gfwleak/tango-tfe
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

TSG-3417 TFE 适配 FQDN

Browse Source 
* 修改 cmsg 接口
	* DOH 不支持扫描 fqdn cat id
This commit is contained in:
luwenpeng
2020-10-12 15:43:27 +08:00
parent 40aab0a298
commit 90ac86a10c
5 changed files with 43 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

55
common/src/tfe_scan.cpp
View File

@@ -68,44 +68,55 @@ int tfe_scan_subscribe_id(const struct tfe_stream *stream, struct Maat_rule_t *r
}
int tfe_scan_fqdn_cat(const struct tfe_stream *stream, struct Maat_rule_t *result, scan_status_t *scan_mid,
int hit_cnt, unsigned int thread_id, void *logger, int table_id)
int hit_cnt, unsigned int thread_id, void *logger, const char *addr, int table_id)
{
int scan_ret = 0, i, fqdn_len =0;
int scan_ret = 0;
unsigned int i = 0;
uint16_t opt_out_size;
int category_num = 0, hit_cnt_fqdn = 0;
char category_id_num[24] = {0};
char category_id_val[TFE_SYMBOL_MAX] = {0};
int hit_cnt_fqdn = 0;
unsigned int category_id_num = 0;
unsigned int category_id_val[TFE_SYMBOL_MAX] = {0};
struct tfe_cmsg *cmsg = tfe_stream_get0_cmsg(stream);
if (cmsg != NULL)
{
scan_ret = tfe_cmsg_get_value(cmsg, TFE_CMSG_SRC_FQDN_ID, (unsigned char *)category_id_val, sizeof(category_id_val), &opt_out_size);
scan_ret = tfe_cmsg_get_value(cmsg, TFE_CMSG_FQDN_CAT_ID_NUM, (unsigned char *)&category_id_num, sizeof(category_id_num), &opt_out_size);
if (scan_ret != 0)
{
TFE_LOG_ERROR(logger, "fetch fqdn cat id from cmsg failed, ret: %d", scan_ret);
TFE_LOG_ERROR(logger, "fetch fqdn cat id num from cmsg failed, ret: %d addr: %s", scan_ret, addr);
}
scan_ret = tfe_cmsg_get_value(cmsg, TFE_CMSG_SRC_FQDN_NUM, (unsigned char *)category_id_num, sizeof(category_id_num), &opt_out_size);
scan_ret = tfe_cmsg_get_value(cmsg, TFE_CMSG_FQDN_CAT_ID_VAL, (unsigned char *)category_id_val, sizeof(category_id_val), &opt_out_size);
if (scan_ret != 0)
{
TFE_LOG_ERROR(logger, "fetch fqdn cat id from cmsg failed, ret: %d", scan_ret);
TFE_LOG_ERROR(logger, "fetch fqdn cat id val from cmsg failed, ret: %d addr: %s", scan_ret, addr);
}
category_num = atoll(category_id_num);
}
TFE_LOG_DEBUG(logger, "fetch fqdn cat id:%d val:%d,%d,%d,%d,%d,%d,%d,%d addr: %s", category_id_num,
(category_id_num >= 1 ? category_id_val[0] : 0),
(category_id_num >= 2 ? category_id_val[1] : 0),
(category_id_num >= 3 ? category_id_val[2] : 0),
(category_id_num >= 4 ? category_id_val[3] : 0),
(category_id_num >= 5 ? category_id_val[4] : 0),
(category_id_num >= 6 ? category_id_val[5] : 0),
(category_id_num >= 7 ? category_id_val[6] : 0),
(category_id_num >= 8 ? category_id_val[7] : 0),
addr);
for(i = 0; i< category_num && i < 8; i++)
{
int fqdn_id =0;
char fqdn_val[16]={0};
snprintf(fqdn_val, sizeof(int), "%s", category_id_val + fqdn_len);
fqdn_id = atoi(fqdn_val);
scan_ret=Maat_scan_intval(tfe_bussiness_resouce_get(STATIC_MAAT), table_id, fqdn_id, result + hit_cnt + hit_cnt_fqdn,
MAX_SCAN_RESULT-hit_cnt-hit_cnt_fqdn, scan_mid, (int) thread_id);
if(scan_ret>0)
for (i = 0; i < category_id_num && i < 8; i++)
{
scan_ret = Maat_scan_intval(tfe_bussiness_resouce_get(STATIC_MAAT), table_id, category_id_val[i], result + hit_cnt + hit_cnt_fqdn,
MAX_SCAN_RESULT - hit_cnt - hit_cnt_fqdn, scan_mid, (int)thread_id);
if (scan_ret > 0)
{
hit_cnt_fqdn+=scan_ret;
TFE_LOG_INFO(logger, "Scan FQDN_CAT, Hit catid: %d scan ret: %d policy_id: %d service: %d action: %d addr: %s",
category_id_val[i], scan_ret, result[hit_cnt + hit_cnt_fqdn].config_id, result[hit_cnt + hit_cnt_fqdn].service_id, result[hit_cnt + hit_cnt_fqdn].action, addr);
hit_cnt_fqdn += scan_ret;
}
fqdn_len += sizeof(int);
else
{
TFE_LOG_INFO(logger, "Scan FQDN_CAT, NO hit catid: %d scan ret: %d addr: %s",
category_id_val[i], scan_ret, addr);
}
}
return hit_cnt_fqdn;
}