare(const char *input,int input_len,char* & data,int & len) //allow overlap
  550. {
  551. static char recv_data_buf[buf_len];
  552. if(input_len<0)
  553. {
  554. mylog(log_debug,"input_len <0\n");
  555. return -1;
  556. }
  557. if(my_decrypt(input,recv_data_buf,input_len,key)!=0)
  558. {
  559. mylog(log_debug,"decrypt_fail in recv bare\n");
  560. return -1;
  561. }
  562. if(recv_data_buf[sizeof(iv_t)+sizeof(padding_t)]!='b')
  563. {
  564. mylog(log_debug,"not a bare packet\n");
  565. return -1;
  566. }
  567. len=input_len;
  568. data=recv_data_buf+sizeof(iv_t)+sizeof(padding_t)+1;
  569. len-=sizeof(iv_t)+sizeof(padding_t)+1;
  570. if(len<0)
  571. {
  572. mylog(log_debug,"len <0\n");
  573. return -1;
  574. }
  575. return 0;
  576. }
  577. int recv_bare(raw_info_t &raw_info,char* & data,int & len)
  578. {
  579. packet_info_t &send_info=raw_info.send_info;
  580. packet_info_t &recv_info=raw_info.recv_info;
  581. if(recv_raw0(raw_info,data,len)<0)
  582. {
  583. //printf("recv_raw_fail in recv bare\n");
  584. return -1;
  585. }
  586. if ((raw_mode == mode_faketcp && (recv_info.syn == 1 || recv_info.ack != 1)))
  587. {
  588. mylog(log_debug,"unexpect packet type recv_info.syn=%d recv_info.ack=%d \n",recv_info.syn,recv_info.ack);
  589. return -1;
  590. }
  591. return parse_bare(data,len,data,len);
  592. }
  593. int send_handshake(raw_info_t &raw_info,id_t id1,id_t id2,id_t id3)
  594. {
  595. packet_info_t &send_info=raw_info.send_info;
  596. packet_info_t &recv_info=raw_info.recv_info;
  597. char * data;int len;
  598. //len=sizeof(id_t)*3;
  599. if(numbers_to_char(id1,id2,id3,data,len)!=0) return -1;
  600. if(send_bare(raw_info,data,len)!=0) {mylog(log_warn,"send bare fail\n");return -1;}
  601. return 0;
  602. }
  603. /*
  604. int recv_handshake(packet_info_t &info,id_t &id1,id_t &id2,id_t &id3)
  605. {
  606. char * data;int len;
  607. if(recv_bare(info,data,len)!=0) return -1;
  608. if(char_to_numbers(data,len,id1,id2,id3)!=0) return -1;
  609. return 0;
  610. }*/
  611. int send_safer(conn_info_t &conn_info,char type,const char* data,int len)
  612. {
  613. packet_info_t &send_info=conn_info.raw_info.send_info;
  614. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  615. if(type!='h'&&type!='d')
  616. {
  617. mylog(log_warn,"first byte is not h or d ,%x\n",type);
  618. return -1;
  619. }
  620. char send_data_buf[buf_len]; //buf for send data and send hb
  621. char send_data_buf2[buf_len];
  622. id_t n_tmp_id=htonl(conn_info.my_id);
  623. memcpy(send_data_buf,&n_tmp_id,sizeof(n_tmp_id));
  624. n_tmp_id=htonl(conn_info.oppsite_id);
  625. memcpy(send_data_buf+sizeof(n_tmp_id),&n_tmp_id,sizeof(n_tmp_id));
  626. anti_replay_seq_t n_seq=hton64(conn_info.blob->anti_replay.get_new_seq_for_send());
  627. memcpy(send_data_buf+sizeof(n_tmp_id)*2,&n_seq,sizeof(n_seq));
  628. send_data_buf[sizeof(n_tmp_id)*2+sizeof(n_seq)]=type;
  629. send_data_buf[sizeof(n_tmp_id)*2+sizeof(n_seq)+1]=conn_info.my_roller;
  630. memcpy(send_data_buf+2+sizeof(n_tmp_id)*2+sizeof(n_seq),data,len);//data;
  631. int new_len=len+sizeof(n_seq)+sizeof(n_tmp_id)*2+2;
  632. if(my_encrypt(send_data_buf,send_data_buf2,new_len,key)!=0)
  633. {
  634. return -1;
  635. }
  636. if(send_raw0(conn_info.raw_info,send_data_buf2,new_len)!=0) return -1;
  637. if(after_send_raw0(conn_info.raw_info)!=0) return -1;
  638. return 0;
  639. }
  640. int send_data_safer(conn_info_t &conn_info,const char* data,int len,u32_t conv_num)
  641. {
  642. packet_info_t &send_info=conn_info.raw_info.send_info;
  643. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  644. char send_data_buf[buf_len];
  645. //send_data_buf[0]='d';
  646. u32_t n_conv_num=htonl(conv_num);
  647. memcpy(send_data_buf,&n_conv_num,sizeof(n_conv_num));
  648. memcpy(send_data_buf+sizeof(n_conv_num),data,len);
  649. int new_len=len+sizeof(n_conv_num);
  650. send_safer(conn_info,'d',send_data_buf,new_len);
  651. return 0;
  652. }
  653. int parse_safer(conn_info_t &conn_info,const char * input,int input_len,char &type,char* &data,int &len)//allow overlap
  654. {
  655. static char recv_data_buf0[buf_len];
  656. char *recv_data_buf=recv_data_buf0; //fix strict alias warning
  657. if(my_decrypt(input,recv_data_buf,input_len,key)!=0)
  658. {
  659. //printf("decrypt fail\n");
  660. return -1;
  661. }
  662. //char *a=recv_data_buf;
  663. id_t h_oppiste_id= ntohl ( *((id_t * )(recv_data_buf)) );
  664. id_t h_my_id= ntohl ( *((id_t * )(recv_data_buf+sizeof(id_t))) );
  665. anti_replay_seq_t h_seq= ntoh64 ( *((anti_replay_seq_t * )(recv_data_buf +sizeof(id_t) *2 )) );
  666. if(h_oppiste_id!=conn_info.oppsite_id||h_my_id!=conn_info.my_id)
  667. {
  668. mylog(log_debug,"id and oppsite_id verification failed %x %x %x %x \n",h_oppiste_id,conn_info.oppsite_id,h_my_id,conn_info.my_id);
  669. return -1;
  670. }
  671. if (conn_info.blob->anti_replay.is_vaild(h_seq) != 1) {
  672. mylog(log_debug,"dropped replay packet\n");
  673. return -1;
  674. }
  675. //printf("recv _len %d\n ",recv_len);
  676. data=recv_data_buf+sizeof(anti_replay_seq_t)+sizeof(id_t)*2;
  677. len=input_len-(sizeof(anti_replay_seq_t)+sizeof(id_t)*2 );
  678. if(data[0]!='h'&&data[0]!='d')
  679. {
  680. mylog(log_debug,"first byte is not h or d ,%x\n",data[0]);
  681. return -1;
  682. }
  683. uint8_t roller=data[1];
  684. type=data[0];
  685. data+=2;
  686. len-=2;
  687. if(len<0)
  688. {
  689. mylog(log_debug,"len <0 ,%d\n",len);
  690. return -1;
  691. }
  692. if(roller!=conn_info.oppsite_roller)
  693. {
  694. conn_info.oppsite_roller=roller;
  695. conn_info.last_oppsite_roller_time=get_current_time();
  696. }
  697. conn_info.my_roller++;//increase on a successful recv
  698. if(after_recv_raw0(conn_info.raw_info)!=0) return -1;
  699. return 0;
  700. }
  701. int recv_safer(conn_info_t &conn_info,char &type,char* &data,int &len)
  702. {
  703. packet_info_t &send_info=conn_info.raw_info.send_info;
  704. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  705. char * recv_data;int recv_len;
  706. static char recv_data_buf[buf_len];
  707. if(recv_raw0(conn_info.raw_info,recv_data,recv_len)!=0) return -1;
  708. return parse_safer(conn_info,recv_data,recv_len,type,data,len);
  709. }
  710. int try_to_list_and_bind(int port)
  711. {
  712. int old_bind_fd=bind_fd;
  713. if(raw_mode==mode_faketcp)
  714. {
  715. bind_fd=socket(AF_INET,SOCK_STREAM,0);
  716. }
  717. else if(raw_mode==mode_udp||raw_mode==mode_icmp)
  718. {
  719. bind_fd=socket(AF_INET,SOCK_DGRAM,0);
  720. }
  721. if(old_bind_fd!=-1)
  722. {
  723. close(old_bind_fd);
  724. }
  725. struct sockaddr_in temp_bind_addr;
  726. bzero(&temp_bind_addr, sizeof(temp_bind_addr));
  727. temp_bind_addr.sin_family = AF_INET;
  728. temp_bind_addr.sin_port = htons(port);
  729. temp_bind_addr.sin_addr.s_addr = local_address_uint32;
  730. if (bind(bind_fd, (struct sockaddr*)&temp_bind_addr, sizeof(temp_bind_addr)) !=0)
  731. {
  732. mylog(log_debug,"bind fail\n");
  733. return -1;
  734. }
  735. if(raw_mode==mode_faketcp)
  736. {
  737. if (listen(bind_fd, SOMAXCONN) != 0) {
  738. mylog(log_warn,"listen fail\n");
  739. return -1;
  740. }
  741. }
  742. return 0;
  743. }
  744. int client_bind_to_a_new_port()
  745. {
  746. int raw_send_port=10000+get_true_random_number()%(65535-10000);
  747. for(int i=0;i<1000;i++)//try 1000 times at max,this should be enough
  748. {
  749. if (try_to_list_and_bind(raw_send_port)==0)
  750. {
  751. return raw_send_port;
  752. }
  753. }
  754. mylog(log_fatal,"bind port fail\n");
  755. myexit(-1);
  756. return -1;////for compiler check
  757. }
  758. int set_timer(int epollfd,int &timer_fd)
  759. {
  760. int ret;
  761. epoll_event ev;
  762. itimerspec its;
  763. memset(&its,0,sizeof(its));
  764. if((timer_fd=timerfd_create(CLOCK_MONOTONIC,TFD_NONBLOCK)) < 0)
  765. {
  766. mylog(log_fatal,"timer_fd create error\n");
  767. myexit(1);
  768. }
  769. its.it_interval.tv_sec=(timer_interval/1000);
  770. its.it_interval.tv_nsec=(timer_interval%1000)*1000ll*1000ll;
  771. its.it_value.tv_nsec=1; //imidiately
  772. timerfd_settime(timer_fd,0,&its,0);
  773. ev.events = EPOLLIN;
  774. ev.data.u64 = timer_fd;
  775. ret=epoll_ctl(epollfd, EPOLL_CTL_ADD, timer_fd, &ev);
  776. if (ret < 0) {
  777. mylog(log_fatal,"epoll_ctl return %d\n", ret);
  778. myexit(-1);
  779. }
  780. return 0;
  781. }
  782. int set_timer_server(int epollfd,int &timer_fd)
  783. {
  784. int ret;
  785. epoll_event ev;
  786. itimerspec its;
  787. memset(&its,0,sizeof(its));
  788. if((timer_fd=timerfd_create(CLOCK_MONOTONIC,TFD_NONBLOCK)) < 0)
  789. {
  790. mylog(log_fatal,"timer_fd create error\n");
  791. myexit(1);
  792. }
  793. its.it_interval.tv_sec=(timer_interval/1000);
  794. its.it_interval.tv_nsec=(timer_interval%1000)*1000ll*1000ll;
  795. its.it_value.tv_nsec=1; //imidiately
  796. timerfd_settime(timer_fd,0,&its,0);
  797. ev.events = EPOLLIN;
  798. ev.data.u64 = pack_u64(2,timer_fd);
  799. ret=epoll_ctl(epollfd, EPOLL_CTL_ADD, timer_fd, &ev);
  800. if (ret < 0) {
  801. mylog(log_fatal,"epoll_ctl return %d\n", ret);
  802. myexit(-1);
  803. }
  804. return 0;
  805. }
  806. int client_on_timer(conn_info_t &conn_info) //for client
  807. {
  808. packet_info_t &send_info=conn_info.raw_info.send_info;
  809. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  810. raw_info_t &raw_info=conn_info.raw_info;
  811. conn_info.blob->conv_manager.clear_inactive();
  812. mylog(log_trace,"timer!\n");
  813. mylog(log_trace,"roller my %d,oppsite %d,%lld\n",int(conn_info.my_roller),int(conn_info.oppsite_roller),conn_info.last_oppsite_roller_time);
  814. mylog(log_trace,"<client_on_timer,send_info.ts_ack= %u>\n",send_info.ts_ack);
  815. if(conn_info.state.client_current_state==client_idle)
  816. {
  817. fail_time_counter++;
  818. if(max_fail_time>0&&fail_time_counter>max_fail_time)
  819. {
  820. mylog(log_fatal,"max_fail_time exceed\n");
  821. myexit(-1);
  822. }
  823. conn_info.blob->anti_replay.re_init();
  824. conn_info.my_id = get_true_random_number_nz(); ///todo no need to do this everytime
  825. if (source_port == 0)
  826. {
  827. send_info.src_port = client_bind_to_a_new_port();
  828. }
  829. else
  830. {
  831. send_info.src_port = source_port;
  832. }
  833. if (raw_mode == mode_icmp)
  834. {
  835. send_info.dst_port = send_info.src_port;
  836. }
  837. mylog(log_info, "using port %d\n", send_info.src_port);
  838. init_filter(send_info.src_port);
  839. if(raw_mode==mode_icmp||raw_mode==mode_udp)
  840. {
  841. conn_info.state.client_current_state=client_handshake1;
  842. mylog(log_info,"state changed from client_idle to client_pre_handshake\n");
  843. }
  844. if(raw_mode==mode_faketcp)
  845. {
  846. conn_info.state.client_current_state=client_tcp_handshake;
  847. mylog(log_info,"state changed from client_idle to client_tcp_handshake\n");
  848. }
  849. conn_info.last_state_time=get_current_time();
  850. conn_info.last_hb_sent_time=0;
  851. //dont return;
  852. }
  853. if(conn_info.state.client_current_state==client_tcp_handshake) //send and resend syn
  854. {
  855. assert(raw_mode==mode_faketcp);
  856. if (get_current_time() - conn_info.last_state_time > client_handshake_timeout)
  857. {
  858. conn_info.state.client_current_state = client_idle;
  859. mylog(log_info, "state back to client_idle from client_tcp_handshake\n");
  860. return 0;
  861. }
  862. else if (get_current_time() - conn_info.last_hb_sent_time > client_retry_interval)
  863. {
  864. if (raw_mode == mode_faketcp)
  865. {
  866. if (conn_info.last_hb_sent_time == 0)
  867. {
  868. send_info.psh = 0;
  869. send_info.syn = 1;
  870. send_info.ack = 0;
  871. send_info.ts_ack =0;
  872. send_info.seq=get_true_random_number();
  873. send_info.ack_seq=get_true_random_number();
  874. }
  875. }
  876. send_raw0(raw_info, 0, 0);
  877. conn_info.last_hb_sent_time = get_current_time();
  878. mylog(log_info, "(re)sent tcp syn\n");
  879. return 0;
  880. }
  881. else
  882. {
  883. return 0;
  884. }
  885. return 0;
  886. }
  887. else if(conn_info.state.client_current_state==client_handshake1)//send and resend handshake1
  888. {
  889. if(get_current_time()-conn_info.last_state_time>client_handshake_timeout)
  890. {
  891. conn_info.state.client_current_state=client_idle;
  892. mylog(log_info,"state back to client_idle from client_handshake1\n");
  893. return 0;
  894. }
  895. else if(get_current_time()-conn_info.last_hb_sent_time>client_retry_interval)
  896. {
  897. if(raw_mode==mode_faketcp)
  898. {
  899. if(conn_info.last_hb_sent_time==0)
  900. {
  901. send_info.seq++;
  902. send_info.ack_seq=recv_info.seq+1;
  903. send_info.ts_ack=recv_info.ts;
  904. raw_info.reserved_seq=send_info.seq;
  905. }
  906. send_info.seq=raw_info.reserved_seq;
  907. send_info.psh = 0;
  908. send_info.syn = 0;
  909. send_info.ack = 1;
  910. send_raw0(raw_info, 0, 0);
  911. send_handshake(raw_info,conn_info.my_id,0,const_id);
  912. send_info.seq+=raw_info.last_send_len;
  913. }
  914. else
  915. {
  916. send_handshake(raw_info,conn_info.my_id,0,const_id);
  917. if(raw_mode==mode_icmp)
  918. send_info.icmp_seq++;
  919. }
  920. conn_info.last_hb_sent_time=get_current_time();
  921. mylog(log_info,"(re)sent handshake1\n");
  922. return 0;
  923. }
  924. else
  925. {
  926. return 0;
  927. }
  928. return 0;
  929. }
  930. else if(conn_info.state.client_current_state==client_handshake2)
  931. {
  932. if(get_current_time()-conn_info.last_state_time>client_handshake_timeout)
  933. {
  934. conn_info.state.client_current_state=client_idle;
  935. mylog(log_info,"state back to client_idle from client_handshake2\n");
  936. return 0;
  937. }
  938. else if(get_current_time()-conn_info.last_hb_sent_time>client_retry_interval)
  939. {
  940. if(raw_mode==mode_faketcp)
  941. {
  942. if(conn_info.last_hb_sent_time==0)
  943. {
  944. send_info.ack_seq=recv_info.seq+raw_info.last_recv_len;
  945. send_info.ts_ack=recv_info.ts;
  946. raw_info.reserved_seq=send_info.seq;
  947. }
  948. send_info.seq=raw_info.reserved_seq;
  949. send_handshake(raw_info,conn_info.my_id,conn_info.oppsite_id,const_id);
  950. send_info.seq+=raw_info.last_send_len;
  951. }
  952. else
  953. {
  954. send_handshake(raw_info,conn_info.my_id,conn_info.oppsite_id,const_id);
  955. if(raw_mode==mode_icmp)
  956. send_info.icmp_seq++;
  957. }
  958. conn_info.last_hb_sent_time=get_current_time();
  959. mylog(log_info,"(re)sent handshake2\n");
  960. return 0;
  961. }
  962. else
  963. {
  964. return 0;
  965. }
  966. return 0;
  967. }
  968. else if(conn_info.state.client_current_state==client_ready)
  969. {
  970. fail_time_counter=0;
  971. mylog(log_trace,"time %llu,%llu\n",get_current_time(),conn_info.last_state_time);
  972. if(get_current_time()-conn_info.last_hb_recv_time>client_conn_timeout)
  973. {
  974. conn_info.state.client_current_state=client_idle;
  975. conn_info.my_id=get_true_random_number_nz();
  976. mylog(log_info,"state back to client_idle from client_ready bc of recv-direction timeout\n");
  977. return 0;
  978. }
  979. if(get_current_time()-conn_info.last_hb_sent_time<heartbeat_interval)
  980. {
  981. return 0;
  982. }
  983. if(get_current_time()- conn_info.last_oppsite_roller_time>client_conn_uplink_timeout)
  984. {
  985. conn_info.state.client_current_state=client_idle;
  986. conn_info.my_id=get_true_random_number_nz();
  987. mylog(log_info,"state back to client_idle from client_ready bc of send-direction timeout\n");
  988. }
  989. mylog(log_debug,"heartbeat sent <%x,%x>\n",conn_info.oppsite_id,conn_info.my_id);
  990. send_safer(conn_info,'h',"",0);/////////////send
  991. conn_info.last_hb_sent_time=get_current_time();
  992. return 0;
  993. }
  994. else
  995. {
  996. mylog(log_fatal,"unknown state,this shouldnt happen.\n");
  997. myexit(-1);
  998. }
  999. return 0;
  1000. }
  1001. int server_on_timer_multi(conn_info_t &conn_info,char * ip_port)
  1002. {
  1003. mylog(log_trace,"server timer!\n");
  1004. raw_info_t &raw_info=conn_info.raw_info;
  1005. assert(conn_info.state.server_current_state==server_ready);
  1006. if(conn_info.state.server_current_state==server_ready)
  1007. {
  1008. conn_info.blob->conv_manager.clear_inactive(ip_port);
  1009. /*
  1010. if( get_current_time()-conn_info.last_hb_recv_time>heartbeat_timeout )
  1011. {
  1012. mylog(log_trace,"%lld %lld\n",get_current_time(),conn_info.last_state_time);
  1013. conn_info.server_current_state=server_nothing;
  1014. //conn_manager.current_ready_ip=0;
  1015. //conn_manager.current_ready_port=0;
  1016. mylog(log_info,"changed state to server_nothing\n");
  1017. return 0;
  1018. }*/ //dont need to do this at server,conn_manger will clear expired connections
  1019. if(get_current_time()-conn_info.last_hb_sent_time<heartbeat_interval)
  1020. {
  1021. return 0;
  1022. }
  1023. send_safer(conn_info,'h',"",0); /////////////send
  1024. conn_info.last_hb_sent_time=get_current_time();
  1025. mylog(log_debug,"heart beat sent<%x,%x>\n",conn_info.my_id,conn_info.oppsite_id);
  1026. }
  1027. else
  1028. {
  1029. mylog(log_fatal,"this shouldnt happen!\n");
  1030. myexit(-1);
  1031. }
  1032. return 0;
  1033. }
  1034. int client_on_raw_recv(conn_info_t &conn_info)
  1035. {
  1036. char* data;int data_len;
  1037. packet_info_t &send_info=conn_info.raw_info.send_info;
  1038. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1039. raw_info_t &raw_info=conn_info.raw_info;
  1040. mylog(log_trace,"<client_on_raw_recv,send_info.ts_ack= %u>\n",send_info.ts_ack);
  1041. if(conn_info.state.client_current_state==client_idle )
  1042. {
  1043. recv(raw_recv_fd, 0,0, 0 );
  1044. }
  1045. else if(conn_info.state.client_current_state==client_tcp_handshake)//received syn ack
  1046. {
  1047. assert(raw_mode==mode_faketcp);
  1048. if(recv_raw0(raw_info,data,data_len)<0)
  1049. {
  1050. return -1;
  1051. }
  1052. if(recv_info.src_ip!=send_info.dst_ip||recv_info.src_port!=send_info.dst_port)
  1053. {
  1054. mylog(log_debug,"unexpected adress %x %x %d %d\n",recv_info.src_ip,send_info.dst_ip,recv_info.src_port,send_info.dst_port);
  1055. return -1;
  1056. }
  1057. if(data_len==0&&raw_info.recv_info.syn==1&&raw_info.recv_info.ack==1)
  1058. {
  1059. if(recv_info.ack_seq!=send_info.seq+1)
  1060. {
  1061. mylog(log_debug,"seq ack_seq mis match\n");
  1062. return -1;
  1063. }
  1064. conn_info.state.client_current_state = client_handshake1;
  1065. mylog(log_info,"state changed from client_tcp_handshake to client_handshake1\n");
  1066. conn_info.last_state_time = get_current_time();
  1067. conn_info.last_hb_sent_time=0;
  1068. client_on_timer(conn_info);
  1069. return 0;
  1070. }
  1071. else
  1072. {
  1073. mylog(log_debug,"unexpected packet type,expected:syn ack\n");
  1074. return -1;
  1075. }
  1076. }
  1077. else if(conn_info.state.client_current_state==client_handshake1)//recevied respond of handshake1
  1078. {
  1079. if(recv_bare(raw_info,data,data_len)!=0)
  1080. {
  1081. mylog(log_debug,"recv_bare failed!\n");
  1082. return -1;
  1083. }
  1084. if(recv_info.src_ip!=send_info.dst_ip||recv_info.src_port!=send_info.dst_port)
  1085. {
  1086. mylog(log_debug,"unexpected adress %x %x %d %d\n",recv_info.src_ip,send_info.dst_ip,recv_info.src_port,send_info.dst_port);
  1087. return -1;
  1088. }
  1089. if(data_len<int( 3*sizeof(id_t)))
  1090. {
  1091. mylog(log_debug,"too short to be a handshake\n");
  1092. return -1;
  1093. }
  1094. id_t tmp_oppsite_id= ntohl(* ((u32_t *)&data[0]));
  1095. id_t tmp_my_id=ntohl(* ((u32_t *)&data[sizeof(id_t)]));
  1096. id_t tmp_oppsite_const_id=ntohl(* ((u32_t *)&data[sizeof(id_t)*2]));
  1097. if(tmp_my_id!=conn_info.my_id)
  1098. {
  1099. mylog(log_debug,"tmp_my_id doesnt match\n");
  1100. return -1;
  1101. }
  1102. if(raw_mode==mode_faketcp)
  1103. {
  1104. if(recv_info.ack_seq!=send_info.seq)
  1105. {
  1106. mylog(log_debug,"seq ack_seq mis match\n");
  1107. return -1;
  1108. }
  1109. if(recv_info.seq!=send_info.ack_seq)
  1110. {
  1111. mylog(log_debug,"seq ack_seq mis match\n");
  1112. return -1;
  1113. }
  1114. }
  1115. conn_info.oppsite_id=tmp_oppsite_id;
  1116. mylog(log_info,"changed state from to client_handshake1 to client_handshake2,my_id is %x,oppsite id is %x\n",conn_info.my_id,conn_info.oppsite_id);
  1117. //send_handshake(raw_info,conn_info.my_id,conn_info.oppsite_id,const_id); //////////////send
  1118. conn_info.state.client_current_state = client_handshake2;
  1119. conn_info.last_state_time = get_current_time();
  1120. conn_info.last_hb_sent_time=0;
  1121. client_on_timer(conn_info);
  1122. return 0;
  1123. }
  1124. else if(conn_info.state.client_current_state==client_handshake2||conn_info.state.client_current_state==client_ready)//received heartbeat or data
  1125. {
  1126. char type;
  1127. if(recv_safer(conn_info,type,data,data_len)!=0)
  1128. {
  1129. mylog(log_debug,"recv_safer failed!\n");
  1130. return -1;
  1131. }
  1132. if(recv_info.src_ip!=send_info.dst_ip||recv_info.src_port!=send_info.dst_port)
  1133. {
  1134. mylog(log_warn,"unexpected adress %x %x %d %d,this shouldnt happen.\n",recv_info.src_ip,send_info.dst_ip,recv_info.src_port,send_info.dst_port);
  1135. return -1;
  1136. }
  1137. if(conn_info.state.client_current_state==client_handshake2)
  1138. {
  1139. mylog(log_info,"changed state from to client_handshake2 to client_ready\n");
  1140. conn_info.state.client_current_state=client_ready;
  1141. conn_info.last_hb_sent_time=0;
  1142. conn_info.last_hb_recv_time=get_current_time();
  1143. conn_info.last_oppsite_roller_time=conn_info.last_hb_recv_time;
  1144. client_on_timer(conn_info);
  1145. }
  1146. if(data_len==0&&type=='h')
  1147. {
  1148. mylog(log_debug,"[hb]heart beat received\n");
  1149. conn_info.last_hb_recv_time=get_current_time();
  1150. return 0;
  1151. }
  1152. else if(data_len>= int( sizeof(u32_t))&&type=='d')
  1153. {
  1154. mylog(log_trace,"received a data from fake tcp,len:%d\n",data_len);
  1155. conn_info.last_hb_recv_time=get_current_time();
  1156. u32_t tmp_conv_id= ntohl(* ((u32_t *)&data[0]));
  1157. if(!conn_info.blob->conv_manager.is_conv_used(tmp_conv_id))
  1158. {
  1159. mylog(log_info,"unknow conv %d,ignore\n",tmp_conv_id);
  1160. return 0;
  1161. }
  1162. conn_info.blob->conv_manager.update_active_time(tmp_conv_id);
  1163. u64_t u64=conn_info.blob->conv_manager.find_u64_by_conv(tmp_conv_id);
  1164. sockaddr_in tmp_sockaddr;
  1165. tmp_sockaddr.sin_family = AF_INET;
  1166. tmp_sockaddr.sin_addr.s_addr=(u64>>32u);
  1167. tmp_sockaddr.sin_port= htons(uint16_t((u64<<32u)>>32u));
  1168. int ret=sendto(udp_fd,data+sizeof(u32_t),data_len -(sizeof(u32_t)),0,(struct sockaddr *)&tmp_sockaddr,sizeof(tmp_sockaddr));
  1169. if(ret<0)
  1170. {
  1171. mylog(log_warn,"sento returned %d\n",ret);
  1172. //perror("ret<0");
  1173. }
  1174. mylog(log_trace,"%s :%d\n",inet_ntoa(tmp_sockaddr.sin_addr),ntohs(tmp_sockaddr.sin_port));
  1175. mylog(log_trace,"%d byte sent\n",ret);
  1176. }
  1177. else
  1178. {
  1179. mylog(log_warn,"unknown packet,this shouldnt happen.\n");
  1180. return -1;
  1181. }
  1182. return 0;
  1183. }
  1184. else
  1185. {
  1186. mylog(log_fatal,"unknown state,this shouldnt happen.\n");
  1187. myexit(-1);
  1188. }
  1189. return 0;
  1190. }
  1191. int server_on_raw_recv_multi()
  1192. {
  1193. char dummy_buf[buf_len];
  1194. packet_info_t peek_info;
  1195. if(peek_raw(peek_info)<0)
  1196. {
  1197. recv(raw_recv_fd, 0,0, 0 );//
  1198. //struct sockaddr saddr;
  1199. //socklen_t saddr_size;
  1200. ///recvfrom(raw_recv_fd, 0,0, 0 ,&saddr , &saddr_size);//
  1201. mylog(log_trace,"peek_raw failed\n");
  1202. return -1;
  1203. }
  1204. u32_t ip=peek_info.src_ip;uint16_t port=peek_info.src_port;
  1205. char ip_port[40];
  1206. sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1207. mylog(log_trace,"[%s]peek_raw\n",ip_port);
  1208. int data_len; char *data;
  1209. if(raw_mode==mode_faketcp&&peek_info.syn==1)
  1210. {
  1211. if(!conn_manager.exist(ip,port)||conn_manager.find_insert(ip,port).state.server_current_state!=server_ready)
  1212. {//reply any syn ,before state become ready
  1213. raw_info_t tmp_raw_info;
  1214. if(recv_raw0(tmp_raw_info,data,data_len)<0)
  1215. {
  1216. return 0;
  1217. }
  1218. raw_info_t &raw_info=tmp_raw_info;
  1219. packet_info_t &send_info=raw_info.send_info;
  1220. packet_info_t &recv_info=raw_info.recv_info;
  1221. send_info.src_ip=recv_info.dst_ip;
  1222. send_info.src_port=recv_info.dst_port;
  1223. send_info.dst_port = recv_info.src_port;
  1224. send_info.dst_ip = recv_info.src_ip;
  1225. if(data_len==0&&raw_info.recv_info.syn==1&&raw_info.recv_info.ack==0)
  1226. {
  1227. send_info.ack_seq = recv_info.seq + 1;
  1228. send_info.psh = 0;
  1229. send_info.syn = 1;
  1230. send_info.ack = 1;
  1231. send_info.ts_ack=recv_info.ts;
  1232. mylog(log_info,"[%s]received syn,sent syn ack back\n",ip_port);
  1233. send_raw0(raw_info, 0, 0);
  1234. return 0;
  1235. }
  1236. }
  1237. return 0;
  1238. }
  1239. if(!conn_manager.exist(ip,port))
  1240. {
  1241. if(conn_manager.mp.size()>=max_handshake_conn_num)
  1242. {
  1243. mylog(log_info,"[%s]reached max_handshake_conn_num,ignored new handshake\n",ip_port);
  1244. recv(raw_recv_fd, 0,0, 0 );//
  1245. return 0;
  1246. }
  1247. raw_info_t tmp_raw_info;
  1248. if(raw_mode==mode_icmp)
  1249. {
  1250. tmp_raw_info.send_info.dst_port=tmp_raw_info.send_info.src_port=port;
  1251. }
  1252. if(recv_bare(tmp_raw_info,data,data_len)<0)
  1253. {
  1254. return 0;
  1255. }
  1256. if(data_len<int( 3*sizeof(id_t)))
  1257. {
  1258. mylog(log_debug,"[%s]too short to be a handshake\n",ip_port);
  1259. return -1;
  1260. }
  1261. id_t zero=ntohl(* ((u32_t *)&data[sizeof(id_t)]));
  1262. if(zero!=0)
  1263. {
  1264. mylog(log_debug,"[%s]not a invalid initial handshake\n",ip_port);
  1265. return -1;
  1266. }
  1267. mylog(log_info,"[%s]got packet from a new ip\n",ip_port);
  1268. conn_info_t &conn_info=conn_manager.find_insert(ip,port);
  1269. conn_info.raw_info=tmp_raw_info;
  1270. packet_info_t &send_info=conn_info.raw_info.send_info;
  1271. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1272. raw_info_t &raw_info=conn_info.raw_info;
  1273. send_info.src_ip=recv_info.dst_ip;
  1274. send_info.src_port=recv_info.dst_port;
  1275. send_info.dst_port = recv_info.src_port;
  1276. send_info.dst_ip = recv_info.src_ip;
  1277. //id_t tmp_oppsite_id= ntohl(* ((u32_t *)&data[0]));
  1278. //mylog(log_info,"[%s]handshake1 received %x\n",ip_port,tmp_oppsite_id);
  1279. conn_info.my_id=get_true_random_number_nz();
  1280. mylog(log_info,"[%s]created new conn,state: server_handshake1,my_id is %x\n",ip_port,conn_info.my_id);
  1281. conn_info.state.server_current_state = server_handshake1;
  1282. conn_info.last_state_time = get_current_time();
  1283. server_on_raw_recv_handshake1(conn_info,ip_port,data,data_len);
  1284. return 0;
  1285. }
  1286. conn_info_t & conn_info=conn_manager.find_insert(ip,port);//insert if not exist
  1287. packet_info_t &send_info=conn_info.raw_info.send_info;
  1288. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1289. raw_info_t &raw_info=conn_info.raw_info;
  1290. if(conn_info.state.server_current_state==server_handshake1)
  1291. {
  1292. if(recv_bare(raw_info,data,data_len)!=0)
  1293. {
  1294. return -1;
  1295. }
  1296. server_on_raw_recv_handshake1(conn_info,ip_port,data,data_len);
  1297. }
  1298. if(conn_info.state.server_current_state==server_ready)
  1299. {
  1300. char type;
  1301. if (recv_safer(conn_info,type, data, data_len) != 0) {
  1302. return -1;
  1303. }
  1304. return server_on_raw_recv_ready(conn_info,ip_port,type,data,data_len);
  1305. }
  1306. return 0;
  1307. }
  1308. /*
  1309. int server_on_raw_recv_handshake1(conn_info_t &conn_info,id_t tmp_oppsite_id )
  1310. {
  1311. packet_info_t &send_info=conn_info.raw_info.send_info;
  1312. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1313. raw_info_t &raw_info=conn_info.raw_info;
  1314. return 0;
  1315. }*/
  1316. int server_on_raw_recv_handshake1(conn_info_t &conn_info,char * ip_port,char * data, int data_len)
  1317. {
  1318. packet_info_t &send_info=conn_info.raw_info.send_info;
  1319. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1320. raw_info_t &raw_info=conn_info.raw_info;
  1321. //u32_t ip=conn_info.raw_info.recv_info.src_ip;
  1322. //uint16_t port=conn_info.raw_info.recv_info.src_port;
  1323. //char ip_port[40];
  1324. //sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1325. if(data_len<int( 3*sizeof(id_t)))
  1326. {
  1327. mylog(log_debug,"[%s] data_len=%d too short to be a handshake\n",ip_port,data_len);
  1328. return -1;
  1329. }
  1330. id_t tmp_oppsite_id= ntohl(* ((u32_t *)&data[0]));
  1331. id_t tmp_my_id=ntohl(* ((u32_t *)&data[sizeof(id_t)]));
  1332. if(tmp_my_id==0) //received init handshake again
  1333. {
  1334. if(raw_mode==mode_faketcp)
  1335. {
  1336. send_info.seq=recv_info.ack_seq;
  1337. send_info.ack_seq=recv_info.seq+raw_info.last_recv_len;
  1338. send_info.ts_ack=recv_info.ts;
  1339. }
  1340. if(raw_mode==mode_icmp)
  1341. {
  1342. send_info.icmp_seq=recv_info.icmp_seq;
  1343. }
  1344. send_handshake(raw_info,conn_info.my_id,tmp_oppsite_id,const_id); //////////////send
  1345. mylog(log_info,"[%s]changed state to server_handshake1,my_id is %x\n",ip_port,conn_info.my_id);
  1346. }
  1347. else if(tmp_my_id==conn_info.my_id)
  1348. {
  1349. conn_info.oppsite_id=tmp_oppsite_id;
  1350. id_t tmp_oppsite_const_id=ntohl(* ((u32_t *)&data[sizeof(id_t)*2]));
  1351. if(raw_mode==mode_faketcp)
  1352. {
  1353. send_info.seq=recv_info.ack_seq;
  1354. send_info.ack_seq=recv_info.seq+raw_info.last_recv_len;
  1355. send_info.ts_ack=recv_info.ts;
  1356. }
  1357. if(raw_mode==mode_icmp)
  1358. {
  1359. send_info.icmp_seq=recv_info.icmp_seq;
  1360. }
  1361. server_on_raw_recv_pre_ready(conn_info,ip_port,tmp_oppsite_const_id);
  1362. }
  1363. else
  1364. {
  1365. mylog(log_debug,"[%s]invalid my_id %x,my_id is %x\n",ip_port,tmp_my_id,conn_info.my_id);
  1366. }
  1367. return 0;
  1368. }
  1369. int server_on_raw_recv_ready(conn_info_t &conn_info,char * ip_port,char type,char *data,int data_len)
  1370. {
  1371. raw_info_t &raw_info = conn_info.raw_info;
  1372. packet_info_t &send_info = conn_info.raw_info.send_info;
  1373. packet_info_t &recv_info = conn_info.raw_info.recv_info;
  1374. //char ip_port[40];
  1375. //sprintf(ip_port,"%s:%d",my_ntoa(recv_info.src_ip),recv_info.src_port);
  1376. /*
  1377. if (recv_info.src_ip != send_info.dst_ip
  1378. || recv_info.src_port != send_info.dst_port) {
  1379. mylog(log_debug, "unexpected adress\n");
  1380. return 0;
  1381. }*/
  1382. if (type == 'h' && data_len == 0) {
  1383. //u32_t tmp = ntohl(*((u32_t *) &data[sizeof(u32_t)]));
  1384. mylog(log_debug,"[%s][hb]received hb \n",ip_port);
  1385. conn_info.last_hb_recv_time = get_current_time();
  1386. return 0;
  1387. } else if (type== 'd' && data_len >=int( sizeof(u32_t) ))
  1388. {
  1389. u32_t tmp_conv_id = ntohl(*((u32_t *) &data[0]));
  1390. conn_info.last_hb_recv_time = get_current_time();
  1391. mylog(log_trace, "conv:%u\n", tmp_conv_id);
  1392. if (!conn_info.blob->conv_manager.is_conv_used(tmp_conv_id)) {
  1393. if (conn_info.blob->conv_manager.get_size() >= max_conv_num) {
  1394. mylog(log_warn,
  1395. "[%s]ignored new conv %x connect bc max_conv_num exceed\n",ip_port,
  1396. tmp_conv_id);
  1397. return 0;
  1398. }
  1399. struct sockaddr_in remote_addr_in;
  1400. socklen_t slen = sizeof(sockaddr_in);
  1401. memset(&remote_addr_in, 0, sizeof(remote_addr_in));
  1402. remote_addr_in.sin_family = AF_INET;
  1403. remote_addr_in.sin_port = htons(remote_port);
  1404. remote_addr_in.sin_addr.s_addr = remote_address_uint32;
  1405. int new_udp_fd = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1406. if (new_udp_fd < 0) {
  1407. mylog(log_warn, "[%s]create udp_fd error\n",ip_port);
  1408. return -1;
  1409. }
  1410. setnonblocking(new_udp_fd);
  1411. set_buf_size(new_udp_fd);
  1412. mylog(log_debug, "[%s]created new udp_fd %d\n",ip_port, new_udp_fd);
  1413. int ret = connect(new_udp_fd, (struct sockaddr *) &remote_addr_in,
  1414. slen);
  1415. if (ret != 0) {
  1416. mylog(log_warn, "udp fd connect fail\n");
  1417. close(new_udp_fd);
  1418. return -1;
  1419. }
  1420. struct epoll_event ev;
  1421. u64_t u64 = (u32_t(new_udp_fd))+(1llu<<32u);
  1422. mylog(log_trace, "[%s]u64: %lld\n",ip_port, u64);
  1423. ev.events = EPOLLIN;
  1424. ev.data.u64 = u64;
  1425. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, new_udp_fd, &ev);
  1426. if (ret != 0) {
  1427. mylog(log_warn, "[%s]add udp_fd error\n",ip_port);
  1428. close(new_udp_fd);
  1429. return -1;
  1430. }
  1431. conn_info.blob->conv_manager.insert_conv(tmp_conv_id, new_udp_fd);
  1432. assert(conn_manager.udp_fd_mp.find(new_udp_fd)==conn_manager.udp_fd_mp.end());
  1433. conn_manager.udp_fd_mp[new_udp_fd] = &conn_info;
  1434. //pack_u64(conn_info.raw_info.recv_info.src_ip,conn_info.raw_info.recv_info.src_port);
  1435. mylog(log_info, "[%s]new conv conv_id=%x, assigned fd=%d\n",ip_port,
  1436. tmp_conv_id, new_udp_fd);
  1437. }
  1438. u64_t u64 = conn_info.blob->conv_manager.find_u64_by_conv(tmp_conv_id);
  1439. conn_info.blob->conv_manager.update_active_time(tmp_conv_id);
  1440. int fd = int((u64 << 32u) >> 32u);
  1441. mylog(log_trace, "[%s]received a data from fake tcp,len:%d\n",ip_port, data_len);
  1442. int ret = send(fd, data + sizeof(u32_t),
  1443. data_len - ( sizeof(u32_t)), 0);
  1444. mylog(log_trace, "[%s]%d byte sent ,fd :%d\n ",ip_port, ret, fd);
  1445. if (ret < 0) {
  1446. mylog(log_warn, "send returned %d\n", ret);
  1447. //perror("what happened????");
  1448. }
  1449. return 0;
  1450. }
  1451. return 0;
  1452. }
  1453. int server_on_raw_recv_pre_ready(conn_info_t &conn_info,char * ip_port,u32_t tmp_oppsite_const_id)
  1454. {
  1455. //u32_t ip;uint16_t port;
  1456. //ip=conn_info.raw_info.recv_info.src_ip;
  1457. //port=conn_info.raw_info.recv_info.src_port;
  1458. //char ip_port[40];
  1459. //sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1460. mylog(log_info,"[%s]received handshake oppsite_id:%x my_id:%x\n",ip_port,conn_info.oppsite_id,conn_info.my_id);
  1461. mylog(log_info,"[%s]oppsite const_id:%x \n",ip_port,tmp_oppsite_const_id);
  1462. if(conn_manager.const_id_mp.find(tmp_oppsite_const_id)==conn_manager.const_id_mp.end())
  1463. {
  1464. //conn_manager.const_id_mp=
  1465. if(conn_manager.ready_num>=max_ready_conn_num)
  1466. {
  1467. mylog(log_info,"[%s]max_ready_conn_num,cant turn to ready\n",ip_port);
  1468. conn_info.state.server_current_state =server_idle;
  1469. return 0;
  1470. }
  1471. conn_info.prepare();
  1472. conn_info.state.server_current_state = server_ready;
  1473. conn_info.oppsite_const_id=tmp_oppsite_const_id;
  1474. conn_manager.ready_num++;
  1475. conn_manager.const_id_mp[tmp_oppsite_const_id]=&conn_info;
  1476. //conn_info.last_state_time=get_current_time(); //dont change this!!!!!!!!!!!!!!!!!!!!!!!!!
  1477. //conn_manager.current_ready_ip=ip;
  1478. //conn_manager.current_ready_port=port;
  1479. //my_id=conn_info.my_id;
  1480. //oppsite_id=conn_info.oppsite_id;
  1481. conn_info.last_hb_recv_time = get_current_time();
  1482. conn_info.last_hb_sent_time = conn_info.last_hb_recv_time;//=get_current_time()
  1483. send_safer(conn_info, 'h',"", 0); /////////////send
  1484. mylog(log_info, "[%s]changed state to server_ready\n",ip_port);
  1485. conn_info.blob->anti_replay.re_init();
  1486. //g_conn_info=conn_info;
  1487. int new_timer_fd;
  1488. set_timer_server(epollfd, new_timer_fd);
  1489. conn_info.timer_fd=new_timer_fd;
  1490. assert(conn_manager.timer_fd_mp.find(new_timer_fd)==conn_manager.timer_fd_mp.end());
  1491. conn_manager.timer_fd_mp[new_timer_fd] = &conn_info;//pack_u64(ip,port);
  1492. //timer_fd_mp[new_timer_fd]
  1493. /*
  1494. if(oppsite_const_id!=0&&tmp_oppsite_const_id!=oppsite_const_id) //TODO MOVE TO READY
  1495. {
  1496. mylog(log_info,"cleared all conv bc of const id doesnt match\n");
  1497. conv_manager.clear();
  1498. }*/
  1499. //oppsite_const_id=tmp_oppsite_const_id;
  1500. }
  1501. else
  1502. {
  1503. conn_info_t &ori_conn_info=*conn_manager.const_id_mp[tmp_oppsite_const_id];
  1504. if(ori_conn_info.state.server_current_state==server_ready)
  1505. {
  1506. if(conn_info.last_state_time<ori_conn_info.last_state_time)
  1507. {
  1508. mylog(log_info,"[%s]conn_info.last_state_time<ori_conn_info.last_state_time. ignored new handshake\n",ip_port);
  1509. conn_info.state.server_current_state=server_idle;
  1510. conn_info.oppsite_const_id=0;
  1511. return 0;
  1512. }
  1513. if(!conn_manager.exist(ori_conn_info.raw_info.recv_info.src_ip,ori_conn_info.raw_info.recv_info.src_port))//TODO remove this
  1514. {
  1515. mylog(log_fatal,"[%s]this shouldnt happen\n",ip_port);
  1516. myexit(-1);
  1517. }
  1518. if(!conn_manager.exist(conn_info.raw_info.recv_info.src_ip,conn_info.raw_info.recv_info.src_port))//TODO remove this
  1519. {
  1520. mylog(log_fatal,"[%s]this shouldnt happen2\n",ip_port);
  1521. myexit(-1);
  1522. }
  1523. conn_info_t *&p_ori=conn_manager.find_insert_p(ori_conn_info.raw_info.recv_info.src_ip,ori_conn_info.raw_info.recv_info.src_port);
  1524. conn_info_t *&p=conn_manager.find_insert_p(conn_info.raw_info.recv_info.src_ip,conn_info.raw_info.recv_info.src_port);
  1525. conn_info_t *tmp=p;
  1526. p=p_ori;
  1527. p_ori=tmp;
  1528. mylog(log_info,"[%s]grabbed a connection\n",ip_port);
  1529. //ori_conn_info.state.server_current_state=server_ready;
  1530. ori_conn_info.recover(conn_info);
  1531. send_safer(ori_conn_info, 'h',"", 0);
  1532. //ori_conn_info.blob->anti_replay.re_init();
  1533. conn_info.state.server_current_state=server_idle;
  1534. conn_info.oppsite_const_id=0;
  1535. }
  1536. else
  1537. {
  1538. mylog(log_fatal,"[%s]this should never happen\n",ip_port);
  1539. myexit(-1);
  1540. }
  1541. return 0;
  1542. }
  1543. return 0;
  1544. }
  1545. int get_src_adress(u32_t &ip)
  1546. {
  1547. struct sockaddr_in remote_addr_in;
  1548. socklen_t slen = sizeof(sockaddr_in);
  1549. memset(&remote_addr_in, 0, sizeof(remote_addr_in));
  1550. remote_addr_in.sin_family = AF_INET;
  1551. remote_addr_in.sin_port = htons(remote_port);
  1552. remote_addr_in.sin_addr.s_addr = remote_address_uint32;
  1553. int new_udp_fd=socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1554. if(new_udp_fd<0)
  1555. {
  1556. mylog(log_warn,"create udp_fd error\n");
  1557. return -1;
  1558. }
  1559. set_buf_size(new_udp_fd);
  1560. mylog(log_debug,"created new udp_fd %d\n",new_udp_fd);
  1561. int ret = connect(new_udp_fd, (struct sockaddr *) &remote_addr_in, slen);
  1562. if(ret!=0)
  1563. {
  1564. mylog(log_warn,"udp fd connect fail\n");
  1565. close(new_udp_fd);
  1566. return -1;
  1567. }
  1568. struct sockaddr_in my_addr;
  1569. unsigned int len=sizeof(my_addr);
  1570. if(getsockname(new_udp_fd, (struct sockaddr *) &my_addr, &len)!=0) return -1;
  1571. ip=my_addr.sin_addr.s_addr;
  1572. close(new_udp_fd);
  1573. return 0;
  1574. }
  1575. int client_event_loop()
  1576. {
  1577. char buf[buf_len];
  1578. conn_info_t conn_info;
  1579. conn_info.my_id=get_true_random_number_nz();
  1580. conn_info.prepare();
  1581. packet_info_t &send_info=conn_info.raw_info.send_info;
  1582. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1583. //printf("?????\n");
  1584. if(source_address_uint32==0)
  1585. {
  1586. mylog(log_info,"get_src_adress called\n");
  1587. if(get_src_adress(source_address_uint32)!=0)
  1588. {
  1589. mylog(log_fatal,"the trick to auto get source ip failed,you should specific an ip by --source-ip\n");
  1590. myexit(-1);
  1591. }
  1592. }
  1593. in_addr tmp;
  1594. tmp.s_addr=source_address_uint32;
  1595. mylog(log_info,"source ip = %s\n",inet_ntoa(tmp));
  1596. //printf("done\n");
  1597. if(try_to_list_and_bind(source_port)!=0)
  1598. {
  1599. mylog(log_fatal,"bind to source_port:%d fail\n ",source_port);
  1600. myexit(-1);
  1601. }
  1602. send_info.src_port=source_port;
  1603. send_info.src_ip = source_address_uint32;
  1604. int i, j, k;int ret;
  1605. init_raw_socket();
  1606. //init_filter(source_port);
  1607. send_info.dst_ip=remote_address_uint32;
  1608. send_info.dst_port=remote_port;
  1609. //g_packet_info.src_ip=source_address_uint32;
  1610. //g_packet_info.src_port=source_port;
  1611. udp_fd=socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1612. set_buf_size(udp_fd);
  1613. int yes = 1;
  1614. //setsockopt(udp_fd, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes));
  1615. struct sockaddr_in local_me;
  1616. socklen_t slen = sizeof(sockaddr_in);
  1617. memset(&local_me, 0, sizeof(local_me));
  1618. local_me.sin_family = AF_INET;
  1619. local_me.sin_port = htons(local_port);
  1620. local_me.sin_addr.s_addr = local_address_uint32;
  1621. if (bind(udp_fd, (struct sockaddr*) &local_me, slen) == -1) {
  1622. mylog(log_fatal,"socket bind error\n");
  1623. //perror("socket bind error");
  1624. myexit(1);
  1625. }
  1626. setnonblocking(udp_fd);
  1627. epollfd = epoll_create1(0);
  1628. const int max_events = 4096;
  1629. struct epoll_event ev, events[max_events];
  1630. if (epollfd < 0) {
  1631. mylog(log_fatal,"epoll return %d\n", epollfd);
  1632. myexit(-1);
  1633. }
  1634. ev.events = EPOLLIN;
  1635. ev.data.u64 = udp_fd;
  1636. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, udp_fd, &ev);
  1637. if (ret!=0) {
  1638. mylog(log_fatal,"add udp_listen_fd error\n");
  1639. myexit(-1);
  1640. }
  1641. ev.events = EPOLLIN;
  1642. ev.data.u64 = raw_recv_fd;
  1643. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, raw_recv_fd, &ev);
  1644. if (ret!= 0) {
  1645. mylog(log_fatal,"add raw_fd error\n");
  1646. myexit(-1);
  1647. }
  1648. ////add_timer for fake_tcp_keep_connection_client
  1649. //sleep(10);
  1650. //memset(&udp_old_addr_in,0,sizeof(sockaddr_in));
  1651. int unbind=1;
  1652. set_timer(epollfd,timer_fd);
  1653. mylog(log_debug,"send_raw : from %x %d to %x %d\n",send_info.src_ip,send_info.src_port,send_info.dst_ip,send_info.dst_port);
  1654. while(1)////////////////////////
  1655. {
  1656. if(about_to_exit) myexit(0);
  1657. epoll_trigger_counter++;
  1658. int nfds = epoll_wait(epollfd, events, max_events, 180 * 1000);
  1659. if (nfds < 0) { //allow zero
  1660. if(errno==EINTR )
  1661. {
  1662. mylog(log_info,"epoll interrupted by signal\n");
  1663. myexit(0);
  1664. }
  1665. else
  1666. {
  1667. mylog(log_fatal,"epoll_wait return %d\n", nfds);
  1668. myexit(-1);
  1669. }
  1670. }
  1671. int idx;
  1672. for (idx = 0; idx < nfds; ++idx) {
  1673. if (events[idx].data.u64 == (u64_t)raw_recv_fd)
  1674. {
  1675. iphdr *iph;tcphdr *tcph;
  1676. client_on_raw_recv(conn_info);
  1677. }
  1678. else if(events[idx].data.u64 ==(u64_t)timer_fd)
  1679. {
  1680. u64_t value;
  1681. read(timer_fd, &value, 8);
  1682. client_on_timer(conn_info);
  1683. mylog(log_trace,"epoll_trigger_counter: %d \n",epoll_trigger_counter);
  1684. epoll_trigger_counter=0;
  1685. }
  1686. else if (events[idx].data.u64 == (u64_t)udp_fd)
  1687. {
  1688. int recv_len;
  1689. struct sockaddr_in udp_new_addr_in;
  1690. if ((recv_len = recvfrom(udp_fd, buf, max_data_len, 0,
  1691. (struct sockaddr *) &udp_new_addr_in, &slen)) == -1) {
  1692. mylog(log_error,"recv_from error,this shouldnt happen at client\n");
  1693. myexit(1);
  1694. };
  1695. if(recv_len>=mtu_warn)
  1696. {
  1697. mylog(log_warn,"huge packet,data len=%d (>=%d).strongly suggested to set a smaller mtu at upper level,to get rid of this warn\n ",recv_len,mtu_warn);
  1698. }
  1699. mylog(log_trace,"Received packet from %s:%d,len: %d\n", inet_ntoa(udp_new_addr_in.sin_addr),
  1700. ntohs(udp_new_addr_in.sin_port),recv_len);
  1701. /*
  1702. if(udp_old_addr_in.sin_addr.s_addr==0&&udp_old_addr_in.sin_port==0)
  1703. {
  1704. memcpy(&udp_old_addr_in,&udp_new_addr_in,sizeof(udp_new_addr_in));
  1705. }
  1706. else if(udp_new_addr_in.sin_addr.s_addr!=udp_old_addr_in.sin_addr.s_addr
  1707. ||udp_new_addr_in.sin_port!=udp_old_addr_in.sin_port)
  1708. {
  1709. if(get_current_time()- last_udp_recv_time <udp_timeout)
  1710. {
  1711. printf("new <ip,port> connected in,ignored,bc last connection is still active\n");
  1712. continue;
  1713. }
  1714. else
  1715. {
  1716. printf("new <ip,port> connected in,accpeted\n");
  1717. memcpy(&udp_old_addr_in,&udp_new_addr_in,sizeof(udp_new_addr_in));
  1718. conv_id++;
  1719. }
  1720. }*/
  1721. //last_udp_recv_time=get_current_time();
  1722. u64_t u64=((u64_t(udp_new_addr_in.sin_addr.s_addr))<<32u)+ntohs(udp_new_addr_in.sin_port);
  1723. u32_t conv;
  1724. if(!conn_info.blob->conv_manager.is_u64_used(u64))
  1725. {
  1726. if(conn_info.blob->conv_manager.get_size() >=max_conv_num)
  1727. {
  1728. mylog(log_warn,"ignored new udp connect bc max_conv_num exceed\n");
  1729. continue;
  1730. }
  1731. conv=conn_info.blob->conv_manager.get_new_conv();
  1732. conn_info.blob->conv_manager.insert_conv(conv,u64);
  1733. mylog(log_info,"new packet from %s:%d,conv_id=%x\n",inet_ntoa(udp_new_addr_in.sin_addr),ntohs(udp_new_addr_in.sin_port),conv);
  1734. }
  1735. else
  1736. {
  1737. conv=conn_info.blob->conv_manager.find_conv_by_u64(u64);
  1738. }
  1739. conn_info.blob->conv_manager.update_active_time(conv);
  1740. if(conn_info.state.client_current_state==client_ready)
  1741. {
  1742. /*
  1743. char buf2[6000];
  1744. int ret1=send_raw(conn_info.raw_info,buf2,40);
  1745. int ret2=send_raw(conn_info.raw_info,buf2,500);
  1746. int ret3=send_raw(conn_info.raw_info,buf2,1000);
  1747. int ret4=send_raw(conn_info.raw_info,buf2,2000);
  1748. mylog(log_warn,"ret= %d %d %d %d\n",ret1,ret2,ret3,ret4);*/
  1749. send_data_safer(conn_info,buf,recv_len,conv);
  1750. }
  1751. }
  1752. else
  1753. {
  1754. mylog(log_fatal,"unknown fd,this should never happen\n");
  1755. myexit(-1);
  1756. }
  1757. }
  1758. }
  1759. return 0;
  1760. }
  1761. int server_event_loop()
  1762. {
  1763. char buf[buf_len];
  1764. int i, j, k;int ret;
  1765. bind_address_uint32=local_address_uint32;//only server has bind adress,client sets it to zero
  1766. if(raw_mode==mode_faketcp)
  1767. {
  1768. bind_fd=socket(AF_INET,SOCK_STREAM,0);
  1769. }
  1770. else if(raw_mode==mode_udp||raw_mode==mode_icmp)//bind an adress to avoid collision,for icmp,there is no port,just bind a udp port
  1771. {
  1772. bind_fd=socket(AF_INET,SOCK_DGRAM,0);
  1773. }
  1774. struct sockaddr_in temp_bind_addr;
  1775. bzero(&temp_bind_addr, sizeof(temp_bind_addr));
  1776. temp_bind_addr.sin_family = AF_INET;
  1777. temp_bind_addr.sin_port = htons(local_port);
  1778. temp_bind_addr.sin_addr.s_addr = local_address_uint32;
  1779. if (bind(bind_fd, (struct sockaddr*)&temp_bind_addr, sizeof(temp_bind_addr)) !=0)
  1780. {
  1781. mylog(log_fatal,"bind fail\n");
  1782. myexit(-1);
  1783. }
  1784. if(raw_mode==mode_faketcp)
  1785. {
  1786. if(listen(bind_fd, SOMAXCONN) != 0 )
  1787. {
  1788. mylog(log_fatal,"listen fail\n");
  1789. myexit(-1);
  1790. }
  1791. }
  1792. init_raw_socket();
  1793. init_filter(local_port);//bpf filter
  1794. epollfd = epoll_create1(0);
  1795. const int max_events = 4096;
  1796. struct epoll_event ev, events[max_events];
  1797. if (epollfd < 0) {
  1798. mylog(log_fatal,"epoll return %d\n", epollfd);
  1799. myexit(-1);
  1800. }
  1801. ev.events = EPOLLIN;
  1802. ev.data.u64 = raw_recv_fd;
  1803. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, raw_recv_fd, &ev);
  1804. if (ret!= 0) {
  1805. mylog(log_fatal,"add raw_fd error\n");
  1806. myexit(-1);
  1807. }
  1808. int timer_fd;
  1809. set_timer(epollfd,timer_fd);
  1810. u64_t begin_time=0;
  1811. u64_t end_time=0;
  1812. while(1)////////////////////////
  1813. {
  1814. if(about_to_exit) myexit(0);
  1815. int nfds = epoll_wait(epollfd, events, max_events, 180 * 1000);
  1816. if (nfds < 0) { //allow zero
  1817. if(errno==EINTR )
  1818. {
  1819. mylog(log_info,"epoll interrupted by signal\n");
  1820. myexit(0);
  1821. }
  1822. else
  1823. {
  1824. mylog(log_fatal,"epoll_wait return %d\n", nfds);
  1825. myexit(-1);
  1826. }
  1827. }
  1828. int idx;
  1829. for (idx = 0; idx < nfds; ++idx)
  1830. {
  1831. //mylog(log_debug,"ndfs: %d \n",nfds);
  1832. epoll_trigger_counter++;
  1833. //printf("%d %d %d %d\n",timer_fd,raw_recv_fd,raw_send_fd,n);
  1834. if ((events[idx].data.u64 ) == (u64_t)timer_fd)
  1835. {
  1836. if(debug_flag)begin_time=get_current_time();
  1837. conn_manager.clear_inactive();
  1838. u64_t dummy;
  1839. read(timer_fd, &dummy, 8);
  1840. //current_time_rough=get_current_time();
  1841. if(debug_flag)
  1842. {
  1843. end_time=get_current_time();
  1844. mylog(log_debug,"timer_fd,%llu,%llu,%llu\n",begin_time,end_time,end_time-begin_time);
  1845. }
  1846. mylog(log_trace,"epoll_trigger_counter: %d \n",epoll_trigger_counter);
  1847. epoll_trigger_counter=0;
  1848. }
  1849. else if (events[idx].data.u64 == (u64_t)raw_recv_fd)
  1850. {
  1851. if(debug_flag)begin_time=get_current_time();
  1852. server_on_raw_recv_multi();
  1853. if(debug_flag)
  1854. {
  1855. end_time=get_current_time();
  1856. mylog(log_debug,"raw_recv_fd,%llu,%llu,%llu \n",begin_time,end_time,end_time-begin_time);
  1857. }
  1858. }
  1859. else if ((events[idx].data.u64 >>32u) == 2u)
  1860. {
  1861. if(debug_flag)begin_time=get_current_time();
  1862. int fd=get_u64_l(events[idx].data.u64);
  1863. u64_t dummy;
  1864. read(fd, &dummy, 8);
  1865. if(conn_manager.timer_fd_mp.find(fd)==conn_manager.timer_fd_mp.end()) //this can happen,when fd is a just closed fd
  1866. {
  1867. mylog(log_info,"timer_fd no longer exits\n");
  1868. continue;
  1869. }
  1870. conn_info_t* p_conn_info=conn_manager.timer_fd_mp[fd];
  1871. u32_t ip=p_conn_info->raw_info.recv_info.src_ip;
  1872. u32_t port=p_conn_info->raw_info.recv_info.src_port;
  1873. assert(conn_manager.exist(ip,port));//TODO remove this for peformance
  1874. assert(p_conn_info->state.server_current_state == server_ready); //TODO remove this for peformance
  1875. //conn_info_t &conn_info=conn_manager.find(ip,port);
  1876. char ip_port[40];
  1877. sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1878. server_on_timer_multi(*p_conn_info,ip_port);
  1879. if(debug_flag)
  1880. {
  1881. end_time=get_current_time();
  1882. mylog(log_debug,"(events[idx].data.u64 >>32u) == 2u ,%llu,%llu,%llu \n",begin_time,end_time,end_time-begin_time);
  1883. }
  1884. }
  1885. else if ((events[idx].data.u64 >>32u) == 1u)
  1886. {
  1887. //uint32_t conv_id=events[n].data.u64>>32u;
  1888. if(debug_flag)begin_time=get_current_time();
  1889. int fd=int((events[idx].data.u64<<32u)>>32u);
  1890. if(conn_manager.udp_fd_mp.find(fd)==conn_manager.udp_fd_mp.end()) //this can happen,when fd is a just closed fd
  1891. {
  1892. mylog(log_debug,"fd no longer exists in udp_fd_mp,udp fd %d\n",fd);
  1893. recv(fd,0,0,0);
  1894. continue;
  1895. }
  1896. conn_info_t* p_conn_info=conn_manager.udp_fd_mp[fd];
  1897. u32_t ip=p_conn_info->raw_info.recv_info.src_ip;
  1898. u32_t port=p_conn_info->raw_info.recv_info.src_port;
  1899. if(!conn_manager.exist(ip,port))//TODO remove this for peformance
  1900. {
  1901. mylog(log_fatal,"ip port no longer exits 2!!!this shouldnt happen\n");
  1902. myexit(-1);
  1903. }
  1904. if(p_conn_info->state.server_current_state!=server_ready)//TODO remove this for peformance
  1905. {
  1906. mylog(log_fatal,"p_conn_info->state.server_current_state!=server_ready!!!this shouldnt happen\n");
  1907. myexit(-1);
  1908. }
  1909. conn_info_t &conn_info=*p_conn_info;
  1910. if(!conn_info.blob->conv_manager.is_u64_used(fd))
  1911. {
  1912. mylog(log_debug,"conv no longer exists,udp fd %d\n",fd);
  1913. int recv_len=recv(fd,0,0,0); ///////////TODO ,delete this
  1914. continue;
  1915. }
  1916. u32_t conv_id=conn_info.blob->conv_manager.find_conv_by_u64(fd);
  1917. int recv_len=recv(fd,buf,max_data_len,0);
  1918. mylog(log_trace,"received a packet from udp_fd,len:%d\n",recv_len);
  1919. if(recv_len<0)
  1920. {
  1921. mylog(log_debug,"udp fd,recv_len<0 continue\n");
  1922. continue;
  1923. }
  1924. if(recv_len>=mtu_warn)
  1925. {
  1926. mylog(log_warn,"huge packet,data len=%d (>=%d).strongly suggested to set a smaller mtu at upper level,to get rid of this warn\n ",recv_len,mtu_warn);
  1927. }
  1928. //conn_info.conv_manager->update_active_time(conv_id); server dosnt update from upd side,only update from raw side. (client updates at both side)
  1929. if(conn_info.state.server_current_state==server_ready)
  1930. {
  1931. send_data_safer(conn_info,buf,recv_len,conv_id);
  1932. //send_data(g_packet_info_send,buf,recv_len,my_id,oppsite_id,conv_id);
  1933. mylog(log_trace,"send_data_safer ,sent !!\n");
  1934. }
  1935. if(debug_flag)
  1936. {
  1937. end_time=get_current_time();
  1938. mylog(log_debug,"(events[idx].data.u64 >>32u) == 1u,%lld,%lld,%lld \n",begin_time,end_time,end_time-begin_time);
  1939. }
  1940. }
  1941. else
  1942. {
  1943. mylog(log_fatal,"unknown fd,this should never happen\n");
  1944. myexit(-1);
  1945. }
  1946. }
  1947. }
  1948. return 0;
  1949. }
  1950. void print_help()
  1951. {
  1952. printf("udp2raw-tunnel\n");
  1953. printf("version: %s %s\n",__DATE__,__TIME__);
  1954. printf("repository: https://github.com/wangyu-/udp2raw-tunnel\n");
  1955. printf("\n");
  1956. printf("usage:\n");
  1957. printf(" run as client : ./this_program -c -l local_listen_ip:local_port -r server_ip:server_port [options]\n");
  1958. printf(" run as server : ./this_program -s -l server_listen_ip:server_port -r remote_ip:remote_port [options]\n");
  1959. printf("\n");
  1960. printf("common options,these options must be same on both side:\n");
  1961. printf(" --raw-mode <string> avaliable values:faketcp(default),udp,icmp\n");
  1962. printf(" -k,--key <string> password to gen symetric key,default:\"secret key\"\n");
  1963. printf(" --auth-mode <string> avaliable values:aes128cbc(default),xor,none\n");
  1964. printf(" --cipher-mode <string> avaliable values:md5(default),crc32,simple,none\n");
  1965. printf(" -a,--auto-rule auto add (and delete) iptables rule\n");
  1966. printf(" -g,--gen-rule generate iptables rule then exit\n");
  1967. printf(" --disable-anti-replay disable anti-replay,not suggested\n");
  1968. //printf("\n");
  1969. printf("client options:\n");
  1970. printf(" --source-ip <ip> force source-ip for raw socket\n");
  1971. printf(" --source-port <port> force source-port for raw socket,tcp/udp only\n");
  1972. printf(" this option disables port changing while re-connecting\n");
  1973. // printf(" \n");
  1974. printf("other options:\n");
  1975. printf(" --log-level <number> 0:never 1:fatal 2:error 3:warn \n");
  1976. printf(" 4:info (default) 5:debug 6:trace\n");
  1977. // printf("\n");
  1978. printf(" --log-position enable file name,function name,line number in log\n");
  1979. printf(" --disable-color disable log color\n");
  1980. printf(" --disable-bpf disable the kernel space filter,most time its not necessary\n");
  1981. printf(" unless you suspect there is a bug\n");
  1982. // printf("\n");
  1983. printf(" --sock-buf <number> buf size for socket,>=10 and <=10240,unit:kbyte,default:1024\n");
  1984. printf(" --seqmode <number> seq increase mode for faketcp:\n");
  1985. printf(" 0:dont increase\n");
  1986. printf(" 1:increase every packet\n");
  1987. printf(" 2:increase randomly, about every 3 packets (default)\n");
  1988. // printf("\n");
  1989. printf(" -h,--help print this help message\n");
  1990. //printf("common options,these options must be same on both side\n");
  1991. }
  1992. void process_arg(int argc, char *argv[])
  1993. {
  1994. int i,j,k,opt;
  1995. static struct option long_options[] =
  1996. {
  1997. /* These options set a flag. */
  1998. {"source-ip", required_argument, 0, 1},
  1999. {"source-port", required_argument, 0, 1},
  2000. {"log-level", required_argument, 0, 1},
  2001. {"key", required_argument, 0, 'k'},
  2002. {"auth-mode", required_argument, 0, 1},
  2003. {"cipher-mode", required_argument, 0, 1},
  2004. {"raw-mode", required_argument, 0, 1},
  2005. {"disable-color", no_argument, 0, 1},
  2006. {"log-position", no_argument, 0, 1},
  2007. {"disable-bpf", no_argument, 0, 1},
  2008. {"disable-anti-replay", no_argument, 0, 1},
  2009. {"auto-rule", no_argument, 0, 'a'},
  2010. {"gen-rule", no_argument, 0, 'g'},
  2011. {"debug", no_argument, 0, 1},
  2012. {"clear", no_argument, 0, 1},
  2013. {"lower-level", required_argument, 0, 1},
  2014. {"sock-buf", required_argument, 0, 1},
  2015. {"seq-mode", required_argument, 0, 1},
  2016. {NULL, 0, 0, 0}
  2017. };
  2018. int option_index = 0;
  2019. for (i = 0; i < argc; i++)
  2020. {
  2021. if(strcmp(argv[i],"-h")==0||strcmp(argv[i],"--help")==0)
  2022. {
  2023. print_help();
  2024. myexit(0);
  2025. }
  2026. }
  2027. for (i = 0; i < argc; i++)
  2028. {
  2029. if(strcmp(argv[i],"--log-level")==0)
  2030. {
  2031. if(i<argc -1)
  2032. {
  2033. sscanf(argv[i+1],"%d",&log_level);
  2034. if(0<=log_level&&log_level<log_end)
  2035. {
  2036. }
  2037. else
  2038. {
  2039. log_bare(log_fatal,"invalid log_level\n");
  2040. myexit(-1);
  2041. }
  2042. }
  2043. }
  2044. if(strcmp(argv[i],"--disable-color")==0)
  2045. {
  2046. enable_log_color=0;
  2047. }
  2048. }
  2049. mylog(log_info,"argc=%d ", argc);
  2050. for (i = 0; i < argc; i++) {
  2051. log_bare(log_info, "%s ", argv[i]);
  2052. }
  2053. log_bare(log_info, "\n");
  2054. if (argc == 1)
  2055. {
  2056. print_help();
  2057. myexit(-1);
  2058. }
  2059. int no_l = 1, no_r = 1;
  2060. while ((opt = getopt_long(argc, argv, "l:r:schk:ag",long_options,&option_index)) != -1) {
  2061. //string opt_key;
  2062. //opt_key+=opt;
  2063. switch (opt) {
  2064. case 'l':
  2065. no_l = 0;
  2066. if (strchr(optarg, ':') != 0) {
  2067. sscanf(optarg, "%[^:]:%d", local_address, &local_port);
  2068. if(local_port==22)
  2069. {
  2070. mylog(log_fatal,"port 22 not allowed\n");
  2071. myexit(-1);
  2072. }
  2073. } else {
  2074. mylog(log_fatal,"invalid parameter for -l ,%s,should be ip:port\n",optarg);
  2075. myexit(-1);
  2076. }
  2077. break;
  2078. case 'r':
  2079. no_r = 0;
  2080. if (strchr(optarg, ':') != 0) {
  2081. sscanf(optarg, "%[^:]:%d", remote_address, &remote_port);
  2082. if(remote_port==22)
  2083. {
  2084. mylog(log_fatal,"port 22 not allowed\n");
  2085. myexit(-1);
  2086. }
  2087. } else {
  2088. mylog(log_fatal,"invalid parameter for -r ,%s,should be ip:port\n",optarg);
  2089. myexit(-1);
  2090. }
  2091. break;
  2092. case 's':
  2093. if(program_mode==0)
  2094. {
  2095. program_mode=server_mode;
  2096. }
  2097. else
  2098. {
  2099. mylog(log_fatal,"-s /-c has already been set,conflict\n");
  2100. myexit(-1);
  2101. }
  2102. break;
  2103. case 'c':
  2104. if(program_mode==0)
  2105. {
  2106. program_mode=client_mode;
  2107. }
  2108. else
  2109. {
  2110. mylog(log_fatal,"-s /-c has already been set,conflict\n");
  2111. myexit(-1);
  2112. }
  2113. break;
  2114. case 'h':
  2115. break;
  2116. case 'a':
  2117. auto_add_iptables_rule=1;
  2118. break;
  2119. case 'g':
  2120. generate_iptables_rule=1;
  2121. break;
  2122. case 'k':
  2123. mylog(log_debug,"parsing key option\n");
  2124. sscanf(optarg,"%s",key_string);
  2125. break;
  2126. case 1:
  2127. mylog(log_debug,"option_index: %d\n",option_index);
  2128. if(strcmp(long_options[option_index].name,"clear")==0)
  2129. {
  2130. int ret =system("iptables-save |grep udp2raw_dWRwMnJhdw|sed -n 's/^-A/iptables -D/p'|sh");
  2131. //system("iptables-save |grep udp2raw_dWRwMnJhdw|sed 's/^-A/iptables -D/'|sh");
  2132. //system("iptables-save|grep -v udp2raw_dWRwMnJhdw|iptables-restore");
  2133. mylog(log_info,"tried to clear all iptables rule created previously,return value %d\n",ret);
  2134. myexit(-1);
  2135. }
  2136. else if(strcmp(long_options[option_index].name,"source-ip")==0)
  2137. {
  2138. mylog(log_debug,"parsing long option :source-ip\n");
  2139. sscanf(optarg, "%s", source_address);
  2140. mylog(log_debug,"source: %s\n",source_address);
  2141. }
  2142. else if(strcmp(long_options[option_index].name,"source-port")==0)
  2143. {
  2144. mylog(log_debug,"parsing long option :source-port\n");
  2145. sscanf(optarg, "%d", &source_port);
  2146. mylog(log_info,"source: %d\n",source_port);
  2147. }
  2148. else if(strcmp(long_options[option_index].name,"raw-mode")==0)
  2149. {
  2150. for(i=0;i<mode_end;i++)
  2151. {
  2152. if(strcmp(optarg,raw_mode_tostring[i])==0)
  2153. {
  2154. //printf("%d i\n",i);
  2155. //printf("%s",raw_mode_tostring[i]);
  2156. raw_mode=(raw_mode_t)i;
  2157. break;
  2158. }
  2159. }
  2160. if(i==mode_end)
  2161. {
  2162. mylog(log_fatal,"no such raw_mode %s\n",optarg);
  2163. myexit(-1);
  2164. }
  2165. }
  2166. else if(strcmp(long_options[option_index].name,"auth-mode")==0)
  2167. {
  2168. for(i=0;i<auth_end;i++)
  2169. {
  2170. if(strcmp(optarg,auth_mode_tostring[i])==0)
  2171. {
  2172. auth_mode=(auth_mode_t)i;
  2173. break;
  2174. }
  2175. }
  2176. if(i==auth_end)
  2177. {
  2178. mylog(log_fatal,"no such auth_mode %s\n",optarg);
  2179. myexit(-1);
  2180. }
  2181. }
  2182. else if(strcmp(long_options[option_index].name,"cipher-mode")==0)
  2183. {
  2184. for(i=0;i<cipher_end;i++)
  2185. {
  2186. if(strcmp(optarg,cipher_mode_tostring[i])==0)
  2187. {
  2188. cipher_mode=(cipher_mode_t)i;
  2189. break;
  2190. }
  2191. }
  2192. if(i==cipher_end)
  2193. {
  2194. mylog(log_fatal,"no such cipher_mode %s\n",optarg);
  2195. myexit(-1);
  2196. }
  2197. }
  2198. else if(strcmp(long_options[option_index].name,"log-level")==0)
  2199. {
  2200. }
  2201. else if(strcmp(long_options[option_index].name,"lower-level")==0)
  2202. {
  2203. if(strchr(optarg,'#')==0)
  2204. {
  2205. mylog(log_fatal,"lower-level parameter invaild,should be if_name#mac_adress ,ie eth0#00:23:45:67:89:b9\n");
  2206. myexit(-1);
  2207. }
  2208. lower_level=1;
  2209. u32_t hw[6];
  2210. memset(hw,0,sizeof(hw));
  2211. sscanf(optarg,"%[^#]#%x:%x:%x:%x:%x:%x",if_name,&hw[0],&hw[1],&hw[2],&hw[3],&hw[4],&hw[5]);
  2212. mylog(log_warn,"make sure this is correct: ifname=<%s> gateway_hw_hd=<%x:%x:%x:%x:%x:%x> \n",if_name,hw[0],hw[1],hw[2],hw[3],hw[4],hw[5]);
  2213. for(int i=0;i<6;i++)
  2214. {
  2215. oppsite_hw_addr[i]=uint8_t(hw[i]);
  2216. }
  2217. }
  2218. else if(strcmp(long_options[option_index].name,"disable-color")==0)
  2219. {
  2220. //enable_log_color=0;
  2221. }
  2222. else if(strcmp(long_options[option_index].name,"debug")==0)
  2223. {
  2224. debug_flag=1;
  2225. //enable_log_color=0;
  2226. }
  2227. else if(strcmp(long_options[option_index].name,"debug-resend")==0)
  2228. {
  2229. //debug_resend=1;
  2230. //enable_log_color=0;
  2231. }
  2232. else if(strcmp(long_options[option_index].name,"log-position")==0)
  2233. {
  2234. enable_log_position=1;
  2235. }
  2236. else if(strcmp(long_options[option_index].name,"disable-bpf")==0)
  2237. {
  2238. disable_bpf_filter=1;
  2239. }
  2240. else if(strcmp(long_options[option_index].name,"disable-anti-replay")==0)
  2241. {
  2242. disable_anti_replay=1;
  2243. }
  2244. else if(strcmp(long_options[option_index].name,"sock-buf")==0)
  2245. {
  2246. int tmp=-1;
  2247. sscanf(optarg,"%d",&tmp);
  2248. if(10<=tmp&&tmp<=10*1024)
  2249. {
  2250. socket_buf_size=tmp*1024;
  2251. }
  2252. else
  2253. {
  2254. mylog(log_fatal,"sock-buf value must be between 1 and 10240 (kbyte) \n");
  2255. myexit(-1);
  2256. }
  2257. }
  2258. else if(strcmp(long_options[option_index].name,"seq-mode")==0)
  2259. {
  2260. sscanf(optarg,"%d",&seq_mode);
  2261. if(0<=seq_mode&&seq_mode<=2)
  2262. {
  2263. }
  2264. else
  2265. {
  2266. mylog(log_fatal,"seq_mode value must be 0,1,or 2 \n");
  2267. myexit(-1);
  2268. }
  2269. }
  2270. else
  2271. {
  2272. mylog(log_warn,"ignored unknown long option ,option_index:%d code:<%x>\n",option_index, optopt);
  2273. }
  2274. break;
  2275. default:
  2276. mylog(log_fatal,"unknown option ,code:<%c>,<%x>\n",optopt, optopt);
  2277. myexit(-1);
  2278. }
  2279. }
  2280. if (no_l)
  2281. mylog(log_fatal,"error: -l not found\n");
  2282. if (no_r)
  2283. mylog(log_fatal,"error: -r not found\n");
  2284. if(program_mode==0)
  2285. mylog(log_fatal,"error: -c /-s hasnt been set\n");
  2286. if (no_l || no_r||program_mode==0)
  2287. {
  2288. print_help();
  2289. myexit(-1);
  2290. }
  2291. mylog(log_info,"important variables: ");
  2292. log_bare(log_info,"log_level=%d:%s ",log_level,log_text[log_level]);
  2293. log_bare(log_info,"raw_mode=%s ",raw_mode_tostring[raw_mode]);
  2294. log_bare(log_info,"cipher_mode=%s ",cipher_mode_tostring[cipher_mode]);
  2295. log_bare(log_info,"auth_mode=%s ",auth_mode_tostring[auth_mode]);
  2296. log_bare(log_info,"key=%s ",key_string);
  2297. log_bare(log_info,"local_ip=%s ",local_address);
  2298. log_bare(log_info,"local_port=%d ",local_port);
  2299. log_bare(log_info,"remote_ip=%s ",remote_address);
  2300. log_bare(log_info,"remote_port=%d ",remote_port);
  2301. log_bare(log_info,"source_ip=%s ",source_address);
  2302. log_bare(log_info,"source_port=%d ",source_port);
  2303. log_bare(log_info,"socket_buf_size=%d ",socket_buf_size);
  2304. log_bare(log_info,"\n");
  2305. }
  2306. void iptables_rule()
  2307. {
  2308. char rule[200];
  2309. if(program_mode==client_mode)
  2310. {
  2311. if(raw_mode==mode_faketcp)
  2312. {
  2313. sprintf(rule,"INPUT -s %s/32 -p tcp -m tcp --sport %d -j DROP",remote_address,remote_port);
  2314. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -s %s/32 -p tcp -m tcp --sport %d -j DROP\n",remote_address,remote_port);
  2315. }
  2316. if(raw_mode==mode_udp)
  2317. {
  2318. sprintf(rule,"INPUT -s %s/32 -p udp -m udp --sport %d -j DROP",remote_address,remote_port);
  2319. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -s %s/32 -p udp -m udp --sport %d -j DROP\n",remote_address,remote_port);
  2320. }
  2321. if(raw_mode==mode_icmp)
  2322. {
  2323. sprintf(rule,"INPUT -s %s/32 -p icmp -j DROP",remote_address);
  2324. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -s %s/32 -p icmp -j DROP\n",remote_address);
  2325. }
  2326. }
  2327. if(program_mode==server_mode)
  2328. {
  2329. if(raw_mode==mode_faketcp)
  2330. {
  2331. sprintf(rule,"INPUT -p tcp -m tcp --dport %d -j DROP",local_port);
  2332. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -p tcp -m tcp --dport %d -j DROP\n",local_port);
  2333. }
  2334. if(raw_mode==mode_udp)
  2335. {
  2336. sprintf(rule,"INPUT -p udp -m udp --dport %d -j DROP",local_port);
  2337. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -p udp -m udp --udp %d -j DROP\n",local_port);
  2338. }
  2339. if(raw_mode==mode_icmp)
  2340. {
  2341. if(local_address_uint32==0)
  2342. {
  2343. sprintf(rule,"INPUT -p icmp -j DROP");
  2344. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -p icmp -j DROP\n");
  2345. }
  2346. else
  2347. {
  2348. sprintf(rule,"INPUT -d %s/32 -p icmp -j DROP",local_address);
  2349. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -d %s/32 -p icmp -j DROP\n",local_address);
  2350. }
  2351. }
  2352. }
  2353. if(generate_iptables_rule)
  2354. {
  2355. printf("generated iptables rule:\n");
  2356. printf("iptables -I %s\n",rule);
  2357. myexit(-1);
  2358. }
  2359. else if(auto_add_iptables_rule)
  2360. {
  2361. strcat(rule," -m comment --comment udp2raw_dWRwMnJhdw_");
  2362. char const_id_str[100];
  2363. sprintf(const_id_str,"%x_",const_id);
  2364. strcat(rule,const_id_str);
  2365. time_t timer;
  2366. char buffer[26];
  2367. struct tm* tm_info;
  2368. time(&timer);
  2369. tm_info = localtime(&timer);
  2370. strftime(buffer, 26, "%Y-%m-%d-%H:%M:%S", tm_info);
  2371. strcat(rule,buffer);
  2372. add_iptables_rule(rule);
  2373. }
  2374. else
  2375. {
  2376. mylog(log_warn,"make sure you have run once: iptables -I %s\n",rule);
  2377. }
  2378. }
  2379. int main(int argc, char *argv[])
  2380. {
  2381. //printf("%d %d %d %d",larger_than_u32(1,2),larger_than_u32(2,1),larger_than_u32(0xeeaaeebb,2),larger_than_u32(2,0xeeaaeebb));
  2382. //assert(0==1);
  2383. dup2(1, 2);//redirect stderr to stdout
  2384. signal(SIGINT, signal_handler);
  2385. signal(SIGHUP, signal_handler);
  2386. signal(SIGKILL, signal_handler);
  2387. signal(SIGTERM, signal_handler);
  2388. signal(SIGQUIT, signal_handler);
  2389. process_arg(argc,argv);
  2390. local_address_uint32=inet_addr(local_address);
  2391. remote_address_uint32=inet_addr(remote_address);
  2392. source_address_uint32=inet_addr(source_address);
  2393. //current_time_rough=get_current_time();
  2394. init_random_number_fd();
  2395. srand(get_true_random_number_nz());
  2396. const_id=get_true_random_number_nz();
  2397. mylog(log_info,"const_id:%x\n",const_id);
  2398. char tmp[1000]="";
  2399. strcat(tmp,key_string);
  2400. strcat(tmp,"key1");
  2401. md5((uint8_t*)tmp,strlen(tmp),(uint8_t*)key);
  2402. /*
  2403. tmp[0]=0;
  2404. strcat(tmp,key_string);
  2405. strcat(tmp,"key2");
  2406. md5((uint8_t*)tmp,strlen(tmp),(uint8_t*)key2);*/
  2407. iptables_rule();
  2408. if(program_mode==client_mode)
  2409. {
  2410. client_event_loop();
  2411. }
  2412. else
  2413. {
  2414. server_event_loop();
  2415. }
  2416. return 0;
  2417. }