bridge/fdb.c

   1 /* SPDX-License-Identifier: GPL-2.0 */
   2 /*
   3  * Get/set/delete fdb table with netlink
   4  *
   5  * TODO: merge/replace this with ip neighbour
   6  *
   7  * Authors:     Stephen Hemminger <shemminger@vyatta.com>
   8  */
   9
  10 #include <stdio.h>
  11 #include <stdlib.h>
  12 #include <unistd.h>
  13 #include <netdb.h>
  14 #include <time.h>
  15 #include <fcntl.h>
  16 #include <sys/socket.h>
  17 #include <sys/time.h>
  18 #include <net/if.h>
  19 #include <netinet/in.h>
  20 #include <linux/if_bridge.h>
  21 #include <linux/if_ether.h>
  22 #include <linux/neighbour.h>
  23 #include <string.h>
  24 #include <limits.h>
  25 #include <json_writer.h>
  26 #include <stdbool.h>
  27
  28 #include "libnetlink.h"
  29 #include "br_common.h"
  30 #include "rt_names.h"
  31 #include "utils.h"
  32
  33 static unsigned int filter_index, filter_vlan, filter_state;
  34
  35 json_writer_t *jw_global;
  36
  37 static void usage(void)
  38 {
  39         fprintf(stderr,
  40                 "Usage: bridge fdb { add | append | del | replace } ADDR dev DEV\n"
  41                 "              [ self ] [ master ] [ use ] [ router ]\n"
  42                 "              [ local | static | dynamic ] [ dst IPADDR ] [ vlan VID ]\n"
  43                 "              [ port PORT] [ vni VNI ] [ via DEV ]\n"
  44                 "       bridge fdb [ show [ br BRDEV ] [ brport DEV ] [ vlan VID ] [ state STATE ] ]\n");
  45         exit(-1);
  46 }
  47
  48 static const char *state_n2a(unsigned int s)
  49 {
  50         static char buf[32];
  51
  52         if (s & NUD_PERMANENT)
  53                 return "permanent";
  54
  55         if (s & NUD_NOARP)
  56                 return "static";
  57
  58         if (s & NUD_STALE)
  59                 return "stale";
  60
  61         if (s & NUD_REACHABLE)
  62                 return "";
  63
  64         sprintf(buf, "state=%#x", s);
  65         return buf;
  66 }
  67
  68 static int state_a2n(unsigned int *s, const char *arg)
  69 {
  70         if (matches(arg, "permanent") == 0)
  71                 *s = NUD_PERMANENT;
  72         else if (matches(arg, "static") == 0 || matches(arg, "temp") == 0)
  73                 *s = NUD_NOARP;
  74         else if (matches(arg, "stale") == 0)
  75                 *s = NUD_STALE;
  76         else if (matches(arg, "reachable") == 0 || matches(arg, "dynamic") == 0)
  77                 *s = NUD_REACHABLE;
  78         else if (strcmp(arg, "all") == 0)
  79                 *s = ~0;
  80         else if (get_unsigned(s, arg, 0))
  81                 return -1;
  82
  83         return 0;
  84 }
  85
  86 static void start_json_fdb_flags_array(bool *fdb_flags)
  87 {
  88         if (*fdb_flags)
  89                 return;
  90         jsonw_name(jw_global, "flags");
  91         jsonw_start_array(jw_global);
  92         *fdb_flags = true;
  93 }
  94
  95 int print_fdb(const struct sockaddr_nl *who, struct nlmsghdr *n, void *arg)
  96 {
  97         FILE *fp = arg;
  98         struct ndmsg *r = NLMSG_DATA(n);
  99         int len = n->nlmsg_len;
 100         struct rtattr *tb[NDA_MAX+1];
 101         __u16 vid = 0;
 102         bool fdb_flags = false;
 103         const char *state_s;
 104
 105         if (n->nlmsg_type != RTM_NEWNEIGH && n->nlmsg_type != RTM_DELNEIGH) {
 106                 fprintf(stderr, "Not RTM_NEWNEIGH: %08x %08x %08x\n",
 107                         n->nlmsg_len, n->nlmsg_type, n->nlmsg_flags);
 108                 return 0;
 109         }
 110
 111         len -= NLMSG_LENGTH(sizeof(*r));
 112         if (len < 0) {
 113                 fprintf(stderr, "BUG: wrong nlmsg len %d\n", len);
 114                 return -1;
 115         }
 116
 117         if (r->ndm_family != AF_BRIDGE)
 118                 return 0;
 119
 120         if (filter_index && filter_index != r->ndm_ifindex)
 121                 return 0;
 122
 123         if (filter_state && !(r->ndm_state & filter_state))
 124                 return 0;
 125
 126         parse_rtattr(tb, NDA_MAX, NDA_RTA(r),
 127                      n->nlmsg_len - NLMSG_LENGTH(sizeof(*r)));
 128
 129         if (tb[NDA_VLAN])
 130                 vid = rta_getattr_u16(tb[NDA_VLAN]);
 131
 132         if (filter_vlan && filter_vlan != vid)
 133                 return 0;
 134
 135         if (jw_global) {
 136                 jsonw_pretty(jw_global, 1);
 137                 jsonw_start_object(jw_global);
 138         }
 139
 140         if (n->nlmsg_type == RTM_DELNEIGH) {
 141                 if (jw_global)
 142                         jsonw_string_field(jw_global, "opCode", "deleted");
 143                 else
 144                         fprintf(fp, "Deleted ");
 145         }
 146
 147         if (tb[NDA_LLADDR]) {
 148                 SPRINT_BUF(b1);
 149                 ll_addr_n2a(RTA_DATA(tb[NDA_LLADDR]),
 150                             RTA_PAYLOAD(tb[NDA_LLADDR]),
 151                             ll_index_to_type(r->ndm_ifindex),
 152                             b1, sizeof(b1));
 153                 if (jw_global)
 154                         jsonw_string_field(jw_global, "mac", b1);
 155                 else
 156                         fprintf(fp, "%s ", b1);
 157         }
 158
 159         if (!filter_index && r->ndm_ifindex) {
 160                 if (jw_global)
 161                         jsonw_string_field(jw_global, "dev",
 162                                            ll_index_to_name(r->ndm_ifindex));
 163                 else
 164                         fprintf(fp, "dev %s ",
 165                                 ll_index_to_name(r->ndm_ifindex));
 166         }
 167
 168         if (tb[NDA_DST]) {
 169                 int family = AF_INET;
 170                 const char *abuf_s;
 171
 172                 if (RTA_PAYLOAD(tb[NDA_DST]) == sizeof(struct in6_addr))
 173                         family = AF_INET6;
 174
 175                 abuf_s = format_host(family,
 176                                      RTA_PAYLOAD(tb[NDA_DST]),
 177                                      RTA_DATA(tb[NDA_DST]));
 178                 if (jw_global)
 179                         jsonw_string_field(jw_global, "dst", abuf_s);
 180                 else
 181                         fprintf(fp, "dst %s ", abuf_s);
 182         }
 183
 184         if (vid) {
 185                 if (jw_global)
 186                         jsonw_uint_field(jw_global, "vlan", vid);
 187                 else
 188                         fprintf(fp, "vlan %hu ", vid);
 189         }
 190
 191         if (tb[NDA_PORT]) {
 192                 if (jw_global)
 193                         jsonw_uint_field(jw_global, "port",
 194                                          rta_getattr_be16(tb[NDA_PORT]));
 195                 else
 196                         fprintf(fp, "port %d ",
 197                                 rta_getattr_be16(tb[NDA_PORT]));
 198         }
 199
 200         if (tb[NDA_VNI]) {
 201                 if (jw_global)
 202                         jsonw_uint_field(jw_global, "vni",
 203                                          rta_getattr_u32(tb[NDA_VNI]));
 204                 else
 205                         fprintf(fp, "vni %d ",
 206                                 rta_getattr_u32(tb[NDA_VNI]));
 207         }
 208
 209         if (tb[NDA_SRC_VNI]) {
 210                 if (jw_global)
 211                         jsonw_uint_field(jw_global, "src_vni",
 212                                          rta_getattr_u32(tb[NDA_SRC_VNI]));
 213                 else
 214                         fprintf(fp, "src_vni %d ",
 215                                 rta_getattr_u32(tb[NDA_SRC_VNI]));
 216         }
 217
 218         if (tb[NDA_IFINDEX]) {
 219                 unsigned int ifindex = rta_getattr_u32(tb[NDA_IFINDEX]);
 220
 221                 if (ifindex) {
 222                         char ifname[IF_NAMESIZE];
 223
 224                         if (!tb[NDA_LINK_NETNSID] &&
 225                             if_indextoname(ifindex, ifname)) {
 226                                 if (jw_global)
 227                                         jsonw_string_field(jw_global, "viaIf",
 228                                                            ifname);
 229                                 else
 230                                         fprintf(fp, "via %s ", ifname);
 231                         } else {
 232                                 if (jw_global)
 233                                         jsonw_uint_field(jw_global, "viaIfIndex",
 234                                                          ifindex);
 235                                 else
 236                                         fprintf(fp, "via ifindex %u ", ifindex);
 237                         }
 238                 }
 239         }
 240
 241         if (tb[NDA_LINK_NETNSID]) {
 242                 if (jw_global)
 243                         jsonw_uint_field(jw_global, "linkNetNsId",
 244                                          rta_getattr_u32(tb[NDA_LINK_NETNSID]));
 245                 else
 246                         fprintf(fp, "link-netnsid %d ",
 247                                 rta_getattr_u32(tb[NDA_LINK_NETNSID]));
 248         }
 249
 250         if (show_stats && tb[NDA_CACHEINFO]) {
 251                 struct nda_cacheinfo *ci = RTA_DATA(tb[NDA_CACHEINFO]);
 252                 int hz = get_user_hz();
 253
 254                 if (jw_global) {
 255                         jsonw_uint_field(jw_global, "used",
 256                                 ci->ndm_used/hz);
 257                         jsonw_uint_field(jw_global, "updated",
 258                                 ci->ndm_updated/hz);
 259                 } else {
 260                         fprintf(fp, "used %d/%d ", ci->ndm_used/hz,
 261                                         ci->ndm_updated/hz);
 262                 }
 263         }
 264
 265         if (jw_global) {
 266                 if (r->ndm_flags & NTF_SELF) {
 267                         start_json_fdb_flags_array(&fdb_flags);
 268                         jsonw_string(jw_global, "self");
 269                 }
 270                 if (r->ndm_flags & NTF_ROUTER) {
 271                         start_json_fdb_flags_array(&fdb_flags);
 272                         jsonw_string(jw_global, "router");
 273                 }
 274                 if (r->ndm_flags & NTF_EXT_LEARNED) {
 275                         start_json_fdb_flags_array(&fdb_flags);
 276                         jsonw_string(jw_global, "extern_learn");
 277                 }
 278                 if (r->ndm_flags & NTF_OFFLOADED) {
 279                         start_json_fdb_flags_array(&fdb_flags);
 280                         jsonw_string(jw_global, "offload");
 281                 }
 282                 if (r->ndm_flags & NTF_MASTER)
 283                         jsonw_string(jw_global, "master");
 284                 if (fdb_flags)
 285                         jsonw_end_array(jw_global);
 286
 287                 if (tb[NDA_MASTER])
 288                         jsonw_string_field(jw_global,
 289                                            "master",
 290                                            ll_index_to_name(rta_getattr_u32(tb[NDA_MASTER])));
 291
 292         } else {
 293                 if (r->ndm_flags & NTF_SELF)
 294                         fprintf(fp, "self ");
 295                 if (r->ndm_flags & NTF_ROUTER)
 296                         fprintf(fp, "router ");
 297                 if (r->ndm_flags & NTF_EXT_LEARNED)
 298                         fprintf(fp, "extern_learn ");
 299                 if (r->ndm_flags & NTF_OFFLOADED)
 300                         fprintf(fp, "offload ");
 301                 if (tb[NDA_MASTER]) {
 302                         fprintf(fp, "master %s ",
 303                                 ll_index_to_name(rta_getattr_u32(tb[NDA_MASTER])));
 304                 } else if (r->ndm_flags & NTF_MASTER) {
 305                         fprintf(fp, "master ");
 306                 }
 307         }
 308
 309         state_s = state_n2a(r->ndm_state);
 310         if (jw_global) {
 311                 if (state_s[0])
 312                         jsonw_string_field(jw_global, "state", state_s);
 313
 314                 jsonw_end_object(jw_global);
 315         } else {
 316                 fprintf(fp, "%s\n", state_s);
 317
 318                 fflush(fp);
 319         }
 320
 321         return 0;
 322 }
 323
 324 static int fdb_show(int argc, char **argv)
 325 {
 326         struct {
 327                 struct nlmsghdr n;
 328                 struct ifinfomsg        ifm;
 329                 char                    buf[256];
 330         } req = {
 331                 .n.nlmsg_len = NLMSG_LENGTH(sizeof(struct ifinfomsg)),
 332                 .ifm.ifi_family = PF_BRIDGE,
 333         };
 334
 335         char *filter_dev = NULL;
 336         char *br = NULL;
 337         int msg_size = sizeof(struct ifinfomsg);
 338
 339         while (argc > 0) {
 340                 if ((strcmp(*argv, "brport") == 0) || strcmp(*argv, "dev") == 0) {
 341                         NEXT_ARG();
 342                         filter_dev = *argv;
 343                 } else if (strcmp(*argv, "br") == 0) {
 344                         NEXT_ARG();
 345                         br = *argv;
 346                 } else if (strcmp(*argv, "vlan") == 0) {
 347                         NEXT_ARG();
 348                         if (filter_vlan)
 349                                 duparg("vlan", *argv);
 350                         filter_vlan = atoi(*argv);
 351                 } else if (strcmp(*argv, "state") == 0) {
 352                         unsigned int state;
 353
 354                         NEXT_ARG();
 355                         if (state_a2n(&state, *argv))
 356                                 invarg("invalid state", *argv);
 357                         filter_state |= state;
 358                 } else {
 359                         if (matches(*argv, "help") == 0)
 360                                 usage();
 361                 }
 362                 argc--; argv++;
 363         }
 364
 365         if (br) {
 366                 int br_ifindex = ll_name_to_index(br);
 367
 368                 if (br_ifindex == 0) {
 369                         fprintf(stderr, "Cannot find bridge device \"%s\"\n", br);
 370                         return -1;
 371                 }
 372                 addattr32(&req.n, sizeof(req), IFLA_MASTER, br_ifindex);
 373                 msg_size += RTA_LENGTH(4);
 374         }
 375
 376         /*we'll keep around filter_dev for older kernels */
 377         if (filter_dev) {
 378                 filter_index = if_nametoindex(filter_dev);
 379                 if (filter_index == 0) {
 380                         fprintf(stderr, "Cannot find device \"%s\"\n",
 381                                 filter_dev);
 382                         return -1;
 383                 }
 384                 req.ifm.ifi_index = filter_index;
 385         }
 386
 387         if (rtnl_dump_request(&rth, RTM_GETNEIGH, &req.ifm, msg_size) < 0) {
 388                 perror("Cannot send dump request");
 389                 exit(1);
 390         }
 391
 392         if (json_output) {
 393                 jw_global = jsonw_new(stdout);
 394                 if (!jw_global) {
 395                         fprintf(stderr, "Error allocation json object\n");
 396                         exit(1);
 397                 }
 398                 jsonw_start_array(jw_global);
 399         }
 400         if (rtnl_dump_filter(&rth, print_fdb, stdout) < 0) {
 401                 fprintf(stderr, "Dump terminated\n");
 402                 exit(1);
 403         }
 404         if (jw_global) {
 405                 jsonw_end_array(jw_global);
 406                 jsonw_destroy(&jw_global);
 407         }
 408
 409         return 0;
 410 }
 411
 412 static int fdb_modify(int cmd, int flags, int argc, char **argv)
 413 {
 414         struct {
 415                 struct nlmsghdr n;
 416                 struct ndmsg            ndm;
 417                 char                    buf[256];
 418         } req = {
 419                 .n.nlmsg_len = NLMSG_LENGTH(sizeof(struct ndmsg)),
 420                 .n.nlmsg_flags = NLM_F_REQUEST | flags,
 421                 .n.nlmsg_type = cmd,
 422                 .ndm.ndm_family = PF_BRIDGE,
 423                 .ndm.ndm_state = NUD_NOARP,
 424         };
 425         char *addr = NULL;
 426         char *d = NULL;
 427         char abuf[ETH_ALEN];
 428         int dst_ok = 0;
 429         inet_prefix dst;
 430         unsigned long port = 0;
 431         unsigned long vni = ~0;
 432         unsigned int via = 0;
 433         char *endptr;
 434         short vid = -1;
 435
 436         while (argc > 0) {
 437                 if (strcmp(*argv, "dev") == 0) {
 438                         NEXT_ARG();
 439                         d = *argv;
 440                 } else if (strcmp(*argv, "dst") == 0) {
 441                         NEXT_ARG();
 442                         if (dst_ok)
 443                                 duparg2("dst", *argv);
 444                         get_addr(&dst, *argv, preferred_family);
 445                         dst_ok = 1;
 446                 } else if (strcmp(*argv, "port") == 0) {
 447
 448                         NEXT_ARG();
 449                         port = strtoul(*argv, &endptr, 0);
 450                         if (endptr && *endptr) {
 451                                 struct servent *pse;
 452
 453                                 pse = getservbyname(*argv, "udp");
 454                                 if (!pse)
 455                                         invarg("invalid port\n", *argv);
 456                                 port = ntohs(pse->s_port);
 457                         } else if (port > 0xffff)
 458                                 invarg("invalid port\n", *argv);
 459                 } else if (strcmp(*argv, "vni") == 0) {
 460                         NEXT_ARG();
 461                         vni = strtoul(*argv, &endptr, 0);
 462                         if ((endptr && *endptr) ||
 463                             (vni >> 24) || vni == ULONG_MAX)
 464                                 invarg("invalid VNI\n", *argv);
 465                 } else if (strcmp(*argv, "via") == 0) {
 466                         NEXT_ARG();
 467                         via = if_nametoindex(*argv);
 468                         if (via == 0)
 469                                 invarg("invalid device\n", *argv);
 470                 } else if (strcmp(*argv, "self") == 0) {
 471                         req.ndm.ndm_flags |= NTF_SELF;
 472                 } else if (matches(*argv, "master") == 0) {
 473                         req.ndm.ndm_flags |= NTF_MASTER;
 474                 } else if (matches(*argv, "router") == 0) {
 475                         req.ndm.ndm_flags |= NTF_ROUTER;
 476                 } else if (matches(*argv, "local") == 0 ||
 477                            matches(*argv, "permanent") == 0) {
 478                         req.ndm.ndm_state |= NUD_PERMANENT;
 479                 } else if (matches(*argv, "temp") == 0 ||
 480                            matches(*argv, "static") == 0) {
 481                         req.ndm.ndm_state |= NUD_REACHABLE;
 482                 } else if (matches(*argv, "dynamic") == 0) {
 483                         req.ndm.ndm_state |= NUD_REACHABLE;
 484                         req.ndm.ndm_state &= ~NUD_NOARP;
 485                 } else if (matches(*argv, "vlan") == 0) {
 486                         if (vid >= 0)
 487                                 duparg2("vlan", *argv);
 488                         NEXT_ARG();
 489                         vid = atoi(*argv);
 490                 } else if (matches(*argv, "use") == 0) {
 491                         req.ndm.ndm_flags |= NTF_USE;
 492                 } else {
 493                         if (strcmp(*argv, "to") == 0)
 494                                 NEXT_ARG();
 495
 496                         if (matches(*argv, "help") == 0)
 497                                 usage();
 498                         if (addr)
 499                                 duparg2("to", *argv);
 500                         addr = *argv;
 501                 }
 502                 argc--; argv++;
 503         }
 504
 505         if (d == NULL || addr == NULL) {
 506                 fprintf(stderr, "Device and address are required arguments.\n");
 507                 return -1;
 508         }
 509
 510         /* Assume self */
 511         if (!(req.ndm.ndm_flags&(NTF_SELF|NTF_MASTER)))
 512                 req.ndm.ndm_flags |= NTF_SELF;
 513
 514         /* Assume permanent */
 515         if (!(req.ndm.ndm_state&(NUD_PERMANENT|NUD_REACHABLE)))
 516                 req.ndm.ndm_state |= NUD_PERMANENT;
 517
 518         if (sscanf(addr, "%hhx:%hhx:%hhx:%hhx:%hhx:%hhx",
 519                    abuf, abuf+1, abuf+2,
 520                    abuf+3, abuf+4, abuf+5) != 6) {
 521                 fprintf(stderr, "Invalid mac address %s\n", addr);
 522                 return -1;
 523         }
 524
 525         addattr_l(&req.n, sizeof(req), NDA_LLADDR, abuf, ETH_ALEN);
 526         if (dst_ok)
 527                 addattr_l(&req.n, sizeof(req), NDA_DST, &dst.data, dst.bytelen);
 528
 529         if (vid >= 0)
 530                 addattr16(&req.n, sizeof(req), NDA_VLAN, vid);
 531
 532         if (port) {
 533                 unsigned short dport;
 534
 535                 dport = htons((unsigned short)port);
 536                 addattr16(&req.n, sizeof(req), NDA_PORT, dport);
 537         }
 538         if (vni != ~0)
 539                 addattr32(&req.n, sizeof(req), NDA_VNI, vni);
 540         if (via)
 541                 addattr32(&req.n, sizeof(req), NDA_IFINDEX, via);
 542
 543         req.ndm.ndm_ifindex = ll_name_to_index(d);
 544         if (req.ndm.ndm_ifindex == 0) {
 545                 fprintf(stderr, "Cannot find device \"%s\"\n", d);
 546                 return -1;
 547         }
 548
 549         if (rtnl_talk(&rth, &req.n, NULL) < 0)
 550                 return -1;
 551
 552         return 0;
 553 }
 554
 555 int do_fdb(int argc, char **argv)
 556 {
 557         ll_init_map(&rth);
 558
 559         if (argc > 0) {
 560                 if (matches(*argv, "add") == 0)
 561                         return fdb_modify(RTM_NEWNEIGH, NLM_F_CREATE|NLM_F_EXCL, argc-1, argv+1);
 562                 if (matches(*argv, "append") == 0)
 563                         return fdb_modify(RTM_NEWNEIGH, NLM_F_CREATE|NLM_F_APPEND, argc-1, argv+1);
 564                 if (matches(*argv, "replace") == 0)
 565                         return fdb_modify(RTM_NEWNEIGH, NLM_F_CREATE|NLM_F_REPLACE, argc-1, argv+1);
 566                 if (matches(*argv, "delete") == 0)
 567                         return fdb_modify(RTM_DELNEIGH, 0, argc-1, argv+1);
 568                 if (matches(*argv, "show") == 0 ||
 569                     matches(*argv, "lst") == 0 ||
 570                     matches(*argv, "list") == 0)
 571                         return fdb_show(argc-1, argv+1);
 572                 if (matches(*argv, "help") == 0)
 573                         usage();
 574         } else
 575                 return fdb_show(0, NULL);
 576
 577         fprintf(stderr, "Command \"%s\" is unknown, try \"bridge fdb help\".\n", *argv);
 578         exit(-1);
 579 }