【问题标题】:Usage of Unix getaddrinfo C function to start set the server使用 Unix getaddrinfo C 函数启动设置服务器
【发布时间】:2019-05-27 03:06:11
【问题描述】:

我正在用 C 语言构建一个客户端-服务器应用程序,源代码取自《Unix 环境中的高级编程》一书。

在服务器中它正在执行以下操作:

struct addrinfo hint;
memset(&hint, 0, sizeof(hint));
hint.ai_flags = AI_CANONNAME;
hint.ai_socktype = SOCK_STREAM;
hint.ai_addr = NULL;
hint.ai_next = NULL;
....
if ((n = sysconf(_SC_HOST_NAME_MAX))<0)
{
    n = HOST_NAME_MAX;
}
if((host = malloc(n)) == NULL)
{
    printf("malloc error\n");
    exit(1);
}
if (gethostname(host, n)<0)
{
    printf("gethostname error\n");
    exit(1);
}
...
if((err = getaddrinfo(host, "ruptime", &hint, &ailist))!=0)
{
    syslog(LOG_ERR, "ruptimed: getaddrinfo error %s", gai_strerror(err));
    exit(1);
}
for (aip = ailist; aip!=NULL; aip = aip->ai_next)
{
    if ((sockfd = initserver(SOCK_STREAM, aip->ai_addr, aip->ai_addrlen, QLEN))>=0)
    {
        //printf("starting to serve\n");
        serve(sockfd);
        exit(0);
    }
}

据我了解,函数getaddrinfo 用于在主机上查看运行名为ruptime 且类型为SOCK_STREAM 的服务的套接字地址结构。

虽然书中没有指定,但为了工作,我必须在文件/etc/services/ 中运行一个新条目,使用未使用的端口和指定的名称ruptime

ruptime         49152/tcp #ruptime Unix System Programming
ruptime         49152/udp #ruptime Unix System Programming

虽然未使用,但建议添加 UDP 部分。

但是它说的文档

如果在hints.ai_flags 中指定了AI_PASSIVE 标志,并且节点是 NULL,那么返回的套接字地址将适合 绑定(2)一个将接受(2)连接的套接字。返回的 套接字地址将包含“通配符地址”(INADDR_ANY IPv4 地址,IN6ADDR_ANY_INIT 用于 IPv6 地址)。通配符 应用程序(通常是服务器)使用地址 接受任何主机网络地址上的连接。

所以从这里和其他关于 SO 的讨论来看:

hint.ai_flags |= AI_PASSIVE
...
getaddrinfo(NULL, myserviceport, &hint, &aihint)

似乎更合适。

这两种方法到底有什么区别?第二个是否也在寻找SOCK_DGM?在书中选择第一种方法有什么原因吗?第二种方式,因为我在代码中指定了端口,是否允许避免在/etc/services/中添加新条目?

另一个问题。 对于客户端,我必须传递主机名。我认为环回(客户端和服务器在同一台机器上运行)地址就可以了。相反,主机名类似于./client MBPdiPippo.lan。什么定义了可以使用主机名但不能使用环回地址创建连接这一事实?是我将host 作为第一个参数传递给服务器中的getaddrinfo 吗?

完整代码

server.c

#include<stdio.h>
#include<stdlib.h>
#include<unistd.h> //_SC_HOST_NAME_MAX
#include<string.h>
#include<netdb.h> //Here are defined AF_INET and the others of the family
#include<syslog.h> //LOG_ERR
#include<errno.h> //errno
#include <sys/types.h>

#include"utilities.h"
#include "error.h"

#define BUFLEN 128
#define QLEN 10

#ifndef HOST_NAME_MAX
#define HOST_NAME_MAX 156
#endif

int initserver(int type, const struct sockaddr *addr, socklen_t alen, int qlen);
void serve(int sockfd);

int main(int argc, char* argv[])
{
    printf("entered main\n");
    struct addrinfo *ailist, *aip, hint;
    int sockfd, err, n;
    char *host;
    if (argc != 1)
    {
        printf("usage: ruptimed\n");
        exit(1);
    }
    if ((n=sysconf(_SC_HOST_NAME_MAX))<0)
    {
        n = HOST_NAME_MAX;
    }
    if((host = malloc(n)) == NULL)
    {
        printf("malloc error\n");
        exit(1);
    }
    if (gethostname(host, n)<0)
    {
        printf("gethostname error\n");
        exit(1);
    }
    printf("host: %s\n", host);
    printf("Daemonizing\n");
    int res = daemonize("ruptimed");
    printf("%d\n", res);
    printf("Daemonized\n");
    memset(&hint, 0, sizeof(hint)); //set to 0 all bytes
    printf("hint initialized\n");
    hint.ai_flags = AI_CANONNAME;
    hint.ai_socktype = SOCK_STREAM;
    hint.ai_canonname = NULL;
    hint.ai_addr = NULL;
    hint.ai_next = NULL;
    printf("getting addresses\n");
    if((err = getaddrinfo(host, "ruptime", &hint, &ailist))!=0)
    {
        printf("error %s\n", gai_strerror(err));
        syslog(LOG_ERR, "ruptimed: getaddrinfo error %s", gai_strerror(err));
        exit(1);
    }
    printf("Got addresses\n");
    for (aip = ailist; aip!=NULL; aip = aip->ai_next)
    {
        if ((sockfd = initserver(SOCK_STREAM, aip->ai_addr, aip->ai_addrlen, QLEN))>=0)
        {
            printf("starting to serve\n");
            serve(sockfd);
            exit(0);
        }
    }
    exit(1);
}

void serve(int sockfd)
{
    int clfd;
    FILE *fp;
    char buf[BUFLEN];
    set_cloexec(sockfd);
    for(;;)
    {
        /*After listen, the socket can receive connect requests. accept
        retrieves a connect request and converts it into a connection.
        The file returned by accept is a socket descriptor connected to the client that
        called connect, haing the same coket type and family type. The original
        soket remains available to receive otherconneion requests. If we don't care
        about client's identity we can set the second (struct sockaddr *addr)
        and third parameter (socklen_t *len) to NULL*/
        if((clfd = accept(sockfd, NULL, NULL))<0)
        {
            /*This generates a log mesage.
            syslog(int priority, const char *fformat,...)
            priority is a combination of facility and level. Levels are ordered from highest to lowest:
            LOG_EMERG: emergency system unusable
            LOG_ALERT: condiotin that must be fied immediately
            LOG_CRIT: critical condition
            LOG_ERR: error condition
            LOG_WARNING
            LOG_NOTICE
            LOG_INFO
            LOG_DEBUG
            format and other arguments are passed to vsprintf function forf formatting.*/
            syslog(LOG_ERR, "ruptimed: accept error: %s", strerror(errno));
            exit(1);
        }
        /* set the FD_CLOEXEC file descriptor flag */
        /*it causes the file descriptor to be automatically and atomically closed
         when any of the exec family function is called*/
        set_cloexec(clfd);
        /**pg. 542 Since a common operation is to create a pipe to another process
        to either read its output or write its input Stdio has provided popen and
        pclose: popen creates pipe, close the unused ends of the pipe,
        forks a child and call exec to execute cmdstr and
        returns a file pointer (connected to std output if "r", to stdin if "w").
        pclose closes the stream, waits for the command to terminate*/
        if ((fp = popen("/usr/bin/uptime", "r")) == NULL)
        {
            /*sprintf copy the string passed as second parameter inside buf*/
            sprintf(buf, "error: %s\n", strerror(errno));
            /*pag 610. send is similar to write. send(int sockfd, const void *buf, size_t nbytes, it flags)*/
            send(clfd, buf, strlen(buf),0);
        }
        else
        {
            /*get data from the pipe that reads created to exec /usr/bin/uptime */
            while(fgets(buf, BUFLEN, fp)!=NULL)
            {
                /* clfd is returned by accept and it is a socket descriptor
                connected to the client that called connect*/
                send(clfd, buf, strlen(buf), 0);
            }
            /*see popen pag. 542*/
            pclose(fp);
        }
        close(clfd);
    }
}


int initserver(int type, const struct sockaddr *addr, socklen_t alen, int qlen)
{
    int fd, err;
    int reuse = 1;
    if ((fd = socket(addr->sa_family, type, 0))<0)
    {
        return (-1);
    }
    if (setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &reuse, sizeof(int))<0)
    {
        goto errout;
    }
    if(bind(fd, addr, alen)<0)
    {
        goto errout;
    }
    if (type == SOCK_STREAM || type == SOCK_SEQPACKET)
    {
        if(listen(fd, qlen)<0)
        {
            goto errout;
        }
    }
    return fd;
    errout:
        err = errno;
        close (fd);
        errno = err;
        return(-1);
}

utilities.c:包含demonizesetcloexec 函数。在daemonize 函数中,我没有关闭文件描述符以进行调试。

#include "utilities.h"
#include <stdlib.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <stdio.h>
#include <syslog.h>
#include <sys/time.h>//getrlimit
#include <sys/resource.h>//getrlimit
#include <signal.h> //sigempyset , asigcation (umask?)
#include <sys/resource.h>
#include <fcntl.h> //O_RDWR
#include <stdarg.h>

#include "error.h"
int daemonize(const char *cmd)
{
    int fd0, fd1, fd2;
    unsigned int i;
    pid_t pid;
    struct rlimit       rl;
    struct sigaction    sa;
    /* *Clear file creation mask.*/
    umask(0);
    /* *Get maximum number of file descriptors. */
    if (getrlimit(RLIMIT_NOFILE, &rl) < 0)
    {
        err_quit("%s: can’t get file limit", cmd);
    }
    /* *Become a session leader to lose controlling TTY. */
    if ((pid = fork()) < 0)
    {
        err_quit("%s: can’t fork", cmd);
    }
    else if (pid != 0) /* parent */
    {
        exit(0); //the parent will exit
    }
    setsid();
    /* *Ensure future opens won’t allocate controlling TTYs. */
    sa.sa_handler = SIG_IGN;
    sigemptyset(&sa.sa_mask);
    sa.sa_flags = 0;
    if (sigaction(SIGHUP, &sa, NULL) < 0)
    {
        err_quit("%s: can’t ignore SIGHUP", cmd);
    }
    if ((pid = fork()) < 0)
    {
        err_quit("%s: can’t fork", cmd);
    }
    else if (pid != 0) /* parent */
    {
        exit(0);
    }
    /*
    *Change the current working directory to the root so
    * we won’t prevent file systems from being unmounted.
    */
    if (chdir("/") < 0)
    {
        err_quit("%s: can’t change directory to /", cmd);
    }
    /* Close all open file descriptors. */
    if (rl.rlim_max == RLIM_INFINITY)
    {
        rl.rlim_max = 1024;
    }
    printf("closing file descriptors\n");
    /*for (i = 0; i < rl.rlim_max; i++)
    {
        close(i);
    }*/
    /* *Attach file descriptors 0, 1, and 2 to /dev/null.*/
    //printf not working
    /*printf("closed all file descriptors for daemonizing\n");*/
    /*fd0 = open("/dev/null", O_RDWR);
    fd1 = dup(0);
    fd2 = dup(0);*/
    /* *Initialize the log file. Daemons do not have a controlling terminal so
    they can't write to stderror. We don't want them to write to the console device
    because on many workstations the control device runs a windowing system. They can't
    write on separate files either. A central daemon error-logging facility is required.
    This is the BSD. 3 ways to generate log messages:
    1) kernel routines call the log function. These messages can be read from /dev/klog
    2) Most user processes (daemons) call syslog to generate log messages. This causes
    messages to be sent to the UNIX domain datagram socket /dev/log
    3) A user process on this host or on other host connected to this with TCP/ID
    can send log messages to UDP port 514. Explicit network programmin is required
    (it is not managed by syslog.
    The syslogd daemon reads al three of log messages.

    openlog is optional since if not called, syslog calls it. Also closelog is optional
    openlog(const char *ident, int option, int facility)
    It lets us specify ident that is added to each logmessage. option is a bitmask:
        LOG_CONS tells that if the log message can't be sent to syslogd via UNIX
        domain datagram, the message is written to the console instead.
    facility lets the configuration file specify that messages from different
    facilities are to be handled differently. It can be specified also in the 'priority'
    argument of syslog. LOG_DAEMON is for system deamons
    */
    /*
    openlog(cmd, LOG_CONS, LOG_DAEMON);
    if (fd0 != 0 || fd1 != 1 || fd2 != 2)
    {*/
        /*This generates a log mesage.
        syslog(int priority, const char *fformat,...)
        priority is a combination of facility and level. Levels are ordered from highest to lowest:
        LOG_EMERG: emergency system unusable
        LOG_ALERT: condiotin that must be fied immediately
        LOG_CRIT: critical condition
        LOG_ERR: error condition
        LOG_WARNING
        LOG_NOTICE
        LOG_INFO
        LOG_DEBUG

        format and other arguments are passed to vsprintf function forf formatting.*/
        /*syslog(LOG_ERR, "unexpected file descriptors %d %d %d", fd0, fd1, fd2);
        exit(1);
    }*/
    return 0;
}

/*The function set the FD_CLOEXEC flag of the file descriptor already open that
is passed to as parameter. FD_CLOEXEC causes the file descriptor to be
automatically and atomically closed when any of the exec family function is
called*/
int set_cloexec(int fd)
{
    int val;
    /* retrieve the flags of the file descriptor */
    if((val = fcntl(fd, F_GETFD, 0))<0)
    {
        return -1;
    }
    /* set the FD_CLOEXEC file descriptor flag */
    /*it causes the file descriptor to be automatically and atomically closed
     when any of the exec family function is called*/
    val |= FD_CLOEXEC;
    return (fcntl(fd, F_SETFD, val));
}

错误函数我用过

/* Fatal error unrelated to a system call.
* Print a message and terminate*/
void err_quit (const char *fmt, ...)
{
    va_list ap;
    va_start (ap, fmt);
    err_doit (0, 0, fmt, ap);
    va_end (ap);
    exit(1);
}

/*Print a message and return to caller.
*Caller specifies "errnoflag"*/
static void err_doit(int errnoflag, int error, const char *fmt, va_list ap)
{
    char buf [MAXLINE];
    vsnprintf (buf, MAXLINE-1, fmt, ap);
    if (errnoflag)
    {
        snprintf (buf+strlen(buf), MAXLINE-strlen(buf)-1, ": %s",
            strerror (error));
    }
    strcat(buf, "\n");
    fflush(stdout); /*in case stdout and stderr are the same*/
    fputs (buf, stderr);
    fflush(NULL); /* flushes all stdio output streams*/
}

【问题讨论】:

    标签: c unix server posix getaddrinfo


    【解决方案1】:

    首先,挑剔。 getaddrinfo() 代码应该合并到initserver() 函数中,并且在循环之后释放套接字结构的链接列表(使用freeaddrinfo())。这使得代码更易于维护;您希望紧密耦合的实现保持紧密。

    这两种方法到底有什么区别?

    绑定到通配符地址(即,使用getaddrinfo()获取合适的套接字描述时使用NULL节点和AI_PASSIVE标志)意味着套接字作为一个集合绑定到所有网络接口,而不是特定网络接口.当您绑定到特定的节点名称时,您将绑定到特定的网络接口。

    实际上,这意味着如果额外的网络接口在运行时可用,内核将在路由数据包到/从绑定到通配符地址的套接字时考虑它们。

    这确实应该由每个系统管理员做出选择,因为在某些用例中,服务(您的应用程序)应该侦听所有网络接口上的传入连接,但在其他用例中,服务应该侦听传入连接仅在特定或某些特定接口上。一个典型的情况是一台机器连接到多个网络。对于服务器来说,这令人惊讶地普遍。对于实际案例,请参见例如如何配置the Apache web server

    就我个人而言,我会重写 OP 的 initServer() 函数,如下所示:

    enum {
        /* TCP=1, UDP=2, IPv4=4, IPv6=8 */
        SERVER_TCPv4 = 5,   /* IPv4 | TCP */
        SERVER_UDPv4 = 6,   /* IPv4 | UDP */
        SERVER_TCPv6 = 9,   /* IPv6 | TCP */
        SERVER_UDPv6 = 10,  /* IPv6 | UDP */
        SERVER_TCP   = 13,  /* Any  | TCP */
        SERVER_UDP   = 14   /* Any  | UDP */
    };
    
    int initServer(const char *host, const char *port,
                   const int type, const int backlog)
    {
        struct addrinfo  hints, *list, *curr;
        const char      *node;
        int              family, socktype, result, fd;
    
        if (!host || !*host || !strcmp(host, "*"))
            node = NULL;
        else
            node = host;
    
        switch (type) {
        case SERVER_TCPv4: family = AF_INET;   socktype = SOCK_STREAM; break;
        case SERVER_TCPv6: family = AF_INET6;  socktype = SOCK_STREAM; break;
        case SERVER_TCP:   family = AF_UNSPEC; socktype = SOCK_STREAM; break;
        case SERVER_UDPv4: family = AF_INET;   socktype = SOCK_DGRAM;  break;
        case SERVER_UDPv6: family = AF_INET6;  socktype = SOCK_DGRAM;  break;
        case SERVER_UDP:   family = AF_UNSPEC; socktype = SOCK_DGRAM;  break;
        default:
            fprintf(stderr, "initServer(): Invalid server type.\n");
            return -1;
        }
        memset(&hints, 0, sizeof hints);
        hints.ai_flags = AI_PASSIVE;
        hints.ai_family = family;
        hints.ai_socktype = socktype;
        hints.ai_protocol = 0;
        hints.ai_canonname = NULL;
        hints.ai_addr = NULL;
        hints.ai_next = NULL;
        result = getaddrinfo(node, port, &hints, &list);
        if (result) {
            /* Fail. Output error message to standard error. */
            fprintf(stderr, "initServer(): %s.\n", gai_strerror(result));
            return -1;
        }
    
        fd = -1;
        for (curr = list; curr != NULL; curr = curr->ai_next) {
            int  reuse = 1;
    
            fd = socket(curr->ai_family, curr->ai_socktype, curr->ai_protocol);
            if (fd == -1)
                continue;
    
            if (bind(fd, curr->ai_addr, curr->ai_addrlen) == -1) {
                close(fd);
                fd = -1;
                continue;
            }
    
            if (setsockopt(fd, SOL_SOCKET, SO_REUSEADDR,
                            &reuse, sizeof (int)) == -1) {
                close(fd);
                fd = -1;
                continue;
            }
    
            if (listen(fd, backlog) == -1) {
                close(fd);
                fd = -1;
                continue;
            }
    
            break;
        }
        freeaddrinfo(list);
        if (fd == -1) {
            fprintf(stderr, "initServer(): Cannot bind to a valid socket.\n");
            return -1;
        }
    
        return fd;
    }
    

    (注意:代码未经测试,甚至没有编译;但底层逻辑是合理的。如果您发现任何问题或错误,请在评论中告诉我,以便我可以查看、检查并在必要时进行修复。)

    这样,您可以从配置文件中读取hostport。如果host"*"、空或NULL,该函数将尝试绑定到通配符地址。 (顺便说一句,这应该是默认设置;如果服务器管理员想要限制特定接口,他们可以提供 IP 地址或与该接口对应的主机名。)

    同样,系统管理员可以使用配置文件将port指定为services数据库中定义的任意字符串(getent services),或者指定为十进制数字字符串;在 OP 的情况下,"49152""ruptime" 都可以工作。

    由于我在代码中指定了端口,是否允许避免在 /etc/services/ 中添加新条目?

    services 数据库(运行 getent services 以在您的计算机上查看)仅包含 TCP (SOCK_STREAM) 和/或 UDP (SOCK_DGRAM) 协议的服务名称和端口号之间的映射。

    避免将ruptime 49152/tcp 条目添加到服务数据库的唯一方法是将端口指定为十进制数字字符串"49152",而不是名称"ruptime"。这会影响服务器和客户端。 (也就是说,即使您的服务器知道 ruptime 是 TCP 套接字的端口 49152,客户端也不会知道这一点,除非他们在自己的服务数据库中拥有它。)

    通常,大多数管理员不会费心编辑服务数据库,而是使用明确的端口号。如果您安装了防火墙(以及相关的实用程序,如 fail2ban,我什至建议在工作站和笔记本电脑上使用),如果端口号清楚地显示在服务配置文件中,则维护规则会更容易。

    我自己会使用端口号。

    对于在同一台机器上运行的客户端,我必须传递主机名。我认为环回地址会起作用。什么定义了可以使用主机名但不能使用环回地址创建连接这一事实?是我将主机作为第一个参数传递给服务器中的 getaddrinfo 吗?

    是的。如果将服务绑定到通配符地址,它将响应所有网络接口上的请求,包括环回地址。

    如果您绑定到特定的主机名,它只会响应对该特定网络接口的请求。

    (这是由操作系统内核完成的,是网络数据包路由到用户空间应用程序的一部分。)

    这也意味着绑定到特定主机名(而不是通配符地址)的“正确”启用 Internet 的服务应该真正能够侦听多个套接字上的传入连接,而不仅仅是一个。它可能不是绝对必要的,甚至在大多数用例中都不需要,但我可以告诉你,当服务在跨越多个不同网络的机器上运行时,它肯定会派上用场,并且你想提供只为其中一些人提供服务。幸运的是,您可以使监听套接字成为非阻塞(使用fcntl(fd, F_SETFL, O_NONBLOCK)——我还建议在定义O_CLOEXEC 的系统上使用fcntl(fd, F_SETFD, O_CLOEXEC),这样监听套接字就不会意外传递给执行外部二进制文件的子进程),并且然后使用select()poll() 等待accept()able 连接;当连接到达时,每个套接字都变得可读。

    【讨论】:

    • 感谢您花时间和精力写出这个清晰的答案。很多有用的提示。我会尝试它们,也许会出现更多问题。但是我尝试了通配符方式并且它有效,但我不得不删除AI_CANONNAME标志的设置。我试图阅读它的作用,但仍然对它有一些疑问,但它应该只对返回的列表有效:为什么会这样? (也许创建另一个问题更好?)
    • @FrancescoBoi:如果node 为NULL,但您使用AI_CANONNAME,则getaddrinfo() 调用将失败,返回EAI_BADFLAGS,如man 3 getaddrinfo 中所述。 POSIX spec for getaddrinfo() 更清楚:如果设置了AI_CANONNAME,该函数将尝试查找与node 对应的规范名称(可以是本地别名);如果找到,则在第一个结果的ai_canonname 字段中返回。 [...]
    • [...] 虽然 POSIX 没有明确说明使用带有 NULL 的 AI_CANONNAME nodeEAI_BADFLAGS 错误,但它只描述了设置 AI_CANONNAME 并且 @ 987654373@ 是非 NULL。因此,我们不能使用getaddrinfo() 来获取当前机器的任何一种“通用”或“主”主机名; AI_CANONNAME 只尝试找到与我们在node 中指定的名称或别名相对应的准确主机名。可以使用getent hosts查看静态IP地址查找表;第一个字段是 IP 地址,第二个字段是规范名称,其他字段是别名。
    • 我刚刚写了一个小测试程序,验证AI_CANONNAME也处理DNSCNAME records,通常称为DNS别名。在实践中这并不重要,因为名称解析器会将规范名称及其所有别名解析到同一个地址;我只是想补充一下我上面的评论。总之:当node 是别名时,无论是本地主机数据库别名还是DNS CNAME 别名,AI_CANONNAME 标志告诉函数尝试将其解析为规范名称。我从来没有在我的任何服务守护进程中需要或使用过该标志。
    猜你喜欢
    • 2012-12-06
    • 2019-07-02
    • 2013-04-17
    • 1970-01-01
    • 2015-08-08
    • 2017-08-01
    • 1970-01-01
    • 2021-10-30
    • 2019-11-29
    相关资源
    最近更新 更多