static int handler_tcp_tun_to_net(int fd, const struct worker_struct *ws,
char *buff, size_t len)
{
int dfd, keep = 1;
char *cbuff;
ssize_t rlen, err, clen;
struct ct_proto *hdr;
struct curve25519_proto *p;
socklen_t nlen;
size_t off = sizeof(struct ct_proto) + crypto_box_zerobytes;
if (!buff || len <= off)
return 0;
memset(buff, 0, len);
while ((rlen = read(fd, buff + off, len - off)) > 0) {
dfd = -1; p = NULL;
hdr = (struct ct_proto *) buff;
memset(hdr, 0, sizeof(*hdr));
hdr->flags = 0;
trie_addr_lookup(buff + off, rlen, ws->parent.ipv4, &dfd, NULL,
(size_t *) &nlen);
if (unlikely(dfd < 0)) {
memset(buff, 0, len);
continue;
}
err = get_user_by_socket(dfd, &p);
if (unlikely(err || !p)) {
memset(buff, 0, len);
continue;
}
clen = curve25519_encode(ws->c, p, (unsigned char *) (buff + off -
crypto_box_zerobytes), (rlen +
crypto_box_zerobytes), (unsigned char **)
&cbuff);
if (unlikely(clen <= 0)) {
memset(buff, 0, len);
continue;
}
hdr->payload = htons((uint16_t) clen);
set_tcp_cork(dfd);
write_exact(dfd, hdr, sizeof(struct ct_proto), 0);
write_exact(dfd, cbuff, clen, 0);
set_tcp_uncork(dfd);
memset(buff, 0, len);
}
return keep;
}
static int handler_udp_tun_to_net(int fd, const struct worker_struct *ws,
char *buff, size_t len)
{
int dfd, state, keep = 1;
char *cbuff;
ssize_t rlen, err, clen;
struct ct_proto *hdr;
struct curve25519_proto *p;
struct sockaddr_storage naddr;
socklen_t nlen;
size_t off = sizeof(struct ct_proto) + crypto_box_zerobytes;
if (!buff || len <= off) {
errno = EINVAL;
return 0;
}
errno = 0;
memset(buff, 0, len);
while ((rlen = read(fd, buff + off, len - off)) > 0) {
dfd = -1;
nlen = 0;
p = NULL;
memset(&naddr, 0, sizeof(naddr));
hdr = (struct ct_proto *) buff;
memset(hdr, 0, sizeof(*hdr));
hdr->flags = 0;
trie_addr_lookup(buff + off, rlen, ws->parent.ipv4, &dfd, &naddr,
(size_t *) &nlen);
if (unlikely(dfd < 0 || nlen == 0)) {
syslog(LOG_INFO, "CPU%u: UDP tunnel lookup failed: "
"unknown destination\n", ws->cpu);
memset(buff, 0, len);
continue;
}
err = get_user_by_sockaddr(&naddr, nlen, &p);
if (unlikely(err || !p)) {
syslog(LOG_ERR, "CPU%u: User protocol not in cache! "
"Dropping connection!\n", ws->cpu);
memset(buff, 0, len);
continue;
}
clen = curve25519_encode(ws->c, p, (unsigned char *) (buff + off -
crypto_box_zerobytes), (rlen +
crypto_box_zerobytes), (unsigned char **)
&cbuff);
if (unlikely(clen <= 0)) {
syslog(LOG_ERR, "CPU%u: UDP tunnel encrypt error: %zd\n",
ws->cpu, clen);
memset(buff, 0, len);
continue;
}
hdr->payload = htons((uint16_t) clen);
state = 1;
setsockopt(dfd, IPPROTO_UDP, UDP_CORK, &state, sizeof(state));
err = sendto(dfd, hdr, sizeof(struct ct_proto), 0,
(struct sockaddr *) &naddr, nlen);
if (unlikely(err < 0))
syslog(LOG_ERR, "CPU%u: UDP tunnel write error: %s\n",
ws->cpu, strerror(errno));
err = sendto(dfd, cbuff, clen, 0, (struct sockaddr *) &naddr,
nlen);
if (unlikely(err < 0))
syslog(LOG_ERR, "CPU%u: UDP tunnel write error: %s\n",
ws->cpu, strerror(errno));
state = 0;
setsockopt(dfd, IPPROTO_UDP, UDP_CORK, &state, sizeof(state));
errno = 0;
memset(buff, 0, len);
}
if (unlikely(rlen < 0 && errno != EAGAIN))
syslog(LOG_ERR, "CPU%u: UDP tunnel read error: %s\n",
ws->cpu, strerror(errno));
return keep;
}
