用于EagleEye3.0 规则集漏报和误报测试的示例项目,项目收集于github和gitee
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

1316 lines
31 KiB

/*
* A Random IP reputation service acting as a Stream Processing Offload Agent
*
* This is a very simple service that implement a "random" ip reputation
* service. It will return random scores for all checked IP addresses. It only
* shows you how to implement a ip reputation service or such kind of services
* using the SPOE.
*
* Copyright 2016 HAProxy Technologies, Christopher Faulet <cfaulet@haproxy.com>
* Copyright 2018 OZON / Thierry Fournier <thierry.fournier@ozon.io>
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version
* 2 of the License, or (at your option) any later version.
*
*/
#include <limits.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <stdbool.h>
#include <unistd.h>
#include <signal.h>
#include <pthread.h>
#include <sys/time.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <netinet/tcp.h>
#include <arpa/inet.h>
#include "spoa.h"
#define DEFAULT_PORT 12345
#define NUM_WORKERS 5
#define SLEN(str) (sizeof(str)-1)
/* Frame Types sent by HAProxy and by agents */
enum spoe_frame_type {
/* Frames sent by HAProxy */
SPOE_FRM_T_HAPROXY_HELLO = 1,
SPOE_FRM_T_HAPROXY_DISCON,
SPOE_FRM_T_HAPROXY_NOTIFY,
/* Frames sent by the agents */
SPOE_FRM_T_AGENT_HELLO = 101,
SPOE_FRM_T_AGENT_DISCON,
SPOE_FRM_T_AGENT_ACK
};
/* Errors triggered by SPOE applet */
enum spoe_frame_error {
SPOE_FRM_ERR_NONE = 0,
SPOE_FRM_ERR_IO,
SPOE_FRM_ERR_TOUT,
SPOE_FRM_ERR_TOO_BIG,
SPOE_FRM_ERR_INVALID,
SPOE_FRM_ERR_NO_VSN,
SPOE_FRM_ERR_NO_FRAME_SIZE,
SPOE_FRM_ERR_NO_CAP,
SPOE_FRM_ERR_BAD_VSN,
SPOE_FRM_ERR_BAD_FRAME_SIZE,
SPOE_FRM_ERR_UNKNOWN = 99,
SPOE_FRM_ERRS,
};
/* All supported SPOE actions */
enum spoe_action_type {
SPOE_ACT_T_SET_VAR = 1,
SPOE_ACT_T_UNSET_VAR,
SPOE_ACT_TYPES,
};
/* Masks to get data type or flags value */
#define SPOE_DATA_T_MASK 0x0F
#define SPOE_DATA_FL_MASK 0xF0
/* Flags to set Boolean values */
#define SPOE_DATA_FL_FALSE 0x00
#define SPOE_DATA_FL_TRUE 0x10
static const char *spoe_frm_err_reasons[SPOE_FRM_ERRS] = {
[SPOE_FRM_ERR_NONE] = "normal",
[SPOE_FRM_ERR_IO] = "I/O error",
[SPOE_FRM_ERR_TOUT] = "a timeout occurred",
[SPOE_FRM_ERR_TOO_BIG] = "frame is too big",
[SPOE_FRM_ERR_INVALID] = "invalid frame received",
[SPOE_FRM_ERR_NO_VSN] = "version value not found",
[SPOE_FRM_ERR_NO_FRAME_SIZE] = "max-frame-size value not found",
[SPOE_FRM_ERR_NO_CAP] = "capabilities value not found",
[SPOE_FRM_ERR_BAD_VSN] = "unsupported version",
[SPOE_FRM_ERR_BAD_FRAME_SIZE] = "max-frame-size too big or too small",
[SPOE_FRM_ERR_UNKNOWN] = "an unknown error occurred",
};
bool debug = false;
pthread_key_t worker_id;
static struct ps *ps_list = NULL;
static struct ps_message *ps_messages = NULL;
static int nfiles = 0;
static char **files = NULL;
static inline void add_file(const char *file)
{
nfiles++;
files = realloc(files, sizeof(*files) * nfiles);
if (files == NULL) {
fprintf(stderr, "Out of memory error\n");
exit(EXIT_FAILURE);
}
files[nfiles - 1] = strdup(file);
if (files[nfiles - 1] == NULL) {
fprintf(stderr, "Out of memory error\n");
exit(EXIT_FAILURE);
}
}
void ps_register(struct ps *ps)
{
ps->next = ps_list;
ps_list = ps;
}
void ps_register_message(struct ps *ps, const char *name, void *ref)
{
struct ps_message *msg;
/* Look for already registered name */
for (msg = ps_messages; msg; msg = msg->next) {
if (strcmp(name, msg->name) == 0) {
LOG("Message \"%s\" already registered\n", name);
exit(EXIT_FAILURE);
}
}
msg = calloc(1, sizeof(*msg));
if (msg == NULL) {
LOG("Out of memory error\n");
exit(EXIT_FAILURE);
}
msg->next = ps_messages;
ps_messages = msg;
msg->name = strdup(name);
if (msg->name == NULL) {
LOG("Out of memory error\n");
exit(EXIT_FAILURE);
}
msg->ref = ref;
msg->ps = ps;
}
static int
do_read(int sock, void *buf, int read_len)
{
fd_set readfds;
int n = 0, total = 0, bytesleft = read_len;
FD_ZERO(&readfds);
FD_SET(sock, &readfds);
while (total < read_len) {
if (select(FD_SETSIZE, &readfds, NULL, NULL, NULL) == -1)
return -1;
if (!FD_ISSET(sock, &readfds))
return -1;
n = read(sock, buf + total, bytesleft);
if (n <= 0)
break;
total += n;
bytesleft -= n;
}
return (n == -1) ? -1 : total;
}
static int
do_write(int sock, void *buf, int write_len)
{
fd_set writefds;
int n = 0, total = 0, bytesleft = write_len;
FD_ZERO(&writefds);
FD_SET(sock, &writefds);
while (total < write_len) {
if (select(FD_SETSIZE, NULL, &writefds, NULL, NULL) == -1)
return -1;
if (!FD_ISSET(sock, &writefds))
return -1;
n = write(sock, buf + total, bytesleft);
if (n <= 0)
break;
total += n;
bytesleft -= n;
}
return (n == -1) ? -1 : total;
}
/* Receive a frame sent by HAProxy. It returns -1 if an error occurred,
* otherwise the number of read bytes.*/
static int
read_frame(int sock, struct worker *w)
{
uint32_t netint;
unsigned int framesz;
/* Read the frame size, on 4 bytes */
if (do_read(sock, &netint, sizeof(netint)) != 4) {
w->status_code = SPOE_FRM_ERR_IO;
return -1;
}
/* Check it against the max size */
framesz = ntohl(netint);
if (framesz > w->size) {
w->status_code = SPOE_FRM_ERR_TOO_BIG;
return -1;
}
/* Read the frame */
if (do_read(sock, w->buf, framesz) != framesz) {
w->status_code = SPOE_FRM_ERR_IO;
return -1;
}
w->len = framesz;
return framesz;
}
/* Send a frame to HAProxy. It returns -1 if an error occurred, otherwise the
* number of written bytes. */
static int
write_frame(int sock, struct worker *w)
{
uint32_t netint;
/* Write the frame size, on 4 bytes */
netint = htonl(w->len);
if (do_write(sock, &netint, sizeof(netint)) != 4) {
w->status_code = SPOE_FRM_ERR_IO;
return -1;
}
/* Write the frame */
if (do_write(sock, w->buf, w->len) != w->len) {
w->status_code = SPOE_FRM_ERR_IO;
return -1;
}
return w->len;
}
/* Encode a variable-length integer. This function never fails and returns the
* number of written bytes. */
static int
encode_spoe_varint(uint64_t i, char *buf)
{
int idx;
if (i < 240) {
buf[0] = (unsigned char)i;
return 1;
}
buf[0] = (unsigned char)i | 240;
i = (i - 240) >> 4;
for (idx = 1; i >= 128; ++idx) {
buf[idx] = (unsigned char)i | 128;
i = (i - 128) >> 7;
}
buf[idx++] = (unsigned char)i;
return idx;
}
/* Decode a varable-length integer. If the decoding fails, -1 is returned. This
* happens when the buffer's end in reached. On success, the number of read
* bytes is returned. */
static int
decode_spoe_varint(char *buf, char *end, uint64_t *i)
{
unsigned char *msg = (unsigned char *)buf;
int idx = 0;
if (msg > (unsigned char *)end)
return -1;
if (msg[0] < 240) {
*i = msg[0];
return 1;
}
*i = msg[0];
do {
++idx;
if (msg+idx > (unsigned char *)end)
return -1;
*i += (uint64_t)msg[idx] << (4 + 7 * (idx-1));
} while (msg[idx] >= 128);
return (idx + 1);
}
/* Encode a string. The string will be prefix by its length, encoded as a
* variable-length integer. This function never fails and returns the number of
* written bytes. */
static int
encode_spoe_string(const char *str, size_t len, char *dst)
{
int idx = 0;
if (!len) {
dst[0] = 0;
return 1;
}
idx += encode_spoe_varint(len, dst);
memcpy(dst+idx, str, len);
return (idx + len);
}
/* Decode a string. Its length is decoded first as a variable-length integer. If
* it succeeds, and if the string length is valid, the begin of the string is
* saved in <*str>, its length is saved in <*len> and the total numbre of bytes
* read is returned. If an error occurred, -1 is returned and <*str> remains
* NULL. */
static int
decode_spoe_string(char *buf, char *end, char **str, uint64_t *len)
{
int r, idx = 0;
*str = NULL;
*len = 0;
if ((r = decode_spoe_varint(buf, end, len)) == -1)
goto error;
idx += r;
if (buf + idx + *len > end)
goto error;
*str = buf+idx;
return (idx + *len);
error:
return -1;
}
/* Skip a typed data. If an error occurred, -1 is returned, otherwise the number
* of bytes read is returned. A types data is composed of a type (1 byte) and
* corresponding data:
* - boolean: non additional data (0 bytes)
* - integers: a variable-length integer (see decode_spoe_varint)
* - ipv4: 4 bytes
* - ipv6: 16 bytes
* - binary and string: a buffer prefixed by its size, a variable-length
* integer (see decode_spoe_string) */
static int
skip_spoe_data(char *frame, char *end)
{
uint64_t sz = 0;
int r, idx = 0;
if (frame > end)
return -1;
switch (frame[idx++] & SPOE_DATA_T_MASK) {
case SPOE_DATA_T_BOOL:
idx++;
break;
case SPOE_DATA_T_INT32:
case SPOE_DATA_T_INT64:
case SPOE_DATA_T_UINT32:
case SPOE_DATA_T_UINT64:
if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1)
return -1;
idx += r;
break;
case SPOE_DATA_T_IPV4:
idx += 4;
break;
case SPOE_DATA_T_IPV6:
idx += 16;
break;
case SPOE_DATA_T_STR:
case SPOE_DATA_T_BIN:
if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1)
return -1;
idx += r + sz;
break;
}
if (frame+idx > end)
return -1;
return idx;
}
/* Decode a typed data. If an error occurred, -1 is returned, otherwise the
* number of read bytes is returned. See skip_spoe_data for details. */
static int
decode_spoe_data(char *frame, char *end, struct spoe_data *data)
{
uint64_t sz = 0;
int type, r, idx = 0;
if (frame > end)
return -1;
type = frame[idx++];
data->type = (type & SPOE_DATA_T_MASK);
switch (data->type) {
case SPOE_DATA_T_BOOL:
data->u.boolean = ((type & SPOE_DATA_FL_TRUE) == SPOE_DATA_FL_TRUE);
break;
case SPOE_DATA_T_INT32:
if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1)
return -1;
data->u.sint32 = sz;
idx += r;
break;
case SPOE_DATA_T_INT64:
if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1)
return -1;
data->u.uint32 = sz;
idx += r;
break;
case SPOE_DATA_T_UINT32:
if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1)
return -1;
data->u.sint64 = sz;
idx += r;
break;
case SPOE_DATA_T_UINT64:
if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1)
return -1;
data->u.uint64 = sz;
idx += r;
break;
case SPOE_DATA_T_IPV4:
if (frame+idx+4 > end)
return -1;
memcpy(&data->u.ipv4, frame+idx, 4);
idx += 4;
break;
case SPOE_DATA_T_IPV6:
if (frame+idx+16 > end)
return -1;
memcpy(&data->u.ipv6, frame+idx, 16);
idx += 16;
break;
case SPOE_DATA_T_STR:
if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1)
return -1;
idx += r;
if (frame+idx+sz > end)
return -1;
data->u.buffer.str = frame+idx;
data->u.buffer.len = sz;
idx += sz;
break;
case SPOE_DATA_T_BIN:
if ((r = decode_spoe_varint(frame+idx, end, &sz)) == -1)
return -1;
idx += r;
if (frame+idx+sz > end)
return -1;
data->u.buffer.str = frame+idx;
data->u.buffer.len = sz;
idx += sz;
break;
default:
break;
}
if (frame+idx > end)
return -1;
return idx;
}
/* Check the protocol version. It returns -1 if an error occurred, the number of
* read bytes otherwise. */
static int
check_proto_version(struct worker *w, int idx)
{
char *str;
uint64_t sz;
/* Get the list of all supported versions by HAProxy */
if ((w->buf[idx++] & SPOE_DATA_T_MASK) != SPOE_DATA_T_STR) {
w->status_code = SPOE_FRM_ERR_INVALID;
return -1;
}
idx += decode_spoe_string(w->buf+idx, w->buf+w->len, &str, &sz);
if (str == NULL) {
w->status_code = SPOE_FRM_ERR_INVALID;
return -1;
}
/* TODO: Find the right version in supported ones */
return idx;
}
/* Check max frame size value. It returns -1 if an error occurred, the number of
* read bytes otherwise. */
static int
check_max_frame_size(struct worker *w, int idx)
{
uint64_t sz;
int type, i;
/* Get the max-frame-size value of HAProxy */
type = w->buf[idx++];
if ((type & SPOE_DATA_T_MASK) != SPOE_DATA_T_INT32 &&
(type & SPOE_DATA_T_MASK) != SPOE_DATA_T_INT64 &&
(type & SPOE_DATA_T_MASK) != SPOE_DATA_T_UINT32 &&
(type & SPOE_DATA_T_MASK) != SPOE_DATA_T_UINT64) {
w->status_code = SPOE_FRM_ERR_INVALID;
return -1;
}
if ((i = decode_spoe_varint(w->buf+idx, w->buf+w->len, &sz)) == -1) {
w->status_code = SPOE_FRM_ERR_INVALID;
return -1;
}
idx += i;
/* Keep the lower value */
if (sz < w->size)
w->size = sz;
return idx;
}
/* Check healthcheck value. It returns -1 if an error occurred, the number of
* read bytes otherwise. */
static int
check_healthcheck(struct worker *w, int idx)
{
int type;
/* Get the "healthcheck" value of HAProxy */
type = w->buf[idx++];
if ((type & SPOE_DATA_T_MASK) != SPOE_DATA_T_BOOL) {
w->status_code = SPOE_FRM_ERR_INVALID;
return -1;
}
w->healthcheck = ((type & SPOE_DATA_FL_TRUE) == SPOE_DATA_FL_TRUE);
return idx;
}
/* Decode a HELLO frame received from HAProxy. It returns -1 if an error
* occurred, 0 if the frame must be skipped, otherwise the number of read
* bytes. */
static int
handle_hahello(struct worker *w)
{
char *end = w->buf+w->len;
int i, idx = 0;
/* Check frame type */
if (w->buf[idx++] != SPOE_FRM_T_HAPROXY_HELLO)
goto skip;
/* Skip flags */
idx += 4;
/* stream-id and frame-id must be cleared */
if (w->buf[idx] != 0 || w->buf[idx+1] != 0) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
idx += 2;
/* Loop on K/V items */
while (idx < w->len) {
char *str;
uint64_t sz;
/* Decode the item name */
idx += decode_spoe_string(w->buf+idx, end, &str, &sz);
if (str == NULL) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
/* Check "supported-versions" K/V item */
if (!memcmp(str, "supported-versions", sz)) {
if ((i = check_proto_version(w, idx)) == -1)
goto error;
idx = i;
}
/* Check "max-frame-size" K/V item "*/
else if (!memcmp(str, "max-frame-size", sz)) {
if ((i = check_max_frame_size(w, idx)) == -1)
goto error;
idx = i;
}
/* Check "healthcheck" K/V item "*/
else if (!memcmp(str, "healthcheck", sz)) {
if ((i = check_healthcheck(w, idx)) == -1)
goto error;
idx = i;
}
/* Skip "capabilities" K/V item for now */
else {
/* Silently ignore unknown item */
if ((i = skip_spoe_data(w->buf+idx, end)) == -1) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
idx += i;
}
}
return idx;
skip:
return 0;
error:
return -1;
}
/* Decode a DISCONNECT frame received from HAProxy. It returns -1 if an error
* occurred, 0 if the frame must be skipped, otherwise the number of read
* bytes. */
static int
handle_hadiscon(struct worker *w)
{
char *end = w->buf+w->len;
int i, idx = 0;
/* Check frame type */
if (w->buf[idx++] != SPOE_FRM_T_HAPROXY_DISCON)
goto skip;
/* Skip flags */
idx += 4;
/* stream-id and frame-id must be cleared */
if (w->buf[idx] != 0 || w->buf[idx+1] != 0) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
idx += 2;
/* Loop on K/V items */
while (idx < w->len) {
char *str;
uint64_t sz;
/* Decode item key */
idx += decode_spoe_string(w->buf+idx, end, &str, &sz);
if (str == NULL) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
/* Silently ignore unknown item */
if ((i = skip_spoe_data(w->buf+idx, end)) == -1) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
idx += i;
}
w->status_code = SPOE_FRM_ERR_NONE;
return idx;
skip:
return 0;
error:
return -1;
}
/* Encode a ACK frame to send it to HAProxy. It returns -1 if an error occurred,
* the number of written bytes otherwise. */
static void prepare_agentack(struct worker *w)
{
unsigned int flags = 0;
w->ack_len = 0;
/* Frame type */
w->ack[w->ack_len++] = SPOE_FRM_T_AGENT_ACK;
/* Set flags */
flags |= htonl(SPOE_FRM_FL_FIN);
memcpy(w->ack + w->ack_len, &flags, 4);
w->ack_len += 4;
/* Set stream-id and frame-id for ACK frames */
w->ack_len += encode_spoe_varint(w->stream_id, w->ack + w->ack_len);
w->ack_len += encode_spoe_varint(w->frame_id, w->ack + w->ack_len);
}
static inline
int set_var_name(struct worker *w, const char *name, int name_len, unsigned char scope)
{
w->ack[w->ack_len++] = SPOE_ACT_T_SET_VAR; /* Action type */
w->ack[w->ack_len++] = 3; /* Number of args */
w->ack[w->ack_len++] = scope; /* Arg 1: the scope */
w->ack_len += encode_spoe_string(name, name_len, w->ack+w->ack_len); /* Arg 2: variable name */
return 1;
}
int set_var_null(struct worker *w,
const char *name, int name_len,
unsigned char scope)
{
if (!set_var_name(w, name, name_len, scope))
return 0;
w->ack[w->ack_len++] = SPOE_DATA_T_NULL;
return 1;
}
int set_var_bool(struct worker *w,
const char *name, int name_len,
unsigned char scope, bool value)
{
if (!set_var_name(w, name, name_len, scope))
return 0;
w->ack[w->ack_len++] = SPOE_DATA_T_BOOL | (!!value << 4);
return 1;
}
static inline
int set_var_int(struct worker *w,
const char *name, int name_len,
unsigned char scope, int type, uint64_t value)
{
if (!set_var_name(w, name, name_len, scope))
return 0;
w->ack[w->ack_len++] = SPOE_DATA_T_UINT32;
w->ack_len += encode_spoe_varint(value, w->ack+w->ack_len); /* Arg 3: variable value */
return 1;
}
int set_var_uint32(struct worker *w,
const char *name, int name_len,
unsigned char scope, uint32_t value)
{
return set_var_int(w, name, name_len, scope, SPOE_DATA_T_UINT32, value);
}
int set_var_int32(struct worker *w,
const char *name, int name_len,
unsigned char scope, int32_t value)
{
return set_var_int(w, name, name_len, scope, SPOE_DATA_T_INT32, value);
}
int set_var_uint64(struct worker *w,
const char *name, int name_len,
unsigned char scope, uint64_t value)
{
return set_var_int(w, name, name_len, scope, SPOE_DATA_T_INT32, value);
}
int set_var_int64(struct worker *w,
const char *name, int name_len,
unsigned char scope, int64_t value)
{
return set_var_int(w, name, name_len, scope, SPOE_DATA_T_INT32, value);
}
int set_var_ipv4(struct worker *w,
const char *name, int name_len,
unsigned char scope,
struct in_addr *ipv4)
{
if (!set_var_name(w, name, name_len, scope))
return 0;
w->ack[w->ack_len++] = SPOE_DATA_T_IPV4;
memcpy(w->ack+w->ack_len, ipv4, 4);
w->ack_len += 4;
return 1;
}
int set_var_ipv6(struct worker *w,
const char *name, int name_len,
unsigned char scope,
struct in6_addr *ipv6)
{
if (!set_var_name(w, name, name_len, scope))
return 0;
w->ack[w->ack_len++] = SPOE_DATA_T_IPV6;
memcpy(w->ack+w->ack_len, ipv6, 16);
w->ack_len += 16;
return 1;
}
static inline
int set_var_buf(struct worker *w,
const char *name, int name_len,
unsigned char scope, int type,
const char *str, int str_len)
{
if (!set_var_name(w, name, name_len, scope))
return 0;
w->ack[w->ack_len++] = type;
w->ack_len += encode_spoe_string(str, str_len, w->ack+w->ack_len);
return 1;
}
int set_var_string(struct worker *w,
const char *name, int name_len,
unsigned char scope,
const char *str, int strlen)
{
return set_var_buf(w, name, name_len, scope, SPOE_DATA_T_STR, str, strlen);
}
int set_var_bin(struct worker *w,
const char *name, int name_len,
unsigned char scope,
const char *str, int strlen)
{
return set_var_buf(w, name, name_len, scope, SPOE_DATA_T_BIN, str, strlen);
}
/* This function is a little bit ugly,
* TODO: improve the response without copying the buffer
*/
static int commit_agentack(struct worker *w)
{
memcpy(w->buf, w->ack, w->ack_len);
w->len = w->ack_len;
return 1;
}
/* Decode a NOTIFY frame received from HAProxy. It returns -1 if an error
* occurred, 0 if the frame must be skipped, otherwise the number of read
* bytes. */
static int
handle_hanotify(struct worker *w)
{
char *end = w->buf+w->len;
uint64_t stream_id, frame_id;
int nbargs, i, idx = 0;
int index;
struct spoe_kv args[256];
uint64_t length;
struct ps_message *msg;
/* Check frame type */
if (w->buf[idx++] != SPOE_FRM_T_HAPROXY_NOTIFY)
goto skip;
/* Skip flags */
idx += 4;
/* Read the stream-id */
if ((i = decode_spoe_varint(w->buf+idx, end, &stream_id)) == -1) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
idx += i;
/* Read the frame-id */
if ((i = decode_spoe_varint(w->buf+idx, end, &frame_id)) == -1) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
idx += i;
w->stream_id = (unsigned int)stream_id;
w->frame_id = (unsigned int)frame_id;
DEBUG("Notify frame received: stream-id=%u - frame-id=%u",
w->stream_id, w->frame_id);
/* Prepare ack, if the processing fails the ack will be cancelled */
prepare_agentack(w);
/* Loop on messages */
while (idx < w->len) {
char *str;
uint64_t sz;
/* Decode the message name */
idx += decode_spoe_string(w->buf+idx, end, &str, &sz);
if (str == NULL) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
DEBUG(" Message '%.*s' received", (int)sz, str);
/* Decode all SPOE data */
nbargs = (unsigned char)w->buf[idx++];
for (index = 0; index < nbargs; index++) {
/* Read the key name */
if ((i = decode_spoe_string(w->buf+idx, end,
&args[index].name.str,
&length)) == -1) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
if (length > INT_MAX) {
w->status_code = SPOE_FRM_ERR_TOO_BIG;
goto error;
}
args[index].name.len = length;
idx += i;
/* Read the value */
memset(&args[index].value, 0, sizeof(args[index].value));
if ((i = decode_spoe_data(w->buf+idx, end, &args[index].value)) == -1) {
w->status_code = SPOE_FRM_ERR_INVALID;
goto error;
}
idx += i;
}
/* Lookup for existing bindings. If no existing message
* where found, does nothing.
*/
for (msg = ps_messages; msg; msg = msg->next)
if (sz == strlen(msg->name) && strncmp(str, msg->name, sz) == 0)
break;
if (msg == NULL || msg->ps->exec_message == NULL) {
DEBUG(" Message '%.*s' have no bindings registered", (int)sz, str);
continue;
}
/* Process the message */
msg->ps->exec_message(w, msg->ref, nbargs, args);
}
return idx;
skip:
return 0;
error:
return -1;
}
/* Encode a HELLO frame to send it to HAProxy. It returns -1 if an error
* occurred, the number of written bytes otherwise. */
static int
prepare_agenthello(struct worker *w)
{
int idx = 0;
unsigned int flags = 0;
/* Frame Type */
w->buf[idx++] = SPOE_FRM_T_AGENT_HELLO;
/* Set flags */
flags |= htonl(SPOE_FRM_FL_FIN);
memcpy(w->buf+idx, &flags, 4);
idx += 4;
/* No stream-id and frame-id for HELLO frames */
w->buf[idx++] = 0;
w->buf[idx++] = 0;
/* "version" K/V item */
idx += encode_spoe_string("version", 7, w->buf+idx);
w->buf[idx++] = SPOE_DATA_T_STR;
idx += encode_spoe_string(SPOP_VERSION, SLEN(SPOP_VERSION), w->buf+idx);
/* "max-frame-size" K/V item */
idx += encode_spoe_string("max-frame-size", 14, w->buf+idx);
w->buf[idx++] = SPOE_DATA_T_UINT32;
idx += encode_spoe_varint(w->size, w->buf+idx);
/* "capabilities" K/V item */
idx += encode_spoe_string("capabilities", 12, w->buf+idx);
w->buf[idx++] = SPOE_DATA_T_STR;
idx += encode_spoe_string(SPOA_CAPABILITIES, SLEN(SPOA_CAPABILITIES), w->buf+idx);
w->len = idx;
return idx;
}
/* Encode a DISCONNECT frame to send it to HAProxy. It returns -1 if an error
* occurred, the number of written bytes otherwise. */
static int
prepare_agentdicon(struct worker *w)
{
const char *reason;
int rlen, idx = 0;
unsigned int flags = 0;
if (w->status_code >= SPOE_FRM_ERRS)
w->status_code = SPOE_FRM_ERR_UNKNOWN;
reason = spoe_frm_err_reasons[w->status_code];
rlen = strlen(reason);
/* Frame type */
w->buf[idx++] = SPOE_FRM_T_AGENT_DISCON;
/* Set flags */
flags |= htonl(SPOE_FRM_FL_FIN);
memcpy(w->buf+idx, &flags, 4);
idx += 4;
/* No stream-id and frame-id for DISCONNECT frames */
w->buf[idx++] = 0;
w->buf[idx++] = 0;
/* There are 2 mandatory items: "status-code" and "message" */
/* "status-code" K/V item */
idx += encode_spoe_string("status-code", 11, w->buf+idx);
w->buf[idx++] = SPOE_DATA_T_UINT32;
idx += encode_spoe_varint(w->status_code, w->buf+idx);
/* "message" K/V item */
idx += encode_spoe_string("message", 7, w->buf+idx);
w->buf[idx++] = SPOE_DATA_T_STR;
idx += encode_spoe_string(reason, rlen, w->buf+idx);
w->len = idx;
return idx;
}
static int
hello_handshake(int sock, struct worker *w)
{
if (read_frame(sock, w) < 0) {
LOG("Failed to read Haproxy HELLO frame");
goto error;
}
if (handle_hahello(w) < 0) {
LOG("Failed to handle Haproxy HELLO frame");
goto error;
}
if (prepare_agenthello(w) < 0) {
LOG("Failed to prepare Agent HELLO frame");
goto error;
}
if (write_frame(sock, w) < 0) {
LOG("Failed to write Agent frame");
goto error;
}
DEBUG("Hello handshake done: version=%s - max-frame-size=%u - healthcheck=%s",
SPOP_VERSION, w->size, (w->healthcheck ? "true" : "false"));
return 0;
error:
return -1;
}
static int
notify_ack_roundtip(int sock, struct worker *w)
{
if (read_frame(sock, w) < 0) {
LOG("Failed to read Haproxy NOTIFY frame");
goto error_or_quit;
}
if (handle_hadiscon(w) != 0) {
if (w->status_code != SPOE_FRM_ERR_NONE)
LOG("Failed to handle Haproxy DISCONNECT frame");
DEBUG("Disconnect frame received: reason=%s",
spoe_frm_err_reasons[w->status_code]);
goto error_or_quit;
}
if (handle_hanotify(w) < 0) {
LOG("Failed to handle Haproxy NOTIFY frame");
goto error_or_quit;
}
if (commit_agentack(w) < 0) {
LOG("Failed to prepare Agent ACK frame");
goto error_or_quit;
}
if (write_frame(sock, w) < 0) {
LOG("Failed to write Agent ACK frame");
goto error_or_quit;
}
DEBUG("Ack frame sent: stream-id=%u - frame-id=%u",
w->stream_id, w->frame_id);
return 0;
error_or_quit:
return -1;
}
static void *
spoa_worker(void *data)
{
struct worker w;
struct sockaddr_in client;
int *info = (int *)data;
int csock, lsock = info[0];
struct ps *ps;
int i;
int len;
signal(SIGPIPE, SIG_IGN);
pthread_setspecific(worker_id, &info[1]);
/* Init registered processors */
for (ps = ps_list; ps != NULL; ps = ps->next)
ps->init_worker(&w);
/* Load files */
for (i = 0; i < nfiles; i++) {
len = strlen(files[i]);
for (ps = ps_list; ps != NULL; ps = ps->next)
if (strcmp(files[i] + len - strlen(ps->ext), ps->ext) == 0)
break;
if (ps == NULL) {
LOG("Can't load file \"%s\"\n", files[i]);
goto out;
}
if (!ps->load_file(&w, files[i]))
goto out;
}
while (1) {
socklen_t sz = sizeof(client);
if ((csock = accept(lsock, (struct sockaddr *)&client, &sz)) < 0) {
LOG("Failed to accept client connection: %m");
goto out;
}
memset(&w, 0, sizeof(w));
w.id = info[1];
w.size = MAX_FRAME_SIZE;
DEBUG("New connection from HAProxy accepted");
if (hello_handshake(csock, &w) < 0)
goto disconnect;
if (w.healthcheck == true)
goto close;
while (1) {
if (notify_ack_roundtip(csock, &w) < 0)
break;
}
disconnect:
if (w.status_code == SPOE_FRM_ERR_IO) {
LOG("Close the client socket because of I/O errors");
goto close;
}
if (prepare_agentdicon(&w) < 0) {
LOG("Failed to prepare Agent DISCONNECT frame");
goto close;
}
if (write_frame(csock, &w) < 0) {
LOG("Failed to write Agent DISCONNECT frame");
goto close;
}
DEBUG("Disconnect frame sent: reason=%s",
spoe_frm_err_reasons[w.status_code]);
close:
close(csock);
}
out:
free(info);
#if 0
pthread_exit(NULL);
#endif
return NULL;
}
int process_create(pid_t *pid, void *(*ps)(void *), void *data)
{
if (debug) {
ps(data);
exit(EXIT_SUCCESS);
}
*pid = fork();
if (*pid == -1)
return -1;
if (*pid > 0)
return 0;
ps(data);
return 0;
}
static void
usage(char *prog)
{
fprintf(stderr, "Usage: %s [-h] [-d] [-p <port>] [-n <num-workers>] -f <file>\n", prog);
fprintf(stderr, " -h Print this message\n");
fprintf(stderr, " -d Enable the debug mode\n");
fprintf(stderr, " -p <port> Specify the port to listen on (default: 12345)\n");
fprintf(stderr, " -n <num-workers> Specify the number of workers (default: 5)\n");
fprintf(stderr, " -f <file> Specify the file whoch contains the processing code.\n");
fprintf(stderr, " This argument can specified more than once.\n");
}
int
main(int argc, char **argv)
{
#if 0
pthread_t *ts = NULL;
#endif
pid_t *pids;
struct sockaddr_in server;
int i, sock, opt, nbworkers, port;
int status;
nbworkers = NUM_WORKERS;
port = DEFAULT_PORT;
while ((opt = getopt(argc, argv, "hdn:p:f:")) != -1) {
switch (opt) {
case 'h':
usage(argv[0]);
return EXIT_SUCCESS;
case 'd':
debug = true;
break;
case 'n':
nbworkers = atoi(optarg);
break;
case 'p':
port = atoi(optarg);
break;
case 'f':
add_file(optarg);
break;
default:
usage(argv[0]);
return EXIT_FAILURE;
}
}
if (nbworkers <= 0) {
fprintf(stderr, "%s: Invalid number of workers '%d'\n",
argv[0], nbworkers);
goto error;
}
if (port <= 0) {
fprintf(stderr, "%s: Invalid port '%d'\n", argv[0], port);
goto error;
}
if((sock = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
fprintf(stderr, "Failed creating socket: %m\n");
goto error;
}
setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, (int []){1}, sizeof(int));
setsockopt(sock, IPPROTO_TCP, TCP_NODELAY, (int []){1}, sizeof(int));
memset(&server, 0, sizeof(server));
server.sin_family = AF_INET;
server.sin_addr.s_addr = INADDR_ANY;
server.sin_port = htons(port);
if (bind(sock, (struct sockaddr *)&server, sizeof(server)) < 0) {
fprintf(stderr, "Failed to bind the socket: %m\n");
goto error;
}
if (listen(sock , 10) < 0) {
fprintf(stderr, "Failed to listen on the socket: %m\n");
goto error;
}
fprintf(stderr, "SPOA is listening on port %d\n", port);
pthread_key_create(&worker_id, NULL);
/* Initialise the server in thread mode. This code is commented
* out and not deleted, because later I expect to work with
* process ansd threads. This first version just support processes.
*/
#if 0
ts = calloc(nbworkers, sizeof(*ts));
for (i = 0; i < nbworkers; i++) {
int *info = calloc(2, sizeof(*info));
info[0] = sock;
info[1] = i+1;
if (pthread_create(&ts[i], NULL, spoa_worker, info) < 0) {
fprintf(stderr, "Failed to create thread %d: %m\n", i+1);
goto error;
}
fprintf(stderr, "SPOA worker %02d started\n", i+1);
}
for (i = 0; i < nbworkers; i++) {
pthread_join(ts[i], NULL);
fprintf(stderr, "SPOA worker %02d stopped\n", i+1);
}
free(ts);
#endif
/* Start processes */
pids = calloc(nbworkers, sizeof(*pids));
if (!pids) {
fprintf(stderr, "Out of memory error\n");
goto error;
}
for (i = 0; i < nbworkers; i++) {
int *info = calloc(2, sizeof(*info));
info[0] = sock;
info[1] = i+1;
if (process_create(&pids[i], spoa_worker, info) == -1) {
fprintf(stderr, "SPOA worker %02d started\n", i+1);
goto error;
}
fprintf(stderr, "SPOA worker %02d started\n", i+1);
}
for (i = 0; i < nbworkers; i++) {
waitpid(pids[0], &status, 0);
fprintf(stderr, "SPOA worker %02d stopped\n", i+1);
}
close(sock);
pthread_key_delete(worker_id);
return EXIT_SUCCESS;
error:
return EXIT_FAILURE;
}