sockopt_linux.go 6.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203
  1. package internet
  2. import (
  3. "net"
  4. "syscall"
  5. "golang.org/x/sys/unix"
  6. )
  7. const (
  8. // For incoming connections.
  9. TCP_FASTOPEN = 23 // nolint: revive,stylecheck
  10. // For out-going connections.
  11. TCP_FASTOPEN_CONNECT = 30 // nolint: revive,stylecheck
  12. )
  13. func bindAddr(fd uintptr, ip []byte, port uint32) error {
  14. setReuseAddr(fd)
  15. setReusePort(fd)
  16. var sockaddr syscall.Sockaddr
  17. switch len(ip) {
  18. case net.IPv4len:
  19. a4 := &syscall.SockaddrInet4{
  20. Port: int(port),
  21. }
  22. copy(a4.Addr[:], ip)
  23. sockaddr = a4
  24. case net.IPv6len:
  25. a6 := &syscall.SockaddrInet6{
  26. Port: int(port),
  27. }
  28. copy(a6.Addr[:], ip)
  29. sockaddr = a6
  30. default:
  31. return newError("unexpected length of ip")
  32. }
  33. return syscall.Bind(int(fd), sockaddr)
  34. }
  35. func applyOutboundSocketOptions(network string, address string, fd uintptr, config *SocketConfig) error {
  36. if config.Mark != 0 {
  37. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_SOCKET, syscall.SO_MARK, int(config.Mark)); err != nil {
  38. return newError("failed to set SO_MARK").Base(err)
  39. }
  40. }
  41. if isTCPSocket(network) {
  42. switch config.Tfo {
  43. case SocketConfig_Enable:
  44. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_TCP, TCP_FASTOPEN_CONNECT, 1); err != nil {
  45. return newError("failed to set TCP_FASTOPEN_CONNECT=1").Base(err)
  46. }
  47. case SocketConfig_Disable:
  48. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_TCP, TCP_FASTOPEN_CONNECT, 0); err != nil {
  49. return newError("failed to set TCP_FASTOPEN_CONNECT=0").Base(err)
  50. }
  51. }
  52. if config.TcpKeepAliveInterval > 0 {
  53. if err := syscall.SetsockoptInt(int(fd), syscall.IPPROTO_TCP, syscall.TCP_KEEPINTVL, int(config.TcpKeepAliveInterval)); err != nil {
  54. return newError("failed to set TCP_KEEPINTVL", err)
  55. }
  56. }
  57. if config.TcpKeepAliveIdle > 0 {
  58. if err := syscall.SetsockoptInt(int(fd), syscall.IPPROTO_TCP, syscall.TCP_KEEPIDLE, int(config.TcpKeepAliveIdle)); err != nil {
  59. return newError("failed to set TCP_KEEPIDLE", err)
  60. }
  61. }
  62. if config.TcpKeepAliveInterval > 0 || config.TcpKeepAliveIdle > 0 {
  63. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_SOCKET, syscall.SO_KEEPALIVE, 1); err != nil {
  64. return newError("failed to set SO_KEEPALIVE").Base(err)
  65. }
  66. }
  67. }
  68. if config.Tproxy.IsEnabled() {
  69. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_IP, syscall.IP_TRANSPARENT, 1); err != nil {
  70. return newError("failed to set IP_TRANSPARENT").Base(err)
  71. }
  72. }
  73. if config.BindToDevice != "" {
  74. if err := unix.BindToDevice(int(fd), config.BindToDevice); err != nil {
  75. return newError("failed to set SO_BINDTODEVICE").Base(err)
  76. }
  77. }
  78. if config.SocketTxBufSize != 0 {
  79. syscallTarget := unix.SO_SNDBUF
  80. if config.SocketForceBufSize {
  81. syscallTarget = unix.SO_SNDBUFFORCE
  82. }
  83. if err := unix.SetsockoptInt(int(fd), unix.SOL_SOCKET, syscallTarget, int(config.SocketTxBufSize)); err != nil {
  84. return newError("failed to set SO_SNDBUF/SO_SNDBUFFORCE").Base(err)
  85. }
  86. }
  87. if config.SocketRxBufSize != 0 {
  88. syscallTarget := unix.SO_RCVBUF
  89. if config.SocketForceBufSize {
  90. syscallTarget = unix.SO_RCVBUFFORCE
  91. }
  92. if err := unix.SetsockoptInt(int(fd), unix.SOL_SOCKET, syscallTarget, int(config.SocketRxBufSize)); err != nil {
  93. return newError("failed to set SO_RCVBUF/SO_RCVBUFFORCE").Base(err)
  94. }
  95. }
  96. return nil
  97. }
  98. func applyInboundSocketOptions(network string, fd uintptr, config *SocketConfig) error {
  99. if config.Mark != 0 {
  100. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_SOCKET, syscall.SO_MARK, int(config.Mark)); err != nil {
  101. return newError("failed to set SO_MARK").Base(err)
  102. }
  103. }
  104. if isTCPSocket(network) {
  105. switch config.Tfo {
  106. case SocketConfig_Enable:
  107. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_TCP, TCP_FASTOPEN, int(config.TfoQueueLength)); err != nil {
  108. return newError("failed to set TCP_FASTOPEN=", config.TfoQueueLength).Base(err)
  109. }
  110. case SocketConfig_Disable:
  111. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_TCP, TCP_FASTOPEN, 0); err != nil {
  112. return newError("failed to set TCP_FASTOPEN=0").Base(err)
  113. }
  114. }
  115. if config.TcpKeepAliveInterval > 0 {
  116. if err := syscall.SetsockoptInt(int(fd), syscall.IPPROTO_TCP, syscall.TCP_KEEPINTVL, int(config.TcpKeepAliveInterval)); err != nil {
  117. return newError("failed to set TCP_KEEPINTVL", err)
  118. }
  119. }
  120. if config.TcpKeepAliveIdle > 0 {
  121. if err := syscall.SetsockoptInt(int(fd), syscall.IPPROTO_TCP, syscall.TCP_KEEPIDLE, int(config.TcpKeepAliveIdle)); err != nil {
  122. return newError("failed to set TCP_KEEPIDLE", err)
  123. }
  124. }
  125. if config.TcpKeepAliveInterval > 0 || config.TcpKeepAliveIdle > 0 {
  126. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_SOCKET, syscall.SO_KEEPALIVE, 1); err != nil {
  127. return newError("failed to set SO_KEEPALIVE", err)
  128. }
  129. }
  130. }
  131. if config.Tproxy.IsEnabled() {
  132. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_IP, syscall.IP_TRANSPARENT, 1); err != nil {
  133. return newError("failed to set IP_TRANSPARENT").Base(err)
  134. }
  135. }
  136. if config.ReceiveOriginalDestAddress && isUDPSocket(network) {
  137. err1 := syscall.SetsockoptInt(int(fd), syscall.SOL_IPV6, unix.IPV6_RECVORIGDSTADDR, 1)
  138. err2 := syscall.SetsockoptInt(int(fd), syscall.SOL_IP, syscall.IP_RECVORIGDSTADDR, 1)
  139. if err1 != nil && err2 != nil {
  140. return err1
  141. }
  142. }
  143. if config.BindToDevice != "" {
  144. if err := unix.BindToDevice(int(fd), config.BindToDevice); err != nil {
  145. return newError("failed to set SO_BINDTODEVICE").Base(err)
  146. }
  147. }
  148. if config.SocketTxBufSize != 0 {
  149. syscallTarget := unix.SO_SNDBUF
  150. if config.SocketForceBufSize {
  151. syscallTarget = unix.SO_SNDBUFFORCE
  152. }
  153. if err := unix.SetsockoptInt(int(fd), unix.SOL_SOCKET, syscallTarget, int(config.SocketTxBufSize)); err != nil {
  154. return newError("failed to set SO_SNDBUF/SO_SNDBUFFORCE").Base(err)
  155. }
  156. }
  157. if config.SocketRxBufSize != 0 {
  158. syscallTarget := unix.SO_RCVBUF
  159. if config.SocketForceBufSize {
  160. syscallTarget = unix.SO_RCVBUFFORCE
  161. }
  162. if err := unix.SetsockoptInt(int(fd), unix.SOL_SOCKET, syscallTarget, int(config.SocketRxBufSize)); err != nil {
  163. return newError("failed to set SO_RCVBUF/SO_RCVBUFFORCE").Base(err)
  164. }
  165. }
  166. return nil
  167. }
  168. func setReuseAddr(fd uintptr) error {
  169. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_SOCKET, syscall.SO_REUSEADDR, 1); err != nil {
  170. return newError("failed to set SO_REUSEADDR").Base(err).AtWarning()
  171. }
  172. return nil
  173. }
  174. func setReusePort(fd uintptr) error {
  175. if err := syscall.SetsockoptInt(int(fd), syscall.SOL_SOCKET, unix.SO_REUSEPORT, 1); err != nil {
  176. return newError("failed to set SO_REUSEPORT").Base(err).AtWarning()
  177. }
  178. return nil
  179. }