Skip to content

Commit 73ad9bc

Browse files
henrybarretohenrybarreto
committed
wip
1 parent edbdd8f commit 73ad9bc

File tree

10 files changed

+428
-10
lines changed

10 files changed

+428
-10
lines changed

‎agent/go.mod

+3
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,10 @@ require (
4848
github.com/pkg/errors v0.9.1 // indirect
4949
github.com/pkg/sftp v1.13.5 // indirect
5050
github.com/sethvargo/go-envconfig v0.9.0 // indirect
51+
github.com/songgao/water v0.0.0-20200317203138-2b4b6d7c09d8 // indirect
5152
github.com/spf13/pflag v1.0.5 // indirect
53+
github.com/vishvananda/netlink v1.2.1-beta.2 // indirect
54+
github.com/vishvananda/netns v0.0.0-20210104183010-2eb08e3e575f // indirect
5255
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.51.0 // indirect
5356
go.opentelemetry.io/otel v1.26.0 // indirect
5457
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.26.0 // indirect

‎agent/go.sum

+9
Original file line numberDiff line numberDiff line change
@@ -98,6 +98,8 @@ github.com/shellhub-io/ssh v0.0.0-20230224143412-edd48dfd6eea h1:7tEI9nukSYZViCj
9898
github.com/shellhub-io/ssh v0.0.0-20230224143412-edd48dfd6eea/go.mod h1:8XB4KraRrX39qHhT6yxPsHedjA08I/uBVwj4xC+/+z4=
9999
github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
100100
github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
101+
github.com/songgao/water v0.0.0-20200317203138-2b4b6d7c09d8 h1:TG/diQgUe0pntT/2D9tmUCz4VNwm9MfrtPr0SU2qSX8=
102+
github.com/songgao/water v0.0.0-20200317203138-2b4b6d7c09d8/go.mod h1:P5HUIBuIWKbyjl083/loAegFkfbFNx5i2qEP4CNbm7E=
101103
github.com/spf13/cobra v1.8.1 h1:e5/vxKd/rZsfSJMUX1agtjeTDf+qv1/JdBF8gg5k9ZM=
102104
github.com/spf13/cobra v1.8.1/go.mod h1:wHxEcudfqmLYa8iTfL+OuZPbBZkmvliBWKIezN3kD9Y=
103105
github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
@@ -118,6 +120,11 @@ github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyC
118120
github.com/valyala/fasttemplate v1.2.1/go.mod h1:KHLXt3tVN2HBp8eijSv/kGJopbvo7S+qRAEEKiv+SiQ=
119121
github.com/valyala/fasttemplate v1.2.2 h1:lxLXG0uE3Qnshl9QyaK6XJxMXlQZELvChBOCmQD0Loo=
120122
github.com/valyala/fasttemplate v1.2.2/go.mod h1:KHLXt3tVN2HBp8eijSv/kGJopbvo7S+qRAEEKiv+SiQ=
123+
github.com/vishvananda/netlink v1.2.1-beta.2 h1:Llsql0lnQEbHj0I1OuKyp8otXp0r3q0mPkuhwHfStVs=
124+
github.com/vishvananda/netlink v1.2.1-beta.2/go.mod h1:twkDnbuQxJYemMlGd4JFIcuhgX83tXhKS2B/PRMpOho=
125+
github.com/vishvananda/netns v0.0.0-20200728191858-db3c7e526aae/go.mod h1:DD4vA1DwXk04H54A1oHXtwZmA0grkVMdPxx/VGLCah0=
126+
github.com/vishvananda/netns v0.0.0-20210104183010-2eb08e3e575f h1:p4VB7kIXpOQvVn1ZaTIVp+3vuYAXFe3OJEvjbUYJLaA=
127+
github.com/vishvananda/netns v0.0.0-20210104183010-2eb08e3e575f/go.mod h1:DD4vA1DwXk04H54A1oHXtwZmA0grkVMdPxx/VGLCah0=
121128
github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
122129
github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
123130
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.51.0 h1:Xs2Ncz0gNihqu9iosIZ5SkBbWo5T8JhhLJFMQL1qmLI=
@@ -159,6 +166,8 @@ golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJ
159166
golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
160167
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
161168
golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
169+
golang.org/x/sys v0.0.0-20200217220822-9197077df867/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
170+
golang.org/x/sys v0.0.0-20200728102440-3e129f6d46b1/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
162171
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
163172
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
164173
golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=

‎agent/main.go

+32-10
Original file line numberDiff line numberDiff line change
@@ -163,23 +163,45 @@ func main() {
163163
}()
164164
}
165165

166-
if err := ag.ListenSSH(ctx); err != nil {
167-
log.WithError(err).WithFields(log.Fields{
168-
"version": AgentVersion,
169-
"mode": mode,
170-
"tenant_id": cfg.TenantID,
171-
"server_address": cfg.ServerAddress,
172-
"preferred_hostname": cfg.PreferredHostname,
173-
}).Fatal("Failed to listen for SSH connections")
174-
}
166+
go func() {
167+
if err := ag.ListenSSH(ctx); err != nil {
168+
log.WithError(err).WithFields(log.Fields{
169+
"version": AgentVersion,
170+
"mode": mode,
171+
"tenant_id": cfg.TenantID,
172+
"server_address": cfg.ServerAddress,
173+
"preferred_hostname": cfg.PreferredHostname,
174+
}).Fatal("Failed to listen for SSH connections")
175+
}
176+
}()
177+
178+
go func() {
179+
if !cfg.VPN {
180+
log.Info("VPN is disable")
181+
182+
return
183+
}
184+
185+
for {
186+
log.Info("Waiting for VPN connection")
187+
188+
if err := ag.ListenVPN(ctx); err != nil {
189+
log.WithError(err).Error("Failed to listen for VPN connection. Retrying in 10 seconds.")
190+
}
191+
192+
time.Sleep(10 * time.Second)
193+
}
194+
}()
195+
196+
<-ctx.Done()
175197

176198
log.WithFields(log.Fields{
177199
"version": AgentVersion,
178200
"mode": mode,
179201
"tenant_id": cfg.TenantID,
180202
"server_address": cfg.ServerAddress,
181203
"preferred_hostname": cfg.PreferredHostname,
182-
}).Info("Stopped listening for connections")
204+
}).Info("Agent Stopped")
183205
},
184206
}
185207

‎docker-compose.agent.yml

+1
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ services:
1919
- SHELLHUB_PRIVATE_KEY=/go/src/github.com/shellhub-io/shellhub/agent/shellhub.key
2020
- SHELLHUB_TENANT_ID=00000000-0000-4000-0000-000000000000
2121
- SHELLHUB_VERSION=${SHELLHUB_VERSION}
22+
- SHELLHUB_VPN=${SHELLHUB_VPN}
2223
- SHELLHUB_LOG_LEVEL=${SHELLHUB_LOG_LEVEL}
2324
- SHELLHUB_LOG_FORMAT=${SHELLHUB_LOG_FORMAT}
2425
volumes:

‎go.mod

+3
Original file line numberDiff line numberDiff line change
@@ -27,8 +27,10 @@ require (
2727
github.com/pkg/sftp v1.13.5
2828
github.com/sethvargo/go-envconfig v0.9.0
2929
github.com/sirupsen/logrus v1.9.3
30+
github.com/songgao/water v0.0.0-20200317203138-2b4b6d7c09d8
3031
github.com/stretchr/testify v1.9.0
3132
github.com/testcontainers/testcontainers-go/modules/redis v0.32.0
33+
github.com/vishvananda/netlink v1.2.1-beta.2
3234
golang.org/x/crypto v0.22.0
3335
golang.org/x/sys v0.19.0
3436
)
@@ -96,6 +98,7 @@ require (
9698
github.com/ulikunitz/xz v0.5.11 // indirect
9799
github.com/valyala/bytebufferpool v1.0.0 // indirect
98100
github.com/valyala/fasttemplate v1.2.2 // indirect
101+
github.com/vishvananda/netns v0.0.0-20210104183010-2eb08e3e575f // indirect
99102
github.com/vmihailenco/go-tinylfu v0.2.2 // indirect
100103
github.com/vmihailenco/msgpack/v5 v5.3.5 // indirect
101104
github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect

‎pkg/agent/agent.go

+11
Original file line numberDiff line numberDiff line change
@@ -50,6 +50,7 @@ import (
5050
"github.com/shellhub-io/shellhub/pkg/agent/pkg/keygen"
5151
"github.com/shellhub-io/shellhub/pkg/agent/pkg/sysinfo"
5252
"github.com/shellhub-io/shellhub/pkg/agent/ssh"
53+
"github.com/shellhub-io/shellhub/pkg/agent/vpn"
5354
"github.com/shellhub-io/shellhub/pkg/api/client"
5455
"github.com/shellhub-io/shellhub/pkg/envs"
5556
"github.com/shellhub-io/shellhub/pkg/models"
@@ -114,6 +115,9 @@ type Config struct {
114115
// MaxRetryConnectionTimeout specifies the maximum time, in seconds, that an agent will wait
115116
// before attempting to reconnect to the ShellHub server. Default is 60 seconds.
116117
MaxRetryConnectionTimeout int `env:"MAX_RETRY_CONNECTION_TIMEOUT,default=60" validate:"min=10,max=120"`
118+
119+
// Defines if the device will try to connect to the namespace's VPN.
120+
VPN bool `env:"VPN,default=false"`
117121
}
118122

119123
func LoadConfigFromEnv() (*Config, map[string]interface{}, error) {
@@ -163,6 +167,7 @@ type Agent struct {
163167
serverInfo *models.Info
164168
cli client.Client
165169
ssh *ssh.SSH
170+
vpn *vpn.VPN
166171
mode Mode
167172
}
168173

@@ -357,6 +362,12 @@ func (a *Agent) ListenSSH(ctx context.Context) error {
357362
return a.ssh.Listen(ctx)
358363
}
359364

365+
func (a *Agent) ListenVPN(ctx context.Context) error {
366+
a.vpn = vpn.NewVPN(a.cli, a.authData.Token)
367+
368+
return a.vpn.Listen(ctx)
369+
}
370+
360371
// CheckUpdate gets the ShellHub's server version.
361372
func (a *Agent) CheckUpdate() (*semver.Version, error) {
362373
info, err := a.cli.GetInfo(AgentVersion)

‎pkg/agent/pkg/tunnel/tunnel.go

+32
Original file line numberDiff line numberDiff line change
@@ -83,6 +83,38 @@ func NewTunnel() *Tunnel {
8383
return t
8484
}
8585

86+
const ContextKeyHTTPConn string = "http-conn"
87+
88+
// NewCustomTunnel creates a new [Tunnel] with the route to the connect, in a POST, and close, in a DELETE, actions.
89+
func NewCustomTunnel(connPath string, closePath string) *Tunnel {
90+
router := echo.New()
91+
92+
t := &Tunnel{
93+
router: router,
94+
srv: &http.Server{
95+
Handler: router,
96+
ConnContext: func(ctx context.Context, c net.Conn) context.Context {
97+
return context.WithValue(ctx, ContextKeyHTTPConn, c) //nolint:revive
98+
},
99+
},
100+
ConnHandler: func(e echo.Context) error {
101+
panic("connHandler can not be nil")
102+
},
103+
CloseHandler: func(e echo.Context) error {
104+
panic("closeHandler can not be nil")
105+
},
106+
}
107+
108+
router.POST(connPath, func(e echo.Context) error {
109+
return t.ConnHandler(e)
110+
})
111+
router.DELETE(closePath, func(e echo.Context) error {
112+
return t.CloseHandler(e)
113+
})
114+
115+
return t
116+
}
117+
86118
// Listen to reverse listener.
87119
func (t *Tunnel) Listen(l *revdial.Listener) error {
88120
return t.srv.Serve(l)

‎pkg/agent/vpn/handlers.go

+74
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
1+
package vpn
2+
3+
import (
4+
"errors"
5+
"fmt"
6+
"net"
7+
8+
"github.com/labstack/echo/v4"
9+
log "github.com/sirupsen/logrus"
10+
"github.com/vishvananda/netlink"
11+
)
12+
13+
// PacketMaxSize defines the max size of each IP packet received.
14+
// TODO: This isn't the real max size; set the right one.
15+
const PacketMaxSize = 2048
16+
17+
// InterfaceName defines the default name for the network interface created by ShellHub.
18+
const InterfaceName string = "shb"
19+
20+
var ErrGenerateInterface = errors.New("failed to generate an interface")
21+
22+
func GenerateInterfaceName() (string, error) {
23+
const attempts = 10
24+
25+
for i := 0; i < attempts; i++ {
26+
name := fmt.Sprintf("%s%d", InterfaceName, i)
27+
28+
if _, err := netlink.LinkByName(name); err == nil {
29+
continue
30+
}
31+
32+
return name, nil
33+
}
34+
35+
return "", ErrGenerateInterface
36+
}
37+
38+
func handler(handler func(net.Conn, *Settings) error) func(c echo.Context) error {
39+
return func(c echo.Context) error {
40+
conn, _, err := c.Response().Hijack()
41+
if err != nil {
42+
log.Error(err)
43+
44+
return err
45+
}
46+
47+
defer conn.Close()
48+
49+
settings, err := ParseSettings(c.Request().Body)
50+
if err != nil {
51+
log.WithError(err).Error("faild to parse the settings")
52+
53+
return err
54+
}
55+
56+
// NOTE: the [handler] is called to handler the core logic of the VPN client, while this handler is used to extract
57+
// the connection and the settings data.
58+
if err := handler(conn, settings); err != nil {
59+
log.WithError(err).Error("failed to handler the vpn connection between server and agent")
60+
61+
return err
62+
}
63+
64+
return nil
65+
}
66+
}
67+
68+
func closeHandler(callback func() error) func(c echo.Context) error {
69+
return func(c echo.Context) error {
70+
log.Trace("close handler called")
71+
72+
return callback()
73+
}
74+
}

‎pkg/agent/vpn/settings.go

+35
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
package vpn
2+
3+
import (
4+
"encoding/json"
5+
"fmt"
6+
"io"
7+
"net"
8+
)
9+
10+
type Settings struct {
11+
Address [4]byte `json:"address"`
12+
Mask byte `json:"mask"`
13+
}
14+
15+
// ParseSettings read and parses the [Settings] structure from an [io.Reader].
16+
func ParseSettings(data io.Reader) (*Settings, error) {
17+
body, err := io.ReadAll(data)
18+
if err != nil {
19+
return nil, err
20+
}
21+
22+
settings := Settings{}
23+
if err = json.Unmarshal(body, &settings); err != nil {
24+
return nil, err
25+
}
26+
27+
return &settings, nil
28+
}
29+
30+
// String converts a [Settings] to a string representation on the format $IP/$Mask.
31+
func (s *Settings) String() string {
32+
ip := net.IPv4(s.Address[0], s.Address[1], s.Address[2], s.Address[3])
33+
34+
return fmt.Sprintf("%s/%d", ip.String(), s.Mask)
35+
}

0 commit comments

Comments
 (0)