2 #ifndef __DNSCRYPT_PROXY_H__
3 #define __DNSCRYPT_PROXY_H__ 1
10 #include <event2/event.h>
11 #include <event2/listener.h>
16 #include "dnscrypt_client.h"
19 #ifndef DNS_QUERY_TIMEOUT
20 # define DNS_QUERY_TIMEOUT 10
23 #define DNS_MAX_PACKET_SIZE_UDP_RECV (65536U - 20U - 8U)
24 #define DNS_MAX_PACKET_SIZE_UDP_NO_EDNS_SEND 512U
26 #if DNS_MAX_PACKET_SIZE_UDP_RECV > DNS_MAX_PACKET_SIZE_UDP_NO_EDNS_SEND
27 # define DNS_MAX_PACKET_SIZE_UDP DNS_MAX_PACKET_SIZE_UDP_RECV
29 # define DNS_MAX_PACKET_SIZE_UDP DNS_MAX_PACKET_SIZE_UDP_NO_EDNS_SEND
32 #ifndef DNS_DEFAULT_STANDARD_DNS_PORT
33 # define DNS_DEFAULT_STANDARD_DNS_PORT "53"
35 #ifndef DNS_DEFAULT_LOCAL_PORT
36 # define DNS_DEFAULT_LOCAL_PORT DNS_DEFAULT_STANDARD_DNS_PORT
38 #ifndef DNS_DEFAULT_RESOLVER_PORT
39 # define DNS_DEFAULT_RESOLVER_PORT "443"
42 #ifndef DEFAULT_RESOLVERS_LIST
44 # define DEFAULT_RESOLVERS_LIST "dnscrypt-resolvers.csv"
46 # define DEFAULT_RESOLVERS_LIST PKGDATADIR "/dnscrypt-resolvers.csv"
50 #ifndef DEFAULT_RESOLVER_NAME
51 # define DEFAULT_RESOLVER_NAME NULL
54 #define DNS_HEADER_SIZE 12U
55 #define DNS_FLAGS_TC 2U
56 #define DNS_FLAGS_QR 128U
57 #define DNS_FLAGS2_RA 128U
59 #define DNS_CLASS_IN 1U
60 #define DNS_TYPE_TXT 16U
61 #define DNS_TYPE_OPT 41U
63 #define DNS_OFFSET_QUESTION DNS_HEADER_SIZE
64 #define DNS_OFFSET_FLAGS 2U
65 #define DNS_OFFSET_FLAGS2 3U
66 #define DNS_OFFSET_QDCOUNT 4U
67 #define DNS_OFFSET_ANCOUNT 6U
68 #define DNS_OFFSET_NSCOUNT 8U
69 #define DNS_OFFSET_ARCOUNT 10U
71 #define DNS_OFFSET_EDNS_TYPE 0U
72 #define DNS_OFFSET_EDNS_PAYLOAD_SIZE 2U
74 #define DNS_DEFAULT_EDNS_PAYLOAD_SIZE 1252U
76 #define DNSCRYPT_PROTOCOL_VERSIONS "2"
78 #define DNSCRYPT_EXIT_CERT_NOCERTS 2
79 #define DNSCRYPT_EXIT_CERT_TIMEOUT 3
80 #define DNSCRYPT_EXIT_CERT_MARGIN 4
82 typedef TAILQ_HEAD(TCPRequestQueue_
, TCPRequest_
) TCPRequestQueue
;
83 typedef TAILQ_HEAD(UDPRequestQueue_
, UDPRequest_
) UDPRequestQueue
;
85 typedef struct ProxyContext_
{
86 uint8_t dnscrypt_magic_query
[DNSCRYPT_MAGIC_QUERY_LEN
];
87 uint8_t provider_publickey
[crypto_sign_ed25519_PUBLICKEYBYTES
];
88 uint8_t resolver_publickey
[crypto_box_PUBLICKEYBYTES
];
89 DNSCryptClient dnscrypt_client
;
90 CertUpdater cert_updater
;
91 struct sockaddr_storage local_sockaddr
;
92 struct sockaddr_storage resolver_sockaddr
;
93 TCPRequestQueue tcp_request_queue
;
94 UDPRequestQueue udp_request_queue
;
95 AppContext
*app_context
;
96 struct event_base
*event_loop
;
100 const char *provider_name
;
101 const char *provider_publickey_s
;
102 const char *resolvers_list
;
103 const char *resolver_name
;
104 const char *resolver_ip
;
105 struct evconnlistener
*tcp_conn_listener
;
106 struct event
*tcp_accept_timer
;
107 struct event
*udp_listener_event
;
108 struct event
*udp_proxy_resolver_event
;
110 ev_socklen_t local_sockaddr_len
;
111 ev_socklen_t resolver_sockaddr_len
;
112 size_t edns_payload_size
;
113 size_t udp_current_max_size
;
115 evutil_socket_t udp_listener_handle
;
116 evutil_socket_t udp_proxy_resolver_handle
;
121 time_t test_cert_margin
;
122 unsigned int connections_count
;
123 unsigned int connections_count_max
;
127 _Bool listeners_started
;
132 int dnscrypt_proxy_start_listeners(ProxyContext
* const proxy_context
);