TheArchive/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2024-11-23 18:15:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
3eed356d70
headscale/api.go

460 lines
13 KiB
Go
Raw Normal View History

Initial commit
2020-06-21 10:32:08 +00:00
package headscale
import (
"encoding/binary"
"encoding/json"
Update Headscale to depend on gorm v2
2021-06-24 13:44:19 +00:00
"errors"
Initial commit
2020-06-21 10:32:08 +00:00
"fmt"
"io"
"net/http"
updates from code review
2021-10-08 09:43:52 +00:00
"strings"
Initial commit
2020-06-21 10:32:08 +00:00
"time"
Initial port to zerologger
2021-08-05 17:11:26 +00:00
"github.com/rs/zerolog/log"
Initial commit
2020-06-21 10:32:08 +00:00
"github.com/gin-gonic/gin"
"github.com/klauspost/compress/zstd"
Update Headscale to depend on gorm v2
2021-06-24 13:44:19 +00:00
"gorm.io/gorm"
Initial commit
2020-06-21 10:32:08 +00:00
"tailscale.com/tailcfg"
Update code to Tailscale 1.10
2021-06-25 16:57:08 +00:00
"tailscale.com/types/wgkey"
Initial commit
2020-06-21 10:32:08 +00:00
)
Initial multi-user support using namespaces
2021-02-27 23:58:09 +00:00
// KeyHandler provides the Headscale pub key
// Listens in /key
Initial commit
2020-06-21 10:32:08 +00:00
func (h *Headscale) KeyHandler(c *gin.Context) {
c.Data(200, "text/plain; charset=utf-8", []byte(h.publicKey.HexString()))
}
Initial multi-user support using namespaces
2021-02-27 23:58:09 +00:00
// RegisterWebAPI shows a simple message in the browser to point to the CLI
// Listens in /register
func (h *Headscale) RegisterWebAPI(c *gin.Context) {
mKeyStr := c.Query("key")
if mKeyStr == "" {
c.String(http.StatusBadRequest, "Wrong params")
return
}
c.Data(http.StatusOK, "text/html; charset=utf-8", []byte(fmt.Sprintf(`
<html>
<body>
<h1>headscale</h1>
<p>
Remove dependency on postgres' jsonb
2021-05-14 22:05:41 +00:00
Run the command below in the headscale server to add this machine to your network:
Initial multi-user support using namespaces
2021-02-27 23:58:09 +00:00
</p>
<p>
<code>
Use long command in example and remove pointerlist
2021-11-04 22:18:06 +00:00
<b>headscale -n NAMESPACE nodes register --key %s</b>
Initial multi-user support using namespaces
2021-02-27 23:58:09 +00:00
</code>
</p>
</body>
</html>
Improved tailnode start up handling
2021-05-24 19:59:03 +00:00
Initial multi-user support using namespaces
2021-02-27 23:58:09 +00:00
`, mKeyStr)))
}
// RegistrationHandler handles the actual registration process of a machine
// Endpoint /machine/:id
Initial commit
2020-06-21 10:32:08 +00:00
func (h *Headscale) RegistrationHandler(c *gin.Context) {
Fixes here and there
2021-02-21 22:54:15 +00:00
body, _ := io.ReadAll(c.Request.Body)
Initial commit
2020-06-21 10:32:08 +00:00
mKeyStr := c.Param("id")
Update code to Tailscale 1.10
2021-06-25 16:57:08 +00:00
mKey, err := wgkey.ParseHex(mKeyStr)
Initial commit
2020-06-21 10:32:08 +00:00
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Err(err).
Msg("Cannot parse machine key")
updates from code review
2021-10-10 09:22:42 +00:00
machineRegistrations.WithLabelValues("unknown", "web", "error", "unknown").Inc()
Initial commit
2020-06-21 10:32:08 +00:00
c.String(http.StatusInternalServerError, "Sad!")
return
}
req := tailcfg.RegisterRequest{}
err = decode(body, &req, &mKey, h.privateKey)
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Err(err).
Msg("Cannot decode message")
updates from code review
2021-10-10 09:22:42 +00:00
machineRegistrations.WithLabelValues("unknown", "web", "error", "unknown").Inc()
Initial commit
2020-06-21 10:32:08 +00:00
c.String(http.StatusInternalServerError, "Very sad!")
return
}
Preauth keys kinda working
2021-05-05 22:59:26 +00:00
Move most "poll" functionality to poll.go This function migrates more poll functions (including keepalive) to poll.go to keep it somehow in the same file. In addition it makes changes to improve the stability and ensure nodes get the appropriate updates from the headscale control and are not left in an inconsistent state. Two new additions is: omitpeers=true will now trigger an update if the clients are not already up to date keepalive has been extended with a timer that will check every 120s if all nodes are up to date.
2021-08-18 22:24:22 +00:00
now := time.Now().UTC()
updates from code review
2021-10-10 09:22:42 +00:00
m, err := h.GetMachineByMachineKey(mKey.HexString())
if errors.Is(err, gorm.ErrRecordNotFound) {
Make log keys lowercase
2021-08-05 19:57:47 +00:00
log.Info().Str("machine", req.Hostinfo.Hostname).Msg("New machine")
updates from code review
2021-10-10 09:22:42 +00:00
newMachine := Machine{
Expiry: &time.Time{},
MachineKey: mKey.HexString(),
Name: req.Hostinfo.Hostname,
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
}
updates from code review
2021-10-10 09:22:42 +00:00
if err := h.db.Create(&newMachine).Error; err != nil {
Convert missing from api.go
2021-08-05 17:16:21 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Convert missing from api.go
2021-08-05 17:16:21 +00:00
Err(err).
Msg("Could not create row")
updates from code review
2021-10-10 09:22:42 +00:00
machineRegistrations.WithLabelValues("unknown", "web", "error", m.Namespace.Name).Inc()
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
return
}
updates from code review
2021-10-10 09:22:42 +00:00
m = &newMachine
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
}
if !m.Registered && req.Auth.AuthKey != "" {
updates from code review
2021-10-10 09:22:42 +00:00
h.handleAuthKey(c, h.db, mKey, req, *m)
Initial commit
2020-06-21 10:32:08 +00:00
return
}
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
resp := tailcfg.RegisterResponse{}
// We have the updated key!
Update code to Tailscale 1.10
2021-06-25 16:57:08 +00:00
if m.NodeKey == wgkey.Key(req.NodeKey).HexString() {
updates from code review
2021-10-08 09:43:52 +00:00
suggested documentation and comments
2021-10-29 13:35:07 +00:00
// The client sends an Expiry in the past if the client is requesting to expire the key (aka logout)
// https://github.com/tailscale/tailscale/blob/main/tailcfg/tailcfg.go#L648
updates from code review
2021-10-08 09:43:52 +00:00
if !req.Expiry.IsZero() && req.Expiry.UTC().Before(now) {
updates from code review
2021-10-10 09:22:42 +00:00
log.Info().
updates from code review
2021-10-08 09:43:52 +00:00
Str("handler", "Registration").
Str("machine", m.Name).
Msg("Client requested logout")
updates from code review
2021-10-10 09:22:42 +00:00
m.Expiry = &req.Expiry // save the expiry so that the machine is marked as expired
updates from code review
2021-10-08 09:43:52 +00:00
h.db.Save(&m)
resp.AuthURL = ""
resp.MachineAuthorized = false
resp.User = *m.Namespace.toUser()
respBody, err := encode(resp, &mKey, h.privateKey)
if err != nil {
log.Error().
Str("handler", "Registration").
Err(err).
Msg("Cannot encode message")
c.String(http.StatusInternalServerError, "")
return
}
c.Data(200, "application/json; charset=utf-8", respBody)
return
}
if m.Registered && m.Expiry.UTC().After(now) {
updates from code review
2021-10-10 09:22:42 +00:00
// The machine registration is valid, respond with redirect to /map
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Debug().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Str("machine", m.Name).
Fixed log message
2021-08-05 22:21:34 +00:00
Msg("Client is registered and we have the current NodeKey. All clear to /map")
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Initial commit
2020-06-21 10:32:08 +00:00
resp.AuthURL = ""
Update README (although do not advirtise preauth keys that much yet)
2021-05-06 21:25:40 +00:00
resp.MachineAuthorized = true
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
resp.User = *m.Namespace.toUser()
add login details to RegisterResponse so GUI clients show login display name
2021-10-15 15:09:55 +00:00
resp.Login = *m.Namespace.toLogin()
Initial commit
2020-06-21 10:32:08 +00:00
respBody, err := encode(resp, &mKey, h.privateKey)
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Err(err).
Msg("Cannot encode message")
Initial work on Prometheus metrics This commit adds some Prometheus metrics to /metrics in headscale. It will add the standard go metrics, some automatic gin metrics and some initial headscale specific ones. Some of them has been added to aid debugging #97 (loop bug) In the future, we can use the metrics to get rid of the sleep in the integration tests by checking that our expected number of nodes has been registered: ``` headscale_machine_registrations_total ```
2021-10-04 16:28:07 +00:00
machineRegistrations.WithLabelValues("update", "web", "error", m.Namespace.Name).Inc()
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
c.String(http.StatusInternalServerError, "")
Initial commit
2020-06-21 10:32:08 +00:00
return
}
Initial work on Prometheus metrics This commit adds some Prometheus metrics to /metrics in headscale. It will add the standard go metrics, some automatic gin metrics and some initial headscale specific ones. Some of them has been added to aid debugging #97 (loop bug) In the future, we can use the metrics to get rid of the sleep in the integration tests by checking that our expected number of nodes has been registered: ``` headscale_machine_registrations_total ```
2021-10-04 16:28:07 +00:00
machineRegistrations.WithLabelValues("update", "web", "success", m.Namespace.Name).Inc()
Initial commit
2020-06-21 10:32:08 +00:00
c.Data(200, "application/json; charset=utf-8", respBody)
return
}
updates from code review
2021-10-10 09:22:42 +00:00
// The client has registered before, but has expired
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Debug().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Str("machine", m.Name).
updates from code review
2021-10-10 09:22:42 +00:00
Msg("Machine registration has expired. Sending a authurl to register")
initial work on OIDC (SSO) integration
2021-09-26 08:53:05 +00:00
Implement namespace matching
2021-10-18 19:27:52 +00:00
if h.cfg.OIDC.Issuer != "" {
updates from code review
2021-10-08 09:43:52 +00:00
resp.AuthURL = fmt.Sprintf("%s/oidc/register/%s",
strings.TrimSuffix(h.cfg.ServerURL, "/"), mKey.HexString())
initial work on OIDC (SSO) integration
2021-09-26 08:53:05 +00:00
} else {
resp.AuthURL = fmt.Sprintf("%s/register?key=%s",
Handle trailing slash on uris Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2021-10-08 07:26:31 +00:00
strings.TrimSuffix(h.cfg.ServerURL, "/"), mKey.HexString())
initial work on OIDC (SSO) integration
2021-09-26 08:53:05 +00:00
}
updates from code review
2021-10-08 09:43:52 +00:00
suggested documentation and comments
2021-10-29 13:35:07 +00:00
// When a client connects, it may request a specific expiry time in its
// RegisterRequest (https://github.com/tailscale/tailscale/blob/main/tailcfg/tailcfg.go#L634)
Resolve merge conflict
2021-10-30 15:33:01 +00:00
// RequestedExpiry is used to store the clients requested expiry time since the authentication flow is broken
suggested documentation and comments
2021-10-29 13:35:07 +00:00
// into two steps (which cant pass arbitrary data between them easily) and needs to be
// retrieved again after the user has authenticated. After the authentication flow
// completes, RequestedExpiry is copied into Expiry.
Resolve merge conflict
2021-10-30 15:33:01 +00:00
m.RequestedExpiry = &req.Expiry
suggested documentation and comments
2021-10-29 13:35:07 +00:00
updates from code review
2021-10-08 09:43:52 +00:00
h.db.Save(&m)
Initial commit
2020-06-21 10:32:08 +00:00
respBody, err := encode(resp, &mKey, h.privateKey)
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Err(err).
Msg("Cannot encode message")
Initial work on Prometheus metrics This commit adds some Prometheus metrics to /metrics in headscale. It will add the standard go metrics, some automatic gin metrics and some initial headscale specific ones. Some of them has been added to aid debugging #97 (loop bug) In the future, we can use the metrics to get rid of the sleep in the integration tests by checking that our expected number of nodes has been registered: ``` headscale_machine_registrations_total ```
2021-10-04 16:28:07 +00:00
machineRegistrations.WithLabelValues("new", "web", "error", m.Namespace.Name).Inc()
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
c.String(http.StatusInternalServerError, "")
Initial commit
2020-06-21 10:32:08 +00:00
return
}
Initial work on Prometheus metrics This commit adds some Prometheus metrics to /metrics in headscale. It will add the standard go metrics, some automatic gin metrics and some initial headscale specific ones. Some of them has been added to aid debugging #97 (loop bug) In the future, we can use the metrics to get rid of the sleep in the integration tests by checking that our expected number of nodes has been registered: ``` headscale_machine_registrations_total ```
2021-10-04 16:28:07 +00:00
machineRegistrations.WithLabelValues("new", "web", "success", m.Namespace.Name).Inc()
Initial commit
2020-06-21 10:32:08 +00:00
c.Data(200, "application/json; charset=utf-8", respBody)
return
}
updates from code review
2021-10-08 09:43:52 +00:00
// The NodeKey we have matches OldNodeKey, which means this is a refresh after a key expiration
if m.NodeKey == wgkey.Key(req.OldNodeKey).HexString() && m.Expiry.UTC().After(now) {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Debug().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Str("machine", m.Name).
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Msg("We have the OldNodeKey in the database. This is a key refresh")
Update code to Tailscale 1.10
2021-06-25 16:57:08 +00:00
m.NodeKey = wgkey.Key(req.NodeKey).HexString()
Use gorm connection pool
2021-07-04 19:40:46 +00:00
h.db.Save(&m)
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
Initial commit
2020-06-21 10:32:08 +00:00
resp.AuthURL = ""
Initial multi-user support using namespaces
2021-02-27 23:58:09 +00:00
resp.User = *m.Namespace.toUser()
Initial commit
2020-06-21 10:32:08 +00:00
respBody, err := encode(resp, &mKey, h.privateKey)
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Err(err).
Msg("Cannot encode message")
Initial commit
2020-06-21 10:32:08 +00:00
c.String(http.StatusInternalServerError, "Extremely sad!")
return
}
c.Data(200, "application/json; charset=utf-8", respBody)
return
}
updates from code review
2021-10-10 09:22:42 +00:00
// The machine registration is new, redirect the client to the registration URL
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Debug().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Str("machine", m.Name).
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Msg("The node is sending us a new NodeKey, sending auth url")
Implement namespace matching
2021-10-18 19:27:52 +00:00
if h.cfg.OIDC.Issuer != "" {
Handle trailing slash on uris Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2021-10-08 07:26:31 +00:00
resp.AuthURL = fmt.Sprintf("%s/oidc/register/%s", strings.TrimSuffix(h.cfg.ServerURL, "/"), mKey.HexString())
initial work on OIDC (SSO) integration
2021-09-26 08:53:05 +00:00
} else {
resp.AuthURL = fmt.Sprintf("%s/register?key=%s",
Handle trailing slash on uris Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2021-10-08 07:26:31 +00:00
strings.TrimSuffix(h.cfg.ServerURL, "/"), mKey.HexString())
initial work on OIDC (SSO) integration
2021-09-26 08:53:05 +00:00
}
updates from code review
2021-10-08 09:43:52 +00:00
Resolve merge conflict
2021-10-30 15:33:01 +00:00
// save the requested expiry time for retrieval later in the authentication flow
m.RequestedExpiry = &req.Expiry
updates from code review
2021-10-10 09:22:42 +00:00
m.NodeKey = wgkey.Key(req.NodeKey).HexString() // save the NodeKey
updates from code review
2021-10-08 09:43:52 +00:00
h.db.Save(&m)
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
respBody, err := encode(resp, &mKey, h.privateKey)
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("handler", "Registration").
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Err(err).
Msg("Cannot encode message")
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
c.String(http.StatusInternalServerError, "")
return
}
c.Data(200, "application/json; charset=utf-8", respBody)
Initial commit
2020-06-21 10:32:08 +00:00
}
Clean up pointer usage consistency. This tries to make the same functions emit and consume the same type of data all over the application. If a function transform data, it should emit new data, not a pointer.
2021-10-04 17:39:01 +00:00
func (h *Headscale) getMapResponse(mKey wgkey.Key, req tailcfg.MapRequest, m *Machine) ([]byte, error) {
Add more trace logging
2021-08-05 20:47:06 +00:00
log.Trace().
Str("func", "getMapResponse").
Str("machine", req.Hostinfo.Hostname).
Msg("Creating Map response")
MagicDNS changes merged back
2021-10-04 21:49:16 +00:00
node, err := m.toNode(h.cfg.BaseDomain, h.cfg.DNSConfig, true)
Initial commit
2020-06-21 10:32:08 +00:00
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("func", "getMapResponse").
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Err(err).
Msg("Cannot convert to node")
Initial commit
2020-06-21 10:32:08 +00:00
return nil, err
}
Move DB call of pollmap to Machine inside a function
2021-10-02 20:58:28 +00:00
Initial commit
2020-06-21 10:32:08 +00:00
peers, err := h.getPeers(m)
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("func", "getMapResponse").
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Err(err).
Msg("Cannot fetch peers")
Initial commit
2020-06-21 10:32:08 +00:00
return nil, err
}
Send the namespace name as user to the clients
2021-07-11 14:39:19 +00:00
Send UserProfile info for the peers' namespaces
2021-10-17 10:07:01 +00:00
profiles := getMapResponseUserProfiles(*m, peers)
Send the namespace name as user to the clients
2021-07-11 14:39:19 +00:00
MagicDNS changes merged back
2021-10-04 21:49:16 +00:00
nodePeers, err := peers.toNodes(h.cfg.BaseDomain, h.cfg.DNSConfig, true)
Move toNode, add type helpers, split peers and shared This commit moves toNode to the bottom of the file, and adds a helper function for lists of Machines to be converted. It also adds string helpers for Machines and lists of machines. Lastly it splits getPeers into getDirectPeers, which exist in the same namespace, and getShared, which is nodes shared with the namespace. getPeers is kept as a function putting together the two lists for convenience.
2021-10-02 21:03:34 +00:00
if err != nil {
log.Error().
Str("func", "getMapResponse").
Err(err).
Msg("Failed to convert peers to Tailscale nodes")
return nil, err
}
Do not use the full application for getMapResponseDNSConfig
2021-10-17 10:10:03 +00:00
dnsConfig, err := getMapResponseDNSConfig(h.cfg.DNSConfig, h.cfg.BaseDomain, *m, peers)
Do not include BaseDomain as full route in DNSConfig + code reorg
2021-10-17 09:57:53 +00:00
if err != nil {
log.Error().
Str("func", "getMapResponse").
Err(err).
Msg("Failed generate the DNSConfig")
return nil, err
Send search domains
2021-10-02 10:13:19 +00:00
}
Initial commit
2020-06-21 10:32:08 +00:00
resp := tailcfg.MapResponse{
Propagate dns config vales across Headscale
2021-10-02 09:20:42 +00:00
KeepAlive: false,
Node: node,
Merged main
2021-10-04 21:43:42 +00:00
Peers: nodePeers,
Send search domains
2021-10-02 10:13:19 +00:00
DNSConfig: dnsConfig,
Propagate dns config vales across Headscale
2021-10-02 09:20:42 +00:00
Domain: h.cfg.BaseDomain,
Use long command in example and remove pointerlist
2021-11-04 22:18:06 +00:00
PacketFilter: h.aclRules,
Use the new derp map
2021-10-22 16:56:00 +00:00
DERPMap: h.DERPMap,
Send UserProfile info for the peers' namespaces
2021-10-17 10:07:01 +00:00
UserProfiles: profiles,
Minor thing
2021-02-23 23:31:58 +00:00
}
Send UserProfile info for the peers' namespaces
2021-10-17 10:07:01 +00:00
Resolve merge conflict
2021-08-13 09:33:19 +00:00
log.Trace().
Str("func", "getMapResponse").
Str("machine", req.Hostinfo.Hostname).
Comment out aggressive logging
2021-10-05 16:51:42 +00:00
// Interface("payload", resp).
Resolve merge conflict
2021-08-13 09:33:19 +00:00
Msgf("Generated map response: %s", tailMapResponseToString(resp))
Initial commit
2020-06-21 10:32:08 +00:00
var respBody []byte
if req.Compress == "zstd" {
src, _ := json.Marshal(resp)
Resolve merge conflict
2021-08-13 09:33:19 +00:00
Initial commit
2020-06-21 10:32:08 +00:00
encoder, _ := zstd.NewWriter(nil)
srcCompressed := encoder.EncodeAll(src, nil)
respBody, err = encodeMsg(srcCompressed, &mKey, h.privateKey)
if err != nil {
return nil, err
}
} else {
respBody, err = encode(resp, &mKey, h.privateKey)
if err != nil {
return nil, err
}
}
// declare the incoming size on the first 4 bytes
data := make([]byte, 4)
binary.LittleEndian.PutUint32(data, uint32(len(respBody)))
data = append(data, respBody...)
Clean up pointer usage consistency. This tries to make the same functions emit and consume the same type of data all over the application. If a function transform data, it should emit new data, not a pointer.
2021-10-04 17:39:01 +00:00
return data, nil
Initial commit
2020-06-21 10:32:08 +00:00
}
Clean up pointer usage consistency. This tries to make the same functions emit and consume the same type of data all over the application. If a function transform data, it should emit new data, not a pointer.
2021-10-04 17:39:01 +00:00
func (h *Headscale) getMapKeepAliveResponse(mKey wgkey.Key, req tailcfg.MapRequest, m *Machine) ([]byte, error) {
Initial commit
2020-06-21 10:32:08 +00:00
resp := tailcfg.MapResponse{
KeepAlive: true,
}
var respBody []byte
var err error
if req.Compress == "zstd" {
src, _ := json.Marshal(resp)
encoder, _ := zstd.NewWriter(nil)
srcCompressed := encoder.EncodeAll(src, nil)
respBody, err = encodeMsg(srcCompressed, &mKey, h.privateKey)
if err != nil {
return nil, err
}
} else {
respBody, err = encode(resp, &mKey, h.privateKey)
if err != nil {
return nil, err
}
}
data := make([]byte, 4)
binary.LittleEndian.PutUint32(data, uint32(len(respBody)))
data = append(data, respBody...)
Clean up pointer usage consistency. This tries to make the same functions emit and consume the same type of data all over the application. If a function transform data, it should emit new data, not a pointer.
2021-10-04 17:39:01 +00:00
return data, nil
Initial commit
2020-06-21 10:32:08 +00:00
}
Use the new derp map
2021-10-22 16:56:00 +00:00
func (h *Headscale) handleAuthKey(
c *gin.Context,
db *gorm.DB,
idKey wgkey.Key,
req tailcfg.RegisterRequest,
m Machine,
) {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Debug().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("func", "handleAuthKey").
Str("machine", req.Hostinfo.Hostname).
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Msgf("Processing auth key for %s", req.Hostinfo.Hostname)
Preauth keys kinda working
2021-05-05 22:59:26 +00:00
resp := tailcfg.RegisterResponse{}
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
pak, err := h.checkKeyValidity(req.Auth.AuthKey)
if err != nil {
Fixing nil issue
2021-10-04 16:03:44 +00:00
log.Error().
Str("func", "handleAuthKey").
Str("machine", m.Name).
Err(err).
Msg("Failed authentication via AuthKey")
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
resp.MachineAuthorized = false
Preauth keys kinda working
2021-05-05 22:59:26 +00:00
respBody, err := encode(resp, &idKey, h.privateKey)
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("func", "handleAuthKey").
Str("machine", m.Name).
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Err(err).
Msg("Cannot encode message")
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
c.String(http.StatusInternalServerError, "")
Initial work on Prometheus metrics This commit adds some Prometheus metrics to /metrics in headscale. It will add the standard go metrics, some automatic gin metrics and some initial headscale specific ones. Some of them has been added to aid debugging #97 (loop bug) In the future, we can use the metrics to get rid of the sleep in the integration tests by checking that our expected number of nodes has been registered: ``` headscale_machine_registrations_total ```
2021-10-04 16:28:07 +00:00
machineRegistrations.WithLabelValues("new", "authkey", "error", m.Namespace.Name).Inc()
Preauth keys kinda working
2021-05-05 22:59:26 +00:00
return
}
Initial work on Prometheus metrics This commit adds some Prometheus metrics to /metrics in headscale. It will add the standard go metrics, some automatic gin metrics and some initial headscale specific ones. Some of them has been added to aid debugging #97 (loop bug) In the future, we can use the metrics to get rid of the sleep in the integration tests by checking that our expected number of nodes has been registered: ``` headscale_machine_registrations_total ```
2021-10-04 16:28:07 +00:00
c.Data(401, "application/json; charset=utf-8", respBody)
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("func", "handleAuthKey").
Str("machine", m.Name).
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Msg("Failed authentication via AuthKey")
Initial work on Prometheus metrics This commit adds some Prometheus metrics to /metrics in headscale. It will add the standard go metrics, some automatic gin metrics and some initial headscale specific ones. Some of them has been added to aid debugging #97 (loop bug) In the future, we can use the metrics to get rid of the sleep in the integration tests by checking that our expected number of nodes has been registered: ``` headscale_machine_registrations_total ```
2021-10-04 16:28:07 +00:00
machineRegistrations.WithLabelValues("new", "authkey", "error", m.Namespace.Name).Inc()
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
return
}
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Debug().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("func", "handleAuthKey").
Str("machine", m.Name).
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Msg("Authentication key was valid, proceeding to acquire an IP address")
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
ip, err := h.getAvailableIP()
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("func", "handleAuthKey").
Str("machine", m.Name).
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Msg("Failed to find an available IP")
Initial work on Prometheus metrics This commit adds some Prometheus metrics to /metrics in headscale. It will add the standard go metrics, some automatic gin metrics and some initial headscale specific ones. Some of them has been added to aid debugging #97 (loop bug) In the future, we can use the metrics to get rid of the sleep in the integration tests by checking that our expected number of nodes has been registered: ``` headscale_machine_registrations_total ```
2021-10-04 16:28:07 +00:00
machineRegistrations.WithLabelValues("new", "authkey", "error", m.Namespace.Name).Inc()
Preauth keys kinda working
2021-05-05 22:59:26 +00:00
return
Initial commit
2020-06-21 10:32:08 +00:00
}
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Info().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("func", "handleAuthKey").
Str("machine", m.Name).
Str("ip", ip.String()).
Move most "poll" functionality to poll.go This function migrates more poll functions (including keepalive) to poll.go to keep it somehow in the same file. In addition it makes changes to improve the stability and ensure nodes get the appropriate updates from the headscale control and are not left in an inconsistent state. Two new additions is: omitpeers=true will now trigger an update if the clients are not already up to date keepalive has been extended with a timer that will check every 120s if all nodes are up to date.
2021-08-18 22:24:22 +00:00
Msgf("Assigning %s to %s", ip, m.Name)
Initial commit
2020-06-21 10:32:08 +00:00
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
m.AuthKeyID = uint(pak.ID)
m.IPAddress = ip.String()
m.NamespaceID = pak.NamespaceID
Update code to Tailscale 1.10
2021-06-25 16:57:08 +00:00
m.NodeKey = wgkey.Key(req.NodeKey).HexString() // we update it just in case
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
m.Registered = true
m.RegisterMethod = "authKey"
db.Save(&m)
Preauth keys kinda working
2021-05-05 22:59:26 +00:00
Apply suggestions from code review Renamed AlreadyUsed to Used Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2021-10-13 20:51:55 +00:00
pak.Used = true
Add AlreadyUsed field to Auth Keys (fixes #157 and #158)
2021-10-13 16:13:26 +00:00
db.Save(&pak)
updates from code review
2021-10-10 09:22:42 +00:00
Handle client sending new NodeKey (fixes #32)
2021-06-05 10:13:55 +00:00
resp.MachineAuthorized = true
resp.User = *pak.Namespace.toUser()
Initial commit
2020-06-21 10:32:08 +00:00
respBody, err := encode(resp, &idKey, h.privateKey)
if err != nil {
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Error().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("func", "handleAuthKey").
Str("machine", m.Name).
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Err(err).
Msg("Cannot encode message")
Initial work on Prometheus metrics This commit adds some Prometheus metrics to /metrics in headscale. It will add the standard go metrics, some automatic gin metrics and some initial headscale specific ones. Some of them has been added to aid debugging #97 (loop bug) In the future, we can use the metrics to get rid of the sleep in the integration tests by checking that our expected number of nodes has been registered: ``` headscale_machine_registrations_total ```
2021-10-04 16:28:07 +00:00
machineRegistrations.WithLabelValues("new", "authkey", "error", m.Namespace.Name).Inc()
Initial commit
2020-06-21 10:32:08 +00:00
c.String(http.StatusInternalServerError, "Extremely sad!")
return
}
Initial work on Prometheus metrics This commit adds some Prometheus metrics to /metrics in headscale. It will add the standard go metrics, some automatic gin metrics and some initial headscale specific ones. Some of them has been added to aid debugging #97 (loop bug) In the future, we can use the metrics to get rid of the sleep in the integration tests by checking that our expected number of nodes has been registered: ``` headscale_machine_registrations_total ```
2021-10-04 16:28:07 +00:00
machineRegistrations.WithLabelValues("new", "authkey", "success", m.Namespace.Name).Inc()
Initial commit
2020-06-21 10:32:08 +00:00
c.Data(200, "application/json; charset=utf-8", respBody)
Initial port to zerologger
2021-08-05 17:11:26 +00:00
log.Info().
Make log keys lowercase
2021-08-05 19:57:47 +00:00
Str("func", "handleAuthKey").
Str("machine", m.Name).
Str("ip", ip.String()).
Initial port to zerologger
2021-08-05 17:11:26 +00:00
Msg("Successfully authenticated via AuthKey")
Initial commit
2020-06-21 10:32:08 +00:00
}
Reference in New Issue Copy Permalink