wireguard.h

Go to the documentation of this file.

#pragma once
#include "esphome/core/defines.h"
#ifdef USE_WIREGUARD
#include <ctime>
 
#include "esphome/core/component.h"
#include "esphome/core/helpers.h"
#include "esphome/components/time/real_time_clock.h"
 
#ifdef USE_BINARY_SENSOR
#include "esphome/components/binary_sensor/binary_sensor.h"
#endif
 
#ifdef USE_SENSOR
#include "esphome/components/sensor/sensor.h"
#endif
 
#ifdef USE_TEXT_SENSOR
#include "esphome/components/text_sensor/text_sensor.h"
#endif
 
#include <esp_wireguard.h>
 
namespace esphome::wireguard {
 
struct AllowedIP {
  const char *ip;
  const char *netmask;
};
 
class Wireguard final : public PollingComponent {
 public:
  void setup() override;
  void loop() override;
  void update() override;
  void dump_config() override;
  void on_shutdown() override;
  bool can_proceed() override;
 
  float get_setup_priority() const override { return esphome::setup_priority::BEFORE_CONNECTION; }
 
  void set_address(const char *address) { this->address_ = address; }
  void set_netmask(const char *netmask) { this->netmask_ = netmask; }
  void set_private_key(const char *key) { this->private_key_ = key; }
  void set_peer_endpoint(const char *endpoint) { this->peer_endpoint_ = endpoint; }
  void set_peer_public_key(const char *key) { this->peer_public_key_ = key; }
  void set_peer_port(uint16_t port) { this->peer_port_ = port; }
  void set_preshared_key(const char *key) { this->preshared_key_ = key; }
 
  void set_address(const std::string &address) = delete;
  void set_netmask(const std::string &netmask) = delete;
  void set_private_key(const std::string &key) = delete;
  void set_peer_endpoint(const std::string &endpoint) = delete;
  void set_peer_public_key(const std::string &key) = delete;
  void set_preshared_key(const std::string &key) = delete;
 
  void set_allowed_ips(const AllowedIP *ips) { this->allowed_ips_ = ips; }
 
  void set_keepalive(const uint16_t seconds) { this->keepalive_ = seconds; }
  void set_reboot_timeout(const uint32_t seconds) { this->reboot_timeout_ = seconds; }
  void set_srctime(time::RealTimeClock *srctime) { this->srctime_ = srctime; }
 
#ifdef USE_BINARY_SENSOR
  void set_status_sensor(binary_sensor::BinarySensor *sensor) { this->status_sensor_ = sensor; }
  void set_enabled_sensor(binary_sensor::BinarySensor *sensor) { this->enabled_sensor_ = sensor; }
#endif
 
#ifdef USE_SENSOR
  void set_handshake_sensor(sensor::Sensor *sensor) { this->handshake_sensor_ = sensor; }
#endif
 
#ifdef USE_TEXT_SENSOR
  void set_address_sensor(text_sensor::TextSensor *sensor) { this->address_sensor_ = sensor; }
#endif
 
  void disable_auto_proceed() { this->proceed_allowed_ = false; }
 
  void enable();
 
  void disable();
 
  void publish_enabled_state();
 
  bool is_enabled() { return this->enabled_; }
 
  bool is_peer_up() const;
  time_t get_latest_handshake() const;
 
 protected:
  const char *address_{nullptr};
  const char *netmask_{nullptr};
  const char *private_key_{nullptr};
  const char *peer_endpoint_{nullptr};
  const char *peer_public_key_{nullptr};
  const char *preshared_key_{nullptr};
 
  const AllowedIP *allowed_ips_{nullptr};
 
  uint16_t peer_port_;
  uint16_t keepalive_;
  uint32_t reboot_timeout_;
 
  time::RealTimeClock *srctime_;
 
#ifdef USE_BINARY_SENSOR
  binary_sensor::BinarySensor *status_sensor_ = nullptr;
  binary_sensor::BinarySensor *enabled_sensor_ = nullptr;
#endif
 
#ifdef USE_SENSOR
  sensor::Sensor *handshake_sensor_ = nullptr;
#endif
 
#ifdef USE_TEXT_SENSOR
  text_sensor::TextSensor *address_sensor_ = nullptr;
#endif
 
  bool proceed_allowed_ = true;
 
  bool enabled_ = true;
 
  wireguard_config_t wg_config_ = ESP_WIREGUARD_CONFIG_DEFAULT();
  wireguard_ctx_t wg_ctx_ = ESP_WIREGUARD_CONTEXT_DEFAULT();
 
  esp_err_t wg_initialized_ = ESP_FAIL;
  esp_err_t wg_connected_ = ESP_FAIL;
 
  uint32_t wg_peer_offline_time_ = 0;
  uint32_t wg_reconnect_time_ = 0;
 
  time_t latest_saved_handshake_ = 0;
 
  void start_connection_();
  void stop_connection_();
};
 
// These are used for possibly long DNS resolution to temporarily suspend the watchdog
void suspend_wdt();
void resume_wdt();
 
static constexpr size_t MASK_KEY_BUFFER_SIZE = 12;
static constexpr uint32_t RECONNECT_INTERVAL_MS = 30000;
 
void mask_key_to(char *buffer, size_t len, const char *key);
 
}  // namespace esphome::wireguard
#endif