mirror of
https://github.com/NAStools/zerotierone.git
synced 2024-11-13 17:10:35 -08:00
502 lines
18 KiB
C++
502 lines
18 KiB
C++
/*
|
|
* ZeroTier One - Network Virtualization Everywhere
|
|
* Copyright (C) 2011-2016 ZeroTier, Inc. https://www.zerotier.com/
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include <stdint.h>
|
|
|
|
#include "NetworkConfig.hpp"
|
|
#include "Utils.hpp"
|
|
|
|
namespace ZeroTier {
|
|
|
|
bool NetworkConfig::toDictionary(Dictionary<ZT_NETWORKCONFIG_DICT_CAPACITY> &d,bool includeLegacy) const
|
|
{
|
|
Buffer<ZT_NETWORKCONFIG_DICT_CAPACITY> tmp;
|
|
|
|
d.clear();
|
|
|
|
// Try to put the more human-readable fields first
|
|
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_VERSION,(uint64_t)ZT_NETWORKCONFIG_VERSION)) return false;
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_NETWORK_ID,this->networkId)) return false;
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_TIMESTAMP,this->timestamp)) return false;
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_REVISION,this->revision)) return false;
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_ISSUED_TO,this->issuedTo)) return false;
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_FLAGS,this->flags)) return false;
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_MULTICAST_LIMIT,(uint64_t)this->multicastLimit)) return false;
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_TYPE,(uint64_t)this->type)) return false;
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_NAME,this->name)) return false;
|
|
|
|
#ifdef ZT_SUPPORT_OLD_STYLE_NETCONF
|
|
if (includeLegacy) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_ALLOW_PASSIVE_BRIDGING_OLD,this->allowPassiveBridging())) return false;
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_ENABLE_BROADCAST_OLD,this->enableBroadcast())) return false;
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_PRIVATE_OLD,this->isPrivate())) return false;
|
|
|
|
std::string v4s;
|
|
for(unsigned int i=0;i<staticIpCount;++i) {
|
|
if (this->staticIps[i].ss_family == AF_INET) {
|
|
if (v4s.length() > 0)
|
|
v4s.push_back(',');
|
|
v4s.append(this->staticIps[i].toString());
|
|
}
|
|
}
|
|
if (v4s.length() > 0) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_IPV4_STATIC_OLD,v4s.c_str())) return false;
|
|
}
|
|
std::string v6s;
|
|
for(unsigned int i=0;i<staticIpCount;++i) {
|
|
if (this->staticIps[i].ss_family == AF_INET6) {
|
|
if (v6s.length() > 0)
|
|
v6s.push_back(',');
|
|
v6s.append(this->staticIps[i].toString());
|
|
}
|
|
}
|
|
if (v6s.length() > 0) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_IPV6_STATIC_OLD,v6s.c_str())) return false;
|
|
}
|
|
|
|
std::string ets;
|
|
unsigned int et = 0;
|
|
ZT_VirtualNetworkRuleType lastrt = ZT_NETWORK_RULE_ACTION_ACCEPT;
|
|
for(unsigned int i=0;i<ruleCount;++i) {
|
|
ZT_VirtualNetworkRuleType rt = (ZT_VirtualNetworkRuleType)(rules[i].t & 0x7f);
|
|
if (rt == ZT_NETWORK_RULE_MATCH_ETHERTYPE) {
|
|
et = rules[i].v.etherType;
|
|
} else if (rt == ZT_NETWORK_RULE_ACTION_ACCEPT) {
|
|
if (((int)lastrt < 32)||(lastrt == ZT_NETWORK_RULE_MATCH_ETHERTYPE)) {
|
|
if (ets.length() > 0)
|
|
ets.push_back(',');
|
|
char tmp[16];
|
|
Utils::snprintf(tmp,sizeof(tmp),"%x",et);
|
|
ets.append(tmp);
|
|
}
|
|
et = 0;
|
|
}
|
|
lastrt = rt;
|
|
}
|
|
if (ets.length() > 0) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_ALLOWED_ETHERNET_TYPES_OLD,ets.c_str())) return false;
|
|
}
|
|
|
|
if (this->com) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_CERTIFICATE_OF_MEMBERSHIP_OLD,this->com.toString().c_str())) return false;
|
|
}
|
|
|
|
std::string ab;
|
|
for(unsigned int i=0;i<this->specialistCount;++i) {
|
|
if ((this->specialists[i] & ZT_NETWORKCONFIG_SPECIALIST_TYPE_ACTIVE_BRIDGE) != 0) {
|
|
if (ab.length() > 0)
|
|
ab.push_back(',');
|
|
ab.append(Address(this->specialists[i]).toString().c_str());
|
|
}
|
|
}
|
|
if (ab.length() > 0) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_ACTIVE_BRIDGES_OLD,ab.c_str())) return false;
|
|
}
|
|
|
|
std::vector<Relay> rvec(this->relays());
|
|
std::string rl;
|
|
for(std::vector<Relay>::const_iterator i(rvec.begin());i!=rvec.end();++i) {
|
|
if (rl.length() > 0)
|
|
rl.push_back(',');
|
|
rl.append(i->address.toString());
|
|
if (i->phy4) {
|
|
rl.push_back(';');
|
|
rl.append(i->phy4.toString());
|
|
} else if (i->phy6) {
|
|
rl.push_back(';');
|
|
rl.append(i->phy6.toString());
|
|
}
|
|
}
|
|
if (rl.length() > 0) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_RELAYS_OLD,rl.c_str())) return false;
|
|
}
|
|
}
|
|
#endif // ZT_SUPPORT_OLD_STYLE_NETCONF
|
|
|
|
// Then add binary blobs
|
|
|
|
if (this->com) {
|
|
tmp.clear();
|
|
this->com.serialize(tmp);
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_COM,tmp)) return false;
|
|
}
|
|
|
|
tmp.clear();
|
|
for(unsigned int i=0;i<this->specialistCount;++i) {
|
|
tmp.append((uint64_t)this->specialists[i]);
|
|
}
|
|
if (tmp.size()) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_SPECIALISTS,tmp)) return false;
|
|
}
|
|
|
|
tmp.clear();
|
|
for(unsigned int i=0;i<this->routeCount;++i) {
|
|
reinterpret_cast<const InetAddress *>(&(this->routes[i].target))->serialize(tmp);
|
|
reinterpret_cast<const InetAddress *>(&(this->routes[i].via))->serialize(tmp);
|
|
tmp.append((uint16_t)this->routes[i].flags);
|
|
tmp.append((uint16_t)this->routes[i].metric);
|
|
}
|
|
if (tmp.size()) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_ROUTES,tmp)) return false;
|
|
}
|
|
|
|
tmp.clear();
|
|
for(unsigned int i=0;i<this->staticIpCount;++i) {
|
|
this->staticIps[i].serialize(tmp);
|
|
}
|
|
if (tmp.size()) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_STATIC_IPS,tmp)) return false;
|
|
}
|
|
|
|
tmp.clear();
|
|
for(unsigned int i=0;i<this->pinnedCount;++i) {
|
|
this->pinned[i].zt.appendTo(tmp);
|
|
this->pinned[i].phy.serialize(tmp);
|
|
}
|
|
if (tmp.size()) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_PINNED,tmp)) return false;
|
|
}
|
|
|
|
tmp.clear();
|
|
for(unsigned int i=0;i<this->ruleCount;++i) {
|
|
tmp.append((uint8_t)rules[i].t);
|
|
switch((ZT_VirtualNetworkRuleType)(rules[i].t & 0x7f)) {
|
|
//case ZT_NETWORK_RULE_ACTION_DROP:
|
|
//case ZT_NETWORK_RULE_ACTION_ACCEPT:
|
|
default:
|
|
tmp.append((uint8_t)0);
|
|
break;
|
|
case ZT_NETWORK_RULE_ACTION_TEE:
|
|
case ZT_NETWORK_RULE_ACTION_REDIRECT:
|
|
case ZT_NETWORK_RULE_MATCH_SOURCE_ZEROTIER_ADDRESS:
|
|
case ZT_NETWORK_RULE_MATCH_DEST_ZEROTIER_ADDRESS:
|
|
tmp.append((uint8_t)5);
|
|
Address(rules[i].v.zt).appendTo(tmp);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_VLAN_ID:
|
|
tmp.append((uint8_t)2);
|
|
tmp.append((uint16_t)rules[i].v.vlanId);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_VLAN_PCP:
|
|
tmp.append((uint8_t)1);
|
|
tmp.append((uint8_t)rules[i].v.vlanPcp);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_VLAN_DEI:
|
|
tmp.append((uint8_t)1);
|
|
tmp.append((uint8_t)rules[i].v.vlanDei);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_ETHERTYPE:
|
|
tmp.append((uint8_t)2);
|
|
tmp.append((uint16_t)rules[i].v.etherType);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_MAC_SOURCE:
|
|
case ZT_NETWORK_RULE_MATCH_MAC_DEST:
|
|
tmp.append((uint8_t)6);
|
|
tmp.append(rules[i].v.mac,6);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_IPV4_SOURCE:
|
|
case ZT_NETWORK_RULE_MATCH_IPV4_DEST:
|
|
tmp.append((uint8_t)5);
|
|
tmp.append(&(rules[i].v.ipv4.ip),4);
|
|
tmp.append((uint8_t)rules[i].v.ipv4.mask);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_IPV6_SOURCE:
|
|
case ZT_NETWORK_RULE_MATCH_IPV6_DEST:
|
|
tmp.append((uint8_t)17);
|
|
tmp.append(rules[i].v.ipv6.ip,16);
|
|
tmp.append((uint8_t)rules[i].v.ipv6.mask);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_IP_TOS:
|
|
tmp.append((uint8_t)1);
|
|
tmp.append((uint8_t)rules[i].v.ipTos);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_IP_PROTOCOL:
|
|
tmp.append((uint8_t)1);
|
|
tmp.append((uint8_t)rules[i].v.ipProtocol);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_IP_SOURCE_PORT_RANGE:
|
|
case ZT_NETWORK_RULE_MATCH_IP_DEST_PORT_RANGE:
|
|
tmp.append((uint8_t)4);
|
|
tmp.append((uint16_t)rules[i].v.port[0]);
|
|
tmp.append((uint16_t)rules[i].v.port[1]);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_CHARACTERISTICS:
|
|
tmp.append((uint8_t)8);
|
|
tmp.append((uint64_t)rules[i].v.characteristics);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_FRAME_SIZE_RANGE:
|
|
tmp.append((uint8_t)4);
|
|
tmp.append((uint16_t)rules[i].v.frameSize[0]);
|
|
tmp.append((uint16_t)rules[i].v.frameSize[1]);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_TCP_RELATIVE_SEQUENCE_NUMBER_RANGE:
|
|
tmp.append((uint8_t)8);
|
|
tmp.append((uint32_t)rules[i].v.tcpseq[0]);
|
|
tmp.append((uint32_t)rules[i].v.tcpseq[1]);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_COM_FIELD_GE:
|
|
case ZT_NETWORK_RULE_MATCH_COM_FIELD_LE:
|
|
tmp.append((uint8_t)16);
|
|
tmp.append((uint64_t)rules[i].v.comIV[0]);
|
|
tmp.append((uint64_t)rules[i].v.comIV[1]);
|
|
break;
|
|
}
|
|
}
|
|
if (tmp.size()) {
|
|
if (!d.add(ZT_NETWORKCONFIG_DICT_KEY_RULES,tmp)) return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
bool NetworkConfig::fromDictionary(const Dictionary<ZT_NETWORKCONFIG_DICT_CAPACITY> &d)
|
|
{
|
|
try {
|
|
Buffer<ZT_NETWORKCONFIG_DICT_CAPACITY> tmp;
|
|
char tmp2[ZT_NETWORKCONFIG_DICT_CAPACITY];
|
|
|
|
memset(this,0,sizeof(NetworkConfig));
|
|
|
|
// Fields that are always present, new or old
|
|
this->networkId = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_NETWORK_ID,0);
|
|
if (!this->networkId)
|
|
return false;
|
|
this->timestamp = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_TIMESTAMP,0);
|
|
this->revision = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_REVISION,0);
|
|
this->issuedTo = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_ISSUED_TO,0);
|
|
if (!this->issuedTo)
|
|
return false;
|
|
this->multicastLimit = (unsigned int)d.getUI(ZT_NETWORKCONFIG_DICT_KEY_MULTICAST_LIMIT,0);
|
|
d.get(ZT_NETWORKCONFIG_DICT_KEY_NAME,this->name,sizeof(this->name));
|
|
|
|
if (d.getUI(ZT_NETWORKCONFIG_DICT_KEY_VERSION,0) < 6) {
|
|
#ifdef ZT_SUPPORT_OLD_STYLE_NETCONF
|
|
// Decode legacy fields if version is old
|
|
if (d.getB(ZT_NETWORKCONFIG_DICT_KEY_ALLOW_PASSIVE_BRIDGING_OLD))
|
|
this->flags |= ZT_NETWORKCONFIG_FLAG_ALLOW_PASSIVE_BRIDGING;
|
|
if (d.getB(ZT_NETWORKCONFIG_DICT_KEY_ENABLE_BROADCAST_OLD))
|
|
this->flags |= ZT_NETWORKCONFIG_FLAG_ENABLE_BROADCAST;
|
|
this->flags |= ZT_NETWORKCONFIG_FLAG_ENABLE_IPV6_NDP_EMULATION; // always enable for old-style netconf
|
|
this->type = (d.getB(ZT_NETWORKCONFIG_DICT_KEY_PRIVATE_OLD,true)) ? ZT_NETWORK_TYPE_PRIVATE : ZT_NETWORK_TYPE_PUBLIC;
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_IPV4_STATIC_OLD,tmp2,sizeof(tmp2)) > 0) {
|
|
char *saveptr = (char *)0;
|
|
for(char *f=Utils::stok(tmp2,",",&saveptr);(f);f=Utils::stok((char *)0,",",&saveptr)) {
|
|
if (this->staticIpCount >= ZT_MAX_ZT_ASSIGNED_ADDRESSES) break;
|
|
InetAddress ip(f);
|
|
if (!ip.isNetwork())
|
|
this->staticIps[this->staticIpCount++] = ip;
|
|
}
|
|
}
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_IPV6_STATIC_OLD,tmp2,sizeof(tmp2)) > 0) {
|
|
char *saveptr = (char *)0;
|
|
for(char *f=Utils::stok(tmp2,",",&saveptr);(f);f=Utils::stok((char *)0,",",&saveptr)) {
|
|
if (this->staticIpCount >= ZT_MAX_ZT_ASSIGNED_ADDRESSES) break;
|
|
InetAddress ip(f);
|
|
if (!ip.isNetwork())
|
|
this->staticIps[this->staticIpCount++] = ip;
|
|
}
|
|
}
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_CERTIFICATE_OF_MEMBERSHIP_OLD,tmp2,sizeof(tmp2)) > 0) {
|
|
this->com.fromString(tmp2);
|
|
}
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_ALLOWED_ETHERNET_TYPES_OLD,tmp2,sizeof(tmp2)) > 0) {
|
|
char *saveptr = (char *)0;
|
|
for(char *f=Utils::stok(tmp2,",",&saveptr);(f);f=Utils::stok((char *)0,",",&saveptr)) {
|
|
unsigned int et = Utils::hexStrToUInt(f) & 0xffff;
|
|
if ((this->ruleCount + 2) > ZT_MAX_NETWORK_RULES) break;
|
|
if (et > 0) {
|
|
this->rules[this->ruleCount].t = (uint8_t)ZT_NETWORK_RULE_MATCH_ETHERTYPE;
|
|
this->rules[this->ruleCount].v.etherType = (uint16_t)et;
|
|
++this->ruleCount;
|
|
}
|
|
this->rules[this->ruleCount++].t = (uint8_t)ZT_NETWORK_RULE_ACTION_ACCEPT;
|
|
}
|
|
} else {
|
|
this->rules[0].t = ZT_NETWORK_RULE_ACTION_ACCEPT;
|
|
this->ruleCount = 1;
|
|
}
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_ACTIVE_BRIDGES_OLD,tmp2,sizeof(tmp2)) > 0) {
|
|
char *saveptr = (char *)0;
|
|
for(char *f=Utils::stok(tmp2,",",&saveptr);(f);f=Utils::stok((char *)0,",",&saveptr)) {
|
|
this->addSpecialist(Address(f),ZT_NETWORKCONFIG_SPECIALIST_TYPE_ACTIVE_BRIDGE);
|
|
}
|
|
}
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_RELAYS_OLD,tmp2,sizeof(tmp2)) > 0) {
|
|
char *saveptr = (char *)0;
|
|
for(char *f=Utils::stok(tmp2,",",&saveptr);(f);f=Utils::stok((char *)0,",",&saveptr)) {
|
|
char tmp3[256];
|
|
Utils::scopy(tmp3,sizeof(tmp3),f);
|
|
|
|
InetAddress phy;
|
|
char *semi = tmp3;
|
|
while (*semi) {
|
|
if (*semi == ';') {
|
|
*semi = (char)0;
|
|
++semi;
|
|
phy = InetAddress(semi);
|
|
} else ++semi;
|
|
}
|
|
Address zt(tmp3);
|
|
|
|
this->addSpecialist(zt,ZT_NETWORKCONFIG_SPECIALIST_TYPE_NETWORK_PREFERRED_RELAY);
|
|
if ((phy)&&(this->pinnedCount < ZT_MAX_NETWORK_PINNED)) {
|
|
this->pinned[this->pinnedCount].zt = zt;
|
|
this->pinned[this->pinnedCount].phy = phy;
|
|
++this->pinnedCount;
|
|
}
|
|
}
|
|
}
|
|
#else
|
|
return false;
|
|
#endif // ZT_SUPPORT_OLD_STYLE_NETCONF
|
|
} else {
|
|
// Otherwise we can use the new fields
|
|
this->flags = d.getUI(ZT_NETWORKCONFIG_DICT_KEY_FLAGS,0);
|
|
this->type = (ZT_VirtualNetworkType)d.getUI(ZT_NETWORKCONFIG_DICT_KEY_TYPE,(uint64_t)ZT_NETWORK_TYPE_PRIVATE);
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_COM,tmp)) {
|
|
this->com.deserialize(tmp,0);
|
|
}
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_SPECIALISTS,tmp)) {
|
|
unsigned int p = 0;
|
|
while (((p + 8) <= tmp.size())&&(specialistCount < ZT_MAX_NETWORK_SPECIALISTS)) {
|
|
this->specialists[this->specialistCount++] = tmp.at<uint64_t>(p);
|
|
p += 8;
|
|
}
|
|
}
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_ROUTES,tmp)) {
|
|
unsigned int p = 0;
|
|
while ((p < tmp.size())&&(routeCount < ZT_MAX_NETWORK_ROUTES)) {
|
|
p += reinterpret_cast<InetAddress *>(&(this->routes[this->routeCount].target))->deserialize(tmp,p);
|
|
p += reinterpret_cast<InetAddress *>(&(this->routes[this->routeCount].via))->deserialize(tmp,p);
|
|
this->routes[this->routeCount].flags = tmp.at<uint16_t>(p); p += 2;
|
|
this->routes[this->routeCount].metric = tmp.at<uint16_t>(p); p += 2;
|
|
++this->routeCount;
|
|
}
|
|
}
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_STATIC_IPS,tmp)) {
|
|
unsigned int p = 0;
|
|
while ((p < tmp.size())&&(staticIpCount < ZT_MAX_ZT_ASSIGNED_ADDRESSES)) {
|
|
p += this->staticIps[this->staticIpCount++].deserialize(tmp,p);
|
|
}
|
|
}
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_PINNED,tmp)) {
|
|
unsigned int p = 0;
|
|
while ((p < tmp.size())&&(pinnedCount < ZT_MAX_NETWORK_PINNED)) {
|
|
this->pinned[this->pinnedCount].zt.setTo(tmp.field(p,ZT_ADDRESS_LENGTH),ZT_ADDRESS_LENGTH); p += ZT_ADDRESS_LENGTH;
|
|
p += this->pinned[this->pinnedCount].phy.deserialize(tmp,p);
|
|
++this->pinnedCount;
|
|
}
|
|
}
|
|
|
|
if (d.get(ZT_NETWORKCONFIG_DICT_KEY_RULES,tmp)) {
|
|
unsigned int p = 0;
|
|
while ((p < tmp.size())&&(ruleCount < ZT_MAX_NETWORK_RULES)) {
|
|
rules[ruleCount].t = (uint8_t)tmp[p++];
|
|
unsigned int fieldLen = (unsigned int)tmp[p++];
|
|
switch((ZT_VirtualNetworkRuleType)(rules[ruleCount].t & 0x7f)) {
|
|
default:
|
|
break;
|
|
case ZT_NETWORK_RULE_ACTION_TEE:
|
|
case ZT_NETWORK_RULE_ACTION_REDIRECT:
|
|
case ZT_NETWORK_RULE_MATCH_SOURCE_ZEROTIER_ADDRESS:
|
|
case ZT_NETWORK_RULE_MATCH_DEST_ZEROTIER_ADDRESS:
|
|
rules[ruleCount].v.zt = Address(tmp.field(p,ZT_ADDRESS_LENGTH),ZT_ADDRESS_LENGTH).toInt();
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_VLAN_ID:
|
|
rules[ruleCount].v.vlanId = tmp.at<uint16_t>(p);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_VLAN_PCP:
|
|
rules[ruleCount].v.vlanPcp = (uint8_t)tmp[p];
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_VLAN_DEI:
|
|
rules[ruleCount].v.vlanDei = (uint8_t)tmp[p];
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_ETHERTYPE:
|
|
rules[ruleCount].v.etherType = tmp.at<uint16_t>(p);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_MAC_SOURCE:
|
|
case ZT_NETWORK_RULE_MATCH_MAC_DEST:
|
|
memcpy(rules[ruleCount].v.mac,tmp.field(p,6),6);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_IPV4_SOURCE:
|
|
case ZT_NETWORK_RULE_MATCH_IPV4_DEST:
|
|
memcpy(&(rules[ruleCount].v.ipv4.ip),tmp.field(p,4),4);
|
|
rules[ruleCount].v.ipv4.mask = (uint8_t)tmp[p + 4];
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_IPV6_SOURCE:
|
|
case ZT_NETWORK_RULE_MATCH_IPV6_DEST:
|
|
memcpy(rules[ruleCount].v.ipv6.ip,tmp.field(p,16),16);
|
|
rules[ruleCount].v.ipv6.mask = (uint8_t)tmp[p + 16];
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_IP_TOS:
|
|
rules[ruleCount].v.ipTos = (uint8_t)tmp[p];
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_IP_PROTOCOL:
|
|
rules[ruleCount].v.ipProtocol = (uint8_t)tmp[p];
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_IP_SOURCE_PORT_RANGE:
|
|
case ZT_NETWORK_RULE_MATCH_IP_DEST_PORT_RANGE:
|
|
rules[ruleCount].v.port[0] = tmp.at<uint16_t>(p);
|
|
rules[ruleCount].v.port[1] = tmp.at<uint16_t>(p + 2);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_CHARACTERISTICS:
|
|
rules[ruleCount].v.characteristics = tmp.at<uint64_t>(p);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_FRAME_SIZE_RANGE:
|
|
rules[ruleCount].v.frameSize[0] = tmp.at<uint16_t>(p);
|
|
rules[ruleCount].v.frameSize[0] = tmp.at<uint16_t>(p + 2);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_TCP_RELATIVE_SEQUENCE_NUMBER_RANGE:
|
|
rules[ruleCount].v.tcpseq[0] = tmp.at<uint32_t>(p);
|
|
rules[ruleCount].v.tcpseq[1] = tmp.at<uint32_t>(p + 4);
|
|
break;
|
|
case ZT_NETWORK_RULE_MATCH_COM_FIELD_GE:
|
|
case ZT_NETWORK_RULE_MATCH_COM_FIELD_LE:
|
|
rules[ruleCount].v.comIV[0] = tmp.at<uint64_t>(p);
|
|
rules[ruleCount].v.comIV[1] = tmp.at<uint64_t>(p + 8);
|
|
break;
|
|
}
|
|
p += fieldLen;
|
|
++ruleCount;
|
|
}
|
|
}
|
|
}
|
|
|
|
//printf("~~~\n%s\n~~~\n",d.data());
|
|
//dump();
|
|
//printf("~~~\n");
|
|
|
|
return true;
|
|
} catch ( ... ) {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
} // namespace ZeroTier
|