mirror of
https://github.com/moby/moby.git
synced 2026-08-09 01:21:37 +00:00
7c52c4d92e
Go maintainers started to unconditionally update the minimum go version for golang.org/x/ dependencies to go1.23, which means that we'll no longer be able to support any version below that when updating those dependencies; > all: upgrade go directive to at least 1.23.0 [generated] > > By now Go 1.24.0 has been released, and Go 1.22 is no longer supported > per the Go Release Policy (https://go.dev/doc/devel/release#policy). > > For golang/go#69095. This updates our minimum version to go1.23, as we won't be able to maintain compatibility with older versions because of the above. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
95 lines
2.5 KiB
Go
95 lines
2.5 KiB
Go
// FIXME(thaJeztah): remove once we are a module; the go:build directive prevents go from downgrading language version to go1.16:
|
|
//go:build go1.23
|
|
|
|
package l2disco
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net"
|
|
"slices"
|
|
|
|
"github.com/containerd/log"
|
|
"golang.org/x/net/ipv6"
|
|
)
|
|
|
|
var naTemplate = []byte{
|
|
0x88, // Type (136=NA)
|
|
0x00, // Code (always 0)
|
|
0x00, 0x00, // Checksum (filled in by the kernel)
|
|
0x20, // Flags, Router=0, Solicited=0, Override=1
|
|
0x00, 0x00, 0x00, // Reserved
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, // Target IP
|
|
0x02, // Option - target link layer address
|
|
0x01, // Option length (32)
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, // Target MAC
|
|
}
|
|
|
|
type UnsolNA struct {
|
|
pkt []byte
|
|
pc *ipv6.PacketConn
|
|
cm *ipv6.ControlMessage
|
|
}
|
|
|
|
// NewUnsolNA returns a pointer to an object that can send unsolicited Neighbour
|
|
// Advertisements for ip and mac.
|
|
// https://datatracker.ietf.org/doc/html/rfc4861#section-4.4
|
|
func NewUnsolNA(ctx context.Context, ip net.IP, mac net.HardwareAddr, ifIndex int) (*UnsolNA, error) {
|
|
// Open a socket ... it'll be bound to an address but the address doesn't matter,
|
|
// no packets are to be received, and a source address is supplied when sending.
|
|
netPC, err := net.ListenPacket("ip6:ipv6-icmp", "::1")
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
pc := ipv6.NewPacketConn(netPC)
|
|
|
|
// Block incoming packets.
|
|
f := ipv6.ICMPFilter{}
|
|
f.SetAll(true)
|
|
if err := pc.SetICMPFilter(&f); err != nil {
|
|
log.G(ctx).WithError(err).Errorf("failed to set ICMP filter")
|
|
}
|
|
|
|
cm := &ipv6.ControlMessage{
|
|
// https://datatracker.ietf.org/doc/html/rfc4861#section-3.1
|
|
// By setting the Hop Limit to 255, Neighbor Discovery is immune to
|
|
// off-link senders that accidentally or intentionally send ND
|
|
// messages.
|
|
HopLimit: 255,
|
|
Src: ip,
|
|
IfIndex: ifIndex,
|
|
}
|
|
|
|
pkt := slices.Clone(naTemplate)
|
|
copy(pkt[8:24], ip)
|
|
copy(pkt[26:32], mac)
|
|
|
|
return &UnsolNA{
|
|
pkt: pkt,
|
|
pc: pc,
|
|
cm: cm,
|
|
}, nil
|
|
}
|
|
|
|
// Send sends an unsolicited ARP message.
|
|
func (un *UnsolNA) Send() error {
|
|
n, err := un.pc.WriteTo(un.pkt, un.cm, &net.IPAddr{IP: net.IPv6linklocalallnodes})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if n != len(un.pkt) {
|
|
return fmt.Errorf("failed to send packet: len:%d sent:%d", len(un.pkt), n)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// Close releases resources.
|
|
func (un *UnsolNA) Close() error {
|
|
if un.pc != nil {
|
|
err := un.pc.Close()
|
|
un.pc = nil
|
|
return err
|
|
}
|
|
return nil
|
|
}
|