2 * GRE over IPv4 demultiplexer driver
4 * Authors: Dmitry Kozlov (xeb@mail.ru)
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
13 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
15 #include <linux/module.h>
17 #include <linux/icmp.h>
18 #include <linux/kernel.h>
19 #include <linux/kmod.h>
20 #include <linux/skbuff.h>
23 #include <linux/netdevice.h>
24 #include <linux/if_tunnel.h>
25 #include <linux/spinlock.h>
26 #include <net/protocol.h>
30 #include <net/route.h>
33 static const struct gre_protocol __rcu
*gre_proto
[GREPROTO_MAX
] __read_mostly
;
34 static struct gre_cisco_protocol __rcu
*gre_cisco_proto_list
[GRE_IP_PROTO_MAX
];
36 int gre_add_protocol(const struct gre_protocol
*proto
, u8 version
)
38 if (version
>= GREPROTO_MAX
)
41 return (cmpxchg((const struct gre_protocol
**)&gre_proto
[version
], NULL
, proto
) == NULL
) ?
44 EXPORT_SYMBOL_GPL(gre_add_protocol
);
46 int gre_del_protocol(const struct gre_protocol
*proto
, u8 version
)
50 if (version
>= GREPROTO_MAX
)
53 ret
= (cmpxchg((const struct gre_protocol
**)&gre_proto
[version
], proto
, NULL
) == proto
) ?
62 EXPORT_SYMBOL_GPL(gre_del_protocol
);
64 void gre_build_header(struct sk_buff
*skb
, const struct tnl_ptk_info
*tpi
,
67 struct gre_base_hdr
*greh
;
69 skb_push(skb
, hdr_len
);
71 greh
= (struct gre_base_hdr
*)skb
->data
;
72 greh
->flags
= tnl_flags_to_gre_flags(tpi
->flags
);
73 greh
->protocol
= tpi
->proto
;
75 if (tpi
->flags
&(TUNNEL_KEY
|TUNNEL_CSUM
|TUNNEL_SEQ
)) {
76 __be32
*ptr
= (__be32
*)(((u8
*)greh
) + hdr_len
- 4);
78 if (tpi
->flags
&TUNNEL_SEQ
) {
82 if (tpi
->flags
&TUNNEL_KEY
) {
86 if (tpi
->flags
&TUNNEL_CSUM
&&
87 !(skb_shinfo(skb
)->gso_type
& SKB_GSO_GRE
)) {
89 *(__sum16
*)ptr
= csum_fold(skb_checksum(skb
, 0,
94 EXPORT_SYMBOL_GPL(gre_build_header
);
96 static int parse_gre_header(struct sk_buff
*skb
, struct tnl_ptk_info
*tpi
,
99 unsigned int ip_hlen
= ip_hdrlen(skb
);
100 const struct gre_base_hdr
*greh
;
104 if (unlikely(!pskb_may_pull(skb
, sizeof(struct gre_base_hdr
))))
107 greh
= (struct gre_base_hdr
*)(skb_network_header(skb
) + ip_hlen
);
108 if (unlikely(greh
->flags
& (GRE_VERSION
| GRE_ROUTING
)))
111 tpi
->flags
= gre_flags_to_tnl_flags(greh
->flags
);
112 hdr_len
= ip_gre_calc_hlen(tpi
->flags
);
114 if (!pskb_may_pull(skb
, hdr_len
))
117 greh
= (struct gre_base_hdr
*)(skb_network_header(skb
) + ip_hlen
);
118 tpi
->proto
= greh
->protocol
;
120 options
= (__be32
*)(greh
+ 1);
121 if (greh
->flags
& GRE_CSUM
) {
122 if (skb_checksum_simple_validate(skb
)) {
129 if (greh
->flags
& GRE_KEY
) {
135 if (unlikely(greh
->flags
& GRE_SEQ
)) {
141 /* WCCP version 1 and 2 protocol decoding.
142 * - Change protocol to IP
143 * - When dealing with WCCPv2, Skip extra 4 bytes in GRE header
145 if (greh
->flags
== 0 && tpi
->proto
== htons(ETH_P_WCCP
)) {
146 tpi
->proto
= htons(ETH_P_IP
);
147 if ((*(u8
*)options
& 0xF0) != 0x40) {
149 if (!pskb_may_pull(skb
, hdr_len
))
154 return iptunnel_pull_header(skb
, hdr_len
, tpi
->proto
);
157 static int gre_cisco_rcv(struct sk_buff
*skb
)
159 struct tnl_ptk_info tpi
;
161 bool csum_err
= false;
163 #ifdef CONFIG_NET_IPGRE_BROADCAST
164 if (ipv4_is_multicast(ip_hdr(skb
)->daddr
)) {
165 /* Looped back packet, drop it! */
166 if (rt_is_output_route(skb_rtable(skb
)))
171 if (parse_gre_header(skb
, &tpi
, &csum_err
) < 0)
175 for (i
= 0; i
< GRE_IP_PROTO_MAX
; i
++) {
176 struct gre_cisco_protocol
*proto
;
179 proto
= rcu_dereference(gre_cisco_proto_list
[i
]);
182 ret
= proto
->handler(skb
, &tpi
);
183 if (ret
== PACKET_RCVD
) {
190 icmp_send(skb
, ICMP_DEST_UNREACH
, ICMP_PORT_UNREACH
, 0);
196 static void gre_cisco_err(struct sk_buff
*skb
, u32 info
)
198 /* All the routers (except for Linux) return only
199 * 8 bytes of packet payload. It means, that precise relaying of
200 * ICMP in the real Internet is absolutely infeasible.
202 * Moreover, Cisco "wise men" put GRE key to the third word
203 * in GRE header. It makes impossible maintaining even soft
205 * GRE tunnels with enabled checksum. Tell them "thank you".
207 * Well, I wonder, rfc1812 was written by Cisco employee,
208 * what the hell these idiots break standards established
212 const int type
= icmp_hdr(skb
)->type
;
213 const int code
= icmp_hdr(skb
)->code
;
214 struct tnl_ptk_info tpi
;
215 bool csum_err
= false;
218 if (parse_gre_header(skb
, &tpi
, &csum_err
)) {
219 if (!csum_err
) /* ignore csum errors. */
223 if (type
== ICMP_DEST_UNREACH
&& code
== ICMP_FRAG_NEEDED
) {
224 ipv4_update_pmtu(skb
, dev_net(skb
->dev
), info
,
225 skb
->dev
->ifindex
, 0, IPPROTO_GRE
, 0);
228 if (type
== ICMP_REDIRECT
) {
229 ipv4_redirect(skb
, dev_net(skb
->dev
), skb
->dev
->ifindex
, 0,
235 for (i
= 0; i
< GRE_IP_PROTO_MAX
; i
++) {
236 struct gre_cisco_protocol
*proto
;
238 proto
= rcu_dereference(gre_cisco_proto_list
[i
]);
242 if (proto
->err_handler(skb
, info
, &tpi
) == PACKET_RCVD
)
250 static int gre_rcv(struct sk_buff
*skb
)
252 const struct gre_protocol
*proto
;
256 if (!pskb_may_pull(skb
, 12))
259 ver
= skb
->data
[1]&0x7f;
260 if (ver
>= GREPROTO_MAX
)
264 proto
= rcu_dereference(gre_proto
[ver
]);
265 if (!proto
|| !proto
->handler
)
267 ret
= proto
->handler(skb
);
278 static void gre_err(struct sk_buff
*skb
, u32 info
)
280 const struct gre_protocol
*proto
;
281 const struct iphdr
*iph
= (const struct iphdr
*)skb
->data
;
282 u8 ver
= skb
->data
[(iph
->ihl
<<2) + 1]&0x7f;
284 if (ver
>= GREPROTO_MAX
)
288 proto
= rcu_dereference(gre_proto
[ver
]);
289 if (proto
&& proto
->err_handler
)
290 proto
->err_handler(skb
, info
);
294 static const struct net_protocol net_gre_protocol
= {
296 .err_handler
= gre_err
,
300 static const struct gre_protocol ipgre_protocol
= {
301 .handler
= gre_cisco_rcv
,
302 .err_handler
= gre_cisco_err
,
305 int gre_cisco_register(struct gre_cisco_protocol
*newp
)
307 struct gre_cisco_protocol
**proto
= (struct gre_cisco_protocol
**)
308 &gre_cisco_proto_list
[newp
->priority
];
310 return (cmpxchg(proto
, NULL
, newp
) == NULL
) ? 0 : -EBUSY
;
312 EXPORT_SYMBOL_GPL(gre_cisco_register
);
314 int gre_cisco_unregister(struct gre_cisco_protocol
*del_proto
)
316 struct gre_cisco_protocol
**proto
= (struct gre_cisco_protocol
**)
317 &gre_cisco_proto_list
[del_proto
->priority
];
320 ret
= (cmpxchg(proto
, del_proto
, NULL
) == del_proto
) ? 0 : -EINVAL
;
328 EXPORT_SYMBOL_GPL(gre_cisco_unregister
);
330 static int __init
gre_init(void)
332 pr_info("GRE over IPv4 demultiplexor driver\n");
334 if (inet_add_protocol(&net_gre_protocol
, IPPROTO_GRE
) < 0) {
335 pr_err("can't add protocol\n");
339 if (gre_add_protocol(&ipgre_protocol
, GREPROTO_CISCO
) < 0) {
340 pr_info("%s: can't add ipgre handler\n", __func__
);
346 inet_del_protocol(&net_gre_protocol
, IPPROTO_GRE
);
351 static void __exit
gre_exit(void)
353 gre_del_protocol(&ipgre_protocol
, GREPROTO_CISCO
);
354 inet_del_protocol(&net_gre_protocol
, IPPROTO_GRE
);
357 module_init(gre_init
);
358 module_exit(gre_exit
);
360 MODULE_DESCRIPTION("GRE over IPv4 demultiplexer driver");
361 MODULE_AUTHOR("D. Kozlov (xeb@mail.ru)");
362 MODULE_LICENSE("GPL");