tun_test.go 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868
  1. /*
  2. * Copyright (c) 2017, Psiphon Inc.
  3. * All rights reserved.
  4. *
  5. * This program is free software: you can redistribute it and/or modify
  6. * it under the terms of the GNU General Public License as published by
  7. * the Free Software Foundation, either version 3 of the License, or
  8. * (at your option) any later version.
  9. *
  10. * This program is distributed in the hope that it will be useful,
  11. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13. * GNU General Public License for more details.
  14. *
  15. * You should have received a copy of the GNU General Public License
  16. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  17. *
  18. */
  19. package tun
  20. import (
  21. "bytes"
  22. "errors"
  23. "fmt"
  24. "io"
  25. "math/rand"
  26. "net"
  27. "os"
  28. "strconv"
  29. "sync"
  30. "sync/atomic"
  31. "syscall"
  32. "testing"
  33. "time"
  34. "github.com/Psiphon-Labs/psiphon-tunnel-core/psiphon/common"
  35. "github.com/Psiphon-Labs/psiphon-tunnel-core/psiphon/common/prng"
  36. "github.com/Psiphon-Labs/psiphon-tunnel-core/psiphon/common/stacktrace"
  37. "github.com/miekg/dns"
  38. )
  39. const (
  40. UNIX_DOMAIN_SOCKET_NAME = "/tmp/tun_test.sock"
  41. SESSION_ID_LENGTH = 16
  42. TCP_PORT = 8000
  43. TCP_RELAY_CHUNK_SIZE = int64(65536)
  44. TCP_RELAY_TOTAL_SIZE = int64(1073741824)
  45. CONCURRENT_CLIENT_COUNT = 5
  46. PACKET_METRICS_TIMEOUT = 10 * time.Second
  47. )
  48. func TestTunneledTCPIPv4(t *testing.T) {
  49. testTunneledTCP(t, false)
  50. }
  51. func TestTunneledTCPIPv6(t *testing.T) {
  52. testTunneledTCP(t, true)
  53. }
  54. func TestSessionExpiry(t *testing.T) {
  55. t.Skip("TODO: test short session TTLs actually persist/expire as expected")
  56. }
  57. func TestTrafficRules(t *testing.T) {
  58. t.Skip("TODO: negative tests for checkAllowedTCPPortFunc, checkAllowedUDPPortFunc")
  59. }
  60. func TestResetRouting(t *testing.T) {
  61. t.Skip("TODO: test conntrack delete effectiveness")
  62. }
  63. func testTunneledTCP(t *testing.T, useIPv6 bool) {
  64. // This test harness does the following:
  65. //
  66. // - starts a TCP server; this server echoes the data it receives
  67. // - starts a packet tunnel server that uses a unix domain socket for client channels
  68. // - starts CONCURRENT_CLIENT_COUNT concurrent clients
  69. // - each client runs a packet tunnel client connected to the server unix domain socket
  70. // - one client first performs a tunneled DNS query against an external DNS server
  71. // - clients establish a TCP client connection to the TCP server through the packet tunnel
  72. // - each TCP client transfers TCP_RELAY_TOTAL_SIZE bytes to the TCP server
  73. // - the test checks that all data echoes back correctly and that the server packet
  74. // metrics reflects the expected amount of data transferred through the tunnel
  75. // - the test also checks that the flow activity updater mechanism correctly reports
  76. // the total bytes transferred
  77. // - this test runs in either IPv4 or IPv6 mode
  78. // - the test host's public IP address is used as the TCP server IP address; it is
  79. // expected that the server tun device will NAT to the public interface; clients
  80. // use SO_BINDTODEVICE/IP_BOUND_IF to force the TCP client connections through the
  81. // tunnel
  82. //
  83. // Note: this test can modify host network configuration; in addition to tun device
  84. // and routing config, see the changes made in fixBindToDevice.
  85. if TCP_RELAY_TOTAL_SIZE%TCP_RELAY_CHUNK_SIZE != 0 {
  86. t.Fatalf("invalid relay size")
  87. }
  88. MTU := DEFAULT_MTU
  89. testTCPServer, err := startTestTCPServer(useIPv6)
  90. if err != nil {
  91. if err == errNoIPAddress {
  92. t.Skipf("test unsupported: %s", errNoIPAddress)
  93. }
  94. t.Fatalf("startTestTCPServer failed: %s", err)
  95. }
  96. var flowCounter bytesTransferredCounter
  97. flowActivityUpdaterMaker := func(_ bool, _ string, IPAddress net.IP) []FlowActivityUpdater {
  98. if IPAddress.String() != testTCPServer.getListenerIPAddress() {
  99. t.Fatalf("unexpected flow IP address")
  100. }
  101. return []FlowActivityUpdater{&flowCounter}
  102. }
  103. var metricsCounter bytesTransferredCounter
  104. metricsUpdater := func(TCPApplicationBytesDown, TCPApplicationBytesUp, _, _ int64) {
  105. metricsCounter.UpdateProgress(
  106. TCPApplicationBytesDown, TCPApplicationBytesUp, 0)
  107. }
  108. testServer, err := startTestServer(useIPv6, MTU, flowActivityUpdaterMaker, metricsUpdater)
  109. if err != nil {
  110. t.Fatalf("startTestServer failed: %s", err)
  111. }
  112. results := make(chan error, CONCURRENT_CLIENT_COUNT)
  113. for i := 0; i < CONCURRENT_CLIENT_COUNT; i++ {
  114. go func(clientNum int) {
  115. testClient, err := startTestClient(
  116. useIPv6, MTU, []string{testTCPServer.getListenerIPAddress()})
  117. if err != nil {
  118. results <- fmt.Errorf("startTestClient failed: %s", err)
  119. return
  120. }
  121. // Test one tunneled DNS query.
  122. if clientNum == 0 {
  123. err = testDNSClient(
  124. useIPv6,
  125. testClient.tunClient.device.Name())
  126. if err != nil {
  127. results <- fmt.Errorf("testDNSClient failed: %s", err)
  128. return
  129. }
  130. }
  131. // The TCP client will bind to the packet tunnel client tun
  132. // device and connect to the TCP server. With the bind to
  133. // device, TCP packets will flow through the packet tunnel
  134. // client to the packet tunnel server, through the packet tunnel
  135. // server's tun device, NATed to the server's public interface,
  136. // and finally reaching the TCP server. All this happens on
  137. // the single host running the test.
  138. testTCPClient, err := startTestTCPClient(
  139. testClient.tunClient.device.Name(),
  140. testTCPServer.getListenerIPAddress())
  141. if err != nil {
  142. results <- fmt.Errorf("startTestTCPClient failed: %s", err)
  143. return
  144. }
  145. // Send TCP_RELAY_TOTAL_SIZE random bytes to the TCP server, and
  146. // check that it echoes back the same bytes.
  147. sendChunk, receiveChunk := make([]byte, TCP_RELAY_CHUNK_SIZE), make([]byte, TCP_RELAY_CHUNK_SIZE)
  148. for i := int64(0); i < TCP_RELAY_TOTAL_SIZE; i += TCP_RELAY_CHUNK_SIZE {
  149. _, err := rand.Read(sendChunk)
  150. if err != nil {
  151. results <- fmt.Errorf("rand.Read failed: %s", err)
  152. return
  153. }
  154. _, err = testTCPClient.Write(sendChunk)
  155. if err != nil {
  156. results <- fmt.Errorf("mockTCPClient.Write failed: %s", err)
  157. return
  158. }
  159. _, err = io.ReadFull(testTCPClient, receiveChunk)
  160. if err != nil {
  161. results <- fmt.Errorf("io.ReadFull failed: %s", err)
  162. return
  163. }
  164. if !bytes.Equal(sendChunk, receiveChunk) {
  165. results <- fmt.Errorf("bytes.Equal failed")
  166. return
  167. }
  168. }
  169. testTCPClient.stop()
  170. // Allow some time for the TCP FIN to be tunneled, for a clean shutdown.
  171. time.Sleep(100 * time.Millisecond)
  172. testClient.stop()
  173. // Check metrics to ensure traffic was tunneled and metrics reported
  174. // Note: this code does not ensure that the "last" packet metrics was
  175. // for this very client; but all packet metrics should be the same.
  176. packetMetricsFields := testServer.logger.getLastPacketMetrics()
  177. if packetMetricsFields == nil {
  178. results <- fmt.Errorf("testServer.logger.getLastPacketMetrics failed")
  179. return
  180. }
  181. expectedFields := []struct {
  182. nameSuffix string
  183. minimumValue int64
  184. }{
  185. {"packets_up", TCP_RELAY_TOTAL_SIZE / int64(MTU)},
  186. {"packets_down", TCP_RELAY_TOTAL_SIZE / int64(MTU)},
  187. {"bytes_up", TCP_RELAY_TOTAL_SIZE},
  188. {"bytes_down", TCP_RELAY_TOTAL_SIZE},
  189. {"application_bytes_up", TCP_RELAY_TOTAL_SIZE},
  190. {"application_bytes_down", TCP_RELAY_TOTAL_SIZE},
  191. }
  192. for _, expectedField := range expectedFields {
  193. var name string
  194. if useIPv6 {
  195. name = "tcp_ipv6_" + expectedField.nameSuffix
  196. } else {
  197. name = "tcp_ipv4_" + expectedField.nameSuffix
  198. }
  199. field, ok := packetMetricsFields[name]
  200. if !ok {
  201. results <- fmt.Errorf("missing expected metric field: %s", name)
  202. return
  203. }
  204. value, ok := field.(int64)
  205. if !ok {
  206. results <- fmt.Errorf("unexpected metric field type: %s", name)
  207. return
  208. }
  209. if value < expectedField.minimumValue {
  210. results <- fmt.Errorf("unexpected metric field value: %s: %d", name, value)
  211. return
  212. }
  213. }
  214. results <- nil
  215. }(i)
  216. }
  217. for i := 0; i < CONCURRENT_CLIENT_COUNT; i++ {
  218. result := <-results
  219. if result != nil {
  220. t.Fatalf(result.Error())
  221. }
  222. }
  223. // Note: reported bytes transferred can exceed expected bytes
  224. // transferred due to retransmission of packets.
  225. expectedBytesTransferred := CONCURRENT_CLIENT_COUNT * TCP_RELAY_TOTAL_SIZE
  226. downstreamBytesTransferred, upstreamBytesTransferred, _ := flowCounter.Get()
  227. if downstreamBytesTransferred < expectedBytesTransferred {
  228. t.Fatalf("unexpected flow downstreamBytesTransferred: %d; expected at least %d",
  229. downstreamBytesTransferred, expectedBytesTransferred)
  230. }
  231. if upstreamBytesTransferred < expectedBytesTransferred {
  232. t.Fatalf("unexpected flow upstreamBytesTransferred: %d; expected at least %d",
  233. upstreamBytesTransferred, expectedBytesTransferred)
  234. }
  235. downstreamBytesTransferred, upstreamBytesTransferred, _ = metricsCounter.Get()
  236. if downstreamBytesTransferred < expectedBytesTransferred {
  237. t.Fatalf("unexpected metrics downstreamBytesTransferred: %d; expected at least %d",
  238. downstreamBytesTransferred, expectedBytesTransferred)
  239. }
  240. if upstreamBytesTransferred < expectedBytesTransferred {
  241. t.Fatalf("unexpected metrics upstreamBytesTransferred: %d; expected at least %d",
  242. upstreamBytesTransferred, expectedBytesTransferred)
  243. }
  244. testServer.stop()
  245. testTCPServer.stop()
  246. }
  247. type bytesTransferredCounter struct {
  248. // Note: 64-bit ints used with atomic operations are placed
  249. // at the start of struct to ensure 64-bit alignment.
  250. // (https://golang.org/pkg/sync/atomic/#pkg-note-BUG)
  251. downstreamBytes int64
  252. upstreamBytes int64
  253. durationNanoseconds int64
  254. }
  255. func (counter *bytesTransferredCounter) UpdateProgress(
  256. downstreamBytes, upstreamBytes int64, durationNanoseconds int64) {
  257. atomic.AddInt64(&counter.downstreamBytes, downstreamBytes)
  258. atomic.AddInt64(&counter.upstreamBytes, upstreamBytes)
  259. atomic.AddInt64(&counter.durationNanoseconds, durationNanoseconds)
  260. }
  261. func (counter *bytesTransferredCounter) Get() (int64, int64, int64) {
  262. return atomic.LoadInt64(&counter.downstreamBytes),
  263. atomic.LoadInt64(&counter.upstreamBytes),
  264. atomic.LoadInt64(&counter.durationNanoseconds)
  265. }
  266. type testServer struct {
  267. logger *testLogger
  268. updaterMaker FlowActivityUpdaterMaker
  269. metricsUpdater MetricsUpdater
  270. tunServer *Server
  271. unixListener net.Listener
  272. clientConns *common.Conns
  273. workers *sync.WaitGroup
  274. }
  275. func startTestServer(
  276. useIPv6 bool,
  277. MTU int,
  278. updaterMaker FlowActivityUpdaterMaker,
  279. metricsUpdater MetricsUpdater) (*testServer, error) {
  280. logger := newTestLogger(true)
  281. getDNSResolverIPv4Addresses := func() []net.IP {
  282. return []net.IP{net.ParseIP("8.8.8.8")}
  283. }
  284. getDNSResolverIPv6Addresses := func() []net.IP {
  285. return []net.IP{net.ParseIP("2001:4860:4860::8888")}
  286. }
  287. config := &ServerConfig{
  288. Logger: logger,
  289. SudoNetworkConfigCommands: os.Getenv("TUN_TEST_SUDO") != "",
  290. AllowNoIPv6NetworkConfiguration: !useIPv6,
  291. GetDNSResolverIPv4Addresses: getDNSResolverIPv4Addresses,
  292. GetDNSResolverIPv6Addresses: getDNSResolverIPv6Addresses,
  293. MTU: MTU,
  294. AllowBogons: true,
  295. }
  296. tunServer, err := NewServer(config)
  297. if err != nil {
  298. return nil, fmt.Errorf("startTestServer(): NewServer failed: %s", err)
  299. }
  300. tunServer.Start()
  301. _ = syscall.Unlink(UNIX_DOMAIN_SOCKET_NAME)
  302. unixListener, err := net.Listen("unix", UNIX_DOMAIN_SOCKET_NAME)
  303. if err != nil {
  304. return nil, fmt.Errorf("startTestServer(): net.Listen failed: %s", err)
  305. }
  306. server := &testServer{
  307. logger: logger,
  308. updaterMaker: updaterMaker,
  309. metricsUpdater: metricsUpdater,
  310. tunServer: tunServer,
  311. unixListener: unixListener,
  312. clientConns: common.NewConns(),
  313. workers: new(sync.WaitGroup),
  314. }
  315. server.workers.Add(1)
  316. go server.run()
  317. return server, nil
  318. }
  319. func (server *testServer) run() {
  320. defer server.workers.Done()
  321. for {
  322. clientConn, err := server.unixListener.Accept()
  323. if err != nil {
  324. fmt.Printf("testServer.run(): unixListener.Accept failed: %s\n", err)
  325. return
  326. }
  327. signalConn := newSignalConn(clientConn)
  328. if !server.clientConns.Add(signalConn) {
  329. return
  330. }
  331. server.workers.Add(1)
  332. go func() {
  333. defer server.workers.Done()
  334. defer signalConn.Close()
  335. sessionID := prng.HexString(SESSION_ID_LENGTH)
  336. checkAllowedPortFunc := func(net.IP, int) bool { return true }
  337. checkAllowedDomainFunc := func(string) bool { return true }
  338. dnsQualityReporter := func(_ bool, _ time.Duration, _ net.IP) {}
  339. server.tunServer.ClientConnected(
  340. sessionID,
  341. signalConn,
  342. checkAllowedPortFunc,
  343. checkAllowedPortFunc,
  344. checkAllowedDomainFunc,
  345. server.updaterMaker,
  346. server.metricsUpdater,
  347. dnsQualityReporter)
  348. signalConn.Wait()
  349. server.tunServer.ClientDisconnected(
  350. sessionID)
  351. }()
  352. }
  353. }
  354. func (server *testServer) stop() {
  355. server.clientConns.CloseAll()
  356. server.unixListener.Close()
  357. server.workers.Wait()
  358. server.tunServer.Stop()
  359. }
  360. type signalConn struct {
  361. net.Conn
  362. ioErrorSignal chan struct{}
  363. }
  364. func newSignalConn(baseConn net.Conn) *signalConn {
  365. return &signalConn{
  366. Conn: baseConn,
  367. ioErrorSignal: make(chan struct{}, 1),
  368. }
  369. }
  370. func (conn *signalConn) Read(p []byte) (n int, err error) {
  371. n, err = conn.Conn.Read(p)
  372. if err != nil {
  373. _ = conn.Conn.Close()
  374. select {
  375. case conn.ioErrorSignal <- struct{}{}:
  376. default:
  377. }
  378. }
  379. return
  380. }
  381. func (conn *signalConn) Write(p []byte) (n int, err error) {
  382. n, err = conn.Conn.Write(p)
  383. if err != nil {
  384. _ = conn.Conn.Close()
  385. select {
  386. case conn.ioErrorSignal <- struct{}{}:
  387. default:
  388. }
  389. }
  390. return
  391. }
  392. func (conn *signalConn) Wait() {
  393. <-conn.ioErrorSignal
  394. }
  395. type testClient struct {
  396. logger *testLogger
  397. unixConn net.Conn
  398. tunClient *Client
  399. }
  400. const (
  401. clientIPv4AddressCIDR = "172.16.0.1/24"
  402. clientIPv6AddressCIDR = "fd26:b6a6:4454:310a:0000:0000:0000:0001/64"
  403. clientTransparentDNSIPv4Address = "172.16.0.2"
  404. clientTransparentDNSIPv6Address = "fd26:b6a6:4454:310a:0000:0000:0000:0002"
  405. )
  406. func startTestClient(
  407. useIPv6 bool,
  408. MTU int,
  409. routeDestinations []string) (*testClient, error) {
  410. unixConn, err := net.Dial("unix", UNIX_DOMAIN_SOCKET_NAME)
  411. if err != nil {
  412. return nil, fmt.Errorf("startTestClient(): net.Dial failed: %s", err)
  413. }
  414. logger := newTestLogger(false)
  415. // Assumes IP addresses are available on test host
  416. // TODO: assign unique IP to each testClient?
  417. config := &ClientConfig{
  418. Logger: logger,
  419. SudoNetworkConfigCommands: os.Getenv("TUN_TEST_SUDO") != "",
  420. AllowNoIPv6NetworkConfiguration: !useIPv6,
  421. IPv4AddressCIDR: clientIPv4AddressCIDR,
  422. IPv6AddressCIDR: clientIPv6AddressCIDR,
  423. TransparentDNSIPv4Address: clientTransparentDNSIPv4Address,
  424. TransparentDNSIPv6Address: clientTransparentDNSIPv6Address,
  425. RouteDestinations: routeDestinations,
  426. Transport: unixConn,
  427. MTU: MTU,
  428. }
  429. tunClient, err := NewClient(config)
  430. if err != nil {
  431. return nil, fmt.Errorf("startTestClient(): NewClient failed: %s", err)
  432. }
  433. // Configure kernel to fix issue described in fixBindToDevice
  434. err = fixBindToDevice(logger, config.SudoNetworkConfigCommands, tunClient.device.Name())
  435. if err != nil {
  436. return nil, fmt.Errorf("startTestClient(): fixBindToDevice failed: %s", err)
  437. }
  438. tunClient.Start()
  439. return &testClient{
  440. logger: logger,
  441. unixConn: unixConn,
  442. tunClient: tunClient,
  443. }, nil
  444. }
  445. func (client *testClient) stop() {
  446. client.tunClient.Stop()
  447. client.unixConn.Close()
  448. }
  449. type testTCPServer struct {
  450. listenerIPAddress string
  451. tcpListener net.Listener
  452. clientConns *common.Conns
  453. workers *sync.WaitGroup
  454. }
  455. var errNoIPAddress = errors.New("no IP address")
  456. func startTestTCPServer(useIPv6 bool) (*testTCPServer, error) {
  457. interfaceName := DEFAULT_PUBLIC_INTERFACE_NAME
  458. hostIPaddress := ""
  459. IPv4Address, IPv6Address, err := common.GetInterfaceIPAddresses(interfaceName)
  460. if err != nil {
  461. return nil, fmt.Errorf("startTestTCPServer(): GetInterfaceIPAddresses failed: %s", err)
  462. }
  463. if useIPv6 {
  464. // Cannot route to link local address
  465. if IPv6Address == nil || IPv6Address.IsLinkLocalUnicast() {
  466. return nil, errNoIPAddress
  467. }
  468. hostIPaddress = IPv6Address.String()
  469. } else {
  470. if IPv4Address == nil || IPv4Address.IsLinkLocalUnicast() {
  471. return nil, errNoIPAddress
  472. }
  473. hostIPaddress = IPv4Address.String()
  474. }
  475. tcpListener, err := net.Listen("tcp", net.JoinHostPort(hostIPaddress, strconv.Itoa(TCP_PORT)))
  476. if err != nil {
  477. return nil, fmt.Errorf("startTestTCPServer(): net.Listen failed: %s", err)
  478. }
  479. server := &testTCPServer{
  480. listenerIPAddress: hostIPaddress,
  481. tcpListener: tcpListener,
  482. clientConns: common.NewConns(),
  483. workers: new(sync.WaitGroup),
  484. }
  485. server.workers.Add(1)
  486. go server.run()
  487. return server, nil
  488. }
  489. func (server *testTCPServer) getListenerIPAddress() string {
  490. return server.listenerIPAddress
  491. }
  492. func (server *testTCPServer) run() {
  493. defer server.workers.Done()
  494. for {
  495. clientConn, err := server.tcpListener.Accept()
  496. if err != nil {
  497. fmt.Printf("testTCPServer.run(): tcpListener.Accept failed: %s\n", err)
  498. return
  499. }
  500. if !server.clientConns.Add(clientConn) {
  501. return
  502. }
  503. server.workers.Add(1)
  504. go func() {
  505. defer server.workers.Done()
  506. defer clientConn.Close()
  507. buffer := make([]byte, TCP_RELAY_CHUNK_SIZE)
  508. for {
  509. _, err := io.ReadFull(clientConn, buffer)
  510. if err != nil {
  511. fmt.Printf("testTCPServer.run(): io.ReadFull failed: %s\n", err)
  512. return
  513. }
  514. _, err = clientConn.Write(buffer)
  515. if err != nil {
  516. fmt.Printf("testTCPServer.run(): clientConn.Write failed: %s\n", err)
  517. return
  518. }
  519. }
  520. }()
  521. }
  522. }
  523. func (server *testTCPServer) stop() {
  524. server.clientConns.CloseAll()
  525. server.tcpListener.Close()
  526. server.workers.Wait()
  527. }
  528. type testTCPClient struct {
  529. conn net.Conn
  530. }
  531. func startTestTCPClient(
  532. tunDeviceName, serverIPAddress string) (*testTCPClient, error) {
  533. // This is a simplified version of the low-level TCP dial
  534. // code in psiphon/TCPConn, which supports BindToDevice.
  535. // It does not resolve domain names and does not have an
  536. // explicit timeout.
  537. var ipv4 [4]byte
  538. var ipv6 [16]byte
  539. var domain int
  540. var sockAddr syscall.Sockaddr
  541. ipAddr := net.ParseIP(serverIPAddress)
  542. if ipAddr == nil {
  543. return nil, fmt.Errorf("net.ParseIP failed")
  544. }
  545. if ipAddr.To4() != nil {
  546. copy(ipv4[:], ipAddr.To4())
  547. domain = syscall.AF_INET
  548. sockAddr = &syscall.SockaddrInet4{Addr: ipv4, Port: TCP_PORT}
  549. } else {
  550. copy(ipv6[:], ipAddr.To16())
  551. domain = syscall.AF_INET6
  552. sockAddr = &syscall.SockaddrInet6{Addr: ipv6, Port: TCP_PORT}
  553. }
  554. socketFd, err := syscall.Socket(domain, syscall.SOCK_STREAM, 0)
  555. if err != nil {
  556. return nil, fmt.Errorf("syscall.Socket failed: %s", err)
  557. }
  558. err = BindToDevice(socketFd, tunDeviceName)
  559. if err != nil {
  560. syscall.Close(socketFd)
  561. return nil, fmt.Errorf("BindToDevice failed: %s", err)
  562. }
  563. err = syscall.Connect(socketFd, sockAddr)
  564. if err != nil {
  565. syscall.Close(socketFd)
  566. return nil, fmt.Errorf("syscall.Connect failed: %s", err)
  567. }
  568. file := os.NewFile(uintptr(socketFd), "")
  569. conn, err := net.FileConn(file)
  570. file.Close()
  571. if err != nil {
  572. return nil, fmt.Errorf("net.FileConn failed: %s", err)
  573. }
  574. return &testTCPClient{
  575. conn: conn,
  576. }, nil
  577. }
  578. func (client *testTCPClient) Read(p []byte) (n int, err error) {
  579. n, err = client.conn.Read(p)
  580. return
  581. }
  582. func (client *testTCPClient) Write(p []byte) (n int, err error) {
  583. n, err = client.conn.Write(p)
  584. return
  585. }
  586. func (client *testTCPClient) stop() {
  587. client.conn.Close()
  588. }
  589. func testDNSClient(useIPv6 bool, tunDeviceName string) error {
  590. var ipv4 [4]byte
  591. var ipv6 [16]byte
  592. var domain int
  593. var sockAddr syscall.Sockaddr
  594. if !useIPv6 {
  595. copy(ipv4[:], net.ParseIP(clientTransparentDNSIPv4Address).To4())
  596. domain = syscall.AF_INET
  597. sockAddr = &syscall.SockaddrInet4{Addr: ipv4, Port: portNumberDNS}
  598. } else {
  599. copy(ipv6[:], net.ParseIP(clientTransparentDNSIPv6Address))
  600. domain = syscall.AF_INET6
  601. sockAddr = &syscall.SockaddrInet6{Addr: ipv6, Port: portNumberDNS}
  602. }
  603. socketFd, err := syscall.Socket(domain, syscall.SOCK_DGRAM, 0)
  604. if err != nil {
  605. return err
  606. }
  607. err = BindToDevice(socketFd, tunDeviceName)
  608. if err != nil {
  609. syscall.Close(socketFd)
  610. return err
  611. }
  612. err = syscall.Connect(socketFd, sockAddr)
  613. if err != nil {
  614. syscall.Close(socketFd)
  615. return err
  616. }
  617. file := os.NewFile(uintptr(socketFd), "")
  618. conn, err := net.FileConn(file)
  619. file.Close()
  620. if err != nil {
  621. return err
  622. }
  623. defer conn.Close()
  624. dnsConn := &dns.Conn{Conn: conn}
  625. defer dnsConn.Close()
  626. query := new(dns.Msg)
  627. query.SetQuestion(dns.Fqdn("www.example.org"), dns.TypeA)
  628. query.RecursionDesired = true
  629. dnsConn.WriteMsg(query)
  630. _, err = dnsConn.ReadMsg()
  631. if err != nil {
  632. return err
  633. }
  634. return nil
  635. }
  636. type testLogger struct {
  637. packetMetrics chan common.LogFields
  638. }
  639. func newTestLogger(wantLastPacketMetrics bool) *testLogger {
  640. var packetMetrics chan common.LogFields
  641. if wantLastPacketMetrics {
  642. packetMetrics = make(chan common.LogFields, CONCURRENT_CLIENT_COUNT)
  643. }
  644. return &testLogger{
  645. packetMetrics: packetMetrics,
  646. }
  647. }
  648. func (logger *testLogger) WithTrace() common.LogTrace {
  649. return &testLoggerTrace{trace: stacktrace.GetParentFunctionName()}
  650. }
  651. func (logger *testLogger) WithTraceFields(fields common.LogFields) common.LogTrace {
  652. return &testLoggerTrace{
  653. trace: stacktrace.GetParentFunctionName(),
  654. fields: fields,
  655. }
  656. }
  657. func (logger *testLogger) LogMetric(metric string, fields common.LogFields) {
  658. fmt.Printf("METRIC: %s: %+v\n", metric, fields)
  659. if metric == "server_packet_metrics" && logger.packetMetrics != nil {
  660. select {
  661. case logger.packetMetrics <- fields:
  662. default:
  663. }
  664. }
  665. }
  666. func (logger *testLogger) getLastPacketMetrics() common.LogFields {
  667. if logger.packetMetrics == nil {
  668. return nil
  669. }
  670. // Implicitly asserts that packet metrics will be emitted
  671. // within PACKET_METRICS_TIMEOUT; if not, the test will fail.
  672. select {
  673. case fields := <-logger.packetMetrics:
  674. return fields
  675. case <-time.After(PACKET_METRICS_TIMEOUT):
  676. return nil
  677. }
  678. }
  679. type testLoggerTrace struct {
  680. trace string
  681. fields common.LogFields
  682. }
  683. func (logger *testLoggerTrace) log(priority, message string) {
  684. now := time.Now().UTC().Format(time.RFC3339)
  685. if len(logger.fields) == 0 {
  686. fmt.Printf(
  687. "[%s] %s: %s: %s\n",
  688. now, priority, logger.trace, message)
  689. } else {
  690. fmt.Printf(
  691. "[%s] %s: %s: %s %+v\n",
  692. now, priority, logger.trace, message, logger.fields)
  693. }
  694. }
  695. func (logger *testLoggerTrace) Debug(args ...interface{}) {
  696. logger.log("DEBUG", fmt.Sprint(args...))
  697. }
  698. func (logger *testLoggerTrace) Info(args ...interface{}) {
  699. logger.log("INFO", fmt.Sprint(args...))
  700. }
  701. func (logger *testLoggerTrace) Warning(args ...interface{}) {
  702. logger.log("WARNING", fmt.Sprint(args...))
  703. }
  704. func (logger *testLoggerTrace) Error(args ...interface{}) {
  705. logger.log("ERROR", fmt.Sprint(args...))
  706. }