wesher/wg/wireguard.go

157 lines
4.1 KiB
Go
Raw Normal View History

package wg
2019-03-25 01:02:10 +01:00
import (
"hash/fnv"
2019-03-25 01:02:10 +01:00
"net"
"os"
"github.com/costela/wesher/common"
"github.com/pkg/errors"
"github.com/vishvananda/netlink"
"golang.zx2c4.com/wireguard/wgctrl"
"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
)
2019-03-25 01:02:10 +01:00
// State holds the configured state of a Wesher Wireguard interface
type State struct {
2019-03-25 01:02:10 +01:00
iface string
client *wgctrl.Client
OverlayAddr net.IPNet
2019-03-25 01:02:10 +01:00
Port int
PrivKey wgtypes.Key
PubKey wgtypes.Key
2019-03-25 01:02:10 +01:00
}
// New creates a new Wesher Wireguard state
// The Wireguard keys are generated for every new interface
// The interface must later be setup using SetUpInterface
func New(iface string, port int) (*State, error) {
client, err := wgctrl.New()
if err != nil {
return nil, errors.Wrap(err, "could not instantiate wireguard client")
2019-03-25 01:02:10 +01:00
}
privKey, err := wgtypes.GeneratePrivateKey()
2019-03-25 01:02:10 +01:00
if err != nil {
return nil, err
}
pubKey := privKey.PublicKey()
2019-03-25 01:02:10 +01:00
state := State{
2019-03-25 01:02:10 +01:00
iface: iface,
client: client,
2019-03-25 01:02:10 +01:00
Port: port,
PrivKey: privKey,
PubKey: pubKey,
}
return &state, nil
2019-03-25 01:02:10 +01:00
}
// AssignOverlayAddr assigns a new address to the interface
// The address is assigned inside the provided network and depends on the
// provided name deterministically
// Currently, the address is assigned by hashing the name and mapping that
// hash in the target network space
func (s *State) AssignOverlayAddr(ipnet *net.IPNet, name string) {
2019-03-25 01:02:10 +01:00
// TODO: this is way too brittle and opaque
bits, size := ipnet.Mask.Size()
2019-03-29 22:15:17 +01:00
ip := make([]byte, len(ipnet.IP))
copy(ip, []byte(ipnet.IP))
2019-03-25 01:02:10 +01:00
h := fnv.New128a()
2019-03-25 01:02:10 +01:00
h.Write([]byte(name))
hb := h.Sum(nil)
for i := 1; i <= (size-bits)/8; i++ {
ip[len(ip)-i] = hb[len(hb)-i]
2019-03-25 01:02:10 +01:00
}
s.OverlayAddr = net.IPNet{
IP: net.IP(ip),
Mask: net.CIDRMask(size, size), // either /32 or /128, depending if ipv4 or ipv6
}
2019-03-25 01:02:10 +01:00
}
// DownInterface shuts down the associated network interface
func (s *State) DownInterface() error {
if _, err := s.client.Device(s.iface); err != nil {
if os.IsNotExist(err) {
return nil // device already gone; noop
}
return err
}
link, err := netlink.LinkByName(s.iface)
2019-03-25 01:02:10 +01:00
if err != nil {
return err
}
return netlink.LinkDel(link)
2019-03-25 01:02:10 +01:00
}
// SetUpInterface creates and setup the associated network interface
func (s *State) SetUpInterface(nodes []common.Node) error {
if err := netlink.LinkAdd(&wireguard{LinkAttrs: netlink.LinkAttrs{Name: s.iface}}); err != nil && !os.IsExist(err) {
return errors.Wrapf(err, "could not create interface %s", s.iface)
}
peerCfgs, err := s.nodesToPeerConfigs(nodes)
if err != nil {
return errors.Wrap(err, "error converting received node information to wireguard format")
}
if err := s.client.ConfigureDevice(s.iface, wgtypes.Config{
PrivateKey: &s.PrivKey,
ListenPort: &s.Port,
ReplacePeers: true,
Peers: peerCfgs,
2019-07-29 19:20:25 +02:00
}); err != nil {
return errors.Wrapf(err, "could not set wireguard configuration for %s", s.iface)
2019-07-29 19:20:25 +02:00
}
link, err := netlink.LinkByName(s.iface)
if err != nil {
return errors.Wrapf(err, "could not get link information for %s", s.iface)
}
2019-07-29 19:20:25 +02:00
if err := netlink.AddrReplace(link, &netlink.Addr{
IPNet: &s.OverlayAddr,
2019-07-29 19:20:25 +02:00
}); err != nil {
return errors.Wrapf(err, "could not set address for %s", s.iface)
2019-07-29 19:20:25 +02:00
}
// TODO: make MTU configurable?
if err := netlink.LinkSetMTU(link, 1420); err != nil {
return errors.Wrapf(err, "could not set MTU for %s", s.iface)
2019-07-29 19:20:25 +02:00
}
if err := netlink.LinkSetUp(link); err != nil {
return errors.Wrapf(err, "could not enable interface %s", s.iface)
2019-07-29 19:20:25 +02:00
}
for _, node := range nodes {
netlink.RouteAdd(&netlink.Route{
LinkIndex: link.Attrs().Index,
Dst: &node.OverlayAddr,
Scope: netlink.SCOPE_LINK,
})
2019-03-27 22:48:54 +01:00
}
2019-03-25 01:02:10 +01:00
return nil
2019-03-25 01:02:10 +01:00
}
func (s *State) nodesToPeerConfigs(nodes []common.Node) ([]wgtypes.PeerConfig, error) {
peerCfgs := make([]wgtypes.PeerConfig, len(nodes))
for i, node := range nodes {
pubKey, err := wgtypes.ParseKey(node.PubKey)
if err != nil {
return nil, err
}
peerCfgs[i] = wgtypes.PeerConfig{
PublicKey: pubKey,
ReplaceAllowedIPs: true,
Endpoint: &net.UDPAddr{
IP: node.Addr,
Port: s.Port,
},
AllowedIPs: []net.IPNet{
node.OverlayAddr,
},
}
2019-03-25 01:02:10 +01:00
}
return peerCfgs, nil
}