Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revert "derive crypto before opening TCP stream" #2459

Merged
merged 1 commit into from
Jan 27, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 7 additions & 23 deletions dc/s2n-quic-dc/src/stream/client/tokio.rs
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@ use crate::{
endpoint,
environment::tokio::{self as env, Environment},
socket::Protocol,
TransportFeatures,
},
};
use std::{io, net::SocketAddr};
Expand All @@ -30,15 +29,12 @@ where
// ensure we have a secret for the peer
let peer = handshake.await?;

let (crypto, parameters) = peer.pair(&TransportFeatures::UDP);

let stream = endpoint::open_stream(
env,
peer.map(),
crypto,
parameters,
peer,
env::UdpUnbound(acceptor_addr.into()),
subscriber,
None,
)?;

// build the stream inside the application context
Expand All @@ -64,14 +60,7 @@ where
Sub: event::Subscriber,
{
// Race TCP handshake with the TLS handshake
let handshake = async {
let peer = handshake.await?;
let (crypto, parameters) = peer.pair(&TransportFeatures::TCP);
Ok((peer, crypto, parameters))
};
// poll the crypto first so the server can read the first packet on accept in the happy path
let ((peer, crypto, parameters), socket) =
tokio::try_join!(handshake, TcpStream::connect(acceptor_addr))?;
let (socket, peer) = tokio::try_join!(TcpStream::connect(acceptor_addr), handshake,)?;

// Make sure TCP_NODELAY is set
let _ = socket.set_nodelay(true);
Expand All @@ -88,15 +77,14 @@ where

let stream = endpoint::open_stream(
env,
peer.map(),
crypto,
parameters,
peer,
env::TcpRegistered {
socket,
peer_addr,
local_port,
},
subscriber,
None,
)?;

// build the stream inside the application context
Expand Down Expand Up @@ -126,20 +114,16 @@ where
{
let local_port = socket.local_addr()?.port();
let peer_addr = socket.peer_addr()?.into();

let (crypto, parameters) = peer.pair(&TransportFeatures::TCP);

let stream = endpoint::open_stream(
env,
peer.map(),
crypto,
parameters,
peer,
env::TcpRegistered {
socket,
peer_addr,
local_port,
},
subscriber,
None,
)?;

// build the stream inside the application context
Expand Down
15 changes: 10 additions & 5 deletions dc/s2n-quic-dc/src/stream/endpoint.rs
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
use crate::{
event::{self, api::Subscriber as _, IntoEvent as _},
msg, packet,
path::secret::{self, Map},
path::secret::{self, map, Map},
random::Random,
stream::{
application,
Expand Down Expand Up @@ -35,16 +35,21 @@ pub struct AcceptError<Peer> {
#[inline]
pub fn open_stream<Env, P>(
env: &Env,
map: &Map,
crypto: secret::map::Bidirectional,
parameters: dc::ApplicationParams,
entry: map::Peer,
peer: P,
subscriber: Env::Subscriber,
parameter_override: Option<&dyn Fn(dc::ApplicationParams) -> dc::ApplicationParams>,
) -> Result<application::Builder<Env::Subscriber>>
where
Env: Environment,
P: Peer<Env>,
{
let (crypto, mut parameters) = entry.pair(&peer.features());

if let Some(o) = parameter_override {
parameters = o(parameters);
}

let key_id = crypto.credentials.key_id;
let stream_id = packet::stream::Id {
key_id,
Expand All @@ -69,7 +74,7 @@ where
stream_id,
None,
crypto,
map,
entry.map(),
parameters,
None,
None,
Expand Down
Loading