mirror of
https://github.com/yggdrasil-network/water.git
synced 2025-05-19 08:25:09 +03:00
316 lines
8.7 KiB
Go
316 lines
8.7 KiB
Go
package water
|
|
|
|
import (
|
|
"bytes"
|
|
"errors"
|
|
"fmt"
|
|
"net"
|
|
"sync"
|
|
"syscall"
|
|
"unsafe"
|
|
|
|
"golang.org/x/sys/windows/registry"
|
|
)
|
|
|
|
// To use it with windows, you need a tap driver installed on windows.
|
|
// https://github.com/OpenVPN/tap-windows6
|
|
// or just install OpenVPN
|
|
// https://github.com/OpenVPN/openvpn
|
|
|
|
const (
|
|
// tapDriverKey is a location of the TAP driver key.
|
|
tapDriverKey = `SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}`
|
|
)
|
|
|
|
var (
|
|
errIfceNameNotFound = errors.New("Failed to find the name of interface")
|
|
// Device Control Codes
|
|
tap_win_ioctl_get_mac = tap_control_code(1, 0)
|
|
tap_win_ioctl_get_version = tap_control_code(2, 0)
|
|
tap_win_ioctl_get_mtu = tap_control_code(3, 0)
|
|
tap_win_ioctl_get_info = tap_control_code(4, 0)
|
|
tap_ioctl_config_point_to_point = tap_control_code(5, 0)
|
|
tap_ioctl_set_media_status = tap_control_code(6, 0)
|
|
tap_win_ioctl_config_dhcp_masq = tap_control_code(7, 0)
|
|
tap_win_ioctl_get_log_line = tap_control_code(8, 0)
|
|
tap_win_ioctl_config_dhcp_set_opt = tap_control_code(9, 0)
|
|
tap_ioctl_config_tun = tap_control_code(10, 0)
|
|
// w32 api
|
|
file_device_unknown = uint32(0x00000022)
|
|
nCreateEvent,
|
|
nResetEvent,
|
|
nGetOverlappedResult uintptr
|
|
)
|
|
|
|
func init() {
|
|
k32, err := syscall.LoadLibrary("kernel32.dll")
|
|
if err != nil {
|
|
panic("LoadLibrary " + err.Error())
|
|
}
|
|
defer syscall.FreeLibrary(k32)
|
|
|
|
nCreateEvent = getProcAddr(k32, "CreateEventW")
|
|
nResetEvent = getProcAddr(k32, "ResetEvent")
|
|
nGetOverlappedResult = getProcAddr(k32, "GetOverlappedResult")
|
|
}
|
|
|
|
func getProcAddr(lib syscall.Handle, name string) uintptr {
|
|
addr, err := syscall.GetProcAddress(lib, name)
|
|
if err != nil {
|
|
panic(name + " " + err.Error())
|
|
}
|
|
return addr
|
|
}
|
|
|
|
func resetEvent(h syscall.Handle) error {
|
|
r, _, err := syscall.Syscall(nResetEvent, 1, uintptr(h), 0, 0)
|
|
if r == 0 {
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func getOverlappedResult(h syscall.Handle, overlapped *syscall.Overlapped) (int, error) {
|
|
var n int
|
|
r, _, err := syscall.Syscall6(nGetOverlappedResult, 4,
|
|
uintptr(h),
|
|
uintptr(unsafe.Pointer(overlapped)),
|
|
uintptr(unsafe.Pointer(&n)), 1, 0, 0)
|
|
if r == 0 {
|
|
return n, err
|
|
}
|
|
|
|
return n, nil
|
|
}
|
|
|
|
func newOverlapped() (*syscall.Overlapped, error) {
|
|
var overlapped syscall.Overlapped
|
|
r, _, err := syscall.Syscall6(nCreateEvent, 4, 0, 1, 0, 0, 0, 0)
|
|
if r == 0 {
|
|
return nil, err
|
|
}
|
|
overlapped.HEvent = syscall.Handle(r)
|
|
return &overlapped, nil
|
|
}
|
|
|
|
type wfile struct {
|
|
fd syscall.Handle
|
|
rl sync.Mutex
|
|
wl sync.Mutex
|
|
ro *syscall.Overlapped
|
|
wo *syscall.Overlapped
|
|
}
|
|
|
|
func (f *wfile) Close() error {
|
|
return syscall.Close(f.fd)
|
|
}
|
|
|
|
func (f *wfile) Write(b []byte) (int, error) {
|
|
f.wl.Lock()
|
|
defer f.wl.Unlock()
|
|
|
|
if err := resetEvent(f.wo.HEvent); err != nil {
|
|
return 0, err
|
|
}
|
|
var n uint32
|
|
err := syscall.WriteFile(f.fd, b, &n, f.wo)
|
|
if err != nil && err != syscall.ERROR_IO_PENDING {
|
|
return int(n), err
|
|
}
|
|
return getOverlappedResult(f.fd, f.wo)
|
|
}
|
|
|
|
func (f *wfile) Read(b []byte) (int, error) {
|
|
f.rl.Lock()
|
|
defer f.rl.Unlock()
|
|
|
|
if err := resetEvent(f.ro.HEvent); err != nil {
|
|
return 0, err
|
|
}
|
|
var done uint32
|
|
err := syscall.ReadFile(f.fd, b, &done, f.ro)
|
|
if err != nil && err != syscall.ERROR_IO_PENDING {
|
|
return int(done), err
|
|
}
|
|
return getOverlappedResult(f.fd, f.ro)
|
|
}
|
|
|
|
func ctl_code(device_type, function, method, access uint32) uint32 {
|
|
return (device_type << 16) | (access << 14) | (function << 2) | method
|
|
}
|
|
|
|
func tap_control_code(request, method uint32) uint32 {
|
|
return ctl_code(file_device_unknown, request, method, 0)
|
|
}
|
|
|
|
// getdeviceid finds out a TAP device from registry, it *may* requires privileged right to prevent some weird issue.
|
|
func getdeviceid(componentID string, interfaceName string) (deviceid string, err error) {
|
|
k, err := registry.OpenKey(registry.LOCAL_MACHINE, tapDriverKey, registry.READ)
|
|
if err != nil {
|
|
return "", fmt.Errorf("Failed to open the adapter registry, TAP driver may be not installed, %v", err)
|
|
}
|
|
defer k.Close()
|
|
// read all subkeys, it should not return an err here
|
|
keys, err := k.ReadSubKeyNames(-1)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
// find the one matched ComponentId
|
|
for _, v := range keys {
|
|
key, err := registry.OpenKey(registry.LOCAL_MACHINE, tapDriverKey+"\\"+v, registry.READ)
|
|
if err != nil {
|
|
continue
|
|
}
|
|
val, _, err := key.GetStringValue("ComponentId")
|
|
if err != nil {
|
|
key.Close()
|
|
continue
|
|
}
|
|
if val == componentID {
|
|
val, _, err = key.GetStringValue("NetCfgInstanceId")
|
|
if err != nil {
|
|
key.Close()
|
|
continue
|
|
}
|
|
if len(interfaceName) > 0 {
|
|
key2 := fmt.Sprintf("%s\\%s\\Connection", tapDriverKey, val)
|
|
k2, err := registry.OpenKey(registry.LOCAL_MACHINE, key2, registry.READ)
|
|
if err != nil {
|
|
continue
|
|
}
|
|
defer k2.Close()
|
|
val, _, err := k2.GetStringValue("Name")
|
|
if err != nil || val != interfaceName {
|
|
continue
|
|
}
|
|
}
|
|
key.Close()
|
|
return val, nil
|
|
}
|
|
key.Close()
|
|
}
|
|
if len(interfaceName) > 0 {
|
|
return "", fmt.Errorf("Failed to find the tap device in registry with specified ComponentId '%s' and InterfaceName '%s', TAP driver may be not installed or you may have specified an interface name that doesn't exist", componentID, interfaceName)
|
|
}
|
|
|
|
return "", fmt.Errorf("Failed to find the tap device in registry with specified ComponentId '%s', TAP driver may be not installed", componentID)
|
|
}
|
|
|
|
// setStatus is used to bring up or bring down the interface
|
|
func setStatus(fd syscall.Handle, status bool) error {
|
|
var bytesReturned uint32
|
|
rdbbuf := make([]byte, syscall.MAXIMUM_REPARSE_DATA_BUFFER_SIZE)
|
|
code := []byte{0x00, 0x00, 0x00, 0x00}
|
|
if status {
|
|
code[0] = 0x01
|
|
}
|
|
return syscall.DeviceIoControl(fd, tap_ioctl_set_media_status, &code[0], uint32(4), &rdbbuf[0], uint32(len(rdbbuf)), &bytesReturned, nil)
|
|
}
|
|
|
|
// setTUN is used to configure the IP address in the underlying driver when using TUN
|
|
func setTUN(fd syscall.Handle, network string) error {
|
|
var bytesReturned uint32
|
|
rdbbuf := make([]byte, syscall.MAXIMUM_REPARSE_DATA_BUFFER_SIZE)
|
|
|
|
localIP, remoteNet, err := net.ParseCIDR(network)
|
|
if err != nil {
|
|
return fmt.Errorf("Failed to parse network CIDR in config, %v", err)
|
|
}
|
|
if localIP.To4() == nil {
|
|
return fmt.Errorf("Provided network(%s) is not a valid IPv4 address", network)
|
|
}
|
|
code2 := make([]byte, 0, 12)
|
|
code2 = append(code2, localIP.To4()[:4]...)
|
|
code2 = append(code2, remoteNet.IP.To4()[:4]...)
|
|
code2 = append(code2, remoteNet.Mask[:4]...)
|
|
if len(code2) != 12 {
|
|
return fmt.Errorf("Provided network(%s) is not valid", network)
|
|
}
|
|
if err := syscall.DeviceIoControl(fd, tap_ioctl_config_tun, &code2[0], uint32(12), &rdbbuf[0], uint32(len(rdbbuf)), &bytesReturned, nil); err != nil {
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// openDev find and open an interface.
|
|
func openDev(config Config) (ifce *Interface, err error) {
|
|
// find the device in registry.
|
|
deviceid, err := getdeviceid(config.PlatformSpecificParams.ComponentID, config.PlatformSpecificParams.InterfaceName)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
path := "\\\\.\\Global\\" + deviceid + ".tap"
|
|
pathp, err := syscall.UTF16PtrFromString(path)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
// type Handle uintptr
|
|
file, err := syscall.CreateFile(pathp, syscall.GENERIC_READ|syscall.GENERIC_WRITE, uint32(syscall.FILE_SHARE_READ|syscall.FILE_SHARE_WRITE), nil, syscall.OPEN_EXISTING, syscall.FILE_ATTRIBUTE_SYSTEM|syscall.FILE_FLAG_OVERLAPPED, 0)
|
|
// if err hanppens, close the interface.
|
|
defer func() {
|
|
if err != nil {
|
|
syscall.Close(file)
|
|
}
|
|
if err := recover(); err != nil {
|
|
syscall.Close(file)
|
|
}
|
|
}()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
var bytesReturned uint32
|
|
|
|
// find the mac address of tap device, use this to find the name of interface
|
|
mac := make([]byte, 6)
|
|
err = syscall.DeviceIoControl(file, tap_win_ioctl_get_mac, &mac[0], uint32(len(mac)), &mac[0], uint32(len(mac)), &bytesReturned, nil)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// fd := os.NewFile(uintptr(file), path)
|
|
ro, err := newOverlapped()
|
|
if err != nil {
|
|
return
|
|
}
|
|
wo, err := newOverlapped()
|
|
if err != nil {
|
|
return
|
|
}
|
|
fd := &wfile{fd: file, ro: ro, wo: wo}
|
|
ifce = &Interface{isTAP: (config.DeviceType == TAP), ReadWriteCloser: fd}
|
|
|
|
// bring up device.
|
|
if err := setStatus(file, true); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
//TUN
|
|
if config.DeviceType == TUN {
|
|
if err := setTUN(file, config.PlatformSpecificParams.Network); err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
// find the name of tap interface(u need it to set the ip or other command)
|
|
ifces, err := net.Interfaces()
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
for _, v := range ifces {
|
|
if bytes.Equal(v.HardwareAddr[:6], mac[:6]) {
|
|
ifce.name = v.Name
|
|
return
|
|
}
|
|
}
|
|
|
|
return nil, errIfceNameNotFound
|
|
}
|
|
|
|
func newTAP(config Config) (ifce *Interface, err error) {
|
|
return openDev(config)
|
|
}
|
|
|
|
func newTUN(config Config) (ifce *Interface, err error) {
|
|
return openDev(config)
|
|
}
|