path: root/usr.sbin/nsd/xfrd-notify.c

/*
 * xfrd-notify.c - notify sending routines
 *
 * Copyright (c) 2006, NLnet Labs. All rights reserved.
 *
 * See LICENSE for the license.
 *
 */

#include "config.h"
#include <assert.h>
#include <string.h>
#include <unistd.h>
#include <errno.h>
#include "xfrd-notify.h"
#include "xfrd.h"
#include "xfrd-tcp.h"
#include "packet.h"

#define XFRD_NOTIFY_RETRY_TIMOUT 3 /* seconds between retries sending NOTIFY */

/* start sending notifies */
static void notify_enable(struct notify_zone* zone,
	struct xfrd_soa* new_soa);
/* setup the notify active state */
static void setup_notify_active(struct notify_zone* zone);

/* handle zone notify send */
static void xfrd_handle_notify_send(int fd, short event, void* arg);

static int xfrd_notify_send_udp(struct notify_zone* zone, int index);

static void
notify_send_disable(struct notify_zone* zone)
{
	zone->notify_send_enable = 0;
	event_del(&zone->notify_send_handler);
	if(zone->notify_send_handler.ev_fd != -1) {
		close(zone->notify_send_handler.ev_fd);
		zone->notify_send_handler.ev_fd = -1;
	}
}

static void
notify_send6_disable(struct notify_zone* zone)
{
	zone->notify_send6_enable = 0;
	event_del(&zone->notify_send6_handler);
	if(zone->notify_send6_handler.ev_fd != -1) {
		close(zone->notify_send6_handler.ev_fd);
		zone->notify_send6_handler.ev_fd = -1;
	}
}

void
notify_disable(struct notify_zone* zone)
{
	zone->notify_current = 0;
	/* if added, then remove */
	if(zone->notify_send_enable) {
		notify_send_disable(zone);
	}
	if(zone->notify_send6_enable) {
		notify_send6_disable(zone);
	}

	if(xfrd->notify_udp_num == XFRD_MAX_UDP_NOTIFY) {
		/* find next waiting and needy zone */
		while(xfrd->notify_waiting_first) {
			/* snip off */
			struct notify_zone* wz = xfrd->notify_waiting_first;
			assert(wz->is_waiting);
			wz->is_waiting = 0;
			xfrd->notify_waiting_first = wz->waiting_next;
			if(wz->waiting_next)
				wz->waiting_next->waiting_prev = NULL;
			if(xfrd->notify_waiting_last == wz)
				xfrd->notify_waiting_last = NULL;
			/* see if this zone needs notify sending */
			if(wz->notify_current) {
				DEBUG(DEBUG_XFRD,1, (LOG_INFO,
					"xfrd: zone %s: notify off waiting list.",
					zone->apex_str)	);
				setup_notify_active(wz);
				return;
			}
		}
	}
	xfrd->notify_udp_num--;
}

void
init_notify_send(rbtree_type* tree, region_type* region,
	struct zone_options* options)
{
	struct notify_zone* not = (struct notify_zone*)
		region_alloc(region, sizeof(struct notify_zone));
	memset(not, 0, sizeof(struct notify_zone));
	not->apex = options->node.key;
	not->apex_str = options->name;
	not->node.key = not->apex;
	not->options = options;

	/* if master zone and have a SOA */
	not->current_soa = (struct xfrd_soa*)region_alloc(region,
		sizeof(struct xfrd_soa));
	memset(not->current_soa, 0, sizeof(struct xfrd_soa));

	not->notify_send_handler.ev_fd = -1;
	not->notify_send6_handler.ev_fd = -1;
	not->is_waiting = 0;

	not->notify_send_enable = 0;
	not->notify_send6_enable = 0;
	tsig_create_record_custom(&not->notify_tsig, NULL, 0, 0, 4);
	not->notify_current = 0;
	rbtree_insert(tree, (rbnode_type*)not);
}

void
xfrd_del_notify(xfrd_state_type* xfrd, const dname_type* dname)
{
	/* find it */
	struct notify_zone* not = (struct notify_zone*)rbtree_delete(
		xfrd->notify_zones, dname);
	if(!not)
		return;

	/* waiting list */
	if(not->is_waiting) {
		if(not->waiting_prev)
			not->waiting_prev->waiting_next = not->waiting_next;
		else	xfrd->notify_waiting_first = not->waiting_next;
		if(not->waiting_next)
			not->waiting_next->waiting_prev = not->waiting_prev;
		else	xfrd->notify_waiting_last = not->waiting_prev;
		not->is_waiting = 0;
	}

	/* event */
	if(not->notify_send_enable || not->notify_send6_enable) {
		notify_disable(not);
	}

	/* del tsig */
	tsig_delete_record(&not->notify_tsig, NULL);

	/* free it */
	region_recycle(xfrd->region, not->current_soa, sizeof(xfrd_soa_type));
	/* the apex is recycled when the zone_options.node.key is removed */
	region_recycle(xfrd->region, not, sizeof(*not));
}

static int
reply_pkt_is_ack(struct notify_zone* zone, buffer_type* packet, int index)
{
	if((OPCODE(packet) != OPCODE_NOTIFY) ||
		(QR(packet) == 0)) {
		log_msg(LOG_ERR, "xfrd: zone %s: received bad notify reply opcode/flags from %s",
			zone->apex_str, zone->pkts[index].dest->ip_address_spec);

		return 0;
	}
	/* we know it is OPCODE NOTIFY, QUERY_REPLY and for this zone */
	if(ID(packet) != zone->pkts[index].notify_query_id) {
		log_msg(LOG_ERR, "xfrd: zone %s: received notify-ack with bad ID from %s",
			zone->apex_str, zone->pkts[index].dest->ip_address_spec);
		return 0;
	}
	/* could check tsig, but why. The reply does not cause processing. */
	if(RCODE(packet) != RCODE_OK) {
		log_msg(LOG_ERR, "xfrd: zone %s: received notify response error %s from %s",
			zone->apex_str, rcode2str(RCODE(packet)),
			zone->pkts[index].dest->ip_address_spec);
		if(RCODE(packet) == RCODE_IMPL)
			return 1; /* rfc1996: notimpl notify reply: consider retries done */
		return 0;
	}
	DEBUG(DEBUG_XFRD,1, (LOG_INFO, "xfrd: zone %s: host %s acknowledges notify",
		zone->apex_str, zone->pkts[index].dest->ip_address_spec));
	return 1;
}

/* compare sockaddr and acl_option addr and port numbers */
static int
cmp_addr_equal(struct sockaddr* a, socklen_t a_len, struct acl_options* dest)
{
	if(dest) {
		unsigned int destport = ((dest->port == 0)?
			(unsigned)atoi(TCP_PORT):dest->port);
#ifdef INET6
		struct sockaddr_storage* a1 = (struct sockaddr_storage*)a;
		if(a1->ss_family == AF_INET6 && dest->is_ipv6) {
			struct sockaddr_in6* a2 = (struct sockaddr_in6*)a;
			if(a_len < sizeof(struct sockaddr_in6))
				return 0; /* too small */
			if(ntohs(a2->sin6_port) != destport)
				return 0; /* different port number */
			if(memcmp(&a2->sin6_addr, &dest->addr.addr6,
				sizeof(struct in6_addr)) != 0)
				return 0; /* different address */
			return 1;
		}
		if(a1->ss_family == AF_INET6 || dest->is_ipv6)
			return 0; /* different address family */
		else {
#endif /* INET6 */
			struct sockaddr_in* a3 = (struct sockaddr_in*)a;
			if(a_len < sizeof(struct sockaddr_in))
				return 0; /* too small */
			if(ntohs(a3->sin_port) != destport)
				return 0; /* different port number */
			if(memcmp(&a3->sin_addr, &dest->addr.addr,
				sizeof(struct in_addr)) != 0)
				return 0; /* different address */
			return 1;
#ifdef INET6
		}
#endif
	}
	return 0;
}

static void
notify_pkt_done(struct notify_zone* zone, int index)
{
	zone->pkts[index].dest = NULL;
	zone->pkts[index].notify_retry = 0;
	zone->pkts[index].send_time = 0;
	zone->pkts[index].notify_query_id = 0;
	zone->notify_pkt_count--;
}

static void
notify_pkt_retry(struct notify_zone* zone, int index)
{
	if(++zone->pkts[index].notify_retry >=
		zone->options->pattern->notify_retry) {
		log_msg(LOG_ERR, "xfrd: zone %s: max notify send count reached, %s unreachable",
			zone->apex_str,
			zone->pkts[index].dest->ip_address_spec);
		notify_pkt_done(zone, index);
		return;
	}
	if(!xfrd_notify_send_udp(zone, index)) {
		notify_pkt_retry(zone, index);
	}
}

static void
xfrd_handle_notify_reply(struct notify_zone* zone, buffer_type* packet, 
	struct sockaddr* src, socklen_t srclen)
{
	int i;
	for(i=0; i<NOTIFY_CONCURRENT_MAX; i++) {
		/* is this entry in use */
		if(!zone->pkts[i].dest)
			continue;
		/* based on destination */
		if(!cmp_addr_equal(src, srclen, zone->pkts[i].dest))
			continue;
		if(reply_pkt_is_ack(zone, packet, i)) {
			/* is done */
			notify_pkt_done(zone, i);
			return;
		} else {
			/* retry */
			notify_pkt_retry(zone, i);
			return;
		}
	}
}

static int
xfrd_notify_send_udp(struct notify_zone* zone, int index)
{
	buffer_type* packet = xfrd_get_temp_buffer();
	if(!zone->pkts[index].dest) return 0;
	/* send NOTIFY to secondary. */
	xfrd_setup_packet(packet, TYPE_SOA, CLASS_IN, zone->apex,
		qid_generate());
	zone->pkts[index].notify_query_id = ID(packet);
	OPCODE_SET(packet, OPCODE_NOTIFY);
	AA_SET(packet);
	if(zone->current_soa->serial != 0) {
		/* add current SOA to answer section */
		ANCOUNT_SET(packet, 1);
		xfrd_write_soa_buffer(packet, zone->apex, zone->current_soa);
	}
	if(zone->pkts[index].dest->key_options) {
		xfrd_tsig_sign_request(packet, &zone->notify_tsig, zone->pkts[index].dest);
	}
	buffer_flip(packet);

	if((zone->pkts[index].dest->is_ipv6
		&& zone->notify_send6_handler.ev_fd == -1) ||
		(!zone->pkts[index].dest->is_ipv6
		&& zone->notify_send_handler.ev_fd == -1)) {
		/* open fd */
		int fd = xfrd_send_udp(zone->pkts[index].dest, packet,
			zone->options->pattern->outgoing_interface);
		if(fd == -1) {
			log_msg(LOG_ERR, "xfrd: zone %s: could not send notify #%d to %s",
				zone->apex_str, zone->pkts[index].notify_retry,
				zone->pkts[index].dest->ip_address_spec);
			return 0;
		}
		if(zone->pkts[index].dest->is_ipv6)
			zone->notify_send6_handler.ev_fd = fd;
		else	zone->notify_send_handler.ev_fd = fd;
	} else {
		/* send on existing fd */
#ifdef INET6
        	struct sockaddr_storage to;
#else
        	struct sockaddr_in to;
#endif /* INET6 */
		int fd;
		socklen_t to_len = xfrd_acl_sockaddr_to(
			zone->pkts[index].dest, &to);
		if(zone->pkts[index].dest->is_ipv6)
			fd = zone->notify_send6_handler.ev_fd;
		else	fd = zone->notify_send_handler.ev_fd;
		if(sendto(fd,
			buffer_current(packet), buffer_remaining(packet), 0,
			(struct sockaddr*)&to, to_len) == -1) {
			log_msg(LOG_ERR, "xfrd notify: sendto %s failed %s",
				zone->pkts[index].dest->ip_address_spec,
				strerror(errno));
			return 0;
		}
	}
	zone->pkts[index].send_time = time(NULL);
	DEBUG(DEBUG_XFRD,1, (LOG_INFO, "xfrd: zone %s: sent notify #%d to %s",
		zone->apex_str, zone->pkts[index].notify_retry,
		zone->pkts[index].dest->ip_address_spec));
	return 1;
}

static void
notify_timeout_check(struct notify_zone* zone)
{
	time_t now = time(NULL);
	int i;
	for(i=0; i<NOTIFY_CONCURRENT_MAX; i++) {
		if(!zone->pkts[i].dest)
			continue;
		if(now >= zone->pkts[i].send_time + XFRD_NOTIFY_RETRY_TIMOUT) {
			notify_pkt_retry(zone, i);
		}
	}
}

static void
notify_start_pkts(struct notify_zone* zone)
{
	int i;
	if(!zone->notify_current) return; /* no more acl to send to */
	for(i=0; i<NOTIFY_CONCURRENT_MAX; i++) {
		/* while loop, in case the retries all fail, and we can
		 * start another on this slot, or run out of notify acls */
		while(zone->pkts[i].dest==NULL && zone->notify_current) {
			zone->pkts[i].dest = zone->notify_current;
			zone->notify_current = zone->notify_current->next;
			zone->pkts[i].notify_retry = 0;
			zone->pkts[i].notify_query_id = 0;
			zone->pkts[i].send_time = 0;
			zone->notify_pkt_count++;
			if(!xfrd_notify_send_udp(zone, i)) {
				notify_pkt_retry(zone, i);
			}
		}
	}
}

static void
notify_setup_event(struct notify_zone* zone)
{
	if(zone->notify_send_handler.ev_fd != -1) {
		int fd = zone->notify_send_handler.ev_fd;
		if(zone->notify_send_enable) {
			event_del(&zone->notify_send_handler);
		}
		zone->notify_timeout.tv_sec = XFRD_NOTIFY_RETRY_TIMOUT;
		event_set(&zone->notify_send_handler, fd, EV_READ | EV_TIMEOUT,
			xfrd_handle_notify_send, zone);
		if(event_base_set(xfrd->event_base, &zone->notify_send_handler) != 0)
			log_msg(LOG_ERR, "notify_send: event_base_set failed");
		if(event_add(&zone->notify_send_handler, &zone->notify_timeout) != 0)
			log_msg(LOG_ERR, "notify_send: event_add failed");
		zone->notify_send_enable = 1;
	}
	if(zone->notify_send6_handler.ev_fd != -1) {
		int fd = zone->notify_send6_handler.ev_fd;
		if(zone->notify_send6_enable) {
			event_del(&zone->notify_send6_handler);
		}
		zone->notify_timeout.tv_sec = XFRD_NOTIFY_RETRY_TIMOUT;
		event_set(&zone->notify_send6_handler, fd, EV_READ | EV_TIMEOUT,
			xfrd_handle_notify_send, zone);
		if(event_base_set(xfrd->event_base, &zone->notify_send6_handler) != 0)
			log_msg(LOG_ERR, "notify_send: event_base_set failed");
		if(event_add(&zone->notify_send6_handler, &zone->notify_timeout) != 0)
			log_msg(LOG_ERR, "notify_send: event_add failed");
		zone->notify_send6_enable = 1;
	}
}

static void
xfrd_handle_notify_send(int fd, short event, void* arg)
{
	struct notify_zone* zone = (struct notify_zone*)arg;
	buffer_type* packet = xfrd_get_temp_buffer();
	if(zone->is_waiting) {
		DEBUG(DEBUG_XFRD,1, (LOG_INFO,
			"xfrd: notify waiting, skipped, %s", zone->apex_str));
		return;
	}
	if((event & EV_READ)) {
		struct sockaddr_storage src;
		socklen_t srclen = (socklen_t)sizeof(src);
		DEBUG(DEBUG_XFRD,1, (LOG_INFO,
			"xfrd: zone %s: read notify ACK", zone->apex_str));
		assert(fd != -1);
		if(xfrd_udp_read_packet(packet, fd, (struct sockaddr*)&src,
			&srclen)) {
			/* find entry, send retry or make entry NULL */
			xfrd_handle_notify_reply(zone, packet,
				(struct sockaddr*)&src, srclen);
		}
	}
	if((event & EV_TIMEOUT)) {
		DEBUG(DEBUG_XFRD,1, (LOG_INFO, "xfrd: zone %s: notify timeout",
			zone->apex_str));
		/* timeout, try again */
	}

	/* see which pkts have timeouted, retry or NULL them */
	notify_timeout_check(zone);

	/* start new packets if we have empty space */
	notify_start_pkts(zone);

	/* see if we are done */
	if(!zone->notify_current && !zone->notify_pkt_count) {
		/* we are done */
		DEBUG(DEBUG_XFRD,1, (LOG_INFO,
			"xfrd: zone %s: no more notify-send acls. stop notify.",
			zone->apex_str));
		notify_disable(zone);
		return;
	}

	notify_setup_event(zone);
}

static void
setup_notify_active(struct notify_zone* zone)
{
	zone->notify_pkt_count = 0;
	memset(zone->pkts, 0, sizeof(zone->pkts));
	zone->notify_current = zone->options->pattern->notify;
	zone->notify_timeout.tv_sec = 0;
	zone->notify_timeout.tv_usec = 0;

	if(zone->notify_send_enable)
		notify_send_disable(zone);
	event_set(&zone->notify_send_handler, -1, EV_TIMEOUT,
		xfrd_handle_notify_send, zone);
	if(event_base_set(xfrd->event_base, &zone->notify_send_handler) != 0)
		log_msg(LOG_ERR, "notifysend: event_base_set failed");
	if(evtimer_add(&zone->notify_send_handler, &zone->notify_timeout) != 0)
		log_msg(LOG_ERR, "notifysend: evtimer_add failed");
	zone->notify_send_enable = 1;
}

static void
notify_enable(struct notify_zone* zone, struct xfrd_soa* new_soa)
{
	if(!zone->options->pattern->notify) {
		return; /* no notify acl, nothing to do */
	}

	if(new_soa == NULL)
		memset(zone->current_soa, 0, sizeof(xfrd_soa_type));
	else
		memcpy(zone->current_soa, new_soa, sizeof(xfrd_soa_type));
	if(zone->is_waiting)
		return;

	if(xfrd->notify_udp_num < XFRD_MAX_UDP_NOTIFY) {
		setup_notify_active(zone);
		xfrd->notify_udp_num++;
		return;
	}
	/* put it in waiting list */
	zone->notify_current = zone->options->pattern->notify;
	zone->is_waiting = 1;
	zone->waiting_next = NULL;
	zone->waiting_prev = xfrd->notify_waiting_last;
	if(xfrd->notify_waiting_last) {
		xfrd->notify_waiting_last->waiting_next = zone;
	} else {
		xfrd->notify_waiting_first = zone;
	}
	xfrd->notify_waiting_last = zone;
	DEBUG(DEBUG_XFRD,1, (LOG_INFO, "xfrd: zone %s: notify on waiting list.",
		zone->apex_str));
}

void
xfrd_notify_start(struct notify_zone* zone, struct xfrd_state* xfrd)
{
	xfrd_zone_type* xz;
	if(zone->is_waiting || zone->notify_send_enable ||
		zone->notify_send6_enable)
		return;
	xz = (xfrd_zone_type*)rbtree_search(xfrd->zones, zone->apex);
	if(xz && xz->soa_nsd_acquired)
		notify_enable(zone, &xz->soa_nsd);
	else	notify_enable(zone, NULL);
}

void
xfrd_send_notify(rbtree_type* tree, const dname_type* apex, struct xfrd_soa* new_soa)
{
	/* lookup the zone */
	struct notify_zone* zone = (struct notify_zone*)
		rbtree_search(tree, apex);
	assert(zone);
	if(zone->notify_send_enable || zone->notify_send6_enable)
		notify_disable(zone);

	notify_enable(zone, new_soa);
}

void
notify_handle_master_zone_soainfo(rbtree_type* tree,
	const dname_type* apex, struct xfrd_soa* new_soa)
{
	/* lookup the zone */
	struct notify_zone* zone = (struct notify_zone*)
		rbtree_search(tree, apex);
	if(!zone) return; /* got SOAINFO but zone was deleted meanwhile */

	/* check if SOA changed */
	if( (new_soa == NULL && zone->current_soa->serial == 0) ||
		(new_soa && new_soa->serial == zone->current_soa->serial))
		return;
	if(zone->notify_send_enable || zone->notify_send6_enable)
		notify_disable(zone);
	notify_enable(zone, new_soa);
}

void
close_notify_fds(rbtree_type* tree)
{
	struct notify_zone* zone;
	RBTREE_FOR(zone, struct notify_zone*, tree)
	{
		if(zone->notify_send_enable || zone->notify_send6_enable)
			notify_send_disable(zone);
	}
}