#ifdef __cplusplus
extern "C" {
#endif

#include "sapp_api.h"
#include "sapp_private_api.h"
#include "sapp_declaration.h"
#include "support/grule.h"
#include "support/MESA_socket_wrap.h"


static void * gdev_block_c3_handle;
static unsigned char gdev_block_c3_license[8];
static unsigned gdev_block_c3_service_type;
static unsigned gdev_block_c3_rule_scope;
static int gdev_block_module_conn_flag = 0;

#define GDEV_BLOCK_PLUG_CONF  "./conf/gdev_block.conf"

/* 使用动态链接模式, 避免因libc3client.so的问题, 导致sapp都无法运行 */
static void * (*dl_grule_open)(void);
static int (*dl_grule_opt_set)(void * hdl, int level, int type, const void * opt, size_t opt_size);
static int (*dl_grule_connect)(void * hdl, const char * addr);
static int (*dl_grule_send)(void * hdl, grule_t *rules, size_t rule_num, int flags);
static int (*dl_grule_recv)(void * hdl, grule_result_t *rst, size_t rst_num, int flags);

extern unsigned char g_send_gdev_ip_table[64][32];

/*
	2018-08-13, 
		从日志里获取的数据, 因没有IP合法性检查, 发送了错误的HMD规则, 导致......
		发送规则之前要做严格合法性检查, 不要相信任何人!!!

		1: legal, 合法IP;
		0: illegal, 非法IP;
*/
static int gdev_block_ipv4_legality_check(unsigned int ip_net_order)
{
	unsigned int ip_host_order;
	
	if(0 == ip_net_order){  /* 全0地址, 非法 */
		return 0;
	}
	
	if(0xFFFFFFFF == ip_net_order){ /* 广播地址, 非法 */
		return 0;
	}

	ip_host_order = ntohl(ip_net_order);

	if((ip_host_order & 0xFF000000) == 0){ /* 最高8位为0, 非法 */
		return 0;
	}
	
	if((ip_host_order & 0xFF) == 0){ /* 最低8位为0, 其实也不一定非法, 但非常可能是个网络地址, 先算非法吧, TODO 1 */
		return 0;
	}

	if((ip_host_order & 0xFF) == 0xFF){ /* 最低8位为0xff, 其实也不一定非法, 但非常可能是个广播地址, 先算非法吧, TODO 1 */
		return 0;
	}	

	if((ip_host_order & 0xF0000000) == 0xE0000000){ /* 组播地址, 非法 */
		return 0;
	}
	
	if((ip_host_order & 0xF0000000) == 0xF0000000){ /* 保留地址, 非法 */
		return 0;
	}
	
	return 1;
}

static int gdev_block_send_rule_tuple5(unsigned int sip_net, unsigned int dip_net, unsigned short sport_net, unsigned short dport_net, unsigned char protocol)
{
	grule_t grule;
	grule_result_t grule_result;
	int send_ret;

	memset(&grule, 0, sizeof(grule_t));
	
	/* rule_id从全局变量获取并递增, 在后面的锁保护区域内操作 */
	grule.srv_type = gdev_block_c3_service_type;
	grule.rule_scope = gdev_block_c3_rule_scope;
	grule.big_type = GRULE_BIG_TYPE_MASK4;
	grule.durable = 0;
	grule.action = GRULE_ACTION_ADD;

	/* 使用tuple组合类型1 */
	grule.rule_type.sip_flag = 1;
	//grule.rule_type.sipmsk_flag = 1;
	grule.rule_type.dip_flag = 1;
	//grule.rule_type.dipmsk_flag = 1;
	grule.rule_type.sport_flag = 1;
	//grule.rule_type.spmsk_flag = 1;
	grule.rule_type.dport_flag = 1;
	//grule.rule_type.dpmsk_flag = 1;
	grule.rule_type.proto_flag = 1;
	//grule.rule_type.pmsk_flag = 1;

	grule.m4.sip = sip_net;
	//grule.m4.sip_mask = 0xFFFFFFFF;
	grule.m4.dip = dip_net;
	//grule.m4.dip_mask = 0xFFFFFFFF;
	grule.m4.sport = sport_net;
	//grule.m4.spor_mask = 0xFFFF;
	grule.m4.dport = dport_net;
	//grule.m4.dport_maske = 0xFFFF;
	grule.m4.proto = protocol;
	//grule.m4.proto_mask = 0xFF;

	send_ret = dl_grule_send(gdev_block_c3_handle, &grule, 1, 0);
	if(send_ret < 0){
		dl_grule_recv(gdev_block_c3_handle, &grule_result, 1, 0);
		printf("grule_send errno is: %u\n", grule_result.result);
	}
	return send_ret;
}


int gdev_block_send_rule(const struct streaminfo *pstream)
{
	unsigned char protocol;
	int send_ret;

	if(0 == gdev_block_module_conn_flag){
		sapp_runtime_log(20, "gdev_block module not init succ!\n\n");
		return -1;
	}
	
	if(pstream->addr.addrtype != ADDR_TYPE_IPV4){
		sapp_runtime_log(20, "gdev_block unsupport IPv6 yet!\n");
		/* 暂不支持IPv6 */
		return -1;
	}

	if(STREAM_TYPE_TCP == pstream->type){
		protocol = 6;
	}else{
		protocol = 17;
	}

	if(gdev_block_ipv4_legality_check(pstream->addr.tuple4_v4->saddr) == 0){
		return -1;
	}

	if(gdev_block_ipv4_legality_check(pstream->addr.tuple4_v4->daddr) == 0){
		return -1;
	}
	
	send_ret = gdev_block_send_rule_tuple5(pstream->addr.tuple4_v4->saddr, pstream->addr.tuple4_v4->daddr, 
							pstream->addr.tuple4_v4->source, pstream->addr.tuple4_v4->dest, protocol);
	if(send_ret <= 0){
		sapp_runtime_log(20, "gdev send c3 rule error, tuple4: %s\n", printaddr(&pstream->addr, pstream->threadnum));
	}else{
		sapp_runtime_log(10, "gdev send c3 rule SUCC, tuple4: %s\n", printaddr(&pstream->addr, pstream->threadnum));
	}
	
	return send_ret;
}


static int gdev_block_hex2mem( char *source, int srclen, unsigned char* dest)
{
        int i,j;
        unsigned char c,h4bit,l4bit;

        if( NULL == source || NULL==dest || srclen<=0 )
        {
                return -1;
        }

        for(i=0,j=0; i<srclen; )
        {
                c = source[i];
                if(c >= '0' && c <= '9')
                        h4bit = c - '0';
                else if(c >= 'A' && c <= 'F')
                        h4bit = c - 'A' + 10;
                else if(c >= 'a' && c <= 'f')
                        h4bit = c - 'a' + 10;
                else
                {
                        if(i == srclen -1)//the last c is 0a
                        {
                                return j;
                        }
                        else
                        {
                                return -1;
                        }
                }
                ++i;

                if(i>=srclen)
                {
                        return -1;
                }

                c = source[i];
                if(c >= '0' && c <= '9')
        	         l4bit = c - '0';
                else if(c >= 'A' && c <= 'F')
                        l4bit = c - 'A' + 10;
                else if(c >= 'a' && c <= 'f')
                        l4bit = c - 'a' + 10;
                else
                {
                        return -1;
                }
                dest[j]= (h4bit<<4)|l4bit;				

                j++;
                i++;
        }
        dest[j] = '\0';
	
        return j;
}

/*
	C3的连接函数有问题, 连不上也不报错, 自造一个检查对端是否存在的函数.
	-1: error
	 0: succ or other.
*/
static int gdev_detect_c3_server_is_exist(void)
{
	char c3_ip_str[32];
	int ret, tmp_int;
	unsigned short c3_port;
	struct sockaddr_in sockadd;

	MESA_load_profile_string_def(GDEV_BLOCK_PLUG_CONF, "gdev", "c3_server_ip", c3_ip_str, 32, "$");
	MESA_load_profile_int_def(GDEV_BLOCK_PLUG_CONF, "gdev", "c3_server_port", &tmp_int, 0);

	if('$' == c3_ip_str[0]){
		return 0;
	}

	if((tmp_int > 0) && (tmp_int < 65535)){
		c3_port = (unsigned short)tmp_int;
	}

	int sock_fd = socket(AF_INET, SOCK_STREAM, 0);
	if(sock_fd < 0){
		return 0;
	}

	sockadd.sin_family = AF_INET;
	ret = inet_pton(AF_INET, c3_ip_str, &sockadd.sin_addr.s_addr);
	if(ret <= 0){
		goto err_exit;
	}
	sockadd.sin_port = htons(c3_port);
	
	ret = MESA_sock_connect(sock_fd, (const struct sockaddr  *)&sockadd, sizeof(sockadd), 3000);
	if(ret < 0){
		close(sock_fd);
		return -1;
	}
	
err_exit:
	/* 其他错误都返回0, 表示未确定是否是真的连不上 */
	close(sock_fd);
	return 0;
}


/*
	raw_data指向待发送缓冲区, 内层真实外网数据包的IP头部;
*/
int packet_io_send_fake_pkt_by_gdev(MESA_send_handle *send_handle, enum addr_type_t addrtype, 
	char *raw_data, int datalen, int dir_reverse,char *feedback_buf, int *feedback_buf_len)
{
	//const struct streaminfo_private *pstrem_pr =  (const struct streaminfo_private *)send_handle->user_arg;
	const struct streaminfo *pstream = (const struct streaminfo *)send_handle->user_arg;
    const struct streaminfo *tmpstream = pstream;
	inline_vxlan_hdr_t *vxlan_hdr;
	struct vxlan_info mim_mem_hdr;
	struct mesa_ethernet_hdr *inner_eth_hdr;
	//struct mesa_udp_hdr *udp_hdr;
	//struct mesa_ip4_hdr *ip4_hdr;
	int ret, opt_len;
	struct sockaddr_in sock_addr_v4;
	char *data = raw_data;

	while(pstream->pfather != NULL){
		pstream = pstream->pfather; /* seek to the lowest layer */
	}

	if(ADDR_TYPE_MAC_IN_MAC != pstream->addr.addrtype){
		sapp_runtime_log(20, "packet_io_send_fake_pkt_by_gdev error, addr type is not MAC_IN_MAC!");
		return -1;
	}

	opt_len = sizeof(mim_mem_hdr);
	ret = MESA_get_stream_opt(tmpstream, MSO_STREAM_VXLAN_INFO, &mim_mem_hdr, &opt_len);
	if(ret < 0){
		sapp_runtime_log(20, "packet_io_send_fake_pkt_by_gdev(): get vxlan info error!\n");
		return -1;
	}
    data += sizeof(inline_vxlan_hdr_t);/*跳过预留的vxlan头部*/
    datalen -=  sizeof(inline_vxlan_hdr_t);

	data += sizeof(struct mesa_ethernet_hdr);/*跳过mim的外层MAC*/
	datalen -= sizeof(struct mesa_ethernet_hdr);
	inner_eth_hdr = (struct mesa_ethernet_hdr *)data;

	if(dir_reverse){ /* 当前发包方向与流创建时的地址是反向的, 即流结构体的四元组: sip=1.1.1.1, dip=2.2.2.2, 当前想发送的包sip=2.2.2.2, dip=1.1.1.1 */
		memcpy(inner_eth_hdr->ether_shost, pstream->addr.mimac->inner_dst_mac, MAC_ADDR_LEN);
		memcpy(inner_eth_hdr->ether_dhost, pstream->addr.mimac->inner_src_mac, MAC_ADDR_LEN);
	}else{
		memcpy(inner_eth_hdr->ether_shost, pstream->addr.mimac->inner_src_mac, MAC_ADDR_LEN);
		memcpy(inner_eth_hdr->ether_dhost, pstream->addr.mimac->inner_dst_mac, MAC_ADDR_LEN);
	}

	if(ADDR_TYPE_IPV4 == addrtype){
		inner_eth_hdr->ether_type = htons(ETH_P_IP);
	}else if(ADDR_TYPE_IPV6 == addrtype){
		inner_eth_hdr->ether_type = htons(ETH_P_IPV6);
	}else{
		assert(0); /* */
        sapp_runtime_log(20, "packet_io_send_fake_pkt_by_gdev(): inner_eth_hdr not IP4 or IP6, %d!\n", addrtype);
		return -1;
	}
	
	data -= sizeof(inline_vxlan_hdr_t);
	datalen +=  sizeof(inline_vxlan_hdr_t);

	vxlan_hdr = (inline_vxlan_hdr_t *)data;

	memset(vxlan_hdr, 0, sizeof(inline_vxlan_hdr_t));

	vxlan_hdr->link_id = mim_mem_hdr.link_id;
	vxlan_hdr->link_layer_type = mim_mem_hdr.encap_type;

	/* 发包时, vxlan头部的vlan_id不关心 */

	if(dir_reverse){ /* 当前发包方向与流创建时的地址是反向的, 即流结构体的四元组: sip=1.1.1.1, dip=2.2.2.2, 当前想发送的包sip=2.2.2.2, dip=1.1.1.1 */
		vxlan_hdr->dir = mim_mem_hdr.link_dir ^ 1;
	}else{
		vxlan_hdr->dir = mim_mem_hdr.link_dir;
	}
#if 0
	data -= sizeof(struct mesa_udp_hdr);
	udp_hdr = (struct mesa_udp_hdr *)data;

	udp_hdr->uh_sport = htons((unsigned short)sapp_global_single.send_fake_pkt_gdev_sport); /* 根据配置文件填写vxlan源端口 */
	udp_hdr->uh_dport = htons(4789); 
	udp_hdr->uh_ulen = htons(datalen + sizeof(inline_vxlan_hdr_t) + sizeof(struct mesa_udp_hdr));
	udp_hdr->uh_sum = 0;

	data -= sizeof(struct mesa_ip4_hdr);
	ip4_hdr = (struct mesa_ip4_hdr *)data;

	ip4_hdr->ip_v = 4;
	ip4_hdr->ip_hl = 5;
	ip4_hdr->ip_tos = 0;
	ip4_hdr->ip_len = htons(datalen + sizeof(inline_vxlan_hdr_t) + sizeof(struct mesa_udp_hdr) + sizeof(struct mesa_ip4_hdr));
	ip4_hdr->ip_off = 0;
	ip4_hdr->ip_id = MESA_rand_range(10000, 60000);
	ip4_hdr->ip_ttl = MESA_rand_range(64, 128);
	ip4_hdr->ip_p = IPPROTO_UDP;
	ip4_hdr->ip_dst.s_addr = 0xC906000A;/*  目的ID根据device_id查表获得*/
	ip4_hdr->ip_src.s_addr = 0xE506000A; /*  源IP从配置文件获得，可以固定*/
#endif

	sock_addr_v4.sin_family = AF_INET;
	//inet_pton(AF_INET, "10.3.127.1", &sock_addr_v4.sin_addr.s_addr);
	if(strlen((const char *)g_send_gdev_ip_table[mim_mem_hdr.dev_id]) > 0)
    {
        inet_pton(AF_INET, (const char *)g_send_gdev_ip_table[mim_mem_hdr.dev_id], &sock_addr_v4.sin_addr.s_addr);
    }
    else
    {
        sapp_runtime_log(20, "packet_io_send_fake_pkt_by_gdev(): dev_id %d related gdev_ip not found!\n", mim_mem_hdr.dev_id);
        return -1;
    }
	sock_addr_v4.sin_port = htons(4789);

    ret = sendto(send_handle->raw_udp_fd, data, datalen, 0,
				(struct sockaddr *)&sock_addr_v4, sizeof(struct sockaddr));

	return ret;
}


int gdev_block_init(void)
{
	int ret;
	char tmp_str[128];
	char gdev_c3_addr_list[128];
	void *libc3_client_so_handle;

	libc3_client_so_handle = dlopen("/opt/MESA/lib/libc3client.so", RTLD_NOW | RTLD_NODELETE);
	if(NULL == libc3_client_so_handle){
		printf("\n\033[33m[Warning] dlopen '%s' error!\033[0m\n", "/opt/MESA/lib/libc3client.so");
		return -1;
	}

	dl_grule_open = ( void * (*)(void))dlsym(libc3_client_so_handle, "grule_open");
	if(NULL == dl_grule_open){
		return -1;
	}

	dl_grule_opt_set = (int (*)(void * hdl, int level, int type, const void * opt, size_t opt_size))dlsym(libc3_client_so_handle, "grule_opt_set");
	if(NULL == dl_grule_opt_set){
		return -1;
	}

	dl_grule_connect = (int (* )(void * hdl, const char * addr))dlsym(libc3_client_so_handle, "grule_connect");
	if(NULL == dl_grule_connect){
		return -1;
	}

	dl_grule_send = (int (* )(void * hdl, grule_t *rules, size_t rule_num, int flags))dlsym(libc3_client_so_handle, "grule_send");
	if(NULL == dl_grule_send){
		return -1;
	}

	dl_grule_recv = (int (*)(void * hdl, grule_result_t *rst, size_t rst_num, int flags))dlsym(libc3_client_so_handle, "grule_recv");
	if(NULL == dl_grule_recv){
		return -1;
	}
	
	gdev_block_c3_handle = dl_grule_open();
	if(NULL == gdev_block_c3_handle){
		printf("grule_open() error!\n");
		return -1;
	}

	MESA_load_profile_string_def(GDEV_BLOCK_PLUG_CONF, "gdev", "auth_data", tmp_str, 128, "#");
	if('#' == tmp_str[0]){/* 没找到license */
		printf( "invalid config:%s->%s!\n", GDEV_BLOCK_PLUG_CONF, "auth_data");
		return -1;
	}
	ret = gdev_block_hex2mem(tmp_str, 16, (unsigned char *)gdev_block_c3_license);
	if(ret < 0){
		printf("invalid config:%s->%s!\n", GDEV_BLOCK_PLUG_CONF, "auth_data");
		return -1;
	}

	MESA_load_profile_string_def(GDEV_BLOCK_PLUG_CONF, "gdev", "c3_list", gdev_c3_addr_list, 128, "#");
	if('#' == tmp_str[0]){
		printf("invalid config:%s->%s!\n", GDEV_BLOCK_PLUG_CONF, "c3_list");
		return -1;
	}
	
	MESA_load_profile_uint_def(GDEV_BLOCK_PLUG_CONF, "gdev", "service_type", &gdev_block_c3_service_type, 1);
	MESA_load_profile_uint_def(GDEV_BLOCK_PLUG_CONF, "gdev", "rule_scope", &gdev_block_c3_rule_scope, 1);
	
	dl_grule_opt_set(gdev_block_c3_handle, GRULE_SOL_PROTO, GRULE_TYPE_AUTH, gdev_block_c3_license, sizeof(gdev_block_c3_license));

	if(gdev_detect_c3_server_is_exist() < 0){
		sapp_runtime_log(20, "grule_connect %s error!\n", gdev_c3_addr_list);
		return -1;
	}

	ret = dl_grule_connect(gdev_block_c3_handle, gdev_c3_addr_list);
	if(ret < 0){
		sapp_runtime_log(20, "grule_connect %s error!\n", gdev_c3_addr_list);
		return -1;
	}
	
	gdev_block_module_conn_flag = 1;
	sapp_runtime_log(10, "grule_connect %s succ!\n", gdev_c3_addr_list);

	return 0;
}

#ifdef __cplusplus
}
#endif