1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445
|
/*
* OpenVPN -- An application to securely tunnel IP networks
* over a single TCP/UDP port, with support for SSL/TLS-based
* session authentication and key exchange,
* packet encryption, packet authentication, and
* packet compression.
*
* Copyright (C) 2002-2005 OpenVPN Solutions LLC <info@openvpn.net>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2
* as published by the Free Software Foundation.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program (see the file COPYING included with this
* distribution); if not, write to the Free Software Foundation, Inc.,
* 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
#ifndef MULTI_H
#define MULTI_H
#if P2MP_SERVER
#include "init.h"
#include "forward.h"
#include "mroute.h"
#include "mbuf.h"
#include "list.h"
#include "schedule.h"
#include "pool.h"
#include "mudp.h"
#include "mtcp.h"
#include "perf.h"
/*
* Walk (don't run) through the routing table,
* deleting old entries, and possibly multi_instance
* structs as well which have been marked for deletion.
*/
struct multi_reap
{
int bucket_base;
int buckets_per_pass;
time_t last_call;
};
/*
* One multi_instance object per client instance.
*/
struct multi_instance {
struct schedule_entry se; /* this must be the first element of the structure */
struct gc_arena gc;
MUTEX_DEFINE (mutex);
bool defined;
bool halt;
int refcount;
int route_count; /* number of routes (including cached routes) owned by this instance */
time_t created;
struct timeval wakeup; /* absolute time */
struct mroute_addr real;
ifconfig_pool_handle vaddr_handle;
const char *msg_prefix;
/* queued outgoing data in Server/TCP mode */
unsigned int tcp_rwflags;
struct mbuf_set *tcp_link_out_deferred;
bool socket_set_called;
in_addr_t reporting_addr; /* IP address shown in status listing */
bool did_open_context;
bool did_real_hash;
bool did_iter;
bool connection_established_flag;
bool did_iroutes;
struct context context;
};
/*
* One multi_context object per server daemon thread.
*/
struct multi_context {
# define MC_UNDEF 0
# define MC_SINGLE_THREADED (1<<0)
# define MC_MULTI_THREADED_MASTER (1<<1)
# define MC_MULTI_THREADED_WORKER (1<<2)
# define MC_MULTI_THREADED_SCHEDULER (1<<3)
# define MC_WORK_THREAD (MC_MULTI_THREADED_WORKER|MC_MULTI_THREADED_SCHEDULER)
int thread_mode;
struct hash *hash; /* client instances indexed by real address */
struct hash *vhash; /* client instances indexed by virtual address */
struct hash *iter; /* like real address hash but optimized for iteration */
struct schedule *schedule;
struct mbuf_set *mbuf;
struct multi_tcp *mtcp;
struct ifconfig_pool *ifconfig_pool;
struct frequency_limit *new_connection_limiter;
struct mroute_helper *route_helper;
struct multi_reap *reaper;
struct mroute_addr local;
bool enable_c2c;
int max_clients;
int tcp_queue_limit;
int status_file_version;
struct multi_instance *pending;
struct multi_instance *earliest_wakeup;
struct multi_instance **mpp_touched;
struct context_buffers *context_buffers;
time_t per_second_trigger;
struct context top;
};
/*
* Host route
*/
struct multi_route
{
struct mroute_addr addr;
struct multi_instance *instance;
# define MULTI_ROUTE_CACHE (1<<0)
# define MULTI_ROUTE_AGEABLE (1<<1)
unsigned int flags;
unsigned int cache_generation;
time_t last_reference;
};
/*
* top level function, called by openvpn.c
*/
void tunnel_server (struct context *top);
const char *multi_instance_string (const struct multi_instance *mi, bool null, struct gc_arena *gc);
void multi_bcast (struct multi_context *m,
const struct buffer *buf,
struct multi_instance *omit);
/*
* Called by mtcp.c, mudp.c, or other (to be written) protocol drivers
*/
void multi_init (struct multi_context *m, struct context *t, bool tcp_mode, int thread_mode);
void multi_uninit (struct multi_context *m);
void multi_top_init (struct multi_context *m, const struct context *top, const bool alloc_buffers);
void multi_top_free (struct multi_context *m);
struct multi_instance *multi_create_instance (struct multi_context *m, const struct mroute_addr *real);
void multi_close_instance (struct multi_context *m, struct multi_instance *mi, bool shutdown);
bool multi_process_timeout (struct multi_context *m, const unsigned int mpp_flags);
#define MPP_PRE_SELECT (1<<0)
#define MPP_CONDITIONAL_PRE_SELECT (1<<1)
#define MPP_CLOSE_ON_SIGNAL (1<<2)
#define MPP_RECORD_TOUCH (1<<3)
bool multi_process_post (struct multi_context *m, struct multi_instance *mi, const unsigned int flags);
bool multi_process_incoming_link (struct multi_context *m, struct multi_instance *instance, const unsigned int mpp_flags);
bool multi_process_incoming_tun (struct multi_context *m, const unsigned int mpp_flags);
void multi_process_drop_outgoing_tun (struct multi_context *m, const unsigned int mpp_flags);
void multi_print_status (struct multi_context *m, struct status_output *so, const int version);
struct multi_instance *multi_get_queue (struct mbuf_set *ms);
void multi_add_mbuf (struct multi_context *m,
struct multi_instance *mi,
struct mbuf_buffer *mb);
void multi_ifconfig_pool_persist (struct multi_context *m, bool force);
bool multi_process_signal (struct multi_context *m);
void multi_close_instance_on_signal (struct multi_context *m, struct multi_instance *mi);
void init_management_callback_multi (struct multi_context *m);
void uninit_management_callback_multi (struct multi_context *m);
/*
* Return true if our output queue is not full
*/
static inline bool
multi_output_queue_ready (const struct multi_context *m,
const struct multi_instance *mi)
{
if (mi->tcp_link_out_deferred)
return mbuf_len (mi->tcp_link_out_deferred) <= m->tcp_queue_limit;
else
return true;
}
/*
* Determine which instance has pending output
* and prepare the output for sending in
* the to_link buffer.
*/
static inline struct multi_instance *
multi_process_outgoing_link_pre (struct multi_context *m)
{
struct multi_instance *mi = NULL;
if (m->pending)
mi = m->pending;
else if (mbuf_defined (m->mbuf))
mi = multi_get_queue (m->mbuf);
return mi;
}
/*
* Per-client route quota management
*/
void route_quota_exceeded (const struct multi_context *m, const struct multi_instance *mi);
static inline void
route_quota_inc (struct multi_instance *mi)
{
++mi->route_count;
}
static inline void
route_quota_dec (struct multi_instance *mi)
{
--mi->route_count;
}
/* can we add a new route? */
static inline bool
route_quota_test (const struct multi_context *m, const struct multi_instance *mi)
{
if (mi->route_count >= mi->context.options.max_routes_per_client)
{
route_quota_exceeded (m, mi);
return false;
}
else
return true;
}
/*
* Instance reference counting
*/
static inline void
multi_instance_inc_refcount (struct multi_instance *mi)
{
++mi->refcount;
}
static inline void
multi_instance_dec_refcount (struct multi_instance *mi)
{
if (--mi->refcount <= 0)
{
gc_free (&mi->gc);
mutex_destroy (&mi->mutex);
free (mi);
}
}
static inline void
multi_route_del (struct multi_route *route)
{
struct multi_instance *mi = route->instance;
route_quota_dec (mi);
multi_instance_dec_refcount (mi);
free (route);
}
static inline bool
multi_route_defined (const struct multi_context *m,
const struct multi_route *r)
{
if (r->instance->halt)
return false;
else if ((r->flags & MULTI_ROUTE_CACHE)
&& r->cache_generation != m->route_helper->cache_generation)
return false;
else if ((r->flags & MULTI_ROUTE_AGEABLE)
&& r->last_reference + m->route_helper->ageable_ttl_secs < now)
return false;
else
return true;
}
/*
* Set a msg() function prefix with our current client instance ID.
*/
static inline void
set_prefix (struct multi_instance *mi)
{
#ifdef MULTI_DEBUG_EVENT_LOOP
if (mi->msg_prefix)
printf ("[%s]\n", mi->msg_prefix);
#endif
msg_set_prefix (mi->msg_prefix);
}
static inline void
clear_prefix (void)
{
#ifdef MULTI_DEBUG_EVENT_LOOP
printf ("[NULL]\n");
#endif
msg_set_prefix (NULL);
}
/*
* Instance Reaper
*
* Reaper constants. The reaper is the process where the virtual address
* and virtual route hash table is scanned for dead entries which are
* then removed. The hash table could potentially be quite large, so we
* don't want to reap in a single pass.
*/
#define REAP_MAX_WAKEUP 10 /* Do reap pass at least once per n seconds */
#define REAP_DIVISOR 256 /* How many passes to cover whole hash table */
#define REAP_MIN 16 /* Minimum number of buckets per pass */
#define REAP_MAX 1024 /* Maximum number of buckets per pass */
/*
* Mark a cached host route for deletion after this
* many seconds without any references.
*/
#define MULTI_CACHE_ROUTE_TTL 60
static inline void
multi_reap_process (const struct multi_context *m)
{
void multi_reap_process_dowork (const struct multi_context *m);
if (m->reaper->last_call != now)
multi_reap_process_dowork (m);
}
static inline void
multi_process_per_second_timers (struct multi_context *m)
{
if (m->per_second_trigger != now)
{
void multi_process_per_second_timers_dowork (struct multi_context *m);
multi_process_per_second_timers_dowork (m);
m->per_second_trigger = now;
}
}
/*
* Compute earliest timeout expiry from the set of
* all instances. Output:
*
* m->earliest_wakeup : instance needing the earliest service.
* dest : earliest timeout as a delta in relation
* to current time.
*/
static inline void
multi_get_timeout (struct multi_context *m, struct timeval *dest)
{
struct timeval tv, current;
CLEAR (tv);
m->earliest_wakeup = (struct multi_instance *) schedule_get_earliest_wakeup (m->schedule, &tv);
if (m->earliest_wakeup)
{
ASSERT (!gettimeofday (¤t, NULL));
tv_delta (dest, ¤t, &tv);
if (dest->tv_sec >= REAP_MAX_WAKEUP)
{
m->earliest_wakeup = NULL;
dest->tv_sec = REAP_MAX_WAKEUP;
dest->tv_usec = 0;
}
}
else
{
dest->tv_sec = REAP_MAX_WAKEUP;
dest->tv_usec = 0;
}
}
/*
* Send a packet to TUN/TAP interface.
*/
static inline bool
multi_process_outgoing_tun (struct multi_context *m, const unsigned int mpp_flags)
{
struct multi_instance *mi = m->pending;
bool ret = true;
ASSERT (mi);
#ifdef MULTI_DEBUG_EVENT_LOOP
printf ("%s -> TUN len=%d\n",
id(mi),
mi->context.c2.to_tun.len);
#endif
set_prefix (mi);
process_outgoing_tun (&mi->context);
ret = multi_process_post (m, mi, mpp_flags);
clear_prefix ();
return ret;
}
static inline bool
multi_process_outgoing_link_dowork (struct multi_context *m, struct multi_instance *mi, const unsigned int mpp_flags)
{
bool ret = true;
set_prefix (mi);
process_outgoing_link (&mi->context);
ret = multi_process_post (m, mi, mpp_flags);
clear_prefix ();
return ret;
}
/*
* Check for signals.
*/
#define MULTI_CHECK_SIG(m) EVENT_LOOP_CHECK_SIGNAL (&(m)->top, multi_process_signal, (m))
static inline void
multi_set_pending (struct multi_context *m, struct multi_instance *mi)
{
m->pending = mi;
}
static inline void
multi_release_io_lock (struct multi_context *m)
{
}
#endif /* P2MP_SERVER */
#endif /* MULTI_H */
|