| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384 | // package for logicing client and server codepackage logicimport (	"encoding/base64"	"encoding/json"	"fmt"	"math/rand"	"net"	"os"	"strconv"	"strings"	"time"	"github.com/gravitl/netmaker/database"	"github.com/gravitl/netmaker/logger"	"github.com/gravitl/netmaker/models"	"github.com/gravitl/netmaker/netclient/ncutils"	"github.com/gravitl/netmaker/servercfg")// IsBase64 - checks if a string is in base64 format// This is used to validate public keys (make sure they're base64 encoded like all public keys should be).func IsBase64(s string) bool {	_, err := base64.StdEncoding.DecodeString(s)	return err == nil}// CheckEndpoint - checks if an endpoint is validfunc CheckEndpoint(endpoint string) bool {	endpointarr := strings.Split(endpoint, ":")	return len(endpointarr) == 2}// FileExists - checks if local file existsfunc FileExists(f string) bool {	info, err := os.Stat(f)	if os.IsNotExist(err) {		return false	}	return !info.IsDir()}// IsAddressInCIDR - util to see if an address is in a cidr or notfunc IsAddressInCIDR(address, cidr string) bool {	var _, currentCIDR, cidrErr = net.ParseCIDR(cidr)	if cidrErr != nil {		return false	}	var addrParts = strings.Split(address, ".")	var addrPartLength = len(addrParts)	if addrPartLength != 4 {		return false	} else {		if addrParts[addrPartLength-1] == "0" ||			addrParts[addrPartLength-1] == "255" {			return false		}	}	ip, _, err := net.ParseCIDR(fmt.Sprintf("%s/32", address))	if err != nil {		return false	}	return currentCIDR.Contains(ip)}// DeleteNodeByMacAddress - deletes a node from database or moves into delete nodes tablefunc DeleteNodeByMacAddress(node *models.Node, exterminate bool) error {	var err error	var key = node.ID	if !exterminate {		args := strings.Split(key, "###")		node, err := GetNodeByMacAddress(args[0], args[1])		if err != nil {			return err		}		node.Action = models.NODE_DELETE		nodedata, err := json.Marshal(&node)		if err != nil {			return err		}		err = database.Insert(key, string(nodedata), database.DELETED_NODES_TABLE_NAME)		if err != nil {			return err		}	} else {		if err := database.DeleteRecord(database.DELETED_NODES_TABLE_NAME, key); err != nil {			logger.Log(2, err.Error())		}	}	if err = database.DeleteRecord(database.NODES_TABLE_NAME, key); err != nil {		return err	}	if servercfg.IsDNSMode() {		SetDNS()	}	return removeLocalServer(node)}// SetNetworkNodesLastModified - sets the network nodes last modifiedfunc SetNetworkNodesLastModified(networkName string) error {	timestamp := time.Now().Unix()	network, err := GetParentNetwork(networkName)	if err != nil {		return err	}	network.NodesLastModified = timestamp	data, err := json.Marshal(&network)	if err != nil {		return err	}	err = database.Insert(networkName, string(data), database.NETWORKS_TABLE_NAME)	if err != nil {		return err	}	return nil}// // GetNode - fetches a node from database// func GetNode(macaddress string, network string) (models.Node, error) {// 	var node models.Node// 	key, err := GetRecordKey(macaddress, network)// 	if err != nil {// 		return node, err// 	}// 	data, err := database.FetchRecord(database.NODES_TABLE_NAME, key)// 	if err != nil {// 		if data == "" {// 			data, _ = database.FetchRecord(database.DELETED_NODES_TABLE_NAME, key)// 			err = json.Unmarshal([]byte(data), &node)// 		}// 		return node, err// 	}// 	if err = json.Unmarshal([]byte(data), &node); err != nil {// 		return node, err// 	}// 	SetNodeDefaults(&node)// 	return node, err// }// DeleteNodeByID - deletes a node from database or moves into delete nodes tablefunc DeleteNodeByID(node *models.Node, exterminate bool) error {	var err error	var key = node.ID	if !exterminate {		node.Action = models.NODE_DELETE		nodedata, err := json.Marshal(&node)		if err != nil {			return err		}		err = database.Insert(key, string(nodedata), database.DELETED_NODES_TABLE_NAME)		if err != nil {			return err		}	} else {		if err := database.DeleteRecord(database.DELETED_NODES_TABLE_NAME, key); err != nil {			logger.Log(2, err.Error())		}	}	if err = database.DeleteRecord(database.NODES_TABLE_NAME, key); err != nil {		return err	}	if servercfg.IsDNSMode() {		SetDNS()	}	return removeLocalServer(node)}// GetNodePeers - fetches peers for a given nodefunc GetNodePeers(networkName string, excludeRelayed bool) ([]models.Node, error) {	var peers []models.Node	var networkNodes, egressNetworkNodes, err = getNetworkEgressAndNodes(networkName)	if err != nil {		return peers, nil	}	udppeers, errN := database.GetPeers(networkName)	if errN != nil {		logger.Log(2, errN.Error())	}	for _, node := range networkNodes {		var peer = models.Node{}		if node.IsEgressGateway == "yes" { // handle egress stuff			peer.EgressGatewayRanges = node.EgressGatewayRanges			peer.IsEgressGateway = node.IsEgressGateway		}		allow := node.IsRelayed != "yes" || !excludeRelayed		if node.Network == networkName && node.IsPending != "yes" && allow {			peer = setPeerInfo(&node)			if node.UDPHolePunch == "yes" && errN == nil && CheckEndpoint(udppeers[node.PublicKey]) {				endpointstring := udppeers[node.PublicKey]				endpointarr := strings.Split(endpointstring, ":")				if len(endpointarr) == 2 {					port, err := strconv.Atoi(endpointarr[1])					if err == nil {						// peer.Endpoint = endpointarr[0]						peer.ListenPort = int32(port)					}				}			}			if node.IsRelay == "yes" {				network, err := GetNetwork(networkName)				if err == nil {					peer.AllowedIPs = append(peer.AllowedIPs, network.AddressRange)				} else {					peer.AllowedIPs = append(peer.AllowedIPs, node.RelayAddrs...)				}				for _, egressNode := range egressNetworkNodes {					if egressNode.IsRelayed == "yes" && StringSliceContains(node.RelayAddrs, egressNode.Address) {						peer.AllowedIPs = append(peer.AllowedIPs, egressNode.EgressGatewayRanges...)					}				}			}			peers = append(peers, peer)		}	}	return peers, err}// GetPeersList - gets the peers of a given networkfunc GetPeersList(networkName string, excludeRelayed bool, relayedNodeAddr string) ([]models.Node, error) {	var peers []models.Node	var err error	if relayedNodeAddr == "" {		peers, err = GetNodePeers(networkName, excludeRelayed)	} else {		var relayNode models.Node		relayNode, err = GetNodeRelay(networkName, relayedNodeAddr)		if relayNode.Address != "" {			var peerNode = setPeerInfo(&relayNode)			network, err := GetNetwork(networkName)			if err == nil {				peerNode.AllowedIPs = append(peerNode.AllowedIPs, network.AddressRange)				var _, egressNetworkNodes, err = getNetworkEgressAndNodes(networkName)				if err == nil {					for _, egress := range egressNetworkNodes {						if egress.Address != relayedNodeAddr {							peerNode.AllowedIPs = append(peerNode.AllowedIPs, egress.EgressGatewayRanges...)						}					}				}			} else {				peerNode.AllowedIPs = append(peerNode.AllowedIPs, peerNode.RelayAddrs...)			}			nodepeers, err := GetNodePeers(networkName, false)			if err == nil && peerNode.UDPHolePunch == "yes" {				for _, nodepeer := range nodepeers {					if nodepeer.Address == peerNode.Address {						// peerNode.Endpoint = nodepeer.Endpoint						peerNode.ListenPort = nodepeer.ListenPort					}				}			}			peers = append(peers, peerNode)		}	}	return peers, err}// RandomString - returns a random string in a charsetfunc RandomString(length int) string {	const charset = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"	var seededRand *rand.Rand = rand.New(rand.NewSource(time.Now().UnixNano()))	b := make([]byte, length)	for i := range b {		b[i] = charset[seededRand.Intn(len(charset))]	}	return string(b)}// == Private Methods ==func getNetworkEgressAndNodes(networkName string) ([]models.Node, []models.Node, error) {	var networkNodes, egressNetworkNodes []models.Node	collection, err := database.FetchRecords(database.NODES_TABLE_NAME)	if err != nil {		if database.IsEmptyRecord(err) {			return networkNodes, egressNetworkNodes, nil		}		logger.Log(2, err.Error())		return nil, nil, err	}	for _, value := range collection {		var node = models.Node{}		err := json.Unmarshal([]byte(value), &node)		if err != nil {			logger.Log(2, err.Error())			continue		}		if node.Network == networkName {			networkNodes = append(networkNodes, node)			if node.IsEgressGateway == "yes" {				egressNetworkNodes = append(egressNetworkNodes, node)			}		}	}	return networkNodes, egressNetworkNodes, nil}func setPeerInfo(node *models.Node) models.Node {	var peer models.Node	peer.RelayAddrs = node.RelayAddrs	peer.IsRelay = node.IsRelay	peer.IsServer = node.IsServer	peer.IsRelayed = node.IsRelayed	peer.PublicKey = node.PublicKey	peer.Endpoint = node.Endpoint	peer.Name = node.Name	peer.LocalAddress = node.LocalAddress	peer.ListenPort = node.ListenPort	peer.AllowedIPs = node.AllowedIPs	peer.UDPHolePunch = node.UDPHolePunch	peer.Address = node.Address	peer.Address6 = node.Address6	peer.EgressGatewayRanges = node.EgressGatewayRanges	peer.IsEgressGateway = node.IsEgressGateway	peer.IngressGatewayRange = node.IngressGatewayRange	peer.IsIngressGateway = node.IsIngressGateway	peer.IsPending = node.IsPending	return peer}func setIPForwardingLinux() error {	out, err := ncutils.RunCmd("sysctl net.ipv4.ip_forward", true)	if err != nil {		logger.Log(0, "WARNING: Error encountered setting ip forwarding. This can break functionality.")		return err	} else {		s := strings.Fields(string(out))		if s[2] != "1" {			_, err = ncutils.RunCmd("sysctl -w net.ipv4.ip_forward=1", true)			if err != nil {				logger.Log(0, "WARNING: Error encountered setting ip forwarding. You may want to investigate this.")				return err			}		}	}	return nil}// StringSliceContains - sees if a string slice contains a string elementfunc StringSliceContains(slice []string, item string) bool {	for _, s := range slice {		if s == item {			return true		}	}	return false}// == private ==// sets the network server peers of a given nodefunc setNetworkServerPeers(serverNode *models.Node) {	if currentPeersList, err := getSystemPeers(serverNode); err == nil {		if database.SetPeers(currentPeersList, serverNode.Network) {			logger.Log(1, "set new peers on network", serverNode.Network)		}	} else {		logger.Log(1, "could not set peers on network", serverNode.Network, ":", err.Error())	}}// ShouldPublishPeerPorts - Gets ports from iface, sets, and returns true if they are differentfunc ShouldPublishPeerPorts(serverNode *models.Node) bool {	if currentPeersList, err := getSystemPeers(serverNode); err == nil {		if database.SetPeers(currentPeersList, serverNode.Network) {			logger.Log(1, "set new peers on network", serverNode.Network)			return true		}	}	return false}
 |