src/tethering.c

   1 /*
   2  *
   3  *  Connection Manager
   4  *
   5  *  Copyright (C) 2007-2010  Intel Corporation. All rights reserved.
   6  *  Copyright (C) 2011  ProFUSION embedded systems
   7  *
   8  *  This program is free software; you can redistribute it and/or modify
   9  *  it under the terms of the GNU General Public License version 2 as
  10  *  published by the Free Software Foundation.
  11  *
  12  *  This program is distributed in the hope that it will be useful,
  13  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  *  GNU General Public License for more details.
  16  *
  17  *  You should have received a copy of the GNU General Public License
  18  *  along with this program; if not, write to the Free Software
  19  *  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
  20  *
  21  */
  22
  23 #ifdef HAVE_CONFIG_H
  24 #include <config.h>
  25 #endif
  26
  27 #include <sys/types.h>
  28 #include <sys/stat.h>
  29 #include <unistd.h>
  30 #include <stdio.h>
  31 #include <sys/ioctl.h>
  32 #include <net/if.h>
  33 #include <linux/sockios.h>
  34 #include <string.h>
  35 #include <fcntl.h>
  36 #include <linux/if_tun.h>
  37
  38 #include "connman.h"
  39
  40 #include <gdhcp/gdhcp.h>
  41
  42 #include <gdbus.h>
  43
  44 #define BRIDGE_PROC_DIR "/proc/sys/net/bridge"
  45
  46 #define BRIDGE_NAME "tether"
  47 #define BRIDGE_IP "192.168.218.1"
  48 #define BRIDGE_BCAST "192.168.218.255"
  49 #define BRIDGE_SUBNET "255.255.255.0"
  50 #define BRIDGE_IP_START "192.168.218.100"
  51 #define BRIDGE_IP_END "192.168.218.200"
  52 #define BRIDGE_DNS "8.8.8.8"
  53
  54 #define DEFAULT_MTU     1500
  55
  56 #define PRIVATE_NETWORK_IP "192.168.219.1"
  57 #define PRIVATE_NETWORK_PEER_IP "192.168.219.2"
  58 #define PRIVATE_NETWORK_NETMASK "255.255.255.0"
  59 #define PRIVATE_NETWORK_PRIMARY_DNS BRIDGE_DNS
  60 #define PRIVATE_NETWORK_SECONDARY_DNS "8.8.4.4"
  61
  62 static char *default_interface = NULL;
  63 static volatile gint tethering_enabled;
  64 static GDHCPServer *tethering_dhcp_server = NULL;
  65 static DBusConnection *connection;
  66 static GHashTable *pn_hash;
  67
  68 struct connman_private_network {
  69         char *owner;
  70         guint watch;
  71         DBusMessage *msg;
  72         DBusMessage *reply;
  73         int fd;
  74         char *interface;
  75         int index;
  76         guint iface_watch;
  77         const char *server_ip;
  78         const char *peer_ip;
  79         const char *primary_dns;
  80         const char *secondary_dns;
  81 };
  82
  83 const char *__connman_tethering_get_bridge(void)
  84 {
  85         struct stat st;
  86
  87         if (stat(BRIDGE_PROC_DIR, &st) < 0) {
  88                 connman_error("Missing support for 802.1d ethernet bridging");
  89                 return NULL;
  90         }
  91
  92         return BRIDGE_NAME;
  93 }
  94
  95 static void dhcp_server_debug(const char *str, void *data)
  96 {
  97         connman_info("%s: %s\n", (const char *) data, str);
  98 }
  99
 100 static void dhcp_server_error(GDHCPServerError error)
 101 {
 102         switch (error) {
 103         case G_DHCP_SERVER_ERROR_NONE:
 104                 connman_error("OK");
 105                 break;
 106         case G_DHCP_SERVER_ERROR_INTERFACE_UNAVAILABLE:
 107                 connman_error("Interface unavailable");
 108                 break;
 109         case G_DHCP_SERVER_ERROR_INTERFACE_IN_USE:
 110                 connman_error("Interface in use");
 111                 break;
 112         case G_DHCP_SERVER_ERROR_INTERFACE_DOWN:
 113                 connman_error("Interface down");
 114                 break;
 115         case G_DHCP_SERVER_ERROR_NOMEM:
 116                 connman_error("No memory");
 117                 break;
 118         case G_DHCP_SERVER_ERROR_INVALID_INDEX:
 119                 connman_error("Invalid index");
 120                 break;
 121         case G_DHCP_SERVER_ERROR_INVALID_OPTION:
 122                 connman_error("Invalid option");
 123                 break;
 124         case G_DHCP_SERVER_ERROR_IP_ADDRESS_INVALID:
 125                 connman_error("Invalid address");
 126                 break;
 127         }
 128 }
 129
 130 static GDHCPServer *dhcp_server_start(const char *bridge,
 131                                 const char *router, const char* subnet,
 132                                 const char *start_ip, const char *end_ip,
 133                                 unsigned int lease_time, const char *dns)
 134 {
 135         GDHCPServerError error;
 136         GDHCPServer *dhcp_server;
 137         int index;
 138
 139         DBG("");
 140
 141         index = connman_inet_ifindex(bridge);
 142         if (index < 0)
 143                 return NULL;
 144
 145         dhcp_server = g_dhcp_server_new(G_DHCP_IPV4, index, &error);
 146         if (dhcp_server == NULL) {
 147                 dhcp_server_error(error);
 148                 return NULL;
 149         }
 150
 151         g_dhcp_server_set_debug(dhcp_server, dhcp_server_debug, "DHCP server");
 152
 153         g_dhcp_server_set_lease_time(dhcp_server, lease_time);
 154         g_dhcp_server_set_option(dhcp_server, G_DHCP_SUBNET, subnet);
 155         g_dhcp_server_set_option(dhcp_server, G_DHCP_ROUTER, router);
 156         g_dhcp_server_set_option(dhcp_server, G_DHCP_DNS_SERVER, dns);
 157         g_dhcp_server_set_ip_range(dhcp_server, start_ip, end_ip);
 158
 159         g_dhcp_server_start(dhcp_server);
 160
 161         return dhcp_server;
 162 }
 163
 164 static void dhcp_server_stop(GDHCPServer *server)
 165 {
 166         if (server == NULL)
 167                 return;
 168
 169         g_dhcp_server_unref(server);
 170 }
 171
 172 static int set_forward_delay(const char *name, unsigned int delay)
 173 {
 174         FILE *f;
 175         char *forward_delay_path;
 176
 177         forward_delay_path =
 178                 g_strdup_printf("/sys/class/net/%s/bridge/forward_delay", name);
 179
 180         if (forward_delay_path == NULL)
 181                 return -ENOMEM;
 182
 183         f = fopen(forward_delay_path, "r+");
 184
 185         g_free(forward_delay_path);
 186
 187         if (f == NULL)
 188                 return -errno;
 189
 190         fprintf(f, "%d", delay);
 191
 192         fclose(f);
 193
 194         return 0;
 195 }
 196
 197 static int create_bridge(const char *name)
 198 {
 199         int sk, err;
 200
 201         DBG("name %s", name);
 202
 203         sk = socket(AF_INET, SOCK_STREAM, 0);
 204         if (sk < 0)
 205                 return -EOPNOTSUPP;
 206
 207         err = ioctl(sk, SIOCBRADDBR, name);
 208
 209         if (err < 0)
 210                 return -EOPNOTSUPP;
 211
 212         err = set_forward_delay(name, 0);
 213
 214         if (err < 0)
 215                 ioctl(sk, SIOCBRDELBR, name);
 216
 217         close(sk);
 218
 219         return err;
 220 }
 221
 222 static int remove_bridge(const char *name)
 223 {
 224         int sk, err;
 225
 226         DBG("name %s", name);
 227
 228         sk = socket(AF_INET, SOCK_STREAM, 0);
 229         if (sk < 0)
 230                 return -EOPNOTSUPP;
 231
 232         err = ioctl(sk, SIOCBRDELBR, name);
 233
 234         close(sk);
 235
 236         if (err < 0)
 237                 return -EOPNOTSUPP;
 238
 239         return 0;
 240 }
 241
 242 static int enable_bridge(const char *name)
 243 {
 244         int err, index;
 245
 246         index = connman_inet_ifindex(name);
 247         if (index < 0)
 248                 return index;
 249
 250         err = __connman_inet_modify_address(RTM_NEWADDR,
 251                         NLM_F_REPLACE | NLM_F_ACK, index, AF_INET,
 252                                         BRIDGE_IP, NULL, 24, BRIDGE_BCAST);
 253         if (err < 0)
 254                 return err;
 255
 256         return connman_inet_ifup(index);
 257 }
 258
 259 static int disable_bridge(const char *name)
 260 {
 261         int index;
 262
 263         index = connman_inet_ifindex(name);
 264         if (index < 0)
 265                 return index;
 266
 267         return connman_inet_ifdown(index);
 268 }
 269
 270 static int enable_ip_forward(connman_bool_t enable)
 271 {
 272
 273         FILE *f;
 274
 275         f = fopen("/proc/sys/net/ipv4/ip_forward", "r+");
 276         if (f == NULL)
 277                 return -errno;
 278
 279         if (enable == TRUE)
 280                 fprintf(f, "1");
 281         else
 282                 fprintf(f, "0");
 283
 284         fclose(f);
 285
 286         return 0;
 287 }
 288
 289 static int enable_nat(const char *interface)
 290 {
 291         int err;
 292
 293         if (interface == NULL)
 294                 return 0;
 295
 296         /* Enable IPv4 forwarding */
 297         err = enable_ip_forward(TRUE);
 298         if (err < 0)
 299                 return err;
 300
 301         /* POSTROUTING flush */
 302         err = __connman_iptables_command("-t nat -F POSTROUTING");
 303         if (err < 0)
 304                 return err;
 305
 306         /* Enable masquerading */
 307         err = __connman_iptables_command("-t nat -A POSTROUTING "
 308                                         "-o %s -j MASQUERADE", interface);
 309         if (err < 0)
 310                 return err;
 311
 312         return __connman_iptables_commit("nat");
 313 }
 314
 315 static void disable_nat(const char *interface)
 316 {
 317         int err;
 318
 319         /* Disable IPv4 forwarding */
 320         enable_ip_forward(FALSE);
 321
 322         /* POSTROUTING flush */
 323         err = __connman_iptables_command("-t nat -F POSTROUTING");
 324         if (err < 0)
 325                 return;
 326
 327         __connman_iptables_commit("nat");
 328 }
 329
 330 void __connman_tethering_set_enabled(void)
 331 {
 332         int err;
 333
 334         DBG("enabled %d", tethering_enabled + 1);
 335
 336         if (g_atomic_int_exchange_and_add(&tethering_enabled, 1) == 0) {
 337                 err = create_bridge(BRIDGE_NAME);
 338                 if (err < 0)
 339                         return;
 340
 341                 err = enable_bridge(BRIDGE_NAME);
 342                 if (err < 0) {
 343                         remove_bridge(BRIDGE_NAME);
 344                         return;
 345                 }
 346
 347                 tethering_dhcp_server =
 348                         dhcp_server_start(BRIDGE_NAME,
 349                                                 BRIDGE_IP, BRIDGE_SUBNET,
 350                                                 BRIDGE_IP_START, BRIDGE_IP_END,
 351                                                         24 * 3600, BRIDGE_DNS);
 352                 if (tethering_dhcp_server == NULL) {
 353                         disable_bridge(BRIDGE_NAME);
 354                         remove_bridge(BRIDGE_NAME);
 355                         return;
 356                 }
 357
 358                 enable_nat(default_interface);
 359
 360                 DBG("tethering started");
 361         }
 362 }
 363
 364 void __connman_tethering_set_disabled(void)
 365 {
 366         DBG("enabled %d", tethering_enabled - 1);
 367
 368         if (g_atomic_int_dec_and_test(&tethering_enabled) == TRUE) {
 369                 disable_nat(default_interface);
 370
 371                 dhcp_server_stop(tethering_dhcp_server);
 372
 373                 disable_bridge(BRIDGE_NAME);
 374
 375                 remove_bridge(BRIDGE_NAME);
 376
 377                 DBG("tethering stopped");
 378         }
 379 }
 380
 381 void __connman_tethering_update_interface(const char *interface)
 382 {
 383         DBG("interface %s", interface);
 384
 385         g_free(default_interface);
 386
 387         if (interface == NULL) {
 388                 disable_nat(interface);
 389                 default_interface = NULL;
 390
 391                 return;
 392         }
 393
 394         default_interface = g_strdup(interface);
 395
 396         if (!g_atomic_int_get(&tethering_enabled))
 397                 return;
 398
 399         enable_nat(interface);
 400 }
 401
 402 static void setup_tun_interface(unsigned int flags, unsigned change,
 403                 void *data)
 404 {
 405         struct connman_private_network *pn = data;
 406         unsigned char prefixlen;
 407         DBusMessage *reply;
 408         DBusMessageIter array, dict;
 409         int err;
 410
 411         DBG("index %d flags %d change %d", pn->index,  flags, change);
 412
 413         if (flags & IFF_UP)
 414                 return;
 415
 416         prefixlen =
 417                 __connman_ipconfig_netmask_prefix_len(PRIVATE_NETWORK_NETMASK);
 418
 419         if ((__connman_inet_modify_address(RTM_NEWADDR,
 420                                 NLM_F_REPLACE | NLM_F_ACK, pn->index, AF_INET,
 421                                 pn->server_ip, pn->peer_ip,
 422                                 prefixlen, NULL)) < 0) {
 423                 DBG("address setting failed");
 424                 return;
 425         }
 426
 427         connman_inet_ifup(pn->index);
 428
 429         err = enable_nat(default_interface);
 430         if (err < 0) {
 431                 connman_error("failed to enable NAT on %s", default_interface);
 432                 goto error;
 433         }
 434
 435         reply = dbus_message_new_method_return(pn->msg);
 436
 437         if (reply == NULL)
 438                 goto error;
 439
 440         dbus_message_iter_init_append(reply, &array);
 441
 442         dbus_message_iter_append_basic(&array, DBUS_TYPE_UNIX_FD, &pn->fd);
 443
 444         connman_dbus_dict_open(&array, &dict);
 445
 446         connman_dbus_dict_append_basic(&dict, "ServerIPv4",
 447                                                 DBUS_TYPE_STRING, &pn->server_ip);
 448         connman_dbus_dict_append_basic(&dict, "PeerIPv4",
 449                                                 DBUS_TYPE_STRING, &pn->peer_ip);
 450         connman_dbus_dict_append_basic(&dict, "PrimaryDNS",
 451                                                 DBUS_TYPE_STRING, &pn->primary_dns);
 452         connman_dbus_dict_append_basic(&dict, "SecondaryDNS",
 453                                                 DBUS_TYPE_STRING, &pn->secondary_dns);
 454
 455         connman_dbus_dict_close(&array, &dict);
 456
 457         g_dbus_send_message(connection, reply);
 458
 459         return;
 460
 461 error:
 462         reply = __connman_error_failed(pn->msg, -err);
 463         g_dbus_send_message(connection, reply);
 464
 465         g_hash_table_remove(pn_hash, pn->owner);
 466 }
 467
 468 static void remove_private_network(gpointer user_data)
 469 {
 470         struct connman_private_network *pn = user_data;
 471
 472         close(pn->fd);
 473
 474         connman_rtnl_remove_watch(pn->iface_watch);
 475
 476         disable_nat(default_interface);
 477
 478         if (pn->watch > 0) {
 479                 g_dbus_remove_watch(connection, pn->watch);
 480                 pn->watch = 0;
 481         }
 482
 483         g_free(pn->interface);
 484         g_free(pn->owner);
 485         g_free(pn);
 486 }
 487
 488 static void owner_disconnect(DBusConnection *connection, void *user_data)
 489 {
 490         struct connman_private_network *pn = user_data;
 491
 492         DBG("%s died", pn->owner);
 493
 494         pn->watch = 0;
 495
 496         g_hash_table_remove(pn_hash, pn->owner);
 497 }
 498
 499 int __connman_private_network_request(DBusMessage *msg, const char *owner)
 500 {
 501         struct connman_private_network *pn;
 502         char *iface = NULL;
 503         int index, fd, err;
 504
 505         pn = g_hash_table_lookup(pn_hash, owner);
 506         if (pn != NULL)
 507                 return -EEXIST;
 508
 509         fd = connman_inet_create_tunnel(&iface);
 510         if (fd < 0)
 511                 return fd;
 512
 513         index = connman_inet_ifindex(iface);
 514         if (index < 0) {
 515                 err = -ENODEV;
 516                 goto error;
 517         }
 518         DBG("inteface %s", iface);
 519
 520         err = connman_inet_set_mtu(index, DEFAULT_MTU);
 521
 522         pn = g_try_new0(struct connman_private_network, 1);
 523         if (pn == NULL) {
 524                 err = -ENOMEM;
 525                 goto error;
 526         }
 527
 528         pn->owner = g_strdup(owner);
 529         pn->watch = g_dbus_add_disconnect_watch(connection, pn->owner,
 530                                         owner_disconnect, pn, NULL);
 531         pn->msg = msg;
 532         pn->fd = fd;
 533         pn->interface = iface;
 534         pn->index = index;
 535         pn->server_ip = PRIVATE_NETWORK_IP;
 536         pn->peer_ip = PRIVATE_NETWORK_PEER_IP;
 537         pn->primary_dns = PRIVATE_NETWORK_PRIMARY_DNS;
 538         pn->secondary_dns = PRIVATE_NETWORK_SECONDARY_DNS;
 539
 540         pn->iface_watch = connman_rtnl_add_newlink_watch(index,
 541                                                 setup_tun_interface, pn);
 542
 543         g_hash_table_insert(pn_hash, pn->owner, pn);
 544
 545         return 0;
 546
 547 error:
 548         close(fd);
 549         g_free(iface);
 550         return err;
 551 }
 552
 553 int __connman_private_network_release(const char *owner)
 554 {
 555         struct connman_private_network *pn;
 556
 557         pn = g_hash_table_lookup(pn_hash, owner);
 558         if (pn == NULL)
 559                 return -EACCES;
 560
 561         g_hash_table_remove(pn_hash, owner);
 562         return 0;
 563 }
 564
 565 int __connman_tethering_init(void)
 566 {
 567         DBG("");
 568
 569         tethering_enabled = 0;
 570
 571         connection = connman_dbus_get_connection();
 572         if (connection == NULL)
 573                 return -EFAULT;
 574
 575         pn_hash = g_hash_table_new_full(g_str_hash, g_str_equal,
 576                                                 NULL, remove_private_network);
 577
 578         return 0;
 579 }
 580
 581 void __connman_tethering_cleanup(void)
 582 {
 583         DBG("");
 584
 585         if (g_atomic_int_get(&tethering_enabled)) {
 586                 if (tethering_dhcp_server)
 587                         dhcp_server_stop(tethering_dhcp_server);
 588                 disable_bridge(BRIDGE_NAME);
 589                 remove_bridge(BRIDGE_NAME);
 590         }
 591
 592         if (connection == NULL)
 593                 return;
 594
 595         g_hash_table_destroy(pn_hash);
 596         dbus_connection_unref(connection);
 597 }