package iface import ( "fmt" "net" "net/netip" "github.com/pion/transport/v3" log "github.com/sirupsen/logrus" "golang.org/x/sys/windows" "golang.zx2c4.com/wireguard/device" "golang.zx2c4.com/wireguard/ipc" "golang.zx2c4.com/wireguard/tun" "golang.zx2c4.com/wireguard/windows/tunnel/winipcfg" "github.com/netbirdio/netbird/iface/bind" ) type tunDevice struct { name string address WGAddress netInterface NetInterface iceBind *bind.ICEBind mtu int uapi net.Listener wrapper *DeviceWrapper close chan struct{} } func newTunDevice(name string, address WGAddress, mtu int, transportNet transport.Net) *tunDevice { return &tunDevice{ name: name, address: address, mtu: mtu, iceBind: bind.NewICEBind(transportNet), close: make(chan struct{}), } } func (c *tunDevice) Create() error { var err error c.netInterface, err = c.createWithUserspace() if err != nil { return err } return c.assignAddr() } // createWithUserspace Creates a new Wireguard interface, using wireguard-go userspace implementation func (c *tunDevice) createWithUserspace() (NetInterface, error) { tunIface, err := tun.CreateTUN(c.name, c.mtu) if err != nil { return nil, err } c.wrapper = newDeviceWrapper(tunIface) // We need to create a wireguard-go device and listen to configuration requests tunDev := device.NewDevice(c.wrapper, c.iceBind, device.NewLogger(device.LogLevelSilent, "[netbird] ")) err = tunDev.Up() if err != nil { _ = tunIface.Close() return nil, err } luid := winipcfg.LUID(tunIface.(*tun.NativeTun).LUID()) nbiface, err := luid.IPInterface(windows.AF_INET) if err != nil { _ = tunIface.Close() return nil, fmt.Errorf("got error when getting ip interface %s", err) } nbiface.NLMTU = uint32(c.mtu) err = nbiface.Set() if err != nil { _ = tunIface.Close() return nil, fmt.Errorf("got error when getting setting the interface mtu: %s", err) } c.uapi, err = c.getUAPI(c.name) if err != nil { _ = tunIface.Close() return nil, err } go func() { for { select { case <-c.close: log.Debugf("exit uapi.Accept()") return default: } uapiConn, uapiErr := c.uapi.Accept() if uapiErr != nil { log.Traceln("uapi Accept failed with error: ", uapiErr) continue } go func() { tunDev.IpcHandle(uapiConn) log.Debugf("exit tunDevice.IpcHandle") }() } }() log.Debugln("UAPI listener started") return tunIface, nil } func (c *tunDevice) UpdateAddr(address WGAddress) error { c.address = address return c.assignAddr() } func (c *tunDevice) WgAddress() WGAddress { return c.address } func (c *tunDevice) DeviceName() string { return c.name } func (c *tunDevice) Close() error { select { case c.close <- struct{}{}: default: } var err1, err2 error if c.netInterface != nil { err1 = c.netInterface.Close() } if c.uapi != nil { err2 = c.uapi.Close() } if err1 != nil { return err1 } return err2 } func (c *tunDevice) getInterfaceGUIDString() (string, error) { if c.netInterface == nil { return "", fmt.Errorf("interface has not been initialized yet") } windowsDevice := c.netInterface.(*tun.NativeTun) luid := winipcfg.LUID(windowsDevice.LUID()) guid, err := luid.GUID() if err != nil { return "", err } return guid.String(), nil } // assignAddr Adds IP address to the tunnel interface and network route based on the range provided func (c *tunDevice) assignAddr() error { tunDev := c.netInterface.(*tun.NativeTun) luid := winipcfg.LUID(tunDev.LUID()) log.Debugf("adding address %s to interface: %s", c.address.IP, c.name) return luid.SetIPAddresses([]netip.Prefix{netip.MustParsePrefix(c.address.String())}) } // getUAPI returns a Listener func (c *tunDevice) getUAPI(iface string) (net.Listener, error) { return ipc.UAPIListen(iface) }