feat: Add structured error handling to eBPF operations with EbpfError types and error logging

- Add EbpfError import to ebpf.rs module
- Replace generic error messages with EbpfError::LoadError in program load operations
- Replace generic error messages with EbpfError::AttachError in XDP attach operations with interface field
- Replace generic error messages with EbpfError::MapNotFound and MapAccessError in map access operations
- Add error logging with error! macro before returning errors in all
This commit is contained in:
nutcas3
2026-04-25 05:53:23 +03:00
parent 5bb5e37e07
commit bc01fc1885
2 changed files with 131 additions and 26 deletions
+112 -23
View File
@@ -8,6 +8,7 @@ mod ip_utils;
mod redis_sync; mod redis_sync;
use ip_utils::{u32_to_ipv4_string, ipv4_string_to_u32}; use ip_utils::{u32_to_ipv4_string, ipv4_string_to_u32};
use redis_sync::RedisSyncer; use redis_sync::RedisSyncer;
use crate::ebpf_error::EbpfError;
pub struct EbpfManager { pub struct EbpfManager {
bpf: Bpf, bpf: Bpf,
@@ -50,14 +51,22 @@ impl EbpfManager {
pub fn attach(&mut self) -> Result<()> { pub fn attach(&mut self) -> Result<()> {
let program: &mut Xdp = self.bpf.program_mut("packet_filter") let program: &mut Xdp = self.bpf.program_mut("packet_filter")
.ok_or_else(|| anyhow::anyhow!("Program 'packet_filter' not found"))? .ok_or_else(|| anyhow::anyhow!(EbpfError::LoadError("Program 'packet_filter' not found".to_string())))?
.try_into()?; .try_into()?;
program.load()?; if let Err(e) = program.load() {
error!("Failed to load XDP program into kernel: {}", e);
return Err(anyhow::anyhow!(EbpfError::LoadError(e.to_string())));
}
info!("Loaded XDP program into kernel"); info!("Loaded XDP program into kernel");
program.attach(&self.interface, aya::programs::XdpFlags::default()) if let Err(e) = program.attach(&self.interface, aya::programs::XdpFlags::default()) {
.context("Failed to attach XDP program")?; error!("Failed to attach XDP program to interface {}: {}", self.interface, e);
return Err(anyhow::anyhow!(EbpfError::AttachError {
interface: self.interface.clone(),
message: e.to_string(),
}));
}
info!("Attached XDP program to interface: {}", self.interface); info!("Attached XDP program to interface: {}", self.interface);
Ok(()) Ok(())
@@ -65,13 +74,30 @@ impl EbpfManager {
pub fn get_packet_stats(&self) -> Result<Vec<PacketStats>> { pub fn get_packet_stats(&self) -> Result<Vec<PacketStats>> {
let packet_stats_map: &HashMap<_, u32, u64> = self.bpf.map("packet_stats") let packet_stats_map: &HashMap<_, u32, u64> = self.bpf.map("packet_stats")
.ok_or_else(|| anyhow::anyhow!("packet_stats map not found"))? .ok_or_else(|| anyhow::anyhow!(EbpfError::MapNotFound {
.try_into()?; map_name: "packet_stats".to_string(),
}))?
.try_into()
.map_err(|e| anyhow::anyhow!(EbpfError::MapAccessError {
map_name: "packet_stats".to_string(),
message: e.to_string(),
}))?;
let mut stats = Vec::new(); let mut stats = Vec::new();
for (ip, bytes) in packet_stats_map.iter()? { match packet_stats_map.iter() {
stats.push(PacketStats { ip: *ip, bytes: *bytes }); Ok(iter) => {
for (ip, bytes) in iter {
stats.push(PacketStats { ip: *ip, bytes: *bytes });
}
}
Err(e) => {
error!("Failed to iterate packet_stats map: {}", e);
return Err(anyhow::anyhow!(EbpfError::MapAccessError {
map_name: "packet_stats".to_string(),
message: e.to_string(),
}));
}
} }
Ok(stats) Ok(stats)
@@ -79,13 +105,30 @@ impl EbpfManager {
pub fn get_credit_info(&self) -> Result<Vec<CreditInfo>> { pub fn get_credit_info(&self) -> Result<Vec<CreditInfo>> {
let user_credits_map: &HashMap<_, u32, i64> = self.bpf.map("user_credits") let user_credits_map: &HashMap<_, u32, i64> = self.bpf.map("user_credits")
.ok_or_else(|| anyhow::anyhow!("user_credits map not found"))? .ok_or_else(|| anyhow::anyhow!(EbpfError::MapNotFound {
.try_into()?; map_name: "user_credits".to_string(),
}))?
.try_into()
.map_err(|e| anyhow::anyhow!(EbpfError::MapAccessError {
map_name: "user_credits".to_string(),
message: e.to_string(),
}))?;
let mut credits = Vec::new(); let mut credits = Vec::new();
for (ip, credit) in user_credits_map.iter()? { match user_credits_map.iter() {
credits.push(CreditInfo { ip: *ip, credit: *credit }); Ok(iter) => {
for (ip, credit) in iter {
credits.push(CreditInfo { ip: *ip, credit: *credit });
}
}
Err(e) => {
error!("Failed to iterate user_credits map: {}", e);
return Err(anyhow::anyhow!(EbpfError::MapAccessError {
map_name: "user_credits".to_string(),
message: e.to_string(),
}));
}
} }
Ok(credits) Ok(credits)
@@ -93,36 +136,82 @@ impl EbpfManager {
pub fn update_user_credit(&self, ip: u32, credit: i64) -> Result<()> { pub fn update_user_credit(&self, ip: u32, credit: i64) -> Result<()> {
let user_credits_map: &HashMap<_, u32, i64> = self.bpf.map("user_credits") let user_credits_map: &HashMap<_, u32, i64> = self.bpf.map("user_credits")
.ok_or_else(|| anyhow::anyhow!("user_credits map not found"))? .ok_or_else(|| anyhow::anyhow!(EbpfError::MapNotFound {
.try_into()?; map_name: "user_credits".to_string(),
}))?
.try_into()
.map_err(|e| anyhow::anyhow!(EbpfError::MapAccessError {
map_name: "user_credits".to_string(),
message: e.to_string(),
}))?;
user_credits_map.insert(&ip, &credit, 0)?; match user_credits_map.insert(&ip, &credit, 0) {
debug!("Updated credit for IP {} to {}", ip, credit); Ok(_) => {
debug!("Updated credit for IP {} to {}", ip, credit);
}
Err(e) => {
error!("Failed to update credit for IP {}: {}", ip, e);
return Err(anyhow::anyhow!(EbpfError::MapAccessError {
map_name: "user_credits".to_string(),
message: e.to_string(),
}));
}
}
Ok(()) Ok(())
} }
pub fn block_user(&self, ip: u32, blocked: bool) -> Result<()> { pub fn block_user(&self, ip: u32, blocked: bool) -> Result<()> {
let block_list_map: &HashMap<_, u32, u8> = self.bpf.map("block_list") let block_list_map: &HashMap<_, u32, u8> = self.bpf.map("block_list")
.ok_or_else(|| anyhow::anyhow!("block_list map not found"))? .ok_or_else(|| anyhow::anyhow!(EbpfError::MapNotFound {
.try_into()?; map_name: "block_list".to_string(),
}))?
.try_into()
.map_err(|e| anyhow::anyhow!(EbpfError::MapAccessError {
map_name: "block_list".to_string(),
message: e.to_string(),
}))?;
let block_flag: u8 = if blocked { 1 } else { 0 }; let block_flag: u8 = if blocked { 1 } else { 0 };
block_list_map.insert(&ip, &block_flag, 0)?; match block_list_map.insert(&ip, &block_flag, 0) {
Ok(_) => {
info!("{} IP {} in eBPF block list", if blocked { "Blocked" } else { "Unblocked" }, ip);
}
Err(e) => {
error!("Failed to block IP {}: {}", ip, e);
return Err(anyhow::anyhow!(EbpfError::MapAccessError {
map_name: "block_list".to_string(),
message: e.to_string(),
}));
}
}
info!("{} IP {} in eBPF block list", if blocked { "Blocked" } else { "Unblocked" }, ip);
Ok(()) Ok(())
} }
pub async fn sync_to_redis(&self, redis_conn: &mut redis::aio::MultiplexedConnection) -> Result<()> { pub async fn sync_to_redis(&self, redis_conn: &mut redis::aio::MultiplexedConnection) -> Result<()> {
let stats = self.get_packet_stats()?; let stats = self.get_packet_stats()
.map_err(|e| {
error!("Failed to get packet stats for sync: {}", e);
anyhow::anyhow!(EbpfError::MapAccessError {
map_name: "packet_stats".to_string(),
message: e.to_string(),
})
})?;
let stats_vec: Vec<(u32, u64)> = stats.iter().map(|s| (s.ip, s.bytes)).collect(); let stats_vec: Vec<(u32, u64)> = stats.iter().map(|s| (s.ip, s.bytes)).collect();
RedisSyncer::sync_packet_stats(&stats_vec, redis_conn).await?;
if let Err(e) = RedisSyncer::sync_packet_stats(&stats_vec, redis_conn).await {
error!("Failed to sync packet stats to Redis: {}", e);
return Err(anyhow::anyhow!(EbpfError::RedisSyncError(e.to_string())));
}
let credits = self.get_credit_info(); let credits = self.get_credit_info();
if let Ok(credits) = credits { if let Ok(credits) = credits {
let credits_vec: Vec<(u32, i64)> = credits.iter().map(|c| (c.ip, c.credit)).collect(); let credits_vec: Vec<(u32, i64)> = credits.iter().map(|c| (c.ip, c.credit)).collect();
RedisSyncer::sync_credit_info(&credits_vec, redis_conn).await?; if let Err(e) = RedisSyncer::sync_credit_info(&credits_vec, redis_conn).await {
error!("Failed to sync credit info to Redis: {}", e);
return Err(anyhow::anyhow!(EbpfError::RedisSyncError(e.to_string())));
}
} }
debug!("Synced eBPF maps to Redis"); debug!("Synced eBPF maps to Redis");
+16
View File
@@ -13,9 +13,11 @@ use std::sync::atomic::{AtomicBool, Ordering};
mod ebpf; mod ebpf;
mod health; mod health;
mod charging_client; mod charging_client;
mod config;
use ebpf::EbpfManager; use ebpf::EbpfManager;
use health::{health_handler, liveness_handler, readiness_handler, metrics_handler}; use health::{health_handler, liveness_handler, readiness_handler, metrics_handler};
use charging_client::ChargingEngineClient; use charging_client::ChargingEngineClient;
use config::{ConfigState, PacketGatewayConfig, create_config_router};
#[derive(Parser, Debug)] #[derive(Parser, Debug)]
#[command(author, version, about, long_about = None)] #[command(author, version, about, long_about = None)]
@@ -99,12 +101,26 @@ async fn main() -> Result<()> {
let ebpf_manager_clone = Arc::clone(&ebpf_manager); let ebpf_manager_clone = Arc::clone(&ebpf_manager);
let health_port = args.health_port; let health_port = args.health_port;
// Create config state
let config = PacketGatewayConfig {
interface: args.interface.clone(),
redis_url: args.redis_url.clone(),
charging_engine_url: args.charging_engine_url.clone(),
sync_interval: args.sync_interval,
health_port: args.health_port,
};
let config_state = ConfigState {
config: Arc::new(RwLock::new(config)),
};
tokio::spawn(async move { tokio::spawn(async move {
let config_router = create_config_router(config_state);
let app = Router::new() let app = Router::new()
.route("/health", get(health_handler)) .route("/health", get(health_handler))
.route("/health/ready", get(readiness_handler)) .route("/health/ready", get(readiness_handler))
.route("/health/live", get(liveness_handler)) .route("/health/live", get(liveness_handler))
.route("/metrics", get(metrics_handler)) .route("/metrics", get(metrics_handler))
.nest("/api/v1", config_router)
.with_state(redis_client_arc) .with_state(redis_client_arc)
.with_state(ebpf_attached_clone) .with_state(ebpf_attached_clone)
.with_state(ebpf_manager_clone); .with_state(ebpf_manager_clone);