gvpe/src/conf.h

/*
    conf.h -- configuration database
    Copyright (C) 2003-2008 Marc Lehmann <gvpe@schmorp.de>
 
    This file is part of GVPE.

    GVPE is free software; you can redistribute it and/or modify it
    under the terms of the GNU General Public License as published by the
    Free Software Foundation; either version 3 of the License, or (at your
    option) any later version.
   
    This program is distributed in the hope that it will be useful, but
    WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General
    Public License for more details.
   
    You should have received a copy of the GNU General Public License along
    with this program; if not, see <http://www.gnu.org/licenses/>.
   
    Additional permission under GNU GPL version 3 section 7
   
    If you modify this Program, or any covered work, by linking or
    combining it with the OpenSSL project's OpenSSL library (or a modified
    version of that library), containing parts covered by the terms of the
    OpenSSL or SSLeay licenses, the licensors of this Program grant you
    additional permission to convey the resulting work.  Corresponding
    Source for a non-source form of such a combination shall include the
    source code for the parts of OpenSSL used as well as that of the
    covered work.
*/

#ifndef GVPE_CONF_H__
#define GVPE_CONF_H__

#include <vector>

#include <openssl/rsa.h>

#include "slog.h"
#include "global.h"

#define DEFAULT_REKEY                   3607    // interval between rekeys
#define DEFAULT_RESEED                  3613    // interval between rng reseeds
#define DEFAULT_KEEPALIVE               60      // one keepalive/minute (it's just 8 bytes...)
#define DEFAULT_UDPPORT                 655     // same as tinc, conflicts would be rare
#define DEFAULT_MTU                     1500    // let's ether-net
#define DEFAULT_MAX_RETRY               3600    // retry at least this often
#define DEFAULT_MAX_TTL                 60      // packets expire after this many seconds
#define DEFAULT_MAX_QUEUE               512     // never queue more than this many packets
 
#define DEFAULT_DNS_TIMEOUT_FACTOR      8.F     // initial retry timeout multiple
#define DEFAULT_DNS_SEND_INTERVAL       .01F    // minimum send interval
#define DEFAULT_DNS_OVERLAP_FACTOR      .5F     // RTT * LATENCY_FACTOR == sending rate
#define DEFAULT_DNS_MAX_OUTSTANDING     100     // max. number of outstanding requests

enum
{
  PROT_UDPv4  = 0x01, // udp over ipv4
  PROT_IPv4   = 0x02, // generic ip protocol
  PROT_TCPv4  = 0x04, // tcp over ipv4 (server)
  PROT_ICMPv4 = 0x08, // icmp over ipv4
  PROT_DNSv4  = 0x10, // dns tunnel ipv4 (server)
  PROT_ALL    = 0x1f
};

#define PROT_RELIABLE (PROT_TCPv4 | PROT_DNSv4)
#define PROT_SLOW     PROT_DNSv4

// select the "best" protocol of the available ones
u8 best_protocol (u8 protset);
const char *strprotocol (u8 protocol);

struct conf_node
{
  int id;         // the id of this node, a 12-bit-number

  RSA *rsa_key;   // his public key
  char *nodename; // nodename, an internal nickname.
  char *hostname; // hostname, if known, or NULL.
  char *if_up_data;
#if ENABLE_DNS
  char *domain;   // dns tunnel domain
#endif
  char *dns_hostname;
  u16 dns_port;

  u8 protocols;   // protocols this host can send & receive
  u16 udp_port, tcp_port;   // the port to bind to
  int max_retry;
  double max_ttl;   // packets expire after this many seconds
  int max_queue;    // maixmum send queue length

  enum connectmode { C_ONDEMAND, C_NEVER, C_ALWAYS, C_DISABLED } connectmode;
  bool compress;
  bool inherit_tos; // inherit TOS in packets send to this destination

  vector<const char *> allow_direct;
  vector<const char *> deny_direct;

  u32 routerprio;

  u8 connectable_protocols () const
  {
    u8 protocols = this->protocols;

    // mask out endpoints we can't connect to
    if (!udp_port) protocols &= ~PROT_UDPv4;
    if (!tcp_port) protocols &= ~PROT_TCPv4;
    if (!dns_port) protocols &= ~PROT_DNSv4;

    return protocols;
  }

  bool may_direct (struct conf_node *other);
  void finalise ();

  void print ();

  ~conf_node ();
};

struct configuration
{
  typedef vector<conf_node *> node_vector;
  node_vector nodes;
  conf_node default_node;
  conf_node *thisnode;
  char *seed_dev;   // the randomd evice to use for seeding
  double reseed;    // the interval between additional seeds
  int mtu;          // the mtu used for outgoing tunnel packets
  int nfmark;       // the SO_MARK // netfilter mark // fwmark
  double rekey;     // rekey interval
  double keepalive; // keepalive probes interval
  char *ifname;     // the interface name (tap0 ...)
  bool ifpersist;   // should the interface be persistent
  char *prikeyfile;
  RSA *rsa_key;     // our private rsa key
  loglevel llevel;
  u8 ip_proto;      // the ip protocol to use
  uid_t change_uid; // the uid of the user to switch to, or 0
  gid_t change_gid; // the gid of the user to switch to, or 0
  char *change_root;// the path to chroot to, "/" == anonymous
#if ENABLE_ICMP
  u8 icmp_type;     // the icmp type for the icmp-protocol
#endif

  char *script_if_up;
  char *script_node_up;
  char *script_node_change;
  char *script_node_down;
  char *pidfilename;

#if ENABLE_HTTP_PROXY
  char *proxy_auth;     // login:password
  char *proxy_host;     // the proxy hostname, e.g. proxy1.example.net
  u16 proxy_port;       // the proxy port, e.g. 3128
#endif

#if ENABLE_DNS
  char *dns_forw_host;
  bool dns_case_preserving;
  u16 dns_forw_port;
  float dns_timeout_factor;
  float dns_send_interval;
  float dns_overlap_factor;
  int dns_max_outstanding;
#endif

  void init ();
  void cleanup ();
  void clear ();

  // create a filename from string, replacing %s by the nodename
  // and using relative paths under confbase.
  char *config_filename (const char *name, const char *dflt = 0);

  void print ();

  configuration ();
  ~configuration ();
};

struct configuration_parser
{
  configuration &conf;

  bool need_keys;
  conf_node *node;

  int argc;
  char **argv;

  configuration_parser (configuration &conf, bool need_keys, int argc, char **argv);

  void parse_file (const char *fname);
  const char *parse_line (char *line);
  void parse_argv ();
};

extern struct configuration conf;

#define THISNODE ::conf.thisnode

#endif

Revision:	1.43
Committed:	Sat Jul 13 04:10:29 2013 UTC (10 years, 10 months ago) by root
Content type:	text/plain
Branch:	MAIN
CVS Tags:	rel-2_25
Changes since 1.42:	+4 -1 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	pcg	1.1	/*
2			conf.h -- configuration database
3	pcg	1.34	Copyright (C) 2003-2008 Marc Lehmann <gvpe@schmorp.de>
4	pcg	1.1
5	pcg	1.25	This file is part of GVPE.
6
7	pcg	1.34	GVPE is free software; you can redistribute it and/or modify it
8			under the terms of the GNU General Public License as published by the
9			Free Software Foundation; either version 3 of the License, or (at your
10			option) any later version.
11
12			This program is distributed in the hope that it will be useful, but
13			WITHOUT ANY WARRANTY; without even the implied warranty of
14			MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General
15			Public License for more details.
16
17			You should have received a copy of the GNU General Public License along
18			with this program; if not, see <http://www.gnu.org/licenses/>.
19
20			Additional permission under GNU GPL version 3 section 7
21
22			If you modify this Program, or any covered work, by linking or
23			combining it with the OpenSSL project's OpenSSL library (or a modified
24			version of that library), containing parts covered by the terms of the
25			OpenSSL or SSLeay licenses, the licensors of this Program grant you
26			additional permission to convey the resulting work. Corresponding
27			Source for a non-source form of such a combination shall include the
28			source code for the parts of OpenSSL used as well as that of the
29			covered work.
30	pcg	1.1	*/
31
32	pcg	1.27	#ifndef GVPE_CONF_H__
33			#define GVPE_CONF_H__
34	pcg	1.1
35	pcg	1.19	#include <vector>
36
37	pcg	1.11	#include <openssl/rsa.h>
38	pcg	1.1
39	pcg	1.2	#include "slog.h"
40	pcg	1.1	#include "global.h"
41
42	root	1.43	#define DEFAULT_REKEY 3607 // interval between rekeys
43			#define DEFAULT_RESEED 3613 // interval between rng reseeds
44	root	1.42	#define DEFAULT_KEEPALIVE 60 // one keepalive/minute (it's just 8 bytes...)
45			#define DEFAULT_UDPPORT 655 // same as tinc, conflicts would be rare
46			#define DEFAULT_MTU 1500 // let's ether-net
47			#define DEFAULT_MAX_RETRY 3600 // retry at least this often
48			#define DEFAULT_MAX_TTL 60 // packets expire after this many seconds
49			#define DEFAULT_MAX_QUEUE 512 // never queue more than this many packets
50	pcg	1.28
51			#define DEFAULT_DNS_TIMEOUT_FACTOR 8.F // initial retry timeout multiple
52			#define DEFAULT_DNS_SEND_INTERVAL .01F // minimum send interval
53			#define DEFAULT_DNS_OVERLAP_FACTOR .5F // RTT * LATENCY_FACTOR == sending rate
54			#define DEFAULT_DNS_MAX_OUTSTANDING 100 // max. number of outstanding requests
55	pcg	1.8
56	pcg	1.30	enum
57			{
58	pcg	1.13	PROT_UDPv4 = 0x01, // udp over ipv4
59			PROT_IPv4 = 0x02, // generic ip protocol
60	pcg	1.22	PROT_TCPv4 = 0x04, // tcp over ipv4 (server)
61	pcg	1.14	PROT_ICMPv4 = 0x08, // icmp over ipv4
62	pcg	1.22	PROT_DNSv4 = 0x10, // dns tunnel ipv4 (server)
63	root	1.41	PROT_ALL = 0x1f
64	pcg	1.8	};
65	pcg	1.1
66	pcg	1.26	#define PROT_RELIABLE (PROT_TCPv4 \| PROT_DNSv4)
67			#define PROT_SLOW PROT_DNSv4
68
69	pcg	1.10	// select the "best" protocol of the available ones
70			u8 best_protocol (u8 protset);
71			const char *strprotocol (u8 protocol);
72
73	pcg	1.30	struct conf_node
74			{
75	pcg	1.1	int id; // the id of this node, a 12-bit-number
76
77			RSA *rsa_key; // his public key
78			char *nodename; // nodename, an internal nickname.
79			char *hostname; // hostname, if known, or NULL.
80	pcg	1.29	char *if_up_data;
81	pcg	1.22	#if ENABLE_DNS
82			char *domain; // dns tunnel domain
83	pcg	1.24	#endif
84			char *dns_hostname;
85	pcg	1.22	u16 dns_port;
86	pcg	1.8
87	pcg	1.9	u8 protocols; // protocols this host can send & receive
88	pcg	1.22	u16 udp_port, tcp_port; // the port to bind to
89	pcg	1.21	int max_retry;
90	pcg	1.33	double max_ttl; // packets expire after this many seconds
91			int max_queue; // maixmum send queue length
92	pcg	1.1
93	pcg	1.7	enum connectmode { C_ONDEMAND, C_NEVER, C_ALWAYS, C_DISABLED } connectmode;
94	pcg	1.1	bool compress;
95	pcg	1.4	bool inherit_tos; // inherit TOS in packets send to this destination
96	pcg	1.1
97	pcg	1.32	vector<const char *> allow_direct;
98			vector<const char *> deny_direct;
99
100	pcg	1.1	u32 routerprio;
101	pcg	1.32
102	pcg	1.35	u8 connectable_protocols () const
103			{
104			u8 protocols = this->protocols;
105
106			// mask out endpoints we can't connect to
107			if (!udp_port) protocols &= ~PROT_UDPv4;
108			if (!tcp_port) protocols &= ~PROT_TCPv4;
109			if (!dns_port) protocols &= ~PROT_DNSv4;
110
111			return protocols;
112			}
113
114			bool may_direct (struct conf_node *other);
115			void finalise ();
116	pcg	1.1
117			void print ();
118
119	pcg	1.12	~conf_node ();
120	pcg	1.1	};
121
122	pcg	1.30	struct configuration
123			{
124	pcg	1.1	typedef vector<conf_node *> node_vector;
125			node_vector nodes;
126			conf_node default_node;
127			conf_node *thisnode;
128	root	1.43	char *seed_dev; // the randomd evice to use for seeding
129			double reseed; // the interval between additional seeds
130	pcg	1.6	int mtu; // the mtu used for outgoing tunnel packets
131	pcg	1.36	int nfmark; // the SO_MARK // netfilter mark // fwmark
132	pcg	1.6	double rekey; // rekey interval
133			double keepalive; // keepalive probes interval
134			char *ifname; // the interface name (tap0 ...)
135			bool ifpersist; // should the interface be persistent
136	pcg	1.1	char *prikeyfile;
137	pcg	1.9	RSA *rsa_key; // our private rsa key
138	pcg	1.2	loglevel llevel;
139	pcg	1.13	u8 ip_proto; // the ip protocol to use
140	root	1.42	uid_t change_uid; // the uid of the user to switch to, or 0
141			gid_t change_gid; // the gid of the user to switch to, or 0
142			char *change_root;// the path to chroot to, "/" == anonymous
143	pcg	1.15	#if ENABLE_ICMP
144	pcg	1.13	u8 icmp_type; // the icmp type for the icmp-protocol
145	pcg	1.15	#endif
146	pcg	1.1
147			char *script_if_up;
148			char *script_node_up;
149	pcg	1.37	char *script_node_change;
150	pcg	1.1	char *script_node_down;
151	pcg	1.20	char *pidfilename;
152	pcg	1.12
153			#if ENABLE_HTTP_PROXY
154			char *proxy_auth; // login:password
155			char *proxy_host; // the proxy hostname, e.g. proxy1.example.net
156			u16 proxy_port; // the proxy port, e.g. 3128
157			#endif
158	pcg	1.23
159	pcg	1.24	#if ENABLE_DNS
160	pcg	1.22	char *dns_forw_host;
161	root	1.38	bool dns_case_preserving;
162	pcg	1.22	u16 dns_forw_port;
163	pcg	1.28	float dns_timeout_factor;
164			float dns_send_interval;
165			float dns_overlap_factor;
166			int dns_max_outstanding;
167	pcg	1.24	#endif
168	pcg	1.1
169			void init ();
170			void cleanup ();
171	pcg	1.30	void clear ();
172	pcg	1.1
173			// create a filename from string, replacing %s by the nodename
174			// and using relative paths under confbase.
175	root	1.38	char config_filename (const char name, const char *dflt = 0);
176	pcg	1.1
177			void print ();
178
179			configuration ();
180			~configuration ();
181			};
182
183	pcg	1.30	struct configuration_parser
184			{
185			configuration &conf;
186
187			bool need_keys;
188			conf_node *node;
189
190			int argc;
191			char **argv;
192
193			configuration_parser (configuration &conf, bool need_keys, int argc, char **argv);
194
195	root	1.38	void parse_file (const char *fname);
196	pcg	1.30	const char parse_line (char line);
197			void parse_argv ();
198			};
199
200	pcg	1.1	extern struct configuration conf;
201
202			#define THISNODE ::conf.thisnode
203
204			#endif
205