public inbox for passt-dev@passt.top
 help / color / mirror / code / Atom feed
blob e6b3b14db92af55d31568b9b0994464c9f121ff2 4425 bytes (raw)

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
 
// SPDX-License-Identifier: GPL-2.0-or-later

/* PASST - Plug A Simple Socket Transport
 *  for qemu/UNIX domain socket mode
 *
 * PASTA - Pack A Subtle Tap Abstraction
 *  for network namespace/tap device mode
 *
 * port_fwd.c - Port forwarding helpers
 *
 * Copyright Red Hat
 * Author: Stefano Brivio <sbrivio@redhat.com>
 * Author: David Gibson <david@gibson.dropbear.id.au>
 */

#include <stdint.h>
#include <errno.h>
#include <fcntl.h>
#include <sched.h>

#include "util.h"
#include "port_fwd.h"
#include "passt.h"
#include "lineread.h"

#define UDP_LISTEN	0x07
#define TCP_LISTEN	0x0a

/**
 * procfs_scan_listen() - Set bits for listening TCP or UDP sockets from procfs
 * @fd:		fd for relevant /proc/net file
 * @lstate:	Code for listening state to scan for
 * @map:	Bitmap where numbers of ports in listening state will be set
 * @exclude:	Bitmap of ports to exclude from setting (and clear)
 *
 * #syscalls:pasta lseek
 * #syscalls:pasta ppc64le:_llseek ppc64:_llseek armv6l:_llseek armv7l:_llseek
 */
static void procfs_scan_listen(int fd, unsigned int lstate,
			       uint8_t *map, const uint8_t *exclude)
{
	struct lineread lr;
	unsigned long port;
	unsigned int state;
	char *line;

	if (lseek(fd, 0, SEEK_SET)) {
		warn("lseek() failed on /proc/net file: %s", strerror(errno));
		return;
	}

	lineread_init(&lr, fd);
	lineread_get(&lr, &line); /* throw away header */
	while (lineread_get(&lr, &line) > 0) {
		/* NOLINTNEXTLINE(cert-err34-c): != 2 if conversion fails */
		if (sscanf(line, "%*u: %*x:%lx %*x:%*x %x", &port, &state) != 2)
			continue;

		/* See enum in kernel's include/net/tcp_states.h */
		if (state != lstate)
			continue;

		if (bitmap_isset(exclude, port))
			bitmap_clear(map, port);
		else
			bitmap_set(map, port);
	}
}

/**
 * get_bound_ports_tcp() - Get maps of TCP ports with bound sockets
 * @c:		Execution context
 * @ns:		If set, set bitmaps for ports to tap/ns -- to init otherwise
 */
void get_bound_ports_tcp(struct ctx *c, int ns)
{
	uint8_t *map, *excl;

	if (ns) {
		map = c->tcp.fwd_in.map;
		excl = c->tcp.fwd_out.map;
	} else {
		map = c->tcp.fwd_out.map;
		excl = c->tcp.fwd_in.map;
	}

	memset(map, 0, PORT_BITMAP_SIZE);
	procfs_scan_listen(c->proc_net_tcp[V4][ns], TCP_LISTEN, map, excl);
	procfs_scan_listen(c->proc_net_tcp[V6][ns], TCP_LISTEN, map, excl);
}

/**
 * get_bound_ports_udp() - Get maps of UDP ports with bound sockets
 * @c:		Execution context
 * @ns:		If set, set bitmaps for ports to tap/ns -- to init otherwise
 */
void get_bound_ports_udp(struct ctx *c, int ns)
{
	uint8_t *map, *excl;

	if (ns) {
		map = c->udp.fwd_in.f.map;
		excl = c->udp.fwd_out.f.map;
	} else {
		map = c->udp.fwd_out.f.map;
		excl = c->udp.fwd_in.f.map;
	}

	memset(map, 0, PORT_BITMAP_SIZE);
	procfs_scan_listen(c->proc_net_udp[V4][ns], UDP_LISTEN, map, excl);
	procfs_scan_listen(c->proc_net_udp[V6][ns], UDP_LISTEN, map, excl);

	/* Also forward UDP ports with the same numbers as bound TCP ports.
	 * This is useful for a handful of protocols (e.g. iperf3) where a TCP
	 * control port is used to set up transfers on a corresponding UDP
	 * port.
	 */
	procfs_scan_listen(c->proc_net_tcp[V4][ns], TCP_LISTEN, map, excl);
	procfs_scan_listen(c->proc_net_tcp[V6][ns], TCP_LISTEN, map, excl);
}

/**
 * port_fwd_init() - Initial setup for port forwarding
 * @c:		Execution context
 */
void port_fwd_init(struct ctx *c)
{
	const int flags = O_RDONLY | O_CLOEXEC;

	c->proc_net_tcp[V4][0] = c->proc_net_tcp[V4][1] = -1;
	c->proc_net_tcp[V6][0] = c->proc_net_tcp[V6][1] = -1;
	c->proc_net_udp[V4][0] = c->proc_net_udp[V4][1] = -1;
	c->proc_net_udp[V6][0] = c->proc_net_udp[V6][1] = -1;

	if (c->tcp.fwd_in.mode == FWD_AUTO) {
		c->proc_net_tcp[V4][1] = open_in_ns(c, "/proc/net/tcp", flags);
		c->proc_net_tcp[V6][1] = open_in_ns(c, "/proc/net/tcp6", flags);
		get_bound_ports_tcp(c, 1);
	}
	if (c->udp.fwd_in.f.mode == FWD_AUTO) {
		c->proc_net_udp[V4][1] = open_in_ns(c, "/proc/net/udp", flags);
		c->proc_net_udp[V6][1] = open_in_ns(c, "/proc/net/udp6", flags);
		get_bound_ports_udp(c, 1);
	}
	if (c->tcp.fwd_out.mode == FWD_AUTO) {
		c->proc_net_tcp[V4][0] = open("/proc/net/tcp", flags);
		c->proc_net_tcp[V6][0] = open("/proc/net/tcp6", flags);
		get_bound_ports_tcp(c, 0);
	}
	if (c->udp.fwd_out.f.mode == FWD_AUTO) {
		c->proc_net_udp[V4][0] = open("/proc/net/udp", flags);
		c->proc_net_udp[V6][0] = open("/proc/net/udp6", flags);
		get_bound_ports_udp(c, 0);
	}
}

debug log:

solving e6b3b14 ...
found e6b3b14 in https://archives.passt.top/passt-dev/20231005034445.2015303-8-david@gibson.dropbear.id.au/
found b91eafe in https://archives.passt.top/passt-dev/20231005034445.2015303-7-david@gibson.dropbear.id.au/
found a3f69dd in https://archives.passt.top/passt-dev/20231005034445.2015303-6-david@gibson.dropbear.id.au/
found 4b54877 in https://archives.passt.top/passt-dev/20231005034445.2015303-4-david@gibson.dropbear.id.au/
found 136a450 in https://passt.top/passt
preparing index
index prepared:
100644 136a4505aeb84938d0efbe4a030b73a50ce32fd2	port_fwd.c

applying [1/4] https://archives.passt.top/passt-dev/20231005034445.2015303-4-david@gibson.dropbear.id.au/
diff --git a/port_fwd.c b/port_fwd.c
index 136a450..4b54877 100644


applying [2/4] https://archives.passt.top/passt-dev/20231005034445.2015303-6-david@gibson.dropbear.id.au/
diff --git a/port_fwd.c b/port_fwd.c
index 4b54877..a3f69dd 100644


applying [3/4] https://archives.passt.top/passt-dev/20231005034445.2015303-7-david@gibson.dropbear.id.au/
diff --git a/port_fwd.c b/port_fwd.c
index a3f69dd..b91eafe 100644


applying [4/4] https://archives.passt.top/passt-dev/20231005034445.2015303-8-david@gibson.dropbear.id.au/
diff --git a/port_fwd.c b/port_fwd.c
index b91eafe..e6b3b14 100644

Checking patch port_fwd.c...
Applied patch port_fwd.c cleanly.
Checking patch port_fwd.c...
Applied patch port_fwd.c cleanly.
Checking patch port_fwd.c...
Applied patch port_fwd.c cleanly.
Checking patch port_fwd.c...
Applied patch port_fwd.c cleanly.

index at:
100644 e6b3b14db92af55d31568b9b0994464c9f121ff2	port_fwd.c

Code repositories for project(s) associated with this public inbox

	https://passt.top/passt

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for IMAP folder(s).