131 lines
2.8 KiB
Go
131 lines
2.8 KiB
Go
package overlay
|
|
|
|
import (
|
|
"fmt"
|
|
"io"
|
|
"net"
|
|
"os/exec"
|
|
"strconv"
|
|
|
|
"github.com/slackhq/nebula/cidr"
|
|
"github.com/slackhq/nebula/iputil"
|
|
"github.com/songgao/water"
|
|
)
|
|
|
|
type waterTun struct {
|
|
Device string
|
|
Cidr *net.IPNet
|
|
MTU int
|
|
Routes []Route
|
|
cidrTree *cidr.Tree4
|
|
|
|
*water.Interface
|
|
}
|
|
|
|
func newWaterTun(cidr *net.IPNet, defaultMTU int, routes []Route) (*waterTun, error) {
|
|
cidrTree, err := makeCidrTree(routes, false)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// NOTE: You cannot set the deviceName under Windows, so you must check tun.Device after calling .Activate()
|
|
return &waterTun{
|
|
Cidr: cidr,
|
|
MTU: defaultMTU,
|
|
Routes: routes,
|
|
cidrTree: cidrTree,
|
|
}, nil
|
|
}
|
|
|
|
func (t *waterTun) Activate() error {
|
|
var err error
|
|
t.Interface, err = water.New(water.Config{
|
|
DeviceType: water.TUN,
|
|
PlatformSpecificParams: water.PlatformSpecificParams{
|
|
ComponentID: "tap0901",
|
|
Network: t.Cidr.String(),
|
|
},
|
|
})
|
|
if err != nil {
|
|
return fmt.Errorf("activate failed: %v", err)
|
|
}
|
|
|
|
t.Device = t.Interface.Name()
|
|
|
|
// TODO use syscalls instead of exec.Command
|
|
err = exec.Command(
|
|
`C:\Windows\System32\netsh.exe`, "interface", "ipv4", "set", "address",
|
|
fmt.Sprintf("name=%s", t.Device),
|
|
"source=static",
|
|
fmt.Sprintf("addr=%s", t.Cidr.IP),
|
|
fmt.Sprintf("mask=%s", net.IP(t.Cidr.Mask)),
|
|
"gateway=none",
|
|
).Run()
|
|
if err != nil {
|
|
return fmt.Errorf("failed to run 'netsh' to set address: %s", err)
|
|
}
|
|
err = exec.Command(
|
|
`C:\Windows\System32\netsh.exe`, "interface", "ipv4", "set", "interface",
|
|
t.Device,
|
|
fmt.Sprintf("mtu=%d", t.MTU),
|
|
).Run()
|
|
if err != nil {
|
|
return fmt.Errorf("failed to run 'netsh' to set MTU: %s", err)
|
|
}
|
|
|
|
iface, err := net.InterfaceByName(t.Device)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to find interface named %s: %v", t.Device, err)
|
|
}
|
|
|
|
for _, r := range t.Routes {
|
|
if r.Via == nil {
|
|
// We don't allow route MTUs so only install routes with a via
|
|
continue
|
|
}
|
|
|
|
err = exec.Command(
|
|
"C:\\Windows\\System32\\route.exe", "add", r.Cidr.String(), r.Via.String(), "IF", strconv.Itoa(iface.Index), "METRIC", strconv.Itoa(r.Metric),
|
|
).Run()
|
|
if err != nil {
|
|
return fmt.Errorf("failed to add the unsafe_route %s: %v", r.Cidr.String(), err)
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (t *waterTun) RouteFor(ip iputil.VpnIp) iputil.VpnIp {
|
|
r := t.cidrTree.MostSpecificContains(ip)
|
|
if r != nil {
|
|
return r.(iputil.VpnIp)
|
|
}
|
|
|
|
return 0
|
|
}
|
|
|
|
func (t *waterTun) CidrNet() *net.IPNet {
|
|
return t.Cidr
|
|
}
|
|
|
|
func (t *waterTun) DeviceName() string {
|
|
return t.Device
|
|
}
|
|
|
|
func (t *waterTun) WriteRaw(b []byte) error {
|
|
_, err := t.Write(b)
|
|
return err
|
|
}
|
|
|
|
func (t *waterTun) Close() error {
|
|
if t.Interface == nil {
|
|
return nil
|
|
}
|
|
|
|
return t.Interface.Close()
|
|
}
|
|
|
|
func (t *waterTun) NewMultiQueueReader() (io.ReadWriteCloser, error) {
|
|
return nil, fmt.Errorf("TODO: multiqueue not implemented for windows")
|
|
}
|