mirror of
https://github.com/netbirdio/netbird.git
synced 2025-07-11 03:45:28 +02:00
fbb1b55beb
This PR introduces a new inactivity package responsible for monitoring peer activity and notifying when peers become inactive. Introduces a new Signal message type to close the peer connection after the idle timeout is reached. Periodically checks the last activity of registered peers via a Bind interface. Notifies via a channel when peers exceed a configurable inactivity threshold. Default settings DefaultInactivityThreshold is set to 15 minutes, with a minimum allowed threshold of 1 minute. Limitations This inactivity check does not support kernel WireGuard integration. In kernel–user space communication, the user space side will always be responsible for closing the connection.
140 lines
3.1 KiB
Go
140 lines
3.1 KiB
Go
//go:build ios
|
|
// +build ios
|
|
|
|
package device
|
|
|
|
import (
|
|
"os"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
"golang.org/x/sys/unix"
|
|
"golang.zx2c4.com/wireguard/device"
|
|
"golang.zx2c4.com/wireguard/tun"
|
|
"golang.zx2c4.com/wireguard/tun/netstack"
|
|
|
|
"github.com/netbirdio/netbird/client/iface/bind"
|
|
"github.com/netbirdio/netbird/client/iface/configurer"
|
|
"github.com/netbirdio/netbird/client/iface/wgaddr"
|
|
)
|
|
|
|
type TunDevice struct {
|
|
name string
|
|
address wgaddr.Address
|
|
port int
|
|
key string
|
|
iceBind *bind.ICEBind
|
|
tunFd int
|
|
|
|
device *device.Device
|
|
filteredDevice *FilteredDevice
|
|
udpMux *bind.UniversalUDPMuxDefault
|
|
configurer WGConfigurer
|
|
}
|
|
|
|
func NewTunDevice(name string, address wgaddr.Address, port int, key string, iceBind *bind.ICEBind, tunFd int) *TunDevice {
|
|
return &TunDevice{
|
|
name: name,
|
|
address: address,
|
|
port: port,
|
|
key: key,
|
|
iceBind: iceBind,
|
|
tunFd: tunFd,
|
|
}
|
|
}
|
|
|
|
func (t *TunDevice) Create() (WGConfigurer, error) {
|
|
log.Infof("create tun interface")
|
|
|
|
dupTunFd, err := unix.Dup(t.tunFd)
|
|
if err != nil {
|
|
log.Errorf("Unable to dup tun fd: %v", err)
|
|
return nil, err
|
|
}
|
|
|
|
err = unix.SetNonblock(dupTunFd, true)
|
|
if err != nil {
|
|
log.Errorf("Unable to set tun fd as non blocking: %v", err)
|
|
_ = unix.Close(dupTunFd)
|
|
return nil, err
|
|
}
|
|
tunDevice, err := tun.CreateTUNFromFile(os.NewFile(uintptr(dupTunFd), "/dev/tun"), 0)
|
|
if err != nil {
|
|
log.Errorf("Unable to create new tun device from fd: %v", err)
|
|
_ = unix.Close(dupTunFd)
|
|
return nil, err
|
|
}
|
|
|
|
t.filteredDevice = newDeviceFilter(tunDevice)
|
|
log.Debug("Attaching to interface")
|
|
t.device = device.NewDevice(t.filteredDevice, t.iceBind, device.NewLogger(wgLogLevel(), "[netbird] "))
|
|
// without this property mobile devices can discover remote endpoints if the configured one was wrong.
|
|
// this helps with support for the older NetBird clients that had a hardcoded direct mode
|
|
// t.device.DisableSomeRoamingForBrokenMobileSemantics()
|
|
|
|
t.configurer = configurer.NewUSPConfigurer(t.device, t.name, t.iceBind.ActivityRecorder())
|
|
err = t.configurer.ConfigureInterface(t.key, t.port)
|
|
if err != nil {
|
|
t.device.Close()
|
|
t.configurer.Close()
|
|
return nil, err
|
|
}
|
|
return t.configurer, nil
|
|
}
|
|
|
|
func (t *TunDevice) Up() (*bind.UniversalUDPMuxDefault, error) {
|
|
err := t.device.Up()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
udpMux, err := t.iceBind.GetICEMux()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
t.udpMux = udpMux
|
|
log.Debugf("device is ready to use: %s", t.name)
|
|
return udpMux, nil
|
|
}
|
|
|
|
func (t *TunDevice) Device() *device.Device {
|
|
return t.device
|
|
}
|
|
|
|
func (t *TunDevice) DeviceName() string {
|
|
return t.name
|
|
}
|
|
|
|
func (t *TunDevice) Close() error {
|
|
if t.configurer != nil {
|
|
t.configurer.Close()
|
|
}
|
|
|
|
if t.device != nil {
|
|
t.device.Close()
|
|
t.device = nil
|
|
}
|
|
|
|
if t.udpMux != nil {
|
|
return t.udpMux.Close()
|
|
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (t *TunDevice) WgAddress() wgaddr.Address {
|
|
return t.address
|
|
}
|
|
|
|
func (t *TunDevice) UpdateAddr(_ wgaddr.Address) error {
|
|
// todo implement
|
|
return nil
|
|
}
|
|
|
|
func (t *TunDevice) FilteredDevice() *FilteredDevice {
|
|
return t.filteredDevice
|
|
}
|
|
|
|
func (t *TunDevice) GetNet() *netstack.Net {
|
|
return nil
|
|
}
|