1/*
2 * Copyright (C)2006 USAGI/WIDE Project
3 *
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License as published by
6 * the Free Software Foundation; either version 2 of the License, or
7 * (at your option) any later version.
8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write to the Free Software
16 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
17 */
18/*
19 * Author:
20 *	Masahide NAKAMURA @USAGI
21 */
22
23#include <stdio.h>
24#include <string.h>
25#include <stdlib.h>
26#include <unistd.h>
27#include <sys/types.h>
28#include <sys/socket.h>
29#include <arpa/inet.h>
30#include <sys/ioctl.h>
31#include <linux/ip.h>
32#include <linux/if.h>
33#include <linux/if_arp.h>
34#include <linux/if_tunnel.h>
35#include <linux/ip6_tunnel.h>
36
37#include "utils.h"
38#include "tunnel.h"
39
40#define IP6_FLOWINFO_TCLASS	htonl(0x0FF00000)
41#define IP6_FLOWINFO_FLOWLABEL	htonl(0x000FFFFF)
42
43#define DEFAULT_TNL_HOP_LIMIT	(64)
44
45static void usage(void) __attribute__((noreturn));
46
47static void usage(void)
48{
49	fprintf(stderr, "Usage: ip -f inet6 tunnel { add | change | del | show } [ NAME ]\n");
50	fprintf(stderr, "          [ mode { ip6ip6 | ipip6 | any } ]\n");
51	fprintf(stderr, "          [ remote ADDR local ADDR ] [ dev PHYS_DEV ]\n");
52	fprintf(stderr, "          [ encaplimit ELIM ]\n");
53	fprintf(stderr ,"          [ hoplimit TTL ] [ tclass TCLASS ] [ flowlabel FLOWLABEL ]\n");
54	fprintf(stderr, "          [ dscp inherit ]\n");
55	fprintf(stderr, "\n");
56	fprintf(stderr, "Where: NAME      := STRING\n");
57	fprintf(stderr, "       ADDR      := IPV6_ADDRESS\n");
58	fprintf(stderr, "       ELIM      := { none | 0..255 }(default=%d)\n",
59		IPV6_DEFAULT_TNL_ENCAP_LIMIT);
60	fprintf(stderr, "       TTL       := 0..255 (default=%d)\n",
61		DEFAULT_TNL_HOP_LIMIT);
62	fprintf(stderr, "       TOS       := { 0x0..0xff | inherit }\n");
63	fprintf(stderr, "       FLOWLABEL := { 0x0..0xfffff | inherit }\n");
64	exit(-1);
65}
66
67static void print_tunnel(struct ip6_tnl_parm *p)
68{
69	char remote[64];
70	char local[64];
71
72	inet_ntop(AF_INET6, &p->raddr, remote, sizeof(remote));
73	inet_ntop(AF_INET6, &p->laddr, local, sizeof(local));
74
75	printf("%s: %s/ipv6 remote %s local %s",
76	       p->name, tnl_strproto(p->proto), remote, local);
77	if (p->link) {
78		char *n = tnl_ioctl_get_ifname(p->link);
79		if (n)
80			printf(" dev %s", n);
81	}
82
83	if (p->flags & IP6_TNL_F_IGN_ENCAP_LIMIT)
84		printf(" encaplimit none");
85	else
86		printf(" encaplimit %u", p->encap_limit);
87
88	printf(" hoplimit %u", p->hop_limit);
89
90	if (p->flags & IP6_TNL_F_USE_ORIG_TCLASS)
91		printf(" tclass inherit");
92	else {
93		__u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_TCLASS);
94		printf(" tclass 0x%02x", (__u8)(val >> 20));
95	}
96
97	if (p->flags & IP6_TNL_F_USE_ORIG_FLOWLABEL)
98		printf(" flowlabel inherit");
99	else
100		printf(" flowlabel 0x%05x", ntohl(p->flowinfo & IP6_FLOWINFO_FLOWLABEL));
101
102	printf(" (flowinfo 0x%08x)", ntohl(p->flowinfo));
103
104	if (p->flags & IP6_TNL_F_RCV_DSCP_COPY)
105		printf(" dscp inherit");
106}
107
108static int parse_args(int argc, char **argv, struct ip6_tnl_parm *p)
109{
110	char medium[IFNAMSIZ];
111
112	memset(medium, 0, sizeof(medium));
113
114	while (argc > 0) {
115		if (strcmp(*argv, "mode") == 0) {
116			NEXT_ARG();
117			if (strcmp(*argv, "ipv6/ipv6") == 0 ||
118			    strcmp(*argv, "ip6ip6") == 0)
119				p->proto = IPPROTO_IPV6;
120			else if (strcmp(*argv, "ip/ipv6") == 0 ||
121				 strcmp(*argv, "ipv4/ipv6") == 0 ||
122				 strcmp(*argv, "ipip6") == 0 ||
123				 strcmp(*argv, "ip4ip6") == 0)
124				p->proto = IPPROTO_IPIP;
125			else if (strcmp(*argv, "any/ipv6") == 0 ||
126				 strcmp(*argv, "any") == 0)
127				p->proto = 0;
128			else {
129                                fprintf(stderr,"Cannot guess tunnel mode.\n");
130                                exit(-1);
131                        }
132                } else if (strcmp(*argv, "remote") == 0) {
133			inet_prefix raddr;
134			NEXT_ARG();
135			get_prefix(&raddr, *argv, preferred_family);
136			if (raddr.family == AF_UNSPEC)
137				invarg("\"remote\" address family is AF_UNSPEC", *argv);
138			memcpy(&p->raddr, &raddr.data, sizeof(p->raddr));
139		} else if (strcmp(*argv, "local") == 0) {
140			inet_prefix laddr;
141			NEXT_ARG();
142			get_prefix(&laddr, *argv, preferred_family);
143			if (laddr.family == AF_UNSPEC)
144				invarg("\"local\" address family is AF_UNSPEC", *argv);
145			memcpy(&p->laddr, &laddr.data, sizeof(p->laddr));
146		} else if (strcmp(*argv, "dev") == 0) {
147			NEXT_ARG();
148			strncpy(medium, *argv, IFNAMSIZ - 1);
149		} else if (strcmp(*argv, "encaplimit") == 0) {
150			NEXT_ARG();
151			if (strcmp(*argv, "none") == 0) {
152				p->flags |= IP6_TNL_F_IGN_ENCAP_LIMIT;
153			} else {
154				__u8 uval;
155				if (get_u8(&uval, *argv, 0) < -1)
156					invarg("invalid ELIM", *argv);
157				p->encap_limit = uval;
158			}
159		} else if (strcmp(*argv, "hoplimit") == 0 ||
160			   strcmp(*argv, "ttl") == 0 ||
161			   strcmp(*argv, "hlim") == 0) {
162			__u8 uval;
163			NEXT_ARG();
164			if (get_u8(&uval, *argv, 0))
165				invarg("invalid TTL", *argv);
166			p->hop_limit = uval;
167		} else if (strcmp(*argv, "tclass") == 0 ||
168			   strcmp(*argv, "tc") == 0 ||
169			   strcmp(*argv, "tos") == 0 ||
170			   matches(*argv, "dsfield") == 0) {
171			__u8 uval;
172			NEXT_ARG();
173			if (strcmp(*argv, "inherit") == 0)
174				p->flags |= IP6_TNL_F_USE_ORIG_TCLASS;
175			else {
176				if (get_u8(&uval, *argv, 16))
177					invarg("invalid TClass", *argv);
178				p->flowinfo |= htonl((__u32)uval << 20) & IP6_FLOWINFO_TCLASS;
179				p->flags &= ~IP6_TNL_F_USE_ORIG_TCLASS;
180			}
181		} else if (strcmp(*argv, "flowlabel") == 0 ||
182			   strcmp(*argv, "fl") == 0) {
183			__u32 uval;
184			NEXT_ARG();
185			if (strcmp(*argv, "inherit") == 0)
186				p->flags |= IP6_TNL_F_USE_ORIG_FLOWLABEL;
187			else {
188				if (get_u32(&uval, *argv, 16))
189					invarg("invalid Flowlabel", *argv);
190				if (uval > 0xFFFFF)
191					invarg("invalid Flowlabel", *argv);
192				p->flowinfo |= htonl(uval) & IP6_FLOWINFO_FLOWLABEL;
193				p->flags &= ~IP6_TNL_F_USE_ORIG_FLOWLABEL;
194			}
195		} else if (strcmp(*argv, "dscp") == 0) {
196			NEXT_ARG();
197			if (strcmp(*argv, "inherit") != 0)
198				invarg("not inherit", *argv);
199			p->flags |= IP6_TNL_F_RCV_DSCP_COPY;
200		} else {
201			if (strcmp(*argv, "name") == 0) {
202				NEXT_ARG();
203			}
204			if (matches(*argv, "help") == 0)
205				usage();
206			if (p->name[0])
207				duparg2("name", *argv);
208			strncpy(p->name, *argv, IFNAMSIZ - 1);
209		}
210		argc--; argv++;
211	}
212	if (medium[0]) {
213		p->link = tnl_ioctl_get_ifindex(medium);
214		if (p->link == 0)
215			return -1;
216	}
217	return 0;
218}
219
220static void ip6_tnl_parm_init(struct ip6_tnl_parm *p, int apply_default)
221{
222	memset(p, 0, sizeof(*p));
223	p->proto = IPPROTO_IPV6;
224	if (apply_default) {
225		p->hop_limit = DEFAULT_TNL_HOP_LIMIT;
226		p->encap_limit = IPV6_DEFAULT_TNL_ENCAP_LIMIT;
227	}
228}
229
230/*
231 * @p1: user specified parameter
232 * @p2: database entry
233 */
234static int ip6_tnl_parm_match(const struct ip6_tnl_parm *p1,
235			      const struct ip6_tnl_parm *p2)
236{
237	return ((!p1->link || p1->link == p2->link) &&
238		(!p1->name[0] || strcmp(p1->name, p2->name) == 0) &&
239		(memcmp(&p1->laddr, &in6addr_any, sizeof(p1->laddr)) == 0 ||
240		 memcmp(&p1->laddr, &p2->laddr, sizeof(p1->laddr)) == 0) &&
241		(memcmp(&p1->raddr, &in6addr_any, sizeof(p1->raddr)) == 0 ||
242		 memcmp(&p1->raddr, &p2->raddr, sizeof(p1->raddr)) == 0) &&
243		(!p1->proto || !p2->proto || p1->proto == p2->proto) &&
244		(!p1->encap_limit || p1->encap_limit == p2->encap_limit) &&
245		(!p1->hop_limit || p1->hop_limit == p2->hop_limit) &&
246		(!(p1->flowinfo & IP6_FLOWINFO_TCLASS) ||
247		 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_TCLASS)) &&
248		(!(p1->flowinfo & IP6_FLOWINFO_FLOWLABEL) ||
249		 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_FLOWLABEL)) &&
250		(!p1->flags || (p1->flags & p2->flags)));
251}
252
253static int do_tunnels_list(struct ip6_tnl_parm *p)
254{
255	char buf[512];
256	int err = -1;
257	FILE *fp = fopen("/proc/net/dev", "r");
258	if (fp == NULL) {
259		perror("fopen");
260		goto end;
261	}
262
263	/* skip two lines at the begenning of the file */
264	fgets(buf, sizeof(buf), fp);
265	fgets(buf, sizeof(buf), fp);
266
267	while (fgets(buf, sizeof(buf), fp) != NULL) {
268		char name[IFNAMSIZ];
269		int type;
270		unsigned long rx_bytes, rx_packets, rx_errs, rx_drops,
271			rx_fifo, rx_frame,
272			tx_bytes, tx_packets, tx_errs, tx_drops,
273			tx_fifo, tx_colls, tx_carrier, rx_multi;
274		struct ip6_tnl_parm p1;
275		char *ptr;
276
277		buf[sizeof(buf) - 1] = '\0';
278		if ((ptr = strchr(buf, ':')) == NULL ||
279		    (*ptr++ = 0, sscanf(buf, "%s", name) != 1)) {
280			fprintf(stderr, "Wrong format of /proc/net/dev. Sorry.\n");
281			goto end;
282		}
283		if (sscanf(ptr, "%ld%ld%ld%ld%ld%ld%ld%*d%ld%ld%ld%ld%ld%ld%ld",
284			   &rx_bytes, &rx_packets, &rx_errs, &rx_drops,
285			   &rx_fifo, &rx_frame, &rx_multi,
286			   &tx_bytes, &tx_packets, &tx_errs, &tx_drops,
287			   &tx_fifo, &tx_colls, &tx_carrier) != 14)
288			continue;
289		if (p->name[0] && strcmp(p->name, name))
290			continue;
291		type = tnl_ioctl_get_iftype(name);
292		if (type == -1) {
293			fprintf(stderr, "Failed to get type of [%s]\n", name);
294			continue;
295		}
296		if (type != ARPHRD_TUNNEL6)
297			continue;
298		memset(&p1, 0, sizeof(p1));
299		ip6_tnl_parm_init(&p1, 0);
300		strcpy(p1.name, name);
301		p1.link = tnl_ioctl_get_ifindex(p1.name);
302		if (p1.link == 0)
303			continue;
304		if (tnl_get_ioctl(p1.name, &p1))
305			continue;
306		if (!ip6_tnl_parm_match(p, &p1))
307			continue;
308		print_tunnel(&p1);
309		if (show_stats) {
310			printf("%s", _SL_);
311			printf("RX: Packets    Bytes        Errors CsumErrs OutOfSeq Mcasts%s", _SL_);
312			printf("    %-10ld %-12ld %-6ld %-8ld %-8ld %-8ld%s",
313			       rx_packets, rx_bytes, rx_errs, rx_frame, rx_fifo, rx_multi, _SL_);
314			printf("TX: Packets    Bytes        Errors DeadLoop NoRoute  NoBufs%s", _SL_);
315			printf("    %-10ld %-12ld %-6ld %-8ld %-8ld %-6ld",
316			       tx_packets, tx_bytes, tx_errs, tx_colls, tx_carrier, tx_drops);
317		}
318		printf("\n");
319	}
320	err = 0;
321
322 end:
323	if (fp)
324		fclose(fp);
325	return err;
326}
327
328static int do_show(int argc, char **argv)
329{
330        struct ip6_tnl_parm p;
331
332	ip6_tnl_parm_init(&p, 0);
333	p.proto = 0;  /* default to any */
334
335        if (parse_args(argc, argv, &p) < 0)
336                return -1;
337
338	if (!p.name[0] || show_stats)
339		do_tunnels_list(&p);
340	else {
341		if (tnl_get_ioctl(p.name, &p))
342			return -1;
343		print_tunnel(&p);
344		printf("\n");
345	}
346
347        return 0;
348}
349
350static int do_add(int cmd, int argc, char **argv)
351{
352	struct ip6_tnl_parm p;
353
354	ip6_tnl_parm_init(&p, 1);
355
356	if (parse_args(argc, argv, &p) < 0)
357		return -1;
358
359	return tnl_add_ioctl(cmd,
360			     cmd == SIOCCHGTUNNEL && p.name[0] ?
361			     p.name : "ip6tnl0", p.name, &p);
362}
363
364static int do_del(int argc, char **argv)
365{
366	struct ip6_tnl_parm p;
367
368	ip6_tnl_parm_init(&p, 1);
369
370	if (parse_args(argc, argv, &p) < 0)
371		return -1;
372
373	return tnl_del_ioctl(p.name[0] ? p.name : "ip6tnl0", p.name, &p);
374}
375
376int do_ip6tunnel(int argc, char **argv)
377{
378	switch (preferred_family) {
379	case AF_UNSPEC:
380		preferred_family = AF_INET6;
381		break;
382	case AF_INET6:
383		break;
384	default:
385		fprintf(stderr, "Unsupported family:%d\n", preferred_family);
386		exit(-1);
387	}
388
389	if (argc > 0) {
390		if (matches(*argv, "add") == 0)
391			return do_add(SIOCADDTUNNEL, argc - 1, argv + 1);
392		if (matches(*argv, "change") == 0)
393			return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1);
394		if (matches(*argv, "del") == 0)
395			return do_del(argc - 1, argv + 1);
396		if (matches(*argv, "show") == 0 ||
397		    matches(*argv, "lst") == 0 ||
398		    matches(*argv, "list") == 0)
399			return do_show(argc - 1, argv + 1);
400		if (matches(*argv, "help") == 0)
401			usage();
402	} else
403		return do_show(0, NULL);
404
405	fprintf(stderr, "Command \"%s\" is unknown, try \"ip -f inet6 tunnel help\".\n", *argv);
406	exit(-1);
407}
408