cunicu/pkg/link/link_bsd.go

// SPDX-FileCopyrightText: 2023-2025 Steffen Vogel <post@steffenvogel.de>
// SPDX-License-Identifier: Apache-2.0

//go:build darwin || freebsd

package link

import (
	"errors"
	"fmt"
	"net"
	"os/exec"
	"regexp"
	"strconv"
	"strings"

	"go.uber.org/zap"

	"cunicu.li/cunicu/pkg/log"
)

var (
	errInvalidCommandOutput = errors.New("invalid command output")
	errFailedToExecute      = errors.New("failed to run")
)

var _ Link = (*BSDLink)(nil)

type BSDLink struct {
	created bool
	index   int
	logger  *log.Logger
}

func CreateWireGuardLink(name string) (*BSDLink, error) {
	if _, err := run("ifconfig", "wg", "create", "name", name); err != nil {
		return nil, err
	}

	return FindLink(name)
}

func FindLink(name string) (*BSDLink, error) {
	i, err := net.InterfaceByName(name)
	if err != nil {
		return nil, err
	}

	return &BSDLink{
		created: false,
		index:   i.Index,
		logger: log.Global.Named("dev").With(
			zap.String("dev", name),
			zap.String("type", "kernel")),
	}, nil
}

func (d *BSDLink) Name() string {
	i, err := net.InterfaceByIndex(d.index)
	if err != nil {
		panic(err)
	}

	return i.Name
}

func (d *BSDLink) Close() error {
	d.logger.Debug("Deleting kernel device")

	if _, err := run("ifconfig", d.Name(), "destroy"); err != nil {
		return err
	}

	return nil
}

func (d *BSDLink) AddAddress(ip net.IPNet) error {
	d.logger.Debug("Add address", zap.String("addr", ip.String()))

	args := []string{"ifconfig", d.Name(), addressFamily(ip), ip.String()}

	if isV4 := ip.IP.To4() != nil; isV4 {
		// Darwins utun interfaces are L3 point-to-point BSDLinks
		// which require a destination address for IPv4
		if d.Flags()&net.FlagPointToPoint != 0 {
			args = append(args, ip.IP.String())
		}
	}

	args = append(args, "alias")
	if _, err := run(args...); err != nil {
		return err
	}

	return nil
}

func (d *BSDLink) DeleteAddress(ip net.IPNet) error {
	d.logger.Debug("Delete address", zap.String("addr", ip.String()))

	if _, err := run("ifconfig", d.Name(), addressFamily(ip), ip.String(), "-alias"); err != nil {
		return err
	}

	return nil
}

func (d *BSDLink) Index() int {
	return d.index
}

func (d *BSDLink) Flags() net.Flags {
	i, err := net.InterfaceByIndex(d.index)
	if err != nil {
		panic(err)
	}

	return i.Flags
}

func (d *BSDLink) Type() string {
	return "" // TODO: Is this supported?
}

var mtuRegex = regexp.MustCompile(`(?m)mtu (\d+)`)

func (d *BSDLink) MTU() int {
	out, err := run("ifconfig", d.Name())
	if err != nil {
		panic(err)
	}

	mtuStrs := mtuRegex.FindStringSubmatch(out)
	if len(mtuStrs) < 2 {
		panic("no MTU found")
	}

	mtu, err := strconv.Atoi(mtuStrs[1])
	if err != nil {
		panic(err)
	}

	return mtu
}

func (d *BSDLink) SetMTU(mtu int) error {
	d.logger.Debug("Set link MTU", zap.Int("mtu", mtu))

	if _, err := run("ifconfig", d.Name(), "mtu", strconv.Itoa(mtu)); err != nil {
		return err
	}

	return nil
}

func (d *BSDLink) SetUp() error {
	d.logger.Debug("Set link up")

	i, err := net.InterfaceByIndex(d.index)
	if err != nil {
		return err
	}

	if _, err = run("ifconfig", i.Name, "up"); err != nil {
		return err
	}

	return nil
}

func (d *BSDLink) SetDown() error {
	d.logger.Debug("Set link down")

	i, err := net.InterfaceByIndex(d.index)
	if err != nil {
		return err
	}

	if _, err = run("ifconfig", i.Name, "down"); err != nil {
		return err
	}

	return nil
}

func Table(str string) (int, error) {
	i, err := strconv.Atoi(str)
	if err != nil {
		return -1, err
	}

	return i, nil
}

func DetectMTU(ip net.IP, _ int) (int, error) {
	return getRouteMTU(ip)
}

func DetectDefaultMTU(_ int) (int, error) {
	return getRouteMTU(nil)
}

func getRouteMTU(ip net.IP) (int, error) {
	netw := "default"
	if ip != nil {
		netw = ip.String()
	}

	out, err := run("route", "get", netw)
	if err != nil {
		return -1, fmt.Errorf("failed to lookup route: %w", err)
	}

	out = strings.TrimSpace(out)
	lines := strings.Split(out, "\n")
	lastLine := lines[len(lines)-1]
	fields := strings.Fields(lastLine)

	if len(fields) < 7 {
		return -1, fmt.Errorf("%w: %s", errInvalidCommandOutput, lastLine)
	}

	return strconv.Atoi(fields[6])
}

func run(args ...string) (string, error) {
	cmd := exec.Command(args[0], args[1:]...) //nolint:gosec

	out, err := cmd.CombinedOutput()
	if err != nil {
		return "", fmt.Errorf("%w: %s\n%s", errFailedToExecute, strings.Join(args, " "), string(out))
	}

	return string(out), nil
}

func addressFamily(ip net.IPNet) string {
	isV4 := ip.IP.To4() != nil
	if isV4 {
		return "inet"
	}

	return "inet6"
}