mirror of
https://github.com/netbirdio/netbird.git
synced 2025-02-12 08:19:30 +01:00
* Feat add basic support for IPv6 networks Newly generated networks automatically generate an IPv6 prefix of size 64 within the ULA address range, devices obtain a randomly generated address within this prefix. Currently, this is Linux only and does not yet support all features (routes currently cause an error). * Fix firewall configuration for IPv6 networks * Fix routing configuration for IPv6 networks * Feat provide info on IPv6 support for specific client to mgmt server * Feat allow configuration of IPv6 support through API, improve stability * Feat add IPv6 support to new firewall implementation * Fix peer list item response not containing IPv6 address * Fix nftables breaking on IPv6 address change * Fix build issues for non-linux systems * Fix intermittent disconnections when IPv6 is enabled * Fix test issues and make some minor revisions * Fix some more testing issues * Fix more CI issues due to IPv6 * Fix more testing issues * Add inheritance of IPv6 enablement status from groups * Fix IPv6 events not having associated messages * Address first review comments regarding IPv6 support * Fix IPv6 table being created even when IPv6 is disabled Also improved stability of IPv6 route and firewall handling on client side * Fix IPv6 routes not being removed * Fix DNS IPv6 issues, limit IPv6 nameservers to IPv6 peers * Improve code for IPv6 DNS server selection, add AAAA custom records * Ensure IPv6 routes can only exist for IPv6 routing peers * Fix IPv6 network generation randomness * Fix a bunch of compilation issues and test failures * Replace method calls that are unavailable in Go 1.21 * Fix nil dereference in cleanUpDefaultForwardRules6 * Fix nil pointer dereference when persisting IPv6 network in sqlite * Clean up of client-side code changes for IPv6 * Fix nil dereference in rule mangling and compilation issues * Add a bunch of client-side test cases for IPv6 * Fix IPv6 tests running on unsupported environments * Fix import cycle in tests * Add missing method SupportsIPv6() for windows * Require IPv6 default route for IPv6 tests * Fix panics in routemanager tests on non-linux * Fix some more route manager tests concerning IPv6 * Add some final client-side tests * Add IPv6 tests for management code, small fixes * Fix linting issues * Fix small test suite issues * Fix linter issues and builds on macOS and Windows again * fix builds for iOS because of IPv6 breakage
153 lines
3.5 KiB
Go
153 lines
3.5 KiB
Go
//go:build android
|
|
// +build android
|
|
|
|
package iface
|
|
|
|
import (
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/pion/transport/v3"
|
|
log "github.com/sirupsen/logrus"
|
|
"golang.org/x/sys/unix"
|
|
"golang.zx2c4.com/wireguard/device"
|
|
"golang.zx2c4.com/wireguard/tun"
|
|
|
|
"github.com/netbirdio/netbird/iface/bind"
|
|
)
|
|
|
|
// ignore the wgTunDevice interface on Android because the creation of the tun device is different on this platform
|
|
type wgTunDevice struct {
|
|
address WGAddress
|
|
port int
|
|
key string
|
|
mtu int
|
|
iceBind *bind.ICEBind
|
|
tunAdapter TunAdapter
|
|
|
|
name string
|
|
device *device.Device
|
|
wrapper *DeviceWrapper
|
|
udpMux *bind.UniversalUDPMuxDefault
|
|
configurer wgConfigurer
|
|
}
|
|
|
|
func newTunDevice(address WGAddress, port int, key string, mtu int, transportNet transport.Net, tunAdapter TunAdapter) wgTunDevice {
|
|
return wgTunDevice{
|
|
address: address,
|
|
port: port,
|
|
key: key,
|
|
mtu: mtu,
|
|
iceBind: bind.NewICEBind(transportNet),
|
|
tunAdapter: tunAdapter,
|
|
}
|
|
}
|
|
|
|
func (t *wgTunDevice) Create(routes []string, dns string, searchDomains []string) (wgConfigurer, error) {
|
|
log.Info("create tun interface")
|
|
|
|
routesString := routesToString(routes)
|
|
searchDomainsToString := searchDomainsToString(searchDomains)
|
|
|
|
fd, err := t.tunAdapter.ConfigureInterface(t.address.String(), t.mtu, dns, searchDomainsToString, routesString)
|
|
if err != nil {
|
|
log.Errorf("failed to create Android interface: %s", err)
|
|
return nil, err
|
|
}
|
|
|
|
tunDevice, name, err := tun.CreateUnmonitoredTUNFromFD(fd)
|
|
if err != nil {
|
|
_ = unix.Close(fd)
|
|
log.Errorf("failed to create Android interface: %s", err)
|
|
return nil, err
|
|
}
|
|
t.name = name
|
|
t.wrapper = newDeviceWrapper(tunDevice)
|
|
|
|
log.Debugf("attaching to interface %v", name)
|
|
t.device = device.NewDevice(t.wrapper, t.iceBind, device.NewLogger(device.LogLevelSilent, "[wiretrustee] "))
|
|
// without this property mobile devices can discover remote endpoints if the configured one was wrong.
|
|
// this helps with support for the older NetBird clients that had a hardcoded direct mode
|
|
// t.device.DisableSomeRoamingForBrokenMobileSemantics()
|
|
|
|
t.configurer = newWGUSPConfigurer(t.device, t.name)
|
|
err = t.configurer.configureInterface(t.key, t.port)
|
|
if err != nil {
|
|
t.device.Close()
|
|
t.configurer.close()
|
|
return nil, err
|
|
}
|
|
return t.configurer, nil
|
|
}
|
|
func (t *wgTunDevice) Up() (*bind.UniversalUDPMuxDefault, error) {
|
|
err := t.device.Up()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
udpMux, err := t.iceBind.GetICEMux()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
t.udpMux = udpMux
|
|
log.Debugf("device is ready to use: %s", t.name)
|
|
return udpMux, nil
|
|
}
|
|
|
|
func (t *wgTunDevice) UpdateAddr(addr WGAddress) error {
|
|
// todo implement
|
|
return nil
|
|
}
|
|
|
|
func (t *wgTunDevice) UpdateAddr6(addr6 *WGAddress) error {
|
|
if addr6 == nil {
|
|
return nil
|
|
}
|
|
return fmt.Errorf("IPv6 is not supported on this operating system")
|
|
}
|
|
|
|
func (t *wgTunDevice) Close() error {
|
|
if t.configurer != nil {
|
|
t.configurer.close()
|
|
}
|
|
|
|
if t.device != nil {
|
|
t.device.Close()
|
|
t.device = nil
|
|
}
|
|
|
|
if t.udpMux != nil {
|
|
return t.udpMux.Close()
|
|
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (t *wgTunDevice) Device() *device.Device {
|
|
return t.device
|
|
}
|
|
|
|
func (t *wgTunDevice) DeviceName() string {
|
|
return t.name
|
|
}
|
|
|
|
func (t *wgTunDevice) WgAddress() WGAddress {
|
|
return t.address
|
|
}
|
|
|
|
func (t *wgTunDevice) WgAddress6() *WGAddress {
|
|
return nil
|
|
}
|
|
|
|
func (t *wgTunDevice) Wrapper() *DeviceWrapper {
|
|
return t.wrapper
|
|
}
|
|
|
|
func routesToString(routes []string) string {
|
|
return strings.Join(routes, ";")
|
|
}
|
|
|
|
func searchDomainsToString(searchDomains []string) string {
|
|
return strings.Join(searchDomains, ";")
|
|
}
|