dendrite/cmd/dendrite-demo-yggdrasil/yggconn/node.go

// Copyright 2020 The Matrix.org Foundation C.I.C.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package yggconn

import (
	"context"
	"crypto/ed25519"
	"crypto/tls"
	"encoding/hex"
	"encoding/json"
	"fmt"
	"io/ioutil"
	"log"
	"net"
	"os"
	"strings"
	"sync"
	"time"

	"github.com/lucas-clemente/quic-go"
	"github.com/matrix-org/dendrite/cmd/dendrite-demo-yggdrasil/convert"
	"github.com/matrix-org/gomatrixserverlib"

	yggdrasiladmin "github.com/yggdrasil-network/yggdrasil-go/src/admin"
	yggdrasilconfig "github.com/yggdrasil-network/yggdrasil-go/src/config"
	"github.com/yggdrasil-network/yggdrasil-go/src/crypto"
	yggdrasilmulticast "github.com/yggdrasil-network/yggdrasil-go/src/multicast"
	"github.com/yggdrasil-network/yggdrasil-go/src/yggdrasil"

	gologme "github.com/gologme/log"
)

type Node struct {
	core       *yggdrasil.Core
	config     *yggdrasilconfig.NodeConfig
	state      *yggdrasilconfig.NodeState
	admin      *yggdrasiladmin.AdminSocket
	multicast  *yggdrasilmulticast.Multicast
	log        *gologme.Logger
	packetConn *yggdrasil.PacketConn
	listener   quic.Listener
	tlsConfig  *tls.Config
	quicConfig *quic.Config
	sessions   sync.Map // string -> quic.Session
	incoming   chan QUICStream
}

func (n *Node) BuildName() string {
	return "dendrite"
}

func (n *Node) BuildVersion() string {
	return "dev"
}

func (n *Node) Dialer(_, address string) (net.Conn, error) {
	tokens := strings.Split(address, ":")
	raw, err := hex.DecodeString(tokens[0])
	if err != nil {
		return nil, fmt.Errorf("hex.DecodeString: %w", err)
	}
	converted := convert.Ed25519PublicKeyToCurve25519(ed25519.PublicKey(raw))
	convhex := hex.EncodeToString(converted)
	return n.Dial("curve25519", convhex)
}

func (n *Node) DialerContext(ctx context.Context, network, address string) (net.Conn, error) {
	return n.Dialer(network, address)
}

// nolint:gocyclo
func Setup(instanceName, storageDirectory string) (*Node, error) {
	n := &Node{
		core:      &yggdrasil.Core{},
		config:    yggdrasilconfig.GenerateConfig(),
		admin:     &yggdrasiladmin.AdminSocket{},
		multicast: &yggdrasilmulticast.Multicast{},
		log:       gologme.New(os.Stdout, "YGG ", log.Flags()),
		incoming:  make(chan QUICStream),
	}
	n.core.SetBuildInfo(n)

	yggfile := fmt.Sprintf("%s/%s-yggdrasil.conf", storageDirectory, instanceName)
	if _, err := os.Stat(yggfile); !os.IsNotExist(err) {
		yggconf, e := ioutil.ReadFile(yggfile)
		if e != nil {
			panic(err)
		}
		if err := json.Unmarshal([]byte(yggconf), &n.config); err != nil {
			panic(err)
		}
	}

	n.config.Peers = []string{}
	n.config.AdminListen = "none"
	n.config.MulticastInterfaces = []string{}
	n.config.EncryptionPrivateKey = hex.EncodeToString(n.EncryptionPrivateKey())
	n.config.EncryptionPublicKey = hex.EncodeToString(n.EncryptionPublicKey())

	j, err := json.MarshalIndent(n.config, "", "  ")
	if err != nil {
		panic(err)
	}
	if e := ioutil.WriteFile(yggfile, j, 0600); e != nil {
		n.log.Printf("Couldn't write private key to file '%s': %s\n", yggfile, e)
	}

	n.log.EnableLevel("error")
	n.log.EnableLevel("warn")
	n.log.EnableLevel("info")
	n.state, err = n.core.Start(n.config, n.log)
	if err != nil {
		panic(err)
	}
	if err = n.multicast.Init(n.core, n.state, n.log, nil); err != nil {
		panic(err)
	}
	if err = n.multicast.Start(); err != nil {
		panic(err)
	}

	n.packetConn = n.core.PacketConn()
	n.tlsConfig = n.generateTLSConfig()
	n.quicConfig = &quic.Config{
		MaxIncomingStreams:    0,
		MaxIncomingUniStreams: 0,
		KeepAlive:             true,
		MaxIdleTimeout:        time.Second * 60,
		HandshakeTimeout:      time.Second * 15,
	}

	n.log.Println("Public curve25519:", n.core.EncryptionPublicKey())
	n.log.Println("Public ed25519:", n.core.SigningPublicKey())

	go n.listenFromYgg()

	return n, nil
}

func (n *Node) Stop() {
	if err := n.multicast.Stop(); err != nil {
		n.log.Println("Error stopping multicast:", err)
	}
	n.core.Stop()
}

func (n *Node) DerivedServerName() string {
	return hex.EncodeToString(n.SigningPublicKey())
}

func (n *Node) DerivedSessionName() string {
	return hex.EncodeToString(n.EncryptionPublicKey())
}

func (n *Node) EncryptionPublicKey() []byte {
	edkey := n.SigningPublicKey()
	return convert.Ed25519PublicKeyToCurve25519(edkey)
}

func (n *Node) EncryptionPrivateKey() []byte {
	edkey := n.SigningPrivateKey()
	return convert.Ed25519PrivateKeyToCurve25519(edkey)
}

func (n *Node) SigningPublicKey() ed25519.PublicKey {
	pubBytes, _ := hex.DecodeString(n.config.SigningPublicKey)
	return ed25519.PublicKey(pubBytes)
}

func (n *Node) SigningPrivateKey() ed25519.PrivateKey {
	privBytes, _ := hex.DecodeString(n.config.SigningPrivateKey)
	return ed25519.PrivateKey(privBytes)
}

func (n *Node) PeerCount() int {
	return len(n.core.GetPeers()) - 1
}

func (n *Node) KnownNodes() []gomatrixserverlib.ServerName {
	nodemap := map[string]struct{}{}
	for _, peer := range n.core.GetSwitchPeers() {
		nodemap[hex.EncodeToString(peer.SigningKey[:])] = struct{}{}
	}
	n.sessions.Range(func(_, v interface{}) bool {
		session, ok := v.(quic.Session)
		if !ok {
			return true
		}
		if len(session.ConnectionState().PeerCertificates) != 1 {
			return true
		}
		subjectName := session.ConnectionState().PeerCertificates[0].Subject.CommonName
		nodemap[subjectName] = struct{}{}
		return true
	})
	var nodes []gomatrixserverlib.ServerName
	for node := range nodemap {
		nodes = append(nodes, gomatrixserverlib.ServerName(node))
	}
	return nodes
}

func (n *Node) SetMulticastEnabled(enabled bool) {
	if enabled {
		n.config.MulticastInterfaces = []string{".*"}
	} else {
		n.config.MulticastInterfaces = []string{}
	}
	n.multicast.UpdateConfig(n.config)
	if !enabled {
		n.DisconnectMulticastPeers()
	}
}

func (n *Node) DisconnectMulticastPeers() {
	for _, sp := range n.core.GetSwitchPeers() {
		if !strings.HasPrefix(sp.Endpoint, "fe80") {
			continue
		}
		if err := n.core.DisconnectPeer(sp.Port); err != nil {
			n.log.Printf("Failed to disconnect port %d: %s", sp.Port, err)
		}
	}
}

func (n *Node) DisconnectNonMulticastPeers() {
	for _, sp := range n.core.GetSwitchPeers() {
		if strings.HasPrefix(sp.Endpoint, "fe80") {
			continue
		}
		if err := n.core.DisconnectPeer(sp.Port); err != nil {
			n.log.Printf("Failed to disconnect port %d: %s", sp.Port, err)
		}
	}
}

func (n *Node) SetStaticPeer(uri string) error {
	n.config.Peers = []string{}
	n.core.UpdateConfig(n.config)
	n.DisconnectNonMulticastPeers()
	if uri != "" {
		n.log.Infoln("Adding static peer", uri)
		if err := n.core.AddPeer(uri, ""); err != nil {
			n.log.Warnln("Adding static peer failed:", err)
			return err
		}
		if err := n.core.CallPeer(uri, ""); err != nil {
			n.log.Warnln("Calling static peer failed:", err)
			return err
		}
	}
	return nil
}

func (n *Node) NotifyLinkNew(f func(boxPubKey crypto.BoxPubKey, linkType, remote string)) {
	n.core.NotifyLinkNew(f)
}

func (n *Node) NotifyLinkGone(f func(boxPubKey crypto.BoxPubKey, linkType, remote string)) {
	n.core.NotifyLinkGone(f)
}

func (n *Node) NotifySessionNew(f func(boxPubKey crypto.BoxPubKey)) {
	n.core.NotifySessionNew(f)
}

func (n *Node) NotifySessionGone(f func(boxPubKey crypto.BoxPubKey)) {
	n.core.NotifySessionGone(f)
}