You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

rspamd.h 12KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394
  1. /*-
  2. * Copyright 2016-2017 Vsevolod Stakhov
  3. *
  4. * Licensed under the Apache License, Version 2.0 (the "License");
  5. * you may not use this file except in compliance with the License.
  6. * You may obtain a copy of the License at
  7. *
  8. * http://www.apache.org/licenses/LICENSE-2.0
  9. *
  10. * Unless required by applicable law or agreed to in writing, software
  11. * distributed under the License is distributed on an "AS IS" BASIS,
  12. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13. * See the License for the specific language governing permissions and
  14. * limitations under the License.
  15. */
  16. #ifndef RSPAMD_MAIN_H
  17. #define RSPAMD_MAIN_H
  18. #include "config.h"
  19. #include "libutil/fstring.h"
  20. #include "libutil/mem_pool.h"
  21. #include "libutil/util.h"
  22. #include "libutil/logger.h"
  23. #include "libutil/http_connection.h"
  24. #include "libutil/upstream.h"
  25. #include "libutil/radix.h"
  26. #include "libserver/cfg_file.h"
  27. #include "libserver/url.h"
  28. #include "libserver/protocol.h"
  29. #include "libserver/async_session.h"
  30. #include "libserver/roll_history.h"
  31. #include "libserver/task.h"
  32. #include <openssl/ssl.h>
  33. /* Default values */
  34. #define FIXED_CONFIG_FILE RSPAMD_CONFDIR "/rspamd.conf"
  35. /* Time in seconds to exit for old worker */
  36. #define SOFT_SHUTDOWN_TIME 10
  37. /* Spam subject */
  38. #define SPAM_SUBJECT "*** SPAM *** %s"
  39. #ifdef CRLF
  40. #undef CRLF
  41. #undef CR
  42. #undef LF
  43. #endif
  44. #define CRLF "\r\n"
  45. #define CR '\r'
  46. #define LF '\n'
  47. #ifdef __cplusplus
  48. extern "C" {
  49. #endif
  50. enum rspamd_worker_flags {
  51. RSPAMD_WORKER_HAS_SOCKET = (1 << 0),
  52. RSPAMD_WORKER_UNIQUE = (1 << 1),
  53. RSPAMD_WORKER_THREADED = (1 << 2),
  54. RSPAMD_WORKER_KILLABLE = (1 << 3),
  55. RSPAMD_WORKER_ALWAYS_START = (1 << 4),
  56. RSPAMD_WORKER_SCANNER = (1 << 5),
  57. RSPAMD_WORKER_CONTROLLER = (1 << 6),
  58. };
  59. struct rspamd_worker_accept_event {
  60. ev_io accept_ev;
  61. ev_timer throttling_ev;
  62. struct ev_loop *event_loop;
  63. struct rspamd_worker_accept_event *prev, *next;
  64. };
  65. typedef void (*rspamd_worker_term_cb) (EV_P_ ev_child *, struct rspamd_main *,
  66. struct rspamd_worker *);
  67. struct rspamd_worker_heartbeat {
  68. ev_timer heartbeat_ev; /**< used by main for checking heartbeats and by workers to send heartbeats */
  69. ev_tstamp last_event; /**< last heartbeat received timestamp */
  70. gint64 nbeats; /**< positive for beats received, negative for beats missed */
  71. };
  72. /**
  73. * Worker process structure
  74. */
  75. struct rspamd_worker {
  76. pid_t pid; /**< pid of worker */
  77. pid_t ppid; /**< pid of parent */
  78. guint index; /**< index number */
  79. guint nconns; /**< current connections count */
  80. gboolean wanna_die; /**< worker is terminating */
  81. gboolean cores_throttled; /**< set to true if cores throttling took place */
  82. gdouble start_time; /**< start time */
  83. struct rspamd_main *srv; /**< pointer to server structure */
  84. GQuark type; /**< process type */
  85. GHashTable *signal_events; /**< signal events */
  86. struct rspamd_worker_accept_event *accept_events; /**< socket events */
  87. struct rspamd_worker_conf *cf; /**< worker config data */
  88. gpointer ctx; /**< worker's specific data */
  89. enum rspamd_worker_flags flags; /**< worker's flags */
  90. gint control_pipe[2]; /**< control pipe. [0] is used by main process,
  91. [1] is used by a worker */
  92. gint srv_pipe[2]; /**< used by workers to request something from the
  93. main process. [0] - main, [1] - worker */
  94. ev_io srv_ev; /**< used by main for read workers' requests */
  95. struct rspamd_worker_heartbeat hb; /**< heartbeat data */
  96. gpointer control_data; /**< used by control protocol to handle commands */
  97. gpointer tmp_data; /**< used to avoid race condition to deal with control messages */
  98. GPtrArray *finish_actions; /**< called when worker is terminated */
  99. ev_child cld_ev; /**< to allow reaping */
  100. rspamd_worker_term_cb term_handler; /**< custom term handler */
  101. };
  102. struct rspamd_abstract_worker_ctx {
  103. guint64 magic;
  104. /* Events base */
  105. struct ev_loop *event_loop;
  106. /* DNS resolver */
  107. struct rspamd_dns_resolver *resolver;
  108. /* Config */
  109. struct rspamd_config *cfg;
  110. char data[];
  111. };
  112. struct rspamd_worker_signal_handler;
  113. typedef gboolean (*rspamd_worker_signal_cb_t) (
  114. struct rspamd_worker_signal_handler *, void *ud);
  115. struct rspamd_worker_signal_handler_elt {
  116. rspamd_worker_signal_cb_t handler;
  117. void *handler_data;
  118. struct rspamd_worker_signal_handler_elt *next, *prev;
  119. };
  120. struct rspamd_worker_signal_handler {
  121. gint signo;
  122. gboolean enabled;
  123. ev_signal ev_sig;
  124. struct ev_loop *event_loop;
  125. struct rspamd_worker *worker;
  126. struct rspamd_worker_signal_handler_elt *cb;
  127. };
  128. struct rspamd_controller_pbkdf {
  129. const char *name;
  130. const char *alias;
  131. const char *description;
  132. enum rspamd_cryptobox_pbkdf_type type;
  133. gint id;
  134. guint complexity;
  135. gsize salt_len;
  136. gsize key_len;
  137. };
  138. /**
  139. * Common structure representing C module context
  140. */
  141. struct module_s;
  142. struct module_ctx {
  143. gint (*filter) (struct rspamd_task *task); /**< pointer to headers process function */
  144. struct module_s *mod; /**< module pointer */
  145. gboolean enabled; /**< true if module is enabled in configuration */
  146. };
  147. #ifndef WITH_HYPERSCAN
  148. #define RSPAMD_FEATURE_HYPERSCAN "0"
  149. #else
  150. #define RSPAMD_FEATURE_HYPERSCAN "1"
  151. #endif
  152. #ifndef WITH_PCRE2
  153. #define RSPAMD_FEATURE_PCRE2 "0"
  154. #else
  155. #define RSPAMD_FEATURE_PCRE2 "1"
  156. #endif
  157. #ifndef WITH_FANN
  158. #define RSPAMD_FEATURE_FANN "0"
  159. #else
  160. #define RSPAMD_FEATURE_FANN "1"
  161. #endif
  162. #ifndef WITH_SNOWBALL
  163. #define RSPAMD_FEATURE_SNOWBALL "0"
  164. #else
  165. #define RSPAMD_FEATURE_SNOWBALL "1"
  166. #endif
  167. #define RSPAMD_CUR_MODULE_VERSION 0x1
  168. #define RSPAMD_CUR_WORKER_VERSION 0x2
  169. #define RSPAMD_FEATURES \
  170. RSPAMD_FEATURE_HYPERSCAN RSPAMD_FEATURE_PCRE2 \
  171. RSPAMD_FEATURE_FANN RSPAMD_FEATURE_SNOWBALL
  172. #define RSPAMD_MODULE_VER \
  173. RSPAMD_CUR_MODULE_VERSION, /* Module version */ \
  174. RSPAMD_VERSION_NUM, /* Rspamd version */ \
  175. RSPAMD_FEATURES /* Compilation features */ \
  176. #define RSPAMD_WORKER_VER \
  177. RSPAMD_CUR_WORKER_VERSION, /* Worker version */ \
  178. RSPAMD_VERSION_NUM, /* Rspamd version */ \
  179. RSPAMD_FEATURES /* Compilation features */ \
  180. /**
  181. * Module
  182. */
  183. typedef struct module_s {
  184. const gchar *name;
  185. int (*module_init_func) (struct rspamd_config *cfg, struct module_ctx **ctx);
  186. int (*module_config_func) (struct rspamd_config *cfg);
  187. int (*module_reconfig_func) (struct rspamd_config *cfg);
  188. int (*module_attach_controller_func) (struct module_ctx *ctx,
  189. GHashTable *custom_commands);
  190. guint module_version;
  191. guint64 rspamd_version;
  192. const gchar *rspamd_features;
  193. guint ctx_offset;
  194. } module_t;
  195. enum rspamd_worker_socket_type {
  196. RSPAMD_WORKER_SOCKET_NONE = 0,
  197. RSPAMD_WORKER_SOCKET_TCP = (1 << 0),
  198. RSPAMD_WORKER_SOCKET_UDP = (1 << 1),
  199. };
  200. struct rspamd_worker_listen_socket {
  201. const rspamd_inet_addr_t *addr;
  202. gint fd;
  203. enum rspamd_worker_socket_type type;
  204. };
  205. typedef struct worker_s {
  206. const gchar *name;
  207. gpointer (*worker_init_func) (struct rspamd_config *cfg);
  208. void (*worker_start_func) (struct rspamd_worker *worker);
  209. int flags;
  210. int listen_type;
  211. guint worker_version;
  212. guint64 rspamd_version;
  213. const gchar *rspamd_features;
  214. } worker_t;
  215. /**
  216. * Check if loaded worker is compatible with rspamd
  217. * @param cfg
  218. * @param wrk
  219. * @return
  220. */
  221. gboolean rspamd_check_worker (struct rspamd_config *cfg, worker_t *wrk);
  222. /**
  223. * Check if loaded module is compatible with rspamd
  224. * @param cfg
  225. * @param wrk
  226. * @return
  227. */
  228. gboolean rspamd_check_module (struct rspamd_config *cfg, module_t *wrk);
  229. struct pidfh;
  230. struct rspamd_config;
  231. struct tokenizer;
  232. struct rspamd_stat_classifier;
  233. struct rspamd_classifier_config;
  234. struct rspamd_mime_part;
  235. struct rspamd_dns_resolver;
  236. struct rspamd_task;
  237. struct rspamd_cryptobox_library_ctx;
  238. /**
  239. * Server statistics
  240. */
  241. struct rspamd_stat {
  242. guint messages_scanned; /**< total number of messages scanned */
  243. guint actions_stat[METRIC_ACTION_MAX]; /**< statistic for each action */
  244. guint connections_count; /**< total connections count */
  245. guint control_connections_count; /**< connections count to control interface */
  246. guint messages_learned; /**< messages learned */
  247. };
  248. /**
  249. * Struct that determine main server object (for logging purposes)
  250. */
  251. struct rspamd_main {
  252. struct rspamd_config *cfg; /**< pointer to config structure */
  253. pid_t pid; /**< main pid */
  254. /* Pid file structure */
  255. rspamd_pidfh_t *pfh; /**< struct pidfh for pidfile */
  256. GQuark type; /**< process type */
  257. struct rspamd_stat *stat; /**< pointer to statistics */
  258. rspamd_mempool_t *server_pool; /**< server's memory pool */
  259. rspamd_mempool_mutex_t *start_mtx; /**< server is starting up */
  260. GHashTable *workers; /**< workers pool indexed by pid */
  261. GHashTable *spairs; /**< socket pairs requested by workers */
  262. rspamd_logger_t *logger;
  263. uid_t workers_uid; /**< worker's uid running to */
  264. gid_t workers_gid; /**< worker's gid running to */
  265. gboolean is_privilleged; /**< true if run in privilleged mode */
  266. gboolean wanna_die; /**< no respawn of processes */
  267. gboolean cores_throttling; /**< turn off cores when limits are exceeded */
  268. struct roll_history *history; /**< rolling history */
  269. struct ev_loop *event_loop;
  270. ev_signal term_ev, int_ev, hup_ev, usr1_ev; /**< signals */
  271. struct rspamd_http_context *http_ctx;
  272. };
  273. enum rspamd_exception_type {
  274. RSPAMD_EXCEPTION_NEWLINE = 0,
  275. RSPAMD_EXCEPTION_URL,
  276. RSPAMD_EXCEPTION_GENERIC,
  277. };
  278. /**
  279. * Structure to point exception in text from processing
  280. */
  281. struct rspamd_process_exception {
  282. goffset pos;
  283. guint len;
  284. gpointer ptr;
  285. enum rspamd_exception_type type;
  286. };
  287. /**
  288. * Control session object
  289. */
  290. struct controller_command;
  291. struct controller_session;
  292. typedef gboolean (*controller_func_t) (gchar **args,
  293. struct controller_session *session);
  294. struct controller_session {
  295. struct rspamd_worker *worker; /**< pointer to worker structure (controller in fact) */
  296. gint sock; /**< socket descriptor */
  297. struct controller_command *cmd; /**< real command */
  298. struct rspamd_config *cfg; /**< pointer to config file */
  299. GList *parts; /**< extracted mime parts */
  300. struct rspamd_async_session *s; /**< async session object */
  301. struct rspamd_dns_resolver *resolver; /**< DNS resolver */
  302. struct ev_loop *ev_base; /**< Event base */
  303. };
  304. struct zstd_dictionary {
  305. void *dict;
  306. gsize size;
  307. guint id;
  308. };
  309. struct rspamd_radix_map_helper;
  310. struct rspamd_external_libs_ctx {
  311. struct rspamd_radix_map_helper **local_addrs;
  312. struct rspamd_cryptobox_library_ctx *crypto_ctx;
  313. struct ottery_config *ottery_cfg;
  314. SSL_CTX *ssl_ctx;
  315. SSL_CTX *ssl_ctx_noverify;
  316. struct zstd_dictionary *in_dict;
  317. struct zstd_dictionary *out_dict;
  318. void *out_zstream;
  319. void *in_zstream;
  320. ref_entry_t ref;
  321. };
  322. /**
  323. * Register custom controller function
  324. */
  325. void register_custom_controller_command (const gchar *name,
  326. controller_func_t handler,
  327. gboolean privilleged,
  328. gboolean require_message);
  329. enum rspamd_pbkdf_version_id {
  330. RSPAMD_PBKDF_ID_V1 = 1,
  331. RSPAMD_PBKDF_ID_V2 = 2,
  332. RSPAMD_PBKDF_ID_MAX
  333. };
  334. extern const struct rspamd_controller_pbkdf pbkdf_list[];
  335. #ifdef __cplusplus
  336. }
  337. #endif
  338. #endif