mirror of
https://github.com/netbirdio/netbird.git
synced 2025-08-02 20:49:17 +02:00
fbb1b55beb
This PR introduces a new inactivity package responsible for monitoring peer activity and notifying when peers become inactive. Introduces a new Signal message type to close the peer connection after the idle timeout is reached. Periodically checks the last activity of registered peers via a Bind interface. Notifies via a channel when peers exceed a configurable inactivity threshold. Default settings DefaultInactivityThreshold is set to 15 minutes, with a minimum allowed threshold of 1 minute. Limitations This inactivity check does not support kernel WireGuard integration. In kernel–user space communication, the user space side will always be responsible for closing the connection.
144 lines
3.3 KiB
Go
144 lines
3.3 KiB
Go
//go:build !android
|
|
// +build !android
|
|
|
|
package device
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
"golang.zx2c4.com/wireguard/device"
|
|
"golang.zx2c4.com/wireguard/tun/netstack"
|
|
|
|
"github.com/netbirdio/netbird/client/iface/bind"
|
|
"github.com/netbirdio/netbird/client/iface/configurer"
|
|
nbnetstack "github.com/netbirdio/netbird/client/iface/netstack"
|
|
"github.com/netbirdio/netbird/client/iface/wgaddr"
|
|
nbnet "github.com/netbirdio/netbird/util/net"
|
|
)
|
|
|
|
type TunNetstackDevice struct {
|
|
name string
|
|
address wgaddr.Address
|
|
port int
|
|
key string
|
|
mtu int
|
|
listenAddress string
|
|
iceBind *bind.ICEBind
|
|
|
|
device *device.Device
|
|
filteredDevice *FilteredDevice
|
|
nsTun *nbnetstack.NetStackTun
|
|
udpMux *bind.UniversalUDPMuxDefault
|
|
configurer WGConfigurer
|
|
|
|
net *netstack.Net
|
|
}
|
|
|
|
func NewNetstackDevice(name string, address wgaddr.Address, wgPort int, key string, mtu int, iceBind *bind.ICEBind, listenAddress string) *TunNetstackDevice {
|
|
return &TunNetstackDevice{
|
|
name: name,
|
|
address: address,
|
|
port: wgPort,
|
|
key: key,
|
|
mtu: mtu,
|
|
listenAddress: listenAddress,
|
|
iceBind: iceBind,
|
|
}
|
|
}
|
|
|
|
func (t *TunNetstackDevice) Create() (WGConfigurer, error) {
|
|
log.Info("create nbnetstack tun interface")
|
|
|
|
// TODO: get from service listener runtime IP
|
|
dnsAddr, err := nbnet.GetLastIPFromNetwork(t.address.Network, 1)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("last ip: %w", err)
|
|
}
|
|
|
|
log.Debugf("netstack using address: %s", t.address.IP)
|
|
t.nsTun = nbnetstack.NewNetStackTun(t.listenAddress, t.address.IP, dnsAddr, t.mtu)
|
|
log.Debugf("netstack using dns address: %s", dnsAddr)
|
|
tunIface, net, err := t.nsTun.Create()
|
|
if err != nil {
|
|
return nil, fmt.Errorf("error creating tun device: %s", err)
|
|
}
|
|
t.filteredDevice = newDeviceFilter(tunIface)
|
|
t.net = net
|
|
|
|
t.device = device.NewDevice(
|
|
t.filteredDevice,
|
|
t.iceBind,
|
|
device.NewLogger(wgLogLevel(), "[netbird] "),
|
|
)
|
|
|
|
t.configurer = configurer.NewUSPConfigurer(t.device, t.name, t.iceBind.ActivityRecorder())
|
|
err = t.configurer.ConfigureInterface(t.key, t.port)
|
|
if err != nil {
|
|
_ = tunIface.Close()
|
|
return nil, fmt.Errorf("error configuring interface: %s", err)
|
|
}
|
|
|
|
log.Debugf("device has been created: %s", t.name)
|
|
return t.configurer, nil
|
|
}
|
|
|
|
func (t *TunNetstackDevice) Up() (*bind.UniversalUDPMuxDefault, error) {
|
|
if t.device == nil {
|
|
return nil, fmt.Errorf("device is not ready yet")
|
|
}
|
|
|
|
err := t.device.Up()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
udpMux, err := t.iceBind.GetICEMux()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
t.udpMux = udpMux
|
|
log.Debugf("netstack device is ready to use")
|
|
return udpMux, nil
|
|
}
|
|
|
|
func (t *TunNetstackDevice) UpdateAddr(wgaddr.Address) error {
|
|
return nil
|
|
}
|
|
|
|
func (t *TunNetstackDevice) Close() error {
|
|
if t.configurer != nil {
|
|
t.configurer.Close()
|
|
}
|
|
|
|
if t.device != nil {
|
|
t.device.Close()
|
|
}
|
|
|
|
if t.udpMux != nil {
|
|
return t.udpMux.Close()
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (t *TunNetstackDevice) WgAddress() wgaddr.Address {
|
|
return t.address
|
|
}
|
|
|
|
func (t *TunNetstackDevice) DeviceName() string {
|
|
return t.name
|
|
}
|
|
|
|
func (t *TunNetstackDevice) FilteredDevice() *FilteredDevice {
|
|
return t.filteredDevice
|
|
}
|
|
|
|
// Device returns the wireguard device
|
|
func (t *TunNetstackDevice) Device() *device.Device {
|
|
return t.device
|
|
}
|
|
|
|
func (t *TunNetstackDevice) GetNet() *netstack.Net {
|
|
return t.net
|
|
}
|