2 * xfrm6_policy.c: based on xfrm4_policy.c
6 * Kazunori MIYAZAWA @USAGI
7 * Kunihiro Ishiguro <kunihiro@ipinfusion.com>
10 * Split up af-specific portion
14 #include <linux/err.h>
15 #include <linux/kernel.h>
16 #include <linux/netdevice.h>
17 #include <net/addrconf.h>
22 #include <net/ip6_route.h>
23 #if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
27 static struct dst_ops xfrm6_dst_ops
;
28 static struct xfrm_policy_afinfo xfrm6_policy_afinfo
;
30 static struct dst_entry
*xfrm6_dst_lookup(int tos
, xfrm_address_t
*saddr
,
31 xfrm_address_t
*daddr
)
34 struct dst_entry
*dst
;
37 memcpy(&fl
.fl6_dst
, daddr
, sizeof(fl
.fl6_dst
));
39 memcpy(&fl
.fl6_src
, saddr
, sizeof(fl
.fl6_src
));
41 dst
= ip6_route_output(NULL
, &fl
);
52 static int xfrm6_get_saddr(xfrm_address_t
*saddr
, xfrm_address_t
*daddr
)
54 struct dst_entry
*dst
;
56 dst
= xfrm6_dst_lookup(0, NULL
, daddr
);
60 ipv6_get_saddr(dst
, (struct in6_addr
*)&daddr
->a6
,
61 (struct in6_addr
*)&saddr
->a6
);
66 static struct dst_entry
*
67 __xfrm6_find_bundle(struct flowi
*fl
, struct xfrm_policy
*policy
)
69 struct dst_entry
*dst
;
71 /* Still not clear if we should set fl->fl6_{src,dst}... */
72 read_lock_bh(&policy
->lock
);
73 for (dst
= policy
->bundles
; dst
; dst
= dst
->next
) {
74 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
75 struct in6_addr fl_dst_prefix
, fl_src_prefix
;
77 ipv6_addr_prefix(&fl_dst_prefix
,
79 xdst
->u
.rt6
.rt6i_dst
.plen
);
80 ipv6_addr_prefix(&fl_src_prefix
,
82 xdst
->u
.rt6
.rt6i_src
.plen
);
83 if (ipv6_addr_equal(&xdst
->u
.rt6
.rt6i_dst
.addr
, &fl_dst_prefix
) &&
84 ipv6_addr_equal(&xdst
->u
.rt6
.rt6i_src
.addr
, &fl_src_prefix
) &&
85 xfrm_bundle_ok(policy
, xdst
, fl
, AF_INET6
,
86 (xdst
->u
.rt6
.rt6i_dst
.plen
!= 128 ||
87 xdst
->u
.rt6
.rt6i_src
.plen
!= 128))) {
92 read_unlock_bh(&policy
->lock
);
96 static int xfrm6_get_tos(struct flowi
*fl
)
101 static int xfrm6_fill_dst(struct xfrm_dst
*xdst
, struct net_device
*dev
)
103 struct rt6_info
*rt
= (struct rt6_info
*)xdst
->route
;
105 xdst
->u
.dst
.dev
= dev
;
108 xdst
->u
.rt6
.rt6i_idev
= in6_dev_get(rt
->u
.dst
.dev
);
109 if (!xdst
->u
.rt6
.rt6i_idev
)
112 /* Sheit... I remember I did this right. Apparently,
113 * it was magically lost, so this code needs audit */
114 xdst
->u
.rt6
.rt6i_flags
= rt
->rt6i_flags
& (RTF_ANYCAST
|
116 xdst
->u
.rt6
.rt6i_metric
= rt
->rt6i_metric
;
117 xdst
->u
.rt6
.rt6i_node
= rt
->rt6i_node
;
118 xdst
->u
.rt6
.rt6i_gateway
= rt
->rt6i_gateway
;
119 xdst
->u
.rt6
.rt6i_dst
= rt
->rt6i_dst
;
120 xdst
->u
.rt6
.rt6i_src
= rt
->rt6i_src
;
126 _decode_session6(struct sk_buff
*skb
, struct flowi
*fl
)
128 u16 offset
= skb_network_header_len(skb
);
129 struct ipv6hdr
*hdr
= ipv6_hdr(skb
);
130 struct ipv6_opt_hdr
*exthdr
;
131 const unsigned char *nh
= skb_network_header(skb
);
132 u8 nexthdr
= nh
[IP6CB(skb
)->nhoff
];
134 memset(fl
, 0, sizeof(struct flowi
));
135 ipv6_addr_copy(&fl
->fl6_dst
, &hdr
->daddr
);
136 ipv6_addr_copy(&fl
->fl6_src
, &hdr
->saddr
);
138 while (pskb_may_pull(skb
, nh
+ offset
+ 1 - skb
->data
)) {
139 nh
= skb_network_header(skb
);
140 exthdr
= (struct ipv6_opt_hdr
*)(nh
+ offset
);
143 case NEXTHDR_ROUTING
:
146 offset
+= ipv6_optlen(exthdr
);
147 nexthdr
= exthdr
->nexthdr
;
148 exthdr
= (struct ipv6_opt_hdr
*)(nh
+ offset
);
152 case IPPROTO_UDPLITE
:
156 if (pskb_may_pull(skb
, nh
+ offset
+ 4 - skb
->data
)) {
157 __be16
*ports
= (__be16
*)exthdr
;
159 fl
->fl_ip_sport
= ports
[0];
160 fl
->fl_ip_dport
= ports
[1];
166 if (pskb_may_pull(skb
, nh
+ offset
+ 2 - skb
->data
)) {
167 u8
*icmp
= (u8
*)exthdr
;
169 fl
->fl_icmp_type
= icmp
[0];
170 fl
->fl_icmp_code
= icmp
[1];
175 #if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
177 if (pskb_may_pull(skb
, nh
+ offset
+ 3 - skb
->data
)) {
179 mh
= (struct ip6_mh
*)exthdr
;
181 fl
->fl_mh_type
= mh
->ip6mh_type
;
187 /* XXX Why are there these headers? */
192 fl
->fl_ipsec_spi
= 0;
199 static inline int xfrm6_garbage_collect(void)
201 xfrm6_policy_afinfo
.garbage_collect();
202 return (atomic_read(&xfrm6_dst_ops
.entries
) > xfrm6_dst_ops
.gc_thresh
*2);
205 static void xfrm6_update_pmtu(struct dst_entry
*dst
, u32 mtu
)
207 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
208 struct dst_entry
*path
= xdst
->route
;
210 path
->ops
->update_pmtu(path
, mtu
);
213 static void xfrm6_dst_destroy(struct dst_entry
*dst
)
215 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
217 if (likely(xdst
->u
.rt6
.rt6i_idev
))
218 in6_dev_put(xdst
->u
.rt6
.rt6i_idev
);
219 xfrm_dst_destroy(xdst
);
222 static void xfrm6_dst_ifdown(struct dst_entry
*dst
, struct net_device
*dev
,
225 struct xfrm_dst
*xdst
;
230 xdst
= (struct xfrm_dst
*)dst
;
231 if (xdst
->u
.rt6
.rt6i_idev
->dev
== dev
) {
232 struct inet6_dev
*loopback_idev
= in6_dev_get(init_net
.loopback_dev
);
233 BUG_ON(!loopback_idev
);
236 in6_dev_put(xdst
->u
.rt6
.rt6i_idev
);
237 xdst
->u
.rt6
.rt6i_idev
= loopback_idev
;
238 in6_dev_hold(loopback_idev
);
239 xdst
= (struct xfrm_dst
*)xdst
->u
.dst
.child
;
240 } while (xdst
->u
.dst
.xfrm
);
242 __in6_dev_put(loopback_idev
);
245 xfrm_dst_ifdown(dst
, dev
);
248 static struct dst_ops xfrm6_dst_ops
= {
250 .protocol
= __constant_htons(ETH_P_IPV6
),
251 .gc
= xfrm6_garbage_collect
,
252 .update_pmtu
= xfrm6_update_pmtu
,
253 .destroy
= xfrm6_dst_destroy
,
254 .ifdown
= xfrm6_dst_ifdown
,
256 .entry_size
= sizeof(struct xfrm_dst
),
259 static struct xfrm_policy_afinfo xfrm6_policy_afinfo
= {
261 .dst_ops
= &xfrm6_dst_ops
,
262 .dst_lookup
= xfrm6_dst_lookup
,
263 .get_saddr
= xfrm6_get_saddr
,
264 .find_bundle
= __xfrm6_find_bundle
,
265 .decode_session
= _decode_session6
,
266 .get_tos
= xfrm6_get_tos
,
267 .fill_dst
= xfrm6_fill_dst
,
270 static void __init
xfrm6_policy_init(void)
272 xfrm_policy_register_afinfo(&xfrm6_policy_afinfo
);
275 static void xfrm6_policy_fini(void)
277 xfrm_policy_unregister_afinfo(&xfrm6_policy_afinfo
);
280 void __init
xfrm6_init(void)
286 void xfrm6_fini(void)
288 //xfrm6_input_fini();