mirror of https://github.com/oxen-io/lokinet
Merge branch 'master' of ssh://github.com/majestrate/loki-network
Jeff
5 years ago
commit
6df9f9bfb1
@ -1,2 +1,3 @@
|
||||
#pragma once
|
||||
#include <stdint.h>
|
||||
typedef int32_t crypto_int32;
|
||||
typedef int32_t crypto_int32;
|
||||
|
||||
@ -1,2 +1,3 @@
|
||||
#pragma once
|
||||
#include <stdint.h>
|
||||
typedef uint32_t crypto_uint32;
|
||||
typedef uint32_t crypto_uint32;
|
||||
|
||||
@ -0,0 +1,6 @@
|
||||
FROM compose-base:latest
|
||||
|
||||
COPY ./docker/compose/client.ini /root/.lokinet/lokinet.ini
|
||||
|
||||
CMD ["/lokinet"]
|
||||
EXPOSE 1090/udp 1190/tcp
|
||||
@ -0,0 +1,52 @@
|
||||
[router]
|
||||
# number of crypto worker threads
|
||||
threads=4
|
||||
# path to store signed RC
|
||||
contact-file=/root/.lokinet/self.signed
|
||||
# path to store transport private key
|
||||
transport-privkey=/root/.lokinet/transport.private
|
||||
# path to store identity signing key
|
||||
ident-privkey=/root/.lokinet/identity.private
|
||||
# encryption key for onion routing
|
||||
encryption-privkey=/root/.lokinet/encryption.private
|
||||
block-bogons=false
|
||||
|
||||
[logging]
|
||||
level=info
|
||||
|
||||
[metrics]
|
||||
json-metrics-path=/root/.lokinet/metrics.json
|
||||
|
||||
# admin api (disabled by default)
|
||||
[api]
|
||||
enabled=true
|
||||
bind=127.0.0.1:1190
|
||||
|
||||
# system settings for privileges and such
|
||||
[system]
|
||||
user=lokinet
|
||||
group=lokinet
|
||||
pidfile=/root/.lokinet/lokinet.pid
|
||||
|
||||
# dns provider configuration section
|
||||
[dns]
|
||||
# resolver
|
||||
upstream=1.1.1.1
|
||||
bind=127.0.0.1:53
|
||||
|
||||
# network database settings block
|
||||
[netdb]
|
||||
# directory for network database skiplist storage
|
||||
dir=/netdb
|
||||
|
||||
# lokid settings (disabled by default)
|
||||
[lokid]
|
||||
enabled=false
|
||||
jsonrpc=127.0.0.1:22023
|
||||
|
||||
# network settings
|
||||
[network]
|
||||
profiles=/root/.lokinet/profiles.dat
|
||||
enabled=true
|
||||
exit=false
|
||||
ifname=loki-docker0
|
||||
@ -1,3 +1,6 @@
|
||||
#include <constants/version.hpp>
|
||||
|
||||
const char Version::LLARP_NET_ID[] = "testnet";
|
||||
#ifndef LLARP_DEFAULT_NETID
|
||||
#define LLARP_DEFAULT_NETID "testnet"
|
||||
#endif
|
||||
const char Version::LLARP_NET_ID[] = LLARP_DEFAULT_NETID;
|
||||
|
||||
@ -0,0 +1,213 @@
|
||||
#include <iwp/message_buffer.hpp>
|
||||
#include <iwp/session.hpp>
|
||||
#include <crypto/crypto.hpp>
|
||||
|
||||
namespace llarp
|
||||
{
|
||||
namespace iwp
|
||||
{
|
||||
OutboundMessage::OutboundMessage(uint64_t msgid, const llarp_buffer_t &pkt,
|
||||
llarp_time_t now,
|
||||
ILinkSession::CompletionHandler handler)
|
||||
: m_Size{(uint16_t)std::min(pkt.sz, MAX_LINK_MSG_SIZE)}
|
||||
, m_MsgID{msgid}
|
||||
, m_Completed{handler}
|
||||
, m_StartedAt{now}
|
||||
{
|
||||
m_Data.Zero();
|
||||
std::copy_n(pkt.base, m_Size, m_Data.begin());
|
||||
const llarp_buffer_t buf(m_Data.data(), m_Size);
|
||||
CryptoManager::instance()->shorthash(digest, buf);
|
||||
}
|
||||
|
||||
std::vector< byte_t >
|
||||
OutboundMessage::XMIT() const
|
||||
{
|
||||
std::vector< byte_t > xmit{
|
||||
LLARP_PROTO_VERSION, Command::eXMIT, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0};
|
||||
htobe16buf(xmit.data() + 2, m_Size);
|
||||
htobe64buf(xmit.data() + 4, m_MsgID);
|
||||
std::copy(digest.begin(), digest.end(), std::back_inserter(xmit));
|
||||
return xmit;
|
||||
}
|
||||
|
||||
void
|
||||
OutboundMessage::Completed()
|
||||
{
|
||||
if(m_Completed)
|
||||
{
|
||||
m_Completed(ILinkSession::DeliveryStatus::eDeliverySuccess);
|
||||
}
|
||||
m_Completed = nullptr;
|
||||
}
|
||||
|
||||
bool
|
||||
OutboundMessage::ShouldFlush(llarp_time_t now) const
|
||||
{
|
||||
return now - m_LastFlush >= Session::TXFlushInterval;
|
||||
}
|
||||
|
||||
void
|
||||
OutboundMessage::Ack(byte_t bitmask)
|
||||
{
|
||||
m_Acks = std::bitset< 8 >(bitmask);
|
||||
}
|
||||
|
||||
void
|
||||
OutboundMessage::FlushUnAcked(
|
||||
std::function< void(const llarp_buffer_t &) > sendpkt, llarp_time_t now)
|
||||
{
|
||||
uint16_t idx = 0;
|
||||
while(idx < m_Size)
|
||||
{
|
||||
if(not m_Acks[idx / FragmentSize])
|
||||
{
|
||||
std::vector< byte_t > frag{LLARP_PROTO_VERSION,
|
||||
Command::eDATA,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0};
|
||||
htobe16buf(frag.data() + 2, idx);
|
||||
htobe64buf(frag.data() + 4, m_MsgID);
|
||||
if(idx + FragmentSize < m_Size)
|
||||
std::copy(m_Data.begin() + idx, m_Data.begin() + idx + FragmentSize,
|
||||
std::back_inserter(frag));
|
||||
else
|
||||
std::copy(m_Data.begin() + idx, m_Data.begin() + m_Size,
|
||||
std::back_inserter(frag));
|
||||
const llarp_buffer_t pkt(frag);
|
||||
sendpkt(pkt);
|
||||
}
|
||||
idx += FragmentSize;
|
||||
}
|
||||
m_LastFlush = now;
|
||||
}
|
||||
|
||||
bool
|
||||
OutboundMessage::IsTransmitted() const
|
||||
{
|
||||
for(uint16_t idx = 0; idx < m_Size; idx += FragmentSize)
|
||||
{
|
||||
if(!m_Acks.test(idx / FragmentSize))
|
||||
return false;
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
bool
|
||||
OutboundMessage::IsTimedOut(const llarp_time_t now) const
|
||||
{
|
||||
// TODO: make configurable by outbound message deliverer
|
||||
return now > m_StartedAt && now - m_StartedAt > Session::DeliveryTimeout;
|
||||
}
|
||||
|
||||
void
|
||||
OutboundMessage::InformTimeout()
|
||||
{
|
||||
if(m_Completed)
|
||||
{
|
||||
m_Completed(ILinkSession::DeliveryStatus::eDeliveryDropped);
|
||||
}
|
||||
m_Completed = nullptr;
|
||||
}
|
||||
|
||||
InboundMessage::InboundMessage(uint64_t msgid, uint16_t sz, ShortHash h,
|
||||
llarp_time_t now)
|
||||
: m_Digset{std::move(h)}
|
||||
, m_Size{sz}
|
||||
, m_MsgID{msgid}
|
||||
, m_LastActiveAt{now}
|
||||
{
|
||||
}
|
||||
|
||||
void
|
||||
InboundMessage::HandleData(uint16_t idx, const llarp_buffer_t &buf,
|
||||
llarp_time_t now)
|
||||
{
|
||||
if(idx + buf.sz > m_Data.size())
|
||||
return;
|
||||
auto *dst = m_Data.data() + idx;
|
||||
std::copy_n(buf.base, buf.sz, dst);
|
||||
m_Acks.set(idx / FragmentSize);
|
||||
LogDebug("got fragment ", idx / FragmentSize, " of ", m_Size);
|
||||
m_LastActiveAt = now;
|
||||
}
|
||||
|
||||
std::vector< byte_t >
|
||||
InboundMessage::ACKS() const
|
||||
{
|
||||
std::vector< byte_t > acks{LLARP_PROTO_VERSION,
|
||||
Command::eACKS,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
uint8_t{(uint8_t)m_Acks.to_ulong()}};
|
||||
|
||||
htobe64buf(acks.data() + 2, m_MsgID);
|
||||
return acks;
|
||||
}
|
||||
|
||||
bool
|
||||
InboundMessage::IsCompleted() const
|
||||
{
|
||||
for(uint16_t idx = 0; idx < m_Size; idx += FragmentSize)
|
||||
{
|
||||
if(!m_Acks.test(idx / FragmentSize))
|
||||
return false;
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
bool
|
||||
InboundMessage::ShouldSendACKS(llarp_time_t now) const
|
||||
{
|
||||
return now - m_LastACKSent > 1000 || IsCompleted();
|
||||
}
|
||||
|
||||
bool
|
||||
InboundMessage::IsTimedOut(const llarp_time_t now) const
|
||||
{
|
||||
return now > m_LastActiveAt
|
||||
&& now - m_LastActiveAt > Session::DeliveryTimeout;
|
||||
}
|
||||
|
||||
void
|
||||
InboundMessage::SendACKS(
|
||||
std::function< void(const llarp_buffer_t &) > sendpkt, llarp_time_t now)
|
||||
{
|
||||
auto acks = ACKS();
|
||||
AddRandomPadding(acks);
|
||||
const llarp_buffer_t pkt(acks);
|
||||
sendpkt(pkt);
|
||||
m_LastACKSent = now;
|
||||
}
|
||||
|
||||
bool
|
||||
InboundMessage::Verify() const
|
||||
{
|
||||
ShortHash gotten;
|
||||
const llarp_buffer_t buf(m_Data.data(), m_Size);
|
||||
CryptoManager::instance()->shorthash(gotten, buf);
|
||||
LogDebug("gotten=", gotten.ToHex());
|
||||
if(gotten != m_Digset)
|
||||
{
|
||||
DumpBuffer(buf);
|
||||
return false;
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
} // namespace iwp
|
||||
} // namespace llarp
|
||||
@ -0,0 +1,114 @@
|
||||
#ifndef LLARP_IWP_MESSAGE_BUFFER_HPP
|
||||
#define LLARP_IWP_MESSAGE_BUFFER_HPP
|
||||
#include <vector>
|
||||
#include <constants/link_layer.hpp>
|
||||
#include <link/session.hpp>
|
||||
#include <util/aligned.hpp>
|
||||
#include <util/buffer.hpp>
|
||||
#include <util/types.hpp>
|
||||
|
||||
namespace llarp
|
||||
{
|
||||
namespace iwp
|
||||
{
|
||||
enum Command
|
||||
{
|
||||
/// keep alive message
|
||||
ePING = 0,
|
||||
/// begin transission
|
||||
eXMIT = 1,
|
||||
/// fragment data
|
||||
eDATA = 2,
|
||||
/// acknolege fragments
|
||||
eACKS = 3,
|
||||
/// negative ack
|
||||
eNACK = 4,
|
||||
/// close session
|
||||
eCLOS = 5
|
||||
};
|
||||
|
||||
static constexpr size_t FragmentSize = 1024;
|
||||
|
||||
struct OutboundMessage
|
||||
{
|
||||
OutboundMessage() = default;
|
||||
OutboundMessage(uint64_t msgid, const llarp_buffer_t &pkt,
|
||||
llarp_time_t now,
|
||||
ILinkSession::CompletionHandler handler);
|
||||
|
||||
AlignedBuffer< MAX_LINK_MSG_SIZE > m_Data;
|
||||
uint16_t m_Size = 0;
|
||||
uint64_t m_MsgID = 0;
|
||||
std::bitset< MAX_LINK_MSG_SIZE / FragmentSize > m_Acks;
|
||||
ILinkSession::CompletionHandler m_Completed;
|
||||
llarp_time_t m_LastFlush = 0;
|
||||
ShortHash digest;
|
||||
llarp_time_t m_StartedAt = 0;
|
||||
|
||||
std::vector< byte_t >
|
||||
XMIT() const;
|
||||
|
||||
void
|
||||
Ack(byte_t bitmask);
|
||||
|
||||
void
|
||||
FlushUnAcked(std::function< void(const llarp_buffer_t &) > sendpkt,
|
||||
llarp_time_t now);
|
||||
|
||||
bool
|
||||
ShouldFlush(llarp_time_t now) const;
|
||||
|
||||
void
|
||||
Completed();
|
||||
|
||||
bool
|
||||
IsTransmitted() const;
|
||||
|
||||
bool
|
||||
IsTimedOut(llarp_time_t now) const;
|
||||
|
||||
void
|
||||
InformTimeout();
|
||||
};
|
||||
|
||||
struct InboundMessage
|
||||
{
|
||||
InboundMessage() = default;
|
||||
InboundMessage(uint64_t msgid, uint16_t sz, ShortHash h,
|
||||
llarp_time_t now);
|
||||
|
||||
AlignedBuffer< MAX_LINK_MSG_SIZE > m_Data;
|
||||
ShortHash m_Digset;
|
||||
uint16_t m_Size = 0;
|
||||
uint64_t m_MsgID = 0;
|
||||
llarp_time_t m_LastACKSent = 0;
|
||||
llarp_time_t m_LastActiveAt = 0;
|
||||
std::bitset< MAX_LINK_MSG_SIZE / FragmentSize > m_Acks;
|
||||
|
||||
void
|
||||
HandleData(uint16_t idx, const llarp_buffer_t &buf, llarp_time_t now);
|
||||
|
||||
bool
|
||||
IsCompleted() const;
|
||||
|
||||
bool
|
||||
IsTimedOut(llarp_time_t now) const;
|
||||
|
||||
bool
|
||||
Verify() const;
|
||||
|
||||
bool
|
||||
ShouldSendACKS(llarp_time_t now) const;
|
||||
|
||||
void
|
||||
SendACKS(std::function< void(const llarp_buffer_t &) > sendpkt,
|
||||
llarp_time_t now);
|
||||
|
||||
std::vector< byte_t >
|
||||
ACKS() const;
|
||||
};
|
||||
|
||||
} // namespace iwp
|
||||
} // namespace llarp
|
||||
|
||||
#endif
|
||||
@ -1,155 +0,0 @@
|
||||
#include <iwp/outermessage.hpp>
|
||||
#include <memory>
|
||||
|
||||
namespace llarp
|
||||
{
|
||||
namespace iwp
|
||||
{
|
||||
std::array< byte_t, 6 > OuterMessage::obtain_flow_id_magic =
|
||||
std::array< byte_t, 6 >{{'n', 'e', 't', 'i', 'd', '?'}};
|
||||
|
||||
std::array< byte_t, 6 > OuterMessage::give_flow_id_magic =
|
||||
std::array< byte_t, 6 >{{'n', 'e', 't', 'i', 'd', '!'}};
|
||||
|
||||
OuterMessage::OuterMessage()
|
||||
{
|
||||
Clear();
|
||||
}
|
||||
|
||||
OuterMessage::~OuterMessage() = default;
|
||||
|
||||
void
|
||||
OuterMessage::Clear()
|
||||
{
|
||||
command = 0;
|
||||
flow.Zero();
|
||||
netid.Zero();
|
||||
reject.fill(0);
|
||||
N.Zero();
|
||||
X.Zero();
|
||||
Xsize = 0;
|
||||
Zsig.Zero();
|
||||
Zhash.Zero();
|
||||
pubkey.Zero();
|
||||
magic.fill(0);
|
||||
uinteger = 0;
|
||||
A.reset();
|
||||
}
|
||||
|
||||
void
|
||||
OuterMessage::CreateReject(const char* msg, llarp_time_t now,
|
||||
const PubKey& pk)
|
||||
{
|
||||
Clear();
|
||||
std::copy_n(msg, std::min(strlen(msg), reject.size()), reject.begin());
|
||||
uinteger = now;
|
||||
pubkey = pk;
|
||||
}
|
||||
|
||||
bool
|
||||
OuterMessage::Encode(llarp_buffer_t* buf) const
|
||||
{
|
||||
if(buf->size_left() < 2)
|
||||
return false;
|
||||
*buf->cur = command;
|
||||
buf->cur++;
|
||||
*buf->cur = '=';
|
||||
buf->cur++;
|
||||
switch(command)
|
||||
{
|
||||
case eOCMD_ObtainFlowID:
|
||||
|
||||
case eOCMD_GiveFlowID:
|
||||
if(!buf->write(reject.begin(), reject.end()))
|
||||
return false;
|
||||
if(!buf->write(give_flow_id_magic.begin(), give_flow_id_magic.end()))
|
||||
return false;
|
||||
if(!buf->write(flow.begin(), flow.end()))
|
||||
return false;
|
||||
if(!buf->write(pubkey.begin(), pubkey.end()))
|
||||
return false;
|
||||
return buf->write(Zsig.begin(), Zsig.end());
|
||||
default:
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
bool
|
||||
OuterMessage::Decode(llarp_buffer_t* buf)
|
||||
{
|
||||
static constexpr size_t header_size = 2;
|
||||
|
||||
if(buf->size_left() < header_size)
|
||||
return false;
|
||||
command = *buf->cur;
|
||||
++buf->cur;
|
||||
if(*buf->cur != '=')
|
||||
return false;
|
||||
++buf->cur;
|
||||
switch(command)
|
||||
{
|
||||
case eOCMD_ObtainFlowID:
|
||||
if(!buf->read_into(magic.begin(), magic.end()))
|
||||
return false;
|
||||
if(!buf->read_into(netid.begin(), netid.end()))
|
||||
return false;
|
||||
if(!buf->read_uint64(uinteger))
|
||||
return false;
|
||||
if(!buf->read_into(pubkey.begin(), pubkey.end()))
|
||||
return false;
|
||||
if(buf->size_left() <= Zsig.size())
|
||||
return false;
|
||||
Xsize = buf->size_left() - Zsig.size();
|
||||
if(!buf->read_into(X.begin(), X.begin() + Xsize))
|
||||
return false;
|
||||
return buf->read_into(Zsig.begin(), Zsig.end());
|
||||
case eOCMD_GiveFlowID:
|
||||
if(!buf->read_into(magic.begin(), magic.end()))
|
||||
return false;
|
||||
if(!buf->read_into(flow.begin(), flow.end()))
|
||||
return false;
|
||||
if(!buf->read_into(pubkey.begin(), pubkey.end()))
|
||||
return false;
|
||||
buf->cur += buf->size_left() - Zsig.size();
|
||||
return buf->read_into(Zsig.begin(), Zsig.end());
|
||||
case eOCMD_Reject:
|
||||
if(!buf->read_into(reject.begin(), reject.end()))
|
||||
return false;
|
||||
if(!buf->read_uint64(uinteger))
|
||||
return false;
|
||||
if(!buf->read_into(pubkey.begin(), pubkey.end()))
|
||||
return false;
|
||||
buf->cur += buf->size_left() - Zsig.size();
|
||||
return buf->read_into(Zsig.begin(), Zsig.end());
|
||||
case eOCMD_SessionNegotiate:
|
||||
if(!buf->read_into(flow.begin(), flow.end()))
|
||||
return false;
|
||||
if(!buf->read_into(pubkey.begin(), pubkey.end()))
|
||||
return false;
|
||||
if(!buf->read_uint64(uinteger))
|
||||
return false;
|
||||
if(buf->size_left() == Zsig.size() + 32)
|
||||
{
|
||||
A = std::make_unique< AlignedBuffer< 32 > >();
|
||||
if(!buf->read_into(A->begin(), A->end()))
|
||||
return false;
|
||||
}
|
||||
return buf->read_into(Zsig.begin(), Zsig.end());
|
||||
case eOCMD_TransmitData:
|
||||
if(!buf->read_into(flow.begin(), flow.end()))
|
||||
return false;
|
||||
if(!buf->read_into(N.begin(), N.end()))
|
||||
return false;
|
||||
if(buf->size_left() <= Zhash.size())
|
||||
return false;
|
||||
Xsize = buf->size_left() - Zhash.size();
|
||||
if(!buf->read_into(X.begin(), X.begin() + Xsize))
|
||||
return false;
|
||||
return buf->read_into(Zhash.begin(), Zhash.end());
|
||||
default:
|
||||
return false;
|
||||
}
|
||||
}
|
||||
} // namespace iwp
|
||||
|
||||
} // namespace llarp
|
||||
@ -1,86 +0,0 @@
|
||||
#ifndef LLARP_IWP_OUTERMESSAGE_HPP
|
||||
#define LLARP_IWP_OUTERMESSAGE_HPP
|
||||
|
||||
#include <crypto/types.hpp>
|
||||
#include <router_contact.hpp>
|
||||
#include <util/aligned.hpp>
|
||||
|
||||
#include <array>
|
||||
|
||||
namespace llarp
|
||||
{
|
||||
namespace iwp
|
||||
{
|
||||
using FlowID_t = AlignedBuffer< 32 >;
|
||||
|
||||
using OuterCommand_t = byte_t;
|
||||
|
||||
constexpr OuterCommand_t eOCMD_ObtainFlowID = 'O';
|
||||
constexpr OuterCommand_t eOCMD_GiveFlowID = 'G';
|
||||
constexpr OuterCommand_t eOCMD_Reject = 'R';
|
||||
constexpr OuterCommand_t eOCMD_SessionNegotiate = 'S';
|
||||
constexpr OuterCommand_t eOCMD_TransmitData = 'D';
|
||||
|
||||
using InnerCommand_t = byte_t;
|
||||
|
||||
constexpr InnerCommand_t eICMD_KeepAlive = 'k';
|
||||
constexpr InnerCommand_t eICMD_KeepAliveAck = 'l';
|
||||
constexpr InnerCommand_t eICMD_Congestion = 'c';
|
||||
constexpr InnerCommand_t eICMD_AntiCongestion = 'd';
|
||||
constexpr InnerCommand_t eICMD_Transmit = 't';
|
||||
constexpr InnerCommand_t eICMD_Ack = 'a';
|
||||
constexpr InnerCommand_t eICMD_RotateKeys = 'r';
|
||||
constexpr InnerCommand_t eICMD_UpgradeProtocol = 'u';
|
||||
constexpr InnerCommand_t eICMD_VersionUpgrade = 'v';
|
||||
|
||||
struct OuterMessage
|
||||
{
|
||||
// required members
|
||||
byte_t command;
|
||||
FlowID_t flow;
|
||||
|
||||
OuterMessage();
|
||||
~OuterMessage();
|
||||
|
||||
// static members
|
||||
static std::array< byte_t, 6 > obtain_flow_id_magic;
|
||||
static std::array< byte_t, 6 > give_flow_id_magic;
|
||||
|
||||
void
|
||||
CreateReject(const char *msg, llarp_time_t now, const PubKey &pk);
|
||||
|
||||
// optional members follow
|
||||
std::array< byte_t, 6 > magic;
|
||||
NetID netid;
|
||||
// either timestamp or counter
|
||||
uint64_t uinteger;
|
||||
std::array< byte_t, 14 > reject;
|
||||
AlignedBuffer< 24 > N;
|
||||
PubKey pubkey;
|
||||
|
||||
std::unique_ptr< AlignedBuffer< 32 > > A;
|
||||
|
||||
static constexpr size_t ipv6_mtu = 1280;
|
||||
static constexpr size_t overhead_size = 16 + 24 + 32;
|
||||
static constexpr size_t payload_size = ipv6_mtu - overhead_size;
|
||||
|
||||
AlignedBuffer< payload_size > X;
|
||||
size_t Xsize;
|
||||
ShortHash Zhash;
|
||||
Signature Zsig;
|
||||
|
||||
/// encode to buffer
|
||||
bool
|
||||
Encode(llarp_buffer_t *buf) const;
|
||||
|
||||
/// decode from buffer
|
||||
bool
|
||||
Decode(llarp_buffer_t *buf);
|
||||
|
||||
/// clear members
|
||||
void
|
||||
Clear();
|
||||
};
|
||||
} // namespace iwp
|
||||
} // namespace llarp
|
||||
#endif
|
||||
@ -0,0 +1,685 @@
|
||||
#include <iwp/session.hpp>
|
||||
#include <util/memfn.hpp>
|
||||
#include <messages/link_intro.hpp>
|
||||
#include <messages/discard.hpp>
|
||||
|
||||
namespace llarp
|
||||
{
|
||||
namespace iwp
|
||||
{
|
||||
static constexpr size_t PacketOverhead = HMACSIZE + TUNNONCESIZE;
|
||||
|
||||
void
|
||||
AddRandomPadding(std::vector< byte_t >& pkt, size_t min, size_t variance)
|
||||
{
|
||||
const auto sz = pkt.size();
|
||||
const size_t randpad = min + randint() % variance;
|
||||
pkt.resize(sz + randpad);
|
||||
CryptoManager::instance()->randbytes(pkt.data() + sz, randpad);
|
||||
}
|
||||
|
||||
Session::Session(LinkLayer* p, RouterContact rc, AddressInfo ai)
|
||||
: m_State{State::Initial}
|
||||
, m_Inbound{false}
|
||||
, m_Parent{p}
|
||||
, m_CreatedAt{p->Now()}
|
||||
, m_RemoteAddr{ai}
|
||||
, m_ChosenAI{std::move(ai)}
|
||||
, m_RemoteRC{std::move(rc)}
|
||||
{
|
||||
token.Zero();
|
||||
GotLIM = util::memFn(&Session::GotOutboundLIM, this);
|
||||
}
|
||||
|
||||
Session::Session(LinkLayer* p, Addr from)
|
||||
: m_State{State::Initial}
|
||||
, m_Inbound{true}
|
||||
, m_Parent{p}
|
||||
, m_CreatedAt{p->Now()}
|
||||
, m_RemoteAddr{from}
|
||||
{
|
||||
token.Randomize();
|
||||
GotLIM = util::memFn(&Session::GotInboundLIM, this);
|
||||
}
|
||||
|
||||
void
|
||||
Session::Send_LL(const llarp_buffer_t& pkt)
|
||||
{
|
||||
LogDebug("send ", pkt.sz, " to ", m_RemoteAddr);
|
||||
m_Parent->SendTo_LL(m_RemoteAddr, pkt);
|
||||
m_LastTX = time_now_ms();
|
||||
}
|
||||
|
||||
bool
|
||||
Session::GotInboundLIM(const LinkIntroMessage* msg)
|
||||
{
|
||||
if(msg->rc.enckey != m_RemoteOnionKey)
|
||||
{
|
||||
LogError("key missmatch");
|
||||
return false;
|
||||
}
|
||||
m_State = State::Ready;
|
||||
GotLIM = util::memFn(&Session::GotRenegLIM, this);
|
||||
m_RemoteRC = msg->rc;
|
||||
m_Parent->MapAddr(m_RemoteRC.pubkey, this);
|
||||
return m_Parent->SessionEstablished(this);
|
||||
}
|
||||
|
||||
bool
|
||||
Session::GotOutboundLIM(const LinkIntroMessage* msg)
|
||||
{
|
||||
if(msg->rc.pubkey != m_RemoteRC.pubkey)
|
||||
{
|
||||
LogError("ident key missmatch");
|
||||
return false;
|
||||
}
|
||||
m_RemoteRC = msg->rc;
|
||||
GotLIM = util::memFn(&Session::GotRenegLIM, this);
|
||||
auto self = shared_from_this();
|
||||
SendOurLIM([self](ILinkSession::DeliveryStatus st) {
|
||||
if(st == ILinkSession::DeliveryStatus::eDeliverySuccess)
|
||||
{
|
||||
self->m_State = State::Ready;
|
||||
self->m_Parent->MapAddr(self->m_RemoteRC.pubkey, self.get());
|
||||
self->m_Parent->SessionEstablished(self.get());
|
||||
}
|
||||
});
|
||||
return true;
|
||||
}
|
||||
|
||||
void
|
||||
Session::SendOurLIM(ILinkSession::CompletionHandler h)
|
||||
{
|
||||
LinkIntroMessage msg;
|
||||
msg.rc = m_Parent->GetOurRC();
|
||||
msg.N.Randomize();
|
||||
msg.P = 60000;
|
||||
if(not msg.Sign(m_Parent->Sign))
|
||||
{
|
||||
LogError("failed to sign our RC for ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
AlignedBuffer< LinkIntroMessage::MaxSize > data;
|
||||
llarp_buffer_t buf(data);
|
||||
if(not msg.BEncode(&buf))
|
||||
{
|
||||
LogError("failed to encode LIM for ", m_RemoteAddr);
|
||||
}
|
||||
buf.sz = buf.cur - buf.base;
|
||||
buf.cur = buf.base;
|
||||
if(!SendMessageBuffer(buf, h))
|
||||
{
|
||||
LogError("failed to send LIM to ", m_RemoteAddr);
|
||||
}
|
||||
LogDebug("sent LIM to ", m_RemoteAddr);
|
||||
}
|
||||
|
||||
void
|
||||
Session::EncryptAndSend(const llarp_buffer_t& data)
|
||||
{
|
||||
std::vector< byte_t > pkt;
|
||||
pkt.resize(data.sz + PacketOverhead);
|
||||
CryptoManager::instance()->randbytes(pkt.data(), pkt.size());
|
||||
llarp_buffer_t pktbuf(pkt);
|
||||
pktbuf.base += PacketOverhead;
|
||||
pktbuf.cur = pktbuf.base;
|
||||
pktbuf.sz -= PacketOverhead;
|
||||
byte_t* nonce_ptr = pkt.data() + HMACSIZE;
|
||||
|
||||
CryptoManager::instance()->xchacha20_alt(pktbuf, data, m_SessionKey,
|
||||
nonce_ptr);
|
||||
|
||||
pktbuf.base = nonce_ptr;
|
||||
pktbuf.sz = data.sz + 32;
|
||||
CryptoManager::instance()->hmac(pkt.data(), pktbuf, m_SessionKey);
|
||||
|
||||
pktbuf.base = pkt.data();
|
||||
pktbuf.cur = pkt.data();
|
||||
pktbuf.sz = pkt.size();
|
||||
Send_LL(pktbuf);
|
||||
}
|
||||
|
||||
void
|
||||
Session::Close()
|
||||
{
|
||||
if(m_State == State::Closed)
|
||||
return;
|
||||
std::vector< byte_t > close_msg = {LLARP_PROTO_VERSION, Command::eCLOS};
|
||||
AddRandomPadding(close_msg);
|
||||
const llarp_buffer_t buf(close_msg);
|
||||
EncryptAndSend(buf);
|
||||
if(m_State == State::Ready)
|
||||
m_Parent->UnmapAddr(m_RemoteAddr);
|
||||
m_State = State::Closed;
|
||||
LogInfo("closing connection to ", m_RemoteAddr);
|
||||
}
|
||||
|
||||
bool
|
||||
Session::SendMessageBuffer(const llarp_buffer_t& buf,
|
||||
ILinkSession::CompletionHandler completed)
|
||||
{
|
||||
const auto now = m_Parent->Now();
|
||||
const auto msgid = m_TXID++;
|
||||
auto& msg =
|
||||
m_TXMsgs.emplace(msgid, OutboundMessage{msgid, buf, now, completed})
|
||||
.first->second;
|
||||
auto xmit = msg.XMIT();
|
||||
AddRandomPadding(xmit);
|
||||
const llarp_buffer_t pkt(xmit);
|
||||
EncryptAndSend(pkt);
|
||||
msg.FlushUnAcked(util::memFn(&Session::EncryptAndSend, this), now);
|
||||
LogDebug("send message ", msgid);
|
||||
return true;
|
||||
}
|
||||
|
||||
void
|
||||
Session::Pump()
|
||||
{
|
||||
const auto now = m_Parent->Now();
|
||||
if(m_State == State::Ready || m_State == State::LinkIntro)
|
||||
{
|
||||
if(ShouldPing())
|
||||
SendKeepAlive();
|
||||
for(auto& item : m_RXMsgs)
|
||||
{
|
||||
if(item.second.ShouldSendACKS(now))
|
||||
{
|
||||
item.second.SendACKS(util::memFn(&Session::EncryptAndSend, this),
|
||||
now);
|
||||
}
|
||||
}
|
||||
for(auto& item : m_TXMsgs)
|
||||
{
|
||||
if(item.second.ShouldFlush(now))
|
||||
{
|
||||
item.second.FlushUnAcked(
|
||||
util::memFn(&Session::EncryptAndSend, this), now);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
bool
|
||||
Session::GotRenegLIM(const LinkIntroMessage* lim)
|
||||
{
|
||||
LogDebug("renegotiate session on ", m_RemoteAddr);
|
||||
return m_Parent->SessionRenegotiate(lim->rc, m_RemoteRC);
|
||||
}
|
||||
|
||||
bool
|
||||
Session::RenegotiateSession()
|
||||
{
|
||||
SendOurLIM();
|
||||
return true;
|
||||
}
|
||||
|
||||
bool
|
||||
Session::ShouldPing() const
|
||||
{
|
||||
if(m_State == State::Ready)
|
||||
{
|
||||
const auto now = m_Parent->Now();
|
||||
return now - m_LastTX > PingInterval;
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
util::StatusObject
|
||||
Session::ExtractStatus() const
|
||||
{
|
||||
return {{"remoteAddr", m_RemoteAddr.ToString()},
|
||||
{"remoteRC", m_RemoteRC.ExtractStatus()}};
|
||||
}
|
||||
|
||||
bool
|
||||
Session::TimedOut(llarp_time_t now) const
|
||||
{
|
||||
if(m_State == State::Ready || m_State == State::LinkIntro)
|
||||
{
|
||||
return now > m_LastRX && now - m_LastRX > SessionAliveTimeout;
|
||||
}
|
||||
return now - m_CreatedAt > SessionAliveTimeout;
|
||||
}
|
||||
|
||||
void
|
||||
Session::Tick(llarp_time_t now)
|
||||
{
|
||||
// remove pending outbound messsages that timed out
|
||||
// inform waiters
|
||||
{
|
||||
auto itr = m_TXMsgs.begin();
|
||||
while(itr != m_TXMsgs.end())
|
||||
{
|
||||
if(itr->second.IsTimedOut(now))
|
||||
{
|
||||
itr->second.InformTimeout();
|
||||
itr = m_TXMsgs.erase(itr);
|
||||
}
|
||||
else
|
||||
++itr;
|
||||
}
|
||||
}
|
||||
{
|
||||
// remove pending inbound messages that timed out
|
||||
auto itr = m_RXMsgs.begin();
|
||||
while(itr != m_RXMsgs.end())
|
||||
{
|
||||
if(itr->second.IsTimedOut(now))
|
||||
{
|
||||
itr = m_RXMsgs.erase(itr);
|
||||
}
|
||||
else
|
||||
++itr;
|
||||
}
|
||||
}
|
||||
{
|
||||
// decay replay window
|
||||
auto itr = m_ReplayFilter.begin();
|
||||
while(itr != m_ReplayFilter.end())
|
||||
{
|
||||
if(itr->second + ReplayWindow <= now)
|
||||
{
|
||||
itr = m_ReplayFilter.erase(itr);
|
||||
}
|
||||
else
|
||||
++itr;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
using Introduction = AlignedBuffer< 64 >;
|
||||
|
||||
void
|
||||
Session::GenerateAndSendIntro()
|
||||
{
|
||||
Introduction intro;
|
||||
|
||||
TunnelNonce N;
|
||||
N.Randomize();
|
||||
if(not CryptoManager::instance()->transport_dh_client(
|
||||
m_SessionKey, m_ChosenAI.pubkey,
|
||||
m_Parent->RouterEncryptionSecret(), N))
|
||||
{
|
||||
LogError("failed to transport_dh_client on outbound session to ",
|
||||
m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
const auto pk = m_Parent->RouterEncryptionSecret().toPublic();
|
||||
std::copy_n(pk.begin(), pk.size(), intro.begin());
|
||||
std::copy(N.begin(), N.end(), intro.begin() + PubKey::SIZE);
|
||||
LogDebug("pk=", pk.ToHex(), " N=", N.ToHex(),
|
||||
" remote-pk=", m_ChosenAI.pubkey.ToHex());
|
||||
std::vector< byte_t > req;
|
||||
std::copy_n(intro.begin(), intro.size(), std::back_inserter(req));
|
||||
AddRandomPadding(req);
|
||||
const llarp_buffer_t buf(req);
|
||||
Send_LL(buf);
|
||||
m_State = State::Introduction;
|
||||
LogDebug("sent intro to ", m_RemoteAddr);
|
||||
}
|
||||
|
||||
void
|
||||
Session::HandleCreateSessionRequest(const llarp_buffer_t& buf)
|
||||
{
|
||||
std::vector< byte_t > result;
|
||||
if(not DecryptMessage(buf, result))
|
||||
{
|
||||
LogError("failed to decrypt session request from ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
if(result.size() < token.size())
|
||||
{
|
||||
LogError("bad session request size, ", result.size(), " < ",
|
||||
token.size(), " from ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
if(not std::equal(result.begin(), result.begin() + token.size(),
|
||||
token.begin()))
|
||||
{
|
||||
LogError("token missmatch from ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
m_LastRX = m_Parent->Now();
|
||||
m_State = State::LinkIntro;
|
||||
SendOurLIM();
|
||||
}
|
||||
|
||||
void
|
||||
Session::HandleGotIntro(const llarp_buffer_t& buf)
|
||||
{
|
||||
if(buf.sz < Introduction::SIZE)
|
||||
{
|
||||
LogWarn("intro too small from ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
TunnelNonce N;
|
||||
std::copy_n(buf.base, PubKey::SIZE, m_RemoteOnionKey.begin());
|
||||
std::copy_n(buf.base + PubKey::SIZE, TunnelNonce::SIZE, N.begin());
|
||||
const PubKey pk = m_Parent->TransportSecretKey().toPublic();
|
||||
LogDebug("got intro: remote-pk=", m_RemoteOnionKey.ToHex(),
|
||||
" N=", N.ToHex(), " local-pk=", pk.ToHex(), " sz=", buf.sz);
|
||||
if(not CryptoManager::instance()->transport_dh_server(
|
||||
m_SessionKey, m_RemoteOnionKey, m_Parent->TransportSecretKey(), N))
|
||||
{
|
||||
LogError("failed to transport_dh_server on inbound intro from ",
|
||||
m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
std::vector< byte_t > reply;
|
||||
std::copy_n(token.begin(), token.size(), std::back_inserter(reply));
|
||||
AddRandomPadding(reply);
|
||||
const llarp_buffer_t pkt(reply);
|
||||
m_LastRX = m_Parent->Now();
|
||||
EncryptAndSend(pkt);
|
||||
LogDebug("sent intro ack to ", m_RemoteAddr);
|
||||
m_State = State::Introduction;
|
||||
}
|
||||
|
||||
void
|
||||
Session::HandleGotIntroAck(const llarp_buffer_t& buf)
|
||||
{
|
||||
std::vector< byte_t > reply;
|
||||
if(not DecryptMessage(buf, reply))
|
||||
{
|
||||
LogError("intro ack decrypt failed from ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
if(reply.size() < token.size())
|
||||
{
|
||||
LogError("bad intro ack size ", reply.size(), " < ", token.size(),
|
||||
" from ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
m_LastRX = m_Parent->Now();
|
||||
std::copy_n(reply.begin(), token.size(), token.begin());
|
||||
const llarp_buffer_t pkt(token);
|
||||
EncryptAndSend(pkt);
|
||||
LogDebug("sent session request to ", m_RemoteAddr);
|
||||
m_State = State::LinkIntro;
|
||||
}
|
||||
|
||||
bool
|
||||
Session::DecryptMessage(const llarp_buffer_t& buf,
|
||||
std::vector< byte_t >& result)
|
||||
{
|
||||
if(buf.sz <= PacketOverhead)
|
||||
{
|
||||
LogError("packet too small ", buf.sz);
|
||||
return false;
|
||||
}
|
||||
ShortHash H;
|
||||
llarp_buffer_t curbuf(buf.base, buf.sz);
|
||||
curbuf.base += ShortHash::SIZE;
|
||||
curbuf.sz -= ShortHash::SIZE;
|
||||
if(not CryptoManager::instance()->hmac(H.data(), curbuf, m_SessionKey))
|
||||
{
|
||||
LogError("failed to caclulate keyed hash for ", m_RemoteAddr);
|
||||
return false;
|
||||
}
|
||||
const ShortHash expected{buf.base};
|
||||
if(H != expected)
|
||||
{
|
||||
LogError("keyed hash missmatch ", H, " != ", expected, " from ",
|
||||
m_RemoteAddr, " state=", int(m_State), " size=", buf.sz);
|
||||
return false;
|
||||
}
|
||||
const byte_t* nonce_ptr = curbuf.base;
|
||||
curbuf.base += 32;
|
||||
curbuf.sz -= 32;
|
||||
result.resize(buf.sz - PacketOverhead);
|
||||
const llarp_buffer_t outbuf(result);
|
||||
LogDebug("decrypt: ", result.size(), " bytes from ", m_RemoteAddr);
|
||||
return CryptoManager::instance()->xchacha20_alt(outbuf, curbuf,
|
||||
m_SessionKey, nonce_ptr);
|
||||
}
|
||||
|
||||
void
|
||||
Session::Start()
|
||||
{
|
||||
if(m_Inbound)
|
||||
return;
|
||||
GenerateAndSendIntro();
|
||||
}
|
||||
|
||||
void
|
||||
Session::HandleSessionData(const llarp_buffer_t& buf)
|
||||
{
|
||||
std::vector< byte_t > result;
|
||||
if(not DecryptMessage(buf, result))
|
||||
{
|
||||
LogError("failed to decrypt session data from ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
if(result[0] != LLARP_PROTO_VERSION)
|
||||
{
|
||||
LogError("protocol version missmatch ", int(result[0]),
|
||||
" != ", LLARP_PROTO_VERSION);
|
||||
return;
|
||||
}
|
||||
LogDebug("command ", int(result[1]), " from ", m_RemoteAddr);
|
||||
switch(result[1])
|
||||
{
|
||||
case Command::eXMIT:
|
||||
HandleXMIT(std::move(result));
|
||||
return;
|
||||
case Command::eDATA:
|
||||
HandleDATA(std::move(result));
|
||||
return;
|
||||
case Command::eACKS:
|
||||
HandleACKS(std::move(result));
|
||||
return;
|
||||
case Command::ePING:
|
||||
HandlePING(std::move(result));
|
||||
return;
|
||||
case Command::eNACK:
|
||||
HandleNACK(std::move(result));
|
||||
return;
|
||||
case Command::eCLOS:
|
||||
HandleCLOS(std::move(result));
|
||||
return;
|
||||
}
|
||||
LogError("invalid command ", int(result[1]));
|
||||
}
|
||||
|
||||
void
|
||||
Session::HandleNACK(std::vector< byte_t > data)
|
||||
{
|
||||
if(data.size() < 10)
|
||||
{
|
||||
LogError("short nack from ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
uint64_t txid = bufbe64toh(data.data() + 2);
|
||||
LogDebug("got nack on ", txid, " from ", m_RemoteAddr);
|
||||
auto itr = m_TXMsgs.find(txid);
|
||||
if(itr != m_TXMsgs.end())
|
||||
{
|
||||
auto xmit = itr->second.XMIT();
|
||||
AddRandomPadding(xmit);
|
||||
const llarp_buffer_t pkt(xmit);
|
||||
EncryptAndSend(pkt);
|
||||
}
|
||||
m_LastRX = m_Parent->Now();
|
||||
}
|
||||
|
||||
void
|
||||
Session::HandleXMIT(std::vector< byte_t > data)
|
||||
{
|
||||
if(data.size() < 44)
|
||||
{
|
||||
LogError("short XMIT from ", m_RemoteAddr, " ", data.size(), " < 44");
|
||||
return;
|
||||
}
|
||||
uint16_t sz = bufbe16toh(data.data() + 2);
|
||||
uint64_t rxid = bufbe64toh(data.data() + 4);
|
||||
ShortHash h{data.data() + 12};
|
||||
LogDebug("rxid=", rxid, " sz=", sz, " h=", h.ToHex());
|
||||
m_LastRX = m_Parent->Now();
|
||||
{
|
||||
// check for replay
|
||||
auto itr = m_ReplayFilter.find(rxid);
|
||||
if(itr != m_ReplayFilter.end())
|
||||
{
|
||||
LogDebug("duplicate rxid=", rxid, " from ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
}
|
||||
{
|
||||
auto itr = m_RXMsgs.find(rxid);
|
||||
if(itr == m_RXMsgs.end())
|
||||
m_RXMsgs.emplace(
|
||||
rxid, InboundMessage{rxid, sz, std::move(h), m_Parent->Now()});
|
||||
else
|
||||
LogDebug("got duplicate xmit on ", rxid, " from ", m_RemoteAddr);
|
||||
}
|
||||
}
|
||||
|
||||
void
|
||||
Session::HandleDATA(std::vector< byte_t > data)
|
||||
{
|
||||
if(data.size() <= 12)
|
||||
{
|
||||
LogError("short DATA from ", m_RemoteAddr, " ", data.size());
|
||||
return;
|
||||
}
|
||||
m_LastRX = m_Parent->Now();
|
||||
uint16_t sz = bufbe16toh(data.data() + 2);
|
||||
uint64_t rxid = bufbe64toh(data.data() + 4);
|
||||
auto itr = m_RXMsgs.find(rxid);
|
||||
if(itr == m_RXMsgs.end())
|
||||
{
|
||||
LogDebug("no rxid=", rxid, " for ", m_RemoteAddr);
|
||||
std::vector< byte_t > nack = {
|
||||
LLARP_PROTO_VERSION, Command::eNACK, 0, 0, 0, 0, 0, 0, 0, 0};
|
||||
htobe64buf(nack.data() + 2, rxid);
|
||||
AddRandomPadding(nack);
|
||||
const llarp_buffer_t nackbuf(nack);
|
||||
EncryptAndSend(nackbuf);
|
||||
return;
|
||||
}
|
||||
|
||||
{
|
||||
const llarp_buffer_t buf(data.data() + 12, data.size() - 12);
|
||||
itr->second.HandleData(sz, buf, m_Parent->Now());
|
||||
}
|
||||
|
||||
if(itr->second.IsCompleted())
|
||||
{
|
||||
itr->second.SendACKS(util::memFn(&Session::EncryptAndSend, this),
|
||||
m_Parent->Now());
|
||||
if(itr->second.Verify())
|
||||
{
|
||||
auto msg = std::move(itr->second);
|
||||
const llarp_buffer_t buf(msg.m_Data.data(), msg.m_Size);
|
||||
m_Parent->HandleMessage(this, buf);
|
||||
m_ReplayFilter.emplace(itr->first, m_Parent->Now());
|
||||
}
|
||||
else
|
||||
{
|
||||
LogError("hash missmatch for message ", itr->first);
|
||||
}
|
||||
m_RXMsgs.erase(itr);
|
||||
}
|
||||
}
|
||||
|
||||
void
|
||||
Session::HandleACKS(std::vector< byte_t > data)
|
||||
{
|
||||
if(data.size() < 11)
|
||||
{
|
||||
LogError("short ACKS from ", m_RemoteAddr, " ", data.size(), " < 11");
|
||||
return;
|
||||
}
|
||||
const auto now = m_Parent->Now();
|
||||
m_LastRX = now;
|
||||
uint64_t txid = bufbe64toh(data.data() + 2);
|
||||
auto itr = m_TXMsgs.find(txid);
|
||||
if(itr == m_TXMsgs.end())
|
||||
{
|
||||
LogDebug("no txid=", txid, " for ", m_RemoteAddr);
|
||||
return;
|
||||
}
|
||||
itr->second.Ack(data[10]);
|
||||
|
||||
if(itr->second.IsTransmitted())
|
||||
{
|
||||
LogDebug("sent message ", itr->first);
|
||||
itr->second.Completed();
|
||||
itr = m_TXMsgs.erase(itr);
|
||||
}
|
||||
else
|
||||
{
|
||||
itr->second.FlushUnAcked(util::memFn(&Session::EncryptAndSend, this),
|
||||
now);
|
||||
}
|
||||
}
|
||||
|
||||
void Session::HandleCLOS(std::vector< byte_t >)
|
||||
{
|
||||
LogInfo("remote closed by ", m_RemoteAddr);
|
||||
Close();
|
||||
}
|
||||
|
||||
void Session::HandlePING(std::vector< byte_t >)
|
||||
{
|
||||
m_LastRX = m_Parent->Now();
|
||||
}
|
||||
|
||||
bool
|
||||
Session::SendKeepAlive()
|
||||
{
|
||||
if(m_State == State::Ready)
|
||||
{
|
||||
std::vector< byte_t > ping{LLARP_PROTO_VERSION, Command::ePING};
|
||||
const llarp_buffer_t buf(ping);
|
||||
EncryptAndSend(buf);
|
||||
return true;
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
bool
|
||||
Session::IsEstablished() const
|
||||
{
|
||||
return m_State == State::Ready;
|
||||
}
|
||||
|
||||
void
|
||||
Session::Recv_LL(const llarp_buffer_t& buf)
|
||||
{
|
||||
switch(m_State)
|
||||
{
|
||||
case State::Initial:
|
||||
if(m_Inbound)
|
||||
{
|
||||
// initial data
|
||||
// enter introduction phase
|
||||
HandleGotIntro(buf);
|
||||
}
|
||||
else
|
||||
{
|
||||
// this case should never happen
|
||||
::abort();
|
||||
}
|
||||
break;
|
||||
case State::Introduction:
|
||||
if(m_Inbound)
|
||||
{
|
||||
// we are replying to an intro ack
|
||||
HandleCreateSessionRequest(buf);
|
||||
}
|
||||
else
|
||||
{
|
||||
// we got an intro ack
|
||||
// send a session request
|
||||
HandleGotIntroAck(buf);
|
||||
}
|
||||
break;
|
||||
case State::LinkIntro:
|
||||
default:
|
||||
HandleSessionData(buf);
|
||||
break;
|
||||
}
|
||||
}
|
||||
} // namespace iwp
|
||||
} // namespace llarp
|
||||
@ -0,0 +1,219 @@
|
||||
#ifndef LLARP_IWP_SESSION_HPP
|
||||
#define LLARP_IWP_SESSION_HPP
|
||||
|
||||
#include <link/session.hpp>
|
||||
#include <iwp/linklayer.hpp>
|
||||
#include <iwp/message_buffer.hpp>
|
||||
|
||||
namespace llarp
|
||||
{
|
||||
namespace iwp
|
||||
{
|
||||
void
|
||||
AddRandomPadding(std::vector< byte_t >& pkt, size_t min = 16,
|
||||
size_t variance = 16);
|
||||
|
||||
struct Session : public ILinkSession,
|
||||
public std::enable_shared_from_this< Session >
|
||||
{
|
||||
/// Time how long we try delivery for
|
||||
static constexpr llarp_time_t DeliveryTimeout = 5000;
|
||||
/// How long to keep a replay window for
|
||||
static constexpr llarp_time_t ReplayWindow = (DeliveryTimeout * 3) / 2;
|
||||
/// Time how long we wait to recieve a message
|
||||
static constexpr llarp_time_t RecievalTimeout = (DeliveryTimeout * 8) / 5;
|
||||
/// How often to acks RX messages
|
||||
static constexpr llarp_time_t ACKResendInterval = 500;
|
||||
/// How often to retransmit TX fragments
|
||||
static constexpr llarp_time_t TXFlushInterval =
|
||||
(ACKResendInterval * 3) / 2;
|
||||
/// How often we send a keepalive
|
||||
static constexpr llarp_time_t PingInterval = 2000;
|
||||
/// How long we wait for a session to die with no tx from them
|
||||
static constexpr llarp_time_t SessionAliveTimeout =
|
||||
(PingInterval * 13) / 3;
|
||||
|
||||
/// outbound session
|
||||
Session(LinkLayer* parent, RouterContact rc, AddressInfo ai);
|
||||
/// inbound session
|
||||
Session(LinkLayer* parent, Addr from);
|
||||
|
||||
~Session() = default;
|
||||
|
||||
std::shared_ptr< ILinkSession >
|
||||
BorrowSelf() override
|
||||
{
|
||||
return shared_from_this();
|
||||
}
|
||||
|
||||
void
|
||||
Pump() override;
|
||||
|
||||
void
|
||||
Tick(llarp_time_t now) override;
|
||||
|
||||
bool
|
||||
SendMessageBuffer(const llarp_buffer_t& buf,
|
||||
CompletionHandler resultHandler) override;
|
||||
|
||||
void
|
||||
Send_LL(const llarp_buffer_t& pkt);
|
||||
|
||||
void
|
||||
EncryptAndSend(const llarp_buffer_t& data);
|
||||
|
||||
void
|
||||
Start() override;
|
||||
|
||||
void
|
||||
Close() override;
|
||||
|
||||
void
|
||||
Recv_LL(const llarp_buffer_t& pkt) override;
|
||||
|
||||
bool
|
||||
SendKeepAlive() override;
|
||||
|
||||
bool
|
||||
IsEstablished() const override;
|
||||
|
||||
bool
|
||||
TimedOut(llarp_time_t now) const override;
|
||||
|
||||
PubKey
|
||||
GetPubKey() const override
|
||||
{
|
||||
return m_RemoteRC.pubkey;
|
||||
}
|
||||
|
||||
Addr
|
||||
GetRemoteEndpoint() const override
|
||||
{
|
||||
return m_RemoteAddr;
|
||||
}
|
||||
|
||||
RouterContact
|
||||
GetRemoteRC() const override
|
||||
{
|
||||
return m_RemoteRC;
|
||||
}
|
||||
|
||||
size_t
|
||||
SendQueueBacklog() const override
|
||||
{
|
||||
return m_TXMsgs.size();
|
||||
}
|
||||
|
||||
ILinkLayer*
|
||||
GetLinkLayer() const override
|
||||
{
|
||||
return m_Parent;
|
||||
}
|
||||
|
||||
bool
|
||||
RenegotiateSession() override;
|
||||
|
||||
bool
|
||||
ShouldPing() const override;
|
||||
|
||||
util::StatusObject
|
||||
ExtractStatus() const override;
|
||||
|
||||
private:
|
||||
enum class State
|
||||
{
|
||||
/// we have no data recv'd
|
||||
Initial,
|
||||
/// we are in introduction phase
|
||||
Introduction,
|
||||
/// we sent our LIM
|
||||
LinkIntro,
|
||||
/// handshake done and LIM has been obtained
|
||||
Ready,
|
||||
/// we are closed now
|
||||
Closed
|
||||
};
|
||||
State m_State;
|
||||
/// are we inbound session ?
|
||||
const bool m_Inbound;
|
||||
/// parent link layer
|
||||
LinkLayer* const m_Parent;
|
||||
const llarp_time_t m_CreatedAt;
|
||||
const Addr m_RemoteAddr;
|
||||
|
||||
AddressInfo m_ChosenAI;
|
||||
/// remote rc
|
||||
RouterContact m_RemoteRC;
|
||||
/// session key
|
||||
SharedSecret m_SessionKey;
|
||||
/// session token
|
||||
AlignedBuffer< 24 > token;
|
||||
|
||||
PubKey m_RemoteOnionKey;
|
||||
|
||||
llarp_time_t m_LastTX = 0;
|
||||
llarp_time_t m_LastRX = 0;
|
||||
|
||||
uint64_t m_TXID = 0;
|
||||
|
||||
std::unordered_map< uint64_t, InboundMessage > m_RXMsgs;
|
||||
std::unordered_map< uint64_t, OutboundMessage > m_TXMsgs;
|
||||
|
||||
/// maps rxid to time recieved
|
||||
std::unordered_map< uint64_t, llarp_time_t > m_ReplayFilter;
|
||||
|
||||
void
|
||||
HandleGotIntro(const llarp_buffer_t& buf);
|
||||
|
||||
void
|
||||
HandleGotIntroAck(const llarp_buffer_t& buf);
|
||||
|
||||
void
|
||||
HandleCreateSessionRequest(const llarp_buffer_t& buf);
|
||||
|
||||
void
|
||||
HandleAckSession(const llarp_buffer_t& buf);
|
||||
|
||||
void
|
||||
HandleSessionData(const llarp_buffer_t& buf);
|
||||
|
||||
bool
|
||||
DecryptMessage(const llarp_buffer_t& buf, std::vector< byte_t >& result);
|
||||
|
||||
void
|
||||
GenerateAndSendIntro();
|
||||
|
||||
bool
|
||||
GotInboundLIM(const LinkIntroMessage* msg);
|
||||
|
||||
bool
|
||||
GotOutboundLIM(const LinkIntroMessage* msg);
|
||||
|
||||
bool
|
||||
GotRenegLIM(const LinkIntroMessage* msg);
|
||||
|
||||
void
|
||||
SendOurLIM(ILinkSession::CompletionHandler h = nullptr);
|
||||
|
||||
void
|
||||
HandleXMIT(std::vector< byte_t > msg);
|
||||
|
||||
void
|
||||
HandleDATA(std::vector< byte_t > msg);
|
||||
|
||||
void
|
||||
HandleACKS(std::vector< byte_t > msg);
|
||||
|
||||
void
|
||||
HandleNACK(std::vector< byte_t > msg);
|
||||
|
||||
void
|
||||
HandlePING(std::vector< byte_t > msg);
|
||||
|
||||
void
|
||||
HandleCLOS(std::vector< byte_t > msg);
|
||||
};
|
||||
} // namespace iwp
|
||||
} // namespace llarp
|
||||
|
||||
#endif
|
||||
@ -0,0 +1,52 @@
|
||||
#include <link/factory.hpp>
|
||||
#include <iwp/iwp.hpp>
|
||||
#include <utp/utp.hpp>
|
||||
|
||||
namespace llarp
|
||||
{
|
||||
LinkFactory::LinkType
|
||||
LinkFactory::TypeFromName(string_view str)
|
||||
{
|
||||
if(str == "utp")
|
||||
return LinkType::eLinkUTP;
|
||||
if(str == "iwp")
|
||||
return LinkType::eLinkIWP;
|
||||
if(str == "mempipe")
|
||||
return LinkType::eLinkMempipe;
|
||||
return LinkType::eLinkUnknown;
|
||||
}
|
||||
|
||||
std::string
|
||||
LinkFactory::NameFromType(LinkFactory::LinkType tp)
|
||||
{
|
||||
switch(tp)
|
||||
{
|
||||
case LinkType::eLinkUTP:
|
||||
return "utp";
|
||||
case LinkType::eLinkIWP:
|
||||
return "iwp";
|
||||
case LinkType::eLinkMempipe:
|
||||
return "mempipe";
|
||||
default:
|
||||
return "unspec";
|
||||
}
|
||||
}
|
||||
|
||||
LinkFactory::Factory
|
||||
LinkFactory::Obtain(LinkFactory::LinkType tp, bool permitInbound)
|
||||
{
|
||||
switch(tp)
|
||||
{
|
||||
case LinkType::eLinkUTP:
|
||||
if(permitInbound)
|
||||
return llarp::utp::NewInboundLink;
|
||||
return llarp::utp::NewOutboundLink;
|
||||
case LinkType::eLinkIWP:
|
||||
if(permitInbound)
|
||||
return llarp::iwp::NewInboundLink;
|
||||
return llarp::iwp::NewOutboundLink;
|
||||
default:
|
||||
return nullptr;
|
||||
}
|
||||
}
|
||||
} // namespace llarp
|
||||
@ -0,0 +1,43 @@
|
||||
#ifndef LLARP_LINK_FACTORY_HPP
|
||||
#define LLARP_LINK_FACTORY_HPP
|
||||
#include <util/string_view.hpp>
|
||||
#include <functional>
|
||||
|
||||
#include <link/server.hpp>
|
||||
|
||||
namespace llarp
|
||||
{
|
||||
/// LinkFactory is responsible for returning std::functions that create the
|
||||
/// link layer types
|
||||
struct LinkFactory
|
||||
{
|
||||
enum class LinkType
|
||||
{
|
||||
eLinkUTP,
|
||||
eLinkIWP,
|
||||
eLinkMempipe,
|
||||
eLinkUnknown
|
||||
};
|
||||
|
||||
using Factory = std::function< LinkLayer_ptr(
|
||||
const SecretKey&, GetRCFunc, LinkMessageHandler, SignBufferFunc,
|
||||
SessionEstablishedHandler, SessionRenegotiateHandler, TimeoutHandler,
|
||||
SessionClosedHandler) >;
|
||||
|
||||
/// get link type by name string
|
||||
/// if invalid returns eLinkUnspec
|
||||
static LinkType
|
||||
TypeFromName(string_view name);
|
||||
|
||||
/// turns a link type into a string representation
|
||||
static std::string
|
||||
NameFromType(LinkType t);
|
||||
|
||||
/// obtain a link factory of a certain type
|
||||
static Factory
|
||||
Obtain(LinkType t, bool permitInbound);
|
||||
};
|
||||
|
||||
} // namespace llarp
|
||||
|
||||
#endif
|
||||
Loading…
Reference in New Issue