/* * services/cache/dns.c - Cache services for DNS using msg and rrset caches. * * Copyright (c) 2007, NLnet Labs. All rights reserved. * * This software is open source. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * * Redistributions of source code must retain the above copyright notice, * this list of conditions and the following disclaimer. * * Redistributions in binary form must reproduce the above copyright notice, * this list of conditions and the following disclaimer in the documentation * and/or other materials provided with the distribution. * * Neither the name of the NLNET LABS nor the names of its contributors may * be used to endorse or promote products derived from this software without * specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE * POSSIBILITY OF SUCH DAMAGE. */ /** * \file * * This file contains the DNS cache. */ #include "config.h" #include "iterator/iter_delegpt.h" #include "services/cache/dns.h" #include "services/cache/rrset.h" #include "util/data/msgreply.h" #include "util/data/packed_rrset.h" #include "util/module.h" #include "util/net_help.h" /** store rrsets in the rrset cache. */ static void store_rrsets(struct module_env* env, struct reply_info* rep, uint32_t now) { size_t i; /* see if rrset already exists in cache, if not insert it. */ for(i=0; irrset_count; i++) { rep->ref[i].key = rep->rrsets[i]; rep->ref[i].id = rep->rrsets[i]->id; if(rrset_cache_update(env->rrset_cache, &rep->ref[i], env->alloc, now)) /* it was in the cache */ rep->rrsets[i] = rep->ref[i].key; } } void dns_cache_store_msg(struct module_env* env, struct query_info* qinfo, hashvalue_t hash, struct reply_info* rep) { struct msgreply_entry* e; uint32_t now = time(NULL); /* store RRsets */ reply_info_set_ttls(rep, now); store_rrsets(env, rep, now); if(rep->ttl == 0) { /* we do not store the message, but we did store the RRs, * which could be useful for delegation information */ verbose(VERB_ALGO, "TTL 0: dropped msg from cache"); return; } /* store msg in the cache */ reply_info_sortref(rep); if(!(e = query_info_entrysetup(qinfo, rep, hash))) { log_err("store_msg: malloc failed"); return; } slabhash_insert(env->msg_cache, hash, &e->entry, rep, env->alloc); } /** find closest NS and returns the rrset (locked) */ static struct ub_packed_rrset_key* find_deleg_ns(struct module_env* env, uint8_t* qname, size_t qnamelen, uint16_t qclass, uint32_t now) { struct ub_packed_rrset_key *rrset; uint8_t lablen; /* snip off front part of qname until NS is found */ while(qnamelen > 0) { if((rrset = rrset_cache_lookup(env->rrset_cache, qname, qnamelen, LDNS_RR_TYPE_NS, qclass, 0, now, 0))) return rrset; /* snip off front label */ lablen = *qname; qname += lablen + 1; qnamelen -= lablen + 1; } return NULL; } /** add A records to delegation */ static int add_a(struct ub_packed_rrset_key* ak, struct delegpt* dp, struct region* region) { struct packed_rrset_data* d=(struct packed_rrset_data*)ak->entry.data; size_t i; struct sockaddr_in sa; socklen_t len = (socklen_t)sizeof(sa); memset(&sa, 0, len); sa.sin_family = AF_INET; sa.sin_port = (in_port_t)htons(UNBOUND_DNS_PORT); for(i=0; icount; i++) { if(d->rr_len[i] != 2 + INET_SIZE) continue; memmove(&sa.sin_addr, d->rr_data[i]+2, INET_SIZE); log_addr("adding A to deleg", (struct sockaddr_storage*)&sa, len); if(!delegpt_add_target(dp, region, ak->rk.dname, ak->rk.dname_len, (struct sockaddr_storage*)&sa, len)) return 0; } return 1; } /** add AAAA records to delegation */ static int add_aaaa(struct ub_packed_rrset_key* ak, struct delegpt* dp, struct region* region) { struct packed_rrset_data* d=(struct packed_rrset_data*)ak->entry.data; size_t i; struct sockaddr_in6 sa; socklen_t len = (socklen_t)sizeof(sa); memset(&sa, 0, len); sa.sin6_family = AF_INET6; sa.sin6_port = (in_port_t)htons(UNBOUND_DNS_PORT); for(i=0; icount; i++) { if(d->rr_len[i] != 2 + INET6_SIZE) /* rdatalen + len of IP6 */ continue; memmove(&sa.sin6_addr, d->rr_data[i]+2, INET6_SIZE); log_addr("adding AAAA to deleg", (struct sockaddr_storage*)&sa, len); if(!delegpt_add_target(dp, region, ak->rk.dname, ak->rk.dname_len, (struct sockaddr_storage*)&sa, len)) return 0; } return 1; } /** find and add A and AAAA records for nameservers in delegpt */ static int find_add_addrs(struct module_env* env, uint16_t qclass, struct region* region, struct delegpt* dp, uint32_t now) { struct delegpt_ns* ns; struct ub_packed_rrset_key* akey; for(ns = dp->nslist; ns; ns = ns->next) { akey = rrset_cache_lookup(env->rrset_cache, ns->name, ns->namelen, LDNS_RR_TYPE_A, qclass, 0, now, 0); if(akey) { if(!add_a(akey, dp, region)) { lock_rw_unlock(&akey->entry.lock); return 0; } lock_rw_unlock(&akey->entry.lock); } akey = rrset_cache_lookup(env->rrset_cache, ns->name, ns->namelen, LDNS_RR_TYPE_AAAA, qclass, 0, now, 0); if(akey) { if(!add_aaaa(akey, dp, region)) { lock_rw_unlock(&akey->entry.lock); return 0; } lock_rw_unlock(&akey->entry.lock); } } return 1; } struct delegpt* dns_cache_find_delegation(struct module_env* env, uint8_t* qname, size_t qnamelen, uint16_t qclass, struct region* region) { /* try to find closest NS rrset */ struct ub_packed_rrset_key* nskey; struct packed_rrset_data* nsdata; struct delegpt* dp; size_t i; uint32_t now = (uint32_t)time(NULL); nskey = find_deleg_ns(env, qname, qnamelen, qclass, now); if(!nskey) /* hope the caller has hints to prime or something */ return NULL; nsdata = (struct packed_rrset_data*)nskey->entry.data; /* got the NS key, create delegation point */ dp = delegpt_create(region); if(!dp || !delegpt_set_name(dp, region, nskey->rk.dname)) { lock_rw_unlock(&nskey->entry.lock); log_err("find_delegation: out of memory"); return NULL; } /* add NS entries */ for(i=0; icount; i++) { if(nsdata->rr_len[i] < 2+1) continue; /* len + root label */ /* add rdata of NS (= wirefmt dname), skip rdatalen bytes */ if(!delegpt_add_ns(dp, region, nsdata->rr_data[i]+2)) log_err("find_delegation: addns out of memory"); } /* find and add A entries */ lock_rw_unlock(&nskey->entry.lock); /* first unlock before next lookup*/ if(!find_add_addrs(env, qclass, region, dp, now)) log_err("find_delegation: addrs out of memory"); log_info("dns_cache_find_delegation returns delegpt"); delegpt_log(dp); return dp; }