mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-28 10:18:51 +00:00
5eb2bba47b
Closes #5063, supersedes #5850 Other refactors and changes made as part of this: - Adds the ability to disable DNS control on Windows - Removes the spooky-action-at-a-distance `from_env` functions that used to be buried in `tunnel` - `FIREZONE_DNS_CONTROL` is now a regular `clap` argument again --------- Signed-off-by: Reactor Scram <ReactorScram@users.noreply.github.com>
42 lines
1.2 KiB
Rust
42 lines
1.2 KiB
Rust
use std::{io, net::SocketAddr};
|
|
|
|
use crate::FIREZONE_MARK;
|
|
use nix::sys::socket::{setsockopt, sockopt};
|
|
use socket_factory::{TcpSocket, UdpSocket};
|
|
|
|
#[derive(clap::ValueEnum, Clone, Copy, Debug)]
|
|
pub enum DnsControlMethod {
|
|
/// Explicitly disable DNS control.
|
|
///
|
|
/// We don't use an `Option<Method>` because leaving out the CLI arg should
|
|
/// use Systemd, not disable DNS control.
|
|
Disabled,
|
|
/// Back up `/etc/resolv.conf` and replace it with our own
|
|
///
|
|
/// Only suitable for the Alpine CI containers and maybe something like an
|
|
/// embedded system
|
|
EtcResolvConf,
|
|
/// Cooperate with `systemd-resolved`
|
|
///
|
|
/// Suitable for most Ubuntu systems, probably
|
|
SystemdResolved,
|
|
}
|
|
|
|
impl Default for DnsControlMethod {
|
|
fn default() -> Self {
|
|
Self::SystemdResolved
|
|
}
|
|
}
|
|
|
|
pub fn tcp_socket_factory(socket_addr: &SocketAddr) -> io::Result<TcpSocket> {
|
|
let socket = socket_factory::tcp(socket_addr)?;
|
|
setsockopt(&socket, sockopt::Mark, &FIREZONE_MARK)?;
|
|
Ok(socket)
|
|
}
|
|
|
|
pub fn udp_socket_factory(socket_addr: &SocketAddr) -> io::Result<UdpSocket> {
|
|
let socket = socket_factory::udp(socket_addr)?;
|
|
setsockopt(&socket, sockopt::Mark, &FIREZONE_MARK)?;
|
|
Ok(socket)
|
|
}
|