1 files changed, 263 insertions, 0 deletions
diff --git a/src/fluent-bit/plugins/in_syslog/syslog.c b/src/fluent-bit/plugins/in_syslog/syslog.c
new file mode 100644
index 000000000..d478dfc3f
--- /dev/null
+++ b/src/fluent-bit/plugins/in_syslog/syslog.c
@@ -0,0 +1,263 @@
+/* -*- Mode: C; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
+
+/*  Fluent Bit
+ *  ==========
+ *  Copyright (C) 2015-2022 The Fluent Bit Authors
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <fcntl.h>
+
+#include <msgpack.h>
+#include <fluent-bit/flb_input_plugin.h>
+#include <fluent-bit/flb_downstream.h>
+#include <fluent-bit/flb_config.h>
+#include <fluent-bit/flb_error.h>
+#include <fluent-bit/flb_utils.h>
+
+#include "syslog.h"
+#include "syslog_conf.h"
+#include "syslog_server.h"
+#include "syslog_conn.h"
+#include "syslog_prot.h"
+
+/* cb_collect callback */
+static int in_syslog_collect_tcp(struct flb_input_instance *i_ins,
+                                 struct flb_config *config, void *in_context)
+{
+    struct flb_connection *connection;
+    struct syslog_conn    *conn;
+    struct flb_syslog     *ctx;
+
+    (void) i_ins;
+
+    ctx = in_context;
+
+    connection = flb_downstream_conn_get(ctx->downstream);
+
+    if (connection == NULL) {
+        flb_plg_error(ctx->ins, "could not accept new connection");
+
+        return -1;
+    }
+
+    if (ctx->dgram_mode_flag) {
+        return syslog_dgram_conn_event(connection);
+    }
+    else {
+        flb_plg_trace(ctx->ins, "new Unix connection arrived FD=%i", connection->fd);
+
+        conn = syslog_conn_add(connection, ctx);
+
+        if (conn == NULL) {
+            flb_plg_error(ctx->ins, "could not accept new connection");
+
+            flb_downstream_conn_release(connection);
+
+            return -1;
+        }
+    }
+
+    return 0;
+}
+
+/*
+ * Collect a datagram, per Syslog specification a datagram contains only
+ * one syslog message and it should not exceed 1KB.
+ */
+static int in_syslog_collect_udp(struct flb_input_instance *i_ins,
+                                 struct flb_config *config,
+                                 void *in_context)
+{
+    struct flb_syslog *ctx;
+
+    (void) i_ins;
+
+    ctx = in_context;
+
+    return syslog_dgram_conn_event(ctx->dummy_conn->connection);
+}
+
+/* Initialize plugin */
+static int in_syslog_init(struct flb_input_instance *in,
+                          struct flb_config *config, void *data)
+{
+    int ret;
+    struct flb_syslog *ctx;
+    struct flb_connection *connection;
+
+    /* Allocate space for the configuration */
+    ctx = syslog_conf_create(in, config);
+    if (!ctx) {
+        flb_plg_error(in, "could not initialize plugin");
+        return -1;
+    }
+    ctx->collector_id = -1;
+
+    if ((ctx->mode == FLB_SYSLOG_UNIX_TCP || ctx->mode == FLB_SYSLOG_UNIX_UDP)
+        && !ctx->unix_path) {
+        flb_plg_error(ctx->ins, "Unix path not defined");
+        syslog_conf_destroy(ctx);
+        return -1;
+    }
+
+    /* Create Unix Socket */
+    ret = syslog_server_create(ctx);
+    if (ret == -1) {
+        syslog_conf_destroy(ctx);
+        return -1;
+    }
+
+    flb_input_downstream_set(ctx->downstream, ctx->ins);
+
+    if (ctx->dgram_mode_flag) {
+        connection = flb_downstream_conn_get(ctx->downstream);
+
+        if (connection == NULL) {
+            flb_plg_error(ctx->ins, "could not get DGRAM server dummy "
+                                    "connection");
+
+            syslog_conf_destroy(ctx);
+
+            return -1;
+        }
+
+        ctx->dummy_conn = syslog_conn_add(connection, ctx);
+
+        if (ctx->dummy_conn == NULL) {
+            flb_plg_error(ctx->ins, "could not track DGRAM server dummy "
+                                    "connection");
+
+            syslog_conf_destroy(ctx);
+
+            return -1;
+        }
+    }
+
+    /* Set context */
+    flb_input_set_context(in, ctx);
+
+    /* Collect events for every opened connection to our socket */
+    if (ctx->mode == FLB_SYSLOG_UNIX_TCP ||
+        ctx->mode == FLB_SYSLOG_TCP) {
+        ret = flb_input_set_collector_socket(in,
+                                             in_syslog_collect_tcp,
+                                             ctx->downstream->server_fd,
+                                             config);
+    }
+    else {
+        ret = flb_input_set_collector_socket(in,
+                                             in_syslog_collect_udp,
+                                             ctx->downstream->server_fd,
+                                             config);
+    }
+
+    if (ret == -1) {
+        flb_plg_error(ctx->ins, "Could not set collector");
+        syslog_conf_destroy(ctx);
+
+        return -1;
+    }
+
+    ctx->collector_id = ret;
+    ctx->collector_event = flb_input_collector_get_event(ret, in);
+
+    if (ret == -1) {
+        flb_plg_error(ctx->ins, "Could not get collector event");
+        syslog_conf_destroy(ctx);
+
+        return -1;
+    }
+
+    return 0;
+}
+
+static int in_syslog_exit(void *data, struct flb_config *config)
+{
+    struct flb_syslog *ctx = data;
+    (void) config;
+
+    syslog_conn_exit(ctx);
+    syslog_conf_destroy(ctx);
+
+    return 0;
+}
+
+static struct flb_config_map config_map[] = {
+    {
+     FLB_CONFIG_MAP_STR, "mode", (char *)NULL,
+     0, FLB_TRUE, offsetof(struct flb_syslog, mode_str),
+     "Set the socket mode: unix_tcp, unix_udp, tcp or udp"
+    },
+    {
+     FLB_CONFIG_MAP_STR, "path", (char *)NULL,
+     0, FLB_TRUE, offsetof(struct flb_syslog, unix_path),
+     "Set the path for the UNIX socket"
+    },
+    {
+     FLB_CONFIG_MAP_STR, "unix_perm", (char *)NULL,
+     0, FLB_TRUE, offsetof(struct flb_syslog, unix_perm_str),
+     "Set the permissions for the UNIX socket"
+    },
+    {
+      FLB_CONFIG_MAP_SIZE, "buffer_chunk_size", FLB_SYSLOG_CHUNK,
+      0, FLB_TRUE, offsetof(struct flb_syslog, buffer_chunk_size),
+      "Set the buffer chunk size"
+    },
+    {
+      FLB_CONFIG_MAP_SIZE, "buffer_max_size", (char *)NULL,
+      0, FLB_TRUE, offsetof(struct flb_syslog, buffer_max_size),
+      "Set the buffer chunk size"
+    },
+    {
+     FLB_CONFIG_MAP_STR, "parser", (char *)NULL,
+     0, FLB_TRUE, offsetof(struct flb_syslog, parser_name),
+     "Set the parser"
+    },
+    {
+      FLB_CONFIG_MAP_SIZE, "receive_buffer_size", (char *)NULL,
+      0, FLB_TRUE, offsetof(struct flb_syslog, receive_buffer_size),
+      "Set the socket receiving buffer size"
+    },
+    {
+     FLB_CONFIG_MAP_STR, "raw_message_key", (char *) NULL,
+     0, FLB_TRUE, offsetof(struct flb_syslog, raw_message_key),
+     "Key where the raw message will be preserved"
+    },
+    {
+     FLB_CONFIG_MAP_STR, "source_address_key", (char *) NULL,
+     0, FLB_TRUE, offsetof(struct flb_syslog, source_address_key),
+     "Key where the source address will be injected"
+    },
+
+
+    /* EOF */
+    {0}
+};
+
+struct flb_input_plugin in_syslog_plugin = {
+    .name         = "syslog",
+    .description  = "Syslog",
+    .cb_init      = in_syslog_init,
+    .cb_pre_run   = NULL,
+    .cb_collect   = NULL,
+    .cb_flush_buf = NULL,
+    .cb_exit      = in_syslog_exit,
+    .config_map   = config_map,
+    .flags        = FLB_INPUT_NET_SERVER | FLB_IO_OPT_TLS
+};