5 * Kazunori MIYAZAWA @USAGI
6 * YOSHIFUJI Hideaki @USAGI
7 * Split up af-specific portion
11 #include <linux/err.h>
12 #include <linux/kernel.h>
13 #include <linux/inetdevice.h>
18 static struct dst_ops xfrm4_dst_ops
;
19 static struct xfrm_policy_afinfo xfrm4_policy_afinfo
;
21 static struct dst_entry
*xfrm4_dst_lookup(int tos
, xfrm_address_t
*saddr
,
22 xfrm_address_t
*daddr
)
32 struct dst_entry
*dst
;
37 fl
.fl4_src
= saddr
->a4
;
39 err
= __ip_route_output_key(&rt
, &fl
);
46 static int xfrm4_get_saddr(xfrm_address_t
*saddr
, xfrm_address_t
*daddr
)
48 struct dst_entry
*dst
;
51 dst
= xfrm4_dst_lookup(0, NULL
, daddr
);
55 rt
= (struct rtable
*)dst
;
56 saddr
->a4
= rt
->rt_src
;
61 static struct dst_entry
*
62 __xfrm4_find_bundle(struct flowi
*fl
, struct xfrm_policy
*policy
)
64 struct dst_entry
*dst
;
66 read_lock_bh(&policy
->lock
);
67 for (dst
= policy
->bundles
; dst
; dst
= dst
->next
) {
68 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
69 if (xdst
->u
.rt
.fl
.oif
== fl
->oif
&& /*XXX*/
70 xdst
->u
.rt
.fl
.fl4_dst
== fl
->fl4_dst
&&
71 xdst
->u
.rt
.fl
.fl4_src
== fl
->fl4_src
&&
72 xdst
->u
.rt
.fl
.fl4_tos
== fl
->fl4_tos
&&
73 xfrm_bundle_ok(policy
, xdst
, fl
, AF_INET
, 0)) {
78 read_unlock_bh(&policy
->lock
);
82 static int xfrm4_get_tos(struct flowi
*fl
)
87 static int xfrm4_fill_dst(struct xfrm_dst
*xdst
, struct net_device
*dev
)
89 struct rtable
*rt
= (struct rtable
*)xdst
->route
;
91 xdst
->u
.rt
.fl
= rt
->fl
;
93 xdst
->u
.dst
.dev
= dev
;
96 xdst
->u
.rt
.idev
= in_dev_get(dev
);
100 xdst
->u
.rt
.peer
= rt
->peer
;
102 atomic_inc(&rt
->peer
->refcnt
);
104 /* Sheit... I remember I did this right. Apparently,
105 * it was magically lost, so this code needs audit */
106 xdst
->u
.rt
.rt_flags
= rt
->rt_flags
& (RTCF_BROADCAST
| RTCF_MULTICAST
|
108 xdst
->u
.rt
.rt_type
= rt
->rt_type
;
109 xdst
->u
.rt
.rt_src
= rt
->rt_src
;
110 xdst
->u
.rt
.rt_dst
= rt
->rt_dst
;
111 xdst
->u
.rt
.rt_gateway
= rt
->rt_gateway
;
112 xdst
->u
.rt
.rt_spec_dst
= rt
->rt_spec_dst
;
118 _decode_session4(struct sk_buff
*skb
, struct flowi
*fl
)
120 struct iphdr
*iph
= ip_hdr(skb
);
121 u8
*xprth
= skb_network_header(skb
) + iph
->ihl
* 4;
123 memset(fl
, 0, sizeof(struct flowi
));
124 if (!(iph
->frag_off
& htons(IP_MF
| IP_OFFSET
))) {
125 switch (iph
->protocol
) {
127 case IPPROTO_UDPLITE
:
131 if (pskb_may_pull(skb
, xprth
+ 4 - skb
->data
)) {
132 __be16
*ports
= (__be16
*)xprth
;
134 fl
->fl_ip_sport
= ports
[0];
135 fl
->fl_ip_dport
= ports
[1];
140 if (pskb_may_pull(skb
, xprth
+ 2 - skb
->data
)) {
143 fl
->fl_icmp_type
= icmp
[0];
144 fl
->fl_icmp_code
= icmp
[1];
149 if (pskb_may_pull(skb
, xprth
+ 4 - skb
->data
)) {
150 __be32
*ehdr
= (__be32
*)xprth
;
152 fl
->fl_ipsec_spi
= ehdr
[0];
157 if (pskb_may_pull(skb
, xprth
+ 8 - skb
->data
)) {
158 __be32
*ah_hdr
= (__be32
*)xprth
;
160 fl
->fl_ipsec_spi
= ah_hdr
[1];
165 if (pskb_may_pull(skb
, xprth
+ 4 - skb
->data
)) {
166 __be16
*ipcomp_hdr
= (__be16
*)xprth
;
168 fl
->fl_ipsec_spi
= htonl(ntohs(ipcomp_hdr
[1]));
172 fl
->fl_ipsec_spi
= 0;
176 fl
->proto
= iph
->protocol
;
177 fl
->fl4_dst
= iph
->daddr
;
178 fl
->fl4_src
= iph
->saddr
;
179 fl
->fl4_tos
= iph
->tos
;
182 static inline int xfrm4_garbage_collect(void)
184 xfrm4_policy_afinfo
.garbage_collect();
185 return (atomic_read(&xfrm4_dst_ops
.entries
) > xfrm4_dst_ops
.gc_thresh
*2);
188 static void xfrm4_update_pmtu(struct dst_entry
*dst
, u32 mtu
)
190 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
191 struct dst_entry
*path
= xdst
->route
;
193 path
->ops
->update_pmtu(path
, mtu
);
196 static void xfrm4_dst_destroy(struct dst_entry
*dst
)
198 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
200 if (likely(xdst
->u
.rt
.idev
))
201 in_dev_put(xdst
->u
.rt
.idev
);
202 if (likely(xdst
->u
.rt
.peer
))
203 inet_putpeer(xdst
->u
.rt
.peer
);
204 xfrm_dst_destroy(xdst
);
207 static void xfrm4_dst_ifdown(struct dst_entry
*dst
, struct net_device
*dev
,
210 struct xfrm_dst
*xdst
;
215 xdst
= (struct xfrm_dst
*)dst
;
216 if (xdst
->u
.rt
.idev
->dev
== dev
) {
217 struct in_device
*loopback_idev
= in_dev_get(init_net
.loopback_dev
);
218 BUG_ON(!loopback_idev
);
221 in_dev_put(xdst
->u
.rt
.idev
);
222 xdst
->u
.rt
.idev
= loopback_idev
;
223 in_dev_hold(loopback_idev
);
224 xdst
= (struct xfrm_dst
*)xdst
->u
.dst
.child
;
225 } while (xdst
->u
.dst
.xfrm
);
227 __in_dev_put(loopback_idev
);
230 xfrm_dst_ifdown(dst
, dev
);
233 static struct dst_ops xfrm4_dst_ops
= {
235 .protocol
= __constant_htons(ETH_P_IP
),
236 .gc
= xfrm4_garbage_collect
,
237 .update_pmtu
= xfrm4_update_pmtu
,
238 .destroy
= xfrm4_dst_destroy
,
239 .ifdown
= xfrm4_dst_ifdown
,
241 .entry_size
= sizeof(struct xfrm_dst
),
244 static struct xfrm_policy_afinfo xfrm4_policy_afinfo
= {
246 .dst_ops
= &xfrm4_dst_ops
,
247 .dst_lookup
= xfrm4_dst_lookup
,
248 .get_saddr
= xfrm4_get_saddr
,
249 .find_bundle
= __xfrm4_find_bundle
,
250 .decode_session
= _decode_session4
,
251 .get_tos
= xfrm4_get_tos
,
252 .fill_dst
= xfrm4_fill_dst
,
255 static void __init
xfrm4_policy_init(void)
257 xfrm_policy_register_afinfo(&xfrm4_policy_afinfo
);
260 static void __exit
xfrm4_policy_fini(void)
262 xfrm_policy_unregister_afinfo(&xfrm4_policy_afinfo
);
265 void __init
xfrm4_init(void)