mirror of
https://github.com/netbirdio/netbird.git
synced 2026-10-21 12:59:08 +02:00
riccardom
f669cba522
In netstack mode (js/wasm and embedded clients) the overlay IP lives only inside the userspace stack, so binding it on the host failed with "cannot assign requested address". The exchange was then disabled, and in strict mode the engine refused to start at all. Reproduced in the lab with NB_USE_NETSTACK_MODE=true. Open the socket through the interface's netstack when there is one. Its datagrams then ride the tunnel like any other overlay traffic (over the relay's WebSocket in the browser). Host-TUN clients keep binding on the host.
93 lines
3.0 KiB
Go
93 lines
3.0 KiB
Go
package internal
|
|
|
|
import (
|
|
"net/netip"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
"golang.zx2c4.com/wireguard/tun/netstack"
|
|
)
|
|
|
|
type pqInbound struct {
|
|
src netip.AddrPort
|
|
msg []byte
|
|
}
|
|
|
|
func runPQTransport(t *testing.T, tr *pqTransport) <-chan pqInbound {
|
|
t.Helper()
|
|
got := make(chan pqInbound, 1)
|
|
tr.Run(func(src netip.AddrPort, msg []byte) {
|
|
select {
|
|
case got <- pqInbound{src: src, msg: msg}:
|
|
default:
|
|
}
|
|
})
|
|
t.Cleanup(func() { _ = tr.Close() })
|
|
return got
|
|
}
|
|
|
|
func receivePQ(t *testing.T, got <-chan pqInbound) pqInbound {
|
|
t.Helper()
|
|
select {
|
|
case in := <-got:
|
|
return in
|
|
case <-time.After(5 * time.Second):
|
|
t.Fatal("no datagram received")
|
|
return pqInbound{}
|
|
}
|
|
}
|
|
|
|
// TestPQTransport_HostRoundTrip sends a datagram between two host-bound transports. The
|
|
// second bind collides with the first on DefaultPort, so it also covers the fallback to
|
|
// an ephemeral port. The source must come back as a plain (unmapped) IPv4 endpoint,
|
|
// since the manager matches it against registered peer endpoints.
|
|
func TestPQTransport_HostRoundTrip(t *testing.T) {
|
|
loopback := netip.MustParseAddr("127.0.0.1")
|
|
|
|
a, err := newPQTransport(loopback, nil)
|
|
require.NoError(t, err)
|
|
b, err := newPQTransport(loopback, nil)
|
|
require.NoError(t, err)
|
|
require.NotEqual(t, a.LocalPort(), b.LocalPort(), "two transports on one IP must get distinct ports")
|
|
|
|
runPQTransport(t, a)
|
|
gotB := runPQTransport(t, b)
|
|
|
|
require.NoError(t, a.Send(netip.AddrPortFrom(loopback, uint16(b.LocalPort())), []byte("offer")))
|
|
|
|
in := receivePQ(t, gotB)
|
|
assert.Equal(t, []byte("offer"), in.msg, "payload must arrive intact")
|
|
assert.Equal(t, netip.AddrPortFrom(loopback, uint16(a.LocalPort())), in.src, "source must be the sender's unmapped IPv4 endpoint")
|
|
}
|
|
|
|
// TestPQTransport_NetstackRoundTrip covers netstack mode (js/wasm and embedded clients),
|
|
// where the overlay IP exists only inside the userspace stack. Binding it on the host
|
|
// fails, which disabled the exchange (or, in strict mode, stopped the engine from
|
|
// starting); the transport must open its socket on the netstack instead.
|
|
func TestPQTransport_NetstackRoundTrip(t *testing.T) {
|
|
overlay := netip.MustParseAddr("192.0.2.1")
|
|
dev, ns, err := netstack.CreateNetTUN([]netip.Addr{overlay}, nil, 1280)
|
|
require.NoError(t, err)
|
|
t.Cleanup(func() { _ = dev.Close() })
|
|
|
|
_, err = newPQTransport(overlay, nil)
|
|
require.Error(t, err, "the netstack-only overlay IP must not be bindable on the host")
|
|
|
|
a, err := newPQTransport(overlay, ns)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, DefaultPort, a.LocalPort(), "the default port must be free on a fresh netstack")
|
|
b, err := newPQTransport(overlay, ns)
|
|
require.NoError(t, err)
|
|
|
|
runPQTransport(t, a)
|
|
gotB := runPQTransport(t, b)
|
|
|
|
require.NoError(t, a.Send(netip.AddrPortFrom(overlay, uint16(b.LocalPort())), []byte("offer")))
|
|
|
|
in := receivePQ(t, gotB)
|
|
assert.Equal(t, []byte("offer"), in.msg, "payload must arrive intact")
|
|
assert.Equal(t, netip.AddrPortFrom(overlay, uint16(a.LocalPort())), in.src, "source must be the sender's overlay endpoint")
|
|
}
|