1/* 2 * Copyright (C)2006 USAGI/WIDE Project 3 * 4 * This program is free software; you can redistribute it and/or modify 5 * it under the terms of the GNU General Public License as published by 6 * the Free Software Foundation; either version 2 of the License, or 7 * (at your option) any later version. 8 * 9 * This program is distributed in the hope that it will be useful, 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of 11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 12 * GNU General Public License for more details. 13 * 14 * You should have received a copy of the GNU General Public License 15 * along with this program; if not, see <http://www.gnu.org/licenses>. 16 */ 17/* 18 * Author: 19 * Masahide NAKAMURA @USAGI 20 */ 21 22#include <stdio.h> 23#include <string.h> 24#include <stdlib.h> 25#include <unistd.h> 26#include <sys/types.h> 27#include <sys/socket.h> 28#include <arpa/inet.h> 29#include <sys/ioctl.h> 30#include <linux/ip.h> 31#include <linux/if.h> 32#include <linux/if_arp.h> 33#include <linux/if_tunnel.h> 34#include <linux/ip6_tunnel.h> 35 36#include "utils.h" 37#include "tunnel.h" 38#include "ip_common.h" 39 40#define IP6_FLOWINFO_TCLASS htonl(0x0FF00000) 41#define IP6_FLOWINFO_FLOWLABEL htonl(0x000FFFFF) 42 43#define DEFAULT_TNL_HOP_LIMIT (64) 44 45static void usage(void) __attribute__((noreturn)); 46 47static void usage(void) 48{ 49 fprintf(stderr, "Usage: ip -f inet6 tunnel { add | change | del | show } [ NAME ]\n"); 50 fprintf(stderr, " [ mode { ip6ip6 | ipip6 | ip6gre | vti6 | any } ]\n"); 51 fprintf(stderr, " [ remote ADDR local ADDR ] [ dev PHYS_DEV ]\n"); 52 fprintf(stderr, " [ encaplimit ELIM ]\n"); 53 fprintf(stderr ," [ hoplimit TTL ] [ tclass TCLASS ] [ flowlabel FLOWLABEL ]\n"); 54 fprintf(stderr, " [ dscp inherit ]\n"); 55 fprintf(stderr, " [ [i|o]seq ] [ [i|o]key KEY ] [ [i|o]csum ]\n"); 56 fprintf(stderr, "\n"); 57 fprintf(stderr, "Where: NAME := STRING\n"); 58 fprintf(stderr, " ADDR := IPV6_ADDRESS\n"); 59 fprintf(stderr, " ELIM := { none | 0..255 }(default=%d)\n", 60 IPV6_DEFAULT_TNL_ENCAP_LIMIT); 61 fprintf(stderr, " TTL := 0..255 (default=%d)\n", 62 DEFAULT_TNL_HOP_LIMIT); 63 fprintf(stderr, " TCLASS := { 0x0..0xff | inherit }\n"); 64 fprintf(stderr, " FLOWLABEL := { 0x0..0xfffff | inherit }\n"); 65 fprintf(stderr, " KEY := { DOTTED_QUAD | NUMBER }\n"); 66 exit(-1); 67} 68 69static void print_tunnel(struct ip6_tnl_parm2 *p) 70{ 71 char s1[1024]; 72 char s2[1024]; 73 74 /* Do not use format_host() for local addr, 75 * symbolic name will not be useful. 76 */ 77 printf("%s: %s/ipv6 remote %s local %s", 78 p->name, 79 tnl_strproto(p->proto), 80 format_host(AF_INET6, 16, &p->raddr, s1, sizeof(s1)), 81 rt_addr_n2a(AF_INET6, 16, &p->laddr, s2, sizeof(s2))); 82 if (p->link) { 83 const char *n = ll_index_to_name(p->link); 84 if (n) 85 printf(" dev %s", n); 86 } 87 88 if (p->flags & IP6_TNL_F_IGN_ENCAP_LIMIT) 89 printf(" encaplimit none"); 90 else 91 printf(" encaplimit %u", p->encap_limit); 92 93 printf(" hoplimit %u", p->hop_limit); 94 95 if (p->flags & IP6_TNL_F_USE_ORIG_TCLASS) 96 printf(" tclass inherit"); 97 else { 98 __u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_TCLASS); 99 printf(" tclass 0x%02x", (__u8)(val >> 20)); 100 } 101 102 if (p->flags & IP6_TNL_F_USE_ORIG_FLOWLABEL) 103 printf(" flowlabel inherit"); 104 else 105 printf(" flowlabel 0x%05x", ntohl(p->flowinfo & IP6_FLOWINFO_FLOWLABEL)); 106 107 printf(" (flowinfo 0x%08x)", ntohl(p->flowinfo)); 108 109 if (p->flags & IP6_TNL_F_RCV_DSCP_COPY) 110 printf(" dscp inherit"); 111 112 if (p->proto == IPPROTO_GRE) { 113 if ((p->i_flags & GRE_KEY) && (p->o_flags & GRE_KEY) && p->o_key == p->i_key) 114 printf(" key %u", ntohl(p->i_key)); 115 else if ((p->i_flags | p->o_flags) & GRE_KEY) { 116 if (p->i_flags & GRE_KEY) 117 printf(" ikey %u", ntohl(p->i_key)); 118 if (p->o_flags & GRE_KEY) 119 printf(" okey %u", ntohl(p->o_key)); 120 } 121 122 if (p->i_flags & GRE_SEQ) 123 printf("%s Drop packets out of sequence.", _SL_); 124 if (p->i_flags & GRE_CSUM) 125 printf("%s Checksum in received packet is required.", _SL_); 126 if (p->o_flags & GRE_SEQ) 127 printf("%s Sequence packets on output.", _SL_); 128 if (p->o_flags & GRE_CSUM) 129 printf("%s Checksum output packets.", _SL_); 130 } 131} 132 133static int parse_args(int argc, char **argv, int cmd, struct ip6_tnl_parm2 *p) 134{ 135 int count = 0; 136 char medium[IFNAMSIZ]; 137 138 memset(medium, 0, sizeof(medium)); 139 140 while (argc > 0) { 141 if (strcmp(*argv, "mode") == 0) { 142 NEXT_ARG(); 143 if (strcmp(*argv, "ipv6/ipv6") == 0 || 144 strcmp(*argv, "ip6ip6") == 0) 145 p->proto = IPPROTO_IPV6; 146 else if (strcmp(*argv, "vti6") == 0) { 147 p->proto = IPPROTO_IPV6; 148 p->i_flags |= VTI_ISVTI; 149 } else if (strcmp(*argv, "ip/ipv6") == 0 || 150 strcmp(*argv, "ipv4/ipv6") == 0 || 151 strcmp(*argv, "ipip6") == 0 || 152 strcmp(*argv, "ip4ip6") == 0) 153 p->proto = IPPROTO_IPIP; 154 else if (strcmp(*argv, "ip6gre") == 0 || 155 strcmp(*argv, "gre/ipv6") == 0) 156 p->proto = IPPROTO_GRE; 157 else if (strcmp(*argv, "any/ipv6") == 0 || 158 strcmp(*argv, "any") == 0) 159 p->proto = 0; 160 else { 161 fprintf(stderr,"Unknown tunnel mode \"%s\"\n", *argv); 162 exit(-1); 163 } 164 } else if (strcmp(*argv, "remote") == 0) { 165 inet_prefix raddr; 166 NEXT_ARG(); 167 get_prefix(&raddr, *argv, preferred_family); 168 if (raddr.family == AF_UNSPEC) 169 invarg("\"remote\" address family is AF_UNSPEC", *argv); 170 memcpy(&p->raddr, &raddr.data, sizeof(p->raddr)); 171 } else if (strcmp(*argv, "local") == 0) { 172 inet_prefix laddr; 173 NEXT_ARG(); 174 get_prefix(&laddr, *argv, preferred_family); 175 if (laddr.family == AF_UNSPEC) 176 invarg("\"local\" address family is AF_UNSPEC", *argv); 177 memcpy(&p->laddr, &laddr.data, sizeof(p->laddr)); 178 } else if (strcmp(*argv, "dev") == 0) { 179 NEXT_ARG(); 180 strncpy(medium, *argv, IFNAMSIZ - 1); 181 } else if (strcmp(*argv, "encaplimit") == 0) { 182 NEXT_ARG(); 183 if (strcmp(*argv, "none") == 0) { 184 p->flags |= IP6_TNL_F_IGN_ENCAP_LIMIT; 185 } else { 186 __u8 uval; 187 if (get_u8(&uval, *argv, 0) < -1) 188 invarg("invalid ELIM", *argv); 189 p->encap_limit = uval; 190 p->flags &= ~IP6_TNL_F_IGN_ENCAP_LIMIT; 191 } 192 } else if (strcmp(*argv, "hoplimit") == 0 || 193 strcmp(*argv, "ttl") == 0 || 194 strcmp(*argv, "hlim") == 0) { 195 __u8 uval; 196 NEXT_ARG(); 197 if (get_u8(&uval, *argv, 0)) 198 invarg("invalid TTL", *argv); 199 p->hop_limit = uval; 200 } else if (strcmp(*argv, "tclass") == 0 || 201 strcmp(*argv, "tc") == 0 || 202 strcmp(*argv, "tos") == 0 || 203 matches(*argv, "dsfield") == 0) { 204 __u8 uval; 205 NEXT_ARG(); 206 p->flowinfo &= ~IP6_FLOWINFO_TCLASS; 207 if (strcmp(*argv, "inherit") == 0) 208 p->flags |= IP6_TNL_F_USE_ORIG_TCLASS; 209 else { 210 if (get_u8(&uval, *argv, 16)) 211 invarg("invalid TClass", *argv); 212 p->flowinfo |= htonl((__u32)uval << 20) & IP6_FLOWINFO_TCLASS; 213 p->flags &= ~IP6_TNL_F_USE_ORIG_TCLASS; 214 } 215 } else if (strcmp(*argv, "flowlabel") == 0 || 216 strcmp(*argv, "fl") == 0) { 217 __u32 uval; 218 NEXT_ARG(); 219 p->flowinfo &= ~IP6_FLOWINFO_FLOWLABEL; 220 if (strcmp(*argv, "inherit") == 0) 221 p->flags |= IP6_TNL_F_USE_ORIG_FLOWLABEL; 222 else { 223 if (get_u32(&uval, *argv, 16)) 224 invarg("invalid Flowlabel", *argv); 225 if (uval > 0xFFFFF) 226 invarg("invalid Flowlabel", *argv); 227 p->flowinfo |= htonl(uval) & IP6_FLOWINFO_FLOWLABEL; 228 p->flags &= ~IP6_TNL_F_USE_ORIG_FLOWLABEL; 229 } 230 } else if (strcmp(*argv, "dscp") == 0) { 231 NEXT_ARG(); 232 if (strcmp(*argv, "inherit") != 0) 233 invarg("not inherit", *argv); 234 p->flags |= IP6_TNL_F_RCV_DSCP_COPY; 235 } else if (strcmp(*argv, "key") == 0) { 236 NEXT_ARG(); 237 p->i_flags |= GRE_KEY; 238 p->o_flags |= GRE_KEY; 239 p->i_key = p->o_key = tnl_parse_key("key", *argv); 240 } else if (strcmp(*argv, "ikey") == 0) { 241 NEXT_ARG(); 242 p->i_flags |= GRE_KEY; 243 p->i_key = tnl_parse_key("ikey", *argv); 244 } else if (strcmp(*argv, "okey") == 0) { 245 NEXT_ARG(); 246 p->o_flags |= GRE_KEY; 247 p->o_key = tnl_parse_key("okey", *argv); 248 } else if (strcmp(*argv, "seq") == 0) { 249 p->i_flags |= GRE_SEQ; 250 p->o_flags |= GRE_SEQ; 251 } else if (strcmp(*argv, "iseq") == 0) { 252 p->i_flags |= GRE_SEQ; 253 } else if (strcmp(*argv, "oseq") == 0) { 254 p->o_flags |= GRE_SEQ; 255 } else if (strcmp(*argv, "csum") == 0) { 256 p->i_flags |= GRE_CSUM; 257 p->o_flags |= GRE_CSUM; 258 } else if (strcmp(*argv, "icsum") == 0) { 259 p->i_flags |= GRE_CSUM; 260 } else if (strcmp(*argv, "ocsum") == 0) { 261 p->o_flags |= GRE_CSUM; 262 } else { 263 if (strcmp(*argv, "name") == 0) { 264 NEXT_ARG(); 265 } else if (matches(*argv, "help") == 0) 266 usage(); 267 if (p->name[0]) 268 duparg2("name", *argv); 269 strncpy(p->name, *argv, IFNAMSIZ - 1); 270 if (cmd == SIOCCHGTUNNEL && count == 0) { 271 struct ip6_tnl_parm2 old_p; 272 memset(&old_p, 0, sizeof(old_p)); 273 if (tnl_get_ioctl(*argv, &old_p)) 274 return -1; 275 *p = old_p; 276 } 277 } 278 count++; 279 argc--; argv++; 280 } 281 if (medium[0]) { 282 p->link = ll_name_to_index(medium); 283 if (p->link == 0) { 284 fprintf(stderr, "Cannot find device \"%s\"\n", medium); 285 return -1; 286 } 287 } 288 return 0; 289} 290 291static void ip6_tnl_parm_init(struct ip6_tnl_parm2 *p, int apply_default) 292{ 293 memset(p, 0, sizeof(*p)); 294 p->proto = IPPROTO_IPV6; 295 if (apply_default) { 296 p->hop_limit = DEFAULT_TNL_HOP_LIMIT; 297 p->encap_limit = IPV6_DEFAULT_TNL_ENCAP_LIMIT; 298 } 299} 300 301/* 302 * @p1: user specified parameter 303 * @p2: database entry 304 */ 305static int ip6_tnl_parm_match(const struct ip6_tnl_parm2 *p1, 306 const struct ip6_tnl_parm2 *p2) 307{ 308 return ((!p1->link || p1->link == p2->link) && 309 (!p1->name[0] || strcmp(p1->name, p2->name) == 0) && 310 (memcmp(&p1->laddr, &in6addr_any, sizeof(p1->laddr)) == 0 || 311 memcmp(&p1->laddr, &p2->laddr, sizeof(p1->laddr)) == 0) && 312 (memcmp(&p1->raddr, &in6addr_any, sizeof(p1->raddr)) == 0 || 313 memcmp(&p1->raddr, &p2->raddr, sizeof(p1->raddr)) == 0) && 314 (!p1->proto || !p2->proto || p1->proto == p2->proto) && 315 (!p1->encap_limit || p1->encap_limit == p2->encap_limit) && 316 (!p1->hop_limit || p1->hop_limit == p2->hop_limit) && 317 (!(p1->flowinfo & IP6_FLOWINFO_TCLASS) || 318 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_TCLASS)) && 319 (!(p1->flowinfo & IP6_FLOWINFO_FLOWLABEL) || 320 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_FLOWLABEL)) && 321 (!p1->flags || (p1->flags & p2->flags))); 322} 323 324static int do_tunnels_list(struct ip6_tnl_parm2 *p) 325{ 326 char buf[512]; 327 int err = -1; 328 FILE *fp = fopen("/proc/net/dev", "r"); 329 if (fp == NULL) { 330 perror("fopen"); 331 return -1; 332 } 333 334 /* skip two lines at the begenning of the file */ 335 if (!fgets(buf, sizeof(buf), fp) || 336 !fgets(buf, sizeof(buf), fp)) { 337 fprintf(stderr, "/proc/net/dev read error\n"); 338 goto end; 339 } 340 341 while (fgets(buf, sizeof(buf), fp) != NULL) { 342 char name[IFNAMSIZ]; 343 int index, type; 344 struct ip6_tnl_parm2 p1; 345 char *ptr; 346 347 buf[sizeof(buf) - 1] = '\0'; 348 if ((ptr = strchr(buf, ':')) == NULL || 349 (*ptr++ = 0, sscanf(buf, "%s", name) != 1)) { 350 fprintf(stderr, "Wrong format for /proc/net/dev. Giving up.\n"); 351 goto end; 352 } 353 if (p->name[0] && strcmp(p->name, name)) 354 continue; 355 index = ll_name_to_index(name); 356 if (index == 0) 357 continue; 358 type = ll_index_to_type(index); 359 if (type == -1) { 360 fprintf(stderr, "Failed to get type of \"%s\"\n", name); 361 continue; 362 } 363 if (type != ARPHRD_TUNNEL6 && type != ARPHRD_IP6GRE) 364 continue; 365 memset(&p1, 0, sizeof(p1)); 366 ip6_tnl_parm_init(&p1, 0); 367 if (type == ARPHRD_IP6GRE) 368 p1.proto = IPPROTO_GRE; 369 strcpy(p1.name, name); 370 p1.link = ll_name_to_index(p1.name); 371 if (p1.link == 0) 372 continue; 373 if (tnl_get_ioctl(p1.name, &p1)) 374 continue; 375 if (!ip6_tnl_parm_match(p, &p1)) 376 continue; 377 print_tunnel(&p1); 378 if (show_stats) 379 tnl_print_stats(ptr); 380 printf("\n"); 381 } 382 err = 0; 383 end: 384 fclose(fp); 385 return err; 386} 387 388static int do_show(int argc, char **argv) 389{ 390 struct ip6_tnl_parm2 p; 391 392 ll_init_map(&rth); 393 ip6_tnl_parm_init(&p, 0); 394 p.proto = 0; /* default to any */ 395 396 if (parse_args(argc, argv, SIOCGETTUNNEL, &p) < 0) 397 return -1; 398 399 if (!p.name[0] || show_stats) 400 do_tunnels_list(&p); 401 else { 402 if (tnl_get_ioctl(p.name, &p)) 403 return -1; 404 print_tunnel(&p); 405 printf("\n"); 406 } 407 408 return 0; 409} 410 411static int do_add(int cmd, int argc, char **argv) 412{ 413 struct ip6_tnl_parm2 p; 414 const char *basedev = "ip6tnl0"; 415 416 ip6_tnl_parm_init(&p, 1); 417 418 if (parse_args(argc, argv, cmd, &p) < 0) 419 return -1; 420 421 if (p.proto == IPPROTO_GRE) 422 basedev = "ip6gre0"; 423 else if (p.i_flags & VTI_ISVTI) 424 basedev = "ip6_vti0"; 425 426 return tnl_add_ioctl(cmd, basedev, p.name, &p); 427} 428 429static int do_del(int argc, char **argv) 430{ 431 struct ip6_tnl_parm2 p; 432 const char *basedev = "ip6tnl0"; 433 434 ip6_tnl_parm_init(&p, 1); 435 436 if (parse_args(argc, argv, SIOCDELTUNNEL, &p) < 0) 437 return -1; 438 439 if (p.proto == IPPROTO_GRE) 440 basedev = "ip6gre0"; 441 else if (p.i_flags & VTI_ISVTI) 442 basedev = "ip6_vti0"; 443 444 return tnl_del_ioctl(basedev, p.name, &p); 445} 446 447int do_ip6tunnel(int argc, char **argv) 448{ 449 switch (preferred_family) { 450 case AF_UNSPEC: 451 preferred_family = AF_INET6; 452 break; 453 case AF_INET6: 454 break; 455 default: 456 fprintf(stderr, "Unsupported protocol family: %d\n", preferred_family); 457 exit(-1); 458 } 459 460 if (argc > 0) { 461 if (matches(*argv, "add") == 0) 462 return do_add(SIOCADDTUNNEL, argc - 1, argv + 1); 463 if (matches(*argv, "change") == 0) 464 return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1); 465 if (matches(*argv, "delete") == 0) 466 return do_del(argc - 1, argv + 1); 467 if (matches(*argv, "show") == 0 || 468 matches(*argv, "lst") == 0 || 469 matches(*argv, "list") == 0) 470 return do_show(argc - 1, argv + 1); 471 if (matches(*argv, "help") == 0) 472 usage(); 473 } else 474 return do_show(0, NULL); 475 476 fprintf(stderr, "Command \"%s\" is unknown, try \"ip -f inet6 tunnel help\".\n", *argv); 477 exit(-1); 478} 479