1 // SPDX-License-Identifier: GPL-2.0
3 * xfrm6_policy.c: based on xfrm4_policy.c
7 * Kazunori MIYAZAWA @USAGI
8 * Kunihiro Ishiguro <kunihiro@ipinfusion.com>
11 * Split up af-specific portion
15 #include <linux/err.h>
16 #include <linux/kernel.h>
17 #include <linux/netdevice.h>
18 #include <net/addrconf.h>
23 #include <net/ip6_route.h>
24 #include <net/l3mdev.h>
26 static struct dst_entry
*xfrm6_dst_lookup(struct net
*net
, int tos
, int oif
,
27 const xfrm_address_t
*saddr
,
28 const xfrm_address_t
*daddr
,
32 struct dst_entry
*dst
;
35 memset(&fl6
, 0, sizeof(fl6
));
36 fl6
.flowi6_l3mdev
= l3mdev_master_ifindex_by_index(net
, oif
);
37 fl6
.flowi6_mark
= mark
;
38 memcpy(&fl6
.daddr
, daddr
, sizeof(fl6
.daddr
));
40 memcpy(&fl6
.saddr
, saddr
, sizeof(fl6
.saddr
));
42 dst
= ip6_route_output(net
, NULL
, &fl6
);
53 static int xfrm6_get_saddr(struct net
*net
, int oif
,
54 xfrm_address_t
*saddr
, xfrm_address_t
*daddr
,
57 struct dst_entry
*dst
;
58 struct net_device
*dev
;
60 dst
= xfrm6_dst_lookup(net
, 0, oif
, NULL
, daddr
, mark
);
64 dev
= ip6_dst_idev(dst
)->dev
;
65 ipv6_dev_get_saddr(dev_net(dev
), dev
, &daddr
->in6
, 0, &saddr
->in6
);
70 static int xfrm6_fill_dst(struct xfrm_dst
*xdst
, struct net_device
*dev
,
71 const struct flowi
*fl
)
73 struct rt6_info
*rt
= (struct rt6_info
*)xdst
->route
;
75 xdst
->u
.dst
.dev
= dev
;
76 netdev_hold(dev
, &xdst
->u
.dst
.dev_tracker
, GFP_ATOMIC
);
78 xdst
->u
.rt6
.rt6i_idev
= in6_dev_get(dev
);
79 if (!xdst
->u
.rt6
.rt6i_idev
) {
80 netdev_put(dev
, &xdst
->u
.dst
.dev_tracker
);
84 /* Sheit... I remember I did this right. Apparently,
85 * it was magically lost, so this code needs audit */
86 xdst
->u
.rt6
.rt6i_flags
= rt
->rt6i_flags
& (RTF_ANYCAST
|
88 xdst
->route_cookie
= rt6_get_cookie(rt
);
89 xdst
->u
.rt6
.rt6i_gateway
= rt
->rt6i_gateway
;
90 xdst
->u
.rt6
.rt6i_dst
= rt
->rt6i_dst
;
91 xdst
->u
.rt6
.rt6i_src
= rt
->rt6i_src
;
92 rt6_uncached_list_add(&xdst
->u
.rt6
);
97 static void xfrm6_update_pmtu(struct dst_entry
*dst
, struct sock
*sk
,
98 struct sk_buff
*skb
, u32 mtu
,
101 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
102 struct dst_entry
*path
= xdst
->route
;
104 path
->ops
->update_pmtu(path
, sk
, skb
, mtu
, confirm_neigh
);
107 static void xfrm6_redirect(struct dst_entry
*dst
, struct sock
*sk
,
110 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
111 struct dst_entry
*path
= xdst
->route
;
113 path
->ops
->redirect(path
, sk
, skb
);
116 static void xfrm6_dst_destroy(struct dst_entry
*dst
)
118 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
120 dst_destroy_metrics_generic(dst
);
121 rt6_uncached_list_del(&xdst
->u
.rt6
);
122 if (likely(xdst
->u
.rt6
.rt6i_idev
))
123 in6_dev_put(xdst
->u
.rt6
.rt6i_idev
);
124 xfrm_dst_destroy(xdst
);
127 static void xfrm6_dst_ifdown(struct dst_entry
*dst
, struct net_device
*dev
)
129 struct xfrm_dst
*xdst
;
131 xdst
= (struct xfrm_dst
*)dst
;
132 if (xdst
->u
.rt6
.rt6i_idev
->dev
== dev
) {
133 struct inet6_dev
*loopback_idev
=
134 in6_dev_get(dev_net(dev
)->loopback_dev
);
137 in6_dev_put(xdst
->u
.rt6
.rt6i_idev
);
138 xdst
->u
.rt6
.rt6i_idev
= loopback_idev
;
139 in6_dev_hold(loopback_idev
);
140 xdst
= (struct xfrm_dst
*)xfrm_dst_child(&xdst
->u
.dst
);
141 } while (xdst
->u
.dst
.xfrm
);
143 __in6_dev_put(loopback_idev
);
146 xfrm_dst_ifdown(dst
, dev
);
149 static struct dst_ops xfrm6_dst_ops_template
= {
151 .update_pmtu
= xfrm6_update_pmtu
,
152 .redirect
= xfrm6_redirect
,
153 .cow_metrics
= dst_cow_metrics_generic
,
154 .destroy
= xfrm6_dst_destroy
,
155 .ifdown
= xfrm6_dst_ifdown
,
156 .local_out
= __ip6_local_out
,
160 static const struct xfrm_policy_afinfo xfrm6_policy_afinfo
= {
161 .dst_ops
= &xfrm6_dst_ops_template
,
162 .dst_lookup
= xfrm6_dst_lookup
,
163 .get_saddr
= xfrm6_get_saddr
,
164 .fill_dst
= xfrm6_fill_dst
,
165 .blackhole_route
= ip6_blackhole_route
,
168 static int __init
xfrm6_policy_init(void)
170 return xfrm_policy_register_afinfo(&xfrm6_policy_afinfo
, AF_INET6
);
173 static void xfrm6_policy_fini(void)
175 xfrm_policy_unregister_afinfo(&xfrm6_policy_afinfo
);
179 static struct ctl_table xfrm6_policy_table
[] = {
181 .procname
= "xfrm6_gc_thresh",
182 .data
= &init_net
.xfrm
.xfrm6_dst_ops
.gc_thresh
,
183 .maxlen
= sizeof(int),
185 .proc_handler
= proc_dointvec
,
190 static int __net_init
xfrm6_net_sysctl_init(struct net
*net
)
192 struct ctl_table
*table
;
193 struct ctl_table_header
*hdr
;
195 table
= xfrm6_policy_table
;
196 if (!net_eq(net
, &init_net
)) {
197 table
= kmemdup(table
, sizeof(xfrm6_policy_table
), GFP_KERNEL
);
201 table
[0].data
= &net
->xfrm
.xfrm6_dst_ops
.gc_thresh
;
204 hdr
= register_net_sysctl_sz(net
, "net/ipv6", table
,
205 ARRAY_SIZE(xfrm6_policy_table
));
209 net
->ipv6
.sysctl
.xfrm6_hdr
= hdr
;
213 if (!net_eq(net
, &init_net
))
219 static void __net_exit
xfrm6_net_sysctl_exit(struct net
*net
)
221 struct ctl_table
*table
;
223 if (!net
->ipv6
.sysctl
.xfrm6_hdr
)
226 table
= net
->ipv6
.sysctl
.xfrm6_hdr
->ctl_table_arg
;
227 unregister_net_sysctl_table(net
->ipv6
.sysctl
.xfrm6_hdr
);
228 if (!net_eq(net
, &init_net
))
231 #else /* CONFIG_SYSCTL */
232 static inline int xfrm6_net_sysctl_init(struct net
*net
)
237 static inline void xfrm6_net_sysctl_exit(struct net
*net
)
242 static int __net_init
xfrm6_net_init(struct net
*net
)
246 memcpy(&net
->xfrm
.xfrm6_dst_ops
, &xfrm6_dst_ops_template
,
247 sizeof(xfrm6_dst_ops_template
));
248 ret
= dst_entries_init(&net
->xfrm
.xfrm6_dst_ops
);
252 ret
= xfrm6_net_sysctl_init(net
);
254 dst_entries_destroy(&net
->xfrm
.xfrm6_dst_ops
);
259 static void __net_exit
xfrm6_net_exit(struct net
*net
)
261 xfrm6_net_sysctl_exit(net
);
262 dst_entries_destroy(&net
->xfrm
.xfrm6_dst_ops
);
265 static struct pernet_operations xfrm6_net_ops
= {
266 .init
= xfrm6_net_init
,
267 .exit
= xfrm6_net_exit
,
270 int __init
xfrm6_init(void)
274 ret
= xfrm6_policy_init();
277 ret
= xfrm6_state_init();
281 ret
= xfrm6_protocol_init();
285 ret
= register_pernet_subsys(&xfrm6_net_ops
);
291 xfrm6_protocol_fini();
299 void xfrm6_fini(void)
301 unregister_pernet_subsys(&xfrm6_net_ops
);
302 xfrm6_protocol_fini();