forked from projectcalico/calico
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'projectcalico:master' into master
- Loading branch information
Showing
33 changed files
with
771 additions
and
389 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,127 @@ | ||
| // Project Calico BPF dataplane programs. | ||
| // Copyright (c) 2020-2022 Tigera, Inc. All rights reserved. | ||
| // SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later | ||
|
|
||
| #include <linux/bpf.h> | ||
|
|
||
| // socket_type.h contains the definition of SOCK_XXX constants that we need | ||
| // but it's supposed to be imported via socket.h, which we can't import due | ||
| // to lack of std lib support for BPF. Bypass its check for now. | ||
| #define _SYS_SOCKET_H | ||
| #include <bits/socket_type.h> | ||
|
|
||
| #include <stdbool.h> | ||
|
|
||
| #include "bpf.h" | ||
| #include "log.h" | ||
| #include "globals.h" | ||
| #include "ctlb.h" | ||
|
|
||
| #include "sendrecv.h" | ||
| #include "connect.h" | ||
|
|
||
| SEC("cgroup/connect6") | ||
| int calico_connect_v46(struct bpf_sock_addr *ctx) | ||
| { | ||
| int ret = 1; | ||
| __be32 ipv4; | ||
|
|
||
| CALI_DEBUG("connect_v46 ip[0-1] %x%x\n", | ||
| ctx->user_ip6[0], | ||
| ctx->user_ip6[1]); | ||
| CALI_DEBUG("connect_v46 ip[2-3] %x%x\n", | ||
| ctx->user_ip6[2], | ||
| ctx->user_ip6[3]); | ||
|
|
||
| /* check if it is a IPv4 mapped as IPv6 and if so, use the v4 table */ | ||
| if (ctx->user_ip6[0] == 0 && ctx->user_ip6[1] == 0 && | ||
| ctx->user_ip6[2] == bpf_htonl(0x0000ffff)) { | ||
| goto v4; | ||
| } | ||
|
|
||
| CALI_DEBUG("connect_v46: not implemented for v6 yet\n"); | ||
| goto out; | ||
|
|
||
| v4: | ||
| ipv4 = ctx->user_ip6[3]; | ||
|
|
||
| if ((ret = connect(ctx, &ipv4)) != 1) { | ||
| goto out; | ||
| } | ||
|
|
||
| ctx->user_ip6[3] = ipv4; | ||
|
|
||
| out: | ||
| return ret; | ||
| } | ||
|
|
||
| SEC("cgroup/sendmsg6") | ||
| int calico_sendmsg_v46(struct bpf_sock_addr *ctx) | ||
| { | ||
| CALI_DEBUG("sendmsg_v46\n"); | ||
|
|
||
| return 1; | ||
| } | ||
|
|
||
| SEC("cgroup/recvmsg6") | ||
| int calico_recvmsg_v46(struct bpf_sock_addr *ctx) | ||
| { | ||
| if (CTLB_EXCLUDE_UDP) { | ||
| goto out; | ||
| } | ||
|
|
||
| __be32 ipv4; | ||
|
|
||
| CALI_DEBUG("recvmsg_v46 ip[0-1] %x%x\n", | ||
| ctx->user_ip6[0], | ||
| ctx->user_ip6[1]); | ||
| CALI_DEBUG("recvmsg_v46 ip[2-3] %x%x\n", | ||
| ctx->user_ip6[2], | ||
| ctx->user_ip6[3]); | ||
|
|
||
| /* check if it is a IPv4 mapped as IPv6 and if so, use the v4 table */ | ||
| if (ctx->user_ip6[0] == 0 && ctx->user_ip6[1] == 0 && | ||
| ctx->user_ip6[2] == bpf_htonl(0x0000ffff)) { | ||
| goto v4; | ||
| } | ||
|
|
||
| CALI_DEBUG("recvmsg_v46: not implemented for v6 yet\n"); | ||
| goto out; | ||
|
|
||
|
|
||
| v4: | ||
| ipv4 = ctx->user_ip6[3]; | ||
| CALI_DEBUG("recvmsg_v46 %x:%d\n", bpf_ntohl(ipv4), ctx_port_to_host(ctx->user_port)); | ||
|
|
||
| if (ctx->type != SOCK_DGRAM) { | ||
| CALI_INFO("unexpected sock type %d\n", ctx->type); | ||
| goto out; | ||
| } | ||
|
|
||
| struct sendrec_key key = { | ||
| .ip = ipv4, | ||
| .port = ctx->user_port, | ||
| .cookie = bpf_get_socket_cookie(ctx), | ||
| }; | ||
|
|
||
| struct sendrec_val *revnat = cali_srmsg_lookup_elem(&key); | ||
|
|
||
| if (revnat == NULL) { | ||
| CALI_DEBUG("revnat miss for %x:%d\n", | ||
| bpf_ntohl(ipv4), ctx_port_to_host(ctx->user_port)); | ||
| /* we are past policy and the packet was allowed. Either the | ||
| * mapping does not exist anymore and if the app cares, it | ||
| * should check the addresses. It is more likely a packet sent | ||
| * to server from outside and no mapping is expected. | ||
| */ | ||
| goto out; | ||
| } | ||
|
|
||
| ctx->user_ip6[3] = revnat->ip; | ||
| ctx->user_port = revnat->port; | ||
| CALI_DEBUG("recvmsg_v46 v4 rev nat to %x:%d\n", | ||
| bpf_ntohl(ipv4), ctx_port_to_host(ctx->user_port)); | ||
|
|
||
| out: | ||
| return 1; | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.