]>
Commit | Line | Data |
---|---|---|
b72ede27 FL |
1 | /* |
2 | * VRF functions. | |
3 | * Copyright (C) 2014 6WIND S.A. | |
4 | * | |
5 | * This file is part of GNU Zebra. | |
6 | * | |
7 | * GNU Zebra is free software; you can redistribute it and/or modify | |
8 | * it under the terms of the GNU General Public License as published | |
9 | * by the Free Software Foundation; either version 2, or (at your | |
10 | * option) any later version. | |
11 | * | |
12 | * GNU Zebra is distributed in the hope that it will be useful, but | |
13 | * WITHOUT ANY WARRANTY; without even the implied warranty of | |
14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
15 | * General Public License for more details. | |
16 | * | |
896014f4 DL |
17 | * You should have received a copy of the GNU General Public License along |
18 | * with this program; see the file COPYING; if not, write to the Free Software | |
19 | * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA | |
b72ede27 FL |
20 | */ |
21 | ||
22 | #include <zebra.h> | |
23 | ||
4691b65a PG |
24 | /* for basename */ |
25 | #include <libgen.h> | |
26 | ||
6a69b354 | 27 | #include "if.h" |
b72ede27 | 28 | #include "vrf.h" |
7922fc65 | 29 | #include "vrf_int.h" |
b72ede27 FL |
30 | #include "prefix.h" |
31 | #include "table.h" | |
32 | #include "log.h" | |
33 | #include "memory.h" | |
19dc275e | 34 | #include "command.h" |
b95c1883 | 35 | #include "ns.h" |
3bc34908 | 36 | #include "privs.h" |
98cbbaea | 37 | #include "nexthop_group.h" |
b66d022e | 38 | #include "lib_errors.h" |
19dc275e | 39 | |
ec31f30d PG |
40 | /* default VRF ID value used when VRF backend is not NETNS */ |
41 | #define VRF_DEFAULT_INTERNAL 0 | |
dd114702 | 42 | #define VRF_DEFAULT_NAME_INTERNAL "default" |
ec31f30d | 43 | |
d62a17ae | 44 | DEFINE_MTYPE_STATIC(LIB, VRF, "VRF") |
4a1ab8e4 DL |
45 | DEFINE_MTYPE_STATIC(LIB, VRF_BITMAP, "VRF bit-map") |
46 | ||
e80e7cce DL |
47 | DEFINE_QOBJ_TYPE(vrf) |
48 | ||
d62a17ae | 49 | static __inline int vrf_id_compare(const struct vrf *, const struct vrf *); |
50 | static __inline int vrf_name_compare(const struct vrf *, const struct vrf *); | |
1a1a7065 | 51 | |
d62a17ae | 52 | RB_GENERATE(vrf_id_head, vrf, id_entry, vrf_id_compare); |
53 | RB_GENERATE(vrf_name_head, vrf, name_entry, vrf_name_compare); | |
1a1a7065 | 54 | |
d62a17ae | 55 | struct vrf_id_head vrfs_by_id = RB_INITIALIZER(&vrfs_by_id); |
56 | struct vrf_name_head vrfs_by_name = RB_INITIALIZER(&vrfs_by_name); | |
1a1a7065 | 57 | |
78dd30b2 | 58 | static int vrf_backend; |
3bc34908 | 59 | static struct zebra_privs_t *vrf_daemon_privs; |
c200f5e1 | 60 | static char vrf_default_name[VRF_NAMSIZ] = VRF_DEFAULT_NAME_INTERNAL; |
78dd30b2 | 61 | |
19dc275e DS |
62 | /* |
63 | * Turn on/off debug code | |
64 | * for vrf. | |
65 | */ | |
66 | int debug_vrf = 0; | |
b72ede27 | 67 | |
b72ede27 | 68 | /* Holding VRF hooks */ |
d62a17ae | 69 | struct vrf_master { |
70 | int (*vrf_new_hook)(struct vrf *); | |
71 | int (*vrf_delete_hook)(struct vrf *); | |
72 | int (*vrf_enable_hook)(struct vrf *); | |
73 | int (*vrf_disable_hook)(struct vrf *); | |
ecbc5a37 | 74 | int (*vrf_update_name_hook)(struct vrf *vrf); |
d62a17ae | 75 | } vrf_master = { |
76 | 0, | |
77 | }; | |
b72ede27 | 78 | |
d62a17ae | 79 | static int vrf_is_enabled(struct vrf *vrf); |
e5bf3e1e | 80 | |
216b18ef | 81 | /* VRF list existance check by name. */ |
d62a17ae | 82 | struct vrf *vrf_lookup_by_name(const char *name) |
216b18ef | 83 | { |
d62a17ae | 84 | struct vrf vrf; |
85 | strlcpy(vrf.name, name, sizeof(vrf.name)); | |
86 | return (RB_FIND(vrf_name_head, &vrfs_by_name, &vrf)); | |
216b18ef | 87 | } |
216b18ef | 88 | |
d62a17ae | 89 | static __inline int vrf_id_compare(const struct vrf *a, const struct vrf *b) |
b72ede27 | 90 | { |
d62a17ae | 91 | return (a->vrf_id - b->vrf_id); |
216b18ef DS |
92 | } |
93 | ||
d62a17ae | 94 | static int vrf_name_compare(const struct vrf *a, const struct vrf *b) |
b72ede27 | 95 | { |
d62a17ae | 96 | return strcmp(a->name, b->name); |
b72ede27 FL |
97 | } |
98 | ||
e26aedbe PG |
99 | /* if ns_id is different and not VRF_UNKNOWN, |
100 | * then update vrf identifier, and enable VRF | |
101 | */ | |
102 | static void vrf_update_vrf_id(ns_id_t ns_id, void *opaqueptr) | |
103 | { | |
104 | ns_id_t vrf_id = (vrf_id_t)ns_id; | |
105 | vrf_id_t old_vrf_id; | |
106 | struct vrf *vrf = (struct vrf *)opaqueptr; | |
107 | ||
108 | if (!vrf) | |
109 | return; | |
110 | old_vrf_id = vrf->vrf_id; | |
111 | if (vrf_id == vrf->vrf_id) | |
112 | return; | |
113 | if (vrf->vrf_id != VRF_UNKNOWN) | |
114 | RB_REMOVE(vrf_id_head, &vrfs_by_id, vrf); | |
115 | vrf->vrf_id = vrf_id; | |
116 | RB_INSERT(vrf_id_head, &vrfs_by_id, vrf); | |
117 | if (old_vrf_id == VRF_UNKNOWN) | |
118 | vrf_enable((struct vrf *)vrf); | |
119 | } | |
120 | ||
ce1be369 PG |
121 | int vrf_switch_to_netns(vrf_id_t vrf_id) |
122 | { | |
123 | char *name; | |
124 | struct vrf *vrf = vrf_lookup_by_id(vrf_id); | |
125 | ||
ce1be369 | 126 | /* VRF is default VRF. silently ignore */ |
e26aedbe | 127 | if (!vrf || vrf->vrf_id == VRF_DEFAULT) |
9dff1132 | 128 | return 1; /* 1 = default */ |
e26aedbe PG |
129 | /* VRF has no NETNS backend. silently ignore */ |
130 | if (vrf->data.l.netns_name[0] == '\0') | |
9dff1132 | 131 | return 2; /* 2 = no netns */ |
ce1be369 PG |
132 | name = ns_netns_pathname(NULL, vrf->data.l.netns_name); |
133 | if (debug_vrf) | |
134 | zlog_debug("VRF_SWITCH: %s(%u)", name, vrf->vrf_id); | |
135 | return ns_switch_to_netns(name); | |
136 | } | |
137 | ||
138 | int vrf_switchback_to_initial(void) | |
139 | { | |
140 | int ret = ns_switchback_to_initial(); | |
141 | ||
142 | if (ret == 0 && debug_vrf) | |
143 | zlog_debug("VRF_SWITCHBACK"); | |
144 | return ret; | |
145 | } | |
146 | ||
216b18ef | 147 | /* Get a VRF. If not found, create one. |
34f8e6af DS |
148 | * Arg: |
149 | * name - The name of the vrf. May be NULL if unknown. | |
150 | * vrf_id - The vrf_id of the vrf. May be VRF_UNKNOWN if unknown | |
216b18ef | 151 | * Description: Please note that this routine can be called with just the name |
34f8e6af DS |
152 | * and 0 vrf-id |
153 | */ | |
d62a17ae | 154 | struct vrf *vrf_get(vrf_id_t vrf_id, const char *name) |
155 | { | |
156 | struct vrf *vrf = NULL; | |
157 | int new = 0; | |
158 | ||
159 | if (debug_vrf) | |
996c9314 LB |
160 | zlog_debug("VRF_GET: %s(%u)", name == NULL ? "(NULL)" : name, |
161 | vrf_id); | |
d62a17ae | 162 | |
163 | /* Nothing to see, move along here */ | |
164 | if (!name && vrf_id == VRF_UNKNOWN) | |
165 | return NULL; | |
166 | ||
0c2bac38 PG |
167 | /* attempt to find already available VRF |
168 | */ | |
169 | if (name) | |
170 | vrf = vrf_lookup_by_name(name); | |
dd114702 PG |
171 | if (vrf && vrf_id != VRF_UNKNOWN |
172 | && vrf->vrf_id != VRF_UNKNOWN | |
173 | && vrf->vrf_id != vrf_id) { | |
174 | zlog_debug("VRF_GET: avoid %s creation(%u), same name exists (%u)", | |
175 | name, vrf_id, vrf->vrf_id); | |
176 | return NULL; | |
177 | } | |
d62a17ae | 178 | /* Try to find VRF both by ID and name */ |
0c2bac38 | 179 | if (!vrf && vrf_id != VRF_UNKNOWN) |
d62a17ae | 180 | vrf = vrf_lookup_by_id(vrf_id); |
d62a17ae | 181 | |
182 | if (vrf == NULL) { | |
183 | vrf = XCALLOC(MTYPE_VRF, sizeof(struct vrf)); | |
184 | vrf->vrf_id = VRF_UNKNOWN; | |
d62a17ae | 185 | QOBJ_REG(vrf, vrf); |
186 | new = 1; | |
187 | ||
188 | if (debug_vrf) | |
189 | zlog_debug("VRF(%u) %s is created.", vrf_id, | |
190 | (name) ? name : "(NULL)"); | |
191 | } | |
192 | ||
193 | /* Set identifier */ | |
194 | if (vrf_id != VRF_UNKNOWN && vrf->vrf_id == VRF_UNKNOWN) { | |
195 | vrf->vrf_id = vrf_id; | |
196 | RB_INSERT(vrf_id_head, &vrfs_by_id, vrf); | |
197 | } | |
198 | ||
199 | /* Set name */ | |
200 | if (name && vrf->name[0] != '\0' && strcmp(name, vrf->name)) { | |
201 | RB_REMOVE(vrf_name_head, &vrfs_by_name, vrf); | |
202 | strlcpy(vrf->name, name, sizeof(vrf->name)); | |
203 | RB_INSERT(vrf_name_head, &vrfs_by_name, vrf); | |
204 | } else if (name && vrf->name[0] == '\0') { | |
205 | strlcpy(vrf->name, name, sizeof(vrf->name)); | |
206 | RB_INSERT(vrf_name_head, &vrfs_by_name, vrf); | |
207 | } | |
d62a17ae | 208 | if (new &&vrf_master.vrf_new_hook) |
209 | (*vrf_master.vrf_new_hook)(vrf); | |
210 | ||
211 | return vrf; | |
b72ede27 FL |
212 | } |
213 | ||
84915b0a | 214 | /* Delete a VRF. This is called when the underlying VRF goes away, a |
215 | * pre-configured VRF is deleted or when shutting down (vrf_terminate()). | |
216 | */ | |
d62a17ae | 217 | void vrf_delete(struct vrf *vrf) |
b72ede27 | 218 | { |
d62a17ae | 219 | if (debug_vrf) |
220 | zlog_debug("VRF %u is to be deleted.", vrf->vrf_id); | |
b72ede27 | 221 | |
d62a17ae | 222 | if (vrf_is_enabled(vrf)) |
223 | vrf_disable(vrf); | |
e5bf3e1e | 224 | |
84915b0a | 225 | /* If the VRF is user configured, it'll stick around, just remove |
226 | * the ID mapping. Interfaces assigned to this VRF should've been | |
227 | * removed already as part of the VRF going down. | |
228 | */ | |
229 | if (vrf_is_user_cfged(vrf)) { | |
230 | if (vrf->vrf_id != VRF_UNKNOWN) { | |
231 | /* Delete any VRF interfaces - should be only | |
232 | * the VRF itself, other interfaces should've | |
233 | * been moved out of the VRF. | |
234 | */ | |
235 | if_terminate(vrf); | |
236 | RB_REMOVE(vrf_id_head, &vrfs_by_id, vrf); | |
237 | vrf->vrf_id = VRF_UNKNOWN; | |
238 | } | |
239 | return; | |
240 | } | |
241 | ||
d62a17ae | 242 | if (vrf_master.vrf_delete_hook) |
243 | (*vrf_master.vrf_delete_hook)(vrf); | |
216b18ef | 244 | |
d62a17ae | 245 | QOBJ_UNREG(vrf); |
f4e14fdb | 246 | if_terminate(vrf); |
b72ede27 | 247 | |
d62a17ae | 248 | if (vrf->vrf_id != VRF_UNKNOWN) |
249 | RB_REMOVE(vrf_id_head, &vrfs_by_id, vrf); | |
250 | if (vrf->name[0] != '\0') | |
251 | RB_REMOVE(vrf_name_head, &vrfs_by_name, vrf); | |
b72ede27 | 252 | |
d62a17ae | 253 | XFREE(MTYPE_VRF, vrf); |
b72ede27 FL |
254 | } |
255 | ||
256 | /* Look up a VRF by identifier. */ | |
d62a17ae | 257 | struct vrf *vrf_lookup_by_id(vrf_id_t vrf_id) |
b72ede27 | 258 | { |
d62a17ae | 259 | struct vrf vrf; |
260 | vrf.vrf_id = vrf_id; | |
261 | return (RB_FIND(vrf_id_head, &vrfs_by_id, &vrf)); | |
b72ede27 FL |
262 | } |
263 | ||
e5bf3e1e FL |
264 | /* |
265 | * Enable a VRF - that is, let the VRF be ready to use. | |
266 | * The VRF_ENABLE_HOOK callback will be called to inform | |
267 | * that they can allocate resources in this VRF. | |
268 | * | |
269 | * RETURN: 1 - enabled successfully; otherwise, 0. | |
270 | */ | |
d62a17ae | 271 | int vrf_enable(struct vrf *vrf) |
e5bf3e1e | 272 | { |
d62a17ae | 273 | if (vrf_is_enabled(vrf)) |
274 | return 1; | |
05e8e11e | 275 | |
d62a17ae | 276 | if (debug_vrf) |
277 | zlog_debug("VRF %u is enabled.", vrf->vrf_id); | |
e5bf3e1e | 278 | |
d62a17ae | 279 | SET_FLAG(vrf->status, VRF_ACTIVE); |
e5bf3e1e | 280 | |
d62a17ae | 281 | if (vrf_master.vrf_enable_hook) |
282 | (*vrf_master.vrf_enable_hook)(vrf); | |
e5bf3e1e | 283 | |
98cbbaea DS |
284 | /* |
285 | * If we have any nexthop group entries that | |
286 | * are awaiting vrf initialization then | |
287 | * let's let people know about it | |
288 | */ | |
289 | nexthop_group_enable_vrf(vrf); | |
290 | ||
d62a17ae | 291 | return 1; |
e5bf3e1e FL |
292 | } |
293 | ||
294 | /* | |
295 | * Disable a VRF - that is, let the VRF be unusable. | |
296 | * The VRF_DELETE_HOOK callback will be called to inform | |
297 | * that they must release the resources in the VRF. | |
298 | */ | |
697d3ec7 | 299 | void vrf_disable(struct vrf *vrf) |
e5bf3e1e | 300 | { |
d62a17ae | 301 | if (!vrf_is_enabled(vrf)) |
302 | return; | |
a647bfa8 | 303 | |
d62a17ae | 304 | UNSET_FLAG(vrf->status, VRF_ACTIVE); |
e5bf3e1e | 305 | |
d62a17ae | 306 | if (debug_vrf) |
307 | zlog_debug("VRF %u is to be disabled.", vrf->vrf_id); | |
e5bf3e1e | 308 | |
d62a17ae | 309 | /* Till now, nothing to be done for the default VRF. */ |
310 | // Pending: see why this statement. | |
e74f14fc | 311 | |
d62a17ae | 312 | if (vrf_master.vrf_disable_hook) |
313 | (*vrf_master.vrf_disable_hook)(vrf); | |
e5bf3e1e FL |
314 | } |
315 | ||
b7cfce93 MK |
316 | const char *vrf_id_to_name(vrf_id_t vrf_id) |
317 | { | |
318 | struct vrf *vrf; | |
319 | ||
320 | vrf = vrf_lookup_by_id(vrf_id); | |
321 | if (vrf) | |
322 | return vrf->name; | |
323 | ||
181c08c6 | 324 | return "n/a"; |
b7cfce93 MK |
325 | } |
326 | ||
d62a17ae | 327 | vrf_id_t vrf_name_to_id(const char *name) |
216b18ef | 328 | { |
d62a17ae | 329 | struct vrf *vrf; |
330 | vrf_id_t vrf_id = VRF_DEFAULT; // Pending: need a way to return invalid | |
331 | // id/ routine not used. | |
216b18ef | 332 | |
d62a17ae | 333 | vrf = vrf_lookup_by_name(name); |
334 | if (vrf) | |
335 | vrf_id = vrf->vrf_id; | |
216b18ef | 336 | |
d62a17ae | 337 | return vrf_id; |
216b18ef DS |
338 | } |
339 | ||
b72ede27 | 340 | /* Get the data pointer of the specified VRF. If not found, create one. */ |
d62a17ae | 341 | void *vrf_info_get(vrf_id_t vrf_id) |
b72ede27 | 342 | { |
d62a17ae | 343 | struct vrf *vrf = vrf_get(vrf_id, NULL); |
344 | return vrf->info; | |
b72ede27 FL |
345 | } |
346 | ||
347 | /* Look up the data pointer of the specified VRF. */ | |
d62a17ae | 348 | void *vrf_info_lookup(vrf_id_t vrf_id) |
b72ede27 | 349 | { |
d62a17ae | 350 | struct vrf *vrf = vrf_lookup_by_id(vrf_id); |
351 | return vrf ? vrf->info : NULL; | |
b72ede27 FL |
352 | } |
353 | ||
7076bb2f | 354 | /* |
4a8bf858 | 355 | * VRF hash for storing set or not. |
7076bb2f | 356 | */ |
4a8bf858 DS |
357 | struct vrf_bit_set { |
358 | vrf_id_t vrf_id; | |
359 | bool set; | |
360 | }; | |
7076bb2f | 361 | |
4a8bf858 DS |
362 | static unsigned int vrf_hash_bitmap_key(void *data) |
363 | { | |
364 | struct vrf_bit_set *bit = data; | |
d62a17ae | 365 | |
4a8bf858 DS |
366 | return bit->vrf_id; |
367 | } | |
d62a17ae | 368 | |
74df8d6d | 369 | static bool vrf_hash_bitmap_cmp(const void *a, const void *b) |
4a8bf858 DS |
370 | { |
371 | const struct vrf_bit_set *bit1 = a; | |
372 | const struct vrf_bit_set *bit2 = b; | |
d62a17ae | 373 | |
4a8bf858 DS |
374 | return bit1->vrf_id == bit2->vrf_id; |
375 | } | |
376 | ||
377 | static void *vrf_hash_bitmap_alloc(void *data) | |
378 | { | |
379 | struct vrf_bit_set *copy = data; | |
380 | struct vrf_bit_set *bit; | |
381 | ||
382 | bit = XMALLOC(MTYPE_VRF_BITMAP, sizeof(*bit)); | |
383 | bit->vrf_id = copy->vrf_id; | |
384 | ||
385 | return bit; | |
386 | } | |
387 | ||
388 | static void vrf_hash_bitmap_free(void *data) | |
389 | { | |
390 | struct vrf_bit_set *bit = data; | |
391 | ||
392 | XFREE(MTYPE_VRF_BITMAP, bit); | |
393 | } | |
7076bb2f | 394 | |
d62a17ae | 395 | vrf_bitmap_t vrf_bitmap_init(void) |
7076bb2f | 396 | { |
4a8bf858 DS |
397 | return hash_create_size(32, vrf_hash_bitmap_key, vrf_hash_bitmap_cmp, |
398 | "VRF BIT HASH"); | |
7076bb2f FL |
399 | } |
400 | ||
d62a17ae | 401 | void vrf_bitmap_free(vrf_bitmap_t bmap) |
7076bb2f | 402 | { |
4a8bf858 | 403 | struct hash *vrf_hash = bmap; |
7076bb2f | 404 | |
4a8bf858 | 405 | if (vrf_hash == NULL) |
d62a17ae | 406 | return; |
7076bb2f | 407 | |
4a8bf858 DS |
408 | hash_clean(vrf_hash, vrf_hash_bitmap_free); |
409 | hash_free(vrf_hash); | |
7076bb2f FL |
410 | } |
411 | ||
d62a17ae | 412 | void vrf_bitmap_set(vrf_bitmap_t bmap, vrf_id_t vrf_id) |
7076bb2f | 413 | { |
4a8bf858 DS |
414 | struct vrf_bit_set lookup = { .vrf_id = vrf_id }; |
415 | struct hash *vrf_hash = bmap; | |
416 | struct vrf_bit_set *bit; | |
7076bb2f | 417 | |
4a8bf858 | 418 | if (vrf_hash == NULL || vrf_id == VRF_UNKNOWN) |
d62a17ae | 419 | return; |
7076bb2f | 420 | |
4a8bf858 DS |
421 | bit = hash_get(vrf_hash, &lookup, vrf_hash_bitmap_alloc); |
422 | bit->set = true; | |
7076bb2f FL |
423 | } |
424 | ||
d62a17ae | 425 | void vrf_bitmap_unset(vrf_bitmap_t bmap, vrf_id_t vrf_id) |
7076bb2f | 426 | { |
4a8bf858 DS |
427 | struct vrf_bit_set lookup = { .vrf_id = vrf_id }; |
428 | struct hash *vrf_hash = bmap; | |
429 | struct vrf_bit_set *bit; | |
7076bb2f | 430 | |
4a8bf858 | 431 | if (vrf_hash == NULL || vrf_id == VRF_UNKNOWN) |
d62a17ae | 432 | return; |
7076bb2f | 433 | |
4a8bf858 DS |
434 | bit = hash_get(vrf_hash, &lookup, vrf_hash_bitmap_alloc); |
435 | bit->set = false; | |
7076bb2f FL |
436 | } |
437 | ||
d62a17ae | 438 | int vrf_bitmap_check(vrf_bitmap_t bmap, vrf_id_t vrf_id) |
7076bb2f | 439 | { |
4a8bf858 DS |
440 | struct vrf_bit_set lookup = { .vrf_id = vrf_id }; |
441 | struct hash *vrf_hash = bmap; | |
442 | struct vrf_bit_set *bit; | |
7076bb2f | 443 | |
4a8bf858 | 444 | if (vrf_hash == NULL || vrf_id == VRF_UNKNOWN) |
d62a17ae | 445 | return 0; |
7076bb2f | 446 | |
4a8bf858 DS |
447 | bit = hash_lookup(vrf_hash, &lookup); |
448 | if (bit) | |
449 | return bit->set; | |
450 | ||
451 | return 0; | |
7076bb2f FL |
452 | } |
453 | ||
d62a17ae | 454 | static void vrf_autocomplete(vector comps, struct cmd_token *token) |
d617d5fe | 455 | { |
d62a17ae | 456 | struct vrf *vrf = NULL; |
d617d5fe | 457 | |
723001fc PG |
458 | RB_FOREACH (vrf, vrf_name_head, &vrfs_by_name) |
459 | vector_set(comps, XSTRDUP(MTYPE_COMPLETION, vrf->name)); | |
d617d5fe DS |
460 | } |
461 | ||
462 | static const struct cmd_variable_handler vrf_var_handlers[] = { | |
d62a17ae | 463 | { |
464 | .varname = "vrf", | |
465 | .completions = vrf_autocomplete, | |
466 | }, | |
467 | {.completions = NULL}, | |
d617d5fe DS |
468 | }; |
469 | ||
b72ede27 | 470 | /* Initialize VRF module. */ |
d62a17ae | 471 | void vrf_init(int (*create)(struct vrf *), int (*enable)(struct vrf *), |
ecbc5a37 PG |
472 | int (*disable)(struct vrf *), int (*delete)(struct vrf *), |
473 | int ((*update)(struct vrf *))) | |
d62a17ae | 474 | { |
475 | struct vrf *default_vrf; | |
476 | ||
e26aedbe PG |
477 | /* initialise NS, in case VRF backend if NETNS */ |
478 | ns_init(); | |
d62a17ae | 479 | if (debug_vrf) |
480 | zlog_debug("%s: Initializing VRF subsystem", | |
481 | __PRETTY_FUNCTION__); | |
482 | ||
483 | vrf_master.vrf_new_hook = create; | |
484 | vrf_master.vrf_enable_hook = enable; | |
485 | vrf_master.vrf_disable_hook = disable; | |
486 | vrf_master.vrf_delete_hook = delete; | |
ecbc5a37 | 487 | vrf_master.vrf_update_name_hook = update; |
d62a17ae | 488 | |
489 | /* The default VRF always exists. */ | |
eb6934d5 | 490 | default_vrf = vrf_get(VRF_DEFAULT, VRF_DEFAULT_NAME); |
d62a17ae | 491 | if (!default_vrf) { |
450971aa | 492 | flog_err(EC_LIB_VRF_START, |
1c50c1c0 | 493 | "vrf_init: failed to create the default VRF!"); |
d62a17ae | 494 | exit(1); |
495 | } | |
20c87e98 TC |
496 | if (vrf_is_backend_netns()) { |
497 | struct ns *ns; | |
498 | ||
fdafe17e | 499 | strlcpy(default_vrf->data.l.netns_name, |
eb6934d5 | 500 | VRF_DEFAULT_NAME, NS_NAMSIZ); |
20c87e98 | 501 | ns = ns_lookup(ns_get_default_id()); |
c3568c4d TC |
502 | ns->vrf_ctxt = default_vrf; |
503 | default_vrf->ns_ctxt = ns; | |
20c87e98 | 504 | } |
d62a17ae | 505 | |
506 | /* Enable the default VRF. */ | |
507 | if (!vrf_enable(default_vrf)) { | |
450971aa | 508 | flog_err(EC_LIB_VRF_START, |
1c50c1c0 | 509 | "vrf_init: failed to enable the default VRF!"); |
d62a17ae | 510 | exit(1); |
511 | } | |
512 | ||
513 | cmd_variable_handler_register(vrf_var_handlers); | |
b72ede27 FL |
514 | } |
515 | ||
516 | /* Terminate VRF module. */ | |
d62a17ae | 517 | void vrf_terminate(void) |
b72ede27 | 518 | { |
d62a17ae | 519 | struct vrf *vrf; |
b72ede27 | 520 | |
d62a17ae | 521 | if (debug_vrf) |
522 | zlog_debug("%s: Shutting down vrf subsystem", | |
523 | __PRETTY_FUNCTION__); | |
19dc275e | 524 | |
55cd0f61 DS |
525 | while (!RB_EMPTY(vrf_id_head, &vrfs_by_id)) { |
526 | vrf = RB_ROOT(vrf_id_head, &vrfs_by_id); | |
527 | ||
65c3a7c4 | 528 | /* Clear configured flag and invoke delete. */ |
529 | UNSET_FLAG(vrf->status, VRF_CONFIGURED); | |
d62a17ae | 530 | vrf_delete(vrf); |
65c3a7c4 | 531 | } |
55cd0f61 DS |
532 | |
533 | while (!RB_EMPTY(vrf_name_head, &vrfs_by_name)) { | |
534 | vrf = RB_ROOT(vrf_name_head, &vrfs_by_name); | |
535 | ||
65c3a7c4 | 536 | /* Clear configured flag and invoke delete. */ |
537 | UNSET_FLAG(vrf->status, VRF_CONFIGURED); | |
d62a17ae | 538 | vrf_delete(vrf); |
65c3a7c4 | 539 | } |
b72ede27 FL |
540 | } |
541 | ||
9dff1132 LB |
542 | static int vrf_default_accepts_vrf(int type) |
543 | { | |
544 | const char *fname = NULL; | |
545 | char buf[32] = {0x0}; | |
546 | int ret = 0; | |
547 | FILE *fd = NULL; | |
548 | ||
549 | /* | |
550 | * TCP & UDP services running in the default VRF context (ie., not bound | |
551 | * to any VRF device) can work across all VRF domains by enabling the | |
552 | * tcp_l3mdev_accept and udp_l3mdev_accept sysctl options: | |
553 | * sysctl -w net.ipv4.tcp_l3mdev_accept=1 | |
554 | * sysctl -w net.ipv4.udp_l3mdev_accept=1 | |
555 | */ | |
556 | if (type == SOCK_STREAM) | |
557 | fname = "/proc/sys/net/ipv4/tcp_l3mdev_accept"; | |
558 | else if (type == SOCK_DGRAM) | |
559 | fname = "/proc/sys/net/ipv4/udp_l3mdev_accept"; | |
560 | else | |
561 | return ret; | |
562 | fd = fopen(fname, "r"); | |
563 | if (fd == NULL) | |
564 | return ret; | |
565 | fgets(buf, 32, fd); | |
566 | ret = atoi(buf); | |
567 | fclose(fd); | |
568 | return ret; | |
569 | } | |
570 | ||
e5bf3e1e | 571 | /* Create a socket for the VRF. */ |
0f4977c6 PG |
572 | int vrf_socket(int domain, int type, int protocol, vrf_id_t vrf_id, |
573 | char *interfacename) | |
e5bf3e1e | 574 | { |
2e0d2b3d | 575 | int ret, save_errno, ret2; |
e5bf3e1e | 576 | |
2e0d2b3d PG |
577 | ret = vrf_switch_to_netns(vrf_id); |
578 | if (ret < 0) | |
450971aa | 579 | flog_err_sys(EC_LIB_SOCKET, "%s: Can't switch to VRF %u (%s)", |
09c866e3 | 580 | __func__, vrf_id, safe_strerror(errno)); |
b66d022e | 581 | |
9dff1132 LB |
582 | if (ret > 0 && interfacename && vrf_default_accepts_vrf(type)) { |
583 | zlog_err("VRF socket not used since net.ipv4.%s_l3mdev_accept != 0", | |
584 | (type == SOCK_STREAM ? "tcp" : "udp")); | |
585 | errno = EEXIST; /* not sure if this is the best error... */ | |
586 | return -2; | |
587 | } | |
b66d022e | 588 | |
d62a17ae | 589 | ret = socket(domain, type, protocol); |
2e0d2b3d PG |
590 | save_errno = errno; |
591 | ret2 = vrf_switchback_to_initial(); | |
592 | if (ret2 < 0) | |
450971aa | 593 | flog_err_sys(EC_LIB_SOCKET, |
09c866e3 QY |
594 | "%s: Can't switchback from VRF %u (%s)", __func__, |
595 | vrf_id, safe_strerror(errno)); | |
2e0d2b3d | 596 | errno = save_errno; |
0f4977c6 PG |
597 | if (ret <= 0) |
598 | return ret; | |
599 | ret2 = vrf_bind(vrf_id, ret, interfacename); | |
600 | if (ret2 < 0) { | |
601 | close(ret); | |
602 | ret = ret2; | |
603 | } | |
d62a17ae | 604 | return ret; |
e5bf3e1e FL |
605 | } |
606 | ||
78dd30b2 PG |
607 | int vrf_is_backend_netns(void) |
608 | { | |
609 | return (vrf_backend == VRF_BACKEND_NETNS); | |
610 | } | |
611 | ||
612 | int vrf_get_backend(void) | |
613 | { | |
614 | return vrf_backend; | |
615 | } | |
616 | ||
617 | void vrf_configure_backend(int vrf_backend_netns) | |
618 | { | |
619 | vrf_backend = vrf_backend_netns; | |
620 | } | |
621 | ||
03aff2d8 PG |
622 | int vrf_handler_create(struct vty *vty, const char *vrfname, |
623 | struct vrf **vrf) | |
f30c50b9 | 624 | { |
d62a17ae | 625 | struct vrf *vrfp; |
f30c50b9 | 626 | |
d62a17ae | 627 | if (strlen(vrfname) > VRF_NAMSIZ) { |
697d3ec7 PG |
628 | if (vty) |
629 | vty_out(vty, | |
996c9314 LB |
630 | "%% VRF name %s invalid: length exceeds %d bytes\n", |
631 | vrfname, VRF_NAMSIZ); | |
697d3ec7 | 632 | else |
0351a28f | 633 | flog_warn( |
450971aa | 634 | EC_LIB_VRF_LENGTH, |
996c9314 LB |
635 | "%% VRF name %s invalid: length exceeds %d bytes\n", |
636 | vrfname, VRF_NAMSIZ); | |
d62a17ae | 637 | return CMD_WARNING_CONFIG_FAILED; |
638 | } | |
f30c50b9 | 639 | |
d62a17ae | 640 | vrfp = vrf_get(VRF_UNKNOWN, vrfname); |
f30c50b9 | 641 | |
697d3ec7 PG |
642 | if (vty) |
643 | VTY_PUSH_CONTEXT(VRF_NODE, vrfp); | |
f30c50b9 | 644 | |
697d3ec7 PG |
645 | if (vrf) |
646 | *vrf = vrfp; | |
d62a17ae | 647 | return CMD_SUCCESS; |
f30c50b9 RW |
648 | } |
649 | ||
996c9314 | 650 | int vrf_netns_handler_create(struct vty *vty, struct vrf *vrf, char *pathname, |
03aff2d8 | 651 | ns_id_t ns_id, ns_id_t internal_ns_id) |
e26aedbe PG |
652 | { |
653 | struct ns *ns = NULL; | |
654 | ||
655 | if (!vrf) | |
656 | return CMD_WARNING_CONFIG_FAILED; | |
657 | if (vrf->vrf_id != VRF_UNKNOWN && vrf->ns_ctxt == NULL) { | |
658 | if (vty) | |
659 | vty_out(vty, | |
660 | "VRF %u is already configured with VRF %s\n", | |
661 | vrf->vrf_id, vrf->name); | |
662 | else | |
0351a28f | 663 | zlog_info("VRF %u is already configured with VRF %s\n", |
e26aedbe PG |
664 | vrf->vrf_id, vrf->name); |
665 | return CMD_WARNING_CONFIG_FAILED; | |
666 | } | |
667 | if (vrf->ns_ctxt != NULL) { | |
996c9314 | 668 | ns = (struct ns *)vrf->ns_ctxt; |
2e1cc436 | 669 | if (!strcmp(ns->name, pathname)) { |
e26aedbe PG |
670 | if (vty) |
671 | vty_out(vty, | |
996c9314 LB |
672 | "VRF %u already configured with NETNS %s\n", |
673 | vrf->vrf_id, ns->name); | |
e26aedbe | 674 | else |
0351a28f | 675 | zlog_info( |
ade6974d QY |
676 | "VRF %u already configured with NETNS %s", |
677 | vrf->vrf_id, ns->name); | |
e26aedbe PG |
678 | return CMD_WARNING_CONFIG_FAILED; |
679 | } | |
680 | } | |
681 | ns = ns_lookup_name(pathname); | |
682 | if (ns && ns->vrf_ctxt) { | |
683 | struct vrf *vrf2 = (struct vrf *)ns->vrf_ctxt; | |
684 | ||
685 | if (vrf2 == vrf) | |
686 | return CMD_SUCCESS; | |
687 | if (vty) | |
996c9314 LB |
688 | vty_out(vty, |
689 | "NS %s is already configured" | |
e26aedbe | 690 | " with VRF %u(%s)\n", |
996c9314 | 691 | ns->name, vrf2->vrf_id, vrf2->name); |
e26aedbe | 692 | else |
0351a28f | 693 | zlog_info("NS %s is already configured with VRF %u(%s)", |
e26aedbe PG |
694 | ns->name, vrf2->vrf_id, vrf2->name); |
695 | return CMD_WARNING_CONFIG_FAILED; | |
696 | } | |
697 | ns = ns_get_created(ns, pathname, ns_id); | |
03aff2d8 | 698 | ns->internal_ns_id = internal_ns_id; |
e26aedbe PG |
699 | ns->vrf_ctxt = (void *)vrf; |
700 | vrf->ns_ctxt = (void *)ns; | |
701 | /* update VRF netns NAME */ | |
2e1cc436 | 702 | strlcpy(vrf->data.l.netns_name, basename(pathname), NS_NAMSIZ); |
e26aedbe PG |
703 | |
704 | if (!ns_enable(ns, vrf_update_vrf_id)) { | |
705 | if (vty) | |
706 | vty_out(vty, "Can not associate NS %u with NETNS %s\n", | |
996c9314 | 707 | ns->ns_id, ns->name); |
e26aedbe | 708 | else |
0351a28f | 709 | zlog_info("Can not associate NS %u with NETNS %s", |
e26aedbe PG |
710 | ns->ns_id, ns->name); |
711 | return CMD_WARNING_CONFIG_FAILED; | |
712 | } | |
713 | ||
714 | return CMD_SUCCESS; | |
715 | } | |
716 | ||
3d4c0b49 | 717 | int vrf_is_mapped_on_netns(struct vrf *vrf) |
ce1be369 | 718 | { |
ce1be369 PG |
719 | if (!vrf || vrf->data.l.netns_name[0] == '\0') |
720 | return 0; | |
ce1be369 PG |
721 | return 1; |
722 | } | |
723 | ||
697d3ec7 | 724 | /* vrf CLI commands */ |
16d6ea59 QY |
725 | DEFUN_NOSH(vrf_exit, |
726 | vrf_exit_cmd, | |
727 | "exit-vrf", | |
728 | "Exit current mode and down to previous mode\n") | |
729 | { | |
730 | /* We have to set vrf context to default vrf */ | |
731 | VTY_PUSH_CONTEXT(VRF_NODE, vrf_get(VRF_DEFAULT, VRF_DEFAULT_NAME)); | |
732 | vty->node = CONFIG_NODE; | |
733 | return CMD_SUCCESS; | |
734 | } | |
735 | ||
697d3ec7 PG |
736 | DEFUN_NOSH (vrf, |
737 | vrf_cmd, | |
738 | "vrf NAME", | |
739 | "Select a VRF to configure\n" | |
740 | "VRF's name\n") | |
741 | { | |
742 | int idx_name = 1; | |
743 | const char *vrfname = argv[idx_name]->arg; | |
744 | ||
745 | return vrf_handler_create(vty, vrfname, NULL); | |
746 | } | |
747 | ||
34c46274 RW |
748 | DEFUN (no_vrf, |
749 | no_vrf_cmd, | |
750 | "no vrf NAME", | |
751 | NO_STR | |
752 | "Delete a pseudo VRF's configuration\n" | |
753 | "VRF's name\n") | |
f30c50b9 | 754 | { |
d62a17ae | 755 | const char *vrfname = argv[2]->arg; |
53dc2b05 | 756 | |
d62a17ae | 757 | struct vrf *vrfp; |
f30c50b9 | 758 | |
d62a17ae | 759 | vrfp = vrf_lookup_by_name(vrfname); |
f30c50b9 | 760 | |
d62a17ae | 761 | if (vrfp == NULL) { |
762 | vty_out(vty, "%% VRF %s does not exist\n", vrfname); | |
763 | return CMD_WARNING_CONFIG_FAILED; | |
764 | } | |
f30c50b9 | 765 | |
d62a17ae | 766 | if (CHECK_FLAG(vrfp->status, VRF_ACTIVE)) { |
767 | vty_out(vty, "%% Only inactive VRFs can be deleted\n"); | |
768 | return CMD_WARNING_CONFIG_FAILED; | |
769 | } | |
f30c50b9 | 770 | |
84915b0a | 771 | /* Clear configured flag and invoke delete. */ |
772 | UNSET_FLAG(vrfp->status, VRF_CONFIGURED); | |
d62a17ae | 773 | vrf_delete(vrfp); |
f30c50b9 | 774 | |
d62a17ae | 775 | return CMD_SUCCESS; |
f30c50b9 RW |
776 | } |
777 | ||
53dc2b05 | 778 | |
d62a17ae | 779 | struct cmd_node vrf_node = {VRF_NODE, "%s(config-vrf)# ", 1}; |
7ddcfca4 | 780 | |
34c46274 | 781 | DEFUN_NOSH (vrf_netns, |
4a541e8c PG |
782 | vrf_netns_cmd, |
783 | "netns NAME", | |
784 | "Attach VRF to a Namespace\n" | |
785 | "The file name in " NS_RUN_DIR ", or a full pathname\n") | |
e26aedbe | 786 | { |
3bc34908 | 787 | int idx_name = 1, ret; |
e26aedbe PG |
788 | char *pathname = ns_netns_pathname(vty, argv[idx_name]->arg); |
789 | ||
790 | VTY_DECLVAR_CONTEXT(vrf, vrf); | |
791 | ||
792 | if (!pathname) | |
793 | return CMD_WARNING_CONFIG_FAILED; | |
3bc34908 | 794 | |
6bb30c2c DL |
795 | frr_elevate_privs(vrf_daemon_privs) { |
796 | ret = vrf_netns_handler_create(vty, vrf, pathname, | |
797 | NS_UNKNOWN, NS_UNKNOWN); | |
798 | } | |
3bc34908 | 799 | return ret; |
e26aedbe PG |
800 | } |
801 | ||
34c46274 | 802 | DEFUN_NOSH (no_vrf_netns, |
e26aedbe PG |
803 | no_vrf_netns_cmd, |
804 | "no netns [NAME]", | |
805 | NO_STR | |
806 | "Detach VRF from a Namespace\n" | |
807 | "The file name in " NS_RUN_DIR ", or a full pathname\n") | |
808 | { | |
809 | struct ns *ns = NULL; | |
810 | ||
811 | VTY_DECLVAR_CONTEXT(vrf, vrf); | |
812 | ||
813 | if (!vrf_is_backend_netns()) { | |
814 | vty_out(vty, "VRF backend is not Netns. Aborting\n"); | |
815 | return CMD_WARNING_CONFIG_FAILED; | |
816 | } | |
817 | if (!vrf->ns_ctxt) { | |
818 | vty_out(vty, "VRF %s(%u) is not configured with NetNS\n", | |
819 | vrf->name, vrf->vrf_id); | |
820 | return CMD_WARNING_CONFIG_FAILED; | |
821 | } | |
822 | ||
823 | ns = (struct ns *)vrf->ns_ctxt; | |
824 | ||
825 | ns->vrf_ctxt = NULL; | |
826 | vrf_disable(vrf); | |
827 | /* vrf ID from VRF is necessary for Zebra | |
828 | * so that propagate to other clients is done | |
829 | */ | |
830 | ns_delete(ns); | |
831 | vrf->ns_ctxt = NULL; | |
832 | return CMD_SUCCESS; | |
833 | } | |
834 | ||
19dc275e DS |
835 | /* |
836 | * Debug CLI for vrf's | |
837 | */ | |
838 | DEFUN (vrf_debug, | |
839 | vrf_debug_cmd, | |
840 | "debug vrf", | |
841 | DEBUG_STR | |
842 | "VRF Debugging\n") | |
843 | { | |
d62a17ae | 844 | debug_vrf = 1; |
19dc275e | 845 | |
d62a17ae | 846 | return CMD_SUCCESS; |
19dc275e DS |
847 | } |
848 | ||
849 | DEFUN (no_vrf_debug, | |
850 | no_vrf_debug_cmd, | |
851 | "no debug vrf", | |
852 | NO_STR | |
853 | DEBUG_STR | |
854 | "VRF Debugging\n") | |
855 | { | |
d62a17ae | 856 | debug_vrf = 0; |
19dc275e | 857 | |
d62a17ae | 858 | return CMD_SUCCESS; |
19dc275e DS |
859 | } |
860 | ||
d62a17ae | 861 | static int vrf_write_host(struct vty *vty) |
19dc275e | 862 | { |
d62a17ae | 863 | if (debug_vrf) |
864 | vty_out(vty, "debug vrf\n"); | |
19dc275e | 865 | |
d62a17ae | 866 | return 1; |
19dc275e DS |
867 | } |
868 | ||
d62a17ae | 869 | static struct cmd_node vrf_debug_node = {VRF_DEBUG_NODE, "", 1}; |
19dc275e | 870 | |
d62a17ae | 871 | void vrf_install_commands(void) |
19dc275e | 872 | { |
d62a17ae | 873 | install_node(&vrf_debug_node, vrf_write_host); |
19dc275e | 874 | |
d62a17ae | 875 | install_element(CONFIG_NODE, &vrf_debug_cmd); |
876 | install_element(ENABLE_NODE, &vrf_debug_cmd); | |
877 | install_element(CONFIG_NODE, &no_vrf_debug_cmd); | |
878 | install_element(ENABLE_NODE, &no_vrf_debug_cmd); | |
19dc275e | 879 | } |
53dc2b05 | 880 | |
3bc34908 PG |
881 | void vrf_cmd_init(int (*writefunc)(struct vty *vty), |
882 | struct zebra_privs_t *daemon_privs) | |
7ddcfca4 | 883 | { |
d62a17ae | 884 | install_element(CONFIG_NODE, &vrf_cmd); |
885 | install_element(CONFIG_NODE, &no_vrf_cmd); | |
886 | install_node(&vrf_node, writefunc); | |
887 | install_default(VRF_NODE); | |
16d6ea59 | 888 | install_element(VRF_NODE, &vrf_exit_cmd); |
e26aedbe PG |
889 | if (vrf_is_backend_netns() && ns_have_netns()) { |
890 | /* Install NS commands. */ | |
3bc34908 | 891 | vrf_daemon_privs = daemon_privs; |
e26aedbe PG |
892 | install_element(VRF_NODE, &vrf_netns_cmd); |
893 | install_element(VRF_NODE, &no_vrf_netns_cmd); | |
894 | } | |
19dc275e | 895 | } |
ec31f30d | 896 | |
4fe52e76 | 897 | void vrf_set_default_name(const char *default_name, bool force) |
ec31f30d | 898 | { |
c200f5e1 | 899 | struct vrf *def_vrf; |
dd114702 | 900 | struct vrf *vrf_with_default_name = NULL; |
4fe52e76 | 901 | static bool def_vrf_forced; |
ec31f30d | 902 | |
c200f5e1 PG |
903 | def_vrf = vrf_lookup_by_id(VRF_DEFAULT); |
904 | assert(default_name); | |
4fe52e76 PG |
905 | if (def_vrf && !force && def_vrf_forced) { |
906 | zlog_debug("VRF: %s, avoid changing name to %s, previously forced (%u)", | |
907 | def_vrf->name, default_name, | |
908 | def_vrf->vrf_id); | |
909 | return; | |
910 | } | |
c200f5e1 PG |
911 | if (vrf_with_default_name && vrf_with_default_name != def_vrf) { |
912 | /* vrf name already used by an other VRF */ | |
913 | zlog_debug("VRF: %s, avoid changing name to %s, same name exists (%u)", | |
914 | vrf_with_default_name->name, default_name, | |
915 | vrf_with_default_name->vrf_id); | |
916 | return; | |
917 | } | |
918 | snprintf(vrf_default_name, VRF_NAMSIZ, "%s", default_name); | |
919 | if (def_vrf) { | |
4fe52e76 PG |
920 | if (force) |
921 | def_vrf_forced = true; | |
c200f5e1 PG |
922 | RB_REMOVE(vrf_name_head, &vrfs_by_name, def_vrf); |
923 | strlcpy(def_vrf->data.l.netns_name, | |
924 | vrf_default_name, NS_NAMSIZ); | |
925 | strlcpy(def_vrf->name, vrf_default_name, sizeof(def_vrf->name)); | |
926 | RB_INSERT(vrf_name_head, &vrfs_by_name, def_vrf); | |
ecbc5a37 PG |
927 | if (vrf_master.vrf_update_name_hook) |
928 | (*vrf_master.vrf_update_name_hook)(def_vrf); | |
c200f5e1 PG |
929 | } |
930 | } | |
931 | ||
932 | const char *vrf_get_default_name(void) | |
933 | { | |
934 | return vrf_default_name; | |
935 | } | |
936 | ||
937 | vrf_id_t vrf_get_default_id(void) | |
938 | { | |
03aff2d8 PG |
939 | /* backend netns is only known by zebra |
940 | * for other daemons, we return VRF_DEFAULT_INTERNAL | |
941 | */ | |
ec31f30d PG |
942 | if (vrf_is_backend_netns()) |
943 | return ns_get_default_id(); | |
944 | else | |
945 | return VRF_DEFAULT_INTERNAL; | |
946 | } | |
2e0d2b3d | 947 | |
0f4977c6 PG |
948 | int vrf_bind(vrf_id_t vrf_id, int fd, char *name) |
949 | { | |
950 | int ret = 0; | |
951 | ||
952 | if (fd < 0 || name == NULL) | |
953 | return fd; | |
3d4c0b49 | 954 | if (vrf_is_mapped_on_netns(vrf_lookup_by_id(vrf_id))) |
0f4977c6 PG |
955 | return fd; |
956 | #ifdef SO_BINDTODEVICE | |
c9c70dd1 | 957 | ret = setsockopt(fd, SOL_SOCKET, SO_BINDTODEVICE, name, strlen(name)+1); |
0f4977c6 | 958 | if (ret < 0) |
996c9314 LB |
959 | zlog_debug("bind to interface %s failed, errno=%d", name, |
960 | errno); | |
0f4977c6 PG |
961 | #endif /* SO_BINDTODEVICE */ |
962 | return ret; | |
963 | } | |
2e0d2b3d | 964 | int vrf_getaddrinfo(const char *node, const char *service, |
996c9314 LB |
965 | const struct addrinfo *hints, struct addrinfo **res, |
966 | vrf_id_t vrf_id) | |
2e0d2b3d PG |
967 | { |
968 | int ret, ret2, save_errno; | |
969 | ||
970 | ret = vrf_switch_to_netns(vrf_id); | |
971 | if (ret < 0) | |
450971aa | 972 | flog_err_sys(EC_LIB_SOCKET, "%s: Can't switch to VRF %u (%s)", |
09c866e3 | 973 | __func__, vrf_id, safe_strerror(errno)); |
2e0d2b3d PG |
974 | ret = getaddrinfo(node, service, hints, res); |
975 | save_errno = errno; | |
976 | ret2 = vrf_switchback_to_initial(); | |
977 | if (ret2 < 0) | |
450971aa | 978 | flog_err_sys(EC_LIB_SOCKET, |
09c866e3 QY |
979 | "%s: Can't switchback from VRF %u (%s)", __func__, |
980 | vrf_id, safe_strerror(errno)); | |
2e0d2b3d PG |
981 | errno = save_errno; |
982 | return ret; | |
983 | } | |
984 | ||
516d7591 PG |
985 | int vrf_ioctl(vrf_id_t vrf_id, int d, unsigned long request, char *params) |
986 | { | |
987 | int ret, saved_errno, rc; | |
988 | ||
989 | ret = vrf_switch_to_netns(vrf_id); | |
990 | if (ret < 0) { | |
450971aa | 991 | flog_err_sys(EC_LIB_SOCKET, "%s: Can't switch to VRF %u (%s)", |
09c866e3 | 992 | __func__, vrf_id, safe_strerror(errno)); |
516d7591 PG |
993 | return 0; |
994 | } | |
995 | rc = ioctl(d, request, params); | |
996 | saved_errno = errno; | |
997 | ret = vrf_switchback_to_initial(); | |
998 | if (ret < 0) | |
450971aa | 999 | flog_err_sys(EC_LIB_SOCKET, |
09c866e3 QY |
1000 | "%s: Can't switchback from VRF %u (%s)", __func__, |
1001 | vrf_id, safe_strerror(errno)); | |
516d7591 PG |
1002 | errno = saved_errno; |
1003 | return rc; | |
1004 | } | |
1005 | ||
0f4977c6 PG |
1006 | int vrf_sockunion_socket(const union sockunion *su, vrf_id_t vrf_id, |
1007 | char *interfacename) | |
2e0d2b3d PG |
1008 | { |
1009 | int ret, save_errno, ret2; | |
1010 | ||
1011 | ret = vrf_switch_to_netns(vrf_id); | |
1012 | if (ret < 0) | |
450971aa | 1013 | flog_err_sys(EC_LIB_SOCKET, "%s: Can't switch to VRF %u (%s)", |
09c866e3 | 1014 | __func__, vrf_id, safe_strerror(errno)); |
2e0d2b3d PG |
1015 | ret = sockunion_socket(su); |
1016 | save_errno = errno; | |
1017 | ret2 = vrf_switchback_to_initial(); | |
1018 | if (ret2 < 0) | |
450971aa | 1019 | flog_err_sys(EC_LIB_SOCKET, |
09c866e3 QY |
1020 | "%s: Can't switchback from VRF %u (%s)", __func__, |
1021 | vrf_id, safe_strerror(errno)); | |
2e0d2b3d | 1022 | errno = save_errno; |
0f4977c6 PG |
1023 | |
1024 | if (ret <= 0) | |
1025 | return ret; | |
1026 | ret2 = vrf_bind(vrf_id, ret, interfacename); | |
1027 | if (ret2 < 0) { | |
1028 | close(ret); | |
1029 | ret = ret2; | |
1030 | } | |
2e0d2b3d PG |
1031 | return ret; |
1032 | } | |
0b014ea6 PG |
1033 | |
1034 | vrf_id_t vrf_generate_id(void) | |
1035 | { | |
1036 | static int vrf_id_local; | |
1037 | ||
1038 | return ++vrf_id_local; | |
1039 | } |