123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908 |
- /* Copyright 2001,2002,2003 Roger Dingledine, Matej Pfajfar. */
- /* See LICENSE for licensing information */
- /* $Id$ */
- /**
- * \file main.c
- * \brief Tor main loop and startup functions.
- **/
- #include "or.h"
- /********* PROTOTYPES **********/
- static void dumpstats(int severity); /* log stats */
- static int init_from_config(int argc, char **argv);
- /********* START VARIABLES **********/
- /* declared in connection.c */
- extern char *conn_state_to_string[][_CONN_TYPE_MAX+1];
- or_options_t options; /**< Command-line and config-file options. */
- int global_read_bucket; /**< Max number of bytes I can read this second. */
- /** What was the read bucket before the last call to prepare_for_pool?
- * (used to determine how many bytes we've read). */
- static int stats_prev_global_read_bucket;
- /** How many bytes have we read since we started the process? */
- static uint64_t stats_n_bytes_read = 0;
- /** How many seconds have we been running? */
- static long stats_n_seconds_reading = 0;
- /** Array of all open connections; each element corresponds to the element of
- * poll_array in the same position. The first nfds elements are valid. */
- static connection_t *connection_array[MAXCONNECTIONS] =
- { NULL };
- /** Array of pollfd objects for calls to poll(). */
- static struct pollfd poll_array[MAXCONNECTIONS];
- static int nfds=0; /**< Number of connections currently active. */
- #ifndef MS_WINDOWS /* do signal stuff only on unix */
- static int please_dumpstats=0; /**< Whether we should dump stats during the loop. */
- static int please_reset=0; /**< Whether we just got a sighup. */
- static int please_reap_children=0; /**< Whether we should waitpid for exited children. */
- #endif /* signal stuff */
- /** We set this to 1 when we've fetched a dir, to know whether to complain
- * yet about unrecognized nicknames in entrynodes, exitnodes, etc.
- * Also, we don't try building circuits unless this is 1. */
- int has_fetched_directory=0;
- /** We set this to 1 when we've opened a circuit, so we can print a log
- * entry to inform the user that Tor is working. */
- int has_completed_circuit=0;
- /********* END VARIABLES ************/
- /****************************************************************************
- *
- * This section contains accessors and other methods on the connection_array
- * and poll_array variables (which are global within this file and unavailable
- * outside it).
- *
- ****************************************************************************/
- /** Add <b>conn</b> to the array of connections that we can poll on. The
- * connection's socket must be set; the connection starts out
- * non-reading and non-writing.
- */
- int connection_add(connection_t *conn) {
- tor_assert(conn);
- tor_assert(conn->s >= 0);
- if(nfds >= options.MaxConn-1) {
- log_fn(LOG_WARN,"failing because nfds is too high.");
- return -1;
- }
- tor_assert(conn->poll_index == -1); /* can only connection_add once */
- conn->poll_index = nfds;
- connection_array[nfds] = conn;
- poll_array[nfds].fd = conn->s;
- /* zero these out here, because otherwise we'll inherit values from the previously freed one */
- poll_array[nfds].events = 0;
- poll_array[nfds].revents = 0;
- nfds++;
- log_fn(LOG_INFO,"new conn type %s, socket %d, nfds %d.",
- CONN_TYPE_TO_STRING(conn->type), conn->s, nfds);
- return 0;
- }
- /** Remove the connection from the global list, and remove the
- * corresponding poll entry. Calling this function will shift the last
- * connection (if any) into the position occupied by conn.
- */
- int connection_remove(connection_t *conn) {
- int current_index;
- tor_assert(conn);
- tor_assert(nfds>0);
- log_fn(LOG_INFO,"removing socket %d (type %s), nfds now %d",
- conn->s, CONN_TYPE_TO_STRING(conn->type), nfds-1);
- tor_assert(conn->poll_index >= 0);
- current_index = conn->poll_index;
- if(current_index == nfds-1) { /* this is the end */
- nfds--;
- return 0;
- }
- /* replace this one with the one at the end */
- nfds--;
- poll_array[current_index].fd = poll_array[nfds].fd;
- poll_array[current_index].events = poll_array[nfds].events;
- poll_array[current_index].revents = poll_array[nfds].revents;
- connection_array[current_index] = connection_array[nfds];
- connection_array[current_index]->poll_index = current_index;
- return 0;
- }
- /** Set <b>*array</b> to an array of all connections, and <b>*n</b>
- * to the length of the array. <b>*array</b> and <b>*n</b> must not
- * be modified.
- */
- void get_connection_array(connection_t ***array, int *n) {
- *array = connection_array;
- *n = nfds;
- }
- /** Set the event mask on <b>conn</b> to <b>events</b>. (The form of
- * the event mask is as for poll().)
- */
- void connection_watch_events(connection_t *conn, short events) {
- tor_assert(conn && conn->poll_index >= 0 && conn->poll_index < nfds);
- poll_array[conn->poll_index].events = events;
- }
- /** Return true iff <b>conn</b> is listening for read events. */
- int connection_is_reading(connection_t *conn) {
- tor_assert(conn && conn->poll_index >= 0);
- return poll_array[conn->poll_index].events & POLLIN;
- }
- /** Tell the main loop to stop notifying <b>conn</b> of any read events. */
- void connection_stop_reading(connection_t *conn) {
- tor_assert(conn && conn->poll_index >= 0 && conn->poll_index < nfds);
- log(LOG_DEBUG,"connection_stop_reading() called.");
- if(poll_array[conn->poll_index].events & POLLIN)
- poll_array[conn->poll_index].events -= POLLIN;
- }
- /** Tell the main loop to start notifying <b>conn</b> of any read events. */
- void connection_start_reading(connection_t *conn) {
- tor_assert(conn && conn->poll_index >= 0 && conn->poll_index < nfds);
- poll_array[conn->poll_index].events |= POLLIN;
- }
- /** Return true iff <b>conn</b> is listening for write events. */
- int connection_is_writing(connection_t *conn) {
- return poll_array[conn->poll_index].events & POLLOUT;
- }
- /** Tell the main loop to stop notifying <b>conn</b> of any write events. */
- void connection_stop_writing(connection_t *conn) {
- tor_assert(conn && conn->poll_index >= 0 && conn->poll_index < nfds);
- if(poll_array[conn->poll_index].events & POLLOUT)
- poll_array[conn->poll_index].events -= POLLOUT;
- }
- /** Tell the main loop to start notifying <b>conn</b> of any write events. */
- void connection_start_writing(connection_t *conn) {
- tor_assert(conn && conn->poll_index >= 0 && conn->poll_index < nfds);
- poll_array[conn->poll_index].events |= POLLOUT;
- }
- /** Called when the connection at connection_array[i] has a read event,
- * or it has pending tls data waiting to be read: checks for validity,
- * catches numerous errors, and dispatches to connection_handle_read.
- */
- static void conn_read(int i) {
- connection_t *conn = connection_array[i];
- if (conn->marked_for_close)
- return;
- /* see http://www.greenend.org.uk/rjk/2001/06/poll.html for
- * discussion of POLLIN vs POLLHUP */
- if(!(poll_array[i].revents & (POLLIN|POLLHUP|POLLERR)))
- if(!connection_is_reading(conn) ||
- !connection_has_pending_tls_data(conn))
- return; /* this conn should not read */
- log_fn(LOG_DEBUG,"socket %d wants to read.",conn->s);
- assert_connection_ok(conn, time(NULL));
- assert_all_pending_dns_resolves_ok();
- if(
- /* XXX does POLLHUP also mean it's definitely broken? */
- #ifdef MS_WINDOWS
- (poll_array[i].revents & POLLERR) ||
- #endif
- connection_handle_read(conn) < 0) {
- if (!conn->marked_for_close) {
- /* this connection is broken. remove it */
- log_fn(LOG_WARN,"Unhandled error on read for %s connection (fd %d); removing",
- CONN_TYPE_TO_STRING(conn->type), conn->s);
- connection_mark_for_close(conn);
- }
- }
- assert_connection_ok(conn, time(NULL));
- assert_all_pending_dns_resolves_ok();
- }
- /** Called when the connection at connection_array[i] has a write event:
- * checks for validity, catches numerous errors, and dispatches to
- * connection_handle_write.
- */
- static void conn_write(int i) {
- connection_t *conn;
- if(!(poll_array[i].revents & POLLOUT))
- return; /* this conn doesn't want to write */
- conn = connection_array[i];
- log_fn(LOG_DEBUG,"socket %d wants to write.",conn->s);
- if (conn->marked_for_close)
- return;
- assert_connection_ok(conn, time(NULL));
- assert_all_pending_dns_resolves_ok();
- if (connection_handle_write(conn) < 0) {
- if (!conn->marked_for_close) {
- /* this connection is broken. remove it. */
- log_fn(LOG_WARN,"Unhandled error on read for %s connection (fd %d); removing",
- CONN_TYPE_TO_STRING(conn->type), conn->s);
- conn->has_sent_end = 1; /* otherwise we cry wolf about duplicate close */
- /* XXX do we need a close-immediate here, so we don't try to flush? */
- connection_mark_for_close(conn);
- }
- }
- assert_connection_ok(conn, time(NULL));
- assert_all_pending_dns_resolves_ok();
- }
- /** If the connection at connection_array[i] is marked for close, then:
- * - If it has data that it wants to flush, try to flush it.
- * - If it _still_ has data to flush, and conn->hold_open_until_flushed is
- * true, then leave the connection open and return.
- * - Otherwise, remove the connection from connection_array and from
- * all other lists, close it, and free it.
- * If we remove the connection, then call conn_closed_if_marked at the new
- * connection at position i.
- */
- static void conn_close_if_marked(int i) {
- connection_t *conn;
- int retval;
- conn = connection_array[i];
- assert_connection_ok(conn, time(NULL));
- assert_all_pending_dns_resolves_ok();
- if(!conn->marked_for_close)
- return; /* nothing to see here, move along */
- log_fn(LOG_INFO,"Cleaning up connection (fd %d).",conn->s);
- if(conn->s >= 0 && connection_wants_to_flush(conn)) {
- /* -1 means it's an incomplete edge connection, or that the socket
- * has already been closed as unflushable. */
- if(!conn->hold_open_until_flushed)
- log_fn(LOG_WARN,
- "Conn (fd %d, type %s, state %d) marked, but wants to flush %d bytes. "
- "(Marked at %s:%d)",
- conn->s, CONN_TYPE_TO_STRING(conn->type), conn->state,
- conn->outbuf_flushlen, conn->marked_for_close_file, conn->marked_for_close);
- if(connection_speaks_cells(conn)) {
- if(conn->state == OR_CONN_STATE_OPEN) {
- retval = flush_buf_tls(conn->tls, conn->outbuf, &conn->outbuf_flushlen);
- } else
- retval = -1; /* never flush non-open broken tls connections */
- } else {
- retval = flush_buf(conn->s, conn->outbuf, &conn->outbuf_flushlen);
- }
- if(retval >= 0 &&
- conn->hold_open_until_flushed && connection_wants_to_flush(conn)) {
- log_fn(LOG_INFO,"Holding conn (fd %d) open for more flushing.",conn->s);
- /* XXX should we reset timestamp_lastwritten here? */
- return;
- }
- if(connection_wants_to_flush(conn)) {
- log_fn(LOG_WARN,"Conn (fd %d, type %s, state %d) still wants to flush. Losing %d bytes! (Marked at %s:%d)",
- conn->s, CONN_TYPE_TO_STRING(conn->type), conn->state,
- (int)buf_datalen(conn->outbuf), conn->marked_for_close_file,
- conn->marked_for_close);
- }
- }
- /* if it's an edge conn, remove it from the list
- * of conn's on this circuit. If it's not on an edge,
- * flush and send destroys for all circuits on this conn
- */
- circuit_about_to_close_connection(conn);
- connection_about_to_close_connection(conn);
- connection_remove(conn);
- if(conn->type == CONN_TYPE_EXIT) {
- assert_connection_edge_not_dns_pending(conn);
- }
- connection_free(conn);
- if(i<nfds) { /* we just replaced the one at i with a new one.
- process it too. */
- conn_close_if_marked(i);
- }
- }
- /** This function is called whenever we successfully pull down a directory */
- void directory_has_arrived(void) {
- log_fn(LOG_INFO, "A directory has arrived.");
- has_fetched_directory=1;
- if(options.ORPort) { /* connect to them all */
- router_retry_connections();
- }
- }
- /** Perform regular maintenance tasks for a single connection. This
- * function gets run once per second per connection by run_housekeeping.
- */
- static void run_connection_housekeeping(int i, time_t now) {
- cell_t cell;
- connection_t *conn = connection_array[i];
- /* Expire any directory connections that haven't sent anything for 5 min */
- if(conn->type == CONN_TYPE_DIR &&
- !conn->marked_for_close &&
- conn->timestamp_lastwritten + 5*60 < now) {
- log_fn(LOG_WARN,"Expiring wedged directory conn (fd %d, purpose %d)", conn->s, conn->purpose);
- /* XXXX This next check may help isolate where the pesky EPIPE bug
- * really occurs. */
- if (connection_wants_to_flush(conn)) {
- if(flush_buf(conn->s, conn->outbuf, &conn->outbuf_flushlen) < 0) {
- log_fn(LOG_WARN,"flushing expired directory conn failed.");
- connection_close_immediate(conn);
- connection_mark_for_close(conn);
- /* */
- } else {
- /* XXXX Does this next part make sense, really? */
- connection_mark_for_close(conn);
- conn->hold_open_until_flushed = 1; /* give it a last chance */
- }
- }
- return;
- }
- /* check connections to see whether we should send a keepalive, expire, or wait */
- if(!connection_speaks_cells(conn))
- return;
- /* If we haven't written to an OR connection for a while, then either nuke
- the connection or send a keepalive, depending. */
- if(now >= conn->timestamp_lastwritten + options.KeepalivePeriod) {
- if((!options.ORPort && !circuit_get_by_conn(conn)) ||
- (!connection_state_is_open(conn))) {
- /* we're an onion proxy, with no circuits; or our handshake has expired. kill it. */
- log_fn(LOG_INFO,"Expiring connection to %d (%s:%d).",
- i,conn->address, conn->port);
- /* flush anything waiting, e.g. a destroy for a just-expired circ */
- connection_mark_for_close(conn);
- conn->hold_open_until_flushed = 1;
- } else {
- /* either a full router, or we've got a circuit. send a padding cell. */
- log_fn(LOG_DEBUG,"Sending keepalive to (%s:%d)",
- conn->address, conn->port);
- memset(&cell,0,sizeof(cell_t));
- cell.command = CELL_PADDING;
- connection_or_write_cell_to_buf(&cell, conn);
- }
- }
- }
- /** Perform regular maintenance tasks. This function gets run once per
- * second by prepare_for_poll.
- */
- static void run_scheduled_events(time_t now) {
- static long time_to_fetch_directory = 0;
- static time_t last_uploaded_services = 0;
- static time_t last_rotated_certificate = 0;
- int i;
- /** 1a. Every MIN_ONION_KEY_LIFETIME seconds, rotate the onion keys,
- * shut down and restart all cpuworkers, and update the directory if
- * necessary.
- */
- if (options.ORPort && get_onion_key_set_at()+MIN_ONION_KEY_LIFETIME < now) {
- log_fn(LOG_INFO,"Rotating onion key.");
- rotate_onion_key();
- cpuworkers_rotate();
- if (router_rebuild_descriptor()<0) {
- log_fn(LOG_WARN, "Couldn't rebuild router descriptor");
- }
- router_upload_dir_desc_to_dirservers();
- }
- /** 1b. Every MAX_SSL_KEY_LIFETIME seconds, we change our TLS context. */
- if (!last_rotated_certificate)
- last_rotated_certificate = now;
- if (options.ORPort && last_rotated_certificate+MAX_SSL_KEY_LIFETIME < now) {
- log_fn(LOG_INFO,"Rotating tls context.");
- if (tor_tls_context_new(get_identity_key(), 1, options.Nickname,
- MAX_SSL_KEY_LIFETIME) < 0) {
- log_fn(LOG_WARN, "Error reinitializing TLS context");
- }
- last_rotated_certificate = now;
- /* XXXX We should rotate TLS connections as well; this code doesn't change
- * XXXX them at all. */
- }
- /** 1c. Every DirFetchPostPeriod seconds, we get a new directory and upload
- * our descriptor (if any). */
- if(time_to_fetch_directory < now) {
- /* it's time to fetch a new directory and/or post our descriptor */
- if(options.ORPort) {
- router_rebuild_descriptor();
- router_upload_dir_desc_to_dirservers();
- }
- if(!options.DirPort) {
- /* NOTE directory servers do not currently fetch directories.
- * Hope this doesn't bite us later. */
- directory_get_from_dirserver(DIR_PURPOSE_FETCH_DIR, NULL, 0);
- } else {
- /* We're a directory; dump any old descriptors. */
- dirserv_remove_old_servers();
- }
- /* Force an upload of our descriptors every DirFetchPostPeriod seconds. */
- rend_services_upload(1);
- last_uploaded_services = now;
- rend_cache_clean(); /* should this go elsewhere? */
- time_to_fetch_directory = now + options.DirFetchPostPeriod;
- }
- /** 2. Every second, we examine pending circuits and prune the
- * ones which have been pending for more than a few seconds.
- * We do this before step 3, so it can try building more if
- * it's not comfortable with the number of available circuits.
- */
- circuit_expire_building(now);
- /** 2b. Also look at pending streams and prune the ones that 'began'
- * a long time ago but haven't gotten a 'connected' yet.
- * Do this before step 3, so we can put them back into pending
- * state to be picked up by the new circuit.
- */
- connection_ap_expire_beginning();
- /** 2c. And expire connections that we've held open for too long.
- */
- connection_expire_held_open();
- /** 3. Every second, we try a new circuit if there are no valid
- * circuits. Every NewCircuitPeriod seconds, we expire circuits
- * that became dirty more than NewCircuitPeriod seconds ago,
- * and we make a new circ if there are no clean circuits.
- */
- if(has_fetched_directory)
- circuit_build_needed_circs(now);
- /** 4. We do housekeeping for each connection... */
- for(i=0;i<nfds;i++) {
- run_connection_housekeeping(i, now);
- }
- /** 5. And remove any marked circuits... */
- circuit_close_all_marked();
- /** 6. And upload service descriptors for any services whose intro points
- * have changed in the last second. */
- if (last_uploaded_services < now-5) {
- rend_services_upload(0);
- last_uploaded_services = now;
- }
- /** 7. and blow away any connections that need to die. have to do this now,
- * because if we marked a conn for close and left its socket -1, then
- * we'll pass it to poll/select and bad things will happen.
- */
- for(i=0;i<nfds;i++)
- conn_close_if_marked(i);
- }
- /** Called every time we're about to call tor_poll. Increments statistics,
- * and adjusts token buckets. Returns the number of milliseconds to use for
- * the poll() timeout.
- */
- static int prepare_for_poll(void) {
- static long current_second = 0; /* from previous calls to gettimeofday */
- connection_t *conn;
- struct timeval now;
- int i;
- tor_gettimeofday(&now);
- /* Check how much bandwidth we've consumed, and increment the token
- * buckets. */
- stats_n_bytes_read += stats_prev_global_read_bucket-global_read_bucket;
- connection_bucket_refill(&now);
- stats_prev_global_read_bucket = global_read_bucket;
- if(now.tv_sec > current_second) { /* the second has rolled over. check more stuff. */
- ++stats_n_seconds_reading;
- assert_all_pending_dns_resolves_ok();
- run_scheduled_events(now.tv_sec);
- assert_all_pending_dns_resolves_ok();
- current_second = now.tv_sec; /* remember which second it is, for next time */
- }
- for(i=0;i<nfds;i++) {
- conn = connection_array[i];
- if(connection_has_pending_tls_data(conn) &&
- connection_is_reading(conn)) {
- log_fn(LOG_DEBUG,"sock %d has pending bytes.",conn->s);
- return 0; /* has pending bytes to read; don't let poll wait. */
- }
- }
- return (1000 - (now.tv_usec / 1000)); /* how many milliseconds til the next second? */
- }
- /** Configure the Tor process from the command line arguments and from the
- * configuration file.
- */
- static int init_from_config(int argc, char **argv) {
- /* read the configuration file. */
- if(getconfig(argc,argv,&options)) {
- log_fn(LOG_ERR,"Reading config failed. For usage, try -h.");
- return -1;
- }
- close_logs(); /* we'll close, then open with correct loglevel if necessary */
- /* Setuid/setgid as appropriate */
- if(options.User || options.Group) {
- if(switch_id(options.User, options.Group) != 0) {
- return -1;
- }
- }
- /* Start backgrounding the process, if requested. */
- if (options.RunAsDaemon) {
- start_daemon(options.DataDirectory);
- }
- /* Configure the log(s) */
- config_init_logs(&options);
- /* Set up our buckets */
- connection_bucket_init();
- stats_prev_global_read_bucket = global_read_bucket;
- /* Finish backgrounding the process */
- if(options.RunAsDaemon) {
- /* XXXX Can we delay this any more? */
- finish_daemon();
- }
- /* Write our pid to the pid file. if we do not have write permissions we
- * will log a warning */
- if(options.PidFile)
- write_pidfile(options.PidFile);
- return 0;
- }
- /** Called when we get a SIGHUP: reload configuration files and keys,
- * retry all connections, re-upload all descriptors, and so on. */
- static int do_hup(void) {
- char keydir[512];
- log_fn(LOG_NOTICE,"Received sighup. Reloading config.");
- has_completed_circuit=0;
- /* first, reload config variables, in case they've changed */
- /* no need to provide argc/v, they've been cached inside init_from_config */
- if (init_from_config(0, NULL) < 0) {
- exit(1);
- }
- /* reload keys as needed for rendezvous services. */
- if (rend_service_load_keys()<0) {
- log_fn(LOG_ERR,"Error reloading rendezvous service keys");
- exit(1);
- }
- if(retry_all_connections() < 0) {
- log_fn(LOG_ERR,"Failed to bind one of the listener ports.");
- return -1;
- }
- if(options.DirPort) {
- /* reload the approved-routers file */
- sprintf(keydir,"%s/approved-routers", options.DataDirectory);
- log_fn(LOG_INFO,"Reloading approved fingerprints from %s...",keydir);
- if(dirserv_parse_fingerprint_file(keydir) < 0) {
- log_fn(LOG_WARN, "Error reloading fingerprints. Continuing with old list.");
- }
- /* Since we aren't fetching a directory, we won't retry rendezvous points
- * when it gets in. Try again now. */
- rend_services_introduce();
- } else {
- /* fetch a new directory */
- directory_get_from_dirserver(DIR_PURPOSE_FETCH_DIR, NULL, 0);
- }
- if(options.ORPort) {
- router_rebuild_descriptor();
- sprintf(keydir,"%s/router.desc", options.DataDirectory);
- log_fn(LOG_INFO,"Dumping descriptor to %s...",keydir);
- if (write_str_to_file(keydir, router_get_my_descriptor())) {
- return -1;
- }
- }
- return 0;
- }
- /** Tor main loop. */
- static int do_main_loop(void) {
- int i;
- int timeout;
- int poll_result;
- /* Initialize the history structures. */
- rep_hist_init();
- /* Intialize the service cache. */
- rend_cache_init();
- /* load the private keys, if we're supposed to have them, and set up the
- * TLS context. */
- if (init_keys() < 0 || rend_service_load_keys() < 0) {
- log_fn(LOG_ERR,"Error initializing keys; exiting");
- return -1;
- }
- /* load the routers file */
- if(options.RouterFile) {
- routerlist_clear_trusted_directories();
- if (router_load_routerlist_from_file(options.RouterFile, 1) < 0) {
- log_fn(LOG_ERR,"Error loading router list.");
- return -1;
- }
- }
- if(options.DirPort) { /* the directory is already here, run startup things */
- has_fetched_directory = 1;
- directory_has_arrived();
- }
- if(options.ORPort) {
- cpu_init(); /* launch cpuworkers. Need to do this *after* we've read the onion key. */
- }
- /* start up the necessary connections based on which ports are
- * non-zero. This is where we try to connect to all the other ORs,
- * and start the listeners.
- */
- if(retry_all_connections() < 0) {
- log_fn(LOG_ERR,"Failed to bind one of the listener ports.");
- return -1;
- }
- for(;;) {
- #ifndef MS_WINDOWS /* do signal stuff only on unix */
- if(please_dumpstats) {
- /* prefer to log it at INFO, but make sure we always see it */
- dumpstats(get_min_log_level()>LOG_INFO ? get_min_log_level() : LOG_INFO);
- please_dumpstats = 0;
- }
- if(please_reset) {
- do_hup();
- please_reset = 0;
- }
- if(please_reap_children) {
- while(waitpid(-1,NULL,WNOHANG)) ; /* keep reaping until no more zombies */
- please_reap_children = 0;
- }
- #endif /* signal stuff */
- timeout = prepare_for_poll();
- /* poll until we have an event, or the second ends */
- poll_result = tor_poll(poll_array, nfds, timeout);
- /* let catch() handle things like ^c, and otherwise don't worry about it */
- if(poll_result < 0) {
- /* let the program survive things like ^z */
- if(tor_socket_errno(-1) != EINTR) {
- log_fn(LOG_ERR,"poll failed: %s [%d]",
- tor_socket_strerror(tor_socket_errno(-1)),
- tor_socket_errno(-1));
- return -1;
- } else {
- log_fn(LOG_DEBUG,"poll interrupted.");
- }
- }
- /* do all the reads and errors first, so we can detect closed sockets */
- for(i=0;i<nfds;i++)
- conn_read(i); /* this also marks broken connections */
- /* then do the writes */
- for(i=0;i<nfds;i++)
- conn_write(i);
- /* any of the conns need to be closed now? */
- for(i=0;i<nfds;i++)
- conn_close_if_marked(i);
- /* refilling buckets and sending cells happens at the beginning of the
- * next iteration of the loop, inside prepare_for_poll()
- */
- }
- }
- /** Unix signal handler. */
- static void catch(int the_signal) {
- #ifndef MS_WINDOWS /* do signal stuff only on unix */
- switch(the_signal) {
- // case SIGABRT:
- case SIGTERM:
- case SIGINT:
- log(LOG_ERR,"Catching signal %d, exiting cleanly.", the_signal);
- /* we don't care if there was an error when we unlink, nothing
- we could do about it anyways */
- if(options.PidFile)
- unlink(options.PidFile);
- exit(0);
- case SIGPIPE:
- log(LOG_WARN,"Bug: caught sigpipe. Ignoring.");
- break;
- case SIGHUP:
- please_reset = 1;
- break;
- case SIGUSR1:
- please_dumpstats = 1;
- break;
- case SIGCHLD:
- please_reap_children = 1;
- break;
- default:
- log(LOG_WARN,"Caught signal %d that we can't handle??", the_signal);
- }
- #endif /* signal stuff */
- }
- /** Write all statistics to the log, with log level 'severity'. Called
- * in response to a SIGUSR1. */
- static void dumpstats(int severity) {
- int i;
- connection_t *conn;
- time_t now = time(NULL);
- log(severity, "Dumping stats:");
- for(i=0;i<nfds;i++) {
- conn = connection_array[i];
- log(severity, "Conn %d (socket %d) type %d (%s), state %d (%s), created %d secs ago",
- i, conn->s, conn->type, CONN_TYPE_TO_STRING(conn->type),
- conn->state, conn_state_to_string[conn->type][conn->state], (int)(now - conn->timestamp_created));
- if(!connection_is_listener(conn)) {
- log(severity,"Conn %d is to '%s:%d'.",i,conn->address, conn->port);
- log(severity,"Conn %d: %d bytes waiting on inbuf (last read %d secs ago)",i,
- (int)buf_datalen(conn->inbuf),
- (int)(now - conn->timestamp_lastread));
- log(severity,"Conn %d: %d bytes waiting on outbuf (last written %d secs ago)",i,
- (int)buf_datalen(conn->outbuf), (int)(now - conn->timestamp_lastwritten));
- }
- circuit_dump_by_conn(conn, severity); /* dump info about all the circuits using this conn */
- }
- log(severity,
- "Cells processed: %10lu padding\n"
- " %10lu create\n"
- " %10lu created\n"
- " %10lu relay\n"
- " (%10lu relayed)\n"
- " (%10lu delivered)\n"
- " %10lu destroy",
- stats_n_padding_cells_processed,
- stats_n_create_cells_processed,
- stats_n_created_cells_processed,
- stats_n_relay_cells_processed,
- stats_n_relay_cells_relayed,
- stats_n_relay_cells_delivered,
- stats_n_destroy_cells_processed);
- if (stats_n_data_cells_packaged)
- log(severity,"Average packaged cell fullness: %2.3f%%",
- 100*(((double)stats_n_data_bytes_packaged) /
- (stats_n_data_cells_packaged*RELAY_PAYLOAD_SIZE)) );
- if (stats_n_data_cells_received)
- log(severity,"Average delivered cell fullness: %2.3f%%",
- 100*(((double)stats_n_data_bytes_received) /
- (stats_n_data_cells_received*RELAY_PAYLOAD_SIZE)) );
- if (stats_n_seconds_reading)
- log(severity,"Average bandwidth used: %d bytes/sec",
- (int) (stats_n_bytes_read/stats_n_seconds_reading));
- rep_hist_dump_stats(now,severity);
- rend_service_dump_stats(severity);
- }
- /** Called before we make any calls to network-related functions.
- * (Some operating systems require their network libraries to be
- * initialized.) */
- int network_init(void)
- {
- #ifdef MS_WINDOWS
- /* This silly exercise is necessary before windows will allow gethostbyname to work.
- */
- WSADATA WSAData;
- int r;
- r = WSAStartup(0x101,&WSAData);
- if (r) {
- log_fn(LOG_WARN,"Error initializing windows network layer: code was %d",r);
- return -1;
- }
- /* XXXX We should call WSACleanup on exit, I think. */
- #endif
- return 0;
- }
- /** Called by exit() as we shut down the process.
- */
- void exit_function(void)
- {
- #ifdef MS_WINDOWS
- WSACleanup();
- #endif
- }
- /** Main entry point for the Tor command-line client.
- */
- int tor_main(int argc, char *argv[]) {
- /* give it somewhere to log to initially */
- add_stream_log(LOG_INFO, LOG_ERR, "<stdout>", stdout);
- log_fn(LOG_NOTICE,"Tor v%s. This is experimental software. Do not use it if you need anonymity.",VERSION);
- if (network_init()<0) {
- log_fn(LOG_ERR,"Error initializing network; exiting.");
- return 1;
- }
- atexit(exit_function);
- if (init_from_config(argc,argv) < 0)
- return -1;
- #ifndef MS_WINDOWS
- if(geteuid()==0)
- log_fn(LOG_WARN,"You are running Tor as root. You don't need to, and you probably shouldn't.");
- #endif
- if(options.ORPort) { /* only spawn dns handlers if we're a router */
- dns_init(); /* initialize the dns resolve tree, and spawn workers */
- }
- if(options.SocksPort) {
- client_dns_init(); /* init the client dns cache */
- }
- #ifndef MS_WINDOWS /* do signal stuff only on unix */
- {
- struct sigaction action;
- action.sa_flags = 0;
- sigemptyset(&action.sa_mask);
- action.sa_handler = catch;
- sigaction(SIGINT, &action, NULL);
- sigaction(SIGTERM, &action, NULL);
- sigaction(SIGPIPE, &action, NULL);
- sigaction(SIGUSR1, &action, NULL);
- sigaction(SIGHUP, &action, NULL); /* to reload config, retry conns, etc */
- sigaction(SIGCHLD, &action, NULL); /* handle dns/cpu workers that exit */
- }
- #endif /* signal stuff */
- crypto_global_init();
- crypto_seed_rng();
- do_main_loop();
- crypto_global_cleanup();
- return -1;
- }
- /*
- Local Variables:
- mode:c
- indent-tabs-mode:nil
- c-basic-offset:2
- End:
- */
|