tun_test.go 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859
  1. /*
  2. * Copyright (c) 2017, Psiphon Inc.
  3. * All rights reserved.
  4. *
  5. * This program is free software: you can redistribute it and/or modify
  6. * it under the terms of the GNU General Public License as published by
  7. * the Free Software Foundation, either version 3 of the License, or
  8. * (at your option) any later version.
  9. *
  10. * This program is distributed in the hope that it will be useful,
  11. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13. * GNU General Public License for more details.
  14. *
  15. * You should have received a copy of the GNU General Public License
  16. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  17. *
  18. */
  19. package tun
  20. import (
  21. "bytes"
  22. "errors"
  23. "fmt"
  24. "io"
  25. "math/rand"
  26. "net"
  27. "os"
  28. "strconv"
  29. "sync"
  30. "sync/atomic"
  31. "syscall"
  32. "testing"
  33. "time"
  34. "github.com/Psiphon-Labs/psiphon-tunnel-core/psiphon/common"
  35. "github.com/Psiphon-Labs/psiphon-tunnel-core/psiphon/common/prng"
  36. "github.com/Psiphon-Labs/psiphon-tunnel-core/psiphon/common/stacktrace"
  37. "github.com/miekg/dns"
  38. )
  39. const (
  40. UNIX_DOMAIN_SOCKET_NAME = "/tmp/tun_test.sock"
  41. SESSION_ID_LENGTH = 16
  42. TCP_PORT = 8000
  43. TCP_RELAY_CHUNK_SIZE = int64(65536)
  44. TCP_RELAY_TOTAL_SIZE = int64(1073741824)
  45. CONCURRENT_CLIENT_COUNT = 5
  46. PACKET_METRICS_TIMEOUT = 10 * time.Second
  47. )
  48. func TestTunneledTCPIPv4(t *testing.T) {
  49. testTunneledTCP(t, false)
  50. }
  51. func TestTunneledTCPIPv6(t *testing.T) {
  52. testTunneledTCP(t, true)
  53. }
  54. func TestSessionExpiry(t *testing.T) {
  55. t.Skip("TODO: test short session TTLs actually persist/expire as expected")
  56. }
  57. func TestTrafficRules(t *testing.T) {
  58. t.Skip("TODO: negative tests for checkAllowedTCPPortFunc, checkAllowedUDPPortFunc")
  59. }
  60. func TestResetRouting(t *testing.T) {
  61. t.Skip("TODO: test conntrack delete effectiveness")
  62. }
  63. func testTunneledTCP(t *testing.T, useIPv6 bool) {
  64. // This test harness does the following:
  65. //
  66. // - starts a TCP server; this server echoes the data it receives
  67. // - starts a packet tunnel server that uses a unix domain socket for client channels
  68. // - starts CONCURRENT_CLIENT_COUNT concurrent clients
  69. // - each client runs a packet tunnel client connected to the server unix domain socket
  70. // - one client first performs a tunneled DNS query against an external DNS server
  71. // - clients establish a TCP client connection to the TCP server through the packet tunnel
  72. // - each TCP client transfers TCP_RELAY_TOTAL_SIZE bytes to the TCP server
  73. // - the test checks that all data echoes back correctly and that the server packet
  74. // metrics reflects the expected amount of data transferred through the tunnel
  75. // - the test also checks that the flow activity updater mechanism correctly reports
  76. // the total bytes transferred
  77. // - this test runs in either IPv4 or IPv6 mode
  78. // - the test host's public IP address is used as the TCP server IP address; it is
  79. // expected that the server tun device will NAT to the public interface; clients
  80. // use SO_BINDTODEVICE/IP_BOUND_IF to force the TCP client connections through the
  81. // tunnel
  82. //
  83. // Note: this test can modify host network configuration; in addition to tun device
  84. // and routing config, see the changes made in fixBindToDevice.
  85. if TCP_RELAY_TOTAL_SIZE%TCP_RELAY_CHUNK_SIZE != 0 {
  86. t.Fatalf("invalid relay size")
  87. }
  88. MTU := DEFAULT_MTU
  89. testTCPServer, err := startTestTCPServer(useIPv6)
  90. if err != nil {
  91. if err == errNoIPAddress {
  92. t.Skipf("test unsupported: %s", errNoIPAddress)
  93. }
  94. t.Fatalf("startTestTCPServer failed: %s", err)
  95. }
  96. var flowCounter bytesTransferredCounter
  97. flowActivityUpdaterMaker := func(_ string, IPAddress net.IP) []FlowActivityUpdater {
  98. if IPAddress.String() != testTCPServer.getListenerIPAddress() {
  99. t.Fatalf("unexpected flow IP address")
  100. }
  101. return []FlowActivityUpdater{&flowCounter}
  102. }
  103. var metricsCounter bytesTransferredCounter
  104. metricsUpdater := func(TCPApplicationBytesDown, TCPApplicationBytesUp, _, _ int64) {
  105. metricsCounter.UpdateProgress(
  106. TCPApplicationBytesDown, TCPApplicationBytesUp, 0)
  107. }
  108. testServer, err := startTestServer(useIPv6, MTU, flowActivityUpdaterMaker, metricsUpdater)
  109. if err != nil {
  110. t.Fatalf("startTestServer failed: %s", err)
  111. }
  112. results := make(chan error, CONCURRENT_CLIENT_COUNT)
  113. for i := 0; i < CONCURRENT_CLIENT_COUNT; i++ {
  114. go func(clientNum int) {
  115. testClient, err := startTestClient(
  116. useIPv6, MTU, []string{testTCPServer.getListenerIPAddress()})
  117. if err != nil {
  118. results <- fmt.Errorf("startTestClient failed: %s", err)
  119. return
  120. }
  121. // Test one tunneled DNS query.
  122. if clientNum == 0 {
  123. err = testDNSClient(
  124. useIPv6,
  125. testClient.tunClient.device.Name())
  126. if err != nil {
  127. results <- fmt.Errorf("testDNSClient failed: %s", err)
  128. return
  129. }
  130. }
  131. // The TCP client will bind to the packet tunnel client tun
  132. // device and connect to the TCP server. With the bind to
  133. // device, TCP packets will flow through the packet tunnel
  134. // client to the packet tunnel server, through the packet tunnel
  135. // server's tun device, NATed to the server's public interface,
  136. // and finally reaching the TCP server. All this happens on
  137. // the single host running the test.
  138. testTCPClient, err := startTestTCPClient(
  139. testClient.tunClient.device.Name(),
  140. testTCPServer.getListenerIPAddress())
  141. if err != nil {
  142. results <- fmt.Errorf("startTestTCPClient failed: %s", err)
  143. return
  144. }
  145. // Send TCP_RELAY_TOTAL_SIZE random bytes to the TCP server, and
  146. // check that it echoes back the same bytes.
  147. sendChunk, receiveChunk := make([]byte, TCP_RELAY_CHUNK_SIZE), make([]byte, TCP_RELAY_CHUNK_SIZE)
  148. for i := int64(0); i < TCP_RELAY_TOTAL_SIZE; i += TCP_RELAY_CHUNK_SIZE {
  149. _, err := rand.Read(sendChunk)
  150. if err != nil {
  151. results <- fmt.Errorf("rand.Read failed: %s", err)
  152. return
  153. }
  154. _, err = testTCPClient.Write(sendChunk)
  155. if err != nil {
  156. results <- fmt.Errorf("mockTCPClient.Write failed: %s", err)
  157. return
  158. }
  159. _, err = io.ReadFull(testTCPClient, receiveChunk)
  160. if err != nil {
  161. results <- fmt.Errorf("io.ReadFull failed: %s", err)
  162. return
  163. }
  164. if !bytes.Equal(sendChunk, receiveChunk) {
  165. results <- fmt.Errorf("bytes.Equal failed")
  166. return
  167. }
  168. }
  169. testTCPClient.stop()
  170. // Allow some time for the TCP FIN to be tunneled, for a clean shutdown.
  171. time.Sleep(100 * time.Millisecond)
  172. testClient.stop()
  173. // Check metrics to ensure traffic was tunneled and metrics reported
  174. // Note: this code does not ensure that the "last" packet metrics was
  175. // for this very client; but all packet metrics should be the same.
  176. packetMetricsFields := testServer.logger.getLastPacketMetrics()
  177. if packetMetricsFields == nil {
  178. results <- fmt.Errorf("testServer.logger.getLastPacketMetrics failed")
  179. return
  180. }
  181. expectedFields := []struct {
  182. nameSuffix string
  183. minimumValue int64
  184. }{
  185. {"packets_up", TCP_RELAY_TOTAL_SIZE / int64(MTU)},
  186. {"packets_down", TCP_RELAY_TOTAL_SIZE / int64(MTU)},
  187. {"bytes_up", TCP_RELAY_TOTAL_SIZE},
  188. {"bytes_down", TCP_RELAY_TOTAL_SIZE},
  189. {"application_bytes_up", TCP_RELAY_TOTAL_SIZE},
  190. {"application_bytes_down", TCP_RELAY_TOTAL_SIZE},
  191. }
  192. for _, expectedField := range expectedFields {
  193. var name string
  194. if useIPv6 {
  195. name = "tcp_ipv6_" + expectedField.nameSuffix
  196. } else {
  197. name = "tcp_ipv4_" + expectedField.nameSuffix
  198. }
  199. field, ok := packetMetricsFields[name]
  200. if !ok {
  201. results <- fmt.Errorf("missing expected metric field: %s", name)
  202. return
  203. }
  204. value, ok := field.(int64)
  205. if !ok {
  206. results <- fmt.Errorf("unexpected metric field type: %s", name)
  207. return
  208. }
  209. if value < expectedField.minimumValue {
  210. results <- fmt.Errorf("unexpected metric field value: %s: %d", name, value)
  211. return
  212. }
  213. }
  214. results <- nil
  215. }(i)
  216. }
  217. for i := 0; i < CONCURRENT_CLIENT_COUNT; i++ {
  218. result := <-results
  219. if result != nil {
  220. t.Fatalf(result.Error())
  221. }
  222. }
  223. // Note: reported bytes transferred can exceed expected bytes
  224. // transferred due to retransmission of packets.
  225. expectedBytesTransferred := CONCURRENT_CLIENT_COUNT * TCP_RELAY_TOTAL_SIZE
  226. downstreamBytesTransferred, upstreamBytesTransferred, _ := flowCounter.Get()
  227. if downstreamBytesTransferred < expectedBytesTransferred {
  228. t.Fatalf("unexpected flow downstreamBytesTransferred: %d; expected at least %d",
  229. downstreamBytesTransferred, expectedBytesTransferred)
  230. }
  231. if upstreamBytesTransferred < expectedBytesTransferred {
  232. t.Fatalf("unexpected flow upstreamBytesTransferred: %d; expected at least %d",
  233. upstreamBytesTransferred, expectedBytesTransferred)
  234. }
  235. downstreamBytesTransferred, upstreamBytesTransferred, _ = metricsCounter.Get()
  236. if downstreamBytesTransferred < expectedBytesTransferred {
  237. t.Fatalf("unexpected metrics downstreamBytesTransferred: %d; expected at least %d",
  238. downstreamBytesTransferred, expectedBytesTransferred)
  239. }
  240. if upstreamBytesTransferred < expectedBytesTransferred {
  241. t.Fatalf("unexpected metrics upstreamBytesTransferred: %d; expected at least %d",
  242. upstreamBytesTransferred, expectedBytesTransferred)
  243. }
  244. testServer.stop()
  245. testTCPServer.stop()
  246. }
  247. type bytesTransferredCounter struct {
  248. // Note: 64-bit ints used with atomic operations are placed
  249. // at the start of struct to ensure 64-bit alignment.
  250. // (https://golang.org/pkg/sync/atomic/#pkg-note-BUG)
  251. downstreamBytes int64
  252. upstreamBytes int64
  253. durationNanoseconds int64
  254. }
  255. func (counter *bytesTransferredCounter) UpdateProgress(
  256. downstreamBytes, upstreamBytes int64, durationNanoseconds int64) {
  257. atomic.AddInt64(&counter.downstreamBytes, downstreamBytes)
  258. atomic.AddInt64(&counter.upstreamBytes, upstreamBytes)
  259. atomic.AddInt64(&counter.durationNanoseconds, durationNanoseconds)
  260. }
  261. func (counter *bytesTransferredCounter) Get() (int64, int64, int64) {
  262. return atomic.LoadInt64(&counter.downstreamBytes),
  263. atomic.LoadInt64(&counter.upstreamBytes),
  264. atomic.LoadInt64(&counter.durationNanoseconds)
  265. }
  266. type testServer struct {
  267. logger *testLogger
  268. updaterMaker FlowActivityUpdaterMaker
  269. metricsUpdater MetricsUpdater
  270. tunServer *Server
  271. unixListener net.Listener
  272. clientConns *common.Conns
  273. workers *sync.WaitGroup
  274. }
  275. func startTestServer(
  276. useIPv6 bool,
  277. MTU int,
  278. updaterMaker FlowActivityUpdaterMaker,
  279. metricsUpdater MetricsUpdater) (*testServer, error) {
  280. logger := newTestLogger(true)
  281. getDNSResolverIPv4Addresses := func() []net.IP {
  282. return []net.IP{net.ParseIP("8.8.8.8")}
  283. }
  284. getDNSResolverIPv6Addresses := func() []net.IP {
  285. return []net.IP{net.ParseIP("2001:4860:4860::8888")}
  286. }
  287. config := &ServerConfig{
  288. Logger: logger,
  289. SudoNetworkConfigCommands: os.Getenv("TUN_TEST_SUDO") != "",
  290. AllowNoIPv6NetworkConfiguration: !useIPv6,
  291. GetDNSResolverIPv4Addresses: getDNSResolverIPv4Addresses,
  292. GetDNSResolverIPv6Addresses: getDNSResolverIPv6Addresses,
  293. MTU: MTU,
  294. AllowBogons: true,
  295. }
  296. tunServer, err := NewServer(config)
  297. if err != nil {
  298. return nil, fmt.Errorf("startTestServer(): NewServer failed: %s", err)
  299. }
  300. tunServer.Start()
  301. _ = syscall.Unlink(UNIX_DOMAIN_SOCKET_NAME)
  302. unixListener, err := net.Listen("unix", UNIX_DOMAIN_SOCKET_NAME)
  303. if err != nil {
  304. return nil, fmt.Errorf("startTestServer(): net.Listen failed: %s", err)
  305. }
  306. server := &testServer{
  307. logger: logger,
  308. updaterMaker: updaterMaker,
  309. metricsUpdater: metricsUpdater,
  310. tunServer: tunServer,
  311. unixListener: unixListener,
  312. clientConns: common.NewConns(),
  313. workers: new(sync.WaitGroup),
  314. }
  315. server.workers.Add(1)
  316. go server.run()
  317. return server, nil
  318. }
  319. func (server *testServer) run() {
  320. defer server.workers.Done()
  321. for {
  322. clientConn, err := server.unixListener.Accept()
  323. if err != nil {
  324. fmt.Printf("testServer.run(): unixListener.Accept failed: %s\n", err)
  325. return
  326. }
  327. signalConn := newSignalConn(clientConn)
  328. if !server.clientConns.Add(signalConn) {
  329. return
  330. }
  331. server.workers.Add(1)
  332. go func() {
  333. defer server.workers.Done()
  334. defer signalConn.Close()
  335. sessionID := prng.HexString(SESSION_ID_LENGTH)
  336. checkAllowedPortFunc := func(net.IP, int) bool { return true }
  337. checkAllowedDomainFunc := func(string) bool { return true }
  338. dnsQualityReporter := func(_ bool, _ time.Duration, _ net.IP) {}
  339. server.tunServer.ClientConnected(
  340. sessionID,
  341. signalConn,
  342. checkAllowedPortFunc,
  343. checkAllowedPortFunc,
  344. checkAllowedDomainFunc,
  345. server.updaterMaker,
  346. server.metricsUpdater,
  347. dnsQualityReporter)
  348. signalConn.Wait()
  349. server.tunServer.ClientDisconnected(
  350. sessionID)
  351. }()
  352. }
  353. }
  354. func (server *testServer) stop() {
  355. server.clientConns.CloseAll()
  356. server.unixListener.Close()
  357. server.workers.Wait()
  358. server.tunServer.Stop()
  359. }
  360. type signalConn struct {
  361. net.Conn
  362. ioErrorSignal chan struct{}
  363. }
  364. func newSignalConn(baseConn net.Conn) *signalConn {
  365. return &signalConn{
  366. Conn: baseConn,
  367. ioErrorSignal: make(chan struct{}, 1),
  368. }
  369. }
  370. func (conn *signalConn) Read(p []byte) (n int, err error) {
  371. n, err = conn.Conn.Read(p)
  372. if err != nil {
  373. _ = conn.Conn.Close()
  374. select {
  375. case conn.ioErrorSignal <- struct{}{}:
  376. default:
  377. }
  378. }
  379. return
  380. }
  381. func (conn *signalConn) Write(p []byte) (n int, err error) {
  382. n, err = conn.Conn.Write(p)
  383. if err != nil {
  384. _ = conn.Conn.Close()
  385. select {
  386. case conn.ioErrorSignal <- struct{}{}:
  387. default:
  388. }
  389. }
  390. return
  391. }
  392. func (conn *signalConn) Wait() {
  393. <-conn.ioErrorSignal
  394. }
  395. type testClient struct {
  396. logger *testLogger
  397. unixConn net.Conn
  398. tunClient *Client
  399. }
  400. func startTestClient(
  401. useIPv6 bool,
  402. MTU int,
  403. routeDestinations []string) (*testClient, error) {
  404. unixConn, err := net.Dial("unix", UNIX_DOMAIN_SOCKET_NAME)
  405. if err != nil {
  406. return nil, fmt.Errorf("startTestClient(): net.Dial failed: %s", err)
  407. }
  408. logger := newTestLogger(false)
  409. // Assumes IP addresses are available on test host
  410. // TODO: assign unique IP to each testClient?
  411. config := &ClientConfig{
  412. Logger: logger,
  413. SudoNetworkConfigCommands: os.Getenv("TUN_TEST_SUDO") != "",
  414. AllowNoIPv6NetworkConfiguration: !useIPv6,
  415. IPv4AddressCIDR: "172.16.0.1/24",
  416. IPv6AddressCIDR: "fd26:b6a6:4454:310a:0000:0000:0000:0001/64",
  417. RouteDestinations: routeDestinations,
  418. Transport: unixConn,
  419. MTU: MTU,
  420. }
  421. tunClient, err := NewClient(config)
  422. if err != nil {
  423. return nil, fmt.Errorf("startTestClient(): NewClient failed: %s", err)
  424. }
  425. // Configure kernel to fix issue described in fixBindToDevice
  426. err = fixBindToDevice(logger, config.SudoNetworkConfigCommands, tunClient.device.Name())
  427. if err != nil {
  428. return nil, fmt.Errorf("startTestClient(): fixBindToDevice failed: %s", err)
  429. }
  430. tunClient.Start()
  431. return &testClient{
  432. logger: logger,
  433. unixConn: unixConn,
  434. tunClient: tunClient,
  435. }, nil
  436. }
  437. func (client *testClient) stop() {
  438. client.tunClient.Stop()
  439. client.unixConn.Close()
  440. }
  441. type testTCPServer struct {
  442. listenerIPAddress string
  443. tcpListener net.Listener
  444. clientConns *common.Conns
  445. workers *sync.WaitGroup
  446. }
  447. var errNoIPAddress = errors.New("no IP address")
  448. func startTestTCPServer(useIPv6 bool) (*testTCPServer, error) {
  449. interfaceName := DEFAULT_PUBLIC_INTERFACE_NAME
  450. hostIPaddress := ""
  451. IPv4Address, IPv6Address, err := common.GetInterfaceIPAddresses(interfaceName)
  452. if err != nil {
  453. return nil, fmt.Errorf("startTestTCPServer(): GetInterfaceIPAddresses failed: %s", err)
  454. }
  455. if useIPv6 {
  456. // Cannot route to link local address
  457. if IPv6Address == nil || IPv6Address.IsLinkLocalUnicast() {
  458. return nil, errNoIPAddress
  459. }
  460. hostIPaddress = IPv6Address.String()
  461. } else {
  462. if IPv4Address == nil || IPv4Address.IsLinkLocalUnicast() {
  463. return nil, errNoIPAddress
  464. }
  465. hostIPaddress = IPv4Address.String()
  466. }
  467. tcpListener, err := net.Listen("tcp", net.JoinHostPort(hostIPaddress, strconv.Itoa(TCP_PORT)))
  468. if err != nil {
  469. return nil, fmt.Errorf("startTestTCPServer(): net.Listen failed: %s", err)
  470. }
  471. server := &testTCPServer{
  472. listenerIPAddress: hostIPaddress,
  473. tcpListener: tcpListener,
  474. clientConns: common.NewConns(),
  475. workers: new(sync.WaitGroup),
  476. }
  477. server.workers.Add(1)
  478. go server.run()
  479. return server, nil
  480. }
  481. func (server *testTCPServer) getListenerIPAddress() string {
  482. return server.listenerIPAddress
  483. }
  484. func (server *testTCPServer) run() {
  485. defer server.workers.Done()
  486. for {
  487. clientConn, err := server.tcpListener.Accept()
  488. if err != nil {
  489. fmt.Printf("testTCPServer.run(): tcpListener.Accept failed: %s\n", err)
  490. return
  491. }
  492. if !server.clientConns.Add(clientConn) {
  493. return
  494. }
  495. server.workers.Add(1)
  496. go func() {
  497. defer server.workers.Done()
  498. defer clientConn.Close()
  499. buffer := make([]byte, TCP_RELAY_CHUNK_SIZE)
  500. for {
  501. _, err := io.ReadFull(clientConn, buffer)
  502. if err != nil {
  503. fmt.Printf("testTCPServer.run(): io.ReadFull failed: %s\n", err)
  504. return
  505. }
  506. _, err = clientConn.Write(buffer)
  507. if err != nil {
  508. fmt.Printf("testTCPServer.run(): clientConn.Write failed: %s\n", err)
  509. return
  510. }
  511. }
  512. }()
  513. }
  514. }
  515. func (server *testTCPServer) stop() {
  516. server.clientConns.CloseAll()
  517. server.tcpListener.Close()
  518. server.workers.Wait()
  519. }
  520. type testTCPClient struct {
  521. conn net.Conn
  522. }
  523. func startTestTCPClient(
  524. tunDeviceName, serverIPAddress string) (*testTCPClient, error) {
  525. // This is a simplified version of the low-level TCP dial
  526. // code in psiphon/TCPConn, which supports BindToDevice.
  527. // It does not resolve domain names and does not have an
  528. // explicit timeout.
  529. var ipv4 [4]byte
  530. var ipv6 [16]byte
  531. var domain int
  532. var sockAddr syscall.Sockaddr
  533. ipAddr := net.ParseIP(serverIPAddress)
  534. if ipAddr == nil {
  535. return nil, fmt.Errorf("net.ParseIP failed")
  536. }
  537. if ipAddr.To4() != nil {
  538. copy(ipv4[:], ipAddr.To4())
  539. domain = syscall.AF_INET
  540. sockAddr = &syscall.SockaddrInet4{Addr: ipv4, Port: TCP_PORT}
  541. } else {
  542. copy(ipv6[:], ipAddr.To16())
  543. domain = syscall.AF_INET6
  544. sockAddr = &syscall.SockaddrInet6{Addr: ipv6, Port: TCP_PORT}
  545. }
  546. socketFd, err := syscall.Socket(domain, syscall.SOCK_STREAM, 0)
  547. if err != nil {
  548. return nil, fmt.Errorf("syscall.Socket failed: %s", err)
  549. }
  550. err = BindToDevice(socketFd, tunDeviceName)
  551. if err != nil {
  552. syscall.Close(socketFd)
  553. return nil, fmt.Errorf("BindToDevice failed: %s", err)
  554. }
  555. err = syscall.Connect(socketFd, sockAddr)
  556. if err != nil {
  557. syscall.Close(socketFd)
  558. return nil, fmt.Errorf("syscall.Connect failed: %s", err)
  559. }
  560. file := os.NewFile(uintptr(socketFd), "")
  561. conn, err := net.FileConn(file)
  562. file.Close()
  563. if err != nil {
  564. return nil, fmt.Errorf("net.FileConn failed: %s", err)
  565. }
  566. return &testTCPClient{
  567. conn: conn,
  568. }, nil
  569. }
  570. func (client *testTCPClient) Read(p []byte) (n int, err error) {
  571. n, err = client.conn.Read(p)
  572. return
  573. }
  574. func (client *testTCPClient) Write(p []byte) (n int, err error) {
  575. n, err = client.conn.Write(p)
  576. return
  577. }
  578. func (client *testTCPClient) stop() {
  579. client.conn.Close()
  580. }
  581. func testDNSClient(useIPv6 bool, tunDeviceName string) error {
  582. var ipv4 [4]byte
  583. var ipv6 [16]byte
  584. var domain int
  585. var sockAddr syscall.Sockaddr
  586. if !useIPv6 {
  587. copy(ipv4[:], transparentDNSResolverIPv4Address)
  588. domain = syscall.AF_INET
  589. sockAddr = &syscall.SockaddrInet4{Addr: ipv4, Port: portNumberDNS}
  590. } else {
  591. copy(ipv6[:], transparentDNSResolverIPv6Address)
  592. domain = syscall.AF_INET6
  593. sockAddr = &syscall.SockaddrInet6{Addr: ipv6, Port: portNumberDNS}
  594. }
  595. socketFd, err := syscall.Socket(domain, syscall.SOCK_DGRAM, 0)
  596. if err != nil {
  597. return err
  598. }
  599. err = BindToDevice(socketFd, tunDeviceName)
  600. if err != nil {
  601. syscall.Close(socketFd)
  602. return err
  603. }
  604. err = syscall.Connect(socketFd, sockAddr)
  605. if err != nil {
  606. syscall.Close(socketFd)
  607. return err
  608. }
  609. file := os.NewFile(uintptr(socketFd), "")
  610. conn, err := net.FileConn(file)
  611. file.Close()
  612. if err != nil {
  613. return err
  614. }
  615. defer conn.Close()
  616. dnsConn := &dns.Conn{Conn: conn}
  617. defer dnsConn.Close()
  618. query := new(dns.Msg)
  619. query.SetQuestion(dns.Fqdn("www.example.org"), dns.TypeA)
  620. query.RecursionDesired = true
  621. dnsConn.WriteMsg(query)
  622. _, err = dnsConn.ReadMsg()
  623. if err != nil {
  624. return err
  625. }
  626. return nil
  627. }
  628. type testLogger struct {
  629. packetMetrics chan common.LogFields
  630. }
  631. func newTestLogger(wantLastPacketMetrics bool) *testLogger {
  632. var packetMetrics chan common.LogFields
  633. if wantLastPacketMetrics {
  634. packetMetrics = make(chan common.LogFields, CONCURRENT_CLIENT_COUNT)
  635. }
  636. return &testLogger{
  637. packetMetrics: packetMetrics,
  638. }
  639. }
  640. func (logger *testLogger) WithTrace() common.LogTrace {
  641. return &testLoggerTrace{trace: stacktrace.GetParentFunctionName()}
  642. }
  643. func (logger *testLogger) WithTraceFields(fields common.LogFields) common.LogTrace {
  644. return &testLoggerTrace{
  645. trace: stacktrace.GetParentFunctionName(),
  646. fields: fields,
  647. }
  648. }
  649. func (logger *testLogger) LogMetric(metric string, fields common.LogFields) {
  650. fmt.Printf("METRIC: %s: %+v\n", metric, fields)
  651. if metric == "server_packet_metrics" && logger.packetMetrics != nil {
  652. select {
  653. case logger.packetMetrics <- fields:
  654. default:
  655. }
  656. }
  657. }
  658. func (logger *testLogger) getLastPacketMetrics() common.LogFields {
  659. if logger.packetMetrics == nil {
  660. return nil
  661. }
  662. // Implicitly asserts that packet metrics will be emitted
  663. // within PACKET_METRICS_TIMEOUT; if not, the test will fail.
  664. select {
  665. case fields := <-logger.packetMetrics:
  666. return fields
  667. case <-time.After(PACKET_METRICS_TIMEOUT):
  668. return nil
  669. }
  670. }
  671. type testLoggerTrace struct {
  672. trace string
  673. fields common.LogFields
  674. }
  675. func (logger *testLoggerTrace) log(priority, message string) {
  676. now := time.Now().UTC().Format(time.RFC3339)
  677. if len(logger.fields) == 0 {
  678. fmt.Printf(
  679. "[%s] %s: %s: %s\n",
  680. now, priority, logger.trace, message)
  681. } else {
  682. fmt.Printf(
  683. "[%s] %s: %s: %s %+v\n",
  684. now, priority, logger.trace, message, logger.fields)
  685. }
  686. }
  687. func (logger *testLoggerTrace) Debug(args ...interface{}) {
  688. logger.log("DEBUG", fmt.Sprint(args...))
  689. }
  690. func (logger *testLoggerTrace) Info(args ...interface{}) {
  691. logger.log("INFO", fmt.Sprint(args...))
  692. }
  693. func (logger *testLoggerTrace) Warning(args ...interface{}) {
  694. logger.log("WARNING", fmt.Sprint(args...))
  695. }
  696. func (logger *testLoggerTrace) Error(args ...interface{}) {
  697. logger.log("ERROR", fmt.Sprint(args...))
  698. }