OpenVPN
Data Structures | Macros | Enumerations | Functions
multi.h File Reference

Header file for server-mode related structures and functions. More...

#include "init.h"
#include "forward.h"
#include "mroute.h"
#include "mbuf.h"
#include "list.h"
#include "schedule.h"
#include "pool.h"
#include "mudp.h"
#include "mtcp.h"
#include "multi_io.h"
#include "perf.h"
#include "vlan.h"
#include "reflect_filter.h"
Include dependency graph for multi.h:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Data Structures

struct  multi_reap
 
struct  deferred_signal_schedule_entry
 
struct  client_connect_defer_state
 Detached client connection state. More...
 
struct  multi_instance
 Server-mode state structure for one single VPN tunnel. More...
 
struct  multi_context
 Main OpenVPN server state structure. More...
 
struct  multi_route
 

Macros

#define MULTI_PREFIX_MAX_LENGTH   256
 
#define MULTI_ROUTE_CACHE   (1 << 0)
 
#define MULTI_ROUTE_AGEABLE   (1 << 1)
 
#define MPP_PRE_SELECT   (1 << 0)
 
#define MPP_CONDITIONAL_PRE_SELECT   (1 << 1)
 
#define MPP_CLOSE_ON_SIGNAL   (1 << 2)
 
#define MPP_RECORD_TOUCH   (1 << 3)
 
#define REAP_MAX_WAKEUP   10 /* Do reap pass at least once per n seconds */
 
#define REAP_DIVISOR   256 /* How many passes to cover whole hash table */
 
#define REAP_MIN   16 /* Minimum number of buckets per pass */
 
#define REAP_MAX   1024 /* Maximum number of buckets per pass */
 
#define MULTI_CACHE_ROUTE_TTL   60
 
#define CLIENT_CONNECT_OPT_MASK
 
#define MULTI_CHECK_SIG(m)   EVENT_LOOP_CHECK_SIGNAL(&(m)->top, multi_process_signal, (m))
 

Enumerations

enum  client_connect_return { CC_RET_FAILED , CC_RET_SUCCEEDED , CC_RET_DEFERRED , CC_RET_SKIPPED }
 Return values used by the client connect call-back functions. More...
 

Functions

void tunnel_server (struct context *top)
 Main event loop for OpenVPN in server mode.
 
const char * multi_instance_string (const struct multi_instance *mi, bool null, struct gc_arena *gc)
 
struct multi_instancemulti_create_instance (struct multi_context *m, const struct mroute_addr *real, struct link_socket *sock)
 
void multi_close_instance (struct multi_context *m, struct multi_instance *mi, bool shutdown)
 
bool multi_process_timeout (struct multi_context *m, const unsigned int mpp_flags)
 
bool multi_process_post (struct multi_context *m, struct multi_instance *mi, const unsigned int flags)
 Perform postprocessing of a VPN tunnel instance.
 
bool multi_process_incoming_dco (struct multi_context *m)
 Process an incoming DCO message (from kernel space).
 
bool multi_process_incoming_link (struct multi_context *m, struct multi_instance *instance, const unsigned int mpp_flags, struct link_socket *sock)
 Demultiplex and process a packet received over the external network interface.
 
bool multi_process_incoming_tun (struct multi_context *m, const unsigned int mpp_flags)
 Determine the destination VPN tunnel of a packet received over the virtual tun/tap network interface and then process it accordingly.
 
void multi_process_drop_outgoing_tun (struct multi_context *m, const unsigned int mpp_flags)
 
struct multi_instancemulti_get_queue (struct mbuf_set *ms)
 
void multi_add_mbuf (struct multi_context *m, struct multi_instance *mi, struct mbuf_buffer *mb)
 
void multi_ifconfig_pool_persist (struct multi_context *m, bool force)
 
bool multi_process_signal (struct multi_context *m)
 
void multi_close_instance_on_signal (struct multi_context *m, struct multi_instance *mi)
 
void init_management_callback_multi (struct multi_context *m)
 
static bool multi_output_queue_ready (const struct multi_context *m, const struct multi_instance *mi)
 
static struct multi_instancemulti_process_outgoing_link_pre (struct multi_context *m)
 
void route_quota_exceeded (const struct multi_instance *mi)
 
static void route_quota_inc (struct multi_instance *mi)
 
static void route_quota_dec (struct multi_instance *mi)
 
static bool route_quota_test (const struct multi_instance *mi)
 
static void multi_instance_inc_refcount (struct multi_instance *mi)
 
static void multi_instance_dec_refcount (struct multi_instance *mi)
 
static void multi_route_del (struct multi_route *route)
 
static bool multi_route_defined (const struct multi_context *m, const struct multi_route *r)
 
void ungenerate_prefix (struct multi_instance *mi)
 
static void set_prefix (struct multi_instance *mi)
 
static void clear_prefix (void)
 
void multi_reap_process_dowork (const struct multi_context *m)
 
void multi_process_per_second_timers_dowork (struct multi_context *m)
 
static void multi_reap_process (const struct multi_context *m)
 
static void multi_process_per_second_timers (struct multi_context *m)
 
static void multi_get_timeout (struct multi_context *m, struct timeval *dest)
 
static bool multi_process_outgoing_tun (struct multi_context *m, const unsigned int mpp_flags)
 Send a packet over the virtual tun/tap network interface to its locally reachable destination.
 
static bool multi_process_outgoing_link_dowork (struct multi_context *m, struct multi_instance *mi, const unsigned int mpp_flags)
 
static void multi_set_pending (struct multi_context *m, struct multi_instance *mi)
 
void multi_assign_peer_id (struct multi_context *m, struct multi_instance *mi)
 Assigns a peer-id to a a client and adds the instance to the the instances array of the multi_context structure.
 
struct multi_instancelookup_by_cid (struct multi_context *m, const unsigned long cid)
 
void update_vhash (struct multi_context *m, struct multi_instance *mi, const char *old_ip, const char *old_ipv6)
 Update the vhash with new IP/IPv6 addresses in the multi_context when a push-update message containing ifconfig/ifconfig-ipv6 options is sent from the server.
 

Detailed Description

Header file for server-mode related structures and functions.

Definition in file multi.h.

Macro Definition Documentation

◆ CLIENT_CONNECT_OPT_MASK

#define CLIENT_CONNECT_OPT_MASK
Value:
#define OPT_P_PUSH
Definition options.h:748
#define OPT_P_INSTANCE
allowed in ccd, client-connect etc
Definition options.h:749
#define OPT_P_ECHO
Definition options.h:752
#define OPT_P_CONFIG
Definition options.h:750
#define OPT_P_SOCKFLAGS
Definition options.h:758
#define OPT_P_TIMER
Definition options.h:739
#define OPT_P_COMP
Definition options.h:742
#define OPT_P_INHERIT
Definition options.h:753

Definition at line 653 of file multi.h.

◆ MPP_CLOSE_ON_SIGNAL

#define MPP_CLOSE_ON_SIGNAL   (1 << 2)

Definition at line 277 of file multi.h.

◆ MPP_CONDITIONAL_PRE_SELECT

#define MPP_CONDITIONAL_PRE_SELECT   (1 << 1)

Definition at line 276 of file multi.h.

◆ MPP_PRE_SELECT

#define MPP_PRE_SELECT   (1 << 0)

Definition at line 275 of file multi.h.

◆ MPP_RECORD_TOUCH

#define MPP_RECORD_TOUCH   (1 << 3)

Definition at line 278 of file multi.h.

◆ MULTI_CACHE_ROUTE_TTL

#define MULTI_CACHE_ROUTE_TTL   60

Definition at line 559 of file multi.h.

◆ MULTI_CHECK_SIG

#define MULTI_CHECK_SIG (   m)    EVENT_LOOP_CHECK_SIGNAL(&(m)->top, multi_process_signal, (m))

Definition at line 672 of file multi.h.

◆ MULTI_PREFIX_MAX_LENGTH

#define MULTI_PREFIX_MAX_LENGTH   256

Definition at line 45 of file multi.h.

◆ MULTI_ROUTE_AGEABLE

#define MULTI_ROUTE_AGEABLE   (1 << 1)

Definition at line 243 of file multi.h.

◆ MULTI_ROUTE_CACHE

#define MULTI_ROUTE_CACHE   (1 << 0)

Definition at line 242 of file multi.h.

◆ REAP_DIVISOR

#define REAP_DIVISOR   256 /* How many passes to cover whole hash table */

Definition at line 551 of file multi.h.

◆ REAP_MAX

#define REAP_MAX   1024 /* Maximum number of buckets per pass */

Definition at line 553 of file multi.h.

◆ REAP_MAX_WAKEUP

#define REAP_MAX_WAKEUP   10 /* Do reap pass at least once per n seconds */

Definition at line 550 of file multi.h.

◆ REAP_MIN

#define REAP_MIN   16 /* Minimum number of buckets per pass */

Definition at line 552 of file multi.h.

Enumeration Type Documentation

◆ client_connect_return

Return values used by the client connect call-back functions.

Enumerator
CC_RET_FAILED 
CC_RET_SUCCEEDED 
CC_RET_DEFERRED 
CC_RET_SKIPPED 

Definition at line 226 of file multi.h.

Function Documentation

◆ clear_prefix()

static void clear_prefix ( void  )
inlinestatic

◆ init_management_callback_multi()

void init_management_callback_multi ( struct multi_context m)

◆ lookup_by_cid()

struct multi_instance * lookup_by_cid ( struct multi_context m,
const unsigned long  cid 
)

◆ multi_add_mbuf()

void multi_add_mbuf ( struct multi_context m,
struct multi_instance mi,
struct mbuf_buffer mb 
)

◆ multi_assign_peer_id()

void multi_assign_peer_id ( struct multi_context m,
struct multi_instance mi 
)

Assigns a peer-id to a a client and adds the instance to the the instances array of the multi_context structure.

Parameters
m- The single multi_context structure.
mi- The multi_instance of the VPN tunnel to be postprocessed.

Definition at line 4150 of file multi.c.

References ASSERT, context::c2, multi_instance::context, i, multi_context::instances, multi_context::max_clients, MAX_PEER_ID, tls_multi::peer_id, and context_2::tls_multi.

Referenced by multi_create_instance_tcp(), and multi_get_create_instance_udp().

◆ multi_close_instance()

void multi_close_instance ( struct multi_context m,
struct multi_instance mi,
bool  shutdown 
)

◆ multi_close_instance_on_signal()

void multi_close_instance_on_signal ( struct multi_context m,
struct multi_instance mi 
)

◆ multi_create_instance()

struct multi_instance * multi_create_instance ( struct multi_context m,
const struct mroute_addr real,
struct link_socket sock 
)

◆ multi_get_queue()

struct multi_instance * multi_get_queue ( struct mbuf_set ms)

◆ multi_get_timeout()

static void multi_get_timeout ( struct multi_context m,
struct timeval *  dest 
)
inlinestatic

◆ multi_ifconfig_pool_persist()

void multi_ifconfig_pool_persist ( struct multi_context m,
bool  force 
)

◆ multi_instance_dec_refcount()

static void multi_instance_dec_refcount ( struct multi_instance mi)
inlinestatic

Definition at line 470 of file multi.h.

References multi_instance::gc, gc_free(), and multi_instance::refcount.

Referenced by multi_close_instance(), and multi_route_del().

◆ multi_instance_inc_refcount()

static void multi_instance_inc_refcount ( struct multi_instance mi)
inlinestatic

Definition at line 464 of file multi.h.

References multi_instance::refcount.

Referenced by multi_create_instance(), and multi_learn_addr().

◆ multi_instance_string()

const char * multi_instance_string ( const struct multi_instance mi,
bool  null,
struct gc_arena gc 
)

◆ multi_output_queue_ready()

static bool multi_output_queue_ready ( const struct multi_context m,
const struct multi_instance mi 
)
inlinestatic

◆ multi_process_drop_outgoing_tun()

void multi_process_drop_outgoing_tun ( struct multi_context m,
const unsigned int  mpp_flags 
)

◆ multi_process_incoming_dco()

bool multi_process_incoming_dco ( struct multi_context m)

Process an incoming DCO message (from kernel space).

Parameters
m- The single multi_context structure.
Returns
  • True, if the message was received correctly.
  • False, if there was an error while reading the message.

Referenced by multi_io_process_io(), and multi_process_io_udp().

◆ multi_process_outgoing_link_dowork()

static bool multi_process_outgoing_link_dowork ( struct multi_context m,
struct multi_instance mi,
const unsigned int  mpp_flags 
)
inlinestatic

◆ multi_process_outgoing_link_pre()

static struct multi_instance * multi_process_outgoing_link_pre ( struct multi_context m)
inlinestatic

◆ multi_process_per_second_timers()

static void multi_process_per_second_timers ( struct multi_context m)
inlinestatic

◆ multi_process_per_second_timers_dowork()

void multi_process_per_second_timers_dowork ( struct multi_context m)

◆ multi_process_post()

bool multi_process_post ( struct multi_context m,
struct multi_instance mi,
const unsigned int  flags 
)

Perform postprocessing of a VPN tunnel instance.

After some VPN tunnel activity has taken place, the VPN tunnel's state may need updating and some follow-up action may be required. This function controls the necessary postprocessing. It is called by many other functions that handle VPN tunnel related activity, such as multi_process_incoming_link(), multi_process_outgoing_link(), multi_process_incoming_tun(), multi_process_outgoing_tun(), and multi_process_timeout(), among others.

Parameters
m- The single multi_context structure.
mi- The multi_instance of the VPN tunnel to be postprocessed.
flags- Fast I/O optimization flags.
Returns
  • True, if the VPN tunnel instance mi was not closed due to a signal during processing.
  • False, if the VPN tunnel instance mi was closed.

Definition at line 3013 of file multi.c.

References ANY_OUT, auth_deferred_status::auth_control_file, key_state::authenticated, context::c2, multi_instance::client_connect_defer_state, multi_instance::context, client_connect_defer_state::deferred_ret_file, context_2::fragment, is_cas_pending(), IS_SIG, tls_session::key, KS_AUTH_DEFERRED, KS_AUTH_FALSE, KS_PRIMARY, buffer::len, MPP_CLOSE_ON_SIGNAL, MPP_CONDITIONAL_PRE_SELECT, MPP_PRE_SELECT, MPP_RECORD_TOUCH, multi_context::mpp_touched, multi_close_instance_on_signal(), multi_connection_established(), multi_schedule_context_wakeup(), multi_set_pending(), tls_multi::multi_state, fragment_master::outgoing, multi_context::pending, key_state::plugin_auth, pre_select(), key_state::script_auth, tls_multi::session, context_2::timeval, context_2::tls_multi, TM_ACTIVE, context_2::to_link, context_2::to_tun, and multi_context::top.

Referenced by multi_create_instance(), multi_io_dispatch(), multi_process_drop_outgoing_tun(), multi_process_incoming_link(), multi_process_incoming_tun(), multi_process_outgoing_link_dowork(), multi_process_outgoing_tun(), multi_process_timeout(), and multi_tcp_process_outgoing_link().

◆ multi_process_signal()

bool multi_process_signal ( struct multi_context m)

◆ multi_process_timeout()

bool multi_process_timeout ( struct multi_context m,
const unsigned int  mpp_flags 
)

◆ multi_reap_process()

static void multi_reap_process ( const struct multi_context m)
inlinestatic

◆ multi_reap_process_dowork()

void multi_reap_process_dowork ( const struct multi_context m)

◆ multi_route_defined()

static bool multi_route_defined ( const struct multi_context m,
const struct multi_route r 
)
inlinestatic

◆ multi_route_del()

static void multi_route_del ( struct multi_route route)
inlinestatic

◆ multi_set_pending()

static void multi_set_pending ( struct multi_context m,
struct multi_instance mi 
)
inlinestatic

◆ route_quota_dec()

static void route_quota_dec ( struct multi_instance mi)
inlinestatic

Definition at line 439 of file multi.h.

References multi_instance::route_count.

Referenced by multi_route_del().

◆ route_quota_exceeded()

void route_quota_exceeded ( const struct multi_instance mi)

◆ route_quota_inc()

static void route_quota_inc ( struct multi_instance mi)
inlinestatic

Definition at line 433 of file multi.h.

References multi_instance::route_count.

Referenced by multi_learn_addr().

◆ route_quota_test()

static bool route_quota_test ( const struct multi_instance mi)
inlinestatic

◆ set_prefix()

static void set_prefix ( struct multi_instance mi)
inlinestatic

◆ ungenerate_prefix()

void ungenerate_prefix ( struct multi_instance mi)

Definition at line 489 of file multi.c.

References multi_instance::msg_prefix, and set_prefix().

Referenced by multi_close_instance(), and multi_get_create_instance_udp().

◆ update_vhash()

void update_vhash ( struct multi_context m,
struct multi_instance mi,
const char *  old_ip,
const char *  old_ipv6 
)

Update the vhash with new IP/IPv6 addresses in the multi_context when a push-update message containing ifconfig/ifconfig-ipv6 options is sent from the server.

This function should be called after a push-update and old_ip/old_ipv6 are the previous addresses of the client in ctx->options.ifconfig_local and ctx->options.ifconfig_ipv6_local.

Definition at line 4277 of file multi.c.

References multi_instance::context, options::ifconfig_ipv6_local, options::ifconfig_local, multi_learn_in6_addr(), multi_learn_in_addr_t(), and context::options.

Referenced by send_push_update().