gluetun/internal/routing/reader.go

package routing

import (
	"bytes"
	"fmt"
	"net"

	"github.com/qdm12/gluetun/internal/constants"
	"github.com/vishvananda/netlink"
)

type LocalNetwork struct {
	Subnet        net.IPNet
	InterfaceName string
	IP            net.IP
}

func (r *routing) DefaultRoute() (defaultInterface string, defaultGateway net.IP, err error) {
	routes, err := netlink.RouteList(nil, netlink.FAMILY_ALL)
	if err != nil {
		return "", nil, fmt.Errorf("cannot list routes: %w", err)
	}
	for _, route := range routes {
		if route.Dst == nil {
			defaultGateway = route.Gw
			linkIndex := route.LinkIndex
			link, err := netlink.LinkByIndex(linkIndex)
			if err != nil {
				return "", nil, fmt.Errorf("cannot obtain link with index %d for default route: %w", linkIndex, err)
			}
			attributes := link.Attrs()
			defaultInterface = attributes.Name
			if r.verbose {
				r.logger.Info("default route found: interface %s, gateway %s", defaultInterface, defaultGateway.String())
			}
			return defaultInterface, defaultGateway, nil
		}
	}
	return "", nil, fmt.Errorf("cannot find default route in %d routes", len(routes))
}

func (r *routing) DefaultIP() (ip net.IP, err error) {
	routes, err := netlink.RouteList(nil, netlink.FAMILY_ALL)
	if err != nil {
		return nil, fmt.Errorf("cannot get default IP address: %w", err)
	}

	defaultLinkName := ""
	for _, route := range routes {
		if route.Dst == nil {
			linkIndex := route.LinkIndex
			link, err := netlink.LinkByIndex(linkIndex)
			if err != nil {
				return nil, fmt.Errorf("cannot get default IP address: %w", err)
			}
			defaultLinkName = link.Attrs().Name
		}
	}
	if len(defaultLinkName) == 0 {
		return nil, fmt.Errorf("cannot find default link name in %d routes", len(routes))
	}

	return r.assignedIP(defaultLinkName)
}

func (r *routing) LocalSubnet() (defaultSubnet net.IPNet, err error) {
	routes, err := netlink.RouteList(nil, netlink.FAMILY_ALL)
	if err != nil {
		return defaultSubnet, fmt.Errorf("cannot find local subnet: %w", err)
	}

	defaultLinkIndex := -1
	for _, route := range routes {
		if route.Dst == nil {
			defaultLinkIndex = route.LinkIndex
			break
		}
	}
	if defaultLinkIndex == -1 {
		return defaultSubnet, fmt.Errorf("cannot find local subnet: cannot find default link")
	}

	for _, route := range routes {
		if route.Gw != nil || route.LinkIndex != defaultLinkIndex {
			continue
		}
		defaultSubnet = *route.Dst
		if r.verbose {
			r.logger.Info("local subnet found: %s", defaultSubnet.String())
		}
		return defaultSubnet, nil
	}

	return defaultSubnet, fmt.Errorf("cannot find default subnet in %d routes", len(routes))
}

func (r *routing) LocalNetworks() (localNetworks []LocalNetwork, err error) {
	links, err := netlink.LinkList()
	if err != nil {
		return localNetworks, fmt.Errorf("cannot find local subnet: %w", err)
	}

	localLinks := make(map[int]struct{})

	for _, link := range links {
		if link.Attrs().EncapType != "ether" {
			continue
		}

		localLinks[link.Attrs().Index] = struct{}{}
		if r.verbose {
			r.logger.Info("local ethernet link found: %s", link.Attrs().Name)
		}
	}

	if len(localLinks) == 0 {
		return localNetworks, fmt.Errorf("cannot find any local interfaces")
	}

	routes, err := netlink.RouteList(nil, netlink.FAMILY_ALL)
	if err != nil {
		return localNetworks, fmt.Errorf("cannot list local routes: %w", err)
	}

	for _, route := range routes {
		if route.Gw != nil || route.Dst == nil {
			continue
		} else if _, ok := localLinks[route.LinkIndex]; !ok {
			continue
		}

		var localNet LocalNetwork

		localNet.Subnet = *route.Dst
		if r.verbose {
			r.logger.Info("local subnet found: %s", localNet.Subnet.String())
		}

		link, err := netlink.LinkByIndex(route.LinkIndex)
		if err != nil {
			return localNetworks, fmt.Errorf("cannot get link by index: %w", err)
		}

		localNet.InterfaceName = link.Attrs().Name

		ip, err := r.assignedIP(localNet.InterfaceName)
		if err != nil {
			return localNetworks, fmt.Errorf("cannot get IP assigned to link: %w", err)
		}

		localNet.IP = ip

		localNetworks = append(localNetworks, localNet)
	}

	if len(localNetworks) == 0 {
		return localNetworks, fmt.Errorf("cannot find any local networks across %d routes", len(routes))
	}

	return localNetworks, nil
}

func (r *routing) assignedIP(interfaceName string) (ip net.IP, err error) {
	iface, err := net.InterfaceByName(interfaceName)
	if err != nil {
		return nil, err
	}
	addresses, err := iface.Addrs()
	if err != nil {
		return nil, err
	}
	for _, address := range addresses {
		switch value := address.(type) {
		case *net.IPAddr:
			return value.IP, nil
		case *net.IPNet:
			return value.IP, nil
		}
	}
	return nil, fmt.Errorf("IP address not found in addresses of interface %s", interfaceName)
}

func (r *routing) VPNDestinationIP() (ip net.IP, err error) {
	routes, err := netlink.RouteList(nil, netlink.FAMILY_ALL)
	if err != nil {
		return nil, fmt.Errorf("cannot find VPN destination IP: %w", err)
	}

	defaultLinkIndex := -1
	for _, route := range routes {
		if route.Dst == nil {
			defaultLinkIndex = route.LinkIndex
			break
		}
	}
	if defaultLinkIndex == -1 {
		return nil, fmt.Errorf("cannot find VPN destination IP: cannot find default link")
	}

	for _, route := range routes {
		if route.LinkIndex == defaultLinkIndex &&
			route.Dst != nil &&
			!IPIsPrivate(route.Dst.IP) &&
			bytes.Equal(route.Dst.Mask, net.IPMask{255, 255, 255, 255}) {
			return route.Dst.IP, nil
		}
	}
	return nil, fmt.Errorf("cannot find VPN destination IP address from ip routes")
}

func (r *routing) VPNLocalGatewayIP() (ip net.IP, err error) {
	routes, err := netlink.RouteList(nil, netlink.FAMILY_ALL)
	if err != nil {
		return nil, fmt.Errorf("cannot find VPN local gateway IP: %w", err)
	}
	for _, route := range routes {
		link, err := netlink.LinkByIndex(route.LinkIndex)
		if err != nil {
			return nil, fmt.Errorf("cannot find VPN local gateway IP: %w", err)
		}
		interfaceName := link.Attrs().Name
		if interfaceName == string(constants.TUN) &&
			route.Dst != nil &&
			route.Dst.IP.Equal(net.IP{0, 0, 0, 0}) {
			return route.Gw, nil
		}
	}
	return nil, fmt.Errorf("cannot find VPN local gateway IP address from ip routes")
}

func IPIsPrivate(ip net.IP) bool {
	if ip.IsLoopback() || ip.IsLinkLocalUnicast() || ip.IsLinkLocalMulticast() {
		return true
	}
	privateCIDRBlocks := [8]string{
		"127.0.0.0/8",    // localhost
		"10.0.0.0/8",     // 24-bit block
		"172.16.0.0/12",  // 20-bit block
		"192.168.0.0/16", // 16-bit block
		"169.254.0.0/16", // link local address
		"::1/128",        // localhost IPv6
		"fc00::/7",       // unique local address IPv6
		"fe80::/10",      // link local address IPv6
	}
	for i := range privateCIDRBlocks {
		_, CIDR, _ := net.ParseCIDR(privateCIDRBlocks[i])
		if CIDR.Contains(ip) {
			return true
		}
	}
	return false
}