CF_DECLS
-CF_KEYWORDS(RPKI, CACHE, LIST, PREFERENCE)
+CF_KEYWORDS(RPKI, CACHE, LIST, PREFERENCE, RTRLIB)
CF_GRAMMAR
proto_start RPKI {
this_proto = proto_config_new(&proto_rpki, $1);
init_list(&RPKI_CFG->cache_list);
+ RPKI_CFG->rtrlib_path = RPKI_RTRLIB_PATH;
}
;
proto_item
| CACHE LIST '{' rpki_cache_list '}'
| ROA TABLE roa_table_cf { RPKI_CFG->roa_table_cf = $3; }
+ | RTRLIB text { RPKI_CFG->rtrlib_path = $2; }
;
rpki_cache_list:
#include <stdlib.h>
#include <unistd.h>
#include <pthread.h>
+#include <dlfcn.h>
#include "proto/rpki/rpki.h"
#include "lib/socket.h"
node n;
u32 asn;
ip_addr ip;
- u8 min_len;
- u8 max_len;
+ u8 pxlen;
+ u8 maxlen;
u8 added;
struct rpki_proto *rpki;
};
static list rpki_proto_list;
+static void *rtrlib;
+static struct rtr_mgr_config * (*rtr_mgr_init_fp)(
+ struct rtr_mgr_group groups[], const unsigned int groups_len,
+ const unsigned int refresh_interval, const unsigned int expire_interval,
+ const void *update_fp,
+ const void *spki_update_fp,
+ const void *status_fp,
+ void *status_fp_data);
+static int (*rtr_mgr_start_fp)(struct rtr_mgr_config *config);
+static const char * (*rtr_state_to_str_fp)(enum rtr_socket_state state);
+static const char * (*rtr_mgr_status_to_str_fp)(enum rtr_mgr_status status);
+static int (*tr_tcp_init_fp)(const struct tr_tcp_config *config, struct tr_socket *socket);
+static void (*rtr_mgr_stop_fp)(struct rtr_mgr_config *config);
+static void (*rtr_mgr_free_fp)(struct rtr_mgr_config *config);
+
+static int
+was_dlsym_ok(struct rpki_proto *p)
+{
+ char *err_buffer = dlerror();
+
+ if (err_buffer != NULL)
+ {
+ RPKI_ERROR(p, "%s. Try the latest version of RTRLib.", err_buffer);
+ return 0; /* FAIL */
+ }
+ return 1; /* OK */
+}
+
+static int
+load_rtrlib(struct rpki_proto *p)
+{
+ rtrlib = dlopen(p->cf->rtrlib_path, RTLD_LAZY);
+ if (!rtrlib)
+ {
+ RPKI_ERROR(p, "dlopen(): %s. Try specify path to the shared RTRLib (http://rpki.realmv6.org/) with 'rtrlib' option"
+ "inside of the rpki protocol configuration", dlerror());
+ return 0; /* FAIL */
+ }
+ else
+ {
+ RPKI_TRACE(p, "Loaded RTRLib from %s", p->cf->rtrlib_path);
+ }
+
+ dlerror(); /* Clear any existing error */
+
+ rtr_mgr_init_fp = (struct rtr_mgr_config * (*)(
+ struct rtr_mgr_group groups[], const unsigned int groups_len,
+ const unsigned int refresh_interval, const unsigned int expire_interval,
+ const void *update_fp,
+ const void *spki_update_fp,
+ const void *status_fp,
+ void *status_fp_data)) dlsym(rtrlib, "rtr_mgr_init");
+ if (!was_dlsym_ok(p))
+ return 0; /* FAIL */
+
+ rtr_mgr_start_fp = (int (*)(struct rtr_mgr_config *)) dlsym(rtrlib, "rtr_mgr_start");
+ if (!was_dlsym_ok(p))
+ return 0; /* FAIL */
+
+ rtr_state_to_str_fp = (const char * (*)(enum rtr_socket_state state)) dlsym(rtrlib, "rtr_state_to_str");
+ if (!was_dlsym_ok(p))
+ return 0; /* FAIL */
+
+ rtr_mgr_status_to_str_fp = (const char * (*)(enum rtr_mgr_status status)) dlsym(rtrlib, "rtr_mgr_status_to_str");
+ if (!was_dlsym_ok(p))
+ return 0; /* FAIL */
+
+ tr_tcp_init_fp = (int (*)(const struct tr_tcp_config *config, struct tr_socket *socket)) dlsym(rtrlib, "tr_tcp_init");
+ if (!was_dlsym_ok(p))
+ return 0; /* FAIL */
+
+ rtr_mgr_stop_fp = (void (*)(struct rtr_mgr_config *config)) dlsym(rtrlib, "rtr_mgr_stop");
+ if (!was_dlsym_ok(p))
+ return 0; /* FAIL */
+
+ rtr_mgr_free_fp = (void (*)(struct rtr_mgr_config *config)) dlsym(rtrlib, "rtr_mgr_free");
+ if (!was_dlsym_ok(p))
+ return 0; /* FAIL */
+
+ return 1; /* OK */
+}
+
void
rpki_init_all(void)
{
init_list(&rpki_proto_list);
+ rtrlib = NULL;
}
static void
}
else
{
- RPKI_TRACE(p, "status: %s\t%s", rtr_mgr_status_to_str(status), rtr_state_to_str(socket->state));
+ RPKI_TRACE(p, "status: %s\t%s", (*rtr_mgr_status_to_str_fp)(status), (*rtr_state_to_str_fp)(socket->state));
}
}
ip6_ntop(ip6, ip_buf);
}
-#define LOG_SKIP_ENTRY_FMT(operation_name) "skip unsupported IP version: " operation_name " %25s/%u-%-3u \tASN: %10u"
+#define RPKI_LOG_ADD "add"
+#define RPKI_LOG_DEL "del"
+#define RPKI_LOG_ENTRY_FMT(ip_fmt) " roa %-25" ip_fmt "/%u-%-3u ASN: %u"
+#define RPKI_LOG_FMT(operation_name) operation_name RPKI_LOG_ENTRY_FMT("I")
+#define RPKI_LOG_SKIP_FMT(operation_name) "skip " operation_name RPKI_LOG_ENTRY_FMT("s") " (unsupported IP version)"
if (added)
{
- RPKI_TRACE(p, LOG_SKIP_ENTRY_FMT("add"), ip_buf, rec->min_len, rec->max_len, rec->asn);
+ RPKI_TRACE(p, RPKI_LOG_SKIP_FMT(RPKI_LOG_ADD), ip_buf, rec->min_len, rec->max_len, rec->asn);
}
else
{
- RPKI_TRACE(p, LOG_SKIP_ENTRY_FMT("del"), ip_buf, rec->min_len, rec->max_len, rec->asn);
+ RPKI_TRACE(p, RPKI_LOG_SKIP_FMT(RPKI_LOG_DEL), ip_buf, rec->min_len, rec->max_len, rec->asn);
}
}
e->added = added;
e->asn = rec.asn;
e->ip = ip;
- e->max_len = rec.max_len;
- e->min_len = rec.min_len;
+ e->pxlen = rec.min_len;
+ e->maxlen = rec.max_len;
e->rpki = p;
+ if (e->added)
+ {
+ RPKI_TRACE(p, RPKI_LOG_FMT(RPKI_LOG_ADD), e->ip, e->pxlen, e->maxlen, e->asn);
+ }
+ else
+ {
+ RPKI_TRACE(p, RPKI_LOG_FMT(RPKI_LOG_DEL), e->ip, e->pxlen, e->maxlen, e->asn);
+ }
+
send_data_to_main_thread(p, e);
}
{
rem2_node(&entry->n);
if (entry->added)
- roa_add_item(p->cf->roa_table_cf->table, entry->ip, entry->min_len, entry->max_len, entry->asn, ROA_SRC_RPKI);
+ roa_add_item(p->cf->roa_table_cf->table, entry->ip, entry->pxlen, entry->maxlen, entry->asn, ROA_SRC_RPKI);
else
- roa_delete_item(p->cf->roa_table_cf->table, entry->ip, entry->min_len, entry->max_len, entry->asn, ROA_SRC_RPKI);
+ roa_delete_item(p->cf->roa_table_cf->table, entry->ip, entry->pxlen, entry->maxlen, entry->asn, ROA_SRC_RPKI);
}
rpki_unlock_sessions(p);
}
RPKI_TRACE(p, "------------- rpki_start -------------");
+ if (!rtrlib && !load_rtrlib(p))
+ return PS_DOWN;
+
create_rw_sockets(p);
init_list(&p->notify_list);
pthread_spin_init(&p->notify_lock, PTHREAD_PROCESS_PRIVATE);
tcp_config->host = cache->full_domain_name;
tcp_config->port = cache->port;
- tr_tcp_init(tcp_config, tr_tcp);
+ (*tr_tcp_init_fp)(tcp_config, tr_tcp);
// create an rtr_socket and associate it with the transport socket
rtr_tcp->tr_socket = tr_tcp;
idx++;
}
- p->rtr_conf = rtr_mgr_init(groups, 1, 30, 520, &rtr_thread_update_hook, NULL, &status_cb, p);
- rtr_mgr_start(p->rtr_conf);
+ p->rtr_conf = (*rtr_mgr_init_fp)(groups, 1, 30, 520, &rtr_thread_update_hook, NULL, &status_cb, p);
+ (*rtr_mgr_start_fp)(p->rtr_conf);
return PS_UP;
}
{
struct rpki_proto *p = (struct rpki_proto *) P;
- rtr_mgr_stop(p->rtr_conf);
- rtr_mgr_free(p->rtr_conf);
+ (*rtr_mgr_stop_fp)(p->rtr_conf);
+ (*rtr_mgr_free_fp)(p->rtr_conf);
mb_free(p->rtr_groups);
mb_free(p->rtr_sockets);
#include <pthread.h>
-#include "rtrlib/rtrlib.h"
-
#include "nest/bird.h"
#include "nest/protocol.h"
#include "lib/socket.h"
+#include "proto/rpki/rtrlib-mockup.h"
+
#define RPKI_PORT "8282"
#define RPKI_PORT_MAX_LENGTH_STR 6
#define RPKI_RX_BUFFER_EXT_SIZE 0xffff
#define RPKI_TX_BUFFER_EXT_SIZE 0xffff
+#define RPKI_RTRLIB_PATH "/usr/local/lib64/librtr.so"
#define RPKI_LOG(log_level, p, msg, args...) \
do { \
struct proto_config c;
list cache_list; /* (struct rpki_cache *) */
struct roa_table_config *roa_table_cf;
+ const char *rtrlib_path;
};
struct rpki_proto {
--- /dev/null
+/*
+ * BIRD -- RTRLib Headers mockup
+ *
+ * (c) 2015 CZ.NIC
+ *
+ * Can be freely distributed and used under the terms of the GNU GPL.
+ *
+ *
+ * RTRlib is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU Lesser General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or (at your
+ * option) any later version.
+ *
+ * RTRlib is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+ * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
+ * License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with RTRlib; see the file COPYING.LESSER.
+ *
+ * INET group, Hamburg University of Applied Sciences,
+ * CST group, Freie Universitaet Berlin
+ * Website: http://rpki.realmv6.org/
+ *
+ */
+
+#ifndef _BIRD_RTRLIB_MOCKUP_H_
+#define _BIRD_RTRLIB_MOCKUP_H_
+
+#include <stdbool.h>
+
+/**
+ * @brief A transport socket datastructure.
+ *
+ * @param socket A pointer to a technology specific socket.
+ * @param open_fp Pointer to a function that establishes the socket connection.
+ * @param close_fp Pointer to a function that closes the socket.
+ * @param free_fp Pointer to a function that frees all memory allocated with this socket.
+ * @param send_fp Pointer to a function that sends data through this socket.
+ * @param recv_fp Pointer to a function that receives data from this socket.
+ */
+struct tr_socket {
+ void *socket;
+ void *open_fp; /* voided for mockuping */
+ void *close_fp; /* voided for mockuping */
+ void *free_fp; /* voided for mockuping */
+ void *send_fp; /* voided for mockuping */
+ void *recv_fp; /* voided for mockuping */
+ void *ident_fp; /* voided for mockuping */
+};
+
+/**
+ * @brief States of the RTR socket.
+ */
+enum rtr_socket_state {
+ /** Socket is establishing the transport connection. */
+ RTR_CONNECTING,
+
+ /** Connection is established, socket is waiting for a Serial Notify or expiration of the refresh_interval timer */
+ RTR_ESTABLISHED,
+
+ /** Resetting RTR connection. */
+ RTR_RESET,
+
+ /** Receiving validation records from the RTR server. */
+ RTR_SYNC,
+
+ /** Reconnect without any waiting period */
+ RTR_FAST_RECONNECT,
+
+ /** No validation records are available on the RTR server. */
+ RTR_ERROR_NO_DATA_AVAIL,
+
+ /** Server was unable to answer the last serial or reset query. */
+ RTR_ERROR_NO_INCR_UPDATE_AVAIL,
+
+ /** Fatal protocol error occurred. */
+ RTR_ERROR_FATAL,
+
+ /** Error on the transport socket occurred. */
+ RTR_ERROR_TRANSPORT,
+
+ /** RTR Socket is stopped. */
+ RTR_SHUTDOWN,
+};
+
+/**
+ * @brief A RTR socket.
+ * @param tr_socket Pointer to an initialized tr_socket that will be used to communicate with the RTR server.
+ * @param refresh_interval Time period in seconds. Tells the router how long to wait before next attempting to poll the cache, using a Serial Query or
+ * Reset Query PDU.
+ * @param last_update Timestamp of the last validation record update. Is 0 if the pfx_table doesn't stores any
+ * validation reords from this rtr_socket.
+ * @param expire_interval Time period in seconds. Received records are deleted if the client was unable to refresh data for this time period.
+ * If 0 is specified, the expire_interval is twice the refresh_interval.
+ * @param retry_interval Time period in seconds between a faild quary and the next attempt.
+ * @param state Current state of the socket.
+ * @param session_id session_id of the RTR session.
+ * @param request_session_id True, if the rtr_client have to request a new none from the server.
+ * @param serial_number Last serial number of the obtained validation records.
+ * @param pfx_table pfx_table that stores the validation records obtained from the connected rtr server.
+ * @param connection_state_fp A callback function that is executed when the state of the socket changes.
+ * @param connection_state_fp_param Parameter that is passed to the connection_state_fp callback.
+ */
+struct rtr_socket {
+ struct tr_socket *tr_socket;
+ unsigned int refresh_interval;
+ time_t last_update;
+ unsigned int expire_interval;
+ unsigned int retry_interval;
+ enum rtr_socket_state state;
+ uint32_t session_id;
+ bool request_session_id;
+ uint32_t serial_number;
+ void *pfx_table; /* voided for mockuping */
+ pthread_t thread_id;
+ void *connection_state_fp; /* voided for mockuping */
+ void *connection_state_fp_param;
+ unsigned int version;
+ void *spki_table; /* voided for mockuping */
+};
+
+/**
+ * @brief A tr_tcp_config struct holds configuration for a TCP connection.
+ * @param host Hostname or IP address to connect to.
+ * @param port Port to connect to.
+ * @param bindaddr Hostname or IP address to connect from. NULL for
+ * determination by OS.
+ * to use the source address of the system's default route to the server
+ */
+struct tr_tcp_config {
+ char *host;
+ char *port;
+ char *bindaddr;
+};
+
+/**
+ * @brief Status of a rtr_mgr_group.
+ */
+enum rtr_mgr_status {
+ /** RTR sockets are disconnected */
+ RTR_MGR_CLOSED,
+
+ /** RTR sockets trying to establish a connection. */
+ RTR_MGR_CONNECTING,
+
+ /** All RTR sockets of the group are synchronized with the rtr servers. */
+ RTR_MGR_ESTABLISHED,
+
+ /** Error occured on at least one RTR socket. */
+ RTR_MGR_ERROR,
+};
+
+/**
+ * @brief A set of RTR sockets.
+ * @param sockets Array of rtr_socket pointer. The tr_socket element of the rtr_socket must be associated with an initialized transport socket.
+ * @param sockets_len Number of elements in the sockets array.
+ * @param preference The preference value of this group. Groups with lower preference values are preferred.
+ * @param status Status of the group.
+ */
+struct rtr_mgr_group {
+ struct rtr_socket **sockets;
+ unsigned int sockets_len;
+ uint8_t preference;
+ enum rtr_mgr_status status;
+};
+
+struct rtr_mgr_config {
+ struct rtr_mgr_group *groups;
+ unsigned int len;
+ /* some items deleted */
+};
+
+
+/**
+ * @brief Version of the IP protocol.
+ */
+enum rtr_ip_version {
+ RTRLIB_IPV4,
+ RTRLIB_IPV6
+};
+
+/**
+ * @brief Struct storing an IPv4 address in host byte order.
+ * @param addr The IPv4 address.
+ */
+struct ipv4_addr {
+ uint32_t addr;
+};
+
+/**
+ * @brief Struct holding an IPv6 address in host byte order.
+ * @param addr The IPv6 address.
+ */
+struct ipv6_addr {
+ uint32_t addr[4];
+};
+
+/**
+ * @brief The rtr_ip_addr struct stores a IPv4 or IPv6 address in host byte order.
+ * @param ver Specifies the type of the stored address.
+ * @param u Union holding a ipv4_addr or ipv6_addr.
+ */
+struct rtr_ip_addr {
+ enum rtr_ip_version ver;
+ union {
+ struct ipv4_addr addr4;
+ struct ipv6_addr addr6;
+ } u;
+};
+
+/**
+ * @brief pfx_record.
+ * @param asn Origin AS number.
+ * @param prefix IP prefix.
+ * @param min_len Minimum prefix length.
+ * @param max_len Maximum prefix length.
+ * @param socket_id unique id of the rtr_socket that received this record.
+ */
+struct pfx_record {
+ uint32_t asn;
+ struct rtr_ip_addr prefix;
+ uint8_t min_len;
+ uint8_t max_len;
+ const struct rtr_socket *socket;
+};
+
+#endif /* _BIRD_RTRLIB_MOCKUP_H_ */
objdir=@objdir@
all depend tags install install-docs:
- $(MAKE) -C rtrlib
$(MAKE) -C $(objdir) $@
docs userdocs progdocs:
birdcl: $(exedir)/birdcl
-bird-dep := $(addsuffix /all.o, $(static-dirs)) conf/all.o lib/birdlib.a ../rtrlib/librtr.a
+bird-dep := $(addsuffix /all.o, $(static-dirs)) conf/all.o lib/birdlib.a
$(bird-dep): sysdep/paths.h .dep-stamp subdir
all-dirs:=$(static-dirs) $(dynamic-dirs) $(client-dirs) $(doc-dirs)
clean-dirs:=$(all-dirs) proto sysdep
-CPPFLAGS=-I$(root-rel) -I$(srcdir) -I$(srcdir)/rtrlib @CPPFLAGS@
+CPPFLAGS=-I$(root-rel) -I$(srcdir) @CPPFLAGS@
CFLAGS=$(CPPFLAGS) @CFLAGS@
LDFLAGS=@LDFLAGS@
LIBS=@LIBS@