tcp_usrreq.c revision 1.81.2.6 1 1.81.2.6 skrll /* $NetBSD: tcp_usrreq.c,v 1.81.2.6 2005/02/04 11:47:49 skrll Exp $ */
2 1.40 itojun
3 1.40 itojun /*
4 1.40 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
5 1.40 itojun * All rights reserved.
6 1.71 itojun *
7 1.40 itojun * Redistribution and use in source and binary forms, with or without
8 1.40 itojun * modification, are permitted provided that the following conditions
9 1.40 itojun * are met:
10 1.40 itojun * 1. Redistributions of source code must retain the above copyright
11 1.40 itojun * notice, this list of conditions and the following disclaimer.
12 1.40 itojun * 2. Redistributions in binary form must reproduce the above copyright
13 1.40 itojun * notice, this list of conditions and the following disclaimer in the
14 1.40 itojun * documentation and/or other materials provided with the distribution.
15 1.40 itojun * 3. Neither the name of the project nor the names of its contributors
16 1.40 itojun * may be used to endorse or promote products derived from this software
17 1.40 itojun * without specific prior written permission.
18 1.71 itojun *
19 1.40 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
20 1.40 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 1.40 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 1.40 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
23 1.40 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 1.40 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 1.40 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 1.40 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 1.40 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 1.40 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 1.40 itojun * SUCH DAMAGE.
30 1.40 itojun */
31 1.34 thorpej
32 1.34 thorpej /*-
33 1.34 thorpej * Copyright (c) 1997, 1998 The NetBSD Foundation, Inc.
34 1.34 thorpej * All rights reserved.
35 1.34 thorpej *
36 1.34 thorpej * This code is derived from software contributed to The NetBSD Foundation
37 1.34 thorpej * by Jason R. Thorpe and Kevin M. Lahey of the Numerical Aerospace Simulation
38 1.34 thorpej * Facility, NASA Ames Research Center.
39 1.34 thorpej *
40 1.34 thorpej * Redistribution and use in source and binary forms, with or without
41 1.34 thorpej * modification, are permitted provided that the following conditions
42 1.34 thorpej * are met:
43 1.34 thorpej * 1. Redistributions of source code must retain the above copyright
44 1.34 thorpej * notice, this list of conditions and the following disclaimer.
45 1.34 thorpej * 2. Redistributions in binary form must reproduce the above copyright
46 1.34 thorpej * notice, this list of conditions and the following disclaimer in the
47 1.34 thorpej * documentation and/or other materials provided with the distribution.
48 1.34 thorpej * 3. All advertising materials mentioning features or use of this software
49 1.34 thorpej * must display the following acknowledgement:
50 1.34 thorpej * This product includes software developed by the NetBSD
51 1.34 thorpej * Foundation, Inc. and its contributors.
52 1.34 thorpej * 4. Neither the name of The NetBSD Foundation nor the names of its
53 1.34 thorpej * contributors may be used to endorse or promote products derived
54 1.34 thorpej * from this software without specific prior written permission.
55 1.34 thorpej *
56 1.34 thorpej * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
57 1.34 thorpej * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
58 1.34 thorpej * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
59 1.34 thorpej * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
60 1.34 thorpej * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
61 1.34 thorpej * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
62 1.34 thorpej * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
63 1.34 thorpej * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
64 1.34 thorpej * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
65 1.34 thorpej * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
66 1.34 thorpej * POSSIBILITY OF SUCH DAMAGE.
67 1.34 thorpej */
68 1.10 cgd
69 1.1 cgd /*
70 1.33 thorpej * Copyright (c) 1982, 1986, 1988, 1993, 1995
71 1.9 mycroft * The Regents of the University of California. All rights reserved.
72 1.1 cgd *
73 1.1 cgd * Redistribution and use in source and binary forms, with or without
74 1.1 cgd * modification, are permitted provided that the following conditions
75 1.1 cgd * are met:
76 1.1 cgd * 1. Redistributions of source code must retain the above copyright
77 1.1 cgd * notice, this list of conditions and the following disclaimer.
78 1.1 cgd * 2. Redistributions in binary form must reproduce the above copyright
79 1.1 cgd * notice, this list of conditions and the following disclaimer in the
80 1.1 cgd * documentation and/or other materials provided with the distribution.
81 1.81.2.2 skrll * 3. Neither the name of the University nor the names of its contributors
82 1.1 cgd * may be used to endorse or promote products derived from this software
83 1.1 cgd * without specific prior written permission.
84 1.1 cgd *
85 1.1 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
86 1.1 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
87 1.1 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
88 1.1 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
89 1.1 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
90 1.1 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
91 1.1 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
92 1.1 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
93 1.1 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
94 1.1 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
95 1.1 cgd * SUCH DAMAGE.
96 1.1 cgd *
97 1.33 thorpej * @(#)tcp_usrreq.c 8.5 (Berkeley) 6/21/95
98 1.1 cgd */
99 1.67 lukem
100 1.67 lukem #include <sys/cdefs.h>
101 1.81.2.6 skrll __KERNEL_RCSID(0, "$NetBSD: tcp_usrreq.c,v 1.81.2.6 2005/02/04 11:47:49 skrll Exp $");
102 1.1 cgd
103 1.40 itojun #include "opt_inet.h"
104 1.42 thorpej #include "opt_ipsec.h"
105 1.63 abs #include "opt_tcp_debug.h"
106 1.77 martin #include "opt_mbuftrace.h"
107 1.40 itojun
108 1.5 mycroft #include <sys/param.h>
109 1.5 mycroft #include <sys/systm.h>
110 1.13 glass #include <sys/kernel.h>
111 1.5 mycroft #include <sys/malloc.h>
112 1.5 mycroft #include <sys/mbuf.h>
113 1.5 mycroft #include <sys/socket.h>
114 1.5 mycroft #include <sys/socketvar.h>
115 1.5 mycroft #include <sys/protosw.h>
116 1.5 mycroft #include <sys/errno.h>
117 1.5 mycroft #include <sys/stat.h>
118 1.20 christos #include <sys/proc.h>
119 1.40 itojun #include <sys/domain.h>
120 1.20 christos #include <sys/sysctl.h>
121 1.1 cgd
122 1.5 mycroft #include <net/if.h>
123 1.5 mycroft #include <net/route.h>
124 1.1 cgd
125 1.5 mycroft #include <netinet/in.h>
126 1.5 mycroft #include <netinet/in_systm.h>
127 1.14 cgd #include <netinet/in_var.h>
128 1.5 mycroft #include <netinet/ip.h>
129 1.5 mycroft #include <netinet/in_pcb.h>
130 1.5 mycroft #include <netinet/ip_var.h>
131 1.40 itojun
132 1.40 itojun #ifdef INET6
133 1.40 itojun #ifndef INET
134 1.40 itojun #include <netinet/in.h>
135 1.40 itojun #endif
136 1.40 itojun #include <netinet/ip6.h>
137 1.40 itojun #include <netinet6/in6_pcb.h>
138 1.40 itojun #include <netinet6/ip6_var.h>
139 1.40 itojun #endif
140 1.40 itojun
141 1.5 mycroft #include <netinet/tcp.h>
142 1.5 mycroft #include <netinet/tcp_fsm.h>
143 1.5 mycroft #include <netinet/tcp_seq.h>
144 1.5 mycroft #include <netinet/tcp_timer.h>
145 1.5 mycroft #include <netinet/tcp_var.h>
146 1.5 mycroft #include <netinet/tcpip.h>
147 1.5 mycroft #include <netinet/tcp_debug.h>
148 1.26 thorpej
149 1.68 lukem #include "opt_tcp_space.h"
150 1.1 cgd
151 1.40 itojun #ifdef IPSEC
152 1.40 itojun #include <netinet6/ipsec.h>
153 1.40 itojun #endif /*IPSEC*/
154 1.40 itojun
155 1.1 cgd /*
156 1.1 cgd * TCP protocol interface to socket abstraction.
157 1.1 cgd */
158 1.76 christos
159 1.1 cgd /*
160 1.1 cgd * Process a TCP user request for TCP tb. If this is a send request
161 1.1 cgd * then m is the mbuf chain of send data. If this is a timer expiration
162 1.1 cgd * (called from the software clock routine), then timertype tells which timer.
163 1.1 cgd */
164 1.1 cgd /*ARGSUSED*/
165 1.6 mycroft int
166 1.81.2.6 skrll tcp_usrreq(struct socket *so, int req,
167 1.81.2.6 skrll struct mbuf *m, struct mbuf *nam, struct mbuf *control, struct lwp *l)
168 1.81.2.3 skrll {
169 1.49 augustss struct inpcb *inp;
170 1.40 itojun #ifdef INET6
171 1.49 augustss struct in6pcb *in6p;
172 1.40 itojun #endif
173 1.49 augustss struct tcpcb *tp = NULL;
174 1.81.2.6 skrll struct proc *p;
175 1.1 cgd int s;
176 1.1 cgd int error = 0;
177 1.74 simonb #ifdef TCP_DEBUG
178 1.74 simonb int ostate = 0;
179 1.74 simonb #endif
180 1.40 itojun int family; /* family of the socket */
181 1.40 itojun
182 1.81.2.4 skrll p = l ? l->l_proc : NULL;
183 1.40 itojun family = so->so_proto->pr_domain->dom_family;
184 1.1 cgd
185 1.40 itojun if (req == PRU_CONTROL) {
186 1.40 itojun switch (family) {
187 1.56 itojun #ifdef INET
188 1.40 itojun case PF_INET:
189 1.40 itojun return (in_control(so, (long)m, (caddr_t)nam,
190 1.40 itojun (struct ifnet *)control, p));
191 1.56 itojun #endif
192 1.40 itojun #ifdef INET6
193 1.40 itojun case PF_INET6:
194 1.40 itojun return (in6_control(so, (long)m, (caddr_t)nam,
195 1.40 itojun (struct ifnet *)control, p));
196 1.40 itojun #endif
197 1.40 itojun default:
198 1.40 itojun return EAFNOSUPPORT;
199 1.40 itojun }
200 1.45 thorpej }
201 1.45 thorpej
202 1.46 thorpej if (req == PRU_PURGEIF) {
203 1.54 enami switch (family) {
204 1.56 itojun #ifdef INET
205 1.54 enami case PF_INET:
206 1.62 itojun in_pcbpurgeif0(&tcbtable, (struct ifnet *)control);
207 1.54 enami in_purgeif((struct ifnet *)control);
208 1.54 enami in_pcbpurgeif(&tcbtable, (struct ifnet *)control);
209 1.55 enami break;
210 1.56 itojun #endif
211 1.46 thorpej #ifdef INET6
212 1.54 enami case PF_INET6:
213 1.81.2.2 skrll in6_pcbpurgeif0(&tcbtable, (struct ifnet *)control);
214 1.54 enami in6_purgeif((struct ifnet *)control);
215 1.81.2.2 skrll in6_pcbpurgeif(&tcbtable, (struct ifnet *)control);
216 1.55 enami break;
217 1.46 thorpej #endif
218 1.54 enami default:
219 1.54 enami return (EAFNOSUPPORT);
220 1.54 enami }
221 1.45 thorpej return (0);
222 1.40 itojun }
223 1.22 mycroft
224 1.22 mycroft s = splsoftnet();
225 1.40 itojun switch (family) {
226 1.56 itojun #ifdef INET
227 1.40 itojun case PF_INET:
228 1.40 itojun inp = sotoinpcb(so);
229 1.40 itojun #ifdef INET6
230 1.40 itojun in6p = NULL;
231 1.40 itojun #endif
232 1.40 itojun break;
233 1.56 itojun #endif
234 1.40 itojun #ifdef INET6
235 1.40 itojun case PF_INET6:
236 1.40 itojun inp = NULL;
237 1.40 itojun in6p = sotoin6pcb(so);
238 1.40 itojun break;
239 1.40 itojun #endif
240 1.40 itojun default:
241 1.40 itojun splx(s);
242 1.40 itojun return EAFNOSUPPORT;
243 1.40 itojun }
244 1.40 itojun
245 1.23 mycroft #ifdef DIAGNOSTIC
246 1.57 itojun #ifdef INET6
247 1.56 itojun if (inp && in6p)
248 1.56 itojun panic("tcp_usrreq: both inp and in6p set to non-NULL");
249 1.57 itojun #endif
250 1.23 mycroft if (req != PRU_SEND && req != PRU_SENDOOB && control)
251 1.23 mycroft panic("tcp_usrreq: unexpected control mbuf");
252 1.23 mycroft #endif
253 1.1 cgd /*
254 1.1 cgd * When a TCP is attached to a socket, then there will be
255 1.1 cgd * a (struct inpcb) pointed at by the socket, and this
256 1.1 cgd * structure will point at a subsidary (struct tcpcb).
257 1.1 cgd */
258 1.40 itojun #ifndef INET6
259 1.40 itojun if (inp == 0 && req != PRU_ATTACH)
260 1.40 itojun #else
261 1.40 itojun if ((inp == 0 && in6p == 0) && req != PRU_ATTACH)
262 1.40 itojun #endif
263 1.40 itojun {
264 1.22 mycroft error = EINVAL;
265 1.22 mycroft goto release;
266 1.1 cgd }
267 1.56 itojun #ifdef INET
268 1.1 cgd if (inp) {
269 1.1 cgd tp = intotcpcb(inp);
270 1.1 cgd /* WHAT IF TP IS 0? */
271 1.1 cgd #ifdef KPROF
272 1.1 cgd tcp_acounts[tp->t_state][req]++;
273 1.1 cgd #endif
274 1.74 simonb #ifdef TCP_DEBUG
275 1.1 cgd ostate = tp->t_state;
276 1.74 simonb #endif
277 1.40 itojun }
278 1.56 itojun #endif
279 1.40 itojun #ifdef INET6
280 1.56 itojun if (in6p) {
281 1.40 itojun tp = in6totcpcb(in6p);
282 1.40 itojun /* WHAT IF TP IS 0? */
283 1.40 itojun #ifdef KPROF
284 1.40 itojun tcp_acounts[tp->t_state][req]++;
285 1.40 itojun #endif
286 1.74 simonb #ifdef TCP_DEBUG
287 1.40 itojun ostate = tp->t_state;
288 1.74 simonb #endif
289 1.40 itojun }
290 1.40 itojun #endif
291 1.22 mycroft
292 1.1 cgd switch (req) {
293 1.1 cgd
294 1.1 cgd /*
295 1.1 cgd * TCP attaches to socket via PRU_ATTACH, reserving space,
296 1.1 cgd * and an internet control block.
297 1.1 cgd */
298 1.1 cgd case PRU_ATTACH:
299 1.40 itojun #ifndef INET6
300 1.40 itojun if (inp != 0)
301 1.40 itojun #else
302 1.40 itojun if (inp != 0 || in6p != 0)
303 1.40 itojun #endif
304 1.40 itojun {
305 1.1 cgd error = EISCONN;
306 1.1 cgd break;
307 1.1 cgd }
308 1.1 cgd error = tcp_attach(so);
309 1.1 cgd if (error)
310 1.1 cgd break;
311 1.1 cgd if ((so->so_options & SO_LINGER) && so->so_linger == 0)
312 1.32 thorpej so->so_linger = TCP_LINGERTIME;
313 1.1 cgd tp = sototcpcb(so);
314 1.1 cgd break;
315 1.1 cgd
316 1.1 cgd /*
317 1.1 cgd * PRU_DETACH detaches the TCP protocol from the socket.
318 1.1 cgd */
319 1.1 cgd case PRU_DETACH:
320 1.24 kleink tp = tcp_disconnect(tp);
321 1.1 cgd break;
322 1.1 cgd
323 1.1 cgd /*
324 1.1 cgd * Give the socket an address.
325 1.1 cgd */
326 1.1 cgd case PRU_BIND:
327 1.40 itojun switch (family) {
328 1.56 itojun #ifdef INET
329 1.40 itojun case PF_INET:
330 1.40 itojun error = in_pcbbind(inp, nam, p);
331 1.40 itojun break;
332 1.56 itojun #endif
333 1.40 itojun #ifdef INET6
334 1.40 itojun case PF_INET6:
335 1.51 itojun error = in6_pcbbind(in6p, nam, p);
336 1.58 itojun if (!error) {
337 1.58 itojun /* mapped addr case */
338 1.58 itojun if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_laddr))
339 1.58 itojun tp->t_family = AF_INET;
340 1.58 itojun else
341 1.58 itojun tp->t_family = AF_INET6;
342 1.58 itojun }
343 1.40 itojun break;
344 1.40 itojun #endif
345 1.40 itojun }
346 1.1 cgd break;
347 1.1 cgd
348 1.1 cgd /*
349 1.1 cgd * Prepare to accept connections.
350 1.1 cgd */
351 1.1 cgd case PRU_LISTEN:
352 1.56 itojun #ifdef INET
353 1.40 itojun if (inp && inp->inp_lport == 0) {
354 1.21 mycroft error = in_pcbbind(inp, (struct mbuf *)0,
355 1.21 mycroft (struct proc *)0);
356 1.22 mycroft if (error)
357 1.22 mycroft break;
358 1.22 mycroft }
359 1.56 itojun #endif
360 1.40 itojun #ifdef INET6
361 1.56 itojun if (in6p && in6p->in6p_lport == 0) {
362 1.51 itojun error = in6_pcbbind(in6p, (struct mbuf *)0,
363 1.51 itojun (struct proc *)0);
364 1.40 itojun if (error)
365 1.40 itojun break;
366 1.40 itojun }
367 1.40 itojun #endif
368 1.22 mycroft tp->t_state = TCPS_LISTEN;
369 1.1 cgd break;
370 1.1 cgd
371 1.1 cgd /*
372 1.1 cgd * Initiate connection to peer.
373 1.1 cgd * Create a template for use in transmissions on this connection.
374 1.1 cgd * Enter SYN_SENT state, and mark socket as connecting.
375 1.1 cgd * Start keep-alive timer, and seed output sequence space.
376 1.1 cgd * Send initial segment on connection.
377 1.1 cgd */
378 1.1 cgd case PRU_CONNECT:
379 1.56 itojun #ifdef INET
380 1.40 itojun if (inp) {
381 1.40 itojun if (inp->inp_lport == 0) {
382 1.40 itojun error = in_pcbbind(inp, (struct mbuf *)0,
383 1.40 itojun (struct proc *)0);
384 1.40 itojun if (error)
385 1.40 itojun break;
386 1.40 itojun }
387 1.40 itojun error = in_pcbconnect(inp, nam);
388 1.40 itojun }
389 1.56 itojun #endif
390 1.40 itojun #ifdef INET6
391 1.56 itojun if (in6p) {
392 1.40 itojun if (in6p->in6p_lport == 0) {
393 1.51 itojun error = in6_pcbbind(in6p, (struct mbuf *)0,
394 1.51 itojun (struct proc *)0);
395 1.40 itojun if (error)
396 1.40 itojun break;
397 1.40 itojun }
398 1.40 itojun error = in6_pcbconnect(in6p, nam);
399 1.58 itojun if (!error) {
400 1.58 itojun /* mapped addr case */
401 1.58 itojun if (IN6_IS_ADDR_V4MAPPED(&in6p->in6p_faddr))
402 1.58 itojun tp->t_family = AF_INET;
403 1.58 itojun else
404 1.58 itojun tp->t_family = AF_INET6;
405 1.58 itojun }
406 1.1 cgd }
407 1.40 itojun #endif
408 1.1 cgd if (error)
409 1.1 cgd break;
410 1.1 cgd tp->t_template = tcp_template(tp);
411 1.1 cgd if (tp->t_template == 0) {
412 1.56 itojun #ifdef INET
413 1.40 itojun if (inp)
414 1.40 itojun in_pcbdisconnect(inp);
415 1.56 itojun #endif
416 1.40 itojun #ifdef INET6
417 1.56 itojun if (in6p)
418 1.40 itojun in6_pcbdisconnect(in6p);
419 1.40 itojun #endif
420 1.1 cgd error = ENOBUFS;
421 1.1 cgd break;
422 1.1 cgd }
423 1.9 mycroft /* Compute window scaling to request. */
424 1.9 mycroft while (tp->request_r_scale < TCP_MAX_WINSHIFT &&
425 1.9 mycroft (TCP_MAXWIN << tp->request_r_scale) < so->so_rcv.sb_hiwat)
426 1.9 mycroft tp->request_r_scale++;
427 1.1 cgd soisconnecting(so);
428 1.1 cgd tcpstat.tcps_connattempt++;
429 1.1 cgd tp->t_state = TCPS_SYN_SENT;
430 1.37 thorpej TCP_TIMER_ARM(tp, TCPT_KEEP, TCPTV_KEEP_INIT);
431 1.61 thorpej tp->iss = tcp_new_iss(tp, 0);
432 1.1 cgd tcp_sendseqinit(tp);
433 1.1 cgd error = tcp_output(tp);
434 1.1 cgd break;
435 1.1 cgd
436 1.1 cgd /*
437 1.1 cgd * Create a TCP connection between two sockets.
438 1.1 cgd */
439 1.1 cgd case PRU_CONNECT2:
440 1.1 cgd error = EOPNOTSUPP;
441 1.1 cgd break;
442 1.1 cgd
443 1.1 cgd /*
444 1.1 cgd * Initiate disconnect from peer.
445 1.1 cgd * If connection never passed embryonic stage, just drop;
446 1.1 cgd * else if don't need to let data drain, then can just drop anyways,
447 1.1 cgd * else have to begin TCP shutdown process: mark socket disconnecting,
448 1.1 cgd * drain unread data, state switch to reflect user close, and
449 1.1 cgd * send segment (e.g. FIN) to peer. Socket will be really disconnected
450 1.1 cgd * when peer sends FIN and acks ours.
451 1.1 cgd *
452 1.1 cgd * SHOULD IMPLEMENT LATER PRU_CONNECT VIA REALLOC TCPCB.
453 1.1 cgd */
454 1.1 cgd case PRU_DISCONNECT:
455 1.1 cgd tp = tcp_disconnect(tp);
456 1.1 cgd break;
457 1.1 cgd
458 1.1 cgd /*
459 1.1 cgd * Accept a connection. Essentially all the work is
460 1.1 cgd * done at higher levels; just return the address
461 1.1 cgd * of the peer, storing through addr.
462 1.1 cgd */
463 1.8 mycroft case PRU_ACCEPT:
464 1.56 itojun #ifdef INET
465 1.40 itojun if (inp)
466 1.40 itojun in_setpeeraddr(inp, nam);
467 1.56 itojun #endif
468 1.40 itojun #ifdef INET6
469 1.56 itojun if (in6p)
470 1.40 itojun in6_setpeeraddr(in6p, nam);
471 1.40 itojun #endif
472 1.1 cgd break;
473 1.1 cgd
474 1.1 cgd /*
475 1.1 cgd * Mark the connection as being incapable of further output.
476 1.1 cgd */
477 1.1 cgd case PRU_SHUTDOWN:
478 1.1 cgd socantsendmore(so);
479 1.1 cgd tp = tcp_usrclosed(tp);
480 1.1 cgd if (tp)
481 1.1 cgd error = tcp_output(tp);
482 1.1 cgd break;
483 1.1 cgd
484 1.1 cgd /*
485 1.1 cgd * After a receive, possibly send window update to peer.
486 1.1 cgd */
487 1.1 cgd case PRU_RCVD:
488 1.60 itojun /*
489 1.60 itojun * soreceive() calls this function when a user receives
490 1.60 itojun * ancillary data on a listening socket. We don't call
491 1.60 itojun * tcp_output in such a case, since there is no header
492 1.60 itojun * template for a listening socket and hence the kernel
493 1.60 itojun * will panic.
494 1.60 itojun */
495 1.60 itojun if ((so->so_state & (SS_ISCONNECTED|SS_ISCONNECTING)) != 0)
496 1.60 itojun (void) tcp_output(tp);
497 1.1 cgd break;
498 1.1 cgd
499 1.1 cgd /*
500 1.1 cgd * Do a send by putting data in output queue and updating urgent
501 1.1 cgd * marker if URG set. Possibly send more data.
502 1.1 cgd */
503 1.1 cgd case PRU_SEND:
504 1.23 mycroft if (control && control->m_len) {
505 1.23 mycroft m_freem(control);
506 1.23 mycroft m_freem(m);
507 1.23 mycroft error = EINVAL;
508 1.23 mycroft break;
509 1.23 mycroft }
510 1.73 thorpej sbappendstream(&so->so_snd, m);
511 1.1 cgd error = tcp_output(tp);
512 1.1 cgd break;
513 1.1 cgd
514 1.1 cgd /*
515 1.1 cgd * Abort the TCP.
516 1.1 cgd */
517 1.1 cgd case PRU_ABORT:
518 1.1 cgd tp = tcp_drop(tp, ECONNABORTED);
519 1.1 cgd break;
520 1.1 cgd
521 1.1 cgd case PRU_SENSE:
522 1.22 mycroft /*
523 1.22 mycroft * stat: don't bother with a blocksize.
524 1.22 mycroft */
525 1.22 mycroft splx(s);
526 1.1 cgd return (0);
527 1.1 cgd
528 1.1 cgd case PRU_RCVOOB:
529 1.23 mycroft if (control && control->m_len) {
530 1.23 mycroft m_freem(control);
531 1.23 mycroft m_freem(m);
532 1.23 mycroft error = EINVAL;
533 1.23 mycroft break;
534 1.23 mycroft }
535 1.1 cgd if ((so->so_oobmark == 0 &&
536 1.1 cgd (so->so_state & SS_RCVATMARK) == 0) ||
537 1.1 cgd so->so_options & SO_OOBINLINE ||
538 1.1 cgd tp->t_oobflags & TCPOOB_HADDATA) {
539 1.1 cgd error = EINVAL;
540 1.1 cgd break;
541 1.1 cgd }
542 1.1 cgd if ((tp->t_oobflags & TCPOOB_HAVEDATA) == 0) {
543 1.1 cgd error = EWOULDBLOCK;
544 1.1 cgd break;
545 1.1 cgd }
546 1.1 cgd m->m_len = 1;
547 1.1 cgd *mtod(m, caddr_t) = tp->t_iobc;
548 1.14 cgd if (((long)nam & MSG_PEEK) == 0)
549 1.1 cgd tp->t_oobflags ^= (TCPOOB_HAVEDATA | TCPOOB_HADDATA);
550 1.1 cgd break;
551 1.1 cgd
552 1.1 cgd case PRU_SENDOOB:
553 1.1 cgd if (sbspace(&so->so_snd) < -512) {
554 1.1 cgd m_freem(m);
555 1.1 cgd error = ENOBUFS;
556 1.1 cgd break;
557 1.1 cgd }
558 1.1 cgd /*
559 1.1 cgd * According to RFC961 (Assigned Protocols),
560 1.1 cgd * the urgent pointer points to the last octet
561 1.1 cgd * of urgent data. We continue, however,
562 1.1 cgd * to consider it to indicate the first octet
563 1.1 cgd * of data past the urgent section.
564 1.1 cgd * Otherwise, snd_up should be one lower.
565 1.1 cgd */
566 1.73 thorpej sbappendstream(&so->so_snd, m);
567 1.1 cgd tp->snd_up = tp->snd_una + so->so_snd.sb_cc;
568 1.1 cgd tp->t_force = 1;
569 1.1 cgd error = tcp_output(tp);
570 1.1 cgd tp->t_force = 0;
571 1.1 cgd break;
572 1.1 cgd
573 1.1 cgd case PRU_SOCKADDR:
574 1.56 itojun #ifdef INET
575 1.40 itojun if (inp)
576 1.40 itojun in_setsockaddr(inp, nam);
577 1.56 itojun #endif
578 1.40 itojun #ifdef INET6
579 1.56 itojun if (in6p)
580 1.40 itojun in6_setsockaddr(in6p, nam);
581 1.40 itojun #endif
582 1.1 cgd break;
583 1.1 cgd
584 1.1 cgd case PRU_PEERADDR:
585 1.56 itojun #ifdef INET
586 1.40 itojun if (inp)
587 1.40 itojun in_setpeeraddr(inp, nam);
588 1.56 itojun #endif
589 1.40 itojun #ifdef INET6
590 1.56 itojun if (in6p)
591 1.40 itojun in6_setpeeraddr(in6p, nam);
592 1.40 itojun #endif
593 1.1 cgd break;
594 1.1 cgd
595 1.1 cgd default:
596 1.1 cgd panic("tcp_usrreq");
597 1.1 cgd }
598 1.63 abs #ifdef TCP_DEBUG
599 1.1 cgd if (tp && (so->so_options & SO_DEBUG))
600 1.40 itojun tcp_trace(TA_USER, ostate, tp, NULL, req);
601 1.63 abs #endif
602 1.22 mycroft
603 1.22 mycroft release:
604 1.1 cgd splx(s);
605 1.1 cgd return (error);
606 1.1 cgd }
607 1.1 cgd
608 1.6 mycroft int
609 1.81.2.6 skrll tcp_ctloutput(int op, struct socket *so, int level, int optname,
610 1.81.2.6 skrll struct mbuf **mp)
611 1.1 cgd {
612 1.9 mycroft int error = 0, s;
613 1.9 mycroft struct inpcb *inp;
614 1.40 itojun #ifdef INET6
615 1.49 augustss struct in6pcb *in6p;
616 1.40 itojun #endif
617 1.49 augustss struct tcpcb *tp;
618 1.49 augustss struct mbuf *m;
619 1.49 augustss int i;
620 1.40 itojun int family; /* family of the socket */
621 1.40 itojun
622 1.40 itojun family = so->so_proto->pr_domain->dom_family;
623 1.1 cgd
624 1.16 mycroft s = splsoftnet();
625 1.40 itojun switch (family) {
626 1.56 itojun #ifdef INET
627 1.40 itojun case PF_INET:
628 1.40 itojun inp = sotoinpcb(so);
629 1.40 itojun #ifdef INET6
630 1.40 itojun in6p = NULL;
631 1.40 itojun #endif
632 1.40 itojun break;
633 1.56 itojun #endif
634 1.40 itojun #ifdef INET6
635 1.40 itojun case PF_INET6:
636 1.40 itojun inp = NULL;
637 1.40 itojun in6p = sotoin6pcb(so);
638 1.40 itojun break;
639 1.40 itojun #endif
640 1.40 itojun default:
641 1.40 itojun splx(s);
642 1.40 itojun return EAFNOSUPPORT;
643 1.40 itojun }
644 1.40 itojun #ifndef INET6
645 1.40 itojun if (inp == NULL)
646 1.40 itojun #else
647 1.40 itojun if (inp == NULL && in6p == NULL)
648 1.40 itojun #endif
649 1.40 itojun {
650 1.9 mycroft splx(s);
651 1.9 mycroft if (op == PRCO_SETOPT && *mp)
652 1.9 mycroft (void) m_free(*mp);
653 1.9 mycroft return (ECONNRESET);
654 1.9 mycroft }
655 1.9 mycroft if (level != IPPROTO_TCP) {
656 1.40 itojun switch (family) {
657 1.56 itojun #ifdef INET
658 1.40 itojun case PF_INET:
659 1.40 itojun error = ip_ctloutput(op, so, level, optname, mp);
660 1.40 itojun break;
661 1.56 itojun #endif
662 1.40 itojun #ifdef INET6
663 1.40 itojun case PF_INET6:
664 1.40 itojun error = ip6_ctloutput(op, so, level, optname, mp);
665 1.40 itojun break;
666 1.40 itojun #endif
667 1.40 itojun }
668 1.9 mycroft splx(s);
669 1.9 mycroft return (error);
670 1.9 mycroft }
671 1.40 itojun if (inp)
672 1.40 itojun tp = intotcpcb(inp);
673 1.40 itojun #ifdef INET6
674 1.40 itojun else if (in6p)
675 1.40 itojun tp = in6totcpcb(in6p);
676 1.40 itojun #endif
677 1.40 itojun else
678 1.40 itojun tp = NULL;
679 1.1 cgd
680 1.1 cgd switch (op) {
681 1.1 cgd
682 1.1 cgd case PRCO_SETOPT:
683 1.1 cgd m = *mp;
684 1.1 cgd switch (optname) {
685 1.1 cgd
686 1.81.2.2 skrll #ifdef TCP_SIGNATURE
687 1.81.2.2 skrll case TCP_MD5SIG:
688 1.81.2.2 skrll if (m == NULL || m->m_len < sizeof (int))
689 1.81.2.2 skrll error = EINVAL;
690 1.81.2.2 skrll if (error)
691 1.81.2.2 skrll break;
692 1.81.2.2 skrll if (*mtod(m, int *) > 0)
693 1.81.2.2 skrll tp->t_flags |= TF_SIGNATURE;
694 1.81.2.2 skrll else
695 1.81.2.2 skrll tp->t_flags &= ~TF_SIGNATURE;
696 1.81.2.2 skrll break;
697 1.81.2.2 skrll #endif /* TCP_SIGNATURE */
698 1.81.2.2 skrll
699 1.1 cgd case TCP_NODELAY:
700 1.1 cgd if (m == NULL || m->m_len < sizeof (int))
701 1.1 cgd error = EINVAL;
702 1.1 cgd else if (*mtod(m, int *))
703 1.1 cgd tp->t_flags |= TF_NODELAY;
704 1.1 cgd else
705 1.1 cgd tp->t_flags &= ~TF_NODELAY;
706 1.1 cgd break;
707 1.1 cgd
708 1.9 mycroft case TCP_MAXSEG:
709 1.71 itojun if (m && (i = *mtod(m, int *)) > 0 &&
710 1.28 kml i <= tp->t_peermss)
711 1.28 kml tp->t_peermss = i; /* limit on send size */
712 1.9 mycroft else
713 1.9 mycroft error = EINVAL;
714 1.9 mycroft break;
715 1.9 mycroft
716 1.1 cgd default:
717 1.9 mycroft error = ENOPROTOOPT;
718 1.1 cgd break;
719 1.1 cgd }
720 1.1 cgd if (m)
721 1.1 cgd (void) m_free(m);
722 1.1 cgd break;
723 1.1 cgd
724 1.1 cgd case PRCO_GETOPT:
725 1.1 cgd *mp = m = m_get(M_WAIT, MT_SOOPTS);
726 1.1 cgd m->m_len = sizeof(int);
727 1.75 matt MCLAIM(m, so->so_mowner);
728 1.1 cgd
729 1.1 cgd switch (optname) {
730 1.81.2.2 skrll #ifdef TCP_SIGNATURE
731 1.81.2.2 skrll case TCP_MD5SIG:
732 1.81.2.2 skrll *mtod(m, int *) = (tp->t_flags & TF_SIGNATURE) ? 1 : 0;
733 1.81.2.2 skrll break;
734 1.81.2.2 skrll #endif
735 1.1 cgd case TCP_NODELAY:
736 1.1 cgd *mtod(m, int *) = tp->t_flags & TF_NODELAY;
737 1.1 cgd break;
738 1.1 cgd case TCP_MAXSEG:
739 1.28 kml *mtod(m, int *) = tp->t_peermss;
740 1.1 cgd break;
741 1.1 cgd default:
742 1.9 mycroft error = ENOPROTOOPT;
743 1.1 cgd break;
744 1.1 cgd }
745 1.1 cgd break;
746 1.1 cgd }
747 1.9 mycroft splx(s);
748 1.1 cgd return (error);
749 1.1 cgd }
750 1.1 cgd
751 1.11 mycroft #ifndef TCP_SENDSPACE
752 1.81.2.2 skrll #define TCP_SENDSPACE 1024*32
753 1.11 mycroft #endif
754 1.25 thorpej int tcp_sendspace = TCP_SENDSPACE;
755 1.11 mycroft #ifndef TCP_RECVSPACE
756 1.81.2.2 skrll #define TCP_RECVSPACE 1024*32
757 1.11 mycroft #endif
758 1.25 thorpej int tcp_recvspace = TCP_RECVSPACE;
759 1.1 cgd
760 1.1 cgd /*
761 1.1 cgd * Attach TCP protocol to socket, allocating
762 1.1 cgd * internet protocol control block, tcp control block,
763 1.1 cgd * bufer space, and entering LISTEN state if to accept connections.
764 1.1 cgd */
765 1.6 mycroft int
766 1.81.2.6 skrll tcp_attach(struct socket *so)
767 1.1 cgd {
768 1.49 augustss struct tcpcb *tp;
769 1.1 cgd struct inpcb *inp;
770 1.40 itojun #ifdef INET6
771 1.40 itojun struct in6pcb *in6p;
772 1.40 itojun #endif
773 1.1 cgd int error;
774 1.40 itojun int family; /* family of the socket */
775 1.40 itojun
776 1.40 itojun family = so->so_proto->pr_domain->dom_family;
777 1.1 cgd
778 1.75 matt #ifdef MBUFTRACE
779 1.75 matt so->so_mowner = &tcp_mowner;
780 1.75 matt so->so_rcv.sb_mowner = &tcp_rx_mowner;
781 1.75 matt so->so_snd.sb_mowner = &tcp_tx_mowner;
782 1.75 matt #endif
783 1.1 cgd if (so->so_snd.sb_hiwat == 0 || so->so_rcv.sb_hiwat == 0) {
784 1.1 cgd error = soreserve(so, tcp_sendspace, tcp_recvspace);
785 1.1 cgd if (error)
786 1.1 cgd return (error);
787 1.1 cgd }
788 1.40 itojun switch (family) {
789 1.56 itojun #ifdef INET
790 1.40 itojun case PF_INET:
791 1.40 itojun error = in_pcballoc(so, &tcbtable);
792 1.40 itojun if (error)
793 1.40 itojun return (error);
794 1.40 itojun inp = sotoinpcb(so);
795 1.40 itojun #ifdef INET6
796 1.40 itojun in6p = NULL;
797 1.40 itojun #endif
798 1.40 itojun break;
799 1.56 itojun #endif
800 1.40 itojun #ifdef INET6
801 1.40 itojun case PF_INET6:
802 1.81.2.2 skrll error = in6_pcballoc(so, &tcbtable);
803 1.40 itojun if (error)
804 1.40 itojun return (error);
805 1.40 itojun inp = NULL;
806 1.40 itojun in6p = sotoin6pcb(so);
807 1.40 itojun break;
808 1.40 itojun #endif
809 1.40 itojun default:
810 1.40 itojun return EAFNOSUPPORT;
811 1.40 itojun }
812 1.40 itojun if (inp)
813 1.40 itojun tp = tcp_newtcpcb(family, (void *)inp);
814 1.40 itojun #ifdef INET6
815 1.40 itojun else if (in6p)
816 1.40 itojun tp = tcp_newtcpcb(family, (void *)in6p);
817 1.40 itojun #endif
818 1.41 itojun else
819 1.41 itojun tp = NULL;
820 1.40 itojun
821 1.1 cgd if (tp == 0) {
822 1.1 cgd int nofd = so->so_state & SS_NOFDREF; /* XXX */
823 1.1 cgd
824 1.1 cgd so->so_state &= ~SS_NOFDREF; /* don't free the socket yet */
825 1.56 itojun #ifdef INET
826 1.40 itojun if (inp)
827 1.40 itojun in_pcbdetach(inp);
828 1.56 itojun #endif
829 1.40 itojun #ifdef INET6
830 1.56 itojun if (in6p)
831 1.40 itojun in6_pcbdetach(in6p);
832 1.40 itojun #endif
833 1.1 cgd so->so_state |= nofd;
834 1.1 cgd return (ENOBUFS);
835 1.1 cgd }
836 1.1 cgd tp->t_state = TCPS_CLOSED;
837 1.1 cgd return (0);
838 1.1 cgd }
839 1.1 cgd
840 1.1 cgd /*
841 1.1 cgd * Initiate (or continue) disconnect.
842 1.1 cgd * If embryonic state, just send reset (once).
843 1.1 cgd * If in ``let data drain'' option and linger null, just drop.
844 1.1 cgd * Otherwise (hard), mark socket disconnecting and drop
845 1.1 cgd * current input data; switch states based on user close, and
846 1.1 cgd * send segment to peer (with FIN).
847 1.1 cgd */
848 1.1 cgd struct tcpcb *
849 1.81.2.6 skrll tcp_disconnect(struct tcpcb *tp)
850 1.1 cgd {
851 1.40 itojun struct socket *so;
852 1.40 itojun
853 1.40 itojun if (tp->t_inpcb)
854 1.40 itojun so = tp->t_inpcb->inp_socket;
855 1.40 itojun #ifdef INET6
856 1.40 itojun else if (tp->t_in6pcb)
857 1.40 itojun so = tp->t_in6pcb->in6p_socket;
858 1.40 itojun #endif
859 1.40 itojun else
860 1.40 itojun so = NULL;
861 1.1 cgd
862 1.12 mycroft if (TCPS_HAVEESTABLISHED(tp->t_state) == 0)
863 1.1 cgd tp = tcp_close(tp);
864 1.1 cgd else if ((so->so_options & SO_LINGER) && so->so_linger == 0)
865 1.1 cgd tp = tcp_drop(tp, 0);
866 1.1 cgd else {
867 1.1 cgd soisdisconnecting(so);
868 1.1 cgd sbflush(&so->so_rcv);
869 1.1 cgd tp = tcp_usrclosed(tp);
870 1.1 cgd if (tp)
871 1.1 cgd (void) tcp_output(tp);
872 1.1 cgd }
873 1.1 cgd return (tp);
874 1.1 cgd }
875 1.1 cgd
876 1.1 cgd /*
877 1.1 cgd * User issued close, and wish to trail through shutdown states:
878 1.1 cgd * if never received SYN, just forget it. If got a SYN from peer,
879 1.1 cgd * but haven't sent FIN, then go to FIN_WAIT_1 state to send peer a FIN.
880 1.1 cgd * If already got a FIN from peer, then almost done; go to LAST_ACK
881 1.1 cgd * state. In all other cases, have already sent FIN to peer (e.g.
882 1.1 cgd * after PRU_SHUTDOWN), and just have to play tedious game waiting
883 1.1 cgd * for peer to send FIN or not respond to keep-alives, etc.
884 1.1 cgd * We can let the user exit from the close as soon as the FIN is acked.
885 1.1 cgd */
886 1.1 cgd struct tcpcb *
887 1.81.2.6 skrll tcp_usrclosed(struct tcpcb *tp)
888 1.1 cgd {
889 1.1 cgd
890 1.1 cgd switch (tp->t_state) {
891 1.1 cgd
892 1.1 cgd case TCPS_CLOSED:
893 1.1 cgd case TCPS_LISTEN:
894 1.1 cgd case TCPS_SYN_SENT:
895 1.1 cgd tp->t_state = TCPS_CLOSED;
896 1.1 cgd tp = tcp_close(tp);
897 1.1 cgd break;
898 1.1 cgd
899 1.1 cgd case TCPS_SYN_RECEIVED:
900 1.1 cgd case TCPS_ESTABLISHED:
901 1.1 cgd tp->t_state = TCPS_FIN_WAIT_1;
902 1.1 cgd break;
903 1.1 cgd
904 1.1 cgd case TCPS_CLOSE_WAIT:
905 1.1 cgd tp->t_state = TCPS_LAST_ACK;
906 1.1 cgd break;
907 1.1 cgd }
908 1.18 mycroft if (tp && tp->t_state >= TCPS_FIN_WAIT_2) {
909 1.40 itojun struct socket *so;
910 1.40 itojun if (tp->t_inpcb)
911 1.40 itojun so = tp->t_inpcb->inp_socket;
912 1.40 itojun #ifdef INET6
913 1.40 itojun else if (tp->t_in6pcb)
914 1.40 itojun so = tp->t_in6pcb->in6p_socket;
915 1.40 itojun #endif
916 1.40 itojun else
917 1.40 itojun so = NULL;
918 1.40 itojun soisdisconnected(so);
919 1.19 mycroft /*
920 1.19 mycroft * If we are in FIN_WAIT_2, we arrived here because the
921 1.19 mycroft * application did a shutdown of the send side. Like the
922 1.19 mycroft * case of a transition from FIN_WAIT_1 to FIN_WAIT_2 after
923 1.19 mycroft * a full close, we start a timer to make sure sockets are
924 1.19 mycroft * not left in FIN_WAIT_2 forever.
925 1.19 mycroft */
926 1.38 mouse if ((tp->t_state == TCPS_FIN_WAIT_2) && (tcp_maxidle > 0))
927 1.37 thorpej TCP_TIMER_ARM(tp, TCPT_2MSL, tcp_maxidle);
928 1.18 mycroft }
929 1.1 cgd return (tp);
930 1.17 thorpej }
931 1.17 thorpej
932 1.81.2.2 skrll /*
933 1.81.2.2 skrll * sysctl helper routine for net.inet.ip.mssdflt. it can't be less
934 1.81.2.2 skrll * than 32.
935 1.81.2.2 skrll */
936 1.81.2.2 skrll static int
937 1.81.2.2 skrll sysctl_net_inet_tcp_mssdflt(SYSCTLFN_ARGS)
938 1.81.2.2 skrll {
939 1.81.2.2 skrll int error, mssdflt;
940 1.81.2.2 skrll struct sysctlnode node;
941 1.81.2.2 skrll
942 1.81.2.2 skrll mssdflt = tcp_mssdflt;
943 1.81.2.2 skrll node = *rnode;
944 1.81.2.2 skrll node.sysctl_data = &mssdflt;
945 1.81.2.2 skrll error = sysctl_lookup(SYSCTLFN_CALL(&node));
946 1.81.2.2 skrll if (error || newp == NULL)
947 1.81.2.2 skrll return (error);
948 1.81.2.2 skrll
949 1.81.2.2 skrll if (mssdflt < 32)
950 1.81.2.2 skrll return (EINVAL);
951 1.81.2.2 skrll tcp_mssdflt = mssdflt;
952 1.81.2.2 skrll
953 1.81.2.2 skrll return (0);
954 1.81.2.2 skrll }
955 1.36 matt
956 1.17 thorpej /*
957 1.81.2.2 skrll * sysctl helper routine for setting port related values under
958 1.81.2.2 skrll * net.inet.ip and net.inet6.ip6. does basic range checking and does
959 1.81.2.2 skrll * additional checks for each type. this code has placed in
960 1.81.2.2 skrll * tcp_input.c since INET and INET6 both use the same tcp code.
961 1.81.2.2 skrll *
962 1.81.2.2 skrll * this helper is not static so that both inet and inet6 can use it.
963 1.17 thorpej */
964 1.17 thorpej int
965 1.81.2.2 skrll sysctl_net_inet_ip_ports(SYSCTLFN_ARGS)
966 1.17 thorpej {
967 1.81.2.2 skrll int error, tmp;
968 1.81.2.2 skrll int apmin, apmax;
969 1.81.2.2 skrll #ifndef IPNOPRIVPORTS
970 1.81.2.2 skrll int lpmin, lpmax;
971 1.81.2.2 skrll #endif /* IPNOPRIVPORTS */
972 1.81.2.2 skrll struct sysctlnode node;
973 1.48 thorpej
974 1.81.2.2 skrll if (namelen != 0)
975 1.81.2.2 skrll return (EINVAL);
976 1.81.2.2 skrll
977 1.81.2.2 skrll switch (name[-3]) {
978 1.81.2.2 skrll #ifdef INET
979 1.81.2.2 skrll case PF_INET:
980 1.81.2.2 skrll apmin = anonportmin;
981 1.81.2.2 skrll apmax = anonportmax;
982 1.81.2.2 skrll #ifndef IPNOPRIVPORTS
983 1.81.2.2 skrll lpmin = lowportmin;
984 1.81.2.2 skrll lpmax = lowportmax;
985 1.81.2.2 skrll #endif /* IPNOPRIVPORTS */
986 1.81.2.2 skrll break;
987 1.81.2.2 skrll #endif /* INET */
988 1.81.2.2 skrll #ifdef INET6
989 1.81.2.2 skrll case PF_INET6:
990 1.81.2.2 skrll apmin = ip6_anonportmin;
991 1.81.2.2 skrll apmax = ip6_anonportmax;
992 1.81.2.2 skrll #ifndef IPNOPRIVPORTS
993 1.81.2.2 skrll lpmin = ip6_lowportmin;
994 1.81.2.2 skrll lpmax = ip6_lowportmax;
995 1.81.2.2 skrll #endif /* IPNOPRIVPORTS */
996 1.81.2.2 skrll break;
997 1.81.2.2 skrll #endif /* INET6 */
998 1.81.2.2 skrll default:
999 1.81.2.2 skrll return (EINVAL);
1000 1.81.2.2 skrll }
1001 1.81.2.2 skrll
1002 1.81.2.2 skrll /*
1003 1.81.2.2 skrll * insert temporary copy into node, perform lookup on
1004 1.81.2.2 skrll * temporary, then restore pointer
1005 1.81.2.2 skrll */
1006 1.81.2.2 skrll node = *rnode;
1007 1.81.2.2 skrll tmp = *(int*)rnode->sysctl_data;
1008 1.81.2.2 skrll node.sysctl_data = &tmp;
1009 1.81.2.2 skrll error = sysctl_lookup(SYSCTLFN_CALL(&node));
1010 1.81.2.2 skrll if (error || newp == NULL)
1011 1.81.2.2 skrll return (error);
1012 1.81.2.2 skrll
1013 1.81.2.2 skrll /*
1014 1.81.2.2 skrll * simple port range check
1015 1.81.2.2 skrll */
1016 1.81.2.2 skrll if (tmp < 0 || tmp > 65535)
1017 1.81.2.2 skrll return (EINVAL);
1018 1.81.2.2 skrll
1019 1.81.2.2 skrll /*
1020 1.81.2.2 skrll * per-node range checks
1021 1.81.2.2 skrll */
1022 1.81.2.2 skrll switch (rnode->sysctl_num) {
1023 1.81.2.2 skrll case IPCTL_ANONPORTMIN:
1024 1.81.2.2 skrll if (tmp >= apmax)
1025 1.81.2.2 skrll return (EINVAL);
1026 1.81.2.2 skrll #ifndef IPNOPRIVPORTS
1027 1.81.2.2 skrll if (tmp < IPPORT_RESERVED)
1028 1.81.2.2 skrll return (EINVAL);
1029 1.81.2.2 skrll #endif /* IPNOPRIVPORTS */
1030 1.81.2.2 skrll break;
1031 1.81.2.2 skrll
1032 1.81.2.2 skrll case IPCTL_ANONPORTMAX:
1033 1.81.2.2 skrll if (apmin >= tmp)
1034 1.81.2.2 skrll return (EINVAL);
1035 1.81.2.2 skrll #ifndef IPNOPRIVPORTS
1036 1.81.2.2 skrll if (tmp < IPPORT_RESERVED)
1037 1.81.2.2 skrll return (EINVAL);
1038 1.81.2.2 skrll #endif /* IPNOPRIVPORTS */
1039 1.81.2.2 skrll break;
1040 1.81.2.2 skrll
1041 1.81.2.2 skrll #ifndef IPNOPRIVPORTS
1042 1.81.2.2 skrll case IPCTL_LOWPORTMIN:
1043 1.81.2.2 skrll if (tmp >= lpmax ||
1044 1.81.2.2 skrll tmp > IPPORT_RESERVEDMAX ||
1045 1.81.2.2 skrll tmp < IPPORT_RESERVEDMIN)
1046 1.81.2.2 skrll return (EINVAL);
1047 1.81.2.2 skrll break;
1048 1.81.2.2 skrll
1049 1.81.2.2 skrll case IPCTL_LOWPORTMAX:
1050 1.81.2.2 skrll if (lpmin >= tmp ||
1051 1.81.2.2 skrll tmp > IPPORT_RESERVEDMAX ||
1052 1.81.2.2 skrll tmp < IPPORT_RESERVEDMIN)
1053 1.81.2.2 skrll return (EINVAL);
1054 1.81.2.2 skrll break;
1055 1.81.2.2 skrll #endif /* IPNOPRIVPORTS */
1056 1.81.2.2 skrll
1057 1.81.2.2 skrll default:
1058 1.81.2.2 skrll return (EINVAL);
1059 1.81.2.2 skrll }
1060 1.81.2.2 skrll
1061 1.81.2.2 skrll *(int*)rnode->sysctl_data = tmp;
1062 1.81.2.2 skrll
1063 1.81.2.2 skrll return (0);
1064 1.81.2.2 skrll }
1065 1.81.2.2 skrll
1066 1.81.2.2 skrll /*
1067 1.81.2.2 skrll * sysctl helper routine for the net.inet.tcp.ident and
1068 1.81.2.2 skrll * net.inet6.tcp6.ident nodes. contains backwards compat code for the
1069 1.81.2.2 skrll * old way of looking up the ident information for ipv4 which involves
1070 1.81.2.2 skrll * stuffing the port/addr pairs into the mib lookup.
1071 1.81.2.2 skrll */
1072 1.81.2.2 skrll static int
1073 1.81.2.2 skrll sysctl_net_inet_tcp_ident(SYSCTLFN_ARGS)
1074 1.81.2.2 skrll {
1075 1.81.2.2 skrll #ifdef INET
1076 1.81.2.2 skrll struct inpcb *inb;
1077 1.81.2.2 skrll struct sockaddr_in *si4[2];
1078 1.81.2.2 skrll #endif /* INET */
1079 1.81.2.2 skrll #ifdef INET6
1080 1.81.2.2 skrll struct in6pcb *in6b;
1081 1.81.2.2 skrll struct sockaddr_in6 *si6[2];
1082 1.81.2.2 skrll #endif /* INET6 */
1083 1.81.2.2 skrll struct sockaddr_storage sa[2];
1084 1.81.2.2 skrll struct socket *sockp;
1085 1.81.2.2 skrll size_t sz;
1086 1.81.2.2 skrll uid_t uid;
1087 1.81.2.2 skrll int error, pf;
1088 1.81.2.2 skrll
1089 1.81.2.2 skrll if (namelen != 4 && namelen != 0)
1090 1.81.2.2 skrll return (EINVAL);
1091 1.81.2.2 skrll if (name[-2] != IPPROTO_TCP)
1092 1.81.2.2 skrll return (EINVAL);
1093 1.81.2.2 skrll pf = name[-3];
1094 1.81.2.2 skrll
1095 1.81.2.2 skrll /* old style lookup, ipv4 only */
1096 1.81.2.2 skrll if (namelen == 4) {
1097 1.81.2.2 skrll #ifdef INET
1098 1.81.2.2 skrll struct in_addr laddr, raddr;
1099 1.81.2.2 skrll u_int lport, rport;
1100 1.81.2.2 skrll
1101 1.81.2.2 skrll if (pf != PF_INET)
1102 1.81.2.2 skrll return (EPROTONOSUPPORT);
1103 1.81.2.2 skrll raddr.s_addr = (uint32_t)name[0];
1104 1.81.2.2 skrll rport = (u_int)name[1];
1105 1.81.2.2 skrll laddr.s_addr = (uint32_t)name[2];
1106 1.81.2.2 skrll lport = (u_int)name[3];
1107 1.81.2.2 skrll inb = in_pcblookup_connect(&tcbtable, raddr, rport,
1108 1.81.2.2 skrll laddr, lport);
1109 1.81.2.2 skrll if (inb == NULL || (sockp = inb->inp_socket) == NULL)
1110 1.81.2.2 skrll return (ESRCH);
1111 1.81.2.2 skrll uid = sockp->so_uid;
1112 1.81.2.2 skrll if (oldp) {
1113 1.81.2.2 skrll sz = MIN(sizeof(uid), *oldlenp);
1114 1.81.2.2 skrll error = copyout(&uid, oldp, sz);
1115 1.69 martin if (error)
1116 1.70 martin return (error);
1117 1.69 martin }
1118 1.81.2.2 skrll *oldlenp = sizeof(uid);
1119 1.81.2.2 skrll return (0);
1120 1.81.2.2 skrll #else /* INET */
1121 1.81.2.2 skrll return (EINVAL);
1122 1.81.2.2 skrll #endif /* INET */
1123 1.81.2.2 skrll }
1124 1.81.2.2 skrll
1125 1.81.2.2 skrll if (newp == NULL || newlen != sizeof(sa))
1126 1.81.2.2 skrll return (EINVAL);
1127 1.81.2.2 skrll error = copyin(newp, &sa, newlen);
1128 1.81.2.2 skrll if (error)
1129 1.81.2.2 skrll return (error);
1130 1.81.2.2 skrll
1131 1.81.2.2 skrll /*
1132 1.81.2.2 skrll * requested families must match
1133 1.81.2.2 skrll */
1134 1.81.2.2 skrll if (pf != sa[0].ss_family || sa[0].ss_family != sa[1].ss_family)
1135 1.81.2.2 skrll return (EINVAL);
1136 1.81.2.2 skrll
1137 1.81.2.2 skrll switch (pf) {
1138 1.81.2.2 skrll #ifdef INET
1139 1.81.2.2 skrll case PF_INET:
1140 1.81.2.2 skrll si4[0] = (struct sockaddr_in*)&sa[0];
1141 1.81.2.2 skrll si4[1] = (struct sockaddr_in*)&sa[1];
1142 1.81.2.2 skrll if (si4[0]->sin_len != sizeof(*si4[0]) ||
1143 1.81.2.2 skrll si4[0]->sin_len != si4[1]->sin_len)
1144 1.81.2.2 skrll return (EINVAL);
1145 1.81.2.2 skrll inb = in_pcblookup_connect(&tcbtable,
1146 1.81.2.2 skrll si4[0]->sin_addr, si4[0]->sin_port,
1147 1.81.2.2 skrll si4[1]->sin_addr, si4[1]->sin_port);
1148 1.81.2.2 skrll if (inb == NULL || (sockp = inb->inp_socket) == NULL)
1149 1.81.2.2 skrll return (ESRCH);
1150 1.81.2.2 skrll break;
1151 1.81.2.2 skrll #endif /* INET */
1152 1.81.2.2 skrll #ifdef INET6
1153 1.81.2.2 skrll case PF_INET6:
1154 1.81.2.2 skrll si6[0] = (struct sockaddr_in6*)&sa[0];
1155 1.81.2.2 skrll si6[1] = (struct sockaddr_in6*)&sa[1];
1156 1.81.2.2 skrll if (si6[0]->sin6_len != sizeof(*si6[0]) ||
1157 1.81.2.2 skrll si6[0]->sin6_len != si6[1]->sin6_len)
1158 1.81.2.2 skrll return (EINVAL);
1159 1.81.2.2 skrll in6b = in6_pcblookup_connect(&tcbtable,
1160 1.81.2.2 skrll &si6[0]->sin6_addr, si6[0]->sin6_port,
1161 1.81.2.2 skrll &si6[1]->sin6_addr, si6[1]->sin6_port, 0);
1162 1.81.2.2 skrll if (in6b == NULL || (sockp = in6b->in6p_socket) == NULL)
1163 1.81.2.2 skrll return (ESRCH);
1164 1.81.2.2 skrll break;
1165 1.81.2.2 skrll #endif /* INET6 */
1166 1.81.2.2 skrll default:
1167 1.81.2.2 skrll return (EPROTONOSUPPORT);
1168 1.39 tv }
1169 1.81.2.4 skrll *oldlenp = sizeof(uid);
1170 1.38 mouse
1171 1.81.2.2 skrll uid = sockp->so_uid;
1172 1.81.2.2 skrll if (oldp) {
1173 1.81.2.2 skrll sz = MIN(sizeof(uid), *oldlenp);
1174 1.81.2.2 skrll error = copyout(&uid, oldp, sz);
1175 1.81.2.2 skrll if (error)
1176 1.81.2.2 skrll return (error);
1177 1.81.2.2 skrll }
1178 1.81.2.2 skrll *oldlenp = sizeof(uid);
1179 1.81.2.2 skrll
1180 1.81.2.2 skrll return (0);
1181 1.76 christos }
1182 1.76 christos
1183 1.81.2.2 skrll /*
1184 1.81.2.2 skrll * this (second stage) setup routine is a replacement for tcp_sysctl()
1185 1.81.2.2 skrll * (which is currently used for ipv4 and ipv6)
1186 1.81.2.2 skrll */
1187 1.81.2.2 skrll static void
1188 1.81.2.2 skrll sysctl_net_inet_tcp_setup2(struct sysctllog **clog, int pf, const char *pfname,
1189 1.81.2.2 skrll const char *tcpname)
1190 1.81.2.2 skrll {
1191 1.76 christos
1192 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1193 1.81.2.2 skrll CTLFLAG_PERMANENT,
1194 1.81.2.2 skrll CTLTYPE_NODE, "net", NULL,
1195 1.81.2.2 skrll NULL, 0, NULL, 0,
1196 1.81.2.2 skrll CTL_NET, CTL_EOL);
1197 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1198 1.81.2.2 skrll CTLFLAG_PERMANENT,
1199 1.81.2.2 skrll CTLTYPE_NODE, pfname, NULL,
1200 1.81.2.2 skrll NULL, 0, NULL, 0,
1201 1.81.2.2 skrll CTL_NET, pf, CTL_EOL);
1202 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1203 1.81.2.2 skrll CTLFLAG_PERMANENT,
1204 1.81.2.2 skrll CTLTYPE_NODE, tcpname,
1205 1.81.2.2 skrll SYSCTL_DESCR("TCP related settings"),
1206 1.81.2.2 skrll NULL, 0, NULL, 0,
1207 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, CTL_EOL);
1208 1.81.2.2 skrll
1209 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1210 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1211 1.81.2.2 skrll CTLTYPE_INT, "rfc1323",
1212 1.81.2.2 skrll SYSCTL_DESCR("Enable RFC1323 TCP extensions"),
1213 1.81.2.2 skrll NULL, 0, &tcp_do_rfc1323, 0,
1214 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_RFC1323, CTL_EOL);
1215 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1216 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1217 1.81.2.2 skrll CTLTYPE_INT, "sendspace",
1218 1.81.2.2 skrll SYSCTL_DESCR("Default TCP send buffer size"),
1219 1.81.2.2 skrll NULL, 0, &tcp_sendspace, 0,
1220 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_SENDSPACE, CTL_EOL);
1221 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1222 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1223 1.81.2.2 skrll CTLTYPE_INT, "recvspace",
1224 1.81.2.2 skrll SYSCTL_DESCR("Default TCP receive buffer size"),
1225 1.81.2.2 skrll NULL, 0, &tcp_recvspace, 0,
1226 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_RECVSPACE, CTL_EOL);
1227 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1228 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1229 1.81.2.2 skrll CTLTYPE_INT, "mssdflt",
1230 1.81.2.2 skrll SYSCTL_DESCR("Default maximum segment size"),
1231 1.81.2.2 skrll sysctl_net_inet_tcp_mssdflt, 0, &tcp_mssdflt, 0,
1232 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_MSSDFLT, CTL_EOL);
1233 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1234 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1235 1.81.2.2 skrll CTLTYPE_INT, "syn_cache_limit",
1236 1.81.2.2 skrll SYSCTL_DESCR("Maximum number of entries in the TCP "
1237 1.81.2.2 skrll "compressed state engine"),
1238 1.81.2.2 skrll NULL, 0, &tcp_syn_cache_limit, 0,
1239 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_SYN_CACHE_LIMIT,
1240 1.81.2.2 skrll CTL_EOL);
1241 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1242 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1243 1.81.2.2 skrll CTLTYPE_INT, "syn_bucket_limit",
1244 1.81.2.2 skrll SYSCTL_DESCR("Maximum number of entries per hash "
1245 1.81.2.2 skrll "bucket in the TCP compressed state "
1246 1.81.2.2 skrll "engine"),
1247 1.81.2.2 skrll NULL, 0, &tcp_syn_bucket_limit, 0,
1248 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_SYN_BUCKET_LIMIT,
1249 1.81.2.2 skrll CTL_EOL);
1250 1.81.2.2 skrll #if 0 /* obsoleted */
1251 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1252 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1253 1.81.2.2 skrll CTLTYPE_INT, "syn_cache_interval",
1254 1.81.2.2 skrll SYSCTL_DESCR("TCP compressed state engine's timer interval"),
1255 1.81.2.2 skrll NULL, 0, &tcp_syn_cache_interval, 0,
1256 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_SYN_CACHE_INTER,
1257 1.81.2.2 skrll CTL_EOL);
1258 1.81.2.2 skrll #endif
1259 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1260 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1261 1.81.2.2 skrll CTLTYPE_INT, "init_win",
1262 1.81.2.2 skrll SYSCTL_DESCR("Initial TCP congestion window"),
1263 1.81.2.2 skrll NULL, 0, &tcp_init_win, 0,
1264 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_INIT_WIN, CTL_EOL);
1265 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1266 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1267 1.81.2.2 skrll CTLTYPE_INT, "mss_ifmtu",
1268 1.81.2.2 skrll SYSCTL_DESCR("Use interface MTU for calculating MSS"),
1269 1.81.2.2 skrll NULL, 0, &tcp_mss_ifmtu, 0,
1270 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_MSS_IFMTU, CTL_EOL);
1271 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1272 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1273 1.81.2.2 skrll CTLTYPE_INT, "sack",
1274 1.81.2.2 skrll SYSCTL_DESCR("Enable RFC2018 Selection ACKnowledgement "
1275 1.81.2.2 skrll "(not implemented)"),
1276 1.81.2.2 skrll NULL, 0, &tcp_do_sack, 0,
1277 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_SACK, CTL_EOL);
1278 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1279 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1280 1.81.2.2 skrll CTLTYPE_INT, "win_scale",
1281 1.81.2.2 skrll SYSCTL_DESCR("Use RFC1323 window scale options"),
1282 1.81.2.2 skrll NULL, 0, &tcp_do_win_scale, 0,
1283 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_WSCALE, CTL_EOL);
1284 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1285 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1286 1.81.2.2 skrll CTLTYPE_INT, "timestamps",
1287 1.81.2.2 skrll SYSCTL_DESCR("Use RFC1323 time stamp options"),
1288 1.81.2.2 skrll NULL, 0, &tcp_do_timestamps, 0,
1289 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_TSTAMP, CTL_EOL);
1290 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1291 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1292 1.81.2.2 skrll CTLTYPE_INT, "compat_42",
1293 1.81.2.2 skrll SYSCTL_DESCR("Enable workarounds for 4.2BSD TCP bugs"),
1294 1.81.2.2 skrll NULL, 0, &tcp_compat_42, 0,
1295 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_COMPAT_42, CTL_EOL);
1296 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1297 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1298 1.81.2.2 skrll CTLTYPE_INT, "cwm",
1299 1.81.2.2 skrll SYSCTL_DESCR("Hughes/Touch/Heidemann Congestion Window "
1300 1.81.2.2 skrll "Monitoring"),
1301 1.81.2.2 skrll NULL, 0, &tcp_cwm, 0,
1302 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_CWM, CTL_EOL);
1303 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1304 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1305 1.81.2.2 skrll CTLTYPE_INT, "cwm_burstsize",
1306 1.81.2.2 skrll SYSCTL_DESCR("Congestion Window Monitoring allowed "
1307 1.81.2.2 skrll "burst count in packets"),
1308 1.81.2.2 skrll NULL, 0, &tcp_cwm_burstsize, 0,
1309 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_CWM_BURSTSIZE,
1310 1.81.2.2 skrll CTL_EOL);
1311 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1312 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1313 1.81.2.2 skrll CTLTYPE_INT, "ack_on_push",
1314 1.81.2.2 skrll SYSCTL_DESCR("Immediately return ACK when PSH is "
1315 1.81.2.2 skrll "received"),
1316 1.81.2.2 skrll NULL, 0, &tcp_ack_on_push, 0,
1317 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_ACK_ON_PUSH, CTL_EOL);
1318 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1319 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1320 1.81.2.2 skrll CTLTYPE_INT, "keepidle",
1321 1.81.2.2 skrll SYSCTL_DESCR("Allowed connection idle ticks before a "
1322 1.81.2.2 skrll "keepalive probe is sent"),
1323 1.81.2.2 skrll NULL, 0, &tcp_keepidle, 0,
1324 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_KEEPIDLE, CTL_EOL);
1325 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1326 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1327 1.81.2.2 skrll CTLTYPE_INT, "keepintvl",
1328 1.81.2.2 skrll SYSCTL_DESCR("Ticks before next keepalive probe is sent"),
1329 1.81.2.2 skrll NULL, 0, &tcp_keepintvl, 0,
1330 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_KEEPINTVL, CTL_EOL);
1331 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1332 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1333 1.81.2.2 skrll CTLTYPE_INT, "keepcnt",
1334 1.81.2.2 skrll SYSCTL_DESCR("Number of keepalive probes to send"),
1335 1.81.2.2 skrll NULL, 0, &tcp_keepcnt, 0,
1336 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_KEEPCNT, CTL_EOL);
1337 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1338 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_IMMEDIATE,
1339 1.81.2.2 skrll CTLTYPE_INT, "slowhz",
1340 1.81.2.2 skrll SYSCTL_DESCR("Keepalive ticks per second"),
1341 1.81.2.2 skrll NULL, PR_SLOWHZ, NULL, 0,
1342 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_SLOWHZ, CTL_EOL);
1343 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1344 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1345 1.81.2.2 skrll CTLTYPE_INT, "newreno",
1346 1.81.2.2 skrll SYSCTL_DESCR("NewReno congestion control algorithm"),
1347 1.81.2.2 skrll NULL, 0, &tcp_do_newreno, 0,
1348 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_NEWRENO, CTL_EOL);
1349 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1350 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1351 1.81.2.2 skrll CTLTYPE_INT, "log_refused",
1352 1.81.2.2 skrll SYSCTL_DESCR("Log refused TCP connections"),
1353 1.81.2.2 skrll NULL, 0, &tcp_log_refused, 0,
1354 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_LOG_REFUSED, CTL_EOL);
1355 1.81.2.2 skrll #if 0 /* obsoleted */
1356 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1357 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1358 1.81.2.2 skrll CTLTYPE_INT, "rstratelimit", NULL,
1359 1.81.2.2 skrll NULL, 0, &tcp_rst_ratelim, 0,
1360 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_RSTRATELIMIT, CTL_EOL);
1361 1.81.2.2 skrll #endif
1362 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1363 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1364 1.81.2.2 skrll CTLTYPE_INT, "rstppslimit",
1365 1.81.2.2 skrll SYSCTL_DESCR("Maximum number of RST packets to send "
1366 1.81.2.2 skrll "per second"),
1367 1.81.2.2 skrll NULL, 0, &tcp_rst_ppslim, 0,
1368 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_RSTPPSLIMIT, CTL_EOL);
1369 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1370 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1371 1.81.2.2 skrll CTLTYPE_INT, "delack_ticks",
1372 1.81.2.2 skrll SYSCTL_DESCR("Number of ticks to delay sending an ACK"),
1373 1.81.2.2 skrll NULL, 0, &tcp_delack_ticks, 0,
1374 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_DELACK_TICKS, CTL_EOL);
1375 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1376 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1377 1.81.2.2 skrll CTLTYPE_INT, "init_win_local",
1378 1.81.2.2 skrll SYSCTL_DESCR("Initial TCP window size (in segments)"),
1379 1.81.2.2 skrll NULL, 0, &tcp_init_win_local, 0,
1380 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_INIT_WIN_LOCAL,
1381 1.81.2.2 skrll CTL_EOL);
1382 1.81.2.2 skrll sysctl_createv(clog, 0, NULL, NULL,
1383 1.81.2.2 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1384 1.81.2.2 skrll CTLTYPE_STRUCT, "ident",
1385 1.81.2.2 skrll SYSCTL_DESCR("RFC1413 Identification Protocol lookups"),
1386 1.81.2.2 skrll sysctl_net_inet_tcp_ident, 0, NULL, sizeof(uid_t),
1387 1.81.2.2 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_IDENT, CTL_EOL);
1388 1.81.2.5 skrll sysctl_createv(clog, 0, NULL, NULL,
1389 1.81.2.5 skrll CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
1390 1.81.2.5 skrll CTLTYPE_INT, "do_loopback_cksum",
1391 1.81.2.5 skrll SYSCTL_DESCR("Perform TCP checksum on loopback"),
1392 1.81.2.5 skrll NULL, 0, &tcp_do_loopback_cksum, 0,
1393 1.81.2.5 skrll CTL_NET, pf, IPPROTO_TCP, TCPCTL_LOOPBACKCKSUM,
1394 1.81.2.5 skrll CTL_EOL);
1395 1.81.2.2 skrll }
1396 1.81.2.2 skrll
1397 1.81.2.2 skrll /*
1398 1.81.2.2 skrll * Sysctl for tcp variables.
1399 1.81.2.2 skrll */
1400 1.81.2.2 skrll #ifdef INET
1401 1.81.2.2 skrll SYSCTL_SETUP(sysctl_net_inet_tcp_setup, "sysctl net.inet.tcp subtree setup")
1402 1.76 christos {
1403 1.76 christos
1404 1.81.2.2 skrll sysctl_net_inet_tcp_setup2(clog, PF_INET, "inet", "tcp");
1405 1.81.2.2 skrll }
1406 1.81.2.2 skrll #endif /* INET */
1407 1.76 christos
1408 1.81.2.2 skrll #ifdef INET6
1409 1.81.2.2 skrll SYSCTL_SETUP(sysctl_net_inet6_tcp6_setup, "sysctl net.inet6.tcp6 subtree setup")
1410 1.81.2.2 skrll {
1411 1.76 christos
1412 1.81.2.2 skrll sysctl_net_inet_tcp_setup2(clog, PF_INET6, "inet6", "tcp6");
1413 1.1 cgd }
1414 1.81.2.2 skrll #endif /* INET6 */
1415 1.81.2.2 skrll
1416