netbird/client/internal/routemanager/systemops/systemops_bsd_privileged_test.go

//go:build (darwin || dragonfly || freebsd || netbsd || openbsd) && privileged

package systemops

import (
	"fmt"
	"net"
	"net/netip"
	"os/exec"
	"regexp"
	"runtime"
	"strings"
	"sync"
	"testing"

	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"
)

func init() {
	testCases = append(testCases, []testCase{
		{
			name:              "To more specific route without custom dialer via vpn",
			expectedInterface: expectedVPNint,
			dialer:            &net.Dialer{},
			expectedPacket:    createPacketExpectation("100.64.0.1", 12345, "10.10.0.2", 53),
		},
	}...)
}

func TestConcurrentRoutes(t *testing.T) {
	baseIP := netip.MustParseAddr("192.0.2.0")

	var intf *net.Interface
	var nexthop Nexthop

	_, intf = setupDummyInterface(t)
	nexthop = Nexthop{netip.Addr{}, intf}

	r := New(nil, nil)

	var wg sync.WaitGroup
	for i := 0; i < 1024; i++ {
		wg.Add(1)
		go func(ip netip.Addr) {
			defer wg.Done()
			prefix := netip.PrefixFrom(ip, 32)
			if err := r.addToRouteTable(prefix, nexthop); err != nil {
				t.Errorf("Failed to add route for %s: %v", prefix, err)
			}
		}(baseIP)
		baseIP = baseIP.Next()
	}

	wg.Wait()

	baseIP = netip.MustParseAddr("192.0.2.0")

	for i := 0; i < 1024; i++ {
		wg.Add(1)
		go func(ip netip.Addr) {
			defer wg.Done()
			prefix := netip.PrefixFrom(ip, 32)
			if err := r.removeFromRouteTable(prefix, nexthop); err != nil {
				t.Errorf("Failed to remove route for %s: %v", prefix, err)
			}
		}(baseIP)
		baseIP = baseIP.Next()
	}

	wg.Wait()
}

func createAndSetupDummyInterface(t *testing.T, intf string, ipAddressCIDR string) string {
	t.Helper()

	if runtime.GOOS == "darwin" {
		err := exec.Command("ifconfig", intf, "alias", ipAddressCIDR).Run()
		require.NoError(t, err, "Failed to create loopback alias")

		t.Cleanup(func() {
			err := exec.Command("ifconfig", intf, ipAddressCIDR, "-alias").Run()
			assert.NoError(t, err, "Failed to remove loopback alias")
		})

		return intf
	}

	prefix, err := netip.ParsePrefix(ipAddressCIDR)
	require.NoError(t, err, "Failed to parse prefix")

	netIntf, err := net.InterfaceByName(intf)
	require.NoError(t, err, "Failed to get interface by name")

	nexthop := Nexthop{netip.Addr{}, netIntf}

	r := New(nil, nil)
	err = r.addToRouteTable(prefix, nexthop)
	require.NoError(t, err, "Failed to add route to table")

	t.Cleanup(func() {
		err := r.removeFromRouteTable(prefix, nexthop)
		assert.NoError(t, err, "Failed to remove route from table")
	})

	return intf
}

func addDummyRoute(t *testing.T, dstCIDR string, gw netip.Addr, _ string) {
	t.Helper()

	var originalNexthop net.IP
	if dstCIDR == "0.0.0.0/0" {
		var err error
		originalNexthop, err = fetchOriginalGateway()
		if err != nil {
			t.Logf("Failed to fetch original gateway: %v", err)
		}

		if output, err := exec.Command("route", "delete", "-net", dstCIDR).CombinedOutput(); err != nil {
			t.Logf("Failed to delete route: %v, output: %s", err, output)
		}
	}

	t.Cleanup(func() {
		if originalNexthop != nil {
			err := exec.Command("route", "add", "-net", dstCIDR, originalNexthop.String()).Run()
			assert.NoError(t, err, "Failed to restore original route")
		}
	})

	err := exec.Command("route", "add", "-net", dstCIDR, gw.String()).Run()
	require.NoError(t, err, "Failed to add route")

	t.Cleanup(func() {
		err := exec.Command("route", "delete", "-net", dstCIDR).Run()
		assert.NoError(t, err, "Failed to remove route")
	})
}

func fetchOriginalGateway() (net.IP, error) {
	output, err := exec.Command("route", "-n", "get", "default").CombinedOutput()
	if err != nil {
		return nil, err
	}

	matches := regexp.MustCompile(`gateway: (\S+)`).FindStringSubmatch(string(output))
	if len(matches) == 0 {
		return nil, fmt.Errorf("gateway not found")
	}

	return net.ParseIP(matches[1]), nil
}

// setupDummyInterface creates a dummy tun interface for FreeBSD route testing
func setupDummyInterface(t *testing.T) (netip.Addr, *net.Interface) {
	t.Helper()

	if runtime.GOOS == "darwin" {
		return netip.AddrFrom4([4]byte{192, 168, 1, 2}), &net.Interface{Name: "lo0"}
	}

	output, err := exec.Command("ifconfig", "tun", "create").CombinedOutput()
	require.NoError(t, err, "Failed to create tun interface: %s", string(output))

	tunName := strings.TrimSpace(string(output))

	output, err = exec.Command("ifconfig", tunName, "192.168.1.1", "netmask", "255.255.0.0", "192.168.1.2", "up").CombinedOutput()
	require.NoError(t, err, "Failed to configure tun interface: %s", string(output))

	intf, err := net.InterfaceByName(tunName)
	require.NoError(t, err, "Failed to get interface by name")

	t.Cleanup(func() {
		if err := exec.Command("ifconfig", tunName, "destroy").Run(); err != nil {
			t.Logf("Failed to destroy tun interface %s: %v", tunName, err)
		}
	})

	return netip.AddrFrom4([4]byte{192, 168, 1, 2}), intf
}

func setupDummyInterfacesAndRoutes(t *testing.T) {
	t.Helper()

	defaultDummy := createAndSetupDummyInterface(t, expectedExternalInt, "192.168.0.1/24")
	addDummyRoute(t, "0.0.0.0/0", netip.AddrFrom4([4]byte{192, 168, 0, 1}), defaultDummy)

	otherDummy := createAndSetupDummyInterface(t, expectedInternalInt, "192.168.1.1/24")
	addDummyRoute(t, "10.0.0.0/8", netip.AddrFrom4([4]byte{192, 168, 1, 1}), otherDummy)
}