/* * A Random IP reputation service acting as a Stream Processing Offload Agent * * This is a very simple service that implement a "random" ip reputation * service. It will return random scores for all checked IP addresses. It only * shows you how to implement a ip reputation service or such kind of services * using the SPOE. * * Copyright 2016 HAProxy Technologies, Christopher Faulet * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version * 2 of the License, or (at your option) any later version. * */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #define DEFAULT_PORT 12345 #define CONNECTION_BACKLOG 10 #define NUM_WORKERS 10 #define MAX_FRAME_SIZE 16384 #define SPOP_VERSION "1.0" #define SLEN(str) (sizeof(str)-1) #define LOG(worker, fmt, args...) \ do { \ struct timeval now; \ \ gettimeofday(&now, NULL); \ fprintf(stderr, "%ld.%06ld [%02d] " fmt "\n", \ now.tv_sec, now.tv_usec, (worker)->id, ##args); \ } while (0) #define DEBUG(x...) \ do { \ if (debug) \ LOG(x); \ } while (0) /* Frame Types sent by HAProxy and by agents */ enum spoe_frame_type { /* Frames sent by HAProxy */ SPOE_FRM_T_HAPROXY_HELLO = 1, SPOE_FRM_T_HAPROXY_DISCON, SPOE_FRM_T_HAPROXY_NOTIFY, /* Frames sent by the agents */ SPOE_FRM_T_AGENT_HELLO = 101, SPOE_FRM_T_AGENT_DISCON, SPOE_FRM_T_AGENT_ACK }; /* All supported data types */ enum spoe_data_type { SPOE_DATA_T_NULL = 0, SPOE_DATA_T_BOOL, SPOE_DATA_T_INT32, SPOE_DATA_T_UINT32, SPOE_DATA_T_INT64, SPOE_DATA_T_UINT64, SPOE_DATA_T_IPV4, SPOE_DATA_T_IPV6, SPOE_DATA_T_STR, SPOE_DATA_T_BIN, SPOE_DATA_TYPES }; /* Errors triggerd by SPOE applet */ enum spoe_frame_error { SPOE_FRM_ERR_NONE = 0, SPOE_FRM_ERR_IO, SPOE_FRM_ERR_TOUT, SPOE_FRM_ERR_TOO_BIG, SPOE_FRM_ERR_INVALID, SPOE_FRM_ERR_NO_VSN, SPOE_FRM_ERR_NO_FRAME_SIZE, SPOE_FRM_ERR_NO_CAP, SPOE_FRM_ERR_BAD_VSN, SPOE_FRM_ERR_BAD_FRAME_SIZE, SPOE_FRM_ERR_FRAG_NOT_SUPPORTED, SPOE_FRM_ERR_INTERLACED_FRAMES, SPOE_FRM_ERR_RES, SPOE_FRM_ERR_UNKNOWN = 99, SPOE_FRM_ERRS, }; /* All supported SPOE actions */ enum spoe_action_type { SPOE_ACT_T_SET_VAR = 1, SPOE_ACT_T_UNSET_VAR, SPOE_ACT_TYPES, }; /* Scopes used for variables set by agents. It is a way to be agnotic to vars * scope. */ enum spoe_vars_scope { SPOE_SCOPE_PROC = 0, /* <=> SCOPE_PROC */ SPOE_SCOPE_SESS, /* <=> SCOPE_SESS */ SPOE_SCOPE_TXN, /* <=> SCOPE_TXN */ SPOE_SCOPE_REQ, /* <=> SCOPE_REQ */ SPOE_SCOPE_RES, /* <=> SCOPE_RES */ }; enum spoa_state { SPOA_ST_CONNECTING = 0, SPOA_ST_PROCESSING, SPOA_ST_DISCONNECTING, }; enum spoa_frame_type { SPOA_FRM_T_UNKNOWN = 0, SPOA_FRM_T_HAPROXY, SPOA_FRM_T_AGENT, }; /* Flags set on the SPOE frame */ #define SPOE_FRM_FL_FIN 0x00000001 #define SPOE_FRM_FL_ABRT 0x00000002 /* Masks to get data type or flags value */ #define SPOE_DATA_T_MASK 0x0F #define SPOE_DATA_FL_MASK 0xF0 /* Flags to set Boolean values */ #define SPOE_DATA_FL_FALSE 0x00 #define SPOE_DATA_FL_TRUE 0x10 struct spoe_engine { char *id; struct list processing_frames; struct list outgoing_frames; struct list clients; struct list list; }; struct spoe_frame { enum spoa_frame_type type; char *buf; unsigned int offset; unsigned int len; unsigned int stream_id; unsigned int frame_id; unsigned int flags; bool hcheck; /* true is the CONNECT frame is a healthcheck */ bool fragmented; /* true if the frame is fragmented */ int ip_score; /* -1 if unset, else between 0 and 100 */ struct event process_frame_event; struct worker *worker; struct spoe_engine *engine; struct client *client; struct list list; char *frag_buf; /* used to accumulate payload of a fragmented frame */ unsigned int frag_len; char data[0]; }; struct client { int fd; unsigned long id; enum spoa_state state; struct event read_frame_event; struct event write_frame_event; struct spoe_frame *incoming_frame; struct spoe_frame *outgoing_frame; struct list processing_frames; struct list outgoing_frames; unsigned int max_frame_size; int status_code; char *engine_id; struct spoe_engine *engine; bool pipelining; bool async; bool fragmentation; struct worker *worker; struct list by_worker; struct list by_engine; }; struct worker { pthread_t thread; int id; struct event_base *base; struct event *monitor_event; struct list engines; unsigned int nbclients; struct list clients; struct list frames; }; struct chunk { char *str; /* beginning of the string itself. Might not be 0-terminated */ int len; /* current size of the string from first to last char */ }; union spoe_value { bool boolean; /* use for boolean */ int32_t sint32; /* used for signed 32bits integers */ uint32_t uint32; /* used for signed 32bits integers */ int32_t sint64; /* used for signed 64bits integers */ uint32_t uint64; /* used for signed 64bits integers */ struct in_addr ipv4; /* used for ipv4 addresses */ struct in6_addr ipv6; /* used for ipv6 addresses */ struct chunk buffer; /* used for char strings or buffers */ }; /* Used to store sample constant */ struct spoe_data { enum spoe_data_type type; /* SPOE_DATA_T_* */ union spoe_value u; /* spoe data value */ }; /* Globals */ static struct worker *workers = NULL; static struct worker null_worker = { .id = 0 }; static unsigned long clicount = 0; static int server_port = DEFAULT_PORT; static int num_workers = NUM_WORKERS; static unsigned int max_frame_size = MAX_FRAME_SIZE; struct timeval processing_delay = {0, 0}; static bool debug = false; static bool pipelining = false; static bool async = false; static bool fragmentation = false; static const char *spoe_frm_err_reasons[SPOE_FRM_ERRS] = { [SPOE_FRM_ERR_NONE] = "normal", [SPOE_FRM_ERR_IO] = "I/O error", [SPOE_FRM_ERR_TOUT] = "a timeout occurred", [SPOE_FRM_ERR_TOO_BIG] = "frame is too big", [SPOE_FRM_ERR_INVALID] = "invalid frame received", [SPOE_FRM_ERR_NO_VSN] = "version value not found", [SPOE_FRM_ERR_NO_FRAME_SIZE] = "max-frame-size value not found", [SPOE_FRM_ERR_NO_CAP] = "capabilities value not found", [SPOE_FRM_ERR_BAD_VSN] = "unsupported version", [SPOE_FRM_ERR_BAD_FRAME_SIZE] = "max-frame-size too big or too small", [SPOE_FRM_ERR_FRAG_NOT_SUPPORTED] = "fragmentation not supported", [SPOE_FRM_ERR_INTERLACED_FRAMES] = "invalid interlaced frames", [SPOE_FRM_ERR_RES] = "resource allocation error", [SPOE_FRM_ERR_UNKNOWN] = "an unknown error occurred", }; static void signal_cb(evutil_socket_t, short, void *); static void accept_cb(evutil_socket_t, short, void *); static void worker_monitor_cb(evutil_socket_t, short, void *); static void process_frame_cb(evutil_socket_t, short, void *); static void read_frame_cb(evutil_socket_t, short, void *); static void write_frame_cb(evutil_socket_t, short, void *); static void use_spoe_engine(struct client *); static void unuse_spoe_engine(struct client *); static void release_frame(struct spoe_frame *); static void release_client(struct client *); static void check_ipv4_reputation(struct spoe_frame *frame, struct in_addr *ipv4) { char str[INET_ADDRSTRLEN]; if (inet_ntop(AF_INET, ipv4, str, INET_ADDRSTRLEN) == NULL) return; frame->ip_score = random() % 100; DEBUG(frame->worker, "IP score for %.*s is %d", INET_ADDRSTRLEN, str, frame->ip_score); } static void check_ipv6_reputation(struct spoe_frame *frame, struct in6_addr *ipv6) { char str[INET6_ADDRSTRLEN]; if (inet_ntop(AF_INET6, ipv6, str, INET6_ADDRSTRLEN) == NULL) return; frame->ip_score = random() % 100; DEBUG(frame->worker, "IP score for %.*s is %d", INET6_ADDRSTRLEN, str, frame->ip_score); } /* Encode a variable-length integer. This function never fails and returns the * number of written bytes. */ static int encode_spoe_varint(uint64_t i, char *buf) { int idx; if (i < 240) { buf[0] = (unsigned char)i; return 1; } buf[0] = (unsigned char)i | 240; i = (i - 240) >> 4; for (idx = 1; i >= 128; ++idx) { buf[idx] = (unsigned char)i | 128; i = (i - 128) >> 7; } buf[idx++] = (unsigned char)i; return idx; } /* Decode a varable-length integer. If the decoding fails, -1 is returned. This * happens when the buffer's end in reached. On success, the number of read * bytes is returned. */ static int decode_spoe_varint(char *buf, char *end, uint64_t *i) { unsigned char *msg = (unsigned char *)buf; int idx = 0; if (msg > (unsigned char *)end) return -1; if (msg[0] < 240) { *i = msg[0]; return 1; } *i = msg[0]; do { ++idx; if (msg+idx > (unsigned char *)end) return -1; *i += (uint64_t)msg[idx] << (4 + 7 * (idx-1)); } while (msg[idx] >= 128); return (idx + 1); } /* Encode a string. The string will be prefix by its length, encoded as a * variable-length integer. This function never fails and returns the number of * written bytes. */ static int encode_spoe_string(const char *str, size_t len, char *dst) { int idx = 0; if (!len) { dst[0] = 0; return 1; } idx += encode_spoe_varint(len, dst); memcpy(dst+idx, str, len); return (idx + len); } /* Decode a string. Its length is decoded first as a variable-length integer. If * it succeeds, and if the string length is valid, the begin of the string is * saved in <*str>, its length is saved in <*len> and the total numbre of bytes * read is returned. If an error occurred, -1 is returned and <*str> remains * NULL. */ static int decode_spoe_string(char *buf, char *end, char **str, uint64_t *len) { int r, idx = 0; *str = NULL; *len = 0; if ((r = decode_spoe_varint(buf, end, len)) == -1) goto error; idx += r; if (buf + idx + *len > end) goto error; *str = buf+idx; return (idx + *len); error: return -1; } /* Skip a typed data. If an error occurred, -1 is returned, otherwise the number * of bytes read is returned. A types data is composed of a type (1 byte) and * corresponding data: * - boolean: non additional data (0 bytes) * - integers: a variable-length integer (see decode_spoe_varint) * - ipv4: 4 bytes * - ipv6: 16 bytes * - binary and string: a buffer prefixed by its size, a variable-length * integer (see decode_spoe_string) */ static int skip_spoe_data(char *frame, char *end) { uint64_t sz = 0; int r, idx = 0; if (frame > end) return -1; switch (frame[idx++] & SPOE_DATA_T_MASK) { case SPOE_DATA_T_BOOL: idx++; break; case SPOE_DATA_T_INT32: case SPOE_DATA_T_INT64: case SPOE_DATA_T_UINT32: case SPOE_DATA_T_UINT64: if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) return -1; idx += r; break; case SPOE_DATA_T_IPV4: idx += 4; break; case SPOE_DATA_T_IPV6: idx += 16; break; case SPOE_DATA_T_STR: case SPOE_DATA_T_BIN: if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) return -1; idx += r + sz; break; } if (frame+idx > end) return -1; return idx; } /* Decode a typed data. If an error occurred, -1 is returned, otherwise the * number of read bytes is returned. See skip_spoe_data for details. */ static int decode_spoe_data(char *frame, char *end, struct spoe_data *data) { uint64_t sz = 0; int type, r, idx = 0; if (frame > end) return -1; type = frame[idx++]; data->type = (type & SPOE_DATA_T_MASK); switch (data->type) { case SPOE_DATA_T_BOOL: data->u.boolean = ((type & SPOE_DATA_FL_TRUE) == SPOE_DATA_FL_TRUE); break; case SPOE_DATA_T_INT32: if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) return -1; data->u.sint32 = sz; idx += r; break; case SPOE_DATA_T_INT64: if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) return -1; data->u.uint32 = sz; idx += r; break; case SPOE_DATA_T_UINT32: if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) return -1; data->u.sint64 = sz; idx += r; break; case SPOE_DATA_T_UINT64: if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) return -1; data->u.uint64 = sz; idx += r; break; case SPOE_DATA_T_IPV4: if (frame+idx+4 > end) return -1; memcpy(&data->u.ipv4, frame+idx, 4); idx += 4; break; case SPOE_DATA_T_IPV6: if (frame+idx+16 > end) return -1; memcpy(&data->u.ipv6, frame+idx, 16); idx += 16; break; case SPOE_DATA_T_STR: if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) return -1; idx += r; if (frame+idx+sz > end) return -1; data->u.buffer.str = frame+idx; data->u.buffer.len = sz; idx += sz; break; case SPOE_DATA_T_BIN: if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1) return -1; idx += r; if (frame+idx+sz > end) return -1; data->u.buffer.str = frame+idx; data->u.buffer.len = sz; idx += sz; break; default: break; } if (frame+idx > end) return -1; return idx; } /* Check the protocol version. It returns -1 if an error occurred, the number of * read bytes otherwise. */ static int check_proto_version(struct spoe_frame *frame, int idx) { char *str; uint64_t sz; /* Get the list of all supported versions by HAProxy */ if ((frame->buf[idx++] & SPOE_DATA_T_MASK) != SPOE_DATA_T_STR) return -1; idx += decode_spoe_string(frame->buf+idx, frame->buf+frame->len, &str, &sz); if (str == NULL) return -1; DEBUG(frame->worker, "<%lu> Supported versions : %.*s", frame->client->id, (int)sz, str); /* TODO: Find the right verion in supported ones */ return idx; } /* Check max frame size value. It returns -1 if an error occurred, the number of * read bytes otherwise. */ static int check_max_frame_size(struct spoe_frame *frame, int idx) { uint64_t sz; int type, i; /* Get the max-frame-size value of HAProxy */ type = frame->buf[idx++]; if ((type & SPOE_DATA_T_MASK) != SPOE_DATA_T_INT32 && (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_INT64 && (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_UINT32 && (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_UINT64) return -1; if ((i = decode_spoe_varint(frame->buf+idx, frame->buf+frame->len, &sz)) == -1) return -1; idx += i; /* Keep the lower value */ if (sz < frame->client->max_frame_size) frame->client->max_frame_size = sz; DEBUG(frame->worker, "<%lu> HAProxy maximum frame size : %u", frame->client->id, (unsigned int)sz); return idx; } /* Check healthcheck value. It returns -1 if an error occurred, the number of * read bytes otherwise. */ static int check_healthcheck(struct spoe_frame *frame, int idx) { int type; /* Get the "healthcheck" value */ type = frame->buf[idx++]; if ((type & SPOE_DATA_T_MASK) != SPOE_DATA_T_BOOL) return -1; frame->hcheck = ((type & SPOE_DATA_FL_TRUE) == SPOE_DATA_FL_TRUE); DEBUG(frame->worker, "<%lu> HELLO healthcheck : %s", frame->client->id, (frame->hcheck ? "true" : "false")); return idx; } /* Check capabilities value. It returns -1 if an error occurred, the number of * read bytes otherwise. */ static int check_capabilities(struct spoe_frame *frame, int idx) { struct client *client = frame->client; char *str; uint64_t sz; int i; if ((frame->buf[idx++] & SPOE_DATA_T_MASK) != SPOE_DATA_T_STR) return -1; idx += decode_spoe_string(frame->buf+idx, frame->buf+frame->len, &str, &sz); if (str == NULL) /* this is not an error */ return idx; DEBUG(frame->worker, "<%lu> HAProxy capabilities : %.*s", client->id, (int)sz, str); i = 0; while (i < sz) { char *delim; /* Skip leading spaces */ for (; isspace(str[i]) && i < sz; i++); if (sz - i >= 10 && !strncmp(str + i, "pipelining", 10)) { i += 10; if (sz == i || isspace(str[i]) || str[i] == ',') { DEBUG(frame->worker, "<%lu> HAProxy supports frame pipelining", client->id); client->pipelining = true; } } else if (sz - i >= 5 && !strncmp(str + i, "async", 5)) { i += 5; if (sz == i || isspace(str[i]) || str[i] == ',') { DEBUG(frame->worker, "<%lu> HAProxy supports asynchronous frame", client->id); client->async = true; } } else if (sz - i >= 13 && !strncmp(str + i, "fragmentation", 13)) { i += 5; if (sz == i || isspace(str[i]) || str[i] == ',') { DEBUG(frame->worker, "<%lu> HAProxy supports fragmented frame", client->id); client->fragmentation = true; } } if (sz == i || (delim = memchr(str + i, ',', sz-i)) == NULL) break; i = (delim - str) + 1; } return idx; } /* Check engine-id value. It returns -1 if an error occurred, the number of * read bytes otherwise. */ static int check_engine_id(struct spoe_frame *frame, int idx) { struct client *client = frame->client; char *str; uint64_t sz; if ((frame->buf[idx++] & SPOE_DATA_T_MASK) != SPOE_DATA_T_STR) return -1; idx += decode_spoe_string(frame->buf+idx, frame->buf+frame->len, &str, &sz); if (str == NULL) /* this is not an error */ return idx; if (client->engine != NULL) return idx; DEBUG(frame->worker, "<%lu> HAProxy engine id : %.*s", client->id, (int)sz, str); client->engine_id = strndup(str, (int)sz); return idx; } /* Check disconnect status code. It returns -1 if an error occurred, the number * of read bytes otherwise. */ static int check_discon_status_code(struct spoe_frame *frame, int idx) { uint64_t sz; int type, i; /* Get the "status-code" value */ type = frame->buf[idx++]; if ((type & SPOE_DATA_T_MASK) != SPOE_DATA_T_INT32 && (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_INT64 && (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_UINT32 && (type & SPOE_DATA_T_MASK) != SPOE_DATA_T_UINT64) return -1; if ((i = decode_spoe_varint(frame->buf+idx, frame->buf+frame->len, &sz)) == -1) return -1; idx += i; frame->client->status_code = (unsigned int)sz; DEBUG(frame->worker, "<%lu> Disconnect status code : %u", frame->client->id, frame->client->status_code); return idx; } /* Check the disconnect message. It returns -1 if an error occurred, the number * of read bytes otherwise. */ static int check_discon_message(struct spoe_frame *frame, int idx) { char *str; uint64_t sz; /* Get the "message" value */ if ((frame->buf[idx++] & SPOE_DATA_T_MASK) != SPOE_DATA_T_STR) return -1; idx += decode_spoe_string(frame->buf+idx, frame->buf+frame->len, &str, &sz); if (str == NULL) return -1; DEBUG(frame->worker, "<%lu> Disconnect message : %.*s", frame->client->id, (int)sz, str); return idx; } /* Decode a HELLO frame received from HAProxy. It returns -1 if an error * occurred, otherwise the number of read bytes. HELLO frame cannot be * ignored and having another frame than a HELLO frame is an error. */ static int handle_hahello(struct spoe_frame *frame) { struct client *client = frame->client; char *buf = frame->buf; char *end = frame->buf + frame->len; int i, idx = 0; /* Check frame type: we really want a HELLO frame */ if (buf[idx++] != SPOE_FRM_T_HAPROXY_HELLO) goto error; DEBUG(frame->worker, "<%lu> Decode HAProxy HELLO frame", client->id); /* Retrieve flags */ memcpy((char *)&(frame->flags), buf+idx, 4); idx += 4; /* Fragmentation is not supported for HELLO frame */ if (!(frame->flags & SPOE_FRM_FL_FIN)) { client->status_code = SPOE_FRM_ERR_FRAG_NOT_SUPPORTED; goto error; } /* stream-id and frame-id must be cleared */ if (buf[idx] != 0 || buf[idx+1] != 0) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx += 2; /* Loop on K/V items */ while (buf+idx < end) { char *str; uint64_t sz; /* Decode the item name */ idx += decode_spoe_string(buf+idx, end, &str, &sz); if (str == NULL) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } /* Check "supported-versions" K/V item */ if (!memcmp(str, "supported-versions", sz)) { if ((i = check_proto_version(frame, idx)) == -1) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx = i; } /* Check "max-frame-size" K/V item */ else if (!memcmp(str, "max-frame-size", sz)) { if ((i = check_max_frame_size(frame, idx)) == -1) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx = i; } /* Check "healthcheck" K/V item */ else if (!memcmp(str, "healthcheck", sz)) { if ((i = check_healthcheck(frame, idx)) == -1) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx = i; } /* Check "capabilities" K/V item */ else if (!memcmp(str, "capabilities", sz)) { if ((i = check_capabilities(frame, idx)) == -1) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx = i; } /* Check "engine-id" K/V item */ else if (!memcmp(str, "engine-id", sz)) { if ((i = check_engine_id(frame, idx)) == -1) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx = i; } else { DEBUG(frame->worker, "<%lu> Skip K/V item : key=%.*s", client->id, (int)sz, str); /* Silently ignore unknown item */ if ((i = skip_spoe_data(buf+idx, end)) == -1) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx += i; } } if (async == false || client->engine_id == NULL) client->async = false; if (pipelining == false) client->pipelining = false; if (client->async == true) use_spoe_engine(client); return idx; error: return -1; } /* Decode a DISCONNECT frame received from HAProxy. It returns -1 if an error * occurred, otherwise the number of read bytes. DISCONNECT frame cannot be * ignored and having another frame than a DISCONNECT frame is an error.*/ static int handle_hadiscon(struct spoe_frame *frame) { struct client *client = frame->client; char *buf = frame->buf; char *end = frame->buf + frame->len; int i, idx = 0; /* Check frame type: we really want a DISCONNECT frame */ if (buf[idx++] != SPOE_FRM_T_HAPROXY_DISCON) goto error; DEBUG(frame->worker, "<%lu> Decode HAProxy DISCONNECT frame", client->id); /* Retrieve flags */ memcpy((char *)&(frame->flags), buf+idx, 4); idx += 4; /* Fragmentation is not supported for DISCONNECT frame */ if (!(frame->flags & SPOE_FRM_FL_FIN)) { client->status_code = SPOE_FRM_ERR_FRAG_NOT_SUPPORTED; goto error; } /* stream-id and frame-id must be cleared */ if (buf[idx] != 0 || buf[idx+1] != 0) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx += 2; client->status_code = SPOE_FRM_ERR_NONE; /* Loop on K/V items */ while (buf+idx < end) { char *str; uint64_t sz; /* Decode item key */ idx += decode_spoe_string(buf+idx, end, &str, &sz); if (str == NULL) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } /* Check "status-code" K/V item */ if (!memcmp(str, "status-code", sz)) { if ((i = check_discon_status_code(frame, idx)) == -1) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx = i; } /* Check "message" K/V item */ else if (!memcmp(str, "message", sz)) { if ((i = check_discon_message(frame, idx)) == -1) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx = i; } else { DEBUG(frame->worker, "<%lu> Skip K/V item : key=%.*s", client->id, (int)sz, str); /* Silently ignore unknown item */ if ((i = skip_spoe_data(buf+idx, end)) == -1) { client->status_code = SPOE_FRM_ERR_INVALID; goto error; } idx += i; } } return idx; error: return -1; } /* Decode a NOTIFY frame received from HAProxy. It returns -1 if an error * occurred, 0 if it must be must be ignored, otherwise the number of read * bytes. */ static int handle_hanotify(struct spoe_frame *frame) { struct client *client = frame->client; char *buf = frame->buf; char *end = frame->buf + frame->len; uint64_t stream_id, frame_id; int i, idx = 0; /* Check frame type */ if (buf[idx++] != SPOE_FRM_T_HAPROXY_NOTIFY) goto ignore; DEBUG(frame->worker, "<%lu> Decode HAProxy NOTIFY frame", client->id); /* Retrieve flags */ memcpy((char *)&(frame->flags), buf+idx, 4); idx += 4; /* Fragmentation is not supported for DISCONNECT frame */ if (!(frame->flags & SPOE_FRM_FL_FIN) && fragmentation == false) { client->status_code = SPOE_FRM_ERR_FRAG_NOT_SUPPORTED; goto error; } /* Read the stream-id */ if ((i = decode_spoe_varint(buf+idx, end, &stream_id)) == -1) goto ignore; idx += i; /* Read the frame-id */ if ((i = decode_spoe_varint(buf+idx, end, &frame_id)) == -1) goto ignore; idx += i; if (frame->fragmented == true) { if (frame->stream_id != (unsigned int)stream_id || frame->frame_id != (unsigned int)frame_id) { client->status_code = SPOE_FRM_ERR_INTERLACED_FRAMES; goto error; } if (frame->flags & SPOE_FRM_FL_ABRT) { DEBUG(frame->worker, "<%lu> STREAM-ID=%u - FRAME-ID=%u" " - Abort processing of a fragmented frame" " - frag_len=%u - len=%u - offset=%u", client->id, frame->stream_id, frame->frame_id, frame->frag_len, frame->len, idx); goto ignore; } DEBUG(frame->worker, "<%lu> STREAM-ID=%u - FRAME-ID=%u" " - %s fragment of a fragmented frame received" " - frag_len=%u - len=%u - offset=%u", client->id, frame->stream_id, frame->frame_id, (frame->flags & SPOE_FRM_FL_FIN) ? "last" : "next", frame->frag_len, frame->len, idx); } else { frame->stream_id = (unsigned int)stream_id; frame->frame_id = (unsigned int)frame_id; DEBUG(frame->worker, "<%lu> STREAM-ID=%u - FRAME-ID=%u" " - %s frame received" " - frag_len=%u - len=%u - offset=%u", client->id, frame->stream_id, frame->frame_id, (frame->flags & SPOE_FRM_FL_FIN) ? "unfragmented" : "fragmented", frame->frag_len, frame->len, idx); frame->fragmented = !(frame->flags & SPOE_FRM_FL_FIN); } frame->offset = idx; return idx; ignore: return 0; error: return -1; } /* Encode a HELLO frame to send it to HAProxy. It returns the number of written * bytes. */ static int prepare_agenthello(struct spoe_frame *frame) { struct client *client = frame->client; char *buf = frame->buf; char capabilities[64]; int n, idx = 0; unsigned int flags = SPOE_FRM_FL_FIN; DEBUG(frame->worker, "<%lu> Encode Agent HELLO frame", client->id); frame->type = SPOA_FRM_T_AGENT; /* Frame Type */ buf[idx++] = SPOE_FRM_T_AGENT_HELLO; /* Set flags */ memcpy(buf+idx, (char *)&flags, 4); idx += 4; /* No stream-id and frame-id for HELLO frames */ buf[idx++] = 0; buf[idx++] = 0; /* "version" K/V item */ idx += encode_spoe_string("version", 7, buf+idx); buf[idx++] = SPOE_DATA_T_STR; idx += encode_spoe_string(SPOP_VERSION, SLEN(SPOP_VERSION), buf+idx); DEBUG(frame->worker, "<%lu> Agent version : %s", client->id, SPOP_VERSION); /* "max-frame-size" K/V item */ idx += encode_spoe_string("max-frame-size", 14, buf+idx); buf[idx++] = SPOE_DATA_T_UINT32; idx += encode_spoe_varint(client->max_frame_size, buf+idx); DEBUG(frame->worker, "<%lu> Agent maximum frame size : %u", client->id, client->max_frame_size); /* "capabilities" K/V item */ idx += encode_spoe_string("capabilities", 12, buf+idx); buf[idx++] = SPOE_DATA_T_STR; memset(capabilities, 0, sizeof(capabilities)); n = 0; /* 1. Fragmentation capability ? */ if (fragmentation == true) { memcpy(capabilities, "fragmentation", 13); n += 13; } /* 2. Pipelining capability ? */ if (client->pipelining == true && n != 0) { memcpy(capabilities + n, ", pipelining", 12); n += 12; } else if (client->pipelining == true) { memcpy(capabilities, "pipelining", 10); n += 10; } /* 3. Async capability ? */ if (client->async == true && n != 0) { memcpy(capabilities + n, ", async", 7); n += 7; } else if (client->async == true) { memcpy(capabilities, "async", 5); n += 5; } /* 4. Encode capabilities string */ if (n != 0) idx += encode_spoe_string(capabilities, n, buf+idx); else idx += encode_spoe_string(NULL, 0, buf+idx); DEBUG(frame->worker, "<%lu> Agent capabilities : %.*s", client->id, n, capabilities); frame->len = idx; return idx; } /* Encode a DISCONNECT frame to send it to HAProxy. It returns the number of * written bytes. */ static int prepare_agentdicon(struct spoe_frame *frame) { struct client *client = frame->client; char *buf = frame->buf; const char *reason; int rlen, idx = 0; unsigned int flags = SPOE_FRM_FL_FIN; DEBUG(frame->worker, "<%lu> Encode Agent DISCONNECT frame", client->id); frame->type = SPOA_FRM_T_AGENT; if (client->status_code >= SPOE_FRM_ERRS) client->status_code = SPOE_FRM_ERR_UNKNOWN; reason = spoe_frm_err_reasons[client->status_code]; rlen = strlen(reason); /* Frame type */ buf[idx++] = SPOE_FRM_T_AGENT_DISCON; /* Set flags */ memcpy(buf+idx, (char *)&flags, 4); idx += 4; /* No stream-id and frame-id for DISCONNECT frames */ buf[idx++] = 0; buf[idx++] = 0; /* There are 2 mandatory items: "status-code" and "message" */ /* "status-code" K/V item */ idx += encode_spoe_string("status-code", 11, buf+idx); buf[idx++] = SPOE_DATA_T_UINT32; idx += encode_spoe_varint(client->status_code, buf+idx); DEBUG(frame->worker, "<%lu> Disconnect status code : %u", client->id, client->status_code); /* "message" K/V item */ idx += encode_spoe_string("message", 7, buf+idx); buf[idx++] = SPOE_DATA_T_STR; idx += encode_spoe_string(reason, rlen, buf+idx); DEBUG(frame->worker, "<%lu> Disconnect message : %s", client->id, reason); frame->len = idx; return idx; } /* Encode a ACK frame to send it to HAProxy. It returns the number of written * bytes. */ static int prepare_agentack(struct spoe_frame *frame) { char *buf = frame->buf; int idx = 0; unsigned int flags = SPOE_FRM_FL_FIN; /* Be careful here, in async mode, frame->client can be NULL */ DEBUG(frame->worker, "Encode Agent ACK frame"); frame->type = SPOA_FRM_T_AGENT; /* Frame type */ buf[idx++] = SPOE_FRM_T_AGENT_ACK; /* Set flags */ memcpy(buf+idx, (char *)&flags, 4); idx += 4; /* Set stream-id and frame-id for ACK frames */ idx += encode_spoe_varint(frame->stream_id, buf+idx); idx += encode_spoe_varint(frame->frame_id, buf+idx); DEBUG(frame->worker, "STREAM-ID=%u - FRAME-ID=%u", frame->stream_id, frame->frame_id); frame->len = idx; return idx; } static int create_server_socket(void) { struct sockaddr_in listen_addr; int fd, yes = 1; fd = socket(AF_INET, SOCK_STREAM, 0); if (fd < 0) { LOG(&null_worker, "Failed to create service socket : %m"); return -1; } memset(&listen_addr, 0, sizeof(listen_addr)); listen_addr.sin_family = AF_INET; listen_addr.sin_addr.s_addr = INADDR_ANY; listen_addr.sin_port = htons(server_port); if (setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes)) < 0 || setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &yes, sizeof(yes)) < 0) { LOG(&null_worker, "Failed to set option on server socket : %m"); return -1; } if (bind(fd, (struct sockaddr *) &listen_addr, sizeof(listen_addr)) < 0) { LOG(&null_worker, "Failed to bind server socket : %m"); return -1; } if (listen(fd, CONNECTION_BACKLOG) < 0) { LOG(&null_worker, "Failed to listen on server socket : %m"); return -1; } return fd; } static void release_frame(struct spoe_frame *frame) { struct worker *worker; if (frame == NULL) return; if (event_pending(&frame->process_frame_event, EV_TIMEOUT, NULL)) event_del(&frame->process_frame_event); worker = frame->worker; LIST_DEL(&frame->list); if (frame->frag_buf) free(frame->frag_buf); memset(frame, 0, sizeof(*frame)+max_frame_size+4); LIST_ADDQ(&worker->frames, &frame->list); } static void release_client(struct client *c) { struct spoe_frame *frame, *back; if (c == NULL) return; DEBUG(c->worker, "<%lu> Release client", c->id); LIST_DEL(&c->by_worker); c->worker->nbclients--; unuse_spoe_engine(c); free(c->engine_id); if (event_pending(&c->read_frame_event, EV_READ, NULL)) event_del(&c->read_frame_event); if (event_pending(&c->write_frame_event, EV_WRITE, NULL)) event_del(&c->write_frame_event); release_frame(c->incoming_frame); release_frame(c->outgoing_frame); list_for_each_entry_safe(frame, back, &c->processing_frames, list) { release_frame(frame); } list_for_each_entry_safe(frame, back, &c->outgoing_frames, list) { release_frame(frame); } if (c->fd >= 0) close(c->fd); free(c); } static void reset_frame(struct spoe_frame *frame) { if (frame == NULL) return; if (frame->frag_buf) free(frame->frag_buf); frame->type = SPOA_FRM_T_UNKNOWN; frame->buf = (char *)(frame->data); frame->offset = 0; frame->len = 0; frame->stream_id = 0; frame->frame_id = 0; frame->flags = 0; frame->hcheck = false; frame->fragmented = false; frame->ip_score = -1; frame->frag_buf = NULL; frame->frag_len = 0; LIST_INIT(&frame->list); } static void use_spoe_engine(struct client *client) { struct spoe_engine *eng; if (client->engine_id == NULL) return; list_for_each_entry(eng, &client->worker->engines, list) { if (!strcmp(eng->id, client->engine_id)) goto end; } if ((eng = malloc(sizeof(*eng))) == NULL) { client->async = false; return; } eng->id = strdup(client->engine_id); LIST_INIT(&eng->clients); LIST_INIT(&eng->processing_frames); LIST_INIT(&eng->outgoing_frames); LIST_ADDQ(&client->worker->engines, &eng->list); LOG(client->worker, "Add new SPOE engine '%s'", eng->id); end: client->engine = eng; LIST_ADDQ(&eng->clients, &client->by_engine); } static void unuse_spoe_engine(struct client *client) { struct spoe_engine *eng; struct spoe_frame *frame, *back; if (client == NULL || client->engine == NULL) return; eng = client->engine; client->engine = NULL; LIST_DEL(&client->by_engine); if (!LIST_ISEMPTY(&eng->clients)) return; LOG(client->worker, "Remove SPOE engine '%s'", eng->id); LIST_DEL(&eng->list); list_for_each_entry_safe(frame, back, &eng->processing_frames, list) { release_frame(frame); } list_for_each_entry_safe(frame, back, &eng->outgoing_frames, list) { release_frame(frame); } free(eng->id); free(eng); } static struct spoe_frame * acquire_incoming_frame(struct client *client) { struct spoe_frame *frame; frame = client->incoming_frame; if (frame != NULL) return frame; if (LIST_ISEMPTY(&client->worker->frames)) { if ((frame = calloc(1, sizeof(*frame)+max_frame_size+4)) == NULL) { LOG(client->worker, "Failed to allocate new frame : %m"); return NULL; } } else { frame = LIST_NEXT(&client->worker->frames, typeof(frame), list); LIST_DEL(&frame->list); } reset_frame(frame); frame->worker = client->worker; frame->engine = client->engine; frame->client = client; if (event_assign(&frame->process_frame_event, client->worker->base, -1, EV_TIMEOUT|EV_PERSIST, process_frame_cb, frame) < 0) { LOG(client->worker, "Failed to create frame event"); return NULL; } client->incoming_frame = frame; return frame; } static struct spoe_frame * acquire_outgoing_frame(struct client *client) { struct spoe_engine *engine = client->engine; struct spoe_frame *frame = NULL; if (client->outgoing_frame != NULL) frame = client->outgoing_frame; else if (!LIST_ISEMPTY(&client->outgoing_frames)) { frame = LIST_NEXT(&client->outgoing_frames, typeof(frame), list); LIST_DEL(&frame->list); client->outgoing_frame = frame; } else if (engine!= NULL && !LIST_ISEMPTY(&engine->outgoing_frames)) { frame = LIST_NEXT(&engine->outgoing_frames, typeof(frame), list); LIST_DEL(&frame->list); client->outgoing_frame = frame; } return frame; } static void write_frame(struct client *client, struct spoe_frame *frame) { uint32_t netint; LIST_DEL(&frame->list); frame->buf = (char *)(frame->data); frame->offset = 0; netint = htonl(frame->len); memcpy(frame->buf, &netint, 4); if (client != NULL) { /* HELLO or DISCONNECT frames */ event_add(&client->write_frame_event, NULL); /* Try to process the frame as soon as possible, and always * attach it to the client */ if (client->async || client->pipelining) { if (client->outgoing_frame == NULL) client->outgoing_frame = frame; else LIST_ADD(&client->outgoing_frames, &frame->list); } else { client->outgoing_frame = frame; event_del(&client->read_frame_event); } } else { /* for all other frames */ if (frame->client == NULL) { /* async mode ! */ LIST_ADDQ(&frame->engine->outgoing_frames, &frame->list); list_for_each_entry(client, &frame->engine->clients, by_engine) event_add(&client->write_frame_event, NULL); } else if (frame->client->pipelining) { LIST_ADDQ(&frame->client->outgoing_frames, &frame->list); event_add(&frame->client->write_frame_event, NULL); } else { frame->client->outgoing_frame = frame; event_add(&frame->client->write_frame_event, NULL); event_del(&frame->client->read_frame_event); } } } static void process_incoming_frame(struct spoe_frame *frame) { struct client *client = frame->client; if (event_add(&frame->process_frame_event, &processing_delay) < 0) { LOG(client->worker, "Failed to process incoming frame"); release_frame(frame); return; } if (client->async) { frame->client = NULL; LIST_ADDQ(&frame->engine->processing_frames, &frame->list); } else if (client->pipelining) LIST_ADDQ(&client->processing_frames, &frame->list); else event_del(&client->read_frame_event); } static void signal_cb(evutil_socket_t sig, short events, void *user_data) { struct event_base *base = user_data; int i; DEBUG(&null_worker, "Stopping the server"); event_base_loopbreak(base); DEBUG(&null_worker, "Main event loop stopped"); for (i = 0; i < num_workers; i++) { event_base_loopbreak(workers[i].base); DEBUG(&null_worker, "Event loop stopped for worker %02d", workers[i].id); } } static void worker_monitor_cb(evutil_socket_t fd, short events, void *arg) { struct worker *worker = arg; LOG(worker, "%u clients connected", worker->nbclients); } static void process_frame_cb(evutil_socket_t fd, short events, void *arg) { struct spoe_frame *frame = arg; char *buf = frame->buf; char *end = frame->buf + frame->len; int idx = frame->offset; DEBUG(frame->worker, "Process frame messages : STREAM-ID=%u - FRAME-ID=%u - length=%u bytes", frame->stream_id, frame->frame_id, frame->len - frame->offset); /* Loop on messages */ while (buf+idx < end) { char *str; uint64_t sz; int nbargs, i; /* Decode the message name */ idx += decode_spoe_string(buf+idx, end, &str, &sz); if (str == NULL) goto stop_processing; DEBUG(frame->worker, "Process SPOE Message '%.*s'", (int)sz, str); nbargs = buf[idx++]; /* Get the number of arguments */ frame->offset = idx; /* Save index to handle errors and skip args */ if (!memcmp(str, "check-client-ip", sz)) { struct spoe_data data; memset(&data, 0, sizeof(data)); if (nbargs != 1) goto skip_message; if ((i = decode_spoe_string(buf+idx, end, &str, &sz)) == -1) goto stop_processing; idx += i; if ((i = decode_spoe_data(buf+idx, end, &data)) == -1) goto skip_message; idx += i; if ((data.type & SPOE_DATA_T_MASK) == SPOE_DATA_T_IPV4) check_ipv4_reputation(frame, &data.u.ipv4); else if ((data.type & SPOE_DATA_T_MASK) == SPOE_DATA_T_IPV6) check_ipv6_reputation(frame, &data.u.ipv6); } else { skip_message: idx = frame->offset; /* Restore index */ while (nbargs-- > 0) { /* Silently ignore argument: its name and its value */ if ((i = decode_spoe_string(buf+idx, end, &str, &sz)) == -1) goto stop_processing; idx += i; if ((i = skip_spoe_data(buf+idx, end)) == -1) goto stop_processing; idx += i; } } } stop_processing: /* Prepare agent ACK frame */ frame->buf = (char *)(frame->data) + 4; frame->offset = 0; frame->len = 0; frame->flags = 0; idx = prepare_agentack(frame); if (frame->ip_score != -1) { DEBUG(frame->worker, "Add action : set variable ip_scode=%u", frame->ip_score); buf[idx++] = SPOE_ACT_T_SET_VAR; /* Action type */ buf[idx++] = 3; /* Number of args */ buf[idx++] = SPOE_SCOPE_SESS; /* Arg 1: the scope */ idx += encode_spoe_string("ip_score", 8, buf+idx); /* Arg 2: variable name */ buf[idx++] = SPOE_DATA_T_UINT32; idx += encode_spoe_varint(frame->ip_score, buf+idx); /* Arg 3: variable value */ frame->len = idx; } write_frame(NULL, frame); } static void read_frame_cb(evutil_socket_t fd, short events, void *arg) { struct client *client = arg; struct spoe_frame *frame; uint32_t netint; int n; DEBUG(client->worker, "<%lu> %s", client->id, __FUNCTION__); if ((frame = acquire_incoming_frame(client)) == NULL) goto close; frame->type = SPOA_FRM_T_HAPROXY; if (frame->buf == (char *)(frame->data)) { /* Read the frame length: frame->buf points on length part (frame->data) */ n = read(client->fd, frame->buf+frame->offset, 4-frame->offset); if (n <= 0) { if (n < 0) LOG(client->worker, "Failed to read frame length : %m"); goto close; } frame->offset += n; if (frame->offset != 4) return; memcpy(&netint, frame->buf, 4); frame->buf += 4; frame->offset = 0; frame->len = ntohl(netint); } /* Read the frame: frame->buf points on frame part (frame->data+4)*/ n = read(client->fd, frame->buf + frame->offset, frame->len - frame->offset); if (n <= 0) { if (n < 0) { LOG(client->worker, "Frame to read frame : %m"); goto close; } return; } frame->offset += n; if (frame->offset != frame->len) return; frame->offset = 0; DEBUG(client->worker, "<%lu> New Frame of %u bytes received", client->id, frame->len); switch (client->state) { case SPOA_ST_CONNECTING: if (handle_hahello(frame) < 0) { LOG(client->worker, "Failed to decode HELLO frame"); goto disconnect; } prepare_agenthello(frame); goto write_frame; case SPOA_ST_PROCESSING: if (frame->buf[0] == SPOE_FRM_T_HAPROXY_DISCON) { client->state = SPOA_ST_DISCONNECTING; goto disconnecting; } n = handle_hanotify(frame); if (n < 0) { LOG(client->worker, "Failed to decode frame: %s", spoe_frm_err_reasons[client->status_code]); goto disconnect; } if (n == 0) { LOG(client->worker, "Ignore invalid/unknown/aborted frame"); goto ignore_frame; } else goto process_frame; case SPOA_ST_DISCONNECTING: disconnecting: if (handle_hadiscon(frame) < 0) { LOG(client->worker, "Failed to decode DISCONNECT frame"); goto disconnect; } if (client->status_code != SPOE_FRM_ERR_NONE) LOG(client->worker, "<%lu> Peer closed connection: %s", client->id, spoe_frm_err_reasons[client->status_code]); client->status_code = SPOE_FRM_ERR_NONE; goto disconnect; } ignore_frame: reset_frame(frame); return; process_frame: if (frame->fragmented == true) { char *buf; size_t len = frame->len - frame->offset; buf = realloc(frame->frag_buf, frame->frag_len + len); if (buf == NULL) { client->status_code = SPOE_FRM_ERR_RES; goto disconnect; } memcpy(buf + frame->frag_len, frame->buf + frame->offset, len); frame->frag_buf = buf; frame->frag_len += len; if (!(frame->flags & SPOE_FRM_FL_FIN)) { /* Wait for next fragments */ frame->buf = (char *)(frame->data); frame->offset = 0; frame->len = 0; frame->flags = 0; return; } frame->buf = frame->frag_buf; frame->len = frame->frag_len; frame->offset = 0; /* fall through */ } process_incoming_frame(frame); client->incoming_frame = NULL; return; write_frame: write_frame(client, frame); client->incoming_frame = NULL; return; disconnect: client->state = SPOA_ST_DISCONNECTING; if (prepare_agentdicon(frame) < 0) { LOG(client->worker, "Failed to encode DISCONNECT frame"); goto close; } goto write_frame; close: release_client(client); } static void write_frame_cb(evutil_socket_t fd, short events, void *arg) { struct client *client = arg; struct spoe_frame *frame; int n; DEBUG(client->worker, "<%lu> %s", client->id, __FUNCTION__); if ((frame = acquire_outgoing_frame(client)) == NULL) { event_del(&client->write_frame_event); return; } if (frame->buf == (char *)(frame->data)) { /* Write the frame length: frame->buf points on length part (frame->data) */ n = write(client->fd, frame->buf+frame->offset, 4-frame->offset); if (n <= 0) { if (n < 0) LOG(client->worker, "Failed to write frame length : %m"); goto close; } frame->offset += n; if (frame->offset != 4) return; frame->buf += 4; frame->offset = 0; } /* Write the frame: frame->buf points on frame part (frame->data+4)*/ n = write(client->fd, frame->buf + frame->offset, frame->len - frame->offset); if (n <= 0) { if (n < 0) { LOG(client->worker, "Failed to write frame : %m"); goto close; } return; } frame->offset += n; if (frame->offset != frame->len) return; DEBUG(client->worker, "<%lu> Frame of %u bytes send", client->id, frame->len); switch (client->state) { case SPOA_ST_CONNECTING: if (frame->hcheck == true) { DEBUG(client->worker, "<%lu> Close client after healthcheck", client->id); goto close; } client->state = SPOA_ST_PROCESSING; break; case SPOA_ST_PROCESSING: break; case SPOA_ST_DISCONNECTING: goto close; } release_frame(frame); client->outgoing_frame = NULL; if (!client->async && !client->pipelining) { event_del(&client->write_frame_event); event_add(&client->read_frame_event, NULL); } return; close: release_client(client); } static void accept_cb(int listener, short event, void *arg) { struct worker *worker; struct client *client; int fd; worker = &workers[clicount++ % num_workers]; if ((fd = accept(listener, NULL, NULL)) < 0) { if (errno != EAGAIN && errno != EWOULDBLOCK) LOG(worker, "Failed to accept client connection : %m"); return; } DEBUG(&null_worker, "<%lu> New Client connection accepted and assigned to worker %02d", clicount, worker->id); if (evutil_make_socket_nonblocking(fd) < 0) { LOG(&null_worker, "Failed to set client socket to non-blocking : %m"); close(fd); return; } if ((client = calloc(1, sizeof(*client))) == NULL) { LOG(&null_worker, "Failed to allocate memory for client state : %m"); close(fd); return; } client->id = clicount; client->fd = fd; client->worker = worker; client->state = SPOA_ST_CONNECTING; client->status_code = SPOE_FRM_ERR_NONE; client->max_frame_size = max_frame_size; client->engine = NULL; client->pipelining = false; client->async = false; client->incoming_frame = NULL; client->outgoing_frame = NULL; LIST_INIT(&client->processing_frames); LIST_INIT(&client->outgoing_frames); LIST_ADDQ(&worker->clients, &client->by_worker); worker->nbclients++; if (event_assign(&client->read_frame_event, worker->base, fd, EV_READ|EV_PERSIST, read_frame_cb, client) < 0 || event_assign(&client->write_frame_event, worker->base, fd, EV_WRITE|EV_PERSIST, write_frame_cb, client) < 0) { LOG(&null_worker, "Failed to create client events"); release_client(client); return; } event_add(&client->read_frame_event, NULL); } static void * worker_function(void *data) { struct client *client, *cback; struct spoe_frame *frame, *fback; struct worker *worker = data; DEBUG(worker, "Worker ready to process client messages"); event_base_dispatch(worker->base); list_for_each_entry_safe(client, cback, &worker->clients, by_worker) { release_client(client); } list_for_each_entry_safe(frame, fback, &worker->frames, list) { LIST_DEL(&frame->list); free(frame); } event_free(worker->monitor_event); event_base_free(worker->base); DEBUG(worker, "Worker is stopped"); pthread_exit(&null_worker); } static int parse_processing_delay(const char *str) { unsigned long value; value = 0; while (1) { unsigned int j; j = *str - '0'; if (j > 9) break; str++; value *= 10; value += j; } switch (*str) { case '\0': /* no unit = millisecond */ value *= 1000; break; case 's': /* second */ value *= 1000000; str++; break; case 'm': /* millisecond : "ms" */ if (str[1] != 's') return -1; value *= 1000; str += 2; break; case 'u': /* microsecond : "us" */ if (str[1] != 's') return -1; str += 2; break; default: return -1; } if (*str) return -1; processing_delay.tv_sec = (time_t)(value / 1000000); processing_delay.tv_usec = (suseconds_t)(value % 1000000); return 0; } static void usage(char *prog) { fprintf(stderr, "Usage : %s [OPTION]...\n" " -h Print this message\n" " -d Enable the debug mode\n" " -m Specify the maximum frame size (default : %u)\n" " -p Specify the port to listen on (default : %d)\n" " -n Specify the number of workers (default : %d)\n" " -c Enable the support of the specified capability\n" " -t