1 /* 2 * Copyright (c) 2022-2023 Huawei Device Co., Ltd. 3 * Licensed under the Apache License, Version 2.0 (the "License"); 4 * you may not use this file except in compliance with the License. 5 * You may obtain a copy of the License at 6 * 7 * http://www.apache.org/licenses/LICENSE-2.0 8 * 9 * Unless required by applicable law or agreed to in writing, software 10 * distributed under the License is distributed on an "AS IS" BASIS, 11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 * See the License for the specific language governing permissions and 13 * limitations under the License. 14 */ 15 #ifndef I_NETSYS_SERVICE_H 16 #define I_NETSYS_SERVICE_H 17 18 #include <netdb.h> 19 #include <string> 20 #include <set> 21 22 #include "dns_config_client.h" 23 #include "i_net_diag_callback.h" 24 #include "i_notify_callback.h" 25 #include "i_net_dns_result_callback.h" 26 #include "i_net_dns_health_callback.h" 27 #include "i_netsys_traffic_callback.h" 28 #include "interface_type.h" 29 #include "iremote_broker.h" 30 #include "net_stats_info.h" 31 #include "network_sharing.h" 32 #include "netsys_ipc_interface_code.h" 33 #include "route_type.h" 34 #ifdef FEATURE_NET_FIREWALL_ENABLE 35 #include "i_netfirewall_callback.h" 36 #include "netfirewall_parcel.h" 37 #endif 38 #include "uid_range.h" 39 #include "netsys_access_policy.h" 40 #include "net_all_capabilities.h" 41 42 namespace OHOS { 43 namespace NetsysNative { 44 using namespace nmd; 45 using namespace OHOS::NetManagerStandard; 46 enum IptablesType { 47 IPTYPE_NONE = 0, 48 IPTYPE_IPV4 = 1, 49 IPTYPE_IPV6 = 2, 50 IPTYPE_IPV4V6 = 3, 51 }; 52 enum SysVpnStageCode : int32_t { 53 VPN_STAGE_RESTART = 0, // common stage. start charon 54 VPN_STAGE_UP_HOME, // common stage. connect "home" configuration 55 VPN_STAGE_DOWN_HOME, // common stage. disconnect "home" configuration 56 VPN_STAGE_STOP, // common stage. stop charon 57 VPN_STAGE_SWANCTL_LOAD, // ikev2 vpn. load ikev2 vpn config file 58 VPN_STAGE_L2TP_LOAD, // l2tp vpn. load l2tp vpn config file 59 VPN_STAGE_L2TP_CTL, // l2tp vpn. control pppd running 60 VPN_STAGE_OPENVPN_RESTART, // openvpn. restart openvpn 61 VPN_STAGE_OPENVPN_STOP, // openvpn. stop openvpn 62 VPN_STAGE_L2TP_STOP, // close single l2tp connection 63 VPN_STAGE_CREATE_PPP_FD, // create ppp fd 64 VPN_STAGE_SET_XFRM_PHY_IFNAME, // set xfrm phy ifname 65 VPN_STAGE_SET_VPN_CALL_MODE, // set vpn call mode 66 VPN_STAGE_SET_VPN_REMOTE_ADDRESS, // set vpn remote ip address 67 VPN_STAGE_SET_L2TP_CONF, // set l2tp config 68 }; 69 class INetsysService : public IRemoteBroker { 70 public: 71 virtual int32_t SetResolverConfig(uint16_t netId, uint16_t baseTimeoutMsec, uint8_t retryCount, 72 const std::vector<std::string> &servers, 73 const std::vector<std::string> &domains) = 0; 74 virtual int32_t GetResolverConfig(uint16_t netId, std::vector<std::string> &servers, 75 std::vector<std::string> &domains, uint16_t &baseTimeoutMsec, 76 uint8_t &retryCount) = 0; 77 virtual int32_t CreateNetworkCache(uint16_t netId, bool isVpnNet = false) = 0; 78 virtual int32_t DestroyNetworkCache(uint16_t netId, bool isVpnNet = false) = 0; 79 virtual int32_t GetAddrInfo(const std::string &hostName, const std::string &serverName, const AddrInfo &hints, 80 uint16_t netId, std::vector<AddrInfo> &res) = 0; 81 virtual int32_t SetInterfaceMtu(const std::string &interfaceName, int mtu) = 0; 82 virtual int32_t GetInterfaceMtu(const std::string &interfaceName) = 0; 83 84 virtual int32_t SetTcpBufferSizes(const std::string &tcpBufferSizes) = 0; 85 86 virtual int32_t RegisterNotifyCallback(sptr<INotifyCallback> &callback) = 0; 87 virtual int32_t UnRegisterNotifyCallback(sptr<INotifyCallback> &callback) = 0; 88 89 virtual int32_t NetworkAddRoute(int32_t netId, const std::string &interfaceName, const std::string &destination, 90 const std::string &nextHop, bool isExcludedRoute = false) = 0; 91 virtual int32_t NetworkRemoveRoute(int32_t netId, const std::string &interfaceName, const std::string &destination, 92 const std::string &nextHop) = 0; 93 virtual int32_t NetworkAddRouteParcel(int32_t netId, const RouteInfoParcel &routeInfo) = 0; 94 virtual int32_t NetworkRemoveRouteParcel(int32_t netId, const RouteInfoParcel &routeInfo) = 0; 95 virtual int32_t NetworkSetDefault(int32_t netId) = 0; 96 virtual int32_t NetworkGetDefault() = 0; 97 virtual int32_t NetworkClearDefault() = 0; 98 virtual int32_t GetProcSysNet(int32_t family, int32_t which, const std::string &ifname, 99 const std::string ¶meter, std::string &value) = 0; 100 virtual int32_t SetProcSysNet(int32_t family, int32_t which, const std::string &ifname, 101 const std::string ¶meter, std::string &value) = 0; 102 virtual int32_t SetInternetPermission(uint32_t uid, uint8_t allow, uint8_t isBroker) = 0; 103 virtual int32_t NetworkCreatePhysical(int32_t netId, int32_t permission) = 0; 104 virtual int32_t NetworkCreateVirtual(int32_t netId, bool hasDns) = 0; 105 virtual int32_t NetworkAddUids(int32_t netId, const std::vector<UidRange> &uidRanges) = 0; 106 virtual int32_t NetworkDelUids(int32_t netId, const std::vector<UidRange> &uidRanges) = 0; 107 virtual int32_t AddInterfaceAddress(const std::string &interfaceName, const std::string &addrString, 108 int32_t prefixLength) = 0; 109 virtual int32_t DelInterfaceAddress(const std::string &interfaceName, const std::string &addrString, 110 int32_t prefixLength) = 0; 111 virtual int32_t DelInterfaceAddress(const std::string &interfaceName, const std::string &addrString, 112 int32_t prefixLength, const std::string &netCapabilities) = 0; 113 virtual int32_t InterfaceSetIpAddress(const std::string &ifaceName, const std::string &ipAddress) = 0; 114 virtual int32_t InterfaceSetIffUp(const std::string &ifaceName) = 0; 115 virtual int32_t NetworkAddInterface(int32_t netId, const std::string &iface, NetBearType netBearerType) = 0; 116 virtual int32_t NetworkRemoveInterface(int32_t netId, const std::string &iface) = 0; 117 virtual int32_t NetworkDestroy(int32_t netId, bool isVpnNet = false) = 0; 118 virtual int32_t CreateVnic(uint16_t mtu, const std::string &tunAddr, int32_t prefix, 119 const std::set<int32_t> &uids) = 0; 120 virtual int32_t DestroyVnic() = 0; 121 virtual int32_t EnableDistributedClientNet(const std::string &virnicAddr, const std::string &iif) = 0; 122 virtual int32_t EnableDistributedServerNet(const std::string &iif, const std::string &devIface, 123 const std::string &dstAddr) = 0; 124 virtual int32_t DisableDistributedNet(bool isServer) = 0; 125 virtual int32_t GetFwmarkForNetwork(int32_t netId, MarkMaskParcel &markMaskParcel) = 0; 126 virtual int32_t SetInterfaceConfig(const InterfaceConfigurationParcel &cfg) = 0; 127 virtual int32_t GetInterfaceConfig(InterfaceConfigurationParcel &cfg) = 0; 128 virtual int32_t InterfaceGetList(std::vector<std::string> &ifaces) = 0; 129 virtual int32_t StartDhcpClient(const std::string &iface, bool bIpv6) = 0; 130 virtual int32_t StopDhcpClient(const std::string &iface, bool bIpv6) = 0; 131 virtual int32_t StartDhcpService(const std::string &iface, const std::string &ipv4addr) = 0; 132 virtual int32_t StopDhcpService(const std::string &iface) = 0; 133 virtual int32_t IpEnableForwarding(const std::string &requestor) = 0; 134 virtual int32_t IpDisableForwarding(const std::string &requestor) = 0; 135 virtual int32_t EnableNat(const std::string &downstreamIface, const std::string &upstreamIface) = 0; 136 virtual int32_t DisableNat(const std::string &downstreamIface, const std::string &upstreamIface) = 0; 137 virtual int32_t IpfwdAddInterfaceForward(const std::string &fromIface, const std::string &toIface) = 0; 138 virtual int32_t IpfwdRemoveInterfaceForward(const std::string &fromIface, const std::string &toIface) = 0; 139 virtual int32_t BandwidthAddAllowedList(uint32_t uid) = 0; 140 virtual int32_t BandwidthRemoveAllowedList(uint32_t uid) = 0; 141 virtual int32_t BandwidthEnableDataSaver(bool enable) = 0; 142 virtual int32_t BandwidthSetIfaceQuota(const std::string &ifName, int64_t bytes) = 0; 143 virtual int32_t BandwidthAddDeniedList(uint32_t uid) = 0; 144 virtual int32_t BandwidthRemoveDeniedList(uint32_t uid) = 0; 145 virtual int32_t BandwidthRemoveIfaceQuota(const std::string &ifName) = 0; 146 virtual int32_t FirewallSetUidsAllowedListChain(uint32_t chain, const std::vector<uint32_t> &uids) = 0; 147 virtual int32_t FirewallSetUidsDeniedListChain(uint32_t chain, const std::vector<uint32_t> &uids) = 0; 148 virtual int32_t FirewallEnableChain(uint32_t chain, bool enable) = 0; 149 virtual int32_t FirewallSetUidRule(uint32_t chain, const std::vector<uint32_t> &uids, uint32_t firewallRule) = 0; 150 virtual int32_t ShareDnsSet(uint16_t netId) = 0; 151 virtual int32_t StartDnsProxyListen() = 0; 152 virtual int32_t StopDnsProxyListen() = 0; 153 virtual int32_t GetNetworkSharingTraffic(const std::string &downIface, const std::string &upIface, 154 NetworkSharingTraffic &traffic) = 0; 155 virtual int32_t GetNetworkCellularSharingTraffic(nmd::NetworkSharingTraffic &traffic, std::string &ifaceName) = 0; 156 virtual int32_t GetTotalStats(uint64_t &stats, uint32_t type) = 0; 157 virtual int32_t GetUidStats(uint64_t &stats, uint32_t type, uint32_t uid) = 0; 158 virtual int32_t GetIfaceStats(uint64_t &stats, uint32_t type, const std::string &interfaceName) = 0; 159 virtual int32_t GetAllStatsInfo(std::vector<OHOS::NetManagerStandard::NetStatsInfo> &stats) = 0; 160 virtual int32_t DeleteStatsInfo(uint32_t uid) = 0; 161 virtual int32_t GetAllSimStatsInfo(std::vector<OHOS::NetManagerStandard::NetStatsInfo> &stats) = 0; 162 virtual int32_t DeleteSimStatsInfo(uint32_t uid) = 0; 163 virtual int32_t SetNetStateTrafficMap(uint8_t flag, uint64_t availableTraffic) = 0; 164 virtual int32_t GetNetStateTrafficMap(uint8_t flag, uint64_t &availableTraffic) = 0; 165 virtual int32_t ClearIncreaseTrafficMap() = 0; 166 virtual int32_t DeleteIncreaseTrafficMap(uint64_t ifIndex) = 0; 167 virtual int32_t UpdateIfIndexMap(int8_t key, uint64_t index) = 0; 168 virtual int32_t SetNetStatusMap(uint8_t type, uint8_t value) = 0; 169 virtual int32_t SetIptablesCommandForRes(const std::string &cmd, std::string &respond, 170 IptablesType ipType = IPTYPE_IPV4) = 0; 171 virtual int32_t SetIpCommandForRes(const std::string &cmd, std::string &respond) = 0; 172 virtual int32_t NetDiagPingHost(const NetDiagPingOption &pingOption, const sptr<INetDiagCallback> &callback) = 0; 173 virtual int32_t NetDiagGetRouteTable(std::list<NetDiagRouteTable> &routeTables) = 0; 174 virtual int32_t NetDiagGetSocketsInfo(NetDiagProtocolType socketType, NetDiagSocketsInfo &socketsInfo) = 0; 175 virtual int32_t NetDiagGetInterfaceConfig(std::list<NetDiagIfaceConfig> &configs, const std::string &ifaceName) = 0; 176 virtual int32_t NetDiagUpdateInterfaceConfig(const NetDiagIfaceConfig &config, const std::string &ifaceName, 177 bool add) = 0; 178 virtual int32_t NetDiagSetInterfaceActiveState(const std::string &ifaceName, bool up) = 0; 179 virtual int32_t AddStaticArp(const std::string &ipAddr, const std::string &macAddr, 180 const std::string &ifName) = 0; 181 virtual int32_t DelStaticArp(const std::string &ipAddr, const std::string &macAddr, 182 const std::string &ifName) = 0; 183 virtual int32_t AddStaticIpv6Addr(const std::string &ipv6Addr, const std::string &macAddr, 184 const std::string &ifName) = 0; 185 virtual int32_t DelStaticIpv6Addr(const std::string &ipv6Addr, const std::string &macAddr, 186 const std::string &ifName) = 0; 187 virtual int32_t RegisterDnsResultCallback(const sptr<INetDnsResultCallback> &callback, uint32_t delay) = 0; 188 virtual int32_t UnregisterDnsResultCallback(const sptr<INetDnsResultCallback> &callback) = 0; 189 virtual int32_t RegisterDnsHealthCallback(const sptr<INetDnsHealthCallback> &callback) = 0; 190 virtual int32_t UnregisterDnsHealthCallback(const sptr<INetDnsHealthCallback> &callback) = 0; 191 virtual int32_t GetCookieStats(uint64_t &stats, uint32_t type, uint64_t cookie) = 0; 192 virtual int32_t GetNetworkSharingType(std::set<uint32_t>& sharingTypeIsOn) = 0; 193 virtual int32_t UpdateNetworkSharingType(uint32_t type, bool isOpen) = 0; 194 #ifdef FEATURE_NET_FIREWALL_ENABLE 195 virtual int32_t SetFirewallRules(NetFirewallRuleType type, const std::vector<sptr<NetFirewallBaseRule>> &ruleList, 196 bool isFinish) = 0; 197 virtual int32_t SetFirewallDefaultAction(int32_t userId, FirewallRuleAction inDefault, 198 FirewallRuleAction outDefault) = 0; 199 virtual int32_t SetFirewallCurrentUserId(int32_t userId) = 0; 200 virtual int32_t ClearFirewallRules(NetFirewallRuleType type) = 0; 201 virtual int32_t RegisterNetFirewallCallback(const sptr<INetFirewallCallback> &callback) = 0; 202 virtual int32_t UnRegisterNetFirewallCallback(const sptr<INetFirewallCallback> &callback) = 0; 203 #endif 204 #ifdef FEATURE_WEARABLE_DISTRIBUTED_NET_ENABLE 205 virtual int32_t EnableWearableDistributedNetForward(const int32_t tcpPortId, const int32_t udpPortId) = 0; 206 virtual int32_t DisableWearableDistributedNetForward() = 0; 207 #endif 208 virtual int32_t RegisterNetsysTrafficCallback(const sptr<INetsysTrafficCallback> &callback) = 0; 209 virtual int32_t UnRegisterNetsysTrafficCallback(const sptr<INetsysTrafficCallback> &callback) = 0; 210 virtual int32_t SetIpv6PrivacyExtensions(const std::string &interfaceName, const uint32_t on) = 0; 211 virtual int32_t SetEnableIpv6(const std::string &interfaceName, const uint32_t on) = 0; 212 virtual int32_t SetNetworkAccessPolicy(uint32_t uid, NetworkAccessPolicy policy, bool reconfirmFlag) = 0; 213 virtual int32_t DeleteNetworkAccessPolicy(uint32_t uid) = 0; 214 virtual int32_t NotifyNetBearerTypeChange(std::set<NetBearType> bearerTypes) = 0; 215 virtual int32_t StartClat(const std::string &interfaceName, int32_t netId, const std::string &nat64PrefixStr) = 0; 216 virtual int32_t StopClat(const std::string &interfaceName) = 0; 217 virtual int32_t ClearFirewallAllRules() = 0; 218 virtual int32_t SetNicTrafficAllowed(const std::vector<std::string> &ifaceNames, bool status) = 0; 219 virtual int32_t CloseSocketsUid(const std::string &ipAddr, uint32_t uid) = 0; 220 #ifdef SUPPORT_SYSVPN 221 virtual int32_t ProcessVpnStage(NetsysNative::SysVpnStageCode stage, const std::string &message = "") = 0; 222 virtual int32_t UpdateVpnRules(uint16_t netId, const std::vector<std::string> &extMessages, bool add) = 0; 223 #endif // SUPPORT_SYSVPN 224 virtual int32_t SetBrokerUidAccessPolicyMap(const std::unordered_map<uint32_t, uint32_t> &uidMaps) = 0; 225 virtual int32_t DelBrokerUidAccessPolicyMap(uint32_t uid) = 0; 226 virtual int32_t SetUserDefinedServerFlag(uint16_t netId, bool flag) = 0; 227 virtual int32_t FlushDnsCache(uint16_t netId) = 0; 228 virtual int32_t SetDnsCache(uint16_t netId, const std::string &hostName, const AddrInfo &addrInfo) = 0; 229 #ifdef FEATURE_ENTERPRISE_ROUTE_CUSTOM 230 virtual int32_t UpdateEnterpriseRoute(const std::string &interfaceName, uint32_t uid, bool add) = 0; 231 #endif 232 DECLARE_INTERFACE_DESCRIPTOR(u"OHOS.NetsysNative.INetsysService") 233 }; 234 } // namespace NetsysNative 235 } // namespace OHOS 236 #endif // I_NETSYS_SERVICE_H 237