/* * ZeroTier One - Network Virtualization Everywhere * Copyright (C) 2011-2015 ZeroTier, Inc. * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . * * -- * * ZeroTier may be used and distributed under the terms of the GPLv3, which * are available at: http://www.gnu.org/licenses/gpl-3.0.html * * If you would like to embed ZeroTier into a commercial application or * redistribute it in a modified binary form, please contact ZeroTier Networks * LLC. Start here: http://www.zerotier.com/ */ #ifndef ZT_CONSTANTS_HPP #define ZT_CONSTANTS_HPP #include "../include/ZeroTierOne.h" // // This include file also auto-detects and canonicalizes some environment // information defines: // // __LINUX__ // __APPLE__ // __BSD__ (OSX also defines this) // __UNIX_LIKE__ (Linux, BSD, etc.) // __WINDOWS__ // // Also makes sure __BYTE_ORDER is defined reasonably. // // Hack: make sure __GCC__ is defined on old GCC compilers #ifndef __GCC__ #if defined(__GCC_HAVE_SYNC_COMPARE_AND_SWAP_1) || defined(__GCC_HAVE_SYNC_COMPARE_AND_SWAP_2) || defined(__GCC_HAVE_SYNC_COMPARE_AND_SWAP_4) #define __GCC__ #endif #endif #if defined(__linux__) || defined(linux) || defined(__LINUX__) || defined(__linux) #ifndef __LINUX__ #define __LINUX__ #endif #ifndef __UNIX_LIKE__ #define __UNIX_LIKE__ #endif #include #endif #ifdef __FreeBSD__ #ifndef __UNIX_LIKE__ #define __UNIX_LIKE__ #endif #ifndef __BSD__ #define __BSD__ #endif #include #ifndef __BYTE_ORDER #define __BYTE_ORDER _BYTE_ORDER #define __LITTLE_ENDIAN _LITTLE_ENDIAN #define __BIG_ENDIAN _BIG_ENDIAN #endif #endif // TODO: Android is what? Linux technically, but does it define it? #ifdef __APPLE__ #include #ifndef __UNIX_LIKE__ #define __UNIX_LIKE__ #endif #ifndef __BSD__ #define __BSD__ #endif #endif #if defined(_WIN32) || defined(_WIN64) #ifndef __WINDOWS__ #define __WINDOWS__ #endif #define NOMINMAX #pragma warning(disable : 4290) #pragma warning(disable : 4996) #pragma warning(disable : 4101) #undef __UNIX_LIKE__ #undef __BSD__ #define ZT_PATH_SEPARATOR '\\' #define ZT_PATH_SEPARATOR_S "\\" #define ZT_EOL_S "\r\n" #include #include #endif // Assume these are little-endian. PPC is not supported for OSX, and ARM // runs in little-endian mode for these OS families. #if defined(__APPLE__) || defined(__WINDOWS__) #undef __BYTE_ORDER #undef __LITTLE_ENDIAN #undef __BIG_ENDIAN #define __BIG_ENDIAN 4321 #define __LITTLE_ENDIAN 1234 #define __BYTE_ORDER 1234 #endif #ifdef __UNIX_LIKE__ #define ZT_PATH_SEPARATOR '/' #define ZT_PATH_SEPARATOR_S "/" #define ZT_EOL_S "\n" #endif #ifndef __BYTE_ORDER #include #endif /** * Length of a ZeroTier address in bytes */ #define ZT_ADDRESS_LENGTH 5 /** * Length of a hexadecimal ZeroTier address */ #define ZT_ADDRESS_LENGTH_HEX 10 /** * Addresses beginning with this byte are reserved for the joy of in-band signaling */ #define ZT_ADDRESS_RESERVED_PREFIX 0xff /** * Default local port for ZeroTier UDP traffic */ #define ZT_DEFAULT_UDP_PORT 9993 /** * Default payload MTU for UDP packets * * In the future we might support UDP path MTU discovery, but for now we * set a maximum that is equal to 1500 minus 8 (for PPPoE overhead, common * in some markets) minus 48 (IPv6 UDP overhead). */ #define ZT_UDP_DEFAULT_PAYLOAD_MTU 1444 /** * Default MTU used for Ethernet tap device */ #define ZT_IF_MTU ZT1_MAX_MTU /** * Default interface metric for ZeroTier taps -- should be higher than physical ports */ #define ZT_DEFAULT_IF_METRIC 32768 /** * Maximum number of packet fragments we'll support * * The actual spec allows 16, but this is the most we'll support right * now. Packets with more than this many fragments are dropped. */ #define ZT_MAX_PACKET_FRAGMENTS 4 /** * Timeout for receipt of fragmented packets in ms * * Since there's no retransmits, this is just a really bad case scenario for * transit time. It's short enough that a DOS attack from exhausing buffers is * very unlikely, as the transfer rate would have to be fast enough to fill * system memory in this time. */ #define ZT_FRAGMENTED_PACKET_RECEIVE_TIMEOUT 1000 /** * Length of secret key in bytes -- 256-bit for Salsa20 */ #define ZT_PEER_SECRET_KEY_LENGTH 32 /** * How often Topology::clean() and Network::clean() and similar are called, in ms */ #define ZT_DB_CLEAN_PERIOD 120000 /** * How long to remember peer records in RAM if they haven't been used */ #define ZT_PEER_IN_MEMORY_EXPIRATION 600000 /** * Delay between WHOIS retries in ms */ #define ZT_WHOIS_RETRY_DELAY 500 /** * Maximum identity WHOIS retries (each attempt tries consulting a different peer) */ #define ZT_MAX_WHOIS_RETRIES 3 /** * Transmit queue entry timeout */ #define ZT_TRANSMIT_QUEUE_TIMEOUT (ZT_WHOIS_RETRY_DELAY * (ZT_MAX_WHOIS_RETRIES + 1)) /** * Receive queue entry timeout */ #define ZT_RECEIVE_QUEUE_TIMEOUT (ZT_WHOIS_RETRY_DELAY * (ZT_MAX_WHOIS_RETRIES + 1)) /** * Maximum number of ZT hops allowed (this is not IP hops/TTL) * * The protocol allows up to 7, but we limit it to something smaller. */ #define ZT_RELAY_MAX_HOPS 3 /** * Expire time for multicast 'likes' and indirect multicast memberships in ms */ #define ZT_MULTICAST_LIKE_EXPIRE 600000 /** * Time between polls of local tap devices for multicast membership changes */ #define ZT_MULTICAST_LOCAL_POLL_PERIOD 10000 /** * Delay between explicit MULTICAST_GATHER requests for a given multicast channel */ #define ZT_MULTICAST_EXPLICIT_GATHER_DELAY (ZT_MULTICAST_LIKE_EXPIRE / 10) /** * Timeout for outgoing multicasts * * This is how long we wait for explicit or implicit gather results. */ #define ZT_MULTICAST_TRANSMIT_TIMEOUT 5000 /** * Default maximum number of peers to address with a single multicast (if unspecified in network config) */ #define ZT_MULTICAST_DEFAULT_LIMIT 32 /** * Delay between scans of the topology active peer DB for peers that need ping */ #define ZT_PING_CHECK_DELAY 10000 /** * Delay between ordinary case pings of direct links */ #define ZT_PEER_DIRECT_PING_DELAY 120000 /** * Delay between requests for updated network autoconf information */ #define ZT_NETWORK_AUTOCONF_DELAY 60000 /** * Delay in core loop between checks of network autoconf newness */ #define ZT_NETWORK_AUTOCONF_CHECK_DELAY 10000 /** * Time since a ping was sent to be considered unanswered */ #define ZT_PING_UNANSWERED_AFTER 1500 /** * Try to ping supernodes this often until we get something from them */ #define ZT_STARTUP_AGGRO (ZT_PING_UNANSWERED_AFTER * 2) /** * How long since last message from an authoritative upstream peer before we increment our desperation level? */ #define ZT_DESPERATION_INCREMENT (ZT_STARTUP_AGGRO * 2) /** * Interval between "spams" if desperation > 0 */ #define ZT_DESPERATION_SPAM_INTERVAL 60000 /** * Maximum delay between runs of the main loop in Node.cpp */ #define ZT_MAX_SERVICE_LOOP_INTERVAL ZT_STARTUP_AGGRO /** * Timeout for overall peer activity (measured from last receive) */ #define ZT_PEER_ACTIVITY_TIMEOUT ((ZT_PEER_DIRECT_PING_DELAY * 2) + ZT_PING_CHECK_DELAY) /** * Path activity timeout (for non-fixed paths) */ #define ZT_PEER_PATH_ACTIVITY_TIMEOUT ZT_PEER_ACTIVITY_TIMEOUT /** * Stop relaying via peers that have not responded to direct sends * * When we send something (including frames), we generally expect a response. * Switching relays if no response in a short period of time causes more * rapid failover if a supernode goes down or becomes unreachable. In the * mistaken case, little harm is done as it'll pick the next-fastest * supernode and will switch back eventually. */ #define ZT_PEER_RELAY_CONVERSATION_LATENCY_THRESHOLD 10000 /** * Delay sleep overshoot for detection of a probable sleep/wake event */ #define ZT_SLEEP_WAKE_DETECTION_THRESHOLD 5000 /** * Time to pause main service loop after sleep/wake detect */ #define ZT_SLEEP_WAKE_SETTLE_TIME 5000 /** * Minimum interval between attempts by relays to unite peers * * When a relay gets a packet destined for another peer, it sends both peers * a RENDEZVOUS message no more than this often. This instructs the peers * to attempt NAT-t and gives each the other's corresponding IP:port pair. */ #define ZT_MIN_UNITE_INTERVAL 60000 /** * Delay between initial direct NAT-t packet and more aggressive techniques */ #define ZT_NAT_T_TACTICAL_ESCALATION_DELAY 2000 /** * Size of anti-recursion history (see AntiRecursion.hpp) */ #define ZT_ANTIRECURSION_HISTORY_SIZE 16 /** * How often to broadcast beacons over physical local LANs */ #define ZT_BEACON_INTERVAL 30000 /** * Do not respond to any beacon more often than this */ #define ZT_MIN_BEACON_RESPONSE_INTERVAL (ZT_BEACON_INTERVAL / 32) /** * Sanity limit on maximum bridge routes * * If the number of bridge routes exceeds this, we cull routes from the * bridges with the most MACs behind them until it doesn't. This is a * sanity limit to prevent memory-filling DOS attacks, nothing more. No * physical LAN has anywhere even close to this many nodes. Note that this * does not limit the size of ZT virtual LANs, only bridge routing. */ #define ZT_MAX_BRIDGE_ROUTES 67108864 /** * If there is no known route, spam to up to this many active bridges */ #define ZT_MAX_BRIDGE_SPAM 16 /** * Timeout for IPC connections (e.g. unix domain sockets) in seconds */ #define ZT_IPC_TIMEOUT 600 /** * A test pseudo-network-ID that can be joined * * Joining this network ID will result in a network with no IP addressing * and default parameters. No network configuration master will be consulted * and instead a static config will be used. This is used in built-in testnet * scenarios and can also be used for external testing. * * This is an impossible real network ID since 0xff is a reserved address * prefix. */ #define ZT_TEST_NETWORK_ID 0xffffffffffffffffULL #endif