2 * net/ipv6/fib6_rules.c IPv6 Routing Policy Rules
4 * Copyright (C)2003-2006 Helsinki University of Technology
5 * Copyright (C)2003-2006 USAGI/WIDE Project
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License as
9 * published by the Free Software Foundation, version 2.
12 * Thomas Graf <tgraf@suug.ch>
13 * Ville Nuorvala <vnuorval@tcs.hut.fi>
16 #include <linux/netdevice.h>
18 #include <net/fib_rules.h>
20 #include <net/ip6_route.h>
21 #include <net/netlink.h>
25 struct fib_rule common
;
33 static struct fib_rules_ops fib6_rules_ops
;
35 static struct fib6_rule main_rule
= {
37 .refcnt
= ATOMIC_INIT(2),
39 .action
= FR_ACT_TO_TBL
,
40 .table
= RT6_TABLE_MAIN
,
44 static struct fib6_rule local_rule
= {
46 .refcnt
= ATOMIC_INIT(2),
48 .action
= FR_ACT_TO_TBL
,
49 .table
= RT6_TABLE_LOCAL
,
50 .flags
= FIB_RULE_PERMANENT
,
54 static LIST_HEAD(fib6_rules
);
56 struct dst_entry
*fib6_rule_lookup(struct flowi
*fl
, int flags
,
59 struct fib_lookup_arg arg
= {
63 fib_rules_lookup(&fib6_rules_ops
, fl
, flags
, &arg
);
65 fib_rule_put(arg
.rule
);
68 return (struct dst_entry
*) arg
.result
;
70 dst_hold(&ip6_null_entry
.u
.dst
);
71 return &ip6_null_entry
.u
.dst
;
74 static int fib6_rule_action(struct fib_rule
*rule
, struct flowi
*flp
,
75 int flags
, struct fib_lookup_arg
*arg
)
77 struct rt6_info
*rt
= NULL
;
78 struct fib6_table
*table
;
79 pol_lookup_t lookup
= arg
->lookup_ptr
;
81 switch (rule
->action
) {
84 case FR_ACT_UNREACHABLE
:
88 case FR_ACT_BLACKHOLE
:
89 rt
= &ip6_blk_hole_entry
;
92 rt
= &ip6_prohibit_entry
;
96 table
= fib6_get_table(rule
->table
);
98 rt
= lookup(table
, flp
, flags
);
100 if (rt
!= &ip6_null_entry
)
102 dst_release(&rt
->u
.dst
);
107 dst_hold(&rt
->u
.dst
);
110 return rt
== NULL
? -EAGAIN
: 0;
114 static int fib6_rule_match(struct fib_rule
*rule
, struct flowi
*fl
, int flags
)
116 struct fib6_rule
*r
= (struct fib6_rule
*) rule
;
119 !ipv6_prefix_equal(&fl
->fl6_dst
, &r
->dst
.addr
, r
->dst
.plen
))
123 if (!(flags
& RT6_LOOKUP_F_HAS_SADDR
) ||
124 !ipv6_prefix_equal(&fl
->fl6_src
, &r
->src
.addr
, r
->src
.plen
))
128 if (r
->tclass
&& r
->tclass
!= ((ntohl(fl
->fl6_flowlabel
) >> 20) & 0xff))
131 if ((r
->fwmark
^ fl
->mark
) & r
->fwmask
)
137 static struct nla_policy fib6_rule_policy
[FRA_MAX
+1] __read_mostly
= {
138 [FRA_IFNAME
] = { .type
= NLA_STRING
, .len
= IFNAMSIZ
- 1 },
139 [FRA_PRIORITY
] = { .type
= NLA_U32
},
140 [FRA_SRC
] = { .len
= sizeof(struct in6_addr
) },
141 [FRA_DST
] = { .len
= sizeof(struct in6_addr
) },
142 [FRA_FWMARK
] = { .type
= NLA_U32
},
143 [FRA_FWMASK
] = { .type
= NLA_U32
},
144 [FRA_TABLE
] = { .type
= NLA_U32
},
147 static int fib6_rule_configure(struct fib_rule
*rule
, struct sk_buff
*skb
,
148 struct nlmsghdr
*nlh
, struct fib_rule_hdr
*frh
,
152 struct fib6_rule
*rule6
= (struct fib6_rule
*) rule
;
154 if (frh
->src_len
> 128 || frh
->dst_len
> 128 ||
155 (frh
->tos
& ~IPV6_FLOWINFO_MASK
))
158 if (rule
->action
== FR_ACT_TO_TBL
) {
159 if (rule
->table
== RT6_TABLE_UNSPEC
)
162 if (fib6_new_table(rule
->table
) == NULL
) {
169 nla_memcpy(&rule6
->src
.addr
, tb
[FRA_SRC
],
170 sizeof(struct in6_addr
));
173 nla_memcpy(&rule6
->dst
.addr
, tb
[FRA_DST
],
174 sizeof(struct in6_addr
));
176 if (tb
[FRA_FWMARK
]) {
177 rule6
->fwmark
= nla_get_u32(tb
[FRA_FWMARK
]);
180 * if the mark value is non-zero,
181 * all bits are compared by default
182 * unless a mask is explicitly specified.
184 rule6
->fwmask
= 0xFFFFFFFF;
189 rule6
->fwmask
= nla_get_u32(tb
[FRA_FWMASK
]);
191 rule6
->src
.plen
= frh
->src_len
;
192 rule6
->dst
.plen
= frh
->dst_len
;
193 rule6
->tclass
= frh
->tos
;
200 static int fib6_rule_compare(struct fib_rule
*rule
, struct fib_rule_hdr
*frh
,
203 struct fib6_rule
*rule6
= (struct fib6_rule
*) rule
;
205 if (frh
->src_len
&& (rule6
->src
.plen
!= frh
->src_len
))
208 if (frh
->dst_len
&& (rule6
->dst
.plen
!= frh
->dst_len
))
211 if (frh
->tos
&& (rule6
->tclass
!= frh
->tos
))
215 nla_memcmp(tb
[FRA_SRC
], &rule6
->src
.addr
, sizeof(struct in6_addr
)))
219 nla_memcmp(tb
[FRA_DST
], &rule6
->dst
.addr
, sizeof(struct in6_addr
)))
222 if (tb
[FRA_FWMARK
] && (rule6
->fwmark
!= nla_get_u32(tb
[FRA_FWMARK
])))
225 if (tb
[FRA_FWMASK
] && (rule6
->fwmask
!= nla_get_u32(tb
[FRA_FWMASK
])))
231 static int fib6_rule_fill(struct fib_rule
*rule
, struct sk_buff
*skb
,
232 struct nlmsghdr
*nlh
, struct fib_rule_hdr
*frh
)
234 struct fib6_rule
*rule6
= (struct fib6_rule
*) rule
;
236 frh
->family
= AF_INET6
;
237 frh
->dst_len
= rule6
->dst
.plen
;
238 frh
->src_len
= rule6
->src
.plen
;
239 frh
->tos
= rule6
->tclass
;
242 NLA_PUT(skb
, FRA_DST
, sizeof(struct in6_addr
),
246 NLA_PUT(skb
, FRA_SRC
, sizeof(struct in6_addr
),
250 NLA_PUT_U32(skb
, FRA_FWMARK
, rule6
->fwmark
);
252 if (rule6
->fwmask
|| rule6
->fwmark
)
253 NLA_PUT_U32(skb
, FRA_FWMASK
, rule6
->fwmask
);
261 int fib6_rules_dump(struct sk_buff
*skb
, struct netlink_callback
*cb
)
263 return fib_rules_dump(skb
, cb
, AF_INET6
);
266 static u32
fib6_rule_default_pref(void)
271 static struct fib_rules_ops fib6_rules_ops
= {
273 .rule_size
= sizeof(struct fib6_rule
),
274 .action
= fib6_rule_action
,
275 .match
= fib6_rule_match
,
276 .configure
= fib6_rule_configure
,
277 .compare
= fib6_rule_compare
,
278 .fill
= fib6_rule_fill
,
279 .default_pref
= fib6_rule_default_pref
,
280 .nlgroup
= RTNLGRP_IPV6_RULE
,
281 .policy
= fib6_rule_policy
,
282 .rules_list
= &fib6_rules
,
283 .owner
= THIS_MODULE
,
286 void __init
fib6_rules_init(void)
288 list_add_tail(&local_rule
.common
.list
, &fib6_rules
);
289 list_add_tail(&main_rule
.common
.list
, &fib6_rules
);
291 fib_rules_register(&fib6_rules_ops
);
294 void fib6_rules_cleanup(void)
296 fib_rules_unregister(&fib6_rules_ops
);