1 /* 2 * util/module.h - DNS handling module interface 3 * 4 * Copyright (c) 2007, NLnet Labs. All rights reserved. 5 * 6 * This software is open source. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 12 * Redistributions of source code must retain the above copyright notice, 13 * this list of conditions and the following disclaimer. 14 * 15 * Redistributions in binary form must reproduce the above copyright notice, 16 * this list of conditions and the following disclaimer in the documentation 17 * and/or other materials provided with the distribution. 18 * 19 * Neither the name of the NLNET LABS nor the names of its contributors may 20 * be used to endorse or promote products derived from this software without 21 * specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 24 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 25 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 26 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 27 * HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 28 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED 29 * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 30 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 */ 35 36 /** 37 * \file 38 * 39 * This file contains the interface for DNS handling modules. 40 * 41 * The module interface uses the DNS modules as state machines. The 42 * state machines are activated in sequence to operate on queries. Once 43 * they are done, the reply is passed back. In the usual setup the mesh 44 * is the caller of the state machines and once things are done sends replies 45 * and invokes result callbacks. 46 * 47 * The module provides a number of functions, listed in the module_func_block. 48 * The module is inited and destroyed and memory usage queries, for the 49 * module as a whole, for entire-module state (such as a cache). And per-query 50 * functions are called, operate to move the state machine and cleanup of 51 * the per-query state. 52 * 53 * Most per-query state should simply be allocated in the query region. 54 * This is destroyed at the end of the query. 55 * 56 * The module environment contains services and information and caches 57 * shared by the modules and the rest of the system. It also contains 58 * function pointers for module-specific tasks (like sending queries). 59 * 60 * *** Example module calls for a normal query 61 * 62 * In this example, the query does not need recursion, all the other data 63 * can be found in the cache. This makes the example shorter. 64 * 65 * At the start of the program the iterator module is initialised. 66 * The iterator module sets up its global state, such as donotquery lists 67 * and private address trees. 68 * 69 * A query comes in, and a mesh entry is created for it. The mesh 70 * starts the resolution process. The validator module is the first 71 * in the list of modules, and it is started on this new query. The 72 * operate() function is called. The validator decides it needs not do 73 * anything yet until there is a result and returns wait_module, that 74 * causes the next module in the list to be started. 75 * 76 * The next module is the iterator. It is started on the passed query and 77 * decides to perform a lookup. For this simple example, the delegation 78 * point information is available, and all the iterator wants to do is 79 * send a UDP query. The iterator uses env.send_query() to send the 80 * query. Then the iterator suspends (returns from the operate call). 81 * 82 * When the UDP reply comes back (and on errors and timeouts), the 83 * operate function is called for the query, on the iterator module, 84 * with the event that there is a reply. The iterator decides that this 85 * is enough, the work is done. It returns the value finished from the 86 * operate call, which causes the previous module to be started. 87 * 88 * The previous module, the validator module, is started with the event 89 * that the iterator module is done. The validator decides to validate 90 * the query. Once it is done (which could take recursive lookups, but 91 * in this example no recursive lookups are needed), it returns from the 92 * operate function with finished. 93 * 94 * There is no previous module from the validator module, and the mesh 95 * takes this to mean that the query is finally done. The mesh invokes 96 * callbacks and sends packets to queriers. 97 * 98 * If other modules had been waiting (recursively) on the answer to this 99 * query, then the mesh will tell them about it. It calls the inform_super 100 * routine on all the waiting modules, and once that is done it calls all of 101 * them with the operate() call. During inform_super the query that is done 102 * still exists and information can be copied from it (but the module should 103 * not really re-entry codepoints and services). During the operate call 104 * the modules can use stored state to continue operation with the results. 105 * (network buffers are used to contain the answer packet during the 106 * inform_super phase, but after that the network buffers will be cleared 107 * of their contents so that other tasks can be performed). 108 * 109 * *** Example module calls for recursion 110 * 111 * A module is called in operate, and it decides that it wants to perform 112 * recursion. That is, it wants the full state-machine-list to operate on 113 * a different query. It calls env.attach_sub() to create a new query state. 114 * The routine returns the newly created state, and potentially the module 115 * can edit the module-states for the newly created query (i.e. pass along 116 * some information, like delegation points). The module then suspends, 117 * returns from the operate routine. 118 * 119 * The mesh meanwhile will have the newly created query (or queries) on 120 * a waiting list, and will call operate() on this query (or queries). 121 * It starts again at the start of the module list for them. The query 122 * (or queries) continue to operate their state machines, until they are 123 * done. When they are done the mesh calls inform_super on the module that 124 * wanted the recursion. After that the mesh calls operate() on the module 125 * that wanted to do the recursion, and during this phase the module could, 126 * for example, decide to create more recursions. 127 * 128 * If the module decides it no longer wants the recursive information 129 * it can call detach_subs. Those queries will still run to completion, 130 * potentially filling the cache with information. Inform_super is not 131 * called any more. 132 * 133 * The iterator module will fetch items from the cache, so a recursion 134 * attempt may complete very quickly if the item is in cache. The calling 135 * module has to wait for completion or eventual timeout. A recursive query 136 * that times out returns a servfail rcode (servfail is also returned for 137 * other errors during the lookup). 138 * 139 * Results are passed in the qstate, the rcode member is used to pass 140 * errors without requiring memory allocation, so that the code can continue 141 * in out-of-memory conditions. If the rcode member is 0 (NOERROR) then 142 * the dns_msg entry contains a filled out message. This message may 143 * also contain an rcode that is nonzero, but in this case additional 144 * information (query, additional) can be passed along. 145 * 146 * The rcode and dns_msg are used to pass the result from the rightmost 147 * module towards the leftmost modules and then towards the user. 148 * 149 * If you want to avoid recursion-cycles where queries need other queries 150 * that need the first one, use detect_cycle() to see if that will happen. 151 * 152 */ 153 154 #ifndef UTIL_MODULE_H 155 #define UTIL_MODULE_H 156 #include "util/storage/lruhash.h" 157 #include "util/data/msgreply.h" 158 #include "util/data/msgparse.h" 159 struct sldns_buffer; 160 struct alloc_cache; 161 struct rrset_cache; 162 struct key_cache; 163 struct config_file; 164 struct slabhash; 165 struct query_info; 166 struct edns_data; 167 struct regional; 168 struct worker; 169 struct comm_base; 170 struct auth_zones; 171 struct outside_network; 172 struct module_qstate; 173 struct ub_randstate; 174 struct mesh_area; 175 struct mesh_state; 176 struct val_anchors; 177 struct val_neg_cache; 178 struct iter_forwards; 179 struct iter_hints; 180 struct views; 181 struct respip_set; 182 struct respip_client_info; 183 struct respip_addr_info; 184 struct module_stack; 185 186 /** Maximum number of modules in operation */ 187 #define MAX_MODULE 16 188 189 /** Maximum number of known edns options */ 190 #define MAX_KNOWN_EDNS_OPTS 256 191 192 struct errinf_strlist { 193 /** next item in list */ 194 struct errinf_strlist* next; 195 /** config option string */ 196 char* str; 197 /** EDE code companion to the error str */ 198 int reason_bogus; 199 }; 200 201 enum inplace_cb_list_type { 202 /* Inplace callbacks for when a resolved reply is ready to be sent to the 203 * front.*/ 204 inplace_cb_reply = 0, 205 /* Inplace callbacks for when a reply is given from the cache. */ 206 inplace_cb_reply_cache, 207 /* Inplace callbacks for when a reply is given with local data 208 * (or Chaos reply). */ 209 inplace_cb_reply_local, 210 /* Inplace callbacks for when the reply is servfail. */ 211 inplace_cb_reply_servfail, 212 /* Inplace callbacks for when a query is ready to be sent to the back.*/ 213 inplace_cb_query, 214 /* Inplace callback for when a reply is received from the back. */ 215 inplace_cb_query_response, 216 /* Inplace callback for when EDNS is parsed on a reply received from the 217 * back. */ 218 inplace_cb_edns_back_parsed, 219 /* Total number of types. Used for array initialization. 220 * Should always be last. */ 221 inplace_cb_types_total 222 }; 223 224 225 /** Known edns option. Can be populated during modules' init. */ 226 struct edns_known_option { 227 /** type of this edns option */ 228 uint16_t opt_code; 229 /** whether the option needs to bypass the cache stage */ 230 int bypass_cache_stage; 231 /** whether the option needs mesh aggregation */ 232 int no_aggregation; 233 }; 234 235 /** 236 * Inplace callback list of registered routines to be called. 237 */ 238 struct inplace_cb { 239 /** next in list */ 240 struct inplace_cb* next; 241 /** Inplace callback routine */ 242 void* cb; 243 void* cb_arg; 244 /** module id */ 245 int id; 246 }; 247 248 /** 249 * Inplace callback function called before replying. 250 * Called as func(qinfo, qstate, rep, rcode, edns, opt_list_out, repinfo, 251 * region, id, python_callback) 252 * Where: 253 * qinfo: the query info. 254 * qstate: the module state. NULL when calling before the query reaches the 255 * mesh states. 256 * rep: reply_info. Could be NULL. 257 * rcode: the return code. 258 * edns: the edns_data of the reply. When qstate is NULL, it is also used as 259 * the edns input. 260 * opt_list_out: the edns options list for the reply. 261 * repinfo: reply information for a communication point. NULL when calling 262 * during the mesh states; the same could be found from 263 * qstate->mesh_info->reply_list. 264 * region: region to store data. 265 * id: module id. 266 * python_callback: only used for registering a python callback function. 267 */ 268 typedef int inplace_cb_reply_func_type(struct query_info* qinfo, 269 struct module_qstate* qstate, struct reply_info* rep, int rcode, 270 struct edns_data* edns, struct edns_option** opt_list_out, 271 struct comm_reply* repinfo, struct regional* region, 272 struct timeval* start_time, int id, void* callback); 273 274 /** 275 * Inplace callback function called before sending the query to a nameserver. 276 * Called as func(qinfo, flags, qstate, addr, addrlen, zone, zonelen, region, 277 * id, python_callback) 278 * Where: 279 * qinfo: query info. 280 * flags: flags of the query. 281 * qstate: query state. 282 * addr: to which server to send the query. 283 * addrlen: length of addr. 284 * zone: name of the zone of the delegation point. wireformat dname. 285 * This is the delegation point name for which the server is deemed 286 * authoritative. 287 * zonelen: length of zone. 288 * region: region to store data. 289 * id: module id. 290 * python_callback: only used for registering a python callback function. 291 */ 292 typedef int inplace_cb_query_func_type(struct query_info* qinfo, uint16_t flags, 293 struct module_qstate* qstate, struct sockaddr_storage* addr, 294 socklen_t addrlen, uint8_t* zone, size_t zonelen, struct regional* region, 295 int id, void* callback); 296 297 /** 298 * Inplace callback function called after parsing edns on query reply. 299 * Called as func(qstate, id, cb_args) 300 * Where: 301 * qstate: the query state. 302 * id: module id. 303 * cb_args: argument passed when registering callback. 304 */ 305 typedef int inplace_cb_edns_back_parsed_func_type(struct module_qstate* qstate, 306 int id, void* cb_args); 307 308 /** 309 * Inplace callback function called after parsing query response. 310 * Called as func(qstate, response, id, cb_args) 311 * Where: 312 * qstate: the query state. 313 * response: query response. 314 * id: module id. 315 * cb_args: argument passed when registering callback. 316 */ 317 typedef int inplace_cb_query_response_func_type(struct module_qstate* qstate, 318 struct dns_msg* response, int id, void* cb_args); 319 320 /** 321 * Function called when looking for (expired) cached answers during the serve 322 * expired logic. 323 * Called as func(qstate, lookup_qinfo, &is_expired) 324 * Where: 325 * qstate: the query state. 326 * lookup_qinfo: the qinfo to lookup for. 327 * is_expired: set if the cached answer is expired. 328 */ 329 typedef struct dns_msg* serve_expired_lookup_func_type( 330 struct module_qstate* qstate, struct query_info* lookup_qinfo, 331 int* is_expired); 332 333 /** 334 * Module environment. 335 * Services and data provided to the module. 336 */ 337 struct module_env { 338 /* --- data --- */ 339 /** config file with config options */ 340 struct config_file* cfg; 341 /** shared message cache */ 342 struct slabhash* msg_cache; 343 /** shared rrset cache */ 344 struct rrset_cache* rrset_cache; 345 /** shared infrastructure cache (edns, lameness) */ 346 struct infra_cache* infra_cache; 347 /** shared key cache */ 348 struct key_cache* key_cache; 349 350 /* --- services --- */ 351 /** 352 * Send serviced DNS query to server. UDP/TCP and EDNS is handled. 353 * operate() should return with wait_reply. Later on a callback 354 * will cause operate() to be called with event timeout or reply. 355 * The time until a timeout is calculated from roundtrip timing, 356 * several UDP retries are attempted. 357 * @param qinfo: query info. 358 * @param flags: host order flags word, with opcode and CD bit. 359 * @param dnssec: if set, EDNS record will have bits set. 360 * If EDNS_DO bit is set, DO bit is set in EDNS records. 361 * If BIT_CD is set, CD bit is set in queries with EDNS records. 362 * @param want_dnssec: if set, the validator wants DNSSEC. Without 363 * EDNS, the answer is likely to be useless for this domain. 364 * @param nocaps: do not use caps_for_id, use the qname as given. 365 * (ignored if caps_for_id is disabled). 366 * @param check_ratelimit: if set, will check ratelimit before sending out. 367 * @param addr: where to. 368 * @param addrlen: length of addr. 369 * @param zone: delegation point name. 370 * @param zonelen: length of zone name. 371 * @param tcp_upstream: use TCP for upstream queries. 372 * @param ssl_upstream: use SSL for upstream queries. 373 * @param tls_auth_name: if ssl_upstream, use this name with TLS 374 * authentication. 375 * @param q: which query state to reactivate upon return. 376 * @param was_ratelimited: it will signal back if the query failed to pass the 377 * ratelimit check. 378 * @param ratelimit_incremented: set to true if the ratelimit counter 379 * was increased. 380 * @return: false on failure (memory or socket related). no query was 381 * sent. Or returns an outbound entry with qsent and qstate set. 382 * This outbound_entry will be used on later module invocations 383 * that involve this query (timeout, error or reply). 384 */ 385 struct outbound_entry* (*send_query)(struct query_info* qinfo, 386 uint16_t flags, int dnssec, int want_dnssec, int nocaps, 387 int check_ratelimit, 388 struct sockaddr_storage* addr, socklen_t addrlen, 389 uint8_t* zone, size_t zonelen, int tcp_upstream, int ssl_upstream, 390 char* tls_auth_name, struct module_qstate* q, int* was_ratelimited, 391 int* ratelimit_incremented); 392 393 /** 394 * Detach-subqueries. 395 * Remove all sub-query references from this query state. 396 * Keeps super-references of those sub-queries correct. 397 * Updates stat items in mesh_area structure. 398 * @param qstate: used to find mesh state. 399 */ 400 void (*detach_subs)(struct module_qstate* qstate); 401 402 /** 403 * Attach subquery. 404 * Creates it if it does not exist already. 405 * Keeps sub and super references correct. 406 * Updates stat items in mesh_area structure. 407 * Pass if it is priming query or not. 408 * return: 409 * o if error (malloc) happened. 410 * o need to initialise the new state (module init; it is a new state). 411 * so that the next run of the query with this module is successful. 412 * o no init needed, attachment successful. 413 * 414 * @param qstate: the state to find mesh state, and that wants to 415 * receive the results from the new subquery. 416 * @param qinfo: what to query for (copied). 417 * @param cinfo: if non-NULL client specific info that may affect 418 * IP-based actions that apply to the query result. 419 * @param qflags: what flags to use (RD, CD flag or not). 420 * @param prime: if it is a (stub) priming query. 421 * @param valrec: validation lookup recursion, does not need validation 422 * @param newq: If the new subquery needs initialisation, it is 423 * returned, otherwise NULL is returned. 424 * @return: false on error, true if success (and init may be needed). 425 */ 426 int (*attach_sub)(struct module_qstate* qstate, 427 struct query_info* qinfo, struct respip_client_info* cinfo, 428 uint16_t qflags, int prime, int valrec, 429 struct module_qstate** newq); 430 431 /** 432 * Add detached query. 433 * Creates it if it does not exist already. 434 * Does not make super/sub references. 435 * Performs a cycle detection - for double check - and fails if there is 436 * one. 437 * Updates stat items in mesh_area structure. 438 * Pass if it is priming query or not. 439 * return: 440 * o if error (malloc) happened. 441 * o need to initialise the new state (module init; it is a new state). 442 * so that the next run of the query with this module is successful. 443 * o no init needed, attachment successful. 444 * o added subquery, created if it did not exist already. 445 * 446 * @param qstate: the state to find mesh state, and that wants to receive 447 * the results from the new subquery. 448 * @param qinfo: what to query for (copied). 449 * @param cinfo: if non-NULL client specific info that may affect 450 * IP-based actions that apply to the query result. 451 * @param qflags: what flags to use (RD / CD flag or not). 452 * @param prime: if it is a (stub) priming query. 453 * @param valrec: if it is a validation recursion query (lookup of key, DS). 454 * @param newq: If the new subquery needs initialisation, it is returned, 455 * otherwise NULL is returned. 456 * @param sub: The added mesh state, created if it did not exist already. 457 * @return: false on error, true if success (and init may be needed). 458 */ 459 int (*add_sub)(struct module_qstate* qstate, 460 struct query_info* qinfo, struct respip_client_info* cinfo, 461 uint16_t qflags, int prime, int valrec, 462 struct module_qstate** newq, struct mesh_state** sub); 463 464 /** 465 * Kill newly attached sub. If attach_sub returns newq for 466 * initialisation, but that fails, then this routine will cleanup and 467 * delete the freshly created sub. 468 * @param newq: the new subquery that is no longer needed. 469 * It is removed. 470 */ 471 void (*kill_sub)(struct module_qstate* newq); 472 473 /** 474 * Detect if adding a dependency for qstate on name,type,class will 475 * create a dependency cycle. 476 * @param qstate: given mesh querystate. 477 * @param qinfo: query info for dependency. 478 * @param flags: query flags of dependency, RD/CD flags. 479 * @param prime: if dependency is a priming query or not. 480 * @param valrec: validation lookup recursion, does not need validation 481 * @return true if the name,type,class exists and the given 482 * qstate mesh exists as a dependency of that name. Thus 483 * if qstate becomes dependent on name,type,class then a 484 * cycle is created. 485 */ 486 int (*detect_cycle)(struct module_qstate* qstate, 487 struct query_info* qinfo, uint16_t flags, int prime, 488 int valrec); 489 490 /** region for temporary usage. May be cleared after operate() call. */ 491 struct regional* scratch; 492 /** buffer for temporary usage. May be cleared after operate() call. */ 493 struct sldns_buffer* scratch_buffer; 494 /** internal data for daemon - worker thread. */ 495 struct worker* worker; 496 /** the worker event base */ 497 struct comm_base* worker_base; 498 /** the outside network */ 499 struct outside_network* outnet; 500 /** mesh area with query state dependencies */ 501 struct mesh_area* mesh; 502 /** allocation service */ 503 struct alloc_cache* alloc; 504 /** random table to generate random numbers */ 505 struct ub_randstate* rnd; 506 /** time in seconds, converted to integer */ 507 time_t* now; 508 /** time in microseconds. Relatively recent. */ 509 struct timeval* now_tv; 510 /** is validation required for messages, controls client-facing 511 * validation status (AD bits) and servfails */ 512 int need_to_validate; 513 /** trusted key storage; these are the configured keys, if not NULL, 514 * otherwise configured by validator. These are the trust anchors, 515 * and are not primed and ready for validation, but on the bright 516 * side, they are read only memory, thus no locks and fast. */ 517 struct val_anchors* anchors; 518 /** negative cache, configured by the validator. if not NULL, 519 * contains NSEC record lookup trees. */ 520 struct val_neg_cache* neg_cache; 521 /** the 5011-probe timer (if any) */ 522 struct comm_timer* probe_timer; 523 /** auth zones */ 524 struct auth_zones* auth_zones; 525 /** Mapping of forwarding zones to targets. 526 * iterator forwarder information. */ 527 struct iter_forwards* fwds; 528 /** 529 * iterator stub information. 530 * The hints -- these aren't stored in the cache because they don't 531 * expire. The hints are always used to "prime" the cache. Note 532 * that both root hints and stub zone "hints" are stored in this 533 * data structure. 534 */ 535 struct iter_hints* hints; 536 /** views structure containing view tree */ 537 struct views* views; 538 /** response-ip set with associated actions and tags. */ 539 struct respip_set* respip_set; 540 /** module specific data. indexed by module id. */ 541 void* modinfo[MAX_MODULE]; 542 543 /* Shared linked list of inplace callback functions */ 544 struct inplace_cb* inplace_cb_lists[inplace_cb_types_total]; 545 546 /** 547 * Shared array of known edns options (size MAX_KNOWN_EDNS_OPTS). 548 * Filled by edns literate modules during init. 549 */ 550 struct edns_known_option* edns_known_options; 551 /* Number of known edns options */ 552 size_t edns_known_options_num; 553 /** EDNS client string information */ 554 struct edns_strings* edns_strings; 555 556 /** module stack */ 557 struct module_stack* modstack; 558 #ifdef USE_CACHEDB 559 /** the cachedb enabled value, copied and stored here. */ 560 int cachedb_enabled; 561 #endif 562 /* Make every mesh state unique, do not aggregate mesh states. */ 563 int unique_mesh; 564 }; 565 566 /** 567 * External visible states of the module state machine 568 * Modules may also have an internal state. 569 * Modules are supposed to run to completion or until blocked. 570 */ 571 enum module_ext_state { 572 /** initial state - new query */ 573 module_state_initial = 0, 574 /** waiting for reply to outgoing network query */ 575 module_wait_reply, 576 /** module is waiting for another module */ 577 module_wait_module, 578 /** module is waiting for another module; that other is restarted */ 579 module_restart_next, 580 /** module is waiting for sub-query */ 581 module_wait_subquery, 582 /** module could not finish the query */ 583 module_error, 584 /** module is finished with query */ 585 module_finished 586 }; 587 588 /** 589 * Events that happen to modules, that start or wakeup modules. 590 */ 591 enum module_ev { 592 /** new query */ 593 module_event_new = 0, 594 /** query passed by other module */ 595 module_event_pass, 596 /** reply inbound from server */ 597 module_event_reply, 598 /** no reply, timeout or other error */ 599 module_event_noreply, 600 /** reply is there, but capitalisation check failed */ 601 module_event_capsfail, 602 /** next module is done, and its reply is awaiting you */ 603 module_event_moddone, 604 /** error */ 605 module_event_error 606 }; 607 608 /** 609 * Linked list of sockaddrs 610 * May be allocated such that only 'len' bytes of addr exist for the structure. 611 */ 612 struct sock_list { 613 /** next in list */ 614 struct sock_list* next; 615 /** length of addr */ 616 socklen_t len; 617 /** sockaddr */ 618 struct sockaddr_storage addr; 619 }; 620 621 struct respip_action_info; 622 623 /** 624 * Struct to hold relevant data for serve expired 625 */ 626 struct serve_expired_data { 627 struct comm_timer* timer; 628 serve_expired_lookup_func_type* get_cached_answer; 629 }; 630 631 /** 632 * Module state, per query. 633 */ 634 struct module_qstate { 635 /** which query is being answered: name, type, class */ 636 struct query_info qinfo; 637 /** flags uint16 from query */ 638 uint16_t query_flags; 639 /** if this is a (stub or root) priming query (with hints) */ 640 int is_priming; 641 /** if this is a validation recursion query that does not get 642 * validation itself */ 643 int is_valrec; 644 #ifdef CLIENT_SUBNET 645 /** the client network address is needed for the client-subnet option 646 * when prefetching, but we can't use reply_list in mesh_info, because 647 * we don't want to send a reply for the internal query. */ 648 struct sockaddr_storage client_addr; 649 #endif 650 651 /** comm_reply contains server replies */ 652 struct comm_reply* reply; 653 /** the reply message, with message for client and calling module */ 654 struct dns_msg* return_msg; 655 /** the rcode, in case of error, instead of a reply message */ 656 int return_rcode; 657 /** origin of the reply (can be NULL from cache, list for cnames) */ 658 struct sock_list* reply_origin; 659 /** IP blacklist for queries */ 660 struct sock_list* blacklist; 661 /** region for this query. Cleared when query process finishes. */ 662 struct regional* region; 663 /** failure reason information if val-log-level is high */ 664 struct errinf_strlist* errinf; 665 /** which module is executing */ 666 int curmod; 667 /** module states */ 668 enum module_ext_state ext_state[MAX_MODULE]; 669 /** module specific data for query. indexed by module id. */ 670 void* minfo[MAX_MODULE]; 671 /** environment for this query */ 672 struct module_env* env; 673 /** mesh related information for this query */ 674 struct mesh_state* mesh_info; 675 /** how many seconds before expiry is this prefetched (0 if not) */ 676 time_t prefetch_leeway; 677 /** serve expired data */ 678 struct serve_expired_data* serve_expired_data; 679 680 /** incoming edns options from the front end */ 681 struct edns_option* edns_opts_front_in; 682 /** outgoing edns options to the back end */ 683 struct edns_option* edns_opts_back_out; 684 /** incoming edns options from the back end */ 685 struct edns_option* edns_opts_back_in; 686 /** outgoing edns options to the front end */ 687 struct edns_option* edns_opts_front_out; 688 /** whether modules should answer from the cache */ 689 int no_cache_lookup; 690 /** whether modules should store answer in the cache */ 691 int no_cache_store; 692 /** whether to refetch a fresh answer on finishing this state*/ 693 int need_refetch; 694 /** whether the query (or a subquery) was ratelimited */ 695 int was_ratelimited; 696 /** time when query was started. This is when the qstate is created. 697 * This is used so that type NS data cannot be overwritten by them 698 * expiring while the lookup is in progress, using data fetched from 699 * those servers. By comparing expiry time with qstarttime for type NS. 700 */ 701 time_t qstarttime; 702 /** whether a message from cachedb will be used for the reply */ 703 int is_cachedb_answer; 704 /** whether the reply is subnet specific */ 705 int is_subnet_answer; 706 /** if the response as error is from error_response_cache, and is 707 * suitable for caching (briefly) the error response. Set by the 708 * iterator when no_cache_store is enabled, and there is an error. */ 709 int error_response_cache; 710 /** if the iterator sees that the forward/stub has no_cache set. 711 * to signal to calling modules that their setting of no_cache for 712 * other reasons, has to take into account the fwd/stub no_cache. */ 713 int fwd_stub_no_cache; 714 715 /** 716 * Attributes of clients that share the qstate that may affect IP-based 717 * actions. 718 */ 719 struct respip_client_info* client_info; 720 721 /** Extended result of response-ip action processing, mainly 722 * for logging purposes. */ 723 struct respip_action_info* respip_action_info; 724 /** if the query has been modified by rpz processing. */ 725 int rpz_applied; 726 /** if the query is rpz passthru, no further rpz processing for it */ 727 int rpz_passthru; 728 /* Flag tcp required. */ 729 int tcp_required; 730 731 /** whether the reply should be dropped */ 732 int is_drop; 733 /** the global quota that was reached, by one of the modules. 734 * So that continued counting can go on from that point. */ 735 int global_quota_reached; 736 /** the global quota that a query started with, it is a subquery, 737 * so that calling mesh states can see the increase. */ 738 int global_quota_started; 739 }; 740 741 /** 742 * Module functionality block 743 */ 744 struct module_func_block { 745 /** text string name of module */ 746 const char* name; 747 748 /** 749 * Set up the module for start. This is called only once at startup. 750 * Privileged operations like opening device files may be done here. 751 * The function ptr can be NULL, if it is not used. 752 * @param env: module environment. 753 * @param id: module id number. 754 * return: 0 on error 755 */ 756 int (*startup)(struct module_env* env, int id); 757 758 /** 759 * Close down the module for stop. This is called only once before 760 * shutdown to free resources allocated during startup(). 761 * Closing privileged ports or files must be done here. 762 * The function ptr can be NULL, if it is not used. 763 * @param env: module environment. 764 * @param id: module id number. 765 */ 766 void (*destartup)(struct module_env* env, int id); 767 768 /** 769 * Initialise the module. Called when restarting or reloading the 770 * daemon. 771 * This is the place to apply settings from the config file. 772 * @param env: module environment. 773 * @param id: module id number. 774 * return: 0 on error 775 */ 776 int (*init)(struct module_env* env, int id); 777 778 /** 779 * Deinitialise the module, undo stuff done during init(). 780 * Called before reloading the daemon. 781 * @param env: module environment. 782 * @param id: module id number. 783 */ 784 void (*deinit)(struct module_env* env, int id); 785 786 /** 787 * accept a new query, or work further on existing query. 788 * Changes the qstate->ext_state to be correct on exit. 789 * @param ev: event that causes the module state machine to 790 * (re-)activate. 791 * @param qstate: the query state. 792 * Note that this method is not allowed to change the 793 * query state 'identity', that is query info, qflags, 794 * and priming status. 795 * Attach a subquery to get results to a different query. 796 * @param id: module id number that operate() is called on. 797 * @param outbound: if not NULL this event is due to the reply/timeout 798 * or error on this outbound query. 799 * @return: if at exit the ext_state is: 800 * o wait_module: next module is started. (with pass event). 801 * o error or finished: previous module is resumed. 802 * o otherwise it waits until that event happens (assumes 803 * the service routine to make subrequest or send message 804 * have been called. 805 */ 806 void (*operate)(struct module_qstate* qstate, enum module_ev event, 807 int id, struct outbound_entry* outbound); 808 809 /** 810 * inform super querystate about the results from this subquerystate. 811 * Is called when the querystate is finished. The method invoked is 812 * the one from the current module active in the super querystate. 813 * @param qstate: the query state that is finished. 814 * Examine return_rcode and return_reply in the qstate. 815 * @param id: module id for this module. 816 * This coincides with the current module for the super qstate. 817 * @param super: the super querystate that needs to be informed. 818 */ 819 void (*inform_super)(struct module_qstate* qstate, int id, 820 struct module_qstate* super); 821 822 /** 823 * clear module specific data 824 */ 825 void (*clear)(struct module_qstate* qstate, int id); 826 827 /** 828 * How much memory is the module specific data using. 829 * @param env: module environment. 830 * @param id: the module id. 831 * @return the number of bytes that are alloced. 832 */ 833 size_t (*get_mem)(struct module_env* env, int id); 834 }; 835 836 /** 837 * Debug utility: module external qstate to string 838 * @param s: the state value. 839 * @return descriptive string. 840 */ 841 const char* strextstate(enum module_ext_state s); 842 843 /** 844 * Debug utility: module event to string 845 * @param e: the module event value. 846 * @return descriptive string. 847 */ 848 const char* strmodulevent(enum module_ev e); 849 850 /** 851 * Append text to the error info for validation. 852 * @param qstate: query state. 853 * @param str: copied into query region and appended. 854 * Failures to allocate are logged. 855 */ 856 void errinf(struct module_qstate* qstate, const char* str); 857 void errinf_ede(struct module_qstate* qstate, const char* str, 858 sldns_ede_code reason_bogus); 859 860 /** 861 * Append text to error info: from 1.2.3.4 862 * @param qstate: query state. 863 * @param origin: sock list with origin of trouble. 864 * Every element added. 865 * If NULL: nothing is added. 866 * if 0len element: 'from cache' is added. 867 */ 868 void errinf_origin(struct module_qstate* qstate, struct sock_list *origin); 869 870 /** 871 * Append text to error info: for RRset name type class 872 * @param qstate: query state. 873 * @param rr: rrset_key. 874 */ 875 void errinf_rrset(struct module_qstate* qstate, struct ub_packed_rrset_key *rr); 876 877 /** 878 * Append text to error info: str dname 879 * @param qstate: query state. 880 * @param str: explanation string 881 * @param dname: the dname. 882 */ 883 void errinf_dname(struct module_qstate* qstate, const char* str, 884 uint8_t* dname); 885 886 /** 887 * Create error info in string. For validation failures. 888 * @param qstate: query state. 889 * @param region: the region for the result or NULL for malloced result. 890 * @return string or NULL on malloc failure (already logged). 891 * This string is malloced if region is NULL and has to be freed by caller. 892 */ 893 char* errinf_to_str_bogus(struct module_qstate* qstate, struct regional* region); 894 895 /** 896 * Check the sldns_ede_code of the qstate->errinf. 897 * @param qstate: query state. 898 * @return the latest explicitly set sldns_ede_code or LDNS_EDE_NONE. 899 */ 900 sldns_ede_code errinf_to_reason_bogus(struct module_qstate* qstate); 901 902 /** 903 * Create error info in string. For other servfails. 904 * @param qstate: query state. 905 * @return string or NULL on malloc failure (already logged). 906 */ 907 char* errinf_to_str_servfail(struct module_qstate* qstate); 908 909 /** 910 * Create error info in string. For misc failures that are not servfail. 911 * @param qstate: query state. 912 * @return string or NULL on malloc failure (already logged). 913 */ 914 char* errinf_to_str_misc(struct module_qstate* qstate); 915 916 /** 917 * Initialize the edns known options by allocating the required space. 918 * @param env: the module environment. 919 * @return false on failure (no memory). 920 */ 921 int edns_known_options_init(struct module_env* env); 922 923 /** 924 * Free the allocated space for the known edns options. 925 * @param env: the module environment. 926 */ 927 void edns_known_options_delete(struct module_env* env); 928 929 /** 930 * Register a known edns option. Overwrite the flags if it is already 931 * registered. Used before creating workers to register known edns options. 932 * @param opt_code: the edns option code. 933 * @param bypass_cache_stage: whether the option interacts with the cache. 934 * @param no_aggregation: whether the option implies more specific 935 * aggregation. 936 * @param env: the module environment. 937 * @return true on success, false on failure (registering more options than 938 * allowed or trying to register after the environment is copied to the 939 * threads.) 940 */ 941 int edns_register_option(uint16_t opt_code, int bypass_cache_stage, 942 int no_aggregation, struct module_env* env); 943 944 /** 945 * Register an inplace callback function. 946 * @param cb: pointer to the callback function. 947 * @param type: inplace callback type. 948 * @param cbarg: argument for the callback function, or NULL. 949 * @param env: the module environment. 950 * @param id: module id. 951 * @return true on success, false on failure (out of memory or trying to 952 * register after the environment is copied to the threads.) 953 */ 954 int 955 inplace_cb_register(void* cb, enum inplace_cb_list_type type, void* cbarg, 956 struct module_env* env, int id); 957 958 /** 959 * Delete callback for specified type and module id. 960 * @param env: the module environment. 961 * @param type: inplace callback type. 962 * @param id: module id. 963 */ 964 void 965 inplace_cb_delete(struct module_env* env, enum inplace_cb_list_type type, 966 int id); 967 968 /** 969 * Delete all the inplace callback linked lists. 970 * @param env: the module environment. 971 */ 972 void inplace_cb_lists_delete(struct module_env* env); 973 974 /** 975 * Check if an edns option is known. 976 * @param opt_code: the edns option code. 977 * @param env: the module environment. 978 * @return pointer to registered option if the edns option is known, 979 * NULL otherwise. 980 */ 981 struct edns_known_option* edns_option_is_known(uint16_t opt_code, 982 struct module_env* env); 983 984 /** 985 * Check if an edns option needs to bypass the reply from cache stage. 986 * @param list: the edns options. 987 * @param env: the module environment. 988 * @return true if an edns option needs to bypass the cache stage, 989 * false otherwise. 990 */ 991 int edns_bypass_cache_stage(struct edns_option* list, 992 struct module_env* env); 993 994 /** 995 * Check if an unique mesh state is required. Might be triggered by EDNS option 996 * or set for the complete env. 997 * @param list: the edns options. 998 * @param env: the module environment. 999 * @return true if an edns option needs a unique mesh state, 1000 * false otherwise. 1001 */ 1002 int unique_mesh_state(struct edns_option* list, struct module_env* env); 1003 1004 /** 1005 * Log the known edns options. 1006 * @param level: the desired verbosity level. 1007 * @param env: the module environment. 1008 */ 1009 void log_edns_known_options(enum verbosity_value level, 1010 struct module_env* env); 1011 1012 /** 1013 * Copy state that may have happened in the subquery and is always relevant to 1014 * the super. 1015 * @param qstate: query state that finished. 1016 * @param id: module id. 1017 * @param super: the qstate to inform. 1018 */ 1019 void copy_state_to_super(struct module_qstate* qstate, int id, 1020 struct module_qstate* super); 1021 1022 #endif /* UTIL_MODULE_H */ 1023