| | | 1 | | // Copyright (c) ZeroC, Inc. |
| | | 2 | | |
| | | 3 | | using IceRpc.Transports.Tcp.Internal; |
| | | 4 | | using System.Net.Security; |
| | | 5 | | |
| | | 6 | | namespace IceRpc.Transports.Tcp; |
| | | 7 | | |
| | | 8 | | /// <summary>Implements <see cref="IDuplexClientTransport" /> for the tcp transport.</summary> |
| | | 9 | | public class TcpClientTransport : IDuplexClientTransport |
| | | 10 | | { |
| | | 11 | | /// <inheritdoc/> |
| | 15 | 12 | | public string Name => TcpName; |
| | | 13 | | |
| | | 14 | | private const string SslName = "ssl"; |
| | | 15 | | private const string TcpName = "tcp"; |
| | | 16 | | |
| | | 17 | | private readonly TcpClientTransportOptions _options; |
| | | 18 | | |
| | | 19 | | /// <summary>Constructs a <see cref="TcpClientTransport" />.</summary> |
| | | 20 | | public TcpClientTransport() |
| | 32 | 21 | | : this(new TcpClientTransportOptions()) |
| | 32 | 22 | | { |
| | 32 | 23 | | } |
| | | 24 | | |
| | | 25 | | /// <summary>Constructs a <see cref="TcpClientTransport" />.</summary> |
| | | 26 | | /// <param name="options">The transport options.</param> |
| | 250 | 27 | | public TcpClientTransport(TcpClientTransportOptions options) => _options = options; |
| | | 28 | | |
| | | 29 | | /// <inheritdoc/> |
| | | 30 | | public IDuplexConnection CreateConnection( |
| | | 31 | | ServerAddress serverAddress, |
| | | 32 | | DuplexConnectionOptions options, |
| | | 33 | | SslClientAuthenticationOptions? clientAuthenticationOptions) |
| | 141 | 34 | | { |
| | 141 | 35 | | if (serverAddress.Transport is string transport && !IsValidTransportName(transport, serverAddress.Protocol)) |
| | 3 | 36 | | { |
| | 3 | 37 | | throw new NotSupportedException( |
| | 3 | 38 | | $"The Tcp client transport does not support server addresses with transport '{transport}'."); |
| | | 39 | | } |
| | | 40 | | |
| | 138 | 41 | | if (!CheckParams(serverAddress)) |
| | 5 | 42 | | { |
| | 5 | 43 | | throw new ArgumentException( |
| | 5 | 44 | | $"The server address '{serverAddress}' contains parameters that are not valid for the Tcp client transpo |
| | 5 | 45 | | nameof(serverAddress)); |
| | | 46 | | } |
| | | 47 | | |
| | 133 | 48 | | if (serverAddress.Transport is null) |
| | 7 | 49 | | { |
| | 7 | 50 | | serverAddress = serverAddress with { Transport = Name }; |
| | 7 | 51 | | } |
| | | 52 | | |
| | 133 | 53 | | SslClientAuthenticationOptions? authenticationOptions = clientAuthenticationOptions?.Clone() ?? |
| | 133 | 54 | | (serverAddress.Transport == SslName ? new SslClientAuthenticationOptions() : null); |
| | | 55 | | |
| | 133 | 56 | | if (authenticationOptions is not null) |
| | 31 | 57 | | { |
| | | 58 | | // We are establishing a secure TLS connection. It can rely on system certificates. |
| | | 59 | | |
| | 31 | 60 | | authenticationOptions.TargetHost ??= serverAddress.Host; |
| | | 61 | | |
| | | 62 | | // Set ApplicationProtocols to "ice" or "icerpc" in the common situation where the application does not |
| | | 63 | | // specify any application protocol. This way, a proxy server listening on a port shared by multiple |
| | | 64 | | // application protocols can use this ALPN protocol ID to forward all ice/icerpc traffic to an ice/icerpc |
| | | 65 | | // back-end server. |
| | | 66 | | // We do this only when the port is not the default port for ice or icerpc; when we use the IANA-registered |
| | | 67 | | // default port, the server can and should use this port number to identify the application protocol when no |
| | | 68 | | // ALPN protocol ID is provided. |
| | 31 | 69 | | if (authenticationOptions.ApplicationProtocols is null && |
| | 31 | 70 | | serverAddress.Port != serverAddress.Protocol.DefaultPort) |
| | 31 | 71 | | { |
| | 31 | 72 | | authenticationOptions.ApplicationProtocols = new List<SslApplicationProtocol> |
| | 31 | 73 | | { |
| | 31 | 74 | | new SslApplicationProtocol(serverAddress.Protocol.Name) |
| | 31 | 75 | | }; |
| | 31 | 76 | | } |
| | 31 | 77 | | } |
| | | 78 | | |
| | 133 | 79 | | return new TcpClientConnection( |
| | 133 | 80 | | serverAddress, |
| | 133 | 81 | | authenticationOptions, |
| | 133 | 82 | | options.Pool, |
| | 133 | 83 | | options.MinSegmentSize, |
| | 133 | 84 | | _options); |
| | | 85 | | |
| | | 86 | | static bool CheckParams(ServerAddress serverAddress) |
| | 138 | 87 | | { |
| | 138 | 88 | | if (serverAddress.Protocol == Protocol.Ice) |
| | 13 | 89 | | { |
| | 48 | 90 | | foreach (string name in serverAddress.Params.Keys) |
| | 5 | 91 | | { |
| | 5 | 92 | | switch (name) |
| | | 93 | | { |
| | | 94 | | case "t": |
| | | 95 | | case "z": |
| | | 96 | | // we don't check the value since we ignore it |
| | 4 | 97 | | break; |
| | | 98 | | |
| | | 99 | | default: |
| | 1 | 100 | | return false; |
| | | 101 | | } |
| | 4 | 102 | | } |
| | 12 | 103 | | return true; |
| | | 104 | | } |
| | | 105 | | else |
| | 125 | 106 | | { |
| | 125 | 107 | | return serverAddress.Params.Count == 0; |
| | | 108 | | } |
| | 138 | 109 | | } |
| | | 110 | | |
| | | 111 | | static bool IsValidTransportName(string transportName, Protocol protocol) => |
| | 131 | 112 | | protocol == Protocol.Ice ? transportName is TcpName or SslName : transportName is TcpName; |
| | 133 | 113 | | } |
| | | 114 | | } |