net/wireguard/peer.c

6 #include "peer.h"
25 	struct wg_peer *peer;
33 	peer = kmem_cache_zalloc(peer_cache, GFP_KERNEL);
34 	if (unlikely(!peer))
36 	if (unlikely(dst_cache_init(&peer->endpoint_cache, GFP_KERNEL)))
39 	peer->device = wg;
40 	wg_noise_handshake_init(&peer->handshake, &wg->static_identity,
41 				public_key, preshared_key, peer);
42 	peer->internal_id = atomic64_inc_return(&peer_counter);
43 	peer->serial_work_cpu = nr_cpumask_bits;
44 	wg_cookie_init(&peer->latest_cookie);
45 	wg_timers_init(peer);
46 	wg_cookie_checker_precompute_peer_keys(peer);
47 	spin_lock_init(&peer->keypairs.keypair_update_lock);
48 	INIT_WORK(&peer->transmit_handshake_work, wg_packet_handshake_send_worker);
49 	INIT_WORK(&peer->transmit_packet_work, wg_packet_tx_worker);
50 	wg_prev_queue_init(&peer->tx_queue);
51 	wg_prev_queue_init(&peer->rx_queue);
52 	rwlock_init(&peer->endpoint_lock);
53 	kref_init(&peer->refcount);
54 	skb_queue_head_init(&peer->staged_packet_queue);
55 	wg_noise_reset_last_sent_handshake(&peer->last_sent_handshake);
56 	set_bit(NAPI_STATE_NO_BUSY_POLL, &peer->napi.state);
57 	netif_napi_add(wg->dev, &peer->napi, wg_packet_rx_poll);
58 	napi_enable(&peer->napi);
59 	list_add_tail(&peer->peer_list, &wg->peer_list);
60 	INIT_LIST_HEAD(&peer->allowedips_list);
61 	wg_pubkey_hashtable_add(wg->peer_hashtable, peer);
63 	pr_debug("%s: Peer %llu created\n", wg->dev->name, peer->internal_id);
64 	return peer;
67 	kmem_cache_free(peer_cache, peer);
71 struct wg_peer *wg_peer_get_maybe_zero(struct wg_peer *peer)
74 			 "Taking peer reference without holding the RCU read lock");
75 	if (unlikely(!peer || !kref_get_unless_zero(&peer->refcount)))
77 	return peer;
80 static void peer_make_dead(struct wg_peer *peer)
83 	list_del_init(&peer->peer_list);
84 	wg_allowedips_remove_by_peer(&peer->device->peer_allowedips, peer,
85 				     &peer->device->device_update_lock);
86 	wg_pubkey_hashtable_remove(peer->device->peer_hashtable, peer);
89 	WRITE_ONCE(peer->is_dead, true);
94 static void peer_remove_after_dead(struct wg_peer *peer)
96 	WARN_ON(!peer->is_dead);
98 	/* No more keypairs can be created for this peer, since is_dead protects
101 	wg_noise_keypairs_clear(&peer->keypairs);
106 	wg_timers_stop(peer);
116 	flush_workqueue(peer->device->packet_crypt_wq);
118 	flush_workqueue(peer->device->packet_crypt_wq);
120 	napi_disable(&peer->napi);
124 	netif_napi_del(&peer->napi);
129 	flush_workqueue(peer->device->handshake_send_wq);
131 	/* After the above flushes, a peer might still be active in a few
144 	 * and in wg_cookie_message_consume, the lookup eventually gets a peer
148 	--peer->device->num_peers;
149 	wg_peer_put(peer);
153  * a peer is currently operating will eventually come to an end and not pass
156 void wg_peer_remove(struct wg_peer *peer)
158 	if (unlikely(!peer))
160 	lockdep_assert_held(&peer->device->device_update_lock);
162 	peer_make_dead(peer);
164 	peer_remove_after_dead(peer);
169 	struct wg_peer *peer, *temp;
177 	list_for_each_entry_safe(peer, temp, &wg->peer_list, peer_list) {
178 		peer_make_dead(peer);
179 		list_add_tail(&peer->peer_list, &dead_peers);
182 	list_for_each_entry_safe(peer, temp, &dead_peers, peer_list)
183 		peer_remove_after_dead(peer);
188 	struct wg_peer *peer = container_of(rcu, struct wg_peer, rcu);
190 	dst_cache_destroy(&peer->endpoint_cache);
191 	WARN_ON(wg_prev_queue_peek(&peer->tx_queue) || wg_prev_queue_peek(&peer->rx_queue));
196 	memzero_explicit(peer, sizeof(*peer));
197 	kmem_cache_free(peer_cache, peer);
202 	struct wg_peer *peer = container_of(refcount, struct wg_peer, refcount);
205 		 peer->device->dev->name, peer->internal_id,
206 		 &peer->endpoint.addr);
211 	wg_index_hashtable_remove(peer->device->index_hashtable,
212 				  &peer->handshake.entry);
217 	wg_packet_purge_staged_packets(peer);
220 	call_rcu(&peer->rcu, rcu_release);
223 void wg_peer_put(struct wg_peer *peer)
225 	if (unlikely(!peer))
227 	kref_put(&peer->refcount, kref_release);