X-Git-Url: https://git.sesse.net/?p=cubemap;a=blobdiff_plain;f=acceptor.cpp;h=31901dd8406c97c39d97dc9b3310dedb4f37a18e;hp=593e4d4eb9cc207fce83730aee1c29e7a35519f2;hb=0229f4414b3b63934c057030deb88cbf6926bb1f;hpb=07569f8e011cd9b064c64bef1ce56f77bf7ddf53

diff --git a/acceptor.cpp b/acceptor.cpp
index 593e4d4..31901dd 100644
--- a/acceptor.cpp
+++ b/acceptor.cpp
@@ -1,5 +1,6 @@
 #include <assert.h>
 #include <errno.h>
+#include <fcntl.h>
 #include <netinet/in.h>
 #include <netinet/tcp.h>
 #include <poll.h>
@@ -21,12 +22,13 @@ extern ServerPool *servers;
 
 int create_server_socket(const sockaddr_in6 &addr, SocketType socket_type)
 {
+	// NOTE: We set as non-blocking, so the acceptor thread can notice that we want to shut it down.
 	int server_sock;
 	if (socket_type == TCP_SOCKET) {
-		server_sock = socket(PF_INET6, SOCK_STREAM, IPPROTO_TCP);
+		server_sock = socket(PF_INET6, SOCK_STREAM | SOCK_NONBLOCK | SOCK_CLOEXEC, IPPROTO_TCP);
 	} else {
 		assert(socket_type == UDP_SOCKET);
-		server_sock = socket(PF_INET6, SOCK_DGRAM, IPPROTO_UDP);
+		server_sock = socket(PF_INET6, SOCK_DGRAM | SOCK_NONBLOCK | SOCK_CLOEXEC, IPPROTO_UDP);
 	}
 	if (server_sock == -1) {
 		log_perror("socket");
@@ -46,13 +48,7 @@ int create_server_socket(const sockaddr_in6 &addr, SocketType socket_type)
 		exit(1);
 	}
 
-	// Set as non-blocking, so the acceptor thread can notice that we want to shut it down.
-	if (ioctl(server_sock, FIONBIO, &one) == -1) {
-		log_perror("ioctl(FIONBIO)");
-		exit(1);
-	}
-
-	if (bind(server_sock, reinterpret_cast<const sockaddr *>(&addr), sizeof(addr)) == -1) {
+	if (::bind(server_sock, reinterpret_cast<const sockaddr *>(&addr), sizeof(addr)) == -1) {
 		log_perror("bind");
 		exit(1);
 	}
@@ -91,20 +87,32 @@ sockaddr_in6 extract_address_from_acceptor_proto(const AcceptorProto &proto)
 	return sin6;
 }
 	
-Acceptor::Acceptor(int server_sock, const sockaddr_in6 &addr)
+Acceptor::Acceptor(int server_sock, const sockaddr_in6 &addr,
+                   const string &certificate_chain, const string &private_key)
 	: server_sock(server_sock),
-	  addr(addr)
+	  addr(addr),
+	  certificate_chain(certificate_chain),
+	  private_key(private_key)
 {
 }
 
 Acceptor::Acceptor(const AcceptorProto &serialized)
 	: server_sock(serialized.server_sock()),
-	  addr(extract_address_from_acceptor_proto(serialized))
+	  addr(extract_address_from_acceptor_proto(serialized)),
+	  certificate_chain(serialized.certificate_chain()),
+	  private_key(serialized.private_key())
 {
+	// Set back the close-on-exec flag for the socket.
+	// (This can't leak into a child, since we haven't been started yet.)
+	fcntl(server_sock, F_SETFD, O_CLOEXEC);
 }
 
 AcceptorProto Acceptor::serialize() const
 {
+	// Unset the close-on-exec flag for the socket.
+	// (This can't leak into a child, since there's only one thread left.)
+	fcntl(server_sock, F_SETFD, 0);
+
 	char buf[INET6_ADDRSTRLEN];
 	inet_ntop(addr.sin6_family, &addr.sin6_addr, buf, sizeof(buf));
 
@@ -112,6 +120,8 @@ AcceptorProto Acceptor::serialize() const
 	serialized.set_server_sock(server_sock);
 	serialized.set_addr(buf);
 	serialized.set_port(ntohs(addr.sin6_port));
+	serialized.set_certificate_chain(certificate_chain);
+	serialized.set_private_key(private_key);
 	return serialized;
 }
 
@@ -123,15 +133,15 @@ void Acceptor::close_socket()
 void Acceptor::do_work()
 {
 	while (!should_stop()) {
-		if (!wait_for_activity(server_sock, POLLIN, NULL)) {
+		if (!wait_for_activity(server_sock, POLLIN, nullptr)) {
 			continue;
 		}
 
 		sockaddr_in6 addr;
 		socklen_t addrlen = sizeof(addr);
 
-		// Get a new socket.
-		int sock = accept(server_sock, reinterpret_cast<sockaddr *>(&addr), &addrlen);
+		// Get a new socket, and set it as nonblocking.
+		int sock = accept4(server_sock, reinterpret_cast<sockaddr *>(&addr), &addrlen, SOCK_NONBLOCK | SOCK_CLOEXEC);
 		if (sock == -1 && errno == EINTR) {
 			continue;
 		}
@@ -141,22 +151,16 @@ void Acceptor::do_work()
 			continue;
 		}
 
-		// Set the socket as nonblocking.
-		int one = 1;
-		if (ioctl(sock, FIONBIO, &one) == -1) {
-			log_perror("ioctl(FIONBIO)");
-			exit(1);
-		}
-
 		// Enable TCP_CORK for maximum throughput. In the rare case that the
 		// stream stops entirely, this will cause a small delay (~200 ms)
 		// before the last part is sent out, but that should be fine.
+		int one = 1;
 		if (setsockopt(sock, SOL_TCP, TCP_CORK, &one, sizeof(one)) == -1) {
 			log_perror("setsockopt(TCP_CORK)");
 			// Can still continue.
 		}
 
 		// Pick a server, round-robin, and hand over the socket to it.
-		servers->add_client(sock);
+		servers->add_client(sock, this);
 	}
 }