lordwelch/router7
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
165 Commits 4 Branches 24 Tags
a05f027765478080b22b3fd4eb764337c8a39707
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Stapelberg a05f027765 dns: fallback only once, i.e. prefer the working server next time 2019-02-19 08:49:40 +01:00
Michael Stapelberg ccaf6ad452 dns: fallback to next upstream upon failure 2019-02-19 08:38:52 +01:00
Michael Stapelberg abeddabbb7 dhcp4d: restrict lease details page to internal IPs 2019-02-19 07:50:39 +01:00
Michael Stapelberg 13926217d9 oui_test: fix data race when overriding ouiURL 2019-01-06 18:07:59 +01:00
Michael Stapelberg 6320b6c3a7 dhcp4d: display MAC vendor of each lease’s HardwareAddr 2019-01-06 18:02:01 +01:00
Michael Stapelberg 8df6329209 use renameio to write files atomically 2019-01-06 15:25:33 +01:00
Michael Stapelberg f67d4ec93f radvd: load extra prefixes from /perm/radvd/prefixes.json 2019-01-06 15:12:22 +01:00
Michael Stapelberg bd8fc63b0e dns: implement per-DHCP-lease dyndns 
The HTTP API is easy to use from the command line or from Go:

% curl --data "host=sub&ip=192.168.33.44" -4 http://router7:8053/dyndns
ok
% host sub.$(hostname)
sub.midna has address 192.168.33.44

This can be used in combination with https://github.com/gokrazy/gdns
 2019-01-06 14:41:26 +01:00
Michael Stapelberg 92d995bf79 dns: return empty reply for non-A queries for DNS hostnames 
instead of NXDOMAIN, which is incorrect
 2019-01-01 17:21:50 +01:00
Michael Stapelberg c7be96ac2e dhcp4d: fix IP address comparison 
AFAICT, this wasn’t actually a bug: canLease performs the correct check.
 2019-01-01 10:45:03 +01:00
Michael Stapelberg 0d2e89cebf dhcp4d_test: fix message to match comparison 2019-01-01 10:44:03 +01:00
Michael Stapelberg b923f145a5 dhcp4d: don’t incorrectly _offer_ reused addresses 
Turns out a5d9e03dd3 was not entirely sufficient:
even though reused addresses would not be handed out anymore, they would still
be offered, which results in the client not being able to obtain an address.
 2019-01-01 10:41:29 +01:00
Michael Stapelberg ddcdd39737 dhcp4: drop last ack to restart with DISCOVER upon receiving NAK 
fixes #13
 2018-12-25 14:10:21 +01:00
Michael Stapelberg 725262d376 netconfig: use sysctl format for easier copy&paste 2018-12-25 14:08:14 +01:00
Michael Stapelberg 9012520052 diag: more informative error messages 2018-12-15 13:36:21 +01:00
Michael Stapelberg 5eaba2aa4d travis: switch to go 1.11 2018-12-15 12:49:34 +01:00
Michael Stapelberg a5d9e03dd3 dhcp4d: don’t incorrectly hand out reused addresses 
fixes #18
 2018-12-15 12:44:09 +01:00
Michael Stapelberg badee1eef8 netconfig_test: skip test if WireGuard is unavailable 2018-11-26 18:43:04 +01:00
Michael Stapelberg ec4f1f4dc5 netconfig: implement WireGuard support 
To set up a tunnel, create a /perm/wireguard.json as illustrated in
netconfig_test.go, and don’t forget to adjust your /perm/interfaces.json with
the address configuration for the WireGuard tunnel.

Note that static routes cannot currently be configured, so the usefulness is
limited. If you have a use-case you’d like to see covered, please explain it in
https://github.com/rtr7/router7/issues/14
 2018-11-26 18:29:03 +01:00
Michael Stapelberg b6a5227d49 netconfig_test: better diffs, refactor for clarity/brevity 2018-11-26 08:46:59 +01:00
Michael Stapelberg 127bdc466e netconfig_test: use ip -netns instead of ip netns exec ip 2018-11-26 08:32:38 +01:00
Michael Stapelberg df9a40557c dhcp4: correctly check errors from c.once 2018-11-21 08:41:24 +01:00
Michael Stapelberg bef7168112 dhcp4: resolve TODOs in comments 2018-11-21 08:41:07 +01:00
Michael Stapelberg 5b34daeb4e no-op cleanup: switch to dhcp4.LeaseFromACK 2018-11-21 08:23:57 +01:00
Michael Stapelberg 8c55c5ba44 dhcp4: switch to github.com/rtr7/dhcp4 
All existing DHCPv4 packages I looked at were unappealing for one reason or
another, so we’re now using a little helper to glue github.com/google/gopacket
and github.com/mdlayher/raw together, which suffices for our use-case and gives
us more control.
 2018-11-21 08:18:58 +01:00
Michael Stapelberg 30e9a6677b integration/dhcpv4: print unified line-wise diff 
This is much more readable than the go-cmp Diff() output when dealing with
[]string lines.
 2018-11-18 14:29:30 +01:00
Michael Stapelberg fac1bf231e netconfigd: notify dhcp4d to update its listeners 2018-10-29 18:14:01 +01:00
Michael Stapelberg 7d278289f0 captured: directly call NextPacket() to prevent hanging reads 
Using Packets() spawns off a separate goroutine which calls NextPacket in a loop
until io.EOF is returned. This goroutine will stick around after Close()
returned, resulting in only the first wireshark connection working.
 2018-10-23 09:56:07 +02:00
Michael Stapelberg d9f5d95812 dhcp4d: export number of non-expired DHCP leases 2018-10-23 08:49:29 +02:00
Michael Stapelberg 4288adec69 dns: don’t let clients override the hostname 
fixes #11
 2018-10-22 21:43:41 +02:00
Michael Stapelberg 0bbc1d923d refactor replayer code into pcapreplayer package 2018-10-22 21:04:35 +02:00
Michael Stapelberg e01a38ff78 commit debug statements 2018-10-22 18:58:40 +02:00
Michael Stapelberg 817fdc81f8 README: recommend to install all rtr7 tools 2018-10-22 18:58:40 +02:00
Michael Stapelberg 2e8e0daa0a implement TCP MSS clamping (for non-ethernet uplinks) 
We didn’t have a need to clamp the TCP Maximum Segment Size (MSS) up until now,
because fiber7 uses an MTU of 1500.

Because Path MTU discovery is often broken on the internet, it’s best practice
to limit the Maximum Segment Size (MSS) of each TCP connection, achieving the
same effect (but only for TCP connections).

This change is beneficial when running router7 behind a non-ethernet uplink,
such as a Fritz!Box cable modem.

This has no adverse effect on fiber7: after clamping, the MSS is still 1440, as
without clamping.
 2018-10-22 18:54:25 +02:00
Michael Stapelberg c037bf9c5f dhcp4d: fix panic when receiving unsupported requests 2018-10-22 18:39:25 +02:00
Michael Stapelberg 672134080f README: reference prometheus config + dashboard 2018-10-10 16:52:42 +02:00
Michael Stapelberg b725100d9c add prometheus configuration examples 2018-10-10 16:49:45 +02:00
Michael Stapelberg f606e70250 dhcp4d: respect broadcast bit 
Mac’s Internet Recovery DHCP client requires broadcast responses and will ignore
unicast responses outright.
 2018-10-07 17:36:00 +02:00
Michael Stapelberg f7638dfeaa netconfig_test: test updating port forwardings after installation 
This uncovered an nftables issue:
https://github.com/google/nftables/commit/695079ebffbbd1e2f68b3e235977ceb42e21c182
 2018-10-03 18:24:54 +02:00
Michael Stapelberg ea4ffa7bec OpenEthernet → NewEthernetHandle, remove kludge 2018-09-07 00:50:41 +02:00
Michael Stapelberg 447f1779e2 dhcp6: update for breaking upstream changes 
see https://github.com/insomniacslk/dhcp/pull/81
 2018-09-05 08:39:35 +02:00
Michael Stapelberg 4c4032d469 README: add radvd as consumer of dhcp6 lease file 2018-08-20 22:59:22 +02:00
Michael Stapelberg 14f1636bc0 travis: upgrade to xenial (Ubuntu 16.04) 
Perhaps this will use a newer kernel with support for nftables stateful objects?
 2018-08-10 09:37:25 +02:00
Michael Stapelberg b03596f1c5 nftables: use stateful object counters 
This way, we can atomically get and reset them.

fixes https://github.com/rtr7/router7/issues/3
 2018-08-08 23:15:21 +02:00
Michael Stapelberg ad779c3665 dhcp6: update for breaking upstream changes 2018-08-05 11:45:03 +02:00
Michael Stapelberg 5a5a748b9f dnsd: don’t serve expired leases 
fixes #6
 2018-08-05 11:30:58 +02:00
Michael Stapelberg daa14845ab netconfig: plug fd leak by closing the netlink handle 
fixes #4
 2018-07-22 23:07:23 +02:00
Michael Stapelberg c5e5a0eee0 radvd: gather details about the interface on SIGUSR1 
The interface might have a new MAC address (if radvd was started before netconfigd).
 2018-07-16 22:46:49 +02:00
Michael Stapelberg 49a59779f5 dhcp4d: don’t offer expired leases 2018-07-15 18:33:11 +02:00
Michael Stapelberg a9c7585eac README: add travis badge 2018-07-14 20:57:27 +02:00
Michael Stapelberg 4a85c51b9f add travis config 2018-07-14 20:53:24 +02:00
Michael Stapelberg 3282dc5675 netconfig: GetRule filtering is not supported by Linux 4.4.0 (trusty) 2018-07-14 20:53:15 +02:00
Michael Stapelberg ea10307b5d dhcpv4: replace hard-coded midna → os.Hostname() 2018-07-14 17:35:25 +02:00
Michael Stapelberg bfa16c559f dnsmasq: gracefully handle temporarily not existing ready files 2018-07-14 16:42:50 +02:00
Michael Stapelberg 3afe757a34 notify: gracefully handle vanishing processes 2018-07-14 16:36:51 +02:00
Michael Stapelberg 9e0f83a7cf integration tests: send ip netns add errors to stderr, too 2018-07-14 15:43:47 +02:00
Michael Stapelberg 9131e7a99c dhcp6: add missing err parameter 2018-07-14 15:17:12 +02:00
Michael Stapelberg 8da684cc8f README: add godoc badge 2018-07-14 15:14:42 +02:00
Michael Stapelberg b08f872a65 add go report card 2018-07-14 14:55:30 +02:00
Michael Stapelberg 25ceda02ec README: get router7 repo explicitly 2018-07-14 14:34:08 +02:00
Michael Stapelberg 6b73254a72 write README.md 2018-07-14 14:03:02 +02:00
Michael Stapelberg 9153805e69 randomd moved to github.com/gokrazy/gokrazy/cmd/randomd 2018-07-14 12:51:28 +02:00
Michael Stapelberg b347ed74c5 update import paths 2018-07-09 08:54:04 +02:00
Michael Stapelberg 984e8802f7 dhcp6: log XIDs when they differ 
Encountering this message can be perfectly normal, e.g. in a high-availability
setup, where two DHCP servers answer to your requests.
 2018-07-03 17:37:25 +02:00
Michael Stapelberg b05fd74006 dhcp4: increase timeout to 10s 2018-07-03 17:37:17 +02:00
Michael Stapelberg 88bf7d90eb dhcp6: delay at least 10s before attempts 
Otherwise we might exceed fiber7’s firewall rules and get blacklisted.
 2018-07-03 17:36:46 +02:00
Michael Stapelberg 86f5433cbb dhcp6: correctly clear previous error 2018-06-29 12:02:16 +02:00
Michael Stapelberg 8615c40fac netconfig_test: reset DefaultCounter to catch preservation issues 2018-06-28 20:08:23 +02:00
Michael Stapelberg c1de25f18b add skeletal README.md 2018-06-28 20:08:23 +02:00
Michael Stapelberg b4912a5a93 add CONTRIBUTING.md 2018-06-28 20:08:23 +02:00
Michael Stapelberg c0cac8d746 add LICENSE 2018-06-28 20:08:23 +02:00
Michael Stapelberg ff7aa8f2cb add copyright notices 2018-06-28 20:08:23 +02:00
Michael Stapelberg ab75e4a1b5 check for updateListeners errors 2018-06-28 20:08:23 +02:00
Michael Stapelberg 2b3cf0bf61 captured: use multilisten 2018-06-28 20:08:23 +02:00
Michael Stapelberg c24eefbb51 diagd: expose machine-readable healthiness 2018-06-26 21:52:29 +02:00
Michael Stapelberg 72661b13ec dnsd: listen on 8053 (metrics) on ipv6-net::1 2018-06-26 21:15:14 +02:00
Michael Stapelberg 4c7741a337 add backupd 2018-06-26 18:01:50 +02:00
Michael Stapelberg 36282e7cea add placeholder 2018-06-26 18:00:48 +02:00
Michael Stapelberg 86c9436e98 diagd: only listen on private addresses 2018-06-26 09:47:55 +02:00
Michael Stapelberg 89e1276ad4 dns: simplify resolving code 2018-06-26 09:33:23 +02:00
Michael Stapelberg 8e95e25442 radvd: announce link-local ipv6 address for DNS 2018-06-26 09:04:05 +02:00
Michael Stapelberg 10df129c1f dns: listen on all private IP addresses 2018-06-26 08:53:20 +02:00
Michael Stapelberg 08249aec6a dns: resolve localhost locally 2018-06-25 20:24:02 +02:00
Michael Stapelberg 60de127991 Describe all packages and binaries. 2018-06-25 20:12:51 +02:00
Michael Stapelberg a881f6b61e cut down on test noise 2018-06-24 12:06:40 +02:00
Michael Stapelberg ae15230da3 dhcp4d: log in leases callback 2018-06-24 11:56:39 +02:00
Michael Stapelberg 57564e15d0 captured: increase ring buffer 
5000 packets translated to just about 2 hours, which is not long enough.
 2018-06-24 11:52:07 +02:00
Michael Stapelberg 5a07d6696d split integration tests into multiple packages 
This makes them complete more quickly (because they are run in parallel) and
invalidates only the cache for the integration test I’m working on, not for all
of them.
 2018-06-24 11:46:49 +02:00
Michael Stapelberg 2ff269bf67 unflake integration: use different interface name in DHCPv6 test 2018-06-24 08:33:39 +02:00
Michael Stapelberg c96c683e43 dns: send NXDOMAIN for non-existant local names 2018-06-23 22:15:35 +02:00
Michael Stapelberg 3886367a32 remove TODOs: the sysctls have reasonable defaults 2018-06-23 20:34:42 +02:00
Michael Stapelberg bf2c12a69d netconfigd: export ipv4/ipv6 packet/bytes counters on :8066 2018-06-23 19:56:34 +02:00
Michael Stapelberg 6705108481 add randomd: carries entropy across system restarts 
As practiced by Debian (and others) and recommended in the urandom(4) manpage:
https://manpages.debian.org/stretch/manpages/urandom.4.en.html#Configuration
 2018-06-23 17:46:55 +02:00
Michael Stapelberg 3ba84074c7 dhcp4d: send replies as unicast using raw sockets 
Preferring unicast over multicast (which hogs a lot of airtime on WiFi networks)
is a best practice.

Some device/access point vendor combinations even seem to entirely eat (some?)
broadcast traffic (sometimes), e.g. my Apple iPhone SE/Ubiquiti UAP-AC-HD, so
that using unicast is required for reliable WiFi.
 2018-06-23 17:46:53 +02:00
Michael Stapelberg 301d4c0d00 dhcp4d: always set broadcast flag for DHCPOFFERs 
We always broadcast them, so we should signal that.
 2018-06-22 18:35:23 +02:00
Michael Stapelberg 37bf17e1b7 make binaries cope with Squashfs root 2018-06-22 17:59:23 +02:00
Michael Stapelberg 5e11eae951 fix dhcp4d_test for larger pool 2018-06-19 09:46:29 +02:00
Michael Stapelberg 957e4de03a no-op: only one branch results in DHCPNAK 2018-06-18 19:29:58 +02:00
Michael Stapelberg 34d494b85c dhcp4d: increase lease range to cover existing leases 2018-06-18 19:29:42 +02:00
Michael Stapelberg 4b6b5196b0 dns: correctly resolve PTR for hostname 2018-06-18 09:44:46 +02:00