feat(*) IPv6 support

This commit is contained in:
Datong Sun 2022-04-16 01:41:19 -07:00
parent 74183071f1
commit 85555f2a34
6 changed files with 351 additions and 139 deletions

View File

@ -49,7 +49,7 @@ use pnet::packet::{tcp, Packet};
use rand::prelude::*; use rand::prelude::*;
use std::collections::{HashMap, HashSet}; use std::collections::{HashMap, HashSet};
use std::fmt; use std::fmt;
use std::net::{Ipv4Addr, SocketAddrV4}; use std::net::{IpAddr, Ipv4Addr, Ipv6Addr, SocketAddr};
use std::sync::atomic::{AtomicU32, Ordering}; use std::sync::atomic::{AtomicU32, Ordering};
use std::sync::{Arc, RwLock}; use std::sync::{Arc, RwLock};
use tokio::sync::broadcast; use tokio::sync::broadcast;
@ -65,12 +65,12 @@ const MAX_UNACKED_LEN: u32 = 128 * 1024 * 1024; // 128MB
#[derive(Hash, Eq, PartialEq, Clone, Debug)] #[derive(Hash, Eq, PartialEq, Clone, Debug)]
struct AddrTuple { struct AddrTuple {
local_addr: SocketAddrV4, local_addr: SocketAddr,
remote_addr: SocketAddrV4, remote_addr: SocketAddr,
} }
impl AddrTuple { impl AddrTuple {
fn new(local_addr: SocketAddrV4, remote_addr: SocketAddrV4) -> AddrTuple { fn new(local_addr: SocketAddr, remote_addr: SocketAddr) -> AddrTuple {
AddrTuple { AddrTuple {
local_addr, local_addr,
remote_addr, remote_addr,
@ -89,6 +89,7 @@ struct Shared {
pub struct Stack { pub struct Stack {
shared: Arc<Shared>, shared: Arc<Shared>,
local_ip: Ipv4Addr, local_ip: Ipv4Addr,
local_ip6: Option<Ipv6Addr>,
ready: mpsc::Receiver<Socket>, ready: mpsc::Receiver<Socket>,
} }
@ -103,8 +104,8 @@ pub struct Socket {
shared: Arc<Shared>, shared: Arc<Shared>,
tun: Arc<Tun>, tun: Arc<Tun>,
incoming: flume::Receiver<Bytes>, incoming: flume::Receiver<Bytes>,
local_addr: SocketAddrV4, local_addr: SocketAddr,
remote_addr: SocketAddrV4, remote_addr: SocketAddr,
seq: AtomicU32, seq: AtomicU32,
ack: AtomicU32, ack: AtomicU32,
last_ack: AtomicU32, last_ack: AtomicU32,
@ -122,8 +123,8 @@ impl Socket {
fn new( fn new(
shared: Arc<Shared>, shared: Arc<Shared>,
tun: Arc<Tun>, tun: Arc<Tun>,
local_addr: SocketAddrV4, local_addr: SocketAddr,
remote_addr: SocketAddrV4, remote_addr: SocketAddr,
ack: Option<u32>, ack: Option<u32>,
state: State, state: State,
) -> (Socket, flume::Sender<Bytes>) { ) -> (Socket, flume::Sender<Bytes>) {
@ -188,7 +189,7 @@ impl Socket {
match self.state { match self.state {
State::Established => { State::Established => {
self.incoming.recv_async().await.ok().and_then(|raw_buf| { self.incoming.recv_async().await.ok().and_then(|raw_buf| {
let (_v4_packet, tcp_packet) = parse_ipv4_packet(&raw_buf); let (_v4_packet, tcp_packet) = parse_ip_packet(&raw_buf).unwrap();
if (tcp_packet.get_flags() & tcp::TcpFlags::RST) != 0 { if (tcp_packet.get_flags() & tcp::TcpFlags::RST) != 0 {
info!("Connection {} reset by peer", self); info!("Connection {} reset by peer", self);
@ -233,7 +234,7 @@ impl Socket {
let res = time::timeout(TIMEOUT, self.incoming.recv_async()).await; let res = time::timeout(TIMEOUT, self.incoming.recv_async()).await;
if let Ok(buf) = res { if let Ok(buf) = res {
let buf = buf.unwrap(); let buf = buf.unwrap();
let (_v4_packet, tcp_packet) = parse_ipv4_packet(&buf); let (_v4_packet, tcp_packet) = parse_ip_packet(&buf).unwrap();
if (tcp_packet.get_flags() & tcp::TcpFlags::RST) != 0 { if (tcp_packet.get_flags() & tcp::TcpFlags::RST) != 0 {
return; return;
@ -277,7 +278,7 @@ impl Socket {
match time::timeout(TIMEOUT, self.incoming.recv_async()).await { match time::timeout(TIMEOUT, self.incoming.recv_async()).await {
Ok(buf) => { Ok(buf) => {
let buf = buf.unwrap(); let buf = buf.unwrap();
let (_v4_packet, tcp_packet) = parse_ipv4_packet(&buf); let (_v4_packet, tcp_packet) = parse_ip_packet(&buf).unwrap();
if (tcp_packet.get_flags() & tcp::TcpFlags::RST) != 0 { if (tcp_packet.get_flags() & tcp::TcpFlags::RST) != 0 {
return None; return None;
@ -358,7 +359,7 @@ impl Stack {
/// When more than one [`Tun`](tokio_tun::Tun) object is passed in, same amount /// When more than one [`Tun`](tokio_tun::Tun) object is passed in, same amount
/// of reader will be spawned later. This allows user to utilize the performance /// of reader will be spawned later. This allows user to utilize the performance
/// benefit of Multiqueue Tun support on machines with SMP. /// benefit of Multiqueue Tun support on machines with SMP.
pub fn new(tun: Vec<Tun>) -> Stack { pub fn new(tun: Vec<Tun>, local_ip: Ipv4Addr, local_ip6: Option<Ipv6Addr>) -> Stack {
let tun: Vec<Arc<Tun>> = tun.into_iter().map(Arc::new).collect(); let tun: Vec<Arc<Tun>> = tun.into_iter().map(Arc::new).collect();
let (ready_tx, ready_rx) = mpsc::channel(MPSC_BUFFER_LEN); let (ready_tx, ready_rx) = mpsc::channel(MPSC_BUFFER_LEN);
let (tuples_purge_tx, _tuples_purge_rx) = broadcast::channel(16); let (tuples_purge_tx, _tuples_purge_rx) = broadcast::channel(16);
@ -369,7 +370,6 @@ impl Stack {
ready: ready_tx, ready: ready_tx,
tuples_purge: tuples_purge_tx.clone(), tuples_purge: tuples_purge_tx.clone(),
}); });
let local_ip = tun[0].destination().unwrap();
for t in tun { for t in tun {
tokio::spawn(Stack::reader_task( tokio::spawn(Stack::reader_task(
@ -382,6 +382,7 @@ impl Stack {
Stack { Stack {
shared, shared,
local_ip, local_ip,
local_ip6,
ready: ready_rx, ready: ready_rx,
} }
} }
@ -398,10 +399,17 @@ impl Stack {
/// Connects to the remote end. `None` returned means /// Connects to the remote end. `None` returned means
/// the connection attempt failed. /// the connection attempt failed.
pub async fn connect(&mut self, addr: SocketAddrV4) -> Option<Socket> { pub async fn connect(&mut self, addr: SocketAddr) -> Option<Socket> {
let mut rng = SmallRng::from_entropy(); let mut rng = SmallRng::from_entropy();
let local_port: u16 = rng.gen_range(1024..65535); let local_port: u16 = rng.gen_range(1024..65535);
let local_addr = SocketAddrV4::new(self.local_ip, local_port); let local_addr = SocketAddr::new(
if addr.is_ipv4() {
IpAddr::V4(self.local_ip)
} else {
IpAddr::V6(self.local_ip6.expect("IPv6 local address undefined"))
},
local_port,
);
let tuple = AddrTuple::new(local_addr, addr); let tuple = AddrTuple::new(local_addr, addr);
let (mut sock, incoming) = Socket::new( let (mut sock, incoming) = Socket::new(
self.shared.clone(), self.shared.clone(),
@ -437,15 +445,11 @@ impl Stack {
buf.truncate(size); buf.truncate(size);
let buf = buf.freeze(); let buf = buf.freeze();
if buf[0] >> 4 != 4 { match parse_ip_packet(&buf) {
// not an IPv4 packet Some((ip_packet, tcp_packet)) => {
continue;
}
let (ip_packet, tcp_packet) = parse_ipv4_packet(&buf);
let local_addr = let local_addr =
SocketAddrV4::new(ip_packet.get_destination(), tcp_packet.get_destination()); SocketAddr::new(ip_packet.get_destination(), tcp_packet.get_destination());
let remote_addr = SocketAddrV4::new(ip_packet.get_source(), tcp_packet.get_source()); let remote_addr = SocketAddr::new(ip_packet.get_source(), tcp_packet.get_source());
let tuple = AddrTuple::new(local_addr, remote_addr); let tuple = AddrTuple::new(local_addr, remote_addr);
if let Some(c) = tuples.get(&tuple) { if let Some(c) = tuples.get(&tuple) {
@ -457,7 +461,6 @@ impl Stack {
// If not Ok, receiver has been closed and just fall through to the slow // If not Ok, receiver has been closed and just fall through to the slow
// path below // path below
} else { } else {
trace!("Cache miss, checking the shared tuples table for connection"); trace!("Cache miss, checking the shared tuples table for connection");
let sender = { let sender = {
@ -521,6 +524,11 @@ impl Stack {
); );
shared.tun[0].try_send(&buf).unwrap(); shared.tun[0].try_send(&buf).unwrap();
} }
}
None => {
continue;
}
}
}, },
tuple = tuples_purge.recv() => { tuple = tuples_purge.recv() => {
let tuple = tuple.unwrap(); let tuple = tuple.unwrap();

View File

@ -1,45 +1,85 @@
use bytes::{Bytes, BytesMut}; use bytes::{Bytes, BytesMut};
use internet_checksum::Checksum; use internet_checksum::Checksum;
use pnet::packet::Packet; use pnet::packet::Packet;
use pnet::packet::{ip, ipv4, tcp}; use pnet::packet::{ip, ipv4, ipv6, tcp};
use std::convert::TryInto; use std::convert::TryInto;
use std::net::SocketAddrV4; use std::net::{IpAddr, SocketAddr};
const IPV4_HEADER_LEN: usize = 20; const IPV4_HEADER_LEN: usize = 20;
const IPV6_HEADER_LEN: usize = 40;
const TCP_HEADER_LEN: usize = 20; const TCP_HEADER_LEN: usize = 20;
pub const MAX_PACKET_LEN: usize = 1500; pub const MAX_PACKET_LEN: usize = 1500;
pub enum IPPacket<'p> {
V4(ipv4::Ipv4Packet<'p>),
V6(ipv6::Ipv6Packet<'p>),
}
impl<'a> IPPacket<'a> {
pub fn get_source(&self) -> IpAddr {
match self {
IPPacket::V4(p) => IpAddr::V4(p.get_source()),
IPPacket::V6(p) => IpAddr::V6(p.get_source()),
}
}
pub fn get_destination(&self) -> IpAddr {
match self {
IPPacket::V4(p) => IpAddr::V4(p.get_destination()),
IPPacket::V6(p) => IpAddr::V6(p.get_destination()),
}
}
}
pub fn build_tcp_packet( pub fn build_tcp_packet(
local_addr: SocketAddrV4, local_addr: SocketAddr,
remote_addr: SocketAddrV4, remote_addr: SocketAddr,
seq: u32, seq: u32,
ack: u32, ack: u32,
flags: u16, flags: u16,
payload: Option<&[u8]>, payload: Option<&[u8]>,
) -> Bytes { ) -> Bytes {
let ip_header_len = match local_addr {
SocketAddr::V4(_) => IPV4_HEADER_LEN,
SocketAddr::V6(_) => IPV6_HEADER_LEN,
};
let wscale = (flags & tcp::TcpFlags::SYN) != 0; let wscale = (flags & tcp::TcpFlags::SYN) != 0;
let tcp_header_len = TCP_HEADER_LEN + if wscale { 4 } else { 0 }; // nop + wscale let tcp_header_len = TCP_HEADER_LEN + if wscale { 4 } else { 0 }; // nop + wscale
let tcp_total_len = tcp_header_len + payload.map_or(0, |payload| payload.len()); let tcp_total_len = tcp_header_len + payload.map_or(0, |payload| payload.len());
let total_len = IPV4_HEADER_LEN + tcp_total_len; let total_len = ip_header_len + tcp_total_len;
let mut buf = BytesMut::with_capacity(total_len); let mut buf = BytesMut::with_capacity(total_len);
buf.resize(total_len, 0); buf.resize(total_len, 0);
let mut v4_buf = buf.split_to(IPV4_HEADER_LEN); let mut ip_buf = buf.split_to(ip_header_len);
let mut tcp_buf = buf.split_to(tcp_total_len); let mut tcp_buf = buf.split_to(tcp_total_len);
assert_eq!(0, buf.len()); assert_eq!(0, buf.len());
let mut v4 = ipv4::MutableIpv4Packet::new(&mut v4_buf).unwrap(); match (local_addr, remote_addr) {
(SocketAddr::V4(local), SocketAddr::V4(remote)) => {
let mut v4 = ipv4::MutableIpv4Packet::new(&mut ip_buf).unwrap();
v4.set_version(4); v4.set_version(4);
v4.set_header_length(IPV4_HEADER_LEN as u8 / 4); v4.set_header_length(IPV4_HEADER_LEN as u8 / 4);
v4.set_next_level_protocol(ip::IpNextHeaderProtocols::Tcp); v4.set_next_level_protocol(ip::IpNextHeaderProtocols::Tcp);
v4.set_ttl(64); v4.set_ttl(64);
v4.set_source(*local_addr.ip()); v4.set_source(*local.ip());
v4.set_destination(*remote_addr.ip()); v4.set_destination(*remote.ip());
v4.set_total_length(total_len.try_into().unwrap()); v4.set_total_length(total_len.try_into().unwrap());
v4.set_flags(ipv4::Ipv4Flags::DontFragment); v4.set_flags(ipv4::Ipv4Flags::DontFragment);
let mut cksm = Checksum::new(); let mut cksm = Checksum::new();
cksm.add_bytes(v4.packet()); cksm.add_bytes(v4.packet());
v4.set_checksum(u16::from_be_bytes(cksm.checksum())); v4.set_checksum(u16::from_be_bytes(cksm.checksum()));
}
(SocketAddr::V6(local), SocketAddr::V6(remote)) => {
let mut v6 = ipv6::MutableIpv6Packet::new(&mut ip_buf).unwrap();
v6.set_version(6);
v6.set_payload_length(tcp_total_len.try_into().unwrap());
v6.set_next_header(ip::IpNextHeaderProtocols::Tcp);
v6.set_hop_limit(64);
v6.set_source(*local.ip());
v6.set_destination(*remote.ip());
}
_ => unreachable!(),
};
let mut tcp = tcp::MutableTcpPacket::new(&mut tcp_buf).unwrap(); let mut tcp = tcp::MutableTcpPacket::new(&mut tcp_buf).unwrap();
tcp.set_window(0xffff); tcp.set_window(0xffff);
@ -59,24 +99,55 @@ pub fn build_tcp_packet(
} }
let mut cksm = Checksum::new(); let mut cksm = Checksum::new();
cksm.add_bytes(&local_addr.ip().octets());
cksm.add_bytes(&remote_addr.ip().octets());
let ip::IpNextHeaderProtocol(tcp_protocol) = ip::IpNextHeaderProtocols::Tcp; let ip::IpNextHeaderProtocol(tcp_protocol) = ip::IpNextHeaderProtocols::Tcp;
match (local_addr, remote_addr) {
(SocketAddr::V4(local), SocketAddr::V4(remote)) => {
cksm.add_bytes(&local.ip().octets());
cksm.add_bytes(&remote.ip().octets());
let mut pseudo = [0u8, tcp_protocol, 0, 0]; let mut pseudo = [0u8, tcp_protocol, 0, 0];
pseudo[2..].copy_from_slice(&(tcp_total_len as u16).to_be_bytes()); pseudo[2..].copy_from_slice(&(tcp_total_len as u16).to_be_bytes());
cksm.add_bytes(&pseudo); cksm.add_bytes(&pseudo);
}
(SocketAddr::V6(local), SocketAddr::V6(remote)) => {
cksm.add_bytes(&local.ip().octets());
cksm.add_bytes(&remote.ip().octets());
let mut pseudo = [0u8, 0, 0, 0, 0, 0, 0, tcp_protocol];
pseudo[0..4].copy_from_slice(&(tcp_total_len as u32).to_be_bytes());
cksm.add_bytes(&pseudo);
}
_ => unreachable!(),
};
cksm.add_bytes(tcp.packet()); cksm.add_bytes(tcp.packet());
tcp.set_checksum(u16::from_be_bytes(cksm.checksum())); tcp.set_checksum(u16::from_be_bytes(cksm.checksum()));
v4_buf.unsplit(tcp_buf); ip_buf.unsplit(tcp_buf);
v4_buf.freeze() ip_buf.freeze()
} }
pub fn parse_ipv4_packet(buf: &Bytes) -> (ipv4::Ipv4Packet, tcp::TcpPacket) { pub fn parse_ip_packet(buf: &Bytes) -> Option<(IPPacket, tcp::TcpPacket)> {
if buf[0] >> 4 == 4 {
let v4 = ipv4::Ipv4Packet::new(buf).unwrap(); let v4 = ipv4::Ipv4Packet::new(buf).unwrap();
let tcp = tcp::TcpPacket::new(&buf[IPV4_HEADER_LEN..]).unwrap(); if v4.get_next_level_protocol() != ip::IpNextHeaderProtocols::Tcp {
return None;
}
(v4, tcp) let tcp = tcp::TcpPacket::new(&buf[IPV4_HEADER_LEN..]).unwrap();
Some((IPPacket::V4(v4), tcp))
} else if buf[0] >> 4 == 6 {
let v6 = ipv6::Ipv6Packet::new(buf).unwrap();
if v6.get_next_header() != ip::IpNextHeaderProtocols::Tcp {
return None;
}
let tcp = tcp::TcpPacket::new(&buf[IPV6_HEADER_LEN..]).unwrap();
Some((IPPacket::V6(v6), tcp))
} else {
None
}
} }
#[cfg(all(test, feature = "benchmark"))] #[cfg(all(test, feature = "benchmark"))]

View File

@ -20,3 +20,5 @@ log = "0.4"
pretty_env_logger = "0.4" pretty_env_logger = "0.4"
tokio-tun = "0.5" tokio-tun = "0.5"
num_cpus = "1.13" num_cpus = "1.13"
neli = "0.6"
nix = "0.23"

View File

@ -2,7 +2,7 @@ use clap::{crate_version, Arg, Command};
use fake_tcp::packet::MAX_PACKET_LEN; use fake_tcp::packet::MAX_PACKET_LEN;
use fake_tcp::{Socket, Stack}; use fake_tcp::{Socket, Stack};
use log::{debug, error, info}; use log::{debug, error, info};
use phantun::utils::new_udp_reuseport; use phantun::utils::{assign_ipv6_address, new_udp_reuseport};
use std::collections::HashMap; use std::collections::HashMap;
use std::io; use std::io;
use std::net::{Ipv4Addr, SocketAddr}; use std::net::{Ipv4Addr, SocketAddr};
@ -36,7 +36,7 @@ async fn main() -> io::Result<()> {
.long("remote") .long("remote")
.required(true) .required(true)
.value_name("IP or HOST NAME:PORT") .value_name("IP or HOST NAME:PORT")
.help("Sets the address or host name and port where Phantun Client connects to Phantun Server") .help("Sets the address or host name and port where Phantun Client connects to Phantun Server, IPv6 address need to be specified as: \"[IPv6]:PORT\"")
.takes_value(true), .takes_value(true),
) )
.arg( .arg(
@ -53,7 +53,7 @@ async fn main() -> io::Result<()> {
.long("tun-local") .long("tun-local")
.required(false) .required(false)
.value_name("IP") .value_name("IP")
.help("Sets the Tun interface local address (O/S's end)") .help("Sets the Tun interface IPv4 local address (O/S's end)")
.default_value("192.168.200.1") .default_value("192.168.200.1")
.takes_value(true), .takes_value(true),
) )
@ -62,12 +62,41 @@ async fn main() -> io::Result<()> {
.long("tun-peer") .long("tun-peer")
.required(false) .required(false)
.value_name("IP") .value_name("IP")
.help("Sets the Tun interface destination (peer) address (Phantun Client's end). \ .help("Sets the Tun interface IPv4 destination (peer) address (Phantun Client's end). \
You will need to setup SNAT/MASQUERADE rules on your Internet facing interface \ You will need to setup SNAT/MASQUERADE rules on your Internet facing interface \
in order for Phantun Client to connect to Phantun Server") in order for Phantun Client to connect to Phantun Server")
.default_value("192.168.200.2") .default_value("192.168.200.2")
.takes_value(true), .takes_value(true),
) )
.arg(
Arg::new("ipv4_only")
.long("ipv4-only")
.short('4')
.required(false)
.help("Do not assign IPv6 addresses to Tun interface")
.takes_value(false)
.conflicts_with_all(&["tun_local6", "tun_peer6"]),
)
.arg(
Arg::new("tun_local6")
.long("tun-local6")
.required(false)
.value_name("IP")
.help("Sets the Tun interface IPv6 local address (O/S's end)")
.default_value("fec8::1")
.takes_value(true),
)
.arg(
Arg::new("tun_peer6")
.long("tun-peer6")
.required(false)
.value_name("IP")
.help("Sets the Tun interface IPv6 destination (peer) address (Phantun Client's end). \
You will need to setup SNAT/MASQUERADE rules on your Internet facing interface \
in order for Phantun Client to connect to Phantun Server")
.default_value("fec8::2")
.takes_value(true),
)
.get_matches(); .get_matches();
let local_addr: SocketAddr = matches let local_addr: SocketAddr = matches
@ -76,16 +105,13 @@ async fn main() -> io::Result<()> {
.parse() .parse()
.expect("bad local address"); .expect("bad local address");
let ipv4_only = matches.is_present("ipv4_only");
let remote_addr = tokio::net::lookup_host(matches.value_of("remote").unwrap()) let remote_addr = tokio::net::lookup_host(matches.value_of("remote").unwrap())
.await .await
.expect("bad remote address or host") .expect("bad remote address or host")
.find(|addr| addr.is_ipv4()) .find(|addr| !ipv4_only || addr.is_ipv4())
.expect("unable to resolve remote host name or no valid A record was returned"); .expect("unable to resolve remote host name");
let remote_addr = if let SocketAddr::V4(addr) = remote_addr {
addr
} else {
unreachable!();
};
info!("Remote address is: {}", remote_addr); info!("Remote address is: {}", remote_addr);
let tun_local: Ipv4Addr = matches let tun_local: Ipv4Addr = matches
@ -99,11 +125,26 @@ async fn main() -> io::Result<()> {
.parse() .parse()
.expect("bad peer address for Tun interface"); .expect("bad peer address for Tun interface");
let (tun_local6, tun_peer6) = if ipv4_only {
(None, None)
} else {
(
matches
.value_of("tun_local6")
.map(|v| v.parse().expect("bad local address for Tun interface")),
matches
.value_of("tun_peer6")
.map(|v| v.parse().expect("bad peer address for Tun interface")),
)
};
let tun_name = matches.value_of("tun").unwrap();
let num_cpus = num_cpus::get(); let num_cpus = num_cpus::get();
info!("{} cores available", num_cpus); info!("{} cores available", num_cpus);
let tun = TunBuilder::new() let tun = TunBuilder::new()
.name(matches.value_of("tun").unwrap()) // if name is empty, then it is set by kernel. .name(tun_name) // if name is empty, then it is set by kernel.
.tap(false) // false (default): TUN, true: TAP. .tap(false) // false (default): TUN, true: TAP.
.packet_info(false) // false: IFF_NO_PI, default is true. .packet_info(false) // false: IFF_NO_PI, default is true.
.up() // or set it up manually using `sudo ip link set <tun-name> up`. .up() // or set it up manually using `sudo ip link set <tun-name> up`.
@ -112,12 +153,16 @@ async fn main() -> io::Result<()> {
.try_build_mq(num_cpus) .try_build_mq(num_cpus)
.unwrap(); .unwrap();
if remote_addr.is_ipv6() {
assign_ipv6_address(tun[0].name(), tun_local6.unwrap(), tun_peer6.unwrap());
}
info!("Created TUN device {}", tun[0].name()); info!("Created TUN device {}", tun[0].name());
let udp_sock = Arc::new(new_udp_reuseport(local_addr)); let udp_sock = Arc::new(new_udp_reuseport(local_addr));
let connections = Arc::new(RwLock::new(HashMap::<SocketAddr, Arc<Socket>>::new())); let connections = Arc::new(RwLock::new(HashMap::<SocketAddr, Arc<Socket>>::new()));
let mut stack = Stack::new(tun); let mut stack = Stack::new(tun, tun_peer, tun_peer6);
let main_loop = tokio::spawn(async move { let main_loop = tokio::spawn(async move {
let mut buf_r = [0u8; MAX_PACKET_LEN]; let mut buf_r = [0u8; MAX_PACKET_LEN];

View File

@ -2,7 +2,7 @@ use clap::{crate_version, Arg, Command};
use fake_tcp::packet::MAX_PACKET_LEN; use fake_tcp::packet::MAX_PACKET_LEN;
use fake_tcp::Stack; use fake_tcp::Stack;
use log::{debug, error, info}; use log::{debug, error, info};
use phantun::utils::new_udp_reuseport; use phantun::utils::{assign_ipv6_address, new_udp_reuseport};
use std::io; use std::io;
use std::net::Ipv4Addr; use std::net::Ipv4Addr;
use std::sync::Arc; use std::sync::Arc;
@ -68,6 +68,35 @@ async fn main() -> io::Result<()> {
.default_value("192.168.201.2") .default_value("192.168.201.2")
.takes_value(true), .takes_value(true),
) )
.arg(
Arg::new("ipv4_only")
.long("ipv4-only")
.short('4')
.required(false)
.help("Do not assign IPv6 addresses to Tun interface")
.takes_value(false)
.conflicts_with_all(&["tun_local6", "tun_peer6"]),
)
.arg(
Arg::new("tun_local6")
.long("tun-local6")
.required(false)
.value_name("IP")
.help("Sets the Tun interface IPv6 local address (O/S's end)")
.default_value("fec9::1")
.takes_value(true),
)
.arg(
Arg::new("tun_peer6")
.long("tun-peer6")
.required(false)
.value_name("IP")
.help("Sets the Tun interface IPv6 destination (peer) address (Phantun Client's end). \
You will need to setup SNAT/MASQUERADE rules on your Internet facing interface \
in order for Phantun Client to connect to Phantun Server")
.default_value("fec9::2")
.takes_value(true),
)
.get_matches(); .get_matches();
let local_port: u16 = matches let local_port: u16 = matches
@ -94,11 +123,26 @@ async fn main() -> io::Result<()> {
.parse() .parse()
.expect("bad peer address for Tun interface"); .expect("bad peer address for Tun interface");
let (tun_local6, tun_peer6) = if matches.is_present("ipv4_only") {
(None, None)
} else {
(
matches
.value_of("tun_local6")
.map(|v| v.parse().expect("bad local address for Tun interface")),
matches
.value_of("tun_peer6")
.map(|v| v.parse().expect("bad peer address for Tun interface")),
)
};
let tun_name = matches.value_of("tun").unwrap();
let num_cpus = num_cpus::get(); let num_cpus = num_cpus::get();
info!("{} cores available", num_cpus); info!("{} cores available", num_cpus);
let tun = TunBuilder::new() let tun = TunBuilder::new()
.name(matches.value_of("tun").unwrap()) // if name is empty, then it is set by kernel. .name(tun_name) // if name is empty, then it is set by kernel.
.tap(false) // false (default): TUN, true: TAP. .tap(false) // false (default): TUN, true: TAP.
.packet_info(false) // false: IFF_NO_PI, default is true. .packet_info(false) // false: IFF_NO_PI, default is true.
.up() // or set it up manually using `sudo ip link set <tun-name> up`. .up() // or set it up manually using `sudo ip link set <tun-name> up`.
@ -107,10 +151,14 @@ async fn main() -> io::Result<()> {
.try_build_mq(num_cpus) .try_build_mq(num_cpus)
.unwrap(); .unwrap();
if let (Some(tun_local6), Some(tun_peer6)) = (tun_local6, tun_peer6) {
assign_ipv6_address(tun[0].name(), tun_local6, tun_peer6);
}
info!("Created TUN device {}", tun[0].name()); info!("Created TUN device {}", tun[0].name());
//thread::sleep(time::Duration::from_secs(5)); //thread::sleep(time::Duration::from_secs(5));
let mut stack = Stack::new(tun); let mut stack = Stack::new(tun, tun_local, tun_local6);
stack.listen(local_port); stack.listen(local_port);
info!("Listening on {}", local_port); info!("Listening on {}", local_port);

View File

@ -1,4 +1,15 @@
use std::net::SocketAddr; use neli::{
consts::{
nl::{NlmF, NlmFFlags},
rtnl::{Ifa, IfaFFlags, RtAddrFamily, Rtm},
socket::NlFamily,
},
nl::{NlPayload, Nlmsghdr},
rtnl::{Ifaddrmsg, Rtattr},
socket::NlSocketHandle,
types::RtBuffer,
};
use std::net::{Ipv6Addr, SocketAddr};
use tokio::net::UdpSocket; use tokio::net::UdpSocket;
pub fn new_udp_reuseport(local_addr: SocketAddr) -> UdpSocket { pub fn new_udp_reuseport(local_addr: SocketAddr) -> UdpSocket {
@ -20,3 +31,30 @@ pub fn new_udp_reuseport(local_addr: SocketAddr) -> UdpSocket {
let udp_sock: std::net::UdpSocket = udp_sock.into(); let udp_sock: std::net::UdpSocket = udp_sock.into();
udp_sock.try_into().unwrap() udp_sock.try_into().unwrap()
} }
pub fn assign_ipv6_address(device_name: &str, local: Ipv6Addr, peer: Ipv6Addr) {
let index = nix::net::if_::if_nametoindex(device_name).unwrap();
let mut rtnl = NlSocketHandle::connect(NlFamily::Route, None, &[]).unwrap();
let mut rtattrs = RtBuffer::new();
rtattrs.push(Rtattr::new(None, Ifa::Local, &local.octets()[..]).unwrap());
rtattrs.push(Rtattr::new(None, Ifa::Address, &peer.octets()[..]).unwrap());
let ifaddrmsg = Ifaddrmsg {
ifa_family: RtAddrFamily::Inet6,
ifa_prefixlen: 128,
ifa_flags: IfaFFlags::empty(),
ifa_scope: 0,
ifa_index: index as i32,
rtattrs,
};
let nl_header = Nlmsghdr::new(
None,
Rtm::Newaddr,
NlmFFlags::new(&[NlmF::Request]),
None,
None,
NlPayload::Payload(ifaddrmsg),
);
rtnl.send(nl_header).unwrap();
}