11181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh/* 21181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * Linux NET3: IP/IP protocol decoder modified to support 31181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * virtual tunnel interface 41181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * 51181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * Authors: 61181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * Saurabh Mohan (saurabh.mohan@vyatta.com) 05/07/2012 71181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * 81181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * This program is free software; you can redistribute it and/or 91181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * modify it under the terms of the GNU General Public License 101181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * as published by the Free Software Foundation; either version 111181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * 2 of the License, or (at your option) any later version. 121181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * 131181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh */ 141181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 151181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh/* 161181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh This version of net/ipv4/ip_vti.c is cloned of net/ipv4/ipip.c 171181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 181181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh For comments look at net/ipv4/ip_gre.c --ANK 191181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh */ 201181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 211181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 221181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/capability.h> 231181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/module.h> 241181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/types.h> 251181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/kernel.h> 261181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/uaccess.h> 271181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/skbuff.h> 281181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/netdevice.h> 291181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/in.h> 301181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/tcp.h> 311181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/udp.h> 321181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/if_arp.h> 331181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/mroute.h> 341181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/init.h> 351181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/netfilter_ipv4.h> 361181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <linux/if_ether.h> 371181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 381181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <net/sock.h> 391181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <net/ip.h> 401181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <net/icmp.h> 41c54419321455631079c7d6e60bc732dd0c5914c5Pravin B Shelar#include <net/ip_tunnels.h> 421181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <net/inet_ecn.h> 431181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <net/xfrm.h> 441181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <net/net_namespace.h> 451181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#include <net/netns/generic.h> 461181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 471181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#define HASH_SIZE 16 481181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#define HASH(addr) (((__force u32)addr^((__force u32)addr>>4))&(HASH_SIZE-1)) 491181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 501181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic struct rtnl_link_ops vti_link_ops __read_mostly; 511181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 521181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_net_id __read_mostly; 531181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstruct vti_net { 541181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel __rcu *tunnels_r_l[HASH_SIZE]; 551181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel __rcu *tunnels_r[HASH_SIZE]; 561181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel __rcu *tunnels_l[HASH_SIZE]; 571181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel __rcu *tunnels_wc[1]; 58e7d4b18cbebc635fafd634688bbf66c59912879fSaurabh struct ip_tunnel __rcu **tunnels[4]; 591181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 601181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct net_device *fb_tunnel_dev; 611181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh}; 621181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 631181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_fb_tunnel_init(struct net_device *dev); 641181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_tunnel_init(struct net_device *dev); 651181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void vti_tunnel_setup(struct net_device *dev); 661181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void vti_dev_free(struct net_device *dev); 671181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_tunnel_bind_dev(struct net_device *dev); 681181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 691181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh#define VTI_XMIT(stats1, stats2) do { \ 701181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int err; \ 711181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int pkt_len = skb->len; \ 721181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = dst_output(skb); \ 731181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (net_xmit_eval(err) == 0) { \ 741181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh u64_stats_update_begin(&(stats1)->syncp); \ 751181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh (stats1)->tx_bytes += pkt_len; \ 761181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh (stats1)->tx_packets++; \ 771181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh u64_stats_update_end(&(stats1)->syncp); \ 781181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } else { \ 791181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh (stats2)->tx_errors++; \ 801181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh (stats2)->tx_aborted_errors++; \ 811181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } \ 821181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} while (0) 831181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 841181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 851181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic struct ip_tunnel *vti_tunnel_lookup(struct net *net, 861181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh __be32 remote, __be32 local) 871181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 881181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh unsigned h0 = HASH(remote); 891181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh unsigned h1 = HASH(local); 901181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *t; 911181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct vti_net *ipn = net_generic(net, vti_net_id); 921181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 93e086cadc08e259150b2ab8f7f4a16dbf9e3c2f22Amerigo Wang for_each_ip_tunnel_rcu(t, ipn->tunnels_r_l[h0 ^ h1]) 941181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (local == t->parms.iph.saddr && 951181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh remote == t->parms.iph.daddr && (t->dev->flags&IFF_UP)) 961181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return t; 97e086cadc08e259150b2ab8f7f4a16dbf9e3c2f22Amerigo Wang for_each_ip_tunnel_rcu(t, ipn->tunnels_r[h0]) 981181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (remote == t->parms.iph.daddr && (t->dev->flags&IFF_UP)) 991181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return t; 1001181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 101e086cadc08e259150b2ab8f7f4a16dbf9e3c2f22Amerigo Wang for_each_ip_tunnel_rcu(t, ipn->tunnels_l[h1]) 1021181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (local == t->parms.iph.saddr && (t->dev->flags&IFF_UP)) 1031181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return t; 1041181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 105e086cadc08e259150b2ab8f7f4a16dbf9e3c2f22Amerigo Wang for_each_ip_tunnel_rcu(t, ipn->tunnels_wc[0]) 1061181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t && (t->dev->flags&IFF_UP)) 1071181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return t; 1081181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return NULL; 1091181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 1101181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 111e7d4b18cbebc635fafd634688bbf66c59912879fSaurabhstatic struct ip_tunnel __rcu **__vti_bucket(struct vti_net *ipn, 112e7d4b18cbebc635fafd634688bbf66c59912879fSaurabh struct ip_tunnel_parm *parms) 1131181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 1141181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh __be32 remote = parms->iph.daddr; 1151181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh __be32 local = parms->iph.saddr; 1161181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh unsigned h = 0; 1171181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int prio = 0; 1181181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1191181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (remote) { 1201181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh prio |= 2; 1211181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh h ^= HASH(remote); 1221181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 1231181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (local) { 1241181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh prio |= 1; 1251181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh h ^= HASH(local); 1261181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 1271181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return &ipn->tunnels[prio][h]; 1281181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 1291181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 130e7d4b18cbebc635fafd634688bbf66c59912879fSaurabhstatic inline struct ip_tunnel __rcu **vti_bucket(struct vti_net *ipn, 131e7d4b18cbebc635fafd634688bbf66c59912879fSaurabh struct ip_tunnel *t) 1321181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 1331181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return __vti_bucket(ipn, &t->parms); 1341181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 1351181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1361181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void vti_tunnel_unlink(struct vti_net *ipn, struct ip_tunnel *t) 1371181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 1381181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel __rcu **tp; 1391181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *iter; 1401181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1411181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh for (tp = vti_bucket(ipn, t); 1421181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh (iter = rtnl_dereference(*tp)) != NULL; 1431181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tp = &iter->next) { 1441181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t == iter) { 1451181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh rcu_assign_pointer(*tp, t->next); 1461181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh break; 1471181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 1481181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 1491181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 1501181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1511181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void vti_tunnel_link(struct vti_net *ipn, struct ip_tunnel *t) 1521181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 1531181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel __rcu **tp = vti_bucket(ipn, t); 1541181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1551181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh rcu_assign_pointer(t->next, rtnl_dereference(*tp)); 1561181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh rcu_assign_pointer(*tp, t); 1571181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 1581181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1591181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic struct ip_tunnel *vti_tunnel_locate(struct net *net, 1601181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel_parm *parms, 1611181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int create) 1621181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 1631181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh __be32 remote = parms->iph.daddr; 1641181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh __be32 local = parms->iph.saddr; 1651181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *t, *nt; 1661181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel __rcu **tp; 1671181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct net_device *dev; 1681181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh char name[IFNAMSIZ]; 1691181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct vti_net *ipn = net_generic(net, vti_net_id); 1701181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1711181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh for (tp = __vti_bucket(ipn, parms); 1721181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh (t = rtnl_dereference(*tp)) != NULL; 1731181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tp = &t->next) { 1741181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (local == t->parms.iph.saddr && remote == t->parms.iph.daddr) 1751181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return t; 1761181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 1771181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (!create) 1781181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return NULL; 1791181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1801181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (parms->name[0]) 1811181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh strlcpy(name, parms->name, IFNAMSIZ); 1821181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh else 1831181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh strcpy(name, "vti%d"); 1841181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1851181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev = alloc_netdev(sizeof(*t), name, vti_tunnel_setup); 1861181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (dev == NULL) 1871181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return NULL; 1881181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1891181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev_net_set(dev, net); 1901181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1911181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nt = netdev_priv(dev); 1921181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nt->parms = *parms; 1931181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->rtnl_link_ops = &vti_link_ops; 1941181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1951181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_tunnel_bind_dev(dev); 1961181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 1971181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (register_netdevice(dev) < 0) 1981181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto failed_free; 1991181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2001181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev_hold(dev); 2011181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_tunnel_link(ipn, nt); 2021181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return nt; 2031181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2041181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhfailed_free: 2051181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh free_netdev(dev); 2061181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return NULL; 2071181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 2081181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2091181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void vti_tunnel_uninit(struct net_device *dev) 2101181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 2111181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct net *net = dev_net(dev); 2121181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct vti_net *ipn = net_generic(net, vti_net_id); 2131181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2141181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_tunnel_unlink(ipn, netdev_priv(dev)); 2151181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev_put(dev); 2161181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 2171181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2181181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_err(struct sk_buff *skb, u32 info) 2191181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 2201181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2211181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh /* All the routers (except for Linux) return only 2221181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * 8 bytes of packet payload. It means, that precise relaying of 2231181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * ICMP in the real Internet is absolutely infeasible. 2241181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh */ 2251181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct iphdr *iph = (struct iphdr *)skb->data; 2261181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh const int type = icmp_hdr(skb)->type; 2271181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh const int code = icmp_hdr(skb)->code; 2281181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *t; 2291181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int err; 2301181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2311181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh switch (type) { 2321181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh default: 2331181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh case ICMP_PARAMETERPROB: 2341181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 0; 2351181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2361181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh case ICMP_DEST_UNREACH: 2371181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh switch (code) { 2381181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh case ICMP_SR_FAILED: 2391181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh case ICMP_PORT_UNREACH: 2401181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh /* Impossible event. */ 2411181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 0; 2421181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh default: 2431181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh /* All others are translated to HOST_UNREACH. */ 2441181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh break; 2451181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 2461181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh break; 2471181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh case ICMP_TIME_EXCEEDED: 2481181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (code != ICMP_EXC_TTL) 2491181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 0; 2501181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh break; 2511181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 2521181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2531181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -ENOENT; 2541181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2551181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = vti_tunnel_lookup(dev_net(skb->dev), iph->daddr, iph->saddr); 2561181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t == NULL) 2571181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto out; 2581181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2591181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (type == ICMP_DEST_UNREACH && code == ICMP_FRAG_NEEDED) { 2601181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh ipv4_update_pmtu(skb, dev_net(skb->dev), info, 2611181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.link, 0, IPPROTO_IPIP, 0); 2621181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = 0; 2631181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto out; 2641181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 2651181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2661181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = 0; 2671181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t->parms.iph.ttl == 0 && type == ICMP_TIME_EXCEEDED) 2681181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto out; 2691181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2701181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (time_before(jiffies, t->err_time + IPTUNNEL_ERR_TIMEO)) 2711181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->err_count++; 2721181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh else 2731181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->err_count = 1; 2741181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->err_time = jiffies; 2751181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhout: 2761181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return err; 2771181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 2781181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2791181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh/* We dont digest the packet therefore let the packet pass */ 2801181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_rcv(struct sk_buff *skb) 2811181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 2821181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *tunnel; 2831181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh const struct iphdr *iph = ip_hdr(skb); 2841181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 2851181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tunnel = vti_tunnel_lookup(dev_net(skb->dev), iph->saddr, iph->daddr); 2861181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (tunnel != NULL) { 2871181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct pcpu_tstats *tstats; 2881181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 289b2942004fb5c9f3304b77e187b8a1977b3626c9bSaurabh Mohan if (!xfrm4_policy_check(NULL, XFRM_POLICY_IN, skb)) 290b2942004fb5c9f3304b77e187b8a1977b3626c9bSaurabh Mohan return -1; 291b2942004fb5c9f3304b77e187b8a1977b3626c9bSaurabh Mohan 2921181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tstats = this_cpu_ptr(tunnel->dev->tstats); 2931181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh u64_stats_update_begin(&tstats->syncp); 2941181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tstats->rx_packets++; 2951181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tstats->rx_bytes += skb->len; 2961181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh u64_stats_update_end(&tstats->syncp); 2971181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 298b2942004fb5c9f3304b77e187b8a1977b3626c9bSaurabh Mohan skb->mark = 0; 299b2942004fb5c9f3304b77e187b8a1977b3626c9bSaurabh Mohan secpath_reset(skb); 3001181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh skb->dev = tunnel->dev; 3011181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 1; 3021181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 3031181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3041181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return -1; 3051181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 3061181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3071181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh/* This function assumes it is being called from dev_queue_xmit() 3081181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * and that skb is filled properly by that function. 3091181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh */ 3101181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3111181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic netdev_tx_t vti_tunnel_xmit(struct sk_buff *skb, struct net_device *dev) 3121181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 3131181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *tunnel = netdev_priv(dev); 3141181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct pcpu_tstats *tstats; 3151181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct iphdr *tiph = &tunnel->parms.iph; 3161181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh u8 tos; 3171181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct rtable *rt; /* Route to the other host */ 3181181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct net_device *tdev; /* Device to other host */ 3191181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct iphdr *old_iph = ip_hdr(skb); 3201181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh __be32 dst = tiph->daddr; 3211181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct flowi4 fl4; 3221181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3231181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (skb->protocol != htons(ETH_P_IP)) 3241181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto tx_error; 3251181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3261181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tos = old_iph->tos; 3271181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3281181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh memset(&fl4, 0, sizeof(fl4)); 3291181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh flowi4_init_output(&fl4, tunnel->parms.link, 3308437e7610c2d3e06f87f71fb82e10ed4b291812astephen hemminger be32_to_cpu(tunnel->parms.i_key), RT_TOS(tos), 3311181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh RT_SCOPE_UNIVERSE, 3321181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh IPPROTO_IPIP, 0, 3331181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dst, tiph->saddr, 0, 0); 3341181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh rt = ip_route_output_key(dev_net(dev), &fl4); 3351181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (IS_ERR(rt)) { 3361181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->stats.tx_carrier_errors++; 3371181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto tx_error_icmp; 3381181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 3391181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh /* if there is no transform then this tunnel is not functional. 3401181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh * Or if the xfrm is not mode tunnel. 3411181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh */ 3421181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (!rt->dst.xfrm || 3431181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh rt->dst.xfrm->props.mode != XFRM_MODE_TUNNEL) { 3441181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->stats.tx_carrier_errors++; 3451181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto tx_error_icmp; 3461181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 3471181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tdev = rt->dst.dev; 3481181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3491181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (tdev == dev) { 3501181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh ip_rt_put(rt); 3511181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->stats.collisions++; 3521181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto tx_error; 3531181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 3541181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3551181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (tunnel->err_count > 0) { 3561181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (time_before(jiffies, 3571181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tunnel->err_time + IPTUNNEL_ERR_TIMEO)) { 3581181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tunnel->err_count--; 3591181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dst_link_failure(skb); 3601181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } else 3611181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tunnel->err_count = 0; 3621181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 3631181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 364baafc77b32f647daa7c45825f7af8cdd55d00817Saurabh Mohan memset(IPCB(skb), 0, sizeof(*IPCB(skb))); 3651181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh skb_dst_drop(skb); 3661181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh skb_dst_set(skb, &rt->dst); 3671181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nf_reset(skb); 3681181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh skb->dev = skb_dst(skb)->dev; 3691181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3701181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tstats = this_cpu_ptr(dev->tstats); 3711181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh VTI_XMIT(tstats, &dev->stats); 3721181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return NETDEV_TX_OK; 3731181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3741181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhtx_error_icmp: 3751181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dst_link_failure(skb); 3761181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhtx_error: 3771181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->stats.tx_errors++; 3781181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev_kfree_skb(skb); 3791181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return NETDEV_TX_OK; 3801181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 3811181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3821181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_tunnel_bind_dev(struct net_device *dev) 3831181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 3841181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct net_device *tdev = NULL; 3851181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *tunnel; 3861181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct iphdr *iph; 3871181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3881181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tunnel = netdev_priv(dev); 3891181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh iph = &tunnel->parms.iph; 3901181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 3911181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (iph->daddr) { 3921181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct rtable *rt; 3931181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct flowi4 fl4; 3941181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh memset(&fl4, 0, sizeof(fl4)); 3951181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh flowi4_init_output(&fl4, tunnel->parms.link, 3968437e7610c2d3e06f87f71fb82e10ed4b291812astephen hemminger be32_to_cpu(tunnel->parms.i_key), 3971181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh RT_TOS(iph->tos), RT_SCOPE_UNIVERSE, 3981181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh IPPROTO_IPIP, 0, 3991181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh iph->daddr, iph->saddr, 0, 0); 4001181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh rt = ip_route_output_key(dev_net(dev), &fl4); 4011181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (!IS_ERR(rt)) { 4021181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tdev = rt->dst.dev; 4031181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh ip_rt_put(rt); 4041181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 4051181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->flags |= IFF_POINTOPOINT; 4061181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 4071181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 4081181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (!tdev && tunnel->parms.link) 4091181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tdev = __dev_get_by_index(dev_net(dev), tunnel->parms.link); 4101181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 4111181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (tdev) { 4121181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->hard_header_len = tdev->hard_header_len + 4131181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh sizeof(struct iphdr); 4141181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->mtu = tdev->mtu; 4151181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 4161181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->iflink = tunnel->parms.link; 4171181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return dev->mtu; 4181181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 4191181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 4201181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int 4211181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhvti_tunnel_ioctl(struct net_device *dev, struct ifreq *ifr, int cmd) 4221181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 4231181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int err = 0; 4241181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel_parm p; 4251181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *t; 4261181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct net *net = dev_net(dev); 4271181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct vti_net *ipn = net_generic(net, vti_net_id); 4281181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 4291181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh switch (cmd) { 4301181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh case SIOCGETTUNNEL: 4311181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = NULL; 4321181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (dev == ipn->fb_tunnel_dev) { 4331181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (copy_from_user(&p, ifr->ifr_ifru.ifru_data, 4341181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh sizeof(p))) { 4351181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EFAULT; 4361181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh break; 4371181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 4381181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = vti_tunnel_locate(net, &p, 0); 4391181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 4401181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t == NULL) 4411181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = netdev_priv(dev); 4421181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh memcpy(&p, &t->parms, sizeof(p)); 4431181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh p.i_flags |= GRE_KEY | VTI_ISVTI; 4441181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh p.o_flags |= GRE_KEY; 4451181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (copy_to_user(ifr->ifr_ifru.ifru_data, &p, sizeof(p))) 4461181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EFAULT; 4471181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh break; 4481181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 4491181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh case SIOCADDTUNNEL: 4501181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh case SIOCCHGTUNNEL: 4511181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EPERM; 45252e804c6dfaa5df1e4b0e290357b82ad4e4cda2cEric W. Biederman if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) 4531181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto done; 4541181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 4551181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EFAULT; 4561181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (copy_from_user(&p, ifr->ifr_ifru.ifru_data, sizeof(p))) 4571181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto done; 4581181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 4591181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EINVAL; 4601181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (p.iph.version != 4 || p.iph.protocol != IPPROTO_IPIP || 4611181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh p.iph.ihl != 5) 4621181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto done; 4631181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 4641181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = vti_tunnel_locate(net, &p, cmd == SIOCADDTUNNEL); 4651181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 4661181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (dev != ipn->fb_tunnel_dev && cmd == SIOCCHGTUNNEL) { 4671181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t != NULL) { 4681181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t->dev != dev) { 4691181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EEXIST; 4701181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh break; 4711181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 4721181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } else { 4731181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (((dev->flags&IFF_POINTOPOINT) && 4741181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh !p.iph.daddr) || 4751181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh (!(dev->flags&IFF_POINTOPOINT) && 4761181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh p.iph.daddr)) { 4771181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EINVAL; 4781181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh break; 4791181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 4801181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = netdev_priv(dev); 4811181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_tunnel_unlink(ipn, t); 4821181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh synchronize_net(); 4831181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.iph.saddr = p.iph.saddr; 4841181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.iph.daddr = p.iph.daddr; 4851181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.i_key = p.i_key; 4861181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.o_key = p.o_key; 4871181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.iph.protocol = IPPROTO_IPIP; 4881181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh memcpy(dev->dev_addr, &p.iph.saddr, 4); 4891181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh memcpy(dev->broadcast, &p.iph.daddr, 4); 4901181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_tunnel_link(ipn, t); 4911181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh netdev_state_change(dev); 4921181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 4931181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 4941181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 4951181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t) { 4961181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = 0; 4971181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (cmd == SIOCCHGTUNNEL) { 4981181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.i_key = p.i_key; 4991181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.o_key = p.o_key; 5001181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t->parms.link != p.link) { 5011181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.link = p.link; 5021181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_tunnel_bind_dev(dev); 5031181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh netdev_state_change(dev); 5041181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 5051181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 5061181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh p.i_flags |= GRE_KEY | VTI_ISVTI; 5071181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh p.o_flags |= GRE_KEY; 5081181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (copy_to_user(ifr->ifr_ifru.ifru_data, &t->parms, 5091181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh sizeof(p))) 5101181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EFAULT; 5111181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } else 5121181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = (cmd == SIOCADDTUNNEL ? -ENOBUFS : -ENOENT); 5131181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh break; 5141181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5151181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh case SIOCDELTUNNEL: 5161181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EPERM; 51752e804c6dfaa5df1e4b0e290357b82ad4e4cda2cEric W. Biederman if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) 5181181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto done; 5191181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5201181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (dev == ipn->fb_tunnel_dev) { 5211181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EFAULT; 5221181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (copy_from_user(&p, ifr->ifr_ifru.ifru_data, 5231181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh sizeof(p))) 5241181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto done; 5251181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -ENOENT; 5261181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5271181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = vti_tunnel_locate(net, &p, 0); 5281181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t == NULL) 5291181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto done; 5301181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EPERM; 5311181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t->dev == ipn->fb_tunnel_dev) 5321181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto done; 5331181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev = t->dev; 5341181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 5351181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh unregister_netdevice(dev); 5361181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = 0; 5371181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh break; 5381181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5391181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh default: 5401181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -EINVAL; 5411181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 5421181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5431181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhdone: 5441181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return err; 5451181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 5461181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5471181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_tunnel_change_mtu(struct net_device *dev, int new_mtu) 5481181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 5491181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (new_mtu < 68 || new_mtu > 0xFFF8) 5501181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return -EINVAL; 5511181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->mtu = new_mtu; 5521181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 0; 5531181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 5541181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5551181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic const struct net_device_ops vti_netdev_ops = { 5561181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .ndo_init = vti_tunnel_init, 5571181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .ndo_uninit = vti_tunnel_uninit, 5581181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .ndo_start_xmit = vti_tunnel_xmit, 5591181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .ndo_do_ioctl = vti_tunnel_ioctl, 5601181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .ndo_change_mtu = vti_tunnel_change_mtu, 561f61dd388a9b76f273bb0de9786600fd64e34ba09Pravin B Shelar .ndo_get_stats64 = ip_tunnel_get_stats64, 5621181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh}; 5631181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5641181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void vti_dev_free(struct net_device *dev) 5651181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 5661181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh free_percpu(dev->tstats); 5671181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh free_netdev(dev); 5681181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 5691181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5701181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void vti_tunnel_setup(struct net_device *dev) 5711181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 5721181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->netdev_ops = &vti_netdev_ops; 5731181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->destructor = vti_dev_free; 5741181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5751181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->type = ARPHRD_TUNNEL; 5761181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->hard_header_len = LL_MAX_HEADER + sizeof(struct iphdr); 5771181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->mtu = ETH_DATA_LEN; 5781181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->flags = IFF_NOARP; 5791181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->iflink = 0; 5801181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->addr_len = 4; 5811181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->features |= NETIF_F_NETNS_LOCAL; 5821181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->features |= NETIF_F_LLTX; 5831181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->priv_flags &= ~IFF_XMIT_DST_RELEASE; 5841181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 5851181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5861181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_tunnel_init(struct net_device *dev) 5871181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 5881181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *tunnel = netdev_priv(dev); 5891181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5901181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tunnel->dev = dev; 5911181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh strcpy(tunnel->parms.name, dev->name); 5921181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5931181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh memcpy(dev->dev_addr, &tunnel->parms.iph.saddr, 4); 5941181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh memcpy(dev->broadcast, &tunnel->parms.iph.daddr, 4); 5951181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 5961181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->tstats = alloc_percpu(struct pcpu_tstats); 5971181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (!dev->tstats) 5981181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return -ENOMEM; 5991181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6001181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 0; 6011181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 6021181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6031181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int __net_init vti_fb_tunnel_init(struct net_device *dev) 6041181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 6051181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *tunnel = netdev_priv(dev); 6061181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct iphdr *iph = &tunnel->parms.iph; 6071181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct vti_net *ipn = net_generic(dev_net(dev), vti_net_id); 6081181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6091181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh tunnel->dev = dev; 6101181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh strcpy(tunnel->parms.name, dev->name); 6111181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6121181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh iph->version = 4; 6131181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh iph->protocol = IPPROTO_IPIP; 6141181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh iph->ihl = 5; 6151181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6161181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->tstats = alloc_percpu(struct pcpu_tstats); 6171181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (!dev->tstats) 6181181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return -ENOMEM; 6191181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6201181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev_hold(dev); 6211181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh rcu_assign_pointer(ipn->tunnels_wc[0], tunnel); 6221181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 0; 6231181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 6241181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6251181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic struct xfrm_tunnel vti_handler __read_mostly = { 6261181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .handler = vti_rcv, 6271181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .err_handler = vti_err, 6281181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .priority = 1, 6291181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh}; 6301181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6311181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void vti_destroy_tunnels(struct vti_net *ipn, struct list_head *head) 6321181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 6331181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int prio; 6341181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6351181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh for (prio = 1; prio < 4; prio++) { 6361181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int h; 6371181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh for (h = 0; h < HASH_SIZE; h++) { 6381181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *t; 6391181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6401181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = rtnl_dereference(ipn->tunnels[prio][h]); 6411181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh while (t != NULL) { 6421181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh unregister_netdevice_queue(t->dev, head); 6431181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = rtnl_dereference(t->next); 6441181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 6451181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 6461181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 6471181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 6481181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6491181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int __net_init vti_init_net(struct net *net) 6501181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 6511181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int err; 6521181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct vti_net *ipn = net_generic(net, vti_net_id); 6531181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6541181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh ipn->tunnels[0] = ipn->tunnels_wc; 6551181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh ipn->tunnels[1] = ipn->tunnels_l; 6561181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh ipn->tunnels[2] = ipn->tunnels_r; 6571181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh ipn->tunnels[3] = ipn->tunnels_r_l; 6581181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6591181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh ipn->fb_tunnel_dev = alloc_netdev(sizeof(struct ip_tunnel), 6601181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh "ip_vti0", 6611181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_tunnel_setup); 6621181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (!ipn->fb_tunnel_dev) { 6631181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = -ENOMEM; 6641181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto err_alloc_dev; 6651181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 6661181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev_net_set(ipn->fb_tunnel_dev, net); 6671181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6681181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = vti_fb_tunnel_init(ipn->fb_tunnel_dev); 6691181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (err) 6701181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto err_reg_dev; 6711181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh ipn->fb_tunnel_dev->rtnl_link_ops = &vti_link_ops; 6721181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6731181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = register_netdev(ipn->fb_tunnel_dev); 6741181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (err) 6751181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto err_reg_dev; 6761181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 0; 6771181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6781181412c1a671ed4e8fb1736f17e6ec617c68059Saurabherr_reg_dev: 6791181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_dev_free(ipn->fb_tunnel_dev); 6801181412c1a671ed4e8fb1736f17e6ec617c68059Saurabherr_alloc_dev: 6811181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh /* nothing */ 6821181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return err; 6831181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 6841181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6851181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void __net_exit vti_exit_net(struct net *net) 6861181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 6871181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct vti_net *ipn = net_generic(net, vti_net_id); 6881181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh LIST_HEAD(list); 6891181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6901181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh rtnl_lock(); 6911181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_destroy_tunnels(ipn, &list); 6921181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh unregister_netdevice_many(&list); 6931181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh rtnl_unlock(); 6941181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 6951181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 6961181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic struct pernet_operations vti_net_ops = { 6971181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .init = vti_init_net, 6981181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .exit = vti_exit_net, 6991181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .id = &vti_net_id, 7001181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .size = sizeof(struct vti_net), 7011181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh}; 7021181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7031181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_tunnel_validate(struct nlattr *tb[], struct nlattr *data[]) 7041181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 7051181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 0; 7061181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 7071181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7081181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void vti_netlink_parms(struct nlattr *data[], 7091181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel_parm *parms) 7101181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 7111181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh memset(parms, 0, sizeof(*parms)); 7121181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7131181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh parms->iph.protocol = IPPROTO_IPIP; 7141181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7151181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (!data) 7161181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return; 7171181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7181181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (data[IFLA_VTI_LINK]) 7191181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh parms->link = nla_get_u32(data[IFLA_VTI_LINK]); 7201181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7211181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (data[IFLA_VTI_IKEY]) 7221181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh parms->i_key = nla_get_be32(data[IFLA_VTI_IKEY]); 7231181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7241181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (data[IFLA_VTI_OKEY]) 7251181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh parms->o_key = nla_get_be32(data[IFLA_VTI_OKEY]); 7261181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7271181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (data[IFLA_VTI_LOCAL]) 7281181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh parms->iph.saddr = nla_get_be32(data[IFLA_VTI_LOCAL]); 7291181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7301181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (data[IFLA_VTI_REMOTE]) 7311181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh parms->iph.daddr = nla_get_be32(data[IFLA_VTI_REMOTE]); 7321181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7331181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 7341181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7351181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_newlink(struct net *src_net, struct net_device *dev, 7361181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct nlattr *tb[], struct nlattr *data[]) 7371181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 7381181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *nt; 7391181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct net *net = dev_net(dev); 7401181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct vti_net *ipn = net_generic(net, vti_net_id); 7411181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int mtu; 7421181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int err; 7431181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7441181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nt = netdev_priv(dev); 7451181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_netlink_parms(data, &nt->parms); 7461181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7471181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (vti_tunnel_locate(net, &nt->parms, 0)) 7481181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return -EEXIST; 7491181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7501181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh mtu = vti_tunnel_bind_dev(dev); 7511181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (!tb[IFLA_MTU]) 7521181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->mtu = mtu; 7531181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7541181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = register_netdevice(dev); 7551181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (err) 7561181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto out; 7571181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7581181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev_hold(dev); 7591181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_tunnel_link(ipn, nt); 7601181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7611181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhout: 7621181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return err; 7631181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 7641181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7651181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_changelink(struct net_device *dev, struct nlattr *tb[], 7661181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct nlattr *data[]) 7671181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 7681181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *t, *nt; 7691181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct net *net = dev_net(dev); 7701181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct vti_net *ipn = net_generic(net, vti_net_id); 7711181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel_parm p; 7721181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int mtu; 7731181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7741181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (dev == ipn->fb_tunnel_dev) 7751181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return -EINVAL; 7761181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7771181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nt = netdev_priv(dev); 7781181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_netlink_parms(data, &p); 7791181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7801181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = vti_tunnel_locate(net, &p, 0); 7811181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7821181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t) { 7831181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t->dev != dev) 7841181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return -EEXIST; 7851181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } else { 7861181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t = nt; 7871181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 7881181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_tunnel_unlink(ipn, t); 7891181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.iph.saddr = p.iph.saddr; 7901181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.iph.daddr = p.iph.daddr; 7911181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.i_key = p.i_key; 7921181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.o_key = p.o_key; 7931181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (dev->type != ARPHRD_ETHER) { 7941181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh memcpy(dev->dev_addr, &p.iph.saddr, 4); 7951181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh memcpy(dev->broadcast, &p.iph.daddr, 4); 7961181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 7971181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh vti_tunnel_link(ipn, t); 7981181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh netdev_state_change(dev); 7991181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 8001181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8011181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (t->parms.link != p.link) { 8021181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh t->parms.link = p.link; 8031181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh mtu = vti_tunnel_bind_dev(dev); 8041181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (!tb[IFLA_MTU]) 8051181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh dev->mtu = mtu; 8061181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh netdev_state_change(dev); 8071181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 8081181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8091181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 0; 8101181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 8111181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8121181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic size_t vti_get_size(const struct net_device *dev) 8131181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 8141181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 8151181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh /* IFLA_VTI_LINK */ 8161181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nla_total_size(4) + 8171181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh /* IFLA_VTI_IKEY */ 8181181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nla_total_size(4) + 8191181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh /* IFLA_VTI_OKEY */ 8201181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nla_total_size(4) + 8211181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh /* IFLA_VTI_LOCAL */ 8221181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nla_total_size(4) + 8231181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh /* IFLA_VTI_REMOTE */ 8241181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nla_total_size(4) + 8251181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 0; 8261181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 8271181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8281181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int vti_fill_info(struct sk_buff *skb, const struct net_device *dev) 8291181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 8301181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel *t = netdev_priv(dev); 8311181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh struct ip_tunnel_parm *p = &t->parms; 8321181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8331181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nla_put_u32(skb, IFLA_VTI_LINK, p->link); 8341181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nla_put_be32(skb, IFLA_VTI_IKEY, p->i_key); 8351181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nla_put_be32(skb, IFLA_VTI_OKEY, p->o_key); 8361181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nla_put_be32(skb, IFLA_VTI_LOCAL, p->iph.saddr); 8371181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh nla_put_be32(skb, IFLA_VTI_REMOTE, p->iph.daddr); 8381181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8391181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return 0; 8401181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 8411181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8421181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic const struct nla_policy vti_policy[IFLA_VTI_MAX + 1] = { 8431181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh [IFLA_VTI_LINK] = { .type = NLA_U32 }, 8441181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh [IFLA_VTI_IKEY] = { .type = NLA_U32 }, 8451181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh [IFLA_VTI_OKEY] = { .type = NLA_U32 }, 8461181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh [IFLA_VTI_LOCAL] = { .len = FIELD_SIZEOF(struct iphdr, saddr) }, 8471181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh [IFLA_VTI_REMOTE] = { .len = FIELD_SIZEOF(struct iphdr, daddr) }, 8481181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh}; 8491181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8501181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic struct rtnl_link_ops vti_link_ops __read_mostly = { 8511181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .kind = "vti", 8521181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .maxtype = IFLA_VTI_MAX, 8531181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .policy = vti_policy, 8541181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .priv_size = sizeof(struct ip_tunnel), 8551181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .setup = vti_tunnel_setup, 8561181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .validate = vti_tunnel_validate, 8571181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .newlink = vti_newlink, 8581181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .changelink = vti_changelink, 8591181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .get_size = vti_get_size, 8601181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh .fill_info = vti_fill_info, 8611181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh}; 8621181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8631181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic int __init vti_init(void) 8641181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 8651181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh int err; 8661181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8671181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh pr_info("IPv4 over IPSec tunneling driver\n"); 8681181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8691181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = register_pernet_device(&vti_net_ops); 8701181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (err < 0) 8711181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return err; 8721181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = xfrm4_mode_tunnel_input_register(&vti_handler); 8731181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (err < 0) { 8741181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh unregister_pernet_device(&vti_net_ops); 8751181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh pr_info(KERN_INFO "vti init: can't register tunnel\n"); 8761181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh } 8771181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8781181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh err = rtnl_link_register(&vti_link_ops); 8791181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (err < 0) 8801181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh goto rtnl_link_failed; 8811181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8821181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return err; 8831181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8841181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhrtnl_link_failed: 8851181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh xfrm4_mode_tunnel_input_deregister(&vti_handler); 8861181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh unregister_pernet_device(&vti_net_ops); 8871181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh return err; 8881181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 8891181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8901181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhstatic void __exit vti_fini(void) 8911181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh{ 8921181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh rtnl_link_unregister(&vti_link_ops); 8931181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh if (xfrm4_mode_tunnel_input_deregister(&vti_handler)) 8941181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh pr_info("vti close: can't deregister tunnel\n"); 8951181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8961181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh unregister_pernet_device(&vti_net_ops); 8971181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh} 8981181412c1a671ed4e8fb1736f17e6ec617c68059Saurabh 8991181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhmodule_init(vti_init); 9001181412c1a671ed4e8fb1736f17e6ec617c68059Saurabhmodule_exit(vti_fini); 9011181412c1a671ed4e8fb1736f17e6ec617c68059SaurabhMODULE_LICENSE("GPL"); 9021181412c1a671ed4e8fb1736f17e6ec617c68059SaurabhMODULE_ALIAS_RTNL_LINK("vti"); 9031181412c1a671ed4e8fb1736f17e6ec617c68059SaurabhMODULE_ALIAS_NETDEV("ip_vti0"); 904