kernel-libipsec: Create a TUN device and use it to install virtual IPs

diff --git a/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c b/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c
index fdcbace51cf6dbb96c9f1ab834573c3531912a23..c7fc56b7194984b885ea3a004715f74551f0d9b4 100644 (file)
--- a/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c
+++ b/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c
@@ -17,6 +17,7 @@
 #include <library.h>
 #include <ipsec.h>
 #include <hydra.h>
+#include <networking/tun_device.h>
 #include <utils/debug.h>
 
 typedef struct private_kernel_libipsec_ipsec_t private_kernel_libipsec_ipsec_t;
@@ -32,6 +33,11 @@ struct private_kernel_libipsec_ipsec_t {
         * Listener for lifetime expire events
         */
        ipsec_event_listener_t ipsec_listener;
+
+       /**
+        * TUN device
+        */
+       tun_device_t *tun;
 };
 
 /**
@@ -181,6 +187,7 @@ kernel_libipsec_ipsec_t *kernel_libipsec_ipsec_create()
                .ipsec_listener = {
                        .expire = expire,
                },
+               .tun = lib->get(lib, "kernel-libipsec-tun"),
        );
 
        ipsec->events->register_listener(ipsec->events, &this->ipsec_listener);

diff --git a/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_plugin.c b/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_plugin.c
index a20ee7b4b30f8a4d6aa93a01ead0ed226a8bc06a..9fa811d023a409e9dc645e12048449851178c482 100644 (file)
--- a/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_plugin.c
+++ b/src/libcharon/plugins/kernel_libipsec/kernel_libipsec_plugin.c
@@ -17,8 +17,11 @@
 #include "kernel_libipsec_ipsec.h"
 
 #include <ipsec.h>
+#include <networking/tun_device.h>
 #include <utils/debug.h>
 
+#define TUN_DEFAULT_MTU 1400
+
 typedef struct private_kernel_libipsec_plugin_t private_kernel_libipsec_plugin_t;
 
 /**
@@ -30,6 +33,12 @@ struct private_kernel_libipsec_plugin_t {
         * implements plugin interface
         */
        kernel_libipsec_plugin_t public;
+
+       /**
+        * TUN device created by this plugin
+        */
+       tun_device_t *tun;
+
 };
 
 METHOD(plugin_t, get_name, char*,
@@ -52,6 +61,11 @@ METHOD(plugin_t, get_features, int,
 METHOD(plugin_t, destroy, void,
        private_kernel_libipsec_plugin_t *this)
 {
+       if (this->tun)
+       {
+               lib->set(lib, "kernel-libipsec-tun", NULL);
+               this->tun->destroy(this->tun);
+       }
        libipsec_deinit();
        free(this);
 }
@@ -80,5 +94,24 @@ plugin_t *kernel_libipsec_plugin_create()
                return NULL;
        }
 
+       this->tun = tun_device_create("ipsec%d");
+       if (!this->tun)
+       {
+               DBG1(DBG_KNL, "failed to create TUN device");
+               destroy(this);
+               return NULL;
+       }
+       if (!this->tun->set_mtu(this->tun, TUN_DEFAULT_MTU) ||
+               !this->tun->up(this->tun))
+       {
+               DBG1(DBG_KNL, "failed to configure TUN device");
+               destroy(this);
+               return NULL;
+       }
+       lib->set(lib, "kernel-libipsec-tun", this->tun);
+
+       /* set TUN device as default to install VIPs */
+       lib->settings->set_str(lib->settings, "%s.install_virtual_ip_on",
+                                                  this->tun->get_name(this->tun), charon->name);
        return &this->public.plugin;
 }