]> git.proxmox.com Git - mirror_lxc.git/blame - src/lxc/network.h
Merge pull request #3059 from brauner/2019-06-21/seccomp_notify
[mirror_lxc.git] / src / lxc / network.h
CommitLineData
0ad19a3f 1/*
2 * lxc: linux Container library
3 *
4 * (C) Copyright IBM Corp. 2007, 2008
5 *
6 * Authors:
9afe19d6 7 * Daniel Lezcano <daniel.lezcano at free.fr>
0ad19a3f 8 *
9 * This library is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU Lesser General Public
11 * License as published by the Free Software Foundation; either
12 * version 2.1 of the License, or (at your option) any later version.
13 *
14 * This library is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
17 * Lesser General Public License for more details.
18 *
19 * You should have received a copy of the GNU Lesser General Public
20 * License along with this library; if not, write to the Free Software
250b1eec 21 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
0ad19a3f 22 */
f1a4a029
ÇO
23#ifndef __LXC_NETWORK_H
24#define __LXC_NETWORK_H
0ad19a3f 25
ebc73a67 26#include <arpa/inet.h>
938980ba 27#include <linux/types.h>
d38dd64a
CB
28#include <stdbool.h>
29#include <stdio.h>
ebc73a67 30#include <sys/socket.h>
d38dd64a 31#include <unistd.h>
ebc73a67 32
811ef482
CB
33#include "list.h"
34
35struct lxc_conf;
36struct lxc_handler;
37struct lxc_netdev;
38
39enum {
40 LXC_NET_EMPTY,
41 LXC_NET_VETH,
42 LXC_NET_MACVLAN,
c9f52382 43 LXC_NET_IPVLAN,
811ef482
CB
44 LXC_NET_PHYS,
45 LXC_NET_VLAN,
46 LXC_NET_NONE,
47 LXC_NET_MAXCONFTYPE,
48};
49
50/*
51 * Defines the structure to configure an ipv4 address
52 * @address : ipv4 address
53 * @broadcast : ipv4 broadcast address
54 * @mask : network mask
55 */
56struct lxc_inetdev {
57 struct in_addr addr;
58 struct in_addr bcast;
59 unsigned int prefix;
60};
61
62struct lxc_route {
63 struct in_addr addr;
64};
65
66/*
67 * Defines the structure to configure an ipv6 address
68 * @flags : set the address up
69 * @address : ipv6 address
70 * @broadcast : ipv6 broadcast address
71 * @mask : network mask
72 */
73struct lxc_inet6dev {
74 struct in6_addr addr;
75 struct in6_addr mcast;
76 struct in6_addr acast;
77 unsigned int prefix;
78};
79
80struct lxc_route6 {
81 struct in6_addr addr;
82};
83
4239e9c3
CB
84/* Contains information about the host side veth device.
85 * @pair : Name of the host side veth device.
86 * If the user requested that the host veth device be created with a
87 * specific names this field will be set. If this field is set @veth1
88 * is not set.
89 * @veth1 : Name of the host side veth device.
90 * If the user did not request that the host veth device be created
91 * with a specific name this field will be set. If this field is set
92 * @pair is not set.
93 * @ifindex : Ifindex of the network device.
94 */
811ef482 95struct ifla_veth {
de4855a8 96 char pair[IFNAMSIZ];
4239e9c3
CB
97 char veth1[IFNAMSIZ];
98 int ifindex;
d4a7da46 99 struct lxc_list ipv4_routes;
100 struct lxc_list ipv6_routes;
811ef482
CB
101};
102
103struct ifla_vlan {
104 unsigned int flags;
105 unsigned int fmask;
106 unsigned short vid;
107 unsigned short pad;
108};
109
110struct ifla_macvlan {
111 int mode; /* private, vepa, bridge, passthru */
112};
113
c9f52382 114struct ifla_ipvlan {
115 int mode; /* l3, l3s, l2 */
116 int isolation; /* bridge, private, vepa */
117};
118
790255cf
CB
119/* Contains information about the physical network device as seen from the host.
120 * @ifindex : The ifindex of the physical network device in the host's network
121 * namespace.
122 */
123struct ifla_phys {
124 int ifindex;
0b154989 125 int mtu;
790255cf
CB
126};
127
811ef482 128union netdev_p {
790255cf 129 struct ifla_macvlan macvlan_attr;
c9f52382 130 struct ifla_ipvlan ipvlan_attr;
790255cf 131 struct ifla_phys phys_attr;
811ef482
CB
132 struct ifla_veth veth_attr;
133 struct ifla_vlan vlan_attr;
811ef482
CB
134};
135
136/*
137 * Defines a structure to configure a network device
085bb443
CB
138 * @idx : network counter
139 * @ifindex : ifindex of the network device
140 * Note that this is the ifindex of the network device in
141 * the container's network namespace. If the network device
142 * consists of a pair of network devices (e.g. veth pairs
143 * attached to a network bridge) then this index cannot be
144 * used to identify or modify the host veth device. See
145 * struct ifla_veth for the host side information.
146 * @type : network type (veth, macvlan, vlan, ...)
147 * @flags : flag of the network device (IFF_UP, ... )
148 * @link : lxc.net.[i].link, name of bridge or host iface to attach
149 * if any
150 * @name : lxc.net.[i].name, name of iface on the container side
151 * @hwaddr : mac address
152 * @mtu : maximum transmission unit
153 * @priv : information specific to the specificed network type
154 * Note that this is a union so whether accessing a struct
155 * is possible is dependent on the network type.
156 * @ipv4 : a list of ipv4 addresses to be set on the network device
157 * @ipv6 : a list of ipv6 addresses to be set on the network device
158 * @ipv4_gateway_auto : whether the ipv4 gateway is to be automatically gathered
159 * from the associated @link
a2f9a670 160 * @ipv4_gateway_dev : whether the ipv4 gateway is to be set as a device route
085bb443
CB
161 * @ipv4_gateway : ipv4 gateway
162 * @ipv6_gateway_auto : whether the ipv6 gateway is to be automatically gathered
163 * from the associated @link
a2f9a670 164 * @ipv6_gateway_dev : whether the ipv6 gateway is to be set as a device route
085bb443
CB
165 * @ipv6_gateway : ipv6 gateway
166 * @upscript : a script filename to be executed during interface
167 * configuration
168 * @downscript : a script filename to be executed during interface
169 * destruction
811ef482
CB
170 */
171struct lxc_netdev {
172 ssize_t idx;
085bb443 173 int ifindex;
811ef482
CB
174 int type;
175 int flags;
de4855a8 176 char link[IFNAMSIZ];
6509154d 177 bool l2proxy;
de4855a8 178 char name[IFNAMSIZ];
811ef482
CB
179 char *hwaddr;
180 char *mtu;
181 union netdev_p priv;
182 struct lxc_list ipv4;
183 struct lxc_list ipv6;
811ef482 184 bool ipv4_gateway_auto;
a2f9a670 185 bool ipv4_gateway_dev;
085bb443 186 struct in_addr *ipv4_gateway;
811ef482 187 bool ipv6_gateway_auto;
a2f9a670 188 bool ipv6_gateway_dev;
085bb443 189 struct in6_addr *ipv6_gateway;
811ef482
CB
190 char *upscript;
191 char *downscript;
192};
193
ebc73a67 194/* Convert a string mac address to a socket structure. */
0ad19a3f 195extern int lxc_convert_mac(char *macaddr, struct sockaddr *sockaddr);
196
ebc73a67 197/* Move a device between namespaces. */
535e8859 198extern int lxc_netdev_move_by_index(int ifindex, pid_t pid, const char *ifname);
ebc73a67
CB
199extern int lxc_netdev_move_by_name(const char *ifname, pid_t pid,
200 const char *newname);
0ad19a3f 201
ebc73a67 202/* Delete a network device. */
b84f58b9
DL
203extern int lxc_netdev_delete_by_name(const char *name);
204extern int lxc_netdev_delete_by_index(int ifindex);
0ad19a3f 205
ebc73a67 206/* Change the device name. */
b84f58b9
DL
207extern int lxc_netdev_rename_by_name(const char *oldname, const char *newname);
208extern int lxc_netdev_rename_by_index(int ifindex, const char *newname);
b9a5bb58 209
8befa924
SH
210extern int netdev_set_flag(const char *name, int flag);
211
ebc73a67 212/* Set the device network up or down. */
efa1cf45 213extern int lxc_netdev_isup(const char *name);
d472214b
DL
214extern int lxc_netdev_up(const char *name);
215extern int lxc_netdev_down(const char *name);
0ad19a3f 216
ebc73a67 217/* Change the mtu size for the specified device. */
d472214b 218extern int lxc_netdev_set_mtu(const char *name, int mtu);
75d09f83 219
ebc73a67 220/* Create a virtual network devices. */
497353b6 221extern int lxc_veth_create(const char *name1, const char *name2);
e892973e 222extern int lxc_macvlan_create(const char *master, const char *name, int mode);
ebc73a67
CB
223extern int lxc_vlan_create(const char *master, const char *name,
224 unsigned short vid);
26c39028 225
ebc73a67 226/* Set ip address. */
1f1b18e7
DL
227extern int lxc_ipv6_addr_add(int ifindex, struct in6_addr *addr,
228 struct in6_addr *mcast,
229 struct in6_addr *acast, int prefix);
230
231extern int lxc_ipv4_addr_add(int ifindex, struct in_addr *addr,
232 struct in_addr *bcast, int prefix);
0ad19a3f 233
ebc73a67 234/* Get ip address. */
19a26f82
MK
235extern int lxc_ipv4_addr_get(int ifindex, struct in_addr **res);
236extern int lxc_ipv6_addr_get(int ifindex, struct in6_addr **res);
237
ebc73a67 238/* Set default route. */
f8fee0e2
MK
239extern int lxc_ipv4_gateway_add(int ifindex, struct in_addr *gw);
240extern int lxc_ipv6_gateway_add(int ifindex, struct in6_addr *gw);
241
ebc73a67 242/* Attach an interface to the bridge. */
581c75e7
CB
243extern int lxc_bridge_attach(const char *bridge, const char *ifname);
244extern int lxc_ovs_delete_port(const char *bridge, const char *nic);
245
246extern bool is_ovs_bridge(const char *bridge);
0ad19a3f 247
ebc73a67 248/* Create default gateway. */
497353b6
DL
249extern int lxc_route_create_default(const char *addr, const char *ifname,
250 int gateway);
0ad19a3f 251
ebc73a67 252/* Delete default gateway. */
497353b6
DL
253extern int lxc_route_delete_default(const char *addr, const char *ifname,
254 int gateway);
0ad19a3f 255
ebc73a67 256/* Activate neighbor proxying. */
497353b6 257extern int lxc_neigh_proxy_on(const char *name, int family);
0ad19a3f 258
ebc73a67 259/* Disable neighbor proxying. */
497353b6 260extern int lxc_neigh_proxy_off(const char *name, int family);
0ad19a3f 261
811ef482
CB
262/* Generate a new unique network interface name.
263 * Allocated memory must be freed by caller.
264 */
966e9f1f 265extern char *lxc_mkifname(char *template);
a0265685 266
72d0e1cb 267extern const char *lxc_net_type_to_str(int type);
8befa924 268extern int setup_private_host_hw_addr(char *veth1);
0130df54 269extern int netdev_get_mtu(int ifindex);
811ef482 270extern int lxc_create_network_priv(struct lxc_handler *handler);
74c6e2b0 271extern int lxc_network_move_created_netdev_priv(const char *lxcpath,
f0ecc19d 272 const char *lxcname,
74c6e2b0
CB
273 struct lxc_list *network,
274 pid_t pid);
bb84beda 275extern void lxc_delete_network(struct lxc_handler *handler);
811ef482 276extern int lxc_find_gateway_addresses(struct lxc_handler *handler);
f0ecc19d 277extern int lxc_create_network_unpriv(const char *lxcpath, const char *lxcname,
4d781681 278 struct lxc_list *network, pid_t pid, unsigned int hook_version);
811ef482 279extern int lxc_requests_empty_network(struct lxc_handler *handler);
b809f232 280extern int lxc_restore_phys_nics_to_netns(struct lxc_handler *handler);
811ef482
CB
281extern int lxc_setup_network_in_child_namespaces(const struct lxc_conf *conf,
282 struct lxc_list *network);
7ab1ba02
CB
283extern int lxc_network_send_veth_names_to_child(struct lxc_handler *handler);
284extern int lxc_network_recv_veth_names_from_parent(struct lxc_handler *handler);
a1ae535a
CB
285extern int lxc_network_send_name_and_ifindex_to_parent(struct lxc_handler *handler);
286extern int lxc_network_recv_name_and_ifindex_from_child(struct lxc_handler *handler);
1cd95214 287extern int lxc_netns_set_nsid(int netns_fd);
938980ba 288extern int lxc_netns_get_nsid(__s32 fd);
ebc73a67
CB
289
290#endif /* __LXC_NETWORK_H */