if_gif.c revision 1.107 1 1.107 knakahar /* $NetBSD: if_gif.c,v 1.107 2016/04/20 09:01:04 knakahara Exp $ */
2 1.34 itojun /* $KAME: if_gif.c,v 1.76 2001/08/20 02:01:02 kjc Exp $ */
3 1.3 itojun
4 1.2 itojun /*
5 1.2 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6 1.2 itojun * All rights reserved.
7 1.9 itojun *
8 1.2 itojun * Redistribution and use in source and binary forms, with or without
9 1.2 itojun * modification, are permitted provided that the following conditions
10 1.2 itojun * are met:
11 1.2 itojun * 1. Redistributions of source code must retain the above copyright
12 1.2 itojun * notice, this list of conditions and the following disclaimer.
13 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
14 1.2 itojun * notice, this list of conditions and the following disclaimer in the
15 1.2 itojun * documentation and/or other materials provided with the distribution.
16 1.2 itojun * 3. Neither the name of the project nor the names of its contributors
17 1.2 itojun * may be used to endorse or promote products derived from this software
18 1.2 itojun * without specific prior written permission.
19 1.9 itojun *
20 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.2 itojun * SUCH DAMAGE.
31 1.2 itojun */
32 1.36 lukem
33 1.36 lukem #include <sys/cdefs.h>
34 1.107 knakahar __KERNEL_RCSID(0, "$NetBSD: if_gif.c,v 1.107 2016/04/20 09:01:04 knakahara Exp $");
35 1.2 itojun
36 1.88 pooka #ifdef _KERNEL_OPT
37 1.2 itojun #include "opt_inet.h"
38 1.88 pooka #endif
39 1.2 itojun
40 1.2 itojun #include <sys/param.h>
41 1.2 itojun #include <sys/systm.h>
42 1.2 itojun #include <sys/kernel.h>
43 1.2 itojun #include <sys/mbuf.h>
44 1.2 itojun #include <sys/socket.h>
45 1.2 itojun #include <sys/sockio.h>
46 1.2 itojun #include <sys/errno.h>
47 1.2 itojun #include <sys/ioctl.h>
48 1.2 itojun #include <sys/time.h>
49 1.86 martin #include <sys/socketvar.h>
50 1.2 itojun #include <sys/syslog.h>
51 1.17 martin #include <sys/proc.h>
52 1.72 ad #include <sys/cpu.h>
53 1.72 ad #include <sys/intr.h>
54 1.98 knakahar #include <sys/kmem.h>
55 1.104 knakahar #include <sys/sysctl.h>
56 1.2 itojun
57 1.2 itojun #include <net/if.h>
58 1.2 itojun #include <net/if_types.h>
59 1.2 itojun #include <net/netisr.h>
60 1.2 itojun #include <net/route.h>
61 1.2 itojun #include <net/bpf.h>
62 1.2 itojun
63 1.2 itojun #include <netinet/in.h>
64 1.2 itojun #include <netinet/in_systm.h>
65 1.15 itojun #include <netinet/ip.h>
66 1.15 itojun #ifdef INET
67 1.2 itojun #include <netinet/in_var.h>
68 1.57 christos #endif /* INET */
69 1.2 itojun #include <netinet/in_gif.h>
70 1.2 itojun
71 1.2 itojun #ifdef INET6
72 1.2 itojun #ifndef INET
73 1.2 itojun #include <netinet/in.h>
74 1.2 itojun #endif
75 1.2 itojun #include <netinet6/in6_var.h>
76 1.2 itojun #include <netinet/ip6.h>
77 1.2 itojun #include <netinet6/ip6_var.h>
78 1.2 itojun #include <netinet6/in6_gif.h>
79 1.2 itojun #endif /* INET6 */
80 1.2 itojun
81 1.9 itojun #include <netinet/ip_encap.h>
82 1.2 itojun #include <net/if_gif.h>
83 1.2 itojun
84 1.87 christos #include <net/net_osdep.h>
85 1.2 itojun
86 1.87 christos #include "ioconf.h"
87 1.4 itojun
88 1.56 thorpej static void gifintr(void *);
89 1.2 itojun
90 1.2 itojun /*
91 1.2 itojun * gif global variable definitions
92 1.2 itojun */
93 1.106 knakahar static LIST_HEAD(, gif_softc) gif_softc_list;
94 1.12 thorpej
95 1.104 knakahar static void gif_sysctl_setup(struct sysctllog **);
96 1.104 knakahar
97 1.56 thorpej static int gif_clone_create(struct if_clone *, int);
98 1.56 thorpej static int gif_clone_destroy(struct ifnet *);
99 1.95 knakahar static int gif_check_nesting(struct ifnet *, struct mbuf *);
100 1.12 thorpej
101 1.97 knakahar static int gif_encap_attach(struct gif_softc *);
102 1.97 knakahar static int gif_encap_detach(struct gif_softc *);
103 1.97 knakahar
104 1.56 thorpej static struct if_clone gif_cloner =
105 1.12 thorpej IF_CLONE_INITIALIZER("gif", gif_clone_create, gif_clone_destroy);
106 1.12 thorpej
107 1.9 itojun #ifndef MAX_GIF_NEST
108 1.9 itojun /*
109 1.9 itojun * This macro controls the upper limitation on nesting of gif tunnels.
110 1.9 itojun * Since, setting a large value to this macro with a careless configuration
111 1.9 itojun * may introduce system crash, we don't allow any nestings by default.
112 1.9 itojun * If you need to configure nested gif tunnels, you can define this macro
113 1.31 itojun * in your kernel configuration file. However, if you do so, please be
114 1.9 itojun * careful to configure the tunnels so that it won't make a loop.
115 1.9 itojun */
116 1.9 itojun #define MAX_GIF_NEST 1
117 1.9 itojun #endif
118 1.9 itojun static int max_gif_nesting = MAX_GIF_NEST;
119 1.2 itojun
120 1.104 knakahar static void
121 1.104 knakahar gif_sysctl_setup(struct sysctllog **clog)
122 1.104 knakahar {
123 1.104 knakahar
124 1.104 knakahar #ifdef INET
125 1.104 knakahar sysctl_createv(clog, 0, NULL, NULL,
126 1.104 knakahar CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
127 1.104 knakahar CTLTYPE_INT, "gifttl",
128 1.104 knakahar SYSCTL_DESCR("Default TTL for a gif tunnel datagram"),
129 1.104 knakahar NULL, 0, &ip_gif_ttl, 0,
130 1.104 knakahar CTL_NET, PF_INET, IPPROTO_IP,
131 1.104 knakahar IPCTL_GIF_TTL, CTL_EOL);
132 1.104 knakahar #endif
133 1.104 knakahar #ifdef INET6
134 1.104 knakahar sysctl_createv(clog, 0, NULL, NULL,
135 1.104 knakahar CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
136 1.104 knakahar CTLTYPE_INT, "gifhlim",
137 1.104 knakahar SYSCTL_DESCR("Default hop limit for a gif tunnel datagram"),
138 1.104 knakahar NULL, 0, &ip6_gif_hlim, 0,
139 1.104 knakahar CTL_NET, PF_INET6, IPPROTO_IPV6,
140 1.104 knakahar IPV6CTL_GIF_HLIM, CTL_EOL);
141 1.104 knakahar #endif
142 1.104 knakahar }
143 1.104 knakahar
144 1.12 thorpej /* ARGSUSED */
145 1.2 itojun void
146 1.63 christos gifattach(int count)
147 1.12 thorpej {
148 1.12 thorpej
149 1.12 thorpej LIST_INIT(&gif_softc_list);
150 1.12 thorpej if_clone_attach(&gif_cloner);
151 1.104 knakahar
152 1.104 knakahar gif_sysctl_setup(NULL);
153 1.12 thorpej }
154 1.12 thorpej
155 1.56 thorpej static int
156 1.56 thorpej gif_clone_create(struct if_clone *ifc, int unit)
157 1.2 itojun {
158 1.12 thorpej struct gif_softc *sc;
159 1.12 thorpej
160 1.98 knakahar sc = kmem_zalloc(sizeof(struct gif_softc), KM_SLEEP);
161 1.101 knakahar if (sc == NULL)
162 1.101 knakahar return ENOMEM;
163 1.2 itojun
164 1.75 christos if_initname(&sc->gif_if, ifc->ifc_name, unit);
165 1.9 itojun
166 1.31 itojun gifattach0(sc);
167 1.31 itojun
168 1.31 itojun LIST_INSERT_HEAD(&gif_softc_list, sc, gif_list);
169 1.31 itojun return (0);
170 1.31 itojun }
171 1.31 itojun
172 1.31 itojun void
173 1.56 thorpej gifattach0(struct gif_softc *sc)
174 1.31 itojun {
175 1.31 itojun
176 1.12 thorpej sc->encap_cookie4 = sc->encap_cookie6 = NULL;
177 1.9 itojun
178 1.31 itojun sc->gif_if.if_addrlen = 0;
179 1.12 thorpej sc->gif_if.if_mtu = GIF_MTU;
180 1.12 thorpej sc->gif_if.if_flags = IFF_POINTOPOINT | IFF_MULTICAST;
181 1.12 thorpej sc->gif_if.if_ioctl = gif_ioctl;
182 1.12 thorpej sc->gif_if.if_output = gif_output;
183 1.12 thorpej sc->gif_if.if_type = IFT_GIF;
184 1.19 thorpej sc->gif_if.if_dlt = DLT_NULL;
185 1.76 dyoung sc->gif_if.if_softc = sc;
186 1.34 itojun IFQ_SET_READY(&sc->gif_if.if_snd);
187 1.12 thorpej if_attach(&sc->gif_if);
188 1.20 thorpej if_alloc_sadl(&sc->gif_if);
189 1.78 joerg bpf_attach(&sc->gif_if, DLT_NULL, sizeof(u_int));
190 1.12 thorpej }
191 1.12 thorpej
192 1.56 thorpej static int
193 1.56 thorpej gif_clone_destroy(struct ifnet *ifp)
194 1.12 thorpej {
195 1.12 thorpej struct gif_softc *sc = (void *) ifp;
196 1.12 thorpej
197 1.12 thorpej LIST_REMOVE(sc, gif_list);
198 1.12 thorpej
199 1.94 knakahar gif_delete_tunnel(&sc->gif_if);
200 1.78 joerg bpf_detach(ifp);
201 1.69 dyoung if_detach(ifp);
202 1.66 dyoung rtcache_free(&sc->gif_ro);
203 1.12 thorpej
204 1.98 knakahar kmem_free(sc, sizeof(struct gif_softc));
205 1.47 peter
206 1.47 peter return (0);
207 1.9 itojun }
208 1.9 itojun
209 1.42 itojun #ifdef GIF_ENCAPCHECK
210 1.31 itojun int
211 1.56 thorpej gif_encapcheck(struct mbuf *m, int off, int proto, void *arg)
212 1.9 itojun {
213 1.9 itojun struct ip ip;
214 1.9 itojun struct gif_softc *sc;
215 1.9 itojun
216 1.76 dyoung sc = arg;
217 1.9 itojun if (sc == NULL)
218 1.9 itojun return 0;
219 1.9 itojun
220 1.9 itojun if ((sc->gif_if.if_flags & IFF_UP) == 0)
221 1.9 itojun return 0;
222 1.9 itojun
223 1.9 itojun /* no physical address */
224 1.9 itojun if (!sc->gif_psrc || !sc->gif_pdst)
225 1.9 itojun return 0;
226 1.9 itojun
227 1.9 itojun switch (proto) {
228 1.9 itojun #ifdef INET
229 1.9 itojun case IPPROTO_IPV4:
230 1.9 itojun break;
231 1.9 itojun #endif
232 1.9 itojun #ifdef INET6
233 1.9 itojun case IPPROTO_IPV6:
234 1.9 itojun break;
235 1.9 itojun #endif
236 1.9 itojun default:
237 1.9 itojun return 0;
238 1.9 itojun }
239 1.40 christos
240 1.40 christos /* Bail on short packets */
241 1.40 christos KASSERT(m->m_flags & M_PKTHDR);
242 1.40 christos if (m->m_pkthdr.len < sizeof(ip))
243 1.40 christos return 0;
244 1.9 itojun
245 1.76 dyoung m_copydata(m, 0, sizeof(ip), &ip);
246 1.9 itojun
247 1.9 itojun switch (ip.ip_v) {
248 1.9 itojun #ifdef INET
249 1.9 itojun case 4:
250 1.9 itojun if (sc->gif_psrc->sa_family != AF_INET ||
251 1.9 itojun sc->gif_pdst->sa_family != AF_INET)
252 1.9 itojun return 0;
253 1.9 itojun return gif_encapcheck4(m, off, proto, arg);
254 1.9 itojun #endif
255 1.9 itojun #ifdef INET6
256 1.9 itojun case 6:
257 1.41 itojun if (m->m_pkthdr.len < sizeof(struct ip6_hdr))
258 1.41 itojun return 0;
259 1.9 itojun if (sc->gif_psrc->sa_family != AF_INET6 ||
260 1.9 itojun sc->gif_pdst->sa_family != AF_INET6)
261 1.9 itojun return 0;
262 1.9 itojun return gif_encapcheck6(m, off, proto, arg);
263 1.9 itojun #endif
264 1.9 itojun default:
265 1.9 itojun return 0;
266 1.2 itojun }
267 1.2 itojun }
268 1.42 itojun #endif
269 1.2 itojun
270 1.95 knakahar /*
271 1.95 knakahar * gif may cause infinite recursion calls when misconfigured.
272 1.95 knakahar * We'll prevent this by introducing upper limit.
273 1.95 knakahar */
274 1.95 knakahar static int
275 1.95 knakahar gif_check_nesting(struct ifnet *ifp, struct mbuf *m)
276 1.95 knakahar {
277 1.95 knakahar struct m_tag *mtag;
278 1.95 knakahar int *count;
279 1.95 knakahar
280 1.95 knakahar mtag = m_tag_find(m, PACKET_TAG_TUNNEL_INFO, NULL);
281 1.95 knakahar if (mtag != NULL) {
282 1.95 knakahar count = (int *)(mtag + 1);
283 1.95 knakahar if (++(*count) > max_gif_nesting) {
284 1.95 knakahar log(LOG_NOTICE,
285 1.95 knakahar "%s: recursively called too many times(%d)\n",
286 1.95 knakahar if_name(ifp),
287 1.95 knakahar *count);
288 1.95 knakahar return EIO;
289 1.95 knakahar }
290 1.95 knakahar } else {
291 1.95 knakahar mtag = m_tag_get(PACKET_TAG_TUNNEL_INFO, sizeof(*count),
292 1.95 knakahar M_NOWAIT);
293 1.95 knakahar if (mtag != NULL) {
294 1.95 knakahar m_tag_prepend(m, mtag);
295 1.95 knakahar count = (int *)(mtag + 1);
296 1.95 knakahar *count = 0;
297 1.95 knakahar } else {
298 1.95 knakahar log(LOG_DEBUG,
299 1.95 knakahar "%s: m_tag_get() failed, recursion calls are not prevented.\n",
300 1.95 knakahar if_name(ifp));
301 1.95 knakahar }
302 1.95 knakahar }
303 1.95 knakahar
304 1.95 knakahar return 0;
305 1.95 knakahar }
306 1.95 knakahar
307 1.2 itojun int
308 1.65 dyoung gif_output(struct ifnet *ifp, struct mbuf *m, const struct sockaddr *dst,
309 1.63 christos struct rtentry *rt)
310 1.2 itojun {
311 1.76 dyoung struct gif_softc *sc = ifp->if_softc;
312 1.2 itojun int error = 0;
313 1.33 itojun int s;
314 1.33 itojun
315 1.107 knakahar IFQ_CLASSIFY(&ifp->if_snd, m, dst->sa_family);
316 1.2 itojun
317 1.95 knakahar if ((error = gif_check_nesting(ifp, m)) != 0) {
318 1.95 knakahar m_free(m);
319 1.2 itojun goto end;
320 1.2 itojun }
321 1.2 itojun
322 1.2 itojun m->m_flags &= ~(M_BCAST|M_MCAST);
323 1.2 itojun if (!(ifp->if_flags & IFF_UP) ||
324 1.102 knakahar sc->gif_psrc == NULL || sc->gif_pdst == NULL ||
325 1.102 knakahar sc->gif_si == NULL) {
326 1.2 itojun m_freem(m);
327 1.2 itojun error = ENETDOWN;
328 1.2 itojun goto end;
329 1.2 itojun }
330 1.2 itojun
331 1.9 itojun /* XXX should we check if our outer source is legal? */
332 1.2 itojun
333 1.33 itojun /* use DLT_NULL encapsulation here to pass inner af type */
334 1.33 itojun M_PREPEND(m, sizeof(int), M_DONTWAIT);
335 1.33 itojun if (!m) {
336 1.33 itojun error = ENOBUFS;
337 1.33 itojun goto end;
338 1.33 itojun }
339 1.33 itojun *mtod(m, int *) = dst->sa_family;
340 1.33 itojun
341 1.79 dyoung /* Clear checksum-offload flags. */
342 1.79 dyoung m->m_pkthdr.csum_flags = 0;
343 1.79 dyoung m->m_pkthdr.csum_data = 0;
344 1.79 dyoung
345 1.33 itojun s = splnet();
346 1.107 knakahar IFQ_ENQUEUE(&ifp->if_snd, m, error);
347 1.33 itojun if (error) {
348 1.33 itojun splx(s);
349 1.31 itojun goto end;
350 1.2 itojun }
351 1.102 knakahar
352 1.102 knakahar /* softint_schedule() must be called with kpreempt_disabled() */
353 1.102 knakahar softint_schedule(sc->gif_si);
354 1.33 itojun splx(s);
355 1.33 itojun
356 1.33 itojun error = 0;
357 1.2 itojun
358 1.2 itojun end:
359 1.31 itojun if (error)
360 1.31 itojun ifp->if_oerrors++;
361 1.2 itojun return error;
362 1.2 itojun }
363 1.2 itojun
364 1.56 thorpej static void
365 1.56 thorpej gifintr(void *arg)
366 1.33 itojun {
367 1.33 itojun struct gif_softc *sc;
368 1.33 itojun struct ifnet *ifp;
369 1.33 itojun struct mbuf *m;
370 1.33 itojun int family;
371 1.33 itojun int len;
372 1.33 itojun int s;
373 1.33 itojun int error;
374 1.33 itojun
375 1.76 dyoung sc = arg;
376 1.33 itojun ifp = &sc->gif_if;
377 1.33 itojun
378 1.102 knakahar /*
379 1.102 knakahar * other CPUs does {set,delete}_tunnel after curcpu have done
380 1.102 knakahar * softint_schedule().
381 1.102 knakahar */
382 1.102 knakahar if (sc->gif_pdst == NULL || sc->gif_psrc == NULL) {
383 1.102 knakahar IFQ_PURGE(&ifp->if_snd);
384 1.102 knakahar return;
385 1.102 knakahar }
386 1.102 knakahar
387 1.33 itojun /* output processing */
388 1.33 itojun while (1) {
389 1.33 itojun s = splnet();
390 1.34 itojun IFQ_DEQUEUE(&sc->gif_if.if_snd, m);
391 1.33 itojun splx(s);
392 1.33 itojun if (m == NULL)
393 1.33 itojun break;
394 1.33 itojun
395 1.33 itojun /* grab and chop off inner af type */
396 1.33 itojun if (sizeof(int) > m->m_len) {
397 1.33 itojun m = m_pullup(m, sizeof(int));
398 1.33 itojun if (!m) {
399 1.33 itojun ifp->if_oerrors++;
400 1.33 itojun continue;
401 1.33 itojun }
402 1.33 itojun }
403 1.33 itojun family = *mtod(m, int *);
404 1.78 joerg bpf_mtap(ifp, m);
405 1.33 itojun m_adj(m, sizeof(int));
406 1.33 itojun
407 1.33 itojun len = m->m_pkthdr.len;
408 1.33 itojun
409 1.33 itojun /* dispatch to output logic based on outer AF */
410 1.33 itojun switch (sc->gif_psrc->sa_family) {
411 1.33 itojun #ifdef INET
412 1.33 itojun case AF_INET:
413 1.85 hsuenaga mutex_enter(softnet_lock);
414 1.33 itojun error = in_gif_output(ifp, family, m);
415 1.85 hsuenaga mutex_exit(softnet_lock);
416 1.33 itojun break;
417 1.33 itojun #endif
418 1.33 itojun #ifdef INET6
419 1.33 itojun case AF_INET6:
420 1.85 hsuenaga mutex_enter(softnet_lock);
421 1.33 itojun error = in6_gif_output(ifp, family, m);
422 1.85 hsuenaga mutex_exit(softnet_lock);
423 1.33 itojun break;
424 1.33 itojun #endif
425 1.33 itojun default:
426 1.50 perry m_freem(m);
427 1.33 itojun error = ENETDOWN;
428 1.33 itojun break;
429 1.33 itojun }
430 1.33 itojun
431 1.33 itojun if (error)
432 1.33 itojun ifp->if_oerrors++;
433 1.33 itojun else {
434 1.50 perry ifp->if_opackets++;
435 1.33 itojun ifp->if_obytes += len;
436 1.33 itojun }
437 1.33 itojun }
438 1.33 itojun }
439 1.33 itojun
440 1.33 itojun void
441 1.56 thorpej gif_input(struct mbuf *m, int af, struct ifnet *ifp)
442 1.2 itojun {
443 1.83 rmind pktqueue_t *pktq;
444 1.83 rmind size_t pktlen;
445 1.83 rmind int s;
446 1.2 itojun
447 1.33 itojun if (ifp == NULL) {
448 1.2 itojun /* just in case */
449 1.2 itojun m_freem(m);
450 1.2 itojun return;
451 1.2 itojun }
452 1.2 itojun
453 1.33 itojun m->m_pkthdr.rcvif = ifp;
454 1.83 rmind pktlen = m->m_pkthdr.len;
455 1.50 perry
456 1.78 joerg bpf_mtap_af(ifp, af, m);
457 1.2 itojun
458 1.2 itojun /*
459 1.2 itojun * Put the packet to the network layer input queue according to the
460 1.83 rmind * specified address family. Note: we avoid direct call to the
461 1.83 rmind * input function of the network layer in order to avoid recursion.
462 1.83 rmind * This may be revisited in the future.
463 1.2 itojun */
464 1.2 itojun switch (af) {
465 1.2 itojun #ifdef INET
466 1.2 itojun case AF_INET:
467 1.83 rmind pktq = ip_pktq;
468 1.2 itojun break;
469 1.2 itojun #endif
470 1.2 itojun #ifdef INET6
471 1.2 itojun case AF_INET6:
472 1.83 rmind pktq = ip6_pktq;
473 1.2 itojun break;
474 1.2 itojun #endif
475 1.2 itojun default:
476 1.2 itojun m_freem(m);
477 1.2 itojun return;
478 1.2 itojun }
479 1.2 itojun
480 1.27 thorpej s = splnet();
481 1.83 rmind if (__predict_true(pktq_enqueue(pktq, m, 0))) {
482 1.83 rmind ifp->if_ibytes += pktlen;
483 1.83 rmind ifp->if_ipackets++;
484 1.83 rmind } else {
485 1.2 itojun m_freem(m);
486 1.2 itojun }
487 1.2 itojun splx(s);
488 1.2 itojun }
489 1.2 itojun
490 1.9 itojun /* XXX how should we handle IPv6 scope on SIOC[GS]IFPHYADDR? */
491 1.2 itojun int
492 1.67 christos gif_ioctl(struct ifnet *ifp, u_long cmd, void *data)
493 1.2 itojun {
494 1.76 dyoung struct gif_softc *sc = ifp->if_softc;
495 1.2 itojun struct ifreq *ifr = (struct ifreq*)data;
496 1.84 roy struct ifaddr *ifa = (struct ifaddr*)data;
497 1.2 itojun int error = 0, size;
498 1.9 itojun struct sockaddr *dst, *src;
499 1.31 itojun
500 1.2 itojun switch (cmd) {
501 1.76 dyoung case SIOCINITIFADDR:
502 1.32 itojun ifp->if_flags |= IFF_UP;
503 1.84 roy ifa->ifa_rtrequest = p2p_rtrequest;
504 1.2 itojun break;
505 1.50 perry
506 1.2 itojun case SIOCADDMULTI:
507 1.2 itojun case SIOCDELMULTI:
508 1.2 itojun switch (ifr->ifr_addr.sa_family) {
509 1.2 itojun #ifdef INET
510 1.2 itojun case AF_INET: /* IP supports Multicast */
511 1.2 itojun break;
512 1.2 itojun #endif /* INET */
513 1.2 itojun #ifdef INET6
514 1.2 itojun case AF_INET6: /* IP6 supports Multicast */
515 1.2 itojun break;
516 1.2 itojun #endif /* INET6 */
517 1.2 itojun default: /* Other protocols doesn't support Multicast */
518 1.2 itojun error = EAFNOSUPPORT;
519 1.2 itojun break;
520 1.2 itojun }
521 1.2 itojun break;
522 1.2 itojun
523 1.2 itojun case SIOCSIFMTU:
524 1.73 dyoung if (ifr->ifr_mtu < GIF_MTU_MIN || ifr->ifr_mtu > GIF_MTU_MAX)
525 1.73 dyoung return EINVAL;
526 1.73 dyoung else if ((error = ifioctl_common(ifp, cmd, data)) == ENETRESET)
527 1.73 dyoung error = 0;
528 1.2 itojun break;
529 1.2 itojun
530 1.31 itojun #ifdef INET
531 1.2 itojun case SIOCSIFPHYADDR:
532 1.31 itojun #endif
533 1.2 itojun #ifdef INET6
534 1.2 itojun case SIOCSIFPHYADDR_IN6:
535 1.2 itojun #endif /* INET6 */
536 1.25 itojun case SIOCSLIFPHYADDR:
537 1.11 itojun switch (cmd) {
538 1.15 itojun #ifdef INET
539 1.11 itojun case SIOCSIFPHYADDR:
540 1.11 itojun src = (struct sockaddr *)
541 1.11 itojun &(((struct in_aliasreq *)data)->ifra_addr);
542 1.11 itojun dst = (struct sockaddr *)
543 1.11 itojun &(((struct in_aliasreq *)data)->ifra_dstaddr);
544 1.11 itojun break;
545 1.15 itojun #endif
546 1.11 itojun #ifdef INET6
547 1.11 itojun case SIOCSIFPHYADDR_IN6:
548 1.11 itojun src = (struct sockaddr *)
549 1.11 itojun &(((struct in6_aliasreq *)data)->ifra_addr);
550 1.11 itojun dst = (struct sockaddr *)
551 1.11 itojun &(((struct in6_aliasreq *)data)->ifra_dstaddr);
552 1.25 itojun break;
553 1.25 itojun #endif
554 1.25 itojun case SIOCSLIFPHYADDR:
555 1.25 itojun src = (struct sockaddr *)
556 1.25 itojun &(((struct if_laddrreq *)data)->addr);
557 1.25 itojun dst = (struct sockaddr *)
558 1.25 itojun &(((struct if_laddrreq *)data)->dstaddr);
559 1.31 itojun break;
560 1.31 itojun default:
561 1.31 itojun return EINVAL;
562 1.25 itojun }
563 1.25 itojun
564 1.25 itojun /* sa_family must be equal */
565 1.25 itojun if (src->sa_family != dst->sa_family)
566 1.25 itojun return EINVAL;
567 1.25 itojun
568 1.25 itojun /* validate sa_len */
569 1.25 itojun switch (src->sa_family) {
570 1.25 itojun #ifdef INET
571 1.25 itojun case AF_INET:
572 1.25 itojun if (src->sa_len != sizeof(struct sockaddr_in))
573 1.16 itojun return EINVAL;
574 1.11 itojun break;
575 1.11 itojun #endif
576 1.25 itojun #ifdef INET6
577 1.25 itojun case AF_INET6:
578 1.25 itojun if (src->sa_len != sizeof(struct sockaddr_in6))
579 1.25 itojun return EINVAL;
580 1.25 itojun break;
581 1.25 itojun #endif
582 1.25 itojun default:
583 1.25 itojun return EAFNOSUPPORT;
584 1.25 itojun }
585 1.25 itojun switch (dst->sa_family) {
586 1.25 itojun #ifdef INET
587 1.25 itojun case AF_INET:
588 1.25 itojun if (dst->sa_len != sizeof(struct sockaddr_in))
589 1.25 itojun return EINVAL;
590 1.25 itojun break;
591 1.25 itojun #endif
592 1.25 itojun #ifdef INET6
593 1.25 itojun case AF_INET6:
594 1.25 itojun if (dst->sa_len != sizeof(struct sockaddr_in6))
595 1.25 itojun return EINVAL;
596 1.25 itojun break;
597 1.25 itojun #endif
598 1.25 itojun default:
599 1.25 itojun return EAFNOSUPPORT;
600 1.25 itojun }
601 1.25 itojun
602 1.25 itojun /* check sa_family looks sane for the cmd */
603 1.25 itojun switch (cmd) {
604 1.25 itojun case SIOCSIFPHYADDR:
605 1.25 itojun if (src->sa_family == AF_INET)
606 1.25 itojun break;
607 1.25 itojun return EAFNOSUPPORT;
608 1.25 itojun #ifdef INET6
609 1.25 itojun case SIOCSIFPHYADDR_IN6:
610 1.25 itojun if (src->sa_family == AF_INET6)
611 1.25 itojun break;
612 1.25 itojun return EAFNOSUPPORT;
613 1.25 itojun #endif /* INET6 */
614 1.25 itojun case SIOCSLIFPHYADDR:
615 1.25 itojun /* checks done in the above */
616 1.25 itojun break;
617 1.11 itojun }
618 1.11 itojun
619 1.31 itojun error = gif_set_tunnel(&sc->gif_if, src, dst);
620 1.9 itojun break;
621 1.9 itojun
622 1.9 itojun #ifdef SIOCDIFPHYADDR
623 1.9 itojun case SIOCDIFPHYADDR:
624 1.31 itojun gif_delete_tunnel(&sc->gif_if);
625 1.2 itojun break;
626 1.9 itojun #endif
627 1.50 perry
628 1.2 itojun case SIOCGIFPSRCADDR:
629 1.2 itojun #ifdef INET6
630 1.2 itojun case SIOCGIFPSRCADDR_IN6:
631 1.2 itojun #endif /* INET6 */
632 1.2 itojun if (sc->gif_psrc == NULL) {
633 1.2 itojun error = EADDRNOTAVAIL;
634 1.2 itojun goto bad;
635 1.2 itojun }
636 1.2 itojun src = sc->gif_psrc;
637 1.16 itojun switch (cmd) {
638 1.2 itojun #ifdef INET
639 1.16 itojun case SIOCGIFPSRCADDR:
640 1.2 itojun dst = &ifr->ifr_addr;
641 1.16 itojun size = sizeof(ifr->ifr_addr);
642 1.2 itojun break;
643 1.2 itojun #endif /* INET */
644 1.2 itojun #ifdef INET6
645 1.16 itojun case SIOCGIFPSRCADDR_IN6:
646 1.2 itojun dst = (struct sockaddr *)
647 1.2 itojun &(((struct in6_ifreq *)data)->ifr_addr);
648 1.16 itojun size = sizeof(((struct in6_ifreq *)data)->ifr_addr);
649 1.2 itojun break;
650 1.2 itojun #endif /* INET6 */
651 1.2 itojun default:
652 1.2 itojun error = EADDRNOTAVAIL;
653 1.2 itojun goto bad;
654 1.2 itojun }
655 1.16 itojun if (src->sa_len > size)
656 1.16 itojun return EINVAL;
657 1.68 dyoung memcpy(dst, src, src->sa_len);
658 1.2 itojun break;
659 1.50 perry
660 1.2 itojun case SIOCGIFPDSTADDR:
661 1.2 itojun #ifdef INET6
662 1.2 itojun case SIOCGIFPDSTADDR_IN6:
663 1.2 itojun #endif /* INET6 */
664 1.2 itojun if (sc->gif_pdst == NULL) {
665 1.2 itojun error = EADDRNOTAVAIL;
666 1.2 itojun goto bad;
667 1.2 itojun }
668 1.2 itojun src = sc->gif_pdst;
669 1.16 itojun switch (cmd) {
670 1.2 itojun #ifdef INET
671 1.16 itojun case SIOCGIFPDSTADDR:
672 1.2 itojun dst = &ifr->ifr_addr;
673 1.16 itojun size = sizeof(ifr->ifr_addr);
674 1.2 itojun break;
675 1.2 itojun #endif /* INET */
676 1.2 itojun #ifdef INET6
677 1.16 itojun case SIOCGIFPDSTADDR_IN6:
678 1.2 itojun dst = (struct sockaddr *)
679 1.2 itojun &(((struct in6_ifreq *)data)->ifr_addr);
680 1.16 itojun size = sizeof(((struct in6_ifreq *)data)->ifr_addr);
681 1.2 itojun break;
682 1.2 itojun #endif /* INET6 */
683 1.2 itojun default:
684 1.2 itojun error = EADDRNOTAVAIL;
685 1.2 itojun goto bad;
686 1.2 itojun }
687 1.25 itojun if (src->sa_len > size)
688 1.25 itojun return EINVAL;
689 1.68 dyoung memcpy(dst, src, src->sa_len);
690 1.25 itojun break;
691 1.25 itojun
692 1.25 itojun case SIOCGLIFPHYADDR:
693 1.25 itojun if (sc->gif_psrc == NULL || sc->gif_pdst == NULL) {
694 1.25 itojun error = EADDRNOTAVAIL;
695 1.25 itojun goto bad;
696 1.25 itojun }
697 1.25 itojun
698 1.25 itojun /* copy src */
699 1.25 itojun src = sc->gif_psrc;
700 1.25 itojun dst = (struct sockaddr *)
701 1.25 itojun &(((struct if_laddrreq *)data)->addr);
702 1.25 itojun size = sizeof(((struct if_laddrreq *)data)->addr);
703 1.25 itojun if (src->sa_len > size)
704 1.25 itojun return EINVAL;
705 1.68 dyoung memcpy(dst, src, src->sa_len);
706 1.25 itojun
707 1.25 itojun /* copy dst */
708 1.25 itojun src = sc->gif_pdst;
709 1.25 itojun dst = (struct sockaddr *)
710 1.25 itojun &(((struct if_laddrreq *)data)->dstaddr);
711 1.25 itojun size = sizeof(((struct if_laddrreq *)data)->dstaddr);
712 1.16 itojun if (src->sa_len > size)
713 1.16 itojun return EINVAL;
714 1.68 dyoung memcpy(dst, src, src->sa_len);
715 1.2 itojun break;
716 1.2 itojun
717 1.2 itojun default:
718 1.76 dyoung return ifioctl_common(ifp, cmd, data);
719 1.2 itojun }
720 1.2 itojun bad:
721 1.2 itojun return error;
722 1.12 thorpej }
723 1.12 thorpej
724 1.97 knakahar static int
725 1.97 knakahar gif_encap_attach(struct gif_softc *sc)
726 1.97 knakahar {
727 1.97 knakahar int error;
728 1.97 knakahar
729 1.97 knakahar if (sc == NULL || sc->gif_psrc == NULL)
730 1.97 knakahar return EINVAL;
731 1.97 knakahar
732 1.97 knakahar switch (sc->gif_psrc->sa_family) {
733 1.97 knakahar #ifdef INET
734 1.97 knakahar case AF_INET:
735 1.97 knakahar error = in_gif_attach(sc);
736 1.97 knakahar break;
737 1.97 knakahar #endif
738 1.97 knakahar #ifdef INET6
739 1.97 knakahar case AF_INET6:
740 1.97 knakahar error = in6_gif_attach(sc);
741 1.97 knakahar break;
742 1.97 knakahar #endif
743 1.97 knakahar default:
744 1.97 knakahar error = EINVAL;
745 1.97 knakahar break;
746 1.97 knakahar }
747 1.97 knakahar
748 1.97 knakahar return error;
749 1.97 knakahar }
750 1.97 knakahar
751 1.97 knakahar static int
752 1.97 knakahar gif_encap_detach(struct gif_softc *sc)
753 1.97 knakahar {
754 1.97 knakahar int error;
755 1.97 knakahar
756 1.97 knakahar if (sc == NULL || sc->gif_psrc == NULL)
757 1.97 knakahar return EINVAL;
758 1.97 knakahar
759 1.97 knakahar switch (sc->gif_psrc->sa_family) {
760 1.97 knakahar #ifdef INET
761 1.97 knakahar case AF_INET:
762 1.97 knakahar error = in_gif_detach(sc);
763 1.97 knakahar break;
764 1.97 knakahar #endif
765 1.97 knakahar #ifdef INET6
766 1.97 knakahar case AF_INET6:
767 1.97 knakahar error = in6_gif_detach(sc);
768 1.97 knakahar break;
769 1.97 knakahar #endif
770 1.97 knakahar default:
771 1.97 knakahar error = EINVAL;
772 1.97 knakahar break;
773 1.97 knakahar }
774 1.97 knakahar
775 1.97 knakahar return error;
776 1.97 knakahar }
777 1.97 knakahar
778 1.31 itojun int
779 1.56 thorpej gif_set_tunnel(struct ifnet *ifp, struct sockaddr *src, struct sockaddr *dst)
780 1.31 itojun {
781 1.76 dyoung struct gif_softc *sc = ifp->if_softc;
782 1.31 itojun struct gif_softc *sc2;
783 1.71 dyoung struct sockaddr *osrc, *odst;
784 1.96 knakahar struct sockaddr *nsrc, *ndst;
785 1.102 knakahar void *osi;
786 1.31 itojun int s;
787 1.31 itojun int error;
788 1.31 itojun
789 1.31 itojun s = splsoftnet();
790 1.31 itojun
791 1.68 dyoung LIST_FOREACH(sc2, &gif_softc_list, gif_list) {
792 1.31 itojun if (sc2 == sc)
793 1.31 itojun continue;
794 1.31 itojun if (!sc2->gif_pdst || !sc2->gif_psrc)
795 1.31 itojun continue;
796 1.31 itojun /* can't configure same pair of address onto two gifs */
797 1.71 dyoung if (sockaddr_cmp(sc2->gif_pdst, dst) == 0 &&
798 1.71 dyoung sockaddr_cmp(sc2->gif_psrc, src) == 0) {
799 1.91 knakahar /* continue to use the old configureation. */
800 1.96 knakahar splx(s);
801 1.96 knakahar return EADDRNOTAVAIL;
802 1.31 itojun }
803 1.31 itojun
804 1.31 itojun /* XXX both end must be valid? (I mean, not 0.0.0.0) */
805 1.31 itojun }
806 1.31 itojun
807 1.96 knakahar if ((nsrc = sockaddr_dup(src, M_WAITOK)) == NULL) {
808 1.96 knakahar splx(s);
809 1.96 knakahar return ENOMEM;
810 1.96 knakahar }
811 1.96 knakahar if ((ndst = sockaddr_dup(dst, M_WAITOK)) == NULL) {
812 1.96 knakahar sockaddr_free(nsrc);
813 1.96 knakahar splx(s);
814 1.96 knakahar return ENOMEM;
815 1.96 knakahar }
816 1.96 knakahar
817 1.96 knakahar /* Firstly, clear old configurations. */
818 1.58 msaitoh if (sc->gif_si) {
819 1.102 knakahar osrc = sc->gif_psrc;
820 1.102 knakahar odst = sc->gif_pdst;
821 1.102 knakahar osi = sc->gif_si;
822 1.102 knakahar sc->gif_psrc = NULL;
823 1.102 knakahar sc->gif_pdst = NULL;
824 1.58 msaitoh sc->gif_si = NULL;
825 1.102 knakahar /*
826 1.102 knakahar * At this point, gif_output() does not softint_schedule()
827 1.103 knakahar * any more. However, there are below 2 fears of other CPUs
828 1.103 knakahar * which would cause panic because of the race between
829 1.103 knakahar * softint_execute() and softint_disestablish().
830 1.103 knakahar * (a) gif_output() has done softint_schedule(), and softint
831 1.102 knakahar * (gifintr()) is waiting for execution
832 1.103 knakahar * => This pattern is avoided by waiting SOFTINT_PENDING
833 1.103 knakahar * CPUs in softint_disestablish()
834 1.102 knakahar * (b) gifintr() is already running
835 1.103 knakahar * => This pattern is avoided by waiting SOFTINT_ACTIVE
836 1.103 knakahar * CPUs in softint_disestablish()
837 1.102 knakahar */
838 1.102 knakahar
839 1.102 knakahar softint_disestablish(osi);
840 1.102 knakahar sc->gif_psrc = osrc;
841 1.102 knakahar sc->gif_pdst = odst;
842 1.102 knakahar osrc = NULL;
843 1.102 knakahar odst = NULL;
844 1.58 msaitoh }
845 1.31 itojun /* XXX we can detach from both, but be polite just in case */
846 1.31 itojun if (sc->gif_psrc)
847 1.97 knakahar (void)gif_encap_detach(sc);
848 1.31 itojun
849 1.96 knakahar /*
850 1.96 knakahar * Secondly, try to set new configurations.
851 1.96 knakahar * If the setup failed, rollback to old configurations.
852 1.96 knakahar */
853 1.96 knakahar do {
854 1.96 knakahar osrc = sc->gif_psrc;
855 1.96 knakahar odst = sc->gif_pdst;
856 1.96 knakahar sc->gif_psrc = nsrc;
857 1.96 knakahar sc->gif_pdst = ndst;
858 1.33 itojun
859 1.97 knakahar error = gif_encap_attach(sc);
860 1.96 knakahar if (error) {
861 1.96 knakahar /* rollback to the last configuration. */
862 1.96 knakahar nsrc = osrc;
863 1.96 knakahar ndst = odst;
864 1.96 knakahar osrc = sc->gif_psrc;
865 1.96 knakahar odst = sc->gif_pdst;
866 1.31 itojun
867 1.96 knakahar continue;
868 1.96 knakahar }
869 1.31 itojun
870 1.96 knakahar sc->gif_si = softint_establish(SOFTINT_NET, gifintr, sc);
871 1.96 knakahar if (sc->gif_si == NULL) {
872 1.97 knakahar (void)gif_encap_detach(sc);
873 1.96 knakahar
874 1.96 knakahar /* rollback to the last configuration. */
875 1.96 knakahar nsrc = osrc;
876 1.96 knakahar ndst = odst;
877 1.96 knakahar osrc = sc->gif_psrc;
878 1.96 knakahar odst = sc->gif_pdst;
879 1.96 knakahar
880 1.96 knakahar error = ENOMEM;
881 1.96 knakahar continue;
882 1.96 knakahar }
883 1.96 knakahar } while (error != 0 && (nsrc != NULL && ndst != NULL));
884 1.96 knakahar /* Thirdly, even rollback failed, clear configurations. */
885 1.96 knakahar if (error) {
886 1.96 knakahar osrc = sc->gif_psrc;
887 1.96 knakahar odst = sc->gif_pdst;
888 1.96 knakahar sc->gif_psrc = NULL;
889 1.96 knakahar sc->gif_pdst = NULL;
890 1.31 itojun }
891 1.31 itojun
892 1.31 itojun if (osrc)
893 1.71 dyoung sockaddr_free(osrc);
894 1.31 itojun if (odst)
895 1.71 dyoung sockaddr_free(odst);
896 1.31 itojun
897 1.31 itojun if (sc->gif_psrc && sc->gif_pdst)
898 1.31 itojun ifp->if_flags |= IFF_RUNNING;
899 1.31 itojun else
900 1.31 itojun ifp->if_flags &= ~IFF_RUNNING;
901 1.92 knakahar
902 1.31 itojun splx(s);
903 1.31 itojun return error;
904 1.31 itojun }
905 1.31 itojun
906 1.12 thorpej void
907 1.56 thorpej gif_delete_tunnel(struct ifnet *ifp)
908 1.12 thorpej {
909 1.76 dyoung struct gif_softc *sc = ifp->if_softc;
910 1.102 knakahar struct sockaddr *osrc, *odst;
911 1.102 knakahar void *osi;
912 1.12 thorpej int s;
913 1.12 thorpej
914 1.12 thorpej s = splsoftnet();
915 1.12 thorpej
916 1.35 itojun if (sc->gif_si) {
917 1.102 knakahar osrc = sc->gif_psrc;
918 1.102 knakahar odst = sc->gif_pdst;
919 1.102 knakahar osi = sc->gif_si;
920 1.102 knakahar
921 1.102 knakahar sc->gif_psrc = NULL;
922 1.102 knakahar sc->gif_pdst = NULL;
923 1.35 itojun sc->gif_si = NULL;
924 1.102 knakahar
925 1.102 knakahar softint_disestablish(osi);
926 1.102 knakahar sc->gif_psrc = osrc;
927 1.102 knakahar sc->gif_pdst = odst;
928 1.35 itojun }
929 1.12 thorpej if (sc->gif_psrc) {
930 1.71 dyoung sockaddr_free(sc->gif_psrc);
931 1.12 thorpej sc->gif_psrc = NULL;
932 1.12 thorpej }
933 1.12 thorpej if (sc->gif_pdst) {
934 1.71 dyoung sockaddr_free(sc->gif_pdst);
935 1.12 thorpej sc->gif_pdst = NULL;
936 1.12 thorpej }
937 1.31 itojun /* it is safe to detach from both */
938 1.31 itojun #ifdef INET
939 1.31 itojun (void)in_gif_detach(sc);
940 1.31 itojun #endif
941 1.31 itojun #ifdef INET6
942 1.31 itojun (void)in6_gif_detach(sc);
943 1.31 itojun #endif
944 1.12 thorpej
945 1.31 itojun if (sc->gif_psrc && sc->gif_pdst)
946 1.31 itojun ifp->if_flags |= IFF_RUNNING;
947 1.31 itojun else
948 1.31 itojun ifp->if_flags &= ~IFF_RUNNING;
949 1.12 thorpej splx(s);
950 1.2 itojun }
951