]>
Commit | Line | Data |
---|---|---|
53e1b683 | 1 | /* SPDX-License-Identifier: LGPL-2.1+ */ |
04473969 | 2 | /*** |
810adae9 | 3 | Copyright © 2017 Intel Corporation. All rights reserved. |
04473969 PF |
4 | ***/ |
5 | ||
6 | #include <netinet/icmp6.h> | |
7 | #include <netinet/in.h> | |
204f99d2 | 8 | #include <arpa/inet.h> |
04473969 PF |
9 | |
10 | #include "sd-radv.h" | |
11 | ||
12 | #include "alloc-util.h" | |
e965d6ab | 13 | #include "dns-domain.h" |
ae25915d | 14 | #include "ether-addr-util.h" |
807a8ede | 15 | #include "event-util.h" |
04473969 PF |
16 | #include "fd-util.h" |
17 | #include "icmp6-util.h" | |
18 | #include "in-addr-util.h" | |
5cfa2c3d LP |
19 | #include "io-util.h" |
20 | #include "macro.h" | |
0a970718 | 21 | #include "memory-util.h" |
04473969 | 22 | #include "radv-internal.h" |
5cfa2c3d | 23 | #include "random-util.h" |
04473969 PF |
24 | #include "socket-util.h" |
25 | #include "string-util.h" | |
e965d6ab | 26 | #include "strv.h" |
04473969 | 27 | |
204f99d2 PF |
28 | _public_ int sd_radv_new(sd_radv **ret) { |
29 | _cleanup_(sd_radv_unrefp) sd_radv *ra = NULL; | |
30 | ||
31 | assert_return(ret, -EINVAL); | |
32 | ||
78f9d24f | 33 | ra = new(sd_radv, 1); |
204f99d2 PF |
34 | if (!ra) |
35 | return -ENOMEM; | |
36 | ||
78f9d24f YW |
37 | *ra = (sd_radv) { |
38 | .n_ref = 1, | |
39 | .fd = -1, | |
40 | }; | |
204f99d2 | 41 | |
1cc6c93a | 42 | *ret = TAKE_PTR(ra); |
204f99d2 PF |
43 | |
44 | return 0; | |
45 | } | |
46 | ||
47 | _public_ int sd_radv_attach_event(sd_radv *ra, sd_event *event, int64_t priority) { | |
48 | int r; | |
49 | ||
50 | assert_return(ra, -EINVAL); | |
51 | assert_return(!ra->event, -EBUSY); | |
52 | ||
53 | if (event) | |
54 | ra->event = sd_event_ref(event); | |
55 | else { | |
56 | r = sd_event_default(&ra->event); | |
57 | if (r < 0) | |
58 | return 0; | |
59 | } | |
60 | ||
61 | ra->event_priority = priority; | |
62 | ||
63 | return 0; | |
64 | } | |
65 | ||
66 | _public_ int sd_radv_detach_event(sd_radv *ra) { | |
67 | ||
68 | assert_return(ra, -EINVAL); | |
69 | ||
70 | ra->event = sd_event_unref(ra->event); | |
71 | return 0; | |
72 | } | |
73 | ||
74 | _public_ sd_event *sd_radv_get_event(sd_radv *ra) { | |
75 | assert_return(ra, NULL); | |
76 | ||
77 | return ra->event; | |
78 | } | |
79 | ||
96fe813c YW |
80 | _public_ int sd_radv_is_running(sd_radv *ra) { |
81 | assert_return(ra, false); | |
82 | ||
83 | return ra->state != SD_RADV_STATE_IDLE; | |
84 | } | |
85 | ||
204fb681 | 86 | static void radv_reset(sd_radv *ra) { |
c4b6dda0 | 87 | assert(ra); |
204fb681 | 88 | |
807a8ede | 89 | (void) event_source_disable(ra->timeout_event_source); |
204fb681 | 90 | |
88d5a3db PF |
91 | ra->recv_event_source = |
92 | sd_event_source_unref(ra->recv_event_source); | |
93 | ||
204fb681 PF |
94 | ra->ra_sent = 0; |
95 | } | |
96 | ||
8301aa0b | 97 | static sd_radv *radv_free(sd_radv *ra) { |
e866e17b LP |
98 | if (!ra) |
99 | return NULL; | |
204f99d2 PF |
100 | |
101 | while (ra->prefixes) { | |
102 | sd_radv_prefix *p = ra->prefixes; | |
103 | ||
104 | LIST_REMOVE(prefix, ra->prefixes, p); | |
105 | sd_radv_prefix_unref(p); | |
106 | } | |
107 | ||
69d7eba1 YW |
108 | while (ra->route_prefixes) { |
109 | sd_radv_route_prefix *p = ra->route_prefixes; | |
110 | ||
111 | LIST_REMOVE(prefix, ra->route_prefixes, p); | |
112 | sd_radv_route_prefix_unref(p); | |
113 | } | |
114 | ||
e9c6da38 | 115 | free(ra->rdnss); |
f9aa5417 | 116 | free(ra->dnssl); |
e9c6da38 | 117 | |
807a8ede YW |
118 | ra->timeout_event_source = sd_event_source_unref(ra->timeout_event_source); |
119 | ||
204fb681 PF |
120 | radv_reset(ra); |
121 | ||
204f99d2 | 122 | sd_radv_detach_event(ra); |
c4b6dda0 LP |
123 | |
124 | ra->fd = safe_close(ra->fd); | |
125 | ||
204f99d2 PF |
126 | return mfree(ra); |
127 | } | |
128 | ||
8301aa0b YW |
129 | DEFINE_PUBLIC_TRIVIAL_REF_UNREF_FUNC(sd_radv, sd_radv, radv_free); |
130 | ||
83ef9d14 | 131 | static int radv_send(sd_radv *ra, const struct in6_addr *dst, uint32_t router_lifetime) { |
203d4df5 | 132 | sd_radv_route_prefix *rt; |
77baf5ae PF |
133 | sd_radv_prefix *p; |
134 | struct sockaddr_in6 dst_addr = { | |
135 | .sin6_family = AF_INET6, | |
136 | .sin6_addr = IN6ADDR_ALL_NODES_MULTICAST_INIT, | |
137 | }; | |
138 | struct nd_router_advert adv = {}; | |
139 | struct { | |
140 | struct nd_opt_hdr opthdr; | |
141 | struct ether_addr slladdr; | |
142 | } _packed_ opt_mac = { | |
143 | .opthdr = { | |
144 | .nd_opt_type = ND_OPT_SOURCE_LINKADDR, | |
145 | .nd_opt_len = (sizeof(struct nd_opt_hdr) + | |
146 | sizeof(struct ether_addr) - 1) /8 + 1, | |
147 | }, | |
148 | }; | |
149 | struct nd_opt_mtu opt_mtu = { | |
150 | .nd_opt_mtu_type = ND_OPT_MTU, | |
151 | .nd_opt_mtu_len = 1, | |
152 | }; | |
203d4df5 | 153 | /* Reserve iov space for RA header, linkaddr, MTU, N prefixes, N routes, RDNSS |
6852c0f6 | 154 | and DNSSL */ |
203d4df5 | 155 | struct iovec iov[5 + ra->n_prefixes + ra->n_route_prefixes]; |
77baf5ae PF |
156 | struct msghdr msg = { |
157 | .msg_name = &dst_addr, | |
158 | .msg_namelen = sizeof(dst_addr), | |
159 | .msg_iov = iov, | |
160 | }; | |
d601b566 PF |
161 | usec_t time_now; |
162 | int r; | |
163 | ||
dc0ec5e2 LP |
164 | assert(ra); |
165 | ||
d601b566 PF |
166 | r = sd_event_now(ra->event, clock_boottime_or_monotonic(), &time_now); |
167 | if (r < 0) | |
168 | return r; | |
77baf5ae | 169 | |
dc0ec5e2 | 170 | if (dst && !IN6_IS_ADDR_UNSPECIFIED(dst)) |
77baf5ae | 171 | dst_addr.sin6_addr = *dst; |
88d5a3db | 172 | |
77baf5ae PF |
173 | adv.nd_ra_type = ND_ROUTER_ADVERT; |
174 | adv.nd_ra_curhoplimit = ra->hop_limit; | |
175 | adv.nd_ra_flags_reserved = ra->flags; | |
176 | adv.nd_ra_router_lifetime = htobe16(router_lifetime); | |
5cfa2c3d | 177 | iov[msg.msg_iovlen++] = IOVEC_MAKE(&adv, sizeof(adv)); |
77baf5ae PF |
178 | |
179 | /* MAC address is optional, either because the link does not use L2 | |
180 | addresses or load sharing is desired. See RFC 4861, Section 4.2 */ | |
ae25915d | 181 | if (!ether_addr_is_null(&ra->mac_addr)) { |
77baf5ae | 182 | opt_mac.slladdr = ra->mac_addr; |
5cfa2c3d | 183 | iov[msg.msg_iovlen++] = IOVEC_MAKE(&opt_mac, sizeof(opt_mac)); |
77baf5ae PF |
184 | } |
185 | ||
186 | if (ra->mtu) { | |
187 | opt_mtu.nd_opt_mtu_mtu = htobe32(ra->mtu); | |
5cfa2c3d | 188 | iov[msg.msg_iovlen++] = IOVEC_MAKE(&opt_mtu, sizeof(opt_mtu)); |
77baf5ae PF |
189 | } |
190 | ||
191 | LIST_FOREACH(prefix, p, ra->prefixes) { | |
d601b566 PF |
192 | if (p->valid_until) { |
193 | ||
194 | if (time_now > p->valid_until) | |
195 | p->opt.valid_lifetime = 0; | |
196 | else | |
197 | p->opt.valid_lifetime = htobe32((p->valid_until - time_now) / USEC_PER_SEC); | |
198 | ||
199 | if (time_now > p->preferred_until) | |
200 | p->opt.preferred_lifetime = 0; | |
201 | else | |
202 | p->opt.preferred_lifetime = htobe32((p->preferred_until - time_now) / USEC_PER_SEC); | |
203 | } | |
5cfa2c3d | 204 | iov[msg.msg_iovlen++] = IOVEC_MAKE(&p->opt, sizeof(p->opt)); |
77baf5ae PF |
205 | } |
206 | ||
203d4df5 SS |
207 | LIST_FOREACH(prefix, rt, ra->route_prefixes) |
208 | iov[msg.msg_iovlen++] = IOVEC_MAKE(&rt->opt, sizeof(rt->opt)); | |
209 | ||
5cfa2c3d LP |
210 | if (ra->rdnss) |
211 | iov[msg.msg_iovlen++] = IOVEC_MAKE(ra->rdnss, ra->rdnss->length * 8); | |
e9c6da38 | 212 | |
5cfa2c3d LP |
213 | if (ra->dnssl) |
214 | iov[msg.msg_iovlen++] = IOVEC_MAKE(ra->dnssl, ra->dnssl->length * 8); | |
e965d6ab | 215 | |
77baf5ae PF |
216 | if (sendmsg(ra->fd, &msg, 0) < 0) |
217 | return -errno; | |
204fb681 | 218 | |
77baf5ae | 219 | return 0; |
204fb681 PF |
220 | } |
221 | ||
88d5a3db PF |
222 | static int radv_recv(sd_event_source *s, int fd, uint32_t revents, void *userdata) { |
223 | sd_radv *ra = userdata; | |
224 | _cleanup_free_ char *addr = NULL; | |
225 | struct in6_addr src; | |
226 | triple_timestamp timestamp; | |
227 | int r; | |
228 | ssize_t buflen; | |
229 | _cleanup_free_ char *buf = NULL; | |
230 | ||
231 | assert(s); | |
232 | assert(ra); | |
233 | assert(ra->event); | |
234 | ||
235 | buflen = next_datagram_size_fd(fd); | |
cfffddea LP |
236 | if (buflen < 0) |
237 | return (int) buflen; | |
88d5a3db PF |
238 | |
239 | buf = new0(char, buflen); | |
240 | if (!buf) | |
e55a6eae | 241 | return -ENOMEM; |
88d5a3db PF |
242 | |
243 | r = icmp6_receive(fd, buf, buflen, &src, ×tamp); | |
244 | if (r < 0) { | |
245 | switch (r) { | |
246 | case -EADDRNOTAVAIL: | |
247 | (void) in_addr_to_string(AF_INET6, (union in_addr_union*) &src, &addr); | |
248 | log_radv("Received RS from non-link-local address %s. Ignoring", addr); | |
249 | break; | |
250 | ||
251 | case -EMULTIHOP: | |
252 | log_radv("Received RS with invalid hop limit. Ignoring."); | |
253 | break; | |
254 | ||
255 | case -EPFNOSUPPORT: | |
256 | log_radv("Received invalid source address from ICMPv6 socket. Ignoring."); | |
257 | break; | |
258 | ||
8eb41f4c LP |
259 | case -EAGAIN: /* ignore spurious wakeups */ |
260 | break; | |
261 | ||
88d5a3db | 262 | default: |
8eb41f4c | 263 | log_radv_errno(r, "Unexpected error receiving from ICMPv6 socket: %m"); |
88d5a3db PF |
264 | break; |
265 | } | |
266 | ||
267 | return 0; | |
268 | } | |
269 | ||
cfffddea LP |
270 | if ((size_t) buflen < sizeof(struct nd_router_solicit)) { |
271 | log_radv("Too short packet received"); | |
272 | return 0; | |
273 | } | |
274 | ||
88d5a3db PF |
275 | (void) in_addr_to_string(AF_INET6, (union in_addr_union*) &src, &addr); |
276 | ||
277 | r = radv_send(ra, &src, ra->lifetime); | |
278 | if (r < 0) | |
5a9fca25 | 279 | log_radv_errno(r, "Unable to send solicited Router Advertisement to %s: %m", strnull(addr)); |
88d5a3db | 280 | else |
5a9fca25 | 281 | log_radv("Sent solicited Router Advertisement to %s", strnull(addr)); |
88d5a3db PF |
282 | |
283 | return 0; | |
284 | } | |
285 | ||
204fb681 PF |
286 | static usec_t radv_compute_timeout(usec_t min, usec_t max) { |
287 | assert_return(min <= max, SD_RADV_DEFAULT_MIN_TIMEOUT_USEC); | |
288 | ||
ef90b6a4 GM |
289 | /* RFC 4861: min must be no less than 3s, max must be no less than 4s */ |
290 | min = MAX(min, 3*USEC_PER_SEC); | |
291 | max = MAX(max, 4*USEC_PER_SEC); | |
292 | ||
204fb681 PF |
293 | return min + (random_u32() % (max - min)); |
294 | } | |
295 | ||
296 | static int radv_timeout(sd_event_source *s, uint64_t usec, void *userdata) { | |
297 | int r; | |
298 | sd_radv *ra = userdata; | |
299 | usec_t min_timeout = SD_RADV_DEFAULT_MIN_TIMEOUT_USEC; | |
300 | usec_t max_timeout = SD_RADV_DEFAULT_MAX_TIMEOUT_USEC; | |
301 | usec_t time_now, timeout; | |
302 | char time_string[FORMAT_TIMESPAN_MAX]; | |
303 | ||
304 | assert(s); | |
305 | assert(ra); | |
306 | assert(ra->event); | |
307 | ||
204fb681 PF |
308 | r = sd_event_now(ra->event, clock_boottime_or_monotonic(), &time_now); |
309 | if (r < 0) | |
310 | goto fail; | |
311 | ||
312 | r = radv_send(ra, NULL, ra->lifetime); | |
313 | if (r < 0) | |
fdc2afc1 | 314 | log_radv_errno(r, "Unable to send Router Advertisement: %m"); |
204fb681 PF |
315 | |
316 | /* RFC 4861, Section 6.2.4, sending initial Router Advertisements */ | |
317 | if (ra->ra_sent < SD_RADV_MAX_INITIAL_RTR_ADVERTISEMENTS) { | |
318 | max_timeout = SD_RADV_MAX_INITIAL_RTR_ADVERT_INTERVAL_USEC; | |
319 | min_timeout = SD_RADV_MAX_INITIAL_RTR_ADVERT_INTERVAL_USEC / 3; | |
320 | } | |
321 | ||
ef90b6a4 GM |
322 | /* RFC 4861, Section 6.2.1, lifetime must be at least MaxRtrAdvInterval, |
323 | so lower the interval here */ | |
324 | if (ra->lifetime > 0 && (ra->lifetime * USEC_PER_SEC) < max_timeout) { | |
325 | max_timeout = ra->lifetime * USEC_PER_SEC; | |
326 | min_timeout = max_timeout / 3; | |
327 | } | |
328 | ||
204fb681 PF |
329 | timeout = radv_compute_timeout(min_timeout, max_timeout); |
330 | ||
331 | log_radv("Next Router Advertisement in %s", | |
332 | format_timespan(time_string, FORMAT_TIMESPAN_MAX, | |
333 | timeout, USEC_PER_SEC)); | |
334 | ||
807a8ede YW |
335 | r = event_reset_time(ra->event, &ra->timeout_event_source, |
336 | clock_boottime_or_monotonic(), | |
337 | time_now + timeout, MSEC_PER_SEC, | |
338 | radv_timeout, ra, | |
339 | ra->event_priority, "radv-timeout", true); | |
204fb681 PF |
340 | if (r < 0) |
341 | goto fail; | |
342 | ||
343 | ra->ra_sent++; | |
344 | ||
807a8ede YW |
345 | return 0; |
346 | ||
204fb681 | 347 | fail: |
290696e5 | 348 | sd_radv_stop(ra); |
204fb681 PF |
349 | |
350 | return 0; | |
351 | } | |
352 | ||
290696e5 | 353 | _public_ int sd_radv_stop(sd_radv *ra) { |
204fb681 PF |
354 | int r; |
355 | ||
204f99d2 PF |
356 | assert_return(ra, -EINVAL); |
357 | ||
6f8a8b84 SS |
358 | if (ra->state == SD_RADV_STATE_IDLE) |
359 | return 0; | |
360 | ||
204f99d2 PF |
361 | log_radv("Stopping IPv6 Router Advertisement daemon"); |
362 | ||
290696e5 YW |
363 | /* RFC 4861, Section 6.2.5, send at least one Router Advertisement |
364 | with zero lifetime */ | |
365 | r = radv_send(ra, NULL, 0); | |
366 | if (r < 0) | |
367 | log_radv_errno(r, "Unable to send last Router Advertisement with router lifetime set to zero: %m"); | |
204fb681 PF |
368 | |
369 | radv_reset(ra); | |
77baf5ae | 370 | ra->fd = safe_close(ra->fd); |
204f99d2 PF |
371 | ra->state = SD_RADV_STATE_IDLE; |
372 | ||
373 | return 0; | |
374 | } | |
375 | ||
376 | _public_ int sd_radv_start(sd_radv *ra) { | |
f474884c | 377 | int r; |
204fb681 | 378 | |
204f99d2 PF |
379 | assert_return(ra, -EINVAL); |
380 | assert_return(ra->event, -EINVAL); | |
381 | assert_return(ra->ifindex > 0, -EINVAL); | |
382 | ||
383 | if (ra->state != SD_RADV_STATE_IDLE) | |
384 | return 0; | |
385 | ||
807a8ede YW |
386 | r = event_reset_time(ra->event, &ra->timeout_event_source, |
387 | clock_boottime_or_monotonic(), | |
388 | 0, 0, | |
389 | radv_timeout, ra, | |
390 | ra->event_priority, "radv-timeout", true); | |
204fb681 PF |
391 | if (r < 0) |
392 | goto fail; | |
393 | ||
77baf5ae PF |
394 | r = icmp6_bind_router_advertisement(ra->ifindex); |
395 | if (r < 0) | |
396 | goto fail; | |
397 | ||
398 | ra->fd = r; | |
88d5a3db PF |
399 | |
400 | r = sd_event_add_io(ra->event, &ra->recv_event_source, ra->fd, EPOLLIN, radv_recv, ra); | |
401 | if (r < 0) | |
402 | goto fail; | |
403 | ||
404 | r = sd_event_source_set_priority(ra->recv_event_source, ra->event_priority); | |
405 | if (r < 0) | |
406 | goto fail; | |
407 | ||
408 | (void) sd_event_source_set_description(ra->recv_event_source, "radv-receive-message"); | |
77baf5ae | 409 | |
204f99d2 PF |
410 | ra->state = SD_RADV_STATE_ADVERTISING; |
411 | ||
412 | log_radv("Started IPv6 Router Advertisement daemon"); | |
413 | ||
414 | return 0; | |
204fb681 PF |
415 | |
416 | fail: | |
417 | radv_reset(ra); | |
418 | ||
419 | return r; | |
204f99d2 PF |
420 | } |
421 | ||
422 | _public_ int sd_radv_set_ifindex(sd_radv *ra, int ifindex) { | |
423 | assert_return(ra, -EINVAL); | |
7fa69c0a | 424 | assert_return(ifindex > 0, -EINVAL); |
204f99d2 PF |
425 | |
426 | if (ra->state != SD_RADV_STATE_IDLE) | |
427 | return -EBUSY; | |
428 | ||
429 | ra->ifindex = ifindex; | |
430 | ||
431 | return 0; | |
432 | } | |
433 | ||
434 | _public_ int sd_radv_set_mac(sd_radv *ra, const struct ether_addr *mac_addr) { | |
435 | assert_return(ra, -EINVAL); | |
436 | ||
437 | if (ra->state != SD_RADV_STATE_IDLE) | |
438 | return -EBUSY; | |
439 | ||
440 | if (mac_addr) | |
441 | ra->mac_addr = *mac_addr; | |
442 | else | |
443 | zero(ra->mac_addr); | |
444 | ||
445 | return 0; | |
446 | } | |
447 | ||
448 | _public_ int sd_radv_set_mtu(sd_radv *ra, uint32_t mtu) { | |
449 | assert_return(ra, -EINVAL); | |
450 | assert_return(mtu >= 1280, -EINVAL); | |
451 | ||
204f99d2 PF |
452 | ra->mtu = mtu; |
453 | ||
454 | return 0; | |
455 | } | |
456 | ||
457 | _public_ int sd_radv_set_hop_limit(sd_radv *ra, uint8_t hop_limit) { | |
458 | assert_return(ra, -EINVAL); | |
459 | ||
460 | if (ra->state != SD_RADV_STATE_IDLE) | |
461 | return -EBUSY; | |
462 | ||
463 | ra->hop_limit = hop_limit; | |
464 | ||
465 | return 0; | |
466 | } | |
467 | ||
468 | _public_ int sd_radv_set_router_lifetime(sd_radv *ra, uint32_t router_lifetime) { | |
469 | assert_return(ra, -EINVAL); | |
470 | ||
471 | if (ra->state != SD_RADV_STATE_IDLE) | |
472 | return -EBUSY; | |
473 | ||
474 | /* RFC 4191, Section 2.2, "...If the Router Lifetime is zero, the | |
475 | preference value MUST be set to (00) by the sender..." */ | |
476 | if (router_lifetime == 0 && | |
477 | (ra->flags & (0x3 << 3)) != (SD_NDISC_PREFERENCE_MEDIUM << 3)) | |
478 | return -ETIME; | |
479 | ||
480 | ra->lifetime = router_lifetime; | |
481 | ||
482 | return 0; | |
483 | } | |
484 | ||
485 | _public_ int sd_radv_set_managed_information(sd_radv *ra, int managed) { | |
486 | assert_return(ra, -EINVAL); | |
487 | ||
488 | if (ra->state != SD_RADV_STATE_IDLE) | |
489 | return -EBUSY; | |
490 | ||
491 | SET_FLAG(ra->flags, ND_RA_FLAG_MANAGED, managed); | |
492 | ||
493 | return 0; | |
494 | } | |
495 | ||
496 | _public_ int sd_radv_set_other_information(sd_radv *ra, int other) { | |
497 | assert_return(ra, -EINVAL); | |
498 | ||
499 | if (ra->state != SD_RADV_STATE_IDLE) | |
500 | return -EBUSY; | |
501 | ||
502 | SET_FLAG(ra->flags, ND_RA_FLAG_OTHER, other); | |
503 | ||
504 | return 0; | |
505 | } | |
506 | ||
507 | _public_ int sd_radv_set_preference(sd_radv *ra, unsigned preference) { | |
508 | int r = 0; | |
509 | ||
510 | assert_return(ra, -EINVAL); | |
511 | assert_return(IN_SET(preference, | |
512 | SD_NDISC_PREFERENCE_LOW, | |
513 | SD_NDISC_PREFERENCE_MEDIUM, | |
514 | SD_NDISC_PREFERENCE_HIGH), -EINVAL); | |
515 | ||
516 | ra->flags = (ra->flags & ~(0x3 << 3)) | (preference << 3); | |
517 | ||
518 | return r; | |
519 | } | |
520 | ||
a3a98776 | 521 | _public_ int sd_radv_add_prefix(sd_radv *ra, sd_radv_prefix *p, int dynamic) { |
204f99d2 | 522 | sd_radv_prefix *cur; |
d601b566 | 523 | int r; |
204f99d2 | 524 | _cleanup_free_ char *addr_p = NULL; |
d601b566 PF |
525 | char time_string_preferred[FORMAT_TIMESPAN_MAX]; |
526 | char time_string_valid[FORMAT_TIMESPAN_MAX]; | |
527 | usec_t time_now, valid, preferred, valid_until, preferred_until; | |
204f99d2 PF |
528 | |
529 | assert_return(ra, -EINVAL); | |
530 | ||
531 | if (!p) | |
532 | return -EINVAL; | |
533 | ||
59ea6e57 LP |
534 | /* Refuse prefixes that don't have a prefix set */ |
535 | if (IN6_IS_ADDR_UNSPECIFIED(&p->opt.in6_addr)) | |
536 | return -ENOEXEC; | |
537 | ||
204f99d2 | 538 | LIST_FOREACH(prefix, cur, ra->prefixes) { |
204f99d2 PF |
539 | |
540 | r = in_addr_prefix_intersect(AF_INET6, | |
541 | (union in_addr_union*) &cur->opt.in6_addr, | |
542 | cur->opt.prefixlen, | |
543 | (union in_addr_union*) &p->opt.in6_addr, | |
544 | p->opt.prefixlen); | |
545 | if (r > 0) { | |
546 | _cleanup_free_ char *addr_cur = NULL; | |
547 | ||
204f99d2 PF |
548 | (void) in_addr_to_string(AF_INET6, |
549 | (union in_addr_union*) &p->opt.in6_addr, | |
550 | &addr_p); | |
551 | ||
d601b566 PF |
552 | if (dynamic && cur->opt.prefixlen == p->opt.prefixlen) |
553 | goto update; | |
554 | ||
555 | (void) in_addr_to_string(AF_INET6, | |
556 | (union in_addr_union*) &cur->opt.in6_addr, | |
557 | &addr_cur); | |
204f99d2 PF |
558 | log_radv("IPv6 prefix %s/%u already configured, ignoring %s/%u", |
559 | addr_cur, cur->opt.prefixlen, | |
560 | addr_p, p->opt.prefixlen); | |
561 | ||
562 | return -EEXIST; | |
563 | } | |
564 | } | |
565 | ||
566 | p = sd_radv_prefix_ref(p); | |
567 | ||
568 | LIST_APPEND(prefix, ra->prefixes, p); | |
569 | ||
570 | ra->n_prefixes++; | |
571 | ||
572 | (void) in_addr_to_string(AF_INET6, (union in_addr_union*) &p->opt.in6_addr, &addr_p); | |
d601b566 PF |
573 | |
574 | if (!dynamic) { | |
575 | log_radv("Added prefix %s/%d", addr_p, p->opt.prefixlen); | |
576 | return 0; | |
577 | } | |
578 | ||
579 | cur = p; | |
580 | ||
97efde65 MM |
581 | /* If RAs have already been sent, send an RA immediately to announce the newly-added prefix */ |
582 | if (ra->ra_sent > 0) { | |
583 | r = radv_send(ra, NULL, ra->lifetime); | |
584 | if (r < 0) | |
585 | log_radv_errno(r, "Unable to send Router Advertisement for added prefix: %m"); | |
586 | else | |
587 | log_radv("Sent Router Advertisement for added prefix"); | |
588 | } | |
589 | ||
d601b566 PF |
590 | update: |
591 | r = sd_event_now(ra->event, clock_boottime_or_monotonic(), &time_now); | |
592 | if (r < 0) | |
593 | return r; | |
594 | ||
595 | valid = be32toh(p->opt.valid_lifetime) * USEC_PER_SEC; | |
596 | valid_until = usec_add(valid, time_now); | |
597 | if (valid_until == USEC_INFINITY) | |
598 | return -EOVERFLOW; | |
599 | ||
600 | preferred = be32toh(p->opt.preferred_lifetime) * USEC_PER_SEC; | |
601 | preferred_until = usec_add(preferred, time_now); | |
602 | if (preferred_until == USEC_INFINITY) | |
603 | return -EOVERFLOW; | |
604 | ||
605 | cur->valid_until = valid_until; | |
606 | cur->preferred_until = preferred_until; | |
607 | ||
81c5a596 | 608 | log_radv("Updated prefix %s/%u preferred %s valid %s", |
d601b566 PF |
609 | addr_p, p->opt.prefixlen, |
610 | format_timespan(time_string_preferred, FORMAT_TIMESPAN_MAX, | |
611 | preferred, USEC_PER_SEC), | |
612 | format_timespan(time_string_valid, FORMAT_TIMESPAN_MAX, | |
613 | valid, USEC_PER_SEC)); | |
204f99d2 PF |
614 | |
615 | return 0; | |
616 | } | |
617 | ||
34c169c4 | 618 | _public_ sd_radv_prefix *sd_radv_remove_prefix(sd_radv *ra, |
f5a5706a LP |
619 | const struct in6_addr *prefix, |
620 | unsigned char prefixlen) { | |
34c169c4 PF |
621 | sd_radv_prefix *cur, *next; |
622 | ||
623 | assert_return(ra, NULL); | |
624 | assert_return(prefix, NULL); | |
625 | ||
626 | LIST_FOREACH_SAFE(prefix, cur, next, ra->prefixes) { | |
627 | if (prefixlen != cur->opt.prefixlen) | |
628 | continue; | |
629 | ||
630 | if (!in_addr_equal(AF_INET6, | |
631 | (union in_addr_union *)prefix, | |
632 | (union in_addr_union *)&cur->opt.in6_addr)) | |
633 | continue; | |
634 | ||
635 | LIST_REMOVE(prefix, ra->prefixes, cur); | |
636 | ra->n_prefixes--; | |
62bbbedf | 637 | sd_radv_prefix_unref(cur); |
34c169c4 PF |
638 | |
639 | break; | |
640 | } | |
641 | ||
642 | return cur; | |
643 | } | |
644 | ||
203d4df5 SS |
645 | _public_ int sd_radv_add_route_prefix(sd_radv *ra, sd_radv_route_prefix *p, int dynamic) { |
646 | char time_string_valid[FORMAT_TIMESPAN_MAX]; | |
647 | usec_t time_now, valid, valid_until; | |
648 | _cleanup_free_ char *pretty = NULL; | |
649 | sd_radv_route_prefix *cur; | |
650 | int r; | |
651 | ||
652 | assert_return(ra, -EINVAL); | |
653 | ||
654 | if (!p) | |
655 | return -EINVAL; | |
656 | ||
657 | (void) in_addr_to_string(AF_INET6, | |
658 | (union in_addr_union*) &p->opt.in6_addr, | |
659 | &pretty); | |
660 | ||
661 | LIST_FOREACH(prefix, cur, ra->route_prefixes) { | |
662 | _cleanup_free_ char *addr = NULL; | |
663 | ||
664 | r = in_addr_prefix_intersect(AF_INET6, | |
665 | (union in_addr_union*) &cur->opt.in6_addr, | |
666 | cur->opt.prefixlen, | |
667 | (union in_addr_union*) &p->opt.in6_addr, | |
668 | p->opt.prefixlen); | |
669 | if (r < 0) | |
670 | return r; | |
671 | if (r == 0) | |
672 | continue; | |
673 | ||
674 | if (dynamic && cur->opt.prefixlen == p->opt.prefixlen) | |
675 | goto update; | |
676 | ||
677 | (void) in_addr_to_string(AF_INET6, | |
678 | (union in_addr_union*) &cur->opt.in6_addr, | |
679 | &addr); | |
680 | log_radv("IPv6 route prefix %s/%u already configured, ignoring %s/%u", | |
681 | strempty(addr), cur->opt.prefixlen, | |
682 | strempty(pretty), p->opt.prefixlen); | |
683 | ||
684 | return -EEXIST; | |
685 | } | |
686 | ||
687 | p = sd_radv_route_prefix_ref(p); | |
688 | ||
689 | LIST_APPEND(prefix, ra->route_prefixes, p); | |
690 | ra->n_route_prefixes++; | |
691 | ||
692 | cur = p; | |
693 | if (!dynamic) { | |
694 | log_radv("Added prefix %s/%u", strempty(pretty), p->opt.prefixlen); | |
695 | return 0; | |
696 | } | |
697 | ||
97efde65 MM |
698 | /* If RAs have already been sent, send an RA immediately to announce the newly-added route prefix */ |
699 | if (ra->ra_sent > 0) { | |
700 | r = radv_send(ra, NULL, ra->lifetime); | |
701 | if (r < 0) | |
702 | log_radv_errno(r, "Unable to send Router Advertisement for added route prefix: %m"); | |
703 | else | |
704 | log_radv("Sent Router Advertisement for added route prefix"); | |
705 | } | |
706 | ||
203d4df5 SS |
707 | update: |
708 | r = sd_event_now(ra->event, clock_boottime_or_monotonic(), &time_now); | |
709 | if (r < 0) | |
710 | return r; | |
711 | ||
712 | valid = be32toh(p->opt.lifetime) * USEC_PER_SEC; | |
713 | valid_until = usec_add(valid, time_now); | |
714 | if (valid_until == USEC_INFINITY) | |
715 | return -EOVERFLOW; | |
716 | ||
81c5a596 | 717 | log_radv("Updated route prefix %s/%u valid %s", |
203d4df5 SS |
718 | strempty(pretty), p->opt.prefixlen, |
719 | format_timespan(time_string_valid, FORMAT_TIMESPAN_MAX, valid, USEC_PER_SEC)); | |
720 | ||
721 | return 0; | |
722 | } | |
723 | ||
e9c6da38 PF |
724 | _public_ int sd_radv_set_rdnss(sd_radv *ra, uint32_t lifetime, |
725 | const struct in6_addr *dns, size_t n_dns) { | |
726 | _cleanup_free_ struct sd_radv_opt_dns *opt_rdnss = NULL; | |
727 | size_t len; | |
728 | ||
729 | assert_return(ra, -EINVAL); | |
730 | assert_return(n_dns < 128, -EINVAL); | |
731 | ||
732 | if (!dns || n_dns == 0) { | |
733 | ra->rdnss = mfree(ra->rdnss); | |
734 | ra->n_rdnss = 0; | |
735 | ||
736 | return 0; | |
737 | } | |
738 | ||
739 | len = sizeof(struct sd_radv_opt_dns) + sizeof(struct in6_addr) * n_dns; | |
740 | ||
741 | opt_rdnss = malloc0(len); | |
742 | if (!opt_rdnss) | |
743 | return -ENOMEM; | |
744 | ||
745 | opt_rdnss->type = SD_RADV_OPT_RDNSS; | |
746 | opt_rdnss->length = len / 8; | |
747 | opt_rdnss->lifetime = htobe32(lifetime); | |
748 | ||
749 | memcpy(opt_rdnss + 1, dns, n_dns * sizeof(struct in6_addr)); | |
750 | ||
1cc6c93a | 751 | free_and_replace(ra->rdnss, opt_rdnss); |
e9c6da38 PF |
752 | |
753 | ra->n_rdnss = n_dns; | |
754 | ||
755 | return 0; | |
756 | } | |
757 | ||
e965d6ab PF |
758 | _public_ int sd_radv_set_dnssl(sd_radv *ra, uint32_t lifetime, |
759 | char **search_list) { | |
760 | _cleanup_free_ struct sd_radv_opt_dns *opt_dnssl = NULL; | |
761 | size_t len = 0; | |
762 | char **s; | |
763 | uint8_t *p; | |
764 | ||
765 | assert_return(ra, -EINVAL); | |
766 | ||
97d7974b | 767 | if (strv_isempty(search_list)) { |
e965d6ab | 768 | ra->dnssl = mfree(ra->dnssl); |
e965d6ab PF |
769 | return 0; |
770 | } | |
771 | ||
772 | STRV_FOREACH(s, search_list) | |
773 | len += strlen(*s) + 2; | |
774 | ||
775 | len = (sizeof(struct sd_radv_opt_dns) + len + 7) & ~0x7; | |
776 | ||
777 | opt_dnssl = malloc0(len); | |
778 | if (!opt_dnssl) | |
779 | return -ENOMEM; | |
780 | ||
781 | opt_dnssl->type = SD_RADV_OPT_DNSSL; | |
782 | opt_dnssl->length = len / 8; | |
783 | opt_dnssl->lifetime = htobe32(lifetime); | |
784 | ||
785 | p = (uint8_t *)(opt_dnssl + 1); | |
786 | len -= sizeof(struct sd_radv_opt_dns); | |
787 | ||
788 | STRV_FOREACH(s, search_list) { | |
789 | int r; | |
790 | ||
791 | r = dns_name_to_wire_format(*s, p, len, false); | |
792 | if (r < 0) | |
793 | return r; | |
794 | ||
795 | if (len < (size_t)r) | |
796 | return -ENOBUFS; | |
797 | ||
798 | p += r; | |
799 | len -= r; | |
800 | } | |
801 | ||
1cc6c93a | 802 | free_and_replace(ra->dnssl, opt_dnssl); |
e965d6ab PF |
803 | |
804 | return 0; | |
805 | } | |
806 | ||
04473969 | 807 | _public_ int sd_radv_prefix_new(sd_radv_prefix **ret) { |
d2c8eed2 | 808 | sd_radv_prefix *p; |
04473969 PF |
809 | |
810 | assert_return(ret, -EINVAL); | |
811 | ||
d2c8eed2 | 812 | p = new(sd_radv_prefix, 1); |
04473969 PF |
813 | if (!p) |
814 | return -ENOMEM; | |
815 | ||
d2c8eed2 LP |
816 | *p = (sd_radv_prefix) { |
817 | .n_ref = 1, | |
04473969 | 818 | |
d2c8eed2 LP |
819 | .opt.type = ND_OPT_PREFIX_INFORMATION, |
820 | .opt.length = (sizeof(p->opt) - 1)/8 + 1, | |
821 | .opt.prefixlen = 64, | |
04473969 | 822 | |
d2c8eed2 LP |
823 | /* RFC 4861, Section 6.2.1 */ |
824 | .opt.flags = ND_OPT_PI_FLAG_ONLINK|ND_OPT_PI_FLAG_AUTO, | |
204f99d2 | 825 | |
d2c8eed2 LP |
826 | .opt.preferred_lifetime = htobe32(604800), |
827 | .opt.valid_lifetime = htobe32(2592000), | |
828 | }; | |
04473969 | 829 | |
d2c8eed2 | 830 | *ret = p; |
04473969 PF |
831 | return 0; |
832 | } | |
833 | ||
8301aa0b | 834 | DEFINE_PUBLIC_TRIVIAL_REF_UNREF_FUNC(sd_radv_prefix, sd_radv_prefix, mfree); |
04473969 | 835 | |
f5a5706a | 836 | _public_ int sd_radv_prefix_set_prefix(sd_radv_prefix *p, const struct in6_addr *in6_addr, |
04473969 PF |
837 | unsigned char prefixlen) { |
838 | assert_return(p, -EINVAL); | |
839 | assert_return(in6_addr, -EINVAL); | |
840 | ||
841 | if (prefixlen < 3 || prefixlen > 128) | |
842 | return -EINVAL; | |
843 | ||
844 | if (prefixlen > 64) | |
845 | /* unusual but allowed, log it */ | |
846 | log_radv("Unusual prefix length %d greater than 64", prefixlen); | |
847 | ||
848 | p->opt.in6_addr = *in6_addr; | |
849 | p->opt.prefixlen = prefixlen; | |
850 | ||
851 | return 0; | |
852 | } | |
853 | ||
34332af2 SS |
854 | _public_ int sd_radv_prefix_get_prefix(sd_radv_prefix *p, struct in6_addr *ret_in6_addr, |
855 | unsigned char *ret_prefixlen) { | |
856 | assert_return(p, -EINVAL); | |
857 | assert_return(ret_in6_addr, -EINVAL); | |
858 | assert_return(ret_prefixlen, -EINVAL); | |
859 | ||
860 | *ret_in6_addr = p->opt.in6_addr; | |
861 | *ret_prefixlen = p->opt.prefixlen; | |
862 | ||
863 | return 0; | |
864 | } | |
865 | ||
04473969 PF |
866 | _public_ int sd_radv_prefix_set_onlink(sd_radv_prefix *p, int onlink) { |
867 | assert_return(p, -EINVAL); | |
868 | ||
869 | SET_FLAG(p->opt.flags, ND_OPT_PI_FLAG_ONLINK, onlink); | |
870 | ||
871 | return 0; | |
872 | } | |
873 | ||
874 | _public_ int sd_radv_prefix_set_address_autoconfiguration(sd_radv_prefix *p, | |
875 | int address_autoconfiguration) { | |
876 | assert_return(p, -EINVAL); | |
877 | ||
878 | SET_FLAG(p->opt.flags, ND_OPT_PI_FLAG_AUTO, address_autoconfiguration); | |
879 | ||
880 | return 0; | |
881 | } | |
882 | ||
883 | _public_ int sd_radv_prefix_set_valid_lifetime(sd_radv_prefix *p, | |
884 | uint32_t valid_lifetime) { | |
885 | assert_return(p, -EINVAL); | |
886 | ||
887 | p->opt.valid_lifetime = htobe32(valid_lifetime); | |
888 | ||
889 | return 0; | |
890 | } | |
891 | ||
892 | _public_ int sd_radv_prefix_set_preferred_lifetime(sd_radv_prefix *p, | |
893 | uint32_t preferred_lifetime) { | |
894 | assert_return(p, -EINVAL); | |
895 | ||
896 | p->opt.preferred_lifetime = htobe32(preferred_lifetime); | |
897 | ||
898 | return 0; | |
899 | } | |
203d4df5 SS |
900 | |
901 | _public_ int sd_radv_route_prefix_new(sd_radv_route_prefix **ret) { | |
902 | sd_radv_route_prefix *p; | |
903 | ||
904 | assert_return(ret, -EINVAL); | |
905 | ||
906 | p = new(sd_radv_route_prefix, 1); | |
907 | if (!p) | |
908 | return -ENOMEM; | |
909 | ||
910 | *p = (sd_radv_route_prefix) { | |
911 | .n_ref = 1, | |
912 | ||
913 | .opt.type = SD_RADV_OPT_ROUTE_INFORMATION, | |
914 | .opt.length = DIV_ROUND_UP(sizeof(p->opt), 8), | |
915 | .opt.prefixlen = 64, | |
916 | ||
917 | .opt.lifetime = htobe32(604800), | |
918 | }; | |
919 | ||
920 | *ret = p; | |
921 | return 0; | |
922 | } | |
923 | ||
924 | DEFINE_PUBLIC_TRIVIAL_REF_UNREF_FUNC(sd_radv_route_prefix, sd_radv_route_prefix, mfree); | |
925 | ||
926 | _public_ int sd_radv_prefix_set_route_prefix(sd_radv_route_prefix *p, const struct in6_addr *in6_addr, | |
927 | unsigned char prefixlen) { | |
928 | assert_return(p, -EINVAL); | |
929 | assert_return(in6_addr, -EINVAL); | |
930 | ||
931 | if (prefixlen > 128) | |
932 | return -EINVAL; | |
933 | ||
934 | if (prefixlen > 64) | |
935 | /* unusual but allowed, log it */ | |
936 | log_radv("Unusual prefix length %u greater than 64", prefixlen); | |
937 | ||
938 | p->opt.in6_addr = *in6_addr; | |
939 | p->opt.prefixlen = prefixlen; | |
940 | ||
941 | return 0; | |
942 | } | |
943 | ||
944 | _public_ int sd_radv_route_prefix_set_lifetime(sd_radv_route_prefix *p, uint32_t valid_lifetime) { | |
945 | assert_return(p, -EINVAL); | |
946 | ||
947 | p->opt.lifetime = htobe32(valid_lifetime); | |
948 | ||
949 | return 0; | |
950 | } |