nat.go 10.7 KB
Newer Older
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
1
2
3
package nat

import (
4
	"errors"
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
5
6
7
	"fmt"
	"strconv"
	"strings"
8
	"sync"
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
9
10
11
12
13
14
15
	"time"

	ma "github.com/jbenet/go-ipfs/Godeps/_workspace/src/github.com/jbenet/go-multiaddr"
	manet "github.com/jbenet/go-ipfs/Godeps/_workspace/src/github.com/jbenet/go-multiaddr-net"

	nat "github.com/jbenet/go-ipfs/Godeps/_workspace/src/github.com/fd/go-nat"
	goprocess "github.com/jbenet/go-ipfs/Godeps/_workspace/src/github.com/jbenet/goprocess"
16
	periodic "github.com/jbenet/go-ipfs/Godeps/_workspace/src/github.com/jbenet/goprocess/periodic"
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
17
	eventlog "github.com/jbenet/go-ipfs/thirdparty/eventlog"
18
19
20
21
22
23
	notifier "github.com/jbenet/go-ipfs/thirdparty/notifier"
)

var (
	// ErrNoMapping signals no mapping exists for an address
	ErrNoMapping = errors.New("mapping not established")
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
24
25
26
27
)

var log = eventlog.Logger("nat")

28
29
// MappingDuration is a default port mapping duration.
// Port mappings are renewed every (MappingDuration / 3)
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
30
31
const MappingDuration = time.Second * 60

32
33
34
// DiscoverGateway looks for a NAT device in the network and
// returns an object that can manage port mappings.
func DiscoverGateway() *NAT {
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
35
36
37
38
39
40
41
42
43
44
45
	nat, err := nat.DiscoverGateway()
	if err != nil {
		log.Debug("DiscoverGateway error:", err)
		return nil
	}
	addr, err := nat.GetDeviceAddress()
	if err != nil {
		log.Debug("DiscoverGateway address error:", err)
	} else {
		log.Debug("DiscoverGateway address:", addr)
	}
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
	return newNAT(nat)
}

// NAT is an object that manages address port mappings in
// NATs (Network Address Translators). It is a long-running
// service that will periodically renew port mappings,
// and keep an up-to-date list of all the external addresses.
type NAT struct {
	nat  nat.NAT
	proc goprocess.Process // manages nat mappings lifecycle

	mappingmu sync.RWMutex // guards mappings
	mappings  []*mapping

	Notifier
}

func newNAT(realNAT nat.NAT) *NAT {
	return &NAT{
		nat:  realNAT,
		proc: goprocess.WithParent(goprocess.Background()),
	}
}

// Close shuts down all port mappings. NAT can no longer be used.
func (nat *NAT) Close() error {
	return nat.proc.Close()
}

// Notifier is an object that assists NAT in notifying listeners.
// It is implemented using github.com/jbenet/go-ipfs/thirdparty/notifier
type Notifier struct {
	n notifier.Notifier
}

func (n *Notifier) notifyAll(notify func(n Notifiee)) {
	n.n.NotifyAll(func(n notifier.Notifiee) {
		notify(n.(Notifiee))
	})
}

// Notify signs up notifiee to listen to NAT events.
func (n *Notifier) Notify(notifiee Notifiee) {
	n.n.Notify(n)
}

// StopNotify stops signaling events to notifiee.
func (n *Notifier) StopNotify(notifiee Notifiee) {
	n.n.StopNotify(notifiee)
}

// Notifiee is an interface objects must implement to listen to NAT events.
type Notifiee interface {

	// Called every time a successful mapping happens
	// Warning: the port mapping may have changed. If that is the
	// case, both MappingSuccess and MappingChanged are called.
	MappingSuccess(nat *NAT, m Mapping)

	// Called when mapping a port succeeds, but the mapping is
	// with a different port than an earlier success.
	MappingChanged(nat *NAT, m Mapping, oldport int, newport int)

	// Called when a port mapping fails. NAT will continue attempting after
	// the next period. To stop trying, use: mapping.Close(). After this failure,
	// mapping.ExternalPort() will be zero, and nat.ExternalAddrs() will not
	// return the address for this mapping. With luck, the next attempt will
	// succeed, without the client needing to do anything.
	MappingFailed(nat *NAT, m Mapping, oldport int, err error)
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
115
116
}

117
// Mapping represents a port mapping in a NAT.
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
118
type Mapping interface {
119
120
121
122
123
	// NAT returns the NAT object this Mapping belongs to.
	NAT() *NAT

	// Protocol returns the protocol of this port mapping. This is either
	// "tcp" or "udp" as no other protocols are likely to be NAT-supported.
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
124
	Protocol() string
125
126
127

	// InternalPort returns the internal device port. Mapping will continue to
	// try to map InternalPort() to an external facing port.
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
128
	InternalPort() int
129
130
131

	// ExternalPort returns the external facing port. If the mapping is not
	// established, port will be 0
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
132
	ExternalPort() int
133
134
135
136
137
138
139

	// InternalAddr returns the internal address.
	InternalAddr() ma.Multiaddr

	// ExternalAddr returns the external facing address. If the mapping is not
	// established, addr will be nil, and and ErrNoMapping will be returned.
	ExternalAddr() (addr ma.Multiaddr, err error)
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
140
141
}

142
// keeps republishing
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
143
type mapping struct {
144
145
146
	sync.Mutex // guards all fields

	nat     *NAT
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
147
148
149
	proto   string
	intport int
	extport int
150
	intaddr ma.Multiaddr
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
151
152
153
	proc    goprocess.Process
}

154
155
156
func (m *mapping) NAT() *NAT {
	m.Lock()
	defer m.Unlock()
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
157
158
	return m.nat
}
159

Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
160
func (m *mapping) Protocol() string {
161
162
	m.Lock()
	defer m.Unlock()
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
163
164
	return m.proto
}
165

Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
166
func (m *mapping) InternalPort() int {
167
168
	m.Lock()
	defer m.Unlock()
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
169
170
	return m.intport
}
171

Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
172
func (m *mapping) ExternalPort() int {
173
174
	m.Lock()
	defer m.Unlock()
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
175
176
177
	return m.extport
}

178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
func (m *mapping) setExternalPort(p int) {
	m.Lock()
	defer m.Unlock()
	m.extport = p
}

func (m *mapping) InternalAddr() ma.Multiaddr {
	m.Lock()
	defer m.Unlock()
	return m.intaddr
}

func (m *mapping) ExternalAddr() (ma.Multiaddr, error) {
	if m.ExternalPort() == 0 { // dont even try right now.
		return nil, ErrNoMapping
	}

	ip, err := m.nat.nat.GetExternalAddress()
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
196
197
198
199
	if err != nil {
		return nil, err
	}

200
201
202
203
	ipmaddr, err := manet.FromIP(ip)
	if err != nil {
		return nil, fmt.Errorf("error parsing ip")
	}
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
204

205
206
207
208
209
210
211
212
213
214
215
216
217
	// call m.ExternalPort again, as mapping may have changed under our feet. (tocttou)
	extport := m.ExternalPort()
	if extport == 0 {
		return nil, ErrNoMapping
	}

	tcp, err := ma.NewMultiaddr(fmt.Sprintf("/%s/%d", m.Protocol(), extport))
	if err != nil {
		return nil, err
	}

	maddr2 := ipmaddr.Encapsulate(tcp)
	return maddr2, nil
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
218
219
220
221
222
223
}

func (m *mapping) Close() error {
	return m.proc.Close()
}

224
225
226
227
228
229
// Mappings returns a slice of all NAT mappings
func (nat *NAT) Mappings() []Mapping {
	nat.mappingmu.Lock()
	maps2 := make([]Mapping, len(nat.mappings))
	for i, m := range nat.mappings {
		maps2[i] = m
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
230
	}
231
232
233
	nat.mappingmu.Unlock()
	return maps2
}
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
234

235
236
237
func (nat *NAT) addMapping(m *mapping) {
	// make mapping automatically close when nat is closed.
	nat.proc.AddChild(m.proc)
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
238

239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
	nat.mappingmu.Lock()
	nat.mappings = append(nat.mappings, m)
	nat.mappingmu.Unlock()
}

// NewMapping attemps to construct a mapping on protocol and internal port
// It will also periodically renew the mapping until the returned Mapping
// -- or its parent NAT -- is Closed.
//
// May not succeed, and mappings may change over time;
// NAT devices may not respect our port requests, and even lie.
// Clients should not store the mapped results, but rather always
// poll our object for the latest mappings.
func (nat *NAT) NewMapping(maddr ma.Multiaddr) (Mapping, error) {
	if nat == nil {
		return nil, fmt.Errorf("no nat available")
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
	}

	network, addr, err := manet.DialArgs(maddr)
	if err != nil {
		return nil, fmt.Errorf("DialArgs failed on addr:", maddr.String())
	}

	switch network {
	case "tcp", "tcp4", "tcp6":
		network = "tcp"
	case "udp", "udp4", "udp6":
		network = "udp"
	default:
		return nil, fmt.Errorf("transport not supported by NAT: %s", network)
	}

271
272
	intports := strings.Split(addr, ":")[1]
	intport, err := strconv.Atoi(intports)
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
273
274
275
276
	if err != nil {
		return nil, err
	}

277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
	m := &mapping{
		nat:     nat,
		proto:   network,
		intport: intport,
		intaddr: maddr,
	}
	m.proc = periodic.Every(MappingDuration/3, func(worker goprocess.Process) {
		nat.establishMapping(m)
	})
	nat.addMapping(m)
	// do it once synchronously, so first mapping is done right away, and before exiting,
	// allowing users -- in the optimistic case -- to use results right after.
	nat.establishMapping(m)
	return m, nil
}

func (nat *NAT) establishMapping(m *mapping) {
	oldport := m.ExternalPort()
	log.Debugf("Attempting port map: %s/%d", m.Protocol(), m.InternalPort())
	newport, err := nat.nat.AddPortMapping(m.Protocol(), m.InternalPort(), "http", MappingDuration)

	failure := func() {
		m.setExternalPort(0) // clear mapping
		// TODO: log.Event
		log.Infof("failed to establish port mapping: %s", err)
		nat.Notifier.notifyAll(func(n Notifiee) {
			n.MappingFailed(nat, m, oldport, err)
		})

		// we do not close if the mapping failed,
		// because it may work again next time.
	}

	if err != nil || newport == 0 {
		failure()
		return
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
313
314
	}

315
316
	m.setExternalPort(newport)
	ext, err := m.ExternalAddr()
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
317
	if err != nil {
318
319
320
		log.Debugf("NAT Mapping addr error: %s %s", m.InternalAddr(), err)
		failure()
		return
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
321
322
	}

323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
	log.Debugf("NAT Mapping: %s --> %s", m.InternalAddr(), ext)
	if oldport != 0 && newport != oldport {
		log.Infof("failed to renew same port mapping: ch %d -> %d", oldport, newport)
		nat.Notifier.notifyAll(func(n Notifiee) {
			n.MappingChanged(nat, m, oldport, newport)
		})
	}

	nat.Notifier.notifyAll(func(n Notifiee) {
		n.MappingSuccess(nat, m)
	})
}

// PortMapAddrs attempts to open (and continue to keep open)
// port mappings for given addrs. This function blocks until
// all  addresses have been tried. This allows clients to
// retrieve results immediately after:
//
//   nat.PortMapAddrs(addrs)
//   mapped := nat.ExternalAddrs()
//
// Some may not succeed, and mappings may change over time;
// NAT devices may not respect our port requests, and even lie.
// Clients should not store the mapped results, but rather always
// poll our object for the latest mappings.
func (nat *NAT) PortMapAddrs(addrs []ma.Multiaddr) {
	// spin off addr mappings independently.
	var wg sync.WaitGroup
	for _, addr := range addrs {
		// do all of them concurrently
		wg.Add(1)
		go func() {
			defer wg.Done()
			nat.NewMapping(addr)
		}()
	}
	wg.Wait()
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
360
361
}

362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
// MappedAddrs returns address mappings NAT believes have been
// successfully established. Unsuccessful mappings are nil. This is:
//
// 		map[internalAddr]externalAddr
//
// This set of mappings _may not_ be correct, as NAT devices are finicky.
// Consider this with _best effort_ semantics.
func (nat *NAT) MappedAddrs() map[ma.Multiaddr]ma.Multiaddr {

	mappings := nat.Mappings()
	addrmap := make(map[ma.Multiaddr]ma.Multiaddr, len(mappings))

	for _, m := range mappings {
		i := m.InternalAddr()
		e, err := m.ExternalAddr()
		if err != nil {
			addrmap[i] = nil
		} else {
			addrmap[i] = e
		}
	}
	return addrmap
}
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
385

386
387
388
389
390
391
392
393
394
395
396
397
398
399
// ExternalAddrs returns a list of addresses that NAT believes have
// been successfully established. Unsuccessful mappings are omitted,
// so nat.ExternalAddrs() may return less addresses than nat.InternalAddrs().
// To see which addresses are mapped, use nat.MappedAddrs().
//
// This set of mappings _may not_ be correct, as NAT devices are finicky.
// Consider this with _best effort_ semantics.
func (nat *NAT) ExternalAddrs() []ma.Multiaddr {
	mappings := nat.Mappings()
	addrs := make([]ma.Multiaddr, 0, len(mappings))
	for _, m := range mappings {
		a, err := m.ExternalAddr()
		if err != nil {
			continue // this mapping not currently successful.
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
400
		}
401
		addrs = append(addrs, a)
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
402
	}
403
	return addrs
Juan Batiz-Benet's avatar
Juan Batiz-Benet committed
404
}