2 ###############################################################################
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2010 Michael Tremer & Christian Schmidt #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
20 ###############################################################################
26 list_append devices $
(devices_get_all
)
29 list_append devices $
(phy_list
)
31 # Add all serial devices
32 list_append devices $
(serial_list
)
34 # Return a sorted result
38 # Check if the device exists
42 # If device name was not found, exit.
43 [ -n "${device}" ] ||
return ${EXIT_ERROR}
45 # Check for a normal network device.
46 [ -d "${SYS_CLASS_NET}/${device}" ] && return ${EXIT_OK}
48 # If the check above did not find a result,
50 phy_exists "${device}" && return ${EXIT_OK}
52 # If the check above did not find a result,
53 # we check for serial devices.
54 serial_exists ${device}
57 device_matches_pattern() {
64 pattern="^
${pattern//N/[[:digit:]]+}$
"
66 [[ ${device} =~ ${pattern} ]] \
67 && return ${EXIT_TRUE} || return ${EXIT_FALSE}
74 # Nothing to do, it device does not exist.
75 device_exists ${device} || return ${EXIT_OK}
78 cmd_quiet ip link delete ${device}
81 if [ ${ret} -ne ${EXIT_OK} ]; then
82 log ERROR "device
: Could not delete device
'${device}': ${ret}"
93 local flags=$(__device_get_file ${device} flags)
95 if [[ "$
(( ${flags} & ${flag} ))" -eq 0 ]]; then
102 # Check if the device is up
106 device_exists ${device} || return ${EXIT_ERROR}
108 device_has_flag ${device} 0x1
111 device_ifindex_to_name() {
115 local device device_idx
116 for device in ${SYS_CLASS_NET}/*; do
117 device=$(basename ${device})
118 device_exists ${device} || continue
120 device_idx=$(device_get_ifindex ${device})
122 if [ "${device_idx}" = "${idx}" ]; then
131 device_get_ifindex() {
135 local path="${SYS_CLASS_NET}/${1}/ifindex
"
137 # Check if file can be read.
138 [ -r "${path}" ] || return ${EXIT_ERROR}
143 # Check if the device is a batman-adv bridge
144 device_is_batman_adv() {
145 [ -d "${SYS_CLASS_NET}/${1}/mesh
" ]
148 # Check if the device is a batman-adv slave port
149 device_is_batman_adv_slave() {
152 if [ -d "${SYS_CLASS_NET}/${device}/batman_adv
" ]; then
153 local status="$
(<${SYS_CLASS_NET}/${device}/batman_adv
/iface_status
)"
168 # Check if the device is a bonding device
169 device_is_bonding() {
170 [ -d "/sys
/class
/net
/${1}/bonding
" ]
173 # Check if the device bonded in a bonding device
177 [ -d "${SYS_CLASS_NET}/${device}/bonding_slave
" ]
180 # Check if the device is a bridge
182 [ -d "/sys
/class
/net
/${1}/bridge
" ]
185 device_is_bridge_attached() {
187 [ -d "${SYS_CLASS_NET}/${device}/brport
" ]
190 device_is_wireless_monitor() {
194 device_is_wireless "${device}" && \
195 device_matches_pattern "${device}" "${PORT_PATTERN_WIRELESS_MONITOR}"
198 device_is_wireless_adhoc() {
202 device_is_wireless "${device}" && \
203 device_matches_pattern "${device}" "${PORT_PATTERN_WIRELESS_ADHOC}"
206 device_get_bridge() {
210 # Check if device is attached to a bridge.
211 device_is_bridge_attached ${device} || return ${EXIT_ERROR}
213 local ifindex_path="${SYS_CLASS_NET}/${device}/brport
/bridge
/ifindex
"
214 [ -r "${ifindex_path}" ] || return ${EXIT_ERROR}
216 local ifindex=$(<${ifindex_path})
219 device_ifindex_to_name ${ifindex}
222 # Check if the device is a vlan device
227 [ -e "${PROC_NET_VLAN}/${device}" ]
230 # Check if the device has vlan devices
235 if device_is_vlan ${device}; then
239 local vlans=$(device_get_vlans ${device})
240 [ -n "${vlans}" ] && return ${EXIT_OK} || return ${EXIT_ERROR}
247 # If no 8021q module has been loaded into the kernel,
248 # we cannot do anything.
249 [ -r "${PROC_NET_VLAN_CONFIG}" ] ||
return ${EXIT_OK}
251 local dev spacer1 id spacer2 parent
252 while read dev spacer1 id spacer2 parent
; do
253 [ "${parent}" = "${device}" ] ||
continue
256 done < ${PROC_NET_VLAN_CONFIG}
259 # Check if the device is a ppp device
263 local type=$
(__device_get_file
${device} type)
265 [ "${type}" = "512" ] && return ${EXIT_OK} || return ${EXIT_ERROR}
268 # Check if the device is a pointopoint device.
272 device_has_flag ${device} 0x10
275 # Check if the device is a loopback device
276 device_is_loopback() {
279 [ "${device}" = "lo
" ]
282 # Check if the device is a dummy device
283 # This is the worst possible check, but all I could come up with
287 [[ ${device} =~ ^dummy[0-9]+$ ]]
293 [[ ${device} =~ ^ipsec\- ]]
296 # Check if the device is a wireless device
297 device_is_wireless() {
300 [ -d "${SYS_CLASS_NET}/${device}/phy80211
" ]
306 local type=$(__device_get_file ${device} type)
308 [ "${type}" = "768" ] && return ${EXIT_OK} || return ${EXIT_ERROR}
314 if device_is_wireless
"${device}"; then
315 print
"$(<${SYS_CLASS_NET}/${device}/phy80211/name)"
330 # Returns true if a device is a tun device
334 [ -e "${SYS_CLASS_NET}/${device}/tun_flags" ]
337 # Check if the device is a physical network interface
338 device_is_ethernet
() {
341 device_is_ethernet_compatible
"${device}" || \
344 device_is_loopback
${device} && \
347 device_is_bonding
${device} && \
350 device_is_bridge
${device} && \
353 device_is_ppp
${device} && \
356 device_is_vlan
${device} && \
359 device_is_dummy
${device} && \
362 device_is_tun
${device} && \
368 # Get the device type
372 # If the device does not exist (happens on udev remove events),
373 # we do not bother to run all checks.
374 if ! device_exists
"${device}"; then
377 elif device_is_vlan
${device}; then
380 elif device_is_bonding
${device}; then
383 elif device_is_bridge
${device}; then
386 elif device_is_ppp
${device}; then
389 elif device_is_batman_adv
${device}; then
392 elif device_is_loopback
${device}; then
395 elif device_is_wireless_adhoc
${device}; then
396 echo "wireless-adhoc"
398 elif device_is_wireless
${device}; then
401 elif device_is_dummy
${device}; then
404 elif device_is_tun
${device}; then
407 elif device_is_ethernet
${device}; then
410 elif device_is_serial
${device}; then
413 elif device_is_phy
${device}; then
416 elif device_is_vti
${device}; then
424 device_is_ethernet_compatible
() {
427 # /sys/class/net/*/type must equal 1 for ethernet compatible devices
428 local type="$(__device_get_file "${device}" "type")"
429 [[ "${type}" = "1" ]]
432 device_get_status
() {
436 local status
=${STATUS_DOWN}
438 if device_is_up
${device}; then
441 if ! device_has_carrier
${device}; then
442 status
=${STATUS_NOCARRIER}
449 device_get_address
() {
452 cat ${SYS_CLASS_NET}/${device}/address
2>/dev
/null
455 device_set_address
() {
461 if ! device_exists
"${device}"; then
462 error
"Device '${device}' does not exist."
466 # Do nothing if the address has not changed
467 local old_addr
="$(device_get_address "${device}")"
468 if [ -n "${old_addr}" -a "${addr}" = "${old_addr}" ]; then
472 log DEBUG
"Setting address of '${device}' from '${old_addr}' to '${addr}'"
475 if device_is_up
"${device}"; then
476 device_set_down
"${device}"
480 ip link
set "${device}" address
"${addr}"
483 if [ "${up}" = "1" ]; then
484 device_set_up
"${device}"
487 if [ "${ret}" != "0" ]; then
488 error_log
"Could not set address '${addr}' on device '${device}'"
498 for device
in ${SYS_CLASS_NET}/*; do
499 device
=$
(basename ${device})
501 # bonding_masters is no device
502 [ "${device}" = "bonding_masters" ] && continue
504 devices
="${devices} ${device}"
515 # Check if a device has a cable plugged in
516 device_has_carrier
() {
520 local carrier
=$
(__device_get_file
${device} carrier
)
521 [ "${carrier}" = "1" ]
524 device_is_promisc
() {
527 device_has_flag
${device} 0x200
530 device_set_promisc
() {
534 assert device_exists
${device}
536 assert isoneof state on off
538 ip link
set ${device} promisc
${state}
541 # Check if the device is free
546 # Check if the device is used
550 device_has_vlans
${device} && \
552 device_is_bonded
${device} && \
554 device_is_bridge_attached
${device} && \
560 # Give the device a new name
563 local destination
=${2}
565 # Check if devices exists
566 if ! device_exists
${source} || device_exists
${destination}; then
571 if device_is_up
${source}; then
572 ip link
set ${source} down
576 ip link
set ${source} name
${destination}
578 if [ "${up}" = "1" ]; then
579 ip link
set ${destination} up
583 device_set_master
() {
590 if ! cmd ip link
set "${device}" master
"${master}"; then
591 log ERROR
"Could not set master ${master} for device ${device}"
598 device_remove_master
() {
602 if ! cmd ip link
set "${device}" nomaster
; then
603 log ERROR
"Could not remove master for device ${device}"
616 # Do nothing if device is already up
617 device_is_up
${device} && return ${EXIT_OK}
619 log INFO
"Bringing up ${device}"
621 device_set_parent_up
${device}
622 if ! cmd ip link
set ${device} up
; then
627 if interrupt_use_smp_affinity
; then
628 device_auto_configure_smp_affinity
${device}
634 device_set_parent_up
() {
638 if device_is_vlan
${device}; then
639 parent
=$
(vlan_get_parent
${device})
641 device_is_up
${parent} && return ${EXIT_OK}
643 log DEBUG
"Setting up parent device '${parent}' of '${device}'"
645 device_set_up
${parent}
659 if device_is_up
${device}; then
660 log INFO
"Bringing down ${device}"
662 cmd ip link
set ${device} down
666 device_set_parent_down
${device}
671 device_set_parent_down
() {
675 if device_is_vlan
${device}; then
676 parent
=$
(vlan_get_parent
${device})
678 device_is_up
${parent} ||
return ${EXIT_OK}
680 if device_is_free
${parent}; then
681 log DEBUG
"Tearing down parent device '${parent}' of '${device}'"
683 device_set_down
${parent}
693 # Return an error if the device does not exist
694 device_exists
${device} ||
return ${EXIT_ERROR}
696 echo $
(<${SYS_CLASS_NET}/${device}/mtu
)
699 # Set mtu to a device
704 assert device_exists
${device}
706 # Handle bridges differently
707 if device_is_bridge
${device}; then
709 for port
in $
(bridge_get_members
${device}); do
710 device_set_mtu
${port} ${mtu}
714 log INFO
"Setting MTU of ${device} to ${mtu}"
717 if device_is_up
${device}; then
718 device_set_down
${device}
723 if ! cmd ip link
set ${device} mtu
${mtu}; then
726 log ERROR
"Could not set MTU ${mtu} on ${device}"
729 if [ "${up}" = "1" ]; then
730 device_set_up
${device}
736 device_adjust_mtu
() {
740 local other_device
="${2}"
742 local mtu
="$(device_get_mtu "${other_device}")"
743 device_set_mtu
"${device}" "${mtu}"
749 log INFO
"Running discovery process on device '${device}'."
752 for hook
in $
(hook_zone_get_all
); do
753 hook_zone_exec
${hook} discover
${device}
762 # Flash for ten seconds by default
766 local background
="false"
775 seconds
="$(cli_get_val "${arg}")"
778 done <<< "$(args $@)"
780 assert isinteger seconds
782 if ! device_exists
"${device}"; then
783 log ERROR
"Cannot identify device ${device}: Does not exist"
787 if ! device_is_ethernet
"${device}"; then
788 log DEBUG
"Cannot identify device ${device}: Not an ethernet device"
789 return ${EXIT_NOT_SUPPORTED}
792 log DEBUG
"Identifying device ${device}"
794 local command="ethtool --identify ${device} ${seconds}"
797 if enabled background
; then
798 cmd_background
"${command}"
800 cmd_quiet
"${command}"
812 assert device_exists
${device}
814 # IPv6 addresses must be fully imploded
815 local protocol
=$
(ip_detect_protocol
${addr})
816 case "${protocol}" in
818 addr
=$
(ipv6_format
"${addr}")
822 list_match
${addr} $
(device_get_addresses
${device})
825 device_get_addresses
() {
828 assert device_exists
${device}
833 ip addr show
${device} | \
834 while read prot addr line
; do
835 [ "${prot:0:4}" = "inet" ] && echo "${addr}"
839 __device_get_file
() {
843 fread
"${SYS_CLASS_NET}/${device}/${file}"
846 __device_set_file
() {
853 fappend
"${SYS_CLASS_NET}/${device}/${file}" "${value}"
856 device_get_rx_bytes
() {
859 __device_get_file
${device} statistics
/rx_bytes
862 device_get_tx_bytes
() {
865 __device_get_file
${device} statistics
/tx_bytes
868 device_get_rx_packets
() {
871 __device_get_file
${device} statistics
/rx_packets
874 device_get_tx_packets
() {
877 __device_get_file
${device} statistics
/tx_packets
880 device_get_rx_errors
() {
883 __device_get_file
${device} statistics
/rx_errors
886 device_get_tx_errors
() {
889 __device_get_file
${device} statistics
/tx_errors
895 local speed
=$
(__device_get_file
${device} speed
)
897 # Exit for no output (i.e. no link detected)
898 isset speed ||
return ${EXIT_ERROR}
900 # Don't return anything for negative values
901 [ ${speed} -lt 0 ] && return ${EXIT_ERROR}
906 device_get_duplex
() {
909 local duplex
=$
(__device_get_file
${device} duplex
)
921 device_get_link_string
() {
927 local speed
="$(device_get_speed "${device}")"
929 list_append s
"${speed} MBit/s"
932 local duplex
="$(device_get_duplex "${device}")"
933 if isset duplex
; then
934 list_append s
"${duplex} duplex"
940 device_auto_configure_smp_affinity
() {
945 if lock_acquire
"smp-affinity" 60; then
946 device_set_smp_affinity
${device} auto
948 lock_release
"smp-affinity"
952 device_set_smp_affinity
() {
958 # mode can be auto which will automatically try to find
959 # the least busy processor, or an integer for the desired
960 # processor that should handle this device
962 local num_processors
=$
(system_get_processors
)
964 if [ "${mode}" = "auto" ]; then
965 local processor
=$
(interrupt_choose_least_busy_processor
)
967 assert isinteger mode
968 local processor
=${mode}
970 if [ ${processor} -gt ${num_processors} ]; then
971 log ERROR
"Processor ${processor} does not exist"
976 local interrupts
=$
(interrupts_for_device
${device})
977 if ! isset interrupts
; then
978 log DEBUG
"${device} has no interrupts. Not changing SMP affinity"
984 for interrupt
in ${interrupts}; do
985 interrupt_set_smp_affinity
${interrupt} ${processor}
988 # Find all queues and assign them to the next processor
990 for queue
in $
(device_get_queues
${device}); do
992 # Only handle receive queues
994 for interrupt
in $
(interrupts_for_device_queue
${device} ${queue}); do
995 interrupt_set_smp_affinity
${interrupt} ${processor}
998 device_queue_set_smp_affinity
${device} ${queue} ${processor}
1007 # Get the next available processor if in auto mode
1008 [ "${mode}" = "auto" ] && processor
=$
(system_get_next_processor
${processor})
1014 device_get_queues
() {
1020 for queue
in ${SYS_CLASS_NET}/${device}/queues
/*; do
1021 [ -d "${queue}" ] ||
continue
1027 device_supports_multiqueue
() {
1030 local num_queues
=$
(device_num_queues
${device})
1032 if isset num_queues
&& [ ${num_queues} -gt 2 ]; then
1036 return ${EXIT_FALSE}
1039 device_num_queues
() {
1043 isset
type && assert isoneof
type rx tx
1048 for q
in $
(device_get_queues
${device}); do
1049 case "${type},${q}" in
1065 device_queue_get_smp_affinity
() {
1071 local path
="${SYS_CLASS_NET}/${device}/queues/${queue}"
1075 path
="${path}/rps_cpus"
1078 path
="${path}/xps_cpus"
1081 assert
[ -r "${path}" ]
1083 __bitmap_to_processor_ids $
(<${path})
1086 device_queue_set_smp_affinity
() {
1091 local processor
=${3}
1093 local path
="${SYS_CLASS_NET}/${device}/queues/${queue}/rps_cpus"
1094 assert
[ -w "${path}" ]
1096 log DEBUG
"Setting SMP affinity of ${device} (${queue}) to processor ${processor}"
1098 __processor_id_to_bitmap
${processor} > ${path}