net/wireguard/timers.c

8 #include "peer.h"
30 static inline void mod_peer_timer(struct wg_peer *peer,
35 	if (likely(netif_running(peer->device->dev) &&
36 		   !READ_ONCE(peer->is_dead)))
43 	struct wg_peer *peer = from_timer(peer, timer,
46 	if (peer->timer_handshake_attempts > MAX_TIMER_HANDSHAKES) {
47 		pr_debug("%s: Handshake for peer %llu (%pISpfsc) did not complete after %d attempts, giving up\n",
48 			 peer->device->dev->name, peer->internal_id,
49 			 &peer->endpoint.addr, (int)MAX_TIMER_HANDSHAKES + 2);
51 		del_timer(&peer->timer_send_keepalive);
55 		wg_packet_purge_staged_packets(peer);
60 		if (!timer_pending(&peer->timer_zero_key_material))
61 			mod_peer_timer(peer, &peer->timer_zero_key_material,
64 		++peer->timer_handshake_attempts;
65 		pr_debug("%s: Handshake for peer %llu (%pISpfsc) did not complete after %d seconds, retrying (try %d)\n",
66 			 peer->device->dev->name, peer->internal_id,
67 			 &peer->endpoint.addr, (int)REKEY_TIMEOUT,
68 			 peer->timer_handshake_attempts + 1);
73 		wg_socket_clear_peer_endpoint_src(peer);
75 		wg_packet_send_queued_handshake_initiation(peer, true);
81 	struct wg_peer *peer = from_timer(peer, timer, timer_send_keepalive);
83 	wg_packet_send_keepalive(peer);
84 	if (peer->timer_need_another_keepalive) {
85 		peer->timer_need_another_keepalive = false;
86 		mod_peer_timer(peer, &peer->timer_send_keepalive,
93 	struct wg_peer *peer = from_timer(peer, timer, timer_new_handshake);
95 	pr_debug("%s: Retrying handshake with peer %llu (%pISpfsc) because we stopped hearing back after %d seconds\n",
96 		 peer->device->dev->name, peer->internal_id,
97 		 &peer->endpoint.addr, (int)(KEEPALIVE_TIMEOUT + REKEY_TIMEOUT));
101 	wg_socket_clear_peer_endpoint_src(peer);
102 	wg_packet_send_queued_handshake_initiation(peer, false);
107 	struct wg_peer *peer = from_timer(peer, timer, timer_zero_key_material);
110 	if (!READ_ONCE(peer->is_dead)) {
111 		wg_peer_get(peer);
112 		if (!queue_work(peer->device->handshake_send_wq,
113 				&peer->clear_peer_work))
117 			wg_peer_put(peer);
124 	struct wg_peer *peer = container_of(work, struct wg_peer,
127 	pr_debug("%s: Zeroing out all keys for peer %llu (%pISpfsc), since we haven't received a new one in %d seconds\n",
128 		 peer->device->dev->name, peer->internal_id,
129 		 &peer->endpoint.addr, (int)REJECT_AFTER_TIME * 3);
130 	wg_noise_handshake_clear(&peer->handshake);
131 	wg_noise_keypairs_clear(&peer->keypairs);
132 	wg_peer_put(peer);
137 	struct wg_peer *peer = from_timer(peer, timer,
140 	if (likely(peer->persistent_keepalive_interval))
141 		wg_packet_send_keepalive(peer);
145 void wg_timers_data_sent(struct wg_peer *peer)
147 	if (!timer_pending(&peer->timer_new_handshake))
148 		mod_peer_timer(peer, &peer->timer_new_handshake,
154 void wg_timers_data_received(struct wg_peer *peer)
156 	if (likely(netif_running(peer->device->dev))) {
157 		if (!timer_pending(&peer->timer_send_keepalive))
158 			mod_peer_timer(peer, &peer->timer_send_keepalive,
161 			peer->timer_need_another_keepalive = true;
168 void wg_timers_any_authenticated_packet_sent(struct wg_peer *peer)
170 	del_timer(&peer->timer_send_keepalive);
176 void wg_timers_any_authenticated_packet_received(struct wg_peer *peer)
178 	del_timer(&peer->timer_new_handshake);
182 void wg_timers_handshake_initiated(struct wg_peer *peer)
184 	mod_peer_timer(peer, &peer->timer_retransmit_handshake,
192 void wg_timers_handshake_complete(struct wg_peer *peer)
194 	del_timer(&peer->timer_retransmit_handshake);
195 	peer->timer_handshake_attempts = 0;
196 	peer->sent_lastminute_handshake = false;
197 	ktime_get_real_ts64(&peer->walltime_last_handshake);
203 void wg_timers_session_derived(struct wg_peer *peer)
205 	mod_peer_timer(peer, &peer->timer_zero_key_material,
212 void wg_timers_any_authenticated_packet_traversal(struct wg_peer *peer)
214 	if (peer->persistent_keepalive_interval)
215 		mod_peer_timer(peer, &peer->timer_persistent_keepalive,
216 			jiffies + peer->persistent_keepalive_interval * HZ);
219 void wg_timers_init(struct wg_peer *peer)
221 	timer_setup(&peer->timer_retransmit_handshake,
223 	timer_setup(&peer->timer_send_keepalive, wg_expired_send_keepalive, 0);
224 	timer_setup(&peer->timer_new_handshake, wg_expired_new_handshake, 0);
225 	timer_setup(&peer->timer_zero_key_material,
227 	timer_setup(&peer->timer_persistent_keepalive,
229 	INIT_WORK(&peer->clear_peer_work, wg_queued_expired_zero_key_material);
230 	peer->timer_handshake_attempts = 0;
231 	peer->sent_lastminute_handshake = false;
232 	peer->timer_need_another_keepalive = false;
235 void wg_timers_stop(struct wg_peer *peer)
237 	timer_delete_sync(&peer->timer_retransmit_handshake);
238 	timer_delete_sync(&peer->timer_send_keepalive);
239 	timer_delete_sync(&peer->timer_new_handshake);
240 	timer_delete_sync(&peer->timer_zero_key_material);
241 	timer_delete_sync(&peer->timer_persistent_keepalive);
242 	flush_work(&peer->clear_peer_work);