root/usr.sbin/nsd/namedb.h
/*
 * namedb.h -- nsd(8) internal namespace database definitions
 *
 * Copyright (c) 2001-2006, NLnet Labs. All rights reserved.
 *
 * See LICENSE for the license.
 *
 */

#ifndef NAMEDB_H
#define NAMEDB_H

#include <stdio.h>

#include "dname.h"
#include "dns.h"
#include "radtree.h"
#include "rbtree.h"
struct zone_options;
struct nsd_options;
struct udb_base;
struct udb_ptr;
struct nsd;
struct zone_ixfr;

typedef struct rrset rrset_type;
typedef struct rr rr_type;

/*
 * A domain name table supporting fast insert and search operations.
 */
typedef struct domain_table domain_table_type;
typedef struct domain domain_type;
typedef struct zone zone_type;
typedef struct namedb namedb_type;

struct domain_table
{
        region_type* region;
#ifdef USE_RADIX_TREE
        struct radtree *nametree;
#else
        rbtree_type      *names_to_domains;
#endif
        domain_type* root;
        /* ptr to biggest domain.number and last in list.
         * the root is the lowest and first in the list. */
        domain_type *numlist_last;
#ifdef NSEC3
        /* the prehash list, start of the list */
        domain_type* prehash_list;
#endif /* NSEC3 */
};

#ifdef NSEC3
typedef struct nsec3_hash_node nsec3_hash_node_type;
struct nsec3_hash_node {
        /* hash value */
        uint8_t hash[NSEC3_HASH_LEN];
        /* entry in the hashtree */
        rbnode_type node;
} ATTR_PACKED;

typedef struct nsec3_hash_wc_node nsec3_hash_wc_node_type;
struct nsec3_hash_wc_node {
        nsec3_hash_node_type hash;
        nsec3_hash_node_type wc;
};

struct nsec3_domain_data {
        /* (if nsec3 chain complete) always the covering nsec3 record */
        domain_type* nsec3_cover;
        /* the nsec3 that covers the wildcard child of this domain. */
        domain_type* nsec3_wcard_child_cover;
        /* for the DS case we must answer on the parent side of zone cut */
        domain_type* nsec3_ds_parent_cover;
        /* NSEC3 domains to prehash, prev and next on the list or cleared */
        domain_type* prehash_prev, *prehash_next;
        /* entry in the nsec3tree (for NSEC3s in the chain in use) */
        rbnode_type nsec3_node;

        /* node for the precompiled domain and the precompiled wildcard */
        nsec3_hash_wc_node_type* hash_wc;

        /* node for the precompiled parent ds */
        nsec3_hash_node_type* ds_parent_hash;

        /* if the domain has an NSEC3 for it, use cover ptr to get it. */
        unsigned     nsec3_is_exact : 1;
        /* same but on parent side */
        unsigned     nsec3_ds_parent_is_exact : 1;
} ATTR_PACKED;
#endif /* NSEC3 */

struct domain
{
#ifdef USE_RADIX_TREE
        struct radnode* rnode;
        const dname_type* dname;
#else
        rbnode_type     node;
#endif
        domain_type* parent;
        domain_type* wildcard_child_closest_match;
        rrset_type* rrsets;
#ifdef NSEC3
        struct nsec3_domain_data* nsec3;
#endif
        /* double-linked list sorted by domain.number */
        domain_type* numlist_prev, *numlist_next;
        uint32_t     number; /* Unique domain name number.  */
        uint32_t     usage; /* number of ptrs to this from RRs(in rdata) and
                             from zone-apex pointers, also the root has one
                             more to make sure it cannot be deleted. */

        /*
         * This domain name exists (see wildcard clarification draft).
         */
        unsigned     is_existing : 1;
        unsigned     is_apex : 1;
} ATTR_PACKED;

struct zone
{
        struct radnode *node; /* this entry in zonetree */
        domain_type* apex;
        rrset_type*  soa_rrset;
        rrset_type*  soa_nx_rrset; /* see bug #103 */
        rrset_type*  ns_rrset;
#ifdef NSEC3
        rr_type* nsec3_param; /* NSEC3PARAM RR of chain in use or NULL */
        domain_type* nsec3_last; /* last domain with nsec3, wraps */
        /* in these trees, the root contains an elem ptr to the radtree* */
        rbtree_type* nsec3tree; /* tree with relevant NSEC3 domains */
        rbtree_type* hashtree; /* tree, hashed NSEC3precompiled domains */
        rbtree_type* wchashtree; /* tree, wildcard hashed domains */
        rbtree_type* dshashtree; /* tree, ds-parent-hash domains */
#endif
        struct zone_options* opts;
        struct zone_ixfr* ixfr;
        char *filename; /* set if read from file, which files */
        /* list of include files to monitor for changes */
        struct {
                size_t count;
                char **paths;
        } includes;
        char*        logstr; /* set for zone xfer, the log string */
        struct timespec mtime; /* time of last modification */
        unsigned     zonestatid; /* array index for zone stats */
        unsigned     is_secure : 1; /* zone uses DNSSEC */
        unsigned     is_ok : 1; /* zone has not expired */
        unsigned     is_changed : 1; /* zone changes must be written to disk */
        unsigned     is_updated : 1; /* zone was changed by XFR */
        unsigned     is_skipped : 1; /* subsequent zone updates are skipped */
        unsigned     is_checked : 1; /* zone already verified */
        unsigned     is_bad : 1; /* zone failed verification */
} ATTR_PACKED;

/* a RR in DNS.
 * The RDATA is directly allocated with the RR structure and pointers to
 * domains are directly stored (likely unaligned) in the RDATA. We do this
 * primarily to save memory, but as the RDATA is directly stored with the RR,
 * it is likely that data is cached with the RR which should have a positive
 * impact on performance. When paired with direct conversion routines we are
 * very likely to improve performance when importing zones and writing RRs out
 * to the wire. That is in the rr.rdata array, it contains the rdata without
 * the rdlength bytes. The rdlength contains the length of the rr.rdata array,
 * that includes the pointer size for names that are pointer references to
 * struct domain.
 */
struct rr {
        domain_type*     owner;
        uint32_t         ttl;
        uint16_t         type;
        uint16_t         klass;
        uint16_t         rdlength;
        uint8_t          rdata[]; /* c99 flexible array */
} ATTR_PACKED;

/*
 * An RRset consists of at least one RR.  All RRs are from the same
 * zone.
 */
struct rrset
{
        rrset_type* next;
        zone_type*  zone;
#ifndef PACKED_STRUCTS
        /* If the storage is not packed, there is a pointer to a separate
         * array of rr_type pointers. This is then accessed in an aligned
         * manner.
         * If the storage is packed, the pointer to the array is not there.
         * The rr_type pointers for the rrs are stored after the struct rrset,
         * contiguously allocated. This is then unaligned pointers, as they
         * are after the packed structure. The region also stores items when
         * packed structs is enabled without alignment, and thus there are
         * unaligned accesses. It then has unaligned access for like struct
         * domain. So unaligned access is used then, here too. This saves
         * the space used by the rr_type** rrs array pointer.
         * The rr pointers can then be accessed through the rrs[] member and,
         * that is an unaligned access, and does not need an accessor function.
         */
        rr_type**   rrs;
#endif
        uint16_t    rr_count;
#ifdef PACKED_STRUCTS
        rr_type*    rrs[]; /* c99 flexible array */
#endif
} ATTR_PACKED;

/*
 * Create a new domain_table containing only the root domain.
 */
domain_table_type *domain_table_create(region_type *region);

/*
 * Search the domain table for a match and the closest encloser.
 */
int domain_table_search(domain_table_type* table,
                        const dname_type* dname,
                        domain_type      **closest_match,
                        domain_type      **closest_encloser);

/*
 * The number of domains stored in the table (minimum is one for the
 * root domain).
 */
static inline uint32_t
domain_table_count(domain_table_type* table)
{
#ifdef USE_RADIX_TREE
        return table->nametree->count;
#else
        return table->names_to_domains->count;
#endif
}

/*
 * Find the specified dname in the domain_table.  NULL is returned if
 * there is no exact match.
 */
domain_type* domain_table_find(domain_table_type* table,
                               const dname_type* dname);

/*
 * Insert a domain name in the domain table.  If the domain name is
 * not yet present in the table it is copied and a new dname_info node
 * is created (as well as for the missing parent domain names, if
 * any).  Otherwise the domain_type that is already in the
 * domain_table is returned.
 */
domain_type *domain_table_insert(domain_table_type *table,
                                 const dname_type  *dname);

/* put domain into nsec3 hash space tree */
void zone_add_domain_in_hash_tree(region_type* region, rbtree_type** tree,
        int (*cmpf)(const void*, const void*), domain_type* domain,
        rbnode_type* node);
void zone_del_domain_in_hash_tree(rbtree_type* tree, rbnode_type* node);
void hash_tree_delete(region_type* region, rbtree_type* tree);
void prehash_clear(domain_table_type* table);
void prehash_add(domain_table_type* table, domain_type* domain);
void prehash_del(domain_table_type* table, domain_type* domain);
int domain_is_prehash(domain_table_type* table, domain_type* domain);

/*
 * Add an RRset to the specified domain.  Updates the is_existing flag
 * as required.
 */
void domain_add_rrset(domain_type* domain, rrset_type* rrset);

rrset_type* domain_find_rrset(domain_type* domain, zone_type* zone, uint16_t type);
rrset_type* domain_find_any_rrset(domain_type* domain, zone_type* zone);
rrset_type* domain_find_rrset_and_prev(domain_type* domain, zone_type* zone,
        uint16_t type, rrset_type** prev);

zone_type* domain_find_zone(namedb_type* db, domain_type* domain);
zone_type* domain_find_parent_zone(namedb_type* db, zone_type* zone);

domain_type* domain_find_ns_rrsets(domain_type* domain, zone_type* zone, rrset_type **ns);
/* find DNAME rrset in domain->parent or higher and return that domain */
domain_type * find_dname_above(domain_type* domain, zone_type* zone);

int domain_is_glue(domain_type* domain, zone_type* zone);

rrset_type* domain_find_non_cname_rrset(domain_type* domain, zone_type* zone);

domain_type* domain_wildcard_child(domain_type* domain);
domain_type *domain_previous_existing_child(domain_type* domain);

int zone_is_secure(zone_type* zone);

static inline dname_type *
domain_dname(domain_type* domain)
{
#ifdef USE_RADIX_TREE
        return (dname_type *) domain->dname;
#else
        return (dname_type *) domain->node.key;
#endif
}

static inline const dname_type *
domain_dname_const(const domain_type* domain)
{
#ifdef USE_RADIX_TREE
        return domain->dname;
#else
        return (const dname_type *) domain->node.key;
#endif
}

static inline domain_type *
domain_previous(domain_type* domain)
{
#ifdef USE_RADIX_TREE
        struct radnode* prev = radix_prev(domain->rnode);
        return prev == NULL ? NULL : (domain_type*)prev->elem;
#else
        rbnode_type *prev = rbtree_previous((rbnode_type *) domain);
        return prev == RBTREE_NULL ? NULL : (domain_type *) prev;
#endif
}

static inline domain_type *
domain_next(domain_type* domain)
{
#ifdef USE_RADIX_TREE
        struct radnode* next = radix_next(domain->rnode);
        return next == NULL ? NULL : (domain_type*)next->elem;
#else
        rbnode_type *next = rbtree_next((rbnode_type *) domain);
        return next == RBTREE_NULL ? NULL : (domain_type *) next;
#endif
}

/* easy comparison for subdomain, true if d1 is subdomain of d2. */
static inline int domain_is_subdomain(domain_type* d1, domain_type* d2)
{ return dname_is_subdomain(domain_dname(d1), domain_dname(d2)); }
/* easy printout, to static buffer of dname_to_string, fqdn. */
static inline const char* domain_to_string(domain_type* domain)
{ return dname_to_string(domain_dname(domain), NULL); }
/* easy printout, to given buffer of dname_to_string, fqdn. */
static inline const char* domain_to_string_buf(domain_type* domain, char *buf)
{ return dname_to_string_buf(domain_dname(domain), NULL, buf); }


/*
 * The type covered by the signature in the specified RRSIG RR.
 */
uint16_t rr_rrsig_type_covered(rr_type* rr);

struct namedb
{
        region_type*       region;
        domain_table_type* domains;
        struct radtree*    zonetree;
        /* the timestamp on the ixfr.db file */
        struct timeval    diff_timestamp;
        /* if diff_skip=1, diff_pos contains the nsd.diff place to continue */
        uint8_t           diff_skip;
        off_t             diff_pos;
};

/* Find the zone for the specified dname in DB. */
zone_type *namedb_find_zone(namedb_type *db, const dname_type *dname);
/*
 * Delete a domain name from the domain table.  Removes dname_info node.
 * Only deletes if usage is 0, has no rrsets and no children.  Checks parents
 * for deletion as well.  Adjusts numberlist(domain.number), and 
 * wcard_child closest match.
 */
void domain_table_deldomain(namedb_type* db, domain_type* domain);

/** dbcreate.c */
int print_rrs(FILE* out, struct zone* zone);

/* dbaccess.c */
int namedb_lookup (struct namedb* db,
                   const dname_type* dname,
                   domain_type     **closest_match,
                   domain_type     **closest_encloser);
/* pass number of children (to alloc in dirty array */
struct namedb *namedb_open(struct nsd_options* opt);
void namedb_close(struct namedb* db);
/* free ixfr data stored for zones */
void namedb_free_ixfr(struct namedb* db);
void namedb_check_zonefiles(struct nsd* nsd, struct nsd_options* opt,
        struct udb_base* taskudb, struct udb_ptr* last_task);
void namedb_check_zonefile(struct nsd* nsd, struct udb_base* taskudb,
        struct udb_ptr* last_task, struct zone_options* zo);
/** zone one zonefile into memory and revert on parse error, write to udb */
void namedb_read_zonefile(struct nsd* nsd, struct zone* zone,
        struct udb_base* taskudb, struct udb_ptr* last_task);
zone_type* namedb_zone_create(namedb_type* db, const dname_type* dname,
        struct zone_options* zopt);
static inline zone_type*
namedb_find_or_create_zone(namedb_type *db, const dname_type *dname,
                struct zone_options* zopt)
{ zone_type* zone = namedb_find_zone(db, dname);
  return zone ? zone : namedb_zone_create(db, dname, zopt); }
void namedb_zone_free_filenames(namedb_type* db, zone_type* zone);
void namedb_zone_delete(namedb_type* db, zone_type* zone);
void namedb_write_zonefile(struct nsd* nsd, struct zone_options* zopt);
void namedb_write_zonefiles(struct nsd* nsd, struct nsd_options* options);
int create_dirs(const char* path);
int file_get_mtime(const char* file, struct timespec* mtime, int* nonexist);
void allocate_domain_nsec3(domain_table_type *table, domain_type *result);

static inline uint16_t
rrset_rrtype(rrset_type* rrset)
{
        assert(rrset);
        assert(rrset->rr_count > 0);
        return rrset->rrs[0]->type;
}

static inline uint16_t
rrset_rrclass(rrset_type* rrset)
{
        assert(rrset);
        assert(rrset->rr_count > 0);
        return rrset->rrs[0]->klass;
}

/*
 * zone_rr_iter can be used to iterate over all RRs in a given zone. the
 * SOA RRSET is guaranteed to be returned first.
 */
typedef struct zone_rr_iter zone_rr_iter_type;

struct zone_rr_iter {
        zone_type *zone;
        domain_type *domain;
        rrset_type *rrset;
        ssize_t index;
};

void zone_rr_iter_init(zone_rr_iter_type *iter, zone_type *zone);

rr_type *zone_rr_iter_next(zone_rr_iter_type *iter);

/** make the domain last in the numlist, changes numbers of domains */
void numlist_make_last(domain_table_type* table, domain_type* domain);
/** pop the biggest domain off the numlist */
domain_type* numlist_pop_last(domain_table_type* table);

#endif /* NAMEDB_H */