2 * Linux INET6 implementation
6 * Pedro Roque <roque@di.fc.ul.pt>
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License
10 * as published by the Free Software Foundation; either version
11 * 2 of the License, or (at your option) any later version.
16 * YOSHIFUJI Hideaki @USAGI
17 * reworked default router selection.
18 * - respect outgoing interface
19 * - select from (probably) reachable routers (i.e.
20 * routers in REACHABLE, STALE, DELAY or PROBE states).
21 * - always select the same router if it is (probably)
22 * reachable. otherwise, round-robin the list.
24 * Fixed routing subtrees.
27 #include <linux/capability.h>
28 #include <linux/errno.h>
29 #include <linux/types.h>
30 #include <linux/times.h>
31 #include <linux/socket.h>
32 #include <linux/sockios.h>
33 #include <linux/net.h>
34 #include <linux/route.h>
35 #include <linux/netdevice.h>
36 #include <linux/in6.h>
37 #include <linux/mroute6.h>
38 #include <linux/init.h>
39 #include <linux/if_arp.h>
40 #include <linux/proc_fs.h>
41 #include <linux/seq_file.h>
42 #include <linux/nsproxy.h>
43 #include <linux/slab.h>
44 #include <net/net_namespace.h>
47 #include <net/ip6_fib.h>
48 #include <net/ip6_route.h>
49 #include <net/ndisc.h>
50 #include <net/addrconf.h>
52 #include <linux/rtnetlink.h>
55 #include <net/netevent.h>
56 #include <net/netlink.h>
58 #include <asm/uaccess.h>
61 #include <linux/sysctl.h>
64 /* Set to 3 to get tracing. */
68 #define RDBG(x) printk x
69 #define RT6_TRACE(x...) printk(KERN_DEBUG x)
72 #define RT6_TRACE(x...) do { ; } while (0)
75 static struct rt6_info
* ip6_rt_copy(struct rt6_info
*ort
);
76 static struct dst_entry
*ip6_dst_check(struct dst_entry
*dst
, u32 cookie
);
77 static unsigned int ip6_default_advmss(const struct dst_entry
*dst
);
78 static unsigned int ip6_default_mtu(const struct dst_entry
*dst
);
79 static struct dst_entry
*ip6_negative_advice(struct dst_entry
*);
80 static void ip6_dst_destroy(struct dst_entry
*);
81 static void ip6_dst_ifdown(struct dst_entry
*,
82 struct net_device
*dev
, int how
);
83 static int ip6_dst_gc(struct dst_ops
*ops
);
85 static int ip6_pkt_discard(struct sk_buff
*skb
);
86 static int ip6_pkt_discard_out(struct sk_buff
*skb
);
87 static void ip6_link_failure(struct sk_buff
*skb
);
88 static void ip6_rt_update_pmtu(struct dst_entry
*dst
, u32 mtu
);
90 #ifdef CONFIG_IPV6_ROUTE_INFO
91 static struct rt6_info
*rt6_add_route_info(struct net
*net
,
92 struct in6_addr
*prefix
, int prefixlen
,
93 struct in6_addr
*gwaddr
, int ifindex
,
95 static struct rt6_info
*rt6_get_route_info(struct net
*net
,
96 struct in6_addr
*prefix
, int prefixlen
,
97 struct in6_addr
*gwaddr
, int ifindex
);
100 static struct dst_ops ip6_dst_ops_template
= {
102 .protocol
= cpu_to_be16(ETH_P_IPV6
),
105 .check
= ip6_dst_check
,
106 .default_advmss
= ip6_default_advmss
,
107 .default_mtu
= ip6_default_mtu
,
108 .destroy
= ip6_dst_destroy
,
109 .ifdown
= ip6_dst_ifdown
,
110 .negative_advice
= ip6_negative_advice
,
111 .link_failure
= ip6_link_failure
,
112 .update_pmtu
= ip6_rt_update_pmtu
,
113 .local_out
= __ip6_local_out
,
116 static unsigned int ip6_blackhole_default_mtu(const struct dst_entry
*dst
)
121 static void ip6_rt_blackhole_update_pmtu(struct dst_entry
*dst
, u32 mtu
)
125 static struct dst_ops ip6_dst_blackhole_ops
= {
127 .protocol
= cpu_to_be16(ETH_P_IPV6
),
128 .destroy
= ip6_dst_destroy
,
129 .check
= ip6_dst_check
,
130 .default_mtu
= ip6_blackhole_default_mtu
,
131 .default_advmss
= ip6_default_advmss
,
132 .update_pmtu
= ip6_rt_blackhole_update_pmtu
,
135 static struct rt6_info ip6_null_entry_template
= {
137 .__refcnt
= ATOMIC_INIT(1),
140 .error
= -ENETUNREACH
,
141 .input
= ip6_pkt_discard
,
142 .output
= ip6_pkt_discard_out
,
144 .rt6i_flags
= (RTF_REJECT
| RTF_NONEXTHOP
),
145 .rt6i_protocol
= RTPROT_KERNEL
,
146 .rt6i_metric
= ~(u32
) 0,
147 .rt6i_ref
= ATOMIC_INIT(1),
150 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
152 static int ip6_pkt_prohibit(struct sk_buff
*skb
);
153 static int ip6_pkt_prohibit_out(struct sk_buff
*skb
);
155 static struct rt6_info ip6_prohibit_entry_template
= {
157 .__refcnt
= ATOMIC_INIT(1),
161 .input
= ip6_pkt_prohibit
,
162 .output
= ip6_pkt_prohibit_out
,
164 .rt6i_flags
= (RTF_REJECT
| RTF_NONEXTHOP
),
165 .rt6i_protocol
= RTPROT_KERNEL
,
166 .rt6i_metric
= ~(u32
) 0,
167 .rt6i_ref
= ATOMIC_INIT(1),
170 static struct rt6_info ip6_blk_hole_entry_template
= {
172 .__refcnt
= ATOMIC_INIT(1),
176 .input
= dst_discard
,
177 .output
= dst_discard
,
179 .rt6i_flags
= (RTF_REJECT
| RTF_NONEXTHOP
),
180 .rt6i_protocol
= RTPROT_KERNEL
,
181 .rt6i_metric
= ~(u32
) 0,
182 .rt6i_ref
= ATOMIC_INIT(1),
187 /* allocate dst with ip6_dst_ops */
188 static inline struct rt6_info
*ip6_dst_alloc(struct dst_ops
*ops
)
190 return (struct rt6_info
*)dst_alloc(ops
);
193 static void ip6_dst_destroy(struct dst_entry
*dst
)
195 struct rt6_info
*rt
= (struct rt6_info
*)dst
;
196 struct inet6_dev
*idev
= rt
->rt6i_idev
;
197 struct inet_peer
*peer
= rt
->rt6i_peer
;
200 rt
->rt6i_idev
= NULL
;
204 rt
->rt6i_peer
= NULL
;
209 void rt6_bind_peer(struct rt6_info
*rt
, int create
)
211 struct inet_peer
*peer
;
213 peer
= inet_getpeer_v6(&rt
->rt6i_dst
.addr
, create
);
214 if (peer
&& cmpxchg(&rt
->rt6i_peer
, NULL
, peer
) != NULL
)
218 static void ip6_dst_ifdown(struct dst_entry
*dst
, struct net_device
*dev
,
221 struct rt6_info
*rt
= (struct rt6_info
*)dst
;
222 struct inet6_dev
*idev
= rt
->rt6i_idev
;
223 struct net_device
*loopback_dev
=
224 dev_net(dev
)->loopback_dev
;
226 if (dev
!= loopback_dev
&& idev
!= NULL
&& idev
->dev
== dev
) {
227 struct inet6_dev
*loopback_idev
=
228 in6_dev_get(loopback_dev
);
229 if (loopback_idev
!= NULL
) {
230 rt
->rt6i_idev
= loopback_idev
;
236 static __inline__
int rt6_check_expired(const struct rt6_info
*rt
)
238 return (rt
->rt6i_flags
& RTF_EXPIRES
) &&
239 time_after(jiffies
, rt
->rt6i_expires
);
242 static inline int rt6_need_strict(struct in6_addr
*daddr
)
244 return ipv6_addr_type(daddr
) &
245 (IPV6_ADDR_MULTICAST
| IPV6_ADDR_LINKLOCAL
| IPV6_ADDR_LOOPBACK
);
249 * Route lookup. Any table->tb6_lock is implied.
252 static inline struct rt6_info
*rt6_device_match(struct net
*net
,
254 struct in6_addr
*saddr
,
258 struct rt6_info
*local
= NULL
;
259 struct rt6_info
*sprt
;
261 if (!oif
&& ipv6_addr_any(saddr
))
264 for (sprt
= rt
; sprt
; sprt
= sprt
->dst
.rt6_next
) {
265 struct net_device
*dev
= sprt
->rt6i_dev
;
268 if (dev
->ifindex
== oif
)
270 if (dev
->flags
& IFF_LOOPBACK
) {
271 if (sprt
->rt6i_idev
== NULL
||
272 sprt
->rt6i_idev
->dev
->ifindex
!= oif
) {
273 if (flags
& RT6_LOOKUP_F_IFACE
&& oif
)
275 if (local
&& (!oif
||
276 local
->rt6i_idev
->dev
->ifindex
== oif
))
282 if (ipv6_chk_addr(net
, saddr
, dev
,
283 flags
& RT6_LOOKUP_F_IFACE
))
292 if (flags
& RT6_LOOKUP_F_IFACE
)
293 return net
->ipv6
.ip6_null_entry
;
299 #ifdef CONFIG_IPV6_ROUTER_PREF
300 static void rt6_probe(struct rt6_info
*rt
)
302 struct neighbour
*neigh
= rt
? rt
->rt6i_nexthop
: NULL
;
304 * Okay, this does not seem to be appropriate
305 * for now, however, we need to check if it
306 * is really so; aka Router Reachability Probing.
308 * Router Reachability Probe MUST be rate-limited
309 * to no more than one per minute.
311 if (!neigh
|| (neigh
->nud_state
& NUD_VALID
))
313 read_lock_bh(&neigh
->lock
);
314 if (!(neigh
->nud_state
& NUD_VALID
) &&
315 time_after(jiffies
, neigh
->updated
+ rt
->rt6i_idev
->cnf
.rtr_probe_interval
)) {
316 struct in6_addr mcaddr
;
317 struct in6_addr
*target
;
319 neigh
->updated
= jiffies
;
320 read_unlock_bh(&neigh
->lock
);
322 target
= (struct in6_addr
*)&neigh
->primary_key
;
323 addrconf_addr_solict_mult(target
, &mcaddr
);
324 ndisc_send_ns(rt
->rt6i_dev
, NULL
, target
, &mcaddr
, NULL
);
326 read_unlock_bh(&neigh
->lock
);
329 static inline void rt6_probe(struct rt6_info
*rt
)
335 * Default Router Selection (RFC 2461 6.3.6)
337 static inline int rt6_check_dev(struct rt6_info
*rt
, int oif
)
339 struct net_device
*dev
= rt
->rt6i_dev
;
340 if (!oif
|| dev
->ifindex
== oif
)
342 if ((dev
->flags
& IFF_LOOPBACK
) &&
343 rt
->rt6i_idev
&& rt
->rt6i_idev
->dev
->ifindex
== oif
)
348 static inline int rt6_check_neigh(struct rt6_info
*rt
)
350 struct neighbour
*neigh
= rt
->rt6i_nexthop
;
352 if (rt
->rt6i_flags
& RTF_NONEXTHOP
||
353 !(rt
->rt6i_flags
& RTF_GATEWAY
))
356 read_lock_bh(&neigh
->lock
);
357 if (neigh
->nud_state
& NUD_VALID
)
359 #ifdef CONFIG_IPV6_ROUTER_PREF
360 else if (neigh
->nud_state
& NUD_FAILED
)
365 read_unlock_bh(&neigh
->lock
);
371 static int rt6_score_route(struct rt6_info
*rt
, int oif
,
376 m
= rt6_check_dev(rt
, oif
);
377 if (!m
&& (strict
& RT6_LOOKUP_F_IFACE
))
379 #ifdef CONFIG_IPV6_ROUTER_PREF
380 m
|= IPV6_DECODE_PREF(IPV6_EXTRACT_PREF(rt
->rt6i_flags
)) << 2;
382 n
= rt6_check_neigh(rt
);
383 if (!n
&& (strict
& RT6_LOOKUP_F_REACHABLE
))
388 static struct rt6_info
*find_match(struct rt6_info
*rt
, int oif
, int strict
,
389 int *mpri
, struct rt6_info
*match
)
393 if (rt6_check_expired(rt
))
396 m
= rt6_score_route(rt
, oif
, strict
);
401 if (strict
& RT6_LOOKUP_F_REACHABLE
)
405 } else if (strict
& RT6_LOOKUP_F_REACHABLE
) {
413 static struct rt6_info
*find_rr_leaf(struct fib6_node
*fn
,
414 struct rt6_info
*rr_head
,
415 u32 metric
, int oif
, int strict
)
417 struct rt6_info
*rt
, *match
;
421 for (rt
= rr_head
; rt
&& rt
->rt6i_metric
== metric
;
422 rt
= rt
->dst
.rt6_next
)
423 match
= find_match(rt
, oif
, strict
, &mpri
, match
);
424 for (rt
= fn
->leaf
; rt
&& rt
!= rr_head
&& rt
->rt6i_metric
== metric
;
425 rt
= rt
->dst
.rt6_next
)
426 match
= find_match(rt
, oif
, strict
, &mpri
, match
);
431 static struct rt6_info
*rt6_select(struct fib6_node
*fn
, int oif
, int strict
)
433 struct rt6_info
*match
, *rt0
;
436 RT6_TRACE("%s(fn->leaf=%p, oif=%d)\n",
437 __func__
, fn
->leaf
, oif
);
441 fn
->rr_ptr
= rt0
= fn
->leaf
;
443 match
= find_rr_leaf(fn
, rt0
, rt0
->rt6i_metric
, oif
, strict
);
446 (strict
& RT6_LOOKUP_F_REACHABLE
)) {
447 struct rt6_info
*next
= rt0
->dst
.rt6_next
;
449 /* no entries matched; do round-robin */
450 if (!next
|| next
->rt6i_metric
!= rt0
->rt6i_metric
)
457 RT6_TRACE("%s() => %p\n",
460 net
= dev_net(rt0
->rt6i_dev
);
461 return match
? match
: net
->ipv6
.ip6_null_entry
;
464 #ifdef CONFIG_IPV6_ROUTE_INFO
465 int rt6_route_rcv(struct net_device
*dev
, u8
*opt
, int len
,
466 struct in6_addr
*gwaddr
)
468 struct net
*net
= dev_net(dev
);
469 struct route_info
*rinfo
= (struct route_info
*) opt
;
470 struct in6_addr prefix_buf
, *prefix
;
472 unsigned long lifetime
;
475 if (len
< sizeof(struct route_info
)) {
479 /* Sanity check for prefix_len and length */
480 if (rinfo
->length
> 3) {
482 } else if (rinfo
->prefix_len
> 128) {
484 } else if (rinfo
->prefix_len
> 64) {
485 if (rinfo
->length
< 2) {
488 } else if (rinfo
->prefix_len
> 0) {
489 if (rinfo
->length
< 1) {
494 pref
= rinfo
->route_pref
;
495 if (pref
== ICMPV6_ROUTER_PREF_INVALID
)
498 lifetime
= addrconf_timeout_fixup(ntohl(rinfo
->lifetime
), HZ
);
500 if (rinfo
->length
== 3)
501 prefix
= (struct in6_addr
*)rinfo
->prefix
;
503 /* this function is safe */
504 ipv6_addr_prefix(&prefix_buf
,
505 (struct in6_addr
*)rinfo
->prefix
,
507 prefix
= &prefix_buf
;
510 rt
= rt6_get_route_info(net
, prefix
, rinfo
->prefix_len
, gwaddr
,
513 if (rt
&& !lifetime
) {
519 rt
= rt6_add_route_info(net
, prefix
, rinfo
->prefix_len
, gwaddr
, dev
->ifindex
,
522 rt
->rt6i_flags
= RTF_ROUTEINFO
|
523 (rt
->rt6i_flags
& ~RTF_PREF_MASK
) | RTF_PREF(pref
);
526 if (!addrconf_finite_timeout(lifetime
)) {
527 rt
->rt6i_flags
&= ~RTF_EXPIRES
;
529 rt
->rt6i_expires
= jiffies
+ HZ
* lifetime
;
530 rt
->rt6i_flags
|= RTF_EXPIRES
;
532 dst_release(&rt
->dst
);
538 #define BACKTRACK(__net, saddr) \
540 if (rt == __net->ipv6.ip6_null_entry) { \
541 struct fib6_node *pn; \
543 if (fn->fn_flags & RTN_TL_ROOT) \
546 if (FIB6_SUBTREE(pn) && FIB6_SUBTREE(pn) != fn) \
547 fn = fib6_lookup(FIB6_SUBTREE(pn), NULL, saddr); \
550 if (fn->fn_flags & RTN_RTINFO) \
556 static struct rt6_info
*ip6_pol_route_lookup(struct net
*net
,
557 struct fib6_table
*table
,
558 struct flowi
*fl
, int flags
)
560 struct fib6_node
*fn
;
563 read_lock_bh(&table
->tb6_lock
);
564 fn
= fib6_lookup(&table
->tb6_root
, &fl
->fl6_dst
, &fl
->fl6_src
);
567 rt
= rt6_device_match(net
, rt
, &fl
->fl6_src
, fl
->oif
, flags
);
568 BACKTRACK(net
, &fl
->fl6_src
);
570 dst_use(&rt
->dst
, jiffies
);
571 read_unlock_bh(&table
->tb6_lock
);
576 struct rt6_info
*rt6_lookup(struct net
*net
, const struct in6_addr
*daddr
,
577 const struct in6_addr
*saddr
, int oif
, int strict
)
583 struct dst_entry
*dst
;
584 int flags
= strict
? RT6_LOOKUP_F_IFACE
: 0;
587 memcpy(&fl
.fl6_src
, saddr
, sizeof(*saddr
));
588 flags
|= RT6_LOOKUP_F_HAS_SADDR
;
591 dst
= fib6_rule_lookup(net
, &fl
, flags
, ip6_pol_route_lookup
);
593 return (struct rt6_info
*) dst
;
600 EXPORT_SYMBOL(rt6_lookup
);
602 /* ip6_ins_rt is called with FREE table->tb6_lock.
603 It takes new route entry, the addition fails by any reason the
604 route is freed. In any case, if caller does not hold it, it may
608 static int __ip6_ins_rt(struct rt6_info
*rt
, struct nl_info
*info
)
611 struct fib6_table
*table
;
613 table
= rt
->rt6i_table
;
614 write_lock_bh(&table
->tb6_lock
);
615 err
= fib6_add(&table
->tb6_root
, rt
, info
);
616 write_unlock_bh(&table
->tb6_lock
);
621 int ip6_ins_rt(struct rt6_info
*rt
)
623 struct nl_info info
= {
624 .nl_net
= dev_net(rt
->rt6i_dev
),
626 return __ip6_ins_rt(rt
, &info
);
629 static struct rt6_info
*rt6_alloc_cow(struct rt6_info
*ort
, struct in6_addr
*daddr
,
630 struct in6_addr
*saddr
)
638 rt
= ip6_rt_copy(ort
);
641 struct neighbour
*neigh
;
642 int attempts
= !in_softirq();
644 if (!(rt
->rt6i_flags
&RTF_GATEWAY
)) {
645 if (rt
->rt6i_dst
.plen
!= 128 &&
646 ipv6_addr_equal(&rt
->rt6i_dst
.addr
, daddr
))
647 rt
->rt6i_flags
|= RTF_ANYCAST
;
648 ipv6_addr_copy(&rt
->rt6i_gateway
, daddr
);
651 ipv6_addr_copy(&rt
->rt6i_dst
.addr
, daddr
);
652 rt
->rt6i_dst
.plen
= 128;
653 rt
->rt6i_flags
|= RTF_CACHE
;
654 rt
->dst
.flags
|= DST_HOST
;
656 #ifdef CONFIG_IPV6_SUBTREES
657 if (rt
->rt6i_src
.plen
&& saddr
) {
658 ipv6_addr_copy(&rt
->rt6i_src
.addr
, saddr
);
659 rt
->rt6i_src
.plen
= 128;
664 neigh
= ndisc_get_neigh(rt
->rt6i_dev
, &rt
->rt6i_gateway
);
666 struct net
*net
= dev_net(rt
->rt6i_dev
);
667 int saved_rt_min_interval
=
668 net
->ipv6
.sysctl
.ip6_rt_gc_min_interval
;
669 int saved_rt_elasticity
=
670 net
->ipv6
.sysctl
.ip6_rt_gc_elasticity
;
672 if (attempts
-- > 0) {
673 net
->ipv6
.sysctl
.ip6_rt_gc_elasticity
= 1;
674 net
->ipv6
.sysctl
.ip6_rt_gc_min_interval
= 0;
676 ip6_dst_gc(&net
->ipv6
.ip6_dst_ops
);
678 net
->ipv6
.sysctl
.ip6_rt_gc_elasticity
=
680 net
->ipv6
.sysctl
.ip6_rt_gc_min_interval
=
681 saved_rt_min_interval
;
687 "ipv6: Neighbour table overflow.\n");
691 rt
->rt6i_nexthop
= neigh
;
698 static struct rt6_info
*rt6_alloc_clone(struct rt6_info
*ort
, struct in6_addr
*daddr
)
700 struct rt6_info
*rt
= ip6_rt_copy(ort
);
702 ipv6_addr_copy(&rt
->rt6i_dst
.addr
, daddr
);
703 rt
->rt6i_dst
.plen
= 128;
704 rt
->rt6i_flags
|= RTF_CACHE
;
705 rt
->dst
.flags
|= DST_HOST
;
706 rt
->rt6i_nexthop
= neigh_clone(ort
->rt6i_nexthop
);
711 static struct rt6_info
*ip6_pol_route(struct net
*net
, struct fib6_table
*table
, int oif
,
712 struct flowi
*fl
, int flags
)
714 struct fib6_node
*fn
;
715 struct rt6_info
*rt
, *nrt
;
719 int reachable
= net
->ipv6
.devconf_all
->forwarding
? 0 : RT6_LOOKUP_F_REACHABLE
;
721 strict
|= flags
& RT6_LOOKUP_F_IFACE
;
724 read_lock_bh(&table
->tb6_lock
);
727 fn
= fib6_lookup(&table
->tb6_root
, &fl
->fl6_dst
, &fl
->fl6_src
);
730 rt
= rt6_select(fn
, oif
, strict
| reachable
);
732 BACKTRACK(net
, &fl
->fl6_src
);
733 if (rt
== net
->ipv6
.ip6_null_entry
||
734 rt
->rt6i_flags
& RTF_CACHE
)
738 read_unlock_bh(&table
->tb6_lock
);
740 if (!rt
->rt6i_nexthop
&& !(rt
->rt6i_flags
& RTF_NONEXTHOP
))
741 nrt
= rt6_alloc_cow(rt
, &fl
->fl6_dst
, &fl
->fl6_src
);
742 else if (!(rt
->dst
.flags
& DST_HOST
))
743 nrt
= rt6_alloc_clone(rt
, &fl
->fl6_dst
);
747 dst_release(&rt
->dst
);
748 rt
= nrt
? : net
->ipv6
.ip6_null_entry
;
752 err
= ip6_ins_rt(nrt
);
761 * Race condition! In the gap, when table->tb6_lock was
762 * released someone could insert this route. Relookup.
764 dst_release(&rt
->dst
);
773 read_unlock_bh(&table
->tb6_lock
);
775 rt
->dst
.lastuse
= jiffies
;
781 static struct rt6_info
*ip6_pol_route_input(struct net
*net
, struct fib6_table
*table
,
782 struct flowi
*fl
, int flags
)
784 return ip6_pol_route(net
, table
, fl
->iif
, fl
, flags
);
787 void ip6_route_input(struct sk_buff
*skb
)
789 struct ipv6hdr
*iph
= ipv6_hdr(skb
);
790 struct net
*net
= dev_net(skb
->dev
);
791 int flags
= RT6_LOOKUP_F_HAS_SADDR
;
793 .iif
= skb
->dev
->ifindex
,
794 .fl6_dst
= iph
->daddr
,
795 .fl6_src
= iph
->saddr
,
796 .fl6_flowlabel
= (* (__be32
*) iph
)&IPV6_FLOWINFO_MASK
,
798 .proto
= iph
->nexthdr
,
801 if (rt6_need_strict(&iph
->daddr
) && skb
->dev
->type
!= ARPHRD_PIMREG
)
802 flags
|= RT6_LOOKUP_F_IFACE
;
804 skb_dst_set(skb
, fib6_rule_lookup(net
, &fl
, flags
, ip6_pol_route_input
));
807 static struct rt6_info
*ip6_pol_route_output(struct net
*net
, struct fib6_table
*table
,
808 struct flowi
*fl
, int flags
)
810 return ip6_pol_route(net
, table
, fl
->oif
, fl
, flags
);
813 struct dst_entry
* ip6_route_output(struct net
*net
, struct sock
*sk
,
818 if ((sk
&& sk
->sk_bound_dev_if
) || rt6_need_strict(&fl
->fl6_dst
))
819 flags
|= RT6_LOOKUP_F_IFACE
;
821 if (!ipv6_addr_any(&fl
->fl6_src
))
822 flags
|= RT6_LOOKUP_F_HAS_SADDR
;
824 flags
|= rt6_srcprefs2flags(inet6_sk(sk
)->srcprefs
);
826 return fib6_rule_lookup(net
, fl
, flags
, ip6_pol_route_output
);
829 EXPORT_SYMBOL(ip6_route_output
);
831 int ip6_dst_blackhole(struct sock
*sk
, struct dst_entry
**dstp
, struct flowi
*fl
)
833 struct rt6_info
*ort
= (struct rt6_info
*) *dstp
;
834 struct rt6_info
*rt
= (struct rt6_info
*)
835 dst_alloc(&ip6_dst_blackhole_ops
);
836 struct dst_entry
*new = NULL
;
841 atomic_set(&new->__refcnt
, 1);
843 new->input
= dst_discard
;
844 new->output
= dst_discard
;
846 dst_copy_metrics(new, &ort
->dst
);
847 new->dev
= ort
->dst
.dev
;
850 rt
->rt6i_idev
= ort
->rt6i_idev
;
852 in6_dev_hold(rt
->rt6i_idev
);
853 rt
->rt6i_expires
= 0;
855 ipv6_addr_copy(&rt
->rt6i_gateway
, &ort
->rt6i_gateway
);
856 rt
->rt6i_flags
= ort
->rt6i_flags
& ~RTF_EXPIRES
;
859 memcpy(&rt
->rt6i_dst
, &ort
->rt6i_dst
, sizeof(struct rt6key
));
860 #ifdef CONFIG_IPV6_SUBTREES
861 memcpy(&rt
->rt6i_src
, &ort
->rt6i_src
, sizeof(struct rt6key
));
869 return new ? 0 : -ENOMEM
;
871 EXPORT_SYMBOL_GPL(ip6_dst_blackhole
);
874 * Destination cache support functions
877 static struct dst_entry
*ip6_dst_check(struct dst_entry
*dst
, u32 cookie
)
881 rt
= (struct rt6_info
*) dst
;
883 if (rt
->rt6i_node
&& (rt
->rt6i_node
->fn_sernum
== cookie
))
889 static struct dst_entry
*ip6_negative_advice(struct dst_entry
*dst
)
891 struct rt6_info
*rt
= (struct rt6_info
*) dst
;
894 if (rt
->rt6i_flags
& RTF_CACHE
) {
895 if (rt6_check_expired(rt
)) {
907 static void ip6_link_failure(struct sk_buff
*skb
)
911 icmpv6_send(skb
, ICMPV6_DEST_UNREACH
, ICMPV6_ADDR_UNREACH
, 0);
913 rt
= (struct rt6_info
*) skb_dst(skb
);
915 if (rt
->rt6i_flags
&RTF_CACHE
) {
916 dst_set_expires(&rt
->dst
, 0);
917 rt
->rt6i_flags
|= RTF_EXPIRES
;
918 } else if (rt
->rt6i_node
&& (rt
->rt6i_flags
& RTF_DEFAULT
))
919 rt
->rt6i_node
->fn_sernum
= -1;
923 static void ip6_rt_update_pmtu(struct dst_entry
*dst
, u32 mtu
)
925 struct rt6_info
*rt6
= (struct rt6_info
*)dst
;
927 if (mtu
< dst_mtu(dst
) && rt6
->rt6i_dst
.plen
== 128) {
928 rt6
->rt6i_flags
|= RTF_MODIFIED
;
929 if (mtu
< IPV6_MIN_MTU
) {
930 u32 features
= dst_metric(dst
, RTAX_FEATURES
);
932 features
|= RTAX_FEATURE_ALLFRAG
;
933 dst_metric_set(dst
, RTAX_FEATURES
, features
);
935 dst_metric_set(dst
, RTAX_MTU
, mtu
);
936 call_netevent_notifiers(NETEVENT_PMTU_UPDATE
, dst
);
940 static unsigned int ip6_default_advmss(const struct dst_entry
*dst
)
942 struct net_device
*dev
= dst
->dev
;
943 unsigned int mtu
= dst_mtu(dst
);
944 struct net
*net
= dev_net(dev
);
946 mtu
-= sizeof(struct ipv6hdr
) + sizeof(struct tcphdr
);
948 if (mtu
< net
->ipv6
.sysctl
.ip6_rt_min_advmss
)
949 mtu
= net
->ipv6
.sysctl
.ip6_rt_min_advmss
;
952 * Maximal non-jumbo IPv6 payload is IPV6_MAXPLEN and
953 * corresponding MSS is IPV6_MAXPLEN - tcp_header_size.
954 * IPV6_MAXPLEN is also valid and means: "any MSS,
955 * rely only on pmtu discovery"
957 if (mtu
> IPV6_MAXPLEN
- sizeof(struct tcphdr
))
962 static unsigned int ip6_default_mtu(const struct dst_entry
*dst
)
964 unsigned int mtu
= IPV6_MIN_MTU
;
965 struct inet6_dev
*idev
;
968 idev
= __in6_dev_get(dst
->dev
);
970 mtu
= idev
->cnf
.mtu6
;
976 static struct dst_entry
*icmp6_dst_gc_list
;
977 static DEFINE_SPINLOCK(icmp6_dst_lock
);
979 struct dst_entry
*icmp6_dst_alloc(struct net_device
*dev
,
980 struct neighbour
*neigh
,
981 const struct in6_addr
*addr
)
984 struct inet6_dev
*idev
= in6_dev_get(dev
);
985 struct net
*net
= dev_net(dev
);
987 if (unlikely(idev
== NULL
))
990 rt
= ip6_dst_alloc(&net
->ipv6
.ip6_dst_ops
);
991 if (unlikely(rt
== NULL
)) {
1000 neigh
= ndisc_get_neigh(dev
, addr
);
1006 rt
->rt6i_idev
= idev
;
1007 rt
->rt6i_nexthop
= neigh
;
1008 atomic_set(&rt
->dst
.__refcnt
, 1);
1009 dst_metric_set(&rt
->dst
, RTAX_HOPLIMIT
, 255);
1010 rt
->dst
.output
= ip6_output
;
1012 #if 0 /* there's no chance to use these for ndisc */
1013 rt
->dst
.flags
= ipv6_addr_type(addr
) & IPV6_ADDR_UNICAST
1016 ipv6_addr_copy(&rt
->rt6i_dst
.addr
, addr
);
1017 rt
->rt6i_dst
.plen
= 128;
1020 spin_lock_bh(&icmp6_dst_lock
);
1021 rt
->dst
.next
= icmp6_dst_gc_list
;
1022 icmp6_dst_gc_list
= &rt
->dst
;
1023 spin_unlock_bh(&icmp6_dst_lock
);
1025 fib6_force_start_gc(net
);
1031 int icmp6_dst_gc(void)
1033 struct dst_entry
*dst
, *next
, **pprev
;
1038 spin_lock_bh(&icmp6_dst_lock
);
1039 pprev
= &icmp6_dst_gc_list
;
1041 while ((dst
= *pprev
) != NULL
) {
1042 if (!atomic_read(&dst
->__refcnt
)) {
1051 spin_unlock_bh(&icmp6_dst_lock
);
1056 static void icmp6_clean_all(int (*func
)(struct rt6_info
*rt
, void *arg
),
1059 struct dst_entry
*dst
, **pprev
;
1061 spin_lock_bh(&icmp6_dst_lock
);
1062 pprev
= &icmp6_dst_gc_list
;
1063 while ((dst
= *pprev
) != NULL
) {
1064 struct rt6_info
*rt
= (struct rt6_info
*) dst
;
1065 if (func(rt
, arg
)) {
1072 spin_unlock_bh(&icmp6_dst_lock
);
1075 static int ip6_dst_gc(struct dst_ops
*ops
)
1077 unsigned long now
= jiffies
;
1078 struct net
*net
= container_of(ops
, struct net
, ipv6
.ip6_dst_ops
);
1079 int rt_min_interval
= net
->ipv6
.sysctl
.ip6_rt_gc_min_interval
;
1080 int rt_max_size
= net
->ipv6
.sysctl
.ip6_rt_max_size
;
1081 int rt_elasticity
= net
->ipv6
.sysctl
.ip6_rt_gc_elasticity
;
1082 int rt_gc_timeout
= net
->ipv6
.sysctl
.ip6_rt_gc_timeout
;
1083 unsigned long rt_last_gc
= net
->ipv6
.ip6_rt_last_gc
;
1086 entries
= dst_entries_get_fast(ops
);
1087 if (time_after(rt_last_gc
+ rt_min_interval
, now
) &&
1088 entries
<= rt_max_size
)
1091 net
->ipv6
.ip6_rt_gc_expire
++;
1092 fib6_run_gc(net
->ipv6
.ip6_rt_gc_expire
, net
);
1093 net
->ipv6
.ip6_rt_last_gc
= now
;
1094 entries
= dst_entries_get_slow(ops
);
1095 if (entries
< ops
->gc_thresh
)
1096 net
->ipv6
.ip6_rt_gc_expire
= rt_gc_timeout
>>1;
1098 net
->ipv6
.ip6_rt_gc_expire
-= net
->ipv6
.ip6_rt_gc_expire
>>rt_elasticity
;
1099 return entries
> rt_max_size
;
1102 /* Clean host part of a prefix. Not necessary in radix tree,
1103 but results in cleaner routing tables.
1105 Remove it only when all the things will work!
1108 int ip6_dst_hoplimit(struct dst_entry
*dst
)
1110 int hoplimit
= dst_metric_raw(dst
, RTAX_HOPLIMIT
);
1111 if (hoplimit
== 0) {
1112 struct net_device
*dev
= dst
->dev
;
1113 struct inet6_dev
*idev
;
1116 idev
= __in6_dev_get(dev
);
1118 hoplimit
= idev
->cnf
.hop_limit
;
1120 hoplimit
= dev_net(dev
)->ipv6
.devconf_all
->hop_limit
;
1125 EXPORT_SYMBOL(ip6_dst_hoplimit
);
1131 int ip6_route_add(struct fib6_config
*cfg
)
1134 struct net
*net
= cfg
->fc_nlinfo
.nl_net
;
1135 struct rt6_info
*rt
= NULL
;
1136 struct net_device
*dev
= NULL
;
1137 struct inet6_dev
*idev
= NULL
;
1138 struct fib6_table
*table
;
1141 if (cfg
->fc_dst_len
> 128 || cfg
->fc_src_len
> 128)
1143 #ifndef CONFIG_IPV6_SUBTREES
1144 if (cfg
->fc_src_len
)
1147 if (cfg
->fc_ifindex
) {
1149 dev
= dev_get_by_index(net
, cfg
->fc_ifindex
);
1152 idev
= in6_dev_get(dev
);
1157 if (cfg
->fc_metric
== 0)
1158 cfg
->fc_metric
= IP6_RT_PRIO_USER
;
1160 table
= fib6_new_table(net
, cfg
->fc_table
);
1161 if (table
== NULL
) {
1166 rt
= ip6_dst_alloc(&net
->ipv6
.ip6_dst_ops
);
1173 rt
->dst
.obsolete
= -1;
1174 rt
->rt6i_expires
= (cfg
->fc_flags
& RTF_EXPIRES
) ?
1175 jiffies
+ clock_t_to_jiffies(cfg
->fc_expires
) :
1178 if (cfg
->fc_protocol
== RTPROT_UNSPEC
)
1179 cfg
->fc_protocol
= RTPROT_BOOT
;
1180 rt
->rt6i_protocol
= cfg
->fc_protocol
;
1182 addr_type
= ipv6_addr_type(&cfg
->fc_dst
);
1184 if (addr_type
& IPV6_ADDR_MULTICAST
)
1185 rt
->dst
.input
= ip6_mc_input
;
1186 else if (cfg
->fc_flags
& RTF_LOCAL
)
1187 rt
->dst
.input
= ip6_input
;
1189 rt
->dst
.input
= ip6_forward
;
1191 rt
->dst
.output
= ip6_output
;
1193 ipv6_addr_prefix(&rt
->rt6i_dst
.addr
, &cfg
->fc_dst
, cfg
->fc_dst_len
);
1194 rt
->rt6i_dst
.plen
= cfg
->fc_dst_len
;
1195 if (rt
->rt6i_dst
.plen
== 128)
1196 rt
->dst
.flags
= DST_HOST
;
1198 #ifdef CONFIG_IPV6_SUBTREES
1199 ipv6_addr_prefix(&rt
->rt6i_src
.addr
, &cfg
->fc_src
, cfg
->fc_src_len
);
1200 rt
->rt6i_src
.plen
= cfg
->fc_src_len
;
1203 rt
->rt6i_metric
= cfg
->fc_metric
;
1205 /* We cannot add true routes via loopback here,
1206 they would result in kernel looping; promote them to reject routes
1208 if ((cfg
->fc_flags
& RTF_REJECT
) ||
1209 (dev
&& (dev
->flags
&IFF_LOOPBACK
) && !(addr_type
&IPV6_ADDR_LOOPBACK
)
1210 && !(cfg
->fc_flags
&RTF_LOCAL
))) {
1211 /* hold loopback dev/idev if we haven't done so. */
1212 if (dev
!= net
->loopback_dev
) {
1217 dev
= net
->loopback_dev
;
1219 idev
= in6_dev_get(dev
);
1225 rt
->dst
.output
= ip6_pkt_discard_out
;
1226 rt
->dst
.input
= ip6_pkt_discard
;
1227 rt
->dst
.error
= -ENETUNREACH
;
1228 rt
->rt6i_flags
= RTF_REJECT
|RTF_NONEXTHOP
;
1232 if (cfg
->fc_flags
& RTF_GATEWAY
) {
1233 struct in6_addr
*gw_addr
;
1236 gw_addr
= &cfg
->fc_gateway
;
1237 ipv6_addr_copy(&rt
->rt6i_gateway
, gw_addr
);
1238 gwa_type
= ipv6_addr_type(gw_addr
);
1240 if (gwa_type
!= (IPV6_ADDR_LINKLOCAL
|IPV6_ADDR_UNICAST
)) {
1241 struct rt6_info
*grt
;
1243 /* IPv6 strictly inhibits using not link-local
1244 addresses as nexthop address.
1245 Otherwise, router will not able to send redirects.
1246 It is very good, but in some (rare!) circumstances
1247 (SIT, PtP, NBMA NOARP links) it is handy to allow
1248 some exceptions. --ANK
1251 if (!(gwa_type
&IPV6_ADDR_UNICAST
))
1254 grt
= rt6_lookup(net
, gw_addr
, NULL
, cfg
->fc_ifindex
, 1);
1256 err
= -EHOSTUNREACH
;
1260 if (dev
!= grt
->rt6i_dev
) {
1261 dst_release(&grt
->dst
);
1265 dev
= grt
->rt6i_dev
;
1266 idev
= grt
->rt6i_idev
;
1268 in6_dev_hold(grt
->rt6i_idev
);
1270 if (!(grt
->rt6i_flags
&RTF_GATEWAY
))
1272 dst_release(&grt
->dst
);
1278 if (dev
== NULL
|| (dev
->flags
&IFF_LOOPBACK
))
1286 if (cfg
->fc_flags
& (RTF_GATEWAY
| RTF_NONEXTHOP
)) {
1287 rt
->rt6i_nexthop
= __neigh_lookup_errno(&nd_tbl
, &rt
->rt6i_gateway
, dev
);
1288 if (IS_ERR(rt
->rt6i_nexthop
)) {
1289 err
= PTR_ERR(rt
->rt6i_nexthop
);
1290 rt
->rt6i_nexthop
= NULL
;
1295 rt
->rt6i_flags
= cfg
->fc_flags
;
1302 nla_for_each_attr(nla
, cfg
->fc_mx
, cfg
->fc_mx_len
, remaining
) {
1303 int type
= nla_type(nla
);
1306 if (type
> RTAX_MAX
) {
1311 dst_metric_set(&rt
->dst
, type
, nla_get_u32(nla
));
1317 rt
->rt6i_idev
= idev
;
1318 rt
->rt6i_table
= table
;
1320 cfg
->fc_nlinfo
.nl_net
= dev_net(dev
);
1322 return __ip6_ins_rt(rt
, &cfg
->fc_nlinfo
);
1334 static int __ip6_del_rt(struct rt6_info
*rt
, struct nl_info
*info
)
1337 struct fib6_table
*table
;
1338 struct net
*net
= dev_net(rt
->rt6i_dev
);
1340 if (rt
== net
->ipv6
.ip6_null_entry
)
1343 table
= rt
->rt6i_table
;
1344 write_lock_bh(&table
->tb6_lock
);
1346 err
= fib6_del(rt
, info
);
1347 dst_release(&rt
->dst
);
1349 write_unlock_bh(&table
->tb6_lock
);
1354 int ip6_del_rt(struct rt6_info
*rt
)
1356 struct nl_info info
= {
1357 .nl_net
= dev_net(rt
->rt6i_dev
),
1359 return __ip6_del_rt(rt
, &info
);
1362 static int ip6_route_del(struct fib6_config
*cfg
)
1364 struct fib6_table
*table
;
1365 struct fib6_node
*fn
;
1366 struct rt6_info
*rt
;
1369 table
= fib6_get_table(cfg
->fc_nlinfo
.nl_net
, cfg
->fc_table
);
1373 read_lock_bh(&table
->tb6_lock
);
1375 fn
= fib6_locate(&table
->tb6_root
,
1376 &cfg
->fc_dst
, cfg
->fc_dst_len
,
1377 &cfg
->fc_src
, cfg
->fc_src_len
);
1380 for (rt
= fn
->leaf
; rt
; rt
= rt
->dst
.rt6_next
) {
1381 if (cfg
->fc_ifindex
&&
1382 (rt
->rt6i_dev
== NULL
||
1383 rt
->rt6i_dev
->ifindex
!= cfg
->fc_ifindex
))
1385 if (cfg
->fc_flags
& RTF_GATEWAY
&&
1386 !ipv6_addr_equal(&cfg
->fc_gateway
, &rt
->rt6i_gateway
))
1388 if (cfg
->fc_metric
&& cfg
->fc_metric
!= rt
->rt6i_metric
)
1391 read_unlock_bh(&table
->tb6_lock
);
1393 return __ip6_del_rt(rt
, &cfg
->fc_nlinfo
);
1396 read_unlock_bh(&table
->tb6_lock
);
1404 struct ip6rd_flowi
{
1406 struct in6_addr gateway
;
1409 static struct rt6_info
*__ip6_route_redirect(struct net
*net
,
1410 struct fib6_table
*table
,
1414 struct ip6rd_flowi
*rdfl
= (struct ip6rd_flowi
*)fl
;
1415 struct rt6_info
*rt
;
1416 struct fib6_node
*fn
;
1419 * Get the "current" route for this destination and
1420 * check if the redirect has come from approriate router.
1422 * RFC 2461 specifies that redirects should only be
1423 * accepted if they come from the nexthop to the target.
1424 * Due to the way the routes are chosen, this notion
1425 * is a bit fuzzy and one might need to check all possible
1429 read_lock_bh(&table
->tb6_lock
);
1430 fn
= fib6_lookup(&table
->tb6_root
, &fl
->fl6_dst
, &fl
->fl6_src
);
1432 for (rt
= fn
->leaf
; rt
; rt
= rt
->dst
.rt6_next
) {
1434 * Current route is on-link; redirect is always invalid.
1436 * Seems, previous statement is not true. It could
1437 * be node, which looks for us as on-link (f.e. proxy ndisc)
1438 * But then router serving it might decide, that we should
1439 * know truth 8)8) --ANK (980726).
1441 if (rt6_check_expired(rt
))
1443 if (!(rt
->rt6i_flags
& RTF_GATEWAY
))
1445 if (fl
->oif
!= rt
->rt6i_dev
->ifindex
)
1447 if (!ipv6_addr_equal(&rdfl
->gateway
, &rt
->rt6i_gateway
))
1453 rt
= net
->ipv6
.ip6_null_entry
;
1454 BACKTRACK(net
, &fl
->fl6_src
);
1458 read_unlock_bh(&table
->tb6_lock
);
1463 static struct rt6_info
*ip6_route_redirect(struct in6_addr
*dest
,
1464 struct in6_addr
*src
,
1465 struct in6_addr
*gateway
,
1466 struct net_device
*dev
)
1468 int flags
= RT6_LOOKUP_F_HAS_SADDR
;
1469 struct net
*net
= dev_net(dev
);
1470 struct ip6rd_flowi rdfl
= {
1472 .oif
= dev
->ifindex
,
1478 ipv6_addr_copy(&rdfl
.gateway
, gateway
);
1480 if (rt6_need_strict(dest
))
1481 flags
|= RT6_LOOKUP_F_IFACE
;
1483 return (struct rt6_info
*)fib6_rule_lookup(net
, (struct flowi
*)&rdfl
,
1484 flags
, __ip6_route_redirect
);
1487 void rt6_redirect(struct in6_addr
*dest
, struct in6_addr
*src
,
1488 struct in6_addr
*saddr
,
1489 struct neighbour
*neigh
, u8
*lladdr
, int on_link
)
1491 struct rt6_info
*rt
, *nrt
= NULL
;
1492 struct netevent_redirect netevent
;
1493 struct net
*net
= dev_net(neigh
->dev
);
1495 rt
= ip6_route_redirect(dest
, src
, saddr
, neigh
->dev
);
1497 if (rt
== net
->ipv6
.ip6_null_entry
) {
1498 if (net_ratelimit())
1499 printk(KERN_DEBUG
"rt6_redirect: source isn't a valid nexthop "
1500 "for redirect target\n");
1505 * We have finally decided to accept it.
1508 neigh_update(neigh
, lladdr
, NUD_STALE
,
1509 NEIGH_UPDATE_F_WEAK_OVERRIDE
|
1510 NEIGH_UPDATE_F_OVERRIDE
|
1511 (on_link
? 0 : (NEIGH_UPDATE_F_OVERRIDE_ISROUTER
|
1512 NEIGH_UPDATE_F_ISROUTER
))
1516 * Redirect received -> path was valid.
1517 * Look, redirects are sent only in response to data packets,
1518 * so that this nexthop apparently is reachable. --ANK
1520 dst_confirm(&rt
->dst
);
1522 /* Duplicate redirect: silently ignore. */
1523 if (neigh
== rt
->dst
.neighbour
)
1526 nrt
= ip6_rt_copy(rt
);
1530 nrt
->rt6i_flags
= RTF_GATEWAY
|RTF_UP
|RTF_DYNAMIC
|RTF_CACHE
;
1532 nrt
->rt6i_flags
&= ~RTF_GATEWAY
;
1534 ipv6_addr_copy(&nrt
->rt6i_dst
.addr
, dest
);
1535 nrt
->rt6i_dst
.plen
= 128;
1536 nrt
->dst
.flags
|= DST_HOST
;
1538 ipv6_addr_copy(&nrt
->rt6i_gateway
, (struct in6_addr
*)neigh
->primary_key
);
1539 nrt
->rt6i_nexthop
= neigh_clone(neigh
);
1541 if (ip6_ins_rt(nrt
))
1544 netevent
.old
= &rt
->dst
;
1545 netevent
.new = &nrt
->dst
;
1546 call_netevent_notifiers(NETEVENT_REDIRECT
, &netevent
);
1548 if (rt
->rt6i_flags
&RTF_CACHE
) {
1554 dst_release(&rt
->dst
);
1558 * Handle ICMP "packet too big" messages
1559 * i.e. Path MTU discovery
1562 static void rt6_do_pmtu_disc(struct in6_addr
*daddr
, struct in6_addr
*saddr
,
1563 struct net
*net
, u32 pmtu
, int ifindex
)
1565 struct rt6_info
*rt
, *nrt
;
1568 rt
= rt6_lookup(net
, daddr
, saddr
, ifindex
, 0);
1572 if (rt6_check_expired(rt
)) {
1577 if (pmtu
>= dst_mtu(&rt
->dst
))
1580 if (pmtu
< IPV6_MIN_MTU
) {
1582 * According to RFC2460, PMTU is set to the IPv6 Minimum Link
1583 * MTU (1280) and a fragment header should always be included
1584 * after a node receiving Too Big message reporting PMTU is
1585 * less than the IPv6 Minimum Link MTU.
1587 pmtu
= IPV6_MIN_MTU
;
1591 /* New mtu received -> path was valid.
1592 They are sent only in response to data packets,
1593 so that this nexthop apparently is reachable. --ANK
1595 dst_confirm(&rt
->dst
);
1597 /* Host route. If it is static, it would be better
1598 not to override it, but add new one, so that
1599 when cache entry will expire old pmtu
1600 would return automatically.
1602 if (rt
->rt6i_flags
& RTF_CACHE
) {
1603 dst_metric_set(&rt
->dst
, RTAX_MTU
, pmtu
);
1605 u32 features
= dst_metric(&rt
->dst
, RTAX_FEATURES
);
1606 features
|= RTAX_FEATURE_ALLFRAG
;
1607 dst_metric_set(&rt
->dst
, RTAX_FEATURES
, features
);
1609 dst_set_expires(&rt
->dst
, net
->ipv6
.sysctl
.ip6_rt_mtu_expires
);
1610 rt
->rt6i_flags
|= RTF_MODIFIED
|RTF_EXPIRES
;
1615 Two cases are possible:
1616 1. It is connected route. Action: COW
1617 2. It is gatewayed route or NONEXTHOP route. Action: clone it.
1619 if (!rt
->rt6i_nexthop
&& !(rt
->rt6i_flags
& RTF_NONEXTHOP
))
1620 nrt
= rt6_alloc_cow(rt
, daddr
, saddr
);
1622 nrt
= rt6_alloc_clone(rt
, daddr
);
1625 dst_metric_set(&nrt
->dst
, RTAX_MTU
, pmtu
);
1627 u32 features
= dst_metric(&nrt
->dst
, RTAX_FEATURES
);
1628 features
|= RTAX_FEATURE_ALLFRAG
;
1629 dst_metric_set(&nrt
->dst
, RTAX_FEATURES
, features
);
1632 /* According to RFC 1981, detecting PMTU increase shouldn't be
1633 * happened within 5 mins, the recommended timer is 10 mins.
1634 * Here this route expiration time is set to ip6_rt_mtu_expires
1635 * which is 10 mins. After 10 mins the decreased pmtu is expired
1636 * and detecting PMTU increase will be automatically happened.
1638 dst_set_expires(&nrt
->dst
, net
->ipv6
.sysctl
.ip6_rt_mtu_expires
);
1639 nrt
->rt6i_flags
|= RTF_DYNAMIC
|RTF_EXPIRES
;
1644 dst_release(&rt
->dst
);
1647 void rt6_pmtu_discovery(struct in6_addr
*daddr
, struct in6_addr
*saddr
,
1648 struct net_device
*dev
, u32 pmtu
)
1650 struct net
*net
= dev_net(dev
);
1653 * RFC 1981 states that a node "MUST reduce the size of the packets it
1654 * is sending along the path" that caused the Packet Too Big message.
1655 * Since it's not possible in the general case to determine which
1656 * interface was used to send the original packet, we update the MTU
1657 * on the interface that will be used to send future packets. We also
1658 * update the MTU on the interface that received the Packet Too Big in
1659 * case the original packet was forced out that interface with
1660 * SO_BINDTODEVICE or similar. This is the next best thing to the
1661 * correct behaviour, which would be to update the MTU on all
1664 rt6_do_pmtu_disc(daddr
, saddr
, net
, pmtu
, 0);
1665 rt6_do_pmtu_disc(daddr
, saddr
, net
, pmtu
, dev
->ifindex
);
1669 * Misc support functions
1672 static struct rt6_info
* ip6_rt_copy(struct rt6_info
*ort
)
1674 struct net
*net
= dev_net(ort
->rt6i_dev
);
1675 struct rt6_info
*rt
= ip6_dst_alloc(&net
->ipv6
.ip6_dst_ops
);
1678 rt
->dst
.input
= ort
->dst
.input
;
1679 rt
->dst
.output
= ort
->dst
.output
;
1681 dst_copy_metrics(&rt
->dst
, &ort
->dst
);
1682 rt
->dst
.error
= ort
->dst
.error
;
1683 rt
->dst
.dev
= ort
->dst
.dev
;
1685 dev_hold(rt
->dst
.dev
);
1686 rt
->rt6i_idev
= ort
->rt6i_idev
;
1688 in6_dev_hold(rt
->rt6i_idev
);
1689 rt
->dst
.lastuse
= jiffies
;
1690 rt
->rt6i_expires
= 0;
1692 ipv6_addr_copy(&rt
->rt6i_gateway
, &ort
->rt6i_gateway
);
1693 rt
->rt6i_flags
= ort
->rt6i_flags
& ~RTF_EXPIRES
;
1694 rt
->rt6i_metric
= 0;
1696 memcpy(&rt
->rt6i_dst
, &ort
->rt6i_dst
, sizeof(struct rt6key
));
1697 #ifdef CONFIG_IPV6_SUBTREES
1698 memcpy(&rt
->rt6i_src
, &ort
->rt6i_src
, sizeof(struct rt6key
));
1700 rt
->rt6i_table
= ort
->rt6i_table
;
1705 #ifdef CONFIG_IPV6_ROUTE_INFO
1706 static struct rt6_info
*rt6_get_route_info(struct net
*net
,
1707 struct in6_addr
*prefix
, int prefixlen
,
1708 struct in6_addr
*gwaddr
, int ifindex
)
1710 struct fib6_node
*fn
;
1711 struct rt6_info
*rt
= NULL
;
1712 struct fib6_table
*table
;
1714 table
= fib6_get_table(net
, RT6_TABLE_INFO
);
1718 write_lock_bh(&table
->tb6_lock
);
1719 fn
= fib6_locate(&table
->tb6_root
, prefix
,prefixlen
, NULL
, 0);
1723 for (rt
= fn
->leaf
; rt
; rt
= rt
->dst
.rt6_next
) {
1724 if (rt
->rt6i_dev
->ifindex
!= ifindex
)
1726 if ((rt
->rt6i_flags
& (RTF_ROUTEINFO
|RTF_GATEWAY
)) != (RTF_ROUTEINFO
|RTF_GATEWAY
))
1728 if (!ipv6_addr_equal(&rt
->rt6i_gateway
, gwaddr
))
1734 write_unlock_bh(&table
->tb6_lock
);
1738 static struct rt6_info
*rt6_add_route_info(struct net
*net
,
1739 struct in6_addr
*prefix
, int prefixlen
,
1740 struct in6_addr
*gwaddr
, int ifindex
,
1743 struct fib6_config cfg
= {
1744 .fc_table
= RT6_TABLE_INFO
,
1745 .fc_metric
= IP6_RT_PRIO_USER
,
1746 .fc_ifindex
= ifindex
,
1747 .fc_dst_len
= prefixlen
,
1748 .fc_flags
= RTF_GATEWAY
| RTF_ADDRCONF
| RTF_ROUTEINFO
|
1749 RTF_UP
| RTF_PREF(pref
),
1751 .fc_nlinfo
.nlh
= NULL
,
1752 .fc_nlinfo
.nl_net
= net
,
1755 ipv6_addr_copy(&cfg
.fc_dst
, prefix
);
1756 ipv6_addr_copy(&cfg
.fc_gateway
, gwaddr
);
1758 /* We should treat it as a default route if prefix length is 0. */
1760 cfg
.fc_flags
|= RTF_DEFAULT
;
1762 ip6_route_add(&cfg
);
1764 return rt6_get_route_info(net
, prefix
, prefixlen
, gwaddr
, ifindex
);
1768 struct rt6_info
*rt6_get_dflt_router(struct in6_addr
*addr
, struct net_device
*dev
)
1770 struct rt6_info
*rt
;
1771 struct fib6_table
*table
;
1773 table
= fib6_get_table(dev_net(dev
), RT6_TABLE_DFLT
);
1777 write_lock_bh(&table
->tb6_lock
);
1778 for (rt
= table
->tb6_root
.leaf
; rt
; rt
=rt
->dst
.rt6_next
) {
1779 if (dev
== rt
->rt6i_dev
&&
1780 ((rt
->rt6i_flags
& (RTF_ADDRCONF
| RTF_DEFAULT
)) == (RTF_ADDRCONF
| RTF_DEFAULT
)) &&
1781 ipv6_addr_equal(&rt
->rt6i_gateway
, addr
))
1786 write_unlock_bh(&table
->tb6_lock
);
1790 struct rt6_info
*rt6_add_dflt_router(struct in6_addr
*gwaddr
,
1791 struct net_device
*dev
,
1794 struct fib6_config cfg
= {
1795 .fc_table
= RT6_TABLE_DFLT
,
1796 .fc_metric
= IP6_RT_PRIO_USER
,
1797 .fc_ifindex
= dev
->ifindex
,
1798 .fc_flags
= RTF_GATEWAY
| RTF_ADDRCONF
| RTF_DEFAULT
|
1799 RTF_UP
| RTF_EXPIRES
| RTF_PREF(pref
),
1801 .fc_nlinfo
.nlh
= NULL
,
1802 .fc_nlinfo
.nl_net
= dev_net(dev
),
1805 ipv6_addr_copy(&cfg
.fc_gateway
, gwaddr
);
1807 ip6_route_add(&cfg
);
1809 return rt6_get_dflt_router(gwaddr
, dev
);
1812 void rt6_purge_dflt_routers(struct net
*net
)
1814 struct rt6_info
*rt
;
1815 struct fib6_table
*table
;
1817 /* NOTE: Keep consistent with rt6_get_dflt_router */
1818 table
= fib6_get_table(net
, RT6_TABLE_DFLT
);
1823 read_lock_bh(&table
->tb6_lock
);
1824 for (rt
= table
->tb6_root
.leaf
; rt
; rt
= rt
->dst
.rt6_next
) {
1825 if (rt
->rt6i_flags
& (RTF_DEFAULT
| RTF_ADDRCONF
)) {
1827 read_unlock_bh(&table
->tb6_lock
);
1832 read_unlock_bh(&table
->tb6_lock
);
1835 static void rtmsg_to_fib6_config(struct net
*net
,
1836 struct in6_rtmsg
*rtmsg
,
1837 struct fib6_config
*cfg
)
1839 memset(cfg
, 0, sizeof(*cfg
));
1841 cfg
->fc_table
= RT6_TABLE_MAIN
;
1842 cfg
->fc_ifindex
= rtmsg
->rtmsg_ifindex
;
1843 cfg
->fc_metric
= rtmsg
->rtmsg_metric
;
1844 cfg
->fc_expires
= rtmsg
->rtmsg_info
;
1845 cfg
->fc_dst_len
= rtmsg
->rtmsg_dst_len
;
1846 cfg
->fc_src_len
= rtmsg
->rtmsg_src_len
;
1847 cfg
->fc_flags
= rtmsg
->rtmsg_flags
;
1849 cfg
->fc_nlinfo
.nl_net
= net
;
1851 ipv6_addr_copy(&cfg
->fc_dst
, &rtmsg
->rtmsg_dst
);
1852 ipv6_addr_copy(&cfg
->fc_src
, &rtmsg
->rtmsg_src
);
1853 ipv6_addr_copy(&cfg
->fc_gateway
, &rtmsg
->rtmsg_gateway
);
1856 int ipv6_route_ioctl(struct net
*net
, unsigned int cmd
, void __user
*arg
)
1858 struct fib6_config cfg
;
1859 struct in6_rtmsg rtmsg
;
1863 case SIOCADDRT
: /* Add a route */
1864 case SIOCDELRT
: /* Delete a route */
1865 if (!capable(CAP_NET_ADMIN
))
1867 err
= copy_from_user(&rtmsg
, arg
,
1868 sizeof(struct in6_rtmsg
));
1872 rtmsg_to_fib6_config(net
, &rtmsg
, &cfg
);
1877 err
= ip6_route_add(&cfg
);
1880 err
= ip6_route_del(&cfg
);
1894 * Drop the packet on the floor
1897 static int ip6_pkt_drop(struct sk_buff
*skb
, u8 code
, int ipstats_mib_noroutes
)
1900 struct dst_entry
*dst
= skb_dst(skb
);
1901 switch (ipstats_mib_noroutes
) {
1902 case IPSTATS_MIB_INNOROUTES
:
1903 type
= ipv6_addr_type(&ipv6_hdr(skb
)->daddr
);
1904 if (type
== IPV6_ADDR_ANY
) {
1905 IP6_INC_STATS(dev_net(dst
->dev
), ip6_dst_idev(dst
),
1906 IPSTATS_MIB_INADDRERRORS
);
1910 case IPSTATS_MIB_OUTNOROUTES
:
1911 IP6_INC_STATS(dev_net(dst
->dev
), ip6_dst_idev(dst
),
1912 ipstats_mib_noroutes
);
1915 icmpv6_send(skb
, ICMPV6_DEST_UNREACH
, code
, 0);
1920 static int ip6_pkt_discard(struct sk_buff
*skb
)
1922 return ip6_pkt_drop(skb
, ICMPV6_NOROUTE
, IPSTATS_MIB_INNOROUTES
);
1925 static int ip6_pkt_discard_out(struct sk_buff
*skb
)
1927 skb
->dev
= skb_dst(skb
)->dev
;
1928 return ip6_pkt_drop(skb
, ICMPV6_NOROUTE
, IPSTATS_MIB_OUTNOROUTES
);
1931 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
1933 static int ip6_pkt_prohibit(struct sk_buff
*skb
)
1935 return ip6_pkt_drop(skb
, ICMPV6_ADM_PROHIBITED
, IPSTATS_MIB_INNOROUTES
);
1938 static int ip6_pkt_prohibit_out(struct sk_buff
*skb
)
1940 skb
->dev
= skb_dst(skb
)->dev
;
1941 return ip6_pkt_drop(skb
, ICMPV6_ADM_PROHIBITED
, IPSTATS_MIB_OUTNOROUTES
);
1947 * Allocate a dst for local (unicast / anycast) address.
1950 struct rt6_info
*addrconf_dst_alloc(struct inet6_dev
*idev
,
1951 const struct in6_addr
*addr
,
1954 struct net
*net
= dev_net(idev
->dev
);
1955 struct rt6_info
*rt
= ip6_dst_alloc(&net
->ipv6
.ip6_dst_ops
);
1956 struct neighbour
*neigh
;
1959 if (net_ratelimit())
1960 pr_warning("IPv6: Maximum number of routes reached,"
1961 " consider increasing route/max_size.\n");
1962 return ERR_PTR(-ENOMEM
);
1965 dev_hold(net
->loopback_dev
);
1968 rt
->dst
.flags
= DST_HOST
;
1969 rt
->dst
.input
= ip6_input
;
1970 rt
->dst
.output
= ip6_output
;
1971 rt
->rt6i_dev
= net
->loopback_dev
;
1972 rt
->rt6i_idev
= idev
;
1973 dst_metric_set(&rt
->dst
, RTAX_HOPLIMIT
, -1);
1974 rt
->dst
.obsolete
= -1;
1976 rt
->rt6i_flags
= RTF_UP
| RTF_NONEXTHOP
;
1978 rt
->rt6i_flags
|= RTF_ANYCAST
;
1980 rt
->rt6i_flags
|= RTF_LOCAL
;
1981 neigh
= ndisc_get_neigh(rt
->rt6i_dev
, &rt
->rt6i_gateway
);
1982 if (IS_ERR(neigh
)) {
1985 /* We are casting this because that is the return
1986 * value type. But an errno encoded pointer is the
1987 * same regardless of the underlying pointer type,
1988 * and that's what we are returning. So this is OK.
1990 return (struct rt6_info
*) neigh
;
1992 rt
->rt6i_nexthop
= neigh
;
1994 ipv6_addr_copy(&rt
->rt6i_dst
.addr
, addr
);
1995 rt
->rt6i_dst
.plen
= 128;
1996 rt
->rt6i_table
= fib6_get_table(net
, RT6_TABLE_LOCAL
);
1998 atomic_set(&rt
->dst
.__refcnt
, 1);
2003 struct arg_dev_net
{
2004 struct net_device
*dev
;
2008 static int fib6_ifdown(struct rt6_info
*rt
, void *arg
)
2010 const struct arg_dev_net
*adn
= arg
;
2011 const struct net_device
*dev
= adn
->dev
;
2013 if ((rt
->rt6i_dev
== dev
|| dev
== NULL
) &&
2014 rt
!= adn
->net
->ipv6
.ip6_null_entry
) {
2015 RT6_TRACE("deleted by ifdown %p\n", rt
);
2021 void rt6_ifdown(struct net
*net
, struct net_device
*dev
)
2023 struct arg_dev_net adn
= {
2028 fib6_clean_all(net
, fib6_ifdown
, 0, &adn
);
2029 icmp6_clean_all(fib6_ifdown
, &adn
);
2032 struct rt6_mtu_change_arg
2034 struct net_device
*dev
;
2038 static int rt6_mtu_change_route(struct rt6_info
*rt
, void *p_arg
)
2040 struct rt6_mtu_change_arg
*arg
= (struct rt6_mtu_change_arg
*) p_arg
;
2041 struct inet6_dev
*idev
;
2043 /* In IPv6 pmtu discovery is not optional,
2044 so that RTAX_MTU lock cannot disable it.
2045 We still use this lock to block changes
2046 caused by addrconf/ndisc.
2049 idev
= __in6_dev_get(arg
->dev
);
2053 /* For administrative MTU increase, there is no way to discover
2054 IPv6 PMTU increase, so PMTU increase should be updated here.
2055 Since RFC 1981 doesn't include administrative MTU increase
2056 update PMTU increase is a MUST. (i.e. jumbo frame)
2059 If new MTU is less than route PMTU, this new MTU will be the
2060 lowest MTU in the path, update the route PMTU to reflect PMTU
2061 decreases; if new MTU is greater than route PMTU, and the
2062 old MTU is the lowest MTU in the path, update the route PMTU
2063 to reflect the increase. In this case if the other nodes' MTU
2064 also have the lowest MTU, TOO BIG MESSAGE will be lead to
2067 if (rt
->rt6i_dev
== arg
->dev
&&
2068 !dst_metric_locked(&rt
->dst
, RTAX_MTU
) &&
2069 (dst_mtu(&rt
->dst
) >= arg
->mtu
||
2070 (dst_mtu(&rt
->dst
) < arg
->mtu
&&
2071 dst_mtu(&rt
->dst
) == idev
->cnf
.mtu6
))) {
2072 dst_metric_set(&rt
->dst
, RTAX_MTU
, arg
->mtu
);
2077 void rt6_mtu_change(struct net_device
*dev
, unsigned mtu
)
2079 struct rt6_mtu_change_arg arg
= {
2084 fib6_clean_all(dev_net(dev
), rt6_mtu_change_route
, 0, &arg
);
2087 static const struct nla_policy rtm_ipv6_policy
[RTA_MAX
+1] = {
2088 [RTA_GATEWAY
] = { .len
= sizeof(struct in6_addr
) },
2089 [RTA_OIF
] = { .type
= NLA_U32
},
2090 [RTA_IIF
] = { .type
= NLA_U32
},
2091 [RTA_PRIORITY
] = { .type
= NLA_U32
},
2092 [RTA_METRICS
] = { .type
= NLA_NESTED
},
2095 static int rtm_to_fib6_config(struct sk_buff
*skb
, struct nlmsghdr
*nlh
,
2096 struct fib6_config
*cfg
)
2099 struct nlattr
*tb
[RTA_MAX
+1];
2102 err
= nlmsg_parse(nlh
, sizeof(*rtm
), tb
, RTA_MAX
, rtm_ipv6_policy
);
2107 rtm
= nlmsg_data(nlh
);
2108 memset(cfg
, 0, sizeof(*cfg
));
2110 cfg
->fc_table
= rtm
->rtm_table
;
2111 cfg
->fc_dst_len
= rtm
->rtm_dst_len
;
2112 cfg
->fc_src_len
= rtm
->rtm_src_len
;
2113 cfg
->fc_flags
= RTF_UP
;
2114 cfg
->fc_protocol
= rtm
->rtm_protocol
;
2116 if (rtm
->rtm_type
== RTN_UNREACHABLE
)
2117 cfg
->fc_flags
|= RTF_REJECT
;
2119 if (rtm
->rtm_type
== RTN_LOCAL
)
2120 cfg
->fc_flags
|= RTF_LOCAL
;
2122 cfg
->fc_nlinfo
.pid
= NETLINK_CB(skb
).pid
;
2123 cfg
->fc_nlinfo
.nlh
= nlh
;
2124 cfg
->fc_nlinfo
.nl_net
= sock_net(skb
->sk
);
2126 if (tb
[RTA_GATEWAY
]) {
2127 nla_memcpy(&cfg
->fc_gateway
, tb
[RTA_GATEWAY
], 16);
2128 cfg
->fc_flags
|= RTF_GATEWAY
;
2132 int plen
= (rtm
->rtm_dst_len
+ 7) >> 3;
2134 if (nla_len(tb
[RTA_DST
]) < plen
)
2137 nla_memcpy(&cfg
->fc_dst
, tb
[RTA_DST
], plen
);
2141 int plen
= (rtm
->rtm_src_len
+ 7) >> 3;
2143 if (nla_len(tb
[RTA_SRC
]) < plen
)
2146 nla_memcpy(&cfg
->fc_src
, tb
[RTA_SRC
], plen
);
2150 cfg
->fc_ifindex
= nla_get_u32(tb
[RTA_OIF
]);
2152 if (tb
[RTA_PRIORITY
])
2153 cfg
->fc_metric
= nla_get_u32(tb
[RTA_PRIORITY
]);
2155 if (tb
[RTA_METRICS
]) {
2156 cfg
->fc_mx
= nla_data(tb
[RTA_METRICS
]);
2157 cfg
->fc_mx_len
= nla_len(tb
[RTA_METRICS
]);
2161 cfg
->fc_table
= nla_get_u32(tb
[RTA_TABLE
]);
2168 static int inet6_rtm_delroute(struct sk_buff
*skb
, struct nlmsghdr
* nlh
, void *arg
)
2170 struct fib6_config cfg
;
2173 err
= rtm_to_fib6_config(skb
, nlh
, &cfg
);
2177 return ip6_route_del(&cfg
);
2180 static int inet6_rtm_newroute(struct sk_buff
*skb
, struct nlmsghdr
* nlh
, void *arg
)
2182 struct fib6_config cfg
;
2185 err
= rtm_to_fib6_config(skb
, nlh
, &cfg
);
2189 return ip6_route_add(&cfg
);
2192 static inline size_t rt6_nlmsg_size(void)
2194 return NLMSG_ALIGN(sizeof(struct rtmsg
))
2195 + nla_total_size(16) /* RTA_SRC */
2196 + nla_total_size(16) /* RTA_DST */
2197 + nla_total_size(16) /* RTA_GATEWAY */
2198 + nla_total_size(16) /* RTA_PREFSRC */
2199 + nla_total_size(4) /* RTA_TABLE */
2200 + nla_total_size(4) /* RTA_IIF */
2201 + nla_total_size(4) /* RTA_OIF */
2202 + nla_total_size(4) /* RTA_PRIORITY */
2203 + RTAX_MAX
* nla_total_size(4) /* RTA_METRICS */
2204 + nla_total_size(sizeof(struct rta_cacheinfo
));
2207 static int rt6_fill_node(struct net
*net
,
2208 struct sk_buff
*skb
, struct rt6_info
*rt
,
2209 struct in6_addr
*dst
, struct in6_addr
*src
,
2210 int iif
, int type
, u32 pid
, u32 seq
,
2211 int prefix
, int nowait
, unsigned int flags
)
2214 struct nlmsghdr
*nlh
;
2218 if (prefix
) { /* user wants prefix routes only */
2219 if (!(rt
->rt6i_flags
& RTF_PREFIX_RT
)) {
2220 /* success since this is not a prefix route */
2225 nlh
= nlmsg_put(skb
, pid
, seq
, type
, sizeof(*rtm
), flags
);
2229 rtm
= nlmsg_data(nlh
);
2230 rtm
->rtm_family
= AF_INET6
;
2231 rtm
->rtm_dst_len
= rt
->rt6i_dst
.plen
;
2232 rtm
->rtm_src_len
= rt
->rt6i_src
.plen
;
2235 table
= rt
->rt6i_table
->tb6_id
;
2237 table
= RT6_TABLE_UNSPEC
;
2238 rtm
->rtm_table
= table
;
2239 NLA_PUT_U32(skb
, RTA_TABLE
, table
);
2240 if (rt
->rt6i_flags
&RTF_REJECT
)
2241 rtm
->rtm_type
= RTN_UNREACHABLE
;
2242 else if (rt
->rt6i_flags
&RTF_LOCAL
)
2243 rtm
->rtm_type
= RTN_LOCAL
;
2244 else if (rt
->rt6i_dev
&& (rt
->rt6i_dev
->flags
&IFF_LOOPBACK
))
2245 rtm
->rtm_type
= RTN_LOCAL
;
2247 rtm
->rtm_type
= RTN_UNICAST
;
2249 rtm
->rtm_scope
= RT_SCOPE_UNIVERSE
;
2250 rtm
->rtm_protocol
= rt
->rt6i_protocol
;
2251 if (rt
->rt6i_flags
&RTF_DYNAMIC
)
2252 rtm
->rtm_protocol
= RTPROT_REDIRECT
;
2253 else if (rt
->rt6i_flags
& RTF_ADDRCONF
)
2254 rtm
->rtm_protocol
= RTPROT_KERNEL
;
2255 else if (rt
->rt6i_flags
&RTF_DEFAULT
)
2256 rtm
->rtm_protocol
= RTPROT_RA
;
2258 if (rt
->rt6i_flags
&RTF_CACHE
)
2259 rtm
->rtm_flags
|= RTM_F_CLONED
;
2262 NLA_PUT(skb
, RTA_DST
, 16, dst
);
2263 rtm
->rtm_dst_len
= 128;
2264 } else if (rtm
->rtm_dst_len
)
2265 NLA_PUT(skb
, RTA_DST
, 16, &rt
->rt6i_dst
.addr
);
2266 #ifdef CONFIG_IPV6_SUBTREES
2268 NLA_PUT(skb
, RTA_SRC
, 16, src
);
2269 rtm
->rtm_src_len
= 128;
2270 } else if (rtm
->rtm_src_len
)
2271 NLA_PUT(skb
, RTA_SRC
, 16, &rt
->rt6i_src
.addr
);
2274 #ifdef CONFIG_IPV6_MROUTE
2275 if (ipv6_addr_is_multicast(&rt
->rt6i_dst
.addr
)) {
2276 int err
= ip6mr_get_route(net
, skb
, rtm
, nowait
);
2281 goto nla_put_failure
;
2283 if (err
== -EMSGSIZE
)
2284 goto nla_put_failure
;
2289 NLA_PUT_U32(skb
, RTA_IIF
, iif
);
2291 struct inet6_dev
*idev
= ip6_dst_idev(&rt
->dst
);
2292 struct in6_addr saddr_buf
;
2293 if (ipv6_dev_get_saddr(net
, idev
? idev
->dev
: NULL
,
2294 dst
, 0, &saddr_buf
) == 0)
2295 NLA_PUT(skb
, RTA_PREFSRC
, 16, &saddr_buf
);
2298 if (rtnetlink_put_metrics(skb
, dst_metrics_ptr(&rt
->dst
)) < 0)
2299 goto nla_put_failure
;
2301 if (rt
->dst
.neighbour
)
2302 NLA_PUT(skb
, RTA_GATEWAY
, 16, &rt
->dst
.neighbour
->primary_key
);
2305 NLA_PUT_U32(skb
, RTA_OIF
, rt
->rt6i_dev
->ifindex
);
2307 NLA_PUT_U32(skb
, RTA_PRIORITY
, rt
->rt6i_metric
);
2309 if (!(rt
->rt6i_flags
& RTF_EXPIRES
))
2311 else if (rt
->rt6i_expires
- jiffies
< INT_MAX
)
2312 expires
= rt
->rt6i_expires
- jiffies
;
2316 if (rtnl_put_cacheinfo(skb
, &rt
->dst
, 0, 0, 0,
2317 expires
, rt
->dst
.error
) < 0)
2318 goto nla_put_failure
;
2320 return nlmsg_end(skb
, nlh
);
2323 nlmsg_cancel(skb
, nlh
);
2327 int rt6_dump_route(struct rt6_info
*rt
, void *p_arg
)
2329 struct rt6_rtnl_dump_arg
*arg
= (struct rt6_rtnl_dump_arg
*) p_arg
;
2332 if (nlmsg_len(arg
->cb
->nlh
) >= sizeof(struct rtmsg
)) {
2333 struct rtmsg
*rtm
= nlmsg_data(arg
->cb
->nlh
);
2334 prefix
= (rtm
->rtm_flags
& RTM_F_PREFIX
) != 0;
2338 return rt6_fill_node(arg
->net
,
2339 arg
->skb
, rt
, NULL
, NULL
, 0, RTM_NEWROUTE
,
2340 NETLINK_CB(arg
->cb
->skb
).pid
, arg
->cb
->nlh
->nlmsg_seq
,
2341 prefix
, 0, NLM_F_MULTI
);
2344 static int inet6_rtm_getroute(struct sk_buff
*in_skb
, struct nlmsghdr
* nlh
, void *arg
)
2346 struct net
*net
= sock_net(in_skb
->sk
);
2347 struct nlattr
*tb
[RTA_MAX
+1];
2348 struct rt6_info
*rt
;
2349 struct sk_buff
*skb
;
2354 err
= nlmsg_parse(nlh
, sizeof(*rtm
), tb
, RTA_MAX
, rtm_ipv6_policy
);
2359 memset(&fl
, 0, sizeof(fl
));
2362 if (nla_len(tb
[RTA_SRC
]) < sizeof(struct in6_addr
))
2365 ipv6_addr_copy(&fl
.fl6_src
, nla_data(tb
[RTA_SRC
]));
2369 if (nla_len(tb
[RTA_DST
]) < sizeof(struct in6_addr
))
2372 ipv6_addr_copy(&fl
.fl6_dst
, nla_data(tb
[RTA_DST
]));
2376 iif
= nla_get_u32(tb
[RTA_IIF
]);
2379 fl
.oif
= nla_get_u32(tb
[RTA_OIF
]);
2382 struct net_device
*dev
;
2383 dev
= __dev_get_by_index(net
, iif
);
2390 skb
= alloc_skb(NLMSG_GOODSIZE
, GFP_KERNEL
);
2396 /* Reserve room for dummy headers, this skb can pass
2397 through good chunk of routing engine.
2399 skb_reset_mac_header(skb
);
2400 skb_reserve(skb
, MAX_HEADER
+ sizeof(struct ipv6hdr
));
2402 rt
= (struct rt6_info
*) ip6_route_output(net
, NULL
, &fl
);
2403 skb_dst_set(skb
, &rt
->dst
);
2405 err
= rt6_fill_node(net
, skb
, rt
, &fl
.fl6_dst
, &fl
.fl6_src
, iif
,
2406 RTM_NEWROUTE
, NETLINK_CB(in_skb
).pid
,
2407 nlh
->nlmsg_seq
, 0, 0, 0);
2413 err
= rtnl_unicast(skb
, net
, NETLINK_CB(in_skb
).pid
);
2418 void inet6_rt_notify(int event
, struct rt6_info
*rt
, struct nl_info
*info
)
2420 struct sk_buff
*skb
;
2421 struct net
*net
= info
->nl_net
;
2426 seq
= info
->nlh
!= NULL
? info
->nlh
->nlmsg_seq
: 0;
2428 skb
= nlmsg_new(rt6_nlmsg_size(), gfp_any());
2432 err
= rt6_fill_node(net
, skb
, rt
, NULL
, NULL
, 0,
2433 event
, info
->pid
, seq
, 0, 0, 0);
2435 /* -EMSGSIZE implies BUG in rt6_nlmsg_size() */
2436 WARN_ON(err
== -EMSGSIZE
);
2440 rtnl_notify(skb
, net
, info
->pid
, RTNLGRP_IPV6_ROUTE
,
2441 info
->nlh
, gfp_any());
2445 rtnl_set_sk_err(net
, RTNLGRP_IPV6_ROUTE
, err
);
2448 static int ip6_route_dev_notify(struct notifier_block
*this,
2449 unsigned long event
, void *data
)
2451 struct net_device
*dev
= (struct net_device
*)data
;
2452 struct net
*net
= dev_net(dev
);
2454 if (event
== NETDEV_REGISTER
&& (dev
->flags
& IFF_LOOPBACK
)) {
2455 net
->ipv6
.ip6_null_entry
->dst
.dev
= dev
;
2456 net
->ipv6
.ip6_null_entry
->rt6i_idev
= in6_dev_get(dev
);
2457 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
2458 net
->ipv6
.ip6_prohibit_entry
->dst
.dev
= dev
;
2459 net
->ipv6
.ip6_prohibit_entry
->rt6i_idev
= in6_dev_get(dev
);
2460 net
->ipv6
.ip6_blk_hole_entry
->dst
.dev
= dev
;
2461 net
->ipv6
.ip6_blk_hole_entry
->rt6i_idev
= in6_dev_get(dev
);
2472 #ifdef CONFIG_PROC_FS
2483 static int rt6_info_route(struct rt6_info
*rt
, void *p_arg
)
2485 struct seq_file
*m
= p_arg
;
2487 seq_printf(m
, "%pi6 %02x ", &rt
->rt6i_dst
.addr
, rt
->rt6i_dst
.plen
);
2489 #ifdef CONFIG_IPV6_SUBTREES
2490 seq_printf(m
, "%pi6 %02x ", &rt
->rt6i_src
.addr
, rt
->rt6i_src
.plen
);
2492 seq_puts(m
, "00000000000000000000000000000000 00 ");
2495 if (rt
->rt6i_nexthop
) {
2496 seq_printf(m
, "%pi6", rt
->rt6i_nexthop
->primary_key
);
2498 seq_puts(m
, "00000000000000000000000000000000");
2500 seq_printf(m
, " %08x %08x %08x %08x %8s\n",
2501 rt
->rt6i_metric
, atomic_read(&rt
->dst
.__refcnt
),
2502 rt
->dst
.__use
, rt
->rt6i_flags
,
2503 rt
->rt6i_dev
? rt
->rt6i_dev
->name
: "");
2507 static int ipv6_route_show(struct seq_file
*m
, void *v
)
2509 struct net
*net
= (struct net
*)m
->private;
2510 fib6_clean_all(net
, rt6_info_route
, 0, m
);
2514 static int ipv6_route_open(struct inode
*inode
, struct file
*file
)
2516 return single_open_net(inode
, file
, ipv6_route_show
);
2519 static const struct file_operations ipv6_route_proc_fops
= {
2520 .owner
= THIS_MODULE
,
2521 .open
= ipv6_route_open
,
2523 .llseek
= seq_lseek
,
2524 .release
= single_release_net
,
2527 static int rt6_stats_seq_show(struct seq_file
*seq
, void *v
)
2529 struct net
*net
= (struct net
*)seq
->private;
2530 seq_printf(seq
, "%04x %04x %04x %04x %04x %04x %04x\n",
2531 net
->ipv6
.rt6_stats
->fib_nodes
,
2532 net
->ipv6
.rt6_stats
->fib_route_nodes
,
2533 net
->ipv6
.rt6_stats
->fib_rt_alloc
,
2534 net
->ipv6
.rt6_stats
->fib_rt_entries
,
2535 net
->ipv6
.rt6_stats
->fib_rt_cache
,
2536 dst_entries_get_slow(&net
->ipv6
.ip6_dst_ops
),
2537 net
->ipv6
.rt6_stats
->fib_discarded_routes
);
2542 static int rt6_stats_seq_open(struct inode
*inode
, struct file
*file
)
2544 return single_open_net(inode
, file
, rt6_stats_seq_show
);
2547 static const struct file_operations rt6_stats_seq_fops
= {
2548 .owner
= THIS_MODULE
,
2549 .open
= rt6_stats_seq_open
,
2551 .llseek
= seq_lseek
,
2552 .release
= single_release_net
,
2554 #endif /* CONFIG_PROC_FS */
2556 #ifdef CONFIG_SYSCTL
2559 int ipv6_sysctl_rtcache_flush(ctl_table
*ctl
, int write
,
2560 void __user
*buffer
, size_t *lenp
, loff_t
*ppos
)
2567 net
= (struct net
*)ctl
->extra1
;
2568 delay
= net
->ipv6
.sysctl
.flush_delay
;
2569 proc_dointvec(ctl
, write
, buffer
, lenp
, ppos
);
2570 fib6_run_gc(delay
<= 0 ? ~0UL : (unsigned long)delay
, net
);
2574 ctl_table ipv6_route_table_template
[] = {
2576 .procname
= "flush",
2577 .data
= &init_net
.ipv6
.sysctl
.flush_delay
,
2578 .maxlen
= sizeof(int),
2580 .proc_handler
= ipv6_sysctl_rtcache_flush
2583 .procname
= "gc_thresh",
2584 .data
= &ip6_dst_ops_template
.gc_thresh
,
2585 .maxlen
= sizeof(int),
2587 .proc_handler
= proc_dointvec
,
2590 .procname
= "max_size",
2591 .data
= &init_net
.ipv6
.sysctl
.ip6_rt_max_size
,
2592 .maxlen
= sizeof(int),
2594 .proc_handler
= proc_dointvec
,
2597 .procname
= "gc_min_interval",
2598 .data
= &init_net
.ipv6
.sysctl
.ip6_rt_gc_min_interval
,
2599 .maxlen
= sizeof(int),
2601 .proc_handler
= proc_dointvec_jiffies
,
2604 .procname
= "gc_timeout",
2605 .data
= &init_net
.ipv6
.sysctl
.ip6_rt_gc_timeout
,
2606 .maxlen
= sizeof(int),
2608 .proc_handler
= proc_dointvec_jiffies
,
2611 .procname
= "gc_interval",
2612 .data
= &init_net
.ipv6
.sysctl
.ip6_rt_gc_interval
,
2613 .maxlen
= sizeof(int),
2615 .proc_handler
= proc_dointvec_jiffies
,
2618 .procname
= "gc_elasticity",
2619 .data
= &init_net
.ipv6
.sysctl
.ip6_rt_gc_elasticity
,
2620 .maxlen
= sizeof(int),
2622 .proc_handler
= proc_dointvec
,
2625 .procname
= "mtu_expires",
2626 .data
= &init_net
.ipv6
.sysctl
.ip6_rt_mtu_expires
,
2627 .maxlen
= sizeof(int),
2629 .proc_handler
= proc_dointvec_jiffies
,
2632 .procname
= "min_adv_mss",
2633 .data
= &init_net
.ipv6
.sysctl
.ip6_rt_min_advmss
,
2634 .maxlen
= sizeof(int),
2636 .proc_handler
= proc_dointvec
,
2639 .procname
= "gc_min_interval_ms",
2640 .data
= &init_net
.ipv6
.sysctl
.ip6_rt_gc_min_interval
,
2641 .maxlen
= sizeof(int),
2643 .proc_handler
= proc_dointvec_ms_jiffies
,
2648 struct ctl_table
* __net_init
ipv6_route_sysctl_init(struct net
*net
)
2650 struct ctl_table
*table
;
2652 table
= kmemdup(ipv6_route_table_template
,
2653 sizeof(ipv6_route_table_template
),
2657 table
[0].data
= &net
->ipv6
.sysctl
.flush_delay
;
2658 table
[0].extra1
= net
;
2659 table
[1].data
= &net
->ipv6
.ip6_dst_ops
.gc_thresh
;
2660 table
[2].data
= &net
->ipv6
.sysctl
.ip6_rt_max_size
;
2661 table
[3].data
= &net
->ipv6
.sysctl
.ip6_rt_gc_min_interval
;
2662 table
[4].data
= &net
->ipv6
.sysctl
.ip6_rt_gc_timeout
;
2663 table
[5].data
= &net
->ipv6
.sysctl
.ip6_rt_gc_interval
;
2664 table
[6].data
= &net
->ipv6
.sysctl
.ip6_rt_gc_elasticity
;
2665 table
[7].data
= &net
->ipv6
.sysctl
.ip6_rt_mtu_expires
;
2666 table
[8].data
= &net
->ipv6
.sysctl
.ip6_rt_min_advmss
;
2667 table
[9].data
= &net
->ipv6
.sysctl
.ip6_rt_gc_min_interval
;
2674 static int __net_init
ip6_route_net_init(struct net
*net
)
2678 memcpy(&net
->ipv6
.ip6_dst_ops
, &ip6_dst_ops_template
,
2679 sizeof(net
->ipv6
.ip6_dst_ops
));
2681 if (dst_entries_init(&net
->ipv6
.ip6_dst_ops
) < 0)
2682 goto out_ip6_dst_ops
;
2684 net
->ipv6
.ip6_null_entry
= kmemdup(&ip6_null_entry_template
,
2685 sizeof(*net
->ipv6
.ip6_null_entry
),
2687 if (!net
->ipv6
.ip6_null_entry
)
2688 goto out_ip6_dst_entries
;
2689 net
->ipv6
.ip6_null_entry
->dst
.path
=
2690 (struct dst_entry
*)net
->ipv6
.ip6_null_entry
;
2691 net
->ipv6
.ip6_null_entry
->dst
.ops
= &net
->ipv6
.ip6_dst_ops
;
2692 dst_metric_set(&net
->ipv6
.ip6_null_entry
->dst
, RTAX_HOPLIMIT
, 255);
2694 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
2695 net
->ipv6
.ip6_prohibit_entry
= kmemdup(&ip6_prohibit_entry_template
,
2696 sizeof(*net
->ipv6
.ip6_prohibit_entry
),
2698 if (!net
->ipv6
.ip6_prohibit_entry
)
2699 goto out_ip6_null_entry
;
2700 net
->ipv6
.ip6_prohibit_entry
->dst
.path
=
2701 (struct dst_entry
*)net
->ipv6
.ip6_prohibit_entry
;
2702 net
->ipv6
.ip6_prohibit_entry
->dst
.ops
= &net
->ipv6
.ip6_dst_ops
;
2703 dst_metric_set(&net
->ipv6
.ip6_prohibit_entry
->dst
, RTAX_HOPLIMIT
, 255);
2705 net
->ipv6
.ip6_blk_hole_entry
= kmemdup(&ip6_blk_hole_entry_template
,
2706 sizeof(*net
->ipv6
.ip6_blk_hole_entry
),
2708 if (!net
->ipv6
.ip6_blk_hole_entry
)
2709 goto out_ip6_prohibit_entry
;
2710 net
->ipv6
.ip6_blk_hole_entry
->dst
.path
=
2711 (struct dst_entry
*)net
->ipv6
.ip6_blk_hole_entry
;
2712 net
->ipv6
.ip6_blk_hole_entry
->dst
.ops
= &net
->ipv6
.ip6_dst_ops
;
2713 dst_metric_set(&net
->ipv6
.ip6_blk_hole_entry
->dst
, RTAX_HOPLIMIT
, 255);
2716 net
->ipv6
.sysctl
.flush_delay
= 0;
2717 net
->ipv6
.sysctl
.ip6_rt_max_size
= 4096;
2718 net
->ipv6
.sysctl
.ip6_rt_gc_min_interval
= HZ
/ 2;
2719 net
->ipv6
.sysctl
.ip6_rt_gc_timeout
= 60*HZ
;
2720 net
->ipv6
.sysctl
.ip6_rt_gc_interval
= 30*HZ
;
2721 net
->ipv6
.sysctl
.ip6_rt_gc_elasticity
= 9;
2722 net
->ipv6
.sysctl
.ip6_rt_mtu_expires
= 10*60*HZ
;
2723 net
->ipv6
.sysctl
.ip6_rt_min_advmss
= IPV6_MIN_MTU
- 20 - 40;
2725 #ifdef CONFIG_PROC_FS
2726 proc_net_fops_create(net
, "ipv6_route", 0, &ipv6_route_proc_fops
);
2727 proc_net_fops_create(net
, "rt6_stats", S_IRUGO
, &rt6_stats_seq_fops
);
2729 net
->ipv6
.ip6_rt_gc_expire
= 30*HZ
;
2735 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
2736 out_ip6_prohibit_entry
:
2737 kfree(net
->ipv6
.ip6_prohibit_entry
);
2739 kfree(net
->ipv6
.ip6_null_entry
);
2741 out_ip6_dst_entries
:
2742 dst_entries_destroy(&net
->ipv6
.ip6_dst_ops
);
2747 static void __net_exit
ip6_route_net_exit(struct net
*net
)
2749 #ifdef CONFIG_PROC_FS
2750 proc_net_remove(net
, "ipv6_route");
2751 proc_net_remove(net
, "rt6_stats");
2753 kfree(net
->ipv6
.ip6_null_entry
);
2754 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
2755 kfree(net
->ipv6
.ip6_prohibit_entry
);
2756 kfree(net
->ipv6
.ip6_blk_hole_entry
);
2758 dst_entries_destroy(&net
->ipv6
.ip6_dst_ops
);
2761 static struct pernet_operations ip6_route_net_ops
= {
2762 .init
= ip6_route_net_init
,
2763 .exit
= ip6_route_net_exit
,
2766 static struct notifier_block ip6_route_dev_notifier
= {
2767 .notifier_call
= ip6_route_dev_notify
,
2771 int __init
ip6_route_init(void)
2776 ip6_dst_ops_template
.kmem_cachep
=
2777 kmem_cache_create("ip6_dst_cache", sizeof(struct rt6_info
), 0,
2778 SLAB_HWCACHE_ALIGN
, NULL
);
2779 if (!ip6_dst_ops_template
.kmem_cachep
)
2782 ret
= dst_entries_init(&ip6_dst_blackhole_ops
);
2784 goto out_kmem_cache
;
2786 ret
= register_pernet_subsys(&ip6_route_net_ops
);
2788 goto out_dst_entries
;
2790 ip6_dst_blackhole_ops
.kmem_cachep
= ip6_dst_ops_template
.kmem_cachep
;
2792 /* Registering of the loopback is done before this portion of code,
2793 * the loopback reference in rt6_info will not be taken, do it
2794 * manually for init_net */
2795 init_net
.ipv6
.ip6_null_entry
->dst
.dev
= init_net
.loopback_dev
;
2796 init_net
.ipv6
.ip6_null_entry
->rt6i_idev
= in6_dev_get(init_net
.loopback_dev
);
2797 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
2798 init_net
.ipv6
.ip6_prohibit_entry
->dst
.dev
= init_net
.loopback_dev
;
2799 init_net
.ipv6
.ip6_prohibit_entry
->rt6i_idev
= in6_dev_get(init_net
.loopback_dev
);
2800 init_net
.ipv6
.ip6_blk_hole_entry
->dst
.dev
= init_net
.loopback_dev
;
2801 init_net
.ipv6
.ip6_blk_hole_entry
->rt6i_idev
= in6_dev_get(init_net
.loopback_dev
);
2805 goto out_register_subsys
;
2811 ret
= fib6_rules_init();
2816 if (__rtnl_register(PF_INET6
, RTM_NEWROUTE
, inet6_rtm_newroute
, NULL
) ||
2817 __rtnl_register(PF_INET6
, RTM_DELROUTE
, inet6_rtm_delroute
, NULL
) ||
2818 __rtnl_register(PF_INET6
, RTM_GETROUTE
, inet6_rtm_getroute
, NULL
))
2819 goto fib6_rules_init
;
2821 ret
= register_netdevice_notifier(&ip6_route_dev_notifier
);
2823 goto fib6_rules_init
;
2829 fib6_rules_cleanup();
2834 out_register_subsys
:
2835 unregister_pernet_subsys(&ip6_route_net_ops
);
2837 dst_entries_destroy(&ip6_dst_blackhole_ops
);
2839 kmem_cache_destroy(ip6_dst_ops_template
.kmem_cachep
);
2843 void ip6_route_cleanup(void)
2845 unregister_netdevice_notifier(&ip6_route_dev_notifier
);
2846 fib6_rules_cleanup();
2849 unregister_pernet_subsys(&ip6_route_net_ops
);
2850 dst_entries_destroy(&ip6_dst_blackhole_ops
);
2851 kmem_cache_destroy(ip6_dst_ops_template
.kmem_cachep
);