]>
Commit | Line | Data |
---|---|---|
2874c5fd | 1 | // SPDX-License-Identifier: GPL-2.0-or-later |
1da177e4 LT |
2 | /* |
3 | * INET An implementation of the TCP/IP protocol suite for the LINUX | |
4 | * operating system. INET is implemented using the BSD Socket | |
5 | * interface as the means of communication with the user level. | |
6 | * | |
7 | * IPv4 Forwarding Information Base: semantics. | |
8 | * | |
1da177e4 | 9 | * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru> |
1da177e4 LT |
10 | */ |
11 | ||
7c0f6ba6 | 12 | #include <linux/uaccess.h> |
1da177e4 LT |
13 | #include <linux/bitops.h> |
14 | #include <linux/types.h> | |
15 | #include <linux/kernel.h> | |
16 | #include <linux/jiffies.h> | |
17 | #include <linux/mm.h> | |
18 | #include <linux/string.h> | |
19 | #include <linux/socket.h> | |
20 | #include <linux/sockios.h> | |
21 | #include <linux/errno.h> | |
22 | #include <linux/in.h> | |
23 | #include <linux/inet.h> | |
14c85021 | 24 | #include <linux/inetdevice.h> |
1da177e4 LT |
25 | #include <linux/netdevice.h> |
26 | #include <linux/if_arp.h> | |
27 | #include <linux/proc_fs.h> | |
28 | #include <linux/skbuff.h> | |
1da177e4 | 29 | #include <linux/init.h> |
5a0e3ad6 | 30 | #include <linux/slab.h> |
c3ab2b4e | 31 | #include <linux/netlink.h> |
d07418af | 32 | #include <linux/hash.h> |
1da177e4 | 33 | |
14c85021 | 34 | #include <net/arp.h> |
32ccf110 | 35 | #include <net/inet_dscp.h> |
1da177e4 LT |
36 | #include <net/ip.h> |
37 | #include <net/protocol.h> | |
38 | #include <net/route.h> | |
39 | #include <net/tcp.h> | |
40 | #include <net/sock.h> | |
41 | #include <net/ip_fib.h> | |
717a8f5b | 42 | #include <net/ip6_fib.h> |
5481d73f | 43 | #include <net/nexthop.h> |
f21c7bc5 | 44 | #include <net/netlink.h> |
3c618c1d | 45 | #include <net/rtnh.h> |
571e7226 | 46 | #include <net/lwtunnel.h> |
04b1d4e5 | 47 | #include <net/fib_notifier.h> |
c0a72077 | 48 | #include <net/addrconf.h> |
1da177e4 LT |
49 | |
50 | #include "fib_lookup.h" | |
51 | ||
832b4c5e | 52 | static DEFINE_SPINLOCK(fib_info_lock); |
1da177e4 LT |
53 | static struct hlist_head *fib_info_hash; |
54 | static struct hlist_head *fib_info_laddrhash; | |
123b9731 | 55 | static unsigned int fib_info_hash_size; |
79eb15da | 56 | static unsigned int fib_info_hash_bits; |
1da177e4 LT |
57 | static unsigned int fib_info_cnt; |
58 | ||
59 | #define DEVINDEX_HASHBITS 8 | |
60 | #define DEVINDEX_HASHSIZE (1U << DEVINDEX_HASHBITS) | |
61 | static struct hlist_head fib_info_devhash[DEVINDEX_HASHSIZE]; | |
62 | ||
dcb1ecb5 DA |
63 | /* for_nexthops and change_nexthops only used when nexthop object |
64 | * is not set in a fib_info. The logic within can reference fib_nh. | |
65 | */ | |
1da177e4 | 66 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
1da177e4 | 67 | |
6a31d2a9 ED |
68 | #define for_nexthops(fi) { \ |
69 | int nhsel; const struct fib_nh *nh; \ | |
70 | for (nhsel = 0, nh = (fi)->fib_nh; \ | |
5481d73f | 71 | nhsel < fib_info_num_path((fi)); \ |
6a31d2a9 ED |
72 | nh++, nhsel++) |
73 | ||
74 | #define change_nexthops(fi) { \ | |
75 | int nhsel; struct fib_nh *nexthop_nh; \ | |
76 | for (nhsel = 0, nexthop_nh = (struct fib_nh *)((fi)->fib_nh); \ | |
5481d73f | 77 | nhsel < fib_info_num_path((fi)); \ |
6a31d2a9 | 78 | nexthop_nh++, nhsel++) |
1da177e4 LT |
79 | |
80 | #else /* CONFIG_IP_ROUTE_MULTIPATH */ | |
81 | ||
82 | /* Hope, that gcc will optimize it to get rid of dummy loop */ | |
83 | ||
6a31d2a9 ED |
84 | #define for_nexthops(fi) { \ |
85 | int nhsel; const struct fib_nh *nh = (fi)->fib_nh; \ | |
86 | for (nhsel = 0; nhsel < 1; nhsel++) | |
1da177e4 | 87 | |
6a31d2a9 ED |
88 | #define change_nexthops(fi) { \ |
89 | int nhsel; \ | |
90 | struct fib_nh *nexthop_nh = (struct fib_nh *)((fi)->fib_nh); \ | |
91 | for (nhsel = 0; nhsel < 1; nhsel++) | |
1da177e4 LT |
92 | |
93 | #endif /* CONFIG_IP_ROUTE_MULTIPATH */ | |
94 | ||
95 | #define endfor_nexthops(fi) } | |
96 | ||
97 | ||
3be0686b | 98 | const struct fib_prop fib_props[RTN_MAX + 1] = { |
6a31d2a9 | 99 | [RTN_UNSPEC] = { |
1da177e4 LT |
100 | .error = 0, |
101 | .scope = RT_SCOPE_NOWHERE, | |
6a31d2a9 ED |
102 | }, |
103 | [RTN_UNICAST] = { | |
1da177e4 LT |
104 | .error = 0, |
105 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
106 | }, |
107 | [RTN_LOCAL] = { | |
1da177e4 LT |
108 | .error = 0, |
109 | .scope = RT_SCOPE_HOST, | |
6a31d2a9 ED |
110 | }, |
111 | [RTN_BROADCAST] = { | |
1da177e4 LT |
112 | .error = 0, |
113 | .scope = RT_SCOPE_LINK, | |
6a31d2a9 ED |
114 | }, |
115 | [RTN_ANYCAST] = { | |
1da177e4 LT |
116 | .error = 0, |
117 | .scope = RT_SCOPE_LINK, | |
6a31d2a9 ED |
118 | }, |
119 | [RTN_MULTICAST] = { | |
1da177e4 LT |
120 | .error = 0, |
121 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
122 | }, |
123 | [RTN_BLACKHOLE] = { | |
1da177e4 LT |
124 | .error = -EINVAL, |
125 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
126 | }, |
127 | [RTN_UNREACHABLE] = { | |
1da177e4 LT |
128 | .error = -EHOSTUNREACH, |
129 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
130 | }, |
131 | [RTN_PROHIBIT] = { | |
1da177e4 LT |
132 | .error = -EACCES, |
133 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
134 | }, |
135 | [RTN_THROW] = { | |
1da177e4 LT |
136 | .error = -EAGAIN, |
137 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
138 | }, |
139 | [RTN_NAT] = { | |
1da177e4 LT |
140 | .error = -EINVAL, |
141 | .scope = RT_SCOPE_NOWHERE, | |
6a31d2a9 ED |
142 | }, |
143 | [RTN_XRESOLVE] = { | |
1da177e4 LT |
144 | .error = -EINVAL, |
145 | .scope = RT_SCOPE_NOWHERE, | |
6a31d2a9 | 146 | }, |
1da177e4 LT |
147 | }; |
148 | ||
c5038a83 DM |
149 | static void rt_fibinfo_free(struct rtable __rcu **rtp) |
150 | { | |
151 | struct rtable *rt = rcu_dereference_protected(*rtp, 1); | |
152 | ||
153 | if (!rt) | |
154 | return; | |
155 | ||
156 | /* Not even needed : RCU_INIT_POINTER(*rtp, NULL); | |
157 | * because we waited an RCU grace period before calling | |
158 | * free_fib_info_rcu() | |
159 | */ | |
160 | ||
95c47f9c | 161 | dst_dev_put(&rt->dst); |
b838d5e1 | 162 | dst_release_immediate(&rt->dst); |
c5038a83 DM |
163 | } |
164 | ||
a5995e71 | 165 | static void free_nh_exceptions(struct fib_nh_common *nhc) |
4895c771 | 166 | { |
caa41527 | 167 | struct fnhe_hash_bucket *hash; |
4895c771 DM |
168 | int i; |
169 | ||
a5995e71 | 170 | hash = rcu_dereference_protected(nhc->nhc_exceptions, 1); |
caa41527 ED |
171 | if (!hash) |
172 | return; | |
4895c771 DM |
173 | for (i = 0; i < FNHE_HASH_SIZE; i++) { |
174 | struct fib_nh_exception *fnhe; | |
175 | ||
5abf7f7e | 176 | fnhe = rcu_dereference_protected(hash[i].chain, 1); |
4895c771 DM |
177 | while (fnhe) { |
178 | struct fib_nh_exception *next; | |
82695b30 | 179 | |
5abf7f7e | 180 | next = rcu_dereference_protected(fnhe->fnhe_next, 1); |
c5038a83 | 181 | |
2ffae99d TT |
182 | rt_fibinfo_free(&fnhe->fnhe_rth_input); |
183 | rt_fibinfo_free(&fnhe->fnhe_rth_output); | |
c5038a83 | 184 | |
4895c771 DM |
185 | kfree(fnhe); |
186 | ||
187 | fnhe = next; | |
188 | } | |
189 | } | |
190 | kfree(hash); | |
191 | } | |
192 | ||
c5038a83 | 193 | static void rt_fibinfo_free_cpus(struct rtable __rcu * __percpu *rtp) |
d26b3a7c ED |
194 | { |
195 | int cpu; | |
196 | ||
197 | if (!rtp) | |
198 | return; | |
199 | ||
200 | for_each_possible_cpu(cpu) { | |
201 | struct rtable *rt; | |
202 | ||
203 | rt = rcu_dereference_protected(*per_cpu_ptr(rtp, cpu), 1); | |
0830106c | 204 | if (rt) { |
95c47f9c | 205 | dst_dev_put(&rt->dst); |
b838d5e1 | 206 | dst_release_immediate(&rt->dst); |
0830106c | 207 | } |
d26b3a7c ED |
208 | } |
209 | free_percpu(rtp); | |
210 | } | |
211 | ||
979e276e DA |
212 | void fib_nh_common_release(struct fib_nh_common *nhc) |
213 | { | |
e44b14eb | 214 | dev_put_track(nhc->nhc_dev, &nhc->nhc_dev_tracker); |
979e276e | 215 | lwtstate_put(nhc->nhc_lwtstate); |
0f457a36 DA |
216 | rt_fibinfo_free_cpus(nhc->nhc_pcpu_rth_output); |
217 | rt_fibinfo_free(&nhc->nhc_rth_input); | |
a5995e71 | 218 | free_nh_exceptions(nhc); |
979e276e DA |
219 | } |
220 | EXPORT_SYMBOL_GPL(fib_nh_common_release); | |
221 | ||
faa041a4 DA |
222 | void fib_nh_release(struct net *net, struct fib_nh *fib_nh) |
223 | { | |
224 | #ifdef CONFIG_IP_ROUTE_CLASSID | |
225 | if (fib_nh->nh_tclassid) | |
213f5f8f | 226 | atomic_dec(&net->ipv4.fib_num_tclassid_users); |
faa041a4 | 227 | #endif |
979e276e | 228 | fib_nh_common_release(&fib_nh->nh_common); |
faa041a4 DA |
229 | } |
230 | ||
1da177e4 | 231 | /* Release a nexthop info record */ |
19c1ea14 YZ |
232 | static void free_fib_info_rcu(struct rcu_head *head) |
233 | { | |
234 | struct fib_info *fi = container_of(head, struct fib_info, rcu); | |
235 | ||
4c7e8084 DA |
236 | if (fi->nh) { |
237 | nexthop_put(fi->nh); | |
238 | } else { | |
239 | change_nexthops(fi) { | |
240 | fib_nh_release(fi->fib_net, nexthop_nh); | |
241 | } endfor_nexthops(fi); | |
242 | } | |
e49cc0da | 243 | |
cc5f0eb2 DA |
244 | ip_fib_metrics_put(fi->fib_metrics); |
245 | ||
19c1ea14 YZ |
246 | kfree(fi); |
247 | } | |
1da177e4 LT |
248 | |
249 | void free_fib_info(struct fib_info *fi) | |
250 | { | |
251 | if (fi->fib_dead == 0) { | |
058bd4d2 | 252 | pr_warn("Freeing alive fib_info %p\n", fi); |
1da177e4 LT |
253 | return; |
254 | } | |
faa041a4 | 255 | |
19c1ea14 | 256 | call_rcu(&fi->rcu, free_fib_info_rcu); |
1da177e4 | 257 | } |
b423cb10 | 258 | EXPORT_SYMBOL_GPL(free_fib_info); |
1da177e4 LT |
259 | |
260 | void fib_release_info(struct fib_info *fi) | |
261 | { | |
832b4c5e | 262 | spin_lock_bh(&fib_info_lock); |
79976892 | 263 | if (fi && refcount_dec_and_test(&fi->fib_treeref)) { |
1da177e4 | 264 | hlist_del(&fi->fib_hash); |
0a6e6b3c ED |
265 | |
266 | /* Paired with READ_ONCE() in fib_create_info(). */ | |
267 | WRITE_ONCE(fib_info_cnt, fib_info_cnt - 1); | |
268 | ||
1da177e4 LT |
269 | if (fi->fib_prefsrc) |
270 | hlist_del(&fi->fib_lhash); | |
4c7e8084 DA |
271 | if (fi->nh) { |
272 | list_del(&fi->nh_list); | |
273 | } else { | |
274 | change_nexthops(fi) { | |
275 | if (!nexthop_nh->fib_nh_dev) | |
276 | continue; | |
277 | hlist_del(&nexthop_nh->nh_hash); | |
278 | } endfor_nexthops(fi) | |
279 | } | |
1da177e4 LT |
280 | fi->fib_dead = 1; |
281 | fib_info_put(fi); | |
282 | } | |
832b4c5e | 283 | spin_unlock_bh(&fib_info_lock); |
1da177e4 LT |
284 | } |
285 | ||
5481d73f | 286 | static inline int nh_comp(struct fib_info *fi, struct fib_info *ofi) |
1da177e4 | 287 | { |
5481d73f | 288 | const struct fib_nh *onh; |
1da177e4 | 289 | |
4c7e8084 DA |
290 | if (fi->nh || ofi->nh) |
291 | return nexthop_cmp(fi->nh, ofi->nh) ? 0 : -1; | |
292 | ||
293 | if (ofi->fib_nhs == 0) | |
294 | return 0; | |
295 | ||
1da177e4 | 296 | for_nexthops(fi) { |
5481d73f DA |
297 | onh = fib_info_nh(ofi, nhsel); |
298 | ||
b75ed8b1 | 299 | if (nh->fib_nh_oif != onh->fib_nh_oif || |
a4ea5d43 | 300 | nh->fib_nh_gw_family != onh->fib_nh_gw_family || |
b75ed8b1 | 301 | nh->fib_nh_scope != onh->fib_nh_scope || |
1da177e4 | 302 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
b75ed8b1 | 303 | nh->fib_nh_weight != onh->fib_nh_weight || |
1da177e4 | 304 | #endif |
c7066f70 | 305 | #ifdef CONFIG_IP_ROUTE_CLASSID |
1da177e4 LT |
306 | nh->nh_tclassid != onh->nh_tclassid || |
307 | #endif | |
b75ed8b1 DA |
308 | lwtunnel_cmp_encap(nh->fib_nh_lws, onh->fib_nh_lws) || |
309 | ((nh->fib_nh_flags ^ onh->fib_nh_flags) & ~RTNH_COMPARE_MASK)) | |
1da177e4 | 310 | return -1; |
a4ea5d43 DA |
311 | |
312 | if (nh->fib_nh_gw_family == AF_INET && | |
313 | nh->fib_nh_gw4 != onh->fib_nh_gw4) | |
314 | return -1; | |
315 | ||
316 | if (nh->fib_nh_gw_family == AF_INET6 && | |
317 | ipv6_addr_cmp(&nh->fib_nh_gw6, &onh->fib_nh_gw6)) | |
318 | return -1; | |
1da177e4 LT |
319 | } endfor_nexthops(fi); |
320 | return 0; | |
321 | } | |
322 | ||
88ebc72f DM |
323 | static inline unsigned int fib_devindex_hashfn(unsigned int val) |
324 | { | |
d07418af ED |
325 | return hash_32(val, DEVINDEX_HASHBITS); |
326 | } | |
327 | ||
328 | static struct hlist_head * | |
329 | fib_info_devhash_bucket(const struct net_device *dev) | |
330 | { | |
331 | u32 val = net_hash_mix(dev_net(dev)) ^ dev->ifindex; | |
88ebc72f | 332 | |
d07418af | 333 | return &fib_info_devhash[fib_devindex_hashfn(val)]; |
88ebc72f DM |
334 | } |
335 | ||
6c48ea5f DA |
336 | static unsigned int fib_info_hashfn_1(int init_val, u8 protocol, u8 scope, |
337 | u32 prefsrc, u32 priority) | |
338 | { | |
339 | unsigned int val = init_val; | |
340 | ||
341 | val ^= (protocol << 8) | scope; | |
342 | val ^= prefsrc; | |
343 | val ^= priority; | |
344 | ||
345 | return val; | |
346 | } | |
347 | ||
348 | static unsigned int fib_info_hashfn_result(unsigned int val) | |
1da177e4 | 349 | { |
123b9731 | 350 | unsigned int mask = (fib_info_hash_size - 1); |
1da177e4 | 351 | |
6c48ea5f DA |
352 | return (val ^ (val >> 7) ^ (val >> 12)) & mask; |
353 | } | |
354 | ||
355 | static inline unsigned int fib_info_hashfn(struct fib_info *fi) | |
356 | { | |
357 | unsigned int val; | |
358 | ||
359 | val = fib_info_hashfn_1(fi->fib_nhs, fi->fib_protocol, | |
360 | fi->fib_scope, (__force u32)fi->fib_prefsrc, | |
361 | fi->fib_priority); | |
4c7e8084 DA |
362 | |
363 | if (fi->nh) { | |
364 | val ^= fib_devindex_hashfn(fi->nh->id); | |
365 | } else { | |
366 | for_nexthops(fi) { | |
367 | val ^= fib_devindex_hashfn(nh->fib_nh_oif); | |
368 | } endfor_nexthops(fi) | |
369 | } | |
1da177e4 | 370 | |
6c48ea5f DA |
371 | return fib_info_hashfn_result(val); |
372 | } | |
373 | ||
374 | /* no metrics, only nexthop id */ | |
375 | static struct fib_info *fib_find_info_nh(struct net *net, | |
376 | const struct fib_config *cfg) | |
377 | { | |
378 | struct hlist_head *head; | |
379 | struct fib_info *fi; | |
380 | unsigned int hash; | |
381 | ||
382 | hash = fib_info_hashfn_1(fib_devindex_hashfn(cfg->fc_nh_id), | |
383 | cfg->fc_protocol, cfg->fc_scope, | |
384 | (__force u32)cfg->fc_prefsrc, | |
385 | cfg->fc_priority); | |
386 | hash = fib_info_hashfn_result(hash); | |
387 | head = &fib_info_hash[hash]; | |
388 | ||
389 | hlist_for_each_entry(fi, head, fib_hash) { | |
390 | if (!net_eq(fi->fib_net, net)) | |
391 | continue; | |
392 | if (!fi->nh || fi->nh->id != cfg->fc_nh_id) | |
393 | continue; | |
394 | if (cfg->fc_protocol == fi->fib_protocol && | |
395 | cfg->fc_scope == fi->fib_scope && | |
396 | cfg->fc_prefsrc == fi->fib_prefsrc && | |
397 | cfg->fc_priority == fi->fib_priority && | |
398 | cfg->fc_type == fi->fib_type && | |
399 | cfg->fc_table == fi->fib_tb_id && | |
400 | !((cfg->fc_flags ^ fi->fib_flags) & ~RTNH_COMPARE_MASK)) | |
401 | return fi; | |
402 | } | |
403 | ||
404 | return NULL; | |
1da177e4 LT |
405 | } |
406 | ||
5481d73f | 407 | static struct fib_info *fib_find_info(struct fib_info *nfi) |
1da177e4 LT |
408 | { |
409 | struct hlist_head *head; | |
1da177e4 LT |
410 | struct fib_info *fi; |
411 | unsigned int hash; | |
412 | ||
413 | hash = fib_info_hashfn(nfi); | |
414 | head = &fib_info_hash[hash]; | |
415 | ||
b67bfe0d | 416 | hlist_for_each_entry(fi, head, fib_hash) { |
09ad9bc7 | 417 | if (!net_eq(fi->fib_net, nfi->fib_net)) |
4814bdbd | 418 | continue; |
1da177e4 LT |
419 | if (fi->fib_nhs != nfi->fib_nhs) |
420 | continue; | |
421 | if (nfi->fib_protocol == fi->fib_protocol && | |
37e826c5 | 422 | nfi->fib_scope == fi->fib_scope && |
1da177e4 LT |
423 | nfi->fib_prefsrc == fi->fib_prefsrc && |
424 | nfi->fib_priority == fi->fib_priority && | |
f4ef85bb | 425 | nfi->fib_type == fi->fib_type && |
1da177e4 | 426 | memcmp(nfi->fib_metrics, fi->fib_metrics, |
fcd13f42 | 427 | sizeof(u32) * RTAX_MAX) == 0 && |
8a3d0316 | 428 | !((nfi->fib_flags ^ fi->fib_flags) & ~RTNH_COMPARE_MASK) && |
4c7e8084 | 429 | nh_comp(fi, nfi) == 0) |
1da177e4 LT |
430 | return fi; |
431 | } | |
432 | ||
433 | return NULL; | |
434 | } | |
435 | ||
1da177e4 | 436 | /* Check, that the gateway is already configured. |
6a31d2a9 | 437 | * Used only by redirect accept routine. |
1da177e4 | 438 | */ |
d878e72e | 439 | int ip_fib_check_default(__be32 gw, struct net_device *dev) |
1da177e4 LT |
440 | { |
441 | struct hlist_head *head; | |
1da177e4 | 442 | struct fib_nh *nh; |
1da177e4 | 443 | |
832b4c5e | 444 | spin_lock(&fib_info_lock); |
1da177e4 | 445 | |
d07418af ED |
446 | head = fib_info_devhash_bucket(dev); |
447 | ||
b67bfe0d | 448 | hlist_for_each_entry(nh, head, nh_hash) { |
b75ed8b1 DA |
449 | if (nh->fib_nh_dev == dev && |
450 | nh->fib_nh_gw4 == gw && | |
451 | !(nh->fib_nh_flags & RTNH_F_DEAD)) { | |
832b4c5e | 452 | spin_unlock(&fib_info_lock); |
1da177e4 LT |
453 | return 0; |
454 | } | |
455 | } | |
456 | ||
832b4c5e | 457 | spin_unlock(&fib_info_lock); |
1da177e4 LT |
458 | |
459 | return -1; | |
460 | } | |
461 | ||
1e7bdec6 | 462 | size_t fib_nlmsg_size(struct fib_info *fi) |
339bf98f TG |
463 | { |
464 | size_t payload = NLMSG_ALIGN(sizeof(struct rtmsg)) | |
465 | + nla_total_size(4) /* RTA_TABLE */ | |
466 | + nla_total_size(4) /* RTA_DST */ | |
467 | + nla_total_size(4) /* RTA_PRIORITY */ | |
ea697639 DB |
468 | + nla_total_size(4) /* RTA_PREFSRC */ |
469 | + nla_total_size(TCP_CA_NAME_MAX); /* RTAX_CC_ALGO */ | |
5481d73f | 470 | unsigned int nhs = fib_info_num_path(fi); |
339bf98f TG |
471 | |
472 | /* space for nested metrics */ | |
473 | payload += nla_total_size((RTAX_MAX * nla_total_size(4))); | |
474 | ||
4c7e8084 DA |
475 | if (fi->nh) |
476 | payload += nla_total_size(4); /* RTA_NH_ID */ | |
477 | ||
5481d73f | 478 | if (nhs) { |
571e7226 | 479 | size_t nh_encapsize = 0; |
5481d73f | 480 | /* Also handles the special case nhs == 1 */ |
339bf98f TG |
481 | |
482 | /* each nexthop is packed in an attribute */ | |
483 | size_t nhsize = nla_total_size(sizeof(struct rtnexthop)); | |
dcb1ecb5 | 484 | unsigned int i; |
339bf98f TG |
485 | |
486 | /* may contain flow and gateway attribute */ | |
487 | nhsize += 2 * nla_total_size(4); | |
488 | ||
571e7226 | 489 | /* grab encap info */ |
dcb1ecb5 DA |
490 | for (i = 0; i < fib_info_num_path(fi); i++) { |
491 | struct fib_nh_common *nhc = fib_info_nhc(fi, i); | |
492 | ||
493 | if (nhc->nhc_lwtstate) { | |
571e7226 RP |
494 | /* RTA_ENCAP_TYPE */ |
495 | nh_encapsize += lwtunnel_get_encap_size( | |
dcb1ecb5 | 496 | nhc->nhc_lwtstate); |
571e7226 RP |
497 | /* RTA_ENCAP */ |
498 | nh_encapsize += nla_total_size(2); | |
499 | } | |
dcb1ecb5 | 500 | } |
571e7226 | 501 | |
339bf98f | 502 | /* all nexthops are packed in a nested attribute */ |
5481d73f | 503 | payload += nla_total_size((nhs * nhsize) + nh_encapsize); |
571e7226 | 504 | |
339bf98f TG |
505 | } |
506 | ||
507 | return payload; | |
508 | } | |
509 | ||
81f7bf6c | 510 | void rtmsg_fib(int event, __be32 key, struct fib_alias *fa, |
9877b253 | 511 | int dst_len, u32 tb_id, const struct nl_info *info, |
b8f55831 | 512 | unsigned int nlm_flags) |
1da177e4 | 513 | { |
1e301fd0 | 514 | struct fib_rt_info fri; |
1da177e4 | 515 | struct sk_buff *skb; |
4e902c57 | 516 | u32 seq = info->nlh ? info->nlh->nlmsg_seq : 0; |
f21c7bc5 | 517 | int err = -ENOBUFS; |
1da177e4 | 518 | |
339bf98f | 519 | skb = nlmsg_new(fib_nlmsg_size(fa->fa_info), GFP_KERNEL); |
51456b29 | 520 | if (!skb) |
f21c7bc5 | 521 | goto errout; |
1da177e4 | 522 | |
1e301fd0 IS |
523 | fri.fi = fa->fa_info; |
524 | fri.tb_id = tb_id; | |
525 | fri.dst = key; | |
526 | fri.dst_len = dst_len; | |
888ade8f | 527 | fri.dscp = fa->fa_dscp; |
1e301fd0 | 528 | fri.type = fa->fa_type; |
9fcf986c ED |
529 | fri.offload = READ_ONCE(fa->offload); |
530 | fri.trap = READ_ONCE(fa->trap); | |
531 | fri.offload_failed = READ_ONCE(fa->offload_failed); | |
1e301fd0 | 532 | err = fib_dump_info(skb, info->portid, seq, event, &fri, nlm_flags); |
26932566 PM |
533 | if (err < 0) { |
534 | /* -EMSGSIZE implies BUG in fib_nlmsg_size() */ | |
535 | WARN_ON(err == -EMSGSIZE); | |
536 | kfree_skb(skb); | |
537 | goto errout; | |
538 | } | |
15e47304 | 539 | rtnl_notify(skb, info->nl_net, info->portid, RTNLGRP_IPV4_ROUTE, |
1ce85fe4 PNA |
540 | info->nlh, GFP_KERNEL); |
541 | return; | |
f21c7bc5 TG |
542 | errout: |
543 | if (err < 0) | |
4d1169c1 | 544 | rtnl_set_sk_err(info->nl_net, RTNLGRP_IPV4_ROUTE, err); |
1da177e4 LT |
545 | } |
546 | ||
c9cb6b6e SH |
547 | static int fib_detect_death(struct fib_info *fi, int order, |
548 | struct fib_info **last_resort, int *last_idx, | |
549 | int dflt) | |
1da177e4 | 550 | { |
619d1826 | 551 | const struct fib_nh_common *nhc = fib_info_nhc(fi, 0); |
1da177e4 LT |
552 | struct neighbour *n; |
553 | int state = NUD_NONE; | |
554 | ||
619d1826 DA |
555 | if (likely(nhc->nhc_gw_family == AF_INET)) |
556 | n = neigh_lookup(&arp_tbl, &nhc->nhc_gw.ipv4, nhc->nhc_dev); | |
557 | else if (nhc->nhc_gw_family == AF_INET6) | |
558 | n = neigh_lookup(ipv6_stub->nd_tbl, &nhc->nhc_gw.ipv6, | |
559 | nhc->nhc_dev); | |
560 | else | |
561 | n = NULL; | |
562 | ||
1da177e4 LT |
563 | if (n) { |
564 | state = n->nud_state; | |
565 | neigh_release(n); | |
88f64320 JA |
566 | } else { |
567 | return 0; | |
1da177e4 | 568 | } |
d9319100 | 569 | if (state == NUD_REACHABLE) |
1da177e4 | 570 | return 0; |
6a31d2a9 | 571 | if ((state & NUD_VALID) && order != dflt) |
1da177e4 | 572 | return 0; |
6a31d2a9 | 573 | if ((state & NUD_VALID) || |
88f64320 | 574 | (*last_idx < 0 && order > dflt && state != NUD_INCOMPLETE)) { |
1da177e4 LT |
575 | *last_resort = fi; |
576 | *last_idx = order; | |
577 | } | |
578 | return 1; | |
579 | } | |
580 | ||
faee6769 AA |
581 | int fib_nh_common_init(struct net *net, struct fib_nh_common *nhc, |
582 | struct nlattr *encap, u16 encap_type, | |
583 | void *cfg, gfp_t gfp_flags, | |
979e276e DA |
584 | struct netlink_ext_ack *extack) |
585 | { | |
0f457a36 DA |
586 | int err; |
587 | ||
588 | nhc->nhc_pcpu_rth_output = alloc_percpu_gfp(struct rtable __rcu *, | |
589 | gfp_flags); | |
590 | if (!nhc->nhc_pcpu_rth_output) | |
591 | return -ENOMEM; | |
592 | ||
979e276e DA |
593 | if (encap) { |
594 | struct lwtunnel_state *lwtstate; | |
979e276e DA |
595 | |
596 | if (encap_type == LWTUNNEL_ENCAP_NONE) { | |
597 | NL_SET_ERR_MSG(extack, "LWT encap type not specified"); | |
0f457a36 DA |
598 | err = -EINVAL; |
599 | goto lwt_failure; | |
979e276e | 600 | } |
faee6769 AA |
601 | err = lwtunnel_build_state(net, encap_type, encap, |
602 | nhc->nhc_family, cfg, &lwtstate, | |
603 | extack); | |
979e276e | 604 | if (err) |
0f457a36 | 605 | goto lwt_failure; |
979e276e DA |
606 | |
607 | nhc->nhc_lwtstate = lwtstate_get(lwtstate); | |
608 | } | |
609 | ||
610 | return 0; | |
0f457a36 DA |
611 | |
612 | lwt_failure: | |
613 | rt_fibinfo_free_cpus(nhc->nhc_pcpu_rth_output); | |
614 | nhc->nhc_pcpu_rth_output = NULL; | |
615 | return err; | |
979e276e DA |
616 | } |
617 | EXPORT_SYMBOL_GPL(fib_nh_common_init); | |
618 | ||
e4516ef6 DA |
619 | int fib_nh_init(struct net *net, struct fib_nh *nh, |
620 | struct fib_config *cfg, int nh_weight, | |
621 | struct netlink_ext_ack *extack) | |
622 | { | |
0f457a36 | 623 | int err; |
e4516ef6 | 624 | |
f1741730 DA |
625 | nh->fib_nh_family = AF_INET; |
626 | ||
faee6769 | 627 | err = fib_nh_common_init(net, &nh->nh_common, cfg->fc_encap, |
979e276e DA |
628 | cfg->fc_encap_type, cfg, GFP_KERNEL, extack); |
629 | if (err) | |
0f457a36 | 630 | return err; |
e4516ef6 | 631 | |
b75ed8b1 | 632 | nh->fib_nh_oif = cfg->fc_oif; |
a4ea5d43 DA |
633 | nh->fib_nh_gw_family = cfg->fc_gw_family; |
634 | if (cfg->fc_gw_family == AF_INET) | |
f35b794b | 635 | nh->fib_nh_gw4 = cfg->fc_gw4; |
a4ea5d43 DA |
636 | else if (cfg->fc_gw_family == AF_INET6) |
637 | nh->fib_nh_gw6 = cfg->fc_gw6; | |
638 | ||
b75ed8b1 | 639 | nh->fib_nh_flags = cfg->fc_flags; |
e4516ef6 DA |
640 | |
641 | #ifdef CONFIG_IP_ROUTE_CLASSID | |
642 | nh->nh_tclassid = cfg->fc_flow; | |
643 | if (nh->nh_tclassid) | |
213f5f8f | 644 | atomic_inc(&net->ipv4.fib_num_tclassid_users); |
e4516ef6 DA |
645 | #endif |
646 | #ifdef CONFIG_IP_ROUTE_MULTIPATH | |
b75ed8b1 | 647 | nh->fib_nh_weight = nh_weight; |
e4516ef6 DA |
648 | #endif |
649 | return 0; | |
e4516ef6 DA |
650 | } |
651 | ||
1da177e4 LT |
652 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
653 | ||
6d8422a1 DA |
654 | static int fib_count_nexthops(struct rtnexthop *rtnh, int remaining, |
655 | struct netlink_ext_ack *extack) | |
1da177e4 LT |
656 | { |
657 | int nhs = 0; | |
1da177e4 | 658 | |
4e902c57 | 659 | while (rtnh_ok(rtnh, remaining)) { |
1da177e4 | 660 | nhs++; |
4e902c57 TG |
661 | rtnh = rtnh_next(rtnh, &remaining); |
662 | } | |
663 | ||
664 | /* leftover implies invalid nexthop configuration, discard it */ | |
c3ab2b4e DA |
665 | if (remaining > 0) { |
666 | NL_SET_ERR_MSG(extack, | |
667 | "Invalid nexthop configuration - extra data after nexthops"); | |
668 | nhs = 0; | |
669 | } | |
670 | ||
671 | return nhs; | |
1da177e4 LT |
672 | } |
673 | ||
7a3429ba DA |
674 | static int fib_gw_from_attr(__be32 *gw, struct nlattr *nla, |
675 | struct netlink_ext_ack *extack) | |
676 | { | |
677 | if (nla_len(nla) < sizeof(*gw)) { | |
678 | NL_SET_ERR_MSG(extack, "Invalid IPv4 address in RTA_GATEWAY"); | |
679 | return -EINVAL; | |
680 | } | |
681 | ||
682 | *gw = nla_get_in_addr(nla); | |
683 | ||
684 | return 0; | |
685 | } | |
686 | ||
4c7e8084 | 687 | /* only called when fib_nh is integrated into fib_info */ |
4e902c57 | 688 | static int fib_get_nhs(struct fib_info *fi, struct rtnexthop *rtnh, |
6d8422a1 DA |
689 | int remaining, struct fib_config *cfg, |
690 | struct netlink_ext_ack *extack) | |
1da177e4 | 691 | { |
e4516ef6 DA |
692 | struct net *net = fi->fib_net; |
693 | struct fib_config fib_cfg; | |
5481d73f | 694 | struct fib_nh *nh; |
571e7226 RP |
695 | int ret; |
696 | ||
1da177e4 | 697 | change_nexthops(fi) { |
4e902c57 TG |
698 | int attrlen; |
699 | ||
e4516ef6 DA |
700 | memset(&fib_cfg, 0, sizeof(fib_cfg)); |
701 | ||
c3ab2b4e DA |
702 | if (!rtnh_ok(rtnh, remaining)) { |
703 | NL_SET_ERR_MSG(extack, | |
704 | "Invalid nexthop configuration - extra data after nexthop"); | |
1da177e4 | 705 | return -EINVAL; |
c3ab2b4e | 706 | } |
4e902c57 | 707 | |
c3ab2b4e DA |
708 | if (rtnh->rtnh_flags & (RTNH_F_DEAD | RTNH_F_LINKDOWN)) { |
709 | NL_SET_ERR_MSG(extack, | |
710 | "Invalid flags for nexthop - can not contain DEAD or LINKDOWN"); | |
80610229 | 711 | return -EINVAL; |
c3ab2b4e | 712 | } |
80610229 | 713 | |
e4516ef6 DA |
714 | fib_cfg.fc_flags = (cfg->fc_flags & ~0xFF) | rtnh->rtnh_flags; |
715 | fib_cfg.fc_oif = rtnh->rtnh_ifindex; | |
4e902c57 TG |
716 | |
717 | attrlen = rtnh_attrlen(rtnh); | |
718 | if (attrlen > 0) { | |
d1566268 | 719 | struct nlattr *nla, *nlav, *attrs = rtnh_attrs(rtnh); |
4e902c57 TG |
720 | |
721 | nla = nla_find(attrs, attrlen, RTA_GATEWAY); | |
d1566268 DA |
722 | nlav = nla_find(attrs, attrlen, RTA_VIA); |
723 | if (nla && nlav) { | |
724 | NL_SET_ERR_MSG(extack, | |
725 | "Nexthop configuration can not contain both GATEWAY and VIA"); | |
726 | return -EINVAL; | |
727 | } | |
f35b794b | 728 | if (nla) { |
7a3429ba DA |
729 | ret = fib_gw_from_attr(&fib_cfg.fc_gw4, nla, |
730 | extack); | |
731 | if (ret) | |
732 | goto errout; | |
733 | ||
d73f80f9 DA |
734 | if (fib_cfg.fc_gw4) |
735 | fib_cfg.fc_gw_family = AF_INET; | |
d1566268 DA |
736 | } else if (nlav) { |
737 | ret = fib_gw_from_via(&fib_cfg, nlav, extack); | |
738 | if (ret) | |
739 | goto errout; | |
f35b794b | 740 | } |
e4516ef6 | 741 | |
4e902c57 | 742 | nla = nla_find(attrs, attrlen, RTA_FLOW); |
664b9c4b DA |
743 | if (nla) { |
744 | if (nla_len(nla) < sizeof(u32)) { | |
745 | NL_SET_ERR_MSG(extack, "Invalid RTA_FLOW"); | |
746 | return -EINVAL; | |
747 | } | |
e4516ef6 | 748 | fib_cfg.fc_flow = nla_get_u32(nla); |
664b9c4b | 749 | } |
e4516ef6 DA |
750 | |
751 | fib_cfg.fc_encap = nla_find(attrs, attrlen, RTA_ENCAP); | |
8bda81a4 DA |
752 | /* RTA_ENCAP_TYPE length checked in |
753 | * lwtunnel_valid_encap_type_attr | |
754 | */ | |
e4516ef6 DA |
755 | nla = nla_find(attrs, attrlen, RTA_ENCAP_TYPE); |
756 | if (nla) | |
757 | fib_cfg.fc_encap_type = nla_get_u16(nla); | |
1da177e4 | 758 | } |
4e902c57 | 759 | |
e4516ef6 DA |
760 | ret = fib_nh_init(net, nexthop_nh, &fib_cfg, |
761 | rtnh->rtnh_hops + 1, extack); | |
762 | if (ret) | |
763 | goto errout; | |
764 | ||
4e902c57 | 765 | rtnh = rtnh_next(rtnh, &remaining); |
1da177e4 | 766 | } endfor_nexthops(fi); |
4e902c57 | 767 | |
571e7226 | 768 | ret = -EINVAL; |
5481d73f DA |
769 | nh = fib_info_nh(fi, 0); |
770 | if (cfg->fc_oif && nh->fib_nh_oif != cfg->fc_oif) { | |
e4516ef6 DA |
771 | NL_SET_ERR_MSG(extack, |
772 | "Nexthop device index does not match RTA_OIF"); | |
773 | goto errout; | |
774 | } | |
f35b794b | 775 | if (cfg->fc_gw_family) { |
5481d73f | 776 | if (cfg->fc_gw_family != nh->fib_nh_gw_family || |
f35b794b | 777 | (cfg->fc_gw_family == AF_INET && |
5481d73f | 778 | nh->fib_nh_gw4 != cfg->fc_gw4) || |
a4ea5d43 | 779 | (cfg->fc_gw_family == AF_INET6 && |
5481d73f | 780 | ipv6_addr_cmp(&nh->fib_nh_gw6, &cfg->fc_gw6))) { |
f35b794b | 781 | NL_SET_ERR_MSG(extack, |
a4ea5d43 | 782 | "Nexthop gateway does not match RTA_GATEWAY or RTA_VIA"); |
f35b794b DA |
783 | goto errout; |
784 | } | |
e4516ef6 DA |
785 | } |
786 | #ifdef CONFIG_IP_ROUTE_CLASSID | |
5481d73f | 787 | if (cfg->fc_flow && nh->nh_tclassid != cfg->fc_flow) { |
e4516ef6 DA |
788 | NL_SET_ERR_MSG(extack, |
789 | "Nexthop class id does not match RTA_FLOW"); | |
790 | goto errout; | |
791 | } | |
792 | #endif | |
793 | ret = 0; | |
571e7226 RP |
794 | errout: |
795 | return ret; | |
1da177e4 LT |
796 | } |
797 | ||
4c7e8084 | 798 | /* only called when fib_nh is integrated into fib_info */ |
0e884c78 PN |
799 | static void fib_rebalance(struct fib_info *fi) |
800 | { | |
801 | int total; | |
802 | int w; | |
0e884c78 | 803 | |
5481d73f | 804 | if (fib_info_num_path(fi) < 2) |
0e884c78 PN |
805 | return; |
806 | ||
807 | total = 0; | |
808 | for_nexthops(fi) { | |
b75ed8b1 | 809 | if (nh->fib_nh_flags & RTNH_F_DEAD) |
0e884c78 PN |
810 | continue; |
811 | ||
b75ed8b1 DA |
812 | if (ip_ignore_linkdown(nh->fib_nh_dev) && |
813 | nh->fib_nh_flags & RTNH_F_LINKDOWN) | |
0e884c78 PN |
814 | continue; |
815 | ||
b75ed8b1 | 816 | total += nh->fib_nh_weight; |
0e884c78 PN |
817 | } endfor_nexthops(fi); |
818 | ||
819 | w = 0; | |
820 | change_nexthops(fi) { | |
821 | int upper_bound; | |
822 | ||
b75ed8b1 | 823 | if (nexthop_nh->fib_nh_flags & RTNH_F_DEAD) { |
0e884c78 | 824 | upper_bound = -1; |
b75ed8b1 DA |
825 | } else if (ip_ignore_linkdown(nexthop_nh->fib_nh_dev) && |
826 | nexthop_nh->fib_nh_flags & RTNH_F_LINKDOWN) { | |
0e884c78 PN |
827 | upper_bound = -1; |
828 | } else { | |
b75ed8b1 | 829 | w += nexthop_nh->fib_nh_weight; |
0a837fe4 PN |
830 | upper_bound = DIV_ROUND_CLOSEST_ULL((u64)w << 31, |
831 | total) - 1; | |
0e884c78 PN |
832 | } |
833 | ||
b75ed8b1 | 834 | atomic_set(&nexthop_nh->fib_nh_upper_bound, upper_bound); |
0e884c78 | 835 | } endfor_nexthops(fi); |
0e884c78 | 836 | } |
0e884c78 PN |
837 | #else /* CONFIG_IP_ROUTE_MULTIPATH */ |
838 | ||
8373c6c8 DA |
839 | static int fib_get_nhs(struct fib_info *fi, struct rtnexthop *rtnh, |
840 | int remaining, struct fib_config *cfg, | |
841 | struct netlink_ext_ack *extack) | |
842 | { | |
843 | NL_SET_ERR_MSG(extack, "Multipath support not enabled in kernel"); | |
844 | ||
845 | return -EINVAL; | |
846 | } | |
847 | ||
0e884c78 | 848 | #define fib_rebalance(fi) do { } while (0) |
0e884c78 PN |
849 | |
850 | #endif /* CONFIG_IP_ROUTE_MULTIPATH */ | |
1da177e4 | 851 | |
faee6769 | 852 | static int fib_encap_match(struct net *net, u16 encap_type, |
e01286ef | 853 | struct nlattr *encap, |
30357d7d | 854 | const struct fib_nh *nh, |
9ae28727 DA |
855 | const struct fib_config *cfg, |
856 | struct netlink_ext_ack *extack) | |
571e7226 RP |
857 | { |
858 | struct lwtunnel_state *lwtstate; | |
df383e62 | 859 | int ret, result = 0; |
571e7226 RP |
860 | |
861 | if (encap_type == LWTUNNEL_ENCAP_NONE) | |
862 | return 0; | |
863 | ||
faee6769 | 864 | ret = lwtunnel_build_state(net, encap_type, encap, AF_INET, |
9ae28727 | 865 | cfg, &lwtstate, extack); |
df383e62 | 866 | if (!ret) { |
b75ed8b1 | 867 | result = lwtunnel_cmp_encap(lwtstate, nh->fib_nh_lws); |
df383e62 JB |
868 | lwtstate_free(lwtstate); |
869 | } | |
571e7226 | 870 | |
df383e62 | 871 | return result; |
571e7226 RP |
872 | } |
873 | ||
faee6769 | 874 | int fib_nh_match(struct net *net, struct fib_config *cfg, struct fib_info *fi, |
9ae28727 | 875 | struct netlink_ext_ack *extack) |
1da177e4 LT |
876 | { |
877 | #ifdef CONFIG_IP_ROUTE_MULTIPATH | |
4e902c57 TG |
878 | struct rtnexthop *rtnh; |
879 | int remaining; | |
1da177e4 LT |
880 | #endif |
881 | ||
4e902c57 | 882 | if (cfg->fc_priority && cfg->fc_priority != fi->fib_priority) |
1da177e4 LT |
883 | return 1; |
884 | ||
493ced1a DA |
885 | if (cfg->fc_nh_id) { |
886 | if (fi->nh && cfg->fc_nh_id == fi->nh->id) | |
887 | return 0; | |
888 | return 1; | |
889 | } | |
890 | ||
f35b794b | 891 | if (cfg->fc_oif || cfg->fc_gw_family) { |
6bf92d70 | 892 | struct fib_nh *nh; |
5481d73f | 893 | |
6bf92d70 NA |
894 | /* cannot match on nexthop object attributes */ |
895 | if (fi->nh) | |
896 | return 1; | |
897 | ||
898 | nh = fib_info_nh(fi, 0); | |
571e7226 | 899 | if (cfg->fc_encap) { |
faee6769 AA |
900 | if (fib_encap_match(net, cfg->fc_encap_type, |
901 | cfg->fc_encap, nh, cfg, extack)) | |
9ae28727 | 902 | return 1; |
571e7226 | 903 | } |
a8c6db1d SB |
904 | #ifdef CONFIG_IP_ROUTE_CLASSID |
905 | if (cfg->fc_flow && | |
5481d73f | 906 | cfg->fc_flow != nh->nh_tclassid) |
a8c6db1d SB |
907 | return 1; |
908 | #endif | |
5481d73f | 909 | if ((cfg->fc_oif && cfg->fc_oif != nh->fib_nh_oif) || |
f35b794b | 910 | (cfg->fc_gw_family && |
5481d73f | 911 | cfg->fc_gw_family != nh->fib_nh_gw_family)) |
f35b794b DA |
912 | return 1; |
913 | ||
914 | if (cfg->fc_gw_family == AF_INET && | |
5481d73f | 915 | cfg->fc_gw4 != nh->fib_nh_gw4) |
f35b794b DA |
916 | return 1; |
917 | ||
a4ea5d43 | 918 | if (cfg->fc_gw_family == AF_INET6 && |
5481d73f | 919 | ipv6_addr_cmp(&cfg->fc_gw6, &nh->fib_nh_gw6)) |
a4ea5d43 DA |
920 | return 1; |
921 | ||
f35b794b | 922 | return 0; |
1da177e4 LT |
923 | } |
924 | ||
925 | #ifdef CONFIG_IP_ROUTE_MULTIPATH | |
51456b29 | 926 | if (!cfg->fc_mp) |
1da177e4 | 927 | return 0; |
4e902c57 TG |
928 | |
929 | rtnh = cfg->fc_mp; | |
930 | remaining = cfg->fc_mp_len; | |
e905a9ed | 931 | |
1da177e4 | 932 | for_nexthops(fi) { |
4e902c57 | 933 | int attrlen; |
1da177e4 | 934 | |
4e902c57 | 935 | if (!rtnh_ok(rtnh, remaining)) |
1da177e4 | 936 | return -EINVAL; |
4e902c57 | 937 | |
b75ed8b1 | 938 | if (rtnh->rtnh_ifindex && rtnh->rtnh_ifindex != nh->fib_nh_oif) |
1da177e4 | 939 | return 1; |
4e902c57 TG |
940 | |
941 | attrlen = rtnh_attrlen(rtnh); | |
f76936d0 | 942 | if (attrlen > 0) { |
d1566268 | 943 | struct nlattr *nla, *nlav, *attrs = rtnh_attrs(rtnh); |
7a3429ba | 944 | int err; |
4e902c57 TG |
945 | |
946 | nla = nla_find(attrs, attrlen, RTA_GATEWAY); | |
d1566268 DA |
947 | nlav = nla_find(attrs, attrlen, RTA_VIA); |
948 | if (nla && nlav) { | |
949 | NL_SET_ERR_MSG(extack, | |
950 | "Nexthop configuration can not contain both GATEWAY and VIA"); | |
951 | return -EINVAL; | |
952 | } | |
953 | ||
954 | if (nla) { | |
7a3429ba DA |
955 | __be32 gw; |
956 | ||
957 | err = fib_gw_from_attr(&gw, nla, extack); | |
958 | if (err) | |
959 | return err; | |
960 | ||
d1566268 | 961 | if (nh->fib_nh_gw_family != AF_INET || |
7a3429ba | 962 | gw != nh->fib_nh_gw4) |
d1566268 DA |
963 | return 1; |
964 | } else if (nlav) { | |
965 | struct fib_config cfg2; | |
d1566268 DA |
966 | |
967 | err = fib_gw_from_via(&cfg2, nlav, extack); | |
968 | if (err) | |
969 | return err; | |
970 | ||
971 | switch (nh->fib_nh_gw_family) { | |
972 | case AF_INET: | |
973 | if (cfg2.fc_gw_family != AF_INET || | |
974 | cfg2.fc_gw4 != nh->fib_nh_gw4) | |
975 | return 1; | |
976 | break; | |
977 | case AF_INET6: | |
978 | if (cfg2.fc_gw_family != AF_INET6 || | |
979 | ipv6_addr_cmp(&cfg2.fc_gw6, | |
980 | &nh->fib_nh_gw6)) | |
981 | return 1; | |
982 | break; | |
983 | } | |
984 | } | |
985 | ||
c7066f70 | 986 | #ifdef CONFIG_IP_ROUTE_CLASSID |
4e902c57 | 987 | nla = nla_find(attrs, attrlen, RTA_FLOW); |
664b9c4b DA |
988 | if (nla) { |
989 | if (nla_len(nla) < sizeof(u32)) { | |
990 | NL_SET_ERR_MSG(extack, "Invalid RTA_FLOW"); | |
991 | return -EINVAL; | |
992 | } | |
993 | if (nla_get_u32(nla) != nh->nh_tclassid) | |
994 | return 1; | |
995 | } | |
1da177e4 LT |
996 | #endif |
997 | } | |
4e902c57 TG |
998 | |
999 | rtnh = rtnh_next(rtnh, &remaining); | |
1da177e4 LT |
1000 | } endfor_nexthops(fi); |
1001 | #endif | |
1002 | return 0; | |
1003 | } | |
1004 | ||
5f9ae3d9 XL |
1005 | bool fib_metrics_match(struct fib_config *cfg, struct fib_info *fi) |
1006 | { | |
1007 | struct nlattr *nla; | |
1008 | int remaining; | |
1009 | ||
1010 | if (!cfg->fc_mx) | |
1011 | return true; | |
1012 | ||
1013 | nla_for_each_attr(nla, cfg->fc_mx, cfg->fc_mx_len, remaining) { | |
1014 | int type = nla_type(nla); | |
d03a4557 | 1015 | u32 fi_val, val; |
5f9ae3d9 XL |
1016 | |
1017 | if (!type) | |
1018 | continue; | |
1019 | if (type > RTAX_MAX) | |
1020 | return false; | |
1021 | ||
1022 | if (type == RTAX_CC_ALGO) { | |
1023 | char tmp[TCP_CA_NAME_MAX]; | |
1024 | bool ecn_ca = false; | |
1025 | ||
872f6903 | 1026 | nla_strscpy(tmp, nla, sizeof(tmp)); |
6670e152 | 1027 | val = tcp_ca_get_key_by_name(fi->fib_net, tmp, &ecn_ca); |
5f9ae3d9 | 1028 | } else { |
5b5e7a0d ED |
1029 | if (nla_len(nla) != sizeof(u32)) |
1030 | return false; | |
5f9ae3d9 XL |
1031 | val = nla_get_u32(nla); |
1032 | } | |
1033 | ||
d03a4557 PS |
1034 | fi_val = fi->fib_metrics->metrics[type - 1]; |
1035 | if (type == RTAX_FEATURES) | |
1036 | fi_val &= ~DST_FEATURE_ECN_CA; | |
1037 | ||
1038 | if (fi_val != val) | |
5f9ae3d9 XL |
1039 | return false; |
1040 | } | |
1041 | ||
1042 | return true; | |
1043 | } | |
1044 | ||
717a8f5b DA |
1045 | static int fib_check_nh_v6_gw(struct net *net, struct fib_nh *nh, |
1046 | u32 table, struct netlink_ext_ack *extack) | |
1047 | { | |
1048 | struct fib6_config cfg = { | |
1049 | .fc_table = table, | |
1050 | .fc_flags = nh->fib_nh_flags | RTF_GATEWAY, | |
1051 | .fc_ifindex = nh->fib_nh_oif, | |
1052 | .fc_gateway = nh->fib_nh_gw6, | |
1053 | }; | |
1054 | struct fib6_nh fib6_nh = {}; | |
1055 | int err; | |
1056 | ||
1057 | err = ipv6_stub->fib6_nh_init(net, &fib6_nh, &cfg, GFP_KERNEL, extack); | |
1058 | if (!err) { | |
1059 | nh->fib_nh_dev = fib6_nh.fib_nh_dev; | |
e44b14eb | 1060 | dev_hold_track(nh->fib_nh_dev, &nh->fib_nh_dev_tracker, GFP_KERNEL); |
717a8f5b DA |
1061 | nh->fib_nh_oif = nh->fib_nh_dev->ifindex; |
1062 | nh->fib_nh_scope = RT_SCOPE_LINK; | |
1063 | ||
1064 | ipv6_stub->fib6_nh_release(&fib6_nh); | |
1065 | } | |
1066 | ||
1067 | return err; | |
1068 | } | |
1da177e4 LT |
1069 | |
1070 | /* | |
6a31d2a9 ED |
1071 | * Picture |
1072 | * ------- | |
1073 | * | |
1074 | * Semantics of nexthop is very messy by historical reasons. | |
1075 | * We have to take into account, that: | |
1076 | * a) gateway can be actually local interface address, | |
1077 | * so that gatewayed route is direct. | |
1078 | * b) gateway must be on-link address, possibly | |
1079 | * described not by an ifaddr, but also by a direct route. | |
1080 | * c) If both gateway and interface are specified, they should not | |
1081 | * contradict. | |
1082 | * d) If we use tunnel routes, gateway could be not on-link. | |
1083 | * | |
1084 | * Attempt to reconcile all of these (alas, self-contradictory) conditions | |
1085 | * results in pretty ugly and hairy code with obscure logic. | |
1086 | * | |
1087 | * I chose to generalized it instead, so that the size | |
1088 | * of code does not increase practically, but it becomes | |
1089 | * much more general. | |
1090 | * Every prefix is assigned a "scope" value: "host" is local address, | |
1091 | * "link" is direct route, | |
1092 | * [ ... "site" ... "interior" ... ] | |
1093 | * and "universe" is true gateway route with global meaning. | |
1094 | * | |
1095 | * Every prefix refers to a set of "nexthop"s (gw, oif), | |
1096 | * where gw must have narrower scope. This recursion stops | |
1097 | * when gw has LOCAL scope or if "nexthop" is declared ONLINK, | |
1098 | * which means that gw is forced to be on link. | |
1099 | * | |
1100 | * Code is still hairy, but now it is apparently logically | |
1101 | * consistent and very flexible. F.e. as by-product it allows | |
1102 | * to co-exists in peace independent exterior and interior | |
1103 | * routing processes. | |
1104 | * | |
1105 | * Normally it looks as following. | |
1106 | * | |
1107 | * {universe prefix} -> (gw, oif) [scope link] | |
1108 | * | | |
1109 | * |-> {link prefix} -> (gw, oif) [scope local] | |
1110 | * | | |
1111 | * |-> {local prefix} (terminal node) | |
1da177e4 | 1112 | */ |
448d7248 DA |
1113 | static int fib_check_nh_v4_gw(struct net *net, struct fib_nh *nh, u32 table, |
1114 | u8 scope, struct netlink_ext_ack *extack) | |
1da177e4 | 1115 | { |
6a31d2a9 | 1116 | struct net_device *dev; |
448d7248 | 1117 | struct fib_result res; |
c3fee640 | 1118 | int err = 0; |
1da177e4 | 1119 | |
448d7248 DA |
1120 | if (nh->fib_nh_flags & RTNH_F_ONLINK) { |
1121 | unsigned int addr_type; | |
1da177e4 | 1122 | |
448d7248 DA |
1123 | if (scope >= RT_SCOPE_LINK) { |
1124 | NL_SET_ERR_MSG(extack, "Nexthop has invalid scope"); | |
1125 | return -EINVAL; | |
1da177e4 | 1126 | } |
448d7248 DA |
1127 | dev = __dev_get_by_index(net, nh->fib_nh_oif); |
1128 | if (!dev) { | |
1129 | NL_SET_ERR_MSG(extack, "Nexthop device required for onlink"); | |
1130 | return -ENODEV; | |
1da177e4 | 1131 | } |
448d7248 DA |
1132 | if (!(dev->flags & IFF_UP)) { |
1133 | NL_SET_ERR_MSG(extack, "Nexthop device is not up"); | |
1134 | return -ENETDOWN; | |
c3ab2b4e | 1135 | } |
448d7248 DA |
1136 | addr_type = inet_addr_type_dev_table(net, dev, nh->fib_nh_gw4); |
1137 | if (addr_type != RTN_UNICAST) { | |
1138 | NL_SET_ERR_MSG(extack, "Nexthop has invalid gateway"); | |
1139 | return -EINVAL; | |
c3ab2b4e | 1140 | } |
8a3d0316 | 1141 | if (!netif_carrier_ok(dev)) |
b75ed8b1 | 1142 | nh->fib_nh_flags |= RTNH_F_LINKDOWN; |
448d7248 | 1143 | nh->fib_nh_dev = dev; |
e44b14eb | 1144 | dev_hold_track(dev, &nh->fib_nh_dev_tracker, GFP_ATOMIC); |
448d7248 DA |
1145 | nh->fib_nh_scope = RT_SCOPE_LINK; |
1146 | return 0; | |
1147 | } | |
1148 | rcu_read_lock(); | |
1149 | { | |
1150 | struct fib_table *tbl = NULL; | |
1151 | struct flowi4 fl4 = { | |
1152 | .daddr = nh->fib_nh_gw4, | |
1153 | .flowi4_scope = scope + 1, | |
1154 | .flowi4_oif = nh->fib_nh_oif, | |
1155 | .flowi4_iif = LOOPBACK_IFINDEX, | |
1156 | }; | |
1157 | ||
1158 | /* It is not necessary, but requires a bit of thinking */ | |
1159 | if (fl4.flowi4_scope < RT_SCOPE_LINK) | |
1160 | fl4.flowi4_scope = RT_SCOPE_LINK; | |
1161 | ||
5eea3a63 | 1162 | if (table && table != RT_TABLE_MAIN) |
448d7248 DA |
1163 | tbl = fib_get_table(net, table); |
1164 | ||
1165 | if (tbl) | |
1166 | err = fib_table_lookup(tbl, &fl4, &res, | |
1167 | FIB_LOOKUP_IGNORE_LINKSTATE | | |
1168 | FIB_LOOKUP_NOREF); | |
1169 | ||
1170 | /* on error or if no table given do full lookup. This | |
1171 | * is needed for example when nexthops are in the local | |
1172 | * table rather than the given table | |
1173 | */ | |
1174 | if (!tbl || err) { | |
1175 | err = fib_lookup(net, &fl4, &res, | |
1176 | FIB_LOOKUP_IGNORE_LINKSTATE); | |
c3ab2b4e | 1177 | } |
448d7248 DA |
1178 | |
1179 | if (err) { | |
1180 | NL_SET_ERR_MSG(extack, "Nexthop has invalid gateway"); | |
8723e1b4 | 1181 | goto out; |
c3ab2b4e | 1182 | } |
1da177e4 | 1183 | } |
448d7248 DA |
1184 | |
1185 | err = -EINVAL; | |
1186 | if (res.type != RTN_UNICAST && res.type != RTN_LOCAL) { | |
1187 | NL_SET_ERR_MSG(extack, "Nexthop has invalid gateway"); | |
1188 | goto out; | |
1189 | } | |
1190 | nh->fib_nh_scope = res.scope; | |
1191 | nh->fib_nh_oif = FIB_RES_OIF(res); | |
1192 | nh->fib_nh_dev = dev = FIB_RES_DEV(res); | |
1193 | if (!dev) { | |
1194 | NL_SET_ERR_MSG(extack, | |
1195 | "No egress device for nexthop gateway"); | |
1196 | goto out; | |
1197 | } | |
e44b14eb | 1198 | dev_hold_track(dev, &nh->fib_nh_dev_tracker, GFP_ATOMIC); |
448d7248 DA |
1199 | if (!netif_carrier_ok(dev)) |
1200 | nh->fib_nh_flags |= RTNH_F_LINKDOWN; | |
1201 | err = (dev->flags & IFF_UP) ? 0 : -ENETDOWN; | |
8723e1b4 ED |
1202 | out: |
1203 | rcu_read_unlock(); | |
1204 | return err; | |
1da177e4 | 1205 | } |
448d7248 DA |
1206 | |
1207 | static int fib_check_nh_nongw(struct net *net, struct fib_nh *nh, | |
1208 | struct netlink_ext_ack *extack) | |
1209 | { | |
1210 | struct in_device *in_dev; | |
1211 | int err; | |
1212 | ||
1213 | if (nh->fib_nh_flags & (RTNH_F_PERVASIVE | RTNH_F_ONLINK)) { | |
1214 | NL_SET_ERR_MSG(extack, | |
1215 | "Invalid flags for nexthop - PERVASIVE and ONLINK can not be set"); | |
1216 | return -EINVAL; | |
1217 | } | |
1218 | ||
1219 | rcu_read_lock(); | |
1220 | ||
1221 | err = -ENODEV; | |
1222 | in_dev = inetdev_by_index(net, nh->fib_nh_oif); | |
1223 | if (!in_dev) | |
1224 | goto out; | |
1225 | err = -ENETDOWN; | |
1226 | if (!(in_dev->dev->flags & IFF_UP)) { | |
1227 | NL_SET_ERR_MSG(extack, "Device for nexthop is not up"); | |
1228 | goto out; | |
1229 | } | |
1230 | ||
1231 | nh->fib_nh_dev = in_dev->dev; | |
e44b14eb | 1232 | dev_hold_track(nh->fib_nh_dev, &nh->fib_nh_dev_tracker, GFP_ATOMIC); |
448d7248 DA |
1233 | nh->fib_nh_scope = RT_SCOPE_HOST; |
1234 | if (!netif_carrier_ok(nh->fib_nh_dev)) | |
1235 | nh->fib_nh_flags |= RTNH_F_LINKDOWN; | |
1236 | err = 0; | |
1237 | out: | |
1238 | rcu_read_unlock(); | |
1239 | return err; | |
1240 | } | |
1241 | ||
ac1fab2d DA |
1242 | int fib_check_nh(struct net *net, struct fib_nh *nh, u32 table, u8 scope, |
1243 | struct netlink_ext_ack *extack) | |
448d7248 | 1244 | { |
448d7248 DA |
1245 | int err; |
1246 | ||
1247 | if (nh->fib_nh_gw_family == AF_INET) | |
ac1fab2d | 1248 | err = fib_check_nh_v4_gw(net, nh, table, scope, extack); |
717a8f5b DA |
1249 | else if (nh->fib_nh_gw_family == AF_INET6) |
1250 | err = fib_check_nh_v6_gw(net, nh, table, extack); | |
448d7248 DA |
1251 | else |
1252 | err = fib_check_nh_nongw(net, nh, extack); | |
1253 | ||
1254 | return err; | |
1255 | } | |
1da177e4 | 1256 | |
79eb15da ED |
1257 | static struct hlist_head * |
1258 | fib_info_laddrhash_bucket(const struct net *net, __be32 val) | |
1da177e4 | 1259 | { |
79eb15da ED |
1260 | u32 slot = hash_32(net_hash_mix(net) ^ (__force u32)val, |
1261 | fib_info_hash_bits); | |
1da177e4 | 1262 | |
79eb15da | 1263 | return &fib_info_laddrhash[slot]; |
1da177e4 LT |
1264 | } |
1265 | ||
123b9731 DM |
1266 | static void fib_info_hash_move(struct hlist_head *new_info_hash, |
1267 | struct hlist_head *new_laddrhash, | |
1268 | unsigned int new_size) | |
1da177e4 | 1269 | { |
b7656e7f | 1270 | struct hlist_head *old_info_hash, *old_laddrhash; |
123b9731 | 1271 | unsigned int old_size = fib_info_hash_size; |
ca73b68a | 1272 | unsigned int i; |
1da177e4 | 1273 | |
832b4c5e | 1274 | spin_lock_bh(&fib_info_lock); |
b7656e7f DM |
1275 | old_info_hash = fib_info_hash; |
1276 | old_laddrhash = fib_info_laddrhash; | |
123b9731 | 1277 | fib_info_hash_size = new_size; |
79eb15da | 1278 | fib_info_hash_bits = ilog2(new_size); |
1da177e4 LT |
1279 | |
1280 | for (i = 0; i < old_size; i++) { | |
1281 | struct hlist_head *head = &fib_info_hash[i]; | |
b67bfe0d | 1282 | struct hlist_node *n; |
1da177e4 LT |
1283 | struct fib_info *fi; |
1284 | ||
b67bfe0d | 1285 | hlist_for_each_entry_safe(fi, n, head, fib_hash) { |
1da177e4 LT |
1286 | struct hlist_head *dest; |
1287 | unsigned int new_hash; | |
1288 | ||
1da177e4 LT |
1289 | new_hash = fib_info_hashfn(fi); |
1290 | dest = &new_info_hash[new_hash]; | |
1291 | hlist_add_head(&fi->fib_hash, dest); | |
1292 | } | |
1293 | } | |
1294 | fib_info_hash = new_info_hash; | |
1295 | ||
79eb15da | 1296 | fib_info_laddrhash = new_laddrhash; |
1da177e4 | 1297 | for (i = 0; i < old_size; i++) { |
79eb15da | 1298 | struct hlist_head *lhead = &old_laddrhash[i]; |
b67bfe0d | 1299 | struct hlist_node *n; |
1da177e4 LT |
1300 | struct fib_info *fi; |
1301 | ||
b67bfe0d | 1302 | hlist_for_each_entry_safe(fi, n, lhead, fib_lhash) { |
1da177e4 | 1303 | struct hlist_head *ldest; |
1da177e4 | 1304 | |
79eb15da ED |
1305 | ldest = fib_info_laddrhash_bucket(fi->fib_net, |
1306 | fi->fib_prefsrc); | |
1da177e4 LT |
1307 | hlist_add_head(&fi->fib_lhash, ldest); |
1308 | } | |
1309 | } | |
1da177e4 | 1310 | |
832b4c5e | 1311 | spin_unlock_bh(&fib_info_lock); |
b7656e7f | 1312 | |
ca73b68a ED |
1313 | kvfree(old_info_hash); |
1314 | kvfree(old_laddrhash); | |
1da177e4 LT |
1315 | } |
1316 | ||
dcb1ecb5 DA |
1317 | __be32 fib_info_update_nhc_saddr(struct net *net, struct fib_nh_common *nhc, |
1318 | unsigned char scope) | |
436c3b66 | 1319 | { |
dcb1ecb5 DA |
1320 | struct fib_nh *nh; |
1321 | ||
1322 | if (nhc->nhc_family != AF_INET) | |
1323 | return inet_select_addr(nhc->nhc_dev, 0, scope); | |
1324 | ||
1325 | nh = container_of(nhc, struct fib_nh, nh_common); | |
c3669486 | 1326 | nh->nh_saddr = inet_select_addr(nh->fib_nh_dev, nh->fib_nh_gw4, scope); |
436c3b66 DM |
1327 | nh->nh_saddr_genid = atomic_read(&net->ipv4.dev_addr_genid); |
1328 | ||
1329 | return nh->nh_saddr; | |
1330 | } | |
1331 | ||
eba618ab DA |
1332 | __be32 fib_result_prefsrc(struct net *net, struct fib_result *res) |
1333 | { | |
1334 | struct fib_nh_common *nhc = res->nhc; | |
eba618ab DA |
1335 | |
1336 | if (res->fi->fib_prefsrc) | |
1337 | return res->fi->fib_prefsrc; | |
1338 | ||
dcb1ecb5 DA |
1339 | if (nhc->nhc_family == AF_INET) { |
1340 | struct fib_nh *nh; | |
eba618ab | 1341 | |
dcb1ecb5 DA |
1342 | nh = container_of(nhc, struct fib_nh, nh_common); |
1343 | if (nh->nh_saddr_genid == atomic_read(&net->ipv4.dev_addr_genid)) | |
1344 | return nh->nh_saddr; | |
1345 | } | |
1346 | ||
1347 | return fib_info_update_nhc_saddr(net, nhc, res->fi->fib_scope); | |
eba618ab DA |
1348 | } |
1349 | ||
021dd3b8 DA |
1350 | static bool fib_valid_prefsrc(struct fib_config *cfg, __be32 fib_prefsrc) |
1351 | { | |
1352 | if (cfg->fc_type != RTN_LOCAL || !cfg->fc_dst || | |
1353 | fib_prefsrc != cfg->fc_dst) { | |
9b8ff518 | 1354 | u32 tb_id = cfg->fc_table; |
e1b8d903 | 1355 | int rc; |
021dd3b8 DA |
1356 | |
1357 | if (tb_id == RT_TABLE_MAIN) | |
1358 | tb_id = RT_TABLE_LOCAL; | |
1359 | ||
e1b8d903 DA |
1360 | rc = inet_addr_type_table(cfg->fc_nlinfo.nl_net, |
1361 | fib_prefsrc, tb_id); | |
1362 | ||
1363 | if (rc != RTN_LOCAL && tb_id != RT_TABLE_LOCAL) { | |
1364 | rc = inet_addr_type_table(cfg->fc_nlinfo.nl_net, | |
1365 | fib_prefsrc, RT_TABLE_LOCAL); | |
021dd3b8 | 1366 | } |
e1b8d903 DA |
1367 | |
1368 | if (rc != RTN_LOCAL) | |
1369 | return false; | |
021dd3b8 DA |
1370 | } |
1371 | return true; | |
1372 | } | |
1373 | ||
6d8422a1 DA |
1374 | struct fib_info *fib_create_info(struct fib_config *cfg, |
1375 | struct netlink_ext_ack *extack) | |
1da177e4 LT |
1376 | { |
1377 | int err; | |
1378 | struct fib_info *fi = NULL; | |
4c7e8084 | 1379 | struct nexthop *nh = NULL; |
1da177e4 | 1380 | struct fib_info *ofi; |
1da177e4 | 1381 | int nhs = 1; |
7462bd74 | 1382 | struct net *net = cfg->fc_nlinfo.nl_net; |
1da177e4 | 1383 | |
4c8237cd DM |
1384 | if (cfg->fc_type > RTN_MAX) |
1385 | goto err_inval; | |
1386 | ||
1da177e4 | 1387 | /* Fast check to catch the most weird cases */ |
c3ab2b4e DA |
1388 | if (fib_props[cfg->fc_type].scope > cfg->fc_scope) { |
1389 | NL_SET_ERR_MSG(extack, "Invalid scope"); | |
1da177e4 | 1390 | goto err_inval; |
c3ab2b4e | 1391 | } |
1da177e4 | 1392 | |
c3ab2b4e DA |
1393 | if (cfg->fc_flags & (RTNH_F_DEAD | RTNH_F_LINKDOWN)) { |
1394 | NL_SET_ERR_MSG(extack, | |
1395 | "Invalid rtm_flags - can not contain DEAD or LINKDOWN"); | |
80610229 | 1396 | goto err_inval; |
c3ab2b4e | 1397 | } |
80610229 | 1398 | |
493ced1a | 1399 | if (cfg->fc_nh_id) { |
6c48ea5f DA |
1400 | if (!cfg->fc_mx) { |
1401 | fi = fib_find_info_nh(net, cfg); | |
1402 | if (fi) { | |
79976892 | 1403 | refcount_inc(&fi->fib_treeref); |
6c48ea5f DA |
1404 | return fi; |
1405 | } | |
1406 | } | |
1407 | ||
493ced1a DA |
1408 | nh = nexthop_find_by_id(net, cfg->fc_nh_id); |
1409 | if (!nh) { | |
1410 | NL_SET_ERR_MSG(extack, "Nexthop id does not exist"); | |
1411 | goto err_inval; | |
1412 | } | |
1413 | nhs = 0; | |
1414 | } | |
1415 | ||
1da177e4 | 1416 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
4e902c57 | 1417 | if (cfg->fc_mp) { |
6d8422a1 | 1418 | nhs = fib_count_nexthops(cfg->fc_mp, cfg->fc_mp_len, extack); |
1da177e4 LT |
1419 | if (nhs == 0) |
1420 | goto err_inval; | |
1421 | } | |
1422 | #endif | |
1da177e4 LT |
1423 | |
1424 | err = -ENOBUFS; | |
0a6e6b3c ED |
1425 | |
1426 | /* Paired with WRITE_ONCE() in fib_release_info() */ | |
1427 | if (READ_ONCE(fib_info_cnt) >= fib_info_hash_size) { | |
123b9731 | 1428 | unsigned int new_size = fib_info_hash_size << 1; |
1da177e4 LT |
1429 | struct hlist_head *new_info_hash; |
1430 | struct hlist_head *new_laddrhash; | |
ca73b68a | 1431 | size_t bytes; |
1da177e4 LT |
1432 | |
1433 | if (!new_size) | |
d94ce9b2 | 1434 | new_size = 16; |
ca73b68a ED |
1435 | bytes = (size_t)new_size * sizeof(struct hlist_head *); |
1436 | new_info_hash = kvzalloc(bytes, GFP_KERNEL); | |
1437 | new_laddrhash = kvzalloc(bytes, GFP_KERNEL); | |
1da177e4 | 1438 | if (!new_info_hash || !new_laddrhash) { |
ca73b68a ED |
1439 | kvfree(new_info_hash); |
1440 | kvfree(new_laddrhash); | |
1441 | } else { | |
123b9731 | 1442 | fib_info_hash_move(new_info_hash, new_laddrhash, new_size); |
ca73b68a | 1443 | } |
123b9731 | 1444 | if (!fib_info_hash_size) |
1da177e4 LT |
1445 | goto failure; |
1446 | } | |
1447 | ||
1f533ba6 | 1448 | fi = kzalloc(struct_size(fi, fib_nh, nhs), GFP_KERNEL); |
51456b29 | 1449 | if (!fi) |
1da177e4 | 1450 | goto failure; |
767a2217 | 1451 | fi->fib_metrics = ip_fib_metrics_init(fi->fib_net, cfg->fc_mx, |
d7e774f3 | 1452 | cfg->fc_mx_len, extack); |
88e235b8 | 1453 | if (IS_ERR(fi->fib_metrics)) { |
767a2217 DA |
1454 | err = PTR_ERR(fi->fib_metrics); |
1455 | kfree(fi); | |
1456 | return ERR_PTR(err); | |
187e5b3a | 1457 | } |
767a2217 | 1458 | |
efd7ef1c | 1459 | fi->fib_net = net; |
4e902c57 | 1460 | fi->fib_protocol = cfg->fc_protocol; |
37e826c5 | 1461 | fi->fib_scope = cfg->fc_scope; |
4e902c57 TG |
1462 | fi->fib_flags = cfg->fc_flags; |
1463 | fi->fib_priority = cfg->fc_priority; | |
1464 | fi->fib_prefsrc = cfg->fc_prefsrc; | |
f4ef85bb | 1465 | fi->fib_type = cfg->fc_type; |
5a56a0b3 | 1466 | fi->fib_tb_id = cfg->fc_table; |
1da177e4 LT |
1467 | |
1468 | fi->fib_nhs = nhs; | |
4c7e8084 DA |
1469 | if (nh) { |
1470 | if (!nexthop_get(nh)) { | |
1471 | NL_SET_ERR_MSG(extack, "Nexthop has been deleted"); | |
1472 | err = -EINVAL; | |
1473 | } else { | |
1474 | err = 0; | |
1475 | fi->nh = nh; | |
1476 | } | |
1477 | } else { | |
1478 | change_nexthops(fi) { | |
1479 | nexthop_nh->nh_parent = fi; | |
1480 | } endfor_nexthops(fi) | |
1da177e4 | 1481 | |
4c7e8084 DA |
1482 | if (cfg->fc_mp) |
1483 | err = fib_get_nhs(fi, cfg->fc_mp, cfg->fc_mp_len, cfg, | |
1484 | extack); | |
1485 | else | |
1486 | err = fib_nh_init(net, fi->fib_nh, cfg, 1, extack); | |
1487 | } | |
571e7226 | 1488 | |
e4516ef6 DA |
1489 | if (err != 0) |
1490 | goto failure; | |
1da177e4 | 1491 | |
4e902c57 | 1492 | if (fib_props[cfg->fc_type].error) { |
f35b794b | 1493 | if (cfg->fc_gw_family || cfg->fc_oif || cfg->fc_mp) { |
c3ab2b4e DA |
1494 | NL_SET_ERR_MSG(extack, |
1495 | "Gateway, device and multipath can not be specified for this route type"); | |
1da177e4 | 1496 | goto err_inval; |
c3ab2b4e | 1497 | } |
1da177e4 | 1498 | goto link_it; |
4c8237cd DM |
1499 | } else { |
1500 | switch (cfg->fc_type) { | |
1501 | case RTN_UNICAST: | |
1502 | case RTN_LOCAL: | |
1503 | case RTN_BROADCAST: | |
1504 | case RTN_ANYCAST: | |
1505 | case RTN_MULTICAST: | |
1506 | break; | |
1507 | default: | |
c3ab2b4e | 1508 | NL_SET_ERR_MSG(extack, "Invalid route type"); |
4c8237cd DM |
1509 | goto err_inval; |
1510 | } | |
1da177e4 LT |
1511 | } |
1512 | ||
c3ab2b4e DA |
1513 | if (cfg->fc_scope > RT_SCOPE_HOST) { |
1514 | NL_SET_ERR_MSG(extack, "Invalid scope"); | |
1da177e4 | 1515 | goto err_inval; |
c3ab2b4e | 1516 | } |
1da177e4 | 1517 | |
4c7e8084 DA |
1518 | if (fi->nh) { |
1519 | err = fib_check_nexthop(fi->nh, cfg->fc_scope, extack); | |
1520 | if (err) | |
1521 | goto failure; | |
1522 | } else if (cfg->fc_scope == RT_SCOPE_HOST) { | |
1da177e4 LT |
1523 | struct fib_nh *nh = fi->fib_nh; |
1524 | ||
1525 | /* Local address is added. */ | |
c3ab2b4e DA |
1526 | if (nhs != 1) { |
1527 | NL_SET_ERR_MSG(extack, | |
1528 | "Route with host scope can not have multiple nexthops"); | |
6d8422a1 | 1529 | goto err_inval; |
c3ab2b4e | 1530 | } |
bdf00467 | 1531 | if (nh->fib_nh_gw_family) { |
c3ab2b4e DA |
1532 | NL_SET_ERR_MSG(extack, |
1533 | "Route with host scope can not have a gateway"); | |
1da177e4 | 1534 | goto err_inval; |
c3ab2b4e | 1535 | } |
b75ed8b1 | 1536 | nh->fib_nh_scope = RT_SCOPE_NOWHERE; |
5481d73f | 1537 | nh->fib_nh_dev = dev_get_by_index(net, nh->fib_nh_oif); |
1da177e4 | 1538 | err = -ENODEV; |
b75ed8b1 | 1539 | if (!nh->fib_nh_dev) |
1da177e4 | 1540 | goto failure; |
e44b14eb ED |
1541 | netdev_tracker_alloc(nh->fib_nh_dev, &nh->fib_nh_dev_tracker, |
1542 | GFP_KERNEL); | |
1da177e4 | 1543 | } else { |
8a3d0316 AG |
1544 | int linkdown = 0; |
1545 | ||
1da177e4 | 1546 | change_nexthops(fi) { |
ac1fab2d DA |
1547 | err = fib_check_nh(cfg->fc_nlinfo.nl_net, nexthop_nh, |
1548 | cfg->fc_table, cfg->fc_scope, | |
1549 | extack); | |
6a31d2a9 | 1550 | if (err != 0) |
1da177e4 | 1551 | goto failure; |
b75ed8b1 | 1552 | if (nexthop_nh->fib_nh_flags & RTNH_F_LINKDOWN) |
8a3d0316 | 1553 | linkdown++; |
1da177e4 | 1554 | } endfor_nexthops(fi) |
8a3d0316 AG |
1555 | if (linkdown == fi->fib_nhs) |
1556 | fi->fib_flags |= RTNH_F_LINKDOWN; | |
1da177e4 LT |
1557 | } |
1558 | ||
c3ab2b4e DA |
1559 | if (fi->fib_prefsrc && !fib_valid_prefsrc(cfg, fi->fib_prefsrc)) { |
1560 | NL_SET_ERR_MSG(extack, "Invalid prefsrc address"); | |
021dd3b8 | 1561 | goto err_inval; |
c3ab2b4e | 1562 | } |
1da177e4 | 1563 | |
4c7e8084 DA |
1564 | if (!fi->nh) { |
1565 | change_nexthops(fi) { | |
1566 | fib_info_update_nhc_saddr(net, &nexthop_nh->nh_common, | |
1567 | fi->fib_scope); | |
1568 | if (nexthop_nh->fib_nh_gw_family == AF_INET6) | |
1569 | fi->fib_nh_is_v6 = true; | |
1570 | } endfor_nexthops(fi) | |
1fc050a1 | 1571 | |
4c7e8084 DA |
1572 | fib_rebalance(fi); |
1573 | } | |
0e884c78 | 1574 | |
1da177e4 | 1575 | link_it: |
6a31d2a9 ED |
1576 | ofi = fib_find_info(fi); |
1577 | if (ofi) { | |
1da177e4 LT |
1578 | fi->fib_dead = 1; |
1579 | free_fib_info(fi); | |
79976892 | 1580 | refcount_inc(&ofi->fib_treeref); |
1da177e4 LT |
1581 | return ofi; |
1582 | } | |
1583 | ||
28814cd1 | 1584 | refcount_set(&fi->fib_treeref, 1); |
0029c0de | 1585 | refcount_set(&fi->fib_clntref, 1); |
832b4c5e | 1586 | spin_lock_bh(&fib_info_lock); |
0a6e6b3c | 1587 | fib_info_cnt++; |
1da177e4 LT |
1588 | hlist_add_head(&fi->fib_hash, |
1589 | &fib_info_hash[fib_info_hashfn(fi)]); | |
1590 | if (fi->fib_prefsrc) { | |
1591 | struct hlist_head *head; | |
1592 | ||
79eb15da | 1593 | head = fib_info_laddrhash_bucket(net, fi->fib_prefsrc); |
1da177e4 LT |
1594 | hlist_add_head(&fi->fib_lhash, head); |
1595 | } | |
4c7e8084 DA |
1596 | if (fi->nh) { |
1597 | list_add(&fi->nh_list, &nh->fi_list); | |
1598 | } else { | |
1599 | change_nexthops(fi) { | |
1600 | struct hlist_head *head; | |
1da177e4 | 1601 | |
4c7e8084 DA |
1602 | if (!nexthop_nh->fib_nh_dev) |
1603 | continue; | |
d07418af | 1604 | head = fib_info_devhash_bucket(nexthop_nh->fib_nh_dev); |
4c7e8084 DA |
1605 | hlist_add_head(&nexthop_nh->nh_hash, head); |
1606 | } endfor_nexthops(fi) | |
1607 | } | |
832b4c5e | 1608 | spin_unlock_bh(&fib_info_lock); |
1da177e4 LT |
1609 | return fi; |
1610 | ||
1611 | err_inval: | |
1612 | err = -EINVAL; | |
1613 | ||
1614 | failure: | |
e905a9ed | 1615 | if (fi) { |
1da177e4 LT |
1616 | fi->fib_dead = 1; |
1617 | free_fib_info(fi); | |
1618 | } | |
4e902c57 TG |
1619 | |
1620 | return ERR_PTR(err); | |
1da177e4 LT |
1621 | } |
1622 | ||
c0a72077 | 1623 | int fib_nexthop_info(struct sk_buff *skb, const struct fib_nh_common *nhc, |
7bdf4de1 | 1624 | u8 rt_family, unsigned char *flags, bool skip_oif) |
b0f60193 | 1625 | { |
c2364199 | 1626 | if (nhc->nhc_flags & RTNH_F_DEAD) |
b0f60193 DA |
1627 | *flags |= RTNH_F_DEAD; |
1628 | ||
c2364199 | 1629 | if (nhc->nhc_flags & RTNH_F_LINKDOWN) { |
b0f60193 DA |
1630 | *flags |= RTNH_F_LINKDOWN; |
1631 | ||
1632 | rcu_read_lock(); | |
c2364199 DA |
1633 | switch (nhc->nhc_family) { |
1634 | case AF_INET: | |
1635 | if (ip_ignore_linkdown(nhc->nhc_dev)) | |
1636 | *flags |= RTNH_F_DEAD; | |
1637 | break; | |
c0a72077 DA |
1638 | case AF_INET6: |
1639 | if (ip6_ignore_linkdown(nhc->nhc_dev)) | |
1640 | *flags |= RTNH_F_DEAD; | |
1641 | break; | |
c2364199 | 1642 | } |
b0f60193 DA |
1643 | rcu_read_unlock(); |
1644 | } | |
1645 | ||
bdf00467 DA |
1646 | switch (nhc->nhc_gw_family) { |
1647 | case AF_INET: | |
1648 | if (nla_put_in_addr(skb, RTA_GATEWAY, nhc->nhc_gw.ipv4)) | |
1649 | goto nla_put_failure; | |
1650 | break; | |
1651 | case AF_INET6: | |
d1566268 DA |
1652 | /* if gateway family does not match nexthop family |
1653 | * gateway is encoded as RTA_VIA | |
1654 | */ | |
7bdf4de1 | 1655 | if (rt_family != nhc->nhc_gw_family) { |
d1566268 DA |
1656 | int alen = sizeof(struct in6_addr); |
1657 | struct nlattr *nla; | |
1658 | struct rtvia *via; | |
1659 | ||
1660 | nla = nla_reserve(skb, RTA_VIA, alen + 2); | |
1661 | if (!nla) | |
1662 | goto nla_put_failure; | |
1663 | ||
1664 | via = nla_data(nla); | |
1665 | via->rtvia_family = AF_INET6; | |
1666 | memcpy(via->rtvia_addr, &nhc->nhc_gw.ipv6, alen); | |
1667 | } else if (nla_put_in6_addr(skb, RTA_GATEWAY, | |
1668 | &nhc->nhc_gw.ipv6) < 0) { | |
bdf00467 | 1669 | goto nla_put_failure; |
d1566268 | 1670 | } |
bdf00467 | 1671 | break; |
c2364199 | 1672 | } |
b0f60193 | 1673 | |
ca787e0b IS |
1674 | *flags |= (nhc->nhc_flags & |
1675 | (RTNH_F_ONLINK | RTNH_F_OFFLOAD | RTNH_F_TRAP)); | |
b0f60193 | 1676 | |
c2364199 DA |
1677 | if (!skip_oif && nhc->nhc_dev && |
1678 | nla_put_u32(skb, RTA_OIF, nhc->nhc_dev->ifindex)) | |
b0f60193 DA |
1679 | goto nla_put_failure; |
1680 | ||
c2364199 | 1681 | if (nhc->nhc_lwtstate && |
ffa8ce54 DA |
1682 | lwtunnel_fill_encap(skb, nhc->nhc_lwtstate, |
1683 | RTA_ENCAP, RTA_ENCAP_TYPE) < 0) | |
b0f60193 DA |
1684 | goto nla_put_failure; |
1685 | ||
1686 | return 0; | |
1687 | ||
1688 | nla_put_failure: | |
1689 | return -EMSGSIZE; | |
1690 | } | |
c0a72077 | 1691 | EXPORT_SYMBOL_GPL(fib_nexthop_info); |
b0f60193 | 1692 | |
c0a72077 DA |
1693 | #if IS_ENABLED(CONFIG_IP_ROUTE_MULTIPATH) || IS_ENABLED(CONFIG_IPV6) |
1694 | int fib_add_nexthop(struct sk_buff *skb, const struct fib_nh_common *nhc, | |
597aa16c | 1695 | int nh_weight, u8 rt_family, u32 nh_tclassid) |
b0f60193 | 1696 | { |
c2364199 | 1697 | const struct net_device *dev = nhc->nhc_dev; |
b0f60193 | 1698 | struct rtnexthop *rtnh; |
ecc5663c | 1699 | unsigned char flags = 0; |
b0f60193 DA |
1700 | |
1701 | rtnh = nla_reserve_nohdr(skb, sizeof(*rtnh)); | |
1702 | if (!rtnh) | |
1703 | goto nla_put_failure; | |
1704 | ||
c2364199 | 1705 | rtnh->rtnh_hops = nh_weight - 1; |
b0f60193 DA |
1706 | rtnh->rtnh_ifindex = dev ? dev->ifindex : 0; |
1707 | ||
7bdf4de1 | 1708 | if (fib_nexthop_info(skb, nhc, rt_family, &flags, true) < 0) |
b0f60193 DA |
1709 | goto nla_put_failure; |
1710 | ||
1711 | rtnh->rtnh_flags = flags; | |
1712 | ||
597aa16c XL |
1713 | if (nh_tclassid && nla_put_u32(skb, RTA_FLOW, nh_tclassid)) |
1714 | goto nla_put_failure; | |
1715 | ||
b0f60193 DA |
1716 | /* length of rtnetlink header + attributes */ |
1717 | rtnh->rtnh_len = nlmsg_get_pos(skb) - (void *)rtnh; | |
1718 | ||
1719 | return 0; | |
1720 | ||
1721 | nla_put_failure: | |
1722 | return -EMSGSIZE; | |
1723 | } | |
c0a72077 | 1724 | EXPORT_SYMBOL_GPL(fib_add_nexthop); |
c2364199 | 1725 | #endif |
b0f60193 | 1726 | |
c2364199 | 1727 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
b0f60193 DA |
1728 | static int fib_add_multipath(struct sk_buff *skb, struct fib_info *fi) |
1729 | { | |
1730 | struct nlattr *mp; | |
1731 | ||
ae0be8de | 1732 | mp = nla_nest_start_noflag(skb, RTA_MULTIPATH); |
b0f60193 DA |
1733 | if (!mp) |
1734 | goto nla_put_failure; | |
1735 | ||
4c7e8084 | 1736 | if (unlikely(fi->nh)) { |
7bdf4de1 | 1737 | if (nexthop_mpath_fill_node(skb, fi->nh, AF_INET) < 0) |
4c7e8084 DA |
1738 | goto nla_put_failure; |
1739 | goto mp_end; | |
1740 | } | |
1741 | ||
b0f60193 | 1742 | for_nexthops(fi) { |
597aa16c | 1743 | u32 nh_tclassid = 0; |
b0f60193 | 1744 | #ifdef CONFIG_IP_ROUTE_CLASSID |
597aa16c | 1745 | nh_tclassid = nh->nh_tclassid; |
b0f60193 | 1746 | #endif |
597aa16c XL |
1747 | if (fib_add_nexthop(skb, &nh->nh_common, nh->fib_nh_weight, |
1748 | AF_INET, nh_tclassid) < 0) | |
1749 | goto nla_put_failure; | |
b0f60193 DA |
1750 | } endfor_nexthops(fi); |
1751 | ||
4c7e8084 | 1752 | mp_end: |
b0f60193 DA |
1753 | nla_nest_end(skb, mp); |
1754 | ||
1755 | return 0; | |
1756 | ||
1757 | nla_put_failure: | |
1758 | return -EMSGSIZE; | |
1759 | } | |
1760 | #else | |
1761 | static int fib_add_multipath(struct sk_buff *skb, struct fib_info *fi) | |
1762 | { | |
1763 | return 0; | |
1764 | } | |
1765 | #endif | |
1766 | ||
15e47304 | 1767 | int fib_dump_info(struct sk_buff *skb, u32 portid, u32 seq, int event, |
08554789 | 1768 | const struct fib_rt_info *fri, unsigned int flags) |
1da177e4 | 1769 | { |
1e301fd0 IS |
1770 | unsigned int nhs = fib_info_num_path(fri->fi); |
1771 | struct fib_info *fi = fri->fi; | |
1772 | u32 tb_id = fri->tb_id; | |
be403ea1 | 1773 | struct nlmsghdr *nlh; |
1da177e4 | 1774 | struct rtmsg *rtm; |
1da177e4 | 1775 | |
15e47304 | 1776 | nlh = nlmsg_put(skb, portid, seq, event, sizeof(*rtm), flags); |
51456b29 | 1777 | if (!nlh) |
26932566 | 1778 | return -EMSGSIZE; |
be403ea1 TG |
1779 | |
1780 | rtm = nlmsg_data(nlh); | |
1da177e4 | 1781 | rtm->rtm_family = AF_INET; |
1e301fd0 | 1782 | rtm->rtm_dst_len = fri->dst_len; |
1da177e4 | 1783 | rtm->rtm_src_len = 0; |
888ade8f | 1784 | rtm->rtm_tos = inet_dscp_to_dsfield(fri->dscp); |
709772e6 KPO |
1785 | if (tb_id < 256) |
1786 | rtm->rtm_table = tb_id; | |
1787 | else | |
1788 | rtm->rtm_table = RT_TABLE_COMPAT; | |
f3756b79 DM |
1789 | if (nla_put_u32(skb, RTA_TABLE, tb_id)) |
1790 | goto nla_put_failure; | |
1e301fd0 | 1791 | rtm->rtm_type = fri->type; |
1da177e4 | 1792 | rtm->rtm_flags = fi->fib_flags; |
37e826c5 | 1793 | rtm->rtm_scope = fi->fib_scope; |
1da177e4 | 1794 | rtm->rtm_protocol = fi->fib_protocol; |
be403ea1 | 1795 | |
f3756b79 | 1796 | if (rtm->rtm_dst_len && |
1e301fd0 | 1797 | nla_put_in_addr(skb, RTA_DST, fri->dst)) |
f3756b79 DM |
1798 | goto nla_put_failure; |
1799 | if (fi->fib_priority && | |
1800 | nla_put_u32(skb, RTA_PRIORITY, fi->fib_priority)) | |
1801 | goto nla_put_failure; | |
3fb07daf | 1802 | if (rtnetlink_put_metrics(skb, fi->fib_metrics->metrics) < 0) |
be403ea1 TG |
1803 | goto nla_put_failure; |
1804 | ||
f3756b79 | 1805 | if (fi->fib_prefsrc && |
930345ea | 1806 | nla_put_in_addr(skb, RTA_PREFSRC, fi->fib_prefsrc)) |
f3756b79 | 1807 | goto nla_put_failure; |
4c7e8084 DA |
1808 | |
1809 | if (fi->nh) { | |
1810 | if (nla_put_u32(skb, RTA_NH_ID, fi->nh->id)) | |
1811 | goto nla_put_failure; | |
1812 | if (nexthop_is_blackhole(fi->nh)) | |
1813 | rtm->rtm_type = RTN_BLACKHOLE; | |
4f80116d RP |
1814 | if (!fi->fib_net->ipv4.sysctl_nexthop_compat_mode) |
1815 | goto offload; | |
4c7e8084 DA |
1816 | } |
1817 | ||
5481d73f | 1818 | if (nhs == 1) { |
dcb1ecb5 | 1819 | const struct fib_nh_common *nhc = fib_info_nhc(fi, 0); |
ecc5663c | 1820 | unsigned char flags = 0; |
b0f60193 | 1821 | |
7bdf4de1 | 1822 | if (fib_nexthop_info(skb, nhc, AF_INET, &flags, false) < 0) |
f3756b79 | 1823 | goto nla_put_failure; |
b0f60193 DA |
1824 | |
1825 | rtm->rtm_flags = flags; | |
c7066f70 | 1826 | #ifdef CONFIG_IP_ROUTE_CLASSID |
dcb1ecb5 DA |
1827 | if (nhc->nhc_family == AF_INET) { |
1828 | struct fib_nh *nh; | |
1829 | ||
1830 | nh = container_of(nhc, struct fib_nh, nh_common); | |
1831 | if (nh->nh_tclassid && | |
1832 | nla_put_u32(skb, RTA_FLOW, nh->nh_tclassid)) | |
1833 | goto nla_put_failure; | |
1834 | } | |
8265abc0 | 1835 | #endif |
b0f60193 DA |
1836 | } else { |
1837 | if (fib_add_multipath(skb, fi) < 0) | |
ea7a8085 | 1838 | goto nla_put_failure; |
1da177e4 | 1839 | } |
1da177e4 | 1840 | |
4f80116d | 1841 | offload: |
90b93f1b IS |
1842 | if (fri->offload) |
1843 | rtm->rtm_flags |= RTM_F_OFFLOAD; | |
1844 | if (fri->trap) | |
1845 | rtm->rtm_flags |= RTM_F_TRAP; | |
36c5100e AC |
1846 | if (fri->offload_failed) |
1847 | rtm->rtm_flags |= RTM_F_OFFLOAD_FAILED; | |
90b93f1b | 1848 | |
053c095a JB |
1849 | nlmsg_end(skb, nlh); |
1850 | return 0; | |
1da177e4 | 1851 | |
be403ea1 | 1852 | nla_put_failure: |
26932566 PM |
1853 | nlmsg_cancel(skb, nlh); |
1854 | return -EMSGSIZE; | |
1da177e4 LT |
1855 | } |
1856 | ||
1da177e4 | 1857 | /* |
6a31d2a9 ED |
1858 | * Update FIB if: |
1859 | * - local address disappeared -> we must delete all the entries | |
1860 | * referring to it. | |
1861 | * - device went down -> we must shutdown all nexthops going via it. | |
1da177e4 | 1862 | */ |
5a56a0b3 | 1863 | int fib_sync_down_addr(struct net_device *dev, __be32 local) |
1da177e4 | 1864 | { |
e0a31262 | 1865 | int tb_id = l3mdev_fib_table(dev) ? : RT_TABLE_MAIN; |
5a56a0b3 | 1866 | struct net *net = dev_net(dev); |
79eb15da | 1867 | struct hlist_head *head; |
85326fa5 | 1868 | struct fib_info *fi; |
79eb15da | 1869 | int ret = 0; |
1da177e4 | 1870 | |
51456b29 | 1871 | if (!fib_info_laddrhash || local == 0) |
85326fa5 | 1872 | return 0; |
1da177e4 | 1873 | |
79eb15da | 1874 | head = fib_info_laddrhash_bucket(net, local); |
b67bfe0d | 1875 | hlist_for_each_entry(fi, head, fib_lhash) { |
5a56a0b3 MT |
1876 | if (!net_eq(fi->fib_net, net) || |
1877 | fi->fib_tb_id != tb_id) | |
4814bdbd | 1878 | continue; |
85326fa5 DL |
1879 | if (fi->fib_prefsrc == local) { |
1880 | fi->fib_flags |= RTNH_F_DEAD; | |
1881 | ret++; | |
1da177e4 LT |
1882 | } |
1883 | } | |
85326fa5 DL |
1884 | return ret; |
1885 | } | |
1886 | ||
b75ed8b1 | 1887 | static int call_fib_nh_notifiers(struct fib_nh *nh, |
982acb97 IS |
1888 | enum fib_event_type event_type) |
1889 | { | |
b75ed8b1 | 1890 | bool ignore_link_down = ip_ignore_linkdown(nh->fib_nh_dev); |
982acb97 | 1891 | struct fib_nh_notifier_info info = { |
b75ed8b1 | 1892 | .fib_nh = nh, |
982acb97 IS |
1893 | }; |
1894 | ||
1895 | switch (event_type) { | |
1896 | case FIB_EVENT_NH_ADD: | |
b75ed8b1 | 1897 | if (nh->fib_nh_flags & RTNH_F_DEAD) |
982acb97 | 1898 | break; |
b75ed8b1 | 1899 | if (ignore_link_down && nh->fib_nh_flags & RTNH_F_LINKDOWN) |
982acb97 | 1900 | break; |
b75ed8b1 | 1901 | return call_fib4_notifiers(dev_net(nh->fib_nh_dev), event_type, |
04b1d4e5 | 1902 | &info.info); |
982acb97 | 1903 | case FIB_EVENT_NH_DEL: |
b75ed8b1 DA |
1904 | if ((ignore_link_down && nh->fib_nh_flags & RTNH_F_LINKDOWN) || |
1905 | (nh->fib_nh_flags & RTNH_F_DEAD)) | |
1906 | return call_fib4_notifiers(dev_net(nh->fib_nh_dev), | |
04b1d4e5 | 1907 | event_type, &info.info); |
79121184 | 1908 | break; |
982acb97 IS |
1909 | default: |
1910 | break; | |
1911 | } | |
1912 | ||
1913 | return NOTIFY_DONE; | |
1914 | } | |
1915 | ||
af7d6cce SD |
1916 | /* Update the PMTU of exceptions when: |
1917 | * - the new MTU of the first hop becomes smaller than the PMTU | |
1918 | * - the old MTU was the same as the PMTU, and it limited discovery of | |
1919 | * larger MTUs on the path. With that limit raised, we can now | |
1920 | * discover larger MTUs | |
1921 | * A special case is locked exceptions, for which the PMTU is smaller | |
1922 | * than the minimal accepted PMTU: | |
1923 | * - if the new MTU is greater than the PMTU, don't make any change | |
1924 | * - otherwise, unlock and set PMTU | |
1925 | */ | |
06c77c3e | 1926 | void fib_nhc_update_mtu(struct fib_nh_common *nhc, u32 new, u32 orig) |
af7d6cce SD |
1927 | { |
1928 | struct fnhe_hash_bucket *bucket; | |
1929 | int i; | |
1930 | ||
a5995e71 | 1931 | bucket = rcu_dereference_protected(nhc->nhc_exceptions, 1); |
af7d6cce SD |
1932 | if (!bucket) |
1933 | return; | |
1934 | ||
1935 | for (i = 0; i < FNHE_HASH_SIZE; i++) { | |
1936 | struct fib_nh_exception *fnhe; | |
1937 | ||
1938 | for (fnhe = rcu_dereference_protected(bucket[i].chain, 1); | |
1939 | fnhe; | |
1940 | fnhe = rcu_dereference_protected(fnhe->fnhe_next, 1)) { | |
1941 | if (fnhe->fnhe_mtu_locked) { | |
1942 | if (new <= fnhe->fnhe_pmtu) { | |
1943 | fnhe->fnhe_pmtu = new; | |
1944 | fnhe->fnhe_mtu_locked = false; | |
1945 | } | |
1946 | } else if (new < fnhe->fnhe_pmtu || | |
1947 | orig == fnhe->fnhe_pmtu) { | |
1948 | fnhe->fnhe_pmtu = new; | |
1949 | } | |
1950 | } | |
1951 | } | |
1952 | } | |
1953 | ||
1954 | void fib_sync_mtu(struct net_device *dev, u32 orig_mtu) | |
1955 | { | |
d07418af | 1956 | struct hlist_head *head = fib_info_devhash_bucket(dev); |
af7d6cce SD |
1957 | struct fib_nh *nh; |
1958 | ||
1959 | hlist_for_each_entry(nh, head, nh_hash) { | |
b75ed8b1 | 1960 | if (nh->fib_nh_dev == dev) |
06c77c3e | 1961 | fib_nhc_update_mtu(&nh->nh_common, dev->mtu, orig_mtu); |
af7d6cce SD |
1962 | } |
1963 | } | |
1964 | ||
4f823def JA |
1965 | /* Event force Flags Description |
1966 | * NETDEV_CHANGE 0 LINKDOWN Carrier OFF, not for scope host | |
1967 | * NETDEV_DOWN 0 LINKDOWN|DEAD Link down, not for scope host | |
1968 | * NETDEV_DOWN 1 LINKDOWN|DEAD Last address removed | |
1969 | * NETDEV_UNREGISTER 1 LINKDOWN|DEAD Device removed | |
4c7e8084 DA |
1970 | * |
1971 | * only used when fib_nh is built into fib_info | |
4f823def JA |
1972 | */ |
1973 | int fib_sync_down_dev(struct net_device *dev, unsigned long event, bool force) | |
85326fa5 | 1974 | { |
d07418af | 1975 | struct hlist_head *head = fib_info_devhash_bucket(dev); |
85326fa5 | 1976 | struct fib_info *prev_fi = NULL; |
d07418af | 1977 | int scope = RT_SCOPE_NOWHERE; |
85326fa5 | 1978 | struct fib_nh *nh; |
d07418af | 1979 | int ret = 0; |
1da177e4 | 1980 | |
4f823def | 1981 | if (force) |
85326fa5 | 1982 | scope = -1; |
1da177e4 | 1983 | |
b67bfe0d | 1984 | hlist_for_each_entry(nh, head, nh_hash) { |
85326fa5 DL |
1985 | struct fib_info *fi = nh->nh_parent; |
1986 | int dead; | |
1da177e4 | 1987 | |
85326fa5 | 1988 | BUG_ON(!fi->fib_nhs); |
b75ed8b1 | 1989 | if (nh->fib_nh_dev != dev || fi == prev_fi) |
85326fa5 DL |
1990 | continue; |
1991 | prev_fi = fi; | |
1992 | dead = 0; | |
1993 | change_nexthops(fi) { | |
b75ed8b1 | 1994 | if (nexthop_nh->fib_nh_flags & RTNH_F_DEAD) |
85326fa5 | 1995 | dead++; |
b75ed8b1 DA |
1996 | else if (nexthop_nh->fib_nh_dev == dev && |
1997 | nexthop_nh->fib_nh_scope != scope) { | |
8a3d0316 AG |
1998 | switch (event) { |
1999 | case NETDEV_DOWN: | |
2000 | case NETDEV_UNREGISTER: | |
b75ed8b1 | 2001 | nexthop_nh->fib_nh_flags |= RTNH_F_DEAD; |
a8eceea8 | 2002 | fallthrough; |
8a3d0316 | 2003 | case NETDEV_CHANGE: |
b75ed8b1 | 2004 | nexthop_nh->fib_nh_flags |= RTNH_F_LINKDOWN; |
8a3d0316 AG |
2005 | break; |
2006 | } | |
982acb97 IS |
2007 | call_fib_nh_notifiers(nexthop_nh, |
2008 | FIB_EVENT_NH_DEL); | |
85326fa5 DL |
2009 | dead++; |
2010 | } | |
1da177e4 | 2011 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
8a3d0316 | 2012 | if (event == NETDEV_UNREGISTER && |
b75ed8b1 | 2013 | nexthop_nh->fib_nh_dev == dev) { |
85326fa5 DL |
2014 | dead = fi->fib_nhs; |
2015 | break; | |
1da177e4 | 2016 | } |
85326fa5 DL |
2017 | #endif |
2018 | } endfor_nexthops(fi) | |
2019 | if (dead == fi->fib_nhs) { | |
8a3d0316 AG |
2020 | switch (event) { |
2021 | case NETDEV_DOWN: | |
2022 | case NETDEV_UNREGISTER: | |
2023 | fi->fib_flags |= RTNH_F_DEAD; | |
a8eceea8 | 2024 | fallthrough; |
8a3d0316 AG |
2025 | case NETDEV_CHANGE: |
2026 | fi->fib_flags |= RTNH_F_LINKDOWN; | |
2027 | break; | |
2028 | } | |
85326fa5 | 2029 | ret++; |
1da177e4 | 2030 | } |
0e884c78 PN |
2031 | |
2032 | fib_rebalance(fi); | |
1da177e4 LT |
2033 | } |
2034 | ||
2035 | return ret; | |
2036 | } | |
2037 | ||
0c838ff1 | 2038 | /* Must be invoked inside of an RCU protected region. */ |
c7b371e3 | 2039 | static void fib_select_default(const struct flowi4 *flp, struct fib_result *res) |
0c838ff1 DM |
2040 | { |
2041 | struct fib_info *fi = NULL, *last_resort = NULL; | |
56315f9e | 2042 | struct hlist_head *fa_head = res->fa_head; |
0c838ff1 | 2043 | struct fib_table *tb = res->table; |
18a912e9 | 2044 | u8 slen = 32 - res->prefixlen; |
0c838ff1 | 2045 | int order = -1, last_idx = -1; |
2392debc JA |
2046 | struct fib_alias *fa, *fa1 = NULL; |
2047 | u32 last_prio = res->fi->fib_priority; | |
32ccf110 | 2048 | dscp_t last_dscp = 0; |
0c838ff1 | 2049 | |
56315f9e | 2050 | hlist_for_each_entry_rcu(fa, fa_head, fa_list) { |
0c838ff1 | 2051 | struct fib_info *next_fi = fa->fa_info; |
7c74b0be | 2052 | struct fib_nh_common *nhc; |
0c838ff1 | 2053 | |
18a912e9 JA |
2054 | if (fa->fa_slen != slen) |
2055 | continue; | |
32ccf110 GN |
2056 | if (fa->fa_dscp && |
2057 | fa->fa_dscp != inet_dsfield_to_dscp(flp->flowi4_tos)) | |
2392debc | 2058 | continue; |
18a912e9 JA |
2059 | if (fa->tb_id != tb->tb_id) |
2060 | continue; | |
2392debc | 2061 | if (next_fi->fib_priority > last_prio && |
32ccf110 GN |
2062 | fa->fa_dscp == last_dscp) { |
2063 | if (last_dscp) | |
2392debc JA |
2064 | continue; |
2065 | break; | |
2066 | } | |
2067 | if (next_fi->fib_flags & RTNH_F_DEAD) | |
2068 | continue; | |
32ccf110 | 2069 | last_dscp = fa->fa_dscp; |
2392debc JA |
2070 | last_prio = next_fi->fib_priority; |
2071 | ||
37e826c5 | 2072 | if (next_fi->fib_scope != res->scope || |
0c838ff1 DM |
2073 | fa->fa_type != RTN_UNICAST) |
2074 | continue; | |
5481d73f | 2075 | |
7c74b0be DA |
2076 | nhc = fib_info_nhc(next_fi, 0); |
2077 | if (!nhc->nhc_gw_family || nhc->nhc_scope != RT_SCOPE_LINK) | |
0c838ff1 DM |
2078 | continue; |
2079 | ||
2080 | fib_alias_accessed(fa); | |
2081 | ||
51456b29 | 2082 | if (!fi) { |
0c838ff1 DM |
2083 | if (next_fi != res->fi) |
2084 | break; | |
2392debc | 2085 | fa1 = fa; |
0c838ff1 | 2086 | } else if (!fib_detect_death(fi, order, &last_resort, |
2392debc | 2087 | &last_idx, fa1->fa_default)) { |
0c838ff1 | 2088 | fib_result_assign(res, fi); |
2392debc | 2089 | fa1->fa_default = order; |
0c838ff1 DM |
2090 | goto out; |
2091 | } | |
2092 | fi = next_fi; | |
2093 | order++; | |
2094 | } | |
2095 | ||
51456b29 | 2096 | if (order <= 0 || !fi) { |
2392debc JA |
2097 | if (fa1) |
2098 | fa1->fa_default = -1; | |
0c838ff1 DM |
2099 | goto out; |
2100 | } | |
2101 | ||
2102 | if (!fib_detect_death(fi, order, &last_resort, &last_idx, | |
2392debc | 2103 | fa1->fa_default)) { |
0c838ff1 | 2104 | fib_result_assign(res, fi); |
2392debc | 2105 | fa1->fa_default = order; |
0c838ff1 DM |
2106 | goto out; |
2107 | } | |
2108 | ||
2109 | if (last_idx >= 0) | |
2110 | fib_result_assign(res, last_resort); | |
2392debc | 2111 | fa1->fa_default = last_idx; |
0c838ff1 | 2112 | out: |
31d40937 | 2113 | return; |
0c838ff1 DM |
2114 | } |
2115 | ||
1da177e4 | 2116 | /* |
6a31d2a9 ED |
2117 | * Dead device goes up. We wake up dead nexthops. |
2118 | * It takes sense only on multipath routes. | |
4c7e8084 DA |
2119 | * |
2120 | * only used when fib_nh is built into fib_info | |
1da177e4 | 2121 | */ |
ecc5663c | 2122 | int fib_sync_up(struct net_device *dev, unsigned char nh_flags) |
1da177e4 LT |
2123 | { |
2124 | struct fib_info *prev_fi; | |
1da177e4 | 2125 | struct hlist_head *head; |
1da177e4 LT |
2126 | struct fib_nh *nh; |
2127 | int ret; | |
2128 | ||
6a31d2a9 | 2129 | if (!(dev->flags & IFF_UP)) |
1da177e4 LT |
2130 | return 0; |
2131 | ||
c9b3292e JA |
2132 | if (nh_flags & RTNH_F_DEAD) { |
2133 | unsigned int flags = dev_get_flags(dev); | |
2134 | ||
2135 | if (flags & (IFF_RUNNING | IFF_LOWER_UP)) | |
2136 | nh_flags |= RTNH_F_LINKDOWN; | |
2137 | } | |
2138 | ||
1da177e4 | 2139 | prev_fi = NULL; |
d07418af | 2140 | head = fib_info_devhash_bucket(dev); |
1da177e4 LT |
2141 | ret = 0; |
2142 | ||
b67bfe0d | 2143 | hlist_for_each_entry(nh, head, nh_hash) { |
1da177e4 LT |
2144 | struct fib_info *fi = nh->nh_parent; |
2145 | int alive; | |
2146 | ||
2147 | BUG_ON(!fi->fib_nhs); | |
b75ed8b1 | 2148 | if (nh->fib_nh_dev != dev || fi == prev_fi) |
1da177e4 LT |
2149 | continue; |
2150 | ||
2151 | prev_fi = fi; | |
2152 | alive = 0; | |
2153 | change_nexthops(fi) { | |
b75ed8b1 | 2154 | if (!(nexthop_nh->fib_nh_flags & nh_flags)) { |
1da177e4 LT |
2155 | alive++; |
2156 | continue; | |
2157 | } | |
b75ed8b1 DA |
2158 | if (!nexthop_nh->fib_nh_dev || |
2159 | !(nexthop_nh->fib_nh_dev->flags & IFF_UP)) | |
1da177e4 | 2160 | continue; |
b75ed8b1 | 2161 | if (nexthop_nh->fib_nh_dev != dev || |
71fceff0 | 2162 | !__in_dev_get_rtnl(dev)) |
1da177e4 LT |
2163 | continue; |
2164 | alive++; | |
b75ed8b1 | 2165 | nexthop_nh->fib_nh_flags &= ~nh_flags; |
982acb97 | 2166 | call_fib_nh_notifiers(nexthop_nh, FIB_EVENT_NH_ADD); |
1da177e4 LT |
2167 | } endfor_nexthops(fi) |
2168 | ||
2169 | if (alive > 0) { | |
8a3d0316 | 2170 | fi->fib_flags &= ~nh_flags; |
1da177e4 LT |
2171 | ret++; |
2172 | } | |
0e884c78 PN |
2173 | |
2174 | fib_rebalance(fi); | |
1da177e4 LT |
2175 | } |
2176 | ||
2177 | return ret; | |
2178 | } | |
2179 | ||
8a3d0316 | 2180 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
a6db4494 DA |
2181 | static bool fib_good_nh(const struct fib_nh *nh) |
2182 | { | |
2183 | int state = NUD_REACHABLE; | |
2184 | ||
b75ed8b1 | 2185 | if (nh->fib_nh_scope == RT_SCOPE_LINK) { |
a6db4494 DA |
2186 | struct neighbour *n; |
2187 | ||
2188 | rcu_read_lock_bh(); | |
2189 | ||
1a38c43d DA |
2190 | if (likely(nh->fib_nh_gw_family == AF_INET)) |
2191 | n = __ipv4_neigh_lookup_noref(nh->fib_nh_dev, | |
2192 | (__force u32)nh->fib_nh_gw4); | |
2193 | else if (nh->fib_nh_gw_family == AF_INET6) | |
2194 | n = __ipv6_neigh_lookup_noref_stub(nh->fib_nh_dev, | |
2195 | &nh->fib_nh_gw6); | |
2196 | else | |
2197 | n = NULL; | |
a6db4494 DA |
2198 | if (n) |
2199 | state = n->nud_state; | |
2200 | ||
2201 | rcu_read_unlock_bh(); | |
2202 | } | |
2203 | ||
2204 | return !!(state & NUD_VALID); | |
2205 | } | |
8a3d0316 | 2206 | |
0e884c78 | 2207 | void fib_select_multipath(struct fib_result *res, int hash) |
1da177e4 LT |
2208 | { |
2209 | struct fib_info *fi = res->fi; | |
a6db4494 DA |
2210 | struct net *net = fi->fib_net; |
2211 | bool first = false; | |
1da177e4 | 2212 | |
4c7e8084 DA |
2213 | if (unlikely(res->fi->nh)) { |
2214 | nexthop_path_fib_result(res, hash); | |
2215 | return; | |
2216 | } | |
2217 | ||
eba618ab | 2218 | change_nexthops(fi) { |
6174a30d | 2219 | if (net->ipv4.sysctl_fib_multipath_use_neigh) { |
eba618ab | 2220 | if (!fib_good_nh(nexthop_nh)) |
6174a30d XL |
2221 | continue; |
2222 | if (!first) { | |
2223 | res->nh_sel = nhsel; | |
eba618ab | 2224 | res->nhc = &nexthop_nh->nh_common; |
6174a30d XL |
2225 | first = true; |
2226 | } | |
2227 | } | |
2228 | ||
eba618ab | 2229 | if (hash > atomic_read(&nexthop_nh->fib_nh_upper_bound)) |
0e884c78 | 2230 | continue; |
1da177e4 | 2231 | |
6174a30d | 2232 | res->nh_sel = nhsel; |
eba618ab | 2233 | res->nhc = &nexthop_nh->nh_common; |
6174a30d | 2234 | return; |
1da177e4 | 2235 | } endfor_nexthops(fi); |
1da177e4 LT |
2236 | } |
2237 | #endif | |
3ce58d84 DA |
2238 | |
2239 | void fib_select_path(struct net *net, struct fib_result *res, | |
bf4e0a3d | 2240 | struct flowi4 *fl4, const struct sk_buff *skb) |
3ce58d84 | 2241 | { |
40867d74 | 2242 | if (fl4->flowi4_oif) |
0d876f2c | 2243 | goto check_saddr; |
7a18c5b9 | 2244 | |
3ce58d84 | 2245 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
5481d73f | 2246 | if (fib_info_num_path(res->fi) > 1) { |
7efc0b6b | 2247 | int h = fib_multipath_hash(net, fl4, skb, NULL); |
9920e48b | 2248 | |
bf4e0a3d | 2249 | fib_select_multipath(res, h); |
3ce58d84 DA |
2250 | } |
2251 | else | |
2252 | #endif | |
2253 | if (!res->prefixlen && | |
2254 | res->table->tb_num_default > 1 && | |
0d876f2c | 2255 | res->type == RTN_UNICAST) |
3ce58d84 DA |
2256 | fib_select_default(fl4, res); |
2257 | ||
0d876f2c | 2258 | check_saddr: |
3ce58d84 | 2259 | if (!fl4->saddr) |
eba618ab | 2260 | fl4->saddr = fib_result_prefsrc(net, res); |
3ce58d84 | 2261 | } |