Home | History | Annotate | Line # | Download | only in npf
npf_ifaddr.c revision 1.3 
      1 /*	$NetBSD: npf_ifaddr.c,v 1.3 2017/12/11 03:25:46 ozaki-r Exp $	*/
      2 
      3 /*-
      4  * Copyright (c) 2014 The NetBSD Foundation, Inc.
      5  * All rights reserved.
      6  *
      7  * This code is derived from software contributed to The NetBSD Foundation
      8  * by Mindaugas Rasiukevicius.
      9  *
     10  * Redistribution and use in source and binary forms, with or without
     11  * modification, are permitted provided that the following conditions
     12  * are met:
     13  * 1. Redistributions of source code must retain the above copyright
     14  *    notice, this list of conditions and the following disclaimer.
     15  * 2. Redistributions in binary form must reproduce the above copyright
     16  *    notice, this list of conditions and the following disclaimer in the
     17  *    documentation and/or other materials provided with the distribution.
     18  *
     19  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     20  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     21  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     22  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     23  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     24  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     25  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     26  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     27  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     28  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     29  * POSSIBILITY OF SUCH DAMAGE.
     30  */
     31 
     32 /*
     33  * NPF network interface handling module.
     34  */
     35 
     36 #include <sys/cdefs.h>
     37 __KERNEL_RCSID(0, "$NetBSD: npf_ifaddr.c,v 1.3 2017/12/11 03:25:46 ozaki-r Exp $");
     38 
     39 #include <sys/param.h>
     40 #include <sys/types.h>
     41 #include <sys/kmem.h>
     42 
     43 #include <net/if.h>
     44 #include <netinet/in.h>
     45 #include <netinet6/in6_var.h>
     46 
     47 #include "npf_impl.h"
     48 
     49 static npf_table_t *
     50 lookup_ifnet_table(npf_t *npf, ifnet_t *ifp)
     51 {
     52 	const npf_ifops_t *ifops = npf->ifops;
     53 	char tname[NPF_TABLE_MAXNAMELEN];
     54 	npf_tableset_t *ts;
     55 	const char *ifname;
     56 	npf_table_t *t;
     57 	u_int tid;
     58 
     59 	/* Get the interface name and prefix it. */
     60 	ifname = ifops->getname(ifp);
     61 	snprintf(tname, sizeof(tname), ".ifnet-%s", ifname);
     62 
     63 	KERNEL_LOCK(1, NULL);
     64 	npf_config_enter(npf);
     65 	ts = npf_config_tableset(npf);
     66 
     67 	/*
     68 	 * Check whether this interface is of any interest to us.
     69 	 */
     70 	t = npf_tableset_getbyname(ts, tname);
     71 	if (!t) {
     72 		goto out;
     73 	}
     74 	tid = npf_table_getid(t);
     75 
     76 	/* Create a new NPF table for the interface. */
     77 	t = npf_table_create(tname, tid, NPF_TABLE_HASH, NULL, 16);
     78 	if (!t) {
     79 		goto out;
     80 	}
     81 	return t;
     82 out:
     83 	npf_config_exit(npf);
     84 	KERNEL_UNLOCK_ONE(NULL);
     85 	return NULL;
     86 }
     87 
     88 static void
     89 replace_ifnet_table(npf_t *npf, npf_table_t *newt)
     90 {
     91 	npf_tableset_t *ts = npf_config_tableset(npf);
     92 	npf_table_t *oldt;
     93 
     94 	KERNEL_UNLOCK_ONE(NULL);
     95 
     96 	/*
     97 	 * Finally, swap the tables and issue a sync barrier.
     98 	 */
     99 	oldt = npf_tableset_swap(ts, newt);
    100 	npf_config_sync(npf);
    101 	npf_config_exit(npf);
    102 
    103 	/* At this point, it is safe to destroy the old table. */
    104 	npf_table_destroy(oldt);
    105 }
    106 
    107 void
    108 npf_ifaddr_sync(npf_t *npf, ifnet_t *ifp)
    109 {
    110 	npf_table_t *t;
    111 	struct ifaddr *ifa;
    112 
    113 	/*
    114 	 * First, check whether this interface is of any interest to us.
    115 	 *
    116 	 * => Acquires npf-config-lock and kernel-lock on success.
    117 	 */
    118 	t = lookup_ifnet_table(npf, ifp);
    119 	if (!t)
    120 		return;
    121 
    122 	/*
    123 	 * Populate the table with the interface addresses.
    124 	 * Note: currently, this list is protected by the kernel-lock.
    125 	 */
    126 	IFADDR_FOREACH(ifa, ifp) {
    127 		struct sockaddr *sa = ifa->ifa_addr;
    128 		const void *p = NULL;
    129 		int alen = 0;
    130 
    131 		if (sa->sa_family == AF_INET) {
    132 			const struct sockaddr_in *sin4 = satosin(sa);
    133 			alen = sizeof(struct in_addr);
    134 			p = &sin4->sin_addr;
    135 		}
    136 		if (sa->sa_family == AF_INET6) {
    137 			const struct sockaddr_in6 *sin6 = satosin6(sa);
    138 			alen = sizeof(struct in6_addr);
    139 			p = &sin6->sin6_addr;
    140 		}
    141 		if (alen) {
    142 			npf_addr_t addr;
    143 			memcpy(&addr, p, alen);
    144 			npf_table_insert(t, alen, &addr, NPF_NO_NETMASK);
    145 		}
    146 	}
    147 
    148 	/* Publish the new table. */
    149 	replace_ifnet_table(npf, t);
    150 }
    151 
    152 void
    153 npf_ifaddr_flush(npf_t *npf, ifnet_t *ifp)
    154 {
    155 	npf_table_t *t;
    156 
    157 	/*
    158 	 * Flush: just load an empty table.
    159 	 */
    160 	t = lookup_ifnet_table(npf, ifp);
    161 	if (!t) {
    162 		return;
    163 	}
    164 	replace_ifnet_table(npf, t);
    165 }
    166 
    167 void
    168 npf_ifaddr_syncall(npf_t *npf)
    169 {
    170 	ifnet_t *ifp;
    171 
    172 	KERNEL_LOCK(1, NULL);
    173 	IFNET_GLOBAL_LOCK();
    174 	IFNET_WRITER_FOREACH(ifp) {
    175 		npf_ifaddr_sync(npf, ifp);
    176 	}
    177 	IFNET_GLOBAL_UNLOCK();
    178 	KERNEL_UNLOCK_ONE(NULL);
    179 }
    180 
    181 
    182