nd6_rtr.c revision 1.68 1 1.68 dyoung /* $NetBSD: nd6_rtr.c,v 1.68 2007/11/01 20:33:58 dyoung Exp $ */
2 1.20 itojun /* $KAME: nd6_rtr.c,v 1.95 2001/02/07 08:09:47 itojun Exp $ */
3 1.3 thorpej
4 1.2 itojun /*
5 1.2 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6 1.2 itojun * All rights reserved.
7 1.16 itojun *
8 1.2 itojun * Redistribution and use in source and binary forms, with or without
9 1.2 itojun * modification, are permitted provided that the following conditions
10 1.2 itojun * are met:
11 1.2 itojun * 1. Redistributions of source code must retain the above copyright
12 1.2 itojun * notice, this list of conditions and the following disclaimer.
13 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
14 1.2 itojun * notice, this list of conditions and the following disclaimer in the
15 1.2 itojun * documentation and/or other materials provided with the distribution.
16 1.2 itojun * 3. Neither the name of the project nor the names of its contributors
17 1.2 itojun * may be used to endorse or promote products derived from this software
18 1.2 itojun * without specific prior written permission.
19 1.16 itojun *
20 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.2 itojun * SUCH DAMAGE.
31 1.2 itojun */
32 1.27 lukem
33 1.27 lukem #include <sys/cdefs.h>
34 1.68 dyoung __KERNEL_RCSID(0, "$NetBSD: nd6_rtr.c,v 1.68 2007/11/01 20:33:58 dyoung Exp $");
35 1.2 itojun
36 1.2 itojun #include <sys/param.h>
37 1.2 itojun #include <sys/systm.h>
38 1.2 itojun #include <sys/malloc.h>
39 1.2 itojun #include <sys/mbuf.h>
40 1.2 itojun #include <sys/socket.h>
41 1.2 itojun #include <sys/sockio.h>
42 1.2 itojun #include <sys/time.h>
43 1.2 itojun #include <sys/kernel.h>
44 1.2 itojun #include <sys/errno.h>
45 1.2 itojun #include <sys/ioctl.h>
46 1.2 itojun #include <sys/syslog.h>
47 1.2 itojun
48 1.2 itojun #include <net/if.h>
49 1.2 itojun #include <net/if_types.h>
50 1.2 itojun #include <net/if_dl.h>
51 1.2 itojun #include <net/route.h>
52 1.2 itojun #include <net/radix.h>
53 1.2 itojun
54 1.2 itojun #include <netinet/in.h>
55 1.2 itojun #include <netinet6/in6_var.h>
56 1.56 rpaulo #include <netinet6/in6_ifattach.h>
57 1.11 itojun #include <netinet/ip6.h>
58 1.2 itojun #include <netinet6/ip6_var.h>
59 1.2 itojun #include <netinet6/nd6.h>
60 1.11 itojun #include <netinet/icmp6.h>
61 1.54 rpaulo #include <netinet6/scope6_var.h>
62 1.2 itojun
63 1.7 itojun #include <net/net_osdep.h>
64 1.2 itojun
65 1.68 dyoung static int rtpref(struct nd_defrouter *);
66 1.68 dyoung static struct nd_defrouter *defrtrlist_update(struct nd_defrouter *);
67 1.68 dyoung static int prelist_update(struct nd_prefixctl *, struct nd_defrouter *,
68 1.68 dyoung struct mbuf *, int);
69 1.68 dyoung static struct in6_ifaddr *in6_ifadd(struct nd_prefixctl *, int);
70 1.68 dyoung static struct nd_pfxrouter *pfxrtr_lookup(struct nd_prefix *,
71 1.68 dyoung struct nd_defrouter *);
72 1.68 dyoung static void pfxrtr_add(struct nd_prefix *, struct nd_defrouter *);
73 1.68 dyoung static void pfxrtr_del(struct nd_pfxrouter *);
74 1.32 itojun static struct nd_pfxrouter *find_pfxlist_reachable_router
75 1.68 dyoung (struct nd_prefix *);
76 1.68 dyoung static void defrouter_delreq(struct nd_defrouter *);
77 1.68 dyoung static void nd6_rtmsg(int, struct rtentry *);
78 1.68 dyoung
79 1.68 dyoung static int in6_init_prefix_ltimes(struct nd_prefix *);
80 1.68 dyoung static void in6_init_address_ltimes(struct nd_prefix *ndpr,
81 1.68 dyoung struct in6_addrlifetime *lt6);
82 1.2 itojun
83 1.65 dyoung static int rt6_deleteroute(struct rtentry *, void *);
84 1.2 itojun
85 1.2 itojun extern int nd6_recalc_reachtm_interval;
86 1.2 itojun
87 1.28 itojun static struct ifnet *nd6_defifp;
88 1.7 itojun int nd6_defifindex;
89 1.7 itojun
90 1.56 rpaulo int ip6_use_tempaddr = 0;
91 1.56 rpaulo
92 1.56 rpaulo int ip6_desync_factor;
93 1.56 rpaulo u_int32_t ip6_temp_preferred_lifetime = DEF_TEMP_PREFERRED_LIFETIME;
94 1.56 rpaulo u_int32_t ip6_temp_valid_lifetime = DEF_TEMP_VALID_LIFETIME;
95 1.56 rpaulo int ip6_temp_regen_advance = TEMPADDR_REGEN_ADVANCE;
96 1.56 rpaulo
97 1.56 rpaulo /* RTPREF_MEDIUM has to be 0! */
98 1.56 rpaulo #define RTPREF_HIGH 1
99 1.56 rpaulo #define RTPREF_MEDIUM 0
100 1.56 rpaulo #define RTPREF_LOW (-1)
101 1.56 rpaulo #define RTPREF_RESERVED (-2)
102 1.56 rpaulo #define RTPREF_INVALID (-3) /* internal */
103 1.56 rpaulo
104 1.2 itojun /*
105 1.2 itojun * Receive Router Solicitation Message - just for routers.
106 1.2 itojun * Router solicitation/advertisement is mostly managed by userland program
107 1.2 itojun * (rtadvd) so here we have no function like nd6_ra_output().
108 1.2 itojun *
109 1.2 itojun * Based on RFC 2461
110 1.2 itojun */
111 1.2 itojun void
112 1.64 christos nd6_rs_input(struct mbuf *m, int off, int icmp6len)
113 1.2 itojun {
114 1.2 itojun struct ifnet *ifp = m->m_pkthdr.rcvif;
115 1.2 itojun struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
116 1.12 itojun struct nd_router_solicit *nd_rs;
117 1.2 itojun struct in6_addr saddr6 = ip6->ip6_src;
118 1.2 itojun char *lladdr = NULL;
119 1.2 itojun int lladdrlen = 0;
120 1.2 itojun union nd_opts ndopts;
121 1.2 itojun
122 1.2 itojun /* If I'm not a router, ignore it. */
123 1.44 itojun if (ip6_accept_rtadv != 0 || !ip6_forwarding)
124 1.12 itojun goto freeit;
125 1.2 itojun
126 1.2 itojun /* Sanity checks */
127 1.2 itojun if (ip6->ip6_hlim != 255) {
128 1.20 itojun nd6log((LOG_ERR,
129 1.20 itojun "nd6_rs_input: invalid hlim (%d) from %s to %s on %s\n",
130 1.20 itojun ip6->ip6_hlim, ip6_sprintf(&ip6->ip6_src),
131 1.20 itojun ip6_sprintf(&ip6->ip6_dst), if_name(ifp)));
132 1.20 itojun goto bad;
133 1.2 itojun }
134 1.2 itojun
135 1.2 itojun /*
136 1.2 itojun * Don't update the neighbor cache, if src = ::.
137 1.2 itojun * This indicates that the src has no IP address assigned yet.
138 1.2 itojun */
139 1.2 itojun if (IN6_IS_ADDR_UNSPECIFIED(&saddr6))
140 1.12 itojun goto freeit;
141 1.12 itojun
142 1.12 itojun IP6_EXTHDR_GET(nd_rs, struct nd_router_solicit *, m, off, icmp6len);
143 1.12 itojun if (nd_rs == NULL) {
144 1.12 itojun icmp6stat.icp6s_tooshort++;
145 1.2 itojun return;
146 1.12 itojun }
147 1.2 itojun
148 1.2 itojun icmp6len -= sizeof(*nd_rs);
149 1.2 itojun nd6_option_init(nd_rs + 1, icmp6len, &ndopts);
150 1.2 itojun if (nd6_options(&ndopts) < 0) {
151 1.20 itojun nd6log((LOG_INFO,
152 1.20 itojun "nd6_rs_input: invalid ND option, ignored\n"));
153 1.20 itojun /* nd6_options have incremented stats */
154 1.12 itojun goto freeit;
155 1.2 itojun }
156 1.2 itojun
157 1.2 itojun if (ndopts.nd_opts_src_lladdr) {
158 1.2 itojun lladdr = (char *)(ndopts.nd_opts_src_lladdr + 1);
159 1.2 itojun lladdrlen = ndopts.nd_opts_src_lladdr->nd_opt_len << 3;
160 1.2 itojun }
161 1.2 itojun
162 1.2 itojun if (lladdr && ((ifp->if_addrlen + 2 + 7) & ~7) != lladdrlen) {
163 1.20 itojun nd6log((LOG_INFO,
164 1.2 itojun "nd6_rs_input: lladdrlen mismatch for %s "
165 1.2 itojun "(if %d, RS packet %d)\n",
166 1.32 itojun ip6_sprintf(&saddr6), ifp->if_addrlen, lladdrlen - 2));
167 1.20 itojun goto bad;
168 1.2 itojun }
169 1.2 itojun
170 1.6 itojun nd6_cache_lladdr(ifp, &saddr6, lladdr, lladdrlen, ND_ROUTER_SOLICIT, 0);
171 1.12 itojun
172 1.12 itojun freeit:
173 1.12 itojun m_freem(m);
174 1.20 itojun return;
175 1.20 itojun
176 1.20 itojun bad:
177 1.20 itojun icmp6stat.icp6s_badrs++;
178 1.20 itojun m_freem(m);
179 1.2 itojun }
180 1.2 itojun
181 1.2 itojun /*
182 1.2 itojun * Receive Router Advertisement Message.
183 1.2 itojun *
184 1.2 itojun * Based on RFC 2461
185 1.2 itojun * TODO: on-link bit on prefix information
186 1.2 itojun * TODO: ND_RA_FLAG_{OTHER,MANAGED} processing
187 1.2 itojun */
188 1.2 itojun void
189 1.64 christos nd6_ra_input(struct mbuf *m, int off, int icmp6len)
190 1.2 itojun {
191 1.2 itojun struct ifnet *ifp = m->m_pkthdr.rcvif;
192 1.29 itojun struct nd_ifinfo *ndi = ND_IFINFO(ifp);
193 1.2 itojun struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
194 1.12 itojun struct nd_router_advert *nd_ra;
195 1.2 itojun struct in6_addr saddr6 = ip6->ip6_src;
196 1.2 itojun #if 0
197 1.2 itojun struct in6_addr daddr6 = ip6->ip6_dst;
198 1.12 itojun int flags; /* = nd_ra->nd_ra_flags_reserved; */
199 1.2 itojun int is_managed = ((flags & ND_RA_FLAG_MANAGED) != 0);
200 1.2 itojun int is_other = ((flags & ND_RA_FLAG_OTHER) != 0);
201 1.2 itojun #endif
202 1.56 rpaulo int mcast = 0;
203 1.2 itojun union nd_opts ndopts;
204 1.2 itojun struct nd_defrouter *dr;
205 1.2 itojun
206 1.32 itojun /*
207 1.32 itojun * We only accept RAs only when
208 1.32 itojun * the system-wide variable allows the acceptance, and
209 1.33 itojun * per-interface variable allows RAs on the receiving interface.
210 1.32 itojun */
211 1.2 itojun if (ip6_accept_rtadv == 0)
212 1.12 itojun goto freeit;
213 1.32 itojun if (!(ndi->flags & ND6_IFF_ACCEPT_RTADV))
214 1.32 itojun goto freeit;
215 1.2 itojun
216 1.2 itojun if (ip6->ip6_hlim != 255) {
217 1.20 itojun nd6log((LOG_ERR,
218 1.20 itojun "nd6_ra_input: invalid hlim (%d) from %s to %s on %s\n",
219 1.20 itojun ip6->ip6_hlim, ip6_sprintf(&ip6->ip6_src),
220 1.20 itojun ip6_sprintf(&ip6->ip6_dst), if_name(ifp)));
221 1.20 itojun goto bad;
222 1.2 itojun }
223 1.2 itojun
224 1.2 itojun if (!IN6_IS_ADDR_LINKLOCAL(&saddr6)) {
225 1.20 itojun nd6log((LOG_ERR,
226 1.2 itojun "nd6_ra_input: src %s is not link-local\n",
227 1.20 itojun ip6_sprintf(&saddr6)));
228 1.20 itojun goto bad;
229 1.12 itojun }
230 1.12 itojun
231 1.12 itojun IP6_EXTHDR_GET(nd_ra, struct nd_router_advert *, m, off, icmp6len);
232 1.12 itojun if (nd_ra == NULL) {
233 1.12 itojun icmp6stat.icp6s_tooshort++;
234 1.2 itojun return;
235 1.2 itojun }
236 1.2 itojun
237 1.2 itojun icmp6len -= sizeof(*nd_ra);
238 1.2 itojun nd6_option_init(nd_ra + 1, icmp6len, &ndopts);
239 1.2 itojun if (nd6_options(&ndopts) < 0) {
240 1.20 itojun nd6log((LOG_INFO,
241 1.20 itojun "nd6_ra_input: invalid ND option, ignored\n"));
242 1.20 itojun /* nd6_options have incremented stats */
243 1.12 itojun goto freeit;
244 1.2 itojun }
245 1.2 itojun
246 1.2 itojun {
247 1.52 christos struct nd_defrouter drtr;
248 1.2 itojun u_int32_t advreachable = nd_ra->nd_ra_reachable;
249 1.2 itojun
250 1.56 rpaulo /* remember if this is a multicasted advertisement */
251 1.56 rpaulo if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst))
252 1.56 rpaulo mcast = 1;
253 1.56 rpaulo
254 1.56 rpaulo memset(&drtr, 0, sizeof(drtr));
255 1.52 christos drtr.rtaddr = saddr6;
256 1.52 christos drtr.flags = nd_ra->nd_ra_flags_reserved;
257 1.58 rpaulo drtr.rtlifetime = ntohs(nd_ra->nd_ra_router_lifetime);
258 1.59 kardel drtr.expire = time_second + drtr.rtlifetime;
259 1.52 christos drtr.ifp = ifp;
260 1.2 itojun /* unspecified or not? (RFC 2461 6.3.4) */
261 1.2 itojun if (advreachable) {
262 1.2 itojun NTOHL(advreachable);
263 1.2 itojun if (advreachable <= MAX_REACHABLE_TIME &&
264 1.2 itojun ndi->basereachable != advreachable) {
265 1.2 itojun ndi->basereachable = advreachable;
266 1.2 itojun ndi->reachable = ND_COMPUTE_RTIME(ndi->basereachable);
267 1.2 itojun ndi->recalctm = nd6_recalc_reachtm_interval; /* reset */
268 1.2 itojun }
269 1.2 itojun }
270 1.2 itojun if (nd_ra->nd_ra_retransmit)
271 1.2 itojun ndi->retrans = ntohl(nd_ra->nd_ra_retransmit);
272 1.2 itojun if (nd_ra->nd_ra_curhoplimit)
273 1.2 itojun ndi->chlim = nd_ra->nd_ra_curhoplimit;
274 1.52 christos dr = defrtrlist_update(&drtr);
275 1.2 itojun }
276 1.2 itojun
277 1.2 itojun /*
278 1.2 itojun * prefix
279 1.2 itojun */
280 1.2 itojun if (ndopts.nd_opts_pi) {
281 1.2 itojun struct nd_opt_hdr *pt;
282 1.32 itojun struct nd_opt_prefix_info *pi = NULL;
283 1.56 rpaulo struct nd_prefixctl pr;
284 1.2 itojun
285 1.2 itojun for (pt = (struct nd_opt_hdr *)ndopts.nd_opts_pi;
286 1.2 itojun pt <= (struct nd_opt_hdr *)ndopts.nd_opts_pi_end;
287 1.63 christos pt = (struct nd_opt_hdr *)((char *)pt +
288 1.2 itojun (pt->nd_opt_len << 3))) {
289 1.2 itojun if (pt->nd_opt_type != ND_OPT_PREFIX_INFORMATION)
290 1.2 itojun continue;
291 1.2 itojun pi = (struct nd_opt_prefix_info *)pt;
292 1.2 itojun
293 1.2 itojun if (pi->nd_opt_pi_len != 4) {
294 1.22 itojun nd6log((LOG_INFO,
295 1.22 itojun "nd6_ra_input: invalid option "
296 1.22 itojun "len %d for prefix information option, "
297 1.22 itojun "ignored\n", pi->nd_opt_pi_len));
298 1.2 itojun continue;
299 1.2 itojun }
300 1.2 itojun
301 1.2 itojun if (128 < pi->nd_opt_pi_prefix_len) {
302 1.22 itojun nd6log((LOG_INFO,
303 1.22 itojun "nd6_ra_input: invalid prefix "
304 1.22 itojun "len %d for prefix information option, "
305 1.22 itojun "ignored\n", pi->nd_opt_pi_prefix_len));
306 1.2 itojun continue;
307 1.2 itojun }
308 1.2 itojun
309 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&pi->nd_opt_pi_prefix)
310 1.2 itojun || IN6_IS_ADDR_LINKLOCAL(&pi->nd_opt_pi_prefix)) {
311 1.22 itojun nd6log((LOG_INFO,
312 1.22 itojun "nd6_ra_input: invalid prefix "
313 1.22 itojun "%s, ignored\n",
314 1.22 itojun ip6_sprintf(&pi->nd_opt_pi_prefix)));
315 1.2 itojun continue;
316 1.2 itojun }
317 1.2 itojun
318 1.2 itojun bzero(&pr, sizeof(pr));
319 1.2 itojun pr.ndpr_prefix.sin6_family = AF_INET6;
320 1.2 itojun pr.ndpr_prefix.sin6_len = sizeof(pr.ndpr_prefix);
321 1.2 itojun pr.ndpr_prefix.sin6_addr = pi->nd_opt_pi_prefix;
322 1.2 itojun pr.ndpr_ifp = (struct ifnet *)m->m_pkthdr.rcvif;
323 1.2 itojun
324 1.2 itojun pr.ndpr_raf_onlink = (pi->nd_opt_pi_flags_reserved &
325 1.56 rpaulo ND_OPT_PI_FLAG_ONLINK) ? 1 : 0;
326 1.2 itojun pr.ndpr_raf_auto = (pi->nd_opt_pi_flags_reserved &
327 1.56 rpaulo ND_OPT_PI_FLAG_AUTO) ? 1 : 0;
328 1.2 itojun pr.ndpr_plen = pi->nd_opt_pi_prefix_len;
329 1.2 itojun pr.ndpr_vltime = ntohl(pi->nd_opt_pi_valid_time);
330 1.32 itojun pr.ndpr_pltime = ntohl(pi->nd_opt_pi_preferred_time);
331 1.2 itojun
332 1.56 rpaulo (void)prelist_update(&pr, dr, m, mcast);
333 1.2 itojun }
334 1.2 itojun }
335 1.2 itojun
336 1.2 itojun /*
337 1.2 itojun * MTU
338 1.2 itojun */
339 1.2 itojun if (ndopts.nd_opts_mtu && ndopts.nd_opts_mtu->nd_opt_mtu_len == 1) {
340 1.32 itojun u_long mtu;
341 1.30 itojun u_long maxmtu;
342 1.2 itojun
343 1.32 itojun mtu = ntohl(ndopts.nd_opts_mtu->nd_opt_mtu_mtu);
344 1.32 itojun
345 1.2 itojun /* lower bound */
346 1.2 itojun if (mtu < IPV6_MMTU) {
347 1.22 itojun nd6log((LOG_INFO, "nd6_ra_input: bogus mtu option "
348 1.32 itojun "mtu=%lu sent from %s, ignoring\n",
349 1.22 itojun mtu, ip6_sprintf(&ip6->ip6_src)));
350 1.2 itojun goto skip;
351 1.2 itojun }
352 1.2 itojun
353 1.2 itojun /* upper bound */
354 1.30 itojun maxmtu = (ndi->maxmtu && ndi->maxmtu < ifp->if_mtu)
355 1.30 itojun ? ndi->maxmtu : ifp->if_mtu;
356 1.30 itojun if (mtu <= maxmtu) {
357 1.30 itojun int change = (ndi->linkmtu != mtu);
358 1.30 itojun
359 1.30 itojun ndi->linkmtu = mtu;
360 1.30 itojun if (change) /* in6_maxmtu may change */
361 1.30 itojun in6_setmaxmtu();
362 1.2 itojun } else {
363 1.30 itojun nd6log((LOG_INFO, "nd6_ra_input: bogus mtu "
364 1.32 itojun "mtu=%lu sent from %s; "
365 1.30 itojun "exceeds maxmtu %lu, ignoring\n",
366 1.30 itojun mtu, ip6_sprintf(&ip6->ip6_src), maxmtu));
367 1.2 itojun }
368 1.2 itojun }
369 1.2 itojun
370 1.2 itojun skip:
371 1.33 itojun
372 1.2 itojun /*
373 1.26 itojun * Source link layer address
374 1.2 itojun */
375 1.2 itojun {
376 1.2 itojun char *lladdr = NULL;
377 1.2 itojun int lladdrlen = 0;
378 1.33 itojun
379 1.2 itojun if (ndopts.nd_opts_src_lladdr) {
380 1.2 itojun lladdr = (char *)(ndopts.nd_opts_src_lladdr + 1);
381 1.2 itojun lladdrlen = ndopts.nd_opts_src_lladdr->nd_opt_len << 3;
382 1.2 itojun }
383 1.2 itojun
384 1.2 itojun if (lladdr && ((ifp->if_addrlen + 2 + 7) & ~7) != lladdrlen) {
385 1.20 itojun nd6log((LOG_INFO,
386 1.2 itojun "nd6_ra_input: lladdrlen mismatch for %s "
387 1.30 itojun "(if %d, RA packet %d)\n", ip6_sprintf(&saddr6),
388 1.30 itojun ifp->if_addrlen, lladdrlen - 2));
389 1.20 itojun goto bad;
390 1.2 itojun }
391 1.2 itojun
392 1.6 itojun nd6_cache_lladdr(ifp, &saddr6, lladdr, lladdrlen, ND_ROUTER_ADVERT, 0);
393 1.7 itojun
394 1.7 itojun /*
395 1.7 itojun * Installing a link-layer address might change the state of the
396 1.7 itojun * router's neighbor cache, which might also affect our on-link
397 1.7 itojun * detection of adveritsed prefixes.
398 1.7 itojun */
399 1.7 itojun pfxlist_onlink_check();
400 1.2 itojun }
401 1.12 itojun
402 1.20 itojun freeit:
403 1.20 itojun m_freem(m);
404 1.20 itojun return;
405 1.20 itojun
406 1.20 itojun bad:
407 1.20 itojun icmp6stat.icp6s_badra++;
408 1.12 itojun m_freem(m);
409 1.2 itojun }
410 1.2 itojun
411 1.2 itojun /*
412 1.45 wiz * default router list processing sub routines
413 1.2 itojun */
414 1.32 itojun
415 1.32 itojun /* tell the change to user processes watching the routing socket. */
416 1.32 itojun static void
417 1.64 christos nd6_rtmsg(int cmd, struct rtentry *rt)
418 1.32 itojun {
419 1.32 itojun struct rt_addrinfo info;
420 1.32 itojun
421 1.63 christos bzero((void *)&info, sizeof(info));
422 1.66 dyoung info.rti_info[RTAX_DST] = rt_getkey(rt);
423 1.32 itojun info.rti_info[RTAX_GATEWAY] = rt->rt_gateway;
424 1.32 itojun info.rti_info[RTAX_NETMASK] = rt_mask(rt);
425 1.39 itojun if (rt->rt_ifp) {
426 1.42 itojun info.rti_info[RTAX_IFP] =
427 1.42 itojun TAILQ_FIRST(&rt->rt_ifp->if_addrlist)->ifa_addr;
428 1.39 itojun info.rti_info[RTAX_IFA] = rt->rt_ifa->ifa_addr;
429 1.39 itojun }
430 1.32 itojun
431 1.32 itojun rt_missmsg(cmd, &info, rt->rt_flags, 0);
432 1.32 itojun }
433 1.32 itojun
434 1.2 itojun void
435 1.64 christos defrouter_addreq(struct nd_defrouter *new)
436 1.2 itojun {
437 1.2 itojun struct sockaddr_in6 def, mask, gate;
438 1.32 itojun struct rtentry *newrt = NULL;
439 1.2 itojun int s;
440 1.32 itojun int error;
441 1.2 itojun
442 1.56 rpaulo memset(&def, 0, sizeof(def));
443 1.56 rpaulo memset(&mask, 0, sizeof(mask));
444 1.56 rpaulo memset(&gate, 0,sizeof(gate)); /* for safety */
445 1.2 itojun
446 1.32 itojun def.sin6_len = mask.sin6_len = gate.sin6_len =
447 1.32 itojun sizeof(struct sockaddr_in6);
448 1.2 itojun def.sin6_family = mask.sin6_family = gate.sin6_family = AF_INET6;
449 1.2 itojun gate.sin6_addr = new->rtaddr;
450 1.32 itojun #ifndef SCOPEDROUTING
451 1.32 itojun gate.sin6_scope_id = 0; /* XXX */
452 1.32 itojun #endif
453 1.2 itojun
454 1.4 itojun s = splsoftnet();
455 1.32 itojun error = rtrequest(RTM_ADD, (struct sockaddr *)&def,
456 1.32 itojun (struct sockaddr *)&gate, (struct sockaddr *)&mask,
457 1.32 itojun RTF_GATEWAY, &newrt);
458 1.32 itojun if (newrt) {
459 1.32 itojun nd6_rtmsg(RTM_ADD, newrt); /* tell user process */
460 1.32 itojun newrt->rt_refcnt--;
461 1.32 itojun }
462 1.32 itojun if (error == 0)
463 1.32 itojun new->installed = 1;
464 1.2 itojun splx(s);
465 1.2 itojun return;
466 1.2 itojun }
467 1.2 itojun
468 1.2 itojun struct nd_defrouter *
469 1.66 dyoung defrouter_lookup(const struct in6_addr *addr, struct ifnet *ifp)
470 1.2 itojun {
471 1.2 itojun struct nd_defrouter *dr;
472 1.2 itojun
473 1.66 dyoung TAILQ_FOREACH(dr, &nd_defrouter, dr_entry) {
474 1.66 dyoung if (dr->ifp == ifp && IN6_ARE_ADDR_EQUAL(addr, &dr->rtaddr))
475 1.66 dyoung break;
476 1.7 itojun }
477 1.2 itojun
478 1.66 dyoung return dr; /* search failed */
479 1.2 itojun }
480 1.2 itojun
481 1.2 itojun void
482 1.64 christos defrtrlist_del(struct nd_defrouter *dr)
483 1.2 itojun {
484 1.2 itojun struct nd_defrouter *deldr = NULL;
485 1.2 itojun struct nd_prefix *pr;
486 1.2 itojun
487 1.2 itojun /*
488 1.2 itojun * Flush all the routing table entries that use the router
489 1.2 itojun * as a next hop.
490 1.2 itojun */
491 1.32 itojun if (!ip6_forwarding && ip6_accept_rtadv) /* XXX: better condition? */
492 1.2 itojun rt6_flush(&dr->rtaddr, dr->ifp);
493 1.32 itojun
494 1.32 itojun if (dr->installed) {
495 1.32 itojun deldr = dr;
496 1.32 itojun defrouter_delreq(dr);
497 1.2 itojun }
498 1.7 itojun TAILQ_REMOVE(&nd_defrouter, dr, dr_entry);
499 1.2 itojun
500 1.2 itojun /*
501 1.2 itojun * Also delete all the pointers to the router in each prefix lists.
502 1.2 itojun */
503 1.62 dyoung LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
504 1.2 itojun struct nd_pfxrouter *pfxrtr;
505 1.2 itojun if ((pfxrtr = pfxrtr_lookup(pr, dr)) != NULL)
506 1.2 itojun pfxrtr_del(pfxrtr);
507 1.2 itojun }
508 1.2 itojun pfxlist_onlink_check();
509 1.2 itojun
510 1.2 itojun /*
511 1.7 itojun * If the router is the primary one, choose a new one.
512 1.7 itojun * Note that defrouter_select() will remove the current gateway
513 1.7 itojun * from the routing table.
514 1.2 itojun */
515 1.2 itojun if (deldr)
516 1.7 itojun defrouter_select();
517 1.7 itojun
518 1.2 itojun free(dr, M_IP6NDP);
519 1.2 itojun }
520 1.2 itojun
521 1.7 itojun /*
522 1.32 itojun * Remove the default route for a given router.
523 1.32 itojun * This is just a subroutine function for defrouter_select(), and should
524 1.32 itojun * not be called from anywhere else.
525 1.32 itojun */
526 1.32 itojun static void
527 1.64 christos defrouter_delreq(struct nd_defrouter *dr)
528 1.32 itojun {
529 1.32 itojun struct sockaddr_in6 def, mask, gw;
530 1.32 itojun struct rtentry *oldrt = NULL;
531 1.32 itojun
532 1.35 itojun #ifdef DIAGNOSTIC
533 1.56 rpaulo if (dr == NULL)
534 1.35 itojun panic("dr == NULL in defrouter_delreq");
535 1.35 itojun #endif
536 1.35 itojun
537 1.56 rpaulo bzero(&def, sizeof(def));
538 1.56 rpaulo bzero(&mask, sizeof(mask));
539 1.56 rpaulo bzero(&gw, sizeof(gw)); /* for safety */
540 1.32 itojun
541 1.32 itojun def.sin6_len = mask.sin6_len = gw.sin6_len =
542 1.32 itojun sizeof(struct sockaddr_in6);
543 1.32 itojun def.sin6_family = mask.sin6_family = gw.sin6_family = AF_INET6;
544 1.32 itojun gw.sin6_addr = dr->rtaddr;
545 1.32 itojun #ifndef SCOPEDROUTING
546 1.32 itojun gw.sin6_scope_id = 0; /* XXX */
547 1.32 itojun #endif
548 1.32 itojun
549 1.32 itojun rtrequest(RTM_DELETE, (struct sockaddr *)&def,
550 1.35 itojun (struct sockaddr *)&gw,
551 1.32 itojun (struct sockaddr *)&mask, RTF_GATEWAY, &oldrt);
552 1.32 itojun if (oldrt) {
553 1.32 itojun nd6_rtmsg(RTM_DELETE, oldrt);
554 1.32 itojun if (oldrt->rt_refcnt <= 0) {
555 1.32 itojun /*
556 1.32 itojun * XXX: borrowed from the RTM_DELETE case of
557 1.32 itojun * rtrequest().
558 1.32 itojun */
559 1.32 itojun oldrt->rt_refcnt++;
560 1.32 itojun rtfree(oldrt);
561 1.32 itojun }
562 1.32 itojun }
563 1.32 itojun
564 1.35 itojun dr->installed = 0;
565 1.32 itojun }
566 1.32 itojun
567 1.32 itojun /*
568 1.32 itojun * remove all default routes from default router list
569 1.32 itojun */
570 1.32 itojun void
571 1.32 itojun defrouter_reset()
572 1.32 itojun {
573 1.32 itojun struct nd_defrouter *dr;
574 1.32 itojun
575 1.32 itojun for (dr = TAILQ_FIRST(&nd_defrouter); dr;
576 1.32 itojun dr = TAILQ_NEXT(dr, dr_entry))
577 1.32 itojun defrouter_delreq(dr);
578 1.32 itojun
579 1.32 itojun /*
580 1.32 itojun * XXX should we also nuke any default routers in the kernel, by
581 1.32 itojun * going through them by rtalloc1()?
582 1.32 itojun */
583 1.32 itojun }
584 1.32 itojun
585 1.32 itojun /*
586 1.32 itojun * Default Router Selection according to Section 6.3.6 of RFC 2461 and
587 1.32 itojun * draft-ietf-ipngwg-router-selection:
588 1.32 itojun * 1) Routers that are reachable or probably reachable should be preferred.
589 1.32 itojun * If we have more than one (probably) reachable router, prefer ones
590 1.32 itojun * with the highest router preference.
591 1.7 itojun * 2) When no routers on the list are known to be reachable or
592 1.7 itojun * probably reachable, routers SHOULD be selected in a round-robin
593 1.32 itojun * fashion, regardless of router preference values.
594 1.7 itojun * 3) If the Default Router List is empty, assume that all
595 1.7 itojun * destinations are on-link.
596 1.32 itojun *
597 1.32 itojun * We assume nd_defrouter is sorted by router preference value.
598 1.32 itojun * Since the code below covers both with and without router preference cases,
599 1.32 itojun * we do not need to classify the cases by ifdef.
600 1.32 itojun *
601 1.32 itojun * At this moment, we do not try to install more than one default router,
602 1.32 itojun * even when the multipath routing is available, because we're not sure about
603 1.32 itojun * the benefits for stub hosts comparing to the risk of making the code
604 1.32 itojun * complicated and the possibility of introducing bugs.
605 1.7 itojun */
606 1.7 itojun void
607 1.7 itojun defrouter_select()
608 1.7 itojun {
609 1.7 itojun int s = splsoftnet();
610 1.32 itojun struct nd_defrouter *dr, *selected_dr = NULL, *installed_dr = NULL;
611 1.7 itojun struct rtentry *rt = NULL;
612 1.7 itojun struct llinfo_nd6 *ln = NULL;
613 1.7 itojun
614 1.7 itojun /*
615 1.32 itojun * This function should be called only when acting as an autoconfigured
616 1.32 itojun * host. Although the remaining part of this function is not effective
617 1.32 itojun * if the node is not an autoconfigured host, we explicitly exclude
618 1.32 itojun * such cases here for safety.
619 1.7 itojun */
620 1.32 itojun if (ip6_forwarding || !ip6_accept_rtadv) {
621 1.32 itojun nd6log((LOG_WARNING,
622 1.32 itojun "defrouter_select: called unexpectedly (forwarding=%d, "
623 1.32 itojun "accept_rtadv=%d)\n", ip6_forwarding, ip6_accept_rtadv));
624 1.32 itojun splx(s);
625 1.32 itojun return;
626 1.7 itojun }
627 1.7 itojun
628 1.32 itojun /*
629 1.32 itojun * Let's handle easy case (3) first:
630 1.49 itojun * If default router list is empty, there's nothing to be done.
631 1.32 itojun */
632 1.32 itojun if (!TAILQ_FIRST(&nd_defrouter)) {
633 1.32 itojun splx(s);
634 1.32 itojun return;
635 1.32 itojun }
636 1.32 itojun
637 1.32 itojun /*
638 1.32 itojun * Search for a (probably) reachable router from the list.
639 1.32 itojun * We just pick up the first reachable one (if any), assuming that
640 1.32 itojun * the ordering rule of the list described in defrtrlist_update().
641 1.32 itojun */
642 1.32 itojun for (dr = TAILQ_FIRST(&nd_defrouter); dr;
643 1.32 itojun dr = TAILQ_NEXT(dr, dr_entry)) {
644 1.56 rpaulo if (selected_dr == NULL &&
645 1.56 rpaulo (rt = nd6_lookup(&dr->rtaddr, 0, dr->ifp)) != NULL &&
646 1.56 rpaulo (ln = (struct llinfo_nd6 *)rt->rt_llinfo) != NULL &&
647 1.32 itojun ND6_IS_LLINFO_PROBREACH(ln)) {
648 1.32 itojun selected_dr = dr;
649 1.32 itojun }
650 1.32 itojun
651 1.32 itojun if (dr->installed && !installed_dr)
652 1.32 itojun installed_dr = dr;
653 1.32 itojun else if (dr->installed && installed_dr) {
654 1.32 itojun /* this should not happen. warn for diagnosis. */
655 1.32 itojun log(LOG_ERR, "defrouter_select: more than one router"
656 1.32 itojun " is installed\n");
657 1.32 itojun }
658 1.32 itojun }
659 1.32 itojun /*
660 1.32 itojun * If none of the default routers was found to be reachable,
661 1.32 itojun * round-robin the list regardless of preference.
662 1.32 itojun * Otherwise, if we have an installed router, check if the selected
663 1.32 itojun * (reachable) router should really be preferred to the installed one.
664 1.32 itojun * We only prefer the new router when the old one is not reachable
665 1.32 itojun * or when the new one has a really higher preference value.
666 1.32 itojun */
667 1.56 rpaulo if (selected_dr == NULL) {
668 1.56 rpaulo if (installed_dr == NULL || !TAILQ_NEXT(installed_dr, dr_entry))
669 1.32 itojun selected_dr = TAILQ_FIRST(&nd_defrouter);
670 1.32 itojun else
671 1.32 itojun selected_dr = TAILQ_NEXT(installed_dr, dr_entry);
672 1.32 itojun } else if (installed_dr &&
673 1.32 itojun (rt = nd6_lookup(&installed_dr->rtaddr, 0, installed_dr->ifp)) &&
674 1.32 itojun (ln = (struct llinfo_nd6 *)rt->rt_llinfo) &&
675 1.32 itojun ND6_IS_LLINFO_PROBREACH(ln) &&
676 1.32 itojun rtpref(selected_dr) <= rtpref(installed_dr)) {
677 1.32 itojun selected_dr = installed_dr;
678 1.32 itojun }
679 1.32 itojun
680 1.32 itojun /*
681 1.32 itojun * If the selected router is different than the installed one,
682 1.32 itojun * remove the installed router and install the selected one.
683 1.32 itojun * Note that the selected router is never NULL here.
684 1.32 itojun */
685 1.32 itojun if (installed_dr != selected_dr) {
686 1.32 itojun if (installed_dr)
687 1.32 itojun defrouter_delreq(installed_dr);
688 1.32 itojun defrouter_addreq(selected_dr);
689 1.7 itojun }
690 1.7 itojun
691 1.7 itojun splx(s);
692 1.7 itojun return;
693 1.7 itojun }
694 1.7 itojun
695 1.32 itojun /*
696 1.32 itojun * for default router selection
697 1.32 itojun * regards router-preference field as a 2-bit signed integer
698 1.32 itojun */
699 1.32 itojun static int
700 1.32 itojun rtpref(struct nd_defrouter *dr)
701 1.32 itojun {
702 1.32 itojun switch (dr->flags & ND_RA_FLAG_RTPREF_MASK) {
703 1.32 itojun case ND_RA_FLAG_RTPREF_HIGH:
704 1.56 rpaulo return (RTPREF_HIGH);
705 1.32 itojun case ND_RA_FLAG_RTPREF_MEDIUM:
706 1.58 rpaulo case ND_RA_FLAG_RTPREF_RSV:
707 1.56 rpaulo return (RTPREF_MEDIUM);
708 1.32 itojun case ND_RA_FLAG_RTPREF_LOW:
709 1.56 rpaulo return (RTPREF_LOW);
710 1.32 itojun default:
711 1.32 itojun /*
712 1.32 itojun * This case should never happen. If it did, it would mean a
713 1.32 itojun * serious bug of kernel internal. We thus always bark here.
714 1.32 itojun * Or, can we even panic?
715 1.32 itojun */
716 1.56 rpaulo log(LOG_ERR, "rtpref: impossible RA flag %x\n", dr->flags);
717 1.56 rpaulo return (RTPREF_INVALID);
718 1.32 itojun }
719 1.32 itojun /* NOTREACHED */
720 1.32 itojun }
721 1.32 itojun
722 1.2 itojun static struct nd_defrouter *
723 1.64 christos defrtrlist_update(struct nd_defrouter *new)
724 1.2 itojun {
725 1.2 itojun struct nd_defrouter *dr, *n;
726 1.4 itojun int s = splsoftnet();
727 1.2 itojun
728 1.2 itojun if ((dr = defrouter_lookup(&new->rtaddr, new->ifp)) != NULL) {
729 1.2 itojun /* entry exists */
730 1.2 itojun if (new->rtlifetime == 0) {
731 1.2 itojun defrtrlist_del(dr);
732 1.2 itojun dr = NULL;
733 1.2 itojun } else {
734 1.32 itojun int oldpref = rtpref(dr);
735 1.32 itojun
736 1.2 itojun /* override */
737 1.2 itojun dr->flags = new->flags; /* xxx flag check */
738 1.2 itojun dr->rtlifetime = new->rtlifetime;
739 1.2 itojun dr->expire = new->expire;
740 1.32 itojun
741 1.32 itojun /*
742 1.32 itojun * If the preference does not change, there's no need
743 1.32 itojun * to sort the entries.
744 1.32 itojun */
745 1.32 itojun if (rtpref(new) == oldpref) {
746 1.32 itojun splx(s);
747 1.36 itojun return (dr);
748 1.32 itojun }
749 1.32 itojun
750 1.32 itojun /*
751 1.32 itojun * preferred router may be changed, so relocate
752 1.32 itojun * this router.
753 1.32 itojun * XXX: calling TAILQ_REMOVE directly is a bad manner.
754 1.32 itojun * However, since defrtrlist_del() has many side
755 1.32 itojun * effects, we intentionally do so here.
756 1.32 itojun * defrouter_select() below will handle routing
757 1.32 itojun * changes later.
758 1.32 itojun */
759 1.32 itojun TAILQ_REMOVE(&nd_defrouter, dr, dr_entry);
760 1.32 itojun n = dr;
761 1.32 itojun goto insert;
762 1.2 itojun }
763 1.2 itojun splx(s);
764 1.36 itojun return (dr);
765 1.2 itojun }
766 1.2 itojun
767 1.2 itojun /* entry does not exist */
768 1.2 itojun if (new->rtlifetime == 0) {
769 1.2 itojun splx(s);
770 1.36 itojun return (NULL);
771 1.2 itojun }
772 1.2 itojun
773 1.2 itojun n = (struct nd_defrouter *)malloc(sizeof(*n), M_IP6NDP, M_NOWAIT);
774 1.2 itojun if (n == NULL) {
775 1.2 itojun splx(s);
776 1.36 itojun return (NULL);
777 1.2 itojun }
778 1.2 itojun bzero(n, sizeof(*n));
779 1.2 itojun *n = *new;
780 1.7 itojun
781 1.32 itojun insert:
782 1.7 itojun /*
783 1.32 itojun * Insert the new router in the Default Router List;
784 1.32 itojun * The Default Router List should be in the descending order
785 1.32 itojun * of router-preferece. Routers with the same preference are
786 1.32 itojun * sorted in the arriving time order.
787 1.7 itojun */
788 1.32 itojun
789 1.32 itojun /* insert at the end of the group */
790 1.32 itojun for (dr = TAILQ_FIRST(&nd_defrouter); dr;
791 1.32 itojun dr = TAILQ_NEXT(dr, dr_entry)) {
792 1.32 itojun if (rtpref(n) > rtpref(dr))
793 1.32 itojun break;
794 1.32 itojun }
795 1.32 itojun if (dr)
796 1.32 itojun TAILQ_INSERT_BEFORE(dr, n, dr_entry);
797 1.32 itojun else
798 1.32 itojun TAILQ_INSERT_TAIL(&nd_defrouter, n, dr_entry);
799 1.32 itojun
800 1.32 itojun defrouter_select();
801 1.32 itojun
802 1.2 itojun splx(s);
803 1.33 itojun
804 1.36 itojun return (n);
805 1.2 itojun }
806 1.2 itojun
807 1.2 itojun static struct nd_pfxrouter *
808 1.64 christos pfxrtr_lookup(struct nd_prefix *pr, struct nd_defrouter *dr)
809 1.2 itojun {
810 1.2 itojun struct nd_pfxrouter *search;
811 1.33 itojun
812 1.62 dyoung LIST_FOREACH(search, &pr->ndpr_advrtrs, pfr_entry) {
813 1.2 itojun if (search->router == dr)
814 1.2 itojun break;
815 1.2 itojun }
816 1.2 itojun
817 1.36 itojun return (search);
818 1.2 itojun }
819 1.2 itojun
820 1.2 itojun static void
821 1.64 christos pfxrtr_add(struct nd_prefix *pr, struct nd_defrouter *dr)
822 1.2 itojun {
823 1.2 itojun struct nd_pfxrouter *new;
824 1.2 itojun
825 1.2 itojun new = (struct nd_pfxrouter *)malloc(sizeof(*new), M_IP6NDP, M_NOWAIT);
826 1.2 itojun if (new == NULL)
827 1.2 itojun return;
828 1.2 itojun bzero(new, sizeof(*new));
829 1.2 itojun new->router = dr;
830 1.2 itojun
831 1.2 itojun LIST_INSERT_HEAD(&pr->ndpr_advrtrs, new, pfr_entry);
832 1.2 itojun
833 1.2 itojun pfxlist_onlink_check();
834 1.2 itojun }
835 1.2 itojun
836 1.2 itojun static void
837 1.64 christos pfxrtr_del(struct nd_pfxrouter *pfr)
838 1.2 itojun {
839 1.2 itojun LIST_REMOVE(pfr, pfr_entry);
840 1.2 itojun free(pfr, M_IP6NDP);
841 1.2 itojun }
842 1.2 itojun
843 1.32 itojun struct nd_prefix *
844 1.64 christos nd6_prefix_lookup(struct nd_prefixctl *key)
845 1.2 itojun {
846 1.2 itojun struct nd_prefix *search;
847 1.2 itojun
848 1.62 dyoung LIST_FOREACH(search, &nd_prefix, ndpr_entry) {
849 1.56 rpaulo if (key->ndpr_ifp == search->ndpr_ifp &&
850 1.56 rpaulo key->ndpr_plen == search->ndpr_plen &&
851 1.56 rpaulo in6_are_prefix_equal(&key->ndpr_prefix.sin6_addr,
852 1.56 rpaulo &search->ndpr_prefix.sin6_addr, key->ndpr_plen)) {
853 1.2 itojun break;
854 1.2 itojun }
855 1.2 itojun }
856 1.2 itojun
857 1.36 itojun return (search);
858 1.2 itojun }
859 1.2 itojun
860 1.32 itojun int
861 1.64 christos nd6_prelist_add(struct nd_prefixctl *pr, struct nd_defrouter *dr,
862 1.64 christos struct nd_prefix **newp)
863 1.2 itojun {
864 1.32 itojun struct nd_prefix *new = NULL;
865 1.2 itojun int i, s;
866 1.56 rpaulo int error;
867 1.2 itojun
868 1.56 rpaulo error = 0;
869 1.2 itojun new = (struct nd_prefix *)malloc(sizeof(*new), M_IP6NDP, M_NOWAIT);
870 1.2 itojun if (new == NULL)
871 1.2 itojun return ENOMEM;
872 1.2 itojun bzero(new, sizeof(*new));
873 1.56 rpaulo new->ndpr_ifp = pr->ndpr_ifp;
874 1.56 rpaulo new->ndpr_prefix = pr->ndpr_prefix;
875 1.56 rpaulo new->ndpr_plen = pr->ndpr_plen;
876 1.56 rpaulo new->ndpr_vltime = pr->ndpr_vltime;
877 1.56 rpaulo new->ndpr_pltime = pr->ndpr_pltime;
878 1.56 rpaulo new->ndpr_flags = pr->ndpr_flags;
879 1.56 rpaulo if ((error = in6_init_prefix_ltimes(new)) != 0) {
880 1.56 rpaulo free(new, M_IP6NDP);
881 1.56 rpaulo return(error);
882 1.56 rpaulo }
883 1.59 kardel new->ndpr_lastupdate = time_second;
884 1.32 itojun if (newp != NULL)
885 1.32 itojun *newp = new;
886 1.2 itojun
887 1.55 rpaulo /* initialization */
888 1.2 itojun LIST_INIT(&new->ndpr_advrtrs);
889 1.2 itojun in6_prefixlen2mask(&new->ndpr_mask, new->ndpr_plen);
890 1.2 itojun /* make prefix in the canonical form */
891 1.2 itojun for (i = 0; i < 4; i++)
892 1.2 itojun new->ndpr_prefix.sin6_addr.s6_addr32[i] &=
893 1.32 itojun new->ndpr_mask.s6_addr32[i];
894 1.2 itojun
895 1.4 itojun s = splsoftnet();
896 1.2 itojun /* link ndpr_entry to nd_prefix list */
897 1.2 itojun LIST_INSERT_HEAD(&nd_prefix, new, ndpr_entry);
898 1.2 itojun splx(s);
899 1.2 itojun
900 1.32 itojun /* ND_OPT_PI_FLAG_ONLINK processing */
901 1.32 itojun if (new->ndpr_raf_onlink) {
902 1.32 itojun int e;
903 1.32 itojun
904 1.32 itojun if ((e = nd6_prefix_onlink(new)) != 0) {
905 1.32 itojun nd6log((LOG_ERR, "nd6_prelist_add: failed to make "
906 1.32 itojun "the prefix %s/%d on-link on %s (errno=%d)\n",
907 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
908 1.32 itojun pr->ndpr_plen, if_name(pr->ndpr_ifp), e));
909 1.32 itojun /* proceed anyway. XXX: is it correct? */
910 1.32 itojun }
911 1.32 itojun }
912 1.32 itojun
913 1.2 itojun if (dr)
914 1.2 itojun pfxrtr_add(new, dr);
915 1.2 itojun
916 1.2 itojun return 0;
917 1.2 itojun }
918 1.2 itojun
919 1.2 itojun void
920 1.64 christos prelist_remove(struct nd_prefix *pr)
921 1.2 itojun {
922 1.2 itojun struct nd_pfxrouter *pfr, *next;
923 1.32 itojun int e, s;
924 1.32 itojun
925 1.32 itojun /* make sure to invalidate the prefix until it is really freed. */
926 1.32 itojun pr->ndpr_vltime = 0;
927 1.32 itojun pr->ndpr_pltime = 0;
928 1.32 itojun #if 0
929 1.32 itojun /*
930 1.32 itojun * Though these flags are now meaningless, we'd rather keep the value
931 1.32 itojun * not to confuse users when executing "ndp -p".
932 1.32 itojun */
933 1.32 itojun pr->ndpr_raf_onlink = 0;
934 1.32 itojun pr->ndpr_raf_auto = 0;
935 1.32 itojun #endif
936 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_ONLINK) != 0 &&
937 1.32 itojun (e = nd6_prefix_offlink(pr)) != 0) {
938 1.32 itojun nd6log((LOG_ERR, "prelist_remove: failed to make %s/%d offlink "
939 1.32 itojun "on %s, errno=%d\n",
940 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
941 1.32 itojun pr->ndpr_plen, if_name(pr->ndpr_ifp), e));
942 1.32 itojun /* what should we do? */
943 1.32 itojun }
944 1.32 itojun
945 1.32 itojun if (pr->ndpr_refcnt > 0)
946 1.32 itojun return; /* notice here? */
947 1.2 itojun
948 1.4 itojun s = splsoftnet();
949 1.2 itojun /* unlink ndpr_entry from nd_prefix list */
950 1.2 itojun LIST_REMOVE(pr, ndpr_entry);
951 1.2 itojun
952 1.2 itojun /* free list of routers that adversed the prefix */
953 1.62 dyoung for (pfr = LIST_FIRST(&pr->ndpr_advrtrs); pfr != NULL; pfr = next) {
954 1.62 dyoung next = LIST_NEXT(pfr, pfr_entry);
955 1.2 itojun
956 1.2 itojun free(pfr, M_IP6NDP);
957 1.2 itojun }
958 1.21 itojun splx(s);
959 1.21 itojun
960 1.2 itojun free(pr, M_IP6NDP);
961 1.2 itojun
962 1.2 itojun pfxlist_onlink_check();
963 1.2 itojun }
964 1.2 itojun
965 1.56 rpaulo static int
966 1.64 christos prelist_update(struct nd_prefixctl *new,
967 1.64 christos struct nd_defrouter *dr, /* may be NULL */
968 1.64 christos struct mbuf *m,
969 1.64 christos int mcast)
970 1.2 itojun {
971 1.32 itojun struct in6_ifaddr *ia6 = NULL, *ia6_match = NULL;
972 1.32 itojun struct ifaddr *ifa;
973 1.32 itojun struct ifnet *ifp = new->ndpr_ifp;
974 1.2 itojun struct nd_prefix *pr;
975 1.4 itojun int s = splsoftnet();
976 1.2 itojun int error = 0;
977 1.56 rpaulo int newprefix = 0;
978 1.2 itojun int auth;
979 1.32 itojun struct in6_addrlifetime lt6_tmp;
980 1.2 itojun
981 1.7 itojun auth = 0;
982 1.2 itojun if (m) {
983 1.2 itojun /*
984 1.2 itojun * Authenticity for NA consists authentication for
985 1.2 itojun * both IP header and IP datagrams, doesn't it ?
986 1.2 itojun */
987 1.7 itojun #if defined(M_AUTHIPHDR) && defined(M_AUTHIPDGM)
988 1.2 itojun auth = (m->m_flags & M_AUTHIPHDR
989 1.2 itojun && m->m_flags & M_AUTHIPDGM) ? 1 : 0;
990 1.7 itojun #endif
991 1.7 itojun }
992 1.2 itojun
993 1.32 itojun if ((pr = nd6_prefix_lookup(new)) != NULL) {
994 1.32 itojun /*
995 1.32 itojun * nd6_prefix_lookup() ensures that pr and new have the same
996 1.32 itojun * prefix on a same interface.
997 1.32 itojun */
998 1.32 itojun
999 1.32 itojun /*
1000 1.32 itojun * Update prefix information. Note that the on-link (L) bit
1001 1.32 itojun * and the autonomous (A) bit should NOT be changed from 1
1002 1.32 itojun * to 0.
1003 1.32 itojun */
1004 1.32 itojun if (new->ndpr_raf_onlink == 1)
1005 1.32 itojun pr->ndpr_raf_onlink = 1;
1006 1.32 itojun if (new->ndpr_raf_auto == 1)
1007 1.32 itojun pr->ndpr_raf_auto = 1;
1008 1.32 itojun if (new->ndpr_raf_onlink) {
1009 1.32 itojun pr->ndpr_vltime = new->ndpr_vltime;
1010 1.32 itojun pr->ndpr_pltime = new->ndpr_pltime;
1011 1.56 rpaulo (void)in6_init_prefix_ltimes(pr); /* XXX error case? */
1012 1.59 kardel pr->ndpr_lastupdate = time_second;
1013 1.32 itojun }
1014 1.32 itojun
1015 1.32 itojun if (new->ndpr_raf_onlink &&
1016 1.32 itojun (pr->ndpr_stateflags & NDPRF_ONLINK) == 0) {
1017 1.32 itojun int e;
1018 1.32 itojun
1019 1.32 itojun if ((e = nd6_prefix_onlink(pr)) != 0) {
1020 1.32 itojun nd6log((LOG_ERR,
1021 1.32 itojun "prelist_update: failed to make "
1022 1.32 itojun "the prefix %s/%d on-link on %s "
1023 1.32 itojun "(errno=%d)\n",
1024 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1025 1.32 itojun pr->ndpr_plen, if_name(pr->ndpr_ifp), e));
1026 1.32 itojun /* proceed anyway. XXX: is it correct? */
1027 1.32 itojun }
1028 1.32 itojun }
1029 1.32 itojun
1030 1.32 itojun if (dr && pfxrtr_lookup(pr, dr) == NULL)
1031 1.32 itojun pfxrtr_add(pr, dr);
1032 1.32 itojun } else {
1033 1.32 itojun struct nd_prefix *newpr = NULL;
1034 1.32 itojun
1035 1.56 rpaulo newprefix = 1;
1036 1.56 rpaulo
1037 1.32 itojun if (new->ndpr_vltime == 0)
1038 1.2 itojun goto end;
1039 1.32 itojun if (new->ndpr_raf_onlink == 0 && new->ndpr_raf_auto == 0)
1040 1.32 itojun goto end;
1041 1.32 itojun
1042 1.32 itojun error = nd6_prelist_add(new, dr, &newpr);
1043 1.32 itojun if (error != 0 || newpr == NULL) {
1044 1.32 itojun nd6log((LOG_NOTICE, "prelist_update: "
1045 1.32 itojun "nd6_prelist_add failed for %s/%d on %s "
1046 1.32 itojun "errno=%d, returnpr=%p\n",
1047 1.32 itojun ip6_sprintf(&new->ndpr_prefix.sin6_addr),
1048 1.32 itojun new->ndpr_plen, if_name(new->ndpr_ifp),
1049 1.32 itojun error, newpr));
1050 1.32 itojun goto end; /* we should just give up in this case. */
1051 1.2 itojun }
1052 1.2 itojun
1053 1.2 itojun /*
1054 1.32 itojun * XXX: from the ND point of view, we can ignore a prefix
1055 1.32 itojun * with the on-link bit being zero. However, we need a
1056 1.32 itojun * prefix structure for references from autoconfigured
1057 1.32 itojun * addresses. Thus, we explicitly make sure that the prefix
1058 1.32 itojun * itself expires now.
1059 1.2 itojun */
1060 1.32 itojun if (newpr->ndpr_raf_onlink == 0) {
1061 1.32 itojun newpr->ndpr_vltime = 0;
1062 1.32 itojun newpr->ndpr_pltime = 0;
1063 1.32 itojun in6_init_prefix_ltimes(newpr);
1064 1.32 itojun }
1065 1.2 itojun
1066 1.32 itojun pr = newpr;
1067 1.32 itojun }
1068 1.32 itojun
1069 1.32 itojun /*
1070 1.32 itojun * Address autoconfiguration based on Section 5.5.3 of RFC 2462.
1071 1.32 itojun * Note that pr must be non NULL at this point.
1072 1.32 itojun */
1073 1.32 itojun
1074 1.32 itojun /* 5.5.3 (a). Ignore the prefix without the A bit set. */
1075 1.32 itojun if (!new->ndpr_raf_auto)
1076 1.32 itojun goto end;
1077 1.2 itojun
1078 1.32 itojun /*
1079 1.32 itojun * 5.5.3 (b). the link-local prefix should have been ignored in
1080 1.32 itojun * nd6_ra_input.
1081 1.32 itojun */
1082 1.2 itojun
1083 1.56 rpaulo /* 5.5.3 (c). Consistency check on lifetimes: pltime <= vltime. */
1084 1.56 rpaulo if (new->ndpr_pltime > new->ndpr_vltime) {
1085 1.56 rpaulo error = EINVAL; /* XXX: won't be used */
1086 1.56 rpaulo goto end;
1087 1.56 rpaulo }
1088 1.2 itojun
1089 1.32 itojun /*
1090 1.56 rpaulo * 5.5.3 (d). If the prefix advertised is not equal to the prefix of
1091 1.56 rpaulo * an address configured by stateless autoconfiguration already in the
1092 1.56 rpaulo * list of addresses associated with the interface, and the Valid
1093 1.56 rpaulo * Lifetime is not 0, form an address. We first check if we have
1094 1.56 rpaulo * a matching prefix.
1095 1.56 rpaulo * Note: we apply a clarification in rfc2462bis-02 here. We only
1096 1.56 rpaulo * consider autoconfigured addresses while RFC2462 simply said
1097 1.56 rpaulo * "address".
1098 1.32 itojun */
1099 1.62 dyoung TAILQ_FOREACH(ifa, &ifp->if_addrlist, ifa_list) {
1100 1.32 itojun struct in6_ifaddr *ifa6;
1101 1.56 rpaulo u_int32_t remaininglifetime;
1102 1.2 itojun
1103 1.32 itojun if (ifa->ifa_addr->sa_family != AF_INET6)
1104 1.32 itojun continue;
1105 1.2 itojun
1106 1.32 itojun ifa6 = (struct in6_ifaddr *)ifa;
1107 1.2 itojun
1108 1.32 itojun /*
1109 1.56 rpaulo * We only consider autoconfigured addresses as per rfc2462bis.
1110 1.56 rpaulo */
1111 1.56 rpaulo if (!(ifa6->ia6_flags & IN6_IFF_AUTOCONF))
1112 1.56 rpaulo continue;
1113 1.56 rpaulo
1114 1.56 rpaulo /*
1115 1.32 itojun * Spec is not clear here, but I believe we should concentrate
1116 1.32 itojun * on unicast (i.e. not anycast) addresses.
1117 1.32 itojun * XXX: other ia6_flags? detached or duplicated?
1118 1.32 itojun */
1119 1.32 itojun if ((ifa6->ia6_flags & IN6_IFF_ANYCAST) != 0)
1120 1.32 itojun continue;
1121 1.33 itojun
1122 1.56 rpaulo /*
1123 1.56 rpaulo * Ignore the address if it is not associated with a prefix
1124 1.56 rpaulo * or is associated with a prefix that is different from this
1125 1.56 rpaulo * one. (pr is never NULL here)
1126 1.56 rpaulo */
1127 1.56 rpaulo if (ifa6->ia6_ndpr != pr)
1128 1.32 itojun continue;
1129 1.7 itojun
1130 1.32 itojun if (ia6_match == NULL) /* remember the first one */
1131 1.32 itojun ia6_match = ifa6;
1132 1.2 itojun
1133 1.32 itojun /*
1134 1.32 itojun * An already autoconfigured address matched. Now that we
1135 1.32 itojun * are sure there is at least one matched address, we can
1136 1.32 itojun * proceed to 5.5.3. (e): update the lifetimes according to the
1137 1.32 itojun * "two hours" rule and the privacy extension.
1138 1.56 rpaulo * We apply some clarifications in rfc2462bis:
1139 1.56 rpaulo * - use remaininglifetime instead of storedlifetime as a
1140 1.56 rpaulo * variable name
1141 1.56 rpaulo * - remove the dead code in the "two-hour" rule
1142 1.32 itojun */
1143 1.32 itojun #define TWOHOUR (120*60)
1144 1.32 itojun lt6_tmp = ifa6->ia6_lifetime;
1145 1.32 itojun if (lt6_tmp.ia6t_vltime == ND6_INFINITE_LIFETIME)
1146 1.56 rpaulo remaininglifetime = ND6_INFINITE_LIFETIME;
1147 1.56 rpaulo else if (time_second - ifa6->ia6_updatetime >
1148 1.32 itojun lt6_tmp.ia6t_vltime) {
1149 1.32 itojun /*
1150 1.32 itojun * The case of "invalid" address. We should usually
1151 1.32 itojun * not see this case.
1152 1.32 itojun */
1153 1.56 rpaulo remaininglifetime = 0;
1154 1.32 itojun } else
1155 1.56 rpaulo remaininglifetime = lt6_tmp.ia6t_vltime -
1156 1.56 rpaulo (time_second - ifa6->ia6_updatetime);
1157 1.56 rpaulo
1158 1.56 rpaulo /* when not updating, keep the current stored lifetime. */
1159 1.56 rpaulo lt6_tmp.ia6t_vltime = remaininglifetime;
1160 1.56 rpaulo
1161 1.32 itojun if (TWOHOUR < new->ndpr_vltime ||
1162 1.56 rpaulo remaininglifetime < new->ndpr_vltime) {
1163 1.32 itojun lt6_tmp.ia6t_vltime = new->ndpr_vltime;
1164 1.56 rpaulo } else if (remaininglifetime <= TWOHOUR) {
1165 1.56 rpaulo if (auth)
1166 1.32 itojun lt6_tmp.ia6t_vltime = new->ndpr_vltime;
1167 1.32 itojun } else {
1168 1.32 itojun /*
1169 1.32 itojun * new->ndpr_vltime <= TWOHOUR &&
1170 1.56 rpaulo * TWOHOUR < remaininglifetime
1171 1.32 itojun */
1172 1.32 itojun lt6_tmp.ia6t_vltime = TWOHOUR;
1173 1.2 itojun }
1174 1.2 itojun
1175 1.32 itojun /* The 2 hour rule is not imposed for preferred lifetime. */
1176 1.32 itojun lt6_tmp.ia6t_pltime = new->ndpr_pltime;
1177 1.2 itojun
1178 1.32 itojun in6_init_address_ltimes(pr, <6_tmp);
1179 1.2 itojun
1180 1.56 rpaulo /*
1181 1.56 rpaulo * We need to treat lifetimes for temporary addresses
1182 1.56 rpaulo * differently, according to
1183 1.56 rpaulo * draft-ietf-ipv6-privacy-addrs-v2-01.txt 3.3 (1);
1184 1.56 rpaulo * we only update the lifetimes when they are in the maximum
1185 1.56 rpaulo * intervals.
1186 1.56 rpaulo */
1187 1.56 rpaulo if ((ifa6->ia6_flags & IN6_IFF_TEMPORARY) != 0) {
1188 1.56 rpaulo u_int32_t maxvltime, maxpltime;
1189 1.56 rpaulo
1190 1.56 rpaulo if (ip6_temp_valid_lifetime >
1191 1.56 rpaulo (u_int32_t)((time_second - ifa6->ia6_createtime) +
1192 1.56 rpaulo ip6_desync_factor)) {
1193 1.56 rpaulo maxvltime = ip6_temp_valid_lifetime -
1194 1.56 rpaulo (time_second - ifa6->ia6_createtime) -
1195 1.56 rpaulo ip6_desync_factor;
1196 1.56 rpaulo } else
1197 1.56 rpaulo maxvltime = 0;
1198 1.56 rpaulo if (ip6_temp_preferred_lifetime >
1199 1.56 rpaulo (u_int32_t)((time_second - ifa6->ia6_createtime) +
1200 1.56 rpaulo ip6_desync_factor)) {
1201 1.56 rpaulo maxpltime = ip6_temp_preferred_lifetime -
1202 1.56 rpaulo (time_second - ifa6->ia6_createtime) -
1203 1.56 rpaulo ip6_desync_factor;
1204 1.56 rpaulo } else
1205 1.56 rpaulo maxpltime = 0;
1206 1.56 rpaulo
1207 1.56 rpaulo if (lt6_tmp.ia6t_vltime == ND6_INFINITE_LIFETIME ||
1208 1.56 rpaulo lt6_tmp.ia6t_vltime > maxvltime) {
1209 1.56 rpaulo lt6_tmp.ia6t_vltime = maxvltime;
1210 1.56 rpaulo }
1211 1.56 rpaulo if (lt6_tmp.ia6t_pltime == ND6_INFINITE_LIFETIME ||
1212 1.56 rpaulo lt6_tmp.ia6t_pltime > maxpltime) {
1213 1.56 rpaulo lt6_tmp.ia6t_pltime = maxpltime;
1214 1.56 rpaulo }
1215 1.56 rpaulo }
1216 1.56 rpaulo
1217 1.32 itojun ifa6->ia6_lifetime = lt6_tmp;
1218 1.59 kardel ifa6->ia6_updatetime = time_second;
1219 1.32 itojun }
1220 1.32 itojun if (ia6_match == NULL && new->ndpr_vltime) {
1221 1.56 rpaulo int ifidlen;
1222 1.56 rpaulo
1223 1.2 itojun /*
1224 1.56 rpaulo * 5.5.3 (d) (continued)
1225 1.32 itojun * No address matched and the valid lifetime is non-zero.
1226 1.32 itojun * Create a new address.
1227 1.2 itojun */
1228 1.56 rpaulo
1229 1.56 rpaulo /*
1230 1.56 rpaulo * Prefix Length check:
1231 1.56 rpaulo * If the sum of the prefix length and interface identifier
1232 1.56 rpaulo * length does not equal 128 bits, the Prefix Information
1233 1.56 rpaulo * option MUST be ignored. The length of the interface
1234 1.56 rpaulo * identifier is defined in a separate link-type specific
1235 1.56 rpaulo * document.
1236 1.56 rpaulo */
1237 1.56 rpaulo ifidlen = in6_if2idlen(ifp);
1238 1.56 rpaulo if (ifidlen < 0) {
1239 1.56 rpaulo /* this should not happen, so we always log it. */
1240 1.56 rpaulo log(LOG_ERR, "prelist_update: IFID undefined (%s)\n",
1241 1.56 rpaulo if_name(ifp));
1242 1.56 rpaulo goto end;
1243 1.56 rpaulo }
1244 1.56 rpaulo if (ifidlen + pr->ndpr_plen != 128) {
1245 1.56 rpaulo nd6log((LOG_INFO,
1246 1.56 rpaulo "prelist_update: invalid prefixlen "
1247 1.56 rpaulo "%d for %s, ignored\n",
1248 1.56 rpaulo pr->ndpr_plen, if_name(ifp)));
1249 1.56 rpaulo goto end;
1250 1.56 rpaulo }
1251 1.56 rpaulo
1252 1.56 rpaulo if ((ia6 = in6_ifadd(new, mcast)) != NULL) {
1253 1.32 itojun /*
1254 1.32 itojun * note that we should use pr (not new) for reference.
1255 1.32 itojun */
1256 1.32 itojun pr->ndpr_refcnt++;
1257 1.32 itojun ia6->ia6_ndpr = pr;
1258 1.2 itojun
1259 1.32 itojun /*
1260 1.56 rpaulo * draft-ietf-ipngwg-temp-addresses-v2-00 3.3 (2).
1261 1.56 rpaulo * When a new public address is created as described
1262 1.56 rpaulo * in RFC2462, also create a new temporary address.
1263 1.56 rpaulo *
1264 1.56 rpaulo * draft-ietf-ipngwg-temp-addresses-v2-00 3.5.
1265 1.56 rpaulo * When an interface connects to a new link, a new
1266 1.56 rpaulo * randomized interface identifier should be generated
1267 1.56 rpaulo * immediately together with a new set of temporary
1268 1.56 rpaulo * addresses. Thus, we specifiy 1 as the 2nd arg of
1269 1.56 rpaulo * in6_tmpifadd().
1270 1.56 rpaulo */
1271 1.56 rpaulo if (ip6_use_tempaddr) {
1272 1.56 rpaulo int e;
1273 1.56 rpaulo if ((e = in6_tmpifadd(ia6, 1, 1)) != 0) {
1274 1.56 rpaulo nd6log((LOG_NOTICE, "prelist_update: "
1275 1.56 rpaulo "failed to create a temporary "
1276 1.56 rpaulo "address, errno=%d\n",
1277 1.56 rpaulo e));
1278 1.56 rpaulo }
1279 1.56 rpaulo }
1280 1.56 rpaulo
1281 1.56 rpaulo /*
1282 1.32 itojun * A newly added address might affect the status
1283 1.32 itojun * of other addresses, so we check and update it.
1284 1.32 itojun * XXX: what if address duplication happens?
1285 1.32 itojun */
1286 1.32 itojun pfxlist_onlink_check();
1287 1.32 itojun } else {
1288 1.32 itojun /* just set an error. do not bark here. */
1289 1.32 itojun error = EADDRNOTAVAIL; /* XXX: might be unused. */
1290 1.32 itojun }
1291 1.2 itojun }
1292 1.2 itojun
1293 1.2 itojun end:
1294 1.2 itojun splx(s);
1295 1.2 itojun return error;
1296 1.2 itojun }
1297 1.2 itojun
1298 1.2 itojun /*
1299 1.7 itojun * A supplement function used in the on-link detection below;
1300 1.7 itojun * detect if a given prefix has a (probably) reachable advertising router.
1301 1.7 itojun * XXX: lengthy function name...
1302 1.7 itojun */
1303 1.7 itojun static struct nd_pfxrouter *
1304 1.64 christos find_pfxlist_reachable_router(struct nd_prefix *pr)
1305 1.7 itojun {
1306 1.7 itojun struct nd_pfxrouter *pfxrtr;
1307 1.7 itojun struct rtentry *rt;
1308 1.7 itojun struct llinfo_nd6 *ln;
1309 1.7 itojun
1310 1.7 itojun for (pfxrtr = LIST_FIRST(&pr->ndpr_advrtrs); pfxrtr;
1311 1.7 itojun pfxrtr = LIST_NEXT(pfxrtr, pfr_entry)) {
1312 1.7 itojun if ((rt = nd6_lookup(&pfxrtr->router->rtaddr, 0,
1313 1.32 itojun pfxrtr->router->ifp)) &&
1314 1.7 itojun (ln = (struct llinfo_nd6 *)rt->rt_llinfo) &&
1315 1.7 itojun ND6_IS_LLINFO_PROBREACH(ln))
1316 1.7 itojun break; /* found */
1317 1.7 itojun }
1318 1.7 itojun
1319 1.36 itojun return (pfxrtr);
1320 1.7 itojun }
1321 1.7 itojun
1322 1.7 itojun /*
1323 1.2 itojun * Check if each prefix in the prefix list has at least one available router
1324 1.25 itojun * that advertised the prefix (a router is "available" if its neighbor cache
1325 1.25 itojun * entry is reachable or probably reachable).
1326 1.7 itojun * If the check fails, the prefix may be off-link, because, for example,
1327 1.2 itojun * we have moved from the network but the lifetime of the prefix has not
1328 1.25 itojun * expired yet. So we should not use the prefix if there is another prefix
1329 1.25 itojun * that has an available router.
1330 1.25 itojun * But, if there is no prefix that has an available router, we still regards
1331 1.25 itojun * all the prefixes as on-link. This is because we can't tell if all the
1332 1.2 itojun * routers are simply dead or if we really moved from the network and there
1333 1.2 itojun * is no router around us.
1334 1.2 itojun */
1335 1.7 itojun void
1336 1.2 itojun pfxlist_onlink_check()
1337 1.2 itojun {
1338 1.2 itojun struct nd_prefix *pr;
1339 1.32 itojun struct in6_ifaddr *ifa;
1340 1.56 rpaulo struct nd_defrouter *dr;
1341 1.56 rpaulo struct nd_pfxrouter *pfxrtr = NULL;
1342 1.2 itojun
1343 1.7 itojun /*
1344 1.7 itojun * Check if there is a prefix that has a reachable advertising
1345 1.7 itojun * router.
1346 1.7 itojun */
1347 1.62 dyoung LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
1348 1.32 itojun if (pr->ndpr_raf_onlink && find_pfxlist_reachable_router(pr))
1349 1.2 itojun break;
1350 1.7 itojun }
1351 1.56 rpaulo /*
1352 1.56 rpaulo * If we have no such prefix, check whether we still have a router
1353 1.56 rpaulo * that does not advertise any prefixes.
1354 1.56 rpaulo */
1355 1.56 rpaulo if (pr == NULL) {
1356 1.62 dyoung TAILQ_FOREACH(dr, &nd_defrouter, dr_entry) {
1357 1.56 rpaulo struct nd_prefix *pr0;
1358 1.56 rpaulo
1359 1.62 dyoung LIST_FOREACH(pr0, &nd_prefix, ndpr_entry) {
1360 1.56 rpaulo if ((pfxrtr = pfxrtr_lookup(pr0, dr)) != NULL)
1361 1.56 rpaulo break;
1362 1.56 rpaulo }
1363 1.56 rpaulo if (pfxrtr)
1364 1.56 rpaulo break;
1365 1.56 rpaulo }
1366 1.56 rpaulo }
1367 1.56 rpaulo if (pr != NULL || (TAILQ_FIRST(&nd_defrouter) && !pfxrtr)) {
1368 1.2 itojun /*
1369 1.32 itojun * There is at least one prefix that has a reachable router,
1370 1.32 itojun * or at least a router which probably does not advertise
1371 1.32 itojun * any prefixes. The latter would be the case when we move
1372 1.32 itojun * to a new link where we have a router that does not provide
1373 1.32 itojun * prefixes and we configure an address by hand.
1374 1.32 itojun * Detach prefixes which have no reachable advertising
1375 1.32 itojun * router, and attach other prefixes.
1376 1.2 itojun */
1377 1.62 dyoung LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
1378 1.32 itojun /* XXX: a link-local prefix should never be detached */
1379 1.32 itojun if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr))
1380 1.32 itojun continue;
1381 1.32 itojun
1382 1.32 itojun /*
1383 1.32 itojun * we aren't interested in prefixes without the L bit
1384 1.32 itojun * set.
1385 1.32 itojun */
1386 1.32 itojun if (pr->ndpr_raf_onlink == 0)
1387 1.32 itojun continue;
1388 1.32 itojun
1389 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_DETACHED) == 0 &&
1390 1.32 itojun find_pfxlist_reachable_router(pr) == NULL)
1391 1.32 itojun pr->ndpr_stateflags |= NDPRF_DETACHED;
1392 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0 &&
1393 1.32 itojun find_pfxlist_reachable_router(pr) != 0)
1394 1.32 itojun pr->ndpr_stateflags &= ~NDPRF_DETACHED;
1395 1.32 itojun }
1396 1.32 itojun } else {
1397 1.32 itojun /* there is no prefix that has a reachable router */
1398 1.62 dyoung LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
1399 1.32 itojun if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr))
1400 1.32 itojun continue;
1401 1.32 itojun
1402 1.32 itojun if (pr->ndpr_raf_onlink == 0)
1403 1.32 itojun continue;
1404 1.32 itojun
1405 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0)
1406 1.32 itojun pr->ndpr_stateflags &= ~NDPRF_DETACHED;
1407 1.32 itojun }
1408 1.32 itojun }
1409 1.32 itojun
1410 1.32 itojun /*
1411 1.32 itojun * Remove each interface route associated with a (just) detached
1412 1.32 itojun * prefix, and reinstall the interface route for a (just) attached
1413 1.32 itojun * prefix. Note that all attempt of reinstallation does not
1414 1.32 itojun * necessarily success, when a same prefix is shared among multiple
1415 1.32 itojun * interfaces. Such cases will be handled in nd6_prefix_onlink,
1416 1.32 itojun * so we don't have to care about them.
1417 1.32 itojun */
1418 1.62 dyoung LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
1419 1.32 itojun int e;
1420 1.32 itojun
1421 1.32 itojun if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr))
1422 1.32 itojun continue;
1423 1.32 itojun
1424 1.32 itojun if (pr->ndpr_raf_onlink == 0)
1425 1.32 itojun continue;
1426 1.32 itojun
1427 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0 &&
1428 1.32 itojun (pr->ndpr_stateflags & NDPRF_ONLINK) != 0) {
1429 1.32 itojun if ((e = nd6_prefix_offlink(pr)) != 0) {
1430 1.32 itojun nd6log((LOG_ERR,
1431 1.32 itojun "pfxlist_onlink_check: failed to "
1432 1.32 itojun "make %s/%d offlink, errno=%d\n",
1433 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1434 1.32 itojun pr->ndpr_plen, e));
1435 1.2 itojun }
1436 1.2 itojun }
1437 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_DETACHED) == 0 &&
1438 1.32 itojun (pr->ndpr_stateflags & NDPRF_ONLINK) == 0 &&
1439 1.32 itojun pr->ndpr_raf_onlink) {
1440 1.32 itojun if ((e = nd6_prefix_onlink(pr)) != 0) {
1441 1.32 itojun nd6log((LOG_ERR,
1442 1.32 itojun "pfxlist_onlink_check: failed to "
1443 1.56 rpaulo "make %s/%d onlink, errno=%d\n",
1444 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1445 1.32 itojun pr->ndpr_plen, e));
1446 1.32 itojun }
1447 1.32 itojun }
1448 1.32 itojun }
1449 1.32 itojun
1450 1.32 itojun /*
1451 1.32 itojun * Changes on the prefix status might affect address status as well.
1452 1.32 itojun * Make sure that all addresses derived from an attached prefix are
1453 1.32 itojun * attached, and that all addresses derived from a detached prefix are
1454 1.32 itojun * detached. Note, however, that a manually configured address should
1455 1.32 itojun * always be attached.
1456 1.32 itojun * The precise detection logic is same as the one for prefixes.
1457 1.32 itojun */
1458 1.32 itojun for (ifa = in6_ifaddr; ifa; ifa = ifa->ia_next) {
1459 1.32 itojun if (!(ifa->ia6_flags & IN6_IFF_AUTOCONF))
1460 1.32 itojun continue;
1461 1.32 itojun
1462 1.32 itojun if (ifa->ia6_ndpr == NULL) {
1463 1.32 itojun /*
1464 1.32 itojun * This can happen when we first configure the address
1465 1.32 itojun * (i.e. the address exists, but the prefix does not).
1466 1.32 itojun * XXX: complicated relationships...
1467 1.32 itojun */
1468 1.32 itojun continue;
1469 1.32 itojun }
1470 1.32 itojun
1471 1.32 itojun if (find_pfxlist_reachable_router(ifa->ia6_ndpr))
1472 1.32 itojun break;
1473 1.32 itojun }
1474 1.32 itojun if (ifa) {
1475 1.32 itojun for (ifa = in6_ifaddr; ifa; ifa = ifa->ia_next) {
1476 1.32 itojun if ((ifa->ia6_flags & IN6_IFF_AUTOCONF) == 0)
1477 1.32 itojun continue;
1478 1.32 itojun
1479 1.32 itojun if (ifa->ia6_ndpr == NULL) /* XXX: see above. */
1480 1.32 itojun continue;
1481 1.32 itojun
1482 1.56 rpaulo if (find_pfxlist_reachable_router(ifa->ia6_ndpr)) {
1483 1.56 rpaulo if (ifa->ia6_flags & IN6_IFF_DETACHED) {
1484 1.56 rpaulo ifa->ia6_flags &= ~IN6_IFF_DETACHED;
1485 1.56 rpaulo ifa->ia6_flags |= IN6_IFF_TENTATIVE;
1486 1.56 rpaulo nd6_dad_start((struct ifaddr *)ifa,
1487 1.56 rpaulo 0);
1488 1.56 rpaulo }
1489 1.56 rpaulo } else {
1490 1.56 rpaulo if ((ifa->ia6_flags & IN6_IFF_DETACHED) == 0) {
1491 1.56 rpaulo ifa->ia6_flags |= IN6_IFF_DETACHED;
1492 1.56 rpaulo }
1493 1.56 rpaulo }
1494 1.2 itojun }
1495 1.2 itojun }
1496 1.2 itojun else {
1497 1.32 itojun for (ifa = in6_ifaddr; ifa; ifa = ifa->ia_next) {
1498 1.32 itojun if ((ifa->ia6_flags & IN6_IFF_AUTOCONF) == 0)
1499 1.32 itojun continue;
1500 1.32 itojun
1501 1.56 rpaulo if (ifa->ia6_flags & IN6_IFF_DETACHED) {
1502 1.56 rpaulo ifa->ia6_flags &= ~IN6_IFF_DETACHED;
1503 1.56 rpaulo ifa->ia6_flags |= IN6_IFF_TENTATIVE;
1504 1.56 rpaulo /* Do we need a delay in this case? */
1505 1.56 rpaulo nd6_dad_start((struct ifaddr *)ifa, 0);
1506 1.56 rpaulo }
1507 1.32 itojun }
1508 1.2 itojun }
1509 1.2 itojun }
1510 1.2 itojun
1511 1.32 itojun int
1512 1.64 christos nd6_prefix_onlink(struct nd_prefix *pr)
1513 1.2 itojun {
1514 1.32 itojun struct ifaddr *ifa;
1515 1.32 itojun struct ifnet *ifp = pr->ndpr_ifp;
1516 1.32 itojun struct sockaddr_in6 mask6;
1517 1.32 itojun struct nd_prefix *opr;
1518 1.32 itojun u_long rtflags;
1519 1.32 itojun int error = 0;
1520 1.32 itojun struct rtentry *rt = NULL;
1521 1.32 itojun
1522 1.32 itojun /* sanity check */
1523 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_ONLINK) != 0) {
1524 1.32 itojun nd6log((LOG_ERR,
1525 1.32 itojun "nd6_prefix_onlink: %s/%d is already on-link\n",
1526 1.51 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr), pr->ndpr_plen));
1527 1.51 itojun return (EEXIST);
1528 1.32 itojun }
1529 1.32 itojun
1530 1.32 itojun /*
1531 1.32 itojun * Add the interface route associated with the prefix. Before
1532 1.32 itojun * installing the route, check if there's the same prefix on another
1533 1.32 itojun * interface, and the prefix has already installed the interface route.
1534 1.32 itojun * Although such a configuration is expected to be rare, we explicitly
1535 1.32 itojun * allow it.
1536 1.32 itojun */
1537 1.62 dyoung LIST_FOREACH(opr, &nd_prefix, ndpr_entry) {
1538 1.32 itojun if (opr == pr)
1539 1.32 itojun continue;
1540 1.32 itojun
1541 1.32 itojun if ((opr->ndpr_stateflags & NDPRF_ONLINK) == 0)
1542 1.32 itojun continue;
1543 1.32 itojun
1544 1.32 itojun if (opr->ndpr_plen == pr->ndpr_plen &&
1545 1.32 itojun in6_are_prefix_equal(&pr->ndpr_prefix.sin6_addr,
1546 1.32 itojun &opr->ndpr_prefix.sin6_addr, pr->ndpr_plen))
1547 1.36 itojun return (0);
1548 1.32 itojun }
1549 1.32 itojun
1550 1.32 itojun /*
1551 1.32 itojun * We prefer link-local addresses as the associated interface address.
1552 1.32 itojun */
1553 1.32 itojun /* search for a link-local addr */
1554 1.32 itojun ifa = (struct ifaddr *)in6ifa_ifpforlinklocal(ifp,
1555 1.32 itojun IN6_IFF_NOTREADY | IN6_IFF_ANYCAST);
1556 1.32 itojun if (ifa == NULL) {
1557 1.32 itojun /* XXX: freebsd does not have ifa_ifwithaf */
1558 1.62 dyoung TAILQ_FOREACH(ifa, &ifp->if_addrlist, ifa_list) {
1559 1.32 itojun if (ifa->ifa_addr->sa_family == AF_INET6)
1560 1.32 itojun break;
1561 1.32 itojun }
1562 1.32 itojun /* should we care about ia6_flags? */
1563 1.32 itojun }
1564 1.32 itojun if (ifa == NULL) {
1565 1.32 itojun /*
1566 1.32 itojun * This can still happen, when, for example, we receive an RA
1567 1.32 itojun * containing a prefix with the L bit set and the A bit clear,
1568 1.32 itojun * after removing all IPv6 addresses on the receiving
1569 1.32 itojun * interface. This should, of course, be rare though.
1570 1.32 itojun */
1571 1.32 itojun nd6log((LOG_NOTICE,
1572 1.32 itojun "nd6_prefix_onlink: failed to find any ifaddr"
1573 1.32 itojun " to add route for a prefix(%s/%d) on %s\n",
1574 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1575 1.32 itojun pr->ndpr_plen, if_name(ifp)));
1576 1.36 itojun return (0);
1577 1.32 itojun }
1578 1.2 itojun
1579 1.2 itojun /*
1580 1.32 itojun * in6_ifinit() sets nd6_rtrequest to ifa_rtrequest for all ifaddrs.
1581 1.32 itojun * ifa->ifa_rtrequest = nd6_rtrequest;
1582 1.2 itojun */
1583 1.32 itojun bzero(&mask6, sizeof(mask6));
1584 1.32 itojun mask6.sin6_len = sizeof(mask6);
1585 1.32 itojun mask6.sin6_addr = pr->ndpr_mask;
1586 1.32 itojun /* rtrequest() will probably set RTF_UP, but we're not sure. */
1587 1.32 itojun rtflags = ifa->ifa_flags | RTF_UP;
1588 1.32 itojun if (nd6_need_cache(ifp)) {
1589 1.32 itojun /* explicitly set in case ifa_flags does not set the flag. */
1590 1.32 itojun rtflags |= RTF_CLONING;
1591 1.32 itojun } else {
1592 1.32 itojun /*
1593 1.32 itojun * explicitly clear the cloning bit in case ifa_flags sets it.
1594 1.32 itojun */
1595 1.32 itojun rtflags &= ~RTF_CLONING;
1596 1.32 itojun }
1597 1.32 itojun error = rtrequest(RTM_ADD, (struct sockaddr *)&pr->ndpr_prefix,
1598 1.32 itojun ifa->ifa_addr, (struct sockaddr *)&mask6, rtflags, &rt);
1599 1.32 itojun if (error == 0) {
1600 1.32 itojun if (rt != NULL) /* this should be non NULL, though */
1601 1.32 itojun nd6_rtmsg(RTM_ADD, rt);
1602 1.32 itojun pr->ndpr_stateflags |= NDPRF_ONLINK;
1603 1.32 itojun } else {
1604 1.32 itojun nd6log((LOG_ERR, "nd6_prefix_onlink: failed to add route for a"
1605 1.32 itojun " prefix (%s/%d) on %s, gw=%s, mask=%s, flags=%lx "
1606 1.32 itojun "errno = %d\n",
1607 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1608 1.32 itojun pr->ndpr_plen, if_name(ifp),
1609 1.32 itojun ip6_sprintf(&((struct sockaddr_in6 *)ifa->ifa_addr)->sin6_addr),
1610 1.32 itojun ip6_sprintf(&mask6.sin6_addr), rtflags, error));
1611 1.32 itojun }
1612 1.32 itojun
1613 1.32 itojun if (rt != NULL)
1614 1.32 itojun rt->rt_refcnt--;
1615 1.32 itojun
1616 1.36 itojun return (error);
1617 1.32 itojun }
1618 1.32 itojun
1619 1.32 itojun int
1620 1.64 christos nd6_prefix_offlink(struct nd_prefix *pr)
1621 1.32 itojun {
1622 1.32 itojun int error = 0;
1623 1.32 itojun struct ifnet *ifp = pr->ndpr_ifp;
1624 1.32 itojun struct nd_prefix *opr;
1625 1.32 itojun struct sockaddr_in6 sa6, mask6;
1626 1.32 itojun struct rtentry *rt = NULL;
1627 1.32 itojun
1628 1.32 itojun /* sanity check */
1629 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_ONLINK) == 0) {
1630 1.32 itojun nd6log((LOG_ERR,
1631 1.32 itojun "nd6_prefix_offlink: %s/%d is already off-link\n",
1632 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr), pr->ndpr_plen));
1633 1.36 itojun return (EEXIST);
1634 1.32 itojun }
1635 1.32 itojun
1636 1.2 itojun bzero(&sa6, sizeof(sa6));
1637 1.2 itojun sa6.sin6_family = AF_INET6;
1638 1.2 itojun sa6.sin6_len = sizeof(sa6);
1639 1.2 itojun bcopy(&pr->ndpr_prefix.sin6_addr, &sa6.sin6_addr,
1640 1.32 itojun sizeof(struct in6_addr));
1641 1.2 itojun bzero(&mask6, sizeof(mask6));
1642 1.2 itojun mask6.sin6_family = AF_INET6;
1643 1.2 itojun mask6.sin6_len = sizeof(sa6);
1644 1.2 itojun bcopy(&pr->ndpr_mask, &mask6.sin6_addr, sizeof(struct in6_addr));
1645 1.32 itojun error = rtrequest(RTM_DELETE, (struct sockaddr *)&sa6, NULL,
1646 1.32 itojun (struct sockaddr *)&mask6, 0, &rt);
1647 1.32 itojun if (error == 0) {
1648 1.32 itojun pr->ndpr_stateflags &= ~NDPRF_ONLINK;
1649 1.32 itojun
1650 1.32 itojun /* report the route deletion to the routing socket. */
1651 1.32 itojun if (rt != NULL)
1652 1.32 itojun nd6_rtmsg(RTM_DELETE, rt);
1653 1.2 itojun
1654 1.32 itojun /*
1655 1.32 itojun * There might be the same prefix on another interface,
1656 1.32 itojun * the prefix which could not be on-link just because we have
1657 1.32 itojun * the interface route (see comments in nd6_prefix_onlink).
1658 1.32 itojun * If there's one, try to make the prefix on-link on the
1659 1.32 itojun * interface.
1660 1.32 itojun */
1661 1.62 dyoung LIST_FOREACH(opr, &nd_prefix, ndpr_entry) {
1662 1.32 itojun if (opr == pr)
1663 1.32 itojun continue;
1664 1.2 itojun
1665 1.32 itojun if ((opr->ndpr_stateflags & NDPRF_ONLINK) != 0)
1666 1.32 itojun continue;
1667 1.2 itojun
1668 1.32 itojun /*
1669 1.32 itojun * KAME specific: detached prefixes should not be
1670 1.32 itojun * on-link.
1671 1.32 itojun */
1672 1.32 itojun if ((opr->ndpr_stateflags & NDPRF_DETACHED) != 0)
1673 1.32 itojun continue;
1674 1.2 itojun
1675 1.32 itojun if (opr->ndpr_plen == pr->ndpr_plen &&
1676 1.32 itojun in6_are_prefix_equal(&pr->ndpr_prefix.sin6_addr,
1677 1.32 itojun &opr->ndpr_prefix.sin6_addr, pr->ndpr_plen)) {
1678 1.32 itojun int e;
1679 1.32 itojun
1680 1.32 itojun if ((e = nd6_prefix_onlink(opr)) != 0) {
1681 1.32 itojun nd6log((LOG_ERR,
1682 1.32 itojun "nd6_prefix_offlink: failed to "
1683 1.32 itojun "recover a prefix %s/%d from %s "
1684 1.32 itojun "to %s (errno = %d)\n",
1685 1.32 itojun ip6_sprintf(&opr->ndpr_prefix.sin6_addr),
1686 1.32 itojun opr->ndpr_plen, if_name(ifp),
1687 1.32 itojun if_name(opr->ndpr_ifp), e));
1688 1.32 itojun }
1689 1.32 itojun }
1690 1.32 itojun }
1691 1.32 itojun } else {
1692 1.32 itojun /* XXX: can we still set the NDPRF_ONLINK flag? */
1693 1.22 itojun nd6log((LOG_ERR,
1694 1.32 itojun "nd6_prefix_offlink: failed to delete route: "
1695 1.32 itojun "%s/%d on %s (errno = %d)\n",
1696 1.32 itojun ip6_sprintf(&sa6.sin6_addr), pr->ndpr_plen, if_name(ifp),
1697 1.32 itojun error));
1698 1.2 itojun }
1699 1.2 itojun
1700 1.32 itojun if (rt != NULL) {
1701 1.32 itojun if (rt->rt_refcnt <= 0) {
1702 1.32 itojun /* XXX: we should free the entry ourselves. */
1703 1.32 itojun rt->rt_refcnt++;
1704 1.32 itojun rtfree(rt);
1705 1.2 itojun }
1706 1.2 itojun }
1707 1.2 itojun
1708 1.36 itojun return (error);
1709 1.2 itojun }
1710 1.2 itojun
1711 1.2 itojun static struct in6_ifaddr *
1712 1.64 christos in6_ifadd(struct nd_prefixctl *pr, int mcast)
1713 1.2 itojun {
1714 1.32 itojun struct ifnet *ifp = pr->ndpr_ifp;
1715 1.2 itojun struct ifaddr *ifa;
1716 1.32 itojun struct in6_aliasreq ifra;
1717 1.32 itojun struct in6_ifaddr *ia, *ib;
1718 1.32 itojun int error, plen0;
1719 1.2 itojun struct in6_addr mask;
1720 1.32 itojun int prefixlen = pr->ndpr_plen;
1721 1.56 rpaulo int updateflags;
1722 1.2 itojun
1723 1.31 itojun in6_prefixlen2mask(&mask, prefixlen);
1724 1.2 itojun
1725 1.32 itojun /*
1726 1.32 itojun * find a link-local address (will be interface ID).
1727 1.32 itojun * Is it really mandatory? Theoretically, a global or a site-local
1728 1.32 itojun * address can be configured without a link-local address, if we
1729 1.32 itojun * have a unique interface identifier...
1730 1.32 itojun *
1731 1.32 itojun * it is not mandatory to have a link-local address, we can generate
1732 1.32 itojun * interface identifier on the fly. we do this because:
1733 1.32 itojun * (1) it should be the easiest way to find interface identifier.
1734 1.32 itojun * (2) RFC2462 5.4 suggesting the use of the same interface identifier
1735 1.32 itojun * for multiple addresses on a single interface, and possible shortcut
1736 1.32 itojun * of DAD. we omitted DAD for this reason in the past.
1737 1.32 itojun * (3) a user can prevent autoconfiguration of global address
1738 1.32 itojun * by removing link-local address by hand (this is partly because we
1739 1.55 rpaulo * don't have other way to control the use of IPv6 on an interface.
1740 1.32 itojun * this has been our design choice - cf. NRL's "ifconfig auto").
1741 1.32 itojun * (4) it is easier to manage when an interface has addresses
1742 1.32 itojun * with the same interface identifier, than to have multiple addresses
1743 1.32 itojun * with different interface identifiers.
1744 1.32 itojun */
1745 1.32 itojun ifa = (struct ifaddr *)in6ifa_ifpforlinklocal(ifp, 0); /* 0 is OK? */
1746 1.2 itojun if (ifa)
1747 1.2 itojun ib = (struct in6_ifaddr *)ifa;
1748 1.2 itojun else
1749 1.2 itojun return NULL;
1750 1.2 itojun
1751 1.2 itojun #if 0 /* don't care link local addr state, and always do DAD */
1752 1.2 itojun /* if link-local address is not eligible, do not autoconfigure. */
1753 1.2 itojun if (((struct in6_ifaddr *)ifa)->ia6_flags & IN6_IFF_NOTREADY) {
1754 1.2 itojun printf("in6_ifadd: link-local address not ready\n");
1755 1.2 itojun return NULL;
1756 1.2 itojun }
1757 1.2 itojun #endif
1758 1.2 itojun
1759 1.2 itojun /* prefixlen + ifidlen must be equal to 128 */
1760 1.32 itojun plen0 = in6_mask2len(&ib->ia_prefixmask.sin6_addr, NULL);
1761 1.32 itojun if (prefixlen != plen0) {
1762 1.56 rpaulo nd6log((LOG_INFO, "in6_ifadd: wrong prefixlen for %s "
1763 1.32 itojun "(prefix=%d ifid=%d)\n",
1764 1.32 itojun if_name(ifp), prefixlen, 128 - plen0));
1765 1.2 itojun return NULL;
1766 1.2 itojun }
1767 1.2 itojun
1768 1.2 itojun /* make ifaddr */
1769 1.2 itojun
1770 1.56 rpaulo memset(&ifra, 0, sizeof(ifra));
1771 1.32 itojun /*
1772 1.32 itojun * in6_update_ifa() does not use ifra_name, but we accurately set it
1773 1.32 itojun * for safety.
1774 1.32 itojun */
1775 1.32 itojun strncpy(ifra.ifra_name, if_name(ifp), sizeof(ifra.ifra_name));
1776 1.32 itojun ifra.ifra_addr.sin6_family = AF_INET6;
1777 1.32 itojun ifra.ifra_addr.sin6_len = sizeof(struct sockaddr_in6);
1778 1.32 itojun /* prefix */
1779 1.56 rpaulo ifra.ifra_addr.sin6_addr = pr->ndpr_prefix.sin6_addr;
1780 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[0] &= mask.s6_addr32[0];
1781 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[1] &= mask.s6_addr32[1];
1782 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[2] &= mask.s6_addr32[2];
1783 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[3] &= mask.s6_addr32[3];
1784 1.2 itojun
1785 1.2 itojun /* interface ID */
1786 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[0] |=
1787 1.32 itojun (ib->ia_addr.sin6_addr.s6_addr32[0] & ~mask.s6_addr32[0]);
1788 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[1] |=
1789 1.32 itojun (ib->ia_addr.sin6_addr.s6_addr32[1] & ~mask.s6_addr32[1]);
1790 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[2] |=
1791 1.32 itojun (ib->ia_addr.sin6_addr.s6_addr32[2] & ~mask.s6_addr32[2]);
1792 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[3] |=
1793 1.32 itojun (ib->ia_addr.sin6_addr.s6_addr32[3] & ~mask.s6_addr32[3]);
1794 1.33 itojun
1795 1.32 itojun /* new prefix mask. */
1796 1.32 itojun ifra.ifra_prefixmask.sin6_len = sizeof(struct sockaddr_in6);
1797 1.32 itojun ifra.ifra_prefixmask.sin6_family = AF_INET6;
1798 1.32 itojun bcopy(&mask, &ifra.ifra_prefixmask.sin6_addr,
1799 1.32 itojun sizeof(ifra.ifra_prefixmask.sin6_addr));
1800 1.2 itojun
1801 1.56 rpaulo /* lifetimes */
1802 1.32 itojun ifra.ifra_lifetime.ia6t_vltime = pr->ndpr_vltime;
1803 1.32 itojun ifra.ifra_lifetime.ia6t_pltime = pr->ndpr_pltime;
1804 1.2 itojun
1805 1.32 itojun /* XXX: scope zone ID? */
1806 1.2 itojun
1807 1.32 itojun ifra.ifra_flags |= IN6_IFF_AUTOCONF; /* obey autoconf */
1808 1.2 itojun
1809 1.56 rpaulo /*
1810 1.56 rpaulo * Make sure that we do not have this address already. This should
1811 1.56 rpaulo * usually not happen, but we can still see this case, e.g., if we
1812 1.56 rpaulo * have manually configured the exact address to be configured.
1813 1.56 rpaulo */
1814 1.56 rpaulo if (in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr) != NULL) {
1815 1.56 rpaulo /* this should be rare enough to make an explicit log */
1816 1.56 rpaulo log(LOG_INFO, "in6_ifadd: %s is already configured\n",
1817 1.56 rpaulo ip6_sprintf(&ifra.ifra_addr.sin6_addr));
1818 1.56 rpaulo return (NULL);
1819 1.56 rpaulo }
1820 1.56 rpaulo
1821 1.56 rpaulo /*
1822 1.56 rpaulo * Allocate ifaddr structure, link into chain, etc.
1823 1.56 rpaulo * If we are going to create a new address upon receiving a multicasted
1824 1.56 rpaulo * RA, we need to impose a random delay before starting DAD.
1825 1.56 rpaulo * [draft-ietf-ipv6-rfc2462bis-02.txt, Section 5.4.2]
1826 1.56 rpaulo */
1827 1.56 rpaulo updateflags = 0;
1828 1.56 rpaulo if (mcast)
1829 1.56 rpaulo updateflags |= IN6_IFAUPDATE_DADDELAY;
1830 1.56 rpaulo if ((error = in6_update_ifa(ifp, &ifra, NULL, updateflags)) != 0) {
1831 1.32 itojun nd6log((LOG_ERR,
1832 1.32 itojun "in6_ifadd: failed to make ifaddr %s on %s (errno=%d)\n",
1833 1.32 itojun ip6_sprintf(&ifra.ifra_addr.sin6_addr), if_name(ifp),
1834 1.32 itojun error));
1835 1.36 itojun return (NULL); /* ifaddr must not have been allocated. */
1836 1.32 itojun }
1837 1.2 itojun
1838 1.32 itojun ia = in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr);
1839 1.2 itojun
1840 1.36 itojun return (ia); /* this is always non-NULL */
1841 1.2 itojun }
1842 1.2 itojun
1843 1.2 itojun int
1844 1.64 christos in6_tmpifadd(
1845 1.64 christos const struct in6_ifaddr *ia0, /* corresponding public address */
1846 1.64 christos int forcegen,
1847 1.64 christos int dad_delay)
1848 1.56 rpaulo {
1849 1.56 rpaulo struct ifnet *ifp = ia0->ia_ifa.ifa_ifp;
1850 1.56 rpaulo struct in6_ifaddr *newia, *ia;
1851 1.56 rpaulo struct in6_aliasreq ifra;
1852 1.56 rpaulo int i, error;
1853 1.56 rpaulo int trylimit = 3; /* XXX: adhoc value */
1854 1.56 rpaulo int updateflags;
1855 1.56 rpaulo u_int32_t randid[2];
1856 1.56 rpaulo u_int32_t vltime0, pltime0;
1857 1.56 rpaulo
1858 1.56 rpaulo memset(&ifra, 0, sizeof(ifra));
1859 1.56 rpaulo strncpy(ifra.ifra_name, if_name(ifp), sizeof(ifra.ifra_name));
1860 1.56 rpaulo ifra.ifra_addr = ia0->ia_addr;
1861 1.56 rpaulo /* copy prefix mask */
1862 1.56 rpaulo ifra.ifra_prefixmask = ia0->ia_prefixmask;
1863 1.56 rpaulo /* clear the old IFID */
1864 1.56 rpaulo for (i = 0; i < 4; i++) {
1865 1.56 rpaulo ifra.ifra_addr.sin6_addr.s6_addr32[i] &=
1866 1.56 rpaulo ifra.ifra_prefixmask.sin6_addr.s6_addr32[i];
1867 1.56 rpaulo }
1868 1.56 rpaulo
1869 1.56 rpaulo again:
1870 1.56 rpaulo if (in6_get_tmpifid(ifp, (u_int8_t *)randid,
1871 1.56 rpaulo (const u_int8_t *)&ia0->ia_addr.sin6_addr.s6_addr[8], forcegen)) {
1872 1.56 rpaulo nd6log((LOG_NOTICE, "in6_tmpifadd: failed to find a good "
1873 1.56 rpaulo "random IFID\n"));
1874 1.56 rpaulo return (EINVAL);
1875 1.56 rpaulo }
1876 1.56 rpaulo ifra.ifra_addr.sin6_addr.s6_addr32[2] |=
1877 1.56 rpaulo (randid[0] & ~(ifra.ifra_prefixmask.sin6_addr.s6_addr32[2]));
1878 1.56 rpaulo ifra.ifra_addr.sin6_addr.s6_addr32[3] |=
1879 1.56 rpaulo (randid[1] & ~(ifra.ifra_prefixmask.sin6_addr.s6_addr32[3]));
1880 1.56 rpaulo
1881 1.56 rpaulo /*
1882 1.56 rpaulo * in6_get_tmpifid() quite likely provided a unique interface ID.
1883 1.56 rpaulo * However, we may still have a chance to see collision, because
1884 1.56 rpaulo * there may be a time lag between generation of the ID and generation
1885 1.56 rpaulo * of the address. So, we'll do one more sanity check.
1886 1.56 rpaulo */
1887 1.56 rpaulo for (ia = in6_ifaddr; ia; ia = ia->ia_next) {
1888 1.56 rpaulo if (IN6_ARE_ADDR_EQUAL(&ia->ia_addr.sin6_addr,
1889 1.56 rpaulo &ifra.ifra_addr.sin6_addr)) {
1890 1.56 rpaulo if (trylimit-- == 0) {
1891 1.56 rpaulo /*
1892 1.56 rpaulo * Give up. Something strange should have
1893 1.56 rpaulo * happened.
1894 1.56 rpaulo */
1895 1.56 rpaulo nd6log((LOG_NOTICE, "in6_tmpifadd: failed to "
1896 1.56 rpaulo "find a unique random IFID\n"));
1897 1.56 rpaulo return (EEXIST);
1898 1.56 rpaulo }
1899 1.56 rpaulo forcegen = 1;
1900 1.56 rpaulo goto again;
1901 1.56 rpaulo }
1902 1.56 rpaulo }
1903 1.56 rpaulo
1904 1.56 rpaulo /*
1905 1.56 rpaulo * The Valid Lifetime is the lower of the Valid Lifetime of the
1906 1.56 rpaulo * public address or TEMP_VALID_LIFETIME.
1907 1.56 rpaulo * The Preferred Lifetime is the lower of the Preferred Lifetime
1908 1.56 rpaulo * of the public address or TEMP_PREFERRED_LIFETIME -
1909 1.56 rpaulo * DESYNC_FACTOR.
1910 1.56 rpaulo */
1911 1.56 rpaulo if (ia0->ia6_lifetime.ia6t_vltime != ND6_INFINITE_LIFETIME) {
1912 1.56 rpaulo vltime0 = IFA6_IS_INVALID(ia0) ? 0 :
1913 1.56 rpaulo (ia0->ia6_lifetime.ia6t_vltime -
1914 1.56 rpaulo (time_second - ia0->ia6_updatetime));
1915 1.56 rpaulo if (vltime0 > ip6_temp_valid_lifetime)
1916 1.56 rpaulo vltime0 = ip6_temp_valid_lifetime;
1917 1.56 rpaulo } else
1918 1.56 rpaulo vltime0 = ip6_temp_valid_lifetime;
1919 1.56 rpaulo if (ia0->ia6_lifetime.ia6t_pltime != ND6_INFINITE_LIFETIME) {
1920 1.56 rpaulo pltime0 = IFA6_IS_DEPRECATED(ia0) ? 0 :
1921 1.56 rpaulo (ia0->ia6_lifetime.ia6t_pltime -
1922 1.56 rpaulo (time_second - ia0->ia6_updatetime));
1923 1.56 rpaulo if (pltime0 > ip6_temp_preferred_lifetime - ip6_desync_factor){
1924 1.56 rpaulo pltime0 = ip6_temp_preferred_lifetime -
1925 1.56 rpaulo ip6_desync_factor;
1926 1.56 rpaulo }
1927 1.56 rpaulo } else
1928 1.56 rpaulo pltime0 = ip6_temp_preferred_lifetime - ip6_desync_factor;
1929 1.56 rpaulo ifra.ifra_lifetime.ia6t_vltime = vltime0;
1930 1.56 rpaulo ifra.ifra_lifetime.ia6t_pltime = pltime0;
1931 1.56 rpaulo
1932 1.56 rpaulo /*
1933 1.56 rpaulo * A temporary address is created only if this calculated Preferred
1934 1.56 rpaulo * Lifetime is greater than REGEN_ADVANCE time units.
1935 1.56 rpaulo */
1936 1.56 rpaulo if (ifra.ifra_lifetime.ia6t_pltime <= ip6_temp_regen_advance)
1937 1.56 rpaulo return (0);
1938 1.56 rpaulo
1939 1.56 rpaulo /* XXX: scope zone ID? */
1940 1.56 rpaulo
1941 1.56 rpaulo ifra.ifra_flags |= (IN6_IFF_AUTOCONF|IN6_IFF_TEMPORARY);
1942 1.56 rpaulo
1943 1.56 rpaulo /* allocate ifaddr structure, link into chain, etc. */
1944 1.56 rpaulo updateflags = 0;
1945 1.57 rpaulo if (dad_delay)
1946 1.56 rpaulo updateflags |= IN6_IFAUPDATE_DADDELAY;
1947 1.56 rpaulo if ((error = in6_update_ifa(ifp, &ifra, NULL, updateflags)) != 0)
1948 1.56 rpaulo return (error);
1949 1.56 rpaulo
1950 1.56 rpaulo newia = in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr);
1951 1.56 rpaulo if (newia == NULL) { /* XXX: can it happen? */
1952 1.56 rpaulo nd6log((LOG_ERR,
1953 1.56 rpaulo "in6_tmpifadd: ifa update succeeded, but we got "
1954 1.56 rpaulo "no ifaddr\n"));
1955 1.56 rpaulo return (EINVAL); /* XXX */
1956 1.56 rpaulo }
1957 1.56 rpaulo newia->ia6_ndpr = ia0->ia6_ndpr;
1958 1.56 rpaulo newia->ia6_ndpr->ndpr_refcnt++;
1959 1.56 rpaulo
1960 1.56 rpaulo /*
1961 1.56 rpaulo * A newly added address might affect the status of other addresses.
1962 1.56 rpaulo * XXX: when the temporary address is generated with a new public
1963 1.56 rpaulo * address, the onlink check is redundant. However, it would be safe
1964 1.56 rpaulo * to do the check explicitly everywhere a new address is generated,
1965 1.56 rpaulo * and, in fact, we surely need the check when we create a new
1966 1.56 rpaulo * temporary address due to deprecation of an old temporary address.
1967 1.56 rpaulo */
1968 1.56 rpaulo pfxlist_onlink_check();
1969 1.56 rpaulo
1970 1.56 rpaulo return (0);
1971 1.56 rpaulo }
1972 1.56 rpaulo
1973 1.56 rpaulo static int
1974 1.2 itojun in6_init_prefix_ltimes(struct nd_prefix *ndpr)
1975 1.2 itojun {
1976 1.7 itojun
1977 1.26 itojun /* check if preferred lifetime > valid lifetime. RFC2462 5.5.3 (c) */
1978 1.2 itojun if (ndpr->ndpr_pltime > ndpr->ndpr_vltime) {
1979 1.22 itojun nd6log((LOG_INFO, "in6_init_prefix_ltimes: preferred lifetime"
1980 1.2 itojun "(%d) is greater than valid lifetime(%d)\n",
1981 1.22 itojun (u_int)ndpr->ndpr_pltime, (u_int)ndpr->ndpr_vltime));
1982 1.2 itojun return (EINVAL);
1983 1.2 itojun }
1984 1.7 itojun if (ndpr->ndpr_pltime == ND6_INFINITE_LIFETIME)
1985 1.2 itojun ndpr->ndpr_preferred = 0;
1986 1.2 itojun else
1987 1.59 kardel ndpr->ndpr_preferred = time_second + ndpr->ndpr_pltime;
1988 1.7 itojun if (ndpr->ndpr_vltime == ND6_INFINITE_LIFETIME)
1989 1.2 itojun ndpr->ndpr_expire = 0;
1990 1.2 itojun else
1991 1.59 kardel ndpr->ndpr_expire = time_second + ndpr->ndpr_vltime;
1992 1.2 itojun
1993 1.2 itojun return 0;
1994 1.2 itojun }
1995 1.2 itojun
1996 1.2 itojun static void
1997 1.61 christos in6_init_address_ltimes(struct nd_prefix *new,
1998 1.60 christos struct in6_addrlifetime *lt6)
1999 1.2 itojun {
2000 1.7 itojun
2001 1.7 itojun /* Valid lifetime must not be updated unless explicitly specified. */
2002 1.32 itojun /* init ia6t_expire */
2003 1.32 itojun if (lt6->ia6t_vltime == ND6_INFINITE_LIFETIME)
2004 1.32 itojun lt6->ia6t_expire = 0;
2005 1.32 itojun else {
2006 1.59 kardel lt6->ia6t_expire = time_second;
2007 1.32 itojun lt6->ia6t_expire += lt6->ia6t_vltime;
2008 1.2 itojun }
2009 1.7 itojun
2010 1.2 itojun /* init ia6t_preferred */
2011 1.7 itojun if (lt6->ia6t_pltime == ND6_INFINITE_LIFETIME)
2012 1.2 itojun lt6->ia6t_preferred = 0;
2013 1.2 itojun else {
2014 1.59 kardel lt6->ia6t_preferred = time_second;
2015 1.2 itojun lt6->ia6t_preferred += lt6->ia6t_pltime;
2016 1.2 itojun }
2017 1.2 itojun }
2018 1.2 itojun
2019 1.2 itojun /*
2020 1.2 itojun * Delete all the routing table entries that use the specified gateway.
2021 1.2 itojun * XXX: this function causes search through all entries of routing table, so
2022 1.16 itojun * it shouldn't be called when acting as a router.
2023 1.2 itojun */
2024 1.2 itojun void
2025 1.61 christos rt6_flush(struct in6_addr *gateway, struct ifnet *ifp)
2026 1.2 itojun {
2027 1.4 itojun int s = splsoftnet();
2028 1.2 itojun
2029 1.2 itojun /* We'll care only link-local addresses */
2030 1.2 itojun if (!IN6_IS_ADDR_LINKLOCAL(gateway)) {
2031 1.2 itojun splx(s);
2032 1.2 itojun return;
2033 1.2 itojun }
2034 1.2 itojun
2035 1.65 dyoung rt_walktree(AF_INET6, rt6_deleteroute, (void *)gateway);
2036 1.2 itojun splx(s);
2037 1.2 itojun }
2038 1.2 itojun
2039 1.2 itojun static int
2040 1.65 dyoung rt6_deleteroute(struct rtentry *rt, void *arg)
2041 1.2 itojun {
2042 1.2 itojun #define SIN6(s) ((struct sockaddr_in6 *)s)
2043 1.2 itojun struct in6_addr *gate = (struct in6_addr *)arg;
2044 1.2 itojun
2045 1.2 itojun if (rt->rt_gateway == NULL || rt->rt_gateway->sa_family != AF_INET6)
2046 1.36 itojun return (0);
2047 1.2 itojun
2048 1.2 itojun if (!IN6_ARE_ADDR_EQUAL(gate, &SIN6(rt->rt_gateway)->sin6_addr))
2049 1.36 itojun return (0);
2050 1.26 itojun
2051 1.26 itojun /*
2052 1.32 itojun * Do not delete a static route.
2053 1.32 itojun * XXX: this seems to be a bit ad-hoc. Should we consider the
2054 1.32 itojun * 'cloned' bit instead?
2055 1.32 itojun */
2056 1.32 itojun if ((rt->rt_flags & RTF_STATIC) != 0)
2057 1.36 itojun return (0);
2058 1.32 itojun
2059 1.32 itojun /*
2060 1.2 itojun * We delete only host route. This means, in particular, we don't
2061 1.2 itojun * delete default route.
2062 1.2 itojun */
2063 1.2 itojun if ((rt->rt_flags & RTF_HOST) == 0)
2064 1.36 itojun return (0);
2065 1.2 itojun
2066 1.66 dyoung return (rtrequest(RTM_DELETE, rt_getkey(rt), rt->rt_gateway,
2067 1.32 itojun rt_mask(rt), rt->rt_flags, 0));
2068 1.2 itojun #undef SIN6
2069 1.2 itojun }
2070 1.7 itojun
2071 1.7 itojun int
2072 1.64 christos nd6_setdefaultiface(int ifindex)
2073 1.7 itojun {
2074 1.7 itojun int error = 0;
2075 1.7 itojun
2076 1.48 itojun if (ifindex < 0 || if_indexlim <= ifindex)
2077 1.48 itojun return (EINVAL);
2078 1.48 itojun if (ifindex != 0 && !ifindex2ifnet[ifindex])
2079 1.36 itojun return (EINVAL);
2080 1.7 itojun
2081 1.7 itojun if (nd6_defifindex != ifindex) {
2082 1.7 itojun nd6_defifindex = ifindex;
2083 1.26 itojun if (nd6_defifindex > 0) {
2084 1.7 itojun nd6_defifp = ifindex2ifnet[nd6_defifindex];
2085 1.26 itojun } else
2086 1.7 itojun nd6_defifp = NULL;
2087 1.54 rpaulo
2088 1.54 rpaulo /*
2089 1.54 rpaulo * Our current implementation assumes one-to-one maping between
2090 1.54 rpaulo * interfaces and links, so it would be natural to use the
2091 1.54 rpaulo * default interface as the default link.
2092 1.54 rpaulo */
2093 1.54 rpaulo scope6_setdefault(nd6_defifp);
2094 1.7 itojun }
2095 1.7 itojun
2096 1.36 itojun return (error);
2097 1.7 itojun }
2098