path: root/include/conntrackd.h

#ifndef _CONNTRACKD_H_
#define _CONNTRACKD_H_

#include "mcast.h"
#include "local.h"
#include "alarm.h"
#include "filter.h"
#include "channel.h"
#include "internal.h"

#include <stdint.h>
#include <stdio.h>
#include <libnetfilter_conntrack/libnetfilter_conntrack.h>
#include <syslog.h>

/* UNIX facilities */
#define CT_FLUSH_MASTER		0	/* flush kernel conntrack table */
#define CT_RESYNC_MASTER	1	/* resync with kernel ct table	*/
#define CT_DUMP_INTERNAL 	16	/* dump internal cache 		*/
#define CT_DUMP_EXTERNAL 	17	/* dump external cache 		*/
#define CT_COMMIT		18	/* commit external cache	*/
#define CT_FLUSH_CACHE		19	/* flush cache			*/
#define KILL			20	/* kill conntrackd		*/
#define STATS			21	/* dump statistics		*/
#define SEND_BULK		22	/* send a bulk			*/
#define REQUEST_DUMP		23	/* request dump 		*/
#define CT_DUMP_INT_XML		24	/* dump internal cache in XML	*/
#define CT_DUMP_EXT_XML		25	/* dump external cache in XML	*/
#define RESET_TIMERS		26	/* reset kernel timers		*/
#define DEBUG_INFO		27	/* unused			*/
#define STATS_NETWORK		28	/* extended network stats	*/
#define STATS_CACHE		29	/* extended cache stats		*/
#define STATS_RUNTIME		30	/* extended runtime stats	*/
#define STATS_LINK		31	/* dedicated link stats		*/
#define STATS_RSQUEUE		32	/* resend queue stats		*/
#define CT_FLUSH_INT_CACHE	33	/* flush internal cache		*/
#define CT_FLUSH_EXT_CACHE	34	/* flush external cache		*/
#define STATS_PROCESS		35	/* child process stats		*/
#define STATS_QUEUE		36	/* queue stats			*/
#define EXP_STATS		37	/* dump statistics		*/
#define EXP_FLUSH_MASTER	38	/* flush kernel expect table    */
#define EXP_RESYNC_MASTER	39	/* resync with kernel exp table	*/
#define EXP_DUMP_INTERNAL	40	/* dump internal expect cache	*/
#define EXP_DUMP_EXTERNAL	41	/* dump external expect cache	*/
#define EXP_COMMIT		42	/* commit expectations		*/
#define ALL_FLUSH_MASTER	43	/* flush all kernel tables	*/
#define ALL_RESYNC_MASTER	44	/* resync w/all kernel tables	*/
#define ALL_FLUSH_CACHE		45	/* flush all caches		*/
#define ALL_COMMIT		46	/* commit all tables		*/
#define EXP_DUMP_INT_XML	47	/* dump internal cache in XML	*/
#define EXP_DUMP_EXT_XML	48	/* dump external cache in XML	*/

#define DEFAULT_CONFIGFILE	"/etc/conntrackd/conntrackd.conf"
#define DEFAULT_LOCKFILE	"/var/lock/conntrackd.lock"
#define DEFAULT_LOGFILE		"/var/log/conntrackd.log"
#define DEFAULT_STATS_LOGFILE	"/var/log/conntrackd-stats.log"
#define DEFAULT_SYSLOG_FACILITY	LOG_DAEMON

/* daemon/request modes */
#define NOT_SET         0
#define DAEMON		1
#define REQUEST		2

/* conntrackd modes */
#define CTD_SYNC_MODE		(1UL << 0)
#define CTD_STATS_MODE		(1UL << 1)
#define CTD_SYNC_FTFW		(1UL << 2)
#define CTD_SYNC_ALARM		(1UL << 3)
#define CTD_SYNC_NOTRACK	(1UL << 4)
#define CTD_POLL		(1UL << 5)
#define CTD_EXPECT		(1UL << 6)
#define CTD_HELPER		(1UL << 7)

/* FILENAME_MAX is 4096 on my system, perhaps too much? */
#ifndef FILENAME_MAXLEN
#define FILENAME_MAXLEN 256
#endif

union inet_address {
	uint32_t ipv4;
	uint32_t ipv6[4];
	uint32_t all[4];
};

#define CONFIG(x) conf.x

struct ct_conf {
	char logfile[FILENAME_MAXLEN];
	int syslog_facility;
	char lockfile[FILENAME_MAXLEN];
	int hashsize;			/* hashtable size */
	int channel_num;
	int channel_default;
	int channel_type_global;
	struct channel_conf channel[MULTICHANNEL_MAX];
	struct local_conf local;	/* unix socket facilities */
	int nice;
	int limit;
	int refresh;
	int cache_timeout;		/* cache entries timeout */
	int commit_timeout;		/* committed entries timeout */
	unsigned int purge_timeout;	/* purge kernel entries timeout */
	unsigned int netlink_buffer_size;
	unsigned int netlink_buffer_size_max_grown;
	int nl_overrun_resync;
	unsigned int flags;
	int family;			/* protocol family */
	unsigned int resend_queue_size; /* FTFW protocol */
	unsigned int window_size;
	int poll_kernel_secs;
	int filter_from_kernelspace;
	int event_iterations_limit;
	struct {
		int error_queue_length;
	} channelc;
	struct {
		int internal_cache_disable;
		int external_cache_disable;
		int tcp_window_tracking;
	} sync;
	struct {
		int subsys_id;
		int groups;
		int events_reliable;
	} netlink;
	struct {
		int commit_steps;
	} general;
	struct {
		int type;
		int prio;
	} sched;
	struct {
		char logfile[FILENAME_MAXLEN];
		int syslog_facility;
		size_t buffer_size;
	} stats;
	struct {
		struct list_head list;
	} cthelper;
};

#define STATE(x) st.x

struct ct_general_state {
	sigset_t 			block;
	FILE 				*log;
	FILE				*stats_log;
	struct local_server		local;
	struct ct_mode 			*mode;
	struct ct_filter		*us_filter;
	struct exp_filter		*exp_filter;

	struct nfct_handle		*event;         /* event handler */
	struct nfct_filter		*filter;	/* event filter */
	int				event_iterations_limit;

	struct nfct_handle		*dump;		/* dump handler */
	struct nfct_handle		*resync;	/* resync handler */
	struct nfct_handle		*get;		/* get handler */
	int				get_retval;	/* hackish */
	struct nfct_handle		*flush;		/* flusher */

	struct alarm_block		resync_alarm;
	struct alarm_block		polling_alarm;

	struct fds			*fds;

	/* statistics */
	struct {
		uint64_t 		bytes_orig;
		uint64_t 		bytes_repl;
		uint64_t 		packets_orig;
		uint64_t 		packets_repl;

		time_t			daemon_start_time;

		uint64_t		nl_events_received;
		uint64_t		nl_events_filtered;
		uint32_t		nl_events_unknown_type;
		uint32_t		nl_catch_event_failed;
		uint32_t		nl_overrun;
		uint32_t		nl_dump_unknown_type;
		uint32_t		nl_kernel_table_flush;
		uint32_t		nl_kernel_table_resync;

		uint32_t		child_process_failed;
		uint32_t		child_process_error_segfault;
		uint32_t		child_process_error_term;

		uint32_t		select_failed;
		uint32_t		wait_failed;

		uint32_t		local_read_failed;
		uint32_t		local_unknown_request;

	} stats;
};

struct commit_runqueue {
	int		(*cb)(struct nfct_handle *h, int step);
};

#define STATE_SYNC(x) state.sync->x

struct ct_sync_state {
	struct external_handler *external;

	struct multichannel	*channel;
	struct nlif_handle	*interface;
	struct queue *tx_queue;

#define COMMIT_STATE_INACTIVE	0
#define COMMIT_STATE_MASTER	1
#define COMMIT_STATE_RELATED	2

	struct {
		int			state;
		int			clientfd;
		struct nfct_handle	*h;
		struct evfd		*evfd;
		int			current;
		struct commit_runqueue  rq[2];
		struct {
			int 		ok;
			int		fail;
			struct timeval	start;
		} stats;
	} commit;

	struct alarm_block		reset_cache_alarm;

	struct sync_mode *sync;		/* sync mode */

	/* statistics */
	struct {
		uint64_t	msg_rcv_malformed;
		uint32_t	msg_rcv_bad_version;
		uint32_t	msg_rcv_bad_payload;
		uint32_t	msg_rcv_bad_header;
		uint32_t	msg_rcv_bad_type;
		uint32_t	msg_rcv_truncated;
		uint32_t	msg_rcv_bad_size;
		uint32_t	msg_snd_malformed;
		uint64_t	msg_rcv_lost;
		uint64_t	msg_rcv_before;
	} error;

	uint32_t last_seq_sent;	/* last sequence number sent */
	uint32_t last_seq_recv;	/* last sequence number recv */
};

#define STATE_STATS(x) state.stats->x

struct ct_stats_state {
	struct cache *cache;            /* internal events cache (netlink) */
};

#define STATE_CTH(x) state.cthelper->x

struct ct_helper_state {
	struct mnl_socket *nl;
	uint32_t portid;
};

struct ct_state {
	struct ct_sync_state *sync;
	struct ct_stats_state *stats;
	struct ct_helper_state *cthelper;
};

extern struct ct_conf conf;
extern struct ct_state state;
extern struct ct_general_state st;

struct ct_mode {
	struct internal_handler *internal;
	int (*init)(void);
	int (*local)(int fd, int type, void *data);
	void (*kill)(void);
};

/* basic ctnl functions */
void ctnl_kill(void);
int ctnl_local(int fd, int type, void *data);
int ctnl_init(void);

/* basic cthelper functions */
void cthelper_kill(void);
int cthelper_local(int fd, int type, void *data);
int cthelper_init(void);

/* conntrackd ctnl modes */
extern struct ct_mode sync_mode;
extern struct ct_mode stats_mode;

#define MAX(x, y) x > y ? x : y

/* These live in run.c */
void killer(int foo);
int init(void);
void select_main_loop(void);

/* from read_config_yy.c */
int
init_config(char *filename);

#endif