| /* |
| * A Random IP reputation service acting as a Stream Processing Offload Agent |
| * |
| * This is a very simple service that implement a "random" ip reputation |
| * service. It will return random scores for all checked IP addresses. It only |
| * shows you how to implement a ip reputation service or such kind of services |
| * using the SPOE. |
| * |
| * Copyright 2016 HAProxy Technologies, Christopher Faulet <cfaulet@haproxy.com> |
| * |
| * This program is free software; you can redistribute it and/or |
| * modify it under the terms of the GNU General Public License |
| * as published by the Free Software Foundation; either version |
| * 2 of the License, or (at your option) any later version. |
| * |
| */ |
| #include <unistd.h> |
| #include <stdlib.h> |
| #include <string.h> |
| #include <stdbool.h> |
| #include <errno.h> |
| #include <stdio.h> |
| #include <signal.h> |
| #include <netinet/in.h> |
| #include <sys/socket.h> |
| #include <err.h> |
| #include <ctype.h> |
| |
| #include <pthread.h> |
| |
| #include <event2/util.h> |
| #include <event2/event.h> |
| #include <event2/event_struct.h> |
| #include <event2/thread.h> |
| |
| #include <common/mini-clist.h> |
| |
| #define DEFAULT_PORT 12345 |
| #define CONNECTION_BACKLOG 10 |
| #define NUM_WORKERS 10 |
| #define MAX_FRAME_SIZE 16384 |
| #define SPOP_VERSION "1.0" |
| |
| #define SLEN(str) (sizeof(str)-1) |
| |
| #define LOG(worker, fmt, args...) \ |
| do { \ |
| struct timeval now; \ |
| \ |
| gettimeofday(&now, NULL); \ |
| fprintf(stderr, "%ld.%06ld [%02d] " fmt "\n", \ |
| now.tv_sec, now.tv_usec, (worker)->id, ##args); \ |
| } while (0) |
| |
| #define DEBUG(x...) \ |
| do { \ |
| if (debug) \ |
| LOG(x); \ |
| } while (0) |
| |
| /* Frame Types sent by HAProxy and by agents */ |
| enum spoe_frame_type { |
| /* Frames sent by HAProxy */ |
| SPOE_FRM_T_HAPROXY_HELLO = 1, |
| SPOE_FRM_T_HAPROXY_DISCON, |
| SPOE_FRM_T_HAPROXY_NOTIFY, |
| |
| /* Frames sent by the agents */ |
| SPOE_FRM_T_AGENT_HELLO = 101, |
| SPOE_FRM_T_AGENT_DISCON, |
| SPOE_FRM_T_AGENT_ACK |
| }; |
| |
| /* All supported data types */ |
| enum spoe_data_type { |
| SPOE_DATA_T_NULL = 0, |
| SPOE_DATA_T_BOOL, |
| SPOE_DATA_T_INT32, |
| SPOE_DATA_T_UINT32, |
| SPOE_DATA_T_INT64, |
| SPOE_DATA_T_UINT64, |
| SPOE_DATA_T_IPV4, |
| SPOE_DATA_T_IPV6, |
| SPOE_DATA_T_STR, |
| SPOE_DATA_T_BIN, |
| SPOE_DATA_TYPES |
| }; |
| |
| /* Errors triggerd by SPOE applet */ |
| enum spoe_frame_error { |
| SPOE_FRM_ERR_NONE = 0, |
| SPOE_FRM_ERR_IO, |
| SPOE_FRM_ERR_TOUT, |
| SPOE_FRM_ERR_TOO_BIG, |
| SPOE_FRM_ERR_INVALID, |
| SPOE_FRM_ERR_NO_VSN, |
| SPOE_FRM_ERR_NO_FRAME_SIZE, |
| SPOE_FRM_ERR_NO_CAP, |
| SPOE_FRM_ERR_BAD_VSN, |
| SPOE_FRM_ERR_BAD_FRAME_SIZE, |
| SPOE_FRM_ERR_FRAG_NOT_SUPPORTED, |
| SPOE_FRM_ERR_INTERLACED_FRAMES, |
| SPOE_FRM_ERR_RES, |
| SPOE_FRM_ERR_UNKNOWN = 99, |
| SPOE_FRM_ERRS, |
| }; |
| |
| /* All supported SPOE actions */ |
| enum spoe_action_type { |
| SPOE_ACT_T_SET_VAR = 1, |
| SPOE_ACT_T_UNSET_VAR, |
| SPOE_ACT_TYPES, |
| }; |
| |
| /* Scopes used for variables set by agents. It is a way to be agnotic to vars |
| * scope. */ |
| enum spoe_vars_scope { |
| SPOE_SCOPE_PROC = 0, /* <=> SCOPE_PROC */ |
| SPOE_SCOPE_SESS, /* <=> SCOPE_SESS */ |
| SPOE_SCOPE_TXN, /* <=> SCOPE_TXN */ |
| SPOE_SCOPE_REQ, /* <=> SCOPE_REQ */ |
| SPOE_SCOPE_RES, /* <=> SCOPE_RES */ |
| }; |
| |
| enum spoa_state { |
| SPOA_ST_CONNECTING = 0, |
| SPOA_ST_PROCESSING, |
| SPOA_ST_DISCONNECTING, |
| }; |
| |
| enum spoa_frame_type { |
| SPOA_FRM_T_UNKNOWN = 0, |
| SPOA_FRM_T_HAPROXY, |
| SPOA_FRM_T_AGENT, |
| }; |
| |
| /* Flags set on the SPOE frame */ |
| #define SPOE_FRM_FL_FIN 0x00000001 |
| #define SPOE_FRM_FL_ABRT 0x00000002 |
| |
| /* Masks to get data type or flags value */ |
| #define SPOE_DATA_T_MASK 0x0F |
| #define SPOE_DATA_FL_MASK 0xF0 |
| |
| /* Flags to set Boolean values */ |
| #define SPOE_DATA_FL_FALSE 0x00 |
| #define SPOE_DATA_FL_TRUE 0x10 |
| |
| struct spoe_engine { |
| char *id; |
| |
| struct list processing_frames; |
| struct list outgoing_frames; |
| |
| struct list clients; |
| struct list list; |
| }; |
| |
| struct spoe_frame { |
| enum spoa_frame_type type; |
| char *buf; |
| unsigned int offset; |
| unsigned int len; |
| |
| unsigned int stream_id; |
| unsigned int frame_id; |
| unsigned int flags; |
| bool hcheck; /* true is the CONNECT frame is a healthcheck */ |
| bool fragmented; /* true if the frame is fragmented */ |
| int ip_score; /* -1 if unset, else between 0 and 100 */ |
| |
| struct event process_frame_event; |
| struct worker *worker; |
| struct spoe_engine *engine; |
| struct client *client; |
| struct list list; |
| |
| char *frag_buf; /* used to accumulate payload of a fragmented frame */ |
| unsigned int frag_len; |
| |
| char data[0]; |
| }; |
| |
| struct client { |
| int fd; |
| unsigned long id; |
| enum spoa_state state; |
| |
| struct event read_frame_event; |
| struct event write_frame_event; |
| |
| struct spoe_frame *incoming_frame; |
| struct spoe_frame *outgoing_frame; |
| |
| struct list processing_frames; |
| struct list outgoing_frames; |
| |
| unsigned int max_frame_size; |
| int status_code; |
| |
| char *engine_id; |
| struct spoe_engine *engine; |
| bool pipelining; |
| bool async; |
| bool fragmentation; |
| |
| struct worker *worker; |
| struct list by_worker; |
| struct list by_engine; |
| }; |
| |
| struct worker { |
| pthread_t thread; |
| int id; |
| struct event_base *base; |
| struct event *monitor_event; |
| |
| struct list engines; |
| |
| unsigned int nbclients; |
| struct list clients; |
| |
| struct list frames; |
| }; |
| |
| |
| struct chunk { |
| char *str; /* beginning of the string itself. Might not be 0-terminated */ |
| int len; /* current size of the string from first to last char */ |
| }; |
| |
| union spoe_value { |
| bool boolean; /* use for boolean */ |
| int32_t sint32; /* used for signed 32bits integers */ |
| uint32_t uint32; /* used for signed 32bits integers */ |
| int32_t sint64; /* used for signed 64bits integers */ |
| uint32_t uint64; /* used for signed 64bits integers */ |
| struct in_addr ipv4; /* used for ipv4 addresses */ |
| struct in6_addr ipv6; /* used for ipv6 addresses */ |
| struct chunk buffer; /* used for char strings or buffers */ |
| }; |
| |
| /* Used to store sample constant */ |
| struct spoe_data { |
| enum spoe_data_type type; /* SPOE_DATA_T_* */ |
| union spoe_value u; /* spoe data value */ |
| }; |
| |
| /* Globals */ |
| static struct worker *workers = NULL; |
| static struct worker null_worker = { .id = 0 }; |
| static unsigned long clicount = 0; |
| static int server_port = DEFAULT_PORT; |
| static int num_workers = NUM_WORKERS; |
| static unsigned int max_frame_size = MAX_FRAME_SIZE; |
| struct timeval processing_delay = {0, 0}; |
| static bool debug = false; |
| static bool pipelining = false; |
| static bool async = false; |
| static bool fragmentation = false; |
| |
| |
| static const char *spoe_frm_err_reasons[SPOE_FRM_ERRS] = { |
| [SPOE_FRM_ERR_NONE] = "normal", |
| [SPOE_FRM_ERR_IO] = "I/O error", |
| [SPOE_FRM_ERR_TOUT] = "a timeout occurred", |
| [SPOE_FRM_ERR_TOO_BIG] = "frame is too big", |
| [SPOE_FRM_ERR_INVALID] = "invalid frame received", |
| [SPOE_FRM_ERR_NO_VSN] = "version value not found", |
| [SPOE_FRM_ERR_NO_FRAME_SIZE] = "max-frame-size value not found", |
| [SPOE_FRM_ERR_NO_CAP] = "capabilities value not found", |
| [SPOE_FRM_ERR_BAD_VSN] = "unsupported version", |
| [SPOE_FRM_ERR_BAD_FRAME_SIZE] = "max-frame-size too big or too small", |
| [SPOE_FRM_ERR_FRAG_NOT_SUPPORTED] = "fragmentation not supported", |
| [SPOE_FRM_ERR_INTERLACED_FRAMES] = "invalid interlaced frames", |
| [SPOE_FRM_ERR_RES] = "resource allocation error", |
| [SPOE_FRM_ERR_UNKNOWN] = "an unknown error occurred", |
| }; |
| |
| static void signal_cb(evutil_socket_t, short, void *); |
| static void accept_cb(evutil_socket_t, short, void *); |
| static void worker_monitor_cb(evutil_socket_t, short, void *); |
| static void process_frame_cb(evutil_socket_t, short, void *); |
| static void read_frame_cb(evutil_socket_t, short, void *); |
| static void write_frame_cb(evutil_socket_t, short, void *); |
| |
| static void use_spoe_engine(struct client *); |
| static void unuse_spoe_engine(struct client *); |
| static void release_frame(struct spoe_frame *); |
| static void release_client(struct client *); |
| |
| static void |
| check_ipv4_reputation(struct spoe_frame *frame, struct in_addr *ipv4) |
| { |
| char str[INET_ADDRSTRLEN]; |
| |
| if (inet_ntop(AF_INET, ipv4, str, INET_ADDRSTRLEN) == NULL) |
| return; |
| |
| frame->ip_score = random() % 100; |
| |
| DEBUG(frame->worker, "IP score for %.*s is %d", |
| INET_ADDRSTRLEN, str, frame->ip_score); |
| } |
| |
| static void |
| check_ipv6_reputation(struct spoe_frame *frame, struct in6_addr *ipv6) |
| { |
| char str[INET6_ADDRSTRLEN]; |
| |
| if (inet_ntop(AF_INET6, ipv6, str, INET6_ADDRSTRLEN) == NULL) |
| return; |
| |
| frame->ip_score = random() % 100; |
| |
| DEBUG(frame->worker, "IP score for %.*s is %d", |
| INET6_ADDRSTRLEN, str, frame->ip_score); |
| } |
| |
| |
| /* Encode a variable-length integer. This function never fails and returns the |
| * number of written bytes. */ |
| static int |
| encode_spoe_varint(uint64_t i, char *buf) |
| { |
| int idx; |
| |
| if (i < 240) { |
| buf[0] = (unsigned char)i; |
| return 1; |
| } |
| |
| buf[0] = (unsigned char)i | 240; |
| i = (i - 240) >> 4; |
| for (idx = 1; i >= 128; ++idx) { |
| buf[idx] = (unsigned char)i | 128; |
| i = (i - 128) >> 7; |
| } |
| buf[idx++] = (unsigned char)i; |
| return idx; |
| } |
| |
| /* Decode a varable-length integer. If the decoding fails, -1 is returned. This |
| * happens when the buffer's end in reached. On success, the number of read |
| * bytes is returned. */ |
| static int |
| decode_spoe_varint(char *buf, char *end, uint64_t *i) |
| { |
| unsigned char *msg = (unsigned char *)buf; |
| int idx = 0; |
| |
| if (msg > (unsigned char *)end) |
| return -1; |
| |
| if (msg[0] < 240) { |
| *i = msg[0]; |
| return 1; |
| } |
| *i = msg[0]; |
| do { |
| ++idx; |
| if (msg+idx > (unsigned char *)end) |
| return -1; |
| *i += (uint64_t)msg[idx] << (4 + 7 * (idx-1)); |
| } while (msg[idx] >= 128); |
| return (idx + 1); |
| } |
| |
| /* Encode a string. The string will be prefix by its length, encoded as a |
| * variable-length integer. This function never fails and returns the number of |
| * written bytes. */ |
| static int |
| encode_spoe_string(const char *str, size_t len, char *dst) |
| { |
| int idx = 0; |
| |
| if (!len) { |
| dst[0] = 0; |
| return 1; |
| } |
| |
| idx += encode_spoe_varint(len, dst); |
| memcpy(dst+idx, str, len); |
| return (idx + len); |
| } |
| |
| /* Decode a string. Its length is decoded first as a variable-length integer. If |
| * it succeeds, and if the string length is valid, the begin of the string is |
| * saved in <*str>, its length is saved in <*len> and the total numbre of bytes |
| * read is returned. If an error occurred, -1 is returned and <*str> remains |
| * NULL. */ |
| static int |
| decode_spoe_string(char *buf, char *end, char **str, uint64_t *len) |
| { |
| int r, idx = 0; |
| |
| *str = NULL; |
| *len = 0; |
| |
| if ((r = decode_spoe_varint(buf, end, len)) == -1) |
| goto error; |
| idx += r; |
| if (buf + idx + *len > end) |
| goto error; |
| |
| *str = buf+idx; |
| return (idx + *len); |
| |
| error: |
| return -1; |
| } |
| |
| /* Skip a typed data. If an error occurred, -1 is returned, otherwise the number |
| * of bytes read is returned. A types data is composed of a type (1 byte) and |
| * corresponding data: |
| * - boolean: non additional data (0 bytes) |
| * - integers: a variable-length integer (see decode_spoe_varint) |
| * - ipv4: 4 bytes |
| * - ipv6: 16 bytes |
| * - binary and string: a buffer prefixed by its size, a variable-length |
| * integer (see decode_spoe_string) */ |
| static int |
| skip_spoe_data(char *frame, char *end) |
| { |
| uint64_t sz = 0; |
| int r, idx = 0; |
| |
| if (frame > end) |
| return -1; |
| |
| switch (frame[idx++] & SPOE_DATA_T_MASK) { |
| case SPOE_DATA_T_BOOL: |
| idx++; |
| break; |
| case SPOE_DATA_T_INT32: |
| case SPOE_DATA_T_INT64: |
| case SPOE_DATA_T_UINT32: |
| case SPOE_DATA_T_UINT64: |
| if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) |
| return -1; |
| idx += r; |
| break; |
| case SPOE_DATA_T_IPV4: |
| idx += 4; |
| break; |
| case SPOE_DATA_T_IPV6: |
| idx += 16; |
| break; |
| case SPOE_DATA_T_STR: |
| case SPOE_DATA_T_BIN: |
| if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) |
| return -1; |
| idx += r + sz; |
| break; |
| } |
| |
| if (frame+idx > end) |
| return -1; |
| return idx; |
| } |
| |
| /* Decode a typed data. If an error occurred, -1 is returned, otherwise the |
| * number of read bytes is returned. See skip_spoe_data for details. */ |
| static int |
| decode_spoe_data(char *frame, char *end, struct spoe_data *data) |
| { |
| uint64_t sz = 0; |
| int type, r, idx = 0; |
| |
| if (frame > end) |
| return -1; |
| |
| type = frame[idx++]; |
| data->type = (type & SPOE_DATA_T_MASK); |
| switch (data->type) { |
| case SPOE_DATA_T_BOOL: |
| data->u.boolean = ((type & SPOE_DATA_FL_TRUE) == SPOE_DATA_FL_TRUE); |
| break; |
| case SPOE_DATA_T_INT32: |
| if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) |
| return -1; |
| data->u.sint32 = sz; |
| idx += r; |
| break; |
| case SPOE_DATA_T_INT64: |
| if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) |
| return -1; |
| data->u.uint32 = sz; |
| idx += r; |
| break; |
| case SPOE_DATA_T_UINT32: |
| if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) |
| return -1; |
| data->u.sint64 = sz; |
| idx += r; |
| break; |
| case SPOE_DATA_T_UINT64: |
| if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) |
| return -1; |
| data->u.uint64 = sz; |
| idx += r; |
| break; |
| case SPOE_DATA_T_IPV4: |
| if (frame+idx+4 > end) |
| return -1; |
| memcpy(&data->u.ipv4, frame+idx, 4); |
| idx += 4; |
| break; |
| case SPOE_DATA_T_IPV6: |
| if (frame+idx+16 > end) |
| return -1; |
| memcpy(&data->u.ipv6, frame+idx, 16); |
| idx += 16; |
| break; |
| case SPOE_DATA_T_STR: |
| if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) |
| return -1; |
| idx += r; |
| if (frame+idx+sz > end) |
| return -1; |
| data->u.buffer.str = frame+idx; |
| data->u.buffer.len = sz; |
| idx += sz; |
| break; |
| case SPOE_DATA_T_BIN: |
| if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) |
| return -1; |
| idx += r; |
| if (frame+idx+sz > end) |
| return -1; |
| data->u.buffer.str = frame+idx; |
| data->u.buffer.len = sz; |
| idx += sz; |
| break; |
| default: |
| break; |
| } |
| |
| if (frame+idx > end) |
| return -1; |
| return idx; |
| } |
| |
| |
| /* Check the protocol version. It returns -1 if an error occurred, the number of |
| * read bytes otherwise. */ |
| static int |
| check_proto_version(struct spoe_frame *frame, int idx) |
| { |
| char *str; |
| uint64_t sz; |
| |
| /* Get the list of all supported versions by HAProxy */ |
| if ((frame->buf[idx++] & SPOE_DATA_T_MASK) != SPOE_DATA_T_STR) |
| return -1; |
| idx += decode_spoe_string(frame->buf+idx, frame->buf+frame->len, &str, &sz); |
| if (str == NULL) |
| return -1; |
| |
| DEBUG(frame->worker, "<%lu> Supported versions : %.*s", |
| frame->client->id, (int)sz, str); |
| |
| /* TODO: Find the right verion in supported ones */ |
| |
| return idx; |
| } |
| |
| /* Check max frame size value. It returns -1 if an error occurred, the number of |
| * read bytes otherwise. */ |
| static int |
| check_max_frame_size(struct spoe_frame *frame, int idx) |
| { |
| uint64_t sz; |
| int type, i; |
| |
| /* Get the max-frame-size value of HAProxy */ |
| type = frame->buf[idx++]; |
| if ((type & SPOE_DATA_T_MASK) != SPOE_DATA_T_INT32 && |
| (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_INT64 && |
| (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_UINT32 && |
| (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_UINT64) |
| return -1; |
| if ((i = decode_spoe_varint(frame->buf+idx, frame->buf+frame->len, &sz)) == -1) |
| return -1; |
| idx += i; |
| |
| /* Keep the lower value */ |
| if (sz < frame->client->max_frame_size) |
| frame->client->max_frame_size = sz; |
| |
| DEBUG(frame->worker, "<%lu> HAProxy maximum frame size : %u", |
| frame->client->id, (unsigned int)sz); |
| |
| return idx; |
| } |
| |
| /* Check healthcheck value. It returns -1 if an error occurred, the number of |
| * read bytes otherwise. */ |
| static int |
| check_healthcheck(struct spoe_frame *frame, int idx) |
| { |
| int type; |
| |
| /* Get the "healthcheck" value */ |
| type = frame->buf[idx++]; |
| if ((type & SPOE_DATA_T_MASK) != SPOE_DATA_T_BOOL) |
| return -1; |
| frame->hcheck = ((type & SPOE_DATA_FL_TRUE) == SPOE_DATA_FL_TRUE); |
| |
| DEBUG(frame->worker, "<%lu> HELLO healthcheck : %s", |
| frame->client->id, (frame->hcheck ? "true" : "false")); |
| return idx; |
| } |
| |
| /* Check capabilities value. It returns -1 if an error occurred, the number of |
| * read bytes otherwise. */ |
| static int |
| check_capabilities(struct spoe_frame *frame, int idx) |
| { |
| struct client *client = frame->client; |
| char *str; |
| uint64_t sz; |
| int i; |
| |
| if ((frame->buf[idx++] & SPOE_DATA_T_MASK) != SPOE_DATA_T_STR) |
| return -1; |
| idx += decode_spoe_string(frame->buf+idx, frame->buf+frame->len, &str, &sz); |
| if (str == NULL) /* this is not an error */ |
| return idx; |
| |
| DEBUG(frame->worker, "<%lu> HAProxy capabilities : %.*s", |
| client->id, (int)sz, str); |
| |
| i = 0; |
| while (i < sz) { |
| char *delim; |
| |
| /* Skip leading spaces */ |
| for (; isspace(str[i]) && i < sz; i++); |
| |
| if (sz - i >= 10 && !strncmp(str + i, "pipelining", 10)) { |
| i += 10; |
| if (sz == i || isspace(str[i]) || str[i] == ',') { |
| DEBUG(frame->worker, |
| "<%lu> HAProxy supports frame pipelining", |
| client->id); |
| client->pipelining = true; |
| } |
| |
| } |
| else if (sz - i >= 5 && !strncmp(str + i, "async", 5)) { |
| i += 5; |
| if (sz == i || isspace(str[i]) || str[i] == ',') { |
| DEBUG(frame->worker, |
| "<%lu> HAProxy supports asynchronous frame", |
| client->id); |
| client->async = true; |
| } |
| } |
| else if (sz - i >= 13 && !strncmp(str + i, "fragmentation", 13)) { |
| i += 5; |
| if (sz == i || isspace(str[i]) || str[i] == ',') { |
| DEBUG(frame->worker, |
| "<%lu> HAProxy supports fragmented frame", |
| client->id); |
| client->fragmentation = true; |
| } |
| } |
| |
| if (sz == i || (delim = memchr(str + i, ',', sz-i)) == NULL) |
| break; |
| i = (delim - str) + 1; |
| } |
| |
| return idx; |
| } |
| |
| /* Check engine-id value. It returns -1 if an error occurred, the number of |
| * read bytes otherwise. */ |
| static int |
| check_engine_id(struct spoe_frame *frame, int idx) |
| { |
| struct client *client = frame->client; |
| char *str; |
| uint64_t sz; |
| |
| if ((frame->buf[idx++] & SPOE_DATA_T_MASK) != SPOE_DATA_T_STR) |
| return -1; |
| |
| idx += decode_spoe_string(frame->buf+idx, frame->buf+frame->len, &str, &sz); |
| if (str == NULL) /* this is not an error */ |
| return idx; |
| |
| if (client->engine != NULL) |
| return idx; |
| |
| DEBUG(frame->worker, "<%lu> HAProxy engine id : %.*s", |
| client->id, (int)sz, str); |
| |
| client->engine_id = strndup(str, (int)sz); |
| return idx; |
| } |
| |
| /* Check disconnect status code. It returns -1 if an error occurred, the number |
| * of read bytes otherwise. */ |
| static int |
| check_discon_status_code(struct spoe_frame *frame, int idx) |
| { |
| uint64_t sz; |
| int type, i; |
| |
| /* Get the "status-code" value */ |
| type = frame->buf[idx++]; |
| if ((type & SPOE_DATA_T_MASK) != SPOE_DATA_T_INT32 && |
| (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_INT64 && |
| (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_UINT32 && |
| (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_UINT64) |
| return -1; |
| if ((i = decode_spoe_varint(frame->buf+idx, frame->buf+frame->len, &sz)) == -1) |
| return -1; |
| idx += i; |
| |
| frame->client->status_code = (unsigned int)sz; |
| |
| DEBUG(frame->worker, "<%lu> Disconnect status code : %u", |
| frame->client->id, frame->client->status_code); |
| |
| return idx; |
| } |
| |
| /* Check the disconnect message. It returns -1 if an error occurred, the number |
| * of read bytes otherwise. */ |
| static int |
| check_discon_message(struct spoe_frame *frame, int idx) |
| { |
| char *str; |
| uint64_t sz; |
| |
| /* Get the "message" value */ |
| if ((frame->buf[idx++] & SPOE_DATA_T_MASK) != SPOE_DATA_T_STR) |
| return -1; |
| idx += decode_spoe_string(frame->buf+idx, frame->buf+frame->len, &str, &sz); |
| if (str == NULL) |
| return -1; |
| |
| DEBUG(frame->worker, "<%lu> Disconnect message : %.*s", |
| frame->client->id, (int)sz, str); |
| |
| return idx; |
| } |
| |
| /* Decode a HELLO frame received from HAProxy. It returns -1 if an error |
| * occurred, otherwise the number of read bytes. HELLO frame cannot be |
| * ignored and having another frame than a HELLO frame is an error. */ |
| static int |
| handle_hahello(struct spoe_frame *frame) |
| { |
| struct client *client = frame->client; |
| char *buf = frame->buf; |
| char *end = frame->buf + frame->len; |
| int i, idx = 0; |
| |
| /* Check frame type: we really want a HELLO frame */ |
| if (buf[idx++] != SPOE_FRM_T_HAPROXY_HELLO) |
| goto error; |
| |
| DEBUG(frame->worker, "<%lu> Decode HAProxy HELLO frame", client->id); |
| |
| /* Retrieve flags */ |
| memcpy((char *)&(frame->flags), buf+idx, 4); |
| idx += 4; |
| |
| /* Fragmentation is not supported for HELLO frame */ |
| if (!(frame->flags & SPOE_FRM_FL_FIN)) { |
| client->status_code = SPOE_FRM_ERR_FRAG_NOT_SUPPORTED; |
| goto error; |
| } |
| |
| /* stream-id and frame-id must be cleared */ |
| if (buf[idx] != 0 || buf[idx+1] != 0) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx += 2; |
| |
| /* Loop on K/V items */ |
| while (buf+idx < end) { |
| char *str; |
| uint64_t sz; |
| |
| /* Decode the item name */ |
| idx += decode_spoe_string(buf+idx, end, &str, &sz); |
| if (str == NULL) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| |
| /* Check "supported-versions" K/V item */ |
| if (!memcmp(str, "supported-versions", sz)) { |
| if ((i = check_proto_version(frame, idx)) == -1) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx = i; |
| } |
| /* Check "max-frame-size" K/V item */ |
| else if (!memcmp(str, "max-frame-size", sz)) { |
| if ((i = check_max_frame_size(frame, idx)) == -1) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx = i; |
| } |
| /* Check "healthcheck" K/V item */ |
| else if (!memcmp(str, "healthcheck", sz)) { |
| if ((i = check_healthcheck(frame, idx)) == -1) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx = i; |
| } |
| /* Check "capabilities" K/V item */ |
| else if (!memcmp(str, "capabilities", sz)) { |
| if ((i = check_capabilities(frame, idx)) == -1) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx = i; |
| } |
| /* Check "engine-id" K/V item */ |
| else if (!memcmp(str, "engine-id", sz)) { |
| if ((i = check_engine_id(frame, idx)) == -1) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx = i; |
| } |
| else { |
| DEBUG(frame->worker, "<%lu> Skip K/V item : key=%.*s", |
| client->id, (int)sz, str); |
| |
| /* Silently ignore unknown item */ |
| if ((i = skip_spoe_data(buf+idx, end)) == -1) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx += i; |
| } |
| } |
| |
| if (async == false || client->engine_id == NULL) |
| client->async = false; |
| if (pipelining == false) |
| client->pipelining = false; |
| |
| if (client->async == true) |
| use_spoe_engine(client); |
| |
| return idx; |
| |
| error: |
| return -1; |
| } |
| |
| /* Decode a DISCONNECT frame received from HAProxy. It returns -1 if an error |
| * occurred, otherwise the number of read bytes. DISCONNECT frame cannot be |
| * ignored and having another frame than a DISCONNECT frame is an error.*/ |
| static int |
| handle_hadiscon(struct spoe_frame *frame) |
| { |
| struct client *client = frame->client; |
| char *buf = frame->buf; |
| char *end = frame->buf + frame->len; |
| int i, idx = 0; |
| |
| /* Check frame type: we really want a DISCONNECT frame */ |
| if (buf[idx++] != SPOE_FRM_T_HAPROXY_DISCON) |
| goto error; |
| |
| DEBUG(frame->worker, "<%lu> Decode HAProxy DISCONNECT frame", client->id); |
| |
| /* Retrieve flags */ |
| memcpy((char *)&(frame->flags), buf+idx, 4); |
| idx += 4; |
| |
| /* Fragmentation is not supported for DISCONNECT frame */ |
| if (!(frame->flags & SPOE_FRM_FL_FIN)) { |
| client->status_code = SPOE_FRM_ERR_FRAG_NOT_SUPPORTED; |
| goto error; |
| } |
| |
| /* stream-id and frame-id must be cleared */ |
| if (buf[idx] != 0 || buf[idx+1] != 0) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx += 2; |
| |
| client->status_code = SPOE_FRM_ERR_NONE; |
| |
| /* Loop on K/V items */ |
| while (buf+idx < end) { |
| char *str; |
| uint64_t sz; |
| |
| /* Decode item key */ |
| idx += decode_spoe_string(buf+idx, end, &str, &sz); |
| if (str == NULL) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| |
| /* Check "status-code" K/V item */ |
| if (!memcmp(str, "status-code", sz)) { |
| if ((i = check_discon_status_code(frame, idx)) == -1) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx = i; |
| } |
| /* Check "message" K/V item */ |
| else if (!memcmp(str, "message", sz)) { |
| if ((i = check_discon_message(frame, idx)) == -1) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx = i; |
| } |
| else { |
| DEBUG(frame->worker, "<%lu> Skip K/V item : key=%.*s", |
| client->id, (int)sz, str); |
| |
| /* Silently ignore unknown item */ |
| if ((i = skip_spoe_data(buf+idx, end)) == -1) { |
| client->status_code = SPOE_FRM_ERR_INVALID; |
| goto error; |
| } |
| idx += i; |
| } |
| } |
| |
| return idx; |
| |
| error: |
| return -1; |
| } |
| |
| /* Decode a NOTIFY frame received from HAProxy. It returns -1 if an error |
| * occurred, 0 if it must be must be ignored, otherwise the number of read |
| * bytes. */ |
| static int |
| handle_hanotify(struct spoe_frame *frame) |
| { |
| struct client *client = frame->client; |
| char *buf = frame->buf; |
| char *end = frame->buf + frame->len; |
| uint64_t stream_id, frame_id; |
| int i, idx = 0; |
| |
| /* Check frame type */ |
| if (buf[idx++] != SPOE_FRM_T_HAPROXY_NOTIFY) |
| goto ignore; |
| |
| DEBUG(frame->worker, "<%lu> Decode HAProxy NOTIFY frame", client->id); |
| |
| /* Retrieve flags */ |
| memcpy((char *)&(frame->flags), buf+idx, 4); |
| idx += 4; |
| |
| /* Fragmentation is not supported for DISCONNECT frame */ |
| if (!(frame->flags & SPOE_FRM_FL_FIN) && fragmentation == false) { |
| client->status_code = SPOE_FRM_ERR_FRAG_NOT_SUPPORTED; |
| goto error; |
| } |
| |
| /* Read the stream-id */ |
| if ((i = decode_spoe_varint(buf+idx, end, &stream_id)) == -1) |
| goto ignore; |
| idx += i; |
| |
| /* Read the frame-id */ |
| if ((i = decode_spoe_varint(buf+idx, end, &frame_id)) == -1) |
| goto ignore; |
| idx += i; |
| |
| if (frame->fragmented == true) { |
| if (frame->stream_id != (unsigned int)stream_id || |
| frame->frame_id != (unsigned int)frame_id) { |
| client->status_code = SPOE_FRM_ERR_INTERLACED_FRAMES; |
| goto error; |
| } |
| |
| if (frame->flags & SPOE_FRM_FL_ABRT) { |
| DEBUG(frame->worker, "<%lu> STREAM-ID=%u - FRAME-ID=%u" |
| " - Abort processing of a fragmented frame" |
| " - frag_len=%u - len=%u - offset=%u", |
| client->id, frame->stream_id, frame->frame_id, |
| frame->frag_len, frame->len, idx); |
| goto ignore; |
| } |
| DEBUG(frame->worker, "<%lu> STREAM-ID=%u - FRAME-ID=%u" |
| " - %s fragment of a fragmented frame received" |
| " - frag_len=%u - len=%u - offset=%u", |
| client->id, frame->stream_id, frame->frame_id, |
| (frame->flags & SPOE_FRM_FL_FIN) ? "last" : "next", |
| frame->frag_len, frame->len, idx); |
| } |
| else { |
| frame->stream_id = (unsigned int)stream_id; |
| frame->frame_id = (unsigned int)frame_id; |
| |
| DEBUG(frame->worker, "<%lu> STREAM-ID=%u - FRAME-ID=%u" |
| " - %s frame received" |
| " - frag_len=%u - len=%u - offset=%u", |
| client->id, frame->stream_id, frame->frame_id, |
| (frame->flags & SPOE_FRM_FL_FIN) ? "unfragmented" : "fragmented", |
| frame->frag_len, frame->len, idx); |
| |
| frame->fragmented = !(frame->flags & SPOE_FRM_FL_FIN); |
| } |
| |
| frame->offset = idx; |
| return idx; |
| |
| ignore: |
| return 0; |
| |
| error: |
| return -1; |
| } |
| |
| /* Encode a HELLO frame to send it to HAProxy. It returns the number of written |
| * bytes. */ |
| static int |
| prepare_agenthello(struct spoe_frame *frame) |
| { |
| struct client *client = frame->client; |
| char *buf = frame->buf; |
| char capabilities[64]; |
| int n, idx = 0; |
| unsigned int flags = SPOE_FRM_FL_FIN; |
| |
| DEBUG(frame->worker, "<%lu> Encode Agent HELLO frame", client->id); |
| frame->type = SPOA_FRM_T_AGENT; |
| |
| /* Frame Type */ |
| buf[idx++] = SPOE_FRM_T_AGENT_HELLO; |
| |
| /* Set flags */ |
| memcpy(buf+idx, (char *)&flags, 4); |
| idx += 4; |
| |
| /* No stream-id and frame-id for HELLO frames */ |
| buf[idx++] = 0; |
| buf[idx++] = 0; |
| |
| /* "version" K/V item */ |
| idx += encode_spoe_string("version", 7, buf+idx); |
| buf[idx++] = SPOE_DATA_T_STR; |
| idx += encode_spoe_string(SPOP_VERSION, SLEN(SPOP_VERSION), buf+idx); |
| DEBUG(frame->worker, "<%lu> Agent version : %s", |
| client->id, SPOP_VERSION); |
| |
| |
| /* "max-frame-size" K/V item */ |
| idx += encode_spoe_string("max-frame-size", 14, buf+idx); |
| buf[idx++] = SPOE_DATA_T_UINT32; |
| idx += encode_spoe_varint(client->max_frame_size, buf+idx); |
| DEBUG(frame->worker, "<%lu> Agent maximum frame size : %u", |
| client->id, client->max_frame_size); |
| |
| /* "capabilities" K/V item */ |
| idx += encode_spoe_string("capabilities", 12, buf+idx); |
| buf[idx++] = SPOE_DATA_T_STR; |
| |
| memset(capabilities, 0, sizeof(capabilities)); |
| n = 0; |
| |
| /* 1. Fragmentation capability ? */ |
| if (fragmentation == true) { |
| memcpy(capabilities, "fragmentation", 13); |
| n += 13; |
| } |
| /* 2. Pipelining capability ? */ |
| if (client->pipelining == true && n != 0) { |
| memcpy(capabilities + n, ", pipelining", 12); |
| n += 12; |
| } |
| else if (client->pipelining == true) { |
| memcpy(capabilities, "pipelining", 10); |
| n += 10; |
| } |
| /* 3. Async capability ? */ |
| if (client->async == true && n != 0) { |
| memcpy(capabilities + n, ", async", 7); |
| n += 7; |
| } |
| else if (client->async == true) { |
| memcpy(capabilities, "async", 5); |
| n += 5; |
| } |
| /* 4. Encode capabilities string */ |
| if (n != 0) |
| idx += encode_spoe_string(capabilities, n, buf+idx); |
| else |
| idx += encode_spoe_string(NULL, 0, buf+idx); |
| |
| DEBUG(frame->worker, "<%lu> Agent capabilities : %.*s", |
| client->id, n, capabilities); |
| |
| frame->len = idx; |
| return idx; |
| } |
| |
| /* Encode a DISCONNECT frame to send it to HAProxy. It returns the number of |
| * written bytes. */ |
| static int |
| prepare_agentdicon(struct spoe_frame *frame) |
| { |
| struct client *client = frame->client; |
| char *buf = frame->buf; |
| const char *reason; |
| int rlen, idx = 0; |
| unsigned int flags = SPOE_FRM_FL_FIN; |
| |
| DEBUG(frame->worker, "<%lu> Encode Agent DISCONNECT frame", client->id); |
| frame->type = SPOA_FRM_T_AGENT; |
| |
| if (client->status_code >= SPOE_FRM_ERRS) |
| client->status_code = SPOE_FRM_ERR_UNKNOWN; |
| reason = spoe_frm_err_reasons[client->status_code]; |
| rlen = strlen(reason); |
| |
| /* Frame type */ |
| buf[idx++] = SPOE_FRM_T_AGENT_DISCON; |
| |
| /* Set flags */ |
| memcpy(buf+idx, (char *)&flags, 4); |
| idx += 4; |
| |
| /* No stream-id and frame-id for DISCONNECT frames */ |
| buf[idx++] = 0; |
| buf[idx++] = 0; |
| |
| /* There are 2 mandatory items: "status-code" and "message" */ |
| |
| /* "status-code" K/V item */ |
| idx += encode_spoe_string("status-code", 11, buf+idx); |
| buf[idx++] = SPOE_DATA_T_UINT32; |
| idx += encode_spoe_varint(client->status_code, buf+idx); |
| DEBUG(frame->worker, "<%lu> Disconnect status code : %u", |
| client->id, client->status_code); |
| |
| /* "message" K/V item */ |
| idx += encode_spoe_string("message", 7, buf+idx); |
| buf[idx++] = SPOE_DATA_T_STR; |
| idx += encode_spoe_string(reason, rlen, buf+idx); |
| DEBUG(frame->worker, "<%lu> Disconnect message : %s", |
| client->id, reason); |
| |
| frame->len = idx; |
| return idx; |
| } |
| |
| /* Encode a ACK frame to send it to HAProxy. It returns the number of written |
| * bytes. */ |
| static int |
| prepare_agentack(struct spoe_frame *frame) |
| { |
| char *buf = frame->buf; |
| int idx = 0; |
| unsigned int flags = SPOE_FRM_FL_FIN; |
| |
| /* Be careful here, in async mode, frame->client can be NULL */ |
| |
| DEBUG(frame->worker, "Encode Agent ACK frame"); |
| frame->type = SPOA_FRM_T_AGENT; |
| |
| /* Frame type */ |
| buf[idx++] = SPOE_FRM_T_AGENT_ACK; |
| |
| /* Set flags */ |
| memcpy(buf+idx, (char *)&flags, 4); |
| idx += 4; |
| |
| /* Set stream-id and frame-id for ACK frames */ |
| idx += encode_spoe_varint(frame->stream_id, buf+idx); |
| idx += encode_spoe_varint(frame->frame_id, buf+idx); |
| |
| DEBUG(frame->worker, "STREAM-ID=%u - FRAME-ID=%u", |
| frame->stream_id, frame->frame_id); |
| |
| frame->len = idx; |
| return idx; |
| } |
| |
| static int |
| create_server_socket(void) |
| { |
| struct sockaddr_in listen_addr; |
| int fd, yes = 1; |
| |
| fd = socket(AF_INET, SOCK_STREAM, 0); |
| if (fd < 0) { |
| LOG(&null_worker, "Failed to create service socket : %m"); |
| return -1; |
| } |
| |
| memset(&listen_addr, 0, sizeof(listen_addr)); |
| listen_addr.sin_family = AF_INET; |
| listen_addr.sin_addr.s_addr = INADDR_ANY; |
| listen_addr.sin_port = htons(server_port); |
| |
| if (setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes)) < 0 || |
| setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &yes, sizeof(yes)) < 0) { |
| LOG(&null_worker, "Failed to set option on server socket : %m"); |
| return -1; |
| } |
| |
| if (bind(fd, (struct sockaddr *) &listen_addr, sizeof(listen_addr)) < 0) { |
| LOG(&null_worker, "Failed to bind server socket : %m"); |
| return -1; |
| } |
| |
| if (listen(fd, CONNECTION_BACKLOG) < 0) { |
| LOG(&null_worker, "Failed to listen on server socket : %m"); |
| return -1; |
| } |
| |
| return fd; |
| } |
| |
| static void |
| release_frame(struct spoe_frame *frame) |
| { |
| struct worker *worker; |
| |
| if (frame == NULL) |
| return; |
| |
| if (event_pending(&frame->process_frame_event, EV_TIMEOUT, NULL)) |
| event_del(&frame->process_frame_event); |
| |
| worker = frame->worker; |
| LIST_DEL(&frame->list); |
| if (frame->frag_buf) |
| free(frame->frag_buf); |
| memset(frame, 0, sizeof(*frame)+max_frame_size+4); |
| LIST_ADDQ(&worker->frames, &frame->list); |
| } |
| |
| static void |
| release_client(struct client *c) |
| { |
| struct spoe_frame *frame, *back; |
| |
| if (c == NULL) |
| return; |
| |
| DEBUG(c->worker, "<%lu> Release client", c->id); |
| |
| LIST_DEL(&c->by_worker); |
| c->worker->nbclients--; |
| |
| unuse_spoe_engine(c); |
| free(c->engine_id); |
| |
| if (event_pending(&c->read_frame_event, EV_READ, NULL)) |
| event_del(&c->read_frame_event); |
| if (event_pending(&c->write_frame_event, EV_WRITE, NULL)) |
| event_del(&c->write_frame_event); |
| |
| release_frame(c->incoming_frame); |
| release_frame(c->outgoing_frame); |
| list_for_each_entry_safe(frame, back, &c->processing_frames, list) { |
| release_frame(frame); |
| } |
| list_for_each_entry_safe(frame, back, &c->outgoing_frames, list) { |
| release_frame(frame); |
| } |
| |
| if (c->fd >= 0) |
| close(c->fd); |
| |
| free(c); |
| } |
| |
| static void |
| reset_frame(struct spoe_frame *frame) |
| { |
| if (frame == NULL) |
| return; |
| |
| if (frame->frag_buf) |
| free(frame->frag_buf); |
| |
| frame->type = SPOA_FRM_T_UNKNOWN; |
| frame->buf = (char *)(frame->data); |
| frame->offset = 0; |
| frame->len = 0; |
| frame->stream_id = 0; |
| frame->frame_id = 0; |
| frame->flags = 0; |
| frame->hcheck = false; |
| frame->fragmented = false; |
| frame->ip_score = -1; |
| frame->frag_buf = NULL; |
| frame->frag_len = 0; |
| LIST_INIT(&frame->list); |
| } |
| |
| static void |
| use_spoe_engine(struct client *client) |
| { |
| struct spoe_engine *eng; |
| |
| if (client->engine_id == NULL) |
| return; |
| |
| list_for_each_entry(eng, &client->worker->engines, list) { |
| if (!strcmp(eng->id, client->engine_id)) |
| goto end; |
| } |
| |
| if ((eng = malloc(sizeof(*eng))) == NULL) { |
| client->async = false; |
| return; |
| } |
| |
| eng->id = strdup(client->engine_id); |
| LIST_INIT(&eng->clients); |
| LIST_INIT(&eng->processing_frames); |
| LIST_INIT(&eng->outgoing_frames); |
| LIST_ADDQ(&client->worker->engines, &eng->list); |
| LOG(client->worker, "Add new SPOE engine '%s'", eng->id); |
| |
| end: |
| client->engine = eng; |
| LIST_ADDQ(&eng->clients, &client->by_engine); |
| } |
| |
| static void |
| unuse_spoe_engine(struct client *client) |
| { |
| struct spoe_engine *eng; |
| struct spoe_frame *frame, *back; |
| |
| if (client == NULL || client->engine == NULL) |
| return; |
| |
| eng = client->engine; |
| client->engine = NULL; |
| LIST_DEL(&client->by_engine); |
| if (!LIST_ISEMPTY(&eng->clients)) |
| return; |
| |
| LOG(client->worker, "Remove SPOE engine '%s'", eng->id); |
| LIST_DEL(&eng->list); |
| |
| list_for_each_entry_safe(frame, back, &eng->processing_frames, list) { |
| release_frame(frame); |
| } |
| list_for_each_entry_safe(frame, back, &eng->outgoing_frames, list) { |
| release_frame(frame); |
| } |
| free(eng->id); |
| free(eng); |
| } |
| |
| |
| static struct spoe_frame * |
| acquire_incoming_frame(struct client *client) |
| { |
| struct spoe_frame *frame; |
| |
| frame = client->incoming_frame; |
| if (frame != NULL) |
| return frame; |
| |
| if (LIST_ISEMPTY(&client->worker->frames)) { |
| if ((frame = calloc(1, sizeof(*frame)+max_frame_size+4)) == NULL) { |
| LOG(client->worker, "Failed to allocate new frame : %m"); |
| return NULL; |
| } |
| } |
| else { |
| frame = LIST_NEXT(&client->worker->frames, typeof(frame), list); |
| LIST_DEL(&frame->list); |
| } |
| |
| reset_frame(frame); |
| frame->worker = client->worker; |
| frame->engine = client->engine; |
| frame->client = client; |
| |
| if (event_assign(&frame->process_frame_event, client->worker->base, -1, |
| EV_TIMEOUT|EV_PERSIST, process_frame_cb, frame) < 0) { |
| LOG(client->worker, "Failed to create frame event"); |
| return NULL; |
| } |
| |
| client->incoming_frame = frame; |
| return frame; |
| } |
| |
| static struct spoe_frame * |
| acquire_outgoing_frame(struct client *client) |
| { |
| struct spoe_engine *engine = client->engine; |
| struct spoe_frame *frame = NULL; |
| |
| if (client->outgoing_frame != NULL) |
| frame = client->outgoing_frame; |
| else if (!LIST_ISEMPTY(&client->outgoing_frames)) { |
| frame = LIST_NEXT(&client->outgoing_frames, typeof(frame), list); |
| LIST_DEL(&frame->list); |
| client->outgoing_frame = frame; |
| } |
| else if (engine!= NULL && !LIST_ISEMPTY(&engine->outgoing_frames)) { |
| frame = LIST_NEXT(&engine->outgoing_frames, typeof(frame), list); |
| LIST_DEL(&frame->list); |
| client->outgoing_frame = frame; |
| } |
| return frame; |
| } |
| |
| static void |
| write_frame(struct client *client, struct spoe_frame *frame) |
| { |
| uint32_t netint; |
| |
| LIST_DEL(&frame->list); |
| |
| frame->buf = (char *)(frame->data); |
| frame->offset = 0; |
| netint = htonl(frame->len); |
| memcpy(frame->buf, &netint, 4); |
| |
| if (client != NULL) { /* HELLO or DISCONNECT frames */ |
| event_add(&client->write_frame_event, NULL); |
| |
| /* Try to process the frame as soon as possible, and always |
| * attach it to the client */ |
| if (client->async || client->pipelining) { |
| if (client->outgoing_frame == NULL) |
| client->outgoing_frame = frame; |
| else |
| LIST_ADD(&client->outgoing_frames, &frame->list); |
| } |
| else { |
| client->outgoing_frame = frame; |
| event_del(&client->read_frame_event); |
| } |
| } |
| else { /* for all other frames */ |
| if (frame->client == NULL) { /* async mode ! */ |
| LIST_ADDQ(&frame->engine->outgoing_frames, &frame->list); |
| list_for_each_entry(client, &frame->engine->clients, by_engine) |
| event_add(&client->write_frame_event, NULL); |
| } |
| else if (frame->client->pipelining) { |
| LIST_ADDQ(&frame->client->outgoing_frames, &frame->list); |
| event_add(&frame->client->write_frame_event, NULL); |
| } |
| else { |
| frame->client->outgoing_frame = frame; |
| event_add(&frame->client->write_frame_event, NULL); |
| event_del(&frame->client->read_frame_event); |
| } |
| } |
| } |
| |
| static void |
| process_incoming_frame(struct spoe_frame *frame) |
| { |
| struct client *client = frame->client; |
| |
| if (event_add(&frame->process_frame_event, &processing_delay) < 0) { |
| LOG(client->worker, "Failed to process incoming frame"); |
| release_frame(frame); |
| return; |
| } |
| |
| if (client->async) { |
| frame->client = NULL; |
| LIST_ADDQ(&frame->engine->processing_frames, &frame->list); |
| } |
| else if (client->pipelining) |
| LIST_ADDQ(&client->processing_frames, &frame->list); |
| else |
| event_del(&client->read_frame_event); |
| } |
| |
| static void |
| signal_cb(evutil_socket_t sig, short events, void *user_data) |
| { |
| struct event_base *base = user_data; |
| int i; |
| |
| DEBUG(&null_worker, "Stopping the server"); |
| |
| event_base_loopbreak(base); |
| DEBUG(&null_worker, "Main event loop stopped"); |
| |
| for (i = 0; i < num_workers; i++) { |
| event_base_loopbreak(workers[i].base); |
| DEBUG(&null_worker, "Event loop stopped for worker %02d", |
| workers[i].id); |
| } |
| } |
| |
| static void |
| worker_monitor_cb(evutil_socket_t fd, short events, void *arg) |
| { |
| struct worker *worker = arg; |
| |
| LOG(worker, "%u clients connected", worker->nbclients); |
| } |
| |
| static void |
| process_frame_cb(evutil_socket_t fd, short events, void *arg) |
| { |
| struct spoe_frame *frame = arg; |
| char *buf = frame->buf; |
| char *end = frame->buf + frame->len; |
| int idx = frame->offset; |
| |
| DEBUG(frame->worker, |
| "Process frame messages : STREAM-ID=%u - FRAME-ID=%u - length=%u bytes", |
| frame->stream_id, frame->frame_id, frame->len - frame->offset); |
| |
| /* Loop on messages */ |
| while (buf+idx < end) { |
| char *str; |
| uint64_t sz; |
| int nbargs, i; |
| |
| /* Decode the message name */ |
| idx += decode_spoe_string(buf+idx, end, &str, &sz); |
| if (str == NULL) |
| goto stop_processing; |
| |
| DEBUG(frame->worker, "Process SPOE Message '%.*s'", (int)sz, str); |
| |
| nbargs = buf[idx++]; /* Get the number of arguments */ |
| frame->offset = idx; /* Save index to handle errors and skip args */ |
| if (!memcmp(str, "check-client-ip", sz)) { |
| struct spoe_data data; |
| |
| memset(&data, 0, sizeof(data)); |
| |
| if (nbargs != 1) |
| goto skip_message; |
| |
| if ((i = decode_spoe_string(buf+idx, end, &str, &sz)) == -1) |
| goto stop_processing; |
| idx += i; |
| |
| if ((i = decode_spoe_data(buf+idx, end, &data)) == -1) |
| goto skip_message; |
| idx += i; |
| |
| if ((data.type & SPOE_DATA_T_MASK) == SPOE_DATA_T_IPV4) |
| check_ipv4_reputation(frame, &data.u.ipv4); |
| else if ((data.type & SPOE_DATA_T_MASK) == SPOE_DATA_T_IPV6) |
| check_ipv6_reputation(frame, &data.u.ipv6); |
| } |
| else { |
| skip_message: |
| idx = frame->offset; /* Restore index */ |
| |
| while (nbargs-- > 0) { |
| /* Silently ignore argument: its name and its value */ |
| if ((i = decode_spoe_string(buf+idx, end, &str, &sz)) == -1) |
| goto stop_processing; |
| idx += i; |
| if ((i = skip_spoe_data(buf+idx, end)) == -1) |
| goto stop_processing; |
| idx += i; |
| } |
| } |
| } |
| |
| stop_processing: |
| /* Prepare agent ACK frame */ |
| frame->buf = (char *)(frame->data) + 4; |
| frame->offset = 0; |
| frame->len = 0; |
| frame->flags = 0; |
| idx = prepare_agentack(frame); |
| |
| if (frame->ip_score != -1) { |
| DEBUG(frame->worker, "Add action : set variable ip_scode=%u", |
| frame->ip_score); |
| |
| buf[idx++] = SPOE_ACT_T_SET_VAR; /* Action type */ |
| buf[idx++] = 3; /* Number of args */ |
| buf[idx++] = SPOE_SCOPE_SESS; /* Arg 1: the scope */ |
| idx += encode_spoe_string("ip_score", 8, buf+idx); /* Arg 2: variable name */ |
| buf[idx++] = SPOE_DATA_T_UINT32; |
| idx += encode_spoe_varint(frame->ip_score, buf+idx); /* Arg 3: variable value */ |
| frame->len = idx; |
| } |
| write_frame(NULL, frame); |
| } |
| |
| static void |
| read_frame_cb(evutil_socket_t fd, short events, void *arg) |
| { |
| struct client *client = arg; |
| struct spoe_frame *frame; |
| uint32_t netint; |
| int n; |
| |
| DEBUG(client->worker, "<%lu> %s", client->id, __FUNCTION__); |
| if ((frame = acquire_incoming_frame(client)) == NULL) |
| goto close; |
| |
| frame->type = SPOA_FRM_T_HAPROXY; |
| if (frame->buf == (char *)(frame->data)) { |
| /* Read the frame length: frame->buf points on length part (frame->data) */ |
| n = read(client->fd, frame->buf+frame->offset, 4-frame->offset); |
| if (n <= 0) { |
| if (n < 0) |
| LOG(client->worker, "Failed to read frame length : %m"); |
| goto close; |
| } |
| frame->offset += n; |
| if (frame->offset != 4) |
| return; |
| memcpy(&netint, frame->buf, 4); |
| frame->buf += 4; |
| frame->offset = 0; |
| frame->len = ntohl(netint); |
| } |
| |
| /* Read the frame: frame->buf points on frame part (frame->data+4)*/ |
| n = read(client->fd, frame->buf + frame->offset, |
| frame->len - frame->offset); |
| if (n <= 0) { |
| if (n < 0) { |
| LOG(client->worker, "Frame to read frame : %m"); |
| goto close; |
| } |
| return; |
| } |
| frame->offset += n; |
| if (frame->offset != frame->len) |
| return; |
| frame->offset = 0; |
| |
| DEBUG(client->worker, "<%lu> New Frame of %u bytes received", |
| client->id, frame->len); |
| |
| switch (client->state) { |
| case SPOA_ST_CONNECTING: |
| if (handle_hahello(frame) < 0) { |
| LOG(client->worker, "Failed to decode HELLO frame"); |
| goto disconnect; |
| } |
| prepare_agenthello(frame); |
| goto write_frame; |
| |
| case SPOA_ST_PROCESSING: |
| if (frame->buf[0] == SPOE_FRM_T_HAPROXY_DISCON) { |
| client->state = SPOA_ST_DISCONNECTING; |
| goto disconnecting; |
| } |
| n = handle_hanotify(frame); |
| if (n < 0) { |
| LOG(client->worker, "Failed to decode frame: %s", |
| spoe_frm_err_reasons[client->status_code]); |
| goto disconnect; |
| } |
| if (n == 0) { |
| LOG(client->worker, "Ignore invalid/unknown/aborted frame"); |
| goto ignore_frame; |
| } |
| else |
| goto process_frame; |
| |
| case SPOA_ST_DISCONNECTING: |
| disconnecting: |
| if (handle_hadiscon(frame) < 0) { |
| LOG(client->worker, "Failed to decode DISCONNECT frame"); |
| goto disconnect; |
| } |
| if (client->status_code != SPOE_FRM_ERR_NONE) |
| LOG(client->worker, "<%lu> Peer closed connection: %s", |
| client->id, spoe_frm_err_reasons[client->status_code]); |
| client->status_code = SPOE_FRM_ERR_NONE; |
| goto disconnect; |
| } |
| |
| ignore_frame: |
| reset_frame(frame); |
| return; |
| |
| process_frame: |
| if (frame->fragmented == true) { |
| char *buf; |
| size_t len = frame->len - frame->offset; |
| |
| buf = realloc(frame->frag_buf, frame->frag_len + len); |
| if (buf == NULL) { |
| client->status_code = SPOE_FRM_ERR_RES; |
| goto disconnect; |
| } |
| memcpy(buf + frame->frag_len, frame->buf + frame->offset, len); |
| frame->frag_buf = buf; |
| frame->frag_len += len; |
| |
| if (!(frame->flags & SPOE_FRM_FL_FIN)) { |
| /* Wait for next fragments */ |
| frame->buf = (char *)(frame->data); |
| frame->offset = 0; |
| frame->len = 0; |
| frame->flags = 0; |
| return; |
| } |
| |
| frame->buf = frame->frag_buf; |
| frame->len = frame->frag_len; |
| frame->offset = 0; |
| /* fall through */ |
| } |
| |
| process_incoming_frame(frame); |
| client->incoming_frame = NULL; |
| return; |
| |
| write_frame: |
| write_frame(client, frame); |
| client->incoming_frame = NULL; |
| return; |
| |
| disconnect: |
| client->state = SPOA_ST_DISCONNECTING; |
| if (prepare_agentdicon(frame) < 0) { |
| LOG(client->worker, "Failed to encode DISCONNECT frame"); |
| goto close; |
| } |
| goto write_frame; |
| |
| close: |
| release_client(client); |
| } |
| |
| static void |
| write_frame_cb(evutil_socket_t fd, short events, void *arg) |
| { |
| struct client *client = arg; |
| struct spoe_frame *frame; |
| int n; |
| |
| DEBUG(client->worker, "<%lu> %s", client->id, __FUNCTION__); |
| if ((frame = acquire_outgoing_frame(client)) == NULL) { |
| event_del(&client->write_frame_event); |
| return; |
| } |
| |
| if (frame->buf == (char *)(frame->data)) { |
| /* Write the frame length: frame->buf points on length part (frame->data) */ |
| n = write(client->fd, frame->buf+frame->offset, 4-frame->offset); |
| if (n <= 0) { |
| if (n < 0) |
| LOG(client->worker, "Failed to write frame length : %m"); |
| goto close; |
| } |
| frame->offset += n; |
| if (frame->offset != 4) |
| return; |
| frame->buf += 4; |
| frame->offset = 0; |
| } |
| |
| /* Write the frame: frame->buf points on frame part (frame->data+4)*/ |
| n = write(client->fd, frame->buf + frame->offset, |
| frame->len - frame->offset); |
| if (n <= 0) { |
| if (n < 0) { |
| LOG(client->worker, "Failed to write frame : %m"); |
| goto close; |
| } |
| return; |
| } |
| frame->offset += n; |
| if (frame->offset != frame->len) |
| return; |
| |
| DEBUG(client->worker, "<%lu> Frame of %u bytes send", |
| client->id, frame->len); |
| |
| switch (client->state) { |
| case SPOA_ST_CONNECTING: |
| if (frame->hcheck == true) { |
| DEBUG(client->worker, |
| "<%lu> Close client after healthcheck", |
| client->id); |
| goto close; |
| } |
| client->state = SPOA_ST_PROCESSING; |
| break; |
| |
| case SPOA_ST_PROCESSING: |
| break; |
| |
| case SPOA_ST_DISCONNECTING: |
| goto close; |
| } |
| |
| release_frame(frame); |
| client->outgoing_frame = NULL; |
| if (!client->async && !client->pipelining) { |
| event_del(&client->write_frame_event); |
| event_add(&client->read_frame_event, NULL); |
| } |
| return; |
| |
| close: |
| release_client(client); |
| } |
| |
| static void |
| accept_cb(int listener, short event, void *arg) |
| { |
| struct worker *worker; |
| struct client *client; |
| int fd; |
| |
| worker = &workers[clicount++ % num_workers]; |
| |
| if ((fd = accept(listener, NULL, NULL)) < 0) { |
| if (errno != EAGAIN && errno != EWOULDBLOCK) |
| LOG(worker, "Failed to accept client connection : %m"); |
| return; |
| } |
| |
| DEBUG(&null_worker, |
| "<%lu> New Client connection accepted and assigned to worker %02d", |
| clicount, worker->id); |
| |
| if (evutil_make_socket_nonblocking(fd) < 0) { |
| LOG(&null_worker, "Failed to set client socket to non-blocking : %m"); |
| close(fd); |
| return; |
| } |
| |
| if ((client = calloc(1, sizeof(*client))) == NULL) { |
| LOG(&null_worker, "Failed to allocate memory for client state : %m"); |
| close(fd); |
| return; |
| } |
| |
| client->id = clicount; |
| client->fd = fd; |
| client->worker = worker; |
| client->state = SPOA_ST_CONNECTING; |
| client->status_code = SPOE_FRM_ERR_NONE; |
| client->max_frame_size = max_frame_size; |
| client->engine = NULL; |
| client->pipelining = false; |
| client->async = false; |
| client->incoming_frame = NULL; |
| client->outgoing_frame = NULL; |
| LIST_INIT(&client->processing_frames); |
| LIST_INIT(&client->outgoing_frames); |
| |
| LIST_ADDQ(&worker->clients, &client->by_worker); |
| |
| worker->nbclients++; |
| |
| if (event_assign(&client->read_frame_event, worker->base, fd, |
| EV_READ|EV_PERSIST, read_frame_cb, client) < 0 || |
| event_assign(&client->write_frame_event, worker->base, fd, |
| EV_WRITE|EV_PERSIST, write_frame_cb, client) < 0) { |
| LOG(&null_worker, "Failed to create client events"); |
| release_client(client); |
| return; |
| } |
| event_add(&client->read_frame_event, NULL); |
| } |
| |
| static void * |
| worker_function(void *data) |
| { |
| struct client *client, *cback; |
| struct spoe_frame *frame, *fback; |
| struct worker *worker = data; |
| |
| DEBUG(worker, "Worker ready to process client messages"); |
| event_base_dispatch(worker->base); |
| |
| list_for_each_entry_safe(client, cback, &worker->clients, by_worker) { |
| release_client(client); |
| } |
| |
| list_for_each_entry_safe(frame, fback, &worker->frames, list) { |
| LIST_DEL(&frame->list); |
| free(frame); |
| } |
| |
| event_free(worker->monitor_event); |
| event_base_free(worker->base); |
| DEBUG(worker, "Worker is stopped"); |
| pthread_exit(&null_worker); |
| } |
| |
| |
| static int |
| parse_processing_delay(const char *str) |
| { |
| unsigned long value; |
| |
| value = 0; |
| while (1) { |
| unsigned int j; |
| |
| j = *str - '0'; |
| if (j > 9) |
| break; |
| str++; |
| value *= 10; |
| value += j; |
| } |
| |
| switch (*str) { |
| case '\0': /* no unit = millisecond */ |
| value *= 1000; |
| break; |
| case 's': /* second */ |
| value *= 1000000; |
| str++; |
| break; |
| case 'm': /* millisecond : "ms" */ |
| if (str[1] != 's') |
| return -1; |
| value *= 1000; |
| str += 2; |
| break; |
| case 'u': /* microsecond : "us" */ |
| if (str[1] != 's') |
| return -1; |
| str += 2; |
| break; |
| default: |
| return -1; |
| } |
| if (*str) |
| return -1; |
| |
| processing_delay.tv_sec = (time_t)(value / 1000000); |
| processing_delay.tv_usec = (suseconds_t)(value % 1000000); |
| return 0; |
| } |
| |
| |
| static void |
| usage(char *prog) |
| { |
| fprintf(stderr, |
| "Usage : %s [OPTION]...\n" |
| " -h Print this message\n" |
| " -d Enable the debug mode\n" |
| " -m <max-frame-size> Specify the maximum frame size (default : %u)\n" |
| " -p <port> Specify the port to listen on (default : %d)\n" |
| " -n <num-workers> Specify the number of workers (default : %d)\n" |
| " -c <capability> Enable the support of the specified capability\n" |
| " -t <time> Set a delay to process a message (default: 0)\n" |
| " The value is specified in milliseconds by default,\n" |
| " but can be in any other unit if the number is suffixed\n" |
| " by a unit (us, ms, s)\n" |
| "\n" |
| " Supported capabilities: fragmentation, pipelining, async\n", |
| prog, MAX_FRAME_SIZE, DEFAULT_PORT, NUM_WORKERS); |
| } |
| |
| int |
| main(int argc, char **argv) |
| { |
| struct event_base *base = NULL; |
| struct event *signal_event = NULL, *accept_event = NULL; |
| int opt, i, fd = -1; |
| |
| // TODO: add '-t <processing-time>' option |
| while ((opt = getopt(argc, argv, "hdm:n:p:c:t:")) != -1) { |
| switch (opt) { |
| case 'h': |
| usage(argv[0]); |
| return EXIT_SUCCESS; |
| case 'd': |
| debug = true; |
| break; |
| case 'm': |
| max_frame_size = atoi(optarg); |
| break; |
| case 'n': |
| num_workers = atoi(optarg); |
| break; |
| case 'p': |
| server_port = atoi(optarg); |
| break; |
| case 'c': |
| if (!strcmp(optarg, "pipelining")) |
| pipelining = true; |
| else if (!strcmp(optarg, "async")) |
| async = true; |
| else if (!strcmp(optarg, "fragmentation")) |
| fragmentation = true; |
| else |
| fprintf(stderr, "WARNING: unsupported capability '%s'\n", optarg); |
| break; |
| case 't': |
| if (!parse_processing_delay(optarg)) |
| break; |
| fprintf(stderr, "%s: failed to parse time '%s'.\n", argv[0], optarg); |
| fprintf(stderr, "Try '%s -h' for more information.\n", argv[0]); |
| return EXIT_FAILURE; |
| default: |
| usage(argv[0]); |
| return EXIT_FAILURE; |
| } |
| } |
| |
| if (num_workers <= 0) { |
| LOG(&null_worker, "%s : Invalid number of workers '%d'\n", |
| argv[0], num_workers); |
| goto error; |
| } |
| |
| if (server_port <= 0) { |
| LOG(&null_worker, "%s : Invalid port '%d'\n", |
| argv[0], server_port); |
| goto error; |
| } |
| |
| |
| if (evthread_use_pthreads() < 0) { |
| LOG(&null_worker, "No pthreads support for libevent"); |
| goto error; |
| } |
| |
| if ((base = event_base_new()) == NULL) { |
| LOG(&null_worker, "Failed to initialize libevent : %m"); |
| goto error; |
| } |
| |
| signal(SIGPIPE, SIG_IGN); |
| |
| if ((fd = create_server_socket()) < 0) { |
| LOG(&null_worker, "Failed to create server socket"); |
| goto error; |
| } |
| if (evutil_make_socket_nonblocking(fd) < 0) { |
| LOG(&null_worker, "Failed to set server socket to non-blocking"); |
| goto error; |
| } |
| |
| if ((workers = calloc(num_workers, sizeof(*workers))) == NULL) { |
| LOG(&null_worker, "Failed to set allocate memory for workers"); |
| goto error; |
| } |
| |
| for (i = 0; i < num_workers; ++i) { |
| struct worker *w = &workers[i]; |
| |
| w->id = i+1; |
| w->nbclients = 0; |
| LIST_INIT(&w->engines); |
| LIST_INIT(&w->clients); |
| LIST_INIT(&w->frames); |
| |
| if ((w->base = event_base_new()) == NULL) { |
| LOG(&null_worker, |
| "Failed to initialize libevent for worker %02d : %m", |
| w->id); |
| goto error; |
| } |
| |
| w->monitor_event = event_new(w->base, fd, EV_PERSIST, |
| worker_monitor_cb, (void *)w); |
| if (w->monitor_event == NULL || |
| event_add(w->monitor_event, (struct timeval[]){{5,0}}) < 0) { |
| LOG(&null_worker, |
| "Failed to create monitor event for worker %02d", |
| w->id); |
| goto error; |
| } |
| |
| if (pthread_create(&w->thread, NULL, worker_function, (void *)w)) { |
| LOG(&null_worker, |
| "Failed to start thread for worker %02d : %m", |
| w->id); |
| } |
| DEBUG(&null_worker, "Worker %02d initialized", w->id); |
| } |
| |
| accept_event = event_new(base, fd, EV_READ|EV_PERSIST, accept_cb, |
| (void *)base); |
| if (accept_event == NULL || event_add(accept_event, NULL) < 0) { |
| LOG(&null_worker, "Failed to create accept event : %m"); |
| } |
| |
| signal_event = evsignal_new(base, SIGINT, signal_cb, (void *)base); |
| if (signal_event == NULL || event_add(signal_event, NULL) < 0) { |
| LOG(&null_worker, "Failed to create signal event : %m"); |
| } |
| |
| DEBUG(&null_worker, |
| "Server is ready" |
| " [fragmentation=%s - pipelining=%s - async=%s - debug=%s - max-frame-size=%u]", |
| (fragmentation?"true":"false"), (pipelining?"true":"false"), (async?"true":"false"), |
| (debug?"true":"false"), max_frame_size); |
| event_base_dispatch(base); |
| |
| for (i = 0; i < num_workers; i++) { |
| struct worker *w = &workers[i]; |
| |
| pthread_join(w->thread, NULL); |
| DEBUG(&null_worker, "Worker %02d terminated", w->id); |
| } |
| |
| free(workers); |
| event_free(signal_event); |
| event_free(accept_event); |
| event_base_free(base); |
| close(fd); |
| return EXIT_SUCCESS; |
| |
| error: |
| if (workers != NULL) |
| free(workers); |
| if (signal_event != NULL) |
| event_free(signal_event); |
| if (accept_event != NULL) |
| event_free(accept_event); |
| if (base != NULL) |
| event_base_free(base); |
| if (fd != -1) |
| close(fd); |
| return EXIT_FAILURE; |
| } |