Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 1 | /* |
Florin Coras | c9940fc | 2019-02-05 20:55:11 -0800 | [diff] [blame] | 2 | * Copyright (c) 2018-2019 Cisco and/or its affiliates. |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 3 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 4 | * you may not use this file except in compliance with the License. |
| 5 | * You may obtain a copy of the License at: |
| 6 | * |
| 7 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 8 | * |
| 9 | * Unless required by applicable law or agreed to in writing, software |
| 10 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 11 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 12 | * See the License for the specific language governing permissions and |
| 13 | * limitations under the License. |
| 14 | */ |
| 15 | |
| 16 | #include <vnet/session/application_interface.h> |
| 17 | #include <vppinfra/lock.h> |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 18 | #include <vnet/tls/tls.h> |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 19 | |
| 20 | static tls_main_t tls_main; |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 21 | static tls_engine_vft_t *tls_vfts; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 22 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 23 | #define TLS_INVALID_HANDLE ~0 |
| 24 | #define TLS_IDX_MASK 0x00FFFFFF |
| 25 | #define TLS_ENGINE_TYPE_SHIFT 29 |
| 26 | |
| 27 | void tls_disconnect (u32 ctx_handle, u32 thread_index); |
| 28 | |
Florin Coras | 06a6a30 | 2019-04-17 14:19:12 -0700 | [diff] [blame] | 29 | void |
Florin Coras | c01d578 | 2018-10-17 14:53:11 -0700 | [diff] [blame] | 30 | tls_disconnect_transport (tls_ctx_t * ctx) |
| 31 | { |
| 32 | vnet_disconnect_args_t a = { |
| 33 | .handle = ctx->tls_session_handle, |
| 34 | .app_index = tls_main.app_index, |
| 35 | }; |
| 36 | |
| 37 | if (vnet_disconnect_session (&a)) |
| 38 | clib_warning ("disconnect returned"); |
| 39 | } |
| 40 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 41 | tls_engine_type_t |
| 42 | tls_get_available_engine (void) |
| 43 | { |
| 44 | int i; |
| 45 | for (i = 0; i < vec_len (tls_vfts); i++) |
| 46 | { |
| 47 | if (tls_vfts[i].ctx_alloc) |
| 48 | return i; |
| 49 | } |
| 50 | return TLS_ENGINE_NONE; |
| 51 | } |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 52 | |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 53 | int |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 54 | tls_add_vpp_q_rx_evt (session_t * s) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 55 | { |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 56 | if (svm_fifo_set_event (s->rx_fifo)) |
Florin Coras | fe97da3 | 2019-03-06 10:09:04 -0800 | [diff] [blame] | 57 | session_send_io_evt_to_thread (s->rx_fifo, SESSION_IO_EVT_RX); |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 58 | return 0; |
| 59 | } |
| 60 | |
| 61 | int |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 62 | tls_add_vpp_q_builtin_rx_evt (session_t * s) |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 63 | { |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 64 | if (svm_fifo_set_event (s->rx_fifo)) |
Florin Coras | fe97da3 | 2019-03-06 10:09:04 -0800 | [diff] [blame] | 65 | session_send_io_evt_to_thread (s->rx_fifo, SESSION_IO_EVT_BUILTIN_RX); |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 66 | return 0; |
| 67 | } |
| 68 | |
| 69 | int |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 70 | tls_add_vpp_q_tx_evt (session_t * s) |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 71 | { |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 72 | if (svm_fifo_set_event (s->tx_fifo)) |
Florin Coras | fe97da3 | 2019-03-06 10:09:04 -0800 | [diff] [blame] | 73 | session_send_io_evt_to_thread (s->tx_fifo, SESSION_IO_EVT_TX); |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 74 | return 0; |
| 75 | } |
| 76 | |
| 77 | int |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 78 | tls_add_vpp_q_builtin_tx_evt (session_t * s) |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 79 | { |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 80 | if (svm_fifo_set_event (s->tx_fifo)) |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 81 | session_send_io_evt_to_thread_custom (s, s->thread_index, |
Florin Coras | fe97da3 | 2019-03-06 10:09:04 -0800 | [diff] [blame] | 82 | SESSION_IO_EVT_BUILTIN_TX); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 83 | return 0; |
| 84 | } |
| 85 | |
| 86 | static inline int |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 87 | tls_add_app_q_evt (app_worker_t * app, session_t * app_session) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 88 | { |
Florin Coras | fe97da3 | 2019-03-06 10:09:04 -0800 | [diff] [blame] | 89 | return app_worker_lock_and_send_event (app, app_session, SESSION_IO_EVT_RX); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 90 | } |
| 91 | |
| 92 | u32 |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 93 | tls_listener_ctx_alloc (void) |
| 94 | { |
| 95 | tls_main_t *tm = &tls_main; |
| 96 | tls_ctx_t *ctx; |
| 97 | |
| 98 | pool_get (tm->listener_ctx_pool, ctx); |
Dave Barach | b7b9299 | 2018-10-17 10:38:51 -0400 | [diff] [blame] | 99 | clib_memset (ctx, 0, sizeof (*ctx)); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 100 | return ctx - tm->listener_ctx_pool; |
| 101 | } |
| 102 | |
| 103 | void |
Florin Coras | e3e2f07 | 2018-03-04 07:24:30 -0800 | [diff] [blame] | 104 | tls_listener_ctx_free (tls_ctx_t * ctx) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 105 | { |
Florin Coras | c01d578 | 2018-10-17 14:53:11 -0700 | [diff] [blame] | 106 | if (CLIB_DEBUG) |
| 107 | memset (ctx, 0xfb, sizeof (*ctx)); |
Florin Coras | e3e2f07 | 2018-03-04 07:24:30 -0800 | [diff] [blame] | 108 | pool_put (tls_main.listener_ctx_pool, ctx); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 109 | } |
| 110 | |
| 111 | tls_ctx_t * |
| 112 | tls_listener_ctx_get (u32 ctx_index) |
| 113 | { |
| 114 | return pool_elt_at_index (tls_main.listener_ctx_pool, ctx_index); |
| 115 | } |
| 116 | |
| 117 | u32 |
| 118 | tls_listener_ctx_index (tls_ctx_t * ctx) |
| 119 | { |
| 120 | return (ctx - tls_main.listener_ctx_pool); |
| 121 | } |
| 122 | |
| 123 | u32 |
| 124 | tls_ctx_half_open_alloc (void) |
| 125 | { |
| 126 | tls_main_t *tm = &tls_main; |
| 127 | u8 will_expand = 0; |
| 128 | tls_ctx_t *ctx; |
| 129 | u32 ctx_index; |
| 130 | |
| 131 | pool_get_aligned_will_expand (tm->half_open_ctx_pool, will_expand, 0); |
| 132 | if (PREDICT_FALSE (will_expand && vlib_num_workers ())) |
| 133 | { |
| 134 | clib_rwlock_writer_lock (&tm->half_open_rwlock); |
| 135 | pool_get (tm->half_open_ctx_pool, ctx); |
Florin Coras | eb97e5f | 2018-10-15 21:35:42 -0700 | [diff] [blame] | 136 | ctx_index = ctx - tm->half_open_ctx_pool; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 137 | clib_rwlock_writer_unlock (&tm->half_open_rwlock); |
| 138 | } |
| 139 | else |
| 140 | { |
Ping Yu | e6446a3 | 2018-08-28 18:56:27 -0400 | [diff] [blame] | 141 | /* reader lock assumption: only main thread will call pool_get */ |
| 142 | clib_rwlock_reader_lock (&tm->half_open_rwlock); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 143 | pool_get (tm->half_open_ctx_pool, ctx); |
Florin Coras | eb97e5f | 2018-10-15 21:35:42 -0700 | [diff] [blame] | 144 | ctx_index = ctx - tm->half_open_ctx_pool; |
Ping Yu | e6446a3 | 2018-08-28 18:56:27 -0400 | [diff] [blame] | 145 | clib_rwlock_reader_unlock (&tm->half_open_rwlock); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 146 | } |
Dave Barach | b7b9299 | 2018-10-17 10:38:51 -0400 | [diff] [blame] | 147 | clib_memset (ctx, 0, sizeof (*ctx)); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 148 | return ctx_index; |
| 149 | } |
| 150 | |
| 151 | void |
| 152 | tls_ctx_half_open_free (u32 ho_index) |
| 153 | { |
| 154 | tls_main_t *tm = &tls_main; |
| 155 | clib_rwlock_writer_lock (&tm->half_open_rwlock); |
| 156 | pool_put_index (tls_main.half_open_ctx_pool, ho_index); |
| 157 | clib_rwlock_writer_unlock (&tm->half_open_rwlock); |
| 158 | } |
| 159 | |
| 160 | tls_ctx_t * |
| 161 | tls_ctx_half_open_get (u32 ctx_index) |
| 162 | { |
| 163 | tls_main_t *tm = &tls_main; |
| 164 | clib_rwlock_reader_lock (&tm->half_open_rwlock); |
| 165 | return pool_elt_at_index (tm->half_open_ctx_pool, ctx_index); |
| 166 | } |
| 167 | |
| 168 | void |
| 169 | tls_ctx_half_open_reader_unlock () |
| 170 | { |
| 171 | clib_rwlock_reader_unlock (&tls_main.half_open_rwlock); |
| 172 | } |
| 173 | |
| 174 | u32 |
| 175 | tls_ctx_half_open_index (tls_ctx_t * ctx) |
| 176 | { |
| 177 | return (ctx - tls_main.half_open_ctx_pool); |
| 178 | } |
| 179 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 180 | void |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 181 | tls_notify_app_enqueue (tls_ctx_t * ctx, session_t * app_session) |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 182 | { |
Florin Coras | bf7ce2c | 2019-03-06 14:44:42 -0800 | [diff] [blame] | 183 | app_worker_t *app_wrk; |
| 184 | app_wrk = app_worker_get_if_valid (app_session->app_wrk_index); |
| 185 | if (PREDICT_TRUE (app_wrk != 0)) |
| 186 | tls_add_app_q_evt (app_wrk, app_session); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 187 | } |
| 188 | |
| 189 | int |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 190 | tls_notify_app_accept (tls_ctx_t * ctx) |
| 191 | { |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 192 | session_t *app_listener, *app_session; |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 193 | app_worker_t *app_wrk; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 194 | tls_ctx_t *lctx; |
| 195 | int rv; |
| 196 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 197 | lctx = tls_listener_ctx_get (ctx->listener_ctx_index); |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 198 | app_listener = listen_session_get_from_handle (lctx->app_session_handle); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 199 | |
Florin Coras | 58a93e8 | 2019-01-14 23:33:46 -0800 | [diff] [blame] | 200 | app_session = session_get (ctx->c_s_index, ctx->c_thread_index); |
Florin Coras | df57ea0 | 2019-02-18 20:14:20 -0800 | [diff] [blame] | 201 | app_session->app_wrk_index = ctx->parent_app_wrk_index; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 202 | app_session->connection_index = ctx->tls_ctx_handle; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 203 | app_session->session_type = app_listener->session_type; |
Nathan Skrzypczak | 2f0f96b | 2019-06-13 10:14:28 +0200 | [diff] [blame] | 204 | app_session->listener_handle = listen_session_get_handle (app_listener); |
Florin Coras | 8a14061 | 2019-02-18 22:39:39 -0800 | [diff] [blame] | 205 | app_session->session_state = SESSION_STATE_ACCEPTING; |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 206 | |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 207 | if ((rv = app_worker_init_accepted (app_session))) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 208 | { |
| 209 | TLS_DBG (1, "failed to allocate fifos"); |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 210 | session_free (app_session); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 211 | return rv; |
| 212 | } |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 213 | ctx->app_session_handle = session_handle (app_session); |
Florin Coras | b5e94e3 | 2018-09-14 14:46:39 -0700 | [diff] [blame] | 214 | session_lookup_add_connection (&ctx->connection, |
| 215 | session_handle (app_session)); |
Florin Coras | df57ea0 | 2019-02-18 20:14:20 -0800 | [diff] [blame] | 216 | ctx->parent_app_wrk_index = app_session->app_wrk_index; |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 217 | app_wrk = app_worker_get (app_session->app_wrk_index); |
| 218 | return app_worker_accept_notify (app_wrk, app_session); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 219 | } |
| 220 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 221 | int |
Florin Coras | 8f89dd0 | 2018-03-05 16:53:07 -0800 | [diff] [blame] | 222 | tls_notify_app_connected (tls_ctx_t * ctx, u8 is_failed) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 223 | { |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 224 | session_t *app_session; |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 225 | app_worker_t *app_wrk; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 226 | |
Florin Coras | df57ea0 | 2019-02-18 20:14:20 -0800 | [diff] [blame] | 227 | app_wrk = app_worker_get_if_valid (ctx->parent_app_wrk_index); |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 228 | if (!app_wrk) |
| 229 | { |
Florin Coras | c01d578 | 2018-10-17 14:53:11 -0700 | [diff] [blame] | 230 | tls_disconnect_transport (ctx); |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 231 | return -1; |
| 232 | } |
| 233 | |
Florin Coras | 8f89dd0 | 2018-03-05 16:53:07 -0800 | [diff] [blame] | 234 | if (is_failed) |
| 235 | goto failed; |
| 236 | |
Florin Coras | 58a93e8 | 2019-01-14 23:33:46 -0800 | [diff] [blame] | 237 | app_session = session_get (ctx->c_s_index, ctx->c_thread_index); |
Florin Coras | df57ea0 | 2019-02-18 20:14:20 -0800 | [diff] [blame] | 238 | app_session->app_wrk_index = ctx->parent_app_wrk_index; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 239 | app_session->connection_index = ctx->tls_ctx_handle; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 240 | app_session->session_type = |
| 241 | session_type_from_proto_and_ip (TRANSPORT_PROTO_TLS, ctx->tcp_is_ip4); |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 242 | |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 243 | if (app_worker_init_connected (app_wrk, app_session)) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 244 | goto failed; |
| 245 | |
Florin Coras | c01d578 | 2018-10-17 14:53:11 -0700 | [diff] [blame] | 246 | app_session->session_state = SESSION_STATE_CONNECTING; |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 247 | if (app_worker_connect_notify (app_wrk, app_session, |
| 248 | ctx->parent_app_api_context)) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 249 | { |
| 250 | TLS_DBG (1, "failed to notify app"); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 251 | tls_disconnect (ctx->tls_ctx_handle, vlib_get_thread_index ()); |
Florin Coras | eb97e5f | 2018-10-15 21:35:42 -0700 | [diff] [blame] | 252 | return -1; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 253 | } |
| 254 | |
Florin Coras | 58a93e8 | 2019-01-14 23:33:46 -0800 | [diff] [blame] | 255 | ctx->app_session_handle = session_handle (app_session); |
Florin Coras | c01d578 | 2018-10-17 14:53:11 -0700 | [diff] [blame] | 256 | app_session->session_state = SESSION_STATE_READY; |
Florin Coras | b5e94e3 | 2018-09-14 14:46:39 -0700 | [diff] [blame] | 257 | session_lookup_add_connection (&ctx->connection, |
| 258 | session_handle (app_session)); |
| 259 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 260 | return 0; |
| 261 | |
| 262 | failed: |
Florin Coras | ef2b335 | 2019-08-07 11:14:56 -0700 | [diff] [blame] | 263 | /* Free app session pre-allocated when transport was established */ |
| 264 | session_free (session_get (ctx->c_s_index, ctx->c_thread_index)); |
| 265 | ctx->no_app_session = 1; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 266 | tls_disconnect (ctx->tls_ctx_handle, vlib_get_thread_index ()); |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 267 | return app_worker_connect_notify (app_wrk, 0, ctx->parent_app_api_context); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 268 | } |
| 269 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 270 | static inline void |
| 271 | tls_ctx_parse_handle (u32 ctx_handle, u32 * ctx_index, u32 * engine_type) |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 272 | { |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 273 | *ctx_index = ctx_handle & TLS_IDX_MASK; |
| 274 | *engine_type = ctx_handle >> TLS_ENGINE_TYPE_SHIFT; |
| 275 | } |
| 276 | |
| 277 | static inline tls_engine_type_t |
| 278 | tls_get_engine_type (tls_engine_type_t preferred) |
| 279 | { |
| 280 | if (!tls_vfts[preferred].ctx_alloc) |
| 281 | return tls_get_available_engine (); |
| 282 | return preferred; |
| 283 | } |
| 284 | |
| 285 | static inline u32 |
| 286 | tls_ctx_alloc (tls_engine_type_t engine_type) |
| 287 | { |
| 288 | u32 ctx_index; |
| 289 | ctx_index = tls_vfts[engine_type].ctx_alloc (); |
| 290 | return (((u32) engine_type << TLS_ENGINE_TYPE_SHIFT) | ctx_index); |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 291 | } |
| 292 | |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 293 | static inline tls_ctx_t * |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 294 | tls_ctx_get (u32 ctx_handle) |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 295 | { |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 296 | u32 ctx_index, engine_type; |
| 297 | tls_ctx_parse_handle (ctx_handle, &ctx_index, &engine_type); |
| 298 | return tls_vfts[engine_type].ctx_get (ctx_index); |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 299 | } |
| 300 | |
| 301 | static inline tls_ctx_t * |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 302 | tls_ctx_get_w_thread (u32 ctx_handle, u8 thread_index) |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 303 | { |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 304 | u32 ctx_index, engine_type; |
| 305 | tls_ctx_parse_handle (ctx_handle, &ctx_index, &engine_type); |
| 306 | return tls_vfts[engine_type].ctx_get_w_thread (ctx_index, thread_index); |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 307 | } |
| 308 | |
| 309 | static inline int |
| 310 | tls_ctx_init_server (tls_ctx_t * ctx) |
| 311 | { |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 312 | return tls_vfts[ctx->tls_ctx_engine].ctx_init_server (ctx); |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 313 | } |
| 314 | |
| 315 | static inline int |
| 316 | tls_ctx_init_client (tls_ctx_t * ctx) |
| 317 | { |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 318 | return tls_vfts[ctx->tls_ctx_engine].ctx_init_client (ctx); |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 319 | } |
| 320 | |
| 321 | static inline int |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 322 | tls_ctx_write (tls_ctx_t * ctx, session_t * app_session) |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 323 | { |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 324 | return tls_vfts[ctx->tls_ctx_engine].ctx_write (ctx, app_session); |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 325 | } |
| 326 | |
| 327 | static inline int |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 328 | tls_ctx_read (tls_ctx_t * ctx, session_t * tls_session) |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 329 | { |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 330 | return tls_vfts[ctx->tls_ctx_engine].ctx_read (ctx, tls_session); |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 331 | } |
| 332 | |
Florin Coras | 06a6a30 | 2019-04-17 14:19:12 -0700 | [diff] [blame] | 333 | static inline int |
| 334 | tls_ctx_transport_close (tls_ctx_t * ctx) |
| 335 | { |
| 336 | return tls_vfts[ctx->tls_ctx_engine].ctx_transport_close (ctx); |
| 337 | } |
| 338 | |
| 339 | static inline int |
| 340 | tls_ctx_app_close (tls_ctx_t * ctx) |
| 341 | { |
| 342 | return tls_vfts[ctx->tls_ctx_engine].ctx_app_close (ctx); |
| 343 | } |
| 344 | |
| 345 | void |
| 346 | tls_ctx_free (tls_ctx_t * ctx) |
| 347 | { |
Florin Coras | 06a6a30 | 2019-04-17 14:19:12 -0700 | [diff] [blame] | 348 | tls_vfts[ctx->tls_ctx_engine].ctx_free (ctx); |
| 349 | } |
| 350 | |
| 351 | u8 |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 352 | tls_ctx_handshake_is_over (tls_ctx_t * ctx) |
| 353 | { |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 354 | return tls_vfts[ctx->tls_ctx_engine].ctx_handshake_is_over (ctx); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 355 | } |
| 356 | |
| 357 | void |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 358 | tls_session_reset_callback (session_t * s) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 359 | { |
Florin Coras | f03c494 | 2019-08-07 21:39:27 -0700 | [diff] [blame] | 360 | tls_ctx_t *ctx; |
| 361 | |
| 362 | ctx = tls_ctx_get (s->opaque); |
| 363 | session_transport_reset_notify (&ctx->connection); |
| 364 | session_transport_closed_notify (&ctx->connection); |
| 365 | tls_disconnect_transport (ctx); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 366 | } |
| 367 | |
| 368 | int |
Florin Coras | fa76a76 | 2018-11-29 12:40:10 -0800 | [diff] [blame] | 369 | tls_add_segment_callback (u32 client_index, u64 segment_handle) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 370 | { |
| 371 | /* No-op for builtin */ |
| 372 | return 0; |
| 373 | } |
| 374 | |
| 375 | int |
Florin Coras | fa76a76 | 2018-11-29 12:40:10 -0800 | [diff] [blame] | 376 | tls_del_segment_callback (u32 client_index, u64 segment_handle) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 377 | { |
| 378 | return 0; |
| 379 | } |
| 380 | |
| 381 | void |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 382 | tls_session_disconnect_callback (session_t * tls_session) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 383 | { |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 384 | tls_ctx_t *ctx; |
Florin Coras | bf7ce2c | 2019-03-06 14:44:42 -0800 | [diff] [blame] | 385 | |
| 386 | TLS_DBG (1, "TCP disconnecting handle %x session %u", tls_session->opaque, |
| 387 | tls_session->session_index); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 388 | |
| 389 | ctx = tls_ctx_get (tls_session->opaque); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 390 | ctx->is_passive_close = 1; |
Florin Coras | 06a6a30 | 2019-04-17 14:19:12 -0700 | [diff] [blame] | 391 | tls_ctx_transport_close (ctx); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 392 | } |
| 393 | |
| 394 | int |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 395 | tls_session_accept_callback (session_t * tls_session) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 396 | { |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 397 | session_t *tls_listener, *app_session; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 398 | tls_ctx_t *lctx, *ctx; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 399 | u32 ctx_handle; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 400 | |
Nathan Skrzypczak | 2f0f96b | 2019-06-13 10:14:28 +0200 | [diff] [blame] | 401 | tls_listener = |
| 402 | listen_session_get_from_handle (tls_session->listener_handle); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 403 | lctx = tls_listener_ctx_get (tls_listener->opaque); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 404 | |
| 405 | ctx_handle = tls_ctx_alloc (lctx->tls_ctx_engine); |
| 406 | ctx = tls_ctx_get (ctx_handle); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 407 | memcpy (ctx, lctx, sizeof (*lctx)); |
| 408 | ctx->c_thread_index = vlib_get_thread_index (); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 409 | ctx->tls_ctx_handle = ctx_handle; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 410 | tls_session->session_state = SESSION_STATE_READY; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 411 | tls_session->opaque = ctx_handle; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 412 | ctx->tls_session_handle = session_handle (tls_session); |
| 413 | ctx->listener_ctx_index = tls_listener->opaque; |
Florin Coras | d09236d | 2019-08-08 17:38:26 -0700 | [diff] [blame] | 414 | ctx->c_flags |= TRANSPORT_CONNECTION_F_NO_LOOKUP; |
Nathan Skrzypczak | 79f8953 | 2019-09-13 11:08:13 +0200 | [diff] [blame^] | 415 | ctx->ckpair_index = lctx->ckpair_index; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 416 | |
Florin Coras | 58a93e8 | 2019-01-14 23:33:46 -0800 | [diff] [blame] | 417 | /* Preallocate app session. Avoids allocating a session post handshake |
| 418 | * on tls_session rx and potentially invalidating the session pool */ |
| 419 | app_session = session_alloc (ctx->c_thread_index); |
| 420 | app_session->session_state = SESSION_STATE_CLOSED; |
| 421 | ctx->c_s_index = app_session->session_index; |
| 422 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 423 | TLS_DBG (1, "Accept on listener %u new connection [%u]%x", |
| 424 | tls_listener->opaque, vlib_get_thread_index (), ctx_handle); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 425 | |
| 426 | return tls_ctx_init_server (ctx); |
| 427 | } |
| 428 | |
| 429 | int |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 430 | tls_app_rx_callback (session_t * tls_session) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 431 | { |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 432 | tls_ctx_t *ctx; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 433 | |
| 434 | ctx = tls_ctx_get (tls_session->opaque); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 435 | tls_ctx_read (ctx, tls_session); |
| 436 | return 0; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 437 | } |
| 438 | |
| 439 | int |
| 440 | tls_session_connected_callback (u32 tls_app_index, u32 ho_ctx_index, |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 441 | session_t * tls_session, u8 is_fail) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 442 | { |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 443 | session_t *app_session; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 444 | tls_ctx_t *ho_ctx, *ctx; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 445 | u32 ctx_handle; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 446 | |
| 447 | ho_ctx = tls_ctx_half_open_get (ho_ctx_index); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 448 | |
| 449 | if (is_fail) |
Florin Coras | dcde927 | 2018-03-02 09:23:42 -0800 | [diff] [blame] | 450 | { |
Florin Coras | 57791ad | 2018-08-27 10:07:40 -0700 | [diff] [blame] | 451 | app_worker_t *app_wrk; |
Florin Coras | 69b68ef | 2019-04-02 11:38:51 -0700 | [diff] [blame] | 452 | u32 api_context; |
| 453 | int rv = 0; |
Florin Coras | 57791ad | 2018-08-27 10:07:40 -0700 | [diff] [blame] | 454 | |
Florin Coras | df57ea0 | 2019-02-18 20:14:20 -0800 | [diff] [blame] | 455 | app_wrk = app_worker_get_if_valid (ho_ctx->parent_app_wrk_index); |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 456 | if (app_wrk) |
| 457 | { |
| 458 | api_context = ho_ctx->c_s_index; |
Florin Coras | 69b68ef | 2019-04-02 11:38:51 -0700 | [diff] [blame] | 459 | app_worker_connect_notify (app_wrk, 0, api_context); |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 460 | } |
Florin Coras | dcde927 | 2018-03-02 09:23:42 -0800 | [diff] [blame] | 461 | tls_ctx_half_open_reader_unlock (); |
| 462 | tls_ctx_half_open_free (ho_ctx_index); |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 463 | return rv; |
Florin Coras | dcde927 | 2018-03-02 09:23:42 -0800 | [diff] [blame] | 464 | } |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 465 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 466 | ctx_handle = tls_ctx_alloc (ho_ctx->tls_ctx_engine); |
| 467 | ctx = tls_ctx_get (ctx_handle); |
Dave Barach | 178cf49 | 2018-11-13 16:34:13 -0500 | [diff] [blame] | 468 | clib_memcpy_fast (ctx, ho_ctx, sizeof (*ctx)); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 469 | tls_ctx_half_open_reader_unlock (); |
| 470 | tls_ctx_half_open_free (ho_ctx_index); |
| 471 | |
Florin Coras | dcde927 | 2018-03-02 09:23:42 -0800 | [diff] [blame] | 472 | ctx->c_thread_index = vlib_get_thread_index (); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 473 | ctx->tls_ctx_handle = ctx_handle; |
Florin Coras | d09236d | 2019-08-08 17:38:26 -0700 | [diff] [blame] | 474 | ctx->c_flags |= TRANSPORT_CONNECTION_F_NO_LOOKUP; |
Florin Coras | dcde927 | 2018-03-02 09:23:42 -0800 | [diff] [blame] | 475 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 476 | TLS_DBG (1, "TCP connect for %u returned %u. New connection [%u]%x", |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 477 | ho_ctx_index, is_fail, vlib_get_thread_index (), |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 478 | (ctx) ? ctx_handle : ~0); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 479 | |
| 480 | ctx->tls_session_handle = session_handle (tls_session); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 481 | tls_session->opaque = ctx_handle; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 482 | tls_session->session_state = SESSION_STATE_READY; |
| 483 | |
Florin Coras | 58a93e8 | 2019-01-14 23:33:46 -0800 | [diff] [blame] | 484 | /* Preallocate app session. Avoids allocating a session post handshake |
| 485 | * on tls_session rx and potentially invalidating the session pool */ |
| 486 | app_session = session_alloc (ctx->c_thread_index); |
| 487 | app_session->session_state = SESSION_STATE_CLOSED; |
| 488 | ctx->c_s_index = app_session->session_index; |
| 489 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 490 | return tls_ctx_init_client (ctx); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 491 | } |
| 492 | |
Florin Coras | ef2b335 | 2019-08-07 11:14:56 -0700 | [diff] [blame] | 493 | static void |
| 494 | tls_app_session_cleanup (session_t * s, session_cleanup_ntf_t ntf) |
| 495 | { |
| 496 | tls_ctx_t *ctx; |
| 497 | |
| 498 | if (ntf == SESSION_CLEANUP_TRANSPORT) |
| 499 | return; |
| 500 | |
| 501 | ctx = tls_ctx_get (s->opaque); |
| 502 | if (!ctx->no_app_session) |
| 503 | session_transport_delete_notify (&ctx->connection); |
| 504 | tls_ctx_free (ctx); |
| 505 | } |
| 506 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 507 | /* *INDENT-OFF* */ |
| 508 | static session_cb_vft_t tls_app_cb_vft = { |
| 509 | .session_accept_callback = tls_session_accept_callback, |
| 510 | .session_disconnect_callback = tls_session_disconnect_callback, |
| 511 | .session_connected_callback = tls_session_connected_callback, |
| 512 | .session_reset_callback = tls_session_reset_callback, |
| 513 | .add_segment_callback = tls_add_segment_callback, |
| 514 | .del_segment_callback = tls_del_segment_callback, |
| 515 | .builtin_app_rx_callback = tls_app_rx_callback, |
Florin Coras | ef2b335 | 2019-08-07 11:14:56 -0700 | [diff] [blame] | 516 | .session_cleanup_callback = tls_app_session_cleanup, |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 517 | }; |
| 518 | /* *INDENT-ON* */ |
| 519 | |
| 520 | int |
Florin Coras | 5665ced | 2018-10-25 18:03:45 -0700 | [diff] [blame] | 521 | tls_connect (transport_endpoint_cfg_t * tep) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 522 | { |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 523 | vnet_connect_args_t _cargs = { {}, }, *cargs = &_cargs; |
Florin Coras | 5665ced | 2018-10-25 18:03:45 -0700 | [diff] [blame] | 524 | session_endpoint_cfg_t *sep; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 525 | tls_engine_type_t engine_type; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 526 | tls_main_t *tm = &tls_main; |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 527 | app_worker_t *app_wrk; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 528 | application_t *app; |
| 529 | tls_ctx_t *ctx; |
| 530 | u32 ctx_index; |
Florin Coras | c1a4265 | 2019-02-08 18:27:29 -0800 | [diff] [blame] | 531 | int rv; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 532 | |
Florin Coras | 5665ced | 2018-10-25 18:03:45 -0700 | [diff] [blame] | 533 | sep = (session_endpoint_cfg_t *) tep; |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 534 | app_wrk = app_worker_get (sep->app_wrk_index); |
| 535 | app = application_get (app_wrk->app_index); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 536 | engine_type = tls_get_engine_type (app->tls_engine); |
| 537 | if (engine_type == TLS_ENGINE_NONE) |
| 538 | { |
| 539 | clib_warning ("No tls engine_type available"); |
| 540 | return -1; |
| 541 | } |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 542 | |
| 543 | ctx_index = tls_ctx_half_open_alloc (); |
| 544 | ctx = tls_ctx_half_open_get (ctx_index); |
Florin Coras | df57ea0 | 2019-02-18 20:14:20 -0800 | [diff] [blame] | 545 | ctx->parent_app_wrk_index = sep->app_wrk_index; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 546 | ctx->parent_app_api_context = sep->opaque; |
| 547 | ctx->tcp_is_ip4 = sep->is_ip4; |
Florin Coras | 8f89dd0 | 2018-03-05 16:53:07 -0800 | [diff] [blame] | 548 | if (sep->hostname) |
| 549 | { |
| 550 | ctx->srv_hostname = format (0, "%v", sep->hostname); |
| 551 | vec_terminate_c_string (ctx->srv_hostname); |
| 552 | } |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 553 | tls_ctx_half_open_reader_unlock (); |
| 554 | |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 555 | app_worker_alloc_connects_segment_manager (app_wrk); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 556 | ctx->tls_ctx_engine = engine_type; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 557 | |
Dave Barach | 178cf49 | 2018-11-13 16:34:13 -0500 | [diff] [blame] | 558 | clib_memcpy_fast (&cargs->sep, sep, sizeof (session_endpoint_t)); |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 559 | cargs->sep.transport_proto = TRANSPORT_PROTO_TCP; |
| 560 | cargs->app_index = tm->app_index; |
| 561 | cargs->api_context = ctx_index; |
Florin Coras | 8a14061 | 2019-02-18 22:39:39 -0800 | [diff] [blame] | 562 | cargs->sep_ext.ns_index = app->ns_index; |
Florin Coras | c1a4265 | 2019-02-08 18:27:29 -0800 | [diff] [blame] | 563 | if ((rv = vnet_connect (cargs))) |
| 564 | return rv; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 565 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 566 | TLS_DBG (1, "New connect request %u engine %d", ctx_index, engine_type); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 567 | return 0; |
| 568 | } |
| 569 | |
| 570 | void |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 571 | tls_disconnect (u32 ctx_handle, u32 thread_index) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 572 | { |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 573 | tls_ctx_t *ctx; |
| 574 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 575 | TLS_DBG (1, "Disconnecting %x", ctx_handle); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 576 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 577 | ctx = tls_ctx_get (ctx_handle); |
Florin Coras | 06a6a30 | 2019-04-17 14:19:12 -0700 | [diff] [blame] | 578 | tls_ctx_app_close (ctx); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 579 | } |
| 580 | |
| 581 | u32 |
| 582 | tls_start_listen (u32 app_listener_index, transport_endpoint_t * tep) |
| 583 | { |
Florin Coras | c9940fc | 2019-02-05 20:55:11 -0800 | [diff] [blame] | 584 | vnet_listen_args_t _bargs, *args = &_bargs; |
Florin Coras | ab2f6db | 2018-08-31 14:31:41 -0700 | [diff] [blame] | 585 | app_worker_t *app_wrk; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 586 | tls_main_t *tm = &tls_main; |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 587 | session_handle_t tls_al_handle; |
Florin Coras | 5665ced | 2018-10-25 18:03:45 -0700 | [diff] [blame] | 588 | session_endpoint_cfg_t *sep; |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 589 | session_t *tls_listener; |
| 590 | session_t *app_listener; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 591 | tls_engine_type_t engine_type; |
Florin Coras | 74cac88 | 2018-09-07 09:13:15 -0700 | [diff] [blame] | 592 | application_t *app; |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 593 | app_listener_t *al; |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 594 | tls_ctx_t *lctx; |
| 595 | u32 lctx_index; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 596 | |
Florin Coras | 5665ced | 2018-10-25 18:03:45 -0700 | [diff] [blame] | 597 | sep = (session_endpoint_cfg_t *) tep; |
Florin Coras | 1553197 | 2018-08-12 23:50:53 -0700 | [diff] [blame] | 598 | app_wrk = app_worker_get (sep->app_wrk_index); |
| 599 | app = application_get (app_wrk->app_index); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 600 | engine_type = tls_get_engine_type (app->tls_engine); |
| 601 | if (engine_type == TLS_ENGINE_NONE) |
| 602 | { |
| 603 | clib_warning ("No tls engine_type available"); |
| 604 | return -1; |
| 605 | } |
| 606 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 607 | sep->transport_proto = TRANSPORT_PROTO_TCP; |
Dave Barach | b7b9299 | 2018-10-17 10:38:51 -0400 | [diff] [blame] | 608 | clib_memset (args, 0, sizeof (*args)); |
Florin Coras | 74cac88 | 2018-09-07 09:13:15 -0700 | [diff] [blame] | 609 | args->app_index = tm->app_index; |
| 610 | args->sep_ext = *sep; |
Florin Coras | 8a14061 | 2019-02-18 22:39:39 -0800 | [diff] [blame] | 611 | args->sep_ext.ns_index = app->ns_index; |
Florin Coras | c9940fc | 2019-02-05 20:55:11 -0800 | [diff] [blame] | 612 | if (vnet_listen (args)) |
Florin Coras | 74cac88 | 2018-09-07 09:13:15 -0700 | [diff] [blame] | 613 | return -1; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 614 | |
Florin Coras | 74cac88 | 2018-09-07 09:13:15 -0700 | [diff] [blame] | 615 | lctx_index = tls_listener_ctx_alloc (); |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 616 | tls_al_handle = args->handle; |
| 617 | al = app_listener_get_w_handle (tls_al_handle); |
| 618 | tls_listener = app_listener_get_session (al); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 619 | tls_listener->opaque = lctx_index; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 620 | |
Florin Coras | 5c9083d | 2018-04-13 06:39:07 -0700 | [diff] [blame] | 621 | app_listener = listen_session_get (app_listener_index); |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 622 | |
| 623 | lctx = tls_listener_ctx_get (lctx_index); |
Florin Coras | df57ea0 | 2019-02-18 20:14:20 -0800 | [diff] [blame] | 624 | lctx->parent_app_wrk_index = sep->app_wrk_index; |
Florin Coras | a27a46e | 2019-02-18 13:02:28 -0800 | [diff] [blame] | 625 | lctx->tls_session_handle = tls_al_handle; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 626 | lctx->app_session_handle = listen_session_get_handle (app_listener); |
| 627 | lctx->tcp_is_ip4 = sep->is_ip4; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 628 | lctx->tls_ctx_engine = engine_type; |
Nathan Skrzypczak | 79f8953 | 2019-09-13 11:08:13 +0200 | [diff] [blame^] | 629 | lctx->ckpair_index = sep->ckpair_index; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 630 | |
Florin Coras | ae3eaac | 2019-07-23 22:38:16 -0700 | [diff] [blame] | 631 | if (tls_vfts[engine_type].ctx_start_listen (lctx)) |
| 632 | { |
| 633 | vnet_unlisten_args_t a = { |
| 634 | .handle = lctx->tls_session_handle, |
| 635 | .app_index = tls_main.app_index, |
| 636 | .wrk_map_index = 0 |
| 637 | }; |
| 638 | if ((vnet_unlisten (&a))) |
| 639 | clib_warning ("unlisten returned"); |
| 640 | tls_listener_ctx_free (lctx); |
| 641 | lctx_index = SESSION_INVALID_INDEX; |
| 642 | } |
Ping Yu | decda5b | 2018-08-13 06:20:00 -0400 | [diff] [blame] | 643 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 644 | TLS_DBG (1, "Started listening %d, engine type %d", lctx_index, |
| 645 | engine_type); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 646 | return lctx_index; |
| 647 | } |
| 648 | |
| 649 | u32 |
Florin Coras | e3e2f07 | 2018-03-04 07:24:30 -0800 | [diff] [blame] | 650 | tls_stop_listen (u32 lctx_index) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 651 | { |
Ping Yu | decda5b | 2018-08-13 06:20:00 -0400 | [diff] [blame] | 652 | tls_engine_type_t engine_type; |
Florin Coras | b5e94e3 | 2018-09-14 14:46:39 -0700 | [diff] [blame] | 653 | tls_ctx_t *lctx; |
Florin Coras | c1a4265 | 2019-02-08 18:27:29 -0800 | [diff] [blame] | 654 | int rv; |
Ping Yu | decda5b | 2018-08-13 06:20:00 -0400 | [diff] [blame] | 655 | |
Florin Coras | e3e2f07 | 2018-03-04 07:24:30 -0800 | [diff] [blame] | 656 | lctx = tls_listener_ctx_get (lctx_index); |
Florin Coras | c1a4265 | 2019-02-08 18:27:29 -0800 | [diff] [blame] | 657 | vnet_unlisten_args_t a = { |
Florin Coras | b5e94e3 | 2018-09-14 14:46:39 -0700 | [diff] [blame] | 658 | .handle = lctx->tls_session_handle, |
| 659 | .app_index = tls_main.app_index, |
| 660 | .wrk_map_index = 0 /* default wrk */ |
| 661 | }; |
Florin Coras | c1a4265 | 2019-02-08 18:27:29 -0800 | [diff] [blame] | 662 | if ((rv = vnet_unlisten (&a))) |
| 663 | clib_warning ("unlisten returned %d", rv); |
Florin Coras | b5e94e3 | 2018-09-14 14:46:39 -0700 | [diff] [blame] | 664 | |
Ping Yu | decda5b | 2018-08-13 06:20:00 -0400 | [diff] [blame] | 665 | engine_type = lctx->tls_ctx_engine; |
| 666 | tls_vfts[engine_type].ctx_stop_listen (lctx); |
| 667 | |
Florin Coras | e3e2f07 | 2018-03-04 07:24:30 -0800 | [diff] [blame] | 668 | tls_listener_ctx_free (lctx); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 669 | return 0; |
| 670 | } |
| 671 | |
| 672 | transport_connection_t * |
Florin Coras | e3e2f07 | 2018-03-04 07:24:30 -0800 | [diff] [blame] | 673 | tls_connection_get (u32 ctx_index, u32 thread_index) |
| 674 | { |
| 675 | tls_ctx_t *ctx; |
| 676 | ctx = tls_ctx_get_w_thread (ctx_index, thread_index); |
| 677 | return &ctx->connection; |
| 678 | } |
| 679 | |
| 680 | transport_connection_t * |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 681 | tls_listener_get (u32 listener_index) |
| 682 | { |
| 683 | tls_ctx_t *ctx; |
| 684 | ctx = tls_listener_ctx_get (listener_index); |
| 685 | return &ctx->connection; |
| 686 | } |
| 687 | |
Florin Coras | f940f8a | 2019-03-06 10:44:38 -0800 | [diff] [blame] | 688 | int |
Florin Coras | 26dd6de | 2019-07-23 23:54:47 -0700 | [diff] [blame] | 689 | tls_custom_tx_callback (void *session, u32 max_burst_size) |
Florin Coras | f940f8a | 2019-03-06 10:44:38 -0800 | [diff] [blame] | 690 | { |
| 691 | session_t *app_session = (session_t *) session; |
| 692 | tls_ctx_t *ctx; |
Florin Coras | bf7ce2c | 2019-03-06 14:44:42 -0800 | [diff] [blame] | 693 | |
| 694 | if (PREDICT_FALSE (app_session->session_state |
| 695 | >= SESSION_STATE_TRANSPORT_CLOSED)) |
Florin Coras | f940f8a | 2019-03-06 10:44:38 -0800 | [diff] [blame] | 696 | return 0; |
Florin Coras | bf7ce2c | 2019-03-06 14:44:42 -0800 | [diff] [blame] | 697 | |
Florin Coras | f940f8a | 2019-03-06 10:44:38 -0800 | [diff] [blame] | 698 | ctx = tls_ctx_get (app_session->connection_index); |
| 699 | tls_ctx_write (ctx, app_session); |
| 700 | return 0; |
| 701 | } |
| 702 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 703 | u8 * |
| 704 | format_tls_ctx (u8 * s, va_list * args) |
| 705 | { |
Florin Coras | bf7ce2c | 2019-03-06 14:44:42 -0800 | [diff] [blame] | 706 | u32 tcp_si, tcp_ti, ctx_index, ctx_engine, app_si, app_ti; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 707 | tls_ctx_t *ctx = va_arg (*args, tls_ctx_t *); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 708 | |
Florin Coras | bf7ce2c | 2019-03-06 14:44:42 -0800 | [diff] [blame] | 709 | session_parse_handle (ctx->tls_session_handle, &tcp_si, &tcp_ti); |
| 710 | tls_ctx_parse_handle (ctx->tls_ctx_handle, &ctx_index, &ctx_engine); |
| 711 | session_parse_handle (ctx->app_session_handle, &app_si, &app_ti); |
| 712 | s = format (s, "[%d:%d][TLS] app_wrk %u index %u engine %u tcp %d:%d", |
| 713 | app_ti, app_si, ctx->parent_app_wrk_index, ctx_index, |
| 714 | ctx_engine, tcp_ti, tcp_si); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 715 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 716 | return s; |
| 717 | } |
| 718 | |
| 719 | u8 * |
| 720 | format_tls_connection (u8 * s, va_list * args) |
| 721 | { |
| 722 | u32 ctx_index = va_arg (*args, u32); |
| 723 | u32 thread_index = va_arg (*args, u32); |
| 724 | u32 verbose = va_arg (*args, u32); |
| 725 | tls_ctx_t *ctx; |
| 726 | |
| 727 | ctx = tls_ctx_get_w_thread (ctx_index, thread_index); |
| 728 | if (!ctx) |
| 729 | return s; |
| 730 | |
Florin Coras | bf7ce2c | 2019-03-06 14:44:42 -0800 | [diff] [blame] | 731 | s = format (s, "%-50U", format_tls_ctx, ctx); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 732 | if (verbose) |
| 733 | { |
Florin Coras | 288eaab | 2019-02-03 15:26:14 -0800 | [diff] [blame] | 734 | session_t *ts; |
Florin Coras | ef91534 | 2018-09-29 10:23:06 -0700 | [diff] [blame] | 735 | ts = session_get_from_handle (ctx->app_session_handle); |
| 736 | s = format (s, "state: %-7u", ts->session_state); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 737 | if (verbose > 1) |
| 738 | s = format (s, "\n"); |
| 739 | } |
| 740 | return s; |
| 741 | } |
| 742 | |
| 743 | u8 * |
| 744 | format_tls_listener (u8 * s, va_list * args) |
| 745 | { |
| 746 | u32 tc_index = va_arg (*args, u32); |
Aloys Augustin | a0abbff | 2019-07-12 12:16:16 +0200 | [diff] [blame] | 747 | u32 __clib_unused thread_index = va_arg (*args, u32); |
Florin Coras | 8a14061 | 2019-02-18 22:39:39 -0800 | [diff] [blame] | 748 | u32 __clib_unused verbose = va_arg (*args, u32); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 749 | tls_ctx_t *ctx = tls_listener_ctx_get (tc_index); |
Florin Coras | bf7ce2c | 2019-03-06 14:44:42 -0800 | [diff] [blame] | 750 | session_t *tls_listener; |
| 751 | app_listener_t *al; |
| 752 | u32 app_si, app_ti; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 753 | |
Florin Coras | bf7ce2c | 2019-03-06 14:44:42 -0800 | [diff] [blame] | 754 | al = app_listener_get_w_handle (ctx->tls_session_handle); |
| 755 | tls_listener = app_listener_get_session (al); |
| 756 | session_parse_handle (ctx->app_session_handle, &app_si, &app_ti); |
| 757 | s = format (s, "[%d:%d][TLS] app_wrk %u engine %u tcp %d:%d", |
| 758 | app_ti, app_si, ctx->parent_app_wrk_index, ctx->tls_ctx_engine, |
| 759 | tls_listener->thread_index, tls_listener->session_index); |
| 760 | return s; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 761 | } |
| 762 | |
| 763 | u8 * |
| 764 | format_tls_half_open (u8 * s, va_list * args) |
| 765 | { |
| 766 | u32 tc_index = va_arg (*args, u32); |
Aloys Augustin | a0abbff | 2019-07-12 12:16:16 +0200 | [diff] [blame] | 767 | u32 __clib_unused thread_index = va_arg (*args, u32); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 768 | tls_ctx_t *ctx = tls_ctx_half_open_get (tc_index); |
Florin Coras | df57ea0 | 2019-02-18 20:14:20 -0800 | [diff] [blame] | 769 | s = format (s, "[TLS] half-open app %u", ctx->parent_app_wrk_index); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 770 | tls_ctx_half_open_reader_unlock (); |
| 771 | return s; |
| 772 | } |
| 773 | |
Yu Ping | 0b81915 | 2019-05-07 02:24:30 +0800 | [diff] [blame] | 774 | static void |
| 775 | tls_transport_endpoint_get (u32 ctx_handle, u32 thread_index, |
| 776 | transport_endpoint_t * tep, u8 is_lcl) |
| 777 | { |
| 778 | tls_ctx_t *ctx = tls_ctx_get_w_thread (ctx_handle, thread_index); |
| 779 | session_t *tcp_session; |
| 780 | |
| 781 | tcp_session = session_get_from_handle (ctx->tls_session_handle); |
| 782 | session_get_endpoint (tcp_session, tep, is_lcl); |
| 783 | } |
| 784 | |
| 785 | static void |
| 786 | tls_transport_listener_endpoint_get (u32 ctx_handle, |
| 787 | transport_endpoint_t * tep, u8 is_lcl) |
| 788 | { |
| 789 | session_t *tls_listener; |
| 790 | app_listener_t *al; |
| 791 | tls_ctx_t *ctx = tls_listener_ctx_get (ctx_handle); |
| 792 | |
| 793 | al = app_listener_get_w_handle (ctx->tls_session_handle); |
| 794 | tls_listener = app_listener_get_session (al); |
| 795 | session_get_endpoint (tls_listener, tep, is_lcl); |
| 796 | } |
| 797 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 798 | /* *INDENT-OFF* */ |
Nathan Skrzypczak | e971bc9 | 2019-06-19 13:42:37 +0200 | [diff] [blame] | 799 | static const transport_proto_vft_t tls_proto = { |
Florin Coras | 1ee7830 | 2019-02-05 15:51:15 -0800 | [diff] [blame] | 800 | .connect = tls_connect, |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 801 | .close = tls_disconnect, |
Florin Coras | 1ee7830 | 2019-02-05 15:51:15 -0800 | [diff] [blame] | 802 | .start_listen = tls_start_listen, |
| 803 | .stop_listen = tls_stop_listen, |
Florin Coras | e3e2f07 | 2018-03-04 07:24:30 -0800 | [diff] [blame] | 804 | .get_connection = tls_connection_get, |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 805 | .get_listener = tls_listener_get, |
Florin Coras | f940f8a | 2019-03-06 10:44:38 -0800 | [diff] [blame] | 806 | .custom_tx = tls_custom_tx_callback, |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 807 | .format_connection = format_tls_connection, |
| 808 | .format_half_open = format_tls_half_open, |
| 809 | .format_listener = format_tls_listener, |
Yu Ping | 0b81915 | 2019-05-07 02:24:30 +0800 | [diff] [blame] | 810 | .get_transport_endpoint = tls_transport_endpoint_get, |
| 811 | .get_transport_listener_endpoint = tls_transport_listener_endpoint_get, |
Nathan Skrzypczak | e971bc9 | 2019-06-19 13:42:37 +0200 | [diff] [blame] | 812 | .transport_options = { |
| 813 | .tx_type = TRANSPORT_TX_INTERNAL, |
| 814 | .service_type = TRANSPORT_SERVICE_APP, |
| 815 | }, |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 816 | }; |
| 817 | /* *INDENT-ON* */ |
| 818 | |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 819 | void |
| 820 | tls_register_engine (const tls_engine_vft_t * vft, tls_engine_type_t type) |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 821 | { |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 822 | vec_validate (tls_vfts, type); |
| 823 | tls_vfts[type] = *vft; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 824 | } |
| 825 | |
Dave Barach | cc5677b | 2018-03-28 19:08:45 -0400 | [diff] [blame] | 826 | static clib_error_t * |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 827 | tls_init (vlib_main_t * vm) |
| 828 | { |
Aloys Augustin | bec771b | 2019-07-12 11:05:35 +0200 | [diff] [blame] | 829 | u32 add_segment_size = 256 << 20, first_seg_size = 32 << 20; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 830 | vlib_thread_main_t *vtm = vlib_get_thread_main (); |
Florin Coras | ddd98f3 | 2019-03-25 08:30:53 -0700 | [diff] [blame] | 831 | u32 num_threads, fifo_size = 128 << 10; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 832 | vnet_app_attach_args_t _a, *a = &_a; |
| 833 | u64 options[APP_OPTIONS_N_OPTIONS]; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 834 | tls_main_t *tm = &tls_main; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 835 | |
Florin Coras | ddd98f3 | 2019-03-25 08:30:53 -0700 | [diff] [blame] | 836 | first_seg_size = tm->first_seg_size ? tm->first_seg_size : first_seg_size; |
| 837 | fifo_size = tm->fifo_size ? tm->fifo_size : fifo_size; |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 838 | num_threads = 1 /* main thread */ + vtm->n_threads; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 839 | |
Dave Barach | b7b9299 | 2018-10-17 10:38:51 -0400 | [diff] [blame] | 840 | clib_memset (a, 0, sizeof (*a)); |
| 841 | clib_memset (options, 0, sizeof (options)); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 842 | |
| 843 | a->session_cb_vft = &tls_app_cb_vft; |
Florin Coras | 0bee9ce | 2018-03-22 21:24:31 -0700 | [diff] [blame] | 844 | a->api_client_index = APP_INVALID_INDEX; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 845 | a->options = options; |
Florin Coras | 0bee9ce | 2018-03-22 21:24:31 -0700 | [diff] [blame] | 846 | a->name = format (0, "tls"); |
Florin Coras | ddd98f3 | 2019-03-25 08:30:53 -0700 | [diff] [blame] | 847 | a->options[APP_OPTIONS_SEGMENT_SIZE] = first_seg_size; |
| 848 | a->options[APP_OPTIONS_ADD_SEGMENT_SIZE] = add_segment_size; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 849 | a->options[APP_OPTIONS_RX_FIFO_SIZE] = fifo_size; |
| 850 | a->options[APP_OPTIONS_TX_FIFO_SIZE] = fifo_size; |
| 851 | a->options[APP_OPTIONS_FLAGS] = APP_OPTIONS_FLAGS_IS_BUILTIN; |
| 852 | a->options[APP_OPTIONS_FLAGS] |= APP_OPTIONS_FLAGS_USE_GLOBAL_SCOPE; |
Florin Coras | da3eec1 | 2018-09-07 13:29:17 -0700 | [diff] [blame] | 853 | a->options[APP_OPTIONS_FLAGS] |= APP_OPTIONS_FLAGS_IS_TRANSPORT_APP; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 854 | |
| 855 | if (vnet_application_attach (a)) |
| 856 | { |
| 857 | clib_warning ("failed to attach tls app"); |
| 858 | return clib_error_return (0, "failed to attach tls app"); |
| 859 | } |
| 860 | |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 861 | if (!tm->ca_cert_path) |
| 862 | tm->ca_cert_path = TLS_CA_CERT_PATH; |
| 863 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 864 | tm->app_index = a->app_index; |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 865 | clib_rwlock_init (&tm->half_open_rwlock); |
| 866 | |
Florin Coras | 58d36f0 | 2018-03-09 13:05:53 -0800 | [diff] [blame] | 867 | vec_validate (tm->rx_bufs, num_threads - 1); |
| 868 | vec_validate (tm->tx_bufs, num_threads - 1); |
| 869 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 870 | transport_register_protocol (TRANSPORT_PROTO_TLS, &tls_proto, |
| 871 | FIB_PROTOCOL_IP4, ~0); |
| 872 | transport_register_protocol (TRANSPORT_PROTO_TLS, &tls_proto, |
| 873 | FIB_PROTOCOL_IP6, ~0); |
Florin Coras | 0bee9ce | 2018-03-22 21:24:31 -0700 | [diff] [blame] | 874 | vec_free (a->name); |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 875 | return 0; |
| 876 | } |
| 877 | |
| 878 | VLIB_INIT_FUNCTION (tls_init); |
| 879 | |
Florin Coras | 8f89dd0 | 2018-03-05 16:53:07 -0800 | [diff] [blame] | 880 | static clib_error_t * |
| 881 | tls_config_fn (vlib_main_t * vm, unformat_input_t * input) |
| 882 | { |
| 883 | tls_main_t *tm = &tls_main; |
| 884 | while (unformat_check_input (input) != UNFORMAT_END_OF_INPUT) |
| 885 | { |
| 886 | if (unformat (input, "use-test-cert-in-ca")) |
| 887 | tm->use_test_cert_in_ca = 1; |
| 888 | else if (unformat (input, "ca-cert-path %s", &tm->ca_cert_path)) |
| 889 | ; |
Florin Coras | ddd98f3 | 2019-03-25 08:30:53 -0700 | [diff] [blame] | 890 | else if (unformat (input, "first-segment-size %U", unformat_memory_size, |
| 891 | &tm->first_seg_size)) |
| 892 | ; |
| 893 | else if (unformat (input, "fifo-size %U", unformat_memory_size, |
| 894 | &tm->fifo_size)) |
| 895 | ; |
Florin Coras | 8f89dd0 | 2018-03-05 16:53:07 -0800 | [diff] [blame] | 896 | else |
| 897 | return clib_error_return (0, "unknown input `%U'", |
| 898 | format_unformat_error, input); |
| 899 | } |
| 900 | return 0; |
| 901 | } |
| 902 | |
| 903 | VLIB_EARLY_CONFIG_FUNCTION (tls_config_fn, "tls"); |
Florin Coras | d77eee6 | 2018-03-07 08:49:27 -0800 | [diff] [blame] | 904 | |
| 905 | tls_main_t * |
| 906 | vnet_tls_get_main (void) |
| 907 | { |
| 908 | return &tls_main; |
| 909 | } |
| 910 | |
Florin Coras | 371ca50 | 2018-02-21 12:07:41 -0800 | [diff] [blame] | 911 | /* |
| 912 | * fd.io coding-style-patch-verification: ON |
| 913 | * |
| 914 | * Local Variables: |
| 915 | * eval: (c-set-style "gnu") |
| 916 | * End: |
| 917 | */ |