# Copyright (C) 2010 Internet Systems Consortium. # # Permission to use, copy, modify, and distribute this software for any # purpose with or without fee is hereby granted, provided that the above # copyright notice and this permission notice appear in all copies. # # THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SYSTEMS CONSORTIUM # DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL # IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL # INTERNET SYSTEMS CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, # INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING # FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, # NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION # WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. import select import sys import random import socket import threading import time from isc.datasrc import sqlite3_ds import isc try: from pydnspp import * except ImportError as e: # C++ loadable module may not be installed; sys.stderr.write('[b10-xfrout] failed to import DNS or XFR module: %s\n' % str(e)) ZONE_NEW_DATA_READY_CMD = 'zone_new_data_ready' _MAX_NOTIFY_NUM = 30 _MAX_NOTIFY_TRY_NUM = 5 _EVENT_NONE = 0 _EVENT_READ = 1 _EVENT_TIMEOUT = 2 _NOTIFY_TIMEOUT = 1 _IDLE_SLEEP_TIME = 0.5 # define the rcode for parsing notify reply message _REPLY_OK = 0 _BAD_QUERY_ID = 1 _BAD_QUERY_NAME = 2 _BAD_OPCODE = 3 _BAD_QR = 4 _BAD_REPLY_PACKET = 5 SOCK_DATA = b'somedata' def addr_to_str(addr): return '%s#%s' % (addr[0], addr[1]) class ZoneNotifyInfo: '''This class keeps track of notify-out information for one zone.''' def __init__(self, zone_name_, class_): '''notify_timeout_: absolute time for next notify reply. when the zone is preparing for sending notify message, notify_timeout_ is set to now, that means the first sending is triggered by the 'Timeout' mechanism. ''' self._notify_current = None self._slave_index = 0 self._sock = None self.notify_slaves = [] self.zone_name = zone_name_ self.zone_class = class_ self.notify_msg_id = 0 self.notify_timeout = 0 self.notify_try_num = 0 #Notify times sending to one target. def set_next_notify_target(self): if self._slave_index < (len(self.notify_slaves) - 1): self._slave_index += 1 self._notify_current = self.notify_slaves[self._slave_index] else: self._notify_current = None def prepare_notify_out(self): '''Create the socket and set notify timeout time to now''' self._sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) #TODO support IPv6? self.notify_timeout = time.time() self.notify_try_num = 0 self._slave_index = 0 if len(self.notify_slaves) > 0: self._notify_current = self.notify_slaves[0] def finish_notify_out(self): if self._sock: self._sock.close() self._sock = None def get_socket(self): return self._sock def get_current_notify_target(self): return self._notify_current class NotifyOut: '''This class is used to handle notify logic for all zones(sending notify message to its slaves). notify service can be started by calling dispatcher(), and it can be stoped by calling shutdown() in another thread. ''' def __init__(self, datasrc_file, log=None, verbose=True): self._notify_infos = {} # key is (zone_name, zone_class) self._waiting_zones = [] self._notifying_zones = [] self._log = log self._serving = False self._read_sock = None self.notify_num = 0 # the count of in progress notifies self._verbose = verbose self._lock = threading.Lock() self._db_file = datasrc_file self._init_notify_out(datasrc_file) def _init_notify_out(self, datasrc_file): '''Get all the zones name and its notify target's address TODO, currently the zones are got by going through the zone table in database. There should be a better way to get them and also the setting 'also_notify', and there should be one mechanism to cover the changed datasrc.''' self._db_file = datasrc_file for zone_name, zone_class in sqlite3_ds.get_zones_info(datasrc_file): zone_id = (zone_name, zone_class) self._notify_infos[zone_id] = ZoneNotifyInfo(zone_name, zone_class) slaves = self._get_notify_slaves_from_ns(zone_name) for item in slaves: self._notify_infos[zone_id].notify_slaves.append((item, 53)) def send_notify(self, zone_name, zone_class='IN'): '''Send notify to one zone's slaves, this function is the only interface for class NotifyOut which can be called by other object. Internally, the function only set the zone's notify-reply timeout to now, then notify message will be sent out. ''' if zone_name[len(zone_name) - 1] != '.': zone_name += '.' zone_id = (zone_name, zone_class) if zone_id not in self._notify_infos: return with self._lock: if (self.notify_num >= _MAX_NOTIFY_NUM) or (zone_id in self._notifying_zones): if zone_id not in self._waiting_zones: self._waiting_zones.append(zone_id) else: self._notify_infos[zone_id].prepare_notify_out() self.notify_num += 1 self._notifying_zones.append(zone_id) def _dispatcher(self, started_event): while self._serving: # Let the master know we are alive already if started_event: started_event.set() replied_zones, not_replied_zones = self._wait_for_notify_reply() for name_ in replied_zones: self._zone_notify_handler(replied_zones[name_], _EVENT_READ) for name_ in not_replied_zones: if not_replied_zones[name_].notify_timeout <= time.time(): self._zone_notify_handler(not_replied_zones[name_], _EVENT_TIMEOUT) def dispatcher(self, daemon=False): """Spawns a thread that will handle notify related events. If one zone get the notify reply before timeout, call the handle to process the reply. If one zone can't get the notify before timeout, call the handler to resend notify or notify next slave. The thread can be stopped by calling shutdown(). Returns the thread object to anyone interested. """ if self._serving: raise RuntimeError( 'Dispatcher already running, tried to start twice') # Prepare for launch self._serving = True self._read_sock, self._write_sock = socket.socketpair() started_event = threading.Event() # Start self._thread = threading.Thread(target=self._dispatcher, args=[started_event]) if daemon: self._thread.daemon = daemon self._thread.start() # Wait for it to get started started_event.wait() # Return it to anyone listening return self._thread def shutdown(self): """Stop the dispatcher() thread. Blocks until the thread stopped.""" if not self._serving: raise RuntimeError('Tried to stop while not running') # Ask it to stop self._serving = False self._write_sock.send(SOCK_DATA) # make self._read_sock be readable. # Wait for it self._thread.join() # Clean up self._write_sock = None self._read_sock = None self._thread = None def _get_rdata_data(self, rr): return rr[7].strip() def _get_notify_slaves_from_ns(self, zone_name): '''Get all NS records, then remove the primary master from ns rrset, then use the name in NS record rdata part to get the a/aaaa records in the same zone. the targets listed in a/aaaa record rdata are treated as the notify slaves. Note: this is the simplest way to get the address of slaves, but not correct, it can't handle the delegation slaves, or the CNAME and DNAME logic. TODO. the function should be provided by one library.''' ns_rrset = sqlite3_ds.get_zone_rrset(zone_name, zone_name, 'NS', self._db_file) soa_rrset = sqlite3_ds.get_zone_rrset(zone_name, zone_name, 'SOA', self._db_file) ns_rr_name = [] for ns in ns_rrset: ns_rr_name.append(self._get_rdata_data(ns)) if len(soa_rrset) > 0: sname = (soa_rrset[0][sqlite3_ds.RR_RDATA_INDEX].split(' '))[0].strip() #TODO, bad hardcode to get rdata part if sname in ns_rr_name: ns_rr_name.remove(sname) addr_list = [] for rr_name in ns_rr_name: a_rrset = sqlite3_ds.get_zone_rrset(zone_name, rr_name, 'A', self._db_file) aaaa_rrset = sqlite3_ds.get_zone_rrset(zone_name, rr_name, 'AAAA', self._db_file) for rr in a_rrset: addr_list.append(self._get_rdata_data(rr)) for rr in aaaa_rrset: addr_list.append(self._get_rdata_data(rr)) return addr_list def _prepare_select_info(self): ''' Prepare the information for select(), returned value is one tuple (block_timeout, valid_socks, notifying_zones) block_timeout: the timeout for select() valid_socks: sockets list for waiting ready reading. notifying_zones: the zones which have been triggered for notify. ''' valid_socks = [] notifying_zones = {} min_timeout = None for info in self._notify_infos: sock = self._notify_infos[info].get_socket() if sock: valid_socks.append(sock) notifying_zones[info] = self._notify_infos[info] tmp_timeout = self._notify_infos[info].notify_timeout if min_timeout is not None: if tmp_timeout < min_timeout: min_timeout = tmp_timeout else: min_timeout = tmp_timeout block_timeout = _IDLE_SLEEP_TIME if min_timeout is not None: block_timeout = min_timeout - time.time() if block_timeout < 0: block_timeout = 0 return (block_timeout, valid_socks, notifying_zones) def _wait_for_notify_reply(self): ''' Receive notify replies in specified time. returned value is one tuple:(replied_zones, not_replied_zones). ({}, {}) is returned if shutdown() was called. replied_zones: the zones which receive notify reply. not_replied_zones: the zones which haven't got notify reply. ''' (block_timeout, valid_socks, notifying_zones) = \ self._prepare_select_info() # This is None only during some tests if self._read_sock is not None: valid_socks.append(self._read_sock) try: r_fds, w, e = select.select(valid_socks, [], [], block_timeout) except select.error as err: if err.args[0] != EINTR: return {}, {} if (self._read_sock in r_fds) and \ (self._read_sock.recv(len(SOCK_DATA)) == SOCK_DATA): return {}, {} # user has called shutdown() not_replied_zones = {} replied_zones = {} for info in notifying_zones: if notifying_zones[info].get_socket() in r_fds: replied_zones[info] = notifying_zones[info] else: not_replied_zones[info] = notifying_zones[info] return replied_zones, not_replied_zones def _zone_notify_handler(self, zone_notify_info, event_type): '''Notify handler for one zone. The first notify message is always triggered by the event "_EVENT_TIMEOUT" since when one zone prepares to notify its slaves, its notify_timeout is set to now, which is used to trigger sending notify message when dispatcher() scanning zones. ''' tgt = zone_notify_info.get_current_notify_target() if event_type == _EVENT_READ: reply = self._get_notify_reply(zone_notify_info.get_socket(), tgt) if reply: if self._handle_notify_reply(zone_notify_info, reply): self._notify_next_target(zone_notify_info) elif event_type == _EVENT_TIMEOUT and zone_notify_info.notify_try_num > 0: self._log_msg('info', 'notify retry to %s' % addr_to_str(tgt)) tgt = zone_notify_info.get_current_notify_target() if tgt: zone_notify_info.notify_try_num += 1 if zone_notify_info.notify_try_num > _MAX_NOTIFY_TRY_NUM: self._log_msg('info', 'notify to %s: retried exceeded' % addr_to_str(tgt)) self._notify_next_target(zone_notify_info) else: retry_timeout = _NOTIFY_TIMEOUT * pow(2, zone_notify_info.notify_try_num) # set exponential backoff according rfc1996 section 3.6 zone_notify_info.notify_timeout = time.time() + retry_timeout self._send_notify_message_udp(zone_notify_info, tgt) def _notify_next_target(self, zone_notify_info): '''Notify next address for the same zone. If all the targets has been notified, notify the first zone in waiting list. ''' zone_notify_info.notify_try_num = 0 zone_notify_info.set_next_notify_target() tgt = zone_notify_info.get_current_notify_target() if not tgt: zone_notify_info.finish_notify_out() with self._lock: self.notify_num -= 1 self._notifying_zones.remove((zone_notify_info.zone_name, zone_notify_info.zone_class)) # trigger notify out for waiting zones if len(self._waiting_zones) > 0: zone_id = self._waiting_zones.pop(0) self._notify_infos[zone_id].prepare_notify_out() self.notify_num += 1 def _send_notify_message_udp(self, zone_notify_info, addrinfo): msg, qid = self._create_notify_message(zone_notify_info.zone_name, zone_notify_info.zone_class) render = MessageRenderer() render.set_length_limit(512) msg.to_wire(render) zone_notify_info.notify_msg_id = qid sock = zone_notify_info.get_socket() try: sock.sendto(render.get_data(), 0, addrinfo) self._log_msg('info', 'sending notify to %s' % addr_to_str(addrinfo)) except socket.error as err: self._log_msg('error', 'send notify to %s failed: %s' % (addr_to_str(addrinfo), str(err))) return False return True def _create_rrset_from_db_record(self, record, zone_class): '''Create one rrset from one record of datasource, if the schema of record is changed, This function should be updated first. TODO, the function is copied from xfrout, there should be library for creating one rrset. ''' rrtype_ = RRType(record[sqlite3_ds.RR_TYPE_INDEX]) rdata_ = Rdata(rrtype_, RRClass(zone_class), " ".join(record[sqlite3_ds.RR_RDATA_INDEX:])) rrset_ = RRset(Name(record[sqlite3_ds.RR_NAME_INDEX]), RRClass(zone_class), \ rrtype_, RRTTL( int(record[sqlite3_ds.RR_TTL_INDEX]))) rrset_.add_rdata(rdata_) return rrset_ def _create_notify_message(self, zone_name, zone_class): msg = Message(Message.RENDER) qid = random.randint(0, 0xFFFF) msg.set_qid(qid) msg.set_opcode(Opcode.NOTIFY()) msg.set_rcode(Rcode.NOERROR()) msg.set_header_flag(MessageFlag.AA()) question = Question(Name(zone_name), RRClass(zone_class), RRType('SOA')) msg.add_question(question) # Add soa record to answer section soa_record = sqlite3_ds.get_zone_rrset(zone_name, zone_name, 'SOA', self._db_file) rrset_soa = self._create_rrset_from_db_record(soa_record[0], zone_class) msg.add_rrset(Section.ANSWER(), rrset_soa) return msg, qid def _handle_notify_reply(self, zone_notify_info, msg_data): '''Parse the notify reply message. TODO, the error message should be refined properly. rcode will not checked here, If we get the response from the slave, it means the slaves has got the notify.''' msg = Message(Message.PARSE) try: errstr = 'notify reply error: ' msg.from_wire(msg_data) if not msg.get_header_flag(MessageFlag.QR()): self._log_msg('error', errstr + 'bad flags') return _BAD_QR if msg.get_qid() != zone_notify_info.notify_msg_id: self._log_msg('error', errstr + 'bad query ID') return _BAD_QUERY_ID question = msg.get_question()[0] if question.get_name() != Name(zone_notify_info.zone_name): self._log_msg('error', errstr + 'bad query name') return _BAD_QUERY_NAME if msg.get_opcode() != Opcode.NOTIFY(): self._log_msg('error', errstr + 'bad opcode') return _BAD_OPCODE except Exception as err: # We don't care what exception, just report it? self._log_msg('error', errstr + str(err)) return _BAD_REPLY_PACKET return _REPLY_OK def _get_notify_reply(self, sock, tgt_addr): try: msg, addr = sock.recvfrom(512) except socket.error: self._log_msg('error', "notify to %s failed: can't read notify reply" % addr_to_str(tgt_addr)) return None return msg def _log_msg(self, level, msg): if self._log: self._log.log_message(level, msg)