Git-Mirrors/qubes-mirage-firewall
1
0
Fork 0
mirror of https://github.com/mirage/qubes-mirage-firewall.git synced 2024-10-01 01:05:39 -04:00
Code Issues Packages Projects Releases Wiki Activity

Process all client frames

Browse Source 
Before, we only looked at frames with our MAC address, but we may want
to handle client-to-client communication too.
This commit is contained in:
Thomas Leonard 2015-12-31 15:56:56 +00:00
parent 0d864d6cde
commit 86b31f7f4b
1 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
client_net.ml
View File

@ -22,10 +22,10 @@ end
let clients : Cleanup.t IntMap.t ref = ref IntMap.empty
(** Handle an ARP message from the client. *)
let input_arp ~fixed_arp ~eth buf =
match Client_eth.ARP.input fixed_arp buf with
let input_arp ~fixed_arp ~eth request =
match Client_eth.ARP.input fixed_arp request with
| None -> return ()
| Some frame -> ClientEth.write eth frame
| Some response -> ClientEth.write eth response
(** Handle an IPv4 packet from the client. *)
let input_ipv4 ~client_ip ~router frame packet =
@ -49,10 +49,14 @@ let add_vif { Dao.domid; device_id; client_ip } ~router ~cleanup_tasks =
Cleanup.on_cleanup cleanup_tasks (fun () -> Router.remove_client router iface);
let fixed_arp = Client_eth.ARP.create ~net:router.Router.client_eth iface in
Netback.listen backend (fun frame ->
ClientEth.input eth frame
~arpv4:(input_arp ~fixed_arp ~eth)
~ipv4:(input_ipv4 ~client_ip ~router frame)
~ipv6:(fun _buf -> return ())
match Wire_structs.parse_ethernet_frame frame with
| None -> Log.warn "Invalid Ethernet frame" Logs.unit; return ()
| Some (typ, _destination, payload) ->
match typ with
| Some Wire_structs.ARP -> input_arp ~fixed_arp ~eth payload
| Some Wire_structs.IPv4 -> input_ipv4 ~client_ip ~router frame payload
| Some Wire_structs.IPv6 -> return ()
| None -> Logs.warn "Unknown Ethernet type" Logs.unit; Lwt.return_unit
)
(** A new client VM has been found in XenStore. Find its interface and connect to it. *)