src/resolve/resolved-mdns.c

   1 /***
   2   This file is part of systemd.
   3
   4   Copyright 2015 Daniel Mack
   5
   6   systemd is free software; you can redistribute it and/or modify it
   7   under the terms of the GNU Lesser General Public License as published by
   8   the Free Software Foundation; either version 2.1 of the License, or
   9   (at your option) any later version.
  10
  11   systemd is distributed in the hope that it will be useful, but
  12   WITHOUT ANY WARRANTY; without even the implied warranty of
  13   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  14   Lesser General Public License for more details.
  15
  16   You should have received a copy of the GNU Lesser General Public License
  17   along with systemd; If not, see <http://www.gnu.org/licenses/>.
  18  ***/
  19
  20 #include <resolv.h>
  21 #include <netinet/in.h>
  22 #include <arpa/inet.h>
  23
  24 #include "fd-util.h"
  25 #include "resolved-manager.h"
  26 #include "resolved-mdns.h"
  27
  28 void manager_mdns_stop(Manager *m) {
  29         assert(m);
  30
  31         m->mdns_ipv4_event_source = sd_event_source_unref(m->mdns_ipv4_event_source);
  32         m->mdns_ipv4_fd = safe_close(m->mdns_ipv4_fd);
  33
  34         m->mdns_ipv6_event_source = sd_event_source_unref(m->mdns_ipv6_event_source);
  35         m->mdns_ipv6_fd = safe_close(m->mdns_ipv6_fd);
  36 }
  37
  38 int manager_mdns_start(Manager *m) {
  39         int r;
  40
  41         assert(m);
  42
  43         if (m->mdns_support == RESOLVE_SUPPORT_NO)
  44                 return 0;
  45
  46         r = manager_mdns_ipv4_fd(m);
  47         if (r == -EADDRINUSE)
  48                 goto eaddrinuse;
  49         if (r < 0)
  50                 return r;
  51
  52         if (socket_ipv6_is_supported()) {
  53                 r = manager_mdns_ipv6_fd(m);
  54                 if (r == -EADDRINUSE)
  55                         goto eaddrinuse;
  56                 if (r < 0)
  57                         return r;
  58         }
  59
  60         return 0;
  61
  62 eaddrinuse:
  63         log_warning("Another mDNS responder prohibits binding the socket to the same port. Turning off mDNS support.");
  64         m->mdns_support = RESOLVE_SUPPORT_NO;
  65         manager_mdns_stop(m);
  66
  67         return 0;
  68 }
  69
  70 static int mdns_scope_process_query(DnsScope *s, DnsPacket *p) {
  71         _cleanup_(dns_answer_unrefp) DnsAnswer *answer = NULL, *soa = NULL;
  72         _cleanup_(dns_packet_unrefp) DnsPacket *reply = NULL;
  73         DnsResourceKey *key = NULL;
  74         bool tentative = false;
  75         int r;
  76
  77         assert(s);
  78         assert(p);
  79
  80         r = dns_packet_extract(p);
  81         if (r < 0)
  82                 return log_debug_errno(r, "Failed to extract resource records from incoming packet: %m");
  83
  84         /* TODO: there might be more than one question in mDNS queries. */
  85         assert_return((dns_question_size(p->question) > 0), -EINVAL);
  86         key = p->question->keys[0];
  87
  88         r = dns_zone_lookup(&s->zone, key, 0, &answer, &soa, &tentative);
  89         if (r < 0) {
  90                 log_debug_errno(r, "Failed to lookup key: %m");
  91                 return r;
  92         }
  93         if (r == 0)
  94                 return 0;
  95
  96         r = dns_scope_make_reply_packet(s, DNS_PACKET_ID(p), DNS_RCODE_SUCCESS, NULL, answer, NULL, false, &reply);
  97         if (r < 0) {
  98                 log_debug_errno(r, "Failed to build reply packet: %m");
  99                 return r;
 100         }
 101
 102         if (!ratelimit_test(&s->ratelimit))
 103                 return 0;
 104
 105         r = dns_scope_emit_udp(s, -1, reply);
 106         if (r < 0) {
 107                 log_debug_errno(r, "Failed to send reply packet: %m");
 108                 return r;
 109         }
 110
 111         return 0;
 112 }
 113
 114 static int on_mdns_packet(sd_event_source *s, int fd, uint32_t revents, void *userdata) {
 115         _cleanup_(dns_packet_unrefp) DnsPacket *p = NULL;
 116         Manager *m = userdata;
 117         DnsScope *scope;
 118         int r;
 119
 120         r = manager_recv(m, fd, DNS_PROTOCOL_MDNS, &p);
 121         if (r <= 0)
 122                 return r;
 123
 124         if (manager_our_packet(m, p))
 125                 return 0;
 126
 127         scope = manager_find_scope(m, p);
 128         if (!scope) {
 129                 log_warning("Got mDNS UDP packet on unknown scope. Ignoring.");
 130                 return 0;
 131         }
 132
 133         if (dns_packet_validate_reply(p) > 0) {
 134                 DnsResourceRecord *rr;
 135
 136                 log_debug("Got mDNS reply packet");
 137
 138                 /*
 139                  * mDNS is different from regular DNS and LLMNR with regard to handling responses.
 140                  * While on other protocols, we can ignore every answer that doesn't match a question
 141                  * we broadcast earlier, RFC6762, section 18.1 recommends looking at and caching all
 142                  * incoming information, regardless of the DNS packet ID.
 143                  *
 144                  * Hence, extract the packet here, and try to find a transaction for answer the we got
 145                  * and complete it. Also store the new information in scope's cache.
 146                  */
 147                 r = dns_packet_extract(p);
 148                 if (r < 0) {
 149                         log_debug("mDNS packet extraction failed.");
 150                         return 0;
 151                 }
 152
 153                 dns_scope_check_conflicts(scope, p);
 154
 155                 DNS_ANSWER_FOREACH(rr, p->answer) {
 156                         const char *name = dns_resource_key_name(rr->key);
 157                         DnsTransaction *t;
 158
 159                         /* If the received reply packet contains ANY record that is not .local or .in-addr.arpa,
 160                          * we assume someone's playing tricks on us and discard the packet completely. */
 161                         if (!(dns_name_endswith(name, "in-addr.arpa") > 0 ||
 162                               dns_name_endswith(name, "local") > 0))
 163                                 return 0;
 164
 165                         if (rr->ttl == 0) {
 166                                 log_debug("Got a goodbye packet");
 167                                 /* See the section 10.1 of RFC6762 */
 168                                 rr->ttl = 1;
 169                         }
 170
 171                         t = dns_scope_find_transaction(scope, rr->key, false);
 172                         if (t)
 173                                 dns_transaction_process_reply(t, p);
 174
 175                         /* Also look for the various types of ANY transactions */
 176                         t = dns_scope_find_transaction(scope, &DNS_RESOURCE_KEY_CONST(rr->key->class, DNS_TYPE_ANY, dns_resource_key_name(rr->key)), false);
 177                         if (t)
 178                                 dns_transaction_process_reply(t, p);
 179
 180                         t = dns_scope_find_transaction(scope, &DNS_RESOURCE_KEY_CONST(DNS_CLASS_ANY, rr->key->type, dns_resource_key_name(rr->key)), false);
 181                         if (t)
 182                                 dns_transaction_process_reply(t, p);
 183
 184                         t = dns_scope_find_transaction(scope, &DNS_RESOURCE_KEY_CONST(DNS_CLASS_ANY, DNS_TYPE_ANY, dns_resource_key_name(rr->key)), false);
 185                         if (t)
 186                                 dns_transaction_process_reply(t, p);
 187                 }
 188
 189                 dns_cache_put(&scope->cache, NULL, DNS_PACKET_RCODE(p), p->answer, false, (uint32_t) -1, 0, p->family, &p->sender);
 190
 191         } else if (dns_packet_validate_query(p) > 0)  {
 192                 log_debug("Got mDNS query packet for id %u", DNS_PACKET_ID(p));
 193
 194                 r = mdns_scope_process_query(scope, p);
 195                 if (r < 0) {
 196                         log_debug_errno(r, "mDNS query processing failed: %m");
 197                         return 0;
 198                 }
 199         } else
 200                 log_debug("Invalid mDNS UDP packet.");
 201
 202         return 0;
 203 }
 204
 205 int manager_mdns_ipv4_fd(Manager *m) {
 206         union sockaddr_union sa = {
 207                 .in.sin_family = AF_INET,
 208                 .in.sin_port = htobe16(MDNS_PORT),
 209         };
 210         static const int one = 1, pmtu = IP_PMTUDISC_DONT, ttl = 255;
 211         int r;
 212
 213         assert(m);
 214
 215         if (m->mdns_ipv4_fd >= 0)
 216                 return m->mdns_ipv4_fd;
 217
 218         m->mdns_ipv4_fd = socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0);
 219         if (m->mdns_ipv4_fd < 0)
 220                 return log_error_errno(errno, "mDNS-IPv4: Failed to create socket: %m");
 221
 222         r = setsockopt(m->mdns_ipv4_fd, IPPROTO_IP, IP_TTL, &ttl, sizeof(ttl));
 223         if (r < 0) {
 224                 r = log_error_errno(errno, "mDNS-IPv4: Failed to set IP_TTL: %m");
 225                 goto fail;
 226         }
 227
 228         r = setsockopt(m->mdns_ipv4_fd, IPPROTO_IP, IP_MULTICAST_TTL, &ttl, sizeof(ttl));
 229         if (r < 0) {
 230                 r = log_error_errno(errno, "mDNS-IPv4: Failed to set IP_MULTICAST_TTL: %m");
 231                 goto fail;
 232         }
 233
 234         r = setsockopt(m->mdns_ipv4_fd, IPPROTO_IP, IP_MULTICAST_LOOP, &one, sizeof(one));
 235         if (r < 0) {
 236                 r = log_error_errno(errno, "mDNS-IPv4: Failed to set IP_MULTICAST_LOOP: %m");
 237                 goto fail;
 238         }
 239
 240         r = setsockopt(m->mdns_ipv4_fd, IPPROTO_IP, IP_PKTINFO, &one, sizeof(one));
 241         if (r < 0) {
 242                 r = log_error_errno(errno, "mDNS-IPv4: Failed to set IP_PKTINFO: %m");
 243                 goto fail;
 244         }
 245
 246         r = setsockopt(m->mdns_ipv4_fd, IPPROTO_IP, IP_RECVTTL, &one, sizeof(one));
 247         if (r < 0) {
 248                 r = log_error_errno(errno, "mDNS-IPv4: Failed to set IP_RECVTTL: %m");
 249                 goto fail;
 250         }
 251
 252         /* Disable Don't-Fragment bit in the IP header */
 253         r = setsockopt(m->mdns_ipv4_fd, IPPROTO_IP, IP_MTU_DISCOVER, &pmtu, sizeof(pmtu));
 254         if (r < 0) {
 255                 r = log_error_errno(errno, "mDNS-IPv4: Failed to set IP_MTU_DISCOVER: %m");
 256                 goto fail;
 257         }
 258
 259         /* See the section 15.1 of RFC6762 */
 260         /* first try to bind without SO_REUSEADDR to detect another mDNS responder */
 261         r = bind(m->mdns_ipv4_fd, &sa.sa, sizeof(sa.in));
 262         if (r < 0) {
 263                 if (errno != EADDRINUSE) {
 264                         r = log_error_errno(errno, "mDNS-IPv4: Failed to bind socket: %m");
 265                         goto fail;
 266                 }
 267
 268                 log_warning("mDNS-IPv4: There appears to be another mDNS responder running, or previously systemd-resolved crashed with some outstanding transfers.");
 269
 270                 /* try again with SO_REUSEADDR */
 271                 r = setsockopt(m->mdns_ipv4_fd, SOL_SOCKET, SO_REUSEADDR, &one, sizeof(one));
 272                 if (r < 0) {
 273                         r = log_error_errno(errno, "mDNS-IPv4: Failed to set SO_REUSEADDR: %m");
 274                         goto fail;
 275                 }
 276
 277                 r = bind(m->mdns_ipv4_fd, &sa.sa, sizeof(sa.in));
 278                 if (r < 0) {
 279                         r = log_error_errno(errno, "mDNS-IPv4: Failed to bind socket: %m");
 280                         goto fail;
 281                 }
 282         } else {
 283                 /* enable SO_REUSEADDR for the case that the user really wants multiple mDNS responders */
 284                 r = setsockopt(m->mdns_ipv4_fd, SOL_SOCKET, SO_REUSEADDR, &one, sizeof(one));
 285                 if (r < 0) {
 286                         r = log_error_errno(errno, "mDNS-IPv4: Failed to set SO_REUSEADDR: %m");
 287                         goto fail;
 288                 }
 289         }
 290
 291         r = sd_event_add_io(m->event, &m->mdns_ipv4_event_source, m->mdns_ipv4_fd, EPOLLIN, on_mdns_packet, m);
 292         if (r < 0)
 293                 goto fail;
 294
 295         return m->mdns_ipv4_fd;
 296
 297 fail:
 298         m->mdns_ipv4_fd = safe_close(m->mdns_ipv4_fd);
 299         return r;
 300 }
 301
 302 int manager_mdns_ipv6_fd(Manager *m) {
 303         union sockaddr_union sa = {
 304                 .in6.sin6_family = AF_INET6,
 305                 .in6.sin6_port = htobe16(MDNS_PORT),
 306         };
 307         static const int one = 1, ttl = 255;
 308         int r;
 309
 310         assert(m);
 311
 312         if (m->mdns_ipv6_fd >= 0)
 313                 return m->mdns_ipv6_fd;
 314
 315         m->mdns_ipv6_fd = socket(AF_INET6, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0);
 316         if (m->mdns_ipv6_fd < 0)
 317                 return log_error_errno(errno, "mDNS-IPv6: Failed to create socket: %m");
 318
 319         r = setsockopt(m->mdns_ipv6_fd, IPPROTO_IPV6, IPV6_UNICAST_HOPS, &ttl, sizeof(ttl));
 320         if (r < 0) {
 321                 r = log_error_errno(errno, "mDNS-IPv6: Failed to set IPV6_UNICAST_HOPS: %m");
 322                 goto fail;
 323         }
 324
 325         /* RFC 4795, section 2.5 recommends setting the TTL of UDP packets to 255. */
 326         r = setsockopt(m->mdns_ipv6_fd, IPPROTO_IPV6, IPV6_MULTICAST_HOPS, &ttl, sizeof(ttl));
 327         if (r < 0) {
 328                 r = log_error_errno(errno, "mDNS-IPv6: Failed to set IPV6_MULTICAST_HOPS: %m");
 329                 goto fail;
 330         }
 331
 332         r = setsockopt(m->mdns_ipv6_fd, IPPROTO_IPV6, IPV6_MULTICAST_LOOP, &one, sizeof(one));
 333         if (r < 0) {
 334                 r = log_error_errno(errno, "mDNS-IPv6: Failed to set IPV6_MULTICAST_LOOP: %m");
 335                 goto fail;
 336         }
 337
 338         r = setsockopt(m->mdns_ipv6_fd, IPPROTO_IPV6, IPV6_V6ONLY, &one, sizeof(one));
 339         if (r < 0) {
 340                 r = log_error_errno(errno, "mDNS-IPv6: Failed to set IPV6_V6ONLY: %m");
 341                 goto fail;
 342         }
 343
 344         r = setsockopt(m->mdns_ipv6_fd, IPPROTO_IPV6, IPV6_RECVPKTINFO, &one, sizeof(one));
 345         if (r < 0) {
 346                 r = log_error_errno(errno, "mDNS-IPv6: Failed to set IPV6_RECVPKTINFO: %m");
 347                 goto fail;
 348         }
 349
 350         r = setsockopt(m->mdns_ipv6_fd, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &one, sizeof(one));
 351         if (r < 0) {
 352                 r = log_error_errno(errno, "mDNS-IPv6: Failed to set IPV6_RECVHOPLIMIT: %m");
 353                 goto fail;
 354         }
 355
 356         /* See the section 15.1 of RFC6762 */
 357         /* first try to bind without SO_REUSEADDR to detect another mDNS responder */
 358         r = bind(m->mdns_ipv6_fd, &sa.sa, sizeof(sa.in6));
 359         if (r < 0) {
 360                 if (errno != EADDRINUSE) {
 361                         r = log_error_errno(errno, "mDNS-IPv6: Failed to bind socket: %m");
 362                         goto fail;
 363                 }
 364
 365                 log_warning("mDNS-IPv6: There appears to be another mDNS responder running, or previously systemd-resolved crashed with some outstanding transfers.");
 366
 367                 /* try again with SO_REUSEADDR */
 368                 r = setsockopt(m->mdns_ipv6_fd, SOL_SOCKET, SO_REUSEADDR, &one, sizeof(one));
 369                 if (r < 0) {
 370                         r = log_error_errno(errno, "mDNS-IPv6: Failed to set SO_REUSEADDR: %m");
 371                         goto fail;
 372                 }
 373
 374                 r = bind(m->mdns_ipv6_fd, &sa.sa, sizeof(sa.in6));
 375                 if (r < 0) {
 376                         r = log_error_errno(errno, "mDNS-IPv6: Failed to bind socket: %m");
 377                         goto fail;
 378                 }
 379         } else {
 380                 /* enable SO_REUSEADDR for the case that the user really wants multiple mDNS responders */
 381                 r = setsockopt(m->mdns_ipv6_fd, SOL_SOCKET, SO_REUSEADDR, &one, sizeof(one));
 382                 if (r < 0) {
 383                         r = log_error_errno(errno, "mDNS-IPv6: Failed to set SO_REUSEADDR: %m");
 384                         goto fail;
 385                 }
 386         }
 387
 388         r = sd_event_add_io(m->event, &m->mdns_ipv6_event_source, m->mdns_ipv6_fd, EPOLLIN, on_mdns_packet, m);
 389         if (r < 0)
 390                 goto fail;
 391
 392         return m->mdns_ipv6_fd;
 393
 394 fail:
 395         m->mdns_ipv6_fd = safe_close(m->mdns_ipv6_fd);
 396         return r;
 397 }