[mirror_iproute2.git] / ip / ip6tunnel.c

/*
 * Copyright (C)2006 USAGI/WIDE Project
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, see <http://www.gnu.org/licenses>.
 */
/*
 * Author:
 *	Masahide NAKAMURA @USAGI
 */

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <arpa/inet.h>
#include <sys/ioctl.h>
#include <linux/ip.h>
#include <linux/if.h>
#include <linux/if_arp.h>
#include <linux/if_tunnel.h>
#include <linux/ip6_tunnel.h>

#include "utils.h"
#include "tunnel.h"
#include "ip_common.h"

#define IP6_FLOWINFO_TCLASS	htonl(0x0FF00000)
#define IP6_FLOWINFO_FLOWLABEL	htonl(0x000FFFFF)

#define DEFAULT_TNL_HOP_LIMIT	(64)

static void usage(void) __attribute__((noreturn));

static void usage(void)
{
	fprintf(stderr, "Usage: ip -f inet6 tunnel { add | change | del | show } [ NAME ]\n");
	fprintf(stderr, "          [ mode { ip6ip6 | ipip6 | ip6gre | vti6 | any } ]\n");
	fprintf(stderr, "          [ remote ADDR local ADDR ] [ dev PHYS_DEV ]\n");
	fprintf(stderr, "          [ encaplimit ELIM ]\n");
	fprintf(stderr, "          [ hoplimit TTL ] [ tclass TCLASS ] [ flowlabel FLOWLABEL ]\n");
	fprintf(stderr, "          [ dscp inherit ]\n");
	fprintf(stderr, "          [ [i|o]seq ] [ [i|o]key KEY ] [ [i|o]csum ]\n");
	fprintf(stderr, "\n");
	fprintf(stderr, "Where: NAME      := STRING\n");
	fprintf(stderr, "       ADDR      := IPV6_ADDRESS\n");
	fprintf(stderr, "       ELIM      := { none | 0..255 }(default=%d)\n",
		IPV6_DEFAULT_TNL_ENCAP_LIMIT);
	fprintf(stderr, "       TTL       := 0..255 (default=%d)\n",
		DEFAULT_TNL_HOP_LIMIT);
	fprintf(stderr, "       TCLASS    := { 0x0..0xff | inherit }\n");
	fprintf(stderr, "       FLOWLABEL := { 0x0..0xfffff | inherit }\n");
	fprintf(stderr, "       KEY       := { DOTTED_QUAD | NUMBER }\n");
	exit(-1);
}

static void print_tunnel(struct ip6_tnl_parm2 *p)
{
	char s1[1024];
	char s2[1024];

	/* Do not use format_host() for local addr,
	 * symbolic name will not be useful.
	 */
	printf("%s: %s/ipv6 remote %s local %s",
	       p->name,
	       tnl_strproto(p->proto),
	       format_host_r(AF_INET6, 16, &p->raddr, s1, sizeof(s1)),
	       rt_addr_n2a_r(AF_INET6, 16, &p->laddr, s2, sizeof(s2)));
	if (p->link) {
		const char *n = ll_index_to_name(p->link);

		if (n)
			printf(" dev %s", n);
	}

	if (p->flags & IP6_TNL_F_IGN_ENCAP_LIMIT)
		printf(" encaplimit none");
	else
		printf(" encaplimit %u", p->encap_limit);

	printf(" hoplimit %u", p->hop_limit);

	if (p->flags & IP6_TNL_F_USE_ORIG_TCLASS)
		printf(" tclass inherit");
	else {
		__u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_TCLASS);

		printf(" tclass 0x%02x", (__u8)(val >> 20));
	}

	if (p->flags & IP6_TNL_F_USE_ORIG_FLOWLABEL)
		printf(" flowlabel inherit");
	else
		printf(" flowlabel 0x%05x", ntohl(p->flowinfo & IP6_FLOWINFO_FLOWLABEL));

	printf(" (flowinfo 0x%08x)", ntohl(p->flowinfo));

	if (p->flags & IP6_TNL_F_RCV_DSCP_COPY)
		printf(" dscp inherit");

	if (p->proto == IPPROTO_GRE) {
		if ((p->i_flags & GRE_KEY) && (p->o_flags & GRE_KEY) && p->o_key == p->i_key)
			printf(" key %u", ntohl(p->i_key));
		else if ((p->i_flags | p->o_flags) & GRE_KEY) {
			if (p->i_flags & GRE_KEY)
				printf(" ikey %u", ntohl(p->i_key));
			if (p->o_flags & GRE_KEY)
				printf(" okey %u", ntohl(p->o_key));
		}

		if (p->i_flags & GRE_SEQ)
			printf("%s  Drop packets out of sequence.", _SL_);
		if (p->i_flags & GRE_CSUM)
			printf("%s  Checksum in received packet is required.", _SL_);
		if (p->o_flags & GRE_SEQ)
			printf("%s  Sequence packets on output.", _SL_);
		if (p->o_flags & GRE_CSUM)
			printf("%s  Checksum output packets.", _SL_);
	}
}

static int parse_args(int argc, char **argv, int cmd, struct ip6_tnl_parm2 *p)
{
	int count = 0;
	char medium[IFNAMSIZ] = {};

	while (argc > 0) {
		if (strcmp(*argv, "mode") == 0) {
			NEXT_ARG();
			if (strcmp(*argv, "ipv6/ipv6") == 0 ||
			    strcmp(*argv, "ip6ip6") == 0)
				p->proto = IPPROTO_IPV6;
			else if (strcmp(*argv, "vti6") == 0) {
				p->proto = IPPROTO_IPV6;
				p->i_flags |= VTI_ISVTI;
			} else if (strcmp(*argv, "ip/ipv6") == 0 ||
				 strcmp(*argv, "ipv4/ipv6") == 0 ||
				 strcmp(*argv, "ipip6") == 0 ||
				 strcmp(*argv, "ip4ip6") == 0)
				p->proto = IPPROTO_IPIP;
			else if (strcmp(*argv, "ip6gre") == 0 ||
				 strcmp(*argv, "gre/ipv6") == 0)
				p->proto = IPPROTO_GRE;
			else if (strcmp(*argv, "any/ipv6") == 0 ||
				 strcmp(*argv, "any") == 0)
				p->proto = 0;
			else {
				fprintf(stderr, "Unknown tunnel mode \"%s\"\n", *argv);
				exit(-1);
			}
		} else if (strcmp(*argv, "remote") == 0) {
			inet_prefix raddr;

			NEXT_ARG();
			get_prefix(&raddr, *argv, preferred_family);
			if (raddr.family == AF_UNSPEC)
				invarg("\"remote\" address family is AF_UNSPEC", *argv);
			memcpy(&p->raddr, &raddr.data, sizeof(p->raddr));
		} else if (strcmp(*argv, "local") == 0) {
			inet_prefix laddr;

			NEXT_ARG();
			get_prefix(&laddr, *argv, preferred_family);
			if (laddr.family == AF_UNSPEC)
				invarg("\"local\" address family is AF_UNSPEC", *argv);
			memcpy(&p->laddr, &laddr.data, sizeof(p->laddr));
		} else if (strcmp(*argv, "dev") == 0) {
			NEXT_ARG();
			strncpy(medium, *argv, IFNAMSIZ - 1);
		} else if (strcmp(*argv, "encaplimit") == 0) {
			NEXT_ARG();
			if (strcmp(*argv, "none") == 0) {
				p->flags |= IP6_TNL_F_IGN_ENCAP_LIMIT;
			} else {
				__u8 uval;

				if (get_u8(&uval, *argv, 0) < -1)
					invarg("invalid ELIM", *argv);
				p->encap_limit = uval;
				p->flags &= ~IP6_TNL_F_IGN_ENCAP_LIMIT;
			}
		} else if (strcmp(*argv, "hoplimit") == 0 ||
			   strcmp(*argv, "ttl") == 0 ||
			   strcmp(*argv, "hlim") == 0) {
			__u8 uval;

			NEXT_ARG();
			if (get_u8(&uval, *argv, 0))
				invarg("invalid TTL", *argv);
			p->hop_limit = uval;
		} else if (strcmp(*argv, "tclass") == 0 ||
			   strcmp(*argv, "tc") == 0 ||
			   strcmp(*argv, "tos") == 0 ||
			   matches(*argv, "dsfield") == 0) {
			__u8 uval;

			NEXT_ARG();
			p->flowinfo &= ~IP6_FLOWINFO_TCLASS;
			if (strcmp(*argv, "inherit") == 0)
				p->flags |= IP6_TNL_F_USE_ORIG_TCLASS;
			else {
				if (get_u8(&uval, *argv, 16))
					invarg("invalid TClass", *argv);
				p->flowinfo |= htonl((__u32)uval << 20) & IP6_FLOWINFO_TCLASS;
				p->flags &= ~IP6_TNL_F_USE_ORIG_TCLASS;
			}
		} else if (strcmp(*argv, "flowlabel") == 0 ||
			   strcmp(*argv, "fl") == 0) {
			__u32 uval;

			NEXT_ARG();
			p->flowinfo &= ~IP6_FLOWINFO_FLOWLABEL;
			if (strcmp(*argv, "inherit") == 0)
				p->flags |= IP6_TNL_F_USE_ORIG_FLOWLABEL;
			else {
				if (get_u32(&uval, *argv, 16))
					invarg("invalid Flowlabel", *argv);
				if (uval > 0xFFFFF)
					invarg("invalid Flowlabel", *argv);
				p->flowinfo |= htonl(uval) & IP6_FLOWINFO_FLOWLABEL;
				p->flags &= ~IP6_TNL_F_USE_ORIG_FLOWLABEL;
			}
		} else if (strcmp(*argv, "dscp") == 0) {
			NEXT_ARG();
			if (strcmp(*argv, "inherit") != 0)
				invarg("not inherit", *argv);
			p->flags |= IP6_TNL_F_RCV_DSCP_COPY;
		} else if (strcmp(*argv, "key") == 0) {
			NEXT_ARG();
			p->i_flags |= GRE_KEY;
			p->o_flags |= GRE_KEY;
			p->i_key = p->o_key = tnl_parse_key("key", *argv);
		} else if (strcmp(*argv, "ikey") == 0) {
			NEXT_ARG();
			p->i_flags |= GRE_KEY;
			p->i_key = tnl_parse_key("ikey", *argv);
		} else if (strcmp(*argv, "okey") == 0) {
			NEXT_ARG();
			p->o_flags |= GRE_KEY;
			p->o_key = tnl_parse_key("okey", *argv);
		} else if (strcmp(*argv, "seq") == 0) {
			p->i_flags |= GRE_SEQ;
			p->o_flags |= GRE_SEQ;
		} else if (strcmp(*argv, "iseq") == 0) {
			p->i_flags |= GRE_SEQ;
		} else if (strcmp(*argv, "oseq") == 0) {
			p->o_flags |= GRE_SEQ;
		} else if (strcmp(*argv, "csum") == 0) {
			p->i_flags |= GRE_CSUM;
			p->o_flags |= GRE_CSUM;
		} else if (strcmp(*argv, "icsum") == 0) {
			p->i_flags |= GRE_CSUM;
		} else if (strcmp(*argv, "ocsum") == 0) {
			p->o_flags |= GRE_CSUM;
		} else {
			if (strcmp(*argv, "name") == 0) {
				NEXT_ARG();
			} else if (matches(*argv, "help") == 0)
				usage();
			if (p->name[0])
				duparg2("name", *argv);
			strncpy(p->name, *argv, IFNAMSIZ - 1);
			if (cmd == SIOCCHGTUNNEL && count == 0) {
				struct ip6_tnl_parm2 old_p = {};

				if (tnl_get_ioctl(*argv, &old_p))
					return -1;
				*p = old_p;
			}
		}
		count++;
		argc--; argv++;
	}
	if (medium[0]) {
		p->link = ll_name_to_index(medium);
		if (p->link == 0) {
			fprintf(stderr, "Cannot find device \"%s\"\n", medium);
			return -1;
		}
	}
	return 0;
}

static void ip6_tnl_parm_init(struct ip6_tnl_parm2 *p, int apply_default)
{
	memset(p, 0, sizeof(*p));
	p->proto = IPPROTO_IPV6;
	if (apply_default) {
		p->hop_limit = DEFAULT_TNL_HOP_LIMIT;
		p->encap_limit = IPV6_DEFAULT_TNL_ENCAP_LIMIT;
	}
}

/*
 * @p1: user specified parameter
 * @p2: database entry
 */
static int ip6_tnl_parm_match(const struct ip6_tnl_parm2 *p1,
			      const struct ip6_tnl_parm2 *p2)
{
	return ((!p1->link || p1->link == p2->link) &&
		(!p1->name[0] || strcmp(p1->name, p2->name) == 0) &&
		(IN6_IS_ADDR_UNSPECIFIED(&p1->laddr) ||
		 IN6_ARE_ADDR_EQUAL(&p1->laddr, &p2->laddr)) &&
		(IN6_IS_ADDR_UNSPECIFIED(&p1->raddr) ||
		 IN6_ARE_ADDR_EQUAL(&p1->raddr, &p2->raddr)) &&
		(!p1->proto || !p2->proto || p1->proto == p2->proto) &&
		(!p1->encap_limit || p1->encap_limit == p2->encap_limit) &&
		(!p1->hop_limit || p1->hop_limit == p2->hop_limit) &&
		(!(p1->flowinfo & IP6_FLOWINFO_TCLASS) ||
		 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_TCLASS)) &&
		(!(p1->flowinfo & IP6_FLOWINFO_FLOWLABEL) ||
		 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_FLOWLABEL)) &&
		(!p1->flags || (p1->flags & p2->flags)));
}

static int do_tunnels_list(struct ip6_tnl_parm2 *p)
{
	char buf[512];
	int err = -1;
	FILE *fp = fopen("/proc/net/dev", "r");

	if (fp == NULL) {
		perror("fopen");
		return -1;
	}

	/* skip two lines at the begenning of the file */
	if (!fgets(buf, sizeof(buf), fp) ||
	    !fgets(buf, sizeof(buf), fp)) {
		fprintf(stderr, "/proc/net/dev read error\n");
		goto end;
	}

	while (fgets(buf, sizeof(buf), fp) != NULL) {
		char name[IFNAMSIZ];
		int index, type;
		struct ip6_tnl_parm2 p1 = {};
		char *ptr;

		buf[sizeof(buf) - 1] = '\0';
		if ((ptr = strchr(buf, ':')) == NULL ||
		    (*ptr++ = 0, sscanf(buf, "%s", name) != 1)) {
			fprintf(stderr, "Wrong format for /proc/net/dev. Giving up.\n");
			goto end;
		}
		if (p->name[0] && strcmp(p->name, name))
			continue;
		index = ll_name_to_index(name);
		if (index == 0)
			continue;
		type = ll_index_to_type(index);
		if (type == -1) {
			fprintf(stderr, "Failed to get type of \"%s\"\n", name);
			continue;
		}
		if (type != ARPHRD_TUNNEL6 && type != ARPHRD_IP6GRE)
			continue;
		ip6_tnl_parm_init(&p1, 0);
		if (type == ARPHRD_IP6GRE)
			p1.proto = IPPROTO_GRE;
		strcpy(p1.name, name);
		p1.link = ll_name_to_index(p1.name);
		if (p1.link == 0)
			continue;
		if (tnl_get_ioctl(p1.name, &p1))
			continue;
		if (!ip6_tnl_parm_match(p, &p1))
			continue;
		print_tunnel(&p1);
		if (show_stats)
			tnl_print_stats(ptr);
		printf("\n");
	}
	err = 0;
 end:
	fclose(fp);
	return err;
}

static int do_show(int argc, char **argv)
{
	struct ip6_tnl_parm2 p;

	ll_init_map(&rth);
	ip6_tnl_parm_init(&p, 0);
	p.proto = 0;  /* default to any */

	if (parse_args(argc, argv, SIOCGETTUNNEL, &p) < 0)
		return -1;

	if (!p.name[0] || show_stats)
		do_tunnels_list(&p);
	else {
		if (tnl_get_ioctl(p.name, &p))
			return -1;
		print_tunnel(&p);
		printf("\n");
	}

	return 0;
}

static int do_add(int cmd, int argc, char **argv)
{
	struct ip6_tnl_parm2 p;
	const char *basedev = "ip6tnl0";

	ip6_tnl_parm_init(&p, 1);

	if (parse_args(argc, argv, cmd, &p) < 0)
		return -1;

	if (p.proto == IPPROTO_GRE)
		basedev = "ip6gre0";
	else if (p.i_flags & VTI_ISVTI)
		basedev = "ip6_vti0";

	return tnl_add_ioctl(cmd, basedev, p.name, &p);
}

static int do_del(int argc, char **argv)
{
	struct ip6_tnl_parm2 p;
	const char *basedev = "ip6tnl0";

	ip6_tnl_parm_init(&p, 1);

	if (parse_args(argc, argv, SIOCDELTUNNEL, &p) < 0)
		return -1;

	if (p.proto == IPPROTO_GRE)
		basedev = "ip6gre0";
	else if (p.i_flags & VTI_ISVTI)
		basedev = "ip6_vti0";

	return tnl_del_ioctl(basedev, p.name, &p);
}

int do_ip6tunnel(int argc, char **argv)
{
	switch (preferred_family) {
	case AF_UNSPEC:
		preferred_family = AF_INET6;
		break;
	case AF_INET6:
		break;
	default:
		fprintf(stderr, "Unsupported protocol family: %d\n", preferred_family);
		exit(-1);
	}

	if (argc > 0) {
		if (matches(*argv, "add") == 0)
			return do_add(SIOCADDTUNNEL, argc - 1, argv + 1);
		if (matches(*argv, "change") == 0)
			return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1);
		if (matches(*argv, "delete") == 0)
			return do_del(argc - 1, argv + 1);
		if (matches(*argv, "show") == 0 ||
		    matches(*argv, "lst") == 0 ||
		    matches(*argv, "list") == 0)
			return do_show(argc - 1, argv + 1);
		if (matches(*argv, "help") == 0)
			usage();
	} else
		return do_show(0, NULL);

	fprintf(stderr, "Command \"%s\" is unknown, try \"ip -f inet6 tunnel help\".\n", *argv);
	exit(-1);
}
Commit	Line	Data
9447a0d3 MN	1	/*
9447a0d3 MN	2	* Copyright (C)2006 USAGI/WIDE Project
ae665a52	3	*
9447a0d3 MN	4	* This program is free software; you can redistribute it and/or modify
	5	* it under the terms of the GNU General Public License as published by
	6	* the Free Software Foundation; either version 2 of the License, or
	7	* (at your option) any later version.
ae665a52	8	*
9447a0d3 MN	9	* This program is distributed in the hope that it will be useful,
	10	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	11	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	12	* GNU General Public License for more details.
ae665a52	13	*
9447a0d3	14	* You should have received a copy of the GNU General Public License
4d98ab00	15	* along with this program; if not, see <http://www.gnu.org/licenses>.
9447a0d3	16	*/
9447a0d3 MN	17	/*
	18	* Author:
	19	* Masahide NAKAMURA @USAGI
	20	*/
ae665a52	21
9447a0d3 MN	22	#include <stdio.h>
	23	#include <string.h>
	24	#include <stdlib.h>
9447a0d3	25	#include <unistd.h>
288384f2 MN	26	#include <sys/types.h>
288384f2 MN	27	#include <sys/socket.h>
9447a0d3	28	#include <arpa/inet.h>
288384f2	29	#include <sys/ioctl.h>
9447a0d3	30	#include <linux/ip.h>
288384f2 MN	31	#include <linux/if.h>
288384f2 MN	32	#include <linux/if_arp.h>
9447a0d3	33	#include <linux/if_tunnel.h>
288384f2	34	#include <linux/ip6_tunnel.h>
9447a0d3	35
288384f2 MN	36	#include "utils.h"
288384f2 MN	37	#include "tunnel.h"
ea71beac	38	#include "ip_common.h"
9447a0d3	39
288384f2 MN	40	#define IP6_FLOWINFO_TCLASS htonl(0x0FF00000)
288384f2 MN	41	#define IP6_FLOWINFO_FLOWLABEL htonl(0x000FFFFF)
9447a0d3	42
288384f2 MN	43	#define DEFAULT_TNL_HOP_LIMIT (64)
	44
	45	static void usage(void) __attribute__((noreturn));
9447a0d3 MN	46
	47	static void usage(void)
	48	{
288384f2	49	fprintf(stderr, "Usage: ip -f inet6 tunnel { add \| change \| del \| show } [ NAME ]\n");
f36d1140	50	fprintf(stderr, " [ mode { ip6ip6 \| ipip6 \| ip6gre \| vti6 \| any } ]\n");
288384f2 MN	51	fprintf(stderr, " [ remote ADDR local ADDR ] [ dev PHYS_DEV ]\n");
288384f2 MN	52	fprintf(stderr, " [ encaplimit ELIM ]\n");
56f5daac	53	fprintf(stderr, " [ hoplimit TTL ] [ tclass TCLASS ] [ flowlabel FLOWLABEL ]\n");
288384f2	54	fprintf(stderr, " [ dscp inherit ]\n");
af89576d	55	fprintf(stderr, " [ [i\|o]seq ] [ [i\|o]key KEY ] [ [i\|o]csum ]\n");
288384f2	56	fprintf(stderr, "\n");
eddde110 YH	57	fprintf(stderr, "Where: NAME := STRING\n");
	58	fprintf(stderr, " ADDR := IPV6_ADDRESS\n");
	59	fprintf(stderr, " ELIM := { none \| 0..255 }(default=%d)\n",
288384f2	60	IPV6_DEFAULT_TNL_ENCAP_LIMIT);
eddde110	61	fprintf(stderr, " TTL := 0..255 (default=%d)\n",
288384f2	62	DEFAULT_TNL_HOP_LIMIT);
d0c8420c	63	fprintf(stderr, " TCLASS := { 0x0..0xff \| inherit }\n");
eddde110	64	fprintf(stderr, " FLOWLABEL := { 0x0..0xfffff \| inherit }\n");
af89576d	65	fprintf(stderr, " KEY := { DOTTED_QUAD \| NUMBER }\n");
9447a0d3 MN	66	exit(-1);
	67	}
	68
af89576d	69	static void print_tunnel(struct ip6_tnl_parm2 *p)
9447a0d3	70	{
9af72f81 PS	71	char s1[1024];
9af72f81 PS	72	char s2[1024];
9447a0d3	73
9af72f81 PS	74	/* Do not use format_host() for local addr,
	75	* symbolic name will not be useful.
	76	*/
288384f2	77	printf("%s: %s/ipv6 remote %s local %s",
9af72f81 PS	78	p->name,
9af72f81 PS	79	tnl_strproto(p->proto),
a418e451	80	format_host_r(AF_INET6, 16, &p->raddr, s1, sizeof(s1)),
2e96d2cc	81	rt_addr_n2a_r(AF_INET6, 16, &p->laddr, s2, sizeof(s2)));
9447a0d3	82	if (p->link) {
ea71beac	83	const char *n = ll_index_to_name(p->link);
56f5daac	84
9447a0d3 MN	85	if (n)
	86	printf(" dev %s", n);
	87	}
9447a0d3	88
288384f2 MN	89	if (p->flags & IP6_TNL_F_IGN_ENCAP_LIMIT)
	90	printf(" encaplimit none");
	91	else
	92	printf(" encaplimit %u", p->encap_limit);
9447a0d3	93
288384f2	94	printf(" hoplimit %u", p->hop_limit);
9447a0d3	95
288384f2	96	if (p->flags & IP6_TNL_F_USE_ORIG_TCLASS)
eddde110	97	printf(" tclass inherit");
288384f2 MN	98	else {
288384f2 MN	99	__u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_TCLASS);
56f5daac	100
eddde110	101	printf(" tclass 0x%02x", (__u8)(val >> 20));
9447a0d3	102	}
9447a0d3	103
288384f2	104	if (p->flags & IP6_TNL_F_USE_ORIG_FLOWLABEL)
eddde110	105	printf(" flowlabel inherit");
288384f2	106	else
eddde110	107	printf(" flowlabel 0x%05x", ntohl(p->flowinfo & IP6_FLOWINFO_FLOWLABEL));
9447a0d3	108
288384f2	109	printf(" (flowinfo 0x%08x)", ntohl(p->flowinfo));
9447a0d3	110
288384f2 MN	111	if (p->flags & IP6_TNL_F_RCV_DSCP_COPY)
288384f2 MN	112	printf(" dscp inherit");
af89576d	113
af89576d	114	if (p->proto == IPPROTO_GRE) {
04ce8d3e	115	if ((p->i_flags & GRE_KEY) && (p->o_flags & GRE_KEY) && p->o_key == p->i_key)
af89576d	116	printf(" key %u", ntohl(p->i_key));
04ce8d3e PS	117	else if ((p->i_flags \| p->o_flags) & GRE_KEY) {
04ce8d3e PS	118	if (p->i_flags & GRE_KEY)
8de592d0	119	printf(" ikey %u", ntohl(p->i_key));
04ce8d3e	120	if (p->o_flags & GRE_KEY)
8de592d0	121	printf(" okey %u", ntohl(p->o_key));
af89576d	122	}
af89576d	123
04ce8d3e	124	if (p->i_flags & GRE_SEQ)
4cb8d030	125	printf("%s Drop packets out of sequence.", _SL_);
04ce8d3e	126	if (p->i_flags & GRE_CSUM)
af89576d	127	printf("%s Checksum in received packet is required.", _SL_);
04ce8d3e	128	if (p->o_flags & GRE_SEQ)
af89576d	129	printf("%s Sequence packets on output.", _SL_);
04ce8d3e	130	if (p->o_flags & GRE_CSUM)
af89576d	131	printf("%s Checksum output packets.", _SL_);
af89576d	132	}
9447a0d3 MN	133	}
9447a0d3 MN	134
af89576d	135	static int parse_args(int argc, char *argv, int cmd, struct ip6_tnl_parm2 p)
9447a0d3	136	{
21a5a6b3	137	int count = 0;
d17b136f	138	char medium[IFNAMSIZ] = {};
9447a0d3 MN	139
9447a0d3 MN	140	while (argc > 0) {
0b959b0f YH	141	if (strcmp(*argv, "mode") == 0) {
	142	NEXT_ARG();
	143	if (strcmp(*argv, "ipv6/ipv6") == 0 \|\|
	144	strcmp(*argv, "ip6ip6") == 0)
	145	p->proto = IPPROTO_IPV6;
f36d1140 SK	146	else if (strcmp(*argv, "vti6") == 0) {
	147	p->proto = IPPROTO_IPV6;
	148	p->i_flags \|= VTI_ISVTI;
	149	} else if (strcmp(*argv, "ip/ipv6") == 0 \|\|
0b959b0f YH	150	strcmp(*argv, "ipv4/ipv6") == 0 \|\|
	151	strcmp(*argv, "ipip6") == 0 \|\|
	152	strcmp(*argv, "ip4ip6") == 0)
	153	p->proto = IPPROTO_IPIP;
af89576d	154	else if (strcmp(*argv, "ip6gre") == 0 \|\|
	155	strcmp(*argv, "gre/ipv6") == 0)
	156	p->proto = IPPROTO_GRE;
0b959b0f YH	157	else if (strcmp(*argv, "any/ipv6") == 0 \|\|
	158	strcmp(*argv, "any") == 0)
	159	p->proto = 0;
	160	else {
56f5daac	161	fprintf(stderr, "Unknown tunnel mode \"%s\"\n", *argv);
4b726cb1 SH	162	exit(-1);
	163	}
	164	} else if (strcmp(*argv, "remote") == 0) {
288384f2	165	inet_prefix raddr;
56f5daac	166
288384f2 MN	167	NEXT_ARG();
	168	get_prefix(&raddr, *argv, preferred_family);
	169	if (raddr.family == AF_UNSPEC)
	170	invarg("\"remote\" address family is AF_UNSPEC", *argv);
	171	memcpy(&p->raddr, &raddr.data, sizeof(p->raddr));
	172	} else if (strcmp(*argv, "local") == 0) {
	173	inet_prefix laddr;
56f5daac	174
288384f2 MN	175	NEXT_ARG();
	176	get_prefix(&laddr, *argv, preferred_family);
	177	if (laddr.family == AF_UNSPEC)
	178	invarg("\"local\" address family is AF_UNSPEC", *argv);
	179	memcpy(&p->laddr, &laddr.data, sizeof(p->laddr));
	180	} else if (strcmp(*argv, "dev") == 0) {
	181	NEXT_ARG();
9447a0d3	182	strncpy(medium, *argv, IFNAMSIZ - 1);
288384f2 MN	183	} else if (strcmp(*argv, "encaplimit") == 0) {
	184	NEXT_ARG();
	185	if (strcmp(*argv, "none") == 0) {
	186	p->flags \|= IP6_TNL_F_IGN_ENCAP_LIMIT;
9447a0d3 MN	187	} else {
9447a0d3 MN	188	__u8 uval;
56f5daac	189
288384f2 MN	190	if (get_u8(&uval, *argv, 0) < -1)
288384f2 MN	191	invarg("invalid ELIM", *argv);
9447a0d3	192	p->encap_limit = uval;
3f83dce5	193	p->flags &= ~IP6_TNL_F_IGN_ENCAP_LIMIT;
9447a0d3	194	}
eddde110 YH	195	} else if (strcmp(*argv, "hoplimit") == 0 \|\|
	196	strcmp(*argv, "ttl") == 0 \|\|
	197	strcmp(*argv, "hlim") == 0) {
288384f2	198	__u8 uval;
56f5daac	199
288384f2 MN	200	NEXT_ARG();
288384f2 MN	201	if (get_u8(&uval, *argv, 0))
eddde110	202	invarg("invalid TTL", *argv);
288384f2	203	p->hop_limit = uval;
eddde110 YH	204	} else if (strcmp(*argv, "tclass") == 0 \|\|
	205	strcmp(*argv, "tc") == 0 \|\|
	206	strcmp(*argv, "tos") == 0 \|\|
	207	matches(*argv, "dsfield") == 0) {
288384f2	208	__u8 uval;
56f5daac	209
288384f2	210	NEXT_ARG();
df5574d0	211	p->flowinfo &= ~IP6_FLOWINFO_TCLASS;
288384f2 MN	212	if (strcmp(*argv, "inherit") == 0)
	213	p->flags \|= IP6_TNL_F_USE_ORIG_TCLASS;
	214	else {
	215	if (get_u8(&uval, *argv, 16))
eddde110	216	invarg("invalid TClass", *argv);
288384f2 MN	217	p->flowinfo \|= htonl((__u32)uval << 20) & IP6_FLOWINFO_TCLASS;
	218	p->flags &= ~IP6_TNL_F_USE_ORIG_TCLASS;
	219	}
eddde110 YH	220	} else if (strcmp(*argv, "flowlabel") == 0 \|\|
eddde110 YH	221	strcmp(*argv, "fl") == 0) {
288384f2	222	__u32 uval;
56f5daac	223
288384f2	224	NEXT_ARG();
df5574d0	225	p->flowinfo &= ~IP6_FLOWINFO_FLOWLABEL;
288384f2 MN	226	if (strcmp(*argv, "inherit") == 0)
	227	p->flags \|= IP6_TNL_F_USE_ORIG_FLOWLABEL;
	228	else {
	229	if (get_u32(&uval, *argv, 16))
eddde110	230	invarg("invalid Flowlabel", *argv);
288384f2	231	if (uval > 0xFFFFF)
eddde110	232	invarg("invalid Flowlabel", *argv);
288384f2 MN	233	p->flowinfo \|= htonl(uval) & IP6_FLOWINFO_FLOWLABEL;
	234	p->flags &= ~IP6_TNL_F_USE_ORIG_FLOWLABEL;
	235	}
	236	} else if (strcmp(*argv, "dscp") == 0) {
	237	NEXT_ARG();
	238	if (strcmp(*argv, "inherit") != 0)
	239	invarg("not inherit", *argv);
	240	p->flags \|= IP6_TNL_F_RCV_DSCP_COPY;
af89576d	241	} else if (strcmp(*argv, "key") == 0) {
af89576d	242	NEXT_ARG();
	243	p->i_flags \|= GRE_KEY;
	244	p->o_flags \|= GRE_KEY;
a7ed1520	245	p->i_key = p->o_key = tnl_parse_key("key", *argv);
af89576d	246	} else if (strcmp(*argv, "ikey") == 0) {
af89576d	247	NEXT_ARG();
af89576d	248	p->i_flags \|= GRE_KEY;
a7ed1520	249	p->i_key = tnl_parse_key("ikey", *argv);
af89576d	250	} else if (strcmp(*argv, "okey") == 0) {
af89576d	251	NEXT_ARG();
af89576d	252	p->o_flags \|= GRE_KEY;
a7ed1520	253	p->o_key = tnl_parse_key("okey", *argv);
af89576d	254	} else if (strcmp(*argv, "seq") == 0) {
	255	p->i_flags \|= GRE_SEQ;
	256	p->o_flags \|= GRE_SEQ;
	257	} else if (strcmp(*argv, "iseq") == 0) {
	258	p->i_flags \|= GRE_SEQ;
	259	} else if (strcmp(*argv, "oseq") == 0) {
	260	p->o_flags \|= GRE_SEQ;
	261	} else if (strcmp(*argv, "csum") == 0) {
	262	p->i_flags \|= GRE_CSUM;
	263	p->o_flags \|= GRE_CSUM;
	264	} else if (strcmp(*argv, "icsum") == 0) {
	265	p->i_flags \|= GRE_CSUM;
	266	} else if (strcmp(*argv, "ocsum") == 0) {
	267	p->o_flags \|= GRE_CSUM;
9447a0d3	268	} else {
288384f2 MN	269	if (strcmp(*argv, "name") == 0) {
288384f2 MN	270	NEXT_ARG();
7894ce77	271	} else if (matches(*argv, "help") == 0)
9447a0d3	272	usage();
288384f2 MN	273	if (p->name[0])
288384f2 MN	274	duparg2("name", *argv);
9447a0d3	275	strncpy(p->name, *argv, IFNAMSIZ - 1);
21a5a6b3	276	if (cmd == SIOCCHGTUNNEL && count == 0) {
d17b136f	277	struct ip6_tnl_parm2 old_p = {};
56f5daac	278
21a5a6b3 JB	279	if (tnl_get_ioctl(*argv, &old_p))
	280	return -1;
	281	*p = old_p;
	282	}
9447a0d3	283	}
21a5a6b3	284	count++;
9447a0d3 MN	285	argc--; argv++;
	286	}
	287	if (medium[0]) {
ea71beac	288	p->link = ll_name_to_index(medium);
6ddb1e8c PS	289	if (p->link == 0) {
6ddb1e8c PS	290	fprintf(stderr, "Cannot find device \"%s\"\n", medium);
9447a0d3	291	return -1;
6ddb1e8c	292	}
9447a0d3 MN	293	}
	294	return 0;
	295	}
	296
af89576d	297	static void ip6_tnl_parm_init(struct ip6_tnl_parm2 *p, int apply_default)
288384f2 MN	298	{
	299	memset(p, 0, sizeof(*p));
	300	p->proto = IPPROTO_IPV6;
	301	if (apply_default) {
	302	p->hop_limit = DEFAULT_TNL_HOP_LIMIT;
	303	p->encap_limit = IPV6_DEFAULT_TNL_ENCAP_LIMIT;
	304	}
	305	}
	306
	307	/*
	308	* @p1: user specified parameter
	309	* @p2: database entry
	310	*/
af89576d	311	static int ip6_tnl_parm_match(const struct ip6_tnl_parm2 *p1,
af89576d	312	const struct ip6_tnl_parm2 *p2)
288384f2 MN	313	{
	314	return ((!p1->link \|\| p1->link == p2->link) &&
	315	(!p1->name[0] \|\| strcmp(p1->name, p2->name) == 0) &&
1f4c51c0 JB	316	(IN6_IS_ADDR_UNSPECIFIED(&p1->laddr) \|\|
	317	IN6_ARE_ADDR_EQUAL(&p1->laddr, &p2->laddr)) &&
	318	(IN6_IS_ADDR_UNSPECIFIED(&p1->raddr) \|\|
	319	IN6_ARE_ADDR_EQUAL(&p1->raddr, &p2->raddr)) &&
288384f2 MN	320	(!p1->proto \|\| !p2->proto \|\| p1->proto == p2->proto) &&
	321	(!p1->encap_limit \|\| p1->encap_limit == p2->encap_limit) &&
	322	(!p1->hop_limit \|\| p1->hop_limit == p2->hop_limit) &&
	323	(!(p1->flowinfo & IP6_FLOWINFO_TCLASS) \|\|
	324	!((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_TCLASS)) &&
	325	(!(p1->flowinfo & IP6_FLOWINFO_FLOWLABEL) \|\|
	326	!((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_FLOWLABEL)) &&
	327	(!p1->flags \|\| (p1->flags & p2->flags)));
	328	}
	329
af89576d	330	static int do_tunnels_list(struct ip6_tnl_parm2 *p)
288384f2 MN	331	{
	332	char buf[512];
	333	int err = -1;
	334	FILE *fp = fopen("/proc/net/dev", "r");
56f5daac	335
288384f2 MN	336	if (fp == NULL) {
288384f2 MN	337	perror("fopen");
c4527d7b	338	return -1;
288384f2 MN	339	}
	340
	341	/* skip two lines at the begenning of the file */
38c867d2 SH	342	if (!fgets(buf, sizeof(buf), fp) \|\|
	343	!fgets(buf, sizeof(buf), fp)) {
	344	fprintf(stderr, "/proc/net/dev read error\n");
c4527d7b	345	goto end;
38c867d2	346	}
288384f2 MN	347
	348	while (fgets(buf, sizeof(buf), fp) != NULL) {
	349	char name[IFNAMSIZ];
ea71beac	350	int index, type;
d17b136f	351	struct ip6_tnl_parm2 p1 = {};
288384f2 MN	352	char *ptr;
	353
	354	buf[sizeof(buf) - 1] = '\0';
	355	if ((ptr = strchr(buf, ':')) == NULL \|\|
	356	(*ptr++ = 0, sscanf(buf, "%s", name) != 1)) {
14645ec2	357	fprintf(stderr, "Wrong format for /proc/net/dev. Giving up.\n");
288384f2 MN	358	goto end;
288384f2 MN	359	}
288384f2 MN	360	if (p->name[0] && strcmp(p->name, name))
288384f2 MN	361	continue;
ea71beac SH	362	index = ll_name_to_index(name);
	363	if (index == 0)
	364	continue;
	365	type = ll_index_to_type(index);
288384f2	366	if (type == -1) {
14645ec2	367	fprintf(stderr, "Failed to get type of \"%s\"\n", name);
288384f2 MN	368	continue;
288384f2 MN	369	}
af89576d	370	if (type != ARPHRD_TUNNEL6 && type != ARPHRD_IP6GRE)
288384f2	371	continue;
288384f2	372	ip6_tnl_parm_init(&p1, 0);
af89576d	373	if (type == ARPHRD_IP6GRE)
af89576d	374	p1.proto = IPPROTO_GRE;
288384f2	375	strcpy(p1.name, name);
ea71beac	376	p1.link = ll_name_to_index(p1.name);
288384f2 MN	377	if (p1.link == 0)
	378	continue;
	379	if (tnl_get_ioctl(p1.name, &p1))
	380	continue;
	381	if (!ip6_tnl_parm_match(p, &p1))
	382	continue;
	383	print_tunnel(&p1);
7d6aadcd PS	384	if (show_stats)
7d6aadcd PS	385	tnl_print_stats(ptr);
288384f2 MN	386	printf("\n");
	387	}
	388	err = 0;
288384f2	389	end:
c4527d7b	390	fclose(fp);
288384f2 MN	391	return err;
	392	}
	393
9447a0d3 MN	394	static int do_show(int argc, char **argv)
9447a0d3 MN	395	{
56f5daac	396	struct ip6_tnl_parm2 p;
288384f2	397
ea71beac	398	ll_init_map(&rth);
288384f2	399	ip6_tnl_parm_init(&p, 0);
c3651bf4	400	p.proto = 0; /* default to any */
9447a0d3	401
56f5daac SH	402	if (parse_args(argc, argv, SIOCGETTUNNEL, &p) < 0)
56f5daac SH	403	return -1;
9447a0d3	404
288384f2 MN	405	if (!p.name[0] \|\| show_stats)
	406	do_tunnels_list(&p);
	407	else {
	408	if (tnl_get_ioctl(p.name, &p))
	409	return -1;
	410	print_tunnel(&p);
	411	printf("\n");
	412	}
9447a0d3	413
56f5daac	414	return 0;
9447a0d3 MN	415	}
9447a0d3 MN	416
9447a0d3 MN	417	static int do_add(int cmd, int argc, char **argv)
9447a0d3 MN	418	{
af89576d	419	struct ip6_tnl_parm2 p;
a0638e18	420	const char *basedev = "ip6tnl0";
288384f2 MN	421
288384f2 MN	422	ip6_tnl_parm_init(&p, 1);
9447a0d3	423
21a5a6b3	424	if (parse_args(argc, argv, cmd, &p) < 0)
9447a0d3	425	return -1;
288384f2	426
a0638e18 AA	427	if (p.proto == IPPROTO_GRE)
	428	basedev = "ip6gre0";
	429	else if (p.i_flags & VTI_ISVTI)
	430	basedev = "ip6_vti0";
	431
	432	return tnl_add_ioctl(cmd, basedev, p.name, &p);
9447a0d3 MN	433	}
9447a0d3 MN	434
288384f2	435	static int do_del(int argc, char **argv)
9447a0d3	436	{
af89576d	437	struct ip6_tnl_parm2 p;
a0638e18	438	const char *basedev = "ip6tnl0";
288384f2 MN	439
288384f2 MN	440	ip6_tnl_parm_init(&p, 1);
9447a0d3	441
21a5a6b3	442	if (parse_args(argc, argv, SIOCDELTUNNEL, &p) < 0)
9447a0d3 MN	443	return -1;
9447a0d3 MN	444
a0638e18 AA	445	if (p.proto == IPPROTO_GRE)
	446	basedev = "ip6gre0";
	447	else if (p.i_flags & VTI_ISVTI)
	448	basedev = "ip6_vti0";
	449
	450	return tnl_del_ioctl(basedev, p.name, &p);
9447a0d3 MN	451	}
9447a0d3 MN	452
ae665a52 SH	453	int do_ip6tunnel(int argc, char **argv)
ae665a52 SH	454	{
288384f2 MN	455	switch (preferred_family) {
	456	case AF_UNSPEC:
	457	preferred_family = AF_INET6;
	458	break;
	459	case AF_INET6:
	460	break;
	461	default:
14645ec2	462	fprintf(stderr, "Unsupported protocol family: %d\n", preferred_family);
288384f2 MN	463	exit(-1);
	464	}
	465
9447a0d3	466	if (argc > 0) {
288384f2	467	if (matches(*argv, "add") == 0)
9447a0d3	468	return do_add(SIOCADDTUNNEL, argc - 1, argv + 1);
288384f2	469	if (matches(*argv, "change") == 0)
9447a0d3	470	return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1);
6e30461e	471	if (matches(*argv, "delete") == 0)
9447a0d3	472	return do_del(argc - 1, argv + 1);
288384f2 MN	473	if (matches(*argv, "show") == 0 \|\|
	474	matches(*argv, "lst") == 0 \|\|
	475	matches(*argv, "list") == 0)
9447a0d3	476	return do_show(argc - 1, argv + 1);
288384f2	477	if (matches(*argv, "help") == 0)
9447a0d3	478	usage();
9447a0d3 MN	479	} else
	480	return do_show(0, NULL);
	481
288384f2 MN	482	fprintf(stderr, "Command \"%s\" is unknown, try \"ip -f inet6 tunnel help\".\n", *argv);
288384f2 MN	483	exit(-1);
9447a0d3	484	}