stun

package module
v1.16.5 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Aug 16, 2018 License: BSD-3-Clause Imports: 19 Imported by: 0

README

Build Status Master status Build status GoDoc codecov Go Report stability-beta

STUN

Package stun implements Session Traversal Utilities for NAT (STUN) [RFC 5389] with no external dependencies and zero allocations in hot paths. Complies to gortc principles as core package.

See example and stun server for simple usage. Also see gortc/turn for TURN [RFC 5766] implementation and gortcd for TURN and STUN server.

Example

You can get your current IP address from any STUN server by sending binding request. See more idiomatic example at cmd/stun-client.

package main

import (
	"fmt"
	"time"

	"github.com/gortc/stun"
)

func main() {
	// Creating a "connection" to STUN server.
	c, err := stun.Dial("udp", "stun.l.google.com:19302")
	if err != nil {
		panic(err)
	}
	// Building binding request with random transaction id.
	message := stun.MustBuild(stun.TransactionID, stun.BindingRequest)
	// Sending request to STUN server, waiting for response message.
	if err := c.Do(message, func(res stun.Event) {
		if res.Error != nil {
			panic(res.Error)
		}
		// Decoding XOR-MAPPED-ADDRESS attribute from message.
		var xorAddr stun.XORMappedAddress
		if err := xorAddr.GetFrom(res.Message); err != nil {
			panic(err)
		}
		fmt.Println("your IP is", xorAddr.IP)
	}); err != nil {
		panic(err)
	}
}

RFCs

The package aims to implement the following RFCs. Note that the requirement status is based on the WebRTC spec, focusing on data channels for now.

rfc status requirement description
RFC5389 status status Session Traversal Utilities for NAT
IPv6 status status IPv6 support
(TLS-over-)TCP status status Sending over TCP or TLS-over-TCP
ALTERNATE-SERVER status status ALTERNATE-SERVER Mechanism

Stability

Package is currently approaching beta stage, API should be fairly stable (with exception of Agent and Client) and implementation is almost complete. Bug reports are welcome.

Additional attributes are unlikely to be implemented in scope of stun package, the only exception is constants for attribute or message types.

RFC 3489 notes

RFC 5389 obsoletes RFC 3489, so implementation was ignored by purpose, however, RFC 3489 can be easily implemented as separate package.

Requirements

Go 1.10 is currently supported and tested in CI. Should work on 1.9 and tip.

Benchmarks

Intel(R) Core(TM) i7-8700K:

version: 1.13.0
goos: linux
goarch: amd64
pkg: github.com/gortc/stun
PASS
benchmark                                         iter       time/iter      throughput   bytes alloc        allocs
---------                                         ----       ---------      ----------   -----------        ------
BenchmarkMappedAddress_AddTo-12              100000000     23.50 ns/op                        0 B/op   0 allocs/op
BenchmarkAlternateServer_AddTo-12            100000000     23.90 ns/op                        0 B/op   0 allocs/op
BenchmarkAgent_GC-12                           1000000   1978.00 ns/op                        0 B/op   0 allocs/op
BenchmarkAgent_Process-12                     30000000     50.30 ns/op                        0 B/op   0 allocs/op
BenchmarkMessage_GetNotFound-12              300000000      4.29 ns/op                        0 B/op   0 allocs/op
BenchmarkMessage_Get-12                      300000000      5.15 ns/op                        0 B/op   0 allocs/op
BenchmarkClient_Do-12                          3000000    441.00 ns/op                        0 B/op   0 allocs/op
BenchmarkErrorCode_AddTo-12                   30000000     41.70 ns/op                        0 B/op   0 allocs/op
BenchmarkErrorCodeAttribute_AddTo-12          50000000     31.80 ns/op                        0 B/op   0 allocs/op
BenchmarkErrorCodeAttribute_GetFrom-12       200000000      7.88 ns/op                        0 B/op   0 allocs/op
BenchmarkFingerprint_AddTo-12                 30000000     46.00 ns/op     955.88 MB/s        0 B/op   0 allocs/op
BenchmarkFingerprint_Check-12                 50000000     37.00 ns/op    1407.02 MB/s        0 B/op   0 allocs/op
BenchmarkBuildOverhead/Build-12               10000000    138.00 ns/op                        0 B/op   0 allocs/op
BenchmarkBuildOverhead/BuildNonPointer-12      5000000    264.00 ns/op                      100 B/op   4 allocs/op
BenchmarkBuildOverhead/Raw-12                 10000000    116.00 ns/op                        0 B/op   0 allocs/op
BenchmarkMessageIntegrity_AddTo-12             2000000    661.00 ns/op      30.23 MB/s        0 B/op   0 allocs/op
BenchmarkMessageIntegrity_Check-12             2000000    689.00 ns/op      46.41 MB/s        0 B/op   0 allocs/op
BenchmarkMessage_Write-12                    100000000     16.70 ns/op    1679.40 MB/s        0 B/op   0 allocs/op
BenchmarkMessageType_Value-12               2000000000      0.24 ns/op                        0 B/op   0 allocs/op
BenchmarkMessage_WriteTo-12                  200000000      8.90 ns/op                        0 B/op   0 allocs/op
BenchmarkMessage_ReadFrom-12                 100000000     16.50 ns/op    1210.16 MB/s        0 B/op   0 allocs/op
BenchmarkMessage_ReadBytes-12                100000000     11.30 ns/op    1777.06 MB/s        0 B/op   0 allocs/op
BenchmarkIsMessage-12                       2000000000      0.68 ns/op   29244.55 MB/s        0 B/op   0 allocs/op
BenchmarkMessage_NewTransactionID-12           3000000    547.00 ns/op                        0 B/op   0 allocs/op
BenchmarkMessageFull-12                       10000000    137.00 ns/op                        0 B/op   0 allocs/op
BenchmarkMessageFullHardcore-12               30000000     54.50 ns/op                        0 B/op   0 allocs/op
BenchmarkMessage_WriteHeader-12              300000000      5.63 ns/op                        0 B/op   0 allocs/op
BenchmarkMessage_CloneTo-12                   50000000     24.10 ns/op    2822.59 MB/s        0 B/op   0 allocs/op
BenchmarkMessage_AddTo-12                    300000000      4.26 ns/op                        0 B/op   0 allocs/op
BenchmarkDecode-12                           100000000     15.00 ns/op                        0 B/op   0 allocs/op
BenchmarkUsername_AddTo-12                   100000000     14.80 ns/op                        0 B/op   0 allocs/op
BenchmarkUsername_GetFrom-12                 100000000     11.70 ns/op                        0 B/op   0 allocs/op
BenchmarkNonce_AddTo-12                      100000000     21.10 ns/op                        0 B/op   0 allocs/op
BenchmarkNonce_AddTo_BadLength-12            300000000      5.21 ns/op                        0 B/op   0 allocs/op
BenchmarkNonce_GetFrom-12                    100000000     11.70 ns/op                        0 B/op   0 allocs/op
BenchmarkUnknownAttributes/AddTo-12          100000000     18.90 ns/op                        0 B/op   0 allocs/op
BenchmarkUnknownAttributes/GetFrom-12        100000000     13.70 ns/op                        0 B/op   0 allocs/op
BenchmarkXOR-12                              100000000     14.50 ns/op   70824.89 MB/s
BenchmarkXORSafe-12                           20000000     99.30 ns/op   10308.81 MB/s
BenchmarkXORFast-12                          100000000     14.10 ns/op   72835.87 MB/s
BenchmarkXORMappedAddress_AddTo-12            50000000     35.10 ns/op                        0 B/op   0 allocs/op
BenchmarkXORMappedAddress_GetFrom-12          50000000     24.00 ns/op                        0 B/op   0 allocs/op
ok  	github.com/gortc/stun	71.692s

Documentation

Overview

Package stun implements Session Traversal Utilities for NAT (STUN) RFC 5389.

The stun package is intended to use by package that implements extension to STUN (e.g. TURN) or client/server applications.

Most methods are designed to be zero allocations. If it is not enough, low-level methods are available. On other hand, there are helpers that reduce code repeat.

See examples for Message for basic usage, or https://github.com/gortc/turn package for example of stun extension implementation.

Index

Examples

Constants

View Source 
const (
	DefaultPort    = 3478
	DefaultTLSPort = 5349
)

IANA assigned ports for "stun" protocol.

View Source 
const (

	// TransactionIDSize is length of transaction id array (in bytes).
	TransactionIDSize = 12 // 96 bit
)

Variables

View Source 
var (
	// ErrTransactionStopped indicates that transaction was manually stopped.
	ErrTransactionStopped = errors.New("transaction is stopped")
	// ErrTransactionNotExists indicates that agent failed to find transaction.
	ErrTransactionNotExists = errors.New("transaction not exists")
	// ErrTransactionExists indicates that transaction with same id is already
	// registered.
	ErrTransactionExists = errors.New("transaction exists with same id")
)
View Source 
var (
	// Binding request message type.
	BindingRequest = NewType(MethodBinding, ClassRequest)
	// Binding success response message type
	BindingSuccess = NewType(MethodBinding, ClassSuccessResponse)
	// Binding error response message type.
	BindingError = NewType(MethodBinding, ClassErrorResponse)
)

Common STUN message types.

View Source 
var ErrAgentClosed = errors.New("agent is closed")

ErrAgentClosed indicates that agent is in closed state and is unable to handle transactions.

View Source 
var ErrAttributeNotFound = errors.New("attribute not found")

ErrAttributeNotFound means that attribute with provided attribute type does not exist in message.

View Source 
var ErrAttributeSizeInvalid = errors.New("attribute size is invalid")

ErrAttributeSizeInvalid means that decoded attribute size is invalid.

View Source 
var ErrAttributeSizeOverflow = errors.New("attribute size overflow")

ErrAttributeSizeOverflow means that decoded attribute size is too big.

View Source 
var ErrBadIPLength = errors.New("invalid length of IP value")

ErrBadIPLength means that len(IP) is not net.{IPv6len,IPv4len}.

View Source 
var ErrBadUnknownAttrsSize = errors.New("bad UNKNOWN-ATTRIBUTES size")

ErrBadUnknownAttrsSize means that UNKNOWN-ATTRIBUTES attribute value has invalid length.

View Source 
var ErrClientClosed = errors.New("client is closed")

ErrClientClosed indicates that client is closed.

View Source 
var ErrClientNotInitialized = errors.New("client not initialized")

ErrClientNotInitialized means that client connection or agent is nil.

View Source 
var ErrDecodeToNil = errors.New("attempt to decode to nil message")

ErrDecodeToNil occurs on Decode(data, nil) call.

View Source 
var ErrFingerprintBeforeIntegrity = errors.New(
	"FINGERPRINT before MESSAGE-INTEGRITY attribute",
)

ErrFingerprintBeforeIntegrity means that FINGEPRINT attribute is already in message, so MESSAGE-INTEGRITY attribute cannot be added.

View Source 
var ErrFingerprintMismatch = errors.New("fingerprint check failed")

ErrFingerprintMismatch means that computed fingerprint differs from expected.

View Source 
var ErrIntegrityMismatch = errors.New("integrity check failed")

ErrIntegrityMismatch means that computed HMAC differs from expected.

View Source 
var ErrNoConnection = errors.New("no connection provided")

ErrNoConnection means that ClientOptions.Connection is nil.

View Source 
var ErrNoDefaultReason = errors.New("no default reason for ErrorCode")

ErrNoDefaultReason means that default reason for provided error code is not defined in RFC.

View Source 
var ErrTransactionTimeOut = errors.New("transaction is timed out")

ErrTransactionTimeOut indicates that transaction has reached deadline.

View Source 
var ErrUnexpectedHeaderEOF = errors.New("unexpected EOF: not enough bytes to read header")

ErrUnexpectedHeaderEOF means that there were not enough bytes in m.Raw to read header.

Functions

func CheckOverflow added in v1.13.0 

func CheckOverflow(_ AttrType, got, max int) error

CheckOverflow returns ErrAttributeSizeOverflow if got is bigger that max.

func CheckSize added in v1.11.0 

func CheckSize(_ AttrType, got, expected int) error

CheckSize returns ErrAttrSizeInvalid if got is not equal to expected.

func Decode added in v1.7.0 

func Decode(data []byte, m *Message) error

Decode decodes Message from data to m, returning error if any.

func FingerprintValue 

func FingerprintValue(b []byte) uint32

FingerprintValue returns CRC-32 of b XOR-ed by 0x5354554e.

The value of the attribute is computed as the CRC-32 of the STUN message up to (but excluding) the FINGERPRINT attribute itself, XOR'ed with the 32-bit value 0x5354554e (the XOR helps in cases where an application packet is also using CRC-32 in it).

func IsAttrSizeInvalid added in v1.11.1 

func IsAttrSizeInvalid(err error) bool

IsAttrSizeInvalid returns true if error means that attribute size is invalid.

func IsAttrSizeOverflow added in v1.13.0 

func IsAttrSizeOverflow(err error) bool

IsAttrSizeOverflow returns true if error means that attribute size is too big.

func IsMessage 

func IsMessage(b []byte) bool

IsMessage returns true if b looks like STUN message. Useful for multiplexing. IsMessage does not guarantee that decoding will be successful.

func NewTransactionID 

func NewTransactionID() (b [TransactionIDSize]byte)

NewTransactionID returns new random transaction ID using crypto/rand as source.

func WithNoRetransmit added in v1.16.1 

func WithNoRetransmit(c *Client)

WithNoRetransmit disables retransmissions and sets RTO to defaultMaxAttempts * defaultRTO which will be effectively time out if not set.

Useful for TCP connections where transport handles RTO.

Types

type Agent added in v1.5.1 

type Agent struct {
	// contains filtered or unexported fields
}

Agent is low-level abstraction over transaction list that handles concurrency (all calls are goroutine-safe) and time outs (via Collect call).

func NewAgent added in v1.5.1 

func NewAgent(h Handler) *Agent

NewAgent initializes and returns new Agent with provided handler. If h is nil, the NoopHandler will be used.

func (*Agent) Close added in v1.5.1 

func (a *Agent) Close() error

Close terminates all transactions with ErrAgentClosed and renders Agent to closed state.

func (*Agent) Collect added in v1.5.1 

func (a *Agent) Collect(gcTime time.Time) error

Collect terminates all transactions that have deadline before provided time, blocking until all handlers will process ErrTransactionTimeOut. Will return ErrAgentClosed if agent is already closed.

It is safe to call Collect concurrently but makes no sense.

func (*Agent) Process added in v1.5.1 

func (a *Agent) Process(m *Message) error

Process incoming message, synchronously passing it to handler.

func (*Agent) SetHandler added in v1.14.3 

func (a *Agent) SetHandler(h Handler) error

SetHandler sets agent handler to h.

func (*Agent) Start added in v1.5.1 

func (a *Agent) Start(id [TransactionIDSize]byte, deadline time.Time) error

Start registers transaction with provided id and deadline. Could return ErrAgentClosed, ErrTransactionExists.

Agent handler is guaranteed to be eventually called.

func (*Agent) Stop added in v1.5.1 

func (a *Agent) Stop(id [TransactionIDSize]byte) error

Stop stops transaction by id with ErrTransactionStopped, blocking until handler returns.

func (*Agent) StopWithError added in v1.5.1 

func (a *Agent) StopWithError(id [TransactionIDSize]byte, err error) error

StopWithError removes transaction from list and calls handler with provided error. Can return ErrTransactionNotExists and ErrAgentClosed.

type AlternateServer 

type AlternateServer struct {
	IP   net.IP
	Port int
}

AlternateServer represents ALTERNATE-SERVER attribute.

RFC 5389 Section 15.11

func (*AlternateServer) AddTo 

func (s *AlternateServer) AddTo(m *Message) error

AddTo adds ALTERNATE-SERVER attribute to message.

func (*AlternateServer) GetFrom 

func (s *AlternateServer) GetFrom(m *Message) error

GetFrom decodes ALTERNATE-SERVER from message.

type AttrType 

type AttrType uint16

AttrType is attribute type. 

const (
	AttrMappedAddress     AttrType = 0x0001 // MAPPED-ADDRESS
	AttrUsername          AttrType = 0x0006 // USERNAME
	AttrMessageIntegrity  AttrType = 0x0008 // MESSAGE-INTEGRITY
	AttrErrorCode         AttrType = 0x0009 // ERROR-CODE
	AttrUnknownAttributes AttrType = 0x000A // UNKNOWN-ATTRIBUTES
	AttrRealm             AttrType = 0x0014 // REALM
	AttrNonce             AttrType = 0x0015 // NONCE
	AttrXORMappedAddress  AttrType = 0x0020 // XOR-MAPPED-ADDRESS
)

Attributes from comprehension-required range (0x0000-0x7FFF). 

const (
	AttrSoftware        AttrType = 0x8022 // SOFTWARE
	AttrAlternateServer AttrType = 0x8023 // ALTERNATE-SERVER
	AttrFingerprint     AttrType = 0x8028 // FINGERPRINT
)

Attributes from comprehension-optional range (0x8000-0xFFFF). 

const (
	AttrPriority       AttrType = 0x0024 // PRIORITY
	AttrUseCandidate   AttrType = 0x0025 // USE-CANDIDATE
	AttrICEControlled  AttrType = 0x8029 // ICE-CONTROLLED
	AttrICEControlling AttrType = 0x802A // ICE-CONTROLLING
)

Attributes from RFC 5245 ICE. 

const (
	AttrChannelNumber      AttrType = 0x000C // CHANNEL-NUMBER
	AttrLifetime           AttrType = 0x000D // LIFETIME
	AttrXORPeerAddress     AttrType = 0x0012 // XOR-PEER-ADDRESS
	AttrData               AttrType = 0x0013 // DATA
	AttrXORRelayedAddress  AttrType = 0x0016 // XOR-RELAYED-ADDRESS
	AttrEvenPort           AttrType = 0x0018 // EVEN-PORT
	AttrRequestedTransport AttrType = 0x0019 // REQUESTED-TRANSPORT
	AttrDontFragment       AttrType = 0x001A // DONT-FRAGMENT
	AttrReservationToken   AttrType = 0x0022 // RESERVATION-TOKEN
)

Attributes from RFC 5766 TURN. 

const (
	AttrOrigin AttrType = 0x802F
)

Attributes from An Origin Attribute for the STUN Protocol. 

const (
	AttrRequestedAddressFamily AttrType = 0x0017 // REQUESTED-ADDRESS-FAMILY
)

Attributes from RFC 6156 TURN IPv6.

func (AttrType) Optional added in v1.10.2 

func (t AttrType) Optional() bool

Optional returns true if type is from comprehension-optional range (0x8000-0xFFFF).

func (AttrType) Required added in v1.10.2 

func (t AttrType) Required() bool

Required returns true if type is from comprehension-required range (0x0000-0x7FFF).

func (AttrType) String 

func (t AttrType) String() string

func (AttrType) Value 

func (t AttrType) Value() uint16

Value returns uint16 representation of attribute type.

type Attributes 

type Attributes []RawAttribute

Attributes is list of message attributes.

func (Attributes) Get 

func (a Attributes) Get(t AttrType) (RawAttribute, bool)

Get returns first attribute from list by the type. If attribute is present the RawAttribute is returned and the boolean is true. Otherwise the returned RawAttribute will be empty and boolean will be false.

type Checker 

type Checker interface {
	Check(m *Message) error
}

Checker checks *Message attribute.

type Client added in v1.5.1 

type Client struct {
	// contains filtered or unexported fields
}

Client simulates "connection" to STUN server.

func Dial added in v1.5.1 

func Dial(network, address string) (*Client, error)

Dial connects to the address on the named network and then initializes Client on that connection, returning error if any.

func NewClient added in v1.5.1 

func NewClient(conn Connection, options ...ClientOption) (*Client, error)

NewClient initializes new Client from provided options, starting internal goroutines and using default options fields if necessary. Call Close method after using Client to release resources.

func (*Client) Close added in v1.5.1 

func (c *Client) Close() error

Close stops internal connection and agent, returning CloseErr on error.

func (*Client) Do added in v1.5.1 

func (c *Client) Do(m *Message, f func(Event)) error

Do is Start wrapper that waits until callback is called. If no callback provided, Indicate is called instead.

Do has cpu overhead due to blocking, see BenchmarkClient_Do. Use Start method for less overhead.

func (*Client) Indicate added in v1.5.1 

func (c *Client) Indicate(m *Message) error

Indicate sends indication m to server. Shorthand to Start call with zero deadline and callback.

func (*Client) SetRTO added in v1.14.3 

func (c *Client) SetRTO(rto time.Duration)

SetRTO sets current RTO value.

func (*Client) Start added in v1.5.1 

func (c *Client) Start(m *Message, h Handler) error

Start starts transaction (if f set) and writes message to server, handler is called asynchronously.

type ClientAgent added in v1.5.1 

type ClientAgent interface {
	Process(*Message) error
	Close() error
	Start(id [TransactionIDSize]byte, deadline time.Time) error
	Stop(id [TransactionIDSize]byte) error
	Collect(time.Time) error
	SetHandler(h Handler) error
}

ClientAgent is Agent implementation that is used by Client to process transactions.

type ClientOption added in v1.16.0 

type ClientOption func(c *Client)

ClientOption sets some client option.

func WithAgent added in v1.16.0 

func WithAgent(a ClientAgent) ClientOption

WithAgent sets client STUN agent.

Defaults to agent implementation in current package, see agent.go.

func WithClock added in v1.16.0 

func WithClock(clock Clock) ClientOption

WithClock sets Clock of client, the source of current time. Also clock is passed to default collector if set.

func WithCollector added in v1.16.0 

func WithCollector(coll Collector) ClientOption

WithCollector rests client timeout collector, the implementation of ticker which calls function on each tick.

func WithHandler added in v1.16.0 

func WithHandler(h Handler) ClientOption

WithHandler sets client handler which is called if Agent emits the Event with TransactionID that is not currently registered by Client. Useful for handling Data indications from TURN server.

func WithRTO added in v1.16.0 

func WithRTO(rto time.Duration) ClientOption

WithRTO sets client RTO as defined in STUN RFC.

func WithTimeoutRate added in v1.16.0 

func WithTimeoutRate(d time.Duration) ClientOption

WithTimeoutRate sets RTO timer minimum resolution.

type Clock added in v1.14.3 

type Clock interface {
	Now() time.Time
}

Clock abstracts the source of current time.

type CloseErr added in v1.5.1 

type CloseErr struct {
	AgentErr      error
	ConnectionErr error
}

CloseErr indicates client close failure.

func (CloseErr) Error added in v1.5.1 

func (c CloseErr) Error() string

type Collector added in v1.14.6 

type Collector interface {
	Start(rate time.Duration, f func(now time.Time)) error
	Close() error
}

Collector calls function f with constant rate.

The simple Collector is ticker which calls function on each tick.

type Connection added in v1.5.1 

type Connection interface {
	io.Reader
	io.Writer
	io.Closer
}

Connection wraps Reader, Writer and Closer interfaces.

type DecodeErr 

type DecodeErr struct {
	Place   DecodeErrPlace
	Message string
}

DecodeErr records an error and place when it is occurred.

func (DecodeErr) Error 

func (e DecodeErr) Error() string

func (DecodeErr) IsInvalidCookie 

func (e DecodeErr) IsInvalidCookie() bool

IsInvalidCookie returns true if error means that magic cookie value is invalid.

func (DecodeErr) IsPlace 

func (e DecodeErr) IsPlace(p DecodeErrPlace) bool

IsPlace reports if error place is p.

func (DecodeErr) IsPlaceChildren 

func (e DecodeErr) IsPlaceChildren(c string) bool

IsPlaceChildren reports if error place children is c.

func (DecodeErr) IsPlaceParent 

func (e DecodeErr) IsPlaceParent(p string) bool

IsPlaceParent reports if error place parent is p.

type DecodeErrPlace 

type DecodeErrPlace struct {
	Parent   string
	Children string
}

DecodeErrPlace records a place where error is occurred.

func (DecodeErrPlace) String 

func (p DecodeErrPlace) String() string

type ErrorCode 

type ErrorCode int

ErrorCode is code for ERROR-CODE attribute. 

const (
	CodeTryAlternate     ErrorCode = 300
	CodeBadRequest       ErrorCode = 400
	CodeUnauthorised     ErrorCode = 401
	CodeUnknownAttribute ErrorCode = 420
	CodeStaleNonce       ErrorCode = 438
	CodeRoleConflict     ErrorCode = 478
	CodeServerError      ErrorCode = 500
)

Possible error codes. 

const (
	CodeForbidden             ErrorCode = 403 // Forbidden
	CodeAllocMismatch         ErrorCode = 437 // Allocation Mismatch
	CodeWrongCredentials      ErrorCode = 441 // Wrong Credentials
	CodeUnsupportedTransProto ErrorCode = 442 // Unsupported Transport Protocol
	CodeAllocQuotaReached     ErrorCode = 486 // Allocation Quota Reached
	CodeInsufficientCapacity  ErrorCode = 508 // Insufficient Capacity
)

Error codes from RFC 5766.

RFC 5766 Section 15 

const (
	CodeAddrFamilyNotSupported ErrorCode = 440 // Address Family not Supported
	CodePeerAddrFamilyMismatch ErrorCode = 443 // Peer Address Family Mismatch
)

Error codes from RFC 6156.

RFC 6156 Section 10.2

func (ErrorCode) AddTo 

func (c ErrorCode) AddTo(m *Message) error

AddTo adds ERROR-CODE with default reason to m. If there is no default reason, returns ErrNoDefaultReason.

type ErrorCodeAttribute 

type ErrorCodeAttribute struct {
	Code   ErrorCode
	Reason []byte
}

ErrorCodeAttribute represents ERROR-CODE attribute.

RFC 5389 Section 15.6

func (ErrorCodeAttribute) AddTo 

func (c ErrorCodeAttribute) AddTo(m *Message) error

AddTo adds ERROR-CODE to m.

func (*ErrorCodeAttribute) GetFrom 

func (c *ErrorCodeAttribute) GetFrom(m *Message) error

GetFrom decodes ERROR-CODE from m. Reason is valid until m.Raw is valid.

func (ErrorCodeAttribute) String 

func (c ErrorCodeAttribute) String() string

type Event added in v1.6.1 

type Event struct {
	TransactionID [TransactionIDSize]byte
	Message       *Message
	Error         error
}

Event is passed to Handler describing the transaction event. Do not reuse outside Handler.

type FingerprintAttr 

type FingerprintAttr struct{}

FingerprintAttr represents FINGERPRINT attribute.

RFC 5389 Section 15.5 

var Fingerprint FingerprintAttr

Fingerprint is shorthand for FingerprintAttr.

Example: 

m := New()
Fingerprint.AddTo(m)

func (FingerprintAttr) AddTo 

func (FingerprintAttr) AddTo(m *Message) error

AddTo adds fingerprint to message.

func (FingerprintAttr) Check 

func (FingerprintAttr) Check(m *Message) error

Check reads fingerprint value from m and checks it, returning error if any. Can return *AttrLengthErr, ErrAttributeNotFound, and *CRCMismatch.

type Getter 

type Getter interface {
	GetFrom(m *Message) error
}

Getter parses attribute from *Message.

type Handler added in v1.6.1 

type Handler func(e Event)

Handler handles state changes of transaction.

Handler is called on transaction state change. Usage of e is valid only during call, user must copy needed fields explicitly. 

var NoopHandler Handler = func(e Event) {}

NoopHandler just discards any event.

type MappedAddress 

type MappedAddress struct {
	IP   net.IP
	Port int
}

MappedAddress represents MAPPED-ADDRESS attribute.

This attribute is used only by servers for achieving backwards compatibility with RFC 3489 clients.

RFC 5389 Section 15.1

func (*MappedAddress) AddTo 

func (a *MappedAddress) AddTo(m *Message) error

AddTo adds MAPPED-ADDRESS to message.

func (*MappedAddress) GetFrom 

func (a *MappedAddress) GetFrom(m *Message) error

GetFrom decodes MAPPED-ADDRESS from message.

func (MappedAddress) String 

func (a MappedAddress) String() string

type Message 

type Message struct {
	Type          MessageType
	Length        uint32 // len(Raw) not including header
	TransactionID [TransactionIDSize]byte
	Attributes    Attributes
	Raw           []byte
}

Message represents a single STUN packet. It uses aggressive internal buffering to enable zero-allocation encoding and decoding, so there are some usage constraints: 

Message, its fields, results of m.Get or any attribute a.GetFrom
are valid only until Message.Raw is not modified.
Example 
buf := new(bytes.Buffer)
m := new(Message)
m.Build(BindingRequest,
	NewTransactionIDSetter([TransactionIDSize]byte{
		1, 2, 3, 4, 5, 6, 7, 8, 9, 0, 1,
	}),
	NewSoftware("ernado/stun"),
	NewLongTermIntegrity("username", "realm", "password"),
	Fingerprint,
)
// Instead of calling Build, use AddTo(m) directly for all setters
// to reduce allocations.
// For example:
//	software := NewSoftware("ernado/stun")
//	software.AddTo(m)  // no allocations
// Or pass software as follows:
//	m.Build(&software) // no allocations
// If you pass software as value, there will be 1 allocation.
// This rule is correct for all setters.
fmt.Println(m, "buff length:", len(m.Raw))
n, err := m.WriteTo(buf)
fmt.Println("wrote", n, "err", err)

// Decoding from buf new *Message.
decoded := new(Message)
decoded.Raw = make([]byte, 0, 1024) // for ReadFrom that reuses m.Raw
// ReadFrom does not allocate internal buffer for reading from io.Reader,
// instead it uses m.Raw, expanding it length to capacity.
decoded.ReadFrom(buf)
fmt.Println("has software:", decoded.Contains(AttrSoftware))
fmt.Println("has nonce:", decoded.Contains(AttrNonce))
var software Software
decoded.Parse(&software) // or software.GetFrom(decoded)
// Rule for Parse method is same as for Build.
fmt.Println("software:", software)
if err := Fingerprint.Check(decoded); err == nil {
	fmt.Println("fingerprint is correct")
} else {
	fmt.Println("fingerprint is incorrect:", err)
}
// Checking integrity
i := NewLongTermIntegrity("username", "realm", "password")
if err := i.Check(decoded); err == nil {
	fmt.Println("integrity ok")
} else {
	fmt.Println("integrity bad:", err)
}
fmt.Println("for corrupted message:")
decoded.Raw[22] = 33
if Fingerprint.Check(decoded) == nil {
	fmt.Println("fingerprint: ok")
} else {
	fmt.Println("fingerprint: failed")
}

Output:

binding request l=48 attrs=3 id=AQIDBAUGBwgJAAEA buff length: 68
wrote 68 err <nil>
has software: true
has nonce: false
software: ernado/stun
fingerprint is correct
integrity ok
for corrupted message:
fingerprint: failed

func Build 

func Build(setters ...Setter) (*Message, error)

Build wraps Message.Build method.

func MustBuild added in v1.5.1 

func MustBuild(setters ...Setter) *Message

MustBuild wraps Build call and panics on error.

func New 

func New() *Message

New returns *Message with pre-allocated Raw.

func (*Message) Add 

func (m *Message) Add(t AttrType, v []byte)

Add appends new attribute to message. Not goroutine-safe.

Value of attribute is copied to internal buffer so it is safe to reuse v.

func (*Message) AddTo added in v1.6.3 

func (m *Message) AddTo(b *Message) error

AddTo sets b.TransactionID to m.TransactionID.

Implements Setter to aid in crafting responses.

func (*Message) Build 

func (m *Message) Build(setters ...Setter) error

Build resets message and applies setters to it in batch, returning on first error. To prevent allocations, pass pointers to values.

Example: 

var (
	t        = BindingRequest
	username = NewUsername("username")
	nonce    = NewNonce("nonce")
	realm    = NewRealm("example.org")
)
m := new(Message)
m.Build(t, username, nonce, realm)     // 4 allocations
m.Build(&t, &username, &nonce, &realm) // 0 allocations

See BenchmarkBuildOverhead.

func (*Message) Check 

func (m *Message) Check(checkers ...Checker) error

Check applies checkers to message in batch, returning on first error.

func (*Message) CloneTo added in v1.6.1 

func (m *Message) CloneTo(b *Message) error

CloneTo clones m to b securing any further m mutations.

func (*Message) Contains 

func (m *Message) Contains(t AttrType) bool

Contains return true if message contain t attribute.

func (*Message) Decode 

func (m *Message) Decode() error

Decode decodes m.Raw into m.

func (*Message) Encode 

func (m *Message) Encode()

Encode re-encodes message into m.Raw.

func (*Message) Equal 

func (m *Message) Equal(b *Message) bool

Equal returns true if Message b equals to m. Ignores m.Raw.

func (*Message) ForEach added in v1.12.0 

func (m *Message) ForEach(t AttrType, f func(m *Message) error) error

ForEach is helper that iterates over message attributes allowing to call Getter in f callback to get all attributes of type t and returning on first f error.

The m.Get method inside f will be returning next attribute on each f call. Does not error if there are no results.

func (*Message) Get 

func (m *Message) Get(t AttrType) ([]byte, error)

Get returns byte slice that represents attribute value, if there is no attribute with such type, ErrAttributeNotFound is returned.

func (*Message) NewTransactionID 

func (m *Message) NewTransactionID() error

NewTransactionID sets m.TransactionID to random value from crypto/rand and returns error if any.

func (*Message) Parse 

func (m *Message) Parse(getters ...Getter) error

Parse applies getters to message in batch, returning on first error.

func (*Message) ReadFrom 

func (m *Message) ReadFrom(r io.Reader) (int64, error)

ReadFrom implements ReaderFrom. Reads message from r into m.Raw, Decodes it and return error if any. If m.Raw is too small, will return ErrUnexpectedEOF, ErrUnexpectedHeaderEOF or *DecodeErr.

Can return *DecodeErr while decoding too.

func (*Message) Reset 

func (m *Message) Reset()

Reset resets Message, attributes and underlying buffer length.

func (*Message) SetType 

func (m *Message) SetType(t MessageType)

SetType sets m.Type and writes it to m.Raw.

func (*Message) String 

func (m *Message) String() string

func (*Message) Write 

func (m *Message) Write(tBuf []byte) (int, error)

Write decodes message and return error if any.

Any error is unrecoverable, but message could be partially decoded.

func (*Message) WriteAttributes 

func (m *Message) WriteAttributes()

WriteAttributes encodes all m.Attributes to m.

func (*Message) WriteHeader 

func (m *Message) WriteHeader()

WriteHeader writes header to underlying buffer. Not goroutine-safe.

func (*Message) WriteLength 

func (m *Message) WriteLength()

WriteLength writes m.Length to m.Raw. Call is valid only if len(m.Raw) >= 4.

func (*Message) WriteTo 

func (m *Message) WriteTo(w io.Writer) (int64, error)

WriteTo implements WriterTo via calling Write(m.Raw) on w and returning call result.

func (*Message) WriteTransactionID 

func (m *Message) WriteTransactionID()

WriteTransactionID writes m.TransactionID to m.Raw.

func (*Message) WriteType 

func (m *Message) WriteType()

WriteType writes m.Type to m.Raw.

type MessageClass 

type MessageClass byte

MessageClass is 8-bit representation of 2-bit class of STUN Message Class. 

const (
	ClassRequest         MessageClass = 0x00 // 0b00
	ClassIndication      MessageClass = 0x01 // 0b01
	ClassSuccessResponse MessageClass = 0x02 // 0b10
	ClassErrorResponse   MessageClass = 0x03 // 0b11
)

Possible values for message class in STUN Message Type.

func (MessageClass) String 

func (c MessageClass) String() string

type MessageIntegrity 

type MessageIntegrity []byte

MessageIntegrity represents MESSAGE-INTEGRITY attribute. AddTo and GetFrom methods will allocate memory for cryptographic functions. Zero-allocation version of MessageIntegrity is not implemented. Implementation and changes to it is subject to security review.

RFC 5389 Section 15.4

func NewLongTermIntegrity 

func NewLongTermIntegrity(username, realm, password string) MessageIntegrity

NewLongTermIntegrity returns new MessageIntegrity with key for long-term credentials. Password, username, and realm must be SASL-prepared.

func NewShortTermIntegrity 

func NewShortTermIntegrity(password string) MessageIntegrity

NewShortTermIntegrity returns new MessageIntegrity with key for short-term credentials. Password must be SASL-prepared.

func (MessageIntegrity) AddTo 

func (i MessageIntegrity) AddTo(m *Message) error

AddTo adds MESSAGE-INTEGRITY attribute to message. Be advised, CPU and allocations costly, can be cause of DOS.

func (MessageIntegrity) Check 

func (i MessageIntegrity) Check(m *Message) error

Check checks MESSAGE-INTEGRITY attribute. Be advised, CPU and allocations costly, can be cause of DOS.

func (MessageIntegrity) String 

func (i MessageIntegrity) String() string

type MessageType 

type MessageType struct {
	Method Method       // e.g. binding
	Class  MessageClass // e.g. request
}

MessageType is STUN Message Type Field.

func NewType 

func NewType(method Method, class MessageClass) MessageType

NewType returns new message type with provided method and class.

func (MessageType) AddTo 

func (t MessageType) AddTo(m *Message) error

AddTo sets m type to t.

func (*MessageType) ReadValue 

func (t *MessageType) ReadValue(v uint16)

ReadValue decodes uint16 into MessageType.

func (MessageType) String 

func (t MessageType) String() string

func (MessageType) Value 

func (t MessageType) Value() uint16

Value returns bit representation of messageType.

type Method 

type Method uint16

Method is uint16 representation of 12-bit STUN method. 

const (
	MethodBinding          Method = 0x001
	MethodAllocate         Method = 0x003
	MethodRefresh          Method = 0x004
	MethodSend             Method = 0x006
	MethodData             Method = 0x007
	MethodCreatePermission Method = 0x008
	MethodChannelBind      Method = 0x009
)

Possible methods for STUN Message.

func (Method) String 

func (m Method) String() string

type Nonce 

type Nonce []byte

Nonce represents NONCE attribute.

RFC 5389 Section 15.8

func NewNonce 

func NewNonce(nonce string) Nonce

NewNonce returns new Nonce from string.

func (Nonce) AddTo 

func (n Nonce) AddTo(m *Message) error

AddTo adds NONCE to message.

func (*Nonce) GetFrom 

func (n *Nonce) GetFrom(m *Message) error

GetFrom gets NONCE from message.

func (Nonce) String 

func (n Nonce) String() string

type RawAttribute 

type RawAttribute struct {
	Type   AttrType
	Length uint16 // ignored while encoding
	Value  []byte
}

RawAttribute is a Type-Length-Value (TLV) object that can be added to a STUN message. Attributes are divided into two types: comprehension-required and comprehension-optional. STUN agents can safely ignore comprehension-optional attributes they don't understand, but cannot successfully process a message if it contains comprehension-required attributes that are not understood.

func (RawAttribute) Equal 

func (a RawAttribute) Equal(b RawAttribute) bool

Equal returns true if a == b.

func (RawAttribute) String 

func (a RawAttribute) String() string

type Realm 

type Realm []byte

Realm represents REALM attribute.

RFC 5389 Section 15.7

func NewRealm 

func NewRealm(realm string) Realm

NewRealm returns Realm with provided value. Must be SASL-prepared.

func (Realm) AddTo 

func (n Realm) AddTo(m *Message) error

AddTo adds NONCE to message.

func (*Realm) GetFrom 

func (n *Realm) GetFrom(m *Message) error

GetFrom gets REALM from message.

func (Realm) String 

func (n Realm) String() string

type Setter 

type Setter interface {
	AddTo(m *Message) error
}

Setter sets *Message attribute. 

var TransactionID Setter = transactionIDSetter{}

TransactionID is Setter for m.TransactionID.

func NewTransactionIDSetter 

func NewTransactionIDSetter(value [TransactionIDSize]byte) Setter

NewTransactionIDSetter returns new Setter that sets message transaction id to provided value.

type Software 

type Software []byte

Software is SOFTWARE attribute.

RFC 5389 Section 15.10

func NewSoftware 

func NewSoftware(software string) Software

NewSoftware returns *Software from string.

func (Software) AddTo 

func (s Software) AddTo(m *Message) error

AddTo adds Software attribute to m.

func (*Software) GetFrom 

func (s *Software) GetFrom(m *Message) error

GetFrom decodes Software from m.

func (Software) String 

func (s Software) String() string

type StopErr added in v1.5.1 

type StopErr struct {
	Err   error // value returned by Stop()
	Cause error // error that caused Stop() call
}

StopErr occurs when Client fails to stop transaction while processing error.

func (StopErr) Error added in v1.5.1 

func (e StopErr) Error() string

type TextAttribute 

type TextAttribute []byte

TextAttribute is helper for adding and getting text attributes.

func (TextAttribute) AddToAs 

func (v TextAttribute) AddToAs(m *Message, t AttrType, maxLen int) error

AddToAs adds attribute with type t to m, checking maximum length. If maxLen is less than 0, no check is performed.

func (*TextAttribute) GetFromAs 

func (v *TextAttribute) GetFromAs(m *Message, t AttrType) error

GetFromAs gets t attribute from m and appends its value to reseted v.

type UnknownAttributes 

type UnknownAttributes []AttrType

UnknownAttributes represents UNKNOWN-ATTRIBUTES attribute.

RFC 5389 Section 15.9

func (UnknownAttributes) AddTo 

func (a UnknownAttributes) AddTo(m *Message) error

AddTo adds UNKNOWN-ATTRIBUTES attribute to message.

func (*UnknownAttributes) GetFrom 

func (a *UnknownAttributes) GetFrom(m *Message) error

GetFrom parses UNKNOWN-ATTRIBUTES from message.

func (UnknownAttributes) String 

func (a UnknownAttributes) String() string

type Username 

type Username []byte

Username represents USERNAME attribute.

RFC 5389 Section 15.3

func NewUsername 

func NewUsername(username string) Username

NewUsername returns Username with provided value.

func (Username) AddTo 

func (u Username) AddTo(m *Message) error

AddTo adds USERNAME attribute to message.

func (*Username) GetFrom 

func (u *Username) GetFrom(m *Message) error

GetFrom gets USERNAME from message.

func (Username) String 

func (u Username) String() string

type XORMappedAddress 

type XORMappedAddress struct {
	IP   net.IP
	Port int
}

XORMappedAddress implements XOR-MAPPED-ADDRESS attribute.

RFC 5389 Section 15.2

func (XORMappedAddress) AddTo 

func (a XORMappedAddress) AddTo(m *Message) error

AddTo adds XOR-MAPPED-ADDRESS to m. Can return ErrBadIPLength if len(a.IP) is invalid.

func (XORMappedAddress) AddToAs 

func (a XORMappedAddress) AddToAs(m *Message, t AttrType) error

AddToAs adds XOR-MAPPED-ADDRESS value to m as t attribute.

func (*XORMappedAddress) GetFrom 

func (a *XORMappedAddress) GetFrom(m *Message) error

GetFrom decodes XOR-MAPPED-ADDRESS attribute in message and returns error if any. While decoding, a.IP is reused if possible and can be rendered to invalid state (e.g. if a.IP was set to IPv6 and then IPv4 value were decoded into it), be careful.

Example: 

expectedIP := net.ParseIP("213.141.156.236")
expectedIP.String() // 213.141.156.236, 16 bytes, first 12 of them are zeroes
expectedPort := 21254
addr := &XORMappedAddress{
  IP:   expectedIP,
  Port: expectedPort,
}
// addr were added to message that is decoded as newMessage
// ...

addr.GetFrom(newMessage)
addr.IP.String()    // 213.141.156.236, net.IPv4Len
expectedIP.String() // d58d:9cec::ffff:d58d:9cec, 16 bytes, first 4 are IPv4
// now we have len(expectedIP) = 16 and len(addr.IP) = 4.

func (*XORMappedAddress) GetFromAs 

func (a *XORMappedAddress) GetFromAs(m *Message, t AttrType) error

GetFromAs decodes XOR-MAPPED-ADDRESS attribute value in message getting it as for t type.

func (XORMappedAddress) String 

func (a XORMappedAddress) String() string

Source Files

View all Source files

Directories

Path Synopsis
cmd
stun-bench
stun-client
stun-decode
stun-traversal
internal
hmac
Package hmac implements the Keyed-Hash Message Authentication Code (HMAC) as defined in U.S. Federal Information Processing Standards Publication 198.
 Package hmac implements the Keyed-Hash Message Authentication Code (HMAC) as defined in U.S. Federal Information Processing Standards Publication 198.
testutil

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.