1
0

tun_android.go 2.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102
  1. //go:build !e2e_testing
  2. // +build !e2e_testing
  3. package overlay
  4. import (
  5. "fmt"
  6. "io"
  7. "log/slog"
  8. "net/netip"
  9. "os"
  10. "sync/atomic"
  11. "github.com/gaissmai/bart"
  12. "github.com/slackhq/nebula/config"
  13. "github.com/slackhq/nebula/overlay/tio"
  14. "github.com/slackhq/nebula/routing"
  15. "github.com/slackhq/nebula/util"
  16. )
  17. type tun struct {
  18. io.ReadWriteCloser
  19. fd int
  20. vpnNetworks []netip.Prefix
  21. Routes atomic.Pointer[[]Route]
  22. routeTree atomic.Pointer[bart.Table[routing.Gateways]]
  23. l *slog.Logger
  24. }
  25. func newTunFromFd(c *config.C, l *slog.Logger, deviceFd int, vpnNetworks []netip.Prefix) (*tun, error) {
  26. // XXX Android returns an fd in non-blocking mode which is necessary for shutdown to work properly.
  27. // Be sure not to call file.Fd() as it will set the fd to blocking mode.
  28. file := os.NewFile(uintptr(deviceFd), "/dev/net/tun")
  29. t := &tun{
  30. ReadWriteCloser: file,
  31. fd: deviceFd,
  32. vpnNetworks: vpnNetworks,
  33. l: l,
  34. }
  35. err := t.reload(c, true)
  36. if err != nil {
  37. _ = file.Close()
  38. return nil, err
  39. }
  40. c.RegisterReloadCallback(func(c *config.C) {
  41. err := t.reload(c, false)
  42. if err != nil {
  43. util.LogWithContextIfNeeded("failed to reload tun device", err, t.l)
  44. }
  45. })
  46. return t, nil
  47. }
  48. func newTun(_ *config.C, _ *slog.Logger, _ []netip.Prefix, _ bool) (*tun, error) {
  49. return nil, fmt.Errorf("newTun not supported in Android")
  50. }
  51. func (t *tun) RoutesFor(ip netip.Addr) routing.Gateways {
  52. r, _ := t.routeTree.Load().Lookup(ip)
  53. return r
  54. }
  55. func (t *tun) Activate() error {
  56. return nil
  57. }
  58. func (t *tun) reload(c *config.C, initial bool) error {
  59. change, routes, err := getAllRoutesFromConfig(c, t.vpnNetworks, initial)
  60. if err != nil {
  61. return err
  62. }
  63. if !initial && !change {
  64. return nil
  65. }
  66. routeTree, err := makeRouteTree(t.l, routes, false)
  67. if err != nil {
  68. return err
  69. }
  70. // Teach nebula how to handle the routes
  71. t.Routes.Store(&routes)
  72. t.routeTree.Store(routeTree)
  73. return nil
  74. }
  75. func (t *tun) Networks() []netip.Prefix {
  76. return t.vpnNetworks
  77. }
  78. func (t *tun) Name() string {
  79. return "android"
  80. }
  81. func (t *tun) Queues(int) ([]tio.Queue, error) {
  82. return []tio.Queue{tio.NewSingleQueue(t, defaultBatchBufSize)}, nil
  83. }