@serve.zone/dcrouter 13.17.0 → 13.17.2

package/dist_ts/radius/classes.vlan.manager.js

@@ -0,0 +1,272 @@
+import * as plugins from '../plugins.js';
+import { logger } from '../logger.js';
+import { VlanMappingsDoc } from '../db/index.js';
+/**
+ * Manages MAC address to VLAN mappings with support for:
+ * - Exact MAC address matching
+ * - OUI (vendor prefix) pattern matching
+ * - Wildcard patterns
+ * - Default VLAN for unknown devices
+ */
+export class VlanManager {
+    mappings = new Map();
+    config;
+    // Cache for normalized MAC lookups
+    normalizedMacCache = new Map();
+    constructor(config) {
+        this.config = {
+            defaultVlan: config?.defaultVlan ?? 1,
+            allowUnknownMacs: config?.allowUnknownMacs ?? true,
+        };
+    }
+    /**
+     * Initialize the VLAN manager and load persisted mappings
+     */
+    async initialize() {
+        await this.loadMappings();
+        logger.log('info', `VlanManager initialized with ${this.mappings.size} mappings, default VLAN: ${this.config.defaultVlan}`);
+    }
+    /**
+     * Normalize a MAC address to lowercase with colons
+     * Accepts formats: 00:11:22:33:44:55, 00-11-22-33-44-55, 001122334455
+     */
+    normalizeMac(mac) {
+        // Check cache first
+        const cached = this.normalizedMacCache.get(mac);
+        if (cached) {
+            return cached;
+        }
+        // Remove all separators and convert to lowercase
+        const cleaned = mac.toLowerCase().replace(/[-:]/g, '');
+        // Format with colons
+        const normalized = cleaned.match(/.{1,2}/g)?.join(':') || mac.toLowerCase();
+        // Cache the result
+        this.normalizedMacCache.set(mac, normalized);
+        // Prevent unbounded cache growth
+        if (this.normalizedMacCache.size > 10000) {
+            const iterator = this.normalizedMacCache.keys();
+            for (let i = 0; i < 1000; i++) {
+                this.normalizedMacCache.delete(iterator.next().value);
+            }
+        }
+        return normalized;
+    }
+    /**
+     * Check if a MAC address matches a pattern
+     * Supports:
+     * - Exact match: "00:11:22:33:44:55"
+     * - OUI match: "00:11:22" (matches any device with this vendor prefix)
+     * - Wildcard: "*" (matches all)
+     */
+    macMatchesPattern(mac, pattern) {
+        const normalizedMac = this.normalizeMac(mac);
+        const normalizedPattern = this.normalizeMac(pattern);
+        // Wildcard matches all
+        if (pattern === '*') {
+            return true;
+        }
+        // Exact match
+        if (normalizedMac === normalizedPattern) {
+            return true;
+        }
+        // OUI/prefix match (pattern is shorter than full MAC)
+        if (normalizedPattern.length < 17 && normalizedMac.startsWith(normalizedPattern)) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Add or update a MAC to VLAN mapping
+     */
+    async addMapping(mapping) {
+        const normalizedMac = this.normalizeMac(mapping.mac);
+        const now = Date.now();
+        const existingMapping = this.mappings.get(normalizedMac);
+        const fullMapping = {
+            ...mapping,
+            mac: normalizedMac,
+            createdAt: existingMapping?.createdAt || now,
+            updatedAt: now,
+        };
+        this.mappings.set(normalizedMac, fullMapping);
+        // Persist to database
+        await this.saveMappings();
+        logger.log('info', `VLAN mapping ${existingMapping ? 'updated' : 'added'}: ${normalizedMac} -> VLAN ${mapping.vlan}`);
+        return fullMapping;
+    }
+    /**
+     * Remove a MAC to VLAN mapping
+     */
+    async removeMapping(mac) {
+        const normalizedMac = this.normalizeMac(mac);
+        const removed = this.mappings.delete(normalizedMac);
+        if (removed) {
+            await this.saveMappings();
+            logger.log('info', `VLAN mapping removed: ${normalizedMac}`);
+        }
+        return removed;
+    }
+    /**
+     * Get a specific mapping by MAC
+     */
+    getMapping(mac) {
+        return this.mappings.get(this.normalizeMac(mac));
+    }
+    /**
+     * Get all mappings
+     */
+    getAllMappings() {
+        return Array.from(this.mappings.values());
+    }
+    /**
+     * Determine VLAN assignment for a MAC address
+     * Returns the most specific matching rule (exact > OUI > wildcard > default)
+     */
+    assignVlan(mac) {
+        const normalizedMac = this.normalizeMac(mac);
+        // First, try exact match
+        const exactMatch = this.mappings.get(normalizedMac);
+        if (exactMatch && exactMatch.enabled) {
+            return {
+                assigned: true,
+                vlan: exactMatch.vlan,
+                matchedRule: exactMatch,
+                isDefault: false,
+            };
+        }
+        // Try OUI/prefix matches (sorted by specificity - longer patterns first)
+        const patternMatches = [];
+        for (const mapping of this.mappings.values()) {
+            if (mapping.enabled && mapping.mac !== normalizedMac && this.macMatchesPattern(normalizedMac, mapping.mac)) {
+                patternMatches.push(mapping);
+            }
+        }
+        // Sort by pattern length (most specific first)
+        patternMatches.sort((a, b) => b.mac.length - a.mac.length);
+        if (patternMatches.length > 0) {
+            const bestMatch = patternMatches[0];
+            return {
+                assigned: true,
+                vlan: bestMatch.vlan,
+                matchedRule: bestMatch,
+                isDefault: false,
+            };
+        }
+        // No match - use default VLAN if allowed
+        if (this.config.allowUnknownMacs) {
+            return {
+                assigned: true,
+                vlan: this.config.defaultVlan,
+                isDefault: true,
+            };
+        }
+        // Unknown MAC and not allowed
+        return {
+            assigned: false,
+            vlan: 0,
+            isDefault: false,
+        };
+    }
+    /**
+     * Bulk import mappings
+     */
+    async importMappings(mappings) {
+        let imported = 0;
+        for (const mapping of mappings) {
+            await this.addMapping(mapping);
+            imported++;
+        }
+        logger.log('info', `Imported ${imported} VLAN mappings`);
+        return imported;
+    }
+    /**
+     * Export all mappings
+     */
+    exportMappings() {
+        return this.getAllMappings();
+    }
+    /**
+     * Update configuration
+     */
+    updateConfig(config) {
+        if (config.defaultVlan !== undefined) {
+            this.config.defaultVlan = config.defaultVlan;
+        }
+        if (config.allowUnknownMacs !== undefined) {
+            this.config.allowUnknownMacs = config.allowUnknownMacs;
+        }
+        logger.log('info', `VlanManager config updated: defaultVlan=${this.config.defaultVlan}, allowUnknown=${this.config.allowUnknownMacs}`);
+    }
+    /**
+     * Get current configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+    /**
+     * Get statistics
+     */
+    getStats() {
+        let exactMatches = 0;
+        let ouiPatterns = 0;
+        let wildcardPatterns = 0;
+        let enabledMappings = 0;
+        for (const mapping of this.mappings.values()) {
+            if (mapping.enabled) {
+                enabledMappings++;
+            }
+            if (mapping.mac === '*') {
+                wildcardPatterns++;
+            }
+            else if (mapping.mac.length < 17) {
+                // OUI patterns are shorter than full MAC (17 chars with colons)
+                ouiPatterns++;
+            }
+            else {
+                exactMatches++;
+            }
+        }
+        return {
+            totalMappings: this.mappings.size,
+            enabledMappings,
+            exactMatches,
+            ouiPatterns,
+            wildcardPatterns,
+        };
+    }
+    /**
+     * Load mappings from database
+     */
+    async loadMappings() {
+        try {
+            const doc = await VlanMappingsDoc.load();
+            if (doc && Array.isArray(doc.mappings)) {
+                for (const mapping of doc.mappings) {
+                    this.mappings.set(this.normalizeMac(mapping.mac), mapping);
+                }
+                logger.log('info', `Loaded ${doc.mappings.length} VLAN mappings from database`);
+            }
+        }
+        catch (error) {
+            logger.log('warn', `Failed to load VLAN mappings from database: ${error.message}`);
+        }
+    }
+    /**
+     * Save mappings to database
+     */
+    async saveMappings() {
+        try {
+            const mappings = Array.from(this.mappings.values());
+            let doc = await VlanMappingsDoc.load();
+            if (!doc) {
+                doc = new VlanMappingsDoc();
+            }
+            doc.mappings = mappings;
+            await doc.save();
+        }
+        catch (error) {
+            logger.log('error', `Failed to save VLAN mappings to database: ${error.message}`);
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/radius/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * RADIUS module for DcRouter
+ *
+ * Provides:
+ * - MAC Authentication Bypass (MAB) for network device authentication
+ * - VLAN assignment based on MAC addresses
+ * - OUI (vendor prefix) pattern matching for device categorization
+ * - RADIUS accounting for session tracking and billing
+ * - Integration with smartdata document classes for persistence
+ */
+export * from './classes.radius.server.js';
+export * from './classes.vlan.manager.js';
+export * from './classes.accounting.manager.js';

package/dist_ts/radius/index.js

@@ -0,0 +1,14 @@
+/**
+ * RADIUS module for DcRouter
+ *
+ * Provides:
+ * - MAC Authentication Bypass (MAB) for network device authentication
+ * - VLAN assignment based on MAC addresses
+ * - OUI (vendor prefix) pattern matching for device categorization
+ * - RADIUS accounting for session tracking and billing
+ * - Integration with smartdata document classes for persistence
+ */
+export * from './classes.radius.server.js';
+export * from './classes.vlan.manager.js';
+export * from './classes.accounting.manager.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi90cy9yYWRpdXMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUE7Ozs7Ozs7OztHQVNHO0FBRUgsY0FBYyw0QkFBNEIsQ0FBQztBQUMzQyxjQUFjLDJCQUEyQixDQUFDO0FBQzFDLGNBQWMsaUNBQWlDLENBQUMifQ==

package/dist_ts/remoteingress/classes.remoteingress-manager.d.ts

@@ -0,0 +1,92 @@
+import type { IRemoteIngress, IDcRouterRouteConfig } from '../../dist_ts_interfaces/data/remoteingress.js';
+/**
+ * Manages CRUD for remote ingress edge registrations.
+ * Persists edge configs via smartdata document classes and provides
+ * the allowed edges list for the Rust hub.
+ */
+export declare class RemoteIngressManager {
+    private edges;
+    private routes;
+    constructor();
+    /**
+     * Load all edge registrations from the database into memory.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Store the current route configs for port derivation.
+     */
+    setRoutes(routes: IDcRouterRouteConfig[]): void;
+    /**
+     * Derive listen ports for an edge from routes tagged with remoteIngress.enabled.
+     * When a route specifies edgeFilter, only edges whose id or tags match get that route's ports.
+     * When edgeFilter is absent, the route applies to all edges.
+     */
+    derivePortsForEdge(edgeId: string, edgeTags?: string[]): number[];
+    /**
+     * Derive UDP listen ports for an edge from routes with transport 'udp' or 'all'.
+     * These ports need UDP listeners on the edge (e.g. for QUIC/HTTP3).
+     */
+    deriveUdpPortsForEdge(edgeId: string, edgeTags?: string[]): number[];
+    /**
+     * Get the effective listen ports for an edge.
+     * Manual ports are always included. Auto-derived ports are added (union) when autoDerivePorts is true.
+     */
+    getEffectiveListenPorts(edge: IRemoteIngress): number[];
+    /**
+     * Get the effective UDP listen ports for an edge.
+     * Manual UDP ports are always included. Auto-derived UDP ports are added when autoDerivePorts is true.
+     */
+    getEffectiveListenPortsUdp(edge: IRemoteIngress): number[];
+    /**
+     * Get manual and derived port breakdown for an edge (used in API responses).
+     * Derived ports exclude any ports already present in the manual list.
+     */
+    getPortBreakdown(edge: IRemoteIngress): {
+        manual: number[];
+        derived: number[];
+    };
+    /**
+     * Create a new edge registration.
+     */
+    createEdge(name: string, listenPorts?: number[], tags?: string[], autoDerivePorts?: boolean): Promise<IRemoteIngress>;
+    /**
+     * Get an edge by ID.
+     */
+    getEdge(id: string): IRemoteIngress | undefined;
+    /**
+     * Get all edge registrations.
+     */
+    getAllEdges(): IRemoteIngress[];
+    /**
+     * Update an edge registration.
+     */
+    updateEdge(id: string, updates: {
+        name?: string;
+        listenPorts?: number[];
+        autoDerivePorts?: boolean;
+        enabled?: boolean;
+        tags?: string[];
+    }): Promise<IRemoteIngress | null>;
+    /**
+     * Delete an edge registration.
+     */
+    deleteEdge(id: string): Promise<boolean>;
+    /**
+     * Regenerate the secret for an edge.
+     */
+    regenerateSecret(id: string): Promise<string | null>;
+    /**
+     * Verify an edge's secret using constant-time comparison.
+     */
+    verifySecret(id: string, secret: string): boolean;
+    /**
+     * Get the list of allowed edges (enabled only) for the Rust hub.
+     * Includes listenPortsUdp when routes with transport 'udp' or 'all' are present.
+     */
+    getAllowedEdges(): Array<{
+        id: string;
+        secret: string;
+        listenPorts: number[];
+        listenPortsUdp?: number[];
+    }>;
+}