tun_test.go 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852
  1. /*
  2. * Copyright (c) 2017, Psiphon Inc.
  3. * All rights reserved.
  4. *
  5. * This program is free software: you can redistribute it and/or modify
  6. * it under the terms of the GNU General Public License as published by
  7. * the Free Software Foundation, either version 3 of the License, or
  8. * (at your option) any later version.
  9. *
  10. * This program is distributed in the hope that it will be useful,
  11. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13. * GNU General Public License for more details.
  14. *
  15. * You should have received a copy of the GNU General Public License
  16. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  17. *
  18. */
  19. package tun
  20. import (
  21. "bytes"
  22. "errors"
  23. "fmt"
  24. "io"
  25. "math/rand"
  26. "net"
  27. "os"
  28. "strconv"
  29. "sync"
  30. "sync/atomic"
  31. "syscall"
  32. "testing"
  33. "time"
  34. "github.com/Psiphon-Labs/psiphon-tunnel-core/psiphon/common"
  35. "github.com/Psiphon-Labs/psiphon-tunnel-core/psiphon/common/prng"
  36. "github.com/Psiphon-Labs/psiphon-tunnel-core/psiphon/common/stacktrace"
  37. "github.com/miekg/dns"
  38. )
  39. const (
  40. UNIX_DOMAIN_SOCKET_NAME = "/tmp/tun_test.sock"
  41. SESSION_ID_LENGTH = 16
  42. TCP_PORT = 8000
  43. TCP_RELAY_CHUNK_SIZE = int64(65536)
  44. TCP_RELAY_TOTAL_SIZE = int64(1073741824)
  45. CONCURRENT_CLIENT_COUNT = 5
  46. PACKET_METRICS_TIMEOUT = 10 * time.Second
  47. )
  48. func TestTunneledTCPIPv4(t *testing.T) {
  49. testTunneledTCP(t, false)
  50. }
  51. func TestTunneledTCPIPv6(t *testing.T) {
  52. testTunneledTCP(t, true)
  53. }
  54. func TestSessionExpiry(t *testing.T) {
  55. t.Skip("TODO: test short session TTLs actually persist/expire as expected")
  56. }
  57. func TestTrafficRules(t *testing.T) {
  58. t.Skip("TODO: negative tests for checkAllowedTCPPortFunc, checkAllowedUDPPortFunc")
  59. }
  60. func TestResetRouting(t *testing.T) {
  61. t.Skip("TODO: test conntrack delete effectiveness")
  62. }
  63. func testTunneledTCP(t *testing.T, useIPv6 bool) {
  64. // This test harness does the following:
  65. //
  66. // - starts a TCP server; this server echoes the data it receives
  67. // - starts a packet tunnel server that uses a unix domain socket for client channels
  68. // - starts CONCURRENT_CLIENT_COUNT concurrent clients
  69. // - each client runs a packet tunnel client connected to the server unix domain socket
  70. // - one client first performs a tunneled DNS query against an external DNS server
  71. // - clients establish a TCP client connection to the TCP server through the packet tunnel
  72. // - each TCP client transfers TCP_RELAY_TOTAL_SIZE bytes to the TCP server
  73. // - the test checks that all data echoes back correctly and that the server packet
  74. // metrics reflects the expected amount of data transferred through the tunnel
  75. // - the test also checks that the flow activity updater mechanism correctly reports
  76. // the total bytes transferred
  77. // - this test runs in either IPv4 or IPv6 mode
  78. // - the test host's public IP address is used as the TCP server IP address; it is
  79. // expected that the server tun device will NAT to the public interface; clients
  80. // use SO_BINDTODEVICE/IP_BOUND_IF to force the TCP client connections through the
  81. // tunnel
  82. //
  83. // Note: this test can modify host network configuration; in addition to tun device
  84. // and routing config, see the changes made in fixBindToDevice.
  85. if TCP_RELAY_TOTAL_SIZE%TCP_RELAY_CHUNK_SIZE != 0 {
  86. t.Fatalf("startTestTCPServer failed: invalid relay size")
  87. }
  88. MTU := DEFAULT_MTU
  89. testTCPServer, err := startTestTCPServer(useIPv6)
  90. if err != nil {
  91. if err == errNoIPAddress {
  92. t.Skipf("test unsupported: %s", errNoIPAddress)
  93. }
  94. t.Fatalf("startTestTCPServer failed: %s", err)
  95. }
  96. var flowCounter bytesTransferredCounter
  97. flowActivityUpdaterMaker := func(_ string, IPAddress net.IP) []FlowActivityUpdater {
  98. if IPAddress.String() != testTCPServer.getListenerIPAddress() {
  99. t.Fatalf("unexpected flow IP address")
  100. }
  101. return []FlowActivityUpdater{&flowCounter}
  102. }
  103. var metricsCounter bytesTransferredCounter
  104. metricsUpdater := func(TCPApplicationBytesDown, TCPApplicationBytesUp, _, _ int64) {
  105. metricsCounter.UpdateProgress(
  106. TCPApplicationBytesDown, TCPApplicationBytesUp, 0)
  107. }
  108. testServer, err := startTestServer(useIPv6, MTU, flowActivityUpdaterMaker, metricsUpdater)
  109. if err != nil {
  110. t.Fatalf("startTestServer failed: %s", err)
  111. }
  112. results := make(chan error, CONCURRENT_CLIENT_COUNT)
  113. for i := 0; i < CONCURRENT_CLIENT_COUNT; i++ {
  114. go func(clientNum int) {
  115. testClient, err := startTestClient(
  116. useIPv6, MTU, []string{testTCPServer.getListenerIPAddress()})
  117. if err != nil {
  118. results <- fmt.Errorf("startTestClient failed: %s", err)
  119. return
  120. }
  121. // Test one tunneled DNS query.
  122. if clientNum == 0 {
  123. err = testDNSClient(
  124. useIPv6,
  125. testClient.tunClient.device.Name())
  126. if err != nil {
  127. results <- fmt.Errorf("testDNSClient failed: %s", err)
  128. return
  129. }
  130. }
  131. // The TCP client will bind to the packet tunnel client tun
  132. // device and connect to the TCP server. With the bind to
  133. // device, TCP packets will flow through the packet tunnel
  134. // client to the packet tunnel server, through the packet tunnel
  135. // server's tun device, NATed to the server's public interface,
  136. // and finally reaching the TCP server. All this happens on
  137. // the single host running the test.
  138. testTCPClient, err := startTestTCPClient(
  139. testClient.tunClient.device.Name(),
  140. testTCPServer.getListenerIPAddress())
  141. if err != nil {
  142. results <- fmt.Errorf("startTestTCPClient failed: %s", err)
  143. return
  144. }
  145. // Send TCP_RELAY_TOTAL_SIZE random bytes to the TCP server, and
  146. // check that it echoes back the same bytes.
  147. sendChunk, receiveChunk := make([]byte, TCP_RELAY_CHUNK_SIZE), make([]byte, TCP_RELAY_CHUNK_SIZE)
  148. for i := int64(0); i < TCP_RELAY_TOTAL_SIZE; i += TCP_RELAY_CHUNK_SIZE {
  149. _, err := rand.Read(sendChunk)
  150. if err != nil {
  151. results <- fmt.Errorf("rand.Read failed: %s", err)
  152. return
  153. }
  154. _, err = testTCPClient.Write(sendChunk)
  155. if err != nil {
  156. results <- fmt.Errorf("mockTCPClient.Write failed: %s", err)
  157. return
  158. }
  159. _, err = io.ReadFull(testTCPClient, receiveChunk)
  160. if err != nil {
  161. results <- fmt.Errorf("io.ReadFull failed: %s", err)
  162. return
  163. }
  164. if !bytes.Equal(sendChunk, receiveChunk) {
  165. results <- fmt.Errorf("bytes.Equal failed")
  166. return
  167. }
  168. }
  169. testTCPClient.stop()
  170. testClient.stop()
  171. // Check metrics to ensure traffic was tunneled and metrics reported
  172. // Note: this code does not ensure that the "last" packet metrics was
  173. // for this very client; but all packet metrics should be the same.
  174. packetMetricsFields := testServer.logger.getLastPacketMetrics()
  175. if packetMetricsFields == nil {
  176. results <- fmt.Errorf("testServer.logger.getLastPacketMetrics failed")
  177. return
  178. }
  179. expectedFields := []struct {
  180. nameSuffix string
  181. minimumValue int64
  182. }{
  183. {"packets_up", TCP_RELAY_TOTAL_SIZE / int64(MTU)},
  184. {"packets_down", TCP_RELAY_TOTAL_SIZE / int64(MTU)},
  185. {"bytes_up", TCP_RELAY_TOTAL_SIZE},
  186. {"bytes_down", TCP_RELAY_TOTAL_SIZE},
  187. {"application_bytes_up", TCP_RELAY_TOTAL_SIZE},
  188. {"application_bytes_down", TCP_RELAY_TOTAL_SIZE},
  189. }
  190. for _, expectedField := range expectedFields {
  191. var name string
  192. if useIPv6 {
  193. name = "tcp_ipv6_" + expectedField.nameSuffix
  194. } else {
  195. name = "tcp_ipv4_" + expectedField.nameSuffix
  196. }
  197. field, ok := packetMetricsFields[name]
  198. if !ok {
  199. results <- fmt.Errorf("missing expected metric field: %s", name)
  200. return
  201. }
  202. value, ok := field.(int64)
  203. if !ok {
  204. results <- fmt.Errorf("unexpected metric field type: %s", name)
  205. return
  206. }
  207. if value < expectedField.minimumValue {
  208. results <- fmt.Errorf("unexpected metric field value: %s: %d", name, value)
  209. return
  210. }
  211. }
  212. results <- nil
  213. }(i)
  214. }
  215. for i := 0; i < CONCURRENT_CLIENT_COUNT; i++ {
  216. result := <-results
  217. if result != nil {
  218. t.Fatalf(result.Error())
  219. }
  220. }
  221. // Note: reported bytes transferred can exceed expected bytes
  222. // transferred due to retransmission of packets.
  223. expectedBytesTransferred := CONCURRENT_CLIENT_COUNT * TCP_RELAY_TOTAL_SIZE
  224. downstreamBytesTransferred, upstreamBytesTransferred, _ := flowCounter.Get()
  225. if downstreamBytesTransferred < expectedBytesTransferred {
  226. t.Fatalf("unexpected flow downstreamBytesTransferred: %d; expected at least %d",
  227. downstreamBytesTransferred, expectedBytesTransferred)
  228. }
  229. if upstreamBytesTransferred < expectedBytesTransferred {
  230. t.Fatalf("unexpected flow upstreamBytesTransferred: %d; expected at least %d",
  231. upstreamBytesTransferred, expectedBytesTransferred)
  232. }
  233. downstreamBytesTransferred, upstreamBytesTransferred, _ = metricsCounter.Get()
  234. if downstreamBytesTransferred < expectedBytesTransferred {
  235. t.Fatalf("unexpected metrics downstreamBytesTransferred: %d; expected at least %d",
  236. downstreamBytesTransferred, expectedBytesTransferred)
  237. }
  238. if upstreamBytesTransferred < expectedBytesTransferred {
  239. t.Fatalf("unexpected metrics upstreamBytesTransferred: %d; expected at least %d",
  240. upstreamBytesTransferred, expectedBytesTransferred)
  241. }
  242. testServer.stop()
  243. testTCPServer.stop()
  244. }
  245. type bytesTransferredCounter struct {
  246. // Note: 64-bit ints used with atomic operations are placed
  247. // at the start of struct to ensure 64-bit alignment.
  248. // (https://golang.org/pkg/sync/atomic/#pkg-note-BUG)
  249. downstreamBytes int64
  250. upstreamBytes int64
  251. durationNanoseconds int64
  252. }
  253. func (counter *bytesTransferredCounter) UpdateProgress(
  254. downstreamBytes, upstreamBytes int64, durationNanoseconds int64) {
  255. atomic.AddInt64(&counter.downstreamBytes, downstreamBytes)
  256. atomic.AddInt64(&counter.upstreamBytes, upstreamBytes)
  257. atomic.AddInt64(&counter.durationNanoseconds, durationNanoseconds)
  258. }
  259. func (counter *bytesTransferredCounter) Get() (int64, int64, int64) {
  260. return atomic.LoadInt64(&counter.downstreamBytes),
  261. atomic.LoadInt64(&counter.upstreamBytes),
  262. atomic.LoadInt64(&counter.durationNanoseconds)
  263. }
  264. type testServer struct {
  265. logger *testLogger
  266. updaterMaker FlowActivityUpdaterMaker
  267. metricsUpdater MetricsUpdater
  268. tunServer *Server
  269. unixListener net.Listener
  270. clientConns *common.Conns
  271. workers *sync.WaitGroup
  272. }
  273. func startTestServer(
  274. useIPv6 bool,
  275. MTU int,
  276. updaterMaker FlowActivityUpdaterMaker,
  277. metricsUpdater MetricsUpdater) (*testServer, error) {
  278. logger := newTestLogger(true)
  279. getDNSResolverIPv4Addresses := func() []net.IP {
  280. return []net.IP{net.ParseIP("8.8.8.8")}
  281. }
  282. getDNSResolverIPv6Addresses := func() []net.IP {
  283. return []net.IP{net.ParseIP("2001:4860:4860::8888")}
  284. }
  285. config := &ServerConfig{
  286. Logger: logger,
  287. SudoNetworkConfigCommands: os.Getenv("TUN_TEST_SUDO") != "",
  288. AllowNoIPv6NetworkConfiguration: !useIPv6,
  289. GetDNSResolverIPv4Addresses: getDNSResolverIPv4Addresses,
  290. GetDNSResolverIPv6Addresses: getDNSResolverIPv6Addresses,
  291. MTU: MTU,
  292. AllowBogons: true,
  293. }
  294. tunServer, err := NewServer(config)
  295. if err != nil {
  296. return nil, fmt.Errorf("startTestServer(): NewServer failed: %s", err)
  297. }
  298. tunServer.Start()
  299. _ = syscall.Unlink(UNIX_DOMAIN_SOCKET_NAME)
  300. unixListener, err := net.Listen("unix", UNIX_DOMAIN_SOCKET_NAME)
  301. if err != nil {
  302. return nil, fmt.Errorf("startTestServer(): net.Listen failed: %s", err)
  303. }
  304. server := &testServer{
  305. logger: logger,
  306. updaterMaker: updaterMaker,
  307. metricsUpdater: metricsUpdater,
  308. tunServer: tunServer,
  309. unixListener: unixListener,
  310. clientConns: common.NewConns(),
  311. workers: new(sync.WaitGroup),
  312. }
  313. server.workers.Add(1)
  314. go server.run()
  315. return server, nil
  316. }
  317. func (server *testServer) run() {
  318. defer server.workers.Done()
  319. for {
  320. clientConn, err := server.unixListener.Accept()
  321. if err != nil {
  322. fmt.Printf("testServer.run(): unixListener.Accept failed: %s\n", err)
  323. return
  324. }
  325. signalConn := newSignalConn(clientConn)
  326. if !server.clientConns.Add(signalConn) {
  327. return
  328. }
  329. server.workers.Add(1)
  330. go func() {
  331. defer server.workers.Done()
  332. defer signalConn.Close()
  333. sessionID := prng.HexString(SESSION_ID_LENGTH)
  334. checkAllowedPortFunc := func(net.IP, int) bool { return true }
  335. checkAllowedDomainFunc := func(string) bool { return true }
  336. server.tunServer.ClientConnected(
  337. sessionID,
  338. signalConn,
  339. checkAllowedPortFunc,
  340. checkAllowedPortFunc,
  341. checkAllowedDomainFunc,
  342. server.updaterMaker,
  343. server.metricsUpdater)
  344. signalConn.Wait()
  345. server.tunServer.ClientDisconnected(
  346. sessionID)
  347. }()
  348. }
  349. }
  350. func (server *testServer) stop() {
  351. server.clientConns.CloseAll()
  352. server.unixListener.Close()
  353. server.workers.Wait()
  354. server.tunServer.Stop()
  355. }
  356. type signalConn struct {
  357. net.Conn
  358. ioErrorSignal chan struct{}
  359. }
  360. func newSignalConn(baseConn net.Conn) *signalConn {
  361. return &signalConn{
  362. Conn: baseConn,
  363. ioErrorSignal: make(chan struct{}, 1),
  364. }
  365. }
  366. func (conn *signalConn) Read(p []byte) (n int, err error) {
  367. n, err = conn.Conn.Read(p)
  368. if err != nil {
  369. _ = conn.Conn.Close()
  370. select {
  371. case conn.ioErrorSignal <- struct{}{}:
  372. default:
  373. }
  374. }
  375. return
  376. }
  377. func (conn *signalConn) Write(p []byte) (n int, err error) {
  378. n, err = conn.Conn.Write(p)
  379. if err != nil {
  380. _ = conn.Conn.Close()
  381. select {
  382. case conn.ioErrorSignal <- struct{}{}:
  383. default:
  384. }
  385. }
  386. return
  387. }
  388. func (conn *signalConn) Wait() {
  389. <-conn.ioErrorSignal
  390. }
  391. type testClient struct {
  392. logger *testLogger
  393. unixConn net.Conn
  394. tunClient *Client
  395. }
  396. func startTestClient(
  397. useIPv6 bool,
  398. MTU int,
  399. routeDestinations []string) (*testClient, error) {
  400. unixConn, err := net.Dial("unix", UNIX_DOMAIN_SOCKET_NAME)
  401. if err != nil {
  402. return nil, fmt.Errorf("startTestClient(): net.Dial failed: %s", err)
  403. }
  404. logger := newTestLogger(false)
  405. // Assumes IP addresses are available on test host
  406. // TODO: assign unique IP to each testClient?
  407. config := &ClientConfig{
  408. Logger: logger,
  409. SudoNetworkConfigCommands: os.Getenv("TUN_TEST_SUDO") != "",
  410. AllowNoIPv6NetworkConfiguration: !useIPv6,
  411. IPv4AddressCIDR: "172.16.0.1/24",
  412. IPv6AddressCIDR: "fd26:b6a6:4454:310a:0000:0000:0000:0001/64",
  413. RouteDestinations: routeDestinations,
  414. Transport: unixConn,
  415. MTU: MTU,
  416. }
  417. tunClient, err := NewClient(config)
  418. if err != nil {
  419. return nil, fmt.Errorf("startTestClient(): NewClient failed: %s", err)
  420. }
  421. // Configure kernel to fix issue described in fixBindToDevice
  422. err = fixBindToDevice(logger, config.SudoNetworkConfigCommands, tunClient.device.Name())
  423. if err != nil {
  424. return nil, fmt.Errorf("startTestClient(): fixBindToDevice failed: %s", err)
  425. }
  426. tunClient.Start()
  427. return &testClient{
  428. logger: logger,
  429. unixConn: unixConn,
  430. tunClient: tunClient,
  431. }, nil
  432. }
  433. func (client *testClient) stop() {
  434. client.unixConn.Close()
  435. client.tunClient.Stop()
  436. }
  437. type testTCPServer struct {
  438. listenerIPAddress string
  439. tcpListener net.Listener
  440. clientConns *common.Conns
  441. workers *sync.WaitGroup
  442. }
  443. var errNoIPAddress = errors.New("no IP address")
  444. func startTestTCPServer(useIPv6 bool) (*testTCPServer, error) {
  445. interfaceName := DEFAULT_PUBLIC_INTERFACE_NAME
  446. hostIPaddress := ""
  447. IPv4Address, IPv6Address, err := common.GetInterfaceIPAddresses(interfaceName)
  448. if err != nil {
  449. return nil, fmt.Errorf("startTestTCPServer(): GetInterfaceIPAddresses failed: %s", err)
  450. }
  451. if useIPv6 {
  452. // Cannot route to link local address
  453. if IPv6Address == nil || IPv6Address.IsLinkLocalUnicast() {
  454. return nil, errNoIPAddress
  455. }
  456. hostIPaddress = IPv6Address.String()
  457. } else {
  458. if IPv4Address == nil || IPv4Address.IsLinkLocalUnicast() {
  459. return nil, errNoIPAddress
  460. }
  461. hostIPaddress = IPv4Address.String()
  462. }
  463. tcpListener, err := net.Listen("tcp", net.JoinHostPort(hostIPaddress, strconv.Itoa(TCP_PORT)))
  464. if err != nil {
  465. return nil, fmt.Errorf("startTestTCPServer(): net.Listen failed: %s", err)
  466. }
  467. server := &testTCPServer{
  468. listenerIPAddress: hostIPaddress,
  469. tcpListener: tcpListener,
  470. clientConns: common.NewConns(),
  471. workers: new(sync.WaitGroup),
  472. }
  473. server.workers.Add(1)
  474. go server.run()
  475. return server, nil
  476. }
  477. func (server *testTCPServer) getListenerIPAddress() string {
  478. return server.listenerIPAddress
  479. }
  480. func (server *testTCPServer) run() {
  481. defer server.workers.Done()
  482. for {
  483. clientConn, err := server.tcpListener.Accept()
  484. if err != nil {
  485. fmt.Printf("testTCPServer.run(): tcpListener.Accept failed: %s\n", err)
  486. return
  487. }
  488. if !server.clientConns.Add(clientConn) {
  489. return
  490. }
  491. server.workers.Add(1)
  492. go func() {
  493. defer server.workers.Done()
  494. defer clientConn.Close()
  495. buffer := make([]byte, TCP_RELAY_CHUNK_SIZE)
  496. for {
  497. _, err := io.ReadFull(clientConn, buffer)
  498. if err != nil {
  499. fmt.Printf("testTCPServer.run(): io.ReadFull failed: %s\n", err)
  500. return
  501. }
  502. _, err = clientConn.Write(buffer)
  503. if err != nil {
  504. fmt.Printf("testTCPServer.run(): clientConn.Write failed: %s\n", err)
  505. return
  506. }
  507. }
  508. }()
  509. }
  510. }
  511. func (server *testTCPServer) stop() {
  512. server.clientConns.CloseAll()
  513. server.tcpListener.Close()
  514. server.workers.Wait()
  515. }
  516. type testTCPClient struct {
  517. conn net.Conn
  518. }
  519. func startTestTCPClient(
  520. tunDeviceName, serverIPAddress string) (*testTCPClient, error) {
  521. // This is a simplified version of the low-level TCP dial
  522. // code in psiphon/TCPConn, which supports BindToDevice.
  523. // It does not resolve domain names and does not have an
  524. // explicit timeout.
  525. var ipv4 [4]byte
  526. var ipv6 [16]byte
  527. var domain int
  528. var sockAddr syscall.Sockaddr
  529. ipAddr := net.ParseIP(serverIPAddress)
  530. if ipAddr == nil {
  531. return nil, fmt.Errorf("net.ParseIP failed")
  532. }
  533. if ipAddr.To4() != nil {
  534. copy(ipv4[:], ipAddr.To4())
  535. domain = syscall.AF_INET
  536. sockAddr = &syscall.SockaddrInet4{Addr: ipv4, Port: TCP_PORT}
  537. } else {
  538. copy(ipv6[:], ipAddr.To16())
  539. domain = syscall.AF_INET6
  540. sockAddr = &syscall.SockaddrInet6{Addr: ipv6, Port: TCP_PORT}
  541. }
  542. socketFd, err := syscall.Socket(domain, syscall.SOCK_STREAM, 0)
  543. if err != nil {
  544. return nil, fmt.Errorf("syscall.Socket failed: %s", err)
  545. }
  546. err = BindToDevice(socketFd, tunDeviceName)
  547. if err != nil {
  548. syscall.Close(socketFd)
  549. return nil, fmt.Errorf("BindToDevice failed: %s", err)
  550. }
  551. err = syscall.Connect(socketFd, sockAddr)
  552. if err != nil {
  553. syscall.Close(socketFd)
  554. return nil, fmt.Errorf("syscall.Connect failed: %s", err)
  555. }
  556. file := os.NewFile(uintptr(socketFd), "")
  557. conn, err := net.FileConn(file)
  558. file.Close()
  559. if err != nil {
  560. return nil, fmt.Errorf("net.FileConn failed: %s", err)
  561. }
  562. return &testTCPClient{
  563. conn: conn,
  564. }, nil
  565. }
  566. func (client *testTCPClient) Read(p []byte) (n int, err error) {
  567. n, err = client.conn.Read(p)
  568. return
  569. }
  570. func (client *testTCPClient) Write(p []byte) (n int, err error) {
  571. n, err = client.conn.Write(p)
  572. return
  573. }
  574. func (client *testTCPClient) stop() {
  575. client.conn.Close()
  576. }
  577. func testDNSClient(useIPv6 bool, tunDeviceName string) error {
  578. var ipv4 [4]byte
  579. var ipv6 [16]byte
  580. var domain int
  581. var sockAddr syscall.Sockaddr
  582. if !useIPv6 {
  583. copy(ipv4[:], transparentDNSResolverIPv4Address)
  584. domain = syscall.AF_INET
  585. sockAddr = &syscall.SockaddrInet4{Addr: ipv4, Port: portNumberDNS}
  586. } else {
  587. copy(ipv6[:], transparentDNSResolverIPv6Address)
  588. domain = syscall.AF_INET6
  589. sockAddr = &syscall.SockaddrInet6{Addr: ipv6, Port: portNumberDNS}
  590. }
  591. socketFd, err := syscall.Socket(domain, syscall.SOCK_DGRAM, 0)
  592. if err != nil {
  593. return err
  594. }
  595. defer syscall.Close(socketFd)
  596. err = BindToDevice(socketFd, tunDeviceName)
  597. if err != nil {
  598. return err
  599. }
  600. err = syscall.Connect(socketFd, sockAddr)
  601. if err != nil {
  602. return err
  603. }
  604. file := os.NewFile(uintptr(socketFd), "")
  605. conn, err := net.FileConn(file)
  606. file.Close()
  607. if err != nil {
  608. return err
  609. }
  610. defer conn.Close()
  611. dnsConn := &dns.Conn{Conn: conn}
  612. defer dnsConn.Close()
  613. query := new(dns.Msg)
  614. query.SetQuestion(dns.Fqdn("www.example.org"), dns.TypeA)
  615. query.RecursionDesired = true
  616. dnsConn.WriteMsg(query)
  617. _, err = dnsConn.ReadMsg()
  618. if err != nil {
  619. return err
  620. }
  621. return nil
  622. }
  623. type testLogger struct {
  624. packetMetrics chan common.LogFields
  625. }
  626. func newTestLogger(wantLastPacketMetrics bool) *testLogger {
  627. var packetMetrics chan common.LogFields
  628. if wantLastPacketMetrics {
  629. packetMetrics = make(chan common.LogFields, CONCURRENT_CLIENT_COUNT)
  630. }
  631. return &testLogger{
  632. packetMetrics: packetMetrics,
  633. }
  634. }
  635. func (logger *testLogger) WithTrace() common.LogTrace {
  636. return &testLoggerTrace{trace: stacktrace.GetParentFunctionName()}
  637. }
  638. func (logger *testLogger) WithTraceFields(fields common.LogFields) common.LogTrace {
  639. return &testLoggerTrace{
  640. trace: stacktrace.GetParentFunctionName(),
  641. fields: fields,
  642. }
  643. }
  644. func (logger *testLogger) LogMetric(metric string, fields common.LogFields) {
  645. fmt.Printf("METRIC: %s: %+v\n", metric, fields)
  646. if metric == "server_packet_metrics" && logger.packetMetrics != nil {
  647. select {
  648. case logger.packetMetrics <- fields:
  649. default:
  650. }
  651. }
  652. }
  653. func (logger *testLogger) getLastPacketMetrics() common.LogFields {
  654. if logger.packetMetrics == nil {
  655. return nil
  656. }
  657. // Implicitly asserts that packet metrics will be emitted
  658. // within PACKET_METRICS_TIMEOUT; if not, the test will fail.
  659. select {
  660. case fields := <-logger.packetMetrics:
  661. return fields
  662. case <-time.After(PACKET_METRICS_TIMEOUT):
  663. return nil
  664. }
  665. }
  666. type testLoggerTrace struct {
  667. trace string
  668. fields common.LogFields
  669. }
  670. func (logger *testLoggerTrace) log(priority, message string) {
  671. now := time.Now().UTC().Format(time.RFC3339)
  672. if len(logger.fields) == 0 {
  673. fmt.Printf(
  674. "[%s] %s: %s: %s\n",
  675. now, priority, logger.trace, message)
  676. } else {
  677. fmt.Printf(
  678. "[%s] %s: %s: %s %+v\n",
  679. now, priority, logger.trace, message, logger.fields)
  680. }
  681. }
  682. func (logger *testLoggerTrace) Debug(args ...interface{}) {
  683. logger.log("DEBUG", fmt.Sprint(args...))
  684. }
  685. func (logger *testLoggerTrace) Info(args ...interface{}) {
  686. logger.log("INFO", fmt.Sprint(args...))
  687. }
  688. func (logger *testLoggerTrace) Warning(args ...interface{}) {
  689. logger.log("WARNING", fmt.Sprint(args...))
  690. }
  691. func (logger *testLoggerTrace) Error(args ...interface{}) {
  692. logger.log("ERROR", fmt.Sprint(args...))
  693. }