]> git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/blame - net/ipv6/route.c
projects / mirror_ubuntu-artful-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
xfrm: Handle blackhole route creation via afinfo.
[mirror_ubuntu-artful-kernel.git] / net / ipv6 / route.c
CommitLineData
1da177e4
LT		 1/*
2 * Linux INET6 implementation
3 * FIB front-end.
4 *
5 * Authors:
1ab1457c 6 * Pedro Roque <roque@di.fc.ul.pt>
1da177e4 7 *
1da177e4
LT		 8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License
10 * as published by the Free Software Foundation; either version
11 * 2 of the License, or (at your option) any later version.
12 */
13
14/* Changes:
15 *
16 * YOSHIFUJI Hideaki @USAGI
17 * reworked default router selection.
18 * - respect outgoing interface
19 * - select from (probably) reachable routers (i.e.
20 * routers in REACHABLE, STALE, DELAY or PROBE states).
21 * - always select the same router if it is (probably)
22 * reachable. otherwise, round-robin the list.
c0bece9f
YH		 23 * Ville Nuorvala
24 * Fixed routing subtrees.
1da177e4
LT		 25 */
26
4fc268d2 27#include <linux/capability.h>
1da177e4
LT		 28#include <linux/errno.h>
29#include <linux/types.h>
30#include <linux/times.h>
31#include <linux/socket.h>
32#include <linux/sockios.h>
33#include <linux/net.h>
34#include <linux/route.h>
35#include <linux/netdevice.h>
36#include <linux/in6.h>
7bc570c8 37#include <linux/mroute6.h>
1da177e4 38#include <linux/init.h>
1da177e4 39#include <linux/if_arp.h>
1da177e4
LT		 40#include <linux/proc_fs.h>
41#include <linux/seq_file.h>
5b7c931d 42#include <linux/nsproxy.h>
5a0e3ad6 43#include <linux/slab.h>
457c4cbc 44#include <net/net_namespace.h>
1da177e4
LT		 45#include <net/snmp.h>
46#include <net/ipv6.h>
47#include <net/ip6_fib.h>
48#include <net/ip6_route.h>
49#include <net/ndisc.h>
50#include <net/addrconf.h>
51#include <net/tcp.h>
52#include <linux/rtnetlink.h>
53#include <net/dst.h>
54#include <net/xfrm.h>
8d71740c 55#include <net/netevent.h>
21713ebc 56#include <net/netlink.h>
1da177e4
LT		 57
58#include <asm/uaccess.h>
59
60#ifdef CONFIG_SYSCTL
61#include <linux/sysctl.h>
62#endif
63
64/* Set to 3 to get tracing. */
65#define RT6_DEBUG 2
66
67#if RT6_DEBUG >= 3
68#define RDBG(x) printk x
69#define RT6_TRACE(x...) printk(KERN_DEBUG x)
70#else
71#define RDBG(x)
72#define RT6_TRACE(x...) do { ; } while (0)
73#endif
74
1da177e4
LT		 75static struct rt6_info * ip6_rt_copy(struct rt6_info *ort);
76static struct dst_entry *ip6_dst_check(struct dst_entry *dst, u32 cookie);
0dbaee3b 77static unsigned int ip6_default_advmss(const struct dst_entry *dst);
d33e4553 78static unsigned int ip6_default_mtu(const struct dst_entry *dst);
1da177e4
LT		 79static struct dst_entry *ip6_negative_advice(struct dst_entry *);
80static void ip6_dst_destroy(struct dst_entry *);
81static void ip6_dst_ifdown(struct dst_entry *,
82 struct net_device *dev, int how);
569d3645 83static int ip6_dst_gc(struct dst_ops *ops);
1da177e4
LT		 84
85static int ip6_pkt_discard(struct sk_buff *skb);
86static int ip6_pkt_discard_out(struct sk_buff *skb);
87static void ip6_link_failure(struct sk_buff *skb);
88static void ip6_rt_update_pmtu(struct dst_entry *dst, u32 mtu);
89
70ceb4f5 90#ifdef CONFIG_IPV6_ROUTE_INFO
efa2cea0
DL		 91static struct rt6_info *rt6_add_route_info(struct net *net,
92 struct in6_addr *prefix, int prefixlen,
70ceb4f5
YH		 93 struct in6_addr *gwaddr, int ifindex,
94 unsigned pref);
efa2cea0
DL		 95static struct rt6_info *rt6_get_route_info(struct net *net,
96 struct in6_addr *prefix, int prefixlen,
70ceb4f5
YH		 97 struct in6_addr *gwaddr, int ifindex);
98#endif
99
06582540
DM		 100static u32 *ipv6_cow_metrics(struct dst_entry *dst, unsigned long old)
101{
102 struct rt6_info *rt = (struct rt6_info *) dst;
103 struct inet_peer *peer;
104 u32 *p = NULL;
105
106 if (!rt->rt6i_peer)
107 rt6_bind_peer(rt, 1);
108
109 peer = rt->rt6i_peer;
110 if (peer) {
111 u32 *old_p = __DST_METRICS_PTR(old);
112 unsigned long prev, new;
113
114 p = peer->metrics;
115 if (inet_metrics_new(peer))
116 memcpy(p, old_p, sizeof(u32) * RTAX_MAX);
117
118 new = (unsigned long) p;
119 prev = cmpxchg(&dst->_metrics, old, new);
120
121 if (prev != old) {
122 p = __DST_METRICS_PTR(prev);
123 if (prev & DST_METRICS_READ_ONLY)
124 p = NULL;
125 }
126 }
127 return p;
128}
129
9a7ec3a9 130static struct dst_ops ip6_dst_ops_template = {
1da177e4 131 .family = AF_INET6,
09640e63 132 .protocol = cpu_to_be16(ETH_P_IPV6),
1da177e4
LT		 133 .gc = ip6_dst_gc,
134 .gc_thresh = 1024,
135 .check = ip6_dst_check,
0dbaee3b 136 .default_advmss = ip6_default_advmss,
d33e4553 137 .default_mtu = ip6_default_mtu,
06582540 138 .cow_metrics = ipv6_cow_metrics,
1da177e4
LT		 139 .destroy = ip6_dst_destroy,
140 .ifdown = ip6_dst_ifdown,
141 .negative_advice = ip6_negative_advice,
142 .link_failure = ip6_link_failure,
143 .update_pmtu = ip6_rt_update_pmtu,
1ac06e03 144 .local_out = __ip6_local_out,
1da177e4
LT		 145};
146
ec831ea7
RD		 147static unsigned int ip6_blackhole_default_mtu(const struct dst_entry *dst)
148{
149 return 0;
150}
151
14e50e57
DM		 152static void ip6_rt_blackhole_update_pmtu(struct dst_entry *dst, u32 mtu)
153{
154}
155
156static struct dst_ops ip6_dst_blackhole_ops = {
157 .family = AF_INET6,
09640e63 158 .protocol = cpu_to_be16(ETH_P_IPV6),
14e50e57
DM		 159 .destroy = ip6_dst_destroy,
160 .check = ip6_dst_check,
ec831ea7 161 .default_mtu = ip6_blackhole_default_mtu,
214f45c9 162 .default_advmss = ip6_default_advmss,
14e50e57 163 .update_pmtu = ip6_rt_blackhole_update_pmtu,
14e50e57
DM		 164};
165
62fa8a84
DM		 166static const u32 ip6_template_metrics[RTAX_MAX] = {
167 [RTAX_HOPLIMIT - 1] = 255,
168};
169
bdb3289f 170static struct rt6_info ip6_null_entry_template = {
d8d1f30b
CG		 171 .dst = {
172 .__refcnt = ATOMIC_INIT(1),
173 .__use = 1,
174 .obsolete = -1,
175 .error = -ENETUNREACH,
d8d1f30b
CG		 176 .input = ip6_pkt_discard,
177 .output = ip6_pkt_discard_out,
1da177e4
LT		 178 },
179 .rt6i_flags = (RTF_REJECT | RTF_NONEXTHOP),
4f724279 180 .rt6i_protocol = RTPROT_KERNEL,
1da177e4
LT		 181 .rt6i_metric = ~(u32) 0,
182 .rt6i_ref = ATOMIC_INIT(1),
183};
184
101367c2
TG		 185#ifdef CONFIG_IPV6_MULTIPLE_TABLES
186
6723ab54
DM		 187static int ip6_pkt_prohibit(struct sk_buff *skb);
188static int ip6_pkt_prohibit_out(struct sk_buff *skb);
6723ab54 189
280a34c8 190static struct rt6_info ip6_prohibit_entry_template = {
d8d1f30b
CG		 191 .dst = {
192 .__refcnt = ATOMIC_INIT(1),
193 .__use = 1,
194 .obsolete = -1,
195 .error = -EACCES,
d8d1f30b
CG		 196 .input = ip6_pkt_prohibit,
197 .output = ip6_pkt_prohibit_out,
101367c2
TG		 198 },
199 .rt6i_flags = (RTF_REJECT | RTF_NONEXTHOP),
4f724279 200 .rt6i_protocol = RTPROT_KERNEL,
101367c2
TG		 201 .rt6i_metric = ~(u32) 0,
202 .rt6i_ref = ATOMIC_INIT(1),
203};
204
bdb3289f 205static struct rt6_info ip6_blk_hole_entry_template = {
d8d1f30b
CG		 206 .dst = {
207 .__refcnt = ATOMIC_INIT(1),
208 .__use = 1,
209 .obsolete = -1,
210 .error = -EINVAL,
d8d1f30b
CG		 211 .input = dst_discard,
212 .output = dst_discard,
101367c2
TG		 213 },
214 .rt6i_flags = (RTF_REJECT | RTF_NONEXTHOP),
4f724279 215 .rt6i_protocol = RTPROT_KERNEL,
101367c2
TG		 216 .rt6i_metric = ~(u32) 0,
217 .rt6i_ref = ATOMIC_INIT(1),
218};
219
220#endif
221
1da177e4 222/* allocate dst with ip6_dst_ops */
f2fc6a54 223static inline struct rt6_info *ip6_dst_alloc(struct dst_ops *ops)
1da177e4 224{
3c7bd1a1 225 return (struct rt6_info *)dst_alloc(ops, 0);
1da177e4
LT		 226}
227
228static void ip6_dst_destroy(struct dst_entry *dst)
229{
230 struct rt6_info *rt = (struct rt6_info *)dst;
231 struct inet6_dev *idev = rt->rt6i_idev;
b3419363 232 struct inet_peer *peer = rt->rt6i_peer;
1da177e4
LT		 233
234 if (idev != NULL) {
235 rt->rt6i_idev = NULL;
236 in6_dev_put(idev);
1ab1457c 237 }
b3419363 238 if (peer) {
b3419363
DM		 239 rt->rt6i_peer = NULL;
240 inet_putpeer(peer);
241 }
242}
243
6431cbc2
DM		 244static atomic_t __rt6_peer_genid = ATOMIC_INIT(0);
245
246static u32 rt6_peer_genid(void)
247{
248 return atomic_read(&__rt6_peer_genid);
249}
250
b3419363
DM		 251void rt6_bind_peer(struct rt6_info *rt, int create)
252{
253 struct inet_peer *peer;
254
b3419363
DM		 255 peer = inet_getpeer_v6(&rt->rt6i_dst.addr, create);
256 if (peer && cmpxchg(&rt->rt6i_peer, NULL, peer) != NULL)
257 inet_putpeer(peer);
6431cbc2
DM		 258 else
259 rt->rt6i_peer_genid = rt6_peer_genid();
1da177e4
LT		 260}
261
262static void ip6_dst_ifdown(struct dst_entry *dst, struct net_device *dev,
263 int how)
264{
265 struct rt6_info *rt = (struct rt6_info *)dst;
266 struct inet6_dev *idev = rt->rt6i_idev;
5a3e55d6 267 struct net_device *loopback_dev =
c346dca1 268 dev_net(dev)->loopback_dev;
1da177e4 269
5a3e55d6
DL		 270 if (dev != loopback_dev && idev != NULL && idev->dev == dev) {
271 struct inet6_dev *loopback_idev =
272 in6_dev_get(loopback_dev);
1da177e4
LT		 273 if (loopback_idev != NULL) {
274 rt->rt6i_idev = loopback_idev;
275 in6_dev_put(idev);
276 }
277 }
278}
279
280static __inline__ int rt6_check_expired(const struct rt6_info *rt)
281{
a02cec21
ED		 282 return (rt->rt6i_flags & RTF_EXPIRES) &&
283 time_after(jiffies, rt->rt6i_expires);
1da177e4
LT		 284}
285
c71099ac
TG		 286static inline int rt6_need_strict(struct in6_addr *daddr)
287{
a02cec21
ED		 288 return ipv6_addr_type(daddr) &
289 (IPV6_ADDR_MULTICAST | IPV6_ADDR_LINKLOCAL | IPV6_ADDR_LOOPBACK);
c71099ac
TG		 290}
291
1da177e4 292/*
c71099ac 293 * Route lookup. Any table->tb6_lock is implied.
1da177e4
LT		 294 */
295
8ed67789
DL		 296static inline struct rt6_info *rt6_device_match(struct net *net,
297 struct rt6_info *rt,
dd3abc4e 298 struct in6_addr *saddr,
1da177e4 299 int oif,
d420895e 300 int flags)
1da177e4
LT		 301{
302 struct rt6_info *local = NULL;
303 struct rt6_info *sprt;
304
dd3abc4e
YH		 305 if (!oif && ipv6_addr_any(saddr))
306 goto out;
307
d8d1f30b 308 for (sprt = rt; sprt; sprt = sprt->dst.rt6_next) {
dd3abc4e
YH		 309 struct net_device *dev = sprt->rt6i_dev;
310
311 if (oif) {
1da177e4
LT		 312 if (dev->ifindex == oif)
313 return sprt;
314 if (dev->flags & IFF_LOOPBACK) {
315 if (sprt->rt6i_idev == NULL ||
316 sprt->rt6i_idev->dev->ifindex != oif) {
d420895e 317 if (flags & RT6_LOOKUP_F_IFACE && oif)
1da177e4 318 continue;
1ab1457c 319 if (local && (!oif ||
1da177e4
LT		 320 local->rt6i_idev->dev->ifindex == oif))
321 continue;
322 }
323 local = sprt;
324 }
dd3abc4e
YH		 325 } else {
326 if (ipv6_chk_addr(net, saddr, dev,
327 flags & RT6_LOOKUP_F_IFACE))
328 return sprt;
1da177e4 329 }
dd3abc4e 330 }
1da177e4 331
dd3abc4e 332 if (oif) {
1da177e4
LT		 333 if (local)
334 return local;
335
d420895e 336 if (flags & RT6_LOOKUP_F_IFACE)
8ed67789 337 return net->ipv6.ip6_null_entry;
1da177e4 338 }
dd3abc4e 339out:
1da177e4
LT		 340 return rt;
341}
342
27097255
YH		 343#ifdef CONFIG_IPV6_ROUTER_PREF
344static void rt6_probe(struct rt6_info *rt)
345{
346 struct neighbour *neigh = rt ? rt->rt6i_nexthop : NULL;
347 /*
348 * Okay, this does not seem to be appropriate
349 * for now, however, we need to check if it
350 * is really so; aka Router Reachability Probing.
351 *
352 * Router Reachability Probe MUST be rate-limited
353 * to no more than one per minute.
354 */
355 if (!neigh || (neigh->nud_state & NUD_VALID))
356 return;
357 read_lock_bh(&neigh->lock);
358 if (!(neigh->nud_state & NUD_VALID) &&
52e16356 359 time_after(jiffies, neigh->updated + rt->rt6i_idev->cnf.rtr_probe_interval)) {
27097255
YH		 360 struct in6_addr mcaddr;
361 struct in6_addr *target;
362
363 neigh->updated = jiffies;
364 read_unlock_bh(&neigh->lock);
365
366 target = (struct in6_addr *)&neigh->primary_key;
367 addrconf_addr_solict_mult(target, &mcaddr);
368 ndisc_send_ns(rt->rt6i_dev, NULL, target, &mcaddr, NULL);
369 } else
370 read_unlock_bh(&neigh->lock);
371}
372#else
373static inline void rt6_probe(struct rt6_info *rt)
374{
27097255
YH		 375}
376#endif
377
1da177e4 378/*
554cfb7e 379 * Default Router Selection (RFC 2461 6.3.6)
1da177e4 380 */
b6f99a21 381static inline int rt6_check_dev(struct rt6_info *rt, int oif)
554cfb7e
YH		 382{
383 struct net_device *dev = rt->rt6i_dev;
161980f4 384 if (!oif || dev->ifindex == oif)
554cfb7e 385 return 2;
161980f4
DM		 386 if ((dev->flags & IFF_LOOPBACK) &&
387 rt->rt6i_idev && rt->rt6i_idev->dev->ifindex == oif)
388 return 1;
389 return 0;
554cfb7e 390}
1da177e4 391
b6f99a21 392static inline int rt6_check_neigh(struct rt6_info *rt)
1da177e4 393{
554cfb7e 394 struct neighbour *neigh = rt->rt6i_nexthop;
398bcbeb 395 int m;
4d0c5911
YH		 396 if (rt->rt6i_flags & RTF_NONEXTHOP ||
397 !(rt->rt6i_flags & RTF_GATEWAY))
398 m = 1;
399 else if (neigh) {
554cfb7e
YH		 400 read_lock_bh(&neigh->lock);
401 if (neigh->nud_state & NUD_VALID)
4d0c5911 402 m = 2;
398bcbeb
YH		 403#ifdef CONFIG_IPV6_ROUTER_PREF
404 else if (neigh->nud_state & NUD_FAILED)
405 m = 0;
406#endif
407 else
ea73ee23 408 m = 1;
554cfb7e 409 read_unlock_bh(&neigh->lock);
398bcbeb
YH		 410 } else
411 m = 0;
554cfb7e 412 return m;
1da177e4
LT		 413}
414
554cfb7e
YH		 415static int rt6_score_route(struct rt6_info *rt, int oif,
416 int strict)
1da177e4 417{
4d0c5911 418 int m, n;
1ab1457c 419
4d0c5911 420 m = rt6_check_dev(rt, oif);
77d16f45 421 if (!m && (strict & RT6_LOOKUP_F_IFACE))
554cfb7e 422 return -1;
ebacaaa0
YH		 423#ifdef CONFIG_IPV6_ROUTER_PREF
424 m |= IPV6_DECODE_PREF(IPV6_EXTRACT_PREF(rt->rt6i_flags)) << 2;
425#endif
4d0c5911 426 n = rt6_check_neigh(rt);
557e92ef 427 if (!n && (strict & RT6_LOOKUP_F_REACHABLE))
554cfb7e
YH		 428 return -1;
429 return m;
430}
431
f11e6659
DM		 432static struct rt6_info *find_match(struct rt6_info *rt, int oif, int strict,
433 int *mpri, struct rt6_info *match)
554cfb7e 434{
f11e6659
DM		 435 int m;
436
437 if (rt6_check_expired(rt))
438 goto out;
439
440 m = rt6_score_route(rt, oif, strict);
441 if (m < 0)
442 goto out;
443
444 if (m > *mpri) {
445 if (strict & RT6_LOOKUP_F_REACHABLE)
446 rt6_probe(match);
447 *mpri = m;
448 match = rt;
449 } else if (strict & RT6_LOOKUP_F_REACHABLE) {
450 rt6_probe(rt);
451 }
452
453out:
454 return match;
455}
456
457static struct rt6_info *find_rr_leaf(struct fib6_node *fn,
458 struct rt6_info *rr_head,
459 u32 metric, int oif, int strict)
460{
461 struct rt6_info *rt, *match;
554cfb7e 462 int mpri = -1;
1da177e4 463
f11e6659
DM		 464 match = NULL;
465 for (rt = rr_head; rt && rt->rt6i_metric == metric;
d8d1f30b 466 rt = rt->dst.rt6_next)
f11e6659
DM		 467 match = find_match(rt, oif, strict, &mpri, match);
468 for (rt = fn->leaf; rt && rt != rr_head && rt->rt6i_metric == metric;
d8d1f30b 469 rt = rt->dst.rt6_next)
f11e6659 470 match = find_match(rt, oif, strict, &mpri, match);
1da177e4 471
f11e6659
DM		 472 return match;
473}
1da177e4 474
f11e6659
DM		 475static struct rt6_info *rt6_select(struct fib6_node *fn, int oif, int strict)
476{
477 struct rt6_info *match, *rt0;
8ed67789 478 struct net *net;
1da177e4 479
f11e6659 480 RT6_TRACE("%s(fn->leaf=%p, oif=%d)\n",
0dc47877 481 __func__, fn->leaf, oif);
554cfb7e 482
f11e6659
DM		 483 rt0 = fn->rr_ptr;
484 if (!rt0)
485 fn->rr_ptr = rt0 = fn->leaf;
1da177e4 486
f11e6659 487 match = find_rr_leaf(fn, rt0, rt0->rt6i_metric, oif, strict);
1da177e4 488
554cfb7e 489 if (!match &&
f11e6659 490 (strict & RT6_LOOKUP_F_REACHABLE)) {
d8d1f30b 491 struct rt6_info *next = rt0->dst.rt6_next;
f11e6659 492
554cfb7e 493 /* no entries matched; do round-robin */
f11e6659
DM		 494 if (!next || next->rt6i_metric != rt0->rt6i_metric)
495 next = fn->leaf;
496
497 if (next != rt0)
498 fn->rr_ptr = next;
1da177e4 499 }
1da177e4 500
f11e6659 501 RT6_TRACE("%s() => %p\n",
0dc47877 502 __func__, match);
1da177e4 503
c346dca1 504 net = dev_net(rt0->rt6i_dev);
a02cec21 505 return match ? match : net->ipv6.ip6_null_entry;
1da177e4
LT		 506}
507
70ceb4f5
YH		 508#ifdef CONFIG_IPV6_ROUTE_INFO
509int rt6_route_rcv(struct net_device *dev, u8 *opt, int len,
510 struct in6_addr *gwaddr)
511{
c346dca1 512 struct net *net = dev_net(dev);
70ceb4f5
YH		 513 struct route_info *rinfo = (struct route_info *) opt;
514 struct in6_addr prefix_buf, *prefix;
515 unsigned int pref;
4bed72e4 516 unsigned long lifetime;
70ceb4f5
YH		 517 struct rt6_info *rt;
518
519 if (len < sizeof(struct route_info)) {
520 return -EINVAL;
521 }
522
523 /* Sanity check for prefix_len and length */
524 if (rinfo->length > 3) {
525 return -EINVAL;
526 } else if (rinfo->prefix_len > 128) {
527 return -EINVAL;
528 } else if (rinfo->prefix_len > 64) {
529 if (rinfo->length < 2) {
530 return -EINVAL;
531 }
532 } else if (rinfo->prefix_len > 0) {
533 if (rinfo->length < 1) {
534 return -EINVAL;
535 }
536 }
537
538 pref = rinfo->route_pref;
539 if (pref == ICMPV6_ROUTER_PREF_INVALID)
3933fc95 540 return -EINVAL;
70ceb4f5 541
4bed72e4 542 lifetime = addrconf_timeout_fixup(ntohl(rinfo->lifetime), HZ);
70ceb4f5
YH		 543
544 if (rinfo->length == 3)
545 prefix = (struct in6_addr *)rinfo->prefix;
546 else {
547 /* this function is safe */
548 ipv6_addr_prefix(&prefix_buf,
549 (struct in6_addr *)rinfo->prefix,
550 rinfo->prefix_len);
551 prefix = &prefix_buf;
552 }
553
efa2cea0
DL		 554 rt = rt6_get_route_info(net, prefix, rinfo->prefix_len, gwaddr,
555 dev->ifindex);
70ceb4f5
YH		 556
557 if (rt && !lifetime) {
e0a1ad73 558 ip6_del_rt(rt);
70ceb4f5
YH		 559 rt = NULL;
560 }
561
562 if (!rt && lifetime)
efa2cea0 563 rt = rt6_add_route_info(net, prefix, rinfo->prefix_len, gwaddr, dev->ifindex,
70ceb4f5
YH		 564 pref);
565 else if (rt)
566 rt->rt6i_flags = RTF_ROUTEINFO |
567 (rt->rt6i_flags & ~RTF_PREF_MASK) | RTF_PREF(pref);
568
569 if (rt) {
4bed72e4 570 if (!addrconf_finite_timeout(lifetime)) {
70ceb4f5
YH		 571 rt->rt6i_flags &= ~RTF_EXPIRES;
572 } else {
573 rt->rt6i_expires = jiffies + HZ * lifetime;
574 rt->rt6i_flags |= RTF_EXPIRES;
575 }
d8d1f30b 576 dst_release(&rt->dst);
70ceb4f5
YH		 577 }
578 return 0;
579}
580#endif
581
8ed67789 582#define BACKTRACK(__net, saddr) \
982f56f3 583do { \
8ed67789 584 if (rt == __net->ipv6.ip6_null_entry) { \
982f56f3 585 struct fib6_node *pn; \
e0eda7bb 586 while (1) { \
982f56f3
YH		 587 if (fn->fn_flags & RTN_TL_ROOT) \
588 goto out; \
589 pn = fn->parent; \
590 if (FIB6_SUBTREE(pn) && FIB6_SUBTREE(pn) != fn) \
8bce65b9 591 fn = fib6_lookup(FIB6_SUBTREE(pn), NULL, saddr); \
982f56f3
YH		 592 else \
593 fn = pn; \
594 if (fn->fn_flags & RTN_RTINFO) \
595 goto restart; \
c71099ac 596 } \
c71099ac 597 } \
982f56f3 598} while(0)
c71099ac 599
8ed67789
DL		 600static struct rt6_info *ip6_pol_route_lookup(struct net *net,
601 struct fib6_table *table,
c71099ac 602 struct flowi *fl, int flags)
1da177e4
LT		 603{
604 struct fib6_node *fn;
605 struct rt6_info *rt;
606
c71099ac
TG		 607 read_lock_bh(&table->tb6_lock);
608 fn = fib6_lookup(&table->tb6_root, &fl->fl6_dst, &fl->fl6_src);
609restart:
610 rt = fn->leaf;
dd3abc4e 611 rt = rt6_device_match(net, rt, &fl->fl6_src, fl->oif, flags);
8ed67789 612 BACKTRACK(net, &fl->fl6_src);
c71099ac 613out:
d8d1f30b 614 dst_use(&rt->dst, jiffies);
c71099ac 615 read_unlock_bh(&table->tb6_lock);
c71099ac
TG		 616 return rt;
617
618}
619
9acd9f3a
YH		 620struct rt6_info *rt6_lookup(struct net *net, const struct in6_addr *daddr,
621 const struct in6_addr *saddr, int oif, int strict)
c71099ac
TG		 622{
623 struct flowi fl = {
624 .oif = oif,
5811662b 625 .fl6_dst = *daddr,
c71099ac
TG		 626 };
627 struct dst_entry *dst;
77d16f45 628 int flags = strict ? RT6_LOOKUP_F_IFACE : 0;
c71099ac 629
adaa70bb
TG		 630 if (saddr) {
631 memcpy(&fl.fl6_src, saddr, sizeof(*saddr));
632 flags |= RT6_LOOKUP_F_HAS_SADDR;
633 }
634
606a2b48 635 dst = fib6_rule_lookup(net, &fl, flags, ip6_pol_route_lookup);
c71099ac
TG		 636 if (dst->error == 0)
637 return (struct rt6_info *) dst;
638
639 dst_release(dst);
640
1da177e4
LT		 641 return NULL;
642}
643
7159039a
YH		 644EXPORT_SYMBOL(rt6_lookup);
645
c71099ac 646/* ip6_ins_rt is called with FREE table->tb6_lock.
1da177e4
LT		 647 It takes new route entry, the addition fails by any reason the
648 route is freed. In any case, if caller does not hold it, it may
649 be destroyed.
650 */
651
86872cb5 652static int __ip6_ins_rt(struct rt6_info *rt, struct nl_info *info)
1da177e4
LT		 653{
654 int err;
c71099ac 655 struct fib6_table *table;
1da177e4 656
c71099ac
TG		 657 table = rt->rt6i_table;
658 write_lock_bh(&table->tb6_lock);
86872cb5 659 err = fib6_add(&table->tb6_root, rt, info);
c71099ac 660 write_unlock_bh(&table->tb6_lock);
1da177e4
LT		 661
662 return err;
663}
664
40e22e8f
TG		 665int ip6_ins_rt(struct rt6_info *rt)
666{
4d1169c1 667 struct nl_info info = {
c346dca1 668 .nl_net = dev_net(rt->rt6i_dev),
4d1169c1 669 };
528c4ceb 670 return __ip6_ins_rt(rt, &info);
40e22e8f
TG		 671}
672
95a9a5ba
YH		 673static struct rt6_info *rt6_alloc_cow(struct rt6_info *ort, struct in6_addr *daddr,
674 struct in6_addr *saddr)
1da177e4 675{
1da177e4
LT		 676 struct rt6_info *rt;
677
678 /*
679 * Clone the route.
680 */
681
682 rt = ip6_rt_copy(ort);
683
684 if (rt) {
14deae41
DM		 685 struct neighbour *neigh;
686 int attempts = !in_softirq();
687
58c4fb86
YH		 688 if (!(rt->rt6i_flags&RTF_GATEWAY)) {
689 if (rt->rt6i_dst.plen != 128 &&
690 ipv6_addr_equal(&rt->rt6i_dst.addr, daddr))
691 rt->rt6i_flags |= RTF_ANYCAST;
1da177e4 692 ipv6_addr_copy(&rt->rt6i_gateway, daddr);
58c4fb86 693 }
1da177e4 694
58c4fb86 695 ipv6_addr_copy(&rt->rt6i_dst.addr, daddr);
1da177e4
LT		 696 rt->rt6i_dst.plen = 128;
697 rt->rt6i_flags |= RTF_CACHE;
d8d1f30b 698 rt->dst.flags |= DST_HOST;
1da177e4
LT		 699
700#ifdef CONFIG_IPV6_SUBTREES
701 if (rt->rt6i_src.plen && saddr) {
702 ipv6_addr_copy(&rt->rt6i_src.addr, saddr);
703 rt->rt6i_src.plen = 128;
704 }
705#endif
706
14deae41
DM		 707 retry:
708 neigh = ndisc_get_neigh(rt->rt6i_dev, &rt->rt6i_gateway);
709 if (IS_ERR(neigh)) {
710 struct net *net = dev_net(rt->rt6i_dev);
711 int saved_rt_min_interval =
712 net->ipv6.sysctl.ip6_rt_gc_min_interval;
713 int saved_rt_elasticity =
714 net->ipv6.sysctl.ip6_rt_gc_elasticity;
715
716 if (attempts-- > 0) {
717 net->ipv6.sysctl.ip6_rt_gc_elasticity = 1;
718 net->ipv6.sysctl.ip6_rt_gc_min_interval = 0;
719
86393e52 720 ip6_dst_gc(&net->ipv6.ip6_dst_ops);
14deae41
DM		 721
722 net->ipv6.sysctl.ip6_rt_gc_elasticity =
723 saved_rt_elasticity;
724 net->ipv6.sysctl.ip6_rt_gc_min_interval =
725 saved_rt_min_interval;
726 goto retry;
727 }
728
729 if (net_ratelimit())
730 printk(KERN_WARNING
7e1b33e5 731 "ipv6: Neighbour table overflow.\n");
d8d1f30b 732 dst_free(&rt->dst);
14deae41
DM		 733 return NULL;
734 }
735 rt->rt6i_nexthop = neigh;
1da177e4 736
95a9a5ba 737 }
1da177e4 738
95a9a5ba
YH		 739 return rt;
740}
1da177e4 741
299d9939
YH		 742static struct rt6_info *rt6_alloc_clone(struct rt6_info *ort, struct in6_addr *daddr)
743{
744 struct rt6_info *rt = ip6_rt_copy(ort);
745 if (rt) {
746 ipv6_addr_copy(&rt->rt6i_dst.addr, daddr);
747 rt->rt6i_dst.plen = 128;
748 rt->rt6i_flags |= RTF_CACHE;
d8d1f30b 749 rt->dst.flags |= DST_HOST;
299d9939
YH		 750 rt->rt6i_nexthop = neigh_clone(ort->rt6i_nexthop);
751 }
752 return rt;
753}
754
8ed67789
DL		 755static struct rt6_info *ip6_pol_route(struct net *net, struct fib6_table *table, int oif,
756 struct flowi *fl, int flags)
1da177e4
LT		 757{
758 struct fib6_node *fn;
519fbd87 759 struct rt6_info *rt, *nrt;
c71099ac 760 int strict = 0;
1da177e4 761 int attempts = 3;
519fbd87 762 int err;
53b7997f 763 int reachable = net->ipv6.devconf_all->forwarding ? 0 : RT6_LOOKUP_F_REACHABLE;
1da177e4 764
77d16f45 765 strict |= flags & RT6_LOOKUP_F_IFACE;
1da177e4
LT		 766
767relookup:
c71099ac 768 read_lock_bh(&table->tb6_lock);
1da177e4 769
8238dd06 770restart_2:
c71099ac 771 fn = fib6_lookup(&table->tb6_root, &fl->fl6_dst, &fl->fl6_src);
1da177e4
LT		 772
773restart:
4acad72d 774 rt = rt6_select(fn, oif, strict | reachable);
8ed67789
DL		 775
776 BACKTRACK(net, &fl->fl6_src);
777 if (rt == net->ipv6.ip6_null_entry ||
8238dd06 778 rt->rt6i_flags & RTF_CACHE)
1ddef044 779 goto out;
1da177e4 780
d8d1f30b 781 dst_hold(&rt->dst);
c71099ac 782 read_unlock_bh(&table->tb6_lock);
fb9de91e 783
519fbd87 784 if (!rt->rt6i_nexthop && !(rt->rt6i_flags & RTF_NONEXTHOP))
c71099ac 785 nrt = rt6_alloc_cow(rt, &fl->fl6_dst, &fl->fl6_src);
d80bc0fd 786 else
c71099ac 787 nrt = rt6_alloc_clone(rt, &fl->fl6_dst);
e40cf353 788
d8d1f30b 789 dst_release(&rt->dst);
8ed67789 790 rt = nrt ? : net->ipv6.ip6_null_entry;
1da177e4 791
d8d1f30b 792 dst_hold(&rt->dst);
519fbd87 793 if (nrt) {
40e22e8f 794 err = ip6_ins_rt(nrt);
519fbd87 795 if (!err)
1da177e4 796 goto out2;
1da177e4 797 }
1da177e4 798
519fbd87
YH		 799 if (--attempts <= 0)
800 goto out2;
801
802 /*
c71099ac 803 * Race condition! In the gap, when table->tb6_lock was
519fbd87
YH		 804 * released someone could insert this route. Relookup.
805 */
d8d1f30b 806 dst_release(&rt->dst);
519fbd87
YH		 807 goto relookup;
808
809out:
8238dd06
YH		 810 if (reachable) {
811 reachable = 0;
812 goto restart_2;
813 }
d8d1f30b 814 dst_hold(&rt->dst);
c71099ac 815 read_unlock_bh(&table->tb6_lock);
1da177e4 816out2:
d8d1f30b
CG		 817 rt->dst.lastuse = jiffies;
818 rt->dst.__use++;
c71099ac
TG		 819
820 return rt;
1da177e4
LT		 821}
822
8ed67789 823static struct rt6_info *ip6_pol_route_input(struct net *net, struct fib6_table *table,
4acad72d
PE		 824 struct flowi *fl, int flags)
825{
8ed67789 826 return ip6_pol_route(net, table, fl->iif, fl, flags);
4acad72d
PE		 827}
828
c71099ac
TG		 829void ip6_route_input(struct sk_buff *skb)
830{
0660e03f 831 struct ipv6hdr *iph = ipv6_hdr(skb);
c346dca1 832 struct net *net = dev_net(skb->dev);
adaa70bb 833 int flags = RT6_LOOKUP_F_HAS_SADDR;
c71099ac
TG		 834 struct flowi fl = {
835 .iif = skb->dev->ifindex,
5811662b
CG		 836 .fl6_dst = iph->daddr,
837 .fl6_src = iph->saddr,
838 .fl6_flowlabel = (* (__be32 *) iph)&IPV6_FLOWINFO_MASK,
1ab1457c 839 .mark = skb->mark,
c71099ac
TG		 840 .proto = iph->nexthdr,
841 };
adaa70bb 842
1d6e55f1 843 if (rt6_need_strict(&iph->daddr) && skb->dev->type != ARPHRD_PIMREG)
adaa70bb 844 flags |= RT6_LOOKUP_F_IFACE;
c71099ac 845
adf30907 846 skb_dst_set(skb, fib6_rule_lookup(net, &fl, flags, ip6_pol_route_input));
c71099ac
TG		 847}
848
8ed67789 849static struct rt6_info *ip6_pol_route_output(struct net *net, struct fib6_table *table,
c71099ac 850 struct flowi *fl, int flags)
1da177e4 851{
8ed67789 852 return ip6_pol_route(net, table, fl->oif, fl, flags);
c71099ac
TG		 853}
854
4591db4f
DL		 855struct dst_entry * ip6_route_output(struct net *net, struct sock *sk,
856 struct flowi *fl)
c71099ac
TG		 857{
858 int flags = 0;
859
6057fd78 860 if ((sk && sk->sk_bound_dev_if) || rt6_need_strict(&fl->fl6_dst))
77d16f45 861 flags |= RT6_LOOKUP_F_IFACE;
c71099ac 862
adaa70bb
TG		 863 if (!ipv6_addr_any(&fl->fl6_src))
864 flags |= RT6_LOOKUP_F_HAS_SADDR;
0c9a2ac1
YH		 865 else if (sk)
866 flags |= rt6_srcprefs2flags(inet6_sk(sk)->srcprefs);
adaa70bb 867
4591db4f 868 return fib6_rule_lookup(net, fl, flags, ip6_pol_route_output);
1da177e4
LT		 869}
870
7159039a 871EXPORT_SYMBOL(ip6_route_output);
1da177e4 872
2774c131 873struct dst_entry *ip6_blackhole_route(struct net *net, struct dst_entry *dst_orig)
14e50e57 874{
69ead7af
DM		 875 struct rt6_info *rt = dst_alloc(&ip6_dst_blackhole_ops, 1);
876 struct rt6_info *ort = (struct rt6_info *) dst_orig;
14e50e57
DM		 877 struct dst_entry *new = NULL;
878
879 if (rt) {
d8d1f30b 880 new = &rt->dst;
14e50e57 881
14e50e57 882 new->__use = 1;
352e512c
HX		 883 new->input = dst_discard;
884 new->output = dst_discard;
14e50e57 885
defb3519 886 dst_copy_metrics(new, &ort->dst);
d8d1f30b 887 new->dev = ort->dst.dev;
14e50e57
DM		 888 if (new->dev)
889 dev_hold(new->dev);
890 rt->rt6i_idev = ort->rt6i_idev;
891 if (rt->rt6i_idev)
892 in6_dev_hold(rt->rt6i_idev);
893 rt->rt6i_expires = 0;
894
895 ipv6_addr_copy(&rt->rt6i_gateway, &ort->rt6i_gateway);
896 rt->rt6i_flags = ort->rt6i_flags & ~RTF_EXPIRES;
897 rt->rt6i_metric = 0;
898
899 memcpy(&rt->rt6i_dst, &ort->rt6i_dst, sizeof(struct rt6key));
900#ifdef CONFIG_IPV6_SUBTREES
901 memcpy(&rt->rt6i_src, &ort->rt6i_src, sizeof(struct rt6key));
902#endif
903
904 dst_free(new);
905 }
906
69ead7af
DM		 907 dst_release(dst_orig);
908 return new ? new : ERR_PTR(-ENOMEM);
14e50e57 909}
14e50e57 910
1da177e4
LT		 911/*
912 * Destination cache support functions
913 */
914
915static struct dst_entry *ip6_dst_check(struct dst_entry *dst, u32 cookie)
916{
917 struct rt6_info *rt;
918
919 rt = (struct rt6_info *) dst;
920
6431cbc2
DM		 921 if (rt->rt6i_node && (rt->rt6i_node->fn_sernum == cookie)) {
922 if (rt->rt6i_peer_genid != rt6_peer_genid()) {
923 if (!rt->rt6i_peer)
924 rt6_bind_peer(rt, 0);
925 rt->rt6i_peer_genid = rt6_peer_genid();
926 }
1da177e4 927 return dst;
6431cbc2 928 }
1da177e4
LT		 929 return NULL;
930}
931
932static struct dst_entry *ip6_negative_advice(struct dst_entry *dst)
933{
934 struct rt6_info *rt = (struct rt6_info *) dst;
935
936 if (rt) {
54c1a859
YH		 937 if (rt->rt6i_flags & RTF_CACHE) {
938 if (rt6_check_expired(rt)) {
939 ip6_del_rt(rt);
940 dst = NULL;
941 }
942 } else {
1da177e4 943 dst_release(dst);
54c1a859
YH		 944 dst = NULL;
945 }
1da177e4 946 }
54c1a859 947 return dst;
1da177e4
LT		 948}
949
950static void ip6_link_failure(struct sk_buff *skb)
951{
952 struct rt6_info *rt;
953
3ffe533c 954 icmpv6_send(skb, ICMPV6_DEST_UNREACH, ICMPV6_ADDR_UNREACH, 0);
1da177e4 955
adf30907 956 rt = (struct rt6_info *) skb_dst(skb);
1da177e4
LT		 957 if (rt) {
958 if (rt->rt6i_flags&RTF_CACHE) {
d8d1f30b 959 dst_set_expires(&rt->dst, 0);
1da177e4
LT		 960 rt->rt6i_flags |= RTF_EXPIRES;
961 } else if (rt->rt6i_node && (rt->rt6i_flags & RTF_DEFAULT))
962 rt->rt6i_node->fn_sernum = -1;
963 }
964}
965
966static void ip6_rt_update_pmtu(struct dst_entry *dst, u32 mtu)
967{
968 struct rt6_info *rt6 = (struct rt6_info*)dst;
969
970 if (mtu < dst_mtu(dst) && rt6->rt6i_dst.plen == 128) {
971 rt6->rt6i_flags |= RTF_MODIFIED;
972 if (mtu < IPV6_MIN_MTU) {
defb3519 973 u32 features = dst_metric(dst, RTAX_FEATURES);
1da177e4 974 mtu = IPV6_MIN_MTU;
defb3519
DM		 975 features |= RTAX_FEATURE_ALLFRAG;
976 dst_metric_set(dst, RTAX_FEATURES, features);
1da177e4 977 }
defb3519 978 dst_metric_set(dst, RTAX_MTU, mtu);
1da177e4
LT		 979 }
980}
981
0dbaee3b 982static unsigned int ip6_default_advmss(const struct dst_entry *dst)
1da177e4 983{
0dbaee3b
DM		 984 struct net_device *dev = dst->dev;
985 unsigned int mtu = dst_mtu(dst);
986 struct net *net = dev_net(dev);
987
1da177e4
LT		 988 mtu -= sizeof(struct ipv6hdr) + sizeof(struct tcphdr);
989
5578689a
DL		 990 if (mtu < net->ipv6.sysctl.ip6_rt_min_advmss)
991 mtu = net->ipv6.sysctl.ip6_rt_min_advmss;
1da177e4
LT		 992
993 /*
1ab1457c
YH		 994 * Maximal non-jumbo IPv6 payload is IPV6_MAXPLEN and
995 * corresponding MSS is IPV6_MAXPLEN - tcp_header_size.
996 * IPV6_MAXPLEN is also valid and means: "any MSS,
1da177e4
LT		 997 * rely only on pmtu discovery"
998 */
999 if (mtu > IPV6_MAXPLEN - sizeof(struct tcphdr))
1000 mtu = IPV6_MAXPLEN;
1001 return mtu;
1002}
1003
d33e4553
DM		 1004static unsigned int ip6_default_mtu(const struct dst_entry *dst)
1005{
1006 unsigned int mtu = IPV6_MIN_MTU;
1007 struct inet6_dev *idev;
1008
1009 rcu_read_lock();
1010 idev = __in6_dev_get(dst->dev);
1011 if (idev)
1012 mtu = idev->cnf.mtu6;
1013 rcu_read_unlock();
1014
1015 return mtu;
1016}
1017
3b00944c
YH		 1018static struct dst_entry *icmp6_dst_gc_list;
1019static DEFINE_SPINLOCK(icmp6_dst_lock);
5d0bbeeb 1020
3b00944c 1021struct dst_entry *icmp6_dst_alloc(struct net_device *dev,
1da177e4 1022 struct neighbour *neigh,
9acd9f3a 1023 const struct in6_addr *addr)
1da177e4
LT		 1024{
1025 struct rt6_info *rt;
1026 struct inet6_dev *idev = in6_dev_get(dev);
c346dca1 1027 struct net *net = dev_net(dev);
1da177e4
LT		 1028
1029 if (unlikely(idev == NULL))
1030 return NULL;
1031
86393e52 1032 rt = ip6_dst_alloc(&net->ipv6.ip6_dst_ops);
1da177e4
LT		 1033 if (unlikely(rt == NULL)) {
1034 in6_dev_put(idev);
1035 goto out;
1036 }
1037
1038 dev_hold(dev);
1039 if (neigh)
1040 neigh_hold(neigh);
14deae41 1041 else {
1da177e4 1042 neigh = ndisc_get_neigh(dev, addr);
14deae41
DM		 1043 if (IS_ERR(neigh))
1044 neigh = NULL;
1045 }
1da177e4
LT		 1046
1047 rt->rt6i_dev = dev;
1048 rt->rt6i_idev = idev;
1049 rt->rt6i_nexthop = neigh;
d8d1f30b 1050 atomic_set(&rt->dst.__refcnt, 1);
defb3519 1051 dst_metric_set(&rt->dst, RTAX_HOPLIMIT, 255);
d8d1f30b 1052 rt->dst.output = ip6_output;
1da177e4
LT		 1053
1054#if 0 /* there's no chance to use these for ndisc */
d8d1f30b 1055 rt->dst.flags = ipv6_addr_type(addr) & IPV6_ADDR_UNICAST
1ab1457c 1056 ? DST_HOST
1da177e4
LT		 1057 : 0;
1058 ipv6_addr_copy(&rt->rt6i_dst.addr, addr);
1059 rt->rt6i_dst.plen = 128;
1060#endif
1061
3b00944c 1062 spin_lock_bh(&icmp6_dst_lock);
d8d1f30b
CG		 1063 rt->dst.next = icmp6_dst_gc_list;
1064 icmp6_dst_gc_list = &rt->dst;
3b00944c 1065 spin_unlock_bh(&icmp6_dst_lock);
1da177e4 1066
5578689a 1067 fib6_force_start_gc(net);
1da177e4
LT		 1068
1069out:
d8d1f30b 1070 return &rt->dst;
1da177e4
LT		 1071}
1072
3d0f24a7 1073int icmp6_dst_gc(void)
1da177e4 1074{
e9476e95 1075 struct dst_entry *dst, **pprev;
3d0f24a7 1076 int more = 0;
1da177e4 1077
3b00944c
YH		 1078 spin_lock_bh(&icmp6_dst_lock);
1079 pprev = &icmp6_dst_gc_list;
5d0bbeeb 1080
1da177e4
LT		 1081 while ((dst = *pprev) != NULL) {
1082 if (!atomic_read(&dst->__refcnt)) {
1083 *pprev = dst->next;
1084 dst_free(dst);
1da177e4
LT		 1085 } else {
1086 pprev = &dst->next;
3d0f24a7 1087 ++more;
1da177e4
LT		 1088 }
1089 }
1090
3b00944c 1091 spin_unlock_bh(&icmp6_dst_lock);
5d0bbeeb 1092
3d0f24a7 1093 return more;
1da177e4
LT		 1094}
1095
1e493d19
DM		 1096static void icmp6_clean_all(int (*func)(struct rt6_info *rt, void *arg),
1097 void *arg)
1098{
1099 struct dst_entry *dst, **pprev;
1100
1101 spin_lock_bh(&icmp6_dst_lock);
1102 pprev = &icmp6_dst_gc_list;
1103 while ((dst = *pprev) != NULL) {
1104 struct rt6_info *rt = (struct rt6_info *) dst;
1105 if (func(rt, arg)) {
1106 *pprev = dst->next;
1107 dst_free(dst);
1108 } else {
1109 pprev = &dst->next;
1110 }
1111 }
1112 spin_unlock_bh(&icmp6_dst_lock);
1113}
1114
569d3645 1115static int ip6_dst_gc(struct dst_ops *ops)
1da177e4 1116{
1da177e4 1117 unsigned long now = jiffies;
86393e52 1118 struct net *net = container_of(ops, struct net, ipv6.ip6_dst_ops);
7019b78e
DL		 1119 int rt_min_interval = net->ipv6.sysctl.ip6_rt_gc_min_interval;
1120 int rt_max_size = net->ipv6.sysctl.ip6_rt_max_size;
1121 int rt_elasticity = net->ipv6.sysctl.ip6_rt_gc_elasticity;
1122 int rt_gc_timeout = net->ipv6.sysctl.ip6_rt_gc_timeout;
1123 unsigned long rt_last_gc = net->ipv6.ip6_rt_last_gc;
fc66f95c 1124 int entries;
7019b78e 1125
fc66f95c 1126 entries = dst_entries_get_fast(ops);
7019b78e 1127 if (time_after(rt_last_gc + rt_min_interval, now) &&
fc66f95c 1128 entries <= rt_max_size)
1da177e4
LT		 1129 goto out;
1130
6891a346
BT		 1131 net->ipv6.ip6_rt_gc_expire++;
1132 fib6_run_gc(net->ipv6.ip6_rt_gc_expire, net);
1133 net->ipv6.ip6_rt_last_gc = now;
fc66f95c
ED		 1134 entries = dst_entries_get_slow(ops);
1135 if (entries < ops->gc_thresh)
7019b78e 1136 net->ipv6.ip6_rt_gc_expire = rt_gc_timeout>>1;
1da177e4 1137out:
7019b78e 1138 net->ipv6.ip6_rt_gc_expire -= net->ipv6.ip6_rt_gc_expire>>rt_elasticity;
fc66f95c 1139 return entries > rt_max_size;
1da177e4
LT		 1140}
1141
1142/* Clean host part of a prefix. Not necessary in radix tree,
1143 but results in cleaner routing tables.
1144
1145 Remove it only when all the things will work!
1146 */
1147
6b75d090 1148int ip6_dst_hoplimit(struct dst_entry *dst)
1da177e4 1149{
5170ae82 1150 int hoplimit = dst_metric_raw(dst, RTAX_HOPLIMIT);
a02e4b7d 1151 if (hoplimit == 0) {
6b75d090 1152 struct net_device *dev = dst->dev;
c68f24cc
ED		 1153 struct inet6_dev *idev;
1154
1155 rcu_read_lock();
1156 idev = __in6_dev_get(dev);
1157 if (idev)
6b75d090 1158 hoplimit = idev->cnf.hop_limit;
c68f24cc 1159 else
53b7997f 1160 hoplimit = dev_net(dev)->ipv6.devconf_all->hop_limit;
c68f24cc 1161 rcu_read_unlock();
1da177e4
LT		 1162 }
1163 return hoplimit;
1164}
abbf46ae 1165EXPORT_SYMBOL(ip6_dst_hoplimit);
1da177e4
LT		 1166
1167/*
1168 *
1169 */
1170
86872cb5 1171int ip6_route_add(struct fib6_config *cfg)
1da177e4
LT		 1172{
1173 int err;
5578689a 1174 struct net *net = cfg->fc_nlinfo.nl_net;
1da177e4
LT		 1175 struct rt6_info *rt = NULL;
1176 struct net_device *dev = NULL;
1177 struct inet6_dev *idev = NULL;
c71099ac 1178 struct fib6_table *table;
1da177e4
LT		 1179 int addr_type;
1180
86872cb5 1181 if (cfg->fc_dst_len > 128 || cfg->fc_src_len > 128)
1da177e4
LT		 1182 return -EINVAL;
1183#ifndef CONFIG_IPV6_SUBTREES
86872cb5 1184 if (cfg->fc_src_len)
1da177e4
LT		 1185 return -EINVAL;
1186#endif
86872cb5 1187 if (cfg->fc_ifindex) {
1da177e4 1188 err = -ENODEV;
5578689a 1189 dev = dev_get_by_index(net, cfg->fc_ifindex);
1da177e4
LT		 1190 if (!dev)
1191 goto out;
1192 idev = in6_dev_get(dev);
1193 if (!idev)
1194 goto out;
1195 }
1196
86872cb5
TG		 1197 if (cfg->fc_metric == 0)
1198 cfg->fc_metric = IP6_RT_PRIO_USER;
1da177e4 1199
5578689a 1200 table = fib6_new_table(net, cfg->fc_table);
c71099ac
TG		 1201 if (table == NULL) {
1202 err = -ENOBUFS;
1203 goto out;
1204 }
1205
86393e52 1206 rt = ip6_dst_alloc(&net->ipv6.ip6_dst_ops);
1da177e4
LT		 1207
1208 if (rt == NULL) {
1209 err = -ENOMEM;
1210 goto out;
1211 }
1212
d8d1f30b 1213 rt->dst.obsolete = -1;
6f704992
YH		 1214 rt->rt6i_expires = (cfg->fc_flags & RTF_EXPIRES) ?
1215 jiffies + clock_t_to_jiffies(cfg->fc_expires) :
1216 0;
1da177e4 1217
86872cb5
TG		 1218 if (cfg->fc_protocol == RTPROT_UNSPEC)
1219 cfg->fc_protocol = RTPROT_BOOT;
1220 rt->rt6i_protocol = cfg->fc_protocol;
1221
1222 addr_type = ipv6_addr_type(&cfg->fc_dst);
1da177e4
LT		 1223
1224 if (addr_type & IPV6_ADDR_MULTICAST)
d8d1f30b 1225 rt->dst.input = ip6_mc_input;
ab79ad14
MŻ		 1226 else if (cfg->fc_flags & RTF_LOCAL)
1227 rt->dst.input = ip6_input;
1da177e4 1228 else
d8d1f30b 1229 rt->dst.input = ip6_forward;
1da177e4 1230
d8d1f30b 1231 rt->dst.output = ip6_output;
1da177e4 1232
86872cb5
TG		 1233 ipv6_addr_prefix(&rt->rt6i_dst.addr, &cfg->fc_dst, cfg->fc_dst_len);
1234 rt->rt6i_dst.plen = cfg->fc_dst_len;
1da177e4 1235 if (rt->rt6i_dst.plen == 128)
d8d1f30b 1236 rt->dst.flags = DST_HOST;
1da177e4
LT		 1237
1238#ifdef CONFIG_IPV6_SUBTREES
86872cb5
TG		 1239 ipv6_addr_prefix(&rt->rt6i_src.addr, &cfg->fc_src, cfg->fc_src_len);
1240 rt->rt6i_src.plen = cfg->fc_src_len;
1da177e4
LT		 1241#endif
1242
86872cb5 1243 rt->rt6i_metric = cfg->fc_metric;
1da177e4
LT		 1244
1245 /* We cannot add true routes via loopback here,
1246 they would result in kernel looping; promote them to reject routes
1247 */
86872cb5 1248 if ((cfg->fc_flags & RTF_REJECT) ||
ab79ad14
MŻ		 1249 (dev && (dev->flags&IFF_LOOPBACK) && !(addr_type&IPV6_ADDR_LOOPBACK)
1250 && !(cfg->fc_flags&RTF_LOCAL))) {
1da177e4 1251 /* hold loopback dev/idev if we haven't done so. */
5578689a 1252 if (dev != net->loopback_dev) {
1da177e4
LT		 1253 if (dev) {
1254 dev_put(dev);
1255 in6_dev_put(idev);
1256 }
5578689a 1257 dev = net->loopback_dev;
1da177e4
LT		 1258 dev_hold(dev);
1259 idev = in6_dev_get(dev);
1260 if (!idev) {
1261 err = -ENODEV;
1262 goto out;
1263 }
1264 }
d8d1f30b
CG		 1265 rt->dst.output = ip6_pkt_discard_out;
1266 rt->dst.input = ip6_pkt_discard;
1267 rt->dst.error = -ENETUNREACH;
1da177e4
LT		 1268 rt->rt6i_flags = RTF_REJECT|RTF_NONEXTHOP;
1269 goto install_route;
1270 }
1271
86872cb5 1272 if (cfg->fc_flags & RTF_GATEWAY) {
1da177e4
LT		 1273 struct in6_addr *gw_addr;
1274 int gwa_type;
1275
86872cb5
TG		 1276 gw_addr = &cfg->fc_gateway;
1277 ipv6_addr_copy(&rt->rt6i_gateway, gw_addr);
1da177e4
LT		 1278 gwa_type = ipv6_addr_type(gw_addr);
1279
1280 if (gwa_type != (IPV6_ADDR_LINKLOCAL|IPV6_ADDR_UNICAST)) {
1281 struct rt6_info *grt;
1282
1283 /* IPv6 strictly inhibits using not link-local
1284 addresses as nexthop address.
1285 Otherwise, router will not able to send redirects.
1286 It is very good, but in some (rare!) circumstances
1287 (SIT, PtP, NBMA NOARP links) it is handy to allow
1288 some exceptions. --ANK
1289 */
1290 err = -EINVAL;
1291 if (!(gwa_type&IPV6_ADDR_UNICAST))
1292 goto out;
1293
5578689a 1294 grt = rt6_lookup(net, gw_addr, NULL, cfg->fc_ifindex, 1);
1da177e4
LT		 1295
1296 err = -EHOSTUNREACH;
1297 if (grt == NULL)
1298 goto out;
1299 if (dev) {
1300 if (dev != grt->rt6i_dev) {
d8d1f30b 1301 dst_release(&grt->dst);
1da177e4
LT		 1302 goto out;
1303 }
1304 } else {
1305 dev = grt->rt6i_dev;
1306 idev = grt->rt6i_idev;
1307 dev_hold(dev);
1308 in6_dev_hold(grt->rt6i_idev);
1309 }
1310 if (!(grt->rt6i_flags&RTF_GATEWAY))
1311 err = 0;
d8d1f30b 1312 dst_release(&grt->dst);
1da177e4
LT		 1313
1314 if (err)
1315 goto out;
1316 }
1317 err = -EINVAL;
1318 if (dev == NULL || (dev->flags&IFF_LOOPBACK))
1319 goto out;
1320 }
1321
1322 err = -ENODEV;
1323 if (dev == NULL)
1324 goto out;
1325
86872cb5 1326 if (cfg->fc_flags & (RTF_GATEWAY | RTF_NONEXTHOP)) {
1da177e4
LT		 1327 rt->rt6i_nexthop = __neigh_lookup_errno(&nd_tbl, &rt->rt6i_gateway, dev);
1328 if (IS_ERR(rt->rt6i_nexthop)) {
1329 err = PTR_ERR(rt->rt6i_nexthop);
1330 rt->rt6i_nexthop = NULL;
1331 goto out;
1332 }
1333 }
1334
86872cb5 1335 rt->rt6i_flags = cfg->fc_flags;
1da177e4
LT		 1336
1337install_route:
86872cb5
TG		 1338 if (cfg->fc_mx) {
1339 struct nlattr *nla;
1340 int remaining;
1341
1342 nla_for_each_attr(nla, cfg->fc_mx, cfg->fc_mx_len, remaining) {
8f4c1f9b 1343 int type = nla_type(nla);
86872cb5
TG		 1344
1345 if (type) {
1346 if (type > RTAX_MAX) {
1da177e4
LT		 1347 err = -EINVAL;
1348 goto out;
1349 }
86872cb5 1350
defb3519 1351 dst_metric_set(&rt->dst, type, nla_get_u32(nla));
1da177e4 1352 }
1da177e4
LT		 1353 }
1354 }
1355
d8d1f30b 1356 rt->dst.dev = dev;
1da177e4 1357 rt->rt6i_idev = idev;
c71099ac 1358 rt->rt6i_table = table;
63152fc0 1359
c346dca1 1360 cfg->fc_nlinfo.nl_net = dev_net(dev);
63152fc0 1361
86872cb5 1362 return __ip6_ins_rt(rt, &cfg->fc_nlinfo);
1da177e4
LT		 1363
1364out:
1365 if (dev)
1366 dev_put(dev);
1367 if (idev)
1368 in6_dev_put(idev);
1369 if (rt)
d8d1f30b 1370 dst_free(&rt->dst);
1da177e4
LT		 1371 return err;
1372}
1373
86872cb5 1374static int __ip6_del_rt(struct rt6_info *rt, struct nl_info *info)
1da177e4
LT		 1375{
1376 int err;
c71099ac 1377 struct fib6_table *table;
c346dca1 1378 struct net *net = dev_net(rt->rt6i_dev);
1da177e4 1379
8ed67789 1380 if (rt == net->ipv6.ip6_null_entry)
6c813a72
PM		 1381 return -ENOENT;
1382
c71099ac
TG		 1383 table = rt->rt6i_table;
1384 write_lock_bh(&table->tb6_lock);
1da177e4 1385
86872cb5 1386 err = fib6_del(rt, info);
d8d1f30b 1387 dst_release(&rt->dst);
1da177e4 1388
c71099ac 1389 write_unlock_bh(&table->tb6_lock);
1da177e4
LT		 1390
1391 return err;
1392}
1393
e0a1ad73
TG		 1394int ip6_del_rt(struct rt6_info *rt)
1395{
4d1169c1 1396 struct nl_info info = {
c346dca1 1397 .nl_net = dev_net(rt->rt6i_dev),
4d1169c1 1398 };
528c4ceb 1399 return __ip6_del_rt(rt, &info);
e0a1ad73
TG		 1400}
1401
86872cb5 1402static int ip6_route_del(struct fib6_config *cfg)
1da177e4 1403{
c71099ac 1404 struct fib6_table *table;
1da177e4
LT		 1405 struct fib6_node *fn;
1406 struct rt6_info *rt;
1407 int err = -ESRCH;
1408
5578689a 1409 table = fib6_get_table(cfg->fc_nlinfo.nl_net, cfg->fc_table);
c71099ac
TG		 1410 if (table == NULL)
1411 return err;
1412
1413 read_lock_bh(&table->tb6_lock);
1da177e4 1414
c71099ac 1415 fn = fib6_locate(&table->tb6_root,
86872cb5
TG		 1416 &cfg->fc_dst, cfg->fc_dst_len,
1417 &cfg->fc_src, cfg->fc_src_len);
1ab1457c 1418
1da177e4 1419 if (fn) {
d8d1f30b 1420 for (rt = fn->leaf; rt; rt = rt->dst.rt6_next) {
86872cb5 1421 if (cfg->fc_ifindex &&
1da177e4 1422 (rt->rt6i_dev == NULL ||
86872cb5 1423 rt->rt6i_dev->ifindex != cfg->fc_ifindex))
1da177e4 1424 continue;
86872cb5
TG		 1425 if (cfg->fc_flags & RTF_GATEWAY &&
1426 !ipv6_addr_equal(&cfg->fc_gateway, &rt->rt6i_gateway))
1da177e4 1427 continue;
86872cb5 1428 if (cfg->fc_metric && cfg->fc_metric != rt->rt6i_metric)
1da177e4 1429 continue;
d8d1f30b 1430 dst_hold(&rt->dst);
c71099ac 1431 read_unlock_bh(&table->tb6_lock);
1da177e4 1432
86872cb5 1433 return __ip6_del_rt(rt, &cfg->fc_nlinfo);
1da177e4
LT		 1434 }
1435 }
c71099ac 1436 read_unlock_bh(&table->tb6_lock);
1da177e4
LT		 1437
1438 return err;
1439}
1440
1441/*
1442 * Handle redirects
1443 */
a6279458
YH		 1444struct ip6rd_flowi {
1445 struct flowi fl;
1446 struct in6_addr gateway;
1447};
1448
8ed67789
DL		 1449static struct rt6_info *__ip6_route_redirect(struct net *net,
1450 struct fib6_table *table,
a6279458
YH		 1451 struct flowi *fl,
1452 int flags)
1da177e4 1453{
a6279458
YH		 1454 struct ip6rd_flowi *rdfl = (struct ip6rd_flowi *)fl;
1455 struct rt6_info *rt;
e843b9e1 1456 struct fib6_node *fn;
c71099ac 1457
1da177e4 1458 /*
e843b9e1
YH		 1459 * Get the "current" route for this destination and
1460 * check if the redirect has come from approriate router.
1461 *
1462 * RFC 2461 specifies that redirects should only be
1463 * accepted if they come from the nexthop to the target.
1464 * Due to the way the routes are chosen, this notion
1465 * is a bit fuzzy and one might need to check all possible
1466 * routes.
1da177e4 1467 */
1da177e4 1468
c71099ac 1469 read_lock_bh(&table->tb6_lock);
a6279458 1470 fn = fib6_lookup(&table->tb6_root, &fl->fl6_dst, &fl->fl6_src);
e843b9e1 1471restart:
d8d1f30b 1472 for (rt = fn->leaf; rt; rt = rt->dst.rt6_next) {
e843b9e1
YH		 1473 /*
1474 * Current route is on-link; redirect is always invalid.
1475 *
1476 * Seems, previous statement is not true. It could
1477 * be node, which looks for us as on-link (f.e. proxy ndisc)
1478 * But then router serving it might decide, that we should
1479 * know truth 8)8) --ANK (980726).
1480 */
1481 if (rt6_check_expired(rt))
1482 continue;
1483 if (!(rt->rt6i_flags & RTF_GATEWAY))
1484 continue;
a6279458 1485 if (fl->oif != rt->rt6i_dev->ifindex)
e843b9e1 1486 continue;
a6279458 1487 if (!ipv6_addr_equal(&rdfl->gateway, &rt->rt6i_gateway))
e843b9e1
YH		 1488 continue;
1489 break;
1490 }
a6279458 1491
cb15d9c2 1492 if (!rt)
8ed67789
DL		 1493 rt = net->ipv6.ip6_null_entry;
1494 BACKTRACK(net, &fl->fl6_src);
cb15d9c2 1495out:
d8d1f30b 1496 dst_hold(&rt->dst);
a6279458 1497
c71099ac 1498 read_unlock_bh(&table->tb6_lock);
e843b9e1 1499
a6279458
YH		 1500 return rt;
1501};
1502
1503static struct rt6_info *ip6_route_redirect(struct in6_addr *dest,
1504 struct in6_addr *src,
1505 struct in6_addr *gateway,
1506 struct net_device *dev)
1507{
adaa70bb 1508 int flags = RT6_LOOKUP_F_HAS_SADDR;
c346dca1 1509 struct net *net = dev_net(dev);
a6279458
YH		 1510 struct ip6rd_flowi rdfl = {
1511 .fl = {
1512 .oif = dev->ifindex,
5811662b
CG		 1513 .fl6_dst = *dest,
1514 .fl6_src = *src,
a6279458 1515 },
a6279458 1516 };
adaa70bb 1517
86c36ce4
BH		 1518 ipv6_addr_copy(&rdfl.gateway, gateway);
1519
adaa70bb
TG		 1520 if (rt6_need_strict(dest))
1521 flags |= RT6_LOOKUP_F_IFACE;
a6279458 1522
5578689a 1523 return (struct rt6_info *)fib6_rule_lookup(net, (struct flowi *)&rdfl,
58f09b78 1524 flags, __ip6_route_redirect);
a6279458
YH		 1525}
1526
1527void rt6_redirect(struct in6_addr *dest, struct in6_addr *src,
1528 struct in6_addr *saddr,
1529 struct neighbour *neigh, u8 *lladdr, int on_link)
1530{
1531 struct rt6_info *rt, *nrt = NULL;
1532 struct netevent_redirect netevent;
c346dca1 1533 struct net *net = dev_net(neigh->dev);
a6279458
YH		 1534
1535 rt = ip6_route_redirect(dest, src, saddr, neigh->dev);
1536
8ed67789 1537 if (rt == net->ipv6.ip6_null_entry) {
1da177e4
LT		 1538 if (net_ratelimit())
1539 printk(KERN_DEBUG "rt6_redirect: source isn't a valid nexthop "
1540 "for redirect target\n");
a6279458 1541 goto out;
1da177e4
LT		 1542 }
1543
1da177e4
LT		 1544 /*
1545 * We have finally decided to accept it.
1546 */
1547
1ab1457c 1548 neigh_update(neigh, lladdr, NUD_STALE,
1da177e4
LT		 1549 NEIGH_UPDATE_F_WEAK_OVERRIDE|
1550 NEIGH_UPDATE_F_OVERRIDE|
1551 (on_link ? 0 : (NEIGH_UPDATE_F_OVERRIDE_ISROUTER|
1552 NEIGH_UPDATE_F_ISROUTER))
1553 );
1554
1555 /*
1556 * Redirect received -> path was valid.
1557 * Look, redirects are sent only in response to data packets,
1558 * so that this nexthop apparently is reachable. --ANK
1559 */
d8d1f30b 1560 dst_confirm(&rt->dst);
1da177e4
LT		 1561
1562 /* Duplicate redirect: silently ignore. */
d8d1f30b 1563 if (neigh == rt->dst.neighbour)
1da177e4
LT		 1564 goto out;
1565
1566 nrt = ip6_rt_copy(rt);
1567 if (nrt == NULL)
1568 goto out;
1569
1570 nrt->rt6i_flags = RTF_GATEWAY|RTF_UP|RTF_DYNAMIC|RTF_CACHE;
1571 if (on_link)
1572 nrt->rt6i_flags &= ~RTF_GATEWAY;
1573
1574 ipv6_addr_copy(&nrt->rt6i_dst.addr, dest);
1575 nrt->rt6i_dst.plen = 128;
d8d1f30b 1576 nrt->dst.flags |= DST_HOST;
1da177e4
LT		 1577
1578 ipv6_addr_copy(&nrt->rt6i_gateway, (struct in6_addr*)neigh->primary_key);
1579 nrt->rt6i_nexthop = neigh_clone(neigh);
1da177e4 1580
40e22e8f 1581 if (ip6_ins_rt(nrt))
1da177e4
LT		 1582 goto out;
1583
d8d1f30b
CG		 1584 netevent.old = &rt->dst;
1585 netevent.new = &nrt->dst;
8d71740c
TT		 1586 call_netevent_notifiers(NETEVENT_REDIRECT, &netevent);
1587
1da177e4 1588 if (rt->rt6i_flags&RTF_CACHE) {
e0a1ad73 1589 ip6_del_rt(rt);
1da177e4
LT		 1590 return;
1591 }
1592
1593out:
d8d1f30b 1594 dst_release(&rt->dst);
1da177e4
LT		 1595}
1596
1597/*
1598 * Handle ICMP "packet too big" messages
1599 * i.e. Path MTU discovery
1600 */
1601
ae878ae2
MŻ		 1602static void rt6_do_pmtu_disc(struct in6_addr *daddr, struct in6_addr *saddr,
1603 struct net *net, u32 pmtu, int ifindex)
1da177e4
LT		 1604{
1605 struct rt6_info *rt, *nrt;
1606 int allfrag = 0;
d3052b55 1607again:
ae878ae2 1608 rt = rt6_lookup(net, daddr, saddr, ifindex, 0);
1da177e4
LT		 1609 if (rt == NULL)
1610 return;
1611
d3052b55
AV		 1612 if (rt6_check_expired(rt)) {
1613 ip6_del_rt(rt);
1614 goto again;
1615 }
1616
d8d1f30b 1617 if (pmtu >= dst_mtu(&rt->dst))
1da177e4
LT		 1618 goto out;
1619
1620 if (pmtu < IPV6_MIN_MTU) {
1621 /*
1ab1457c 1622 * According to RFC2460, PMTU is set to the IPv6 Minimum Link
1da177e4
LT		 1623 * MTU (1280) and a fragment header should always be included
1624 * after a node receiving Too Big message reporting PMTU is
1625 * less than the IPv6 Minimum Link MTU.
1626 */
1627 pmtu = IPV6_MIN_MTU;
1628 allfrag = 1;
1629 }
1630
1631 /* New mtu received -> path was valid.
1632 They are sent only in response to data packets,
1633 so that this nexthop apparently is reachable. --ANK
1634 */
d8d1f30b 1635 dst_confirm(&rt->dst);
1da177e4
LT		 1636
1637 /* Host route. If it is static, it would be better
1638 not to override it, but add new one, so that
1639 when cache entry will expire old pmtu
1640 would return automatically.
1641 */
1642 if (rt->rt6i_flags & RTF_CACHE) {
defb3519
DM		 1643 dst_metric_set(&rt->dst, RTAX_MTU, pmtu);
1644 if (allfrag) {
1645 u32 features = dst_metric(&rt->dst, RTAX_FEATURES);
1646 features |= RTAX_FEATURE_ALLFRAG;
1647 dst_metric_set(&rt->dst, RTAX_FEATURES, features);
1648 }
d8d1f30b 1649 dst_set_expires(&rt->dst, net->ipv6.sysctl.ip6_rt_mtu_expires);
1da177e4
LT		 1650 rt->rt6i_flags |= RTF_MODIFIED|RTF_EXPIRES;
1651 goto out;
1652 }
1653
1654 /* Network route.
1655 Two cases are possible:
1656 1. It is connected route. Action: COW
1657 2. It is gatewayed route or NONEXTHOP route. Action: clone it.
1658 */
d5315b50 1659 if (!rt->rt6i_nexthop && !(rt->rt6i_flags & RTF_NONEXTHOP))
a1e78363 1660 nrt = rt6_alloc_cow(rt, daddr, saddr);
d5315b50
YH		 1661 else
1662 nrt = rt6_alloc_clone(rt, daddr);
a1e78363 1663
d5315b50 1664 if (nrt) {
defb3519
DM		 1665 dst_metric_set(&nrt->dst, RTAX_MTU, pmtu);
1666 if (allfrag) {
1667 u32 features = dst_metric(&nrt->dst, RTAX_FEATURES);
1668 features |= RTAX_FEATURE_ALLFRAG;
1669 dst_metric_set(&nrt->dst, RTAX_FEATURES, features);
1670 }
a1e78363
YH		 1671
1672 /* According to RFC 1981, detecting PMTU increase shouldn't be
1673 * happened within 5 mins, the recommended timer is 10 mins.
1674 * Here this route expiration time is set to ip6_rt_mtu_expires
1675 * which is 10 mins. After 10 mins the decreased pmtu is expired
1676 * and detecting PMTU increase will be automatically happened.
1677 */
d8d1f30b 1678 dst_set_expires(&nrt->dst, net->ipv6.sysctl.ip6_rt_mtu_expires);
a1e78363
YH		 1679 nrt->rt6i_flags |= RTF_DYNAMIC|RTF_EXPIRES;
1680
40e22e8f 1681 ip6_ins_rt(nrt);
1da177e4 1682 }
1da177e4 1683out:
d8d1f30b 1684 dst_release(&rt->dst);
1da177e4
LT		 1685}
1686
ae878ae2
MŻ		 1687void rt6_pmtu_discovery(struct in6_addr *daddr, struct in6_addr *saddr,
1688 struct net_device *dev, u32 pmtu)
1689{
1690 struct net *net = dev_net(dev);
1691
1692 /*
1693 * RFC 1981 states that a node "MUST reduce the size of the packets it
1694 * is sending along the path" that caused the Packet Too Big message.
1695 * Since it's not possible in the general case to determine which
1696 * interface was used to send the original packet, we update the MTU
1697 * on the interface that will be used to send future packets. We also
1698 * update the MTU on the interface that received the Packet Too Big in
1699 * case the original packet was forced out that interface with
1700 * SO_BINDTODEVICE or similar. This is the next best thing to the
1701 * correct behaviour, which would be to update the MTU on all
1702 * interfaces.
1703 */
1704 rt6_do_pmtu_disc(daddr, saddr, net, pmtu, 0);
1705 rt6_do_pmtu_disc(daddr, saddr, net, pmtu, dev->ifindex);
1706}
1707
1da177e4
LT		 1708/*
1709 * Misc support functions
1710 */
1711
1712static struct rt6_info * ip6_rt_copy(struct rt6_info *ort)
1713{
c346dca1 1714 struct net *net = dev_net(ort->rt6i_dev);
86393e52 1715 struct rt6_info *rt = ip6_dst_alloc(&net->ipv6.ip6_dst_ops);
1da177e4
LT		 1716
1717 if (rt) {
d8d1f30b
CG		 1718 rt->dst.input = ort->dst.input;
1719 rt->dst.output = ort->dst.output;
1720
defb3519 1721 dst_copy_metrics(&rt->dst, &ort->dst);
d8d1f30b
CG		 1722 rt->dst.error = ort->dst.error;
1723 rt->dst.dev = ort->dst.dev;
1724 if (rt->dst.dev)
1725 dev_hold(rt->dst.dev);
1da177e4
LT		 1726 rt->rt6i_idev = ort->rt6i_idev;
1727 if (rt->rt6i_idev)
1728 in6_dev_hold(rt->rt6i_idev);
d8d1f30b 1729 rt->dst.lastuse = jiffies;
1da177e4
LT		 1730 rt->rt6i_expires = 0;
1731
1732 ipv6_addr_copy(&rt->rt6i_gateway, &ort->rt6i_gateway);
1733 rt->rt6i_flags = ort->rt6i_flags & ~RTF_EXPIRES;
1734 rt->rt6i_metric = 0;
1735
1736 memcpy(&rt->rt6i_dst, &ort->rt6i_dst, sizeof(struct rt6key));
1737#ifdef CONFIG_IPV6_SUBTREES
1738 memcpy(&rt->rt6i_src, &ort->rt6i_src, sizeof(struct rt6key));
1739#endif
c71099ac 1740 rt->rt6i_table = ort->rt6i_table;
1da177e4
LT		 1741 }
1742 return rt;
1743}
1744
70ceb4f5 1745#ifdef CONFIG_IPV6_ROUTE_INFO
efa2cea0
DL		 1746static struct rt6_info *rt6_get_route_info(struct net *net,
1747 struct in6_addr *prefix, int prefixlen,
70ceb4f5
YH		 1748 struct in6_addr *gwaddr, int ifindex)
1749{
1750 struct fib6_node *fn;
1751 struct rt6_info *rt = NULL;
c71099ac
TG		 1752 struct fib6_table *table;
1753
efa2cea0 1754 table = fib6_get_table(net, RT6_TABLE_INFO);
c71099ac
TG		 1755 if (table == NULL)
1756 return NULL;
70ceb4f5 1757
c71099ac
TG		 1758 write_lock_bh(&table->tb6_lock);
1759 fn = fib6_locate(&table->tb6_root, prefix ,prefixlen, NULL, 0);
70ceb4f5
YH		 1760 if (!fn)
1761 goto out;
1762
d8d1f30b 1763 for (rt = fn->leaf; rt; rt = rt->dst.rt6_next) {
70ceb4f5
YH		 1764 if (rt->rt6i_dev->ifindex != ifindex)
1765 continue;
1766 if ((rt->rt6i_flags & (RTF_ROUTEINFO|RTF_GATEWAY)) != (RTF_ROUTEINFO|RTF_GATEWAY))
1767 continue;
1768 if (!ipv6_addr_equal(&rt->rt6i_gateway, gwaddr))
1769 continue;
d8d1f30b 1770 dst_hold(&rt->dst);
70ceb4f5
YH		 1771 break;
1772 }
1773out:
c71099ac 1774 write_unlock_bh(&table->tb6_lock);
70ceb4f5
YH		 1775 return rt;
1776}
1777
efa2cea0
DL		 1778static struct rt6_info *rt6_add_route_info(struct net *net,
1779 struct in6_addr *prefix, int prefixlen,
70ceb4f5
YH		 1780 struct in6_addr *gwaddr, int ifindex,
1781 unsigned pref)
1782{
86872cb5
TG		 1783 struct fib6_config cfg = {
1784 .fc_table = RT6_TABLE_INFO,
238fc7ea 1785 .fc_metric = IP6_RT_PRIO_USER,
86872cb5
TG		 1786 .fc_ifindex = ifindex,
1787 .fc_dst_len = prefixlen,
1788 .fc_flags = RTF_GATEWAY | RTF_ADDRCONF | RTF_ROUTEINFO |
1789 RTF_UP | RTF_PREF(pref),
efa2cea0
DL		 1790 .fc_nlinfo.pid = 0,
1791 .fc_nlinfo.nlh = NULL,
1792 .fc_nlinfo.nl_net = net,
86872cb5
TG		 1793 };
1794
1795 ipv6_addr_copy(&cfg.fc_dst, prefix);
1796 ipv6_addr_copy(&cfg.fc_gateway, gwaddr);
70ceb4f5 1797
e317da96
YH		 1798 /* We should treat it as a default route if prefix length is 0. */
1799 if (!prefixlen)
86872cb5 1800 cfg.fc_flags |= RTF_DEFAULT;
70ceb4f5 1801
86872cb5 1802 ip6_route_add(&cfg);
70ceb4f5 1803
efa2cea0 1804 return rt6_get_route_info(net, prefix, prefixlen, gwaddr, ifindex);
70ceb4f5
YH		 1805}
1806#endif
1807
1da177e4 1808struct rt6_info *rt6_get_dflt_router(struct in6_addr *addr, struct net_device *dev)
1ab1457c 1809{
1da177e4 1810 struct rt6_info *rt;
c71099ac 1811 struct fib6_table *table;
1da177e4 1812
c346dca1 1813 table = fib6_get_table(dev_net(dev), RT6_TABLE_DFLT);
c71099ac
TG		 1814 if (table == NULL)
1815 return NULL;
1da177e4 1816
c71099ac 1817 write_lock_bh(&table->tb6_lock);
d8d1f30b 1818 for (rt = table->tb6_root.leaf; rt; rt=rt->dst.rt6_next) {
1da177e4 1819 if (dev == rt->rt6i_dev &&
045927ff 1820 ((rt->rt6i_flags & (RTF_ADDRCONF | RTF_DEFAULT)) == (RTF_ADDRCONF | RTF_DEFAULT)) &&
1da177e4
LT		 1821 ipv6_addr_equal(&rt->rt6i_gateway, addr))
1822 break;
1823 }
1824 if (rt)
d8d1f30b 1825 dst_hold(&rt->dst);
c71099ac 1826 write_unlock_bh(&table->tb6_lock);
1da177e4
LT		 1827 return rt;
1828}
1829
1830struct rt6_info *rt6_add_dflt_router(struct in6_addr *gwaddr,
ebacaaa0
YH		 1831 struct net_device *dev,
1832 unsigned int pref)
1da177e4 1833{
86872cb5
TG		 1834 struct fib6_config cfg = {
1835 .fc_table = RT6_TABLE_DFLT,
238fc7ea 1836 .fc_metric = IP6_RT_PRIO_USER,
86872cb5
TG		 1837 .fc_ifindex = dev->ifindex,
1838 .fc_flags = RTF_GATEWAY | RTF_ADDRCONF | RTF_DEFAULT |
1839 RTF_UP | RTF_EXPIRES | RTF_PREF(pref),
5578689a
DL		 1840 .fc_nlinfo.pid = 0,
1841 .fc_nlinfo.nlh = NULL,
c346dca1 1842 .fc_nlinfo.nl_net = dev_net(dev),
86872cb5 1843 };
1da177e4 1844
86872cb5 1845 ipv6_addr_copy(&cfg.fc_gateway, gwaddr);
1da177e4 1846
86872cb5 1847 ip6_route_add(&cfg);
1da177e4 1848
1da177e4
LT		 1849 return rt6_get_dflt_router(gwaddr, dev);
1850}
1851
7b4da532 1852void rt6_purge_dflt_routers(struct net *net)
1da177e4
LT		 1853{
1854 struct rt6_info *rt;
c71099ac
TG		 1855 struct fib6_table *table;
1856
1857 /* NOTE: Keep consistent with rt6_get_dflt_router */
7b4da532 1858 table = fib6_get_table(net, RT6_TABLE_DFLT);
c71099ac
TG		 1859 if (table == NULL)
1860 return;
1da177e4
LT		 1861
1862restart:
c71099ac 1863 read_lock_bh(&table->tb6_lock);
d8d1f30b 1864 for (rt = table->tb6_root.leaf; rt; rt = rt->dst.rt6_next) {
1da177e4 1865 if (rt->rt6i_flags & (RTF_DEFAULT | RTF_ADDRCONF)) {
d8d1f30b 1866 dst_hold(&rt->dst);
c71099ac 1867 read_unlock_bh(&table->tb6_lock);
e0a1ad73 1868 ip6_del_rt(rt);
1da177e4
LT		 1869 goto restart;
1870 }
1871 }
c71099ac 1872 read_unlock_bh(&table->tb6_lock);
1da177e4
LT		 1873}
1874
5578689a
DL		 1875static void rtmsg_to_fib6_config(struct net *net,
1876 struct in6_rtmsg *rtmsg,
86872cb5
TG		 1877 struct fib6_config *cfg)
1878{
1879 memset(cfg, 0, sizeof(*cfg));
1880
1881 cfg->fc_table = RT6_TABLE_MAIN;
1882 cfg->fc_ifindex = rtmsg->rtmsg_ifindex;
1883 cfg->fc_metric = rtmsg->rtmsg_metric;
1884 cfg->fc_expires = rtmsg->rtmsg_info;
1885 cfg->fc_dst_len = rtmsg->rtmsg_dst_len;
1886 cfg->fc_src_len = rtmsg->rtmsg_src_len;
1887 cfg->fc_flags = rtmsg->rtmsg_flags;
1888
5578689a 1889 cfg->fc_nlinfo.nl_net = net;
f1243c2d 1890
86872cb5
TG		 1891 ipv6_addr_copy(&cfg->fc_dst, &rtmsg->rtmsg_dst);
1892 ipv6_addr_copy(&cfg->fc_src, &rtmsg->rtmsg_src);
1893 ipv6_addr_copy(&cfg->fc_gateway, &rtmsg->rtmsg_gateway);
1894}
1895
5578689a 1896int ipv6_route_ioctl(struct net *net, unsigned int cmd, void __user *arg)
1da177e4 1897{
86872cb5 1898 struct fib6_config cfg;
1da177e4
LT		 1899 struct in6_rtmsg rtmsg;
1900 int err;
1901
1902 switch(cmd) {
1903 case SIOCADDRT: /* Add a route */
1904 case SIOCDELRT: /* Delete a route */
1905 if (!capable(CAP_NET_ADMIN))
1906 return -EPERM;
1907 err = copy_from_user(&rtmsg, arg,
1908 sizeof(struct in6_rtmsg));
1909 if (err)
1910 return -EFAULT;
86872cb5 1911
5578689a 1912 rtmsg_to_fib6_config(net, &rtmsg, &cfg);
86872cb5 1913
1da177e4
LT		 1914 rtnl_lock();
1915 switch (cmd) {
1916 case SIOCADDRT:
86872cb5 1917 err = ip6_route_add(&cfg);
1da177e4
LT		 1918 break;
1919 case SIOCDELRT:
86872cb5 1920 err = ip6_route_del(&cfg);
1da177e4
LT		 1921 break;
1922 default:
1923 err = -EINVAL;
1924 }
1925 rtnl_unlock();
1926
1927 return err;
3ff50b79 1928 }
1da177e4
LT		 1929
1930 return -EINVAL;
1931}
1932
1933/*
1934 * Drop the packet on the floor
1935 */
1936
d5fdd6ba 1937static int ip6_pkt_drop(struct sk_buff *skb, u8 code, int ipstats_mib_noroutes)
1da177e4 1938{
612f09e8 1939 int type;
adf30907 1940 struct dst_entry *dst = skb_dst(skb);
612f09e8
YH		 1941 switch (ipstats_mib_noroutes) {
1942 case IPSTATS_MIB_INNOROUTES:
0660e03f 1943 type = ipv6_addr_type(&ipv6_hdr(skb)->daddr);
45bb0060 1944 if (type == IPV6_ADDR_ANY) {
3bd653c8
DL		 1945 IP6_INC_STATS(dev_net(dst->dev), ip6_dst_idev(dst),
1946 IPSTATS_MIB_INADDRERRORS);
612f09e8
YH		 1947 break;
1948 }
1949 /* FALLTHROUGH */
1950 case IPSTATS_MIB_OUTNOROUTES:
3bd653c8
DL		 1951 IP6_INC_STATS(dev_net(dst->dev), ip6_dst_idev(dst),
1952 ipstats_mib_noroutes);
612f09e8
YH		 1953 break;
1954 }
3ffe533c 1955 icmpv6_send(skb, ICMPV6_DEST_UNREACH, code, 0);
1da177e4
LT		 1956 kfree_skb(skb);
1957 return 0;
1958}
1959
9ce8ade0
TG		 1960static int ip6_pkt_discard(struct sk_buff *skb)
1961{
612f09e8 1962 return ip6_pkt_drop(skb, ICMPV6_NOROUTE, IPSTATS_MIB_INNOROUTES);
9ce8ade0
TG		 1963}
1964
20380731 1965static int ip6_pkt_discard_out(struct sk_buff *skb)
1da177e4 1966{
adf30907 1967 skb->dev = skb_dst(skb)->dev;
612f09e8 1968 return ip6_pkt_drop(skb, ICMPV6_NOROUTE, IPSTATS_MIB_OUTNOROUTES);
1da177e4
LT		 1969}
1970
6723ab54
DM		 1971#ifdef CONFIG_IPV6_MULTIPLE_TABLES
1972
9ce8ade0
TG		 1973static int ip6_pkt_prohibit(struct sk_buff *skb)
1974{
612f09e8 1975 return ip6_pkt_drop(skb, ICMPV6_ADM_PROHIBITED, IPSTATS_MIB_INNOROUTES);
9ce8ade0
TG		 1976}
1977
1978static int ip6_pkt_prohibit_out(struct sk_buff *skb)
1979{
adf30907 1980 skb->dev = skb_dst(skb)->dev;
612f09e8 1981 return ip6_pkt_drop(skb, ICMPV6_ADM_PROHIBITED, IPSTATS_MIB_OUTNOROUTES);
9ce8ade0
TG		 1982}
1983
6723ab54
DM		 1984#endif
1985
1da177e4
LT		 1986/*
1987 * Allocate a dst for local (unicast / anycast) address.
1988 */
1989
1990struct rt6_info *addrconf_dst_alloc(struct inet6_dev *idev,
1991 const struct in6_addr *addr,
1992 int anycast)
1993{
c346dca1 1994 struct net *net = dev_net(idev->dev);
86393e52 1995 struct rt6_info *rt = ip6_dst_alloc(&net->ipv6.ip6_dst_ops);
14deae41 1996 struct neighbour *neigh;
1da177e4 1997
40385653
BG		 1998 if (rt == NULL) {
1999 if (net_ratelimit())
2000 pr_warning("IPv6: Maximum number of routes reached,"
2001 " consider increasing route/max_size.\n");
1da177e4 2002 return ERR_PTR(-ENOMEM);
40385653 2003 }
1da177e4 2004
5578689a 2005 dev_hold(net->loopback_dev);
1da177e4
LT		 2006 in6_dev_hold(idev);
2007
d8d1f30b
CG		 2008 rt->dst.flags = DST_HOST;
2009 rt->dst.input = ip6_input;
2010 rt->dst.output = ip6_output;
5578689a 2011 rt->rt6i_dev = net->loopback_dev;
1da177e4 2012 rt->rt6i_idev = idev;
defb3519 2013 dst_metric_set(&rt->dst, RTAX_HOPLIMIT, -1);
d8d1f30b 2014 rt->dst.obsolete = -1;
1da177e4
LT		 2015
2016 rt->rt6i_flags = RTF_UP | RTF_NONEXTHOP;
58c4fb86
YH		 2017 if (anycast)
2018 rt->rt6i_flags |= RTF_ANYCAST;
2019 else
1da177e4 2020 rt->rt6i_flags |= RTF_LOCAL;
14deae41
DM		 2021 neigh = ndisc_get_neigh(rt->rt6i_dev, &rt->rt6i_gateway);
2022 if (IS_ERR(neigh)) {
d8d1f30b 2023 dst_free(&rt->dst);
14deae41
DM		 2024
2025 /* We are casting this because that is the return
2026 * value type. But an errno encoded pointer is the
2027 * same regardless of the underlying pointer type,
2028 * and that's what we are returning. So this is OK.
2029 */
2030 return (struct rt6_info *) neigh;
1da177e4 2031 }
14deae41 2032 rt->rt6i_nexthop = neigh;
1da177e4
LT		 2033
2034 ipv6_addr_copy(&rt->rt6i_dst.addr, addr);
2035 rt->rt6i_dst.plen = 128;
5578689a 2036 rt->rt6i_table = fib6_get_table(net, RT6_TABLE_LOCAL);
1da177e4 2037
d8d1f30b 2038 atomic_set(&rt->dst.__refcnt, 1);
1da177e4
LT		 2039
2040 return rt;
2041}
2042
8ed67789
DL		 2043struct arg_dev_net {
2044 struct net_device *dev;
2045 struct net *net;
2046};
2047
1da177e4
LT		 2048static int fib6_ifdown(struct rt6_info *rt, void *arg)
2049{
bc3ef660 2050 const struct arg_dev_net *adn = arg;
2051 const struct net_device *dev = adn->dev;
8ed67789 2052
bc3ef660 2053 if ((rt->rt6i_dev == dev || dev == NULL) &&
2054 rt != adn->net->ipv6.ip6_null_entry) {
1da177e4
LT		 2055 RT6_TRACE("deleted by ifdown %p\n", rt);
2056 return -1;
2057 }
2058 return 0;
2059}
2060
f3db4851 2061void rt6_ifdown(struct net *net, struct net_device *dev)
1da177e4 2062{
8ed67789
DL		 2063 struct arg_dev_net adn = {
2064 .dev = dev,
2065 .net = net,
2066 };
2067
2068 fib6_clean_all(net, fib6_ifdown, 0, &adn);
1e493d19 2069 icmp6_clean_all(fib6_ifdown, &adn);
1da177e4
LT		 2070}
2071
2072struct rt6_mtu_change_arg
2073{
2074 struct net_device *dev;
2075 unsigned mtu;
2076};
2077
2078static int rt6_mtu_change_route(struct rt6_info *rt, void *p_arg)
2079{
2080 struct rt6_mtu_change_arg *arg = (struct rt6_mtu_change_arg *) p_arg;
2081 struct inet6_dev *idev;
2082
2083 /* In IPv6 pmtu discovery is not optional,
2084 so that RTAX_MTU lock cannot disable it.
2085 We still use this lock to block changes
2086 caused by addrconf/ndisc.
2087 */
2088
2089 idev = __in6_dev_get(arg->dev);
2090 if (idev == NULL)
2091 return 0;
2092
2093 /* For administrative MTU increase, there is no way to discover
2094 IPv6 PMTU increase, so PMTU increase should be updated here.
2095 Since RFC 1981 doesn't include administrative MTU increase
2096 update PMTU increase is a MUST. (i.e. jumbo frame)
2097 */
2098 /*
2099 If new MTU is less than route PMTU, this new MTU will be the
2100 lowest MTU in the path, update the route PMTU to reflect PMTU
2101 decreases; if new MTU is greater than route PMTU, and the
2102 old MTU is the lowest MTU in the path, update the route PMTU
2103 to reflect the increase. In this case if the other nodes' MTU
2104 also have the lowest MTU, TOO BIG MESSAGE will be lead to
2105 PMTU discouvery.
2106 */
2107 if (rt->rt6i_dev == arg->dev &&
d8d1f30b
CG		 2108 !dst_metric_locked(&rt->dst, RTAX_MTU) &&
2109 (dst_mtu(&rt->dst) >= arg->mtu ||
2110 (dst_mtu(&rt->dst) < arg->mtu &&
2111 dst_mtu(&rt->dst) == idev->cnf.mtu6))) {
defb3519 2112 dst_metric_set(&rt->dst, RTAX_MTU, arg->mtu);
566cfd8f 2113 }
1da177e4
LT		 2114 return 0;
2115}
2116
2117void rt6_mtu_change(struct net_device *dev, unsigned mtu)
2118{
c71099ac
TG		 2119 struct rt6_mtu_change_arg arg = {
2120 .dev = dev,
2121 .mtu = mtu,
2122 };
1da177e4 2123
c346dca1 2124 fib6_clean_all(dev_net(dev), rt6_mtu_change_route, 0, &arg);
1da177e4
LT		 2125}
2126
ef7c79ed 2127static const struct nla_policy rtm_ipv6_policy[RTA_MAX+1] = {
5176f91e 2128 [RTA_GATEWAY] = { .len = sizeof(struct in6_addr) },
86872cb5 2129 [RTA_OIF] = { .type = NLA_U32 },
ab364a6f 2130 [RTA_IIF] = { .type = NLA_U32 },
86872cb5
TG		 2131 [RTA_PRIORITY] = { .type = NLA_U32 },
2132 [RTA_METRICS] = { .type = NLA_NESTED },
2133};
2134
2135static int rtm_to_fib6_config(struct sk_buff *skb, struct nlmsghdr *nlh,
2136 struct fib6_config *cfg)
1da177e4 2137{
86872cb5
TG		 2138 struct rtmsg *rtm;
2139 struct nlattr *tb[RTA_MAX+1];
2140 int err;
1da177e4 2141
86872cb5
TG		 2142 err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_ipv6_policy);
2143 if (err < 0)
2144 goto errout;
1da177e4 2145
86872cb5
TG		 2146 err = -EINVAL;
2147 rtm = nlmsg_data(nlh);
2148 memset(cfg, 0, sizeof(*cfg));
2149
2150 cfg->fc_table = rtm->rtm_table;
2151 cfg->fc_dst_len = rtm->rtm_dst_len;
2152 cfg->fc_src_len = rtm->rtm_src_len;
2153 cfg->fc_flags = RTF_UP;
2154 cfg->fc_protocol = rtm->rtm_protocol;
2155
2156 if (rtm->rtm_type == RTN_UNREACHABLE)
2157 cfg->fc_flags |= RTF_REJECT;
2158
ab79ad14
MŻ		 2159 if (rtm->rtm_type == RTN_LOCAL)
2160 cfg->fc_flags |= RTF_LOCAL;
2161
86872cb5
TG		 2162 cfg->fc_nlinfo.pid = NETLINK_CB(skb).pid;
2163 cfg->fc_nlinfo.nlh = nlh;
3b1e0a65 2164 cfg->fc_nlinfo.nl_net = sock_net(skb->sk);
86872cb5
TG		 2165
2166 if (tb[RTA_GATEWAY]) {
2167 nla_memcpy(&cfg->fc_gateway, tb[RTA_GATEWAY], 16);
2168 cfg->fc_flags |= RTF_GATEWAY;
1da177e4 2169 }
86872cb5
TG		 2170
2171 if (tb[RTA_DST]) {
2172 int plen = (rtm->rtm_dst_len + 7) >> 3;
2173
2174 if (nla_len(tb[RTA_DST]) < plen)
2175 goto errout;
2176
2177 nla_memcpy(&cfg->fc_dst, tb[RTA_DST], plen);
1da177e4 2178 }
86872cb5
TG		 2179
2180 if (tb[RTA_SRC]) {
2181 int plen = (rtm->rtm_src_len + 7) >> 3;
2182
2183 if (nla_len(tb[RTA_SRC]) < plen)
2184 goto errout;
2185
2186 nla_memcpy(&cfg->fc_src, tb[RTA_SRC], plen);
1da177e4 2187 }
86872cb5
TG		 2188
2189 if (tb[RTA_OIF])
2190 cfg->fc_ifindex = nla_get_u32(tb[RTA_OIF]);
2191
2192 if (tb[RTA_PRIORITY])
2193 cfg->fc_metric = nla_get_u32(tb[RTA_PRIORITY]);
2194
2195 if (tb[RTA_METRICS]) {
2196 cfg->fc_mx = nla_data(tb[RTA_METRICS]);
2197 cfg->fc_mx_len = nla_len(tb[RTA_METRICS]);
1da177e4 2198 }
86872cb5
TG		 2199
2200 if (tb[RTA_TABLE])
2201 cfg->fc_table = nla_get_u32(tb[RTA_TABLE]);
2202
2203 err = 0;
2204errout:
2205 return err;
1da177e4
LT		 2206}
2207
c127ea2c 2208static int inet6_rtm_delroute(struct sk_buff *skb, struct nlmsghdr* nlh, void *arg)
1da177e4 2209{
86872cb5
TG		 2210 struct fib6_config cfg;
2211 int err;
1da177e4 2212
86872cb5
TG		 2213 err = rtm_to_fib6_config(skb, nlh, &cfg);
2214 if (err < 0)
2215 return err;
2216
2217 return ip6_route_del(&cfg);
1da177e4
LT		 2218}
2219
c127ea2c 2220static int inet6_rtm_newroute(struct sk_buff *skb, struct nlmsghdr* nlh, void *arg)
1da177e4 2221{
86872cb5
TG		 2222 struct fib6_config cfg;
2223 int err;
1da177e4 2224
86872cb5
TG		 2225 err = rtm_to_fib6_config(skb, nlh, &cfg);
2226 if (err < 0)
2227 return err;
2228
2229 return ip6_route_add(&cfg);
1da177e4
LT		 2230}
2231
339bf98f
TG		 2232static inline size_t rt6_nlmsg_size(void)
2233{
2234 return NLMSG_ALIGN(sizeof(struct rtmsg))
2235 + nla_total_size(16) /* RTA_SRC */
2236 + nla_total_size(16) /* RTA_DST */
2237 + nla_total_size(16) /* RTA_GATEWAY */
2238 + nla_total_size(16) /* RTA_PREFSRC */
2239 + nla_total_size(4) /* RTA_TABLE */
2240 + nla_total_size(4) /* RTA_IIF */
2241 + nla_total_size(4) /* RTA_OIF */
2242 + nla_total_size(4) /* RTA_PRIORITY */
6a2b9ce0 2243 + RTAX_MAX * nla_total_size(4) /* RTA_METRICS */
339bf98f
TG		 2244 + nla_total_size(sizeof(struct rta_cacheinfo));
2245}
2246
191cd582
BH		 2247static int rt6_fill_node(struct net *net,
2248 struct sk_buff *skb, struct rt6_info *rt,
0d51aa80
JHS		 2249 struct in6_addr *dst, struct in6_addr *src,
2250 int iif, int type, u32 pid, u32 seq,
7bc570c8 2251 int prefix, int nowait, unsigned int flags)
1da177e4
LT		 2252{
2253 struct rtmsg *rtm;
2d7202bf 2254 struct nlmsghdr *nlh;
e3703b3d 2255 long expires;
9e762a4a 2256 u32 table;
1da177e4
LT		 2257
2258 if (prefix) { /* user wants prefix routes only */
2259 if (!(rt->rt6i_flags & RTF_PREFIX_RT)) {
2260 /* success since this is not a prefix route */
2261 return 1;
2262 }
2263 }
2264
2d7202bf
TG		 2265 nlh = nlmsg_put(skb, pid, seq, type, sizeof(*rtm), flags);
2266 if (nlh == NULL)
26932566 2267 return -EMSGSIZE;
2d7202bf
TG		 2268
2269 rtm = nlmsg_data(nlh);
1da177e4
LT		 2270 rtm->rtm_family = AF_INET6;
2271 rtm->rtm_dst_len = rt->rt6i_dst.plen;
2272 rtm->rtm_src_len = rt->rt6i_src.plen;
2273 rtm->rtm_tos = 0;
c71099ac 2274 if (rt->rt6i_table)
9e762a4a 2275 table = rt->rt6i_table->tb6_id;
c71099ac 2276 else
9e762a4a
PM		 2277 table = RT6_TABLE_UNSPEC;
2278 rtm->rtm_table = table;
2d7202bf 2279 NLA_PUT_U32(skb, RTA_TABLE, table);
1da177e4
LT		 2280 if (rt->rt6i_flags&RTF_REJECT)
2281 rtm->rtm_type = RTN_UNREACHABLE;
ab79ad14
MŻ		 2282 else if (rt->rt6i_flags&RTF_LOCAL)
2283 rtm->rtm_type = RTN_LOCAL;
1da177e4
LT		 2284 else if (rt->rt6i_dev && (rt->rt6i_dev->flags&IFF_LOOPBACK))
2285 rtm->rtm_type = RTN_LOCAL;
2286 else
2287 rtm->rtm_type = RTN_UNICAST;
2288 rtm->rtm_flags = 0;
2289 rtm->rtm_scope = RT_SCOPE_UNIVERSE;
2290 rtm->rtm_protocol = rt->rt6i_protocol;
2291 if (rt->rt6i_flags&RTF_DYNAMIC)
2292 rtm->rtm_protocol = RTPROT_REDIRECT;
2293 else if (rt->rt6i_flags & RTF_ADDRCONF)
2294 rtm->rtm_protocol = RTPROT_KERNEL;
2295 else if (rt->rt6i_flags&RTF_DEFAULT)
2296 rtm->rtm_protocol = RTPROT_RA;
2297
2298 if (rt->rt6i_flags&RTF_CACHE)
2299 rtm->rtm_flags |= RTM_F_CLONED;
2300
2301 if (dst) {
2d7202bf 2302 NLA_PUT(skb, RTA_DST, 16, dst);
1ab1457c 2303 rtm->rtm_dst_len = 128;
1da177e4 2304 } else if (rtm->rtm_dst_len)
2d7202bf 2305 NLA_PUT(skb, RTA_DST, 16, &rt->rt6i_dst.addr);
1da177e4
LT		 2306#ifdef CONFIG_IPV6_SUBTREES
2307 if (src) {
2d7202bf 2308 NLA_PUT(skb, RTA_SRC, 16, src);
1ab1457c 2309 rtm->rtm_src_len = 128;
1da177e4 2310 } else if (rtm->rtm_src_len)
2d7202bf 2311 NLA_PUT(skb, RTA_SRC, 16, &rt->rt6i_src.addr);
1da177e4 2312#endif
7bc570c8
YH		 2313 if (iif) {
2314#ifdef CONFIG_IPV6_MROUTE
2315 if (ipv6_addr_is_multicast(&rt->rt6i_dst.addr)) {
8229efda 2316 int err = ip6mr_get_route(net, skb, rtm, nowait);
7bc570c8
YH		 2317 if (err <= 0) {
2318 if (!nowait) {
2319 if (err == 0)
2320 return 0;
2321 goto nla_put_failure;
2322 } else {
2323 if (err == -EMSGSIZE)
2324 goto nla_put_failure;
2325 }
2326 }
2327 } else
2328#endif
2329 NLA_PUT_U32(skb, RTA_IIF, iif);
2330 } else if (dst) {
d8d1f30b 2331 struct inet6_dev *idev = ip6_dst_idev(&rt->dst);
1da177e4 2332 struct in6_addr saddr_buf;
191cd582 2333 if (ipv6_dev_get_saddr(net, idev ? idev->dev : NULL,
7cbca67c 2334 dst, 0, &saddr_buf) == 0)
2d7202bf 2335 NLA_PUT(skb, RTA_PREFSRC, 16, &saddr_buf);
1da177e4 2336 }
2d7202bf 2337
defb3519 2338 if (rtnetlink_put_metrics(skb, dst_metrics_ptr(&rt->dst)) < 0)
2d7202bf
TG		 2339 goto nla_put_failure;
2340
d8d1f30b
CG		 2341 if (rt->dst.neighbour)
2342 NLA_PUT(skb, RTA_GATEWAY, 16, &rt->dst.neighbour->primary_key);
2d7202bf 2343
d8d1f30b 2344 if (rt->dst.dev)
2d7202bf
TG		 2345 NLA_PUT_U32(skb, RTA_OIF, rt->rt6i_dev->ifindex);
2346
2347 NLA_PUT_U32(skb, RTA_PRIORITY, rt->rt6i_metric);
e3703b3d 2348
36e3deae
YH		 2349 if (!(rt->rt6i_flags & RTF_EXPIRES))
2350 expires = 0;
2351 else if (rt->rt6i_expires - jiffies < INT_MAX)
2352 expires = rt->rt6i_expires - jiffies;
2353 else
2354 expires = INT_MAX;
69cdf8f9 2355
d8d1f30b
CG		 2356 if (rtnl_put_cacheinfo(skb, &rt->dst, 0, 0, 0,
2357 expires, rt->dst.error) < 0)
e3703b3d 2358 goto nla_put_failure;
2d7202bf
TG		 2359
2360 return nlmsg_end(skb, nlh);
2361
2362nla_put_failure:
26932566
PM		 2363 nlmsg_cancel(skb, nlh);
2364 return -EMSGSIZE;
1da177e4
LT		 2365}
2366
1b43af54 2367int rt6_dump_route(struct rt6_info *rt, void *p_arg)
1da177e4
LT		 2368{
2369 struct rt6_rtnl_dump_arg *arg = (struct rt6_rtnl_dump_arg *) p_arg;
2370 int prefix;
2371
2d7202bf
TG		 2372 if (nlmsg_len(arg->cb->nlh) >= sizeof(struct rtmsg)) {
2373 struct rtmsg *rtm = nlmsg_data(arg->cb->nlh);
1da177e4
LT		 2374 prefix = (rtm->rtm_flags & RTM_F_PREFIX) != 0;
2375 } else
2376 prefix = 0;
2377
191cd582
BH		 2378 return rt6_fill_node(arg->net,
2379 arg->skb, rt, NULL, NULL, 0, RTM_NEWROUTE,
1da177e4 2380 NETLINK_CB(arg->cb->skb).pid, arg->cb->nlh->nlmsg_seq,
7bc570c8 2381 prefix, 0, NLM_F_MULTI);
1da177e4
LT		 2382}
2383
c127ea2c 2384static int inet6_rtm_getroute(struct sk_buff *in_skb, struct nlmsghdr* nlh, void *arg)
1da177e4 2385{
3b1e0a65 2386 struct net *net = sock_net(in_skb->sk);
ab364a6f
TG		 2387 struct nlattr *tb[RTA_MAX+1];
2388 struct rt6_info *rt;
1da177e4 2389 struct sk_buff *skb;
ab364a6f 2390 struct rtmsg *rtm;
1da177e4 2391 struct flowi fl;
ab364a6f 2392 int err, iif = 0;
1da177e4 2393
ab364a6f
TG		 2394 err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_ipv6_policy);
2395 if (err < 0)
2396 goto errout;
1da177e4 2397
ab364a6f 2398 err = -EINVAL;
1da177e4 2399 memset(&fl, 0, sizeof(fl));
1da177e4 2400
ab364a6f
TG		 2401 if (tb[RTA_SRC]) {
2402 if (nla_len(tb[RTA_SRC]) < sizeof(struct in6_addr))
2403 goto errout;
2404
2405 ipv6_addr_copy(&fl.fl6_src, nla_data(tb[RTA_SRC]));
2406 }
2407
2408 if (tb[RTA_DST]) {
2409 if (nla_len(tb[RTA_DST]) < sizeof(struct in6_addr))
2410 goto errout;
2411
2412 ipv6_addr_copy(&fl.fl6_dst, nla_data(tb[RTA_DST]));
2413 }
2414
2415 if (tb[RTA_IIF])
2416 iif = nla_get_u32(tb[RTA_IIF]);
2417
2418 if (tb[RTA_OIF])
2419 fl.oif = nla_get_u32(tb[RTA_OIF]);
1da177e4
LT		 2420
2421 if (iif) {
2422 struct net_device *dev;
5578689a 2423 dev = __dev_get_by_index(net, iif);
1da177e4
LT		 2424 if (!dev) {
2425 err = -ENODEV;
ab364a6f 2426 goto errout;
1da177e4
LT		 2427 }
2428 }
2429
ab364a6f
TG		 2430 skb = alloc_skb(NLMSG_GOODSIZE, GFP_KERNEL);
2431 if (skb == NULL) {
2432 err = -ENOBUFS;
2433 goto errout;
2434 }
1da177e4 2435
ab364a6f
TG		 2436 /* Reserve room for dummy headers, this skb can pass
2437 through good chunk of routing engine.
2438 */
459a98ed 2439 skb_reset_mac_header(skb);
ab364a6f 2440 skb_reserve(skb, MAX_HEADER + sizeof(struct ipv6hdr));
1da177e4 2441
8a3edd80 2442 rt = (struct rt6_info*) ip6_route_output(net, NULL, &fl);
d8d1f30b 2443 skb_dst_set(skb, &rt->dst);
1da177e4 2444
191cd582 2445 err = rt6_fill_node(net, skb, rt, &fl.fl6_dst, &fl.fl6_src, iif,
1da177e4 2446 RTM_NEWROUTE, NETLINK_CB(in_skb).pid,
7bc570c8 2447 nlh->nlmsg_seq, 0, 0, 0);
1da177e4 2448 if (err < 0) {
ab364a6f
TG		 2449 kfree_skb(skb);
2450 goto errout;
1da177e4
LT		 2451 }
2452
5578689a 2453 err = rtnl_unicast(skb, net, NETLINK_CB(in_skb).pid);
ab364a6f 2454errout:
1da177e4 2455 return err;
1da177e4
LT		 2456}
2457
86872cb5 2458void inet6_rt_notify(int event, struct rt6_info *rt, struct nl_info *info)
1da177e4
LT		 2459{
2460 struct sk_buff *skb;
5578689a 2461 struct net *net = info->nl_net;
528c4ceb
DL		 2462 u32 seq;
2463 int err;
2464
2465 err = -ENOBUFS;
2466 seq = info->nlh != NULL ? info->nlh->nlmsg_seq : 0;
86872cb5 2467
339bf98f 2468 skb = nlmsg_new(rt6_nlmsg_size(), gfp_any());
21713ebc
TG		 2469 if (skb == NULL)
2470 goto errout;
2471
191cd582 2472 err = rt6_fill_node(net, skb, rt, NULL, NULL, 0,
7bc570c8 2473 event, info->pid, seq, 0, 0, 0);
26932566
PM		 2474 if (err < 0) {
2475 /* -EMSGSIZE implies BUG in rt6_nlmsg_size() */
2476 WARN_ON(err == -EMSGSIZE);
2477 kfree_skb(skb);
2478 goto errout;
2479 }
1ce85fe4
PNA		 2480 rtnl_notify(skb, net, info->pid, RTNLGRP_IPV6_ROUTE,
2481 info->nlh, gfp_any());
2482 return;
21713ebc
TG		 2483errout:
2484 if (err < 0)
5578689a 2485 rtnl_set_sk_err(net, RTNLGRP_IPV6_ROUTE, err);
1da177e4
LT		 2486}
2487
8ed67789
DL		 2488static int ip6_route_dev_notify(struct notifier_block *this,
2489 unsigned long event, void *data)
2490{
2491 struct net_device *dev = (struct net_device *)data;
c346dca1 2492 struct net *net = dev_net(dev);
8ed67789
DL		 2493
2494 if (event == NETDEV_REGISTER && (dev->flags & IFF_LOOPBACK)) {
d8d1f30b 2495 net->ipv6.ip6_null_entry->dst.dev = dev;
8ed67789
DL		 2496 net->ipv6.ip6_null_entry->rt6i_idev = in6_dev_get(dev);
2497#ifdef CONFIG_IPV6_MULTIPLE_TABLES
d8d1f30b 2498 net->ipv6.ip6_prohibit_entry->dst.dev = dev;
8ed67789 2499 net->ipv6.ip6_prohibit_entry->rt6i_idev = in6_dev_get(dev);
d8d1f30b 2500 net->ipv6.ip6_blk_hole_entry->dst.dev = dev;
8ed67789
DL		 2501 net->ipv6.ip6_blk_hole_entry->rt6i_idev = in6_dev_get(dev);
2502#endif
2503 }
2504
2505 return NOTIFY_OK;
2506}
2507
1da177e4
LT		 2508/*
2509 * /proc
2510 */
2511
2512#ifdef CONFIG_PROC_FS
2513
1da177e4
LT		 2514struct rt6_proc_arg
2515{
2516 char *buffer;
2517 int offset;
2518 int length;
2519 int skip;
2520 int len;
2521};
2522
2523static int rt6_info_route(struct rt6_info *rt, void *p_arg)
2524{
33120b30 2525 struct seq_file *m = p_arg;
1da177e4 2526
4b7a4274 2527 seq_printf(m, "%pi6 %02x ", &rt->rt6i_dst.addr, rt->rt6i_dst.plen);
1da177e4
LT		 2528
2529#ifdef CONFIG_IPV6_SUBTREES
4b7a4274 2530 seq_printf(m, "%pi6 %02x ", &rt->rt6i_src.addr, rt->rt6i_src.plen);
1da177e4 2531#else
33120b30 2532 seq_puts(m, "00000000000000000000000000000000 00 ");
1da177e4
LT		 2533#endif
2534
2535 if (rt->rt6i_nexthop) {
4b7a4274 2536 seq_printf(m, "%pi6", rt->rt6i_nexthop->primary_key);
1da177e4 2537 } else {
33120b30 2538 seq_puts(m, "00000000000000000000000000000000");
1da177e4 2539 }
33120b30 2540 seq_printf(m, " %08x %08x %08x %08x %8s\n",
d8d1f30b
CG		 2541 rt->rt6i_metric, atomic_read(&rt->dst.__refcnt),
2542 rt->dst.__use, rt->rt6i_flags,
33120b30 2543 rt->rt6i_dev ? rt->rt6i_dev->name : "");
1da177e4
LT		 2544 return 0;
2545}
2546
33120b30 2547static int ipv6_route_show(struct seq_file *m, void *v)
1da177e4 2548{
f3db4851
DL		 2549 struct net *net = (struct net *)m->private;
2550 fib6_clean_all(net, rt6_info_route, 0, m);
33120b30
AD		 2551 return 0;
2552}
1da177e4 2553
33120b30
AD		 2554static int ipv6_route_open(struct inode *inode, struct file *file)
2555{
de05c557 2556 return single_open_net(inode, file, ipv6_route_show);
f3db4851
DL		 2557}
2558
33120b30
AD		 2559static const struct file_operations ipv6_route_proc_fops = {
2560 .owner = THIS_MODULE,
2561 .open = ipv6_route_open,
2562 .read = seq_read,
2563 .llseek = seq_lseek,
b6fcbdb4 2564 .release = single_release_net,
33120b30
AD		 2565};
2566
1da177e4
LT		 2567static int rt6_stats_seq_show(struct seq_file *seq, void *v)
2568{
69ddb805 2569 struct net *net = (struct net *)seq->private;
1da177e4 2570 seq_printf(seq, "%04x %04x %04x %04x %04x %04x %04x\n",
69ddb805
DL		 2571 net->ipv6.rt6_stats->fib_nodes,
2572 net->ipv6.rt6_stats->fib_route_nodes,
2573 net->ipv6.rt6_stats->fib_rt_alloc,
2574 net->ipv6.rt6_stats->fib_rt_entries,
2575 net->ipv6.rt6_stats->fib_rt_cache,
fc66f95c 2576 dst_entries_get_slow(&net->ipv6.ip6_dst_ops),
69ddb805 2577 net->ipv6.rt6_stats->fib_discarded_routes);
1da177e4
LT		 2578
2579 return 0;
2580}
2581
2582static int rt6_stats_seq_open(struct inode *inode, struct file *file)
2583{
de05c557 2584 return single_open_net(inode, file, rt6_stats_seq_show);
69ddb805
DL		 2585}
2586
9a32144e 2587static const struct file_operations rt6_stats_seq_fops = {
1da177e4
LT		 2588 .owner = THIS_MODULE,
2589 .open = rt6_stats_seq_open,
2590 .read = seq_read,
2591 .llseek = seq_lseek,
b6fcbdb4 2592 .release = single_release_net,
1da177e4
LT		 2593};
2594#endif /* CONFIG_PROC_FS */
2595
2596#ifdef CONFIG_SYSCTL
2597
1da177e4 2598static
8d65af78 2599int ipv6_sysctl_rtcache_flush(ctl_table *ctl, int write,
1da177e4
LT		 2600 void __user *buffer, size_t *lenp, loff_t *ppos)
2601{
5b7c931d
DL		 2602 struct net *net = current->nsproxy->net_ns;
2603 int delay = net->ipv6.sysctl.flush_delay;
1da177e4 2604 if (write) {
8d65af78 2605 proc_dointvec(ctl, write, buffer, lenp, ppos);
5b7c931d 2606 fib6_run_gc(delay <= 0 ? ~0UL : (unsigned long)delay, net);
1da177e4
LT		 2607 return 0;
2608 } else
2609 return -EINVAL;
2610}
2611
760f2d01 2612ctl_table ipv6_route_table_template[] = {
1ab1457c 2613 {
1da177e4 2614 .procname = "flush",
4990509f 2615 .data = &init_net.ipv6.sysctl.flush_delay,
1da177e4 2616 .maxlen = sizeof(int),
89c8b3a1 2617 .mode = 0200,
6d9f239a 2618 .proc_handler = ipv6_sysctl_rtcache_flush
1da177e4
LT		 2619 },
2620 {
1da177e4 2621 .procname = "gc_thresh",
9a7ec3a9 2622 .data = &ip6_dst_ops_template.gc_thresh,
1da177e4
LT		 2623 .maxlen = sizeof(int),
2624 .mode = 0644,
6d9f239a 2625 .proc_handler = proc_dointvec,
1da177e4
LT		 2626 },
2627 {
1da177e4 2628 .procname = "max_size",
4990509f 2629 .data = &init_net.ipv6.sysctl.ip6_rt_max_size,
1da177e4
LT		 2630 .maxlen = sizeof(int),
2631 .mode = 0644,
6d9f239a 2632 .proc_handler = proc_dointvec,
1da177e4
LT		 2633 },
2634 {
1da177e4 2635 .procname = "gc_min_interval",
4990509f 2636 .data = &init_net.ipv6.sysctl.ip6_rt_gc_min_interval,
1da177e4
LT		 2637 .maxlen = sizeof(int),
2638 .mode = 0644,
6d9f239a 2639 .proc_handler = proc_dointvec_jiffies,
1da177e4
LT		 2640 },
2641 {
1da177e4 2642 .procname = "gc_timeout",
4990509f 2643 .data = &init_net.ipv6.sysctl.ip6_rt_gc_timeout,
1da177e4
LT		 2644 .maxlen = sizeof(int),
2645 .mode = 0644,
6d9f239a 2646 .proc_handler = proc_dointvec_jiffies,
1da177e4
LT		 2647 },
2648 {
1da177e4 2649 .procname = "gc_interval",
4990509f 2650 .data = &init_net.ipv6.sysctl.ip6_rt_gc_interval,
1da177e4
LT		 2651 .maxlen = sizeof(int),
2652 .mode = 0644,
6d9f239a 2653 .proc_handler = proc_dointvec_jiffies,
1da177e4
LT		 2654 },
2655 {
1da177e4 2656 .procname = "gc_elasticity",
4990509f 2657 .data = &init_net.ipv6.sysctl.ip6_rt_gc_elasticity,
1da177e4
LT		 2658 .maxlen = sizeof(int),
2659 .mode = 0644,
f3d3f616 2660 .proc_handler = proc_dointvec,
1da177e4
LT		 2661 },
2662 {
1da177e4 2663 .procname = "mtu_expires",
4990509f 2664 .data = &init_net.ipv6.sysctl.ip6_rt_mtu_expires,
1da177e4
LT		 2665 .maxlen = sizeof(int),
2666 .mode = 0644,
6d9f239a 2667 .proc_handler = proc_dointvec_jiffies,
1da177e4
LT		 2668 },
2669 {
1da177e4 2670 .procname = "min_adv_mss",
4990509f 2671 .data = &init_net.ipv6.sysctl.ip6_rt_min_advmss,
1da177e4
LT		 2672 .maxlen = sizeof(int),
2673 .mode = 0644,
f3d3f616 2674 .proc_handler = proc_dointvec,
1da177e4
LT		 2675 },
2676 {
1da177e4 2677 .procname = "gc_min_interval_ms",
4990509f 2678 .data = &init_net.ipv6.sysctl.ip6_rt_gc_min_interval,
1da177e4
LT		 2679 .maxlen = sizeof(int),
2680 .mode = 0644,
6d9f239a 2681 .proc_handler = proc_dointvec_ms_jiffies,
1da177e4 2682 },
f8572d8f 2683 { }
1da177e4
LT		 2684};
2685
2c8c1e72 2686struct ctl_table * __net_init ipv6_route_sysctl_init(struct net *net)
760f2d01
DL		 2687{
2688 struct ctl_table *table;
2689
2690 table = kmemdup(ipv6_route_table_template,
2691 sizeof(ipv6_route_table_template),
2692 GFP_KERNEL);
5ee09105
YH		 2693
2694 if (table) {
2695 table[0].data = &net->ipv6.sysctl.flush_delay;
86393e52 2696 table[1].data = &net->ipv6.ip6_dst_ops.gc_thresh;
5ee09105
YH		 2697 table[2].data = &net->ipv6.sysctl.ip6_rt_max_size;
2698 table[3].data = &net->ipv6.sysctl.ip6_rt_gc_min_interval;
2699 table[4].data = &net->ipv6.sysctl.ip6_rt_gc_timeout;
2700 table[5].data = &net->ipv6.sysctl.ip6_rt_gc_interval;
2701 table[6].data = &net->ipv6.sysctl.ip6_rt_gc_elasticity;
2702 table[7].data = &net->ipv6.sysctl.ip6_rt_mtu_expires;
2703 table[8].data = &net->ipv6.sysctl.ip6_rt_min_advmss;
9c69fabe 2704 table[9].data = &net->ipv6.sysctl.ip6_rt_gc_min_interval;
5ee09105
YH		 2705 }
2706
760f2d01
DL		 2707 return table;
2708}
1da177e4
LT		 2709#endif
2710
2c8c1e72 2711static int __net_init ip6_route_net_init(struct net *net)
cdb18761 2712{
633d424b 2713 int ret = -ENOMEM;
8ed67789 2714
86393e52
AD		 2715 memcpy(&net->ipv6.ip6_dst_ops, &ip6_dst_ops_template,
2716 sizeof(net->ipv6.ip6_dst_ops));
f2fc6a54 2717
fc66f95c
ED		 2718 if (dst_entries_init(&net->ipv6.ip6_dst_ops) < 0)
2719 goto out_ip6_dst_ops;
2720
8ed67789
DL		 2721 net->ipv6.ip6_null_entry = kmemdup(&ip6_null_entry_template,
2722 sizeof(*net->ipv6.ip6_null_entry),
2723 GFP_KERNEL);
2724 if (!net->ipv6.ip6_null_entry)
fc66f95c 2725 goto out_ip6_dst_entries;
d8d1f30b 2726 net->ipv6.ip6_null_entry->dst.path =
8ed67789 2727 (struct dst_entry *)net->ipv6.ip6_null_entry;
d8d1f30b 2728 net->ipv6.ip6_null_entry->dst.ops = &net->ipv6.ip6_dst_ops;
62fa8a84
DM		 2729 dst_init_metrics(&net->ipv6.ip6_null_entry->dst,
2730 ip6_template_metrics, true);
8ed67789
DL		 2731
2732#ifdef CONFIG_IPV6_MULTIPLE_TABLES
2733 net->ipv6.ip6_prohibit_entry = kmemdup(&ip6_prohibit_entry_template,
2734 sizeof(*net->ipv6.ip6_prohibit_entry),
2735 GFP_KERNEL);
68fffc67
PZ		 2736 if (!net->ipv6.ip6_prohibit_entry)
2737 goto out_ip6_null_entry;
d8d1f30b 2738 net->ipv6.ip6_prohibit_entry->dst.path =
8ed67789 2739 (struct dst_entry *)net->ipv6.ip6_prohibit_entry;
d8d1f30b 2740 net->ipv6.ip6_prohibit_entry->dst.ops = &net->ipv6.ip6_dst_ops;
62fa8a84
DM		 2741 dst_init_metrics(&net->ipv6.ip6_prohibit_entry->dst,
2742 ip6_template_metrics, true);
8ed67789
DL		 2743
2744 net->ipv6.ip6_blk_hole_entry = kmemdup(&ip6_blk_hole_entry_template,
2745 sizeof(*net->ipv6.ip6_blk_hole_entry),
2746 GFP_KERNEL);
68fffc67
PZ		 2747 if (!net->ipv6.ip6_blk_hole_entry)
2748 goto out_ip6_prohibit_entry;
d8d1f30b 2749 net->ipv6.ip6_blk_hole_entry->dst.path =
8ed67789 2750 (struct dst_entry *)net->ipv6.ip6_blk_hole_entry;
d8d1f30b 2751 net->ipv6.ip6_blk_hole_entry->dst.ops = &net->ipv6.ip6_dst_ops;
62fa8a84
DM		 2752 dst_init_metrics(&net->ipv6.ip6_blk_hole_entry->dst,
2753 ip6_template_metrics, true);
8ed67789
DL		 2754#endif
2755
b339a47c
PZ		 2756 net->ipv6.sysctl.flush_delay = 0;
2757 net->ipv6.sysctl.ip6_rt_max_size = 4096;
2758 net->ipv6.sysctl.ip6_rt_gc_min_interval = HZ / 2;
2759 net->ipv6.sysctl.ip6_rt_gc_timeout = 60*HZ;
2760 net->ipv6.sysctl.ip6_rt_gc_interval = 30*HZ;
2761 net->ipv6.sysctl.ip6_rt_gc_elasticity = 9;
2762 net->ipv6.sysctl.ip6_rt_mtu_expires = 10*60*HZ;
2763 net->ipv6.sysctl.ip6_rt_min_advmss = IPV6_MIN_MTU - 20 - 40;
2764
cdb18761
DL		 2765#ifdef CONFIG_PROC_FS
2766 proc_net_fops_create(net, "ipv6_route", 0, &ipv6_route_proc_fops);
2767 proc_net_fops_create(net, "rt6_stats", S_IRUGO, &rt6_stats_seq_fops);
2768#endif
6891a346
BT		 2769 net->ipv6.ip6_rt_gc_expire = 30*HZ;
2770
8ed67789
DL		 2771 ret = 0;
2772out:
2773 return ret;
f2fc6a54 2774
68fffc67
PZ		 2775#ifdef CONFIG_IPV6_MULTIPLE_TABLES
2776out_ip6_prohibit_entry:
2777 kfree(net->ipv6.ip6_prohibit_entry);
2778out_ip6_null_entry:
2779 kfree(net->ipv6.ip6_null_entry);
2780#endif
fc66f95c
ED		 2781out_ip6_dst_entries:
2782 dst_entries_destroy(&net->ipv6.ip6_dst_ops);
f2fc6a54 2783out_ip6_dst_ops:
f2fc6a54 2784 goto out;
cdb18761
DL		 2785}
2786
2c8c1e72 2787static void __net_exit ip6_route_net_exit(struct net *net)
cdb18761
DL		 2788{
2789#ifdef CONFIG_PROC_FS
2790 proc_net_remove(net, "ipv6_route");
2791 proc_net_remove(net, "rt6_stats");
2792#endif
8ed67789
DL		 2793 kfree(net->ipv6.ip6_null_entry);
2794#ifdef CONFIG_IPV6_MULTIPLE_TABLES
2795 kfree(net->ipv6.ip6_prohibit_entry);
2796 kfree(net->ipv6.ip6_blk_hole_entry);
2797#endif
41bb78b4 2798 dst_entries_destroy(&net->ipv6.ip6_dst_ops);
cdb18761
DL		 2799}
2800
2801static struct pernet_operations ip6_route_net_ops = {
2802 .init = ip6_route_net_init,
2803 .exit = ip6_route_net_exit,
2804};
2805
8ed67789
DL		 2806static struct notifier_block ip6_route_dev_notifier = {
2807 .notifier_call = ip6_route_dev_notify,
2808 .priority = 0,
2809};
2810
433d49c3 2811int __init ip6_route_init(void)
1da177e4 2812{
433d49c3
DL		 2813 int ret;
2814
9a7ec3a9
DL		 2815 ret = -ENOMEM;
2816 ip6_dst_ops_template.kmem_cachep =
e5d679f3 2817 kmem_cache_create("ip6_dst_cache", sizeof(struct rt6_info), 0,
f845ab6b 2818 SLAB_HWCACHE_ALIGN, NULL);
9a7ec3a9 2819 if (!ip6_dst_ops_template.kmem_cachep)
c19a28e1 2820 goto out;
14e50e57 2821
fc66f95c 2822 ret = dst_entries_init(&ip6_dst_blackhole_ops);
8ed67789 2823 if (ret)
bdb3289f 2824 goto out_kmem_cache;
bdb3289f 2825
fc66f95c
ED		 2826 ret = register_pernet_subsys(&ip6_route_net_ops);
2827 if (ret)
2828 goto out_dst_entries;
2829
5dc121e9
AE		 2830 ip6_dst_blackhole_ops.kmem_cachep = ip6_dst_ops_template.kmem_cachep;
2831
8ed67789
DL		 2832 /* Registering of the loopback is done before this portion of code,
2833 * the loopback reference in rt6_info will not be taken, do it
2834 * manually for init_net */
d8d1f30b 2835 init_net.ipv6.ip6_null_entry->dst.dev = init_net.loopback_dev;
8ed67789
DL		 2836 init_net.ipv6.ip6_null_entry->rt6i_idev = in6_dev_get(init_net.loopback_dev);
2837 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
d8d1f30b 2838 init_net.ipv6.ip6_prohibit_entry->dst.dev = init_net.loopback_dev;
8ed67789 2839 init_net.ipv6.ip6_prohibit_entry->rt6i_idev = in6_dev_get(init_net.loopback_dev);
d8d1f30b 2840 init_net.ipv6.ip6_blk_hole_entry->dst.dev = init_net.loopback_dev;
8ed67789
DL		 2841 init_net.ipv6.ip6_blk_hole_entry->rt6i_idev = in6_dev_get(init_net.loopback_dev);
2842 #endif
433d49c3
DL		 2843 ret = fib6_init();
2844 if (ret)
8ed67789 2845 goto out_register_subsys;
433d49c3 2846
433d49c3
DL		 2847 ret = xfrm6_init();
2848 if (ret)
cdb18761 2849 goto out_fib6_init;
c35b7e72 2850
433d49c3
DL		 2851 ret = fib6_rules_init();
2852 if (ret)
2853 goto xfrm6_init;
7e5449c2 2854
433d49c3
DL		 2855 ret = -ENOBUFS;
2856 if (__rtnl_register(PF_INET6, RTM_NEWROUTE, inet6_rtm_newroute, NULL) ||
2857 __rtnl_register(PF_INET6, RTM_DELROUTE, inet6_rtm_delroute, NULL) ||
2858 __rtnl_register(PF_INET6, RTM_GETROUTE, inet6_rtm_getroute, NULL))
2859 goto fib6_rules_init;
c127ea2c 2860
8ed67789 2861 ret = register_netdevice_notifier(&ip6_route_dev_notifier);
cdb18761
DL		 2862 if (ret)
2863 goto fib6_rules_init;
8ed67789 2864
433d49c3
DL		 2865out:
2866 return ret;
2867
2868fib6_rules_init:
433d49c3
DL		 2869 fib6_rules_cleanup();
2870xfrm6_init:
433d49c3 2871 xfrm6_fini();
433d49c3 2872out_fib6_init:
433d49c3 2873 fib6_gc_cleanup();
8ed67789
DL		 2874out_register_subsys:
2875 unregister_pernet_subsys(&ip6_route_net_ops);
fc66f95c
ED		 2876out_dst_entries:
2877 dst_entries_destroy(&ip6_dst_blackhole_ops);
433d49c3 2878out_kmem_cache:
f2fc6a54 2879 kmem_cache_destroy(ip6_dst_ops_template.kmem_cachep);
433d49c3 2880 goto out;
1da177e4
LT		 2881}
2882
2883void ip6_route_cleanup(void)
2884{
8ed67789 2885 unregister_netdevice_notifier(&ip6_route_dev_notifier);
101367c2 2886 fib6_rules_cleanup();
1da177e4 2887 xfrm6_fini();
1da177e4 2888 fib6_gc_cleanup();
8ed67789 2889 unregister_pernet_subsys(&ip6_route_net_ops);
41bb78b4 2890 dst_entries_destroy(&ip6_dst_blackhole_ops);
f2fc6a54 2891 kmem_cache_destroy(ip6_dst_ops_template.kmem_cachep);
1da177e4 2892}
Ubuntu Artful kernel mirror