projects / project / netifd.git / blob
? search:


21110c552157268e18514fa25e1590f9e5a31af4
[project/netifd.git] / system-linux.c
1 /*
2 * netifd - network interface daemon
3 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
4 * Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
5 * Copyright (C) 2013 Steven Barth <steven@midlink.org>
6 * Copyright (C) 2014 Gioacchino Mazzurco <gio@eigenlab.org>
7 * Copyright (C) 2017 Matthias Schiffer <mschiffer@universe-factory.net>
8 * Copyright (C) 2018 Hans Dedecker <dedeckeh@gmail.com>
9 *
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License version 2
12 * as published by the Free Software Foundation
13 *
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
18 */
19 #define _GNU_SOURCE
20
21 #include <sys/socket.h>
22 #include <sys/ioctl.h>
23 #include <sys/stat.h>
24 #include <sys/syscall.h>
25
26 #include <net/if.h>
27 #include <net/if_arp.h>
28
29 #include <limits.h>
30 #include <arpa/inet.h>
31 #include <netinet/in.h>
32 #include <netinet/ether.h>
33
34 #include <linux/rtnetlink.h>
35 #include <linux/neighbour.h>
36 #include <linux/sockios.h>
37 #include <linux/ip.h>
38 #include <linux/if_addr.h>
39 #include <linux/if_link.h>
40 #include <linux/if_vlan.h>
41 #include <linux/if_bridge.h>
42 #include <linux/if_tunnel.h>
43 #include <linux/ip6_tunnel.h>
44 #include <linux/ethtool.h>
45 #include <linux/fib_rules.h>
46 #include <linux/veth.h>
47 #include <linux/version.h>
48
49 #include <sched.h>
50
51 #include "ethtool-modes.h"
52
53 #ifndef RTN_FAILED_POLICY
54 #define RTN_FAILED_POLICY 12
55 #endif
56
57 #ifndef IFA_F_NOPREFIXROUTE
58 #define IFA_F_NOPREFIXROUTE 0x200
59 #endif
60
61 #ifndef IFA_FLAGS
62 #define IFA_FLAGS (IFA_MULTICAST + 1)
63 #endif
64
65 #include <string.h>
66 #include <fcntl.h>
67 #include <glob.h>
68 #include <time.h>
69 #include <unistd.h>
70
71 #include <netlink/msg.h>
72 #include <netlink/attr.h>
73 #include <netlink/socket.h>
74 #include <libubox/uloop.h>
75
76 #include "netifd.h"
77 #include "device.h"
78 #include "system.h"
79 #include "utils.h"
80
81 struct event_socket {
82 struct uloop_fd uloop;
83 struct nl_sock *sock;
84 int bufsize;
85 };
86
87 static int sock_ioctl = -1;
88 static struct nl_sock *sock_rtnl = NULL;
89
90 static int cb_rtnl_event(struct nl_msg *msg, void *arg);
91 static void handle_hotplug_event(struct uloop_fd *u, unsigned int events);
92 static int system_add_proto_tunnel(const char *name, const uint8_t proto,
93 const unsigned int link, struct blob_attr **tb);
94
95 static char dev_buf[256];
96 static const char *proc_path = "/proc";
97 static const char *sysfs_path = "/sys";
98
99 struct netdev_type {
100 unsigned short id;
101 const char *name;
102 };
103
104 static const struct netdev_type netdev_types[] = {
105 {ARPHRD_NETROM, "netrom"},
106 {ARPHRD_ETHER, "ethernet"},
107 {ARPHRD_EETHER, "eethernet"},
108 {ARPHRD_AX25, "ax25"},
109 {ARPHRD_PRONET, "pronet"},
110 {ARPHRD_CHAOS, "chaos"},
111 {ARPHRD_IEEE802, "ieee802"},
112 {ARPHRD_ARCNET, "arcnet"},
113 {ARPHRD_APPLETLK, "appletlk"},
114 {ARPHRD_DLCI, "dlci"},
115 {ARPHRD_ATM, "atm"},
116 {ARPHRD_METRICOM, "metricom"},
117 {ARPHRD_IEEE1394, "ieee1394"},
118 {ARPHRD_EUI64, "eui64"},
119 {ARPHRD_INFINIBAND, "infiniband"},
120 {ARPHRD_SLIP, "slip"},
121 {ARPHRD_CSLIP, "cslip"},
122 {ARPHRD_SLIP6, "slip6"},
123 {ARPHRD_CSLIP6, "cslip6"},
124 {ARPHRD_RSRVD, "rsrvd"},
125 {ARPHRD_ADAPT, "adapt"},
126 {ARPHRD_ROSE, "rose"},
127 {ARPHRD_X25, "x25"},
128 {ARPHRD_HWX25, "hwx25"},
129 {ARPHRD_PPP, "ppp"},
130 {ARPHRD_CISCO, "cisco"},
131 {ARPHRD_LAPB, "lapb"},
132 {ARPHRD_DDCMP, "ddcmp"},
133 {ARPHRD_RAWHDLC, "rawhdlc"},
134 {ARPHRD_TUNNEL, "tunnel"},
135 {ARPHRD_TUNNEL6, "tunnel6"},
136 {ARPHRD_FRAD, "frad"},
137 {ARPHRD_SKIP, "skip"},
138 {ARPHRD_LOOPBACK, "loopback"},
139 {ARPHRD_LOCALTLK, "localtlk"},
140 {ARPHRD_FDDI, "fddi"},
141 {ARPHRD_BIF, "bif"},
142 {ARPHRD_SIT, "sit"},
143 {ARPHRD_IPDDP, "ipddp"},
144 {ARPHRD_IPGRE, "ipgre"},
145 {ARPHRD_PIMREG,"pimreg"},
146 {ARPHRD_HIPPI, "hippi"},
147 {ARPHRD_ASH, "ash"},
148 {ARPHRD_ECONET, "econet"},
149 {ARPHRD_IRDA, "irda"},
150 {ARPHRD_FCPP, "fcpp"},
151 {ARPHRD_FCAL, "fcal"},
152 {ARPHRD_FCPL, "fcpl"},
153 {ARPHRD_FCFABRIC, "fcfabric"},
154 {ARPHRD_IEEE80211, "ieee80211"},
155 {ARPHRD_IEEE80211_PRISM, "ie80211-prism"},
156 {ARPHRD_IEEE80211_RADIOTAP, "ieee80211-radiotap"},
157 #ifdef ARPHRD_PHONET
158 {ARPHRD_PHONET, "phonet"},
159 #endif
160 #ifdef ARPHRD_PHONET_PIPE
161 {ARPHRD_PHONET_PIPE, "phonet-pipe"},
162 #endif
163 {ARPHRD_IEEE802154, "ieee802154"},
164 {ARPHRD_VOID, "void"},
165 {ARPHRD_NONE, "none"}
166 };
167
168 static void
169 handler_nl_event(struct uloop_fd *u, unsigned int events)
170 {
171 struct event_socket *ev = container_of(u, struct event_socket, uloop);
172 int err;
173 socklen_t errlen = sizeof(err);
174
175 if (!u->error) {
176 nl_recvmsgs_default(ev->sock);
177 return;
178 }
179
180 if (getsockopt(u->fd, SOL_SOCKET, SO_ERROR, (void *)&err, &errlen))
181 goto abort;
182
183 switch(err) {
184 case ENOBUFS:
185 /* Increase rx buffer size on netlink socket */
186 ev->bufsize *= 2;
187 if (nl_socket_set_buffer_size(ev->sock, ev->bufsize, 0))
188 goto abort;
189
190 /* Request full dump since some info got dropped */
191 struct rtgenmsg msg = { .rtgen_family = AF_UNSPEC };
192 nl_send_simple(ev->sock, RTM_GETLINK, NLM_F_DUMP, &msg, sizeof(msg));
193 break;
194
195 default:
196 goto abort;
197 }
198 u->error = false;
199 return;
200
201 abort:
202 uloop_fd_delete(&ev->uloop);
203 return;
204 }
205
206 static struct nl_sock *
207 create_socket(int protocol, int groups)
208 {
209 struct nl_sock *sock;
210
211 sock = nl_socket_alloc();
212 if (!sock)
213 return NULL;
214
215 if (groups)
216 nl_join_groups(sock, groups);
217
218 if (nl_connect(sock, protocol)) {
219 nl_socket_free(sock);
220 return NULL;
221 }
222
223 return sock;
224 }
225
226 static bool
227 create_raw_event_socket(struct event_socket *ev, int protocol, int groups,
228 uloop_fd_handler cb, int flags)
229 {
230 ev->sock = create_socket(protocol, groups);
231 if (!ev->sock)
232 return false;
233
234 ev->uloop.fd = nl_socket_get_fd(ev->sock);
235 ev->uloop.cb = cb;
236 if (uloop_fd_add(&ev->uloop, ULOOP_READ|flags))
237 return false;
238
239 return true;
240 }
241
242 static bool
243 create_event_socket(struct event_socket *ev, int protocol,
244 int (*cb)(struct nl_msg *msg, void *arg))
245 {
246 if (!create_raw_event_socket(ev, protocol, 0, handler_nl_event, ULOOP_ERROR_CB))
247 return false;
248
249 /* Install the valid custom callback handler */
250 nl_socket_modify_cb(ev->sock, NL_CB_VALID, NL_CB_CUSTOM, cb, NULL);
251
252 /* Disable sequence number checking on event sockets */
253 nl_socket_disable_seq_check(ev->sock);
254
255 /* Increase rx buffer size to 65K on event sockets */
256 ev->bufsize = 65535;
257 if (nl_socket_set_buffer_size(ev->sock, ev->bufsize, 0))
258 return false;
259
260 return true;
261 }
262
263 static bool
264 create_hotplug_event_socket(struct event_socket *ev, int protocol,
265 void (*cb)(struct uloop_fd *u, unsigned int events))
266 {
267 if (!create_raw_event_socket(ev, protocol, 1, cb, ULOOP_ERROR_CB))
268 return false;
269
270 /* Increase rx buffer size to 65K on event sockets */
271 ev->bufsize = 65535;
272 if (nl_socket_set_buffer_size(ev->sock, ev->bufsize, 0))
273 return false;
274
275 return true;
276 }
277
278 static bool
279 system_rtn_aton(const char *src, unsigned int *dst)
280 {
281 char *e;
282 unsigned int n;
283
284 if (!strcmp(src, "local"))
285 n = RTN_LOCAL;
286 else if (!strcmp(src, "nat"))
287 n = RTN_NAT;
288 else if (!strcmp(src, "broadcast"))
289 n = RTN_BROADCAST;
290 else if (!strcmp(src, "anycast"))
291 n = RTN_ANYCAST;
292 else if (!strcmp(src, "multicast"))
293 n = RTN_MULTICAST;
294 else if (!strcmp(src, "prohibit"))
295 n = RTN_PROHIBIT;
296 else if (!strcmp(src, "unreachable"))
297 n = RTN_UNREACHABLE;
298 else if (!strcmp(src, "blackhole"))
299 n = RTN_BLACKHOLE;
300 else if (!strcmp(src, "xresolve"))
301 n = RTN_XRESOLVE;
302 else if (!strcmp(src, "unicast"))
303 n = RTN_UNICAST;
304 else if (!strcmp(src, "throw"))
305 n = RTN_THROW;
306 else if (!strcmp(src, "failed_policy"))
307 n = RTN_FAILED_POLICY;
308 else {
309 n = strtoul(src, &e, 0);
310 if (!e || *e || e == src || n > 255)
311 return false;
312 }
313
314 *dst = n;
315 return true;
316 }
317
318 static bool
319 system_tos_aton(const char *src, unsigned *dst)
320 {
321 char *e;
322
323 *dst = strtoul(src, &e, 16);
324 if (e == src || *e || *dst > 255)
325 return false;
326
327 return true;
328 }
329
330 int system_init(void)
331 {
332 static struct event_socket rtnl_event;
333 static struct event_socket hotplug_event;
334
335 sock_ioctl = socket(AF_LOCAL, SOCK_DGRAM, 0);
336 system_fd_set_cloexec(sock_ioctl);
337
338 /* Prepare socket for routing / address control */
339 sock_rtnl = create_socket(NETLINK_ROUTE, 0);
340 if (!sock_rtnl)
341 return -1;
342
343 if (!create_event_socket(&rtnl_event, NETLINK_ROUTE, cb_rtnl_event))
344 return -1;
345
346 if (!create_hotplug_event_socket(&hotplug_event, NETLINK_KOBJECT_UEVENT,
347 handle_hotplug_event))
348 return -1;
349
350 /* Receive network link events form kernel */
351 nl_socket_add_membership(rtnl_event.sock, RTNLGRP_LINK);
352
353 return 0;
354 }
355
356 static void write_file(const char *path, const char *val)
357 {
358 int fd;
359
360 fd = open(path, O_WRONLY);
361 if (fd < 0)
362 return;
363
364 if (write(fd, val, strlen(val))) {}
365 close(fd);
366 }
367
368 static int read_file(const char *path, char *buf, const size_t buf_sz)
369 {
370 int fd = -1, ret = -1;
371
372 fd = open(path, O_RDONLY);
373 if (fd < 0)
374 goto out;
375
376 ssize_t len = read(fd, buf, buf_sz - 1);
377 if (len < 0)
378 goto out;
379
380 ret = buf[len] = 0;
381
382 out:
383 if (fd >= 0)
384 close(fd);
385
386 return ret;
387 }
388
389
390 static const char *
391 dev_sysctl_path(const char *prefix, const char *ifname, const char *file)
392 {
393 snprintf(dev_buf, sizeof(dev_buf), "%s/sys/net/%s/%s/%s", proc_path, prefix, ifname, file);
394
395 return dev_buf;
396 }
397
398 static const char *
399 dev_sysfs_path(const char *ifname, const char *file)
400 {
401 snprintf(dev_buf, sizeof(dev_buf), "%s/class/net/%s/%s", sysfs_path, ifname, file);
402
403 return dev_buf;
404 }
405
406 static void
407 system_set_dev_sysctl(const char *prefix, const char *file, const char *ifname,
408 const char *val)
409 {
410 write_file(dev_sysctl_path(prefix, ifname, file), val);
411 }
412
413 static int
414 system_get_dev_sysctl(const char *prefix, const char *file, const char *ifname,
415 char *buf, size_t buf_sz)
416 {
417 return read_file(dev_sysctl_path(prefix, ifname, file), buf, buf_sz);
418 }
419
420 static void
421 system_set_dev_sysfs(const char *file, const char *ifname, const char *val)
422 {
423 if (!val)
424 return;
425
426 write_file(dev_sysfs_path(ifname, file), val);
427 }
428
429 static void
430 system_set_dev_sysfs_int(const char *file, const char *ifname, int val)
431 {
432 char buf[16];
433
434 snprintf(buf, sizeof(buf), "%d", val);
435 system_set_dev_sysfs(file, ifname, buf);
436 }
437
438 static int
439 system_get_dev_sysfs(const char *file, const char *ifname, char *buf, size_t buf_sz)
440 {
441 return read_file(dev_sysfs_path(ifname, file), buf, buf_sz);
442 }
443
444 static void system_set_disable_ipv6(struct device *dev, const char *val)
445 {
446 system_set_dev_sysctl("ipv6/conf", "disable_ipv6", dev->ifname, val);
447 }
448
449 static void system_set_ip6segmentrouting(struct device *dev, const char *val)
450 {
451 system_set_dev_sysctl("ipv6/conf", "seg6_enabled", dev->ifname, val);
452 }
453
454 static void system_set_rpfilter(struct device *dev, const char *val)
455 {
456 system_set_dev_sysctl("ipv4/conf", "rp_filter", dev->ifname, val);
457 }
458
459 static void system_set_acceptlocal(struct device *dev, const char *val)
460 {
461 system_set_dev_sysctl("ipv4/conf", "accept_local", dev->ifname, val);
462 }
463
464 static void system_set_igmpversion(struct device *dev, const char *val)
465 {
466 system_set_dev_sysctl("ipv4/conf", "force_igmp_version", dev->ifname, val);
467 }
468
469 static void system_set_mldversion(struct device *dev, const char *val)
470 {
471 system_set_dev_sysctl("ipv6/conf", "force_mld_version", dev->ifname, val);
472 }
473
474 static void system_set_neigh4reachabletime(struct device *dev, const char *val)
475 {
476 system_set_dev_sysctl("ipv4/neigh", "base_reachable_time_ms", dev->ifname, val);
477 }
478
479 static void system_set_neigh6reachabletime(struct device *dev, const char *val)
480 {
481 system_set_dev_sysctl("ipv6/neigh", "base_reachable_time_ms", dev->ifname, val);
482 }
483
484 static void system_set_neigh4gcstaletime(struct device *dev, const char *val)
485 {
486 system_set_dev_sysctl("ipv4/neigh", "gc_stale_time", dev->ifname, val);
487 }
488
489 static void system_set_neigh6gcstaletime(struct device *dev, const char *val)
490 {
491 system_set_dev_sysctl("ipv6/neigh", "gc_stale_time", dev->ifname, val);
492 }
493
494 static void system_set_neigh4locktime(struct device *dev, const char *val)
495 {
496 system_set_dev_sysctl("ipv4/neigh", "locktime", dev->ifname, val);
497 }
498
499 static void system_set_dadtransmits(struct device *dev, const char *val)
500 {
501 system_set_dev_sysctl("ipv6/conf", "dad_transmits", dev->ifname, val);
502 }
503
504 static void system_set_sendredirects(struct device *dev, const char *val)
505 {
506 system_set_dev_sysctl("ipv4/conf", "send_redirects", dev->ifname, val);
507 }
508
509 static void system_set_drop_v4_unicast_in_l2_multicast(struct device *dev, const char *val)
510 {
511 system_set_dev_sysctl("ipv4/conf", "drop_unicast_in_l2_multicast", dev->ifname, val);
512 }
513
514 static void system_set_drop_v6_unicast_in_l2_multicast(struct device *dev, const char *val)
515 {
516 system_set_dev_sysctl("ipv6/conf", "drop_unicast_in_l2_multicast", dev->ifname, val);
517 }
518
519 static void system_set_drop_gratuitous_arp(struct device *dev, const char *val)
520 {
521 system_set_dev_sysctl("ipv4/conf", "drop_gratuitous_arp", dev->ifname, val);
522 }
523
524 static void system_set_drop_unsolicited_na(struct device *dev, const char *val)
525 {
526 system_set_dev_sysctl("ipv6/conf", "drop_unsolicited_na", dev->ifname, val);
527 }
528
529 static void system_set_arp_accept(struct device *dev, const char *val)
530 {
531 system_set_dev_sysctl("ipv4/conf", "arp_accept", dev->ifname, val);
532 }
533
534 static void system_bridge_set_multicast_to_unicast(struct device *dev, const char *val)
535 {
536 system_set_dev_sysfs("brport/multicast_to_unicast", dev->ifname, val);
537 }
538
539 static void system_bridge_set_multicast_fast_leave(struct device *dev, const char *val)
540 {
541 system_set_dev_sysfs("brport/multicast_fast_leave", dev->ifname, val);
542 }
543
544 static void system_bridge_set_hairpin_mode(struct device *dev, const char *val)
545 {
546 system_set_dev_sysfs("brport/hairpin_mode", dev->ifname, val);
547 }
548
549 static void system_bridge_set_proxyarp_wifi(struct device *dev, const char *val)
550 {
551 system_set_dev_sysfs("brport/proxyarp_wifi", dev->ifname, val);
552 }
553
554 static void system_bridge_set_bpdu_filter(struct device *dev, const char *val)
555 {
556 system_set_dev_sysfs("brport/bpdu_filter", dev->ifname, val);
557 }
558
559 static void system_bridge_set_isolated(struct device *dev, const char *val)
560 {
561 system_set_dev_sysfs("brport/isolated", dev->ifname, val);
562 }
563
564 static void system_bridge_set_multicast_router(struct device *dev, const char *val)
565 {
566 system_set_dev_sysfs("brport/multicast_router", dev->ifname, val);
567 }
568
569 void system_bridge_set_stp_state(struct device *dev, bool val)
570 {
571 const char *valstr = val ? "1" : "0";
572
573 system_set_dev_sysfs("bridge/stp_state", dev->ifname, valstr);
574 }
575
576 static void system_bridge_set_learning(struct device *dev, const char *val)
577 {
578 system_set_dev_sysfs("brport/learning", dev->ifname, val);
579 }
580
581 static void system_bridge_set_unicast_flood(struct device *dev, const char *val)
582 {
583 system_set_dev_sysfs("brport/unicast_flood", dev->ifname, val);
584 }
585
586 static int system_get_disable_ipv6(struct device *dev, char *buf, const size_t buf_sz)
587 {
588 return system_get_dev_sysctl("ipv6/conf", "disable_ipv6",
589 dev->ifname, buf, buf_sz);
590 }
591
592 static int system_get_ip6segmentrouting(struct device *dev, char *buf, const size_t buf_sz)
593 {
594 return system_get_dev_sysctl("ipv6/conf", "seg6_enabled",
595 dev->ifname, buf, buf_sz);
596 }
597
598 static int system_get_rpfilter(struct device *dev, char *buf, const size_t buf_sz)
599 {
600 return system_get_dev_sysctl("ipv4/conf", "rp_filter",
601 dev->ifname, buf, buf_sz);
602 }
603
604 static int system_get_acceptlocal(struct device *dev, char *buf, const size_t buf_sz)
605 {
606 return system_get_dev_sysctl("ipv4/conf", "accept_local",
607 dev->ifname, buf, buf_sz);
608 }
609
610 static int system_get_igmpversion(struct device *dev, char *buf, const size_t buf_sz)
611 {
612 return system_get_dev_sysctl("ipv4/conf", "force_igmp_version",
613 dev->ifname, buf, buf_sz);
614 }
615
616 static int system_get_mldversion(struct device *dev, char *buf, const size_t buf_sz)
617 {
618 return system_get_dev_sysctl("ipv6/conf", "force_mld_version",
619 dev->ifname, buf, buf_sz);
620 }
621
622 static int system_get_neigh4reachabletime(struct device *dev, char *buf, const size_t buf_sz)
623 {
624 return system_get_dev_sysctl("ipv4/neigh", "base_reachable_time_ms",
625 dev->ifname, buf, buf_sz);
626 }
627
628 static int system_get_neigh6reachabletime(struct device *dev, char *buf, const size_t buf_sz)
629 {
630 return system_get_dev_sysctl("ipv6/neigh", "base_reachable_time_ms",
631 dev->ifname, buf, buf_sz);
632 }
633
634 static int system_get_neigh4gcstaletime(struct device *dev, char *buf, const size_t buf_sz)
635 {
636 return system_get_dev_sysctl("ipv4/neigh", "gc_stale_time",
637 dev->ifname, buf, buf_sz);
638 }
639
640 static int system_get_neigh6gcstaletime(struct device *dev, char *buf, const size_t buf_sz)
641 {
642 return system_get_dev_sysctl("ipv6/neigh", "gc_stale_time",
643 dev->ifname, buf, buf_sz);
644 }
645
646 static int system_get_neigh4locktime(struct device *dev, char *buf, const size_t buf_sz)
647 {
648 return system_get_dev_sysctl("ipv4/neigh", "locktime",
649 dev->ifname, buf, buf_sz);
650 }
651
652 static int system_get_dadtransmits(struct device *dev, char *buf, const size_t buf_sz)
653 {
654 return system_get_dev_sysctl("ipv6/conf", "dad_transmits",
655 dev->ifname, buf, buf_sz);
656 }
657
658 static int system_get_sendredirects(struct device *dev, char *buf, const size_t buf_sz)
659 {
660 return system_get_dev_sysctl("ipv4/conf", "send_redirects",
661 dev->ifname, buf, buf_sz);
662 }
663
664
665 static int system_get_drop_v4_unicast_in_l2_multicast(struct device *dev, char *buf, const size_t buf_sz)
666 {
667 return system_get_dev_sysctl("ipv4/conf", "drop_unicast_in_l2_multicast",
668 dev->ifname, buf, buf_sz);
669 }
670
671 static int system_get_drop_v6_unicast_in_l2_multicast(struct device *dev, char *buf, const size_t buf_sz)
672 {
673 return system_get_dev_sysctl("ipv6/conf", "drop_unicast_in_l2_multicast",
674 dev->ifname, buf, buf_sz);
675 }
676
677 static int system_get_drop_gratuitous_arp(struct device *dev, char *buf, const size_t buf_sz)
678 {
679 return system_get_dev_sysctl("ipv4/conf", "drop_gratuitous_arp",
680 dev->ifname, buf, buf_sz);
681 }
682
683 static int system_get_drop_unsolicited_na(struct device *dev, char *buf, const size_t buf_sz)
684 {
685 return system_get_dev_sysctl("ipv6/conf", "drop_unsolicited_na",
686 dev->ifname, buf, buf_sz);
687 }
688
689 static int system_get_arp_accept(struct device *dev, char *buf, const size_t buf_sz)
690 {
691 return system_get_dev_sysctl("ipv4/conf", "arp_accept",
692 dev->ifname, buf, buf_sz);
693 }
694
695 #ifndef IFF_LOWER_UP
696 #define IFF_LOWER_UP 0x10000
697 #endif
698
699 static void
700 system_device_update_state(struct device *dev, unsigned int flags, unsigned int ifindex)
701 {
702 if (dev->type == &simple_device_type) {
703 if (dev->external)
704 device_set_disabled(dev, !(flags & IFF_UP));
705
706 device_set_present(dev, ifindex > 0);
707 }
708 device_set_link(dev, flags & IFF_LOWER_UP ? true : false);
709 }
710
711 /* Evaluate netlink messages */
712 static int cb_rtnl_event(struct nl_msg *msg, void *arg)
713 {
714 struct nlmsghdr *nh = nlmsg_hdr(msg);
715 struct ifinfomsg *ifi = NLMSG_DATA(nh);
716 struct nlattr *nla[__IFLA_MAX];
717 struct device *dev;
718
719 if (nh->nlmsg_type != RTM_NEWLINK)
720 return 0;
721
722 nlmsg_parse(nh, sizeof(struct ifinfomsg), nla, __IFLA_MAX - 1, NULL);
723 if (!nla[IFLA_IFNAME])
724 return 0;
725
726 dev = device_find(nla_data(nla[IFLA_IFNAME]));
727 if (!dev)
728 return 0;
729
730 system_device_update_state(dev, ifi->ifi_flags, ifi->ifi_index);
731 return 0;
732 }
733
734 static void
735 handle_hotplug_msg(char *data, int size)
736 {
737 const char *subsystem = NULL, *interface = NULL, *interface_old = NULL;
738 char *cur, *end, *sep;
739 int skip;
740 bool add;
741
742 if (!strncmp(data, "add@", 4) || !strncmp(data, "move@", 5))
743 add = true;
744 else if (!strncmp(data, "remove@", 7))
745 add = false;
746 else
747 return;
748
749 skip = strlen(data) + 1;
750 end = data + size;
751
752 for (cur = data + skip; cur < end; cur += skip) {
753 skip = strlen(cur) + 1;
754
755 sep = strchr(cur, '=');
756 if (!sep)
757 continue;
758
759 *sep = 0;
760 if (!strcmp(cur, "INTERFACE"))
761 interface = sep + 1;
762 else if (!strcmp(cur, "SUBSYSTEM")) {
763 subsystem = sep + 1;
764 if (strcmp(subsystem, "net") != 0)
765 return;
766 } else if (!strcmp(cur, "DEVPATH_OLD")) {
767 interface_old = strrchr(sep + 1, '/');
768 if (interface_old)
769 interface_old++;
770 }
771 }
772
773 if (!subsystem || !interface)
774 return;
775
776 if (interface_old)
777 device_hotplug_event(interface_old, false);
778
779 device_hotplug_event(interface, add);
780 }
781
782 static void
783 handle_hotplug_event(struct uloop_fd *u, unsigned int events)
784 {
785 struct event_socket *ev = container_of(u, struct event_socket, uloop);
786 struct sockaddr_nl nla;
787 unsigned char *buf = NULL;
788 int size;
789 int err;
790 socklen_t errlen = sizeof(err);
791
792 if (!u->error) {
793 while ((size = nl_recv(ev->sock, &nla, &buf, NULL)) > 0) {
794 if (nla.nl_pid == 0)
795 handle_hotplug_msg((char *) buf, size);
796
797 free(buf);
798 }
799 return;
800 }
801
802 if (getsockopt(u->fd, SOL_SOCKET, SO_ERROR, (void *)&err, &errlen))
803 goto abort;
804
805 switch(err) {
806 case ENOBUFS:
807 /* Increase rx buffer size on netlink socket */
808 ev->bufsize *= 2;
809 if (nl_socket_set_buffer_size(ev->sock, ev->bufsize, 0))
810 goto abort;
811 break;
812
813 default:
814 goto abort;
815 }
816 u->error = false;
817 return;
818
819 abort:
820 uloop_fd_delete(&ev->uloop);
821 return;
822 }
823
824 static int system_rtnl_call(struct nl_msg *msg)
825 {
826 int ret;
827
828 ret = nl_send_auto_complete(sock_rtnl, msg);
829 nlmsg_free(msg);
830
831 if (ret < 0)
832 return ret;
833
834 return nl_wait_for_ack(sock_rtnl);
835 }
836
837 static struct nl_msg *__system_ifinfo_msg(int af, int index, const char *ifname, uint16_t type, uint16_t flags)
838 {
839 struct nl_msg *msg;
840 struct ifinfomsg iim = {
841 .ifi_family = af,
842 .ifi_index = index,
843 };
844
845 msg = nlmsg_alloc_simple(type, flags | NLM_F_REQUEST);
846 if (!msg)
847 return NULL;
848
849 nlmsg_append(msg, &iim, sizeof(iim), 0);
850 if (ifname)
851 nla_put_string(msg, IFLA_IFNAME, ifname);
852
853 return msg;
854 }
855
856 static struct nl_msg *system_ifinfo_msg(const char *ifname, uint16_t type, uint16_t flags)
857 {
858 return __system_ifinfo_msg(AF_UNSPEC, 0, ifname, type, flags);
859 }
860
861 static int system_link_del(const char *ifname)
862 {
863 struct nl_msg *msg;
864
865 msg = system_ifinfo_msg(ifname, RTM_DELLINK, 0);
866 if (!msg)
867 return -1;
868
869 return system_rtnl_call(msg);
870 }
871
872 int system_bridge_delbr(struct device *bridge)
873 {
874 return system_link_del(bridge->ifname);
875 }
876
877 static int system_bridge_if(const char *bridge, struct device *dev, int cmd, void *data)
878 {
879 struct ifreq ifr;
880
881 memset(&ifr, 0, sizeof(ifr));
882 if (dev)
883 ifr.ifr_ifindex = dev->ifindex;
884 else
885 ifr.ifr_data = data;
886 strncpy(ifr.ifr_name, bridge, sizeof(ifr.ifr_name) - 1);
887 return ioctl(sock_ioctl, cmd, &ifr);
888 }
889
890 static bool system_is_bridge(const char *name)
891 {
892 struct stat st;
893
894 return stat(dev_sysfs_path(name, "bridge"), &st) >= 0;
895 }
896
897 static char *system_get_bridge(const char *name, char *buf, int buflen)
898 {
899 char *path;
900 ssize_t len = -1;
901 glob_t gl;
902
903 snprintf(buf, buflen, "%s/devices/virtual/net/*/brif/%s/bridge", sysfs_path, name);
904 if (glob(buf, GLOB_NOSORT, NULL, &gl) < 0)
905 return NULL;
906
907 if (gl.gl_pathc > 0)
908 len = readlink(gl.gl_pathv[0], buf, buflen);
909
910 globfree(&gl);
911
912 if (len < 0)
913 return NULL;
914
915 buf[len] = 0;
916 path = strrchr(buf, '/');
917 if (!path)
918 return NULL;
919
920 return path + 1;
921 }
922
923 static void
924 system_bridge_set_wireless(struct device *bridge, struct device *dev)
925 {
926 bool mcast_to_ucast = dev->wireless_ap;
927 bool hairpin;
928
929 if (dev->settings.flags & DEV_OPT_MULTICAST_TO_UNICAST)
930 mcast_to_ucast = dev->settings.multicast_to_unicast;
931 else if (bridge->settings.flags & DEV_OPT_MULTICAST_TO_UNICAST &&
932 !bridge->settings.multicast_to_unicast)
933 mcast_to_ucast = false;
934
935 hairpin = mcast_to_ucast || dev->wireless_proxyarp;
936 if (dev->wireless_isolate)
937 hairpin = false;
938
939 system_bridge_set_multicast_to_unicast(dev, mcast_to_ucast ? "1" : "0");
940 system_bridge_set_hairpin_mode(dev, hairpin ? "1" : "0");
941 system_bridge_set_proxyarp_wifi(dev, dev->wireless_proxyarp ? "1" : "0");
942 }
943
944 int system_bridge_addif(struct device *bridge, struct device *dev)
945 {
946 char buf[64];
947 char *oldbr;
948 int tries = 0;
949 int ret;
950
951 retry:
952 ret = 0;
953 oldbr = system_get_bridge(dev->ifname, dev_buf, sizeof(dev_buf));
954 if (!oldbr || strcmp(oldbr, bridge->ifname) != 0) {
955 ret = system_bridge_if(bridge->ifname, dev, SIOCBRADDIF, NULL);
956 tries++;
957 D(SYSTEM, "Failed to add device '%s' to bridge '%s' (tries=%d): %s\n",
958 dev->ifname, bridge->ifname, tries, strerror(errno));
959 if (tries <= 3)
960 goto retry;
961 }
962
963 if (dev->wireless)
964 system_bridge_set_wireless(bridge, dev);
965
966 if (dev->settings.flags & DEV_OPT_MULTICAST_ROUTER) {
967 snprintf(buf, sizeof(buf), "%u", dev->settings.multicast_router);
968 system_bridge_set_multicast_router(dev, buf);
969 }
970
971 if (dev->settings.flags & DEV_OPT_MULTICAST_FAST_LEAVE &&
972 dev->settings.multicast_fast_leave)
973 system_bridge_set_multicast_fast_leave(dev, "1");
974
975 if (dev->settings.flags & DEV_OPT_LEARNING &&
976 !dev->settings.learning)
977 system_bridge_set_learning(dev, "0");
978
979 if (dev->settings.flags & DEV_OPT_UNICAST_FLOOD &&
980 !dev->settings.unicast_flood)
981 system_bridge_set_unicast_flood(dev, "0");
982
983 if (dev->settings.flags & DEV_OPT_ISOLATE &&
984 dev->settings.isolate)
985 system_bridge_set_isolated(dev, "1");
986
987 if (dev->bpdu_filter)
988 system_bridge_set_bpdu_filter(dev, dev->bpdu_filter ? "1" : "0");
989
990 return ret;
991 }
992
993 int system_bridge_delif(struct device *bridge, struct device *dev)
994 {
995 return system_bridge_if(bridge->ifname, dev, SIOCBRDELIF, NULL);
996 }
997
998 int system_bridge_vlan(const char *iface, uint16_t vid, int16_t vid_end, bool add, unsigned int vflags)
999 {
1000 struct bridge_vlan_info vinfo = { .vid = vid, };
1001 unsigned short flags = 0;
1002 struct nlattr *afspec;
1003 struct nl_msg *nlm;
1004 int index;
1005 int ret = 0;
1006
1007 index = if_nametoindex(iface);
1008 if (!index)
1009 return -1;
1010
1011 nlm = __system_ifinfo_msg(PF_BRIDGE, index, NULL, add ? RTM_SETLINK : RTM_DELLINK, 0);
1012 if (!nlm)
1013 return -1;
1014
1015 if (vflags & BRVLAN_F_SELF)
1016 flags |= BRIDGE_FLAGS_SELF;
1017
1018 if (vflags & BRVLAN_F_PVID)
1019 vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
1020
1021 if (vflags & BRVLAN_F_UNTAGGED)
1022 vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
1023
1024 afspec = nla_nest_start(nlm, IFLA_AF_SPEC);
1025 if (!afspec) {
1026 ret = -ENOMEM;
1027 goto failure;
1028 }
1029
1030 if (flags)
1031 nla_put_u16(nlm, IFLA_BRIDGE_FLAGS, flags);
1032
1033 if (vid_end > vid)
1034 vinfo.flags |= BRIDGE_VLAN_INFO_RANGE_BEGIN;
1035
1036 nla_put(nlm, IFLA_BRIDGE_VLAN_INFO, sizeof(vinfo), &vinfo);
1037
1038 if (vid_end > vid) {
1039 vinfo.flags &= ~BRIDGE_VLAN_INFO_RANGE_BEGIN;
1040 vinfo.flags |= BRIDGE_VLAN_INFO_RANGE_END;
1041 vinfo.vid = vid_end;
1042 nla_put(nlm, IFLA_BRIDGE_VLAN_INFO, sizeof(vinfo), &vinfo);
1043 }
1044
1045 nla_nest_end(nlm, afspec);
1046
1047 return system_rtnl_call(nlm);
1048
1049 failure:
1050 nlmsg_free(nlm);
1051 return ret;
1052 }
1053
1054 int system_bonding_set_device(struct device *dev, struct bonding_config *cfg)
1055 {
1056 const char *ifname = dev->ifname;
1057 struct blob_attr *cur;
1058 char op = cfg ? '+' : '-';
1059 char buf[64];
1060 size_t rem;
1061
1062 snprintf(dev_buf, sizeof(dev_buf), "%s/class/net/bonding_masters", sysfs_path);
1063 snprintf(buf, sizeof(buf), "%c%s", op, ifname);
1064 write_file(dev_buf, buf);
1065
1066 if (!cfg)
1067 return 0;
1068
1069 system_set_dev_sysfs("bonding/mode", ifname, bonding_policy_str[cfg->policy]);
1070
1071 system_set_dev_sysfs_int("bonding/all_ports_active", ifname, cfg->all_ports_active);
1072
1073 if (cfg->policy == BONDING_MODE_BALANCE_XOR ||
1074 cfg->policy == BONDING_MODE_BALANCE_TLB ||
1075 cfg->policy == BONDING_MODE_8023AD)
1076 system_set_dev_sysfs("bonding/xmit_hash_policy", ifname, cfg->xmit_hash_policy);
1077
1078 if (cfg->policy == BONDING_MODE_8023AD) {
1079 system_set_dev_sysfs("bonding/ad_actor_system", ifname, cfg->ad_actor_system);
1080 system_set_dev_sysfs_int("bonding/ad_actor_sys_prio", ifname, cfg->ad_actor_sys_prio);
1081 system_set_dev_sysfs("bonding/ad_select", ifname, cfg->ad_select);
1082 system_set_dev_sysfs("bonding/lacp_rate", ifname, cfg->lacp_rate);
1083 system_set_dev_sysfs_int("bonding/min_links", ifname, cfg->min_links);
1084 }
1085
1086 if (cfg->policy == BONDING_MODE_BALANCE_RR)
1087 system_set_dev_sysfs_int("bonding/packets_per_slave", ifname, cfg->packets_per_port);
1088
1089 if (cfg->policy == BONDING_MODE_BALANCE_TLB ||
1090 cfg->policy == BONDING_MODE_BALANCE_ALB)
1091 system_set_dev_sysfs_int("bonding/lp_interval", ifname, cfg->lp_interval);
1092
1093 if (cfg->policy == BONDING_MODE_BALANCE_TLB)
1094 system_set_dev_sysfs_int("bonding/tlb_dynamic_lb", ifname, cfg->dynamic_lb);
1095 system_set_dev_sysfs_int("bonding/resend_igmp", ifname, cfg->resend_igmp);
1096 system_set_dev_sysfs_int("bonding/num_grat_arp", ifname, cfg->num_peer_notif);
1097 system_set_dev_sysfs("bonding/primary_reselect", ifname, cfg->primary_reselect);
1098 system_set_dev_sysfs("bonding/fail_over_mac", ifname, cfg->failover_mac);
1099
1100 system_set_dev_sysfs_int((cfg->monitor_arp ?
1101 "bonding/arp_interval" :
1102 "bonding/miimon"), ifname, cfg->monitor_interval);
1103
1104 blobmsg_for_each_attr(cur, cfg->arp_target, rem) {
1105 snprintf(buf, sizeof(buf), "+%s", blobmsg_get_string(cur));
1106 system_set_dev_sysfs("bonding/arp_ip_target", ifname, buf);
1107 }
1108
1109 system_set_dev_sysfs_int("bonding/arp_all_targets", ifname, cfg->arp_all_targets);
1110 if (cfg->policy < BONDING_MODE_8023AD)
1111 system_set_dev_sysfs("bonding/arp_validate", ifname, cfg->arp_validate);
1112 system_set_dev_sysfs_int("bonding/use_carrier", ifname, cfg->use_carrier);
1113 if (!cfg->monitor_arp && cfg->monitor_interval) {
1114 system_set_dev_sysfs_int("bonding/updelay", ifname, cfg->updelay);
1115 system_set_dev_sysfs_int("bonding/downdelay", ifname, cfg->downdelay);
1116 }
1117
1118 return 0;
1119 }
1120
1121 int system_bonding_set_port(struct device *dev, struct device *port, bool add, bool primary)
1122 {
1123 const char *port_name = port->ifname;
1124 const char op_ch = add ? '+' : '-';
1125 char buf[IFNAMSIZ + 1];
1126
1127 snprintf(buf, sizeof(buf), "%c%s", op_ch, port_name);
1128 system_if_down(port);
1129 system_set_dev_sysfs("bonding/slaves", dev->ifname, buf);
1130 system_if_up(port);
1131
1132 if (primary)
1133 system_set_dev_sysfs("bonding/primary", dev->ifname,
1134 add ? port_name : "");
1135
1136 return 0;
1137 }
1138
1139 int system_if_resolve(struct device *dev)
1140 {
1141 struct ifreq ifr;
1142
1143 memset(&ifr, 0, sizeof(ifr));
1144 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name) - 1);
1145 if (!ioctl(sock_ioctl, SIOCGIFINDEX, &ifr))
1146 return ifr.ifr_ifindex;
1147 else
1148 return 0;
1149 }
1150
1151 static int system_if_flags(const char *ifname, unsigned add, unsigned rem)
1152 {
1153 struct ifreq ifr;
1154
1155 memset(&ifr, 0, sizeof(ifr));
1156 strncpy(ifr.ifr_name, ifname, sizeof(ifr.ifr_name) - 1);
1157 if (ioctl(sock_ioctl, SIOCGIFFLAGS, &ifr) < 0)
1158 return -1;
1159
1160 ifr.ifr_flags |= add;
1161 ifr.ifr_flags &= ~rem;
1162 return ioctl(sock_ioctl, SIOCSIFFLAGS, &ifr);
1163 }
1164
1165 struct clear_data {
1166 struct nl_msg *msg;
1167 struct device *dev;
1168 int type;
1169 int size;
1170 int af;
1171 };
1172
1173
1174 static bool check_ifaddr(struct nlmsghdr *hdr, int ifindex)
1175 {
1176 struct ifaddrmsg *ifa = NLMSG_DATA(hdr);
1177
1178 return (long)ifa->ifa_index == ifindex;
1179 }
1180
1181 static bool check_route(struct nlmsghdr *hdr, int ifindex)
1182 {
1183 struct rtmsg *r = NLMSG_DATA(hdr);
1184 struct nlattr *tb[__RTA_MAX];
1185
1186 if (r->rtm_protocol == RTPROT_KERNEL &&
1187 r->rtm_family == AF_INET6)
1188 return false;
1189
1190 nlmsg_parse(hdr, sizeof(struct rtmsg), tb, __RTA_MAX - 1, NULL);
1191 if (!tb[RTA_OIF])
1192 return false;
1193
1194 return *(int *)RTA_DATA(tb[RTA_OIF]) == ifindex;
1195 }
1196
1197 static bool check_rule(struct nlmsghdr *hdr, int ifindex)
1198 {
1199 return true;
1200 }
1201
1202 static int cb_clear_event(struct nl_msg *msg, void *arg)
1203 {
1204 struct clear_data *clr = arg;
1205 struct nlmsghdr *hdr = nlmsg_hdr(msg);
1206 bool (*cb)(struct nlmsghdr *, int ifindex);
1207 int type, ret;
1208
1209 switch(clr->type) {
1210 case RTM_GETADDR:
1211 type = RTM_DELADDR;
1212 if (hdr->nlmsg_type != RTM_NEWADDR)
1213 return NL_SKIP;
1214
1215 cb = check_ifaddr;
1216 break;
1217 case RTM_GETROUTE:
1218 type = RTM_DELROUTE;
1219 if (hdr->nlmsg_type != RTM_NEWROUTE)
1220 return NL_SKIP;
1221
1222 cb = check_route;
1223 break;
1224 case RTM_GETRULE:
1225 type = RTM_DELRULE;
1226 if (hdr->nlmsg_type != RTM_NEWRULE)
1227 return NL_SKIP;
1228
1229 cb = check_rule;
1230 break;
1231 default:
1232 return NL_SKIP;
1233 }
1234
1235 if (!cb(hdr, clr->dev ? clr->dev->ifindex : 0))
1236 return NL_SKIP;
1237
1238 if (type == RTM_DELRULE)
1239 D(SYSTEM, "Remove a rule\n");
1240 else
1241 D(SYSTEM, "Remove %s from device %s\n",
1242 type == RTM_DELADDR ? "an address" : "a route",
1243 clr->dev->ifname);
1244
1245 memcpy(nlmsg_hdr(clr->msg), hdr, hdr->nlmsg_len);
1246 hdr = nlmsg_hdr(clr->msg);
1247 hdr->nlmsg_type = type;
1248 hdr->nlmsg_flags = NLM_F_REQUEST;
1249
1250 nl_socket_disable_auto_ack(sock_rtnl);
1251 ret = nl_send_auto_complete(sock_rtnl, clr->msg);
1252 if (ret < 0) {
1253 if (type == RTM_DELRULE)
1254 D(SYSTEM, "Error deleting a rule: %d\n", ret);
1255 else
1256 D(SYSTEM, "Error deleting %s from device '%s': %d\n",
1257 type == RTM_DELADDR ? "an address" : "a route",
1258 clr->dev->ifname, ret);
1259 }
1260
1261 nl_socket_enable_auto_ack(sock_rtnl);
1262
1263 return NL_SKIP;
1264 }
1265
1266 static int
1267 cb_finish_event(struct nl_msg *msg, void *arg)
1268 {
1269 int *pending = arg;
1270 *pending = 0;
1271 return NL_STOP;
1272 }
1273
1274 static int
1275 error_handler(struct sockaddr_nl *nla, struct nlmsgerr *err, void *arg)
1276 {
1277 int *pending = arg;
1278 *pending = err->error;
1279 return NL_STOP;
1280 }
1281
1282 static void
1283 system_if_clear_entries(struct device *dev, int type, int af)
1284 {
1285 struct clear_data clr;
1286 struct nl_cb *cb;
1287 struct rtmsg rtm = {
1288 .rtm_family = af,
1289 .rtm_flags = RTM_F_CLONED,
1290 };
1291 int flags = NLM_F_DUMP;
1292 int pending = 1;
1293
1294 clr.af = af;
1295 clr.dev = dev;
1296 clr.type = type;
1297 switch (type) {
1298 case RTM_GETADDR:
1299 case RTM_GETRULE:
1300 clr.size = sizeof(struct rtgenmsg);
1301 break;
1302 case RTM_GETROUTE:
1303 clr.size = sizeof(struct rtmsg);
1304 break;
1305 default:
1306 return;
1307 }
1308
1309 cb = nl_cb_alloc(NL_CB_DEFAULT);
1310 if (!cb)
1311 return;
1312
1313 clr.msg = nlmsg_alloc_simple(type, flags);
1314 if (!clr.msg)
1315 goto out;
1316
1317 nlmsg_append(clr.msg, &rtm, clr.size, 0);
1318 nl_cb_set(cb, NL_CB_VALID, NL_CB_CUSTOM, cb_clear_event, &clr);
1319 nl_cb_set(cb, NL_CB_FINISH, NL_CB_CUSTOM, cb_finish_event, &pending);
1320 nl_cb_err(cb, NL_CB_CUSTOM, error_handler, &pending);
1321
1322 if (nl_send_auto_complete(sock_rtnl, clr.msg) < 0)
1323 goto free;
1324
1325 while (pending > 0)
1326 nl_recvmsgs(sock_rtnl, cb);
1327
1328 free:
1329 nlmsg_free(clr.msg);
1330 out:
1331 nl_cb_put(cb);
1332 }
1333
1334 /*
1335 * Clear bridge (membership) state and bring down device
1336 */
1337 void system_if_clear_state(struct device *dev)
1338 {
1339 static char buf[256];
1340 char *bridge;
1341 device_set_ifindex(dev, system_if_resolve(dev));
1342
1343 if (dev->external || !dev->ifindex)
1344 return;
1345
1346 system_if_flags(dev->ifname, 0, IFF_UP);
1347
1348 if (system_is_bridge(dev->ifname)) {
1349 D(SYSTEM, "Delete existing bridge named '%s'\n", dev->ifname);
1350 system_bridge_delbr(dev);
1351 return;
1352 }
1353
1354 bridge = system_get_bridge(dev->ifname, buf, sizeof(buf));
1355 if (bridge) {
1356 D(SYSTEM, "Remove device '%s' from bridge '%s'\n", dev->ifname, bridge);
1357 system_bridge_if(bridge, dev, SIOCBRDELIF, NULL);
1358 }
1359
1360 system_if_clear_entries(dev, RTM_GETROUTE, AF_INET);
1361 system_if_clear_entries(dev, RTM_GETADDR, AF_INET);
1362 system_if_clear_entries(dev, RTM_GETROUTE, AF_INET6);
1363 system_if_clear_entries(dev, RTM_GETADDR, AF_INET6);
1364 system_if_clear_entries(dev, RTM_GETNEIGH, AF_INET);
1365 system_if_clear_entries(dev, RTM_GETNEIGH, AF_INET6);
1366 system_set_disable_ipv6(dev, "0");
1367 }
1368
1369 static inline unsigned long
1370 sec_to_jiffies(int val)
1371 {
1372 return (unsigned long) val * 100;
1373 }
1374
1375 int system_bridge_addbr(struct device *bridge, struct bridge_config *cfg)
1376 {
1377 struct nlattr *linkinfo, *data;
1378 struct nl_msg *msg;
1379 uint64_t val;
1380 int rv;
1381
1382 msg = system_ifinfo_msg(bridge->ifname, RTM_NEWLINK, NLM_F_CREATE | NLM_F_EXCL);
1383 if (!msg)
1384 return -1;
1385
1386 if (!(linkinfo = nla_nest_start(msg, IFLA_LINKINFO)))
1387 goto nla_put_failure;
1388
1389 nla_put_string(msg, IFLA_INFO_KIND, "bridge");
1390
1391 if (!(data = nla_nest_start(msg, IFLA_INFO_DATA)))
1392 goto nla_put_failure;
1393
1394 nla_put_u32(msg, IFLA_BR_STP_STATE, cfg->stp);
1395 nla_put_u32(msg, IFLA_BR_FORWARD_DELAY, sec_to_jiffies(cfg->forward_delay));
1396 nla_put_u8(msg, IFLA_BR_MCAST_SNOOPING, !!cfg->igmp_snoop);
1397 nla_put_u8(msg, IFLA_BR_MCAST_QUERIER, !!cfg->multicast_querier);
1398 nla_put_u32(msg, IFLA_BR_MCAST_HASH_MAX, cfg->hash_max);
1399
1400 if (bridge->settings.flags & DEV_OPT_MULTICAST_ROUTER)
1401 nla_put_u8(msg, IFLA_BR_MCAST_ROUTER, !!bridge->settings.multicast_router);
1402
1403 if (cfg->flags & BRIDGE_OPT_ROBUSTNESS) {
1404 nla_put_u32(msg, IFLA_BR_MCAST_STARTUP_QUERY_CNT, cfg->robustness);
1405 nla_put_u32(msg, IFLA_BR_MCAST_LAST_MEMBER_CNT, cfg->robustness);
1406 }
1407
1408 if (cfg->flags & BRIDGE_OPT_QUERY_INTERVAL)
1409 nla_put_u64(msg, IFLA_BR_MCAST_QUERY_INTVL, cfg->query_interval);
1410
1411 if (cfg->flags & BRIDGE_OPT_QUERY_RESPONSE_INTERVAL)
1412 nla_put_u64(msg, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, cfg->query_response_interval);
1413
1414 if (cfg->flags & BRIDGE_OPT_LAST_MEMBER_INTERVAL)
1415 nla_put_u64(msg, IFLA_BR_MCAST_LAST_MEMBER_INTVL, cfg->last_member_interval);
1416
1417 if (cfg->flags & BRIDGE_OPT_ROBUSTNESS ||
1418 cfg->flags & BRIDGE_OPT_QUERY_INTERVAL ||
1419 cfg->flags & BRIDGE_OPT_QUERY_RESPONSE_INTERVAL) {
1420 val = cfg->robustness * cfg->query_interval +
1421 cfg->query_response_interval;
1422
1423 nla_put_u64(msg, IFLA_BR_MCAST_MEMBERSHIP_INTVL, val);
1424
1425 val -= cfg->query_response_interval / 2;
1426
1427 nla_put_u64(msg, IFLA_BR_MCAST_QUERIER_INTVL, val);
1428 }
1429
1430 if (cfg->flags & BRIDGE_OPT_QUERY_INTERVAL) {
1431 val = cfg->query_interval / 4;
1432
1433 nla_put_u64(msg, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, val);
1434 }
1435
1436 nla_put_u8(msg, IFLA_BR_VLAN_FILTERING, !!cfg->vlan_filtering);
1437 nla_put_u16(msg, IFLA_BR_PRIORITY, cfg->priority);
1438 nla_put_u32(msg, IFLA_BR_HELLO_TIME, sec_to_jiffies(cfg->hello_time));
1439 nla_put_u32(msg, IFLA_BR_MAX_AGE, sec_to_jiffies(cfg->max_age));
1440
1441 if (cfg->flags & BRIDGE_OPT_AGEING_TIME)
1442 nla_put_u32(msg, IFLA_BR_AGEING_TIME, sec_to_jiffies(cfg->ageing_time));
1443
1444 nla_nest_end(msg, data);
1445 nla_nest_end(msg, linkinfo);
1446
1447 rv = system_rtnl_call(msg);
1448 if (rv)
1449 D(SYSTEM, "Error adding bridge '%s': %d\n", bridge->ifname, rv);
1450
1451 return rv;
1452
1453 nla_put_failure:
1454 nlmsg_free(msg);
1455 return -ENOMEM;
1456 }
1457
1458 int system_macvlan_add(struct device *macvlan, struct device *dev, struct macvlan_config *cfg)
1459 {
1460 struct nl_msg *msg;
1461 struct nlattr *linkinfo, *data;
1462 size_t i;
1463 int rv;
1464 static const struct {
1465 const char *name;
1466 enum macvlan_mode val;
1467 } modes[] = {
1468 { "private", MACVLAN_MODE_PRIVATE },
1469 { "vepa", MACVLAN_MODE_VEPA },
1470 { "bridge", MACVLAN_MODE_BRIDGE },
1471 { "passthru", MACVLAN_MODE_PASSTHRU },
1472 };
1473
1474 msg = system_ifinfo_msg(macvlan->ifname, RTM_NEWLINK, NLM_F_CREATE | NLM_F_EXCL);
1475 if (!msg)
1476 return -1;
1477
1478 if (cfg->flags & MACVLAN_OPT_MACADDR)
1479 nla_put(msg, IFLA_ADDRESS, sizeof(cfg->macaddr), cfg->macaddr);
1480 nla_put_u32(msg, IFLA_LINK, dev->ifindex);
1481
1482 if (!(linkinfo = nla_nest_start(msg, IFLA_LINKINFO)))
1483 goto nla_put_failure;
1484
1485 nla_put_string(msg, IFLA_INFO_KIND, "macvlan");
1486
1487 if (!(data = nla_nest_start(msg, IFLA_INFO_DATA)))
1488 goto nla_put_failure;
1489
1490 if (cfg->mode) {
1491 for (i = 0; i < ARRAY_SIZE(modes); i++) {
1492 if (strcmp(cfg->mode, modes[i].name) != 0)
1493 continue;
1494
1495 nla_put_u32(msg, IFLA_MACVLAN_MODE, modes[i].val);
1496 break;
1497 }
1498 }
1499
1500 nla_nest_end(msg, data);
1501 nla_nest_end(msg, linkinfo);
1502
1503 rv = system_rtnl_call(msg);
1504 if (rv)
1505 D(SYSTEM, "Error adding macvlan '%s' over '%s': %d\n", macvlan->ifname, dev->ifname, rv);
1506
1507 return rv;
1508
1509 nla_put_failure:
1510 nlmsg_free(msg);
1511 return -ENOMEM;
1512 }
1513
1514 int system_link_netns_move(struct device *dev, int netns_fd, const char *target_ifname)
1515 {
1516 struct nl_msg *msg;
1517 int index;
1518
1519 if (!dev)
1520 return -1;
1521
1522 index = system_if_resolve(dev);
1523 msg = __system_ifinfo_msg(AF_UNSPEC, index, target_ifname, RTM_NEWLINK, 0);
1524 if (!msg)
1525 return -1;
1526
1527 nla_put_u32(msg, IFLA_NET_NS_FD, netns_fd);
1528 return system_rtnl_call(msg);
1529 }
1530
1531 int system_macvlan_del(struct device *macvlan)
1532 {
1533 return system_link_del(macvlan->ifname);
1534 }
1535
1536 int system_netns_open(const pid_t target_ns)
1537 {
1538 char pid_net_path[PATH_MAX];
1539
1540 snprintf(pid_net_path, sizeof(pid_net_path), "/proc/%u/ns/net", target_ns);
1541
1542 return open(pid_net_path, O_RDONLY);
1543 }
1544
1545 int system_netns_set(int netns_fd)
1546 {
1547 return setns(netns_fd, CLONE_NEWNET);
1548 }
1549
1550 int system_veth_add(struct device *veth, struct veth_config *cfg)
1551 {
1552 struct nl_msg *msg;
1553 struct ifinfomsg empty_iim = {0,};
1554 struct nlattr *linkinfo, *data, *veth_info;
1555 int rv;
1556
1557 msg = nlmsg_alloc_simple(RTM_NEWLINK, NLM_F_REQUEST | NLM_F_CREATE | NLM_F_EXCL);
1558
1559 if (!msg)
1560 return -1;
1561
1562 nlmsg_append(msg, &empty_iim, sizeof(empty_iim), 0);
1563
1564 if (cfg->flags & VETH_OPT_MACADDR)
1565 nla_put(msg, IFLA_ADDRESS, sizeof(cfg->macaddr), cfg->macaddr);
1566 nla_put_string(msg, IFLA_IFNAME, veth->ifname);
1567
1568 if (!(linkinfo = nla_nest_start(msg, IFLA_LINKINFO)))
1569 goto nla_put_failure;
1570
1571 nla_put_string(msg, IFLA_INFO_KIND, "veth");
1572
1573 if (!(data = nla_nest_start(msg, IFLA_INFO_DATA)))
1574 goto nla_put_failure;
1575
1576 if (!(veth_info = nla_nest_start(msg, VETH_INFO_PEER)))
1577 goto nla_put_failure;
1578
1579 nlmsg_append(msg, &empty_iim, sizeof(empty_iim), 0);
1580
1581 if (cfg->flags & VETH_OPT_PEER_NAME)
1582 nla_put_string(msg, IFLA_IFNAME, cfg->peer_name);
1583 if (cfg->flags & VETH_OPT_PEER_MACADDR)
1584 nla_put(msg, IFLA_ADDRESS, sizeof(cfg->peer_macaddr), cfg->peer_macaddr);
1585
1586 nla_nest_end(msg, veth_info);
1587 nla_nest_end(msg, data);
1588 nla_nest_end(msg, linkinfo);
1589
1590 rv = system_rtnl_call(msg);
1591 if (rv) {
1592 if (cfg->flags & VETH_OPT_PEER_NAME)
1593 D(SYSTEM, "Error adding veth '%s' with peer '%s': %d\n", veth->ifname, cfg->peer_name, rv);
1594 else
1595 D(SYSTEM, "Error adding veth '%s': %d\n", veth->ifname, rv);
1596 }
1597
1598 return rv;
1599
1600 nla_put_failure:
1601 nlmsg_free(msg);
1602 return -ENOMEM;
1603 }
1604
1605 int system_veth_del(struct device *veth)
1606 {
1607 return system_link_del(veth->ifname);
1608 }
1609
1610 static int system_vlan(struct device *dev, int id)
1611 {
1612 struct vlan_ioctl_args ifr = {
1613 .cmd = SET_VLAN_NAME_TYPE_CMD,
1614 .u.name_type = VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD,
1615 };
1616
1617 if (ioctl(sock_ioctl, SIOCSIFVLAN, &ifr) < 0)
1618 return -1;
1619
1620 if (id < 0) {
1621 ifr.cmd = DEL_VLAN_CMD;
1622 ifr.u.VID = 0;
1623 } else {
1624 ifr.cmd = ADD_VLAN_CMD;
1625 ifr.u.VID = id;
1626 }
1627 strncpy(ifr.device1, dev->ifname, sizeof(ifr.device1));
1628 return ioctl(sock_ioctl, SIOCSIFVLAN, &ifr);
1629 }
1630
1631 int system_vlan_add(struct device *dev, int id)
1632 {
1633 return system_vlan(dev, id);
1634 }
1635
1636 int system_vlan_del(struct device *dev)
1637 {
1638 return system_vlan(dev, -1);
1639 }
1640
1641 int system_vlandev_add(struct device *vlandev, struct device *dev, struct vlandev_config *cfg)
1642 {
1643 struct nl_msg *msg;
1644 struct nlattr *linkinfo, *data, *qos;
1645 struct ifinfomsg iim = { .ifi_family = AF_UNSPEC };
1646 struct vlan_qos_mapping *elem;
1647 struct ifla_vlan_qos_mapping nl_qos_map;
1648 int rv;
1649
1650 msg = nlmsg_alloc_simple(RTM_NEWLINK, NLM_F_REQUEST | NLM_F_CREATE | NLM_F_EXCL);
1651
1652 if (!msg)
1653 return -1;
1654
1655 nlmsg_append(msg, &iim, sizeof(iim), 0);
1656 nla_put_string(msg, IFLA_IFNAME, vlandev->ifname);
1657 nla_put_u32(msg, IFLA_LINK, dev->ifindex);
1658
1659 if (!(linkinfo = nla_nest_start(msg, IFLA_LINKINFO)))
1660 goto nla_put_failure;
1661
1662 nla_put_string(msg, IFLA_INFO_KIND, "vlan");
1663
1664 if (!(data = nla_nest_start(msg, IFLA_INFO_DATA)))
1665 goto nla_put_failure;
1666
1667 nla_put_u16(msg, IFLA_VLAN_ID, cfg->vid);
1668
1669 #if LINUX_VERSION_CODE >= KERNEL_VERSION(3,10,0)
1670 nla_put_u16(msg, IFLA_VLAN_PROTOCOL, htons(cfg->proto));
1671 #else
1672 if(cfg->proto == VLAN_PROTO_8021AD)
1673 netifd_log_message(L_WARNING, "%s Your kernel is older than linux 3.10.0, 802.1ad is not supported defaulting to 802.1q", vlandev->type->name);
1674 #endif
1675
1676 if (!(qos = nla_nest_start(msg, IFLA_VLAN_INGRESS_QOS)))
1677 goto nla_put_failure;
1678
1679 vlist_simple_for_each_element(&cfg->ingress_qos_mapping_list, elem, node) {
1680 nl_qos_map.from = elem->from;
1681 nl_qos_map.to = elem->to;
1682 nla_put(msg, IFLA_VLAN_QOS_MAPPING, sizeof(nl_qos_map), &nl_qos_map);
1683 }
1684 nla_nest_end(msg, qos);
1685
1686 if (!(qos = nla_nest_start(msg, IFLA_VLAN_EGRESS_QOS)))
1687 goto nla_put_failure;
1688
1689 vlist_simple_for_each_element(&cfg->egress_qos_mapping_list, elem, node) {
1690 nl_qos_map.from = elem->from;
1691 nl_qos_map.to = elem->to;
1692 nla_put(msg, IFLA_VLAN_QOS_MAPPING, sizeof(nl_qos_map), &nl_qos_map);
1693 }
1694 nla_nest_end(msg, qos);
1695
1696 nla_nest_end(msg, data);
1697 nla_nest_end(msg, linkinfo);
1698
1699 rv = system_rtnl_call(msg);
1700 if (rv)
1701 D(SYSTEM, "Error adding vlandev '%s' over '%s': %d\n", vlandev->ifname, dev->ifname, rv);
1702
1703 return rv;
1704
1705 nla_put_failure:
1706 nlmsg_free(msg);
1707 return -ENOMEM;
1708 }
1709
1710 int system_vlandev_del(struct device *vlandev)
1711 {
1712 return system_link_del(vlandev->ifname);
1713 }
1714
1715 #if LINUX_VERSION_CODE >= KERNEL_VERSION(6,1,0)
1716 struct if_get_master_data {
1717 int ifindex;
1718 int master_ifindex;
1719 int pending;
1720 };
1721
1722 static void if_get_master_dsa_linkinfo_attr(struct if_get_master_data *data,
1723 struct rtattr *attr)
1724 {
1725 struct rtattr *cur;
1726 int rem = RTA_PAYLOAD(attr);
1727
1728 for (cur = RTA_DATA(attr); RTA_OK(cur, rem); cur = RTA_NEXT(cur, rem)) {
1729 if (cur->rta_type != IFLA_DSA_MASTER)
1730 continue;
1731
1732 data->master_ifindex = *(__u32 *)RTA_DATA(cur);
1733 }
1734 }
1735
1736 static void if_get_master_linkinfo_attr(struct if_get_master_data *data,
1737 struct rtattr *attr)
1738 {
1739 struct rtattr *cur;
1740 int rem = RTA_PAYLOAD(attr);
1741
1742 for (cur = RTA_DATA(attr); RTA_OK(cur, rem); cur = RTA_NEXT(cur, rem)) {
1743 if (cur->rta_type != IFLA_INFO_KIND && cur->rta_type != IFLA_INFO_DATA)
1744 continue;
1745
1746 if (cur->rta_type == IFLA_INFO_KIND && strcmp("dsa", (char *)RTA_DATA(cur)))
1747 break;
1748
1749 if (cur->rta_type == IFLA_INFO_DATA)
1750 if_get_master_dsa_linkinfo_attr(data, cur);
1751 }
1752 }
1753
1754 static int cb_if_get_master_valid(struct nl_msg *msg, void *arg)
1755 {
1756 struct nlmsghdr *nh = nlmsg_hdr(msg);
1757 struct ifinfomsg *ifi = NLMSG_DATA(nh);
1758 struct if_get_master_data *data = (struct if_get_master_data *)arg;
1759 struct rtattr *attr;
1760 int rem;
1761
1762 if (nh->nlmsg_type != RTM_NEWLINK)
1763 return NL_SKIP;
1764
1765 if (ifi->ifi_family != AF_UNSPEC)
1766 return NL_SKIP;
1767
1768 if (ifi->ifi_index != data->ifindex)
1769 return NL_SKIP;
1770
1771 attr = IFLA_RTA(ifi);
1772 rem = nh->nlmsg_len - NLMSG_LENGTH(sizeof(*ifi));
1773
1774 while (RTA_OK(attr, rem)) {
1775 if (attr->rta_type == IFLA_LINKINFO)
1776 if_get_master_linkinfo_attr(data, attr);
1777
1778 attr = RTA_NEXT(attr, rem);
1779 }
1780
1781 return NL_OK;
1782 }
1783
1784 static int cb_if_get_master_ack(struct nl_msg *msg, void *arg)
1785 {
1786 struct if_get_master_data *data = (struct if_get_master_data *)arg;
1787 data->pending = 0;
1788 return NL_STOP;
1789 }
1790
1791 static int cb_if_get_master_error(struct sockaddr_nl *nla, struct nlmsgerr *err, void *arg)
1792 {
1793 struct if_get_master_data *data = (struct if_get_master_data *)arg;
1794 data->pending = 0;
1795 return NL_STOP;
1796 }
1797
1798 static int system_if_get_master_ifindex(struct device *dev)
1799 {
1800 struct nl_cb *cb = nl_cb_alloc(NL_CB_DEFAULT);
1801 struct nl_msg *msg;
1802 struct ifinfomsg ifi = {
1803 .ifi_family = AF_UNSPEC,
1804 .ifi_index = 0,
1805 };
1806 struct if_get_master_data data = {
1807 .ifindex = if_nametoindex(dev->ifname),
1808 .master_ifindex = -1,
1809 .pending = 1,
1810 };
1811 int ret = -1;
1812
1813 if (!cb)
1814 return ret;
1815
1816 msg = nlmsg_alloc_simple(RTM_GETLINK, NLM_F_REQUEST);
1817 if (!msg)
1818 goto out;
1819
1820 if (nlmsg_append(msg, &ifi, sizeof(ifi), 0) ||
1821 nla_put_string(msg, IFLA_IFNAME, dev->ifname))
1822 goto free;
1823
1824 nl_cb_set(cb, NL_CB_VALID, NL_CB_CUSTOM, cb_if_get_master_valid, &data);
1825 nl_cb_set(cb, NL_CB_ACK, NL_CB_CUSTOM, cb_if_get_master_ack, &data);
1826 nl_cb_err(cb, NL_CB_CUSTOM, cb_if_get_master_error, &data);
1827
1828 ret = nl_send_auto_complete(sock_rtnl, msg);
1829 if (ret < 0)
1830 goto free;
1831
1832 while (data.pending > 0)
1833 nl_recvmsgs(sock_rtnl, cb);
1834
1835 if (data.master_ifindex >= 0)
1836 ret = data.master_ifindex;
1837
1838 free:
1839 nlmsg_free(msg);
1840 out:
1841 nl_cb_put(cb);
1842 return ret;
1843 }
1844
1845 static void system_set_master(struct device *dev, int master_ifindex)
1846 {
1847 struct ifinfomsg ifi = { .ifi_family = AF_UNSPEC, };
1848 struct nl_msg *nlm;
1849
1850 nlm = nlmsg_alloc_simple(RTM_NEWLINK, NLM_F_REQUEST);
1851 if (!nlm)
1852 return;
1853
1854 nlmsg_append(nlm, &ifi, sizeof(ifi), 0);
1855 nla_put_string(nlm, IFLA_IFNAME, dev->ifname);
1856
1857 struct nlattr *linkinfo = nla_nest_start(nlm, IFLA_LINKINFO);
1858 if (!linkinfo)
1859 goto failure;
1860
1861 nla_put_string(nlm, IFLA_INFO_KIND, "dsa");
1862 struct nlattr *infodata = nla_nest_start(nlm, IFLA_INFO_DATA);
1863 if (!infodata)
1864 goto failure;
1865
1866 nla_put_u32(nlm, IFLA_DSA_MASTER, master_ifindex);
1867
1868 nla_nest_end(nlm, infodata);
1869 nla_nest_end(nlm, linkinfo);
1870
1871 system_rtnl_call(nlm);
1872
1873 return;
1874
1875 failure:
1876 nlmsg_free(nlm);
1877 }
1878 #endif
1879
1880 static void ethtool_link_mode_clear_bit(__s8 nwords, int nr, __u32 *mask)
1881 {
1882 if (nr < 0)
1883 return;
1884
1885 if (nr >= (nwords * 32))
1886 return;
1887
1888 mask[nr / 32] &= ~(1U << (nr % 32));
1889 }
1890
1891 static bool ethtool_link_mode_test_bit(__s8 nwords, int nr, const __u32 *mask)
1892 {
1893 if (nr < 0)
1894 return false;
1895
1896 if (nr >= (nwords * 32))
1897 return false;
1898
1899 return !!(mask[nr / 32] & (1U << (nr % 32)));
1900 }
1901
1902 static int
1903 system_get_ethtool_gro(struct device *dev)
1904 {
1905 struct ethtool_value ecmd;
1906 struct ifreq ifr = {
1907 .ifr_data = (caddr_t)&ecmd,
1908 };
1909
1910 memset(&ecmd, 0, sizeof(ecmd));
1911 ecmd.cmd = ETHTOOL_GGRO;
1912 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name) - 1);
1913
1914 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr))
1915 return -1;
1916
1917 return ecmd.data;
1918 }
1919
1920 static void
1921 system_set_ethtool_gro(struct device *dev, struct device_settings *s)
1922 {
1923 struct ethtool_value ecmd;
1924 struct ifreq ifr = {
1925 .ifr_data = (caddr_t)&ecmd,
1926 };
1927
1928 memset(&ecmd, 0, sizeof(ecmd));
1929 ecmd.cmd = ETHTOOL_SGRO;
1930 ecmd.data = s->gro;
1931 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name) - 1);
1932
1933 ioctl(sock_ioctl, SIOCETHTOOL, &ifr);
1934 }
1935
1936 static void
1937 system_set_ethtool_pause(struct device *dev, struct device_settings *s)
1938 {
1939 struct ethtool_pauseparam pp;
1940 struct ifreq ifr = {
1941 .ifr_data = (caddr_t)&pp,
1942 };
1943
1944 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name) - 1);
1945 memset(&pp, 0, sizeof(pp));
1946 pp.cmd = ETHTOOL_GPAUSEPARAM;
1947 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr))
1948 return;
1949
1950 if (s->flags & DEV_OPT_RXPAUSE || s->flags & DEV_OPT_TXPAUSE) {
1951 pp.autoneg = AUTONEG_DISABLE;
1952
1953 if (s->flags & DEV_OPT_PAUSE) {
1954 if (s->flags & DEV_OPT_RXPAUSE)
1955 pp.rx_pause = s->rxpause && s->pause;
1956 else
1957 pp.rx_pause = s->pause;
1958
1959 if (s->flags & DEV_OPT_TXPAUSE)
1960 pp.tx_pause = s->txpause && s->pause;
1961 else
1962 pp.tx_pause = s->pause;
1963 } else {
1964 if (s->flags & DEV_OPT_RXPAUSE)
1965 pp.rx_pause = s->rxpause;
1966
1967 if (s->flags & DEV_OPT_TXPAUSE)
1968 pp.tx_pause = s->txpause;
1969 }
1970
1971 if (s->flags & DEV_OPT_ASYM_PAUSE &&
1972 !s->asym_pause && (pp.rx_pause != pp.tx_pause))
1973 pp.rx_pause = pp.tx_pause = false;
1974 } else {
1975 pp.autoneg = AUTONEG_ENABLE;
1976 /* Pause and Asym_Pause advertising bits will be set via
1977 * ETHTOOL_SLINKSETTINGS in system_set_ethtool_settings()
1978 */
1979 }
1980
1981 pp.cmd = ETHTOOL_SPAUSEPARAM;
1982 ioctl(sock_ioctl, SIOCETHTOOL, &ifr);
1983 }
1984
1985 static void
1986 system_set_ethtool_eee_settings(struct device *dev, struct device_settings *s)
1987 {
1988 struct ethtool_eee eeecmd;
1989 struct ifreq ifr = {
1990 .ifr_data = (caddr_t)&eeecmd,
1991 };
1992
1993 memset(&eeecmd, 0, sizeof(eeecmd));
1994 eeecmd.cmd = ETHTOOL_SEEE;
1995 eeecmd.eee_enabled = s->eee;
1996 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name) - 1);
1997
1998 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr) != 0)
1999 netifd_log_message(L_WARNING, "cannot set eee %d for device %s", s->eee, dev->ifname);
2000 }
2001
2002 static void
2003 system_set_ethtool_settings(struct device *dev, struct device_settings *s)
2004 {
2005 struct {
2006 struct ethtool_link_settings req;
2007 __u32 link_mode_data[3 * 127];
2008 } ecmd;
2009 struct ifreq ifr = {
2010 .ifr_data = (caddr_t)&ecmd,
2011 };
2012 size_t i;
2013 __s8 nwords;
2014 __u32 *supported, *advertising;
2015
2016 system_set_ethtool_pause(dev, s);
2017
2018 if (s->flags & DEV_OPT_EEE)
2019 system_set_ethtool_eee_settings(dev, s);
2020
2021 memset(&ecmd, 0, sizeof(ecmd));
2022 ecmd.req.cmd = ETHTOOL_GLINKSETTINGS;
2023 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name) - 1);
2024
2025 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr) < 0 ||
2026 ecmd.req.link_mode_masks_nwords >= 0 ||
2027 ecmd.req.cmd != ETHTOOL_GLINKSETTINGS)
2028 return;
2029
2030 ecmd.req.link_mode_masks_nwords = -ecmd.req.link_mode_masks_nwords;
2031
2032 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr) < 0 ||
2033 ecmd.req.link_mode_masks_nwords <= 0 ||
2034 ecmd.req.cmd != ETHTOOL_GLINKSETTINGS)
2035 return;
2036
2037 nwords = ecmd.req.link_mode_masks_nwords;
2038 supported = &ecmd.link_mode_data[0];
2039 advertising = &ecmd.link_mode_data[nwords];
2040 memcpy(advertising, supported, sizeof(__u32) * nwords);
2041
2042 for (i = 0; i < ARRAY_SIZE(ethtool_modes); i++) {
2043 if (s->flags & DEV_OPT_DUPLEX) {
2044 if (s->duplex)
2045 ethtool_link_mode_clear_bit(nwords, ethtool_modes[i].bit_half, advertising);
2046 else
2047 ethtool_link_mode_clear_bit(nwords, ethtool_modes[i].bit_full, advertising);
2048 }
2049 if (!(s->flags & DEV_OPT_SPEED) ||
2050 s->speed == ethtool_modes[i].speed)
2051 continue;
2052
2053 ethtool_link_mode_clear_bit(nwords, ethtool_modes[i].bit_full, advertising);
2054 ethtool_link_mode_clear_bit(nwords, ethtool_modes[i].bit_half, advertising);
2055 }
2056
2057 if (s->flags & DEV_OPT_PAUSE)
2058 if (!s->pause)
2059 ethtool_link_mode_clear_bit(nwords, ETHTOOL_LINK_MODE_Pause_BIT, advertising);
2060
2061 if (s->flags & DEV_OPT_ASYM_PAUSE)
2062 if (!s->asym_pause)
2063 ethtool_link_mode_clear_bit(nwords, ETHTOOL_LINK_MODE_Asym_Pause_BIT, advertising);
2064
2065 if (s->flags & DEV_OPT_AUTONEG) {
2066 ecmd.req.autoneg = s->autoneg ? AUTONEG_ENABLE : AUTONEG_DISABLE;
2067 if (!s->autoneg) {
2068 if (s->flags & DEV_OPT_SPEED)
2069 ecmd.req.speed = s->speed;
2070
2071 if (s->flags & DEV_OPT_DUPLEX)
2072 ecmd.req.duplex = s->duplex ? DUPLEX_FULL : DUPLEX_HALF;
2073 }
2074 }
2075
2076 ecmd.req.cmd = ETHTOOL_SLINKSETTINGS;
2077 ioctl(sock_ioctl, SIOCETHTOOL, &ifr);
2078 }
2079
2080 static void
2081 system_set_ethtool_settings_after_up(struct device *dev, struct device_settings *s)
2082 {
2083 if (s->flags & DEV_OPT_GRO)
2084 system_set_ethtool_gro(dev, s);
2085 }
2086
2087 void
2088 system_if_get_settings(struct device *dev, struct device_settings *s)
2089 {
2090 struct ifreq ifr;
2091 char buf[10];
2092 int ret;
2093
2094 memset(&ifr, 0, sizeof(ifr));
2095 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name) - 1);
2096
2097 if (ioctl(sock_ioctl, SIOCGIFMTU, &ifr) == 0) {
2098 s->mtu = ifr.ifr_mtu;
2099 s->flags |= DEV_OPT_MTU;
2100 }
2101
2102 s->mtu6 = system_update_ipv6_mtu(dev, 0);
2103 if (s->mtu6 > 0)
2104 s->flags |= DEV_OPT_MTU6;
2105
2106 if (ioctl(sock_ioctl, SIOCGIFTXQLEN, &ifr) == 0) {
2107 s->txqueuelen = ifr.ifr_qlen;
2108 s->flags |= DEV_OPT_TXQUEUELEN;
2109 }
2110
2111 if (ioctl(sock_ioctl, SIOCGIFHWADDR, &ifr) == 0) {
2112 memcpy(s->macaddr, &ifr.ifr_hwaddr.sa_data, sizeof(s->macaddr));
2113 s->flags |= DEV_OPT_MACADDR;
2114 }
2115
2116 if (!system_get_disable_ipv6(dev, buf, sizeof(buf))) {
2117 s->ipv6 = !strtoul(buf, NULL, 0);
2118 s->flags |= DEV_OPT_IPV6;
2119 }
2120
2121 if (!system_get_ip6segmentrouting(dev, buf, sizeof(buf))) {
2122 s->ip6segmentrouting = strtoul(buf, NULL, 0);
2123 s->flags |= DEV_OPT_IP6SEGMENTROUTING;
2124 }
2125
2126 if (ioctl(sock_ioctl, SIOCGIFFLAGS, &ifr) == 0) {
2127 s->promisc = ifr.ifr_flags & IFF_PROMISC;
2128 s->flags |= DEV_OPT_PROMISC;
2129
2130 s->multicast = ifr.ifr_flags & IFF_MULTICAST;
2131 s->flags |= DEV_OPT_MULTICAST;
2132 }
2133
2134 if (!system_get_rpfilter(dev, buf, sizeof(buf))) {
2135 s->rpfilter = strtoul(buf, NULL, 0);
2136 s->flags |= DEV_OPT_RPFILTER;
2137 }
2138
2139 if (!system_get_acceptlocal(dev, buf, sizeof(buf))) {
2140 s->acceptlocal = strtoul(buf, NULL, 0);
2141 s->flags |= DEV_OPT_ACCEPTLOCAL;
2142 }
2143
2144 if (!system_get_igmpversion(dev, buf, sizeof(buf))) {
2145 s->igmpversion = strtoul(buf, NULL, 0);
2146 s->flags |= DEV_OPT_IGMPVERSION;
2147 }
2148
2149 if (!system_get_mldversion(dev, buf, sizeof(buf))) {
2150 s->mldversion = strtoul(buf, NULL, 0);
2151 s->flags |= DEV_OPT_MLDVERSION;
2152 }
2153
2154 if (!system_get_neigh4reachabletime(dev, buf, sizeof(buf))) {
2155 s->neigh4reachabletime = strtoul(buf, NULL, 0);
2156 s->flags |= DEV_OPT_NEIGHREACHABLETIME;
2157 }
2158
2159 if (!system_get_neigh6reachabletime(dev, buf, sizeof(buf))) {
2160 s->neigh6reachabletime = strtoul(buf, NULL, 0);
2161 s->flags |= DEV_OPT_NEIGHREACHABLETIME;
2162 }
2163
2164 if (!system_get_neigh4locktime(dev, buf, sizeof(buf))) {
2165 s->neigh4locktime = strtol(buf, NULL, 0);
2166 s->flags |= DEV_OPT_NEIGHLOCKTIME;
2167 }
2168
2169 if (!system_get_neigh4gcstaletime(dev, buf, sizeof(buf))) {
2170 s->neigh4gcstaletime = strtoul(buf, NULL, 0);
2171 s->flags |= DEV_OPT_NEIGHGCSTALETIME;
2172 }
2173
2174 if (!system_get_neigh6gcstaletime(dev, buf, sizeof(buf))) {
2175 s->neigh6gcstaletime = strtoul(buf, NULL, 0);
2176 s->flags |= DEV_OPT_NEIGHGCSTALETIME;
2177 }
2178
2179 if (!system_get_dadtransmits(dev, buf, sizeof(buf))) {
2180 s->dadtransmits = strtoul(buf, NULL, 0);
2181 s->flags |= DEV_OPT_DADTRANSMITS;
2182 }
2183
2184 if (!system_get_sendredirects(dev, buf, sizeof(buf))) {
2185 s->sendredirects = strtoul(buf, NULL, 0);
2186 s->flags |= DEV_OPT_SENDREDIRECTS;
2187 }
2188
2189 if (!system_get_drop_v4_unicast_in_l2_multicast(dev, buf, sizeof(buf))) {
2190 s->drop_v4_unicast_in_l2_multicast = strtoul(buf, NULL, 0);
2191 s->flags |= DEV_OPT_DROP_V4_UNICAST_IN_L2_MULTICAST;
2192 }
2193
2194 if (!system_get_drop_v6_unicast_in_l2_multicast(dev, buf, sizeof(buf))) {
2195 s->drop_v6_unicast_in_l2_multicast = strtoul(buf, NULL, 0);
2196 s->flags |= DEV_OPT_DROP_V6_UNICAST_IN_L2_MULTICAST;
2197 }
2198
2199 if (!system_get_drop_gratuitous_arp(dev, buf, sizeof(buf))) {
2200 s->drop_gratuitous_arp = strtoul(buf, NULL, 0);
2201 s->flags |= DEV_OPT_DROP_GRATUITOUS_ARP;
2202 }
2203
2204 if (!system_get_drop_unsolicited_na(dev, buf, sizeof(buf))) {
2205 s->drop_unsolicited_na = strtoul(buf, NULL, 0);
2206 s->flags |= DEV_OPT_DROP_UNSOLICITED_NA;
2207 }
2208
2209 if (!system_get_arp_accept(dev, buf, sizeof(buf))) {
2210 s->arp_accept = strtoul(buf, NULL, 0);
2211 s->flags |= DEV_OPT_ARP_ACCEPT;
2212 }
2213
2214 ret = system_get_ethtool_gro(dev);
2215 if (ret >= 0) {
2216 s->gro = ret;
2217 s->flags |= DEV_OPT_GRO;
2218 }
2219
2220 #if LINUX_VERSION_CODE >= KERNEL_VERSION(6,1,0)
2221 ret = system_if_get_master_ifindex(dev);
2222 if (ret >= 0) {
2223 s->master_ifindex = ret;
2224 s->flags |= DEV_OPT_MASTER;
2225 }
2226 #endif
2227 }
2228
2229 void
2230 system_if_apply_settings(struct device *dev, struct device_settings *s, uint64_t apply_mask)
2231 {
2232 struct ifreq ifr;
2233 char buf[12];
2234
2235 apply_mask &= s->flags;
2236
2237 memset(&ifr, 0, sizeof(ifr));
2238 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name) - 1);
2239 if (apply_mask & DEV_OPT_MTU) {
2240 ifr.ifr_mtu = s->mtu;
2241 if (ioctl(sock_ioctl, SIOCSIFMTU, &ifr) < 0)
2242 s->flags &= ~DEV_OPT_MTU;
2243 }
2244 if (apply_mask & DEV_OPT_MTU6) {
2245 system_update_ipv6_mtu(dev, s->mtu6);
2246 }
2247 if (apply_mask & DEV_OPT_TXQUEUELEN) {
2248 ifr.ifr_qlen = s->txqueuelen;
2249 if (ioctl(sock_ioctl, SIOCSIFTXQLEN, &ifr) < 0)
2250 s->flags &= ~DEV_OPT_TXQUEUELEN;
2251 }
2252 if ((apply_mask & (DEV_OPT_MACADDR | DEV_OPT_DEFAULT_MACADDR)) && !dev->external) {
2253 ifr.ifr_hwaddr.sa_family = ARPHRD_ETHER;
2254 memcpy(&ifr.ifr_hwaddr.sa_data, s->macaddr, sizeof(s->macaddr));
2255 if (ioctl(sock_ioctl, SIOCSIFHWADDR, &ifr) < 0)
2256 s->flags &= ~DEV_OPT_MACADDR;
2257 }
2258 if (apply_mask & DEV_OPT_IPV6)
2259 system_set_disable_ipv6(dev, s->ipv6 ? "0" : "1");
2260 if (s->flags & DEV_OPT_IP6SEGMENTROUTING & apply_mask) {
2261 struct device dummy = {
2262 .ifname = "all",
2263 };
2264 bool ip6segmentrouting = device_check_ip6segmentrouting();
2265
2266 system_set_ip6segmentrouting(dev, s->ip6segmentrouting ? "1" : "0");
2267 system_set_ip6segmentrouting(&dummy, ip6segmentrouting ? "1" : "0");
2268 }
2269 if (apply_mask & DEV_OPT_PROMISC) {
2270 if (system_if_flags(dev->ifname, s->promisc ? IFF_PROMISC : 0,
2271 !s->promisc ? IFF_PROMISC : 0) < 0)
2272 s->flags &= ~DEV_OPT_PROMISC;
2273 }
2274 if (apply_mask & DEV_OPT_RPFILTER) {
2275 snprintf(buf, sizeof(buf), "%u", s->rpfilter);
2276 system_set_rpfilter(dev, buf);
2277 }
2278 if (apply_mask & DEV_OPT_ACCEPTLOCAL)
2279 system_set_acceptlocal(dev, s->acceptlocal ? "1" : "0");
2280 if (apply_mask & DEV_OPT_IGMPVERSION) {
2281 snprintf(buf, sizeof(buf), "%u", s->igmpversion);
2282 system_set_igmpversion(dev, buf);
2283 }
2284 if (apply_mask & DEV_OPT_MLDVERSION) {
2285 snprintf(buf, sizeof(buf), "%u", s->mldversion);
2286 system_set_mldversion(dev, buf);
2287 }
2288 if (apply_mask & DEV_OPT_NEIGHREACHABLETIME) {
2289 snprintf(buf, sizeof(buf), "%u", s->neigh4reachabletime);
2290 system_set_neigh4reachabletime(dev, buf);
2291 snprintf(buf, sizeof(buf), "%u", s->neigh6reachabletime);
2292 system_set_neigh6reachabletime(dev, buf);
2293 }
2294 if (apply_mask & DEV_OPT_NEIGHLOCKTIME) {
2295 snprintf(buf, sizeof(buf), "%d", s->neigh4locktime);
2296 system_set_neigh4locktime(dev, buf);
2297 }
2298 if (apply_mask & DEV_OPT_NEIGHGCSTALETIME) {
2299 snprintf(buf, sizeof(buf), "%u", s->neigh4gcstaletime);
2300 system_set_neigh4gcstaletime(dev, buf);
2301 snprintf(buf, sizeof(buf), "%u", s->neigh6gcstaletime);
2302 system_set_neigh6gcstaletime(dev, buf);
2303 }
2304 if (apply_mask & DEV_OPT_DADTRANSMITS) {
2305 snprintf(buf, sizeof(buf), "%u", s->dadtransmits);
2306 system_set_dadtransmits(dev, buf);
2307 }
2308 if (apply_mask & DEV_OPT_MULTICAST) {
2309 if (system_if_flags(dev->ifname, s->multicast ? IFF_MULTICAST : 0,
2310 !s->multicast ? IFF_MULTICAST : 0) < 0)
2311 s->flags &= ~DEV_OPT_MULTICAST;
2312 }
2313 if (apply_mask & DEV_OPT_SENDREDIRECTS)
2314 system_set_sendredirects(dev, s->sendredirects ? "1" : "0");
2315 if (apply_mask & DEV_OPT_DROP_V4_UNICAST_IN_L2_MULTICAST)
2316 system_set_drop_v4_unicast_in_l2_multicast(dev, s->drop_v4_unicast_in_l2_multicast ? "1" : "0");
2317 if (apply_mask & DEV_OPT_DROP_V6_UNICAST_IN_L2_MULTICAST)
2318 system_set_drop_v6_unicast_in_l2_multicast(dev, s->drop_v6_unicast_in_l2_multicast ? "1" : "0");
2319 if (apply_mask & DEV_OPT_DROP_GRATUITOUS_ARP)
2320 system_set_drop_gratuitous_arp(dev, s->drop_gratuitous_arp ? "1" : "0");
2321 if (apply_mask & DEV_OPT_DROP_UNSOLICITED_NA)
2322 system_set_drop_unsolicited_na(dev, s->drop_unsolicited_na ? "1" : "0");
2323 if (apply_mask & DEV_OPT_ARP_ACCEPT)
2324 system_set_arp_accept(dev, s->arp_accept ? "1" : "0");
2325 if (apply_mask & DEV_OPT_MASTER)
2326 #if LINUX_VERSION_CODE >= KERNEL_VERSION(6,1,0)
2327 system_set_master(dev, s->master_ifindex);
2328 #else
2329 netifd_log_message(L_WARNING, "%s Your kernel is older than linux 6.1.0, changing DSA port conduit is not supported!", dev->ifname);
2330 #endif
2331 system_set_ethtool_settings(dev, s);
2332 }
2333
2334 void system_if_apply_settings_after_up(struct device *dev, struct device_settings *s)
2335 {
2336 system_set_ethtool_settings_after_up(dev, s);
2337 }
2338
2339 int system_if_up(struct device *dev)
2340 {
2341 return system_if_flags(dev->ifname, IFF_UP, 0);
2342 }
2343
2344 int system_if_down(struct device *dev)
2345 {
2346 return system_if_flags(dev->ifname, 0, IFF_UP);
2347 }
2348
2349 struct if_check_data {
2350 struct device *dev;
2351 int pending;
2352 int ret;
2353 };
2354
2355 static int cb_if_check_valid(struct nl_msg *msg, void *arg)
2356 {
2357 struct nlmsghdr *nh = nlmsg_hdr(msg);
2358 struct ifinfomsg *ifi = NLMSG_DATA(nh);
2359 struct if_check_data *chk = (struct if_check_data *)arg;
2360
2361 if (nh->nlmsg_type != RTM_NEWLINK)
2362 return NL_SKIP;
2363
2364 system_device_update_state(chk->dev, ifi->ifi_flags, ifi->ifi_index);
2365 return NL_OK;
2366 }
2367
2368 static int cb_if_check_ack(struct nl_msg *msg, void *arg)
2369 {
2370 struct if_check_data *chk = (struct if_check_data *)arg;
2371 chk->pending = 0;
2372 return NL_STOP;
2373 }
2374
2375 static int cb_if_check_error(struct sockaddr_nl *nla, struct nlmsgerr *err, void *arg)
2376 {
2377 struct if_check_data *chk = (struct if_check_data *)arg;
2378
2379 if (chk->dev->type == &simple_device_type)
2380 device_set_present(chk->dev, false);
2381 device_set_link(chk->dev, false);
2382 chk->pending = err->error;
2383
2384 return NL_STOP;
2385 }
2386
2387 struct bridge_vlan_check_data {
2388 struct device *check_dev;
2389 int ifindex;
2390 int ret;
2391 bool pending;
2392 };
2393
2394 static void bridge_vlan_check_port(struct bridge_vlan_check_data *data,
2395 struct bridge_vlan_port *port,
2396 struct bridge_vlan_info *vinfo)
2397 {
2398 uint16_t flags = 0, diff, mask;
2399
2400 if (port->flags & BRVLAN_F_PVID)
2401 flags |= BRIDGE_VLAN_INFO_PVID;
2402 if (port->flags & BRVLAN_F_UNTAGGED)
2403 flags |= BRIDGE_VLAN_INFO_UNTAGGED;
2404
2405 diff = vinfo->flags ^ flags;
2406 mask = BRVLAN_F_UNTAGGED | (flags & BRIDGE_VLAN_INFO_PVID);
2407 if (diff & mask) {
2408 data->ret = 1;
2409 data->pending = false;
2410 }
2411
2412 port->check = 1;
2413 }
2414
2415 static void bridge_vlan_check_attr(struct bridge_vlan_check_data *data,
2416 struct rtattr *attr)
2417 {
2418 struct bridge_vlan_hotplug_port *port;
2419 struct bridge_vlan_info *vinfo;
2420 struct bridge_vlan *vlan;
2421 struct rtattr *cur;
2422 int rem = RTA_PAYLOAD(attr);
2423 int i;
2424
2425 for (cur = RTA_DATA(attr); RTA_OK(cur, rem); cur = RTA_NEXT(cur, rem)) {
2426 if (cur->rta_type != IFLA_BRIDGE_VLAN_INFO)
2427 continue;
2428
2429 vinfo = RTA_DATA(cur);
2430 vlan = vlist_find(&data->check_dev->vlans, &vinfo->vid, vlan, node);
2431 if (!vlan) {
2432 data->ret = 1;
2433 data->pending = false;
2434 return;
2435 }
2436
2437 for (i = 0; i < vlan->n_ports; i++)
2438 if (!vlan->ports[i].check)
2439 bridge_vlan_check_port(data, &vlan->ports[i], vinfo);
2440
2441 list_for_each_entry(port, &vlan->hotplug_ports, list)
2442 if (!port->port.check)
2443 bridge_vlan_check_port(data, &port->port, vinfo);
2444 }
2445 }
2446
2447 static int bridge_vlan_check_cb(struct nl_msg *msg, void *arg)
2448 {
2449 struct bridge_vlan_check_data *data = arg;
2450 struct nlmsghdr *nh = nlmsg_hdr(msg);
2451 struct ifinfomsg *ifi = NLMSG_DATA(nh);
2452 struct rtattr *attr;
2453 int rem;
2454
2455 if (nh->nlmsg_type != RTM_NEWLINK)
2456 return NL_SKIP;
2457
2458 if (ifi->ifi_family != AF_BRIDGE)
2459 return NL_SKIP;
2460
2461 if (ifi->ifi_index != data->ifindex)
2462 return NL_SKIP;
2463
2464 attr = IFLA_RTA(ifi);
2465 rem = nh->nlmsg_len - NLMSG_LENGTH(sizeof(*ifi));
2466 while (RTA_OK(attr, rem)) {
2467 if (attr->rta_type == IFLA_AF_SPEC)
2468 bridge_vlan_check_attr(data, attr);
2469
2470 attr = RTA_NEXT(attr, rem);
2471 }
2472
2473 return NL_SKIP;
2474 }
2475
2476 static int bridge_vlan_ack_cb(struct nl_msg *msg, void *arg)
2477 {
2478 struct bridge_vlan_check_data *data = arg;
2479 data->pending = false;
2480 return NL_STOP;
2481 }
2482
2483 static int bridge_vlan_error_cb(struct sockaddr_nl *nla, struct nlmsgerr *err, void *arg)
2484 {
2485 struct bridge_vlan_check_data *data = arg;
2486 data->pending = false;
2487 return NL_STOP;
2488 }
2489
2490 int system_bridge_vlan_check(struct device *dev, char *ifname)
2491 {
2492 struct bridge_vlan_check_data data = {
2493 .check_dev = dev,
2494 .ifindex = if_nametoindex(ifname),
2495 .ret = -1,
2496 .pending = true,
2497 };
2498 static struct ifinfomsg ifi = {
2499 .ifi_family = AF_BRIDGE
2500 };
2501 static struct rtattr ext_req = {
2502 .rta_type = IFLA_EXT_MASK,
2503 .rta_len = RTA_LENGTH(sizeof(uint32_t)),
2504 };
2505 uint32_t filter = RTEXT_FILTER_BRVLAN;
2506 struct nl_cb *cb = nl_cb_alloc(NL_CB_DEFAULT);
2507 struct bridge_vlan *vlan;
2508 struct nl_msg *msg;
2509 int i;
2510
2511 if (!data.ifindex)
2512 return 0;
2513
2514 msg = nlmsg_alloc_simple(RTM_GETLINK, NLM_F_DUMP);
2515
2516 if (nlmsg_append(msg, &ifi, sizeof(ifi), 0) ||
2517 nlmsg_append(msg, &ext_req, sizeof(ext_req), NLMSG_ALIGNTO) ||
2518 nlmsg_append(msg, &filter, sizeof(filter), 0))
2519 goto free;
2520
2521 vlist_for_each_element(&dev->vlans, vlan, node) {
2522 struct bridge_vlan_hotplug_port *port;
2523
2524 for (i = 0; i < vlan->n_ports; i++) {
2525 if (!strcmp(vlan->ports[i].ifname, ifname))
2526 vlan->ports[i].check = 0;
2527 else
2528 vlan->ports[i].check = -1;
2529 }
2530
2531 list_for_each_entry(port, &vlan->hotplug_ports, list) {
2532 if (!strcmp(port->port.ifname, ifname))
2533 port->port.check = 0;
2534 else
2535 port->port.check = -1;
2536 }
2537 }
2538
2539 nl_cb_set(cb, NL_CB_VALID, NL_CB_CUSTOM, bridge_vlan_check_cb, &data);
2540 nl_cb_set(cb, NL_CB_FINISH, NL_CB_CUSTOM, bridge_vlan_ack_cb, &data);
2541 nl_cb_set(cb, NL_CB_ACK, NL_CB_CUSTOM, bridge_vlan_ack_cb, &data);
2542 nl_cb_err(cb, NL_CB_CUSTOM, bridge_vlan_error_cb, &data);
2543
2544 if (nl_send_auto_complete(sock_rtnl, msg) < 0)
2545 goto free;
2546
2547 data.ret = 0;
2548 while (data.pending)
2549 nl_recvmsgs(sock_rtnl, cb);
2550
2551 vlist_for_each_element(&dev->vlans, vlan, node) {
2552 struct bridge_vlan_hotplug_port *port;
2553
2554 for (i = 0; i < vlan->n_ports; i++) {
2555 if (!vlan->ports[i].check) {
2556 data.ret = 1;
2557 break;
2558 }
2559 }
2560
2561 list_for_each_entry(port, &vlan->hotplug_ports, list) {
2562 if (!port->port.check) {
2563 data.ret = 1;
2564 break;
2565 }
2566 }
2567 }
2568
2569 free:
2570 nlmsg_free(msg);
2571 nl_cb_put(cb);
2572 return data.ret;
2573 }
2574
2575 int system_if_check(struct device *dev)
2576 {
2577 struct nl_cb *cb = nl_cb_alloc(NL_CB_DEFAULT);
2578 struct nl_msg *msg;
2579 struct ifinfomsg ifi = {
2580 .ifi_family = AF_UNSPEC,
2581 .ifi_index = 0,
2582 };
2583 struct if_check_data chk = {
2584 .dev = dev,
2585 .pending = 1,
2586 };
2587 int ret = 1;
2588
2589 if (!cb)
2590 return ret;
2591
2592 msg = nlmsg_alloc_simple(RTM_GETLINK, 0);
2593 if (!msg)
2594 goto out;
2595
2596 if (nlmsg_append(msg, &ifi, sizeof(ifi), 0) ||
2597 nla_put_string(msg, IFLA_IFNAME, dev->ifname))
2598 goto free;
2599
2600 nl_cb_set(cb, NL_CB_VALID, NL_CB_CUSTOM, cb_if_check_valid, &chk);
2601 nl_cb_set(cb, NL_CB_ACK, NL_CB_CUSTOM, cb_if_check_ack, &chk);
2602 nl_cb_err(cb, NL_CB_CUSTOM, cb_if_check_error, &chk);
2603
2604 ret = nl_send_auto_complete(sock_rtnl, msg);
2605 if (ret < 0)
2606 goto free;
2607
2608 while (chk.pending > 0)
2609 nl_recvmsgs(sock_rtnl, cb);
2610
2611 ret = chk.pending;
2612
2613 free:
2614 nlmsg_free(msg);
2615 out:
2616 nl_cb_put(cb);
2617 return ret;
2618 }
2619
2620 struct device *
2621 system_if_get_parent(struct device *dev)
2622 {
2623 char buf[64], *devname;
2624 int ifindex, iflink;
2625
2626 if (system_get_dev_sysfs("iflink", dev->ifname, buf, sizeof(buf)) < 0)
2627 return NULL;
2628
2629 iflink = strtoul(buf, NULL, 0);
2630 ifindex = system_if_resolve(dev);
2631 if (!iflink || iflink == ifindex)
2632 return NULL;
2633
2634 devname = if_indextoname(iflink, buf);
2635 if (!devname)
2636 return NULL;
2637
2638 return device_get(devname, true);
2639 }
2640
2641 static bool
2642 read_string_file(int dir_fd, const char *file, char *buf, int len)
2643 {
2644 bool ret = false;
2645 char *c;
2646 int fd;
2647
2648 fd = openat(dir_fd, file, O_RDONLY);
2649 if (fd < 0)
2650 return false;
2651
2652 retry:
2653 len = read(fd, buf, len - 1);
2654 if (len < 0) {
2655 if (errno == EINTR)
2656 goto retry;
2657 } else if (len > 0) {
2658 buf[len] = 0;
2659
2660 c = strchr(buf, '\n');
2661 if (c)
2662 *c = 0;
2663
2664 ret = true;
2665 }
2666
2667 close(fd);
2668
2669 return ret;
2670 }
2671
2672 static bool
2673 read_uint64_file(int dir_fd, const char *file, uint64_t *val)
2674 {
2675 char buf[64];
2676 bool ret = false;
2677
2678 ret = read_string_file(dir_fd, file, buf, sizeof(buf));
2679 if (ret)
2680 *val = strtoull(buf, NULL, 0);
2681
2682 return ret;
2683 }
2684
2685 bool
2686 system_if_force_external(const char *ifname)
2687 {
2688 struct stat s;
2689
2690 return stat(dev_sysfs_path(ifname, "phy80211"), &s) == 0;
2691 }
2692
2693 static const char *
2694 system_netdevtype_name(unsigned short dev_type)
2695 {
2696 size_t i;
2697
2698 for (i = 0; i < ARRAY_SIZE(netdev_types); i++) {
2699 if (netdev_types[i].id == dev_type)
2700 return netdev_types[i].name;
2701 }
2702
2703 /* the last key is used by default */
2704 i = ARRAY_SIZE(netdev_types) - 1;
2705
2706 return netdev_types[i].name;
2707 }
2708
2709 static void
2710 system_add_devtype(struct blob_buf *b, const char *ifname)
2711 {
2712 char buf[100];
2713 bool found = false;
2714
2715 if (!system_get_dev_sysfs("uevent", ifname, buf, sizeof(buf))) {
2716 const char *info = "DEVTYPE=";
2717 char *context = NULL;
2718 const char *line = strtok_r(buf, "\r\n", &context);
2719
2720 while (line != NULL) {
2721 char *index = strstr(line, info);
2722
2723 if (index != NULL) {
2724 blobmsg_add_string(b, "devtype", index + strlen(info));
2725 found = true;
2726 break;
2727 }
2728
2729 line = strtok_r(NULL, "\r\n", &context);
2730 }
2731 }
2732
2733 if (!found) {
2734 unsigned short number = 0;
2735 const char *name = NULL;
2736
2737 if (!system_get_dev_sysfs("type", ifname, buf, sizeof(buf))) {
2738 number = strtoul(buf, NULL, 0);
2739 name = system_netdevtype_name(number);
2740 blobmsg_add_string(b, "devtype", name);
2741 }
2742 }
2743 }
2744
2745 #define DIV_ROUND_UP(n,d) (((n) + (d) - 1) / (d))
2746
2747 static int32_t
2748 ethtool_feature_count(const char *ifname)
2749 {
2750 struct {
2751 struct ethtool_sset_info hdr;
2752 uint32_t buf;
2753 } req = {
2754 .hdr = {
2755 .cmd = ETHTOOL_GSSET_INFO,
2756 .sset_mask = 1 << ETH_SS_FEATURES
2757 }
2758 };
2759
2760 struct ifreq ifr = {
2761 .ifr_data = (void *)&req
2762 };
2763
2764 strncpy(ifr.ifr_name, ifname, sizeof(ifr.ifr_name) - 1);
2765
2766 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr) != 0)
2767 return -1;
2768
2769 if (!req.hdr.sset_mask)
2770 return 0;
2771
2772 return req.buf;
2773 }
2774
2775 static int32_t
2776 ethtool_feature_index(const char *ifname, const char *keyname)
2777 {
2778 struct ethtool_gstrings *feature_names;
2779 struct ifreq ifr = { 0 };
2780 int32_t n_features;
2781 uint32_t i;
2782
2783 n_features = ethtool_feature_count(ifname);
2784
2785 if (n_features <= 0)
2786 return -1;
2787
2788 feature_names = calloc(1, sizeof(*feature_names) + n_features * ETH_GSTRING_LEN);
2789
2790 if (!feature_names)
2791 return -1;
2792
2793 feature_names->cmd = ETHTOOL_GSTRINGS;
2794 feature_names->string_set = ETH_SS_FEATURES;
2795 feature_names->len = n_features;
2796
2797 strncpy(ifr.ifr_name, ifname, sizeof(ifr.ifr_name) - 1);
2798 ifr.ifr_data = (void *)feature_names;
2799
2800 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr) != 0) {
2801 free(feature_names);
2802
2803 return -1;
2804 }
2805
2806 for (i = 0; i < feature_names->len; i++)
2807 if (!strcmp((char *)&feature_names->data[i * ETH_GSTRING_LEN], keyname))
2808 break;
2809
2810 if (i >= feature_names->len)
2811 i = -1;
2812
2813 free(feature_names);
2814
2815 return i;
2816 }
2817
2818 static bool
2819 ethtool_feature_value(const char *ifname, const char *keyname)
2820 {
2821 struct ethtool_get_features_block *feature_block;
2822 struct ethtool_gfeatures *feature_values;
2823 struct ifreq ifr = { 0 };
2824 int32_t feature_idx;
2825 bool active;
2826
2827 feature_idx = ethtool_feature_index(ifname, keyname);
2828
2829 if (feature_idx < 0)
2830 return false;
2831
2832 feature_values = calloc(1,
2833 sizeof(*feature_values) +
2834 sizeof(feature_values->features[0]) * DIV_ROUND_UP(feature_idx, 32));
2835
2836 if (!feature_values)
2837 return false;
2838
2839 feature_values->cmd = ETHTOOL_GFEATURES;
2840 feature_values->size = DIV_ROUND_UP(feature_idx, 32);
2841
2842 strncpy(ifr.ifr_name, ifname, sizeof(ifr.ifr_name) - 1);
2843 ifr.ifr_data = (void *)feature_values;
2844
2845 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr) != 0) {
2846 free(feature_values);
2847
2848 return false;
2849 }
2850
2851 feature_block = &feature_values->features[feature_idx / 32];
2852 active = feature_block->active & (1U << feature_idx % 32);
2853
2854 free(feature_values);
2855
2856 return active;
2857 }
2858
2859 static void
2860 system_add_link_mode_name(struct blob_buf *b, int i, bool half)
2861 {
2862 char *buf;
2863
2864 /* allocate string buffer large enough for the mode name and a suffix
2865 * "-F" or "-H" indicating full duplex or half duplex.
2866 */
2867 buf = blobmsg_alloc_string_buffer(b, NULL, strlen(ethtool_modes[i].name) + 3);
2868 if (!buf)
2869 return;
2870
2871 strcpy(buf, ethtool_modes[i].name);
2872 if (half)
2873 strcat(buf, "-H");
2874 else
2875 strcat(buf, "-F");
2876
2877 blobmsg_add_string_buffer(b);
2878 }
2879
2880 static void
2881 system_add_link_modes(__s8 nwords, struct blob_buf *b, __u32 *mask)
2882 {
2883 size_t i;
2884
2885 for (i = 0; i < ARRAY_SIZE(ethtool_modes); i++) {
2886 if (ethtool_link_mode_test_bit(nwords, ethtool_modes[i].bit_half, mask))
2887 system_add_link_mode_name(b, i, true);
2888
2889 if (ethtool_link_mode_test_bit(nwords, ethtool_modes[i].bit_full, mask))
2890 system_add_link_mode_name(b, i, false);
2891 }
2892 }
2893
2894 static void
2895 system_add_pause_modes(__s8 nwords, struct blob_buf *b, __u32 *mask)
2896 {
2897 if (ethtool_link_mode_test_bit(nwords, ETHTOOL_LINK_MODE_Pause_BIT, mask))
2898 blobmsg_add_string(b, NULL, "pause");
2899
2900 if (ethtool_link_mode_test_bit(nwords, ETHTOOL_LINK_MODE_Asym_Pause_BIT, mask))
2901 blobmsg_add_string(b, NULL, "asym_pause");
2902 }
2903
2904
2905 static void
2906 system_add_ethtool_pause_an(struct blob_buf *b, __s8 nwords,
2907 __u32 *advertising, __u32 *lp_advertising)
2908 {
2909 bool an_rx = false, an_tx = false;
2910 void *d;
2911
2912 d = blobmsg_open_array(b, "negotiated");
2913
2914 /* Work out negotiated pause frame usage per
2915 * IEEE 802.3-2005 table 28B-3.
2916 */
2917 if (ethtool_link_mode_test_bit(nwords,
2918 ETHTOOL_LINK_MODE_Pause_BIT,
2919 advertising) &&
2920 ethtool_link_mode_test_bit(nwords,
2921 ETHTOOL_LINK_MODE_Pause_BIT,
2922 lp_advertising)) {
2923 an_tx = true;
2924 an_rx = true;
2925 } else if (ethtool_link_mode_test_bit(nwords,
2926 ETHTOOL_LINK_MODE_Asym_Pause_BIT,
2927 advertising) &&
2928 ethtool_link_mode_test_bit(nwords,
2929 ETHTOOL_LINK_MODE_Asym_Pause_BIT,
2930 lp_advertising)) {
2931 if (ethtool_link_mode_test_bit(nwords,
2932 ETHTOOL_LINK_MODE_Pause_BIT,
2933 advertising))
2934 an_rx = true;
2935 else if (ethtool_link_mode_test_bit(nwords,
2936 ETHTOOL_LINK_MODE_Pause_BIT,
2937 lp_advertising))
2938 an_tx = true;
2939 }
2940 if (an_tx)
2941 blobmsg_add_string(b, NULL, "rx");
2942
2943 if (an_rx)
2944 blobmsg_add_string(b, NULL, "tx");
2945
2946 blobmsg_close_array(b, d);
2947 }
2948
2949 static void
2950 system_get_ethtool_pause(struct device *dev, bool *rx_pause, bool *tx_pause, bool *pause_autoneg)
2951 {
2952 struct ethtool_pauseparam pp;
2953 struct ifreq ifr = {
2954 .ifr_data = (caddr_t)&pp,
2955 };
2956
2957 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name) - 1);
2958 memset(&pp, 0, sizeof(pp));
2959 pp.cmd = ETHTOOL_GPAUSEPARAM;
2960
2961 /* may fail */
2962 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr) == -1) {
2963 *pause_autoneg = true;
2964 return;
2965 }
2966
2967 *rx_pause = pp.rx_pause;
2968 *tx_pause = pp.tx_pause;
2969 *pause_autoneg = pp.autoneg;
2970 }
2971
2972 int
2973 system_if_dump_info(struct device *dev, struct blob_buf *b)
2974 {
2975 __u32 *supported, *advertising, *lp_advertising;
2976 bool rx_pause, tx_pause, pause_autoneg;
2977 struct {
2978 struct ethtool_link_settings req;
2979 __u32 link_mode_data[3 * 127];
2980 } ecmd;
2981 struct ifreq ifr = {
2982 .ifr_data = (caddr_t)&ecmd,
2983 };
2984 __s8 nwords;
2985 void *c, *d;
2986 char *s;
2987
2988 system_get_ethtool_pause(dev, &rx_pause, &tx_pause, &pause_autoneg);
2989
2990 memset(&ecmd, 0, sizeof(ecmd));
2991 ecmd.req.cmd = ETHTOOL_GLINKSETTINGS;
2992 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name) - 1);
2993
2994 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr) < 0 ||
2995 ecmd.req.link_mode_masks_nwords >= 0 ||
2996 ecmd.req.cmd != ETHTOOL_GLINKSETTINGS)
2997 return -EOPNOTSUPP;
2998
2999 ecmd.req.link_mode_masks_nwords = -ecmd.req.link_mode_masks_nwords;
3000
3001 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr) < 0 ||
3002 ecmd.req.link_mode_masks_nwords <= 0 ||
3003 ecmd.req.cmd != ETHTOOL_GLINKSETTINGS)
3004 return -EIO;
3005
3006 nwords = ecmd.req.link_mode_masks_nwords;
3007 supported = &ecmd.link_mode_data[0];
3008 advertising = &ecmd.link_mode_data[nwords];
3009 lp_advertising = &ecmd.link_mode_data[2 * nwords];
3010
3011 c = blobmsg_open_array(b, "link-advertising");
3012 system_add_link_modes(nwords, b, advertising);
3013 blobmsg_close_array(b, c);
3014
3015 c = blobmsg_open_array(b, "link-partner-advertising");
3016 system_add_link_modes(nwords, b, lp_advertising);
3017 blobmsg_close_array(b, c);
3018
3019 c = blobmsg_open_array(b, "link-supported");
3020 system_add_link_modes(nwords, b, supported);
3021 blobmsg_close_array(b, c);
3022
3023 if (ethtool_validate_speed(ecmd.req.speed) &&
3024 (ecmd.req.speed != (__u32)SPEED_UNKNOWN) &&
3025 (ecmd.req.speed != 0)) {
3026 s = blobmsg_alloc_string_buffer(b, "speed", 10);
3027 snprintf(s, 8, "%d%c", ecmd.req.speed,
3028 ecmd.req.duplex == DUPLEX_HALF ? 'H' : 'F');
3029 blobmsg_add_string_buffer(b);
3030 }
3031 blobmsg_add_u8(b, "autoneg", !!ecmd.req.autoneg);
3032
3033 c = blobmsg_open_table(b, "flow-control");
3034 blobmsg_add_u8(b, "autoneg", pause_autoneg);
3035
3036 d = blobmsg_open_array(b, "supported");
3037 system_add_pause_modes(nwords, b, supported);
3038 blobmsg_close_array(b, d);
3039
3040 if (pause_autoneg) {
3041 d = blobmsg_open_array(b, "link-advertising");
3042 system_add_pause_modes(nwords, b, advertising);
3043 blobmsg_close_array(b, d);
3044 }
3045
3046 d = blobmsg_open_array(b, "link-partner-advertising");
3047 system_add_pause_modes(nwords, b, lp_advertising);
3048 blobmsg_close_array(b, d);
3049
3050 if (pause_autoneg) {
3051 system_add_ethtool_pause_an(b, nwords, advertising,
3052 lp_advertising);
3053 } else {
3054 d = blobmsg_open_array(b, "selected");
3055 if (rx_pause)
3056 blobmsg_add_string(b, NULL, "rx");
3057
3058 if (tx_pause)
3059 blobmsg_add_string(b, NULL, "tx");
3060
3061 blobmsg_close_array(b, d);
3062 }
3063
3064 blobmsg_close_table(b, c);
3065
3066 blobmsg_add_u8(b, "hw-tc-offload",
3067 ethtool_feature_value(dev->ifname, "hw-tc-offload"));
3068
3069 system_add_devtype(b, dev->ifname);
3070
3071 return 0;
3072 }
3073
3074 int
3075 system_if_dump_stats(struct device *dev, struct blob_buf *b)
3076 {
3077 const char *const counters[] = {
3078 "collisions", "rx_frame_errors", "tx_compressed",
3079 "multicast", "rx_length_errors", "tx_dropped",
3080 "rx_bytes", "rx_missed_errors", "tx_errors",
3081 "rx_compressed", "rx_over_errors", "tx_fifo_errors",
3082 "rx_crc_errors", "rx_packets", "tx_heartbeat_errors",
3083 "rx_dropped", "tx_aborted_errors", "tx_packets",
3084 "rx_errors", "tx_bytes", "tx_window_errors",
3085 "rx_fifo_errors", "tx_carrier_errors",
3086 };
3087 int stats_dir;
3088 size_t i;
3089 uint64_t val = 0;
3090
3091 stats_dir = open(dev_sysfs_path(dev->ifname, "statistics"), O_DIRECTORY);
3092 if (stats_dir < 0)
3093 return -1;
3094
3095 for (i = 0; i < ARRAY_SIZE(counters); i++)
3096 if (read_uint64_file(stats_dir, counters[i], &val))
3097 blobmsg_add_u64(b, counters[i], val);
3098
3099 close(stats_dir);
3100 return 0;
3101 }
3102
3103 static int system_addr(struct device *dev, struct device_addr *addr, int cmd)
3104 {
3105 bool v4 = ((addr->flags & DEVADDR_FAMILY) == DEVADDR_INET4);
3106 int alen = v4 ? 4 : 16;
3107 unsigned int flags = 0;
3108 struct ifaddrmsg ifa = {
3109 .ifa_family = (alen == 4) ? AF_INET : AF_INET6,
3110 .ifa_prefixlen = addr->mask,
3111 .ifa_index = dev->ifindex,
3112 };
3113
3114 struct nl_msg *msg;
3115 if (cmd == RTM_NEWADDR)
3116 flags |= NLM_F_CREATE | NLM_F_REPLACE;
3117
3118 msg = nlmsg_alloc_simple(cmd, flags);
3119 if (!msg)
3120 return -1;
3121
3122 nlmsg_append(msg, &ifa, sizeof(ifa), 0);
3123 nla_put(msg, IFA_LOCAL, alen, &addr->addr);
3124 if (v4) {
3125 if (addr->broadcast)
3126 nla_put_u32(msg, IFA_BROADCAST, addr->broadcast);
3127 if (addr->point_to_point)
3128 nla_put_u32(msg, IFA_ADDRESS, addr->point_to_point);
3129 } else {
3130 time_t now = system_get_rtime();
3131 struct ifa_cacheinfo cinfo = {0xffffffffU, 0xffffffffU, 0, 0};
3132
3133 if (addr->preferred_until) {
3134 int64_t preferred = addr->preferred_until - now;
3135 if (preferred < 0)
3136 preferred = 0;
3137 else if (preferred > UINT32_MAX)
3138 preferred = UINT32_MAX;
3139
3140 cinfo.ifa_prefered = preferred;
3141 }
3142
3143 if (addr->valid_until) {
3144 int64_t valid = addr->valid_until - now;
3145 if (valid <= 0) {
3146 nlmsg_free(msg);
3147 return -1;
3148 }
3149 else if (valid > UINT32_MAX)
3150 valid = UINT32_MAX;
3151
3152 cinfo.ifa_valid = valid;
3153 }
3154
3155 nla_put(msg, IFA_CACHEINFO, sizeof(cinfo), &cinfo);
3156
3157 if (cmd == RTM_NEWADDR && (addr->flags & DEVADDR_OFFLINK))
3158 nla_put_u32(msg, IFA_FLAGS, IFA_F_NOPREFIXROUTE);
3159 }
3160
3161 return system_rtnl_call(msg);
3162 }
3163
3164 int system_add_address(struct device *dev, struct device_addr *addr)
3165 {
3166 return system_addr(dev, addr, RTM_NEWADDR);
3167 }
3168
3169 int system_del_address(struct device *dev, struct device_addr *addr)
3170 {
3171 return system_addr(dev, addr, RTM_DELADDR);
3172 }
3173
3174 static int system_neigh(struct device *dev, struct device_neighbor *neighbor, int cmd)
3175 {
3176 int alen = ((neighbor->flags & DEVADDR_FAMILY) == DEVADDR_INET4) ? 4 : 16;
3177 unsigned int flags = 0;
3178 struct ndmsg ndm = {
3179 .ndm_family = (alen == 4) ? AF_INET : AF_INET6,
3180 .ndm_ifindex = dev->ifindex,
3181 .ndm_state = NUD_PERMANENT,
3182 .ndm_flags = (neighbor->proxy ? NTF_PROXY : 0) | (neighbor->router ? NTF_ROUTER : 0),
3183 };
3184 struct nl_msg *msg;
3185
3186 if (cmd == RTM_NEWNEIGH)
3187 flags |= NLM_F_CREATE | NLM_F_REPLACE;
3188
3189 msg = nlmsg_alloc_simple(cmd, flags);
3190
3191 if (!msg)
3192 return -1;
3193
3194 nlmsg_append(msg, &ndm, sizeof(ndm), 0);
3195
3196 nla_put(msg, NDA_DST, alen, &neighbor->addr);
3197 if (neighbor->flags & DEVNEIGH_MAC)
3198 nla_put(msg, NDA_LLADDR, sizeof(neighbor->macaddr), &neighbor->macaddr);
3199
3200
3201 return system_rtnl_call(msg);
3202 }
3203
3204 int system_add_neighbor(struct device *dev, struct device_neighbor *neighbor)
3205 {
3206 return system_neigh(dev, neighbor, RTM_NEWNEIGH);
3207 }
3208
3209 int system_del_neighbor(struct device *dev, struct device_neighbor *neighbor)
3210 {
3211 return system_neigh(dev, neighbor, RTM_DELNEIGH);
3212 }
3213
3214 static int system_rt(struct device *dev, struct device_route *route, int cmd)
3215 {
3216 int alen = ((route->flags & DEVADDR_FAMILY) == DEVADDR_INET4) ? 4 : 16;
3217 bool have_gw;
3218 unsigned int flags = 0;
3219
3220 if (alen == 4)
3221 have_gw = !!route->nexthop.in.s_addr;
3222 else
3223 have_gw = route->nexthop.in6.s6_addr32[0] ||
3224 route->nexthop.in6.s6_addr32[1] ||
3225 route->nexthop.in6.s6_addr32[2] ||
3226 route->nexthop.in6.s6_addr32[3];
3227
3228 unsigned int table = (route->flags & (DEVROUTE_TABLE | DEVROUTE_SRCTABLE))
3229 ? route->table : RT_TABLE_MAIN;
3230
3231 struct rtmsg rtm = {
3232 .rtm_family = (alen == 4) ? AF_INET : AF_INET6,
3233 .rtm_dst_len = route->mask,
3234 .rtm_src_len = route->sourcemask,
3235 .rtm_table = (table < 256) ? table : RT_TABLE_UNSPEC,
3236 .rtm_protocol = (route->flags & DEVROUTE_PROTO) ? route->proto : RTPROT_STATIC,
3237 .rtm_scope = RT_SCOPE_NOWHERE,
3238 .rtm_type = (cmd == RTM_DELROUTE) ? 0: RTN_UNICAST,
3239 .rtm_flags = (route->flags & DEVROUTE_ONLINK) ? RTNH_F_ONLINK : 0,
3240 };
3241 struct nl_msg *msg;
3242
3243 if (cmd == RTM_NEWROUTE) {
3244 flags |= NLM_F_CREATE | NLM_F_REPLACE;
3245
3246 if (!dev) { /* Add null-route */
3247 rtm.rtm_scope = RT_SCOPE_UNIVERSE;
3248 rtm.rtm_type = RTN_UNREACHABLE;
3249 }
3250 else
3251 rtm.rtm_scope = (have_gw) ? RT_SCOPE_UNIVERSE : RT_SCOPE_LINK;
3252 }
3253
3254 if (route->flags & DEVROUTE_TYPE) {
3255 rtm.rtm_type = route->type;
3256 if (!(route->flags & (DEVROUTE_TABLE | DEVROUTE_SRCTABLE))) {
3257 if (rtm.rtm_type == RTN_LOCAL || rtm.rtm_type == RTN_BROADCAST ||
3258 rtm.rtm_type == RTN_NAT || rtm.rtm_type == RTN_ANYCAST)
3259 rtm.rtm_table = RT_TABLE_LOCAL;
3260 }
3261
3262 if (rtm.rtm_type == RTN_LOCAL || rtm.rtm_type == RTN_NAT) {
3263 rtm.rtm_scope = RT_SCOPE_HOST;
3264 } else if (rtm.rtm_type == RTN_BROADCAST || rtm.rtm_type == RTN_MULTICAST ||
3265 rtm.rtm_type == RTN_ANYCAST) {
3266 rtm.rtm_scope = RT_SCOPE_LINK;
3267 } else if (rtm.rtm_type == RTN_BLACKHOLE || rtm.rtm_type == RTN_UNREACHABLE ||
3268 rtm.rtm_type == RTN_PROHIBIT || rtm.rtm_type == RTN_FAILED_POLICY ||
3269 rtm.rtm_type == RTN_THROW) {
3270 rtm.rtm_scope = RT_SCOPE_UNIVERSE;
3271 dev = NULL;
3272 }
3273 }
3274
3275 if (route->flags & DEVROUTE_NODEV)
3276 dev = NULL;
3277
3278 msg = nlmsg_alloc_simple(cmd, flags);
3279 if (!msg)
3280 return -1;
3281
3282 nlmsg_append(msg, &rtm, sizeof(rtm), 0);
3283
3284 if (route->mask)
3285 nla_put(msg, RTA_DST, alen, &route->addr);
3286
3287 if (route->sourcemask) {
3288 if (rtm.rtm_family == AF_INET)
3289 nla_put(msg, RTA_PREFSRC, alen, &route->source);
3290 else
3291 nla_put(msg, RTA_SRC, alen, &route->source);
3292 }
3293
3294 if (route->metric > 0)
3295 nla_put_u32(msg, RTA_PRIORITY, route->metric);
3296
3297 if (have_gw)
3298 nla_put(msg, RTA_GATEWAY, alen, &route->nexthop);
3299
3300 if (dev)
3301 nla_put_u32(msg, RTA_OIF, dev->ifindex);
3302
3303 if (table >= 256)
3304 nla_put_u32(msg, RTA_TABLE, table);
3305
3306 if (route->flags & DEVROUTE_MTU) {
3307 struct nlattr *metrics;
3308
3309 if (!(metrics = nla_nest_start(msg, RTA_METRICS)))
3310 goto nla_put_failure;
3311
3312 nla_put_u32(msg, RTAX_MTU, route->mtu);
3313
3314 nla_nest_end(msg, metrics);
3315 }
3316
3317 return system_rtnl_call(msg);
3318
3319 nla_put_failure:
3320 nlmsg_free(msg);
3321 return -ENOMEM;
3322 }
3323
3324 int system_add_route(struct device *dev, struct device_route *route)
3325 {
3326 return system_rt(dev, route, RTM_NEWROUTE);
3327 }
3328
3329 int system_del_route(struct device *dev, struct device_route *route)
3330 {
3331 return system_rt(dev, route, RTM_DELROUTE);
3332 }
3333
3334 int system_flush_routes(void)
3335 {
3336 const char *names[] = { "ipv4", "ipv6" };
3337 size_t i;
3338 int fd;
3339
3340 for (i = 0; i < ARRAY_SIZE(names); i++) {
3341 snprintf(dev_buf, sizeof(dev_buf), "%s/sys/net/%s/route/flush", proc_path, names[i]);
3342 fd = open(dev_buf, O_WRONLY);
3343 if (fd < 0)
3344 continue;
3345
3346 if (write(fd, "-1", 2)) {}
3347 close(fd);
3348 }
3349 return 0;
3350 }
3351
3352 bool system_resolve_rt_type(const char *type, unsigned int *id)
3353 {
3354 return system_rtn_aton(type, id);
3355 }
3356
3357 bool system_resolve_rt_proto(const char *type, unsigned int *id)
3358 {
3359 FILE *f;
3360 char *e, buf[128];
3361 unsigned int n, proto = 256;
3362 n = strtoul(type, &e, 0);
3363 if (!*e && e != type)
3364 proto = n;
3365 else if (!strcmp(type, "unspec"))
3366 proto = RTPROT_UNSPEC;
3367 else if (!strcmp(type, "kernel"))
3368 proto = RTPROT_KERNEL;
3369 else if (!strcmp(type, "boot"))
3370 proto = RTPROT_BOOT;
3371 else if (!strcmp(type, "static"))
3372 proto = RTPROT_STATIC;
3373 else if ((f = fopen("/etc/iproute2/rt_protos", "r")) != NULL) {
3374 while (fgets(buf, sizeof(buf) - 1, f) != NULL) {
3375 if ((e = strtok(buf, " \t\n")) == NULL || *e == '#')
3376 continue;
3377
3378 n = strtoul(e, NULL, 10);
3379 e = strtok(NULL, " \t\n");
3380
3381 if (e && !strcmp(e, type)) {
3382 proto = n;
3383 break;
3384 }
3385 }
3386 fclose(f);
3387 }
3388
3389 if (proto > 255)
3390 return false;
3391
3392 *id = proto;
3393 return true;
3394 }
3395
3396 bool system_resolve_rt_table(const char *name, unsigned int *id)
3397 {
3398 FILE *f;
3399 char *e, buf[128];
3400 unsigned int n, table = RT_TABLE_UNSPEC;
3401
3402 /* first try to parse table as number */
3403 if ((n = strtoul(name, &e, 0)) > 0 && !*e)
3404 table = n;
3405
3406 /* handle well known aliases */
3407 else if (!strcmp(name, "default"))
3408 table = RT_TABLE_DEFAULT;
3409 else if (!strcmp(name, "main"))
3410 table = RT_TABLE_MAIN;
3411 else if (!strcmp(name, "local"))
3412 table = RT_TABLE_LOCAL;
3413
3414 /* try to look up name in /etc/iproute2/rt_tables */
3415 else if ((f = fopen("/etc/iproute2/rt_tables", "r")) != NULL)
3416 {
3417 while (fgets(buf, sizeof(buf) - 1, f) != NULL)
3418 {
3419 if ((e = strtok(buf, " \t\n")) == NULL || *e == '#')
3420 continue;
3421
3422 n = strtoul(e, NULL, 10);
3423 e = strtok(NULL, " \t\n");
3424
3425 if (e && !strcmp(e, name))
3426 {
3427 table = n;
3428 break;
3429 }
3430 }
3431
3432 fclose(f);
3433 }
3434
3435 if (table == RT_TABLE_UNSPEC)
3436 return false;
3437
3438 *id = table;
3439 return true;
3440 }
3441
3442 bool system_is_default_rt_table(unsigned int id)
3443 {
3444 return (id == RT_TABLE_MAIN);
3445 }
3446
3447 bool system_resolve_rpfilter(const char *filter, unsigned int *id)
3448 {
3449 char *e;
3450 unsigned int n;
3451
3452 if (!strcmp(filter, "strict"))
3453 n = 1;
3454 else if (!strcmp(filter, "loose"))
3455 n = 2;
3456 else {
3457 n = strtoul(filter, &e, 0);
3458 if (*e || e == filter || n > 2)
3459 return false;
3460 }
3461
3462 *id = n;
3463 return true;
3464 }
3465
3466 static int system_iprule(struct iprule *rule, int cmd)
3467 {
3468 int alen = ((rule->flags & IPRULE_FAMILY) == IPRULE_INET4) ? 4 : 16;
3469
3470 struct nl_msg *msg;
3471 struct rtmsg rtm = {
3472 .rtm_family = (alen == 4) ? AF_INET : AF_INET6,
3473 .rtm_protocol = RTPROT_STATIC,
3474 .rtm_scope = RT_SCOPE_UNIVERSE,
3475 .rtm_table = RT_TABLE_UNSPEC,
3476 .rtm_type = RTN_UNSPEC,
3477 .rtm_flags = 0,
3478 };
3479
3480 if (cmd == RTM_NEWRULE)
3481 rtm.rtm_type = RTN_UNICAST;
3482
3483 if (rule->invert)
3484 rtm.rtm_flags |= FIB_RULE_INVERT;
3485
3486 if (rule->flags & IPRULE_SRC)
3487 rtm.rtm_src_len = rule->src_mask;
3488
3489 if (rule->flags & IPRULE_DEST)
3490 rtm.rtm_dst_len = rule->dest_mask;
3491
3492 if (rule->flags & IPRULE_TOS)
3493 rtm.rtm_tos = rule->tos;
3494
3495 if (rule->flags & IPRULE_LOOKUP) {
3496 if (rule->lookup < 256)
3497 rtm.rtm_table = rule->lookup;
3498 }
3499
3500 if (rule->flags & IPRULE_ACTION)
3501 rtm.rtm_type = rule->action;
3502 else if (rule->flags & IPRULE_GOTO)
3503 rtm.rtm_type = FR_ACT_GOTO;
3504 else if (!(rule->flags & (IPRULE_LOOKUP | IPRULE_ACTION | IPRULE_GOTO)))
3505 rtm.rtm_type = FR_ACT_NOP;
3506
3507 msg = nlmsg_alloc_simple(cmd, NLM_F_REQUEST);
3508
3509 if (!msg)
3510 return -1;
3511
3512 nlmsg_append(msg, &rtm, sizeof(rtm), 0);
3513
3514 if (rule->flags & IPRULE_IN)
3515 nla_put(msg, FRA_IFNAME, strlen(rule->in_dev) + 1, rule->in_dev);
3516
3517 if (rule->flags & IPRULE_OUT)
3518 nla_put(msg, FRA_OIFNAME, strlen(rule->out_dev) + 1, rule->out_dev);
3519
3520 if (rule->flags & IPRULE_SRC)
3521 nla_put(msg, FRA_SRC, alen, &rule->src_addr);
3522
3523 if (rule->flags & IPRULE_DEST)
3524 nla_put(msg, FRA_DST, alen, &rule->dest_addr);
3525
3526 if (rule->flags & IPRULE_PRIORITY)
3527 nla_put_u32(msg, FRA_PRIORITY, rule->priority);
3528 else if (cmd == RTM_NEWRULE)
3529 nla_put_u32(msg, FRA_PRIORITY, rule->order);
3530
3531 if (rule->flags & IPRULE_FWMARK)
3532 nla_put_u32(msg, FRA_FWMARK, rule->fwmark);
3533
3534 if (rule->flags & IPRULE_FWMASK)
3535 nla_put_u32(msg, FRA_FWMASK, rule->fwmask);
3536
3537 if (rule->flags & IPRULE_LOOKUP) {
3538 if (rule->lookup >= 256)
3539 nla_put_u32(msg, FRA_TABLE, rule->lookup);
3540 }
3541
3542 if (rule->flags & IPRULE_SUP_PREFIXLEN)
3543 nla_put_u32(msg, FRA_SUPPRESS_PREFIXLEN, rule->sup_prefixlen);
3544
3545 if (rule->flags & IPRULE_UIDRANGE) {
3546 struct fib_rule_uid_range uidrange = {
3547 .start = rule->uidrange_start,
3548 .end = rule->uidrange_end
3549 };
3550
3551 nla_put(msg, FRA_UID_RANGE, sizeof(uidrange), &uidrange);
3552 }
3553
3554 if (rule->flags & IPRULE_GOTO)
3555 nla_put_u32(msg, FRA_GOTO, rule->gotoid);
3556
3557 return system_rtnl_call(msg);
3558 }
3559
3560 int system_add_iprule(struct iprule *rule)
3561 {
3562 return system_iprule(rule, RTM_NEWRULE);
3563 }
3564
3565 int system_del_iprule(struct iprule *rule)
3566 {
3567 return system_iprule(rule, RTM_DELRULE);
3568 }
3569
3570 int system_flush_iprules(void)
3571 {
3572 int rv = 0;
3573 struct iprule rule;
3574
3575 system_if_clear_entries(NULL, RTM_GETRULE, AF_INET);
3576 system_if_clear_entries(NULL, RTM_GETRULE, AF_INET6);
3577
3578 memset(&rule, 0, sizeof(rule));
3579
3580
3581 rule.flags = IPRULE_INET4 | IPRULE_PRIORITY | IPRULE_LOOKUP;
3582
3583 rule.priority = 0;
3584 rule.lookup = RT_TABLE_LOCAL;
3585 rv |= system_iprule(&rule, RTM_NEWRULE);
3586
3587 rule.priority = 32766;
3588 rule.lookup = RT_TABLE_MAIN;
3589 rv |= system_iprule(&rule, RTM_NEWRULE);
3590
3591 rule.priority = 32767;
3592 rule.lookup = RT_TABLE_DEFAULT;
3593 rv |= system_iprule(&rule, RTM_NEWRULE);
3594
3595
3596 rule.flags = IPRULE_INET6 | IPRULE_PRIORITY | IPRULE_LOOKUP;
3597
3598 rule.priority = 0;
3599 rule.lookup = RT_TABLE_LOCAL;
3600 rv |= system_iprule(&rule, RTM_NEWRULE);
3601
3602 rule.priority = 32766;
3603 rule.lookup = RT_TABLE_MAIN;
3604 rv |= system_iprule(&rule, RTM_NEWRULE);
3605
3606 return rv;
3607 }
3608
3609 bool system_resolve_iprule_action(const char *action, unsigned int *id)
3610 {
3611 return system_rtn_aton(action, id);
3612 }
3613
3614 time_t system_get_rtime(void)
3615 {
3616 struct timespec ts;
3617 struct timeval tv;
3618
3619 if (clock_gettime(CLOCK_MONOTONIC, &ts) == 0)
3620 return ts.tv_sec;
3621
3622 if (gettimeofday(&tv, NULL) == 0)
3623 return tv.tv_sec;
3624
3625 return 0;
3626 }
3627
3628 #ifndef IP_DF
3629 #define IP_DF 0x4000
3630 #endif
3631
3632 static int tunnel_ioctl(const char *name, int cmd, void *p)
3633 {
3634 struct ifreq ifr;
3635
3636 memset(&ifr, 0, sizeof(ifr));
3637 strncpy(ifr.ifr_name, name, sizeof(ifr.ifr_name) - 1);
3638 ifr.ifr_ifru.ifru_data = p;
3639 return ioctl(sock_ioctl, cmd, &ifr);
3640 }
3641
3642 #ifdef IFLA_IPTUN_MAX
3643 static int system_add_ip6_tunnel(const char *name, const unsigned int link,
3644 struct blob_attr **tb)
3645 {
3646 struct nl_msg *nlm = nlmsg_alloc_simple(RTM_NEWLINK,
3647 NLM_F_REQUEST | NLM_F_REPLACE | NLM_F_CREATE);
3648 struct ifinfomsg ifi = { .ifi_family = AF_UNSPEC };
3649 struct blob_attr *cur;
3650 int ret = 0, ttl = 0;
3651
3652 if (!nlm)
3653 return -1;
3654
3655 nlmsg_append(nlm, &ifi, sizeof(ifi), 0);
3656 nla_put_string(nlm, IFLA_IFNAME, name);
3657
3658 if (link)
3659 nla_put_u32(nlm, IFLA_LINK, link);
3660
3661 struct nlattr *linkinfo = nla_nest_start(nlm, IFLA_LINKINFO);
3662 if (!linkinfo) {
3663 ret = -ENOMEM;
3664 goto failure;
3665 }
3666
3667 nla_put_string(nlm, IFLA_INFO_KIND, "ip6tnl");
3668 struct nlattr *infodata = nla_nest_start(nlm, IFLA_INFO_DATA);
3669 if (!infodata) {
3670 ret = -ENOMEM;
3671 goto failure;
3672 }
3673
3674 if (link)
3675 nla_put_u32(nlm, IFLA_IPTUN_LINK, link);
3676
3677 if ((cur = tb[TUNNEL_ATTR_TTL]))
3678 ttl = blobmsg_get_u32(cur);
3679
3680 nla_put_u8(nlm, IFLA_IPTUN_PROTO, IPPROTO_IPIP);
3681 nla_put_u8(nlm, IFLA_IPTUN_TTL, (ttl) ? ttl : 64);
3682
3683 struct in6_addr in6buf;
3684 if ((cur = tb[TUNNEL_ATTR_LOCAL])) {
3685 if (inet_pton(AF_INET6, blobmsg_data(cur), &in6buf) < 1) {
3686 ret = -EINVAL;
3687 goto failure;
3688 }
3689 nla_put(nlm, IFLA_IPTUN_LOCAL, sizeof(in6buf), &in6buf);
3690 }
3691
3692 if ((cur = tb[TUNNEL_ATTR_REMOTE])) {
3693 if (inet_pton(AF_INET6, blobmsg_data(cur), &in6buf) < 1) {
3694 ret = -EINVAL;
3695 goto failure;
3696 }
3697 nla_put(nlm, IFLA_IPTUN_REMOTE, sizeof(in6buf), &in6buf);
3698 }
3699
3700 if ((cur = tb[TUNNEL_ATTR_DATA])) {
3701 struct blob_attr *tb_data[__IPIP6_DATA_ATTR_MAX];
3702 uint32_t tun_flags = IP6_TNL_F_IGN_ENCAP_LIMIT;
3703
3704 blobmsg_parse(ipip6_data_attr_list.params, __IPIP6_DATA_ATTR_MAX, tb_data,
3705 blobmsg_data(cur), blobmsg_len(cur));
3706
3707 if ((cur = tb_data[IPIP6_DATA_ENCAPLIMIT])) {
3708 char *str = blobmsg_get_string(cur);
3709
3710 if (strcmp(str, "ignore")) {
3711 char *e;
3712 unsigned encap_limit = strtoul(str, &e, 0);
3713
3714 if (e == str || *e || encap_limit > 255) {
3715 ret = -EINVAL;
3716 goto failure;
3717 }
3718
3719 nla_put_u8(nlm, IFLA_IPTUN_ENCAP_LIMIT, encap_limit);
3720 tun_flags &= ~IP6_TNL_F_IGN_ENCAP_LIMIT;
3721 }
3722 }
3723
3724 #ifdef IFLA_IPTUN_FMR_MAX
3725 if ((cur = tb_data[IPIP6_DATA_FMRS])) {
3726 struct blob_attr *rcur;
3727 unsigned rrem, fmrcnt = 0;
3728 struct nlattr *fmrs = nla_nest_start(nlm, IFLA_IPTUN_FMRS);
3729
3730 if (!fmrs) {
3731 ret = -ENOMEM;
3732 goto failure;
3733 }
3734
3735 blobmsg_for_each_attr(rcur, cur, rrem) {
3736 struct blob_attr *tb_fmr[__FMR_DATA_ATTR_MAX], *tb_cur;
3737 struct in6_addr ip6prefix;
3738 struct in_addr ip4prefix;
3739 unsigned ip4len, ip6len, ealen, offset;
3740
3741 blobmsg_parse(fmr_data_attr_list.params, __FMR_DATA_ATTR_MAX, tb_fmr,
3742 blobmsg_data(rcur), blobmsg_len(rcur));
3743
3744 if (!(tb_cur = tb_fmr[FMR_DATA_PREFIX6]) ||
3745 !parse_ip_and_netmask(AF_INET6,
3746 blobmsg_data(tb_cur), &ip6prefix,
3747 &ip6len)) {
3748 ret = -EINVAL;
3749 goto failure;
3750 }
3751
3752 if (!(tb_cur = tb_fmr[FMR_DATA_PREFIX4]) ||
3753 !parse_ip_and_netmask(AF_INET,
3754 blobmsg_data(tb_cur), &ip4prefix,
3755 &ip4len)) {
3756 ret = -EINVAL;
3757 goto failure;
3758 }
3759
3760 if (!(tb_cur = tb_fmr[FMR_DATA_EALEN])) {
3761 ret = -EINVAL;
3762 goto failure;
3763 }
3764 ealen = blobmsg_get_u32(tb_cur);
3765
3766 if (!(tb_cur = tb_fmr[FMR_DATA_OFFSET])) {
3767 ret = -EINVAL;
3768 goto failure;
3769 }
3770 offset = blobmsg_get_u32(tb_cur);
3771
3772 struct nlattr *rule = nla_nest_start(nlm, ++fmrcnt);
3773 if (!rule) {
3774 ret = -ENOMEM;
3775 goto failure;
3776 }
3777
3778 nla_put(nlm, IFLA_IPTUN_FMR_IP6_PREFIX, sizeof(ip6prefix), &ip6prefix);
3779 nla_put(nlm, IFLA_IPTUN_FMR_IP4_PREFIX, sizeof(ip4prefix), &ip4prefix);
3780 nla_put_u8(nlm, IFLA_IPTUN_FMR_IP6_PREFIX_LEN, ip6len);
3781 nla_put_u8(nlm, IFLA_IPTUN_FMR_IP4_PREFIX_LEN, ip4len);
3782 nla_put_u8(nlm, IFLA_IPTUN_FMR_EA_LEN, ealen);
3783 nla_put_u8(nlm, IFLA_IPTUN_FMR_OFFSET, offset);
3784
3785 nla_nest_end(nlm, rule);
3786 }
3787
3788 nla_nest_end(nlm, fmrs);
3789 }
3790 #endif
3791 if (tun_flags)
3792 nla_put_u32(nlm, IFLA_IPTUN_FLAGS, tun_flags);
3793 }
3794
3795 nla_nest_end(nlm, infodata);
3796 nla_nest_end(nlm, linkinfo);
3797
3798 return system_rtnl_call(nlm);
3799
3800 failure:
3801 nlmsg_free(nlm);
3802 return ret;
3803 }
3804 #endif
3805
3806 #ifdef IFLA_IPTUN_MAX
3807 #define IP6_FLOWINFO_TCLASS htonl(0x0FF00000)
3808 static int system_add_gre_tunnel(const char *name, const char *kind,
3809 const unsigned int link, struct blob_attr **tb, bool v6)
3810 {
3811 struct nl_msg *nlm;
3812 struct ifinfomsg ifi = { .ifi_family = AF_UNSPEC, };
3813 struct blob_attr *cur;
3814 uint32_t ikey = 0, okey = 0, flowinfo = 0, flags6 = IP6_TNL_F_IGN_ENCAP_LIMIT;
3815 uint16_t iflags = 0, oflags = 0;
3816 uint8_t tos = 0;
3817 int ret = 0, ttl = 0;
3818 unsigned encap_limit = 0;
3819
3820 nlm = nlmsg_alloc_simple(RTM_NEWLINK, NLM_F_REQUEST | NLM_F_REPLACE | NLM_F_CREATE);
3821 if (!nlm)
3822 return -1;
3823
3824 nlmsg_append(nlm, &ifi, sizeof(ifi), 0);
3825 nla_put_string(nlm, IFLA_IFNAME, name);
3826
3827 struct nlattr *linkinfo = nla_nest_start(nlm, IFLA_LINKINFO);
3828 if (!linkinfo) {
3829 ret = -ENOMEM;
3830 goto failure;
3831 }
3832
3833 nla_put_string(nlm, IFLA_INFO_KIND, kind);
3834 struct nlattr *infodata = nla_nest_start(nlm, IFLA_INFO_DATA);
3835 if (!infodata) {
3836 ret = -ENOMEM;
3837 goto failure;
3838 }
3839
3840 if (link)
3841 nla_put_u32(nlm, IFLA_GRE_LINK, link);
3842
3843 if ((cur = tb[TUNNEL_ATTR_TTL]))
3844 ttl = blobmsg_get_u32(cur);
3845
3846 if ((cur = tb[TUNNEL_ATTR_TOS])) {
3847 char *str = blobmsg_get_string(cur);
3848 if (strcmp(str, "inherit")) {
3849 unsigned uval;
3850
3851 if (!system_tos_aton(str, &uval)) {
3852 ret = -EINVAL;
3853 goto failure;
3854 }
3855
3856 if (v6)
3857 flowinfo |= htonl(uval << 20) & IP6_FLOWINFO_TCLASS;
3858 else
3859 tos = uval;
3860 } else {
3861 if (v6)
3862 flags6 |= IP6_TNL_F_USE_ORIG_TCLASS;
3863 else
3864 tos = 1;
3865 }
3866 }
3867
3868 if ((cur = tb[TUNNEL_ATTR_DATA])) {
3869 struct blob_attr *tb_data[__GRE_DATA_ATTR_MAX];
3870
3871 blobmsg_parse(gre_data_attr_list.params, __GRE_DATA_ATTR_MAX, tb_data,
3872 blobmsg_data(cur), blobmsg_len(cur));
3873
3874 if ((cur = tb_data[GRE_DATA_IKEY])) {
3875 if ((ikey = blobmsg_get_u32(cur)))
3876 iflags |= GRE_KEY;
3877 }
3878
3879 if ((cur = tb_data[GRE_DATA_OKEY])) {
3880 if ((okey = blobmsg_get_u32(cur)))
3881 oflags |= GRE_KEY;
3882 }
3883
3884 if ((cur = tb_data[GRE_DATA_ICSUM])) {
3885 if (blobmsg_get_bool(cur))
3886 iflags |= GRE_CSUM;
3887 }
3888
3889 if ((cur = tb_data[GRE_DATA_OCSUM])) {
3890 if (blobmsg_get_bool(cur))
3891 oflags |= GRE_CSUM;
3892 }
3893
3894 if ((cur = tb_data[GRE_DATA_ISEQNO])) {
3895 if (blobmsg_get_bool(cur))
3896 iflags |= GRE_SEQ;
3897 }
3898
3899 if ((cur = tb_data[GRE_DATA_OSEQNO])) {
3900 if (blobmsg_get_bool(cur))
3901 oflags |= GRE_SEQ;
3902 }
3903
3904 if ((cur = tb_data[GRE_DATA_ENCAPLIMIT])) {
3905 char *str = blobmsg_get_string(cur);
3906
3907 if (strcmp(str, "ignore")) {
3908 char *e;
3909
3910 encap_limit = strtoul(str, &e, 0);
3911
3912 if (e == str || *e || encap_limit > 255) {
3913 ret = -EINVAL;
3914 goto failure;
3915 }
3916
3917 flags6 &= ~IP6_TNL_F_IGN_ENCAP_LIMIT;
3918 }
3919 }
3920 }
3921
3922 if (v6) {
3923 struct in6_addr in6buf;
3924 if ((cur = tb[TUNNEL_ATTR_LOCAL])) {
3925 if (inet_pton(AF_INET6, blobmsg_data(cur), &in6buf) < 1) {
3926 ret = -EINVAL;
3927 goto failure;
3928 }
3929 nla_put(nlm, IFLA_GRE_LOCAL, sizeof(in6buf), &in6buf);
3930 }
3931
3932 if ((cur = tb[TUNNEL_ATTR_REMOTE])) {
3933 if (inet_pton(AF_INET6, blobmsg_data(cur), &in6buf) < 1) {
3934 ret = -EINVAL;
3935 goto failure;
3936 }
3937 nla_put(nlm, IFLA_GRE_REMOTE, sizeof(in6buf), &in6buf);
3938 }
3939
3940 if (!(flags6 & IP6_TNL_F_IGN_ENCAP_LIMIT))
3941 nla_put_u8(nlm, IFLA_GRE_ENCAP_LIMIT, encap_limit);
3942
3943 if (flowinfo)
3944 nla_put_u32(nlm, IFLA_GRE_FLOWINFO, flowinfo);
3945
3946 if (flags6)
3947 nla_put_u32(nlm, IFLA_GRE_FLAGS, flags6);
3948
3949 if (!ttl)
3950 ttl = 64;
3951 } else {
3952 struct in_addr inbuf;
3953 bool set_df = true;
3954
3955 if ((cur = tb[TUNNEL_ATTR_LOCAL])) {
3956 if (inet_pton(AF_INET, blobmsg_data(cur), &inbuf) < 1) {
3957 ret = -EINVAL;
3958 goto failure;
3959 }
3960 nla_put(nlm, IFLA_GRE_LOCAL, sizeof(inbuf), &inbuf);
3961 }
3962
3963 if ((cur = tb[TUNNEL_ATTR_REMOTE])) {
3964 if (inet_pton(AF_INET, blobmsg_data(cur), &inbuf) < 1) {
3965 ret = -EINVAL;
3966 goto failure;
3967 }
3968 nla_put(nlm, IFLA_GRE_REMOTE, sizeof(inbuf), &inbuf);
3969
3970 if (IN_MULTICAST(ntohl(inbuf.s_addr))) {
3971 if (!okey) {
3972 okey = inbuf.s_addr;
3973 oflags |= GRE_KEY;
3974 }
3975
3976 if (!ikey) {
3977 ikey = inbuf.s_addr;
3978 iflags |= GRE_KEY;
3979 }
3980 }
3981 }
3982
3983 if ((cur = tb[TUNNEL_ATTR_DF]))
3984 set_df = blobmsg_get_bool(cur);
3985
3986 if (!set_df) {
3987 /* ttl != 0 and nopmtudisc are incompatible */
3988 if (ttl) {
3989 ret = -EINVAL;
3990 goto failure;
3991 }
3992 } else if (!ttl)
3993 ttl = 64;
3994
3995 nla_put_u8(nlm, IFLA_GRE_PMTUDISC, set_df ? 1 : 0);
3996
3997 nla_put_u8(nlm, IFLA_GRE_TOS, tos);
3998 }
3999
4000 if (ttl)
4001 nla_put_u8(nlm, IFLA_GRE_TTL, ttl);
4002
4003 if (oflags)
4004 nla_put_u16(nlm, IFLA_GRE_OFLAGS, oflags);
4005
4006 if (iflags)
4007 nla_put_u16(nlm, IFLA_GRE_IFLAGS, iflags);
4008
4009 if (okey)
4010 nla_put_u32(nlm, IFLA_GRE_OKEY, htonl(okey));
4011
4012 if (ikey)
4013 nla_put_u32(nlm, IFLA_GRE_IKEY, htonl(ikey));
4014
4015 nla_nest_end(nlm, infodata);
4016 nla_nest_end(nlm, linkinfo);
4017
4018 return system_rtnl_call(nlm);
4019
4020 failure:
4021 nlmsg_free(nlm);
4022 return ret;
4023 }
4024 #endif
4025
4026 #ifdef IFLA_VTI_MAX
4027 static int system_add_vti_tunnel(const char *name, const char *kind,
4028 const unsigned int link, struct blob_attr **tb, bool v6)
4029 {
4030 struct nl_msg *nlm;
4031 struct ifinfomsg ifi = { .ifi_family = AF_UNSPEC, };
4032 struct blob_attr *cur;
4033 int ret = 0;
4034
4035 nlm = nlmsg_alloc_simple(RTM_NEWLINK, NLM_F_REQUEST | NLM_F_REPLACE | NLM_F_CREATE);
4036 if (!nlm)
4037 return -1;
4038
4039 nlmsg_append(nlm, &ifi, sizeof(ifi), 0);
4040 nla_put_string(nlm, IFLA_IFNAME, name);
4041
4042 struct nlattr *linkinfo = nla_nest_start(nlm, IFLA_LINKINFO);
4043 if (!linkinfo) {
4044 ret = -ENOMEM;
4045 goto failure;
4046 }
4047
4048 nla_put_string(nlm, IFLA_INFO_KIND, kind);
4049 struct nlattr *infodata = nla_nest_start(nlm, IFLA_INFO_DATA);
4050 if (!infodata) {
4051 ret = -ENOMEM;
4052 goto failure;
4053 }
4054
4055 if (link)
4056 nla_put_u32(nlm, IFLA_VTI_LINK, link);
4057
4058 if (v6) {
4059 struct in6_addr in6buf;
4060 if ((cur = tb[TUNNEL_ATTR_LOCAL])) {
4061 if (inet_pton(AF_INET6, blobmsg_data(cur), &in6buf) < 1) {
4062 ret = -EINVAL;
4063 goto failure;
4064 }
4065 nla_put(nlm, IFLA_VTI_LOCAL, sizeof(in6buf), &in6buf);
4066 }
4067
4068 if ((cur = tb[TUNNEL_ATTR_REMOTE])) {
4069 if (inet_pton(AF_INET6, blobmsg_data(cur), &in6buf) < 1) {
4070 ret = -EINVAL;
4071 goto failure;
4072 }
4073 nla_put(nlm, IFLA_VTI_REMOTE, sizeof(in6buf), &in6buf);
4074 }
4075
4076 } else {
4077 struct in_addr inbuf;
4078
4079 if ((cur = tb[TUNNEL_ATTR_LOCAL])) {
4080 if (inet_pton(AF_INET, blobmsg_data(cur), &inbuf) < 1) {
4081 ret = -EINVAL;
4082 goto failure;
4083 }
4084 nla_put(nlm, IFLA_VTI_LOCAL, sizeof(inbuf), &inbuf);
4085 }
4086
4087 if ((cur = tb[TUNNEL_ATTR_REMOTE])) {
4088 if (inet_pton(AF_INET, blobmsg_data(cur), &inbuf) < 1) {
4089 ret = -EINVAL;
4090 goto failure;
4091 }
4092 nla_put(nlm, IFLA_VTI_REMOTE, sizeof(inbuf), &inbuf);
4093 }
4094
4095 }
4096
4097 if ((cur = tb[TUNNEL_ATTR_DATA])) {
4098 struct blob_attr *tb_data[__VTI_DATA_ATTR_MAX];
4099 uint32_t ikey = 0, okey = 0;
4100
4101 blobmsg_parse(vti_data_attr_list.params, __VTI_DATA_ATTR_MAX, tb_data,
4102 blobmsg_data(cur), blobmsg_len(cur));
4103
4104 if ((cur = tb_data[VTI_DATA_IKEY])) {
4105 if ((ikey = blobmsg_get_u32(cur)))
4106 nla_put_u32(nlm, IFLA_VTI_IKEY, htonl(ikey));
4107 }
4108
4109 if ((cur = tb_data[VTI_DATA_OKEY])) {
4110 if ((okey = blobmsg_get_u32(cur)))
4111 nla_put_u32(nlm, IFLA_VTI_OKEY, htonl(okey));
4112 }
4113 }
4114
4115 nla_nest_end(nlm, infodata);
4116 nla_nest_end(nlm, linkinfo);
4117
4118 return system_rtnl_call(nlm);
4119
4120 failure:
4121 nlmsg_free(nlm);
4122 return ret;
4123 }
4124 #endif
4125
4126 #ifdef IFLA_XFRM_MAX
4127 static int system_add_xfrm_tunnel(const char *name, const char *kind,
4128 const unsigned int link, struct blob_attr **tb)
4129 {
4130 struct nl_msg *nlm;
4131 struct ifinfomsg ifi = { .ifi_family = AF_UNSPEC, };
4132 struct blob_attr *cur;
4133 int ret = 0;
4134
4135 nlm = nlmsg_alloc_simple(RTM_NEWLINK, NLM_F_REQUEST | NLM_F_REPLACE | NLM_F_CREATE);
4136 if (!nlm)
4137 return -1;
4138
4139 nlmsg_append(nlm, &ifi, sizeof(ifi), 0);
4140 nla_put_string(nlm, IFLA_IFNAME, name);
4141
4142 struct nlattr *linkinfo = nla_nest_start(nlm, IFLA_LINKINFO);
4143 if (!linkinfo) {
4144 ret = -ENOMEM;
4145 goto failure;
4146 }
4147
4148 nla_put_string(nlm, IFLA_INFO_KIND, kind);
4149 struct nlattr *infodata = nla_nest_start(nlm, IFLA_INFO_DATA);
4150 if (!infodata) {
4151 ret = -ENOMEM;
4152 goto failure;
4153 }
4154
4155 if (link)
4156 nla_put_u32(nlm, IFLA_XFRM_LINK, link);
4157
4158 if ((cur = tb[TUNNEL_ATTR_DATA])) {
4159 struct blob_attr *tb_data[__XFRM_DATA_ATTR_MAX];
4160 uint32_t if_id = 0;
4161
4162 blobmsg_parse(xfrm_data_attr_list.params, __XFRM_DATA_ATTR_MAX, tb_data,
4163 blobmsg_data(cur), blobmsg_len(cur));
4164
4165 if ((cur = tb_data[XFRM_DATA_IF_ID])) {
4166 if ((if_id = blobmsg_get_u32(cur)))
4167 nla_put_u32(nlm, IFLA_XFRM_IF_ID, if_id);
4168 }
4169
4170 }
4171
4172 nla_nest_end(nlm, infodata);
4173 nla_nest_end(nlm, linkinfo);
4174
4175 return system_rtnl_call(nlm);
4176
4177 failure:
4178 nlmsg_free(nlm);
4179 return ret;
4180 }
4181 #endif
4182
4183 #ifdef IFLA_VXLAN_MAX
4184 static void system_vxlan_map_bool_attr(struct nl_msg *msg, struct blob_attr **tb_data, int attrtype, int vxlandatatype, bool invert) {
4185 struct blob_attr *cur;
4186 if ((cur = tb_data[vxlandatatype])) {
4187 bool val = blobmsg_get_bool(cur);
4188 if (invert)
4189 val = !val;
4190
4191 if ((attrtype == IFLA_VXLAN_GBP) && val)
4192 nla_put_flag(msg, attrtype);
4193 else
4194 nla_put_u8(msg, attrtype, val);
4195
4196 }
4197 }
4198
4199 static int system_add_vxlan(const char *name, const unsigned int link, struct blob_attr **tb, bool v6)
4200 {
4201 struct blob_attr *tb_data[__VXLAN_DATA_ATTR_MAX];
4202 struct nl_msg *msg;
4203 struct nlattr *linkinfo, *data;
4204 struct ifinfomsg iim = { .ifi_family = AF_UNSPEC, };
4205 struct blob_attr *cur;
4206 int ret = 0;
4207
4208 if ((cur = tb[TUNNEL_ATTR_DATA]))
4209 blobmsg_parse(vxlan_data_attr_list.params, __VXLAN_DATA_ATTR_MAX, tb_data,
4210 blobmsg_data(cur), blobmsg_len(cur));
4211 else
4212 return -EINVAL;
4213
4214 msg = nlmsg_alloc_simple(RTM_NEWLINK, NLM_F_REQUEST | NLM_F_CREATE | NLM_F_EXCL);
4215
4216 if (!msg)
4217 return -1;
4218
4219 nlmsg_append(msg, &iim, sizeof(iim), 0);
4220
4221 nla_put_string(msg, IFLA_IFNAME, name);
4222
4223 if ((cur = tb_data[VXLAN_DATA_ATTR_MACADDR])) {
4224 struct ether_addr *ea = ether_aton(blobmsg_get_string(cur));
4225 if (!ea) {
4226 ret = -EINVAL;
4227 goto failure;
4228 }
4229
4230 nla_put(msg, IFLA_ADDRESS, ETH_ALEN, ea);
4231 }
4232
4233 if ((cur = tb[TUNNEL_ATTR_MTU])) {
4234 uint32_t mtu = blobmsg_get_u32(cur);
4235 nla_put_u32(msg, IFLA_MTU, mtu);
4236 }
4237
4238 if (!(linkinfo = nla_nest_start(msg, IFLA_LINKINFO))) {
4239 ret = -ENOMEM;
4240 goto failure;
4241 }
4242
4243 nla_put_string(msg, IFLA_INFO_KIND, "vxlan");
4244
4245 if (!(data = nla_nest_start(msg, IFLA_INFO_DATA))) {
4246 ret = -ENOMEM;
4247 goto failure;
4248 }
4249
4250 if (link)
4251 nla_put_u32(msg, IFLA_VXLAN_LINK, link);
4252
4253 if ((cur = tb_data[VXLAN_DATA_ATTR_ID])) {
4254 uint32_t id = blobmsg_get_u32(cur);
4255 if (id >= (1u << 24) - 1) {
4256 ret = -EINVAL;
4257 goto failure;
4258 }
4259
4260 nla_put_u32(msg, IFLA_VXLAN_ID, id);
4261 }
4262
4263 if (v6) {
4264 struct in6_addr in6buf;
4265 if ((cur = tb[TUNNEL_ATTR_LOCAL])) {
4266 if (inet_pton(AF_INET6, blobmsg_data(cur), &in6buf) < 1) {
4267 ret = -EINVAL;
4268 goto failure;
4269 }
4270 nla_put(msg, IFLA_VXLAN_LOCAL6, sizeof(in6buf), &in6buf);
4271 }
4272
4273 if ((cur = tb[TUNNEL_ATTR_REMOTE])) {
4274 if (inet_pton(AF_INET6, blobmsg_data(cur), &in6buf) < 1) {
4275 ret = -EINVAL;
4276 goto failure;
4277 }
4278 nla_put(msg, IFLA_VXLAN_GROUP6, sizeof(in6buf), &in6buf);
4279 }
4280 } else {
4281 struct in_addr inbuf;
4282
4283 if ((cur = tb[TUNNEL_ATTR_LOCAL])) {
4284 if (inet_pton(AF_INET, blobmsg_data(cur), &inbuf) < 1) {
4285 ret = -EINVAL;
4286 goto failure;
4287 }
4288 nla_put(msg, IFLA_VXLAN_LOCAL, sizeof(inbuf), &inbuf);
4289 }
4290
4291 if ((cur = tb[TUNNEL_ATTR_REMOTE])) {
4292 if (inet_pton(AF_INET, blobmsg_data(cur), &inbuf) < 1) {
4293 ret = -EINVAL;
4294 goto failure;
4295 }
4296 nla_put(msg, IFLA_VXLAN_GROUP, sizeof(inbuf), &inbuf);
4297 }
4298 }
4299
4300 uint32_t port = 4789;
4301 if ((cur = tb_data[VXLAN_DATA_ATTR_PORT])) {
4302 port = blobmsg_get_u32(cur);
4303 if (port < 1 || port > 65535) {
4304 ret = -EINVAL;
4305 goto failure;
4306 }
4307 }
4308 nla_put_u16(msg, IFLA_VXLAN_PORT, htons(port));
4309
4310 if ((cur = tb_data[VXLAN_DATA_ATTR_SRCPORTMIN])) {
4311 struct ifla_vxlan_port_range srcports = {0,0};
4312
4313 uint32_t low = blobmsg_get_u32(cur);
4314 if (low < 1 || low > 65535 - 1) {
4315 ret = -EINVAL;
4316 goto failure;
4317 }
4318
4319 srcports.low = htons((uint16_t) low);
4320 srcports.high = htons((uint16_t) (low+1));
4321
4322 if ((cur = tb_data[VXLAN_DATA_ATTR_SRCPORTMAX])) {
4323 uint32_t high = blobmsg_get_u32(cur);
4324 if (high < 1 || high > 65535) {
4325 ret = -EINVAL;
4326 goto failure;
4327 }
4328
4329 if (high > low)
4330 srcports.high = htons((uint16_t) high);
4331 }
4332
4333 nla_put(msg, IFLA_VXLAN_PORT_RANGE, sizeof(srcports), &srcports);
4334 }
4335
4336 system_vxlan_map_bool_attr(msg, tb_data, IFLA_VXLAN_UDP_CSUM, VXLAN_DATA_ATTR_TXCSUM, false);
4337 system_vxlan_map_bool_attr(msg, tb_data, IFLA_VXLAN_UDP_ZERO_CSUM6_RX, VXLAN_DATA_ATTR_RXCSUM, true);
4338 system_vxlan_map_bool_attr(msg, tb_data, IFLA_VXLAN_UDP_ZERO_CSUM6_TX, VXLAN_DATA_ATTR_TXCSUM, true);
4339 system_vxlan_map_bool_attr(msg, tb_data, IFLA_VXLAN_LEARNING, VXLAN_DATA_ATTR_LEARNING, false);
4340 system_vxlan_map_bool_attr(msg, tb_data, IFLA_VXLAN_RSC , VXLAN_DATA_ATTR_RSC, false);
4341 system_vxlan_map_bool_attr(msg, tb_data, IFLA_VXLAN_PROXY , VXLAN_DATA_ATTR_PROXY, false);
4342 system_vxlan_map_bool_attr(msg, tb_data, IFLA_VXLAN_L2MISS , VXLAN_DATA_ATTR_L2MISS, false);
4343 system_vxlan_map_bool_attr(msg, tb_data, IFLA_VXLAN_L3MISS , VXLAN_DATA_ATTR_L3MISS, false);
4344 system_vxlan_map_bool_attr(msg, tb_data, IFLA_VXLAN_GBP , VXLAN_DATA_ATTR_GBP, false);
4345
4346 if ((cur = tb_data[VXLAN_DATA_ATTR_AGEING])) {
4347 uint32_t ageing = blobmsg_get_u32(cur);
4348 nla_put_u32(msg, IFLA_VXLAN_AGEING, ageing);
4349 }
4350
4351 if ((cur = tb_data[VXLAN_DATA_ATTR_LIMIT])) {
4352 uint32_t maxaddress = blobmsg_get_u32(cur);
4353 nla_put_u32(msg, IFLA_VXLAN_LIMIT, maxaddress);
4354 }
4355
4356 if ((cur = tb[TUNNEL_ATTR_TOS])) {
4357 char *str = blobmsg_get_string(cur);
4358 unsigned tos = 1;
4359
4360 if (strcmp(str, "inherit")) {
4361 if (!system_tos_aton(str, &tos)) {
4362 ret = -EINVAL;
4363 goto failure;
4364 }
4365 }
4366
4367 nla_put_u8(msg, IFLA_VXLAN_TOS, tos);
4368 }
4369
4370 if ((cur = tb[TUNNEL_ATTR_TTL])) {
4371 uint32_t ttl = blobmsg_get_u32(cur);
4372 if (ttl < 1 || ttl > 255) {
4373 ret = -EINVAL;
4374 goto failure;
4375 }
4376
4377 nla_put_u8(msg, IFLA_VXLAN_TTL, ttl);
4378 }
4379
4380 nla_nest_end(msg, data);
4381 nla_nest_end(msg, linkinfo);
4382
4383 ret = system_rtnl_call(msg);
4384 if (ret)
4385 D(SYSTEM, "Error adding vxlan '%s': %d\n", name, ret);
4386
4387 return ret;
4388
4389 failure:
4390 nlmsg_free(msg);
4391 return ret;
4392 }
4393 #endif
4394
4395 static int system_add_sit_tunnel(const char *name, const unsigned int link, struct blob_attr **tb)
4396 {
4397 struct blob_attr *cur;
4398 int ret = 0;
4399
4400 if (system_add_proto_tunnel(name, IPPROTO_IPV6, link, tb) < 0)
4401 return -1;
4402
4403 #ifdef SIOCADD6RD
4404 if ((cur = tb[TUNNEL_ATTR_DATA])) {
4405 struct blob_attr *tb_data[__SIXRD_DATA_ATTR_MAX];
4406 unsigned int mask;
4407 struct ip_tunnel_6rd p6;
4408
4409 blobmsg_parse(sixrd_data_attr_list.params, __SIXRD_DATA_ATTR_MAX, tb_data,
4410 blobmsg_data(cur), blobmsg_len(cur));
4411
4412 memset(&p6, 0, sizeof(p6));
4413
4414 if ((cur = tb_data[SIXRD_DATA_PREFIX])) {
4415 if (!parse_ip_and_netmask(AF_INET6, blobmsg_data(cur),
4416 &p6.prefix, &mask) || mask > 128) {
4417 ret = -EINVAL;
4418 goto failure;
4419 }
4420
4421 p6.prefixlen = mask;
4422 }
4423
4424 if ((cur = tb_data[SIXRD_DATA_RELAY_PREFIX])) {
4425 if (!parse_ip_and_netmask(AF_INET, blobmsg_data(cur),
4426 &p6.relay_prefix, &mask) || mask > 32) {
4427 ret = -EINVAL;
4428 goto failure;
4429 }
4430
4431 p6.relay_prefixlen = mask;
4432 }
4433
4434 if (tunnel_ioctl(name, SIOCADD6RD, &p6) < 0) {
4435 ret = -1;
4436 goto failure;
4437 }
4438 }
4439 #endif
4440
4441 return ret;
4442
4443 failure:
4444 system_link_del(name);
4445 return ret;
4446 }
4447
4448 static int system_add_proto_tunnel(const char *name, const uint8_t proto, const unsigned int link, struct blob_attr **tb)
4449 {
4450 struct blob_attr *cur;
4451 bool set_df = true;
4452 struct ip_tunnel_parm p = {
4453 .link = link,
4454 .iph = {
4455 .version = 4,
4456 .ihl = 5,
4457 .protocol = proto,
4458 }
4459 };
4460
4461 if ((cur = tb[TUNNEL_ATTR_LOCAL]) &&
4462 inet_pton(AF_INET, blobmsg_data(cur), &p.iph.saddr) < 1)
4463 return -EINVAL;
4464
4465 if ((cur = tb[TUNNEL_ATTR_REMOTE]) &&
4466 inet_pton(AF_INET, blobmsg_data(cur), &p.iph.daddr) < 1)
4467 return -EINVAL;
4468
4469 if ((cur = tb[TUNNEL_ATTR_DF]))
4470 set_df = blobmsg_get_bool(cur);
4471
4472 if ((cur = tb[TUNNEL_ATTR_TTL]))
4473 p.iph.ttl = blobmsg_get_u32(cur);
4474
4475 if ((cur = tb[TUNNEL_ATTR_TOS])) {
4476 char *str = blobmsg_get_string(cur);
4477 if (strcmp(str, "inherit")) {
4478 unsigned uval;
4479
4480 if (!system_tos_aton(str, &uval))
4481 return -EINVAL;
4482
4483 p.iph.tos = uval;
4484 } else
4485 p.iph.tos = 1;
4486 }
4487
4488 p.iph.frag_off = set_df ? htons(IP_DF) : 0;
4489 /* ttl !=0 and nopmtudisc are incompatible */
4490 if (p.iph.ttl && p.iph.frag_off == 0)
4491 return -EINVAL;
4492
4493 strncpy(p.name, name, sizeof(p.name) - 1);
4494
4495 switch (p.iph.protocol) {
4496 case IPPROTO_IPIP:
4497 return tunnel_ioctl("tunl0", SIOCADDTUNNEL, &p);
4498 case IPPROTO_IPV6:
4499 return tunnel_ioctl("sit0", SIOCADDTUNNEL, &p);
4500 default:
4501 break;
4502 }
4503 return -1;
4504 }
4505
4506 int system_del_ip_tunnel(const struct device *dev)
4507 {
4508 return system_link_del(dev->ifname);
4509 }
4510
4511 int system_update_ipv6_mtu(struct device *dev, int mtu)
4512 {
4513 int ret = -1;
4514 char buf[64];
4515 int fd;
4516
4517 fd = open(dev_sysctl_path("ipv6/conf", dev->ifname, "mtu"), O_RDWR);
4518 if (fd < 0)
4519 return ret;
4520
4521 if (!mtu) {
4522 ssize_t len = read(fd, buf, sizeof(buf) - 1);
4523 if (len < 0)
4524 goto out;
4525
4526 buf[len] = 0;
4527 ret = atoi(buf);
4528 } else {
4529 if (write(fd, buf, snprintf(buf, sizeof(buf), "%i", mtu)) > 0)
4530 ret = mtu;
4531 }
4532
4533 out:
4534 close(fd);
4535 return ret;
4536 }
4537
4538 int system_add_ip_tunnel(const struct device *dev, struct blob_attr *attr)
4539 {
4540 struct blob_attr *tb[__TUNNEL_ATTR_MAX];
4541 struct blob_attr *cur;
4542 const char *str;
4543
4544 blobmsg_parse(tunnel_attr_list.params, __TUNNEL_ATTR_MAX, tb,
4545 blob_data(attr), blob_len(attr));
4546
4547 system_link_del(dev->ifname);
4548
4549 if (!(cur = tb[TUNNEL_ATTR_TYPE]))
4550 return -EINVAL;
4551 str = blobmsg_data(cur);
4552
4553 unsigned int ttl = 0;
4554 if ((cur = tb[TUNNEL_ATTR_TTL])) {
4555 ttl = blobmsg_get_u32(cur);
4556 if (ttl > 255)
4557 return -EINVAL;
4558 }
4559
4560 unsigned int link = 0;
4561 if ((cur = tb[TUNNEL_ATTR_LINK])) {
4562 struct interface *iface = vlist_find(&interfaces, blobmsg_data(cur), iface, node);
4563 if (!iface)
4564 return -EINVAL;
4565
4566 if (iface->l3_dev.dev)
4567 link = iface->l3_dev.dev->ifindex;
4568 }
4569
4570 if (!strcmp(str, "sit"))
4571 return system_add_sit_tunnel(dev->ifname, link, tb);
4572 #ifdef IFLA_IPTUN_MAX
4573 else if (!strcmp(str, "ipip6")) {
4574 return system_add_ip6_tunnel(dev->ifname, link, tb);
4575 } else if (!strcmp(str, "greip")) {
4576 return system_add_gre_tunnel(dev->ifname, "gre", link, tb, false);
4577 } else if (!strcmp(str, "gretapip")) {
4578 return system_add_gre_tunnel(dev->ifname, "gretap", link, tb, false);
4579 } else if (!strcmp(str, "greip6")) {
4580 return system_add_gre_tunnel(dev->ifname, "ip6gre", link, tb, true);
4581 } else if (!strcmp(str, "gretapip6")) {
4582 return system_add_gre_tunnel(dev->ifname, "ip6gretap", link, tb, true);
4583 #ifdef IFLA_VTI_MAX
4584 } else if (!strcmp(str, "vtiip")) {
4585 return system_add_vti_tunnel(dev->ifname, "vti", link, tb, false);
4586 } else if (!strcmp(str, "vtiip6")) {
4587 return system_add_vti_tunnel(dev->ifname, "vti6", link, tb, true);
4588 #endif
4589 #ifdef IFLA_XFRM_MAX
4590 } else if (!strcmp(str, "xfrm")) {
4591 return system_add_xfrm_tunnel(dev->ifname, "xfrm", link, tb);
4592 #endif
4593 #ifdef IFLA_VXLAN_MAX
4594 } else if(!strcmp(str, "vxlan")) {
4595 return system_add_vxlan(dev->ifname, link, tb, false);
4596 } else if(!strcmp(str, "vxlan6")) {
4597 return system_add_vxlan(dev->ifname, link, tb, true);
4598 #endif
4599 #endif
4600 } else if (!strcmp(str, "ipip")) {
4601 return system_add_proto_tunnel(dev->ifname, IPPROTO_IPIP, link, tb);
4602 }
4603 else
4604 return -EINVAL;
4605
4606 return 0;
4607 }
OpenWrt Network interface configuration daemon