forwarder.h

Go to the documentation of this file.

// Copyright (c) Microsoft Corporation. All rights reserved.
// Licensed under the Apache 2.0 License.
#pragma once
 
#include "ccf/ds/ccf_exception.h"
#include "enclave/forwarder_types.h"
#include "enclave/rpc_map.h"
#include "http/http_rpc_context.h"
#include "kv/kv_types.h"
#include "node/node_to_node.h"
#include "tasks/basic_task.h"
#include "tasks/task_system.h"
 
namespace ccf
{
  class RpcContextImpl;
 
  class ForwardedRpcHandler
  {
  public:
    virtual ~ForwardedRpcHandler() = default;
 
    virtual void process_forwarded(
      std::shared_ptr<ccf::RpcContextImpl> fwd_ctx) = 0;
  };
 
  template <typename ChannelProxy>
  class Forwarder : public AbstractForwarder
  {
  private:
    std::weak_ptr<ccf::AbstractRPCResponder> rpcresponder;
    std::shared_ptr<ChannelProxy> n2n_channels;
    std::weak_ptr<ccf::RPCMap> rpc_map;
    NodeId self;
 
    using ForwardedCommandId = ForwardedHeader_v2::ForwardedCommandId;
    ForwardedCommandId next_command_id = 0;
 
    std::unordered_map<ForwardedCommandId, ccf::tasks::Task> timeout_tasks;
    ccf::pal::Mutex timeout_tasks_lock;
 
    using IsCallerCertForwarded = bool;
 
    void send_timeout_error_response(
      NodeId to,
      size_t client_session_id,
      const std::chrono::milliseconds& timeout)
    {
      auto rpc_responder_shared = rpcresponder.lock();
      if (rpc_responder_shared)
      {
        auto response = ::http::Response(HTTP_STATUS_GATEWAY_TIMEOUT);
        auto body = fmt::format(
          "Request was forwarded to node {}, but no response was received "
          "after {}ms",
          to,
          timeout.count());
        response.set_body(body);
        response.set_header(
          http::headers::CONTENT_TYPE, http::headervalues::contenttype::TEXT);
        rpc_responder_shared->reply_async(
          client_session_id, false, response.build_response());
      }
    }
 
  public:
    Forwarder(
      std::weak_ptr<ccf::AbstractRPCResponder> rpcresponder,
      std::shared_ptr<ChannelProxy> n2n_channels,
      std::weak_ptr<ccf::RPCMap> rpc_map_) :
      rpcresponder(std::move(rpcresponder)),
      n2n_channels(std::move(n2n_channels)),
      rpc_map(std::move(rpc_map_))
    {}
 
    void initialize(const NodeId& self_)
    {
      self = self_;
    }
 
    bool forward_command(
      std::shared_ptr<ccf::RpcContextImpl> rpc_ctx,
      const NodeId& to,
      const std::vector<uint8_t>& caller_cert,
      const std::chrono::milliseconds& timeout) override
    {
      auto session_ctx = rpc_ctx->get_session_context();
 
      IsCallerCertForwarded include_caller = false;
      const auto& raw_request = rpc_ctx->get_serialised_request();
      auto client_session_id = session_ctx->client_session_id;
      size_t size = sizeof(client_session_id) + sizeof(IsCallerCertForwarded) +
        raw_request.size();
      if (!caller_cert.empty())
      {
        size += sizeof(size_t) + caller_cert.size();
        include_caller = true;
      }
 
      std::vector<uint8_t> plain(size);
      auto* data_ = plain.data();
      auto size_ = plain.size();
      serialized::write(data_, size_, client_session_id);
      serialized::write(data_, size_, include_caller);
      if (include_caller)
      {
        serialized::write(data_, size_, caller_cert.size());
        serialized::write(data_, size_, caller_cert.data(), caller_cert.size());
      }
      serialized::write(data_, size_, raw_request.data(), raw_request.size());
 
      ForwardedCommandId command_id = 0;
      {
        std::lock_guard<ccf::pal::Mutex> guard(timeout_tasks_lock);
        command_id = next_command_id++;
        auto task =
          ccf::tasks::make_basic_task([this, to, client_session_id, timeout]() {
            this->send_timeout_error_response(to, client_session_id, timeout);
          });
        timeout_tasks[command_id] = task;
        ccf::tasks::add_delayed_task(task, timeout);
      }
 
      const auto view_opt = session_ctx->active_view;
      if (!view_opt.has_value())
      {
        throw std::logic_error(
          "Expected active_view to be set before forwarding");
      }
      ForwardedCommandHeader_v3 header(command_id, view_opt.value());
 
      return n2n_channels->send_encrypted(
        to, NodeMsgType::forwarded_msg, plain, header);
    }
 
    template <typename TFwdHdr>
    std::shared_ptr<::http::HttpRpcContext> recv_forwarded_command(
      const NodeId& from, const uint8_t* data, size_t size)
    {
      std::pair<TFwdHdr, std::vector<uint8_t>> r;
      try
      {
        LOG_TRACE_FMT("Receiving forwarded command of {} bytes", size);
        LOG_TRACE_FMT(" => {:02x}", fmt::join(data, data + size, ""));
 
        r = n2n_channels->template recv_encrypted<TFwdHdr>(from, data, size);
      }
      catch (const std::logic_error& err)
      {
        LOG_FAIL_FMT("Invalid forwarded command");
        LOG_DEBUG_FMT("Invalid forwarded command: {}", err.what());
        return nullptr;
      }
 
      std::vector<uint8_t> caller_cert;
      const auto& plain_ = r.second;
      auto data_ = plain_.data();
      auto size_ = plain_.size();
      auto client_session_id = serialized::read<size_t>(data_, size_);
      auto includes_caller =
        serialized::read<IsCallerCertForwarded>(data_, size_);
      if (includes_caller)
      {
        auto caller_size = serialized::read<size_t>(data_, size_);
        // NOLINTNEXTLINE(readability-suspicious-call-argument)
        caller_cert = serialized::read(data_, size_, caller_size);
      }
      std::vector<uint8_t> raw_request = serialized::read(data_, size_, size_);
 
      auto session =
        std::make_shared<ccf::SessionContext>(client_session_id, caller_cert);
      session->is_forwarded = true;
 
      if constexpr (std::is_same_v<TFwdHdr, ForwardedCommandHeader_v3>)
      {
        ccf::View view = r.first.active_view;
        session->active_view = view;
      }
 
      try
      {
        return ccf::make_fwd_rpc_context(
          session, raw_request, r.first.frame_format);
      }
      catch (const ::http::RequestTooLargeException& rexc)
      {
        LOG_FAIL_FMT("Forwarded request exceeded limit: {}", rexc.what());
        return nullptr;
      }
      catch (const std::exception& err)
      {
        LOG_FAIL_FMT("Invalid forwarded request");
        LOG_DEBUG_FMT("Invalid forwarded request: {}", err.what());
        return nullptr;
      }
    }
 
    template <typename TFwdHdr>
    void send_forwarded_response(
      size_t client_session_id,
      const NodeId& from_node,
      const TFwdHdr& header,
      const std::vector<uint8_t>& data)
    {
      std::vector<uint8_t> plain(sizeof(client_session_id) + data.size());
      auto* data_ = plain.data();
      auto size_ = plain.size();
      serialized::write(data_, size_, client_session_id);
      serialized::write(data_, size_, data.data(), data.size());
 
      if (!n2n_channels->send_encrypted(
            from_node, NodeMsgType::forwarded_msg, plain, header))
      {
        LOG_FAIL_FMT("Failed to send forwarded response to {}", from_node);
      }
    }
 
    struct ForwardedResponseResult
    {
      size_t client_session_id{};
      std::vector<uint8_t> response_body;
      bool should_terminate_session = false;
    };
 
    template <typename TFwdHdr>
    std::optional<ForwardedResponseResult> recv_forwarded_response(
      const NodeId& from, const uint8_t* data, size_t size)
    {
      std::pair<TFwdHdr, std::vector<uint8_t>> r;
      try
      {
        LOG_TRACE_FMT("Receiving response of {} bytes", size);
        LOG_TRACE_FMT(" => {:02x}", fmt::join(data, data + size, ""));
 
        r = n2n_channels->template recv_encrypted<TFwdHdr>(from, data, size);
      }
      catch (const std::logic_error& err)
      {
        LOG_FAIL_FMT("Invalid forwarded response");
        LOG_DEBUG_FMT("Invalid forwarded response: {}", err.what());
        return std::nullopt;
      }
 
      ForwardedResponseResult ret = {};
      if constexpr (std::is_same_v<TFwdHdr, ForwardedResponseHeader_v3>)
      {
        ret.should_terminate_session = r.first.terminate_session;
      }
 
      const auto& plain_ = r.second;
      auto data_ = plain_.data();
      auto size_ = plain_.size();
      ret.client_session_id = serialized::read<size_t>(data_, size_);
      ret.response_body = serialized::read(data_, size_, size_);
 
      return ret;
    }
 
    std::shared_ptr<ForwardedRpcHandler> get_forwarder_handler(
      std::shared_ptr<::http::HttpRpcContext>& ctx)
    {
      if (ctx == nullptr)
      {
        LOG_FAIL_FMT("Failed to receive forwarded command");
        return nullptr;
      }
 
      std::shared_ptr<ccf::RPCMap> rpc_map_shared = rpc_map.lock();
      if (rpc_map_shared == nullptr)
      {
        LOG_FAIL_FMT("Failed to obtain RPCMap");
        return nullptr;
      }
 
      std::shared_ptr<ccf::RpcHandler> search =
        ::http::fetch_rpc_handler(ctx, rpc_map_shared);
 
      auto fwd_handler = std::dynamic_pointer_cast<ForwardedRpcHandler>(search);
      if (!fwd_handler)
      {
        LOG_FAIL_FMT(
          "Failed to process forwarded command: handler is not a "
          "ForwardedRpcHandler");
        return nullptr;
      }
 
      return fwd_handler;
    }
 
    void recv_message(const ccf::NodeId& from, const uint8_t* data, size_t size)
    {
      try
      {
        const auto forwarded_msg = serialized::peek<ForwardedMsg>(data, size);
        LOG_TRACE_FMT(
          "recv_message({}, {} bytes) (type={})",
          from,
          size,
          (size_t)forwarded_msg);
 
        switch (forwarded_msg)
        {
          case ForwardedMsg::forwarded_cmd_v1:
          {
            auto ctx =
              recv_forwarded_command<ForwardedHeader_v1>(from, data, size);
 
            auto fwd_handler = get_forwarder_handler(ctx);
            if (fwd_handler == nullptr)
            {
              return;
            }
 
            // frame_format is deliberately unset, the forwarder ignores it
            // and expects the same format they forwarded.
            ForwardedHeader_v1 response_header{
              ForwardedMsg::forwarded_response_v1};
 
            LOG_DEBUG_FMT("Sending forwarded response to {}", from);
            fwd_handler->process_forwarded(ctx);
 
            send_forwarded_response(
              ctx->get_session_context()->client_session_id,
              from,
              response_header,
              ctx->serialise_response());
            break;
          }
 
          case ForwardedMsg::forwarded_cmd_v2:
          {
            auto ctx =
              recv_forwarded_command<ForwardedHeader_v2>(from, data, size);
 
            auto fwd_handler = get_forwarder_handler(ctx);
            if (fwd_handler == nullptr)
            {
              return;
            }
 
            const auto forwarded_hdr_v2 =
              serialized::peek<ForwardedHeader_v2>(data, size);
            const auto cmd_id = forwarded_hdr_v2.id;
 
            fwd_handler->process_forwarded(ctx);
 
            // frame_format is deliberately unset, the forwarder ignores it
            // and expects the same format they forwarded.
            ForwardedHeader_v2 response_header{
              {ForwardedMsg::forwarded_response_v2, {}}, cmd_id};
 
            LOG_DEBUG_FMT("Sending forwarded response to {}", from);
 
            send_forwarded_response(
              ctx->get_session_context()->client_session_id,
              from,
              response_header,
              ctx->serialise_response());
            break;
          }
 
          case ForwardedMsg::forwarded_cmd_v3:
          {
            auto ctx = recv_forwarded_command<ForwardedCommandHeader_v3>(
              from, data, size);
 
            auto fwd_handler = get_forwarder_handler(ctx);
            if (fwd_handler == nullptr)
            {
              return;
            }
 
            const auto forwarded_hdr_v3 =
              serialized::peek<ForwardedCommandHeader_v3>(data, size);
            const auto cmd_id = forwarded_hdr_v3.id;
 
            fwd_handler->process_forwarded(ctx);
 
            // frame_format is deliberately unset, the forwarder ignores it
            // and expects the same format they forwarded.
            ForwardedResponseHeader_v3 response_header(
              cmd_id, ctx->terminate_session);
 
            LOG_DEBUG_FMT("Sending forwarded response to {}", from);
 
            send_forwarded_response(
              ctx->get_session_context()->client_session_id,
              from,
              response_header,
              ctx->serialise_response());
            break;
          }
 
          case ForwardedMsg::forwarded_response_v3:
          case ForwardedMsg::forwarded_response_v2:
          {
            const auto forwarded_hdr_v2 =
              serialized::peek<ForwardedHeader_v2>(data, size);
            const auto cmd_id = forwarded_hdr_v2.id;
 
            // Cancel and delete the corresponding timeout task, so it will no
            // longer trigger a timeout error
            std::lock_guard<ccf::pal::Mutex> guard(timeout_tasks_lock);
            auto it = timeout_tasks.find(cmd_id);
            if (it != timeout_tasks.end())
            {
              it->second->cancel_task();
              it = timeout_tasks.erase(it);
            }
            else
            {
              LOG_FAIL_FMT(
                "Response for {} received too late - already sent timeout "
                "error to client",
                cmd_id);
              return;
            }
            // Deliberate fall-through
          }
 
          case ForwardedMsg::forwarded_response_v1:
          {
            std::optional<ForwardedResponseResult> rep;
            if (forwarded_msg == ForwardedMsg::forwarded_response_v3)
            {
              rep = recv_forwarded_response<ForwardedResponseHeader_v3>(
                from, data, size);
            }
            else if (forwarded_msg == ForwardedMsg::forwarded_response_v2)
            {
              rep =
                recv_forwarded_response<ForwardedHeader_v2>(from, data, size);
            }
            else
            {
              rep =
                recv_forwarded_response<ForwardedHeader_v1>(from, data, size);
            }
 
            if (!rep.has_value())
            {
              return;
            }
 
            LOG_DEBUG_FMT(
              "Sending forwarded response to RPC endpoint {}",
              rep->client_session_id);
 
            auto rpc_responder_shared = rpcresponder.lock();
            if (
              rpc_responder_shared &&
              !rpc_responder_shared->reply_async(
                rep->client_session_id,
                rep->should_terminate_session,
                std::move(rep->response_body)))
            {
              return;
            }
 
            break;
          }
 
          default:
          {
            LOG_FAIL_FMT("Unknown frontend msg type: {}", forwarded_msg);
            break;
          }
        }
      }
      catch (const std::exception& e)
      {
        LOG_FAIL_FMT("Exception in {}", __PRETTY_FUNCTION__);
        LOG_DEBUG_FMT("Error: {}", e.what());
        return;
      }
    }
  };
}