main.cpp 74 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859
  1. #include "common.h"
  2. #include "network.h"
  3. #include "log.h"
  4. extern "C" {
  5. #include "lib/md5.h"
  6. }
  7. char local_address[100]="0.0.0.0", remote_address[100]="255.255.255.255",source_address[100]="0.0.0.0";
  8. u32_t local_address_uint32,remote_address_uint32,source_address_uint32;
  9. int source_port=0,local_port = -1, remote_port = -1;
  10. id_t const_id=0;
  11. const int disable_conv_clear=0;
  12. const int disable_conn_clear=0;
  13. enum server_current_state_t {server_idle=0,server_handshake1,server_ready};
  14. enum client_current_state_t {client_idle=0,client_tcp_handshake,client_handshake1,client_handshake2,client_ready};
  15. union current_state_t
  16. {
  17. server_current_state_t server_current_state;
  18. client_current_state_t client_current_state;
  19. };
  20. int udp_fd=-1; //for client only
  21. int bind_fd=-1; //bind only,never send or recv
  22. int epollfd=-1;
  23. int timer_fd=-1;
  24. int fail_time_counter=0;
  25. int epoll_trigger_counter=0;
  26. int debug_flag=0;
  27. int auto_add_iptables_rule=0;
  28. int generate_iptables_rule=0;
  29. int debug_resend=0;
  30. int disable_anti_replay=0;
  31. char key_string[1000]= "secret key";
  32. char key[16];//,key2[16];
  33. int mtu_warn=1375;
  34. //uint64_t current_time_rough=0;
  35. int VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV;
  36. ////////==============================variable divider=============================================================
  37. struct anti_replay_t
  38. {
  39. u64_t max_packet_received;
  40. char window[anti_replay_window_size];
  41. anti_replay_seq_t anti_replay_seq;
  42. anti_replay_seq_t get_new_seq_for_send()
  43. {
  44. return anti_replay_seq++;
  45. }
  46. anti_replay_t()
  47. {
  48. max_packet_received=0;
  49. anti_replay_seq=get_true_random_number_64()/10;//random first seq
  50. //memset(window,0,sizeof(window)); //not necessary
  51. }
  52. void re_init()
  53. {
  54. max_packet_received=0;
  55. //memset(window,0,sizeof(window));
  56. }
  57. int is_vaild(u64_t seq)
  58. {
  59. if(disable_anti_replay) return 1;
  60. //if(disabled) return 0;
  61. if(seq==max_packet_received) return 0;
  62. else if(seq>max_packet_received)
  63. {
  64. if(seq-max_packet_received>=anti_replay_window_size)
  65. {
  66. memset(window,0,sizeof(window));
  67. window[seq%anti_replay_window_size]=1;
  68. }
  69. else
  70. {
  71. for (u64_t i=max_packet_received+1;i<seq;i++)
  72. window[i%anti_replay_window_size]=0;
  73. window[seq%anti_replay_window_size]=1;
  74. }
  75. max_packet_received=seq;
  76. return 1;
  77. }
  78. else if(seq<max_packet_received)
  79. {
  80. if(max_packet_received-seq>=anti_replay_window_size) return 0;
  81. else
  82. {
  83. if (window[seq%anti_replay_window_size]==1) return 0;
  84. else
  85. {
  86. window[seq%anti_replay_window_size]=1;
  87. return 1;
  88. }
  89. }
  90. }
  91. return 0; //for complier check
  92. }
  93. };//anti_replay;
  94. void server_clear_function(u64_t u64);
  95. struct conv_manager_t //TODO change map to unordered map
  96. {
  97. //typedef hash_map map;
  98. unordered_map<u64_t,u32_t> u64_to_conv; //conv and u64 are both supposed to be uniq
  99. unordered_map<u32_t,u64_t> conv_to_u64;
  100. unordered_map<u32_t,u64_t> conv_last_active_time;
  101. unordered_map<u32_t,u64_t>::iterator clear_it;
  102. unordered_map<u32_t,u64_t>::iterator it;
  103. unordered_map<u32_t,u64_t>::iterator old_it;
  104. //void (*clear_function)(uint64_t u64) ;
  105. long long last_clear_time;
  106. conv_manager_t()
  107. {
  108. clear_it=conv_last_active_time.begin();
  109. long long last_clear_time=0;
  110. //clear_function=0;
  111. }
  112. ~conv_manager_t()
  113. {
  114. clear();
  115. }
  116. int get_size()
  117. {
  118. return conv_to_u64.size();
  119. }
  120. void reserve()
  121. {
  122. u64_to_conv.reserve(10007);
  123. conv_to_u64.reserve(10007);
  124. conv_last_active_time.reserve(10007);
  125. }
  126. void clear()
  127. {
  128. if(disable_conv_clear) return ;
  129. if(program_mode==server_mode)
  130. {
  131. for(it=conv_to_u64.begin();it!=conv_to_u64.end();it++)
  132. {
  133. //int fd=int((it->second<<32u)>>32u);
  134. server_clear_function( it->second);
  135. }
  136. }
  137. u64_to_conv.clear();
  138. conv_to_u64.clear();
  139. conv_last_active_time.clear();
  140. clear_it=conv_last_active_time.begin();
  141. }
  142. u32_t get_new_conv()
  143. {
  144. u32_t conv=get_true_random_number_nz();
  145. while(conv_to_u64.find(conv)!=conv_to_u64.end())
  146. {
  147. conv=get_true_random_number_nz();
  148. }
  149. return conv;
  150. }
  151. int is_conv_used(u32_t conv)
  152. {
  153. return conv_to_u64.find(conv)!=conv_to_u64.end();
  154. }
  155. int is_u64_used(u64_t u64)
  156. {
  157. return u64_to_conv.find(u64)!=u64_to_conv.end();
  158. }
  159. u32_t find_conv_by_u64(u64_t u64)
  160. {
  161. return u64_to_conv[u64];
  162. }
  163. u64_t find_u64_by_conv(u32_t conv)
  164. {
  165. return conv_to_u64[conv];
  166. }
  167. int update_active_time(u32_t conv)
  168. {
  169. return conv_last_active_time[conv]=get_current_time();
  170. }
  171. int insert_conv(u32_t conv,u64_t u64)
  172. {
  173. u64_to_conv[u64]=conv;
  174. conv_to_u64[conv]=u64;
  175. conv_last_active_time[conv]=get_current_time();
  176. return 0;
  177. }
  178. int erase_conv(u32_t conv)
  179. {
  180. if(disable_conv_clear) return 0;
  181. u64_t u64=conv_to_u64[conv];
  182. if(program_mode==server_mode)
  183. {
  184. server_clear_function(u64);
  185. }
  186. conv_to_u64.erase(conv);
  187. u64_to_conv.erase(u64);
  188. conv_last_active_time.erase(conv);
  189. return 0;
  190. }
  191. int clear_inactive(char * ip_port=0)
  192. {
  193. if(get_current_time()-last_clear_time>conv_clear_interval)
  194. {
  195. last_clear_time=get_current_time();
  196. return clear_inactive0(ip_port);
  197. }
  198. return 0;
  199. }
  200. int clear_inactive0(char * ip_port)
  201. {
  202. if(disable_conv_clear) return 0;
  203. //map<uint32_t,uint64_t>::iterator it;
  204. int cnt=0;
  205. it=clear_it;
  206. int size=conv_last_active_time.size();
  207. int num_to_clean=size/conv_clear_ratio+conv_clear_min; //clear 1/10 each time,to avoid latency glitch
  208. u64_t current_time=get_current_time();
  209. for(;;)
  210. {
  211. if(cnt>=num_to_clean) break;
  212. if(conv_last_active_time.begin()==conv_last_active_time.end()) break;
  213. if(it==conv_last_active_time.end())
  214. {
  215. it=conv_last_active_time.begin();
  216. }
  217. if( current_time -it->second >conv_timeout )
  218. {
  219. //mylog(log_info,"inactive conv %u cleared \n",it->first);
  220. old_it=it;
  221. it++;
  222. u32_t conv= old_it->first;
  223. erase_conv(old_it->first);
  224. if(ip_port==0)
  225. {
  226. mylog(log_info,"conv %x cleared\n",conv);
  227. }
  228. else
  229. {
  230. mylog(log_info,"[%s]conv %x cleared\n",ip_port,conv);
  231. }
  232. }
  233. else
  234. {
  235. it++;
  236. }
  237. cnt++;
  238. }
  239. return 0;
  240. }
  241. };//g_conv_manager;
  242. struct blob_t
  243. {
  244. conv_manager_t conv_manager;
  245. anti_replay_t anti_replay;
  246. };
  247. struct conn_info_t
  248. {
  249. current_state_t state;
  250. raw_info_t raw_info;
  251. u64_t last_state_time;
  252. u64_t last_hb_sent_time; //client re-use this for retry
  253. u64_t last_hb_recv_time;
  254. //long long last_resent_time;
  255. id_t my_id;
  256. id_t oppsite_id;
  257. int timer_fd;
  258. id_t oppsite_const_id;
  259. blob_t *blob;
  260. uint8_t my_roller;
  261. uint8_t oppsite_roller;
  262. u64_t last_oppsite_roller_time;
  263. /*
  264. const uint32_t &ip=raw_info.recv_info.src_ip;
  265. const uint16_t &port=raw_info.recv_info.src_port;
  266. */
  267. void recover(const conn_info_t &conn_info)
  268. {
  269. raw_info=conn_info.raw_info;
  270. last_state_time=conn_info.last_state_time;
  271. last_hb_recv_time=conn_info.last_hb_recv_time;
  272. last_hb_sent_time=conn_info.last_hb_sent_time;
  273. my_id=conn_info.my_id;
  274. oppsite_id=conn_info.oppsite_id;
  275. blob->anti_replay.re_init();
  276. my_roller=0;//no need to set,but for easier debug,set it to zero
  277. oppsite_roller=0;//same as above
  278. last_oppsite_roller_time=0;
  279. }
  280. void re_init()
  281. {
  282. //send_packet_info.protocol=g_packet_info_send.protocol;
  283. if(program_mode==server_mode)
  284. state.server_current_state=server_idle;
  285. else
  286. state.client_current_state=client_idle;
  287. last_state_time=0;
  288. oppsite_const_id=0;
  289. timer_fd=0;
  290. my_roller=0;
  291. oppsite_roller=0;
  292. last_oppsite_roller_time=0;
  293. }
  294. conn_info_t()
  295. {
  296. blob=0;
  297. re_init();
  298. }
  299. void prepare()
  300. {
  301. blob=new blob_t;
  302. }
  303. conn_info_t(const conn_info_t&b)
  304. {
  305. //mylog(log_error,"called!!!!!!!!!!!!!\n");
  306. *this=b;
  307. if(blob!=0)
  308. {
  309. blob=new blob_t(*b.blob);
  310. }
  311. }
  312. conn_info_t& operator=(const conn_info_t& b)
  313. {
  314. mylog(log_fatal,"not allowed\n");
  315. myexit(-1);
  316. return *this;
  317. }
  318. ~conn_info_t();
  319. };//g_conn_info;
  320. struct conn_manager_t
  321. {
  322. u32_t ready_num;
  323. unordered_map<int,conn_info_t *> udp_fd_mp; //a bit dirty to used pointer,but can void unordered_map search
  324. unordered_map<int,conn_info_t *> timer_fd_mp;//we can use pointer here since unordered_map.rehash() uses shallow copy
  325. unordered_map<id_t,conn_info_t *> const_id_mp;
  326. unordered_map<u64_t,conn_info_t*> mp; //put it at end so that it de-consturcts first
  327. unordered_map<u64_t,conn_info_t*>::iterator clear_it;
  328. long long last_clear_time;
  329. conn_manager_t()
  330. {
  331. ready_num=0;
  332. mp.reserve(10007);
  333. clear_it=mp.begin();
  334. timer_fd_mp.reserve(10007);
  335. const_id_mp.reserve(10007);
  336. udp_fd_mp.reserve(100007);
  337. last_clear_time=0;
  338. //current_ready_ip=0;
  339. // current_ready_port=0;
  340. }
  341. int exist(u32_t ip,uint16_t port)
  342. {
  343. u64_t u64=0;
  344. u64=ip;
  345. u64<<=32u;
  346. u64|=port;
  347. if(mp.find(u64)!=mp.end())
  348. {
  349. return 1;
  350. }
  351. return 0;
  352. }
  353. /*
  354. int insert(uint32_t ip,uint16_t port)
  355. {
  356. uint64_t u64=0;
  357. u64=ip;
  358. u64<<=32u;
  359. u64|=port;
  360. mp[u64];
  361. return 0;
  362. }*/
  363. conn_info_t *& find_insert_p(u32_t ip,uint16_t port) //be aware,the adress may change after rehash
  364. {
  365. u64_t u64=0;
  366. u64=ip;
  367. u64<<=32u;
  368. u64|=port;
  369. unordered_map<u64_t,conn_info_t*>::iterator it=mp.find(u64);
  370. if(it==mp.end())
  371. {
  372. mp[u64]=new conn_info_t;
  373. }
  374. return mp[u64];
  375. }
  376. conn_info_t & find_insert(u32_t ip,uint16_t port) //be aware,the adress may change after rehash
  377. {
  378. u64_t u64=0;
  379. u64=ip;
  380. u64<<=32u;
  381. u64|=port;
  382. unordered_map<u64_t,conn_info_t*>::iterator it=mp.find(u64);
  383. if(it==mp.end())
  384. {
  385. mp[u64]=new conn_info_t;
  386. }
  387. return *mp[u64];
  388. }
  389. int erase(unordered_map<u64_t,conn_info_t*>::iterator erase_it)
  390. {
  391. if(erase_it->second->state.server_current_state==server_ready)
  392. {
  393. ready_num--;
  394. assert(i32_t(ready_num)!=-1);
  395. assert(erase_it->second!=0);
  396. assert(erase_it->second->timer_fd !=0);
  397. assert(erase_it->second->oppsite_const_id!=0);
  398. assert(const_id_mp.find(erase_it->second->oppsite_const_id)!=const_id_mp.end());
  399. assert(timer_fd_mp.find(erase_it->second->timer_fd)!=timer_fd_mp.end());
  400. const_id_mp.erase(erase_it->second->oppsite_const_id);
  401. timer_fd_mp.erase(erase_it->second->timer_fd);
  402. close(erase_it->second->timer_fd);// close will auto delte it from epoll
  403. delete(erase_it->second);
  404. mp.erase(erase_it->first);
  405. }
  406. else
  407. {
  408. assert(erase_it->second->blob==0);
  409. assert(erase_it->second->timer_fd ==0);
  410. assert(erase_it->second->oppsite_const_id==0);
  411. delete(erase_it->second);
  412. mp.erase(erase_it->first);
  413. }
  414. return 0;
  415. }
  416. int clear_inactive()
  417. {
  418. if(get_current_time()-last_clear_time>conn_clear_interval)
  419. {
  420. last_clear_time=get_current_time();
  421. return clear_inactive0();
  422. }
  423. return 0;
  424. }
  425. int clear_inactive0()
  426. {
  427. unordered_map<u64_t,conn_info_t*>::iterator it;
  428. unordered_map<u64_t,conn_info_t*>::iterator old_it;
  429. if(disable_conn_clear) return 0;
  430. //map<uint32_t,uint64_t>::iterator it;
  431. int cnt=0;
  432. it=clear_it;
  433. int size=mp.size();
  434. int num_to_clean=size/conn_clear_ratio+conn_clear_min; //clear 1/10 each time,to avoid latency glitch
  435. mylog(log_trace,"mp.size() %d\n", size);
  436. num_to_clean=min(num_to_clean,(int)mp.size());
  437. u64_t current_time=get_current_time();
  438. for(;;)
  439. {
  440. if(cnt>=num_to_clean) break;
  441. if(mp.begin()==mp.end()) break;
  442. if(it==mp.end())
  443. {
  444. it=mp.begin();
  445. }
  446. if(it->second->state.server_current_state==server_ready &&current_time - it->second->last_hb_recv_time <=server_conn_timeout)
  447. {
  448. it++;
  449. }
  450. else if(it->second->state.server_current_state!=server_ready&& current_time - it->second->last_state_time <=server_handshake_timeout )
  451. {
  452. it++;
  453. }
  454. else if(it->second->blob!=0&&it->second->blob->conv_manager.get_size() >0)
  455. {
  456. assert(it->second->state.server_current_state==server_ready);
  457. it++;
  458. }
  459. else
  460. {
  461. mylog(log_info,"[%s:%d]inactive conn cleared \n",my_ntoa(it->second->raw_info.recv_info.src_ip),it->second->raw_info.recv_info.src_port);
  462. old_it=it;
  463. it++;
  464. erase(old_it);
  465. }
  466. cnt++;
  467. }
  468. return 0;
  469. }
  470. }conn_manager;
  471. conn_info_t::~conn_info_t()
  472. {
  473. if(program_mode==server_mode)
  474. {
  475. if(state.server_current_state==server_ready)
  476. {
  477. assert(blob!=0);
  478. assert(oppsite_const_id!=0);
  479. //assert(conn_manager.const_id_mp.find(oppsite_const_id)!=conn_manager.const_id_mp.end()); // conn_manager 's deconstuction function erases it
  480. }
  481. else
  482. {
  483. assert(blob==0);
  484. assert(oppsite_const_id==0);
  485. }
  486. }
  487. //if(oppsite_const_id!=0) //do this at conn_manager 's deconstuction function
  488. //conn_manager.const_id_mp.erase(oppsite_const_id);
  489. if(blob!=0)
  490. delete blob;
  491. //send_packet_info.protocol=g_packet_info_send.protocol;
  492. }
  493. int TTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTT;
  494. ////////==========================type divider=======================================================
  495. int server_on_raw_recv_pre_ready(conn_info_t &conn_info,char * ip_port,u32_t tmp_oppsite_const_id);
  496. int server_on_raw_recv_ready(conn_info_t &conn_info,char * ip_port,char type,char *data,int data_len);
  497. int server_on_raw_recv_handshake1(conn_info_t &conn_info,char * ip_port,char * data, int data_len);
  498. int DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD;
  499. ////////////////=======================declear divider=============================
  500. void server_clear_function(u64_t u64)
  501. {
  502. int fd=int(u64);
  503. int ret;
  504. assert(fd!=0);
  505. /*
  506. epoll_event ev;
  507. ev.events = EPOLLIN;
  508. ev.data.u64 = u64;
  509. ret = epoll_ctl(epollfd, EPOLL_CTL_DEL, fd, &ev);
  510. if (ret!=0)
  511. {
  512. mylog(log_fatal,"fd:%d epoll delete failed!!!!\n",fd);
  513. myexit(-1); //this shouldnt happen
  514. }*/ //no need
  515. ret= close(fd); //closed fd should be auto removed from epoll
  516. if (ret!=0)
  517. {
  518. mylog(log_fatal,"close fd %d failed !!!!\n",fd);
  519. myexit(-1); //this shouldnt happen
  520. }
  521. //mylog(log_fatal,"size:%d !!!!\n",conn_manager.udp_fd_mp.size());
  522. assert(conn_manager.udp_fd_mp.find(fd)!=conn_manager.udp_fd_mp.end());
  523. conn_manager.udp_fd_mp.erase(fd);
  524. }
  525. int send_bare(raw_info_t &raw_info,const char* data,int len)
  526. {
  527. if(len<0)
  528. {
  529. mylog(log_debug,"input_len <0\n");
  530. return -1;
  531. }
  532. packet_info_t &send_info=raw_info.send_info;
  533. packet_info_t &recv_info=raw_info.recv_info;
  534. char send_data_buf[buf_len]; //buf for send data and send hb
  535. char send_data_buf2[buf_len];
  536. //static send_bare[buf_len];
  537. iv_t iv=get_true_random_number_64();
  538. padding_t padding=get_true_random_number_64();
  539. memcpy(send_data_buf,&iv,sizeof(iv));
  540. memcpy(send_data_buf+sizeof(iv),&padding,sizeof(padding));
  541. send_data_buf[sizeof(iv)+sizeof(padding)]='b';
  542. memcpy(send_data_buf+sizeof(iv)+sizeof(padding)+1,data,len);
  543. int new_len=len+sizeof(iv)+sizeof(padding)+1;
  544. if(my_encrypt(send_data_buf,send_data_buf2,new_len,key)!=0)
  545. {
  546. return -1;
  547. }
  548. send_raw0(raw_info,send_data_buf2,new_len);
  549. return 0;
  550. }
  551. int parse_bare(const char *input,int input_len,char* & data,int & len) //allow overlap
  552. {
  553. static char recv_data_buf[buf_len];
  554. if(input_len<0)
  555. {
  556. mylog(log_debug,"input_len <0\n");
  557. return -1;
  558. }
  559. if(my_decrypt(input,recv_data_buf,input_len,key)!=0)
  560. {
  561. mylog(log_debug,"decrypt_fail in recv bare\n");
  562. return -1;
  563. }
  564. if(recv_data_buf[sizeof(iv_t)+sizeof(padding_t)]!='b')
  565. {
  566. mylog(log_debug,"not a bare packet\n");
  567. return -1;
  568. }
  569. len=input_len;
  570. data=recv_data_buf+sizeof(iv_t)+sizeof(padding_t)+1;
  571. len-=sizeof(iv_t)+sizeof(padding_t)+1;
  572. if(len<0)
  573. {
  574. mylog(log_debug,"len <0\n");
  575. return -1;
  576. }
  577. return 0;
  578. }
  579. int recv_bare(raw_info_t &raw_info,char* & data,int & len)
  580. {
  581. packet_info_t &send_info=raw_info.send_info;
  582. packet_info_t &recv_info=raw_info.recv_info;
  583. if(recv_raw0(raw_info,data,len)<0)
  584. {
  585. //printf("recv_raw_fail in recv bare\n");
  586. return -1;
  587. }
  588. if ((raw_mode == mode_faketcp && (recv_info.syn == 1 || recv_info.ack != 1)))
  589. {
  590. mylog(log_debug,"unexpect packet type recv_info.syn=%d recv_info.ack=%d \n",recv_info.syn,recv_info.ack);
  591. return -1;
  592. }
  593. return parse_bare(data,len,data,len);
  594. }
  595. int send_handshake(raw_info_t &raw_info,id_t id1,id_t id2,id_t id3)
  596. {
  597. packet_info_t &send_info=raw_info.send_info;
  598. packet_info_t &recv_info=raw_info.recv_info;
  599. char * data;int len;
  600. //len=sizeof(id_t)*3;
  601. if(numbers_to_char(id1,id2,id3,data,len)!=0) return -1;
  602. if(send_bare(raw_info,data,len)!=0) {mylog(log_warn,"send bare fail\n");return -1;}
  603. return 0;
  604. }
  605. /*
  606. int recv_handshake(packet_info_t &info,id_t &id1,id_t &id2,id_t &id3)
  607. {
  608. char * data;int len;
  609. if(recv_bare(info,data,len)!=0) return -1;
  610. if(char_to_numbers(data,len,id1,id2,id3)!=0) return -1;
  611. return 0;
  612. }*/
  613. int send_safer(conn_info_t &conn_info,char type,const char* data,int len)
  614. {
  615. packet_info_t &send_info=conn_info.raw_info.send_info;
  616. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  617. if(type!='h'&&type!='d')
  618. {
  619. mylog(log_warn,"first byte is not h or d ,%x\n",type);
  620. return -1;
  621. }
  622. char send_data_buf[buf_len]; //buf for send data and send hb
  623. char send_data_buf2[buf_len];
  624. id_t n_tmp_id=htonl(conn_info.my_id);
  625. memcpy(send_data_buf,&n_tmp_id,sizeof(n_tmp_id));
  626. n_tmp_id=htonl(conn_info.oppsite_id);
  627. memcpy(send_data_buf+sizeof(n_tmp_id),&n_tmp_id,sizeof(n_tmp_id));
  628. anti_replay_seq_t n_seq=hton64(conn_info.blob->anti_replay.get_new_seq_for_send());
  629. memcpy(send_data_buf+sizeof(n_tmp_id)*2,&n_seq,sizeof(n_seq));
  630. send_data_buf[sizeof(n_tmp_id)*2+sizeof(n_seq)]=type;
  631. send_data_buf[sizeof(n_tmp_id)*2+sizeof(n_seq)+1]=conn_info.my_roller;
  632. memcpy(send_data_buf+2+sizeof(n_tmp_id)*2+sizeof(n_seq),data,len);//data;
  633. int new_len=len+sizeof(n_seq)+sizeof(n_tmp_id)*2+2;
  634. if(my_encrypt(send_data_buf,send_data_buf2,new_len,key)!=0)
  635. {
  636. return -1;
  637. }
  638. if(send_raw0(conn_info.raw_info,send_data_buf2,new_len)!=0) return -1;
  639. if(after_send_raw0(conn_info.raw_info)!=0) return -1;
  640. return 0;
  641. }
  642. int send_data_safer(conn_info_t &conn_info,const char* data,int len,u32_t conv_num)
  643. {
  644. packet_info_t &send_info=conn_info.raw_info.send_info;
  645. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  646. char send_data_buf[buf_len];
  647. //send_data_buf[0]='d';
  648. u32_t n_conv_num=htonl(conv_num);
  649. memcpy(send_data_buf,&n_conv_num,sizeof(n_conv_num));
  650. memcpy(send_data_buf+sizeof(n_conv_num),data,len);
  651. int new_len=len+sizeof(n_conv_num);
  652. send_safer(conn_info,'d',send_data_buf,new_len);
  653. return 0;
  654. }
  655. int parse_safer(conn_info_t &conn_info,const char * input,int input_len,char &type,char* &data,int &len)//allow overlap
  656. {
  657. static char recv_data_buf0[buf_len];
  658. char *recv_data_buf=recv_data_buf0; //fix strict alias warning
  659. if(my_decrypt(input,recv_data_buf,input_len,key)!=0)
  660. {
  661. //printf("decrypt fail\n");
  662. return -1;
  663. }
  664. //char *a=recv_data_buf;
  665. id_t h_oppiste_id= ntohl ( *((id_t * )(recv_data_buf)) );
  666. id_t h_my_id= ntohl ( *((id_t * )(recv_data_buf+sizeof(id_t))) );
  667. anti_replay_seq_t h_seq= ntoh64 ( *((anti_replay_seq_t * )(recv_data_buf +sizeof(id_t) *2 )) );
  668. if(h_oppiste_id!=conn_info.oppsite_id||h_my_id!=conn_info.my_id)
  669. {
  670. mylog(log_debug,"id and oppsite_id verification failed %x %x %x %x \n",h_oppiste_id,conn_info.oppsite_id,h_my_id,conn_info.my_id);
  671. return -1;
  672. }
  673. if (conn_info.blob->anti_replay.is_vaild(h_seq) != 1) {
  674. mylog(log_debug,"dropped replay packet\n");
  675. return -1;
  676. }
  677. //printf("recv _len %d\n ",recv_len);
  678. data=recv_data_buf+sizeof(anti_replay_seq_t)+sizeof(id_t)*2;
  679. len=input_len-(sizeof(anti_replay_seq_t)+sizeof(id_t)*2 );
  680. if(data[0]!='h'&&data[0]!='d')
  681. {
  682. mylog(log_debug,"first byte is not h or d ,%x\n",data[0]);
  683. return -1;
  684. }
  685. uint8_t roller=data[1];
  686. type=data[0];
  687. data+=2;
  688. len-=2;
  689. if(len<0)
  690. {
  691. mylog(log_debug,"len <0 ,%d\n",len);
  692. return -1;
  693. }
  694. if(roller!=conn_info.oppsite_roller)
  695. {
  696. conn_info.oppsite_roller=roller;
  697. conn_info.last_oppsite_roller_time=get_current_time();
  698. }
  699. conn_info.my_roller++;//increase on a successful recv
  700. if(after_recv_raw0(conn_info.raw_info)!=0) return -1;
  701. return 0;
  702. }
  703. int recv_safer(conn_info_t &conn_info,char &type,char* &data,int &len)
  704. {
  705. packet_info_t &send_info=conn_info.raw_info.send_info;
  706. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  707. char * recv_data;int recv_len;
  708. static char recv_data_buf[buf_len];
  709. if(recv_raw0(conn_info.raw_info,recv_data,recv_len)!=0) return -1;
  710. return parse_safer(conn_info,recv_data,recv_len,type,data,len);
  711. }
  712. int try_to_list_and_bind(int port)
  713. {
  714. int old_bind_fd=bind_fd;
  715. if(raw_mode==mode_faketcp)
  716. {
  717. bind_fd=socket(AF_INET,SOCK_STREAM,0);
  718. }
  719. else if(raw_mode==mode_udp||raw_mode==mode_icmp)
  720. {
  721. bind_fd=socket(AF_INET,SOCK_DGRAM,0);
  722. }
  723. if(old_bind_fd!=-1)
  724. {
  725. close(old_bind_fd);
  726. }
  727. struct sockaddr_in temp_bind_addr;
  728. bzero(&temp_bind_addr, sizeof(temp_bind_addr));
  729. temp_bind_addr.sin_family = AF_INET;
  730. temp_bind_addr.sin_port = htons(port);
  731. temp_bind_addr.sin_addr.s_addr = local_address_uint32;
  732. if (bind(bind_fd, (struct sockaddr*)&temp_bind_addr, sizeof(temp_bind_addr)) !=0)
  733. {
  734. mylog(log_debug,"bind fail\n");
  735. return -1;
  736. }
  737. if(raw_mode==mode_faketcp)
  738. {
  739. if (listen(bind_fd, SOMAXCONN) != 0) {
  740. mylog(log_warn,"listen fail\n");
  741. return -1;
  742. }
  743. }
  744. return 0;
  745. }
  746. int client_bind_to_a_new_port()
  747. {
  748. int raw_send_port=10000+get_true_random_number()%(65535-10000);
  749. for(int i=0;i<1000;i++)//try 1000 times at max,this should be enough
  750. {
  751. if (try_to_list_and_bind(raw_send_port)==0)
  752. {
  753. return raw_send_port;
  754. }
  755. }
  756. mylog(log_fatal,"bind port fail\n");
  757. myexit(-1);
  758. return -1;////for compiler check
  759. }
  760. int set_timer(int epollfd,int &timer_fd)
  761. {
  762. int ret;
  763. epoll_event ev;
  764. itimerspec its;
  765. memset(&its,0,sizeof(its));
  766. if((timer_fd=timerfd_create(CLOCK_MONOTONIC,TFD_NONBLOCK)) < 0)
  767. {
  768. mylog(log_fatal,"timer_fd create error\n");
  769. myexit(1);
  770. }
  771. its.it_interval.tv_sec=(timer_interval/1000);
  772. its.it_interval.tv_nsec=(timer_interval%1000)*1000ll*1000ll;
  773. its.it_value.tv_nsec=1; //imidiately
  774. timerfd_settime(timer_fd,0,&its,0);
  775. ev.events = EPOLLIN;
  776. ev.data.u64 = timer_fd;
  777. ret=epoll_ctl(epollfd, EPOLL_CTL_ADD, timer_fd, &ev);
  778. if (ret < 0) {
  779. mylog(log_fatal,"epoll_ctl return %d\n", ret);
  780. myexit(-1);
  781. }
  782. return 0;
  783. }
  784. int set_timer_server(int epollfd,int &timer_fd)
  785. {
  786. int ret;
  787. epoll_event ev;
  788. itimerspec its;
  789. memset(&its,0,sizeof(its));
  790. if((timer_fd=timerfd_create(CLOCK_MONOTONIC,TFD_NONBLOCK)) < 0)
  791. {
  792. mylog(log_fatal,"timer_fd create error\n");
  793. myexit(1);
  794. }
  795. its.it_interval.tv_sec=(timer_interval/1000);
  796. its.it_interval.tv_nsec=(timer_interval%1000)*1000ll*1000ll;
  797. its.it_value.tv_nsec=1; //imidiately
  798. timerfd_settime(timer_fd,0,&its,0);
  799. ev.events = EPOLLIN;
  800. ev.data.u64 = pack_u64(2,timer_fd);
  801. ret=epoll_ctl(epollfd, EPOLL_CTL_ADD, timer_fd, &ev);
  802. if (ret < 0) {
  803. mylog(log_fatal,"epoll_ctl return %d\n", ret);
  804. myexit(-1);
  805. }
  806. return 0;
  807. }
  808. int client_on_timer(conn_info_t &conn_info) //for client
  809. {
  810. packet_info_t &send_info=conn_info.raw_info.send_info;
  811. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  812. raw_info_t &raw_info=conn_info.raw_info;
  813. conn_info.blob->conv_manager.clear_inactive();
  814. mylog(log_trace,"timer!\n");
  815. mylog(log_trace,"roller my %d,oppsite %d,%lld\n",int(conn_info.my_roller),int(conn_info.oppsite_roller),conn_info.last_oppsite_roller_time);
  816. mylog(log_trace,"<client_on_timer,send_info.ts_ack= %u>\n",send_info.ts_ack);
  817. if(conn_info.state.client_current_state==client_idle)
  818. {
  819. fail_time_counter++;
  820. if(max_fail_time>0&&fail_time_counter>max_fail_time)
  821. {
  822. mylog(log_fatal,"max_fail_time exceed\n");
  823. myexit(-1);
  824. }
  825. conn_info.blob->anti_replay.re_init();
  826. conn_info.my_id = get_true_random_number_nz(); ///todo no need to do this everytime
  827. if (source_port == 0)
  828. {
  829. send_info.src_port = client_bind_to_a_new_port();
  830. }
  831. else
  832. {
  833. send_info.src_port = source_port;
  834. }
  835. if (raw_mode == mode_icmp)
  836. {
  837. send_info.dst_port = send_info.src_port;
  838. }
  839. mylog(log_info, "using port %d\n", send_info.src_port);
  840. init_filter(send_info.src_port);
  841. if(raw_mode==mode_icmp||raw_mode==mode_udp)
  842. {
  843. conn_info.state.client_current_state=client_handshake1;
  844. mylog(log_info,"state changed from client_idle to client_pre_handshake\n");
  845. }
  846. if(raw_mode==mode_faketcp)
  847. {
  848. conn_info.state.client_current_state=client_tcp_handshake;
  849. mylog(log_info,"state changed from client_idle to client_tcp_handshake\n");
  850. }
  851. conn_info.last_state_time=get_current_time();
  852. conn_info.last_hb_sent_time=0;
  853. //dont return;
  854. }
  855. if(conn_info.state.client_current_state==client_tcp_handshake) //send and resend syn
  856. {
  857. assert(raw_mode==mode_faketcp);
  858. if (get_current_time() - conn_info.last_state_time > client_handshake_timeout)
  859. {
  860. conn_info.state.client_current_state = client_idle;
  861. mylog(log_info, "state back to client_idle from client_tcp_handshake\n");
  862. return 0;
  863. }
  864. else if (get_current_time() - conn_info.last_hb_sent_time > client_retry_interval)
  865. {
  866. if (raw_mode == mode_faketcp)
  867. {
  868. if (conn_info.last_hb_sent_time == 0)
  869. {
  870. send_info.psh = 0;
  871. send_info.syn = 1;
  872. send_info.ack = 0;
  873. send_info.ts_ack =0;
  874. send_info.seq=get_true_random_number();
  875. send_info.ack_seq=get_true_random_number();
  876. }
  877. }
  878. send_raw0(raw_info, 0, 0);
  879. conn_info.last_hb_sent_time = get_current_time();
  880. mylog(log_info, "(re)sent tcp syn\n");
  881. return 0;
  882. }
  883. else
  884. {
  885. return 0;
  886. }
  887. return 0;
  888. }
  889. else if(conn_info.state.client_current_state==client_handshake1)//send and resend handshake1
  890. {
  891. if(get_current_time()-conn_info.last_state_time>client_handshake_timeout)
  892. {
  893. conn_info.state.client_current_state=client_idle;
  894. mylog(log_info,"state back to client_idle from client_handshake1\n");
  895. return 0;
  896. }
  897. else if(get_current_time()-conn_info.last_hb_sent_time>client_retry_interval)
  898. {
  899. if(raw_mode==mode_faketcp)
  900. {
  901. if(conn_info.last_hb_sent_time==0)
  902. {
  903. send_info.seq++;
  904. send_info.ack_seq=recv_info.seq+1;
  905. send_info.ts_ack=recv_info.ts;
  906. raw_info.reserved_seq=send_info.seq;
  907. }
  908. send_info.seq=raw_info.reserved_seq;
  909. send_info.psh = 0;
  910. send_info.syn = 0;
  911. send_info.ack = 1;
  912. send_raw0(raw_info, 0, 0);
  913. send_handshake(raw_info,conn_info.my_id,0,const_id);
  914. send_info.seq+=raw_info.last_send_len;
  915. }
  916. else
  917. {
  918. send_handshake(raw_info,conn_info.my_id,0,const_id);
  919. if(raw_mode==mode_icmp)
  920. send_info.icmp_seq++;
  921. }
  922. conn_info.last_hb_sent_time=get_current_time();
  923. mylog(log_info,"(re)sent handshake1\n");
  924. return 0;
  925. }
  926. else
  927. {
  928. return 0;
  929. }
  930. return 0;
  931. }
  932. else if(conn_info.state.client_current_state==client_handshake2)
  933. {
  934. if(get_current_time()-conn_info.last_state_time>client_handshake_timeout)
  935. {
  936. conn_info.state.client_current_state=client_idle;
  937. mylog(log_info,"state back to client_idle from client_handshake2\n");
  938. return 0;
  939. }
  940. else if(get_current_time()-conn_info.last_hb_sent_time>client_retry_interval)
  941. {
  942. if(raw_mode==mode_faketcp)
  943. {
  944. if(conn_info.last_hb_sent_time==0)
  945. {
  946. send_info.ack_seq=recv_info.seq+raw_info.last_recv_len;
  947. send_info.ts_ack=recv_info.ts;
  948. raw_info.reserved_seq=send_info.seq;
  949. }
  950. send_info.seq=raw_info.reserved_seq;
  951. send_handshake(raw_info,conn_info.my_id,conn_info.oppsite_id,const_id);
  952. send_info.seq+=raw_info.last_send_len;
  953. }
  954. else
  955. {
  956. send_handshake(raw_info,conn_info.my_id,conn_info.oppsite_id,const_id);
  957. if(raw_mode==mode_icmp)
  958. send_info.icmp_seq++;
  959. }
  960. conn_info.last_hb_sent_time=get_current_time();
  961. mylog(log_info,"(re)sent handshake2\n");
  962. return 0;
  963. }
  964. else
  965. {
  966. return 0;
  967. }
  968. return 0;
  969. }
  970. else if(conn_info.state.client_current_state==client_ready)
  971. {
  972. fail_time_counter=0;
  973. mylog(log_trace,"time %llu,%llu\n",get_current_time(),conn_info.last_state_time);
  974. if(get_current_time()-conn_info.last_hb_recv_time>client_conn_timeout)
  975. {
  976. conn_info.state.client_current_state=client_idle;
  977. conn_info.my_id=get_true_random_number_nz();
  978. mylog(log_info,"state back to client_idle from client_ready bc of recv-direction timeout\n");
  979. return 0;
  980. }
  981. if(get_current_time()-conn_info.last_hb_sent_time<heartbeat_interval)
  982. {
  983. return 0;
  984. }
  985. if(get_current_time()- conn_info.last_oppsite_roller_time>client_conn_uplink_timeout)
  986. {
  987. conn_info.state.client_current_state=client_idle;
  988. conn_info.my_id=get_true_random_number_nz();
  989. mylog(log_info,"state back to client_idle from client_ready bc of send-direction timeout\n");
  990. }
  991. mylog(log_debug,"heartbeat sent <%x,%x>\n",conn_info.oppsite_id,conn_info.my_id);
  992. send_safer(conn_info,'h',"",0);/////////////send
  993. conn_info.last_hb_sent_time=get_current_time();
  994. return 0;
  995. }
  996. else
  997. {
  998. mylog(log_fatal,"unknown state,this shouldnt happen.\n");
  999. myexit(-1);
  1000. }
  1001. return 0;
  1002. }
  1003. int server_on_timer_multi(conn_info_t &conn_info,char * ip_port)
  1004. {
  1005. mylog(log_trace,"server timer!\n");
  1006. raw_info_t &raw_info=conn_info.raw_info;
  1007. assert(conn_info.state.server_current_state==server_ready);
  1008. if(conn_info.state.server_current_state==server_ready)
  1009. {
  1010. conn_info.blob->conv_manager.clear_inactive(ip_port);
  1011. /*
  1012. if( get_current_time()-conn_info.last_hb_recv_time>heartbeat_timeout )
  1013. {
  1014. mylog(log_trace,"%lld %lld\n",get_current_time(),conn_info.last_state_time);
  1015. conn_info.server_current_state=server_nothing;
  1016. //conn_manager.current_ready_ip=0;
  1017. //conn_manager.current_ready_port=0;
  1018. mylog(log_info,"changed state to server_nothing\n");
  1019. return 0;
  1020. }*/ //dont need to do this at server,conn_manger will clear expired connections
  1021. if(get_current_time()-conn_info.last_hb_sent_time<heartbeat_interval)
  1022. {
  1023. return 0;
  1024. }
  1025. send_safer(conn_info,'h',"",0); /////////////send
  1026. conn_info.last_hb_sent_time=get_current_time();
  1027. mylog(log_debug,"heart beat sent<%x,%x>\n",conn_info.my_id,conn_info.oppsite_id);
  1028. }
  1029. else
  1030. {
  1031. mylog(log_fatal,"this shouldnt happen!\n");
  1032. myexit(-1);
  1033. }
  1034. return 0;
  1035. }
  1036. int client_on_raw_recv(conn_info_t &conn_info)
  1037. {
  1038. char* data;int data_len;
  1039. packet_info_t &send_info=conn_info.raw_info.send_info;
  1040. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1041. raw_info_t &raw_info=conn_info.raw_info;
  1042. mylog(log_trace,"<client_on_raw_recv,send_info.ts_ack= %u>\n",send_info.ts_ack);
  1043. if(conn_info.state.client_current_state==client_idle )
  1044. {
  1045. recv(raw_recv_fd, 0,0, 0 );
  1046. }
  1047. else if(conn_info.state.client_current_state==client_tcp_handshake)//received syn ack
  1048. {
  1049. assert(raw_mode==mode_faketcp);
  1050. if(recv_raw0(raw_info,data,data_len)<0)
  1051. {
  1052. return -1;
  1053. }
  1054. if(recv_info.src_ip!=send_info.dst_ip||recv_info.src_port!=send_info.dst_port)
  1055. {
  1056. mylog(log_debug,"unexpected adress %x %x %d %d\n",recv_info.src_ip,send_info.dst_ip,recv_info.src_port,send_info.dst_port);
  1057. return -1;
  1058. }
  1059. if(data_len==0&&raw_info.recv_info.syn==1&&raw_info.recv_info.ack==1)
  1060. {
  1061. if(recv_info.ack_seq!=send_info.seq+1)
  1062. {
  1063. mylog(log_debug,"seq ack_seq mis match\n");
  1064. return -1;
  1065. }
  1066. conn_info.state.client_current_state = client_handshake1;
  1067. mylog(log_info,"state changed from client_tcp_handshake to client_handshake1\n");
  1068. conn_info.last_state_time = get_current_time();
  1069. conn_info.last_hb_sent_time=0;
  1070. client_on_timer(conn_info);
  1071. return 0;
  1072. }
  1073. else
  1074. {
  1075. mylog(log_debug,"unexpected packet type,expected:syn ack\n");
  1076. return -1;
  1077. }
  1078. }
  1079. else if(conn_info.state.client_current_state==client_handshake1)//recevied respond of handshake1
  1080. {
  1081. if(recv_bare(raw_info,data,data_len)!=0)
  1082. {
  1083. mylog(log_debug,"recv_bare failed!\n");
  1084. return -1;
  1085. }
  1086. if(recv_info.src_ip!=send_info.dst_ip||recv_info.src_port!=send_info.dst_port)
  1087. {
  1088. mylog(log_debug,"unexpected adress %x %x %d %d\n",recv_info.src_ip,send_info.dst_ip,recv_info.src_port,send_info.dst_port);
  1089. return -1;
  1090. }
  1091. if(data_len<int( 3*sizeof(id_t)))
  1092. {
  1093. mylog(log_debug,"too short to be a handshake\n");
  1094. return -1;
  1095. }
  1096. id_t tmp_oppsite_id= ntohl(* ((u32_t *)&data[0]));
  1097. id_t tmp_my_id=ntohl(* ((u32_t *)&data[sizeof(id_t)]));
  1098. id_t tmp_oppsite_const_id=ntohl(* ((u32_t *)&data[sizeof(id_t)*2]));
  1099. if(tmp_my_id!=conn_info.my_id)
  1100. {
  1101. mylog(log_debug,"tmp_my_id doesnt match\n");
  1102. return -1;
  1103. }
  1104. if(raw_mode==mode_faketcp)
  1105. {
  1106. if(recv_info.ack_seq!=send_info.seq)
  1107. {
  1108. mylog(log_debug,"seq ack_seq mis match\n");
  1109. return -1;
  1110. }
  1111. if(recv_info.seq!=send_info.ack_seq)
  1112. {
  1113. mylog(log_debug,"seq ack_seq mis match\n");
  1114. return -1;
  1115. }
  1116. }
  1117. conn_info.oppsite_id=tmp_oppsite_id;
  1118. mylog(log_info,"changed state from to client_handshake1 to client_handshake2,my_id is %x,oppsite id is %x\n",conn_info.my_id,conn_info.oppsite_id);
  1119. //send_handshake(raw_info,conn_info.my_id,conn_info.oppsite_id,const_id); //////////////send
  1120. conn_info.state.client_current_state = client_handshake2;
  1121. conn_info.last_state_time = get_current_time();
  1122. conn_info.last_hb_sent_time=0;
  1123. client_on_timer(conn_info);
  1124. return 0;
  1125. }
  1126. else if(conn_info.state.client_current_state==client_handshake2||conn_info.state.client_current_state==client_ready)//received heartbeat or data
  1127. {
  1128. char type;
  1129. if(recv_safer(conn_info,type,data,data_len)!=0)
  1130. {
  1131. mylog(log_debug,"recv_safer failed!\n");
  1132. return -1;
  1133. }
  1134. if(recv_info.src_ip!=send_info.dst_ip||recv_info.src_port!=send_info.dst_port)
  1135. {
  1136. mylog(log_warn,"unexpected adress %x %x %d %d,this shouldnt happen.\n",recv_info.src_ip,send_info.dst_ip,recv_info.src_port,send_info.dst_port);
  1137. return -1;
  1138. }
  1139. if(conn_info.state.client_current_state==client_handshake2)
  1140. {
  1141. mylog(log_info,"changed state from to client_handshake2 to client_ready\n");
  1142. conn_info.state.client_current_state=client_ready;
  1143. conn_info.last_hb_sent_time=0;
  1144. conn_info.last_hb_recv_time=get_current_time();
  1145. conn_info.last_oppsite_roller_time=conn_info.last_hb_recv_time;
  1146. client_on_timer(conn_info);
  1147. }
  1148. if(data_len==0&&type=='h')
  1149. {
  1150. mylog(log_debug,"[hb]heart beat received\n");
  1151. conn_info.last_hb_recv_time=get_current_time();
  1152. return 0;
  1153. }
  1154. else if(data_len>= int( sizeof(u32_t))&&type=='d')
  1155. {
  1156. mylog(log_trace,"received a data from fake tcp,len:%d\n",data_len);
  1157. conn_info.last_hb_recv_time=get_current_time();
  1158. u32_t tmp_conv_id= ntohl(* ((u32_t *)&data[0]));
  1159. if(!conn_info.blob->conv_manager.is_conv_used(tmp_conv_id))
  1160. {
  1161. mylog(log_info,"unknow conv %d,ignore\n",tmp_conv_id);
  1162. return 0;
  1163. }
  1164. conn_info.blob->conv_manager.update_active_time(tmp_conv_id);
  1165. u64_t u64=conn_info.blob->conv_manager.find_u64_by_conv(tmp_conv_id);
  1166. sockaddr_in tmp_sockaddr;
  1167. tmp_sockaddr.sin_family = AF_INET;
  1168. tmp_sockaddr.sin_addr.s_addr=(u64>>32u);
  1169. tmp_sockaddr.sin_port= htons(uint16_t((u64<<32u)>>32u));
  1170. int ret=sendto(udp_fd,data+sizeof(u32_t),data_len -(sizeof(u32_t)),0,(struct sockaddr *)&tmp_sockaddr,sizeof(tmp_sockaddr));
  1171. if(ret<0)
  1172. {
  1173. mylog(log_warn,"sento returned %d\n",ret);
  1174. //perror("ret<0");
  1175. }
  1176. mylog(log_trace,"%s :%d\n",inet_ntoa(tmp_sockaddr.sin_addr),ntohs(tmp_sockaddr.sin_port));
  1177. mylog(log_trace,"%d byte sent\n",ret);
  1178. }
  1179. else
  1180. {
  1181. mylog(log_warn,"unknown packet,this shouldnt happen.\n");
  1182. return -1;
  1183. }
  1184. return 0;
  1185. }
  1186. else
  1187. {
  1188. mylog(log_fatal,"unknown state,this shouldnt happen.\n");
  1189. myexit(-1);
  1190. }
  1191. return 0;
  1192. }
  1193. int server_on_raw_recv_multi()
  1194. {
  1195. char dummy_buf[buf_len];
  1196. packet_info_t peek_info;
  1197. if(peek_raw(peek_info)<0)
  1198. {
  1199. recv(raw_recv_fd, 0,0, 0 );//
  1200. //struct sockaddr saddr;
  1201. //socklen_t saddr_size;
  1202. ///recvfrom(raw_recv_fd, 0,0, 0 ,&saddr , &saddr_size);//
  1203. mylog(log_trace,"peek_raw failed\n");
  1204. return -1;
  1205. }
  1206. u32_t ip=peek_info.src_ip;uint16_t port=peek_info.src_port;
  1207. char ip_port[40];
  1208. sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1209. mylog(log_trace,"[%s]peek_raw\n",ip_port);
  1210. int data_len; char *data;
  1211. if(raw_mode==mode_faketcp&&peek_info.syn==1)
  1212. {
  1213. if(!conn_manager.exist(ip,port)||conn_manager.find_insert(ip,port).state.server_current_state!=server_ready)
  1214. {//reply any syn ,before state become ready
  1215. raw_info_t tmp_raw_info;
  1216. if(recv_raw0(tmp_raw_info,data,data_len)<0)
  1217. {
  1218. return 0;
  1219. }
  1220. raw_info_t &raw_info=tmp_raw_info;
  1221. packet_info_t &send_info=raw_info.send_info;
  1222. packet_info_t &recv_info=raw_info.recv_info;
  1223. send_info.src_ip=recv_info.dst_ip;
  1224. send_info.src_port=recv_info.dst_port;
  1225. send_info.dst_port = recv_info.src_port;
  1226. send_info.dst_ip = recv_info.src_ip;
  1227. if(data_len==0&&raw_info.recv_info.syn==1&&raw_info.recv_info.ack==0)
  1228. {
  1229. send_info.ack_seq = recv_info.seq + 1;
  1230. send_info.psh = 0;
  1231. send_info.syn = 1;
  1232. send_info.ack = 1;
  1233. send_info.ts_ack=recv_info.ts;
  1234. mylog(log_info,"[%s]received syn,sent syn ack back\n",ip_port);
  1235. send_raw0(raw_info, 0, 0);
  1236. return 0;
  1237. }
  1238. }
  1239. return 0;
  1240. }
  1241. if(!conn_manager.exist(ip,port))
  1242. {
  1243. if(conn_manager.mp.size()>=max_handshake_conn_num)
  1244. {
  1245. mylog(log_info,"[%s]reached max_handshake_conn_num,ignored new handshake\n",ip_port);
  1246. recv(raw_recv_fd, 0,0, 0 );//
  1247. return 0;
  1248. }
  1249. raw_info_t tmp_raw_info;
  1250. if(raw_mode==mode_icmp)
  1251. {
  1252. tmp_raw_info.send_info.dst_port=tmp_raw_info.send_info.src_port=port;
  1253. }
  1254. if(recv_bare(tmp_raw_info,data,data_len)<0)
  1255. {
  1256. return 0;
  1257. }
  1258. if(data_len<int( 3*sizeof(id_t)))
  1259. {
  1260. mylog(log_debug,"[%s]too short to be a handshake\n",ip_port);
  1261. return -1;
  1262. }
  1263. id_t zero=ntohl(* ((u32_t *)&data[sizeof(id_t)]));
  1264. if(zero!=0)
  1265. {
  1266. mylog(log_debug,"[%s]not a invalid initial handshake\n",ip_port);
  1267. return -1;
  1268. }
  1269. mylog(log_info,"[%s]got packet from a new ip\n",ip_port);
  1270. conn_info_t &conn_info=conn_manager.find_insert(ip,port);
  1271. conn_info.raw_info=tmp_raw_info;
  1272. packet_info_t &send_info=conn_info.raw_info.send_info;
  1273. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1274. raw_info_t &raw_info=conn_info.raw_info;
  1275. send_info.src_ip=recv_info.dst_ip;
  1276. send_info.src_port=recv_info.dst_port;
  1277. send_info.dst_port = recv_info.src_port;
  1278. send_info.dst_ip = recv_info.src_ip;
  1279. //id_t tmp_oppsite_id= ntohl(* ((u32_t *)&data[0]));
  1280. //mylog(log_info,"[%s]handshake1 received %x\n",ip_port,tmp_oppsite_id);
  1281. conn_info.my_id=get_true_random_number_nz();
  1282. mylog(log_info,"[%s]created new conn,state: server_handshake1,my_id is %x\n",ip_port,conn_info.my_id);
  1283. conn_info.state.server_current_state = server_handshake1;
  1284. conn_info.last_state_time = get_current_time();
  1285. server_on_raw_recv_handshake1(conn_info,ip_port,data,data_len);
  1286. return 0;
  1287. }
  1288. conn_info_t & conn_info=conn_manager.find_insert(ip,port);//insert if not exist
  1289. packet_info_t &send_info=conn_info.raw_info.send_info;
  1290. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1291. raw_info_t &raw_info=conn_info.raw_info;
  1292. if(conn_info.state.server_current_state==server_handshake1)
  1293. {
  1294. if(recv_bare(raw_info,data,data_len)!=0)
  1295. {
  1296. return -1;
  1297. }
  1298. server_on_raw_recv_handshake1(conn_info,ip_port,data,data_len);
  1299. }
  1300. if(conn_info.state.server_current_state==server_ready)
  1301. {
  1302. char type;
  1303. if (recv_safer(conn_info,type, data, data_len) != 0) {
  1304. return -1;
  1305. }
  1306. return server_on_raw_recv_ready(conn_info,ip_port,type,data,data_len);
  1307. }
  1308. return 0;
  1309. }
  1310. /*
  1311. int server_on_raw_recv_handshake1(conn_info_t &conn_info,id_t tmp_oppsite_id )
  1312. {
  1313. packet_info_t &send_info=conn_info.raw_info.send_info;
  1314. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1315. raw_info_t &raw_info=conn_info.raw_info;
  1316. return 0;
  1317. }*/
  1318. int server_on_raw_recv_handshake1(conn_info_t &conn_info,char * ip_port,char * data, int data_len)
  1319. {
  1320. packet_info_t &send_info=conn_info.raw_info.send_info;
  1321. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1322. raw_info_t &raw_info=conn_info.raw_info;
  1323. //u32_t ip=conn_info.raw_info.recv_info.src_ip;
  1324. //uint16_t port=conn_info.raw_info.recv_info.src_port;
  1325. //char ip_port[40];
  1326. //sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1327. if(data_len<int( 3*sizeof(id_t)))
  1328. {
  1329. mylog(log_debug,"[%s] data_len=%d too short to be a handshake\n",ip_port,data_len);
  1330. return -1;
  1331. }
  1332. id_t tmp_oppsite_id= ntohl(* ((u32_t *)&data[0]));
  1333. id_t tmp_my_id=ntohl(* ((u32_t *)&data[sizeof(id_t)]));
  1334. if(tmp_my_id==0) //received init handshake again
  1335. {
  1336. if(raw_mode==mode_faketcp)
  1337. {
  1338. send_info.seq=recv_info.ack_seq;
  1339. send_info.ack_seq=recv_info.seq+raw_info.last_recv_len;
  1340. send_info.ts_ack=recv_info.ts;
  1341. }
  1342. if(raw_mode==mode_icmp)
  1343. {
  1344. send_info.icmp_seq=recv_info.icmp_seq;
  1345. }
  1346. send_handshake(raw_info,conn_info.my_id,tmp_oppsite_id,const_id); //////////////send
  1347. mylog(log_info,"[%s]changed state to server_handshake1,my_id is %x\n",ip_port,conn_info.my_id);
  1348. }
  1349. else if(tmp_my_id==conn_info.my_id)
  1350. {
  1351. conn_info.oppsite_id=tmp_oppsite_id;
  1352. id_t tmp_oppsite_const_id=ntohl(* ((u32_t *)&data[sizeof(id_t)*2]));
  1353. if(raw_mode==mode_faketcp)
  1354. {
  1355. send_info.seq=recv_info.ack_seq;
  1356. send_info.ack_seq=recv_info.seq+raw_info.last_recv_len;
  1357. send_info.ts_ack=recv_info.ts;
  1358. }
  1359. if(raw_mode==mode_icmp)
  1360. {
  1361. send_info.icmp_seq=recv_info.icmp_seq;
  1362. }
  1363. server_on_raw_recv_pre_ready(conn_info,ip_port,tmp_oppsite_const_id);
  1364. }
  1365. else
  1366. {
  1367. mylog(log_debug,"[%s]invalid my_id %x,my_id is %x\n",ip_port,tmp_my_id,conn_info.my_id);
  1368. }
  1369. return 0;
  1370. }
  1371. int server_on_raw_recv_ready(conn_info_t &conn_info,char * ip_port,char type,char *data,int data_len)
  1372. {
  1373. raw_info_t &raw_info = conn_info.raw_info;
  1374. packet_info_t &send_info = conn_info.raw_info.send_info;
  1375. packet_info_t &recv_info = conn_info.raw_info.recv_info;
  1376. //char ip_port[40];
  1377. //sprintf(ip_port,"%s:%d",my_ntoa(recv_info.src_ip),recv_info.src_port);
  1378. /*
  1379. if (recv_info.src_ip != send_info.dst_ip
  1380. || recv_info.src_port != send_info.dst_port) {
  1381. mylog(log_debug, "unexpected adress\n");
  1382. return 0;
  1383. }*/
  1384. if (type == 'h' && data_len == 0) {
  1385. //u32_t tmp = ntohl(*((u32_t *) &data[sizeof(u32_t)]));
  1386. mylog(log_debug,"[%s][hb]received hb \n",ip_port);
  1387. conn_info.last_hb_recv_time = get_current_time();
  1388. return 0;
  1389. } else if (type== 'd' && data_len >=int( sizeof(u32_t) ))
  1390. {
  1391. u32_t tmp_conv_id = ntohl(*((u32_t *) &data[0]));
  1392. conn_info.last_hb_recv_time = get_current_time();
  1393. mylog(log_trace, "conv:%u\n", tmp_conv_id);
  1394. if (!conn_info.blob->conv_manager.is_conv_used(tmp_conv_id)) {
  1395. if (conn_info.blob->conv_manager.get_size() >= max_conv_num) {
  1396. mylog(log_warn,
  1397. "[%s]ignored new conv %x connect bc max_conv_num exceed\n",ip_port,
  1398. tmp_conv_id);
  1399. return 0;
  1400. }
  1401. struct sockaddr_in remote_addr_in;
  1402. socklen_t slen = sizeof(sockaddr_in);
  1403. memset(&remote_addr_in, 0, sizeof(remote_addr_in));
  1404. remote_addr_in.sin_family = AF_INET;
  1405. remote_addr_in.sin_port = htons(remote_port);
  1406. remote_addr_in.sin_addr.s_addr = remote_address_uint32;
  1407. int new_udp_fd = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1408. if (new_udp_fd < 0) {
  1409. mylog(log_warn, "[%s]create udp_fd error\n",ip_port);
  1410. return -1;
  1411. }
  1412. setnonblocking(new_udp_fd);
  1413. set_buf_size(new_udp_fd);
  1414. mylog(log_debug, "[%s]created new udp_fd %d\n",ip_port, new_udp_fd);
  1415. int ret = connect(new_udp_fd, (struct sockaddr *) &remote_addr_in,
  1416. slen);
  1417. if (ret != 0) {
  1418. mylog(log_warn, "udp fd connect fail\n");
  1419. close(new_udp_fd);
  1420. return -1;
  1421. }
  1422. struct epoll_event ev;
  1423. u64_t u64 = (u32_t(new_udp_fd))+(1llu<<32u);
  1424. mylog(log_trace, "[%s]u64: %lld\n",ip_port, u64);
  1425. ev.events = EPOLLIN;
  1426. ev.data.u64 = u64;
  1427. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, new_udp_fd, &ev);
  1428. if (ret != 0) {
  1429. mylog(log_warn, "[%s]add udp_fd error\n",ip_port);
  1430. close(new_udp_fd);
  1431. return -1;
  1432. }
  1433. conn_info.blob->conv_manager.insert_conv(tmp_conv_id, new_udp_fd);
  1434. assert(conn_manager.udp_fd_mp.find(new_udp_fd)==conn_manager.udp_fd_mp.end());
  1435. conn_manager.udp_fd_mp[new_udp_fd] = &conn_info;
  1436. //pack_u64(conn_info.raw_info.recv_info.src_ip,conn_info.raw_info.recv_info.src_port);
  1437. mylog(log_info, "[%s]new conv conv_id=%x, assigned fd=%d\n",ip_port,
  1438. tmp_conv_id, new_udp_fd);
  1439. }
  1440. u64_t u64 = conn_info.blob->conv_manager.find_u64_by_conv(tmp_conv_id);
  1441. conn_info.blob->conv_manager.update_active_time(tmp_conv_id);
  1442. int fd = int((u64 << 32u) >> 32u);
  1443. mylog(log_trace, "[%s]received a data from fake tcp,len:%d\n",ip_port, data_len);
  1444. int ret = send(fd, data + sizeof(u32_t),
  1445. data_len - ( sizeof(u32_t)), 0);
  1446. mylog(log_trace, "[%s]%d byte sent ,fd :%d\n ",ip_port, ret, fd);
  1447. if (ret < 0) {
  1448. mylog(log_warn, "send returned %d\n", ret);
  1449. //perror("what happened????");
  1450. }
  1451. return 0;
  1452. }
  1453. return 0;
  1454. }
  1455. int server_on_raw_recv_pre_ready(conn_info_t &conn_info,char * ip_port,u32_t tmp_oppsite_const_id)
  1456. {
  1457. //u32_t ip;uint16_t port;
  1458. //ip=conn_info.raw_info.recv_info.src_ip;
  1459. //port=conn_info.raw_info.recv_info.src_port;
  1460. //char ip_port[40];
  1461. //sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1462. mylog(log_info,"[%s]received handshake oppsite_id:%x my_id:%x\n",ip_port,conn_info.oppsite_id,conn_info.my_id);
  1463. mylog(log_info,"[%s]oppsite const_id:%x \n",ip_port,tmp_oppsite_const_id);
  1464. if(conn_manager.const_id_mp.find(tmp_oppsite_const_id)==conn_manager.const_id_mp.end())
  1465. {
  1466. //conn_manager.const_id_mp=
  1467. if(conn_manager.ready_num>=max_ready_conn_num)
  1468. {
  1469. mylog(log_info,"[%s]max_ready_conn_num,cant turn to ready\n",ip_port);
  1470. conn_info.state.server_current_state =server_idle;
  1471. return 0;
  1472. }
  1473. conn_info.prepare();
  1474. conn_info.state.server_current_state = server_ready;
  1475. conn_info.oppsite_const_id=tmp_oppsite_const_id;
  1476. conn_manager.ready_num++;
  1477. conn_manager.const_id_mp[tmp_oppsite_const_id]=&conn_info;
  1478. //conn_info.last_state_time=get_current_time(); //dont change this!!!!!!!!!!!!!!!!!!!!!!!!!
  1479. //conn_manager.current_ready_ip=ip;
  1480. //conn_manager.current_ready_port=port;
  1481. //my_id=conn_info.my_id;
  1482. //oppsite_id=conn_info.oppsite_id;
  1483. conn_info.last_hb_recv_time = get_current_time();
  1484. conn_info.last_hb_sent_time = conn_info.last_hb_recv_time;//=get_current_time()
  1485. send_safer(conn_info, 'h',"", 0); /////////////send
  1486. mylog(log_info, "[%s]changed state to server_ready\n",ip_port);
  1487. conn_info.blob->anti_replay.re_init();
  1488. //g_conn_info=conn_info;
  1489. int new_timer_fd;
  1490. set_timer_server(epollfd, new_timer_fd);
  1491. conn_info.timer_fd=new_timer_fd;
  1492. assert(conn_manager.timer_fd_mp.find(new_timer_fd)==conn_manager.timer_fd_mp.end());
  1493. conn_manager.timer_fd_mp[new_timer_fd] = &conn_info;//pack_u64(ip,port);
  1494. //timer_fd_mp[new_timer_fd]
  1495. /*
  1496. if(oppsite_const_id!=0&&tmp_oppsite_const_id!=oppsite_const_id) //TODO MOVE TO READY
  1497. {
  1498. mylog(log_info,"cleared all conv bc of const id doesnt match\n");
  1499. conv_manager.clear();
  1500. }*/
  1501. //oppsite_const_id=tmp_oppsite_const_id;
  1502. }
  1503. else
  1504. {
  1505. conn_info_t &ori_conn_info=*conn_manager.const_id_mp[tmp_oppsite_const_id];
  1506. if(ori_conn_info.state.server_current_state==server_ready)
  1507. {
  1508. if(conn_info.last_state_time<ori_conn_info.last_state_time)
  1509. {
  1510. mylog(log_info,"[%s]conn_info.last_state_time<ori_conn_info.last_state_time. ignored new handshake\n",ip_port);
  1511. conn_info.state.server_current_state=server_idle;
  1512. conn_info.oppsite_const_id=0;
  1513. return 0;
  1514. }
  1515. if(!conn_manager.exist(ori_conn_info.raw_info.recv_info.src_ip,ori_conn_info.raw_info.recv_info.src_port))//TODO remove this
  1516. {
  1517. mylog(log_fatal,"[%s]this shouldnt happen\n",ip_port);
  1518. myexit(-1);
  1519. }
  1520. if(!conn_manager.exist(conn_info.raw_info.recv_info.src_ip,conn_info.raw_info.recv_info.src_port))//TODO remove this
  1521. {
  1522. mylog(log_fatal,"[%s]this shouldnt happen2\n",ip_port);
  1523. myexit(-1);
  1524. }
  1525. conn_info_t *&p_ori=conn_manager.find_insert_p(ori_conn_info.raw_info.recv_info.src_ip,ori_conn_info.raw_info.recv_info.src_port);
  1526. conn_info_t *&p=conn_manager.find_insert_p(conn_info.raw_info.recv_info.src_ip,conn_info.raw_info.recv_info.src_port);
  1527. conn_info_t *tmp=p;
  1528. p=p_ori;
  1529. p_ori=tmp;
  1530. mylog(log_info,"[%s]grabbed a connection\n",ip_port);
  1531. //ori_conn_info.state.server_current_state=server_ready;
  1532. ori_conn_info.recover(conn_info);
  1533. send_safer(ori_conn_info, 'h',"", 0);
  1534. //ori_conn_info.blob->anti_replay.re_init();
  1535. conn_info.state.server_current_state=server_idle;
  1536. conn_info.oppsite_const_id=0;
  1537. }
  1538. else
  1539. {
  1540. mylog(log_fatal,"[%s]this should never happen\n",ip_port);
  1541. myexit(-1);
  1542. }
  1543. return 0;
  1544. }
  1545. return 0;
  1546. }
  1547. int get_src_adress(u32_t &ip)
  1548. {
  1549. struct sockaddr_in remote_addr_in;
  1550. socklen_t slen = sizeof(sockaddr_in);
  1551. memset(&remote_addr_in, 0, sizeof(remote_addr_in));
  1552. remote_addr_in.sin_family = AF_INET;
  1553. remote_addr_in.sin_port = htons(remote_port);
  1554. remote_addr_in.sin_addr.s_addr = remote_address_uint32;
  1555. int new_udp_fd=socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1556. if(new_udp_fd<0)
  1557. {
  1558. mylog(log_warn,"create udp_fd error\n");
  1559. return -1;
  1560. }
  1561. set_buf_size(new_udp_fd);
  1562. mylog(log_debug,"created new udp_fd %d\n",new_udp_fd);
  1563. int ret = connect(new_udp_fd, (struct sockaddr *) &remote_addr_in, slen);
  1564. if(ret!=0)
  1565. {
  1566. mylog(log_warn,"udp fd connect fail\n");
  1567. close(new_udp_fd);
  1568. return -1;
  1569. }
  1570. struct sockaddr_in my_addr;
  1571. unsigned int len=sizeof(my_addr);
  1572. if(getsockname(new_udp_fd, (struct sockaddr *) &my_addr, &len)!=0) return -1;
  1573. ip=my_addr.sin_addr.s_addr;
  1574. close(new_udp_fd);
  1575. return 0;
  1576. }
  1577. int client_event_loop()
  1578. {
  1579. char buf[buf_len];
  1580. conn_info_t conn_info;
  1581. conn_info.my_id=get_true_random_number_nz();
  1582. conn_info.prepare();
  1583. packet_info_t &send_info=conn_info.raw_info.send_info;
  1584. packet_info_t &recv_info=conn_info.raw_info.recv_info;
  1585. //printf("?????\n");
  1586. if(source_address_uint32==0)
  1587. {
  1588. mylog(log_info,"get_src_adress called\n");
  1589. if(get_src_adress(source_address_uint32)!=0)
  1590. {
  1591. mylog(log_fatal,"the trick to auto get source ip failed,you should specific an ip by --source-ip\n");
  1592. myexit(-1);
  1593. }
  1594. }
  1595. in_addr tmp;
  1596. tmp.s_addr=source_address_uint32;
  1597. mylog(log_info,"source ip = %s\n",inet_ntoa(tmp));
  1598. //printf("done\n");
  1599. if(try_to_list_and_bind(source_port)!=0)
  1600. {
  1601. mylog(log_fatal,"bind to source_port:%d fail\n ",source_port);
  1602. myexit(-1);
  1603. }
  1604. send_info.src_port=source_port;
  1605. send_info.src_ip = source_address_uint32;
  1606. int i, j, k;int ret;
  1607. init_raw_socket();
  1608. //init_filter(source_port);
  1609. send_info.dst_ip=remote_address_uint32;
  1610. send_info.dst_port=remote_port;
  1611. //g_packet_info.src_ip=source_address_uint32;
  1612. //g_packet_info.src_port=source_port;
  1613. udp_fd=socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1614. set_buf_size(udp_fd);
  1615. int yes = 1;
  1616. //setsockopt(udp_fd, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes));
  1617. struct sockaddr_in local_me;
  1618. socklen_t slen = sizeof(sockaddr_in);
  1619. memset(&local_me, 0, sizeof(local_me));
  1620. local_me.sin_family = AF_INET;
  1621. local_me.sin_port = htons(local_port);
  1622. local_me.sin_addr.s_addr = local_address_uint32;
  1623. if (bind(udp_fd, (struct sockaddr*) &local_me, slen) == -1) {
  1624. mylog(log_fatal,"socket bind error\n");
  1625. //perror("socket bind error");
  1626. myexit(1);
  1627. }
  1628. setnonblocking(udp_fd);
  1629. epollfd = epoll_create1(0);
  1630. const int max_events = 4096;
  1631. struct epoll_event ev, events[max_events];
  1632. if (epollfd < 0) {
  1633. mylog(log_fatal,"epoll return %d\n", epollfd);
  1634. myexit(-1);
  1635. }
  1636. ev.events = EPOLLIN;
  1637. ev.data.u64 = udp_fd;
  1638. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, udp_fd, &ev);
  1639. if (ret!=0) {
  1640. mylog(log_fatal,"add udp_listen_fd error\n");
  1641. myexit(-1);
  1642. }
  1643. ev.events = EPOLLIN;
  1644. ev.data.u64 = raw_recv_fd;
  1645. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, raw_recv_fd, &ev);
  1646. if (ret!= 0) {
  1647. mylog(log_fatal,"add raw_fd error\n");
  1648. myexit(-1);
  1649. }
  1650. ////add_timer for fake_tcp_keep_connection_client
  1651. //sleep(10);
  1652. //memset(&udp_old_addr_in,0,sizeof(sockaddr_in));
  1653. int unbind=1;
  1654. set_timer(epollfd,timer_fd);
  1655. mylog(log_debug,"send_raw : from %x %d to %x %d\n",send_info.src_ip,send_info.src_port,send_info.dst_ip,send_info.dst_port);
  1656. while(1)////////////////////////
  1657. {
  1658. if(about_to_exit) myexit(0);
  1659. epoll_trigger_counter++;
  1660. int nfds = epoll_wait(epollfd, events, max_events, 180 * 1000);
  1661. if (nfds < 0) { //allow zero
  1662. if(errno==EINTR )
  1663. {
  1664. mylog(log_info,"epoll interrupted by signal\n");
  1665. myexit(0);
  1666. }
  1667. else
  1668. {
  1669. mylog(log_fatal,"epoll_wait return %d\n", nfds);
  1670. myexit(-1);
  1671. }
  1672. }
  1673. int idx;
  1674. for (idx = 0; idx < nfds; ++idx) {
  1675. if (events[idx].data.u64 == (u64_t)raw_recv_fd)
  1676. {
  1677. iphdr *iph;tcphdr *tcph;
  1678. client_on_raw_recv(conn_info);
  1679. }
  1680. else if(events[idx].data.u64 ==(u64_t)timer_fd)
  1681. {
  1682. u64_t value;
  1683. read(timer_fd, &value, 8);
  1684. client_on_timer(conn_info);
  1685. mylog(log_trace,"epoll_trigger_counter: %d \n",epoll_trigger_counter);
  1686. epoll_trigger_counter=0;
  1687. }
  1688. else if (events[idx].data.u64 == (u64_t)udp_fd)
  1689. {
  1690. int recv_len;
  1691. struct sockaddr_in udp_new_addr_in;
  1692. if ((recv_len = recvfrom(udp_fd, buf, buf_len, 0,
  1693. (struct sockaddr *) &udp_new_addr_in, &slen)) == -1) {
  1694. mylog(log_error,"recv_from error,this shouldnt happen at client\n");
  1695. myexit(1);
  1696. };
  1697. if(recv_len>=mtu_warn)
  1698. {
  1699. mylog(log_warn,"huge packet,data len=%d (>=%d).strongly suggested to set a smaller mtu at upper level,to get rid of this warn\n ",recv_len,mtu_warn);
  1700. }
  1701. mylog(log_trace,"Received packet from %s:%d,len: %d\n", inet_ntoa(udp_new_addr_in.sin_addr),
  1702. ntohs(udp_new_addr_in.sin_port),recv_len);
  1703. /*
  1704. if(udp_old_addr_in.sin_addr.s_addr==0&&udp_old_addr_in.sin_port==0)
  1705. {
  1706. memcpy(&udp_old_addr_in,&udp_new_addr_in,sizeof(udp_new_addr_in));
  1707. }
  1708. else if(udp_new_addr_in.sin_addr.s_addr!=udp_old_addr_in.sin_addr.s_addr
  1709. ||udp_new_addr_in.sin_port!=udp_old_addr_in.sin_port)
  1710. {
  1711. if(get_current_time()- last_udp_recv_time <udp_timeout)
  1712. {
  1713. printf("new <ip,port> connected in,ignored,bc last connection is still active\n");
  1714. continue;
  1715. }
  1716. else
  1717. {
  1718. printf("new <ip,port> connected in,accpeted\n");
  1719. memcpy(&udp_old_addr_in,&udp_new_addr_in,sizeof(udp_new_addr_in));
  1720. conv_id++;
  1721. }
  1722. }*/
  1723. //last_udp_recv_time=get_current_time();
  1724. u64_t u64=((u64_t(udp_new_addr_in.sin_addr.s_addr))<<32u)+ntohs(udp_new_addr_in.sin_port);
  1725. u32_t conv;
  1726. if(!conn_info.blob->conv_manager.is_u64_used(u64))
  1727. {
  1728. if(conn_info.blob->conv_manager.get_size() >=max_conv_num)
  1729. {
  1730. mylog(log_warn,"ignored new udp connect bc max_conv_num exceed\n");
  1731. continue;
  1732. }
  1733. conv=conn_info.blob->conv_manager.get_new_conv();
  1734. conn_info.blob->conv_manager.insert_conv(conv,u64);
  1735. mylog(log_info,"new packet from %s:%d,conv_id=%x\n",inet_ntoa(udp_new_addr_in.sin_addr),ntohs(udp_new_addr_in.sin_port),conv);
  1736. }
  1737. else
  1738. {
  1739. conv=conn_info.blob->conv_manager.find_conv_by_u64(u64);
  1740. }
  1741. conn_info.blob->conv_manager.update_active_time(conv);
  1742. if(conn_info.state.client_current_state==client_ready)
  1743. {
  1744. /*
  1745. char buf2[6000];
  1746. int ret1=send_raw(conn_info.raw_info,buf2,40);
  1747. int ret2=send_raw(conn_info.raw_info,buf2,500);
  1748. int ret3=send_raw(conn_info.raw_info,buf2,1000);
  1749. int ret4=send_raw(conn_info.raw_info,buf2,2000);
  1750. mylog(log_warn,"ret= %d %d %d %d\n",ret1,ret2,ret3,ret4);*/
  1751. send_data_safer(conn_info,buf,recv_len,conv);
  1752. }
  1753. }
  1754. else
  1755. {
  1756. mylog(log_fatal,"unknown fd,this should never happen\n");
  1757. myexit(-1);
  1758. }
  1759. }
  1760. }
  1761. return 0;
  1762. }
  1763. int server_event_loop()
  1764. {
  1765. char buf[buf_len];
  1766. int i, j, k;int ret;
  1767. bind_address_uint32=local_address_uint32;//only server has bind adress,client sets it to zero
  1768. if(raw_mode==mode_faketcp)
  1769. {
  1770. bind_fd=socket(AF_INET,SOCK_STREAM,0);
  1771. }
  1772. else if(raw_mode==mode_udp||raw_mode==mode_icmp)//bind an adress to avoid collision,for icmp,there is no port,just bind a udp port
  1773. {
  1774. bind_fd=socket(AF_INET,SOCK_DGRAM,0);
  1775. }
  1776. struct sockaddr_in temp_bind_addr;
  1777. bzero(&temp_bind_addr, sizeof(temp_bind_addr));
  1778. temp_bind_addr.sin_family = AF_INET;
  1779. temp_bind_addr.sin_port = htons(local_port);
  1780. temp_bind_addr.sin_addr.s_addr = local_address_uint32;
  1781. if (bind(bind_fd, (struct sockaddr*)&temp_bind_addr, sizeof(temp_bind_addr)) !=0)
  1782. {
  1783. mylog(log_fatal,"bind fail\n");
  1784. myexit(-1);
  1785. }
  1786. if(raw_mode==mode_faketcp)
  1787. {
  1788. if(listen(bind_fd, SOMAXCONN) != 0 )
  1789. {
  1790. mylog(log_fatal,"listen fail\n");
  1791. myexit(-1);
  1792. }
  1793. }
  1794. init_raw_socket();
  1795. init_filter(local_port);//bpf filter
  1796. epollfd = epoll_create1(0);
  1797. const int max_events = 4096;
  1798. struct epoll_event ev, events[max_events];
  1799. if (epollfd < 0) {
  1800. mylog(log_fatal,"epoll return %d\n", epollfd);
  1801. myexit(-1);
  1802. }
  1803. ev.events = EPOLLIN;
  1804. ev.data.u64 = raw_recv_fd;
  1805. ret = epoll_ctl(epollfd, EPOLL_CTL_ADD, raw_recv_fd, &ev);
  1806. if (ret!= 0) {
  1807. mylog(log_fatal,"add raw_fd error\n");
  1808. myexit(-1);
  1809. }
  1810. int timer_fd;
  1811. set_timer(epollfd,timer_fd);
  1812. u64_t begin_time=0;
  1813. u64_t end_time=0;
  1814. while(1)////////////////////////
  1815. {
  1816. if(about_to_exit) myexit(0);
  1817. int nfds = epoll_wait(epollfd, events, max_events, 180 * 1000);
  1818. if (nfds < 0) { //allow zero
  1819. if(errno==EINTR )
  1820. {
  1821. mylog(log_info,"epoll interrupted by signal\n");
  1822. myexit(0);
  1823. }
  1824. else
  1825. {
  1826. mylog(log_fatal,"epoll_wait return %d\n", nfds);
  1827. myexit(-1);
  1828. }
  1829. }
  1830. int idx;
  1831. for (idx = 0; idx < nfds; ++idx)
  1832. {
  1833. //mylog(log_debug,"ndfs: %d \n",nfds);
  1834. epoll_trigger_counter++;
  1835. //printf("%d %d %d %d\n",timer_fd,raw_recv_fd,raw_send_fd,n);
  1836. if ((events[idx].data.u64 ) == (u64_t)timer_fd)
  1837. {
  1838. if(debug_flag)begin_time=get_current_time();
  1839. conn_manager.clear_inactive();
  1840. u64_t dummy;
  1841. read(timer_fd, &dummy, 8);
  1842. //current_time_rough=get_current_time();
  1843. if(debug_flag)
  1844. {
  1845. end_time=get_current_time();
  1846. mylog(log_debug,"timer_fd,%llu,%llu,%llu\n",begin_time,end_time,end_time-begin_time);
  1847. }
  1848. mylog(log_trace,"epoll_trigger_counter: %d \n",epoll_trigger_counter);
  1849. epoll_trigger_counter=0;
  1850. }
  1851. else if (events[idx].data.u64 == (u64_t)raw_recv_fd)
  1852. {
  1853. if(debug_flag)begin_time=get_current_time();
  1854. server_on_raw_recv_multi();
  1855. if(debug_flag)
  1856. {
  1857. end_time=get_current_time();
  1858. mylog(log_debug,"raw_recv_fd,%llu,%llu,%llu \n",begin_time,end_time,end_time-begin_time);
  1859. }
  1860. }
  1861. else if ((events[idx].data.u64 >>32u) == 2u)
  1862. {
  1863. if(debug_flag)begin_time=get_current_time();
  1864. int fd=get_u64_l(events[idx].data.u64);
  1865. u64_t dummy;
  1866. read(fd, &dummy, 8);
  1867. if(conn_manager.timer_fd_mp.find(fd)==conn_manager.timer_fd_mp.end()) //this can happen,when fd is a just closed fd
  1868. {
  1869. mylog(log_info,"timer_fd no longer exits\n");
  1870. continue;
  1871. }
  1872. conn_info_t* p_conn_info=conn_manager.timer_fd_mp[fd];
  1873. u32_t ip=p_conn_info->raw_info.recv_info.src_ip;
  1874. u32_t port=p_conn_info->raw_info.recv_info.src_port;
  1875. assert(conn_manager.exist(ip,port));//TODO remove this for peformance
  1876. assert(p_conn_info->state.server_current_state == server_ready); //TODO remove this for peformance
  1877. //conn_info_t &conn_info=conn_manager.find(ip,port);
  1878. char ip_port[40];
  1879. sprintf(ip_port,"%s:%d",my_ntoa(ip),port);
  1880. server_on_timer_multi(*p_conn_info,ip_port);
  1881. if(debug_flag)
  1882. {
  1883. end_time=get_current_time();
  1884. mylog(log_debug,"(events[idx].data.u64 >>32u) == 2u ,%llu,%llu,%llu \n",begin_time,end_time,end_time-begin_time);
  1885. }
  1886. }
  1887. else if ((events[idx].data.u64 >>32u) == 1u)
  1888. {
  1889. //uint32_t conv_id=events[n].data.u64>>32u;
  1890. if(debug_flag)begin_time=get_current_time();
  1891. int fd=int((events[idx].data.u64<<32u)>>32u);
  1892. if(conn_manager.udp_fd_mp.find(fd)==conn_manager.udp_fd_mp.end()) //this can happen,when fd is a just closed fd
  1893. {
  1894. mylog(log_debug,"fd no longer exists in udp_fd_mp,udp fd %d\n",fd);
  1895. recv(fd,0,0,0);
  1896. continue;
  1897. }
  1898. conn_info_t* p_conn_info=conn_manager.udp_fd_mp[fd];
  1899. u32_t ip=p_conn_info->raw_info.recv_info.src_ip;
  1900. u32_t port=p_conn_info->raw_info.recv_info.src_port;
  1901. if(!conn_manager.exist(ip,port))//TODO remove this for peformance
  1902. {
  1903. mylog(log_fatal,"ip port no longer exits 2!!!this shouldnt happen\n");
  1904. myexit(-1);
  1905. }
  1906. if(p_conn_info->state.server_current_state!=server_ready)//TODO remove this for peformance
  1907. {
  1908. mylog(log_fatal,"p_conn_info->state.server_current_state!=server_ready!!!this shouldnt happen\n");
  1909. myexit(-1);
  1910. }
  1911. conn_info_t &conn_info=*p_conn_info;
  1912. if(!conn_info.blob->conv_manager.is_u64_used(fd))
  1913. {
  1914. mylog(log_debug,"conv no longer exists,udp fd %d\n",fd);
  1915. int recv_len=recv(fd,0,0,0); ///////////TODO ,delete this
  1916. continue;
  1917. }
  1918. u32_t conv_id=conn_info.blob->conv_manager.find_conv_by_u64(fd);
  1919. int recv_len=recv(fd,buf,buf_len,0);
  1920. mylog(log_trace,"received a packet from udp_fd,len:%d\n",recv_len);
  1921. if(recv_len<0)
  1922. {
  1923. mylog(log_debug,"udp fd,recv_len<0 continue\n");
  1924. continue;
  1925. }
  1926. if(recv_len>=mtu_warn)
  1927. {
  1928. mylog(log_warn,"huge packet,data len=%d (>=%d).strongly suggested to set a smaller mtu at upper level,to get rid of this warn\n ",recv_len,mtu_warn);
  1929. }
  1930. //conn_info.conv_manager->update_active_time(conv_id); server dosnt update from upd side,only update from raw side. (client updates at both side)
  1931. if(conn_info.state.server_current_state==server_ready)
  1932. {
  1933. send_data_safer(conn_info,buf,recv_len,conv_id);
  1934. //send_data(g_packet_info_send,buf,recv_len,my_id,oppsite_id,conv_id);
  1935. mylog(log_trace,"send_data_safer ,sent !!\n");
  1936. }
  1937. if(debug_flag)
  1938. {
  1939. end_time=get_current_time();
  1940. mylog(log_debug,"(events[idx].data.u64 >>32u) == 1u,%lld,%lld,%lld \n",begin_time,end_time,end_time-begin_time);
  1941. }
  1942. }
  1943. else
  1944. {
  1945. mylog(log_fatal,"unknown fd,this should never happen\n");
  1946. myexit(-1);
  1947. }
  1948. }
  1949. }
  1950. return 0;
  1951. }
  1952. void print_help()
  1953. {
  1954. printf("udp2raw-tunnel\n");
  1955. printf("version: %s %s\n",__DATE__,__TIME__);
  1956. printf("repository: https://github.com/wangyu-/udp2raw-tunnel\n");
  1957. printf("\n");
  1958. printf("usage:\n");
  1959. printf(" run as client : ./this_program -c -l local_listen_ip:local_port -r server_ip:server_port [options]\n");
  1960. printf(" run as server : ./this_program -s -l server_listen_ip:server_port -r remote_ip:remote_port [options]\n");
  1961. printf("\n");
  1962. printf("common options,these options must be same on both side:\n");
  1963. printf(" --raw-mode <string> avaliable values:faketcp(default),udp,icmp\n");
  1964. printf(" -k,--key <string> password to gen symetric key,default:\"secret key\"\n");
  1965. printf(" --auth-mode <string> avaliable values:aes128cbc(default),xor,none\n");
  1966. printf(" --cipher-mode <string> avaliable values:md5(default),crc32,simple,none\n");
  1967. printf(" -a,--auto-rule auto add (and delete) iptables rule\n");
  1968. printf(" -g,--gen-rule generate iptables rule then exit\n");
  1969. printf(" --disable-anti-replay disable anti-replay,not suggested\n");
  1970. //printf("\n");
  1971. printf("client options:\n");
  1972. printf(" --source-ip <ip> force source-ip for raw socket\n");
  1973. printf(" --source-port <port> force source-port for raw socket,tcp/udp only\n");
  1974. printf(" this option disables port changing while re-connecting\n");
  1975. // printf(" \n");
  1976. printf("other options:\n");
  1977. printf(" --log-level <number> 0:never 1:fatal 2:error 3:warn \n");
  1978. printf(" 4:info (default) 5:debug 6:trace\n");
  1979. // printf("\n");
  1980. printf(" --log-position enable file name,function name,line number in log\n");
  1981. printf(" --disable-color disable log color\n");
  1982. printf(" --disable-bpf disable the kernel space filter,most time its not necessary\n");
  1983. printf(" unless you suspect there is a bug\n");
  1984. // printf("\n");
  1985. printf(" --sock-buf <number> buf size for socket,>=10 and <=10240,unit:kbyte,default:1024\n");
  1986. printf(" --seqmode <number> seq increase mode for faketcp:\n");
  1987. printf(" 0:dont increase\n");
  1988. printf(" 1:increase every packet\n");
  1989. printf(" 2:increase randomly, about every 3 packets (default)\n");
  1990. // printf("\n");
  1991. printf(" -h,--help print this help message\n");
  1992. //printf("common options,these options must be same on both side\n");
  1993. }
  1994. void process_arg(int argc, char *argv[])
  1995. {
  1996. int i,j,k,opt;
  1997. static struct option long_options[] =
  1998. {
  1999. /* These options set a flag. */
  2000. {"source-ip", required_argument, 0, 1},
  2001. {"source-port", required_argument, 0, 1},
  2002. {"log-level", required_argument, 0, 1},
  2003. {"key", required_argument, 0, 'k'},
  2004. {"auth-mode", required_argument, 0, 1},
  2005. {"cipher-mode", required_argument, 0, 1},
  2006. {"raw-mode", required_argument, 0, 1},
  2007. {"disable-color", no_argument, 0, 1},
  2008. {"log-position", no_argument, 0, 1},
  2009. {"disable-bpf", no_argument, 0, 1},
  2010. {"disable-anti-replay", no_argument, 0, 1},
  2011. {"auto-rule", no_argument, 0, 'a'},
  2012. {"gen-rule", no_argument, 0, 'g'},
  2013. {"debug", no_argument, 0, 1},
  2014. {"clear", no_argument, 0, 1},
  2015. {"lower-level", required_argument, 0, 1},
  2016. {"sock-buf", required_argument, 0, 1},
  2017. {"seq-mode", required_argument, 0, 1},
  2018. {NULL, 0, 0, 0}
  2019. };
  2020. int option_index = 0;
  2021. for (i = 0; i < argc; i++)
  2022. {
  2023. if(strcmp(argv[i],"-h")==0||strcmp(argv[i],"--help")==0)
  2024. {
  2025. print_help();
  2026. myexit(0);
  2027. }
  2028. }
  2029. for (i = 0; i < argc; i++)
  2030. {
  2031. if(strcmp(argv[i],"--log-level")==0)
  2032. {
  2033. if(i<argc -1)
  2034. {
  2035. sscanf(argv[i+1],"%d",&log_level);
  2036. if(0<=log_level&&log_level<log_end)
  2037. {
  2038. }
  2039. else
  2040. {
  2041. log_bare(log_fatal,"invalid log_level\n");
  2042. myexit(-1);
  2043. }
  2044. }
  2045. }
  2046. if(strcmp(argv[i],"--disable-color")==0)
  2047. {
  2048. enable_log_color=0;
  2049. }
  2050. }
  2051. mylog(log_info,"argc=%d ", argc);
  2052. for (i = 0; i < argc; i++) {
  2053. log_bare(log_info, "%s ", argv[i]);
  2054. }
  2055. log_bare(log_info, "\n");
  2056. if (argc == 1)
  2057. {
  2058. print_help();
  2059. myexit(-1);
  2060. }
  2061. int no_l = 1, no_r = 1;
  2062. while ((opt = getopt_long(argc, argv, "l:r:schk:ag",long_options,&option_index)) != -1) {
  2063. //string opt_key;
  2064. //opt_key+=opt;
  2065. switch (opt) {
  2066. case 'l':
  2067. no_l = 0;
  2068. if (strchr(optarg, ':') != 0) {
  2069. sscanf(optarg, "%[^:]:%d", local_address, &local_port);
  2070. if(local_port==22)
  2071. {
  2072. mylog(log_fatal,"port 22 not allowed\n");
  2073. myexit(-1);
  2074. }
  2075. } else {
  2076. mylog(log_fatal,"invalid parameter for -l ,%s,should be ip:port\n",optarg);
  2077. myexit(-1);
  2078. }
  2079. break;
  2080. case 'r':
  2081. no_r = 0;
  2082. if (strchr(optarg, ':') != 0) {
  2083. sscanf(optarg, "%[^:]:%d", remote_address, &remote_port);
  2084. if(remote_port==22)
  2085. {
  2086. mylog(log_fatal,"port 22 not allowed\n");
  2087. myexit(-1);
  2088. }
  2089. } else {
  2090. mylog(log_fatal,"invalid parameter for -r ,%s,should be ip:port\n",optarg);
  2091. myexit(-1);
  2092. }
  2093. break;
  2094. case 's':
  2095. if(program_mode==0)
  2096. {
  2097. program_mode=server_mode;
  2098. }
  2099. else
  2100. {
  2101. mylog(log_fatal,"-s /-c has already been set,conflict\n");
  2102. myexit(-1);
  2103. }
  2104. break;
  2105. case 'c':
  2106. if(program_mode==0)
  2107. {
  2108. program_mode=client_mode;
  2109. }
  2110. else
  2111. {
  2112. mylog(log_fatal,"-s /-c has already been set,conflict\n");
  2113. myexit(-1);
  2114. }
  2115. break;
  2116. case 'h':
  2117. break;
  2118. case 'a':
  2119. auto_add_iptables_rule=1;
  2120. break;
  2121. case 'g':
  2122. generate_iptables_rule=1;
  2123. break;
  2124. case 'k':
  2125. mylog(log_debug,"parsing key option\n");
  2126. sscanf(optarg,"%s",key_string);
  2127. break;
  2128. case 1:
  2129. mylog(log_debug,"option_index: %d\n",option_index);
  2130. if(strcmp(long_options[option_index].name,"clear")==0)
  2131. {
  2132. int ret =system("iptables-save |grep udp2raw_dWRwMnJhdw|sed -n 's/^-A/iptables -D/p'|sh");
  2133. //system("iptables-save |grep udp2raw_dWRwMnJhdw|sed 's/^-A/iptables -D/'|sh");
  2134. //system("iptables-save|grep -v udp2raw_dWRwMnJhdw|iptables-restore");
  2135. mylog(log_info,"tried to clear all iptables rule created previously,return value %d\n",ret);
  2136. myexit(-1);
  2137. }
  2138. else if(strcmp(long_options[option_index].name,"source-ip")==0)
  2139. {
  2140. mylog(log_debug,"parsing long option :source-ip\n");
  2141. sscanf(optarg, "%s", source_address);
  2142. mylog(log_debug,"source: %s\n",source_address);
  2143. }
  2144. else if(strcmp(long_options[option_index].name,"source-port")==0)
  2145. {
  2146. mylog(log_debug,"parsing long option :source-port\n");
  2147. sscanf(optarg, "%d", &source_port);
  2148. mylog(log_info,"source: %d\n",source_port);
  2149. }
  2150. else if(strcmp(long_options[option_index].name,"raw-mode")==0)
  2151. {
  2152. for(i=0;i<mode_end;i++)
  2153. {
  2154. if(strcmp(optarg,raw_mode_tostring[i])==0)
  2155. {
  2156. //printf("%d i\n",i);
  2157. //printf("%s",raw_mode_tostring[i]);
  2158. raw_mode=(raw_mode_t)i;
  2159. break;
  2160. }
  2161. }
  2162. if(i==mode_end)
  2163. {
  2164. mylog(log_fatal,"no such raw_mode %s\n",optarg);
  2165. myexit(-1);
  2166. }
  2167. }
  2168. else if(strcmp(long_options[option_index].name,"auth-mode")==0)
  2169. {
  2170. for(i=0;i<auth_end;i++)
  2171. {
  2172. if(strcmp(optarg,auth_mode_tostring[i])==0)
  2173. {
  2174. auth_mode=(auth_mode_t)i;
  2175. break;
  2176. }
  2177. }
  2178. if(i==auth_end)
  2179. {
  2180. mylog(log_fatal,"no such auth_mode %s\n",optarg);
  2181. myexit(-1);
  2182. }
  2183. }
  2184. else if(strcmp(long_options[option_index].name,"cipher-mode")==0)
  2185. {
  2186. for(i=0;i<cipher_end;i++)
  2187. {
  2188. if(strcmp(optarg,cipher_mode_tostring[i])==0)
  2189. {
  2190. cipher_mode=(cipher_mode_t)i;
  2191. break;
  2192. }
  2193. }
  2194. if(i==cipher_end)
  2195. {
  2196. mylog(log_fatal,"no such cipher_mode %s\n",optarg);
  2197. myexit(-1);
  2198. }
  2199. }
  2200. else if(strcmp(long_options[option_index].name,"log-level")==0)
  2201. {
  2202. }
  2203. else if(strcmp(long_options[option_index].name,"lower-level")==0)
  2204. {
  2205. if(strchr(optarg,'#')==0)
  2206. {
  2207. mylog(log_fatal,"lower-level parameter invaild,should be if_name#mac_adress ,ie eth0#00:23:45:67:89:b9\n");
  2208. myexit(-1);
  2209. }
  2210. lower_level=1;
  2211. u32_t hw[6];
  2212. memset(hw,0,sizeof(hw));
  2213. sscanf(optarg,"%[^#]#%x:%x:%x:%x:%x:%x",if_name,&hw[0],&hw[1],&hw[2],&hw[3],&hw[4],&hw[5]);
  2214. mylog(log_warn,"make sure this is correct: ifname=<%s> gateway_hw_hd=<%x:%x:%x:%x:%x:%x> \n",if_name,hw[0],hw[1],hw[2],hw[3],hw[4],hw[5]);
  2215. for(int i=0;i<6;i++)
  2216. {
  2217. oppsite_hw_addr[i]=uint8_t(hw[i]);
  2218. }
  2219. }
  2220. else if(strcmp(long_options[option_index].name,"disable-color")==0)
  2221. {
  2222. //enable_log_color=0;
  2223. }
  2224. else if(strcmp(long_options[option_index].name,"debug")==0)
  2225. {
  2226. debug_flag=1;
  2227. //enable_log_color=0;
  2228. }
  2229. else if(strcmp(long_options[option_index].name,"debug-resend")==0)
  2230. {
  2231. //debug_resend=1;
  2232. //enable_log_color=0;
  2233. }
  2234. else if(strcmp(long_options[option_index].name,"log-position")==0)
  2235. {
  2236. enable_log_position=1;
  2237. }
  2238. else if(strcmp(long_options[option_index].name,"disable-bpf")==0)
  2239. {
  2240. disable_bpf_filter=1;
  2241. }
  2242. else if(strcmp(long_options[option_index].name,"disable-anti-replay")==0)
  2243. {
  2244. disable_anti_replay=1;
  2245. }
  2246. else if(strcmp(long_options[option_index].name,"sock-buf")==0)
  2247. {
  2248. int tmp=-1;
  2249. sscanf(optarg,"%d",&tmp);
  2250. if(10<=tmp&&tmp<=10*1024)
  2251. {
  2252. socket_buf_size=tmp*1024;
  2253. }
  2254. else
  2255. {
  2256. mylog(log_fatal,"sock-buf value must be between 1 and 10240 (kbyte) \n");
  2257. myexit(-1);
  2258. }
  2259. }
  2260. else if(strcmp(long_options[option_index].name,"seq-mode")==0)
  2261. {
  2262. sscanf(optarg,"%d",&seq_mode);
  2263. if(0<=seq_mode&&seq_mode<=2)
  2264. {
  2265. }
  2266. else
  2267. {
  2268. mylog(log_fatal,"seq_mode value must be 0,1,or 2 \n");
  2269. myexit(-1);
  2270. }
  2271. }
  2272. else
  2273. {
  2274. mylog(log_warn,"ignored unknown long option ,option_index:%d code:<%x>\n",option_index, optopt);
  2275. }
  2276. break;
  2277. default:
  2278. mylog(log_fatal,"unknown option ,code:<%c>,<%x>\n",optopt, optopt);
  2279. myexit(-1);
  2280. }
  2281. }
  2282. if (no_l)
  2283. mylog(log_fatal,"error: -l not found\n");
  2284. if (no_r)
  2285. mylog(log_fatal,"error: -r not found\n");
  2286. if(program_mode==0)
  2287. mylog(log_fatal,"error: -c /-s hasnt been set\n");
  2288. if (no_l || no_r||program_mode==0)
  2289. {
  2290. print_help();
  2291. myexit(-1);
  2292. }
  2293. mylog(log_info,"important variables: ");
  2294. log_bare(log_info,"log_level=%d:%s ",log_level,log_text[log_level]);
  2295. log_bare(log_info,"raw_mode=%s ",raw_mode_tostring[raw_mode]);
  2296. log_bare(log_info,"cipher_mode=%s ",cipher_mode_tostring[cipher_mode]);
  2297. log_bare(log_info,"auth_mode=%s ",auth_mode_tostring[auth_mode]);
  2298. log_bare(log_info,"key=%s ",key_string);
  2299. log_bare(log_info,"local_ip=%s ",local_address);
  2300. log_bare(log_info,"local_port=%d ",local_port);
  2301. log_bare(log_info,"remote_ip=%s ",remote_address);
  2302. log_bare(log_info,"remote_port=%d ",remote_port);
  2303. log_bare(log_info,"source_ip=%s ",source_address);
  2304. log_bare(log_info,"source_port=%d ",source_port);
  2305. log_bare(log_info,"socket_buf_size=%d ",socket_buf_size);
  2306. log_bare(log_info,"\n");
  2307. }
  2308. void iptables_rule()
  2309. {
  2310. char rule[200];
  2311. if(program_mode==client_mode)
  2312. {
  2313. if(raw_mode==mode_faketcp)
  2314. {
  2315. sprintf(rule,"INPUT -s %s/32 -p tcp -m tcp --sport %d -j DROP",remote_address,remote_port);
  2316. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -s %s/32 -p tcp -m tcp --sport %d -j DROP\n",remote_address,remote_port);
  2317. }
  2318. if(raw_mode==mode_udp)
  2319. {
  2320. sprintf(rule,"INPUT -s %s/32 -p udp -m udp --sport %d -j DROP",remote_address,remote_port);
  2321. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -s %s/32 -p udp -m udp --sport %d -j DROP\n",remote_address,remote_port);
  2322. }
  2323. if(raw_mode==mode_icmp)
  2324. {
  2325. sprintf(rule,"INPUT -s %s/32 -p icmp -j DROP",remote_address);
  2326. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -s %s/32 -p icmp -j DROP\n",remote_address);
  2327. }
  2328. }
  2329. if(program_mode==server_mode)
  2330. {
  2331. if(raw_mode==mode_faketcp)
  2332. {
  2333. sprintf(rule,"INPUT -p tcp -m tcp --dport %d -j DROP",local_port);
  2334. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -p tcp -m tcp --dport %d -j DROP\n",local_port);
  2335. }
  2336. if(raw_mode==mode_udp)
  2337. {
  2338. sprintf(rule,"INPUT -p udp -m udp --dport %d -j DROP",local_port);
  2339. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -p udp -m udp --udp %d -j DROP\n",local_port);
  2340. }
  2341. if(raw_mode==mode_icmp)
  2342. {
  2343. if(local_address_uint32==0)
  2344. {
  2345. sprintf(rule,"INPUT -p icmp -j DROP");
  2346. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -p icmp -j DROP\n");
  2347. }
  2348. else
  2349. {
  2350. sprintf(rule,"INPUT -d %s/32 -p icmp -j DROP",local_address);
  2351. //mylog(log_warn,"make sure you have run once: iptables -A INPUT -d %s/32 -p icmp -j DROP\n",local_address);
  2352. }
  2353. }
  2354. }
  2355. if(generate_iptables_rule)
  2356. {
  2357. printf("generated iptables rule:\n");
  2358. printf("iptables -I %s\n",rule);
  2359. myexit(-1);
  2360. }
  2361. else if(auto_add_iptables_rule)
  2362. {
  2363. strcat(rule," -m comment --comment udp2raw_dWRwMnJhdw_");
  2364. char const_id_str[100];
  2365. sprintf(const_id_str,"%x_",const_id);
  2366. strcat(rule,const_id_str);
  2367. time_t timer;
  2368. char buffer[26];
  2369. struct tm* tm_info;
  2370. time(&timer);
  2371. tm_info = localtime(&timer);
  2372. strftime(buffer, 26, "%Y-%m-%d-%H:%M:%S", tm_info);
  2373. strcat(rule,buffer);
  2374. add_iptables_rule(rule);
  2375. }
  2376. else
  2377. {
  2378. mylog(log_warn,"make sure you have run once: iptables -I %s\n",rule);
  2379. }
  2380. }
  2381. int main(int argc, char *argv[])
  2382. {
  2383. //printf("%d %d %d %d",larger_than_u32(1,2),larger_than_u32(2,1),larger_than_u32(0xeeaaeebb,2),larger_than_u32(2,0xeeaaeebb));
  2384. //assert(0==1);
  2385. dup2(1, 2);//redirect stderr to stdout
  2386. signal(SIGINT, signal_handler);
  2387. signal(SIGHUP, signal_handler);
  2388. signal(SIGKILL, signal_handler);
  2389. signal(SIGTERM, signal_handler);
  2390. signal(SIGQUIT, signal_handler);
  2391. process_arg(argc,argv);
  2392. local_address_uint32=inet_addr(local_address);
  2393. remote_address_uint32=inet_addr(remote_address);
  2394. source_address_uint32=inet_addr(source_address);
  2395. //current_time_rough=get_current_time();
  2396. init_random_number_fd();
  2397. srand(get_true_random_number_nz());
  2398. const_id=get_true_random_number_nz();
  2399. mylog(log_info,"const_id:%x\n",const_id);
  2400. char tmp[1000]="";
  2401. strcat(tmp,key_string);
  2402. strcat(tmp,"key1");
  2403. md5((uint8_t*)tmp,strlen(tmp),(uint8_t*)key);
  2404. /*
  2405. tmp[0]=0;
  2406. strcat(tmp,key_string);
  2407. strcat(tmp,"key2");
  2408. md5((uint8_t*)tmp,strlen(tmp),(uint8_t*)key2);*/
  2409. iptables_rule();
  2410. if(program_mode==client_mode)
  2411. {
  2412. client_event_loop();
  2413. }
  2414. else
  2415. {
  2416. server_event_loop();
  2417. }
  2418. return 0;
  2419. }