wip: migrate to mono-repo. SPN has already been moved to spn/

service/network/clean.go

@@ -0,0 +1,132 @@
+package network
+
+import (
+	"context"
+	"time"
+
+	"github.com/safing/portbase/log"
+	"github.com/safing/portmaster/service/network/packet"
+	"github.com/safing/portmaster/service/network/state"
+	"github.com/safing/portmaster/service/process"
+)
+
+const (
+	// DeleteConnsAfterEndedThreshold defines the amount of time after which
+	// ended connections should be removed from the internal connection state.
+	DeleteConnsAfterEndedThreshold = 10 * time.Minute
+
+	// DeleteIncompleteConnsAfterStartedThreshold defines the amount of time after
+	// which incomplete connections should be removed from the internal
+	// connection state.
+	DeleteIncompleteConnsAfterStartedThreshold = 1 * time.Minute
+
+	cleanerTickDuration = 5 * time.Second
+)
+
+func connectionCleaner(ctx context.Context) error {
+	ticker := module.NewSleepyTicker(cleanerTickDuration, 0)
+
+	for {
+		select {
+		case <-ctx.Done():
+			ticker.Stop()
+			return nil
+		case <-ticker.Wait():
+			// clean connections and processes
+			activePIDs := cleanConnections()
+			process.CleanProcessStorage(activePIDs)
+
+			// clean udp connection states
+			state.CleanUDPStates(ctx)
+		}
+	}
+}
+
+func cleanConnections() (activePIDs map[int]struct{}) {
+	activePIDs = make(map[int]struct{})
+
+	_ = module.RunMicroTask("clean connections", 0, func(ctx context.Context) error {
+		now := time.Now().UTC()
+		nowUnix := now.Unix()
+		ignoreNewer := nowUnix - 1
+		deleteOlderThan := now.Add(-DeleteConnsAfterEndedThreshold).Unix()
+		deleteIncompleteOlderThan := now.Add(-DeleteIncompleteConnsAfterStartedThreshold).Unix()
+
+		// network connections
+		for _, conn := range conns.clone() {
+			conn.Lock()
+
+			// delete inactive connections
+			switch {
+			case conn.Started >= ignoreNewer:
+				// Skip very fresh connections to evade edge cases.
+			case !conn.DataIsComplete():
+				// Step 0: delete old incomplete connections
+				if conn.Started < deleteIncompleteOlderThan {
+					// Stop the firewall handler, in case one is running.
+					conn.StopFirewallHandler()
+					// Remove connection from state.
+					conn.delete()
+				}
+			case conn.Ended == 0:
+				// Step 1: check if still active
+				exists := state.Exists(&packet.Info{
+					Inbound:  false, // src == local
+					Version:  conn.IPVersion,
+					Protocol: conn.IPProtocol,
+					Src:      conn.LocalIP,
+					SrcPort:  conn.LocalPort,
+					Dst:      conn.Entity.IP,
+					DstPort:  conn.Entity.Port,
+					PID:      process.UndefinedProcessID,
+					SeenAt:   time.Unix(conn.Started, 0), // State tables will be updated if older than this.
+				}, now)
+
+				// Step 2: mark as ended
+				if !exists {
+					conn.Ended = nowUnix
+
+					// Stop the firewall handler, in case one is running.
+					conn.StopFirewallHandler()
+
+					// Save to database.
+					conn.Save()
+				}
+
+				// If the connection has an associated process, add its PID to the active PID list.
+				if conn.process != nil {
+					activePIDs[conn.process.Pid] = struct{}{}
+				}
+			case conn.Ended < deleteOlderThan:
+				// Step 3: delete
+				// DEBUG:
+				// log.Tracef("network.clean: deleted %s (ended at %s)", conn.DatabaseKey(), time.Unix(conn.Ended, 0))
+
+				// Remove connection from state.
+				conn.delete()
+			}
+
+			conn.Unlock()
+		}
+
+		// dns requests
+		for _, conn := range dnsConns.clone() {
+			conn.Lock()
+
+			// delete old dns connections
+			if conn.Ended < deleteOlderThan {
+				log.Tracef("network.clean: deleted %s (ended at %s)", conn.DatabaseKey(), time.Unix(conn.Ended, 0))
+				conn.delete()
+			}
+
+			conn.Unlock()
+		}
+
+		// rerouted dns requests
+		cleanDNSRequestConnections()
+
+		return nil
+	})
+
+	return activePIDs
+}