gvpe/src/vpn_tcp.C

/*
    vpn_tcp.C -- handle the tcp part of the protocol.
    Copyright (C) 2003-2007 Marc Lehmann <gvpe@schmorp.de>
 
    This file is part of GVPE.

    GVPE is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your option) any later version.
 
    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.
 
    You should have received a copy of the GNU General Public License
    along with gvpe; if not, write to the Free Software
    Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
*/

#include "config.h"

#if ENABLE_TCP

// tcp processing is extremely ugly, since the vpe protocol is simply
// designed for unreliable datagram networks. tcp is implemented by
// multiplexing packets over tcp. errors are completely ignored, as we
// rely on the higher level protocol to time out and reconnect.

#include <cstring>

#include <sys/types.h>
#include <sys/socket.h>
#include <sys/wait.h>
#include <sys/uio.h>
#include <errno.h>
#include <time.h>
#include <unistd.h>
#include <fcntl.h>

#include <map>

#include "netcompat.h"

#include "vpn.h"

#if ENABLE_HTTP_PROXY
# include "conf.h"
#endif

struct tcp_connection;

struct lt_sockinfo
{
  bool operator()(const sockinfo *a, const sockinfo *b) const
  {
    return *a < *b;
  }
};

struct tcp_si_map : public map<const sockinfo *, tcp_connection *, lt_sockinfo> {
  void cleaner_cb (ev::timer &w, int revents); ev::timer cleaner;

  tcp_si_map ()
  : cleaner(this, &tcp_si_map::cleaner_cb)
  {
    cleaner.start (300, 300);
  }

} tcp_si;

struct tcp_connection : ev::io {
  tstamp last_activity;
  const sockinfo si;
  vpn &v;
  bool active; // this connection has been actively established
  enum { ERROR, IDLE, CONNECTING, CONNECTING_PROXY, ESTABLISHED } state;

  vpn_packet *r_pkt;
  u32 r_len, r_ofs;

  vpn_packet *w_pkt;
  u32 w_len, w_ofs;

#if ENABLE_HTTP_PROXY
  char *proxy_req;
  int proxy_req_len;
#endif

  void tcpv4_ev (ev::io &w, int revents);

  bool send_packet (vpn_packet *pkt, int tos);
  bool write_packet ();

  void error (); // abort conenction && cleanup

  operator tcp_si_map::value_type()
  {
    return tcp_si_map::value_type (&si, this);
  }

  tcp_connection (int fd_, const sockinfo &si_, vpn &v_);
  ~tcp_connection ();
};

void tcp_si_map::cleaner_cb (ev::timer &w, int revents)
{
  tstamp to = ev::ev_now () - ::conf.keepalive - 30 - 60;

  for (iterator i = begin (); i != end(); )
    if (i->second->last_activity >= to)
      ++i;
    else
      {
        erase (i);
        i = begin ();
      }
}

void
vpn::tcpv4_ev (ev::io &w, int revents)
{
  if (revents & EV_READ)
    {
      struct sockaddr_in sa;
      socklen_t sa_len = sizeof (sa);
      int len;

      int fd = accept (w.fd, (sockaddr *)&sa, &sa_len);

      if (fd >= 0)
        {
          fcntl (fd, F_SETFL, O_NONBLOCK);
          fcntl (fd, F_SETFD, FD_CLOEXEC);

          sockinfo si(sa, PROT_TCPv4);

          slog (L_DEBUG, _("%s: accepted tcp connection"), (const char *)si);//D

          tcp_connection *i = new tcp_connection (fd, si, *this);
          tcp_si.insert (*i);
        }
    }
}

bool
vpn::send_tcpv4_packet (vpn_packet *pkt, const sockinfo &si, int tos)
{
  tcp_si_map::iterator info = tcp_si.find (&si);

  tcp_connection *i;

  if (info == tcp_si.end ())
    {
      i = new tcp_connection (-1, si, *this);
      tcp_si.insert (*i);
    }
  else
    i = info->second;

  return i->send_packet (pkt, tos);
}

bool
tcp_connection::write_packet ()
{
  ssize_t len;

  if (w_ofs < 2)
    {
      u16 plen = htons (w_pkt->len);

      iovec vec[2];
      //TODO: char* is the right type? hardly...
      vec[0].iov_base = (char *)((u8 *)&plen) + w_ofs;
      vec[0].iov_len = 2 - w_ofs;
      vec[1].iov_base = (char *)&((*w_pkt)[0]);
      vec[1].iov_len = w_len - 2;

      len = writev (fd, vec, 2);
    }
  else
    len = write (fd, &((*w_pkt)[w_ofs - 2]), w_len);

  if (len > 0)
    {
      w_ofs += len;
      w_len -= len;

      return w_len == 0;
    }
  else if (len < 0 && (errno == EAGAIN || errno == EINTR))
    return false;
  else
    {
      error ();
      return false;
    }
}

void
tcp_connection::tcpv4_ev (ev::io &w, int revents)
{
  last_activity = ev::ev_now ();

  if (revents & EV_WRITE)
    {
      if (state == CONNECTING)
        {
          state = ESTABLISHED;
          set (EV_READ);
#if ENABLE_HTTP_PROXY
          if (::conf.proxy_host && ::conf.proxy_port)
            {
              state = CONNECTING_PROXY;

              if (write (fd, proxy_req, proxy_req_len) == 0)
                {
                  error ();
                  return;
                }

              free (proxy_req); proxy_req = 0;
            }
#endif
        }
      else if (state == ESTABLISHED)
        {
          if (w_pkt)
            {
              if (write_packet ())
                {
                  delete w_pkt; w_pkt = 0;

                  set (EV_READ);
                }
            }
          else
            set (EV_READ);
        }
      else
        set (EV_READ);
    }

  if (revents & EV_READ)
    {
      if (state == ESTABLISHED)
        for (;;)
          {
            if (!r_pkt)
              {
                r_pkt = new vpn_packet;
                r_ofs = 0;
                r_len = 2; // header
              }

            ssize_t len = read (fd, &((*r_pkt)[r_ofs < 2 ? r_ofs : r_ofs - 2]), r_len);

            if (len > 0)
              {
                r_len -= len;
                r_ofs += len;

                if (r_len == 0)
                  {
                    if (r_ofs == 2)
                      {
                        r_len = ntohs (*(u16 *)&((*r_pkt)[0]));
                        r_pkt->len = r_len;

                        if (r_len > 0 && r_len < MAXSIZE)
                          continue;
                      }
                    else
                      {
                        v.recv_vpn_packet (r_pkt, si);
                        delete r_pkt;
                        r_pkt = 0;

                        continue;
                      }
                  }
                else
                  break;
              }
            else if (len < 0 && (errno == EINTR || errno == EAGAIN))
              break;

            // len == 0 <-> EOF
            error ();
            break;
          }
#if ENABLE_HTTP_PROXY
      else if (state == CONNECTING_PROXY)
        {
          fcntl (fd, F_SETFL, 0);
          char r[1024];
          int i;
          bool emptyline = false;

          // we do a blocking read of the response, to hell with it
          for (i = 0; i < 1023; i++)
            {
              int l = read (fd, &r[i], 1);

              if (l <= 0)
                {
                  error ();
                  return;
                }

              if (r[i] == '\012')
                {
                  if (emptyline)
                    break;
                  else
                    emptyline = true;
                }
              else if (r[i] != '\015')
                emptyline = false;
            }

          fcntl (fd, F_SETFL, O_NONBLOCK);

          if (i < 12)
            {
              slog (L_ERR, _("(%s): unable to do proxy-forwarding, short response"),
                    (const char *)si);
              error ();
            }
          else if (r[0] != 'H' || r[1] != 'T' || r[2] != 'T' || r[3] != 'P' || r[4] != '/'
                   || r[5] != '1' // http-major
                   || r[9] != '2') // response
            {
              slog (L_ERR, _("(%s): malformed or unexpected proxy response (%.12s)"),
                    (const char *)si, r);
              error ();
            }
          else
            state = ESTABLISHED;
        }
#endif
    }
}

bool
tcp_connection::send_packet (vpn_packet *pkt, int tos)
{
  last_activity = ev::ev_now ();

  if (state == IDLE)
    {
      // woaw, the first lost packet ;)
      fd = socket (PF_INET, SOCK_STREAM, IPPROTO_TCP);

      if (fd >= 0)
        {
          const sockinfo *csi = &si;

#if ENABLE_HTTP_PROXY
          sockinfo psi;

          if (::conf.proxy_host && ::conf.proxy_port)
            {
              psi.set (::conf.proxy_host, ::conf.proxy_port, PROT_TCPv4);

              if (psi.valid ())
                {
                  csi = &psi;

                  proxy_req_len = asprintf (&proxy_req,
                                            "CONNECT %s:%d HTTP/1.0\015\012"
                                            "%s%s%s" // optional proxy-auth
                                            "\015\012",
                                            si.ntoa (),
                                            ntohs (si.port),
                                            ::conf.proxy_auth ? "Proxy-Authorization: Basic " : "",
                                            ::conf.proxy_auth ? ::conf.proxy_auth             : "",
                                            ::conf.proxy_auth ? "\015\012"                    : "");

                }
              else
                slog (L_ERR, _("unable to resolve http proxy hostname '%s', trying direct"),
                      ::conf.proxy_host);
            }
#endif
          
          fcntl (fd, F_SETFL, O_NONBLOCK);

          if (connect (fd, csi->sav4 (), csi->salenv4 ()) >= 0
              || errno == EINPROGRESS)
            {
              fcntl (fd, F_SETFL, O_NONBLOCK);
              fcntl (fd, F_SETFD, FD_CLOEXEC);

              state = CONNECTING;
              start (fd, EV_WRITE);
            }
          else
            close (fd);
        }
    }
  else if (state == ESTABLISHED)
    {
      // drop packet if the tcp write buffer is full. this *is* the
      // right thing to do, not using tcp *is* the right thing to do.
      if (!w_pkt)
        {
          // how this maps to the underlying tcp packets we don't know
          // and we don't care. at least we tried ;)
#if defined(SOL_IP) && defined(IP_TOS)
          setsockopt (fd, SOL_IP, IP_TOS, &tos, sizeof tos);
#endif

          w_pkt = pkt;
          w_ofs = 0;
          w_len = pkt->len + 2; // length + size header

          if (write_packet ())
            w_pkt = 0;
          else
            {
              w_pkt = new vpn_packet;
              w_pkt->set (*pkt);

              set (EV_READ | EV_WRITE);
            }
        }
    }

  return state != ERROR;
}

void tcp_connection::error ()
{
  stop ();

  if (fd >= 0)
    {
      close (fd);
      fd = -1;
    }

  delete r_pkt; r_pkt = 0;
  delete w_pkt; w_pkt = 0;
#if ENABLE_HTTP_PROXY
  free (proxy_req); proxy_req = 0;
#endif

  state = active ? IDLE : ERROR;
}

tcp_connection::tcp_connection (int fd_, const sockinfo &si_, vpn &v_)
: v(v_), si(si_), ev::io(this, &tcp_connection::tcpv4_ev)
{
  if (!tcp_si.cleaner.active)
    tcp_si.cleaner.start (0);

  last_activity = ev::ev_now ();
  r_pkt = 0;
  w_pkt = 0;
  fd = fd_;
#if ENABLE_HTTP_PROXY
  proxy_req = 0;
#endif

  if (fd < 0)
    {
      active = true;
      state = IDLE;
    }
  else
    {
      active = false;
      state = ESTABLISHED;
      start (fd, EV_READ);
    }
}

tcp_connection::~tcp_connection ()
{
  error ();
}

#endif

Revision:	1.18
Committed:	Sat Nov 10 19:43:37 2007 UTC (16 years, 6 months ago) by pcg
Content type:	text/plain
Branch:	MAIN
Changes since 1.17:	+3 -2 lines
Log Message:	* empty log message *
#	Content
1	/*
2	vpn_tcp.C -- handle the tcp part of the protocol.
3	Copyright (C) 2003-2007 Marc Lehmann <gvpe@schmorp.de>
4
5	This file is part of GVPE.
6
7	GVPE is free software; you can redistribute it and/or modify
8	it under the terms of the GNU General Public License as published by
9	the Free Software Foundation; either version 2 of the License, or
10	(at your option) any later version.
11
12	This program is distributed in the hope that it will be useful,
13	but WITHOUT ANY WARRANTY; without even the implied warranty of
14	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15	GNU General Public License for more details.
16
17	You should have received a copy of the GNU General Public License
18	along with gvpe; if not, write to the Free Software
19	Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20	*/
21
22	#include "config.h"
23
24	#if ENABLE_TCP
25
26	// tcp processing is extremely ugly, since the vpe protocol is simply
27	// designed for unreliable datagram networks. tcp is implemented by
28	// multiplexing packets over tcp. errors are completely ignored, as we
29	// rely on the higher level protocol to time out and reconnect.
30
31	#include <cstring>
32
33	#include <sys/types.h>
34	#include <sys/socket.h>
35	#include <sys/wait.h>
36	#include <sys/uio.h>
37	#include <errno.h>
38	#include <time.h>
39	#include <unistd.h>
40	#include <fcntl.h>
41
42	#include <map>
43
44	#include "netcompat.h"
45
46	#include "vpn.h"
47
48	#if ENABLE_HTTP_PROXY
49	# include "conf.h"
50	#endif
51
52	struct tcp_connection;
53
54	struct lt_sockinfo
55	{
56	bool operator()(const sockinfo a, const sockinfo b) const
57	{
58	return a < b;
59	}
60	};
61
62	struct tcp_si_map : public map<const sockinfo , tcp_connection , lt_sockinfo> {
63	void cleaner_cb (ev::timer &w, int revents); ev::timer cleaner;
64
65	tcp_si_map ()
66	: cleaner(this, &tcp_si_map::cleaner_cb)
67	{
68	cleaner.start (300, 300);
69	}
70
71	} tcp_si;
72
73	struct tcp_connection : ev::io {
74	tstamp last_activity;
75	const sockinfo si;
76	vpn &v;
77	bool active; // this connection has been actively established
78	enum { ERROR, IDLE, CONNECTING, CONNECTING_PROXY, ESTABLISHED } state;
79
80	vpn_packet *r_pkt;
81	u32 r_len, r_ofs;
82
83	vpn_packet *w_pkt;
84	u32 w_len, w_ofs;
85
86	#if ENABLE_HTTP_PROXY
87	char *proxy_req;
88	int proxy_req_len;
89	#endif
90
91	void tcpv4_ev (ev::io &w, int revents);
92
93	bool send_packet (vpn_packet *pkt, int tos);
94	bool write_packet ();
95
96	void error (); // abort conenction && cleanup
97
98	operator tcp_si_map::value_type()
99	{
100	return tcp_si_map::value_type (&si, this);
101	}
102
103	tcp_connection (int fd_, const sockinfo &si_, vpn &v_);
104	~tcp_connection ();
105	};
106
107	void tcp_si_map::cleaner_cb (ev::timer &w, int revents)
108	{
109	tstamp to = ev::ev_now () - ::conf.keepalive - 30 - 60;
110
111	for (iterator i = begin (); i != end(); )
112	if (i->second->last_activity >= to)
113	++i;
114	else
115	{
116	erase (i);
117	i = begin ();
118	}
119	}
120
121	void
122	vpn::tcpv4_ev (ev::io &w, int revents)
123	{
124	if (revents & EV_READ)
125	{
126	struct sockaddr_in sa;
127	socklen_t sa_len = sizeof (sa);
128	int len;
129
130	int fd = accept (w.fd, (sockaddr *)&sa, &sa_len);
131
132	if (fd >= 0)
133	{
134	fcntl (fd, F_SETFL, O_NONBLOCK);
135	fcntl (fd, F_SETFD, FD_CLOEXEC);
136
137	sockinfo si(sa, PROT_TCPv4);
138
139	slog (L_DEBUG, _("%s: accepted tcp connection"), (const char *)si);//D
140
141	tcp_connection i = new tcp_connection (fd, si, this);
142	tcp_si.insert (*i);
143	}
144	}
145	}
146
147	bool
148	vpn::send_tcpv4_packet (vpn_packet *pkt, const sockinfo &si, int tos)
149	{
150	tcp_si_map::iterator info = tcp_si.find (&si);
151
152	tcp_connection *i;
153
154	if (info == tcp_si.end ())
155	{
156	i = new tcp_connection (-1, si, *this);
157	tcp_si.insert (*i);
158	}
159	else
160	i = info->second;
161
162	return i->send_packet (pkt, tos);
163	}
164
165	bool
166	tcp_connection::write_packet ()
167	{
168	ssize_t len;
169
170	if (w_ofs < 2)
171	{
172	u16 plen = htons (w_pkt->len);
173
174	iovec vec[2];
175	//TODO: char* is the right type? hardly...
176	vec[0].iov_base = (char )((u8 )&plen) + w_ofs;
177	vec[0].iov_len = 2 - w_ofs;
178	vec[1].iov_base = (char )&((w_pkt)[0]);
179	vec[1].iov_len = w_len - 2;
180
181	len = writev (fd, vec, 2);
182	}
183	else
184	len = write (fd, &((*w_pkt)[w_ofs - 2]), w_len);
185
186	if (len > 0)
187	{
188	w_ofs += len;
189	w_len -= len;
190
191	return w_len == 0;
192	}
193	else if (len < 0 && (errno == EAGAIN \|\| errno == EINTR))
194	return false;
195	else
196	{
197	error ();
198	return false;
199	}
200	}
201
202	void
203	tcp_connection::tcpv4_ev (ev::io &w, int revents)
204	{
205	last_activity = ev::ev_now ();
206
207	if (revents & EV_WRITE)
208	{
209	if (state == CONNECTING)
210	{
211	state = ESTABLISHED;
212	set (EV_READ);
213	#if ENABLE_HTTP_PROXY
214	if (::conf.proxy_host && ::conf.proxy_port)
215	{
216	state = CONNECTING_PROXY;
217
218	if (write (fd, proxy_req, proxy_req_len) == 0)
219	{
220	error ();
221	return;
222	}
223
224	free (proxy_req); proxy_req = 0;
225	}
226	#endif
227	}
228	else if (state == ESTABLISHED)
229	{
230	if (w_pkt)
231	{
232	if (write_packet ())
233	{
234	delete w_pkt; w_pkt = 0;
235
236	set (EV_READ);
237	}
238	}
239	else
240	set (EV_READ);
241	}
242	else
243	set (EV_READ);
244	}
245
246	if (revents & EV_READ)
247	{
248	if (state == ESTABLISHED)
249	for (;;)
250	{
251	if (!r_pkt)
252	{
253	r_pkt = new vpn_packet;
254	r_ofs = 0;
255	r_len = 2; // header
256	}
257
258	ssize_t len = read (fd, &((*r_pkt)[r_ofs < 2 ? r_ofs : r_ofs - 2]), r_len);
259
260	if (len > 0)
261	{
262	r_len -= len;
263	r_ofs += len;
264
265	if (r_len == 0)
266	{
267	if (r_ofs == 2)
268	{
269	r_len = ntohs ((u16 )&((*r_pkt)[0]));
270	r_pkt->len = r_len;
271
272	if (r_len > 0 && r_len < MAXSIZE)
273	continue;
274	}
275	else
276	{
277	v.recv_vpn_packet (r_pkt, si);
278	delete r_pkt;
279	r_pkt = 0;
280
281	continue;
282	}
283	}
284	else
285	break;
286	}
287	else if (len < 0 && (errno == EINTR \|\| errno == EAGAIN))
288	break;
289
290	// len == 0 <-> EOF
291	error ();
292	break;
293	}
294	#if ENABLE_HTTP_PROXY
295	else if (state == CONNECTING_PROXY)
296	{
297	fcntl (fd, F_SETFL, 0);
298	char r[1024];
299	int i;
300	bool emptyline = false;
301
302	// we do a blocking read of the response, to hell with it
303	for (i = 0; i < 1023; i++)
304	{
305	int l = read (fd, &r[i], 1);
306
307	if (l <= 0)
308	{
309	error ();
310	return;
311	}
312
313	if (r[i] == '\012')
314	{
315	if (emptyline)
316	break;
317	else
318	emptyline = true;
319	}
320	else if (r[i] != '\015')
321	emptyline = false;
322	}
323
324	fcntl (fd, F_SETFL, O_NONBLOCK);
325
326	if (i < 12)
327	{
328	slog (L_ERR, _("(%s): unable to do proxy-forwarding, short response"),
329	(const char *)si);
330	error ();
331	}
332	else if (r[0] != 'H' \|\| r[1] != 'T' \|\| r[2] != 'T' \|\| r[3] != 'P' \|\| r[4] != '/'
333	\|\| r[5] != '1' // http-major
334	\|\| r[9] != '2') // response
335	{
336	slog (L_ERR, _("(%s): malformed or unexpected proxy response (%.12s)"),
337	(const char *)si, r);
338	error ();
339	}
340	else
341	state = ESTABLISHED;
342	}
343	#endif
344	}
345	}
346
347	bool
348	tcp_connection::send_packet (vpn_packet *pkt, int tos)
349	{
350	last_activity = ev::ev_now ();
351
352	if (state == IDLE)
353	{
354	// woaw, the first lost packet ;)
355	fd = socket (PF_INET, SOCK_STREAM, IPPROTO_TCP);
356
357	if (fd >= 0)
358	{
359	const sockinfo *csi = &si;
360
361	#if ENABLE_HTTP_PROXY
362	sockinfo psi;
363
364	if (::conf.proxy_host && ::conf.proxy_port)
365	{
366	psi.set (::conf.proxy_host, ::conf.proxy_port, PROT_TCPv4);
367
368	if (psi.valid ())
369	{
370	csi = ψ
371
372	proxy_req_len = asprintf (&proxy_req,
373	"CONNECT %s:%d HTTP/1.0\015\012"
374	"%s%s%s" // optional proxy-auth
375	"\015\012",
376	si.ntoa (),
377	ntohs (si.port),
378	::conf.proxy_auth ? "Proxy-Authorization: Basic " : "",
379	::conf.proxy_auth ? ::conf.proxy_auth : "",
380	::conf.proxy_auth ? "\015\012" : "");
381
382	}
383	else
384	slog (L_ERR, _("unable to resolve http proxy hostname '%s', trying direct"),
385	::conf.proxy_host);
386	}
387	#endif
388
389	fcntl (fd, F_SETFL, O_NONBLOCK);
390
391	if (connect (fd, csi->sav4 (), csi->salenv4 ()) >= 0
392	\|\| errno == EINPROGRESS)
393	{
394	fcntl (fd, F_SETFL, O_NONBLOCK);
395	fcntl (fd, F_SETFD, FD_CLOEXEC);
396
397	state = CONNECTING;
398	start (fd, EV_WRITE);
399	}
400	else
401	close (fd);
402	}
403	}
404	else if (state == ESTABLISHED)
405	{
406	// drop packet if the tcp write buffer is full. this is the
407	// right thing to do, not using tcp is the right thing to do.
408	if (!w_pkt)
409	{
410	// how this maps to the underlying tcp packets we don't know
411	// and we don't care. at least we tried ;)
412	#if defined(SOL_IP) && defined(IP_TOS)
413	setsockopt (fd, SOL_IP, IP_TOS, &tos, sizeof tos);
414	#endif
415
416	w_pkt = pkt;
417	w_ofs = 0;
418	w_len = pkt->len + 2; // length + size header
419
420	if (write_packet ())
421	w_pkt = 0;
422	else
423	{
424	w_pkt = new vpn_packet;
425	w_pkt->set (*pkt);
426
427	set (EV_READ \| EV_WRITE);
428	}
429	}
430	}
431
432	return state != ERROR;
433	}
434
435	void tcp_connection::error ()
436	{
437	stop ();
438
439	if (fd >= 0)
440	{
441	close (fd);
442	fd = -1;
443	}
444
445	delete r_pkt; r_pkt = 0;
446	delete w_pkt; w_pkt = 0;
447	#if ENABLE_HTTP_PROXY
448	free (proxy_req); proxy_req = 0;
449	#endif
450
451	state = active ? IDLE : ERROR;
452	}
453
454	tcp_connection::tcp_connection (int fd_, const sockinfo &si_, vpn &v_)
455	: v(v_), si(si_), ev::io(this, &tcp_connection::tcpv4_ev)
456	{
457	if (!tcp_si.cleaner.active)
458	tcp_si.cleaner.start (0);
459
460	last_activity = ev::ev_now ();
461	r_pkt = 0;
462	w_pkt = 0;
463	fd = fd_;
464	#if ENABLE_HTTP_PROXY
465	proxy_req = 0;
466	#endif
467
468	if (fd < 0)
469	{
470	active = true;
471	state = IDLE;
472	}
473	else
474	{
475	active = false;
476	state = ESTABLISHED;
477	start (fd, EV_READ);
478	}
479	}
480
481	tcp_connection::~tcp_connection ()
482	{
483	error ();
484	}
485
486	#endif
487