X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=src%2Fnet.h;h=b5692ef23593c120e9729d1840ddafe77c445868;hp=f2d34be0d802afd0d20de0bbddae48bc9d14788e;hb=9e44f116bf0f72d1dd4f099440a351dbe0a74573;hpb=5b7242285795f5143770b663055b87ebb5dd15b8 diff --git a/src/net.h b/src/net.h index f2d34be0..b5692ef2 100644 --- a/src/net.h +++ b/src/net.h @@ -1,6 +1,7 @@ /* net.h -- header for net.c - Copyright (C) 1998,99 Ivo Timmermans + Copyright (C) 1998-2004 Ivo Timmermans + 2000-2004 Guus Sliepen This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by @@ -15,126 +16,144 @@ You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + + $Id$ */ #ifndef __TINC_NET_H__ #define __TINC_NET_H__ -#include +#include -#include "config.h" -#include "conf.h" +#include "ipv6.h" -#define MAXSIZE 1700 /* should be a bit more than the MTU for the tapdevice */ -#define MTU 1600 +#ifdef ENABLE_JUMBOGRAMS +#define MTU 9018 /* 9000 bytes payload + 14 bytes ethernet header + 4 bytes VLAN tag */ +#else +#define MTU 1518 /* 1500 bytes payload + 14 bytes ethernet header + 4 bytes VLAN tag */ +#endif -#define MAX_PASSPHRASE_SIZE 2000 /* 2kb is really waaaay too much. nobody's - gonna need a 16 kbit passphrase */ +#define MAXSIZE (MTU + 4 + EVP_MAX_BLOCK_LENGTH + EVP_MAX_MD_SIZE + MTU/64 + 20) /* MTU + seqno + padding + HMAC + compressor overhead */ +#define MAXBUFSIZE ((MAXSIZE > 2048 ? MAXSIZE : 2048) + 128) /* Enough room for a request with a MAXSIZEd packet or a 8192 bits RSA key */ -#define MAC_ADDR_S "%02x:%02x:%02x:%02x:%02x:%02x" -#define MAC_ADDR_V(x) ((unsigned char*)&(x))[0],((unsigned char*)&(x))[1], \ - ((unsigned char*)&(x))[2],((unsigned char*)&(x))[3], \ - ((unsigned char*)&(x))[4],((unsigned char*)&(x))[5] +#define MAXSOCKETS 128 /* Overkill... */ -#define IP_ADDR_S "%d.%d.%d.%d" +#define MAXQUEUELENGTH 8 /* Maximum number of packats in a single queue */ -#ifdef WORDS_BIGENDIAN -# define IP_ADDR_V(x) ((unsigned char*)&(x))[0],((unsigned char*)&(x))[1], \ - ((unsigned char*)&(x))[2],((unsigned char*)&(x))[3] -#else -# define IP_ADDR_V(x) ((unsigned char*)&(x))[3],((unsigned char*)&(x))[2], \ - ((unsigned char*)&(x))[1],((unsigned char*)&(x))[0] -#endif +typedef struct mac_t { + uint8_t x[6]; +} mac_t; + +typedef struct ipv4_t { + uint8_t x[4]; +} ipv4_t; + +typedef struct ipv6_t { + uint16_t x[8]; +} ipv6_t; -typedef unsigned long ip_t; typedef short length_t; +#define AF_UNKNOWN 255 + +struct sockaddr_unknown { + uint16_t family; + uint16_t pad1; + uint32_t pad2; + char *address; + char *port; +}; + +typedef union sockaddr_t { + struct sockaddr sa; + struct sockaddr_in in; + struct sockaddr_in6 in6; + struct sockaddr_unknown unknown; +#ifdef HAVE_STRUCT_SOCKADDR_STORAGE + struct sockaddr_storage storage; +#endif +} sockaddr_t; + +#ifdef SA_LEN +#define SALEN(s) SA_LEN(&s) +#else +#define SALEN(s) (s.sa_family==AF_INET?sizeof(struct sockaddr_in):sizeof(struct sockaddr_in6)) +#endif + typedef struct vpn_packet_t { - length_t len; /* the actual number of bytes in the `data' field */ - unsigned char data[MAXSIZE]; + length_t len; /* the actual number of bytes in the `data' field */ + int priority; /* priority or TOS */ + uint32_t seqno; /* 32 bits sequence number (network byte order of course) */ + uint8_t data[MAXSIZE]; } vpn_packet_t; -typedef struct real_packet_t { - length_t len; /* the length of the entire packet */ - ip_t from; /* where the packet came from */ - vpn_packet_t data; /* encrypted vpn_packet_t */ -} real_packet_t; - -typedef struct passphrase_t { - unsigned char type; - unsigned short len; - unsigned char phrase[MAX_PASSPHRASE_SIZE]; -} passphrase_t; - -typedef struct status_bits_t { - int pinged:1; /* sent ping */ - int got_pong:1; /* received pong */ - int meta:1; /* meta connection exists */ - int active:1; /* 1 if active.. */ - int outgoing:1; /* I myself asked for this conn */ - int termreq:1; /* the termination of this connection was requested */ - int remove:1; /* Set to 1 if you want this connection removed */ - int timeout:1; /* 1 if gotten timeout */ - int validkey:1; /* 1 if we currently have a valid key for him */ - int waitingforkey:1; /* 1 if we already sent out a request */ - int dataopen:1; /* 1 if we have a valid UDP connection open */ - int unused:22; -} status_bits_t; - typedef struct queue_element_t { - void *packet; - struct queue_element_t *prev; - struct queue_element_t *next; + void *packet; + struct queue_element_t *prev; + struct queue_element_t *next; } queue_element_t; typedef struct packet_queue_t { - queue_element_t *head; - queue_element_t *tail; + queue_element_t *head; + queue_element_t *tail; } packet_queue_t; -typedef struct enc_key_t { - int length; - char *key; - time_t expiry; -} enc_key_t; - -typedef struct conn_list_t { - ip_t vpn_ip; /* his vpn ip */ - ip_t vpn_mask; /* his vpn network address */ - ip_t real_ip; /* his real (internet) ip */ - char *hostname; /* the hostname of its real ip */ - short int port; /* his portnumber */ - int socket; /* our udp vpn socket */ - int meta_socket; /* our tcp meta socket */ - unsigned char protocol_version; /* used protocol */ - status_bits_t status; /* status info */ - passphrase_t *pp; /* encoded passphrase */ - packet_queue_t *sq; /* pending outgoing packets */ - packet_queue_t *rq; /* pending incoming packets (they have no - valid key to be decrypted with) */ - enc_key_t *public_key; /* the other party's public key */ - enc_key_t *key; /* encrypt with this key */ - struct conn_list_t *nexthop; /* nearest meta-hop in this direction */ - struct conn_list_t *next; /* after all, it's a list of connections */ -} conn_list_t; - -extern int tap_fd; - -extern int total_tap_in; -extern int total_tap_out; -extern int total_socket_in; -extern int total_socket_out; - -extern conn_list_t *conn_list; -extern conn_list_t *myself; - -extern int send_packet(ip_t, vpn_packet_t *); -extern int send_broadcast(conn_list_t *, vpn_packet_t *); -extern int setup_network_connections(void); +typedef struct listen_socket_t { + int tcp; + int udp; + sockaddr_t sa; +} listen_socket_t; + +#include "conf.h" + +typedef struct outgoing_t { + char *name; + int timeout; + struct config_t *cfg; + struct addrinfo *ai; + struct addrinfo *aip; +} outgoing_t; + +extern int maxtimeout; +extern int seconds_till_retry; +extern int addressfamily; + +extern listen_socket_t listen_socket[MAXSOCKETS]; +extern int listen_sockets; +extern int keyexpires; +extern int keylifetime; +extern bool do_prune; +extern bool do_purge; +extern char *myport; +extern time_t now; +extern EVP_CIPHER_CTX packet_ctx; + +/* Yes, very strange placement indeed, but otherwise the typedefs get all tangled up */ +#include "connection.h" +#include "node.h" + +extern void retry_outgoing(outgoing_t *); +extern void handle_incoming_vpn_data(int); +extern void finish_connecting(struct connection_t *); +extern void do_outgoing_connection(struct connection_t *); +extern bool handle_new_meta_connection(int); +extern int setup_listen_socket(const sockaddr_t *); +extern int setup_vpn_in_socket(const sockaddr_t *); +extern void send_packet(const struct node_t *, vpn_packet_t *); +extern void receive_tcppacket(struct connection_t *, char *, int); +extern void broadcast_packet(const struct node_t *, vpn_packet_t *); +extern bool setup_network_connections(void); +extern void setup_outgoing_connection(struct outgoing_t *); +extern void try_outgoing_connections(void); extern void close_network_connections(void); -extern void main_loop(void); -extern int setup_vpn_connection(conn_list_t *); -extern void terminate_connection(conn_list_t *); -extern void flush_queues(conn_list_t*); +extern int main_loop(void); +extern void terminate_connection(struct connection_t *, bool); +extern void flush_queue(struct node_t *); +extern bool read_rsa_public_key(struct connection_t *); +extern void send_mtu_probe(struct node_t *); + +#ifndef HAVE_MINGW +#define closesocket(s) close(s) +#endif -#endif /* __TINC_NET_H__ */ +#endif /* __TINC_NET_H__ */