3 * Copyright (C) 2014 6WIND S.A.
5 * This file is part of GNU Zebra.
7 * GNU Zebra is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published
9 * by the Free Software Foundation; either version 2, or (at your
10 * option) any later version.
12 * GNU Zebra is distributed in the hope that it will be useful, but
13 * WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * General Public License for more details.
17 * You should have received a copy of the GNU General Public License along
18 * with this program; see the file COPYING; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
37 #include "nexthop_group.h"
38 #include "lib_errors.h"
40 /* default VRF ID value used when VRF backend is not NETNS */
41 #define VRF_DEFAULT_INTERNAL 0
42 #define VRF_DEFAULT_NAME_INTERNAL "default"
44 DEFINE_MTYPE_STATIC(LIB
, VRF
, "VRF")
45 DEFINE_MTYPE_STATIC(LIB
, VRF_BITMAP
, "VRF bit-map")
49 static __inline
int vrf_id_compare(const struct vrf
*, const struct vrf
*);
50 static __inline
int vrf_name_compare(const struct vrf
*, const struct vrf
*);
52 RB_GENERATE(vrf_id_head
, vrf
, id_entry
, vrf_id_compare
);
53 RB_GENERATE(vrf_name_head
, vrf
, name_entry
, vrf_name_compare
);
55 struct vrf_id_head vrfs_by_id
= RB_INITIALIZER(&vrfs_by_id
);
56 struct vrf_name_head vrfs_by_name
= RB_INITIALIZER(&vrfs_by_name
);
58 static int vrf_backend
;
59 static int vrf_backend_configured
;
60 static struct zebra_privs_t
*vrf_daemon_privs
;
61 static char vrf_default_name
[VRF_NAMSIZ
] = VRF_DEFAULT_NAME_INTERNAL
;
64 * Turn on/off debug code
67 static int debug_vrf
= 0;
69 /* Holding VRF hooks */
71 int (*vrf_new_hook
)(struct vrf
*);
72 int (*vrf_delete_hook
)(struct vrf
*);
73 int (*vrf_enable_hook
)(struct vrf
*);
74 int (*vrf_disable_hook
)(struct vrf
*);
75 int (*vrf_update_name_hook
)(struct vrf
*vrf
);
80 static int vrf_is_enabled(struct vrf
*vrf
);
82 /* VRF list existance check by name. */
83 struct vrf
*vrf_lookup_by_name(const char *name
)
86 strlcpy(vrf
.name
, name
, sizeof(vrf
.name
));
87 return (RB_FIND(vrf_name_head
, &vrfs_by_name
, &vrf
));
90 static __inline
int vrf_id_compare(const struct vrf
*a
, const struct vrf
*b
)
92 return (a
->vrf_id
- b
->vrf_id
);
95 static int vrf_name_compare(const struct vrf
*a
, const struct vrf
*b
)
97 return strcmp(a
->name
, b
->name
);
100 /* if ns_id is different and not VRF_UNKNOWN,
101 * then update vrf identifier, and enable VRF
103 static void vrf_update_vrf_id(ns_id_t ns_id
, void *opaqueptr
)
105 ns_id_t vrf_id
= (vrf_id_t
)ns_id
;
107 struct vrf
*vrf
= (struct vrf
*)opaqueptr
;
111 old_vrf_id
= vrf
->vrf_id
;
112 if (vrf_id
== vrf
->vrf_id
)
114 if (vrf
->vrf_id
!= VRF_UNKNOWN
)
115 RB_REMOVE(vrf_id_head
, &vrfs_by_id
, vrf
);
116 vrf
->vrf_id
= vrf_id
;
117 RB_INSERT(vrf_id_head
, &vrfs_by_id
, vrf
);
118 if (old_vrf_id
== VRF_UNKNOWN
)
119 vrf_enable((struct vrf
*)vrf
);
122 int vrf_switch_to_netns(vrf_id_t vrf_id
)
125 struct vrf
*vrf
= vrf_lookup_by_id(vrf_id
);
127 /* VRF is default VRF. silently ignore */
128 if (!vrf
|| vrf
->vrf_id
== VRF_DEFAULT
)
129 return 1; /* 1 = default */
130 /* VRF has no NETNS backend. silently ignore */
131 if (vrf
->data
.l
.netns_name
[0] == '\0')
132 return 2; /* 2 = no netns */
133 name
= ns_netns_pathname(NULL
, vrf
->data
.l
.netns_name
);
135 zlog_debug("VRF_SWITCH: %s(%u)", name
, vrf
->vrf_id
);
136 return ns_switch_to_netns(name
);
139 int vrf_switchback_to_initial(void)
141 int ret
= ns_switchback_to_initial();
143 if (ret
== 0 && debug_vrf
)
144 zlog_debug("VRF_SWITCHBACK");
148 /* Get a VRF. If not found, create one.
150 * name - The name of the vrf. May be NULL if unknown.
151 * vrf_id - The vrf_id of the vrf. May be VRF_UNKNOWN if unknown
152 * Description: Please note that this routine can be called with just the name
155 struct vrf
*vrf_get(vrf_id_t vrf_id
, const char *name
)
157 struct vrf
*vrf
= NULL
;
161 zlog_debug("VRF_GET: %s(%u)", name
== NULL
? "(NULL)" : name
,
164 /* Nothing to see, move along here */
165 if (!name
&& vrf_id
== VRF_UNKNOWN
)
168 /* attempt to find already available VRF
171 vrf
= vrf_lookup_by_name(name
);
172 if (vrf
&& vrf_id
!= VRF_UNKNOWN
173 && vrf
->vrf_id
!= VRF_UNKNOWN
174 && vrf
->vrf_id
!= vrf_id
) {
175 zlog_debug("VRF_GET: avoid %s creation(%u), same name exists (%u)",
176 name
, vrf_id
, vrf
->vrf_id
);
179 /* Try to find VRF both by ID and name */
180 if (!vrf
&& vrf_id
!= VRF_UNKNOWN
)
181 vrf
= vrf_lookup_by_id(vrf_id
);
184 vrf
= XCALLOC(MTYPE_VRF
, sizeof(struct vrf
));
185 vrf
->vrf_id
= VRF_UNKNOWN
;
190 zlog_debug("VRF(%u) %s is created.", vrf_id
,
191 (name
) ? name
: "(NULL)");
195 if (vrf_id
!= VRF_UNKNOWN
&& vrf
->vrf_id
== VRF_UNKNOWN
) {
196 vrf
->vrf_id
= vrf_id
;
197 RB_INSERT(vrf_id_head
, &vrfs_by_id
, vrf
);
201 if (name
&& vrf
->name
[0] != '\0' && strcmp(name
, vrf
->name
)) {
202 RB_REMOVE(vrf_name_head
, &vrfs_by_name
, vrf
);
203 strlcpy(vrf
->name
, name
, sizeof(vrf
->name
));
204 RB_INSERT(vrf_name_head
, &vrfs_by_name
, vrf
);
205 } else if (name
&& vrf
->name
[0] == '\0') {
206 strlcpy(vrf
->name
, name
, sizeof(vrf
->name
));
207 RB_INSERT(vrf_name_head
, &vrfs_by_name
, vrf
);
209 if (new &&vrf_master
.vrf_new_hook
)
210 (*vrf_master
.vrf_new_hook
)(vrf
);
215 /* Delete a VRF. This is called when the underlying VRF goes away, a
216 * pre-configured VRF is deleted or when shutting down (vrf_terminate()).
218 void vrf_delete(struct vrf
*vrf
)
221 zlog_debug("VRF %u is to be deleted.", vrf
->vrf_id
);
223 if (vrf_is_enabled(vrf
))
226 /* If the VRF is user configured, it'll stick around, just remove
227 * the ID mapping. Interfaces assigned to this VRF should've been
228 * removed already as part of the VRF going down.
230 if (vrf_is_user_cfged(vrf
)) {
231 if (vrf
->vrf_id
!= VRF_UNKNOWN
) {
232 /* Delete any VRF interfaces - should be only
233 * the VRF itself, other interfaces should've
234 * been moved out of the VRF.
237 RB_REMOVE(vrf_id_head
, &vrfs_by_id
, vrf
);
238 vrf
->vrf_id
= VRF_UNKNOWN
;
243 if (vrf_master
.vrf_delete_hook
)
244 (*vrf_master
.vrf_delete_hook
)(vrf
);
249 if (vrf
->vrf_id
!= VRF_UNKNOWN
)
250 RB_REMOVE(vrf_id_head
, &vrfs_by_id
, vrf
);
251 if (vrf
->name
[0] != '\0')
252 RB_REMOVE(vrf_name_head
, &vrfs_by_name
, vrf
);
254 XFREE(MTYPE_VRF
, vrf
);
257 /* Look up a VRF by identifier. */
258 struct vrf
*vrf_lookup_by_id(vrf_id_t vrf_id
)
262 return (RB_FIND(vrf_id_head
, &vrfs_by_id
, &vrf
));
266 * Enable a VRF - that is, let the VRF be ready to use.
267 * The VRF_ENABLE_HOOK callback will be called to inform
268 * that they can allocate resources in this VRF.
270 * RETURN: 1 - enabled successfully; otherwise, 0.
272 int vrf_enable(struct vrf
*vrf
)
274 if (vrf_is_enabled(vrf
))
278 zlog_debug("VRF %u is enabled.", vrf
->vrf_id
);
280 SET_FLAG(vrf
->status
, VRF_ACTIVE
);
282 if (vrf_master
.vrf_enable_hook
)
283 (*vrf_master
.vrf_enable_hook
)(vrf
);
286 * If we have any nexthop group entries that
287 * are awaiting vrf initialization then
288 * let's let people know about it
290 nexthop_group_enable_vrf(vrf
);
296 * Disable a VRF - that is, let the VRF be unusable.
297 * The VRF_DELETE_HOOK callback will be called to inform
298 * that they must release the resources in the VRF.
300 void vrf_disable(struct vrf
*vrf
)
302 if (!vrf_is_enabled(vrf
))
305 UNSET_FLAG(vrf
->status
, VRF_ACTIVE
);
308 zlog_debug("VRF %u is to be disabled.", vrf
->vrf_id
);
310 /* Till now, nothing to be done for the default VRF. */
311 // Pending: see why this statement.
313 if (vrf_master
.vrf_disable_hook
)
314 (*vrf_master
.vrf_disable_hook
)(vrf
);
317 const char *vrf_id_to_name(vrf_id_t vrf_id
)
321 vrf
= vrf_lookup_by_id(vrf_id
);
328 vrf_id_t
vrf_name_to_id(const char *name
)
331 vrf_id_t vrf_id
= VRF_DEFAULT
; // Pending: need a way to return invalid
332 // id/ routine not used.
336 vrf
= vrf_lookup_by_name(name
);
338 vrf_id
= vrf
->vrf_id
;
343 /* Get the data pointer of the specified VRF. If not found, create one. */
344 void *vrf_info_get(vrf_id_t vrf_id
)
346 struct vrf
*vrf
= vrf_get(vrf_id
, NULL
);
350 /* Look up the data pointer of the specified VRF. */
351 void *vrf_info_lookup(vrf_id_t vrf_id
)
353 struct vrf
*vrf
= vrf_lookup_by_id(vrf_id
);
354 return vrf
? vrf
->info
: NULL
;
358 * VRF hash for storing set or not.
365 static unsigned int vrf_hash_bitmap_key(void *data
)
367 struct vrf_bit_set
*bit
= data
;
372 static bool vrf_hash_bitmap_cmp(const void *a
, const void *b
)
374 const struct vrf_bit_set
*bit1
= a
;
375 const struct vrf_bit_set
*bit2
= b
;
377 return bit1
->vrf_id
== bit2
->vrf_id
;
380 static void *vrf_hash_bitmap_alloc(void *data
)
382 struct vrf_bit_set
*copy
= data
;
383 struct vrf_bit_set
*bit
;
385 bit
= XMALLOC(MTYPE_VRF_BITMAP
, sizeof(*bit
));
386 bit
->vrf_id
= copy
->vrf_id
;
391 static void vrf_hash_bitmap_free(void *data
)
393 struct vrf_bit_set
*bit
= data
;
395 XFREE(MTYPE_VRF_BITMAP
, bit
);
398 vrf_bitmap_t
vrf_bitmap_init(void)
400 return hash_create_size(32, vrf_hash_bitmap_key
, vrf_hash_bitmap_cmp
,
404 void vrf_bitmap_free(vrf_bitmap_t bmap
)
406 struct hash
*vrf_hash
= bmap
;
408 if (vrf_hash
== NULL
)
411 hash_clean(vrf_hash
, vrf_hash_bitmap_free
);
415 void vrf_bitmap_set(vrf_bitmap_t bmap
, vrf_id_t vrf_id
)
417 struct vrf_bit_set lookup
= { .vrf_id
= vrf_id
};
418 struct hash
*vrf_hash
= bmap
;
419 struct vrf_bit_set
*bit
;
421 if (vrf_hash
== NULL
|| vrf_id
== VRF_UNKNOWN
)
424 bit
= hash_get(vrf_hash
, &lookup
, vrf_hash_bitmap_alloc
);
428 void vrf_bitmap_unset(vrf_bitmap_t bmap
, vrf_id_t vrf_id
)
430 struct vrf_bit_set lookup
= { .vrf_id
= vrf_id
};
431 struct hash
*vrf_hash
= bmap
;
432 struct vrf_bit_set
*bit
;
434 if (vrf_hash
== NULL
|| vrf_id
== VRF_UNKNOWN
)
437 bit
= hash_get(vrf_hash
, &lookup
, vrf_hash_bitmap_alloc
);
441 int vrf_bitmap_check(vrf_bitmap_t bmap
, vrf_id_t vrf_id
)
443 struct vrf_bit_set lookup
= { .vrf_id
= vrf_id
};
444 struct hash
*vrf_hash
= bmap
;
445 struct vrf_bit_set
*bit
;
447 if (vrf_hash
== NULL
|| vrf_id
== VRF_UNKNOWN
)
450 bit
= hash_lookup(vrf_hash
, &lookup
);
457 static void vrf_autocomplete(vector comps
, struct cmd_token
*token
)
459 struct vrf
*vrf
= NULL
;
461 RB_FOREACH (vrf
, vrf_name_head
, &vrfs_by_name
)
462 vector_set(comps
, XSTRDUP(MTYPE_COMPLETION
, vrf
->name
));
465 static const struct cmd_variable_handler vrf_var_handlers
[] = {
468 .completions
= vrf_autocomplete
,
470 {.completions
= NULL
},
473 /* Initialize VRF module. */
474 void vrf_init(int (*create
)(struct vrf
*), int (*enable
)(struct vrf
*),
475 int (*disable
)(struct vrf
*), int (*destroy
)(struct vrf
*),
476 int ((*update
)(struct vrf
*)))
478 struct vrf
*default_vrf
;
480 /* initialise NS, in case VRF backend if NETNS */
483 zlog_debug("%s: Initializing VRF subsystem",
484 __PRETTY_FUNCTION__
);
486 vrf_master
.vrf_new_hook
= create
;
487 vrf_master
.vrf_enable_hook
= enable
;
488 vrf_master
.vrf_disable_hook
= disable
;
489 vrf_master
.vrf_delete_hook
= destroy
;
490 vrf_master
.vrf_update_name_hook
= update
;
492 /* The default VRF always exists. */
493 default_vrf
= vrf_get(VRF_DEFAULT
, VRF_DEFAULT_NAME
);
495 flog_err(EC_LIB_VRF_START
,
496 "vrf_init: failed to create the default VRF!");
499 if (vrf_is_backend_netns()) {
502 strlcpy(default_vrf
->data
.l
.netns_name
,
503 VRF_DEFAULT_NAME
, NS_NAMSIZ
);
504 ns
= ns_lookup(ns_get_default_id());
505 ns
->vrf_ctxt
= default_vrf
;
506 default_vrf
->ns_ctxt
= ns
;
509 /* Enable the default VRF. */
510 if (!vrf_enable(default_vrf
)) {
511 flog_err(EC_LIB_VRF_START
,
512 "vrf_init: failed to enable the default VRF!");
516 cmd_variable_handler_register(vrf_var_handlers
);
519 /* Terminate VRF module. */
520 void vrf_terminate(void)
525 zlog_debug("%s: Shutting down vrf subsystem",
526 __PRETTY_FUNCTION__
);
528 while (!RB_EMPTY(vrf_id_head
, &vrfs_by_id
)) {
529 vrf
= RB_ROOT(vrf_id_head
, &vrfs_by_id
);
531 /* Clear configured flag and invoke delete. */
532 UNSET_FLAG(vrf
->status
, VRF_CONFIGURED
);
536 while (!RB_EMPTY(vrf_name_head
, &vrfs_by_name
)) {
537 vrf
= RB_ROOT(vrf_name_head
, &vrfs_by_name
);
539 /* Clear configured flag and invoke delete. */
540 UNSET_FLAG(vrf
->status
, VRF_CONFIGURED
);
545 static int vrf_default_accepts_vrf(int type
)
547 const char *fname
= NULL
;
548 char buf
[32] = {0x0};
553 * TCP & UDP services running in the default VRF context (ie., not bound
554 * to any VRF device) can work across all VRF domains by enabling the
555 * tcp_l3mdev_accept and udp_l3mdev_accept sysctl options:
556 * sysctl -w net.ipv4.tcp_l3mdev_accept=1
557 * sysctl -w net.ipv4.udp_l3mdev_accept=1
559 if (type
== SOCK_STREAM
)
560 fname
= "/proc/sys/net/ipv4/tcp_l3mdev_accept";
561 else if (type
== SOCK_DGRAM
)
562 fname
= "/proc/sys/net/ipv4/udp_l3mdev_accept";
565 fd
= fopen(fname
, "r");
574 /* Create a socket for the VRF. */
575 int vrf_socket(int domain
, int type
, int protocol
, vrf_id_t vrf_id
,
578 int ret
, save_errno
, ret2
;
580 ret
= vrf_switch_to_netns(vrf_id
);
582 flog_err_sys(EC_LIB_SOCKET
, "%s: Can't switch to VRF %u (%s)",
583 __func__
, vrf_id
, safe_strerror(errno
));
585 if (ret
> 0 && interfacename
&& vrf_default_accepts_vrf(type
)) {
586 zlog_err("VRF socket not used since net.ipv4.%s_l3mdev_accept != 0",
587 (type
== SOCK_STREAM
? "tcp" : "udp"));
588 errno
= EEXIST
; /* not sure if this is the best error... */
592 ret
= socket(domain
, type
, protocol
);
594 ret2
= vrf_switchback_to_initial();
596 flog_err_sys(EC_LIB_SOCKET
,
597 "%s: Can't switchback from VRF %u (%s)", __func__
,
598 vrf_id
, safe_strerror(errno
));
602 ret2
= vrf_bind(vrf_id
, ret
, interfacename
);
610 int vrf_is_backend_netns(void)
612 return (vrf_backend
== VRF_BACKEND_NETNS
);
615 int vrf_get_backend(void)
617 if (!vrf_backend_configured
)
618 return VRF_BACKEND_UNKNOWN
;
622 void vrf_configure_backend(int vrf_backend_netns
)
624 vrf_backend
= vrf_backend_netns
;
625 vrf_backend_configured
= 1;
628 int vrf_handler_create(struct vty
*vty
, const char *vrfname
,
633 if (strlen(vrfname
) > VRF_NAMSIZ
) {
636 "%% VRF name %s invalid: length exceeds %d bytes\n",
637 vrfname
, VRF_NAMSIZ
);
641 "%% VRF name %s invalid: length exceeds %d bytes\n",
642 vrfname
, VRF_NAMSIZ
);
643 return CMD_WARNING_CONFIG_FAILED
;
646 vrfp
= vrf_get(VRF_UNKNOWN
, vrfname
);
649 VTY_PUSH_CONTEXT(VRF_NODE
, vrfp
);
656 int vrf_netns_handler_create(struct vty
*vty
, struct vrf
*vrf
, char *pathname
,
657 ns_id_t ns_id
, ns_id_t internal_ns_id
)
659 struct ns
*ns
= NULL
;
662 return CMD_WARNING_CONFIG_FAILED
;
663 if (vrf
->vrf_id
!= VRF_UNKNOWN
&& vrf
->ns_ctxt
== NULL
) {
666 "VRF %u is already configured with VRF %s\n",
667 vrf
->vrf_id
, vrf
->name
);
669 zlog_info("VRF %u is already configured with VRF %s",
670 vrf
->vrf_id
, vrf
->name
);
671 return CMD_WARNING_CONFIG_FAILED
;
673 if (vrf
->ns_ctxt
!= NULL
) {
674 ns
= (struct ns
*)vrf
->ns_ctxt
;
675 if (!strcmp(ns
->name
, pathname
)) {
678 "VRF %u already configured with NETNS %s\n",
679 vrf
->vrf_id
, ns
->name
);
682 "VRF %u already configured with NETNS %s",
683 vrf
->vrf_id
, ns
->name
);
684 return CMD_WARNING_CONFIG_FAILED
;
687 ns
= ns_lookup_name(pathname
);
688 if (ns
&& ns
->vrf_ctxt
) {
689 struct vrf
*vrf2
= (struct vrf
*)ns
->vrf_ctxt
;
695 "NS %s is already configured"
696 " with VRF %u(%s)\n",
697 ns
->name
, vrf2
->vrf_id
, vrf2
->name
);
699 zlog_info("NS %s is already configured with VRF %u(%s)",
700 ns
->name
, vrf2
->vrf_id
, vrf2
->name
);
701 return CMD_WARNING_CONFIG_FAILED
;
703 ns
= ns_get_created(ns
, pathname
, ns_id
);
704 ns
->internal_ns_id
= internal_ns_id
;
705 ns
->vrf_ctxt
= (void *)vrf
;
706 vrf
->ns_ctxt
= (void *)ns
;
707 /* update VRF netns NAME */
708 strlcpy(vrf
->data
.l
.netns_name
, basename(pathname
), NS_NAMSIZ
);
710 if (!ns_enable(ns
, vrf_update_vrf_id
)) {
712 vty_out(vty
, "Can not associate NS %u with NETNS %s\n",
713 ns
->ns_id
, ns
->name
);
715 zlog_info("Can not associate NS %u with NETNS %s",
716 ns
->ns_id
, ns
->name
);
717 return CMD_WARNING_CONFIG_FAILED
;
723 /* vrf CLI commands */
727 "Exit current mode and down to previous mode\n")
729 /* We have to set vrf context to default vrf */
730 VTY_PUSH_CONTEXT(VRF_NODE
, vrf_get(VRF_DEFAULT
, VRF_DEFAULT_NAME
));
731 vty
->node
= CONFIG_NODE
;
738 "Select a VRF to configure\n"
742 const char *vrfname
= argv
[idx_name
]->arg
;
744 return vrf_handler_create(vty
, vrfname
, NULL
);
751 "Delete a pseudo VRF's configuration\n"
754 const char *vrfname
= argv
[2]->arg
;
758 vrfp
= vrf_lookup_by_name(vrfname
);
761 vty_out(vty
, "%% VRF %s does not exist\n", vrfname
);
762 return CMD_WARNING_CONFIG_FAILED
;
765 if (CHECK_FLAG(vrfp
->status
, VRF_ACTIVE
)) {
766 vty_out(vty
, "%% Only inactive VRFs can be deleted\n");
767 return CMD_WARNING_CONFIG_FAILED
;
770 /* Clear configured flag and invoke delete. */
771 UNSET_FLAG(vrfp
->status
, VRF_CONFIGURED
);
778 struct cmd_node vrf_node
= {VRF_NODE
, "%s(config-vrf)# ", 1};
780 DEFUN_NOSH (vrf_netns
,
783 "Attach VRF to a Namespace\n"
784 "The file name in " NS_RUN_DIR
", or a full pathname\n")
786 int idx_name
= 1, ret
;
787 char *pathname
= ns_netns_pathname(vty
, argv
[idx_name
]->arg
);
789 VTY_DECLVAR_CONTEXT(vrf
, vrf
);
792 return CMD_WARNING_CONFIG_FAILED
;
794 frr_elevate_privs(vrf_daemon_privs
) {
795 ret
= vrf_netns_handler_create(vty
, vrf
, pathname
,
796 NS_UNKNOWN
, NS_UNKNOWN
);
801 DEFUN_NOSH (no_vrf_netns
,
805 "Detach VRF from a Namespace\n"
806 "The file name in " NS_RUN_DIR
", or a full pathname\n")
808 struct ns
*ns
= NULL
;
810 VTY_DECLVAR_CONTEXT(vrf
, vrf
);
812 if (!vrf_is_backend_netns()) {
813 vty_out(vty
, "VRF backend is not Netns. Aborting\n");
814 return CMD_WARNING_CONFIG_FAILED
;
817 vty_out(vty
, "VRF %s(%u) is not configured with NetNS\n",
818 vrf
->name
, vrf
->vrf_id
);
819 return CMD_WARNING_CONFIG_FAILED
;
822 ns
= (struct ns
*)vrf
->ns_ctxt
;
826 /* vrf ID from VRF is necessary for Zebra
827 * so that propagate to other clients is done
835 * Debug CLI for vrf's
860 static int vrf_write_host(struct vty
*vty
)
863 vty_out(vty
, "debug vrf\n");
868 static struct cmd_node vrf_debug_node
= {VRF_DEBUG_NODE
, "", 1};
870 void vrf_install_commands(void)
872 install_node(&vrf_debug_node
, vrf_write_host
);
874 install_element(CONFIG_NODE
, &vrf_debug_cmd
);
875 install_element(ENABLE_NODE
, &vrf_debug_cmd
);
876 install_element(CONFIG_NODE
, &no_vrf_debug_cmd
);
877 install_element(ENABLE_NODE
, &no_vrf_debug_cmd
);
880 void vrf_cmd_init(int (*writefunc
)(struct vty
*vty
),
881 struct zebra_privs_t
*daemon_privs
)
883 install_element(CONFIG_NODE
, &vrf_cmd
);
884 install_element(CONFIG_NODE
, &no_vrf_cmd
);
885 install_node(&vrf_node
, writefunc
);
886 install_default(VRF_NODE
);
887 install_element(VRF_NODE
, &vrf_exit_cmd
);
888 if (vrf_is_backend_netns() && ns_have_netns()) {
889 /* Install NS commands. */
890 vrf_daemon_privs
= daemon_privs
;
891 install_element(VRF_NODE
, &vrf_netns_cmd
);
892 install_element(VRF_NODE
, &no_vrf_netns_cmd
);
896 void vrf_set_default_name(const char *default_name
, bool force
)
899 struct vrf
*vrf_with_default_name
= NULL
;
900 static bool def_vrf_forced
;
902 def_vrf
= vrf_lookup_by_id(VRF_DEFAULT
);
903 assert(default_name
);
904 if (def_vrf
&& !force
&& def_vrf_forced
) {
905 zlog_debug("VRF: %s, avoid changing name to %s, previously forced (%u)",
906 def_vrf
->name
, default_name
,
910 if (vrf_with_default_name
&& vrf_with_default_name
!= def_vrf
) {
911 /* vrf name already used by an other VRF */
912 zlog_debug("VRF: %s, avoid changing name to %s, same name exists (%u)",
913 vrf_with_default_name
->name
, default_name
,
914 vrf_with_default_name
->vrf_id
);
917 snprintf(vrf_default_name
, VRF_NAMSIZ
, "%s", default_name
);
920 def_vrf_forced
= true;
921 RB_REMOVE(vrf_name_head
, &vrfs_by_name
, def_vrf
);
922 strlcpy(def_vrf
->data
.l
.netns_name
,
923 vrf_default_name
, NS_NAMSIZ
);
924 strlcpy(def_vrf
->name
, vrf_default_name
, sizeof(def_vrf
->name
));
925 RB_INSERT(vrf_name_head
, &vrfs_by_name
, def_vrf
);
926 if (vrf_master
.vrf_update_name_hook
)
927 (*vrf_master
.vrf_update_name_hook
)(def_vrf
);
931 const char *vrf_get_default_name(void)
933 return vrf_default_name
;
936 vrf_id_t
vrf_get_default_id(void)
938 /* backend netns is only known by zebra
939 * for other daemons, we return VRF_DEFAULT_INTERNAL
941 if (vrf_is_backend_netns())
942 return ns_get_default_id();
944 return VRF_DEFAULT_INTERNAL
;
947 int vrf_bind(vrf_id_t vrf_id
, int fd
, char *name
)
951 if (fd
< 0 || name
== NULL
)
953 if (vrf_is_backend_netns())
955 #ifdef SO_BINDTODEVICE
956 ret
= setsockopt(fd
, SOL_SOCKET
, SO_BINDTODEVICE
, name
, strlen(name
)+1);
958 zlog_debug("bind to interface %s failed, errno=%d", name
,
960 #endif /* SO_BINDTODEVICE */
963 int vrf_getaddrinfo(const char *node
, const char *service
,
964 const struct addrinfo
*hints
, struct addrinfo
**res
,
967 int ret
, ret2
, save_errno
;
969 ret
= vrf_switch_to_netns(vrf_id
);
971 flog_err_sys(EC_LIB_SOCKET
, "%s: Can't switch to VRF %u (%s)",
972 __func__
, vrf_id
, safe_strerror(errno
));
973 ret
= getaddrinfo(node
, service
, hints
, res
);
975 ret2
= vrf_switchback_to_initial();
977 flog_err_sys(EC_LIB_SOCKET
,
978 "%s: Can't switchback from VRF %u (%s)", __func__
,
979 vrf_id
, safe_strerror(errno
));
984 int vrf_ioctl(vrf_id_t vrf_id
, int d
, unsigned long request
, char *params
)
986 int ret
, saved_errno
, rc
;
988 ret
= vrf_switch_to_netns(vrf_id
);
990 flog_err_sys(EC_LIB_SOCKET
, "%s: Can't switch to VRF %u (%s)",
991 __func__
, vrf_id
, safe_strerror(errno
));
994 rc
= ioctl(d
, request
, params
);
996 ret
= vrf_switchback_to_initial();
998 flog_err_sys(EC_LIB_SOCKET
,
999 "%s: Can't switchback from VRF %u (%s)", __func__
,
1000 vrf_id
, safe_strerror(errno
));
1001 errno
= saved_errno
;
1005 int vrf_sockunion_socket(const union sockunion
*su
, vrf_id_t vrf_id
,
1006 char *interfacename
)
1008 int ret
, save_errno
, ret2
;
1010 ret
= vrf_switch_to_netns(vrf_id
);
1012 flog_err_sys(EC_LIB_SOCKET
, "%s: Can't switch to VRF %u (%s)",
1013 __func__
, vrf_id
, safe_strerror(errno
));
1014 ret
= sockunion_socket(su
);
1016 ret2
= vrf_switchback_to_initial();
1018 flog_err_sys(EC_LIB_SOCKET
,
1019 "%s: Can't switchback from VRF %u (%s)", __func__
,
1020 vrf_id
, safe_strerror(errno
));
1025 ret2
= vrf_bind(vrf_id
, ret
, interfacename
);
1033 vrf_id_t
vrf_generate_id(void)
1035 static int vrf_id_local
;
1037 return ++vrf_id_local
;