mirror of
https://github.com/slackhq/nebula.git
synced 2025-01-27 10:19:04 +00:00
9b8b3c478b
This commit adds support for Nebula to be started without creating a tun device. A node started in this mode still has a full "control plane", but no effective "data plane". Its use is suited to a lighthouse that has no need to partake in the mesh VPN. Consequently, creation of the tun device is the only reason nebula neesd to be started with elevated privileged, so this example lighthouse can also be run as a non-root user.
74 lines
1.2 KiB
Go
74 lines
1.2 KiB
Go
package nebula
|
|
|
|
import (
|
|
"fmt"
|
|
"io"
|
|
"net"
|
|
"strings"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
)
|
|
|
|
type disabledTun struct {
|
|
block chan struct{}
|
|
cidr *net.IPNet
|
|
logger *log.Logger
|
|
}
|
|
|
|
func newDisabledTun(cidr *net.IPNet, l *log.Logger) *disabledTun {
|
|
return &disabledTun{
|
|
cidr: cidr,
|
|
block: make(chan struct{}),
|
|
logger: l,
|
|
}
|
|
}
|
|
|
|
func (*disabledTun) Activate() error {
|
|
return nil
|
|
}
|
|
|
|
func (t *disabledTun) CidrNet() *net.IPNet {
|
|
return t.cidr
|
|
}
|
|
|
|
func (*disabledTun) DeviceName() string {
|
|
return "disabled"
|
|
}
|
|
|
|
func (t *disabledTun) Read(b []byte) (int, error) {
|
|
<-t.block
|
|
return 0, io.EOF
|
|
}
|
|
|
|
func (t *disabledTun) Write(b []byte) (int, error) {
|
|
t.logger.WithField("raw", prettyPacket(b)).Debugf("Disabled tun received unexpected payload")
|
|
return len(b), nil
|
|
}
|
|
|
|
func (t *disabledTun) WriteRaw(b []byte) error {
|
|
_, err := t.Write(b)
|
|
return err
|
|
}
|
|
|
|
func (t *disabledTun) Close() error {
|
|
if t.block != nil {
|
|
close(t.block)
|
|
t.block = nil
|
|
}
|
|
return nil
|
|
}
|
|
|
|
type prettyPacket []byte
|
|
|
|
func (p prettyPacket) String() string {
|
|
var s strings.Builder
|
|
|
|
for i, b := range p {
|
|
if i > 0 && i%8 == 0 {
|
|
s.WriteString(" ")
|
|
}
|
|
s.WriteString(fmt.Sprintf("%02x ", b))
|
|
}
|
|
|
|
return s.String()
|
|
}
|