aboutsummaryrefslogtreecommitdiffstats
path: root/src/rspamd.h
blob: 60613ce0a2b8ff930f8def8ea47ec86707498411 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
/*
 * Copyright 2024 Vsevolod Stakhov
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *    http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#ifndef RSPAMD_MAIN_H
#define RSPAMD_MAIN_H

#include "config.h"
#include "libutil/fstring.h"
#include "libutil/mem_pool.h"
#include "libutil/util.h"
#include "libserver/logger.h"
#include "libserver/http/http_connection.h"
#include "libutil/upstream.h"
#include "libutil/radix.h"
#include "libserver/cfg_file.h"
#include "libserver/url.h"
#include "libserver/protocol.h"
#include "libserver/async_session.h"
#include "libserver/roll_history.h"
#include "libserver/task.h"

#include <openssl/ssl.h>

/* Default values */
#define FIXED_CONFIG_FILE RSPAMD_CONFDIR "/rspamd.conf"
/* Time in seconds to exit for old worker */
#define SOFT_SHUTDOWN_TIME 10

/* Spam subject */
#define SPAM_SUBJECT "*** SPAM *** %s"

#ifdef CRLF
#undef CRLF
#undef CR
#undef LF
#endif

#define CRLF "\r\n"
#define CR '\r'
#define LF '\n'

#ifdef __cplusplus
extern "C" {
#endif

struct rspamd_main;

enum rspamd_worker_flags {
	RSPAMD_WORKER_HAS_SOCKET = (1 << 0),
	RSPAMD_WORKER_UNIQUE = (1 << 1),
	RSPAMD_WORKER_THREADED = (1 << 2),
	RSPAMD_WORKER_KILLABLE = (1 << 3),
	RSPAMD_WORKER_ALWAYS_START = (1 << 4),
	RSPAMD_WORKER_SCANNER = (1 << 5),
	RSPAMD_WORKER_CONTROLLER = (1 << 6),
	RSPAMD_WORKER_NO_TERMINATE_DELAY = (1 << 7),
	RSPAMD_WORKER_OLD_CONFIG = (1 << 8),
	RSPAMD_WORKER_NO_STRICT_CONFIG = (1 << 9),
};

struct rspamd_worker_accept_event {
	ev_io accept_ev;
	ev_timer throttling_ev;
	struct ev_loop *event_loop;
	struct rspamd_worker_accept_event *prev, *next;
};

typedef void (*rspamd_worker_term_cb)(EV_P_ ev_child *, struct rspamd_main *,
									  struct rspamd_worker *);

struct rspamd_worker_heartbeat {
	ev_timer heartbeat_ev; /**< used by main for checking heartbeats and by workers to send heartbeats */
	ev_tstamp last_event;  /**< last heartbeat received timestamp */
	int64_t nbeats;        /**< positive for beats received, negative for beats missed */
};

enum rspamd_worker_state {
	rspamd_worker_state_running = 0,
	rspamd_worker_state_wanna_die,
	rspamd_worker_state_terminating,
	rspamd_worker_wait_connections,
	rspamd_worker_wait_final_scripts,
	rspamd_worker_wanna_die
};

/**
 * Worker process structure
 */
struct rspamd_worker {
	pid_t pid;                                        /**< pid of worker									*/
	pid_t ppid;                                       /**< pid of parent									*/
	unsigned int index;                               /**< index number									*/
	unsigned int nconns;                              /**< current connections count						*/
	enum rspamd_worker_state state;                   /**< current worker state							*/
	gboolean cores_throttled;                         /**< set to true if cores throttling took place		*/
	double start_time;                                /**< start time										*/
	struct rspamd_main *srv;                          /**< pointer to server structure					*/
	GQuark type;                                      /**< process type									*/
	GHashTable *signal_events;                        /**< signal events									*/
	struct rspamd_worker_accept_event *accept_events; /**< socket events				*/
	struct rspamd_worker_conf *cf;                    /**< worker config data								*/
	gpointer ctx;                                     /**< worker's specific data							*/
	int flags;                                        /**< worker's flags (enum rspamd_worker_flags)		*/
	int control_pipe[2];                              /**< control pipe. [0] is used by main process,
	                                                   [1] is used by a worker			*/
	int srv_pipe[2];                                  /**< used by workers to request something from the
	                                     main process. [0] - main, [1] - worker			*/
	ev_io srv_ev;                                     /**< used by main for read workers' requests		*/
	struct rspamd_worker_heartbeat hb;                /**< heartbeat data */
	gpointer control_data;                            /**< used by control protocol to handle commands	*/
	gpointer tmp_data;                                /**< used to avoid race condition to deal with control messages */
	ev_child cld_ev;                                  /**< to allow reaping								*/
	rspamd_worker_term_cb term_handler;               /**< custom term handler						*/
	GHashTable *control_events_pending;               /**< control events pending indexed by ptr		*/
};

struct rspamd_abstract_worker_ctx {
	uint64_t magic;
	/* Events base */
	struct ev_loop *event_loop;
	/* DNS resolver */
	struct rspamd_dns_resolver *resolver;
	/* Config */
	struct rspamd_config *cfg;
	char data[];
};

struct rspamd_worker_signal_handler;

typedef gboolean (*rspamd_worker_signal_cb_t)(
	struct rspamd_worker_signal_handler *, void *ud);

struct rspamd_worker_signal_handler_elt {
	rspamd_worker_signal_cb_t handler;
	void *handler_data;
	struct rspamd_worker_signal_handler_elt *next, *prev;
};

struct rspamd_worker_signal_handler {
	int signo;
	gboolean enabled;
	ev_signal ev_sig;
	struct ev_loop *event_loop;
	struct rspamd_worker *worker;
	struct rspamd_worker_signal_handler_elt *cb;
};

/**
 * Common structure representing C module context
 */
struct module_s;

struct module_ctx {
	int (*filter)(struct rspamd_task *task); /**< pointer to headers process function			*/
	struct module_s *mod;                    /**< module pointer									*/
	gboolean enabled;                        /**< true if module is enabled in configuration		*/
};

#ifndef WITH_HYPERSCAN
#define RSPAMD_FEATURE_HYPERSCAN "0"
#else
#define RSPAMD_FEATURE_HYPERSCAN "1"
#endif
#ifndef WITH_PCRE2
#define RSPAMD_FEATURE_PCRE2 "0"
#else
#define RSPAMD_FEATURE_PCRE2 "1"
#endif
#ifndef WITH_FANN
#define RSPAMD_FEATURE_FANN "0"
#else
#define RSPAMD_FEATURE_FANN "1"
#endif
#ifndef WITH_SNOWBALL
#define RSPAMD_FEATURE_SNOWBALL "0"
#else
#define RSPAMD_FEATURE_SNOWBALL "1"
#endif

#define RSPAMD_CUR_MODULE_VERSION 0x1
#define RSPAMD_CUR_WORKER_VERSION 0x2

#define RSPAMD_FEATURES                           \
	RSPAMD_FEATURE_HYPERSCAN RSPAMD_FEATURE_PCRE2 \
		RSPAMD_FEATURE_FANN RSPAMD_FEATURE_SNOWBALL

#define RSPAMD_MODULE_VER                           \
	RSPAMD_CUR_MODULE_VERSION, /* Module version */ \
		RSPAMD_VERSION_NUM,    /* Rspamd version */ \
		RSPAMD_FEATURES        /* Compilation features */

#define RSPAMD_WORKER_VER                                               \
	RSPAMD_CUR_WORKER_VERSION,                     /* Worker version */ \
		RSPAMD_VERSION_NUM,                        /* Rspamd version */ \
		RSPAMD_FEATURES /* Compilation features */ /**
 * Module
 */
typedef struct module_s {
	const char *name;

	int (*module_init_func)(struct rspamd_config *cfg, struct module_ctx **ctx);

	int (*module_config_func)(struct rspamd_config *cfg, bool validate);

	int (*module_reconfig_func)(struct rspamd_config *cfg);

	int (*module_attach_controller_func)(struct module_ctx *ctx,
										 GHashTable *custom_commands);

	unsigned int module_version;
	uint64_t rspamd_version;
	const char *rspamd_features;
	unsigned int ctx_offset;
} module_t;

enum rspamd_worker_socket_type {
	RSPAMD_WORKER_SOCKET_NONE = 0,
	RSPAMD_WORKER_SOCKET_TCP = (1 << 0),
	RSPAMD_WORKER_SOCKET_UDP = (1 << 1),
};

struct rspamd_worker_listen_socket {
	const rspamd_inet_addr_t *addr;
	int fd;
	enum rspamd_worker_socket_type type;
	bool is_systemd;
};

typedef struct worker_s {
	const char *name;

	gpointer (*worker_init_func)(struct rspamd_config *cfg);

	void (*worker_start_func)(struct rspamd_worker *worker);

	int flags;
	int listen_type;
	unsigned int worker_version;
	uint64_t rspamd_version;
	const char *rspamd_features;
} worker_t;

/**
 * Check if loaded worker is compatible with rspamd
 * @param cfg
 * @param wrk
 * @return
 */
gboolean rspamd_check_worker(struct rspamd_config *cfg, worker_t *wrk);

/**
 * Check if loaded module is compatible with rspamd
 * @param cfg
 * @param wrk
 * @return
 */
gboolean rspamd_check_module(struct rspamd_config *cfg, module_t *wrk);

struct pidfh;
struct rspamd_config;
struct tokenizer;
struct rspamd_stat_classifier;
struct rspamd_classifier_config;
struct rspamd_mime_part;
struct rspamd_dns_resolver;
struct rspamd_task;
struct rspamd_cryptobox_library_ctx;

#define MAX_AVG_TIME_SLOTS 31
struct RSPAMD_ALIGNED(64) rspamd_avg_time {
	uint32_t cur_slot;
	float avg_time[MAX_AVG_TIME_SLOTS];
};
/**
 * Server statistics
 */
struct RSPAMD_ALIGNED(64) rspamd_stat {
	unsigned int messages_scanned;                /**< total number of messages scanned				*/
	unsigned int actions_stat[METRIC_ACTION_MAX]; /**< statistic for each action						*/
	unsigned int connections_count;               /**< total connections count						*/
	unsigned int control_connections_count;       /**< connections count to control interface			*/
	unsigned int messages_learned;                /**< messages learned								*/
	struct rspamd_avg_time avg_time;              /**< average time stats								*/
};

/**
 * Struct that determine main server object (for logging purposes)
 */
struct rspamd_main {
	struct rspamd_config *cfg; /**< pointer to config structure					*/
	pid_t pid;                 /**< main pid										*/
	/* Pid file structure */
	rspamd_pidfh_t *pfh;      /**< struct pidfh for pidfile						*/
	GQuark type;              /**< process type									*/
	struct rspamd_stat *stat; /**< pointer to statistics							*/

	rspamd_mempool_t *server_pool;     /**< server's memory pool							*/
	rspamd_mempool_mutex_t *start_mtx; /**< server is starting up							*/
	GHashTable *workers;               /**< workers pool indexed by pid                    */
	GHashTable *spairs;                /**< socket pairs requested by workers				*/
	rspamd_logger_t *logger;
	uid_t workers_uid;            /**< worker's uid running to                        */
	gid_t workers_gid;            /**< worker's gid running to						*/
	gboolean is_privileged;       /**< true if run in privileged mode                 */
	gboolean wanna_die;           /**< no respawn of processes						*/
	gboolean cores_throttling;    /**< turn off cores when limits are exceeded		*/
	struct roll_history *history; /**< rolling history								*/
	struct ev_loop *event_loop;
	ev_signal term_ev, int_ev, hup_ev, usr1_ev; /**< signals 										*/
	struct rspamd_http_context *http_ctx;
};

/**
 * Control session object
 */
struct controller_command;
struct controller_session;

typedef gboolean (*controller_func_t)(char **args,
									  struct controller_session *session);

struct controller_session {
	struct rspamd_worker *worker;         /**< pointer to worker structure (controller in fact) */
	int sock;                             /**< socket descriptor								*/
	struct controller_command *cmd;       /**< real command									*/
	struct rspamd_config *cfg;            /**< pointer to config file							*/
	GList *parts;                         /**< extracted mime parts							*/
	struct rspamd_async_session *s;       /**< async session object							*/
	struct rspamd_dns_resolver *resolver; /**< DNS resolver									*/
	struct ev_loop *ev_base;              /**< Event base										*/
};

struct zstd_dictionary {
	void *dict;
	gsize size;
	unsigned int id;
};

struct rspamd_external_libs_ctx {
	void **local_addrs;
	struct rspamd_cryptobox_library_ctx *crypto_ctx;
	struct ottery_config *ottery_cfg;
	void *ssl_ctx;
	void *ssl_ctx_noverify;
	struct zstd_dictionary *in_dict;
	struct zstd_dictionary *out_dict;
	void *out_zstream;
	void *in_zstream;
	ref_entry_t ref;
};


/**
 * Register custom controller function
 */
void register_custom_controller_command(const char *name,
										controller_func_t handler,
										gboolean privileged,
										gboolean require_message);

#ifdef __cplusplus
}
#endif

#endif