1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
|
/*
* (C) 2006-2008 by Pablo Neira Ayuso <pablo@netfilter.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/
#include <errno.h>
#include "conntrackd.h"
#include "sync.h"
#include "linux_list.h"
#include "us-conntrack.h"
#include "queue.h"
#include "debug.h"
#include "network.h"
#include "alarm.h"
#include <libnfnetlink/libnfnetlink.h>
#include <libnetfilter_conntrack/libnetfilter_conntrack.h>
#if 0
#define dp printf
#else
#define dp
#endif
static LIST_HEAD(rs_list);
static LIST_HEAD(tx_list);
static unsigned int tx_list_len;
static struct queue *rs_queue;
static struct queue *tx_queue;
struct cache_ftfw {
struct list_head rs_list;
struct list_head tx_list;
u_int32_t seq;
};
static void cache_ftfw_add(struct us_conntrack *u, void *data)
{
struct cache_ftfw *cn = data;
INIT_LIST_HEAD(&cn->rs_list);
INIT_LIST_HEAD(&cn->tx_list);
}
static void cache_ftfw_del(struct us_conntrack *u, void *data)
{
struct cache_ftfw *cn = data;
if (cn->rs_list.next == &cn->rs_list &&
cn->rs_list.prev == &cn->rs_list)
return;
list_del(&cn->rs_list);
}
static struct cache_extra cache_ftfw_extra = {
.size = sizeof(struct cache_ftfw),
.add = cache_ftfw_add,
.destroy = cache_ftfw_del
};
static void tx_queue_add_ctlmsg(u_int32_t flags, u_int32_t from, u_int32_t to)
{
struct nethdr_ack ack = {
.flags = flags,
.from = from,
.to = to,
};
queue_add(tx_queue, &ack, NETHDR_ACK_SIZ);
}
static struct alarm_list alive_alarm;
static void do_alive_alarm(struct alarm_list *a, void *data)
{
tx_queue_add_ctlmsg(NET_F_ALIVE, 0, 0);
init_alarm(&alive_alarm);
set_alarm_expiration(&alive_alarm, 1, 0);
set_alarm_function(&alive_alarm, do_alive_alarm);
add_alarm(&alive_alarm);
}
static int ftfw_init()
{
tx_queue = queue_create(CONFIG(resend_queue_size));
if (tx_queue == NULL) {
dlog(STATE(log), LOG_ERR, "cannot create tx queue");
return -1;
}
rs_queue = queue_create(CONFIG(resend_queue_size));
if (rs_queue == NULL) {
dlog(STATE(log), LOG_ERR, "cannot create rs queue");
return -1;
}
INIT_LIST_HEAD(&tx_list);
INIT_LIST_HEAD(&rs_list);
/* XXX: alive message expiration configurable */
init_alarm(&alive_alarm);
set_alarm_expiration(&alive_alarm, 1, 0);
set_alarm_function(&alive_alarm, do_alive_alarm);
add_alarm(&alive_alarm);
return 0;
}
static void ftfw_kill()
{
queue_destroy(rs_queue);
queue_destroy(tx_queue);
}
static int do_cache_to_tx(void *data1, void *data2)
{
struct us_conntrack *u = data2;
struct cache_ftfw *cn = cache_get_extra(STATE_SYNC(internal), u);
/* add to tx list */
list_add(&cn->tx_list, &tx_list);
tx_list_len++;
return 0;
}
static int ftfw_local(int fd, int type, void *data)
{
int ret = 1;
switch(type) {
case REQUEST_DUMP:
dlog(STATE(log), LOG_NOTICE, "request resync");
tx_queue_add_ctlmsg(NET_F_RESYNC, 0, 0);
break;
case SEND_BULK:
dlog(STATE(log), LOG_NOTICE, "sending bulk update");
cache_iterate(STATE_SYNC(internal), NULL, do_cache_to_tx);
break;
default:
ret = 0;
break;
}
return ret;
}
static int rs_queue_to_tx(void *data1, void *data2)
{
struct nethdr *net = data1;
struct nethdr_ack *nack = data2;
if (between(net->seq, nack->from, nack->to)) {
dp("rs_queue_to_tx sq: %u fl:%u len:%u\n",
net->seq, net->flags, net->len);
queue_add(tx_queue, net, net->len);
}
return 0;
}
static int rs_queue_empty(void *data1, void *data2)
{
struct nethdr *net = data1;
struct nethdr_ack *h = data2;
if (between(net->seq, h->from, h->to)) {
dp("remove from queue (seq=%u)\n", net->seq);
queue_del(rs_queue, data1);
}
return 0;
}
static void rs_list_to_tx(struct cache *c, unsigned int from, unsigned int to)
{
struct list_head *n;
struct us_conntrack *u;
list_for_each(n, &rs_list) {
struct cache_ftfw *cn = (struct cache_ftfw *) n;
struct us_conntrack *u;
u = cache_get_conntrack(STATE_SYNC(internal), cn);
if (between(cn->seq, from, to)) {
dp("resending nack'ed (oldseq=%u)\n", cn->seq);
list_add(&cn->tx_list, &tx_list);
tx_list_len++;
}
}
}
static void rs_list_empty(struct cache *c, unsigned int from, unsigned int to)
{
struct list_head *n, *tmp;
list_for_each_safe(n, tmp, &rs_list) {
struct cache_ftfw *cn = (struct cache_ftfw *) n;
struct us_conntrack *u;
u = cache_get_conntrack(STATE_SYNC(internal), cn);
if (between(cn->seq, from, to)) {
dp("queue: deleting from queue (seq=%u)\n", cn->seq);
list_del(&cn->rs_list);
INIT_LIST_HEAD(&cn->rs_list);
}
}
}
static int ftfw_recv(const struct nethdr *net)
{
static unsigned int window = 0;
unsigned int exp_seq;
if (window == 0)
window = CONFIG(window_size);
if (!mcast_track_seq(net->seq, &exp_seq)) {
dp("OOS: sending nack (seq=%u)\n", exp_seq);
tx_queue_add_ctlmsg(NET_F_NACK, exp_seq, net->seq-1);
window = CONFIG(window_size);
} else {
/* received a window, send an acknowledgement */
if (--window == 0) {
dp("sending ack (seq=%u)\n", net->seq);
tx_queue_add_ctlmsg(NET_F_ACK,
net->seq - CONFIG(window_size),
net->seq);
}
}
if (IS_NACK(net)) {
struct nethdr_ack *nack = (struct nethdr_ack *) net;
dp("NACK: from seq=%u to seq=%u\n", nack->from, nack->to);
rs_list_to_tx(STATE_SYNC(internal), nack->from, nack->to);
queue_iterate(rs_queue, nack, rs_queue_to_tx);
return 1;
} else if (IS_RESYNC(net)) {
dp("RESYNC ALL\n");
cache_iterate(STATE_SYNC(internal), NULL, do_cache_to_tx);
return 1;
} else if (IS_ACK(net)) {
struct nethdr_ack *h = (struct nethdr_ack *) net;
dp("ACK: from seq=%u to seq=%u\n", h->from, h->to);
rs_list_empty(STATE_SYNC(internal), h->from, h->to);
queue_iterate(rs_queue, h, rs_queue_empty);
return 1;
} else if (IS_ALIVE(net))
return 1;
return 0;
}
static void ftfw_send(struct nethdr *net, struct us_conntrack *u)
{
struct netpld *pld = NETHDR_DATA(net);
struct cache_ftfw *cn;
HDR_NETWORK2HOST(net);
switch(ntohs(pld->query)) {
case NFCT_Q_CREATE:
case NFCT_Q_UPDATE:
cn = (struct cache_ftfw *)
cache_get_extra(STATE_SYNC(internal), u);
if (cn->rs_list.next == &cn->rs_list &&
cn->rs_list.prev == &cn->rs_list)
goto insert;
list_del(&cn->rs_list);
INIT_LIST_HEAD(&cn->rs_list);
insert:
cn->seq = net->seq;
list_add(&cn->rs_list, &rs_list);
break;
case NFCT_Q_DESTROY:
queue_add(rs_queue, net, net->len);
break;
}
}
static int tx_queue_xmit(void *data1, void *data2)
{
struct nethdr *net = data1;
int len = prepare_send_netmsg(STATE_SYNC(mcast_client), net);
dp("tx_queue sq: %u fl:%u len:%u\n",
ntohl(net->seq), ntohs(net->flags), ntohs(net->len));
mcast_buffered_send_netmsg(STATE_SYNC(mcast_client), net, len);
HDR_NETWORK2HOST(net);
if (IS_DATA(net) || IS_ACK(net) || IS_NACK(net)) {
dp("-> back_to_tx_queue sq: %u fl:%u len:%u\n",
net->seq, net->flags, net->len);
queue_add(rs_queue, net, net->len);
}
queue_del(tx_queue, net);
return 0;
}
static int tx_list_xmit(struct list_head *i, struct us_conntrack *u)
{
int ret;
struct nethdr *net = BUILD_NETMSG(u->ct, NFCT_Q_UPDATE);
int len = prepare_send_netmsg(STATE_SYNC(mcast_client), net);
dp("tx_list sq: %u fl:%u len:%u\n",
ntohl(net->seq), ntohs(net->flags),
ntohs(net->len));
list_del(i);
INIT_LIST_HEAD(i);
tx_list_len--;
ret = mcast_buffered_send_netmsg(STATE_SYNC(mcast_client), net, len);
if (STATE_SYNC(sync)->send)
STATE_SYNC(sync)->send(net, u);
return ret;
}
static void ftfw_run()
{
struct list_head *i, *tmp;
/* send messages in the tx_queue */
queue_iterate(tx_queue, NULL, tx_queue_xmit);
/* send conntracks in the tx_list */
list_for_each_safe(i, tmp, &tx_list) {
struct cache_ftfw *cn;
struct us_conntrack *u;
cn = container_of(i, struct cache_ftfw, tx_list);
u = cache_get_conntrack(STATE_SYNC(internal), cn);
tx_list_xmit(i, u);
}
mod_alarm(&alive_alarm, 1, 0);
}
struct sync_mode ftfw = {
.internal_cache_flags = LIFETIME,
.external_cache_flags = LIFETIME,
.internal_cache_extra = &cache_ftfw_extra,
.init = ftfw_init,
.kill = ftfw_kill,
.local = ftfw_local,
.recv = ftfw_recv,
.send = ftfw_send,
.run = ftfw_run,
};
|