package lib import ( "encoding/binary" "fmt" "net" "github.com/jsimonetti/rtnetlink" logging "github.com/tim-beatham/smegmesh/pkg/log" "golang.org/x/sys/unix" ) // Maximum MTU to assin to WireGuard // This isn't configurable const WIREGUARD_MTU = 1420 // RtNetlinkConfig: represents an rtnetlkink configuration instance type RtNetlinkConfig struct { // conn: connection to the rtnetlink API conn *rtnetlink.Conn } // CreateLink: Create a netlink interface if it does not exist. ifName is the name of the netlink interface func (c *RtNetlinkConfig) CreateLink(ifName string) error { _, err := net.InterfaceByName(ifName) if err == nil { return fmt.Errorf("interface %s already exists", ifName) } err = c.conn.Link.New(&rtnetlink.LinkMessage{ Family: unix.AF_UNSPEC, Flags: unix.IFF_UP, Attributes: &rtnetlink.LinkAttributes{ Name: ifName, Info: &rtnetlink.LinkInfo{Kind: "wireguard"}, MTU: uint32(WIREGUARD_MTU), }, }) if err != nil { return fmt.Errorf("failed to create wireguard interface: %w", err) } return nil } // DeleteLink: delete the specified interface func (c *RtNetlinkConfig) DeleteLink(ifName string) error { iface, err := net.InterfaceByName(ifName) if err != nil { return fmt.Errorf("failed to get interface %s %w", ifName, err) } err = c.conn.Link.Delete(uint32(iface.Index)) if err != nil { return fmt.Errorf("failed to delete wg interface %w", err) } return nil } // AddAddress: adds an address to the given interface. func (c *RtNetlinkConfig) AddAddress(ifName string, address string) error { iface, err := net.InterfaceByName(ifName) if err != nil { return fmt.Errorf("failed to get interface %s error: %w", ifName, err) } addr, cidr, err := net.ParseCIDR(address) if err != nil { return fmt.Errorf("failed to parse CIDR %s error: %w", addr, err) } family := unix.AF_INET6 ipv4 := cidr.IP.To4() if ipv4 != nil { family = unix.AF_INET } // Calculate the prefix length ones, _ := cidr.Mask.Size() // Calculate the broadcast IP // Only used when family is AF_INET var brd net.IP if ipv4 != nil { brd = make(net.IP, len(ipv4)) binary.BigEndian.PutUint32(brd, binary.BigEndian.Uint32(ipv4)|^binary.BigEndian.Uint32(net.IP(cidr.Mask).To4())) } err = c.conn.Address.New(&rtnetlink.AddressMessage{ Family: uint8(family), PrefixLength: uint8(ones), Scope: unix.RT_SCOPE_UNIVERSE, Index: uint32(iface.Index), Attributes: &rtnetlink.AddressAttributes{ Address: addr, Local: addr, Broadcast: brd, }, }) if err != nil { err = fmt.Errorf("failed to add address to link %w", err) } return err } // AddRoute: adds a route to the routing table. // ifName is the intrface to add the route to // gateway is the IP of the gateway device to hop to // dst is the network prefix of the advertised destination func (c *RtNetlinkConfig) AddRoute(ifName string, route Route) error { iface, err := net.InterfaceByName(ifName) if err != nil { return fmt.Errorf("failed accessing interface %s error %w", ifName, err) } gw := route.Gateway dst := route.Destination var family uint8 = unix.AF_INET6 if dst.IP.To4() != nil { family = unix.AF_INET } routes, err := c.listRoutes(ifName, family) if err != nil { return err } // If it already exists no need to add the route if !Contains(routes, func(prevRoute rtnetlink.RouteMessage) bool { return prevRoute.Attributes.Dst.Equal(route.Destination.IP) && prevRoute.Attributes.Gateway.Equal(route.Gateway) }) { attr := rtnetlink.RouteAttributes{ Dst: dst.IP, OutIface: uint32(iface.Index), Gateway: gw, } ones, _ := dst.Mask.Size() err = c.conn.Route.Replace(&rtnetlink.RouteMessage{ Family: family, Table: unix.RT_TABLE_MAIN, Protocol: unix.RTPROT_BOOT, Scope: unix.RT_SCOPE_LINK, Type: unix.RTN_UNICAST, DstLength: uint8(ones), Attributes: attr, }) if err != nil { return fmt.Errorf("failed to add route %w", err) } } return nil } // DeleteRoute: deletes routes with the gateway and destination func (c *RtNetlinkConfig) DeleteRoute(ifName string, route Route) error { iface, err := net.InterfaceByName(ifName) if err != nil { return fmt.Errorf("failed accessing interface %s error %w", ifName, err) } gw := route.Gateway dst := route.Destination var family uint8 = unix.AF_INET6 if dst.IP.To4() != nil { family = unix.AF_INET } attr := rtnetlink.RouteAttributes{ Dst: dst.IP, OutIface: uint32(iface.Index), Gateway: gw, } ones, _ := dst.Mask.Size() err = c.conn.Route.Delete(&rtnetlink.RouteMessage{ Family: family, Table: unix.RT_TABLE_MAIN, Protocol: unix.RTPROT_BOOT, Scope: unix.RT_SCOPE_LINK, Type: unix.RTN_UNICAST, DstLength: uint8(ones), Attributes: attr, }) if err != nil { return fmt.Errorf("failed to delete route %s", dst.IP.String()) } return nil } // route: represents a rout to add to the RIB type Route struct { Gateway net.IP Destination net.IPNet } func (r1 Route) equal(r2 Route) bool { mask1Ones, _ := r1.Destination.Mask.Size() mask2Ones, _ := r2.Destination.Mask.Size() return r1.Gateway.String() == r2.Gateway.String() && (mask1Ones == 0 && mask2Ones == 0 || r1.Destination.IP.Equal(r2.Destination.IP)) } // DeleteRoutes: deletes all routes not in exclude on the given interface func (c *RtNetlinkConfig) DeleteRoutes(ifName string, family uint8, exclude ...Route) error { routes, err := c.listRoutes(ifName, family) if err != nil { return err } ifRoutes := make([]Route, 0) for _, rtRoute := range routes { maskSize := 128 if family == unix.AF_INET { maskSize = 32 } cidr := net.CIDRMask(int(rtRoute.DstLength), maskSize) route := Route{ Gateway: rtRoute.Attributes.Gateway, Destination: net.IPNet{IP: rtRoute.Attributes.Dst, Mask: cidr}, } ifRoutes = append(ifRoutes, route) } shouldExclude := func(r Route) bool { for _, route := range exclude { if r.equal(route) { return false } } return true } toDelete := Filter(ifRoutes, shouldExclude) for _, route := range toDelete { logging.Log.WriteInfof("Deleting route: %s", route.Destination.String()) err := c.DeleteRoute(ifName, route) if err != nil { return err } } return nil } // listRoutes: lists all routes on the interface func (c *RtNetlinkConfig) listRoutes(ifName string, family uint8) ([]rtnetlink.RouteMessage, error) { iface, err := net.InterfaceByName(ifName) if err != nil { return nil, fmt.Errorf("failed accessing interface %s error %w", ifName, err) } routes, err := c.conn.Route.List() if err != nil { return nil, fmt.Errorf("failed to get route %w", err) } filterFunc := func(r rtnetlink.RouteMessage) bool { return r.Attributes.Gateway != nil && r.Attributes.OutIface == uint32(iface.Index) } routes = Filter(routes, filterFunc) return routes, nil } // Close: close the Rtnetlink API func (c *RtNetlinkConfig) Close() error { return c.conn.Close() } // newRtNetlinkConfig: connect to the RtnetlinkAPI func NewRtNetlinkConfig() (*RtNetlinkConfig, error) { conn, err := rtnetlink.Dial(nil) if err != nil { return nil, err } return &RtNetlinkConfig{conn: conn}, nil }