Files
zeekay 241625e7d9 rename: ziti → zt across all paths
- Repo names: ziti-* → zt-*
- Go modules: github.com/hanzozt/ziti → github.com/hanzozt/zt
- Docker images: hanzozt/ziti-* → hanzozt/zt-*
- C/Java/JS symbols: ziti_* → zt_*
- File and directory names updated
2026-02-18 18:34:19 -08:00

357 lines
12 KiB
Go

/*
Copyright NetFoundry Inc.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
https://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package xgress_edge
import (
"fmt"
"strings"
"time"
"github.com/michaelquigley/pfxlog"
"github.com/hanzozt/channel/v4"
"github.com/hanzozt/sdk-golang/xgress"
edgeSdk "github.com/hanzozt/sdk-golang/zt/edge"
"github.com/hanzozt/zt/v2/common/ctrl_msg"
"github.com/hanzozt/zt/v2/common/inspect"
"github.com/hanzozt/zt/v2/common/logcontext"
"github.com/hanzozt/zt/v2/controller/xt"
"github.com/hanzozt/zt/v2/router/xgress_router"
"github.com/pkg/errors"
)
type dialer struct {
factory *Factory
options *Options
}
func (dialer *dialer) IsTerminatorValid(id string, destination string) bool {
valid, _ := dialer.InspectTerminator(id, destination, true)
return valid
}
func (dialer *dialer) InspectTerminator(id string, destination string, fixInvalid bool) (bool, string) {
terminatorAddress := strings.TrimPrefix(destination, "hosted:")
pfxlog.Logger().Debug("looking up hosted service conn")
terminator, found := dialer.factory.hostedServices.Get(terminatorAddress)
if found && terminator.terminatorId == id {
dialer.factory.hostedServices.markEstablished(terminator, "validation message received")
result, err := terminator.inspect(dialer.factory.hostedServices, fixInvalid, false)
if err != nil {
return true, err.Error()
}
return result.Type == edgeSdk.ConnTypeBind, result.Detail
}
return false, "terminator not found"
}
func newDialer(factory *Factory, options *Options) xgress_router.Dialer {
txd := &dialer{
factory: factory,
options: options,
}
return txd
}
func (dialer *dialer) Dial(params xgress_router.DialParams) (xt.PeerData, error) {
terminatorAddress := params.GetDestination()
circuitId := params.GetCircuitId()
log := pfxlog.ChannelLogger(logcontext.EstablishPath).Wire(params.GetLogContext()).
WithField("binding", "edge").
WithField("terminatorAddress", terminatorAddress)
terminatorAddress = strings.TrimPrefix(terminatorAddress, "hosted:")
log.Debugf("looking up hosted service conn for address %v", terminatorAddress)
terminator, found := dialer.factory.hostedServices.Get(terminatorAddress)
if !found {
return nil, xgress.InvalidTerminatorError{InnerError: fmt.Errorf("host for terminator address '%v' not found", terminatorAddress)}
}
log = log.WithField("bindConnId", terminator.MsgChannel.Id())
if !terminator.assignIds {
return dialer.dialLegacy(terminator, params)
}
if terminator.useSdkXgress {
log.Info("use sdk xgress set, setting up sdk flow-control connection")
return dialer.dialSdkXgress(terminator, params)
}
callerId := ""
if circuitId.Data != nil {
if callerIdBytes, found := circuitId.Data[uint32(edgeSdk.CallerIdHeader)]; found {
callerId = string(callerIdBytes)
}
}
log.Debug("dialing sdk client hosting service")
dialRequest := edgeSdk.NewDialMsg(terminator.Id(), terminator.serviceSessionToken.JwtToken.Raw, callerId)
dialRequest.PutStringHeader(edgeSdk.CircuitIdHeader, params.GetCircuitId().Token)
if pk, ok := circuitId.Data[uint32(edgeSdk.PublicKeyHeader)]; ok {
dialRequest.Headers[edgeSdk.PublicKeyHeader] = pk
}
if marker, ok := circuitId.Data[uint32(edgeSdk.ConnectionMarkerHeader)]; ok {
dialRequest.Headers[edgeSdk.ConnectionMarkerHeader] = marker
}
appData, hasAppData := circuitId.Data[uint32(edgeSdk.AppDataHeader)]
if hasAppData {
dialRequest.Headers[edgeSdk.AppDataHeader] = appData
}
if dialerIdentityId, ok := circuitId.Data[ctrl_msg.DialerIdentityIdHeader]; ok {
dialRequest.Headers[edgeSdk.DialerIdentityId] = dialerIdentityId
}
if dialerIdentityName, ok := circuitId.Data[ctrl_msg.DialerIdentityNameHeader]; ok {
dialRequest.Headers[edgeSdk.DialerIdentityName] = dialerIdentityName
}
connId := terminator.nextDialConnId()
log = log.WithField("connId", connId)
log.Debugf("router assigned connId %v for dial", connId)
dialRequest.PutUint32Header(edgeSdk.RouterProvidedConnId, connId)
conn, err := terminator.newConnection(connId)
if err != nil {
return nil, errors.Wrapf(err, "failed to create edge xgress conn for terminator address %v", terminatorAddress)
}
// On the terminator, which this is, this only starts the txer, which pulls data from the link
// Since the opposing xgress doesn't start until this call returns, nothing should be coming this way yet
x := xgress.NewXgress(circuitId.Token, params.GetCtrlId(), params.GetAddress(), conn, xgress.Terminator, &dialer.options.Options, params.GetCircuitTags())
params.GetBindHandler().HandleXgressBind(x)
conn.x.Store(x)
x.Start()
log.Debug("xgress start, sending dial to SDK")
to := 5 * time.Second
timeToDeadline := time.Until(params.GetDeadline())
if timeToDeadline > 0 && timeToDeadline < to {
to = timeToDeadline
}
log.Info("sending dial request to sdk")
reply, err := dialRequest.WithPriority(channel.Highest).WithTimeout(to).SendForReply(terminator.GetControlSender())
if err != nil {
conn.close(false, err.Error())
x.Close()
return nil, err
}
result, err := edgeSdk.UnmarshalDialResult(reply)
if err != nil {
conn.close(false, err.Error())
x.Close()
return nil, err
}
if !result.Success {
msg := fmt.Sprintf("failed to establish connection with terminator address %v. error: (%v)", terminatorAddress, result.Message)
log.Info(msg)
conn.close(false, msg)
x.Close()
return nil, errors.New(msg)
}
log.Debug("dial success")
return nil, nil
}
func (dialer *dialer) dialSdkXgress(terminator *edgeTerminator, params xgress_router.DialParams) (xt.PeerData, error) {
terminatorAddress := params.GetDestination()
circuitId := params.GetCircuitId()
log := pfxlog.ChannelLogger(logcontext.EstablishPath).Wire(params.GetLogContext()).
WithField("binding", "edge").
WithField("terminatorAddress", terminatorAddress)
callerId := ""
if circuitId.Data != nil {
if callerIdBytes, found := circuitId.Data[uint32(edgeSdk.CallerIdHeader)]; found {
callerId = string(callerIdBytes)
}
}
log.Debug("dialing sdk client hosting service")
dialRequest := edgeSdk.NewDialMsg(terminator.Id(), terminator.serviceSessionToken.JwtToken.Raw, callerId)
dialRequest.PutStringHeader(edgeSdk.CircuitIdHeader, params.GetCircuitId().Token)
dialRequest.PutBoolHeader(edgeSdk.UseXgressToSdkHeader, true)
dialRequest.PutStringHeader(edgeSdk.XgressCtrlIdHeader, params.GetCtrlId())
dialRequest.PutStringHeader(edgeSdk.XgressAddressHeader, string(params.GetAddress()))
if pk, ok := circuitId.Data[uint32(edgeSdk.PublicKeyHeader)]; ok {
dialRequest.Headers[edgeSdk.PublicKeyHeader] = pk
}
if marker, ok := circuitId.Data[uint32(edgeSdk.ConnectionMarkerHeader)]; ok {
dialRequest.Headers[edgeSdk.ConnectionMarkerHeader] = marker
}
appData, hasAppData := circuitId.Data[uint32(edgeSdk.AppDataHeader)]
if hasAppData {
dialRequest.Headers[edgeSdk.AppDataHeader] = appData
}
if dialerIdentityId, ok := circuitId.Data[ctrl_msg.DialerIdentityIdHeader]; ok {
dialRequest.Headers[edgeSdk.DialerIdentityId] = dialerIdentityId
}
if dialerIdentityName, ok := circuitId.Data[ctrl_msg.DialerIdentityNameHeader]; ok {
dialRequest.Headers[edgeSdk.DialerIdentityName] = dialerIdentityName
}
connId := terminator.nextDialConnId()
log = log.WithField("connId", connId)
log.Debugf("router assigned connId %v for dial", connId)
dialRequest.PutUint32Header(edgeSdk.RouterProvidedConnId, connId)
edgeForwarder := &xgEdgeForwarder{
edgeClientConn: terminator.edgeClientConn,
circuitId: circuitId.Token,
originator: xgress.Terminator,
ctrlId: params.GetCtrlId(),
address: params.GetAddress(),
connId: connId,
metrics: dialer.factory.env.GetXgressMetrics(),
tags: params.GetCircuitTags(),
}
edgeForwarder.RegisterRouting()
log.Debug("xgress start, sending dial to SDK")
to := 5 * time.Second
timeToDeadline := time.Until(params.GetDeadline())
if timeToDeadline > 0 && timeToDeadline < to {
to = timeToDeadline
}
log.Info("sending dial request to sdk")
reply, err := dialRequest.WithPriority(channel.Highest).WithTimeout(to).SendForReply(terminator.GetControlSender())
if err != nil {
edgeForwarder.UnregisterRouting()
return nil, err
}
result, err := edgeSdk.UnmarshalDialResult(reply)
if err != nil {
edgeForwarder.UnregisterRouting()
return nil, err
}
if !result.Success {
edgeForwarder.UnregisterRouting()
msg := fmt.Sprintf("failed to establish connection with terminator address %v. error: (%v)", terminatorAddress, result.Message)
log.Info(msg)
return nil, errors.New(msg)
}
log.Debug("dial success")
return nil, nil
}
func (dialer *dialer) dialLegacy(terminator *edgeTerminator, params xgress_router.DialParams) (xt.PeerData, error) {
terminatorAddress := params.GetDestination()
circuitId := params.GetCircuitId()
log := pfxlog.ChannelLogger(logcontext.EstablishPath).Wire(params.GetLogContext()).
WithField("binding", "edge").
WithField("terminatorAddress", terminatorAddress)
terminatorAddress = strings.TrimPrefix(terminatorAddress, "hosted:")
log = log.WithField("bindConnId", terminator.MsgChannel.Id())
callerId := ""
if circuitId.Data != nil {
if callerIdBytes, found := circuitId.Data[uint32(edgeSdk.CallerIdHeader)]; found {
callerId = string(callerIdBytes)
}
}
log.Debug("dialing sdk client hosting service")
dialRequest := edgeSdk.NewDialMsg(terminator.Id(), terminator.serviceSessionToken.JwtToken.Raw, callerId)
dialRequest.PutStringHeader(edgeSdk.CircuitIdHeader, params.GetCircuitId().Token)
if pk, ok := circuitId.Data[uint32(edgeSdk.PublicKeyHeader)]; ok {
dialRequest.Headers[edgeSdk.PublicKeyHeader] = pk
}
if marker, ok := circuitId.Data[uint32(edgeSdk.ConnectionMarkerHeader)]; ok {
dialRequest.Headers[edgeSdk.ConnectionMarkerHeader] = marker
}
appData, hasAppData := circuitId.Data[uint32(edgeSdk.AppDataHeader)]
if hasAppData {
dialRequest.Headers[edgeSdk.AppDataHeader] = appData
}
if dialerIdentityId, ok := circuitId.Data[ctrl_msg.DialerIdentityIdHeader]; ok {
dialRequest.Headers[edgeSdk.DialerIdentityId] = dialerIdentityId
}
if dialerIdentityName, ok := circuitId.Data[ctrl_msg.DialerIdentityNameHeader]; ok {
dialRequest.Headers[edgeSdk.DialerIdentityName] = dialerIdentityName
}
log.Debug("router not assigning connId for dial")
reply, err := dialRequest.WithPriority(channel.Highest).WithTimeout(5 * time.Second).SendForReply(terminator.GetControlSender())
if err != nil {
return nil, err
}
result, err := edgeSdk.UnmarshalDialResult(reply)
if err != nil {
return nil, err
}
if !result.Success {
return nil, fmt.Errorf("failed to establish connection with terminator address %v. error: (%v)", terminatorAddress, result.Message)
}
conn, err := terminator.newConnection(result.NewConnId)
if err != nil {
startFail := edgeSdk.NewStateConnectedMsg(result.ConnId)
startFail.ReplyTo(reply)
if sendErr := terminator.SendState(startFail); sendErr != nil {
log.Debug("failed to send state disconnected")
}
return nil, errors.Wrapf(err, "failed to create edge xgress conn for terminator address %v", terminatorAddress)
}
x := xgress.NewXgress(circuitId.Token, params.GetCtrlId(), params.GetAddress(), conn, xgress.Terminator, &dialer.options.Options, params.GetCircuitTags())
params.GetBindHandler().HandleXgressBind(x)
conn.x.Store(x)
x.Start()
start := edgeSdk.NewStateConnectedMsg(result.ConnId)
start.ReplyTo(reply)
return nil, terminator.SendState(start)
}
func (dialer *dialer) Inspect(key string, timeout time.Duration) any {
if key == inspect.SdkTerminatorsKey {
return dialer.factory.hostedServices.Inspect(timeout)
}
return nil
}