2 * GRE over IPv6 protocol decoder.
4 * Authors: Dmitry Kozlov (xeb@mail.ru)
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
13 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
15 #include <linux/capability.h>
16 #include <linux/module.h>
17 #include <linux/types.h>
18 #include <linux/kernel.h>
19 #include <linux/slab.h>
20 #include <linux/uaccess.h>
21 #include <linux/skbuff.h>
22 #include <linux/netdevice.h>
24 #include <linux/tcp.h>
25 #include <linux/udp.h>
26 #include <linux/if_arp.h>
27 #include <linux/init.h>
28 #include <linux/in6.h>
29 #include <linux/inetdevice.h>
30 #include <linux/igmp.h>
31 #include <linux/netfilter_ipv4.h>
32 #include <linux/etherdevice.h>
33 #include <linux/if_ether.h>
34 #include <linux/hash.h>
35 #include <linux/if_tunnel.h>
36 #include <linux/ip6_tunnel.h>
40 #include <net/ip_tunnels.h>
42 #include <net/protocol.h>
43 #include <net/addrconf.h>
45 #include <net/checksum.h>
46 #include <net/dsfield.h>
47 #include <net/inet_ecn.h>
49 #include <net/net_namespace.h>
50 #include <net/netns/generic.h>
51 #include <net/rtnetlink.h>
54 #include <net/ip6_fib.h>
55 #include <net/ip6_route.h>
56 #include <net/ip6_tunnel.h>
60 static bool log_ecn_error
= true;
61 module_param(log_ecn_error
, bool, 0644);
62 MODULE_PARM_DESC(log_ecn_error
, "Log packets received with corrupted ECN");
64 #define IP6_GRE_HASH_SIZE_SHIFT 5
65 #define IP6_GRE_HASH_SIZE (1 << IP6_GRE_HASH_SIZE_SHIFT)
67 static unsigned int ip6gre_net_id __read_mostly
;
69 struct ip6_tnl __rcu
*tunnels
[4][IP6_GRE_HASH_SIZE
];
71 struct net_device
*fb_tunnel_dev
;
74 static struct rtnl_link_ops ip6gre_link_ops __read_mostly
;
75 static struct rtnl_link_ops ip6gre_tap_ops __read_mostly
;
76 static int ip6gre_tunnel_init(struct net_device
*dev
);
77 static void ip6gre_tunnel_setup(struct net_device
*dev
);
78 static void ip6gre_tunnel_link(struct ip6gre_net
*ign
, struct ip6_tnl
*t
);
79 static void ip6gre_tnl_link_config(struct ip6_tnl
*t
, int set_mtu
);
81 /* Tunnel hash table */
91 We require exact key match i.e. if a key is present in packet
92 it will match only tunnel with the same key; if it is not present,
93 it will match only keyless tunnel.
95 All keysless packets, if not matched configured keyless tunnels
96 will match fallback tunnel.
99 #define HASH_KEY(key) (((__force u32)key^((__force u32)key>>4))&(IP6_GRE_HASH_SIZE - 1))
100 static u32
HASH_ADDR(const struct in6_addr
*addr
)
102 u32 hash
= ipv6_addr_hash(addr
);
104 return hash_32(hash
, IP6_GRE_HASH_SIZE_SHIFT
);
107 #define tunnels_r_l tunnels[3]
108 #define tunnels_r tunnels[2]
109 #define tunnels_l tunnels[1]
110 #define tunnels_wc tunnels[0]
112 /* Given src, dst and key, find appropriate for input tunnel. */
114 static struct ip6_tnl
*ip6gre_tunnel_lookup(struct net_device
*dev
,
115 const struct in6_addr
*remote
, const struct in6_addr
*local
,
116 __be32 key
, __be16 gre_proto
)
118 struct net
*net
= dev_net(dev
);
119 int link
= dev
->ifindex
;
120 unsigned int h0
= HASH_ADDR(remote
);
121 unsigned int h1
= HASH_KEY(key
);
122 struct ip6_tnl
*t
, *cand
= NULL
;
123 struct ip6gre_net
*ign
= net_generic(net
, ip6gre_net_id
);
124 int dev_type
= (gre_proto
== htons(ETH_P_TEB
)) ?
125 ARPHRD_ETHER
: ARPHRD_IP6GRE
;
126 int score
, cand_score
= 4;
128 for_each_ip_tunnel_rcu(t
, ign
->tunnels_r_l
[h0
^ h1
]) {
129 if (!ipv6_addr_equal(local
, &t
->parms
.laddr
) ||
130 !ipv6_addr_equal(remote
, &t
->parms
.raddr
) ||
131 key
!= t
->parms
.i_key
||
132 !(t
->dev
->flags
& IFF_UP
))
135 if (t
->dev
->type
!= ARPHRD_IP6GRE
&&
136 t
->dev
->type
!= dev_type
)
140 if (t
->parms
.link
!= link
)
142 if (t
->dev
->type
!= dev_type
)
147 if (score
< cand_score
) {
153 for_each_ip_tunnel_rcu(t
, ign
->tunnels_r
[h0
^ h1
]) {
154 if (!ipv6_addr_equal(remote
, &t
->parms
.raddr
) ||
155 key
!= t
->parms
.i_key
||
156 !(t
->dev
->flags
& IFF_UP
))
159 if (t
->dev
->type
!= ARPHRD_IP6GRE
&&
160 t
->dev
->type
!= dev_type
)
164 if (t
->parms
.link
!= link
)
166 if (t
->dev
->type
!= dev_type
)
171 if (score
< cand_score
) {
177 for_each_ip_tunnel_rcu(t
, ign
->tunnels_l
[h1
]) {
178 if ((!ipv6_addr_equal(local
, &t
->parms
.laddr
) &&
179 (!ipv6_addr_equal(local
, &t
->parms
.raddr
) ||
180 !ipv6_addr_is_multicast(local
))) ||
181 key
!= t
->parms
.i_key
||
182 !(t
->dev
->flags
& IFF_UP
))
185 if (t
->dev
->type
!= ARPHRD_IP6GRE
&&
186 t
->dev
->type
!= dev_type
)
190 if (t
->parms
.link
!= link
)
192 if (t
->dev
->type
!= dev_type
)
197 if (score
< cand_score
) {
203 for_each_ip_tunnel_rcu(t
, ign
->tunnels_wc
[h1
]) {
204 if (t
->parms
.i_key
!= key
||
205 !(t
->dev
->flags
& IFF_UP
))
208 if (t
->dev
->type
!= ARPHRD_IP6GRE
&&
209 t
->dev
->type
!= dev_type
)
213 if (t
->parms
.link
!= link
)
215 if (t
->dev
->type
!= dev_type
)
220 if (score
< cand_score
) {
229 dev
= ign
->fb_tunnel_dev
;
230 if (dev
->flags
& IFF_UP
)
231 return netdev_priv(dev
);
236 static struct ip6_tnl __rcu
**__ip6gre_bucket(struct ip6gre_net
*ign
,
237 const struct __ip6_tnl_parm
*p
)
239 const struct in6_addr
*remote
= &p
->raddr
;
240 const struct in6_addr
*local
= &p
->laddr
;
241 unsigned int h
= HASH_KEY(p
->i_key
);
244 if (!ipv6_addr_any(local
))
246 if (!ipv6_addr_any(remote
) && !ipv6_addr_is_multicast(remote
)) {
248 h
^= HASH_ADDR(remote
);
251 return &ign
->tunnels
[prio
][h
];
254 static inline struct ip6_tnl __rcu
**ip6gre_bucket(struct ip6gre_net
*ign
,
255 const struct ip6_tnl
*t
)
257 return __ip6gre_bucket(ign
, &t
->parms
);
260 static void ip6gre_tunnel_link(struct ip6gre_net
*ign
, struct ip6_tnl
*t
)
262 struct ip6_tnl __rcu
**tp
= ip6gre_bucket(ign
, t
);
264 rcu_assign_pointer(t
->next
, rtnl_dereference(*tp
));
265 rcu_assign_pointer(*tp
, t
);
268 static void ip6gre_tunnel_unlink(struct ip6gre_net
*ign
, struct ip6_tnl
*t
)
270 struct ip6_tnl __rcu
**tp
;
271 struct ip6_tnl
*iter
;
273 for (tp
= ip6gre_bucket(ign
, t
);
274 (iter
= rtnl_dereference(*tp
)) != NULL
;
277 rcu_assign_pointer(*tp
, t
->next
);
283 static struct ip6_tnl
*ip6gre_tunnel_find(struct net
*net
,
284 const struct __ip6_tnl_parm
*parms
,
287 const struct in6_addr
*remote
= &parms
->raddr
;
288 const struct in6_addr
*local
= &parms
->laddr
;
289 __be32 key
= parms
->i_key
;
290 int link
= parms
->link
;
292 struct ip6_tnl __rcu
**tp
;
293 struct ip6gre_net
*ign
= net_generic(net
, ip6gre_net_id
);
295 for (tp
= __ip6gre_bucket(ign
, parms
);
296 (t
= rtnl_dereference(*tp
)) != NULL
;
298 if (ipv6_addr_equal(local
, &t
->parms
.laddr
) &&
299 ipv6_addr_equal(remote
, &t
->parms
.raddr
) &&
300 key
== t
->parms
.i_key
&&
301 link
== t
->parms
.link
&&
302 type
== t
->dev
->type
)
308 static struct ip6_tnl
*ip6gre_tunnel_locate(struct net
*net
,
309 const struct __ip6_tnl_parm
*parms
, int create
)
311 struct ip6_tnl
*t
, *nt
;
312 struct net_device
*dev
;
314 struct ip6gre_net
*ign
= net_generic(net
, ip6gre_net_id
);
316 t
= ip6gre_tunnel_find(net
, parms
, ARPHRD_IP6GRE
);
323 strlcpy(name
, parms
->name
, IFNAMSIZ
);
325 strcpy(name
, "ip6gre%d");
327 dev
= alloc_netdev(sizeof(*t
), name
, NET_NAME_UNKNOWN
,
328 ip6gre_tunnel_setup
);
332 dev_net_set(dev
, net
);
334 nt
= netdev_priv(dev
);
336 dev
->rtnl_link_ops
= &ip6gre_link_ops
;
339 nt
->net
= dev_net(dev
);
340 ip6gre_tnl_link_config(nt
, 1);
342 if (register_netdevice(dev
) < 0)
345 /* Can use a lockless transmit, unless we generate output sequences */
346 if (!(nt
->parms
.o_flags
& TUNNEL_SEQ
))
347 dev
->features
|= NETIF_F_LLTX
;
350 ip6gre_tunnel_link(ign
, nt
);
358 static void ip6gre_tunnel_uninit(struct net_device
*dev
)
360 struct ip6_tnl
*t
= netdev_priv(dev
);
361 struct ip6gre_net
*ign
= net_generic(t
->net
, ip6gre_net_id
);
363 ip6gre_tunnel_unlink(ign
, t
);
364 dst_cache_reset(&t
->dst_cache
);
369 static void ip6gre_err(struct sk_buff
*skb
, struct inet6_skb_parm
*opt
,
370 u8 type
, u8 code
, int offset
, __be32 info
)
372 const struct gre_base_hdr
*greh
;
373 const struct ipv6hdr
*ipv6h
;
374 int grehlen
= sizeof(*greh
);
380 if (!pskb_may_pull(skb
, offset
+ grehlen
))
382 greh
= (const struct gre_base_hdr
*)(skb
->data
+ offset
);
384 if (flags
& (GRE_VERSION
| GRE_ROUTING
))
386 if (flags
& GRE_CSUM
)
388 if (flags
& GRE_KEY
) {
389 key_off
= grehlen
+ offset
;
393 if (!pskb_may_pull(skb
, offset
+ grehlen
))
395 ipv6h
= (const struct ipv6hdr
*)skb
->data
;
396 greh
= (const struct gre_base_hdr
*)(skb
->data
+ offset
);
397 key
= key_off
? *(__be32
*)(skb
->data
+ key_off
) : 0;
399 t
= ip6gre_tunnel_lookup(skb
->dev
, &ipv6h
->daddr
, &ipv6h
->saddr
,
400 key
, greh
->protocol
);
406 struct ipv6_tlv_tnl_enc_lim
*tel
;
408 case ICMPV6_DEST_UNREACH
:
409 net_dbg_ratelimited("%s: Path to destination invalid or inactive!\n",
411 if (code
!= ICMPV6_PORT_UNREACH
)
414 case ICMPV6_TIME_EXCEED
:
415 if (code
== ICMPV6_EXC_HOPLIMIT
) {
416 net_dbg_ratelimited("%s: Too small hop limit or routing loop in tunnel!\n",
421 case ICMPV6_PARAMPROB
:
423 if (code
== ICMPV6_HDR_FIELD
)
424 teli
= ip6_tnl_parse_tlv_enc_lim(skb
, skb
->data
);
426 if (teli
&& teli
== be32_to_cpu(info
) - 2) {
427 tel
= (struct ipv6_tlv_tnl_enc_lim
*) &skb
->data
[teli
];
428 if (tel
->encap_limit
== 0) {
429 net_dbg_ratelimited("%s: Too small encapsulation limit or routing loop in tunnel!\n",
433 net_dbg_ratelimited("%s: Recipient unable to parse tunneled packet!\n",
437 case ICMPV6_PKT_TOOBIG
:
438 mtu
= be32_to_cpu(info
) - offset
- t
->tun_hlen
;
439 if (t
->dev
->type
== ARPHRD_ETHER
)
441 if (mtu
< IPV6_MIN_MTU
)
447 if (time_before(jiffies
, t
->err_time
+ IP6TUNNEL_ERR_TIMEO
))
451 t
->err_time
= jiffies
;
454 static int ip6gre_rcv(struct sk_buff
*skb
, const struct tnl_ptk_info
*tpi
)
456 const struct ipv6hdr
*ipv6h
;
457 struct ip6_tnl
*tunnel
;
459 ipv6h
= ipv6_hdr(skb
);
460 tunnel
= ip6gre_tunnel_lookup(skb
->dev
,
461 &ipv6h
->saddr
, &ipv6h
->daddr
, tpi
->key
,
464 ip6_tnl_rcv(tunnel
, skb
, tpi
, NULL
, false);
469 return PACKET_REJECT
;
472 static int gre_rcv(struct sk_buff
*skb
)
474 struct tnl_ptk_info tpi
;
475 bool csum_err
= false;
478 hdr_len
= gre_parse_header(skb
, &tpi
, &csum_err
, htons(ETH_P_IPV6
), 0);
482 if (iptunnel_pull_header(skb
, hdr_len
, tpi
.proto
, false))
485 if (ip6gre_rcv(skb
, &tpi
) == PACKET_RCVD
)
488 icmpv6_send(skb
, ICMPV6_DEST_UNREACH
, ICMPV6_PORT_UNREACH
, 0);
494 static int gre_handle_offloads(struct sk_buff
*skb
, bool csum
)
496 return iptunnel_handle_offloads(skb
,
497 csum
? SKB_GSO_GRE_CSUM
: SKB_GSO_GRE
);
500 static netdev_tx_t
__gre6_xmit(struct sk_buff
*skb
,
501 struct net_device
*dev
, __u8 dsfield
,
502 struct flowi6
*fl6
, int encap_limit
,
503 __u32
*pmtu
, __be16 proto
)
505 struct ip6_tnl
*tunnel
= netdev_priv(dev
);
506 __be16 protocol
= (dev
->type
== ARPHRD_ETHER
) ?
507 htons(ETH_P_TEB
) : proto
;
509 if (dev
->type
== ARPHRD_ETHER
)
510 IPCB(skb
)->flags
= 0;
512 if (dev
->header_ops
&& dev
->type
== ARPHRD_IP6GRE
)
513 fl6
->daddr
= ((struct ipv6hdr
*)skb
->data
)->daddr
;
515 fl6
->daddr
= tunnel
->parms
.raddr
;
517 if (tunnel
->parms
.o_flags
& TUNNEL_SEQ
)
520 /* Push GRE header. */
521 gre_build_header(skb
, tunnel
->tun_hlen
, tunnel
->parms
.o_flags
,
522 protocol
, tunnel
->parms
.o_key
, htonl(tunnel
->o_seqno
));
524 return ip6_tnl_xmit(skb
, dev
, dsfield
, fl6
, encap_limit
, pmtu
,
528 static inline int ip6gre_xmit_ipv4(struct sk_buff
*skb
, struct net_device
*dev
)
530 struct ip6_tnl
*t
= netdev_priv(dev
);
531 const struct iphdr
*iph
= ip_hdr(skb
);
532 int encap_limit
= -1;
538 memset(&(IPCB(skb
)->opt
), 0, sizeof(IPCB(skb
)->opt
));
540 if (!(t
->parms
.flags
& IP6_TNL_F_IGN_ENCAP_LIMIT
))
541 encap_limit
= t
->parms
.encap_limit
;
543 memcpy(&fl6
, &t
->fl
.u
.ip6
, sizeof(fl6
));
545 if (t
->parms
.flags
& IP6_TNL_F_USE_ORIG_TCLASS
)
546 dsfield
= ipv4_get_dsfield(iph
);
548 dsfield
= ip6_tclass(t
->parms
.flowinfo
);
549 if (t
->parms
.flags
& IP6_TNL_F_USE_ORIG_FWMARK
)
550 fl6
.flowi6_mark
= skb
->mark
;
552 fl6
.flowi6_mark
= t
->parms
.fwmark
;
554 fl6
.flowi6_uid
= sock_net_uid(dev_net(dev
), NULL
);
556 err
= gre_handle_offloads(skb
, !!(t
->parms
.o_flags
& TUNNEL_CSUM
));
560 err
= __gre6_xmit(skb
, dev
, dsfield
, &fl6
, encap_limit
, &mtu
,
563 /* XXX: send ICMP error even if DF is not set. */
564 if (err
== -EMSGSIZE
)
565 icmp_send(skb
, ICMP_DEST_UNREACH
, ICMP_FRAG_NEEDED
,
573 static inline int ip6gre_xmit_ipv6(struct sk_buff
*skb
, struct net_device
*dev
)
575 struct ip6_tnl
*t
= netdev_priv(dev
);
576 struct ipv6hdr
*ipv6h
= ipv6_hdr(skb
);
577 int encap_limit
= -1;
584 if (ipv6_addr_equal(&t
->parms
.raddr
, &ipv6h
->saddr
))
587 offset
= ip6_tnl_parse_tlv_enc_lim(skb
, skb_network_header(skb
));
588 /* ip6_tnl_parse_tlv_enc_lim() might have reallocated skb->head */
589 ipv6h
= ipv6_hdr(skb
);
592 struct ipv6_tlv_tnl_enc_lim
*tel
;
593 tel
= (struct ipv6_tlv_tnl_enc_lim
*)&skb_network_header(skb
)[offset
];
594 if (tel
->encap_limit
== 0) {
595 icmpv6_send(skb
, ICMPV6_PARAMPROB
,
596 ICMPV6_HDR_FIELD
, offset
+ 2);
599 encap_limit
= tel
->encap_limit
- 1;
600 } else if (!(t
->parms
.flags
& IP6_TNL_F_IGN_ENCAP_LIMIT
))
601 encap_limit
= t
->parms
.encap_limit
;
603 memcpy(&fl6
, &t
->fl
.u
.ip6
, sizeof(fl6
));
605 if (t
->parms
.flags
& IP6_TNL_F_USE_ORIG_TCLASS
)
606 dsfield
= ipv6_get_dsfield(ipv6h
);
608 dsfield
= ip6_tclass(t
->parms
.flowinfo
);
610 if (t
->parms
.flags
& IP6_TNL_F_USE_ORIG_FLOWLABEL
)
611 fl6
.flowlabel
|= ip6_flowlabel(ipv6h
);
612 if (t
->parms
.flags
& IP6_TNL_F_USE_ORIG_FWMARK
)
613 fl6
.flowi6_mark
= skb
->mark
;
615 fl6
.flowi6_mark
= t
->parms
.fwmark
;
617 fl6
.flowi6_uid
= sock_net_uid(dev_net(dev
), NULL
);
619 if (gre_handle_offloads(skb
, !!(t
->parms
.o_flags
& TUNNEL_CSUM
)))
622 err
= __gre6_xmit(skb
, dev
, dsfield
, &fl6
, encap_limit
,
623 &mtu
, skb
->protocol
);
625 if (err
== -EMSGSIZE
)
626 icmpv6_send(skb
, ICMPV6_PKT_TOOBIG
, 0, mtu
);
634 * ip6_tnl_addr_conflict - compare packet addresses to tunnel's own
635 * @t: the outgoing tunnel device
636 * @hdr: IPv6 header from the incoming packet
639 * Avoid trivial tunneling loop by checking that tunnel exit-point
640 * doesn't match source of incoming packet.
647 static inline bool ip6gre_tnl_addr_conflict(const struct ip6_tnl
*t
,
648 const struct ipv6hdr
*hdr
)
650 return ipv6_addr_equal(&t
->parms
.raddr
, &hdr
->saddr
);
653 static int ip6gre_xmit_other(struct sk_buff
*skb
, struct net_device
*dev
)
655 struct ip6_tnl
*t
= netdev_priv(dev
);
656 int encap_limit
= -1;
661 if (!(t
->parms
.flags
& IP6_TNL_F_IGN_ENCAP_LIMIT
))
662 encap_limit
= t
->parms
.encap_limit
;
664 memcpy(&fl6
, &t
->fl
.u
.ip6
, sizeof(fl6
));
666 err
= gre_handle_offloads(skb
, !!(t
->parms
.o_flags
& TUNNEL_CSUM
));
670 err
= __gre6_xmit(skb
, dev
, 0, &fl6
, encap_limit
, &mtu
, skb
->protocol
);
675 static netdev_tx_t
ip6gre_tunnel_xmit(struct sk_buff
*skb
,
676 struct net_device
*dev
)
678 struct ip6_tnl
*t
= netdev_priv(dev
);
679 struct net_device_stats
*stats
= &t
->dev
->stats
;
682 if (!ip6_tnl_xmit_ctl(t
, &t
->parms
.laddr
, &t
->parms
.raddr
))
685 switch (skb
->protocol
) {
686 case htons(ETH_P_IP
):
687 ret
= ip6gre_xmit_ipv4(skb
, dev
);
689 case htons(ETH_P_IPV6
):
690 ret
= ip6gre_xmit_ipv6(skb
, dev
);
693 ret
= ip6gre_xmit_other(skb
, dev
);
709 static void ip6gre_tnl_link_config(struct ip6_tnl
*t
, int set_mtu
)
711 struct net_device
*dev
= t
->dev
;
712 struct __ip6_tnl_parm
*p
= &t
->parms
;
713 struct flowi6
*fl6
= &t
->fl
.u
.ip6
;
716 if (dev
->type
!= ARPHRD_ETHER
) {
717 memcpy(dev
->dev_addr
, &p
->laddr
, sizeof(struct in6_addr
));
718 memcpy(dev
->broadcast
, &p
->raddr
, sizeof(struct in6_addr
));
721 /* Set up flowi template */
722 fl6
->saddr
= p
->laddr
;
723 fl6
->daddr
= p
->raddr
;
724 fl6
->flowi6_oif
= p
->link
;
726 fl6
->flowi6_proto
= IPPROTO_GRE
;
728 if (!(p
->flags
&IP6_TNL_F_USE_ORIG_TCLASS
))
729 fl6
->flowlabel
|= IPV6_TCLASS_MASK
& p
->flowinfo
;
730 if (!(p
->flags
&IP6_TNL_F_USE_ORIG_FLOWLABEL
))
731 fl6
->flowlabel
|= IPV6_FLOWLABEL_MASK
& p
->flowinfo
;
733 p
->flags
&= ~(IP6_TNL_F_CAP_XMIT
|IP6_TNL_F_CAP_RCV
|IP6_TNL_F_CAP_PER_PACKET
);
734 p
->flags
|= ip6_tnl_get_cap(t
, &p
->laddr
, &p
->raddr
);
736 if (p
->flags
&IP6_TNL_F_CAP_XMIT
&&
737 p
->flags
&IP6_TNL_F_CAP_RCV
&& dev
->type
!= ARPHRD_ETHER
)
738 dev
->flags
|= IFF_POINTOPOINT
;
740 dev
->flags
&= ~IFF_POINTOPOINT
;
742 t
->tun_hlen
= gre_calc_hlen(t
->parms
.o_flags
);
744 t
->hlen
= t
->encap_hlen
+ t
->tun_hlen
;
746 t_hlen
= t
->hlen
+ sizeof(struct ipv6hdr
);
748 if (p
->flags
& IP6_TNL_F_CAP_XMIT
) {
749 int strict
= (ipv6_addr_type(&p
->raddr
) &
750 (IPV6_ADDR_MULTICAST
|IPV6_ADDR_LINKLOCAL
));
752 struct rt6_info
*rt
= rt6_lookup(t
->net
,
753 &p
->raddr
, &p
->laddr
,
760 dev
->hard_header_len
= rt
->dst
.dev
->hard_header_len
+
764 dev
->mtu
= rt
->dst
.dev
->mtu
- t_hlen
;
765 if (!(t
->parms
.flags
& IP6_TNL_F_IGN_ENCAP_LIMIT
))
767 if (dev
->type
== ARPHRD_ETHER
)
768 dev
->mtu
-= ETH_HLEN
;
770 if (dev
->mtu
< IPV6_MIN_MTU
)
771 dev
->mtu
= IPV6_MIN_MTU
;
778 static int ip6gre_tnl_change(struct ip6_tnl
*t
,
779 const struct __ip6_tnl_parm
*p
, int set_mtu
)
781 t
->parms
.laddr
= p
->laddr
;
782 t
->parms
.raddr
= p
->raddr
;
783 t
->parms
.flags
= p
->flags
;
784 t
->parms
.hop_limit
= p
->hop_limit
;
785 t
->parms
.encap_limit
= p
->encap_limit
;
786 t
->parms
.flowinfo
= p
->flowinfo
;
787 t
->parms
.link
= p
->link
;
788 t
->parms
.proto
= p
->proto
;
789 t
->parms
.i_key
= p
->i_key
;
790 t
->parms
.o_key
= p
->o_key
;
791 t
->parms
.i_flags
= p
->i_flags
;
792 t
->parms
.o_flags
= p
->o_flags
;
793 t
->parms
.fwmark
= p
->fwmark
;
794 dst_cache_reset(&t
->dst_cache
);
795 ip6gre_tnl_link_config(t
, set_mtu
);
799 static void ip6gre_tnl_parm_from_user(struct __ip6_tnl_parm
*p
,
800 const struct ip6_tnl_parm2
*u
)
805 p
->hop_limit
= u
->hop_limit
;
806 p
->encap_limit
= u
->encap_limit
;
807 p
->flowinfo
= u
->flowinfo
;
811 p
->i_flags
= gre_flags_to_tnl_flags(u
->i_flags
);
812 p
->o_flags
= gre_flags_to_tnl_flags(u
->o_flags
);
813 memcpy(p
->name
, u
->name
, sizeof(u
->name
));
816 static void ip6gre_tnl_parm_to_user(struct ip6_tnl_parm2
*u
,
817 const struct __ip6_tnl_parm
*p
)
819 u
->proto
= IPPROTO_GRE
;
823 u
->hop_limit
= p
->hop_limit
;
824 u
->encap_limit
= p
->encap_limit
;
825 u
->flowinfo
= p
->flowinfo
;
829 u
->i_flags
= gre_tnl_flags_to_gre_flags(p
->i_flags
);
830 u
->o_flags
= gre_tnl_flags_to_gre_flags(p
->o_flags
);
831 memcpy(u
->name
, p
->name
, sizeof(u
->name
));
834 static int ip6gre_tunnel_ioctl(struct net_device
*dev
,
835 struct ifreq
*ifr
, int cmd
)
838 struct ip6_tnl_parm2 p
;
839 struct __ip6_tnl_parm p1
;
840 struct ip6_tnl
*t
= netdev_priv(dev
);
841 struct net
*net
= t
->net
;
842 struct ip6gre_net
*ign
= net_generic(net
, ip6gre_net_id
);
844 memset(&p1
, 0, sizeof(p1
));
848 if (dev
== ign
->fb_tunnel_dev
) {
849 if (copy_from_user(&p
, ifr
->ifr_ifru
.ifru_data
, sizeof(p
))) {
853 ip6gre_tnl_parm_from_user(&p1
, &p
);
854 t
= ip6gre_tunnel_locate(net
, &p1
, 0);
856 t
= netdev_priv(dev
);
858 memset(&p
, 0, sizeof(p
));
859 ip6gre_tnl_parm_to_user(&p
, &t
->parms
);
860 if (copy_to_user(ifr
->ifr_ifru
.ifru_data
, &p
, sizeof(p
)))
867 if (!ns_capable(net
->user_ns
, CAP_NET_ADMIN
))
871 if (copy_from_user(&p
, ifr
->ifr_ifru
.ifru_data
, sizeof(p
)))
875 if ((p
.i_flags
|p
.o_flags
)&(GRE_VERSION
|GRE_ROUTING
))
878 if (!(p
.i_flags
&GRE_KEY
))
880 if (!(p
.o_flags
&GRE_KEY
))
883 ip6gre_tnl_parm_from_user(&p1
, &p
);
884 t
= ip6gre_tunnel_locate(net
, &p1
, cmd
== SIOCADDTUNNEL
);
886 if (dev
!= ign
->fb_tunnel_dev
&& cmd
== SIOCCHGTUNNEL
) {
893 t
= netdev_priv(dev
);
895 ip6gre_tunnel_unlink(ign
, t
);
897 ip6gre_tnl_change(t
, &p1
, 1);
898 ip6gre_tunnel_link(ign
, t
);
899 netdev_state_change(dev
);
906 memset(&p
, 0, sizeof(p
));
907 ip6gre_tnl_parm_to_user(&p
, &t
->parms
);
908 if (copy_to_user(ifr
->ifr_ifru
.ifru_data
, &p
, sizeof(p
)))
911 err
= (cmd
== SIOCADDTUNNEL
? -ENOBUFS
: -ENOENT
);
916 if (!ns_capable(net
->user_ns
, CAP_NET_ADMIN
))
919 if (dev
== ign
->fb_tunnel_dev
) {
921 if (copy_from_user(&p
, ifr
->ifr_ifru
.ifru_data
, sizeof(p
)))
924 ip6gre_tnl_parm_from_user(&p1
, &p
);
925 t
= ip6gre_tunnel_locate(net
, &p1
, 0);
929 if (t
== netdev_priv(ign
->fb_tunnel_dev
))
933 unregister_netdevice(dev
);
945 static int ip6gre_header(struct sk_buff
*skb
, struct net_device
*dev
,
946 unsigned short type
, const void *daddr
,
947 const void *saddr
, unsigned int len
)
949 struct ip6_tnl
*t
= netdev_priv(dev
);
950 struct ipv6hdr
*ipv6h
;
953 ipv6h
= skb_push(skb
, t
->hlen
+ sizeof(*ipv6h
));
954 ip6_flow_hdr(ipv6h
, 0, ip6_make_flowlabel(dev_net(dev
), skb
,
955 t
->fl
.u
.ip6
.flowlabel
,
956 true, &t
->fl
.u
.ip6
));
957 ipv6h
->hop_limit
= t
->parms
.hop_limit
;
958 ipv6h
->nexthdr
= NEXTHDR_GRE
;
959 ipv6h
->saddr
= t
->parms
.laddr
;
960 ipv6h
->daddr
= t
->parms
.raddr
;
962 p
= (__be16
*)(ipv6h
+ 1);
963 p
[0] = t
->parms
.o_flags
;
967 * Set the source hardware address.
971 memcpy(&ipv6h
->saddr
, saddr
, sizeof(struct in6_addr
));
973 memcpy(&ipv6h
->daddr
, daddr
, sizeof(struct in6_addr
));
974 if (!ipv6_addr_any(&ipv6h
->daddr
))
980 static const struct header_ops ip6gre_header_ops
= {
981 .create
= ip6gre_header
,
984 static const struct net_device_ops ip6gre_netdev_ops
= {
985 .ndo_init
= ip6gre_tunnel_init
,
986 .ndo_uninit
= ip6gre_tunnel_uninit
,
987 .ndo_start_xmit
= ip6gre_tunnel_xmit
,
988 .ndo_do_ioctl
= ip6gre_tunnel_ioctl
,
989 .ndo_change_mtu
= ip6_tnl_change_mtu
,
990 .ndo_get_stats64
= ip_tunnel_get_stats64
,
991 .ndo_get_iflink
= ip6_tnl_get_iflink
,
994 static void ip6gre_dev_free(struct net_device
*dev
)
996 struct ip6_tnl
*t
= netdev_priv(dev
);
998 dst_cache_destroy(&t
->dst_cache
);
999 free_percpu(dev
->tstats
);
1002 static void ip6gre_tunnel_setup(struct net_device
*dev
)
1004 dev
->netdev_ops
= &ip6gre_netdev_ops
;
1005 dev
->needs_free_netdev
= true;
1006 dev
->priv_destructor
= ip6gre_dev_free
;
1008 dev
->type
= ARPHRD_IP6GRE
;
1010 dev
->flags
|= IFF_NOARP
;
1011 dev
->addr_len
= sizeof(struct in6_addr
);
1012 netif_keep_dst(dev
);
1013 /* This perm addr will be used as interface identifier by IPv6 */
1014 dev
->addr_assign_type
= NET_ADDR_RANDOM
;
1015 eth_random_addr(dev
->perm_addr
);
1018 static int ip6gre_tunnel_init_common(struct net_device
*dev
)
1020 struct ip6_tnl
*tunnel
;
1024 tunnel
= netdev_priv(dev
);
1027 tunnel
->net
= dev_net(dev
);
1028 strcpy(tunnel
->parms
.name
, dev
->name
);
1030 dev
->tstats
= netdev_alloc_pcpu_stats(struct pcpu_sw_netstats
);
1034 ret
= dst_cache_init(&tunnel
->dst_cache
, GFP_KERNEL
);
1036 free_percpu(dev
->tstats
);
1041 tunnel
->tun_hlen
= gre_calc_hlen(tunnel
->parms
.o_flags
);
1042 tunnel
->hlen
= tunnel
->tun_hlen
+ tunnel
->encap_hlen
;
1043 t_hlen
= tunnel
->hlen
+ sizeof(struct ipv6hdr
);
1045 dev
->hard_header_len
= LL_MAX_HEADER
+ t_hlen
;
1046 dev
->mtu
= ETH_DATA_LEN
- t_hlen
;
1047 if (dev
->type
== ARPHRD_ETHER
)
1048 dev
->mtu
-= ETH_HLEN
;
1049 if (!(tunnel
->parms
.flags
& IP6_TNL_F_IGN_ENCAP_LIMIT
))
1055 static int ip6gre_tunnel_init(struct net_device
*dev
)
1057 struct ip6_tnl
*tunnel
;
1060 ret
= ip6gre_tunnel_init_common(dev
);
1064 tunnel
= netdev_priv(dev
);
1066 memcpy(dev
->dev_addr
, &tunnel
->parms
.laddr
, sizeof(struct in6_addr
));
1067 memcpy(dev
->broadcast
, &tunnel
->parms
.raddr
, sizeof(struct in6_addr
));
1069 if (ipv6_addr_any(&tunnel
->parms
.raddr
))
1070 dev
->header_ops
= &ip6gre_header_ops
;
1075 static void ip6gre_fb_tunnel_init(struct net_device
*dev
)
1077 struct ip6_tnl
*tunnel
= netdev_priv(dev
);
1080 tunnel
->net
= dev_net(dev
);
1081 strcpy(tunnel
->parms
.name
, dev
->name
);
1083 tunnel
->hlen
= sizeof(struct ipv6hdr
) + 4;
1089 static struct inet6_protocol ip6gre_protocol __read_mostly
= {
1091 .err_handler
= ip6gre_err
,
1092 .flags
= INET6_PROTO_NOPOLICY
|INET6_PROTO_FINAL
,
1095 static void ip6gre_destroy_tunnels(struct net
*net
, struct list_head
*head
)
1097 struct ip6gre_net
*ign
= net_generic(net
, ip6gre_net_id
);
1098 struct net_device
*dev
, *aux
;
1101 for_each_netdev_safe(net
, dev
, aux
)
1102 if (dev
->rtnl_link_ops
== &ip6gre_link_ops
||
1103 dev
->rtnl_link_ops
== &ip6gre_tap_ops
)
1104 unregister_netdevice_queue(dev
, head
);
1106 for (prio
= 0; prio
< 4; prio
++) {
1108 for (h
= 0; h
< IP6_GRE_HASH_SIZE
; h
++) {
1111 t
= rtnl_dereference(ign
->tunnels
[prio
][h
]);
1114 /* If dev is in the same netns, it has already
1115 * been added to the list by the previous loop.
1117 if (!net_eq(dev_net(t
->dev
), net
))
1118 unregister_netdevice_queue(t
->dev
,
1120 t
= rtnl_dereference(t
->next
);
1126 static int __net_init
ip6gre_init_net(struct net
*net
)
1128 struct ip6gre_net
*ign
= net_generic(net
, ip6gre_net_id
);
1131 ign
->fb_tunnel_dev
= alloc_netdev(sizeof(struct ip6_tnl
), "ip6gre0",
1133 ip6gre_tunnel_setup
);
1134 if (!ign
->fb_tunnel_dev
) {
1138 dev_net_set(ign
->fb_tunnel_dev
, net
);
1139 /* FB netdevice is special: we have one, and only one per netns.
1140 * Allowing to move it to another netns is clearly unsafe.
1142 ign
->fb_tunnel_dev
->features
|= NETIF_F_NETNS_LOCAL
;
1145 ip6gre_fb_tunnel_init(ign
->fb_tunnel_dev
);
1146 ign
->fb_tunnel_dev
->rtnl_link_ops
= &ip6gre_link_ops
;
1148 err
= register_netdev(ign
->fb_tunnel_dev
);
1152 rcu_assign_pointer(ign
->tunnels_wc
[0],
1153 netdev_priv(ign
->fb_tunnel_dev
));
1157 free_netdev(ign
->fb_tunnel_dev
);
1162 static void __net_exit
ip6gre_exit_net(struct net
*net
)
1167 ip6gre_destroy_tunnels(net
, &list
);
1168 unregister_netdevice_many(&list
);
1172 static struct pernet_operations ip6gre_net_ops
= {
1173 .init
= ip6gre_init_net
,
1174 .exit
= ip6gre_exit_net
,
1175 .id
= &ip6gre_net_id
,
1176 .size
= sizeof(struct ip6gre_net
),
1179 static int ip6gre_tunnel_validate(struct nlattr
*tb
[], struct nlattr
*data
[],
1180 struct netlink_ext_ack
*extack
)
1188 if (data
[IFLA_GRE_IFLAGS
])
1189 flags
|= nla_get_be16(data
[IFLA_GRE_IFLAGS
]);
1190 if (data
[IFLA_GRE_OFLAGS
])
1191 flags
|= nla_get_be16(data
[IFLA_GRE_OFLAGS
]);
1192 if (flags
& (GRE_VERSION
|GRE_ROUTING
))
1198 static int ip6gre_tap_validate(struct nlattr
*tb
[], struct nlattr
*data
[],
1199 struct netlink_ext_ack
*extack
)
1201 struct in6_addr daddr
;
1203 if (tb
[IFLA_ADDRESS
]) {
1204 if (nla_len(tb
[IFLA_ADDRESS
]) != ETH_ALEN
)
1206 if (!is_valid_ether_addr(nla_data(tb
[IFLA_ADDRESS
])))
1207 return -EADDRNOTAVAIL
;
1213 if (data
[IFLA_GRE_REMOTE
]) {
1214 daddr
= nla_get_in6_addr(data
[IFLA_GRE_REMOTE
]);
1215 if (ipv6_addr_any(&daddr
))
1220 return ip6gre_tunnel_validate(tb
, data
, extack
);
1224 static void ip6gre_netlink_parms(struct nlattr
*data
[],
1225 struct __ip6_tnl_parm
*parms
)
1227 memset(parms
, 0, sizeof(*parms
));
1232 if (data
[IFLA_GRE_LINK
])
1233 parms
->link
= nla_get_u32(data
[IFLA_GRE_LINK
]);
1235 if (data
[IFLA_GRE_IFLAGS
])
1236 parms
->i_flags
= gre_flags_to_tnl_flags(
1237 nla_get_be16(data
[IFLA_GRE_IFLAGS
]));
1239 if (data
[IFLA_GRE_OFLAGS
])
1240 parms
->o_flags
= gre_flags_to_tnl_flags(
1241 nla_get_be16(data
[IFLA_GRE_OFLAGS
]));
1243 if (data
[IFLA_GRE_IKEY
])
1244 parms
->i_key
= nla_get_be32(data
[IFLA_GRE_IKEY
]);
1246 if (data
[IFLA_GRE_OKEY
])
1247 parms
->o_key
= nla_get_be32(data
[IFLA_GRE_OKEY
]);
1249 if (data
[IFLA_GRE_LOCAL
])
1250 parms
->laddr
= nla_get_in6_addr(data
[IFLA_GRE_LOCAL
]);
1252 if (data
[IFLA_GRE_REMOTE
])
1253 parms
->raddr
= nla_get_in6_addr(data
[IFLA_GRE_REMOTE
]);
1255 if (data
[IFLA_GRE_TTL
])
1256 parms
->hop_limit
= nla_get_u8(data
[IFLA_GRE_TTL
]);
1258 if (data
[IFLA_GRE_ENCAP_LIMIT
])
1259 parms
->encap_limit
= nla_get_u8(data
[IFLA_GRE_ENCAP_LIMIT
]);
1261 if (data
[IFLA_GRE_FLOWINFO
])
1262 parms
->flowinfo
= nla_get_be32(data
[IFLA_GRE_FLOWINFO
]);
1264 if (data
[IFLA_GRE_FLAGS
])
1265 parms
->flags
= nla_get_u32(data
[IFLA_GRE_FLAGS
]);
1267 if (data
[IFLA_GRE_FWMARK
])
1268 parms
->fwmark
= nla_get_u32(data
[IFLA_GRE_FWMARK
]);
1271 static int ip6gre_tap_init(struct net_device
*dev
)
1273 struct ip6_tnl
*tunnel
;
1276 ret
= ip6gre_tunnel_init_common(dev
);
1280 dev
->priv_flags
|= IFF_LIVE_ADDR_CHANGE
;
1282 tunnel
= netdev_priv(dev
);
1284 ip6gre_tnl_link_config(tunnel
, 1);
1289 static const struct net_device_ops ip6gre_tap_netdev_ops
= {
1290 .ndo_init
= ip6gre_tap_init
,
1291 .ndo_uninit
= ip6gre_tunnel_uninit
,
1292 .ndo_start_xmit
= ip6gre_tunnel_xmit
,
1293 .ndo_set_mac_address
= eth_mac_addr
,
1294 .ndo_validate_addr
= eth_validate_addr
,
1295 .ndo_change_mtu
= ip6_tnl_change_mtu
,
1296 .ndo_get_stats64
= ip_tunnel_get_stats64
,
1297 .ndo_get_iflink
= ip6_tnl_get_iflink
,
1300 #define GRE6_FEATURES (NETIF_F_SG | \
1301 NETIF_F_FRAGLIST | \
1305 static void ip6gre_tap_setup(struct net_device
*dev
)
1310 dev
->netdev_ops
= &ip6gre_tap_netdev_ops
;
1311 dev
->needs_free_netdev
= true;
1312 dev
->priv_destructor
= ip6gre_dev_free
;
1314 dev
->features
|= NETIF_F_NETNS_LOCAL
;
1315 dev
->priv_flags
&= ~IFF_TX_SKB_SHARING
;
1316 dev
->priv_flags
|= IFF_LIVE_ADDR_CHANGE
;
1317 netif_keep_dst(dev
);
1320 static bool ip6gre_netlink_encap_parms(struct nlattr
*data
[],
1321 struct ip_tunnel_encap
*ipencap
)
1325 memset(ipencap
, 0, sizeof(*ipencap
));
1330 if (data
[IFLA_GRE_ENCAP_TYPE
]) {
1332 ipencap
->type
= nla_get_u16(data
[IFLA_GRE_ENCAP_TYPE
]);
1335 if (data
[IFLA_GRE_ENCAP_FLAGS
]) {
1337 ipencap
->flags
= nla_get_u16(data
[IFLA_GRE_ENCAP_FLAGS
]);
1340 if (data
[IFLA_GRE_ENCAP_SPORT
]) {
1342 ipencap
->sport
= nla_get_be16(data
[IFLA_GRE_ENCAP_SPORT
]);
1345 if (data
[IFLA_GRE_ENCAP_DPORT
]) {
1347 ipencap
->dport
= nla_get_be16(data
[IFLA_GRE_ENCAP_DPORT
]);
1353 static int ip6gre_newlink(struct net
*src_net
, struct net_device
*dev
,
1354 struct nlattr
*tb
[], struct nlattr
*data
[],
1355 struct netlink_ext_ack
*extack
)
1358 struct net
*net
= dev_net(dev
);
1359 struct ip6gre_net
*ign
= net_generic(net
, ip6gre_net_id
);
1360 struct ip_tunnel_encap ipencap
;
1363 nt
= netdev_priv(dev
);
1365 if (ip6gre_netlink_encap_parms(data
, &ipencap
)) {
1366 int err
= ip6_tnl_encap_setup(nt
, &ipencap
);
1372 ip6gre_netlink_parms(data
, &nt
->parms
);
1374 if (ip6gre_tunnel_find(net
, &nt
->parms
, dev
->type
))
1377 if (dev
->type
== ARPHRD_ETHER
&& !tb
[IFLA_ADDRESS
])
1378 eth_hw_addr_random(dev
);
1381 nt
->net
= dev_net(dev
);
1382 ip6gre_tnl_link_config(nt
, !tb
[IFLA_MTU
]);
1384 dev
->features
|= GRE6_FEATURES
;
1385 dev
->hw_features
|= GRE6_FEATURES
;
1387 if (!(nt
->parms
.o_flags
& TUNNEL_SEQ
)) {
1388 /* TCP offload with GRE SEQ is not supported, nor
1389 * can we support 2 levels of outer headers requiring
1392 if (!(nt
->parms
.o_flags
& TUNNEL_CSUM
) ||
1393 (nt
->encap
.type
== TUNNEL_ENCAP_NONE
)) {
1394 dev
->features
|= NETIF_F_GSO_SOFTWARE
;
1395 dev
->hw_features
|= NETIF_F_GSO_SOFTWARE
;
1398 /* Can use a lockless transmit, unless we generate
1401 dev
->features
|= NETIF_F_LLTX
;
1404 err
= register_netdevice(dev
);
1409 ip6gre_tunnel_link(ign
, nt
);
1415 static int ip6gre_changelink(struct net_device
*dev
, struct nlattr
*tb
[],
1416 struct nlattr
*data
[],
1417 struct netlink_ext_ack
*extack
)
1419 struct ip6_tnl
*t
, *nt
= netdev_priv(dev
);
1420 struct net
*net
= nt
->net
;
1421 struct ip6gre_net
*ign
= net_generic(net
, ip6gre_net_id
);
1422 struct __ip6_tnl_parm p
;
1423 struct ip_tunnel_encap ipencap
;
1425 if (dev
== ign
->fb_tunnel_dev
)
1428 if (ip6gre_netlink_encap_parms(data
, &ipencap
)) {
1429 int err
= ip6_tnl_encap_setup(nt
, &ipencap
);
1435 ip6gre_netlink_parms(data
, &p
);
1437 t
= ip6gre_tunnel_locate(net
, &p
, 0);
1446 ip6gre_tunnel_unlink(ign
, t
);
1447 ip6gre_tnl_change(t
, &p
, !tb
[IFLA_MTU
]);
1448 ip6gre_tunnel_link(ign
, t
);
1452 static void ip6gre_dellink(struct net_device
*dev
, struct list_head
*head
)
1454 struct net
*net
= dev_net(dev
);
1455 struct ip6gre_net
*ign
= net_generic(net
, ip6gre_net_id
);
1457 if (dev
!= ign
->fb_tunnel_dev
)
1458 unregister_netdevice_queue(dev
, head
);
1461 static size_t ip6gre_get_size(const struct net_device
*dev
)
1466 /* IFLA_GRE_IFLAGS */
1468 /* IFLA_GRE_OFLAGS */
1474 /* IFLA_GRE_LOCAL */
1475 nla_total_size(sizeof(struct in6_addr
)) +
1476 /* IFLA_GRE_REMOTE */
1477 nla_total_size(sizeof(struct in6_addr
)) +
1480 /* IFLA_GRE_ENCAP_LIMIT */
1482 /* IFLA_GRE_FLOWINFO */
1484 /* IFLA_GRE_FLAGS */
1486 /* IFLA_GRE_ENCAP_TYPE */
1488 /* IFLA_GRE_ENCAP_FLAGS */
1490 /* IFLA_GRE_ENCAP_SPORT */
1492 /* IFLA_GRE_ENCAP_DPORT */
1494 /* IFLA_GRE_FWMARK */
1499 static int ip6gre_fill_info(struct sk_buff
*skb
, const struct net_device
*dev
)
1501 struct ip6_tnl
*t
= netdev_priv(dev
);
1502 struct __ip6_tnl_parm
*p
= &t
->parms
;
1504 if (nla_put_u32(skb
, IFLA_GRE_LINK
, p
->link
) ||
1505 nla_put_be16(skb
, IFLA_GRE_IFLAGS
,
1506 gre_tnl_flags_to_gre_flags(p
->i_flags
)) ||
1507 nla_put_be16(skb
, IFLA_GRE_OFLAGS
,
1508 gre_tnl_flags_to_gre_flags(p
->o_flags
)) ||
1509 nla_put_be32(skb
, IFLA_GRE_IKEY
, p
->i_key
) ||
1510 nla_put_be32(skb
, IFLA_GRE_OKEY
, p
->o_key
) ||
1511 nla_put_in6_addr(skb
, IFLA_GRE_LOCAL
, &p
->laddr
) ||
1512 nla_put_in6_addr(skb
, IFLA_GRE_REMOTE
, &p
->raddr
) ||
1513 nla_put_u8(skb
, IFLA_GRE_TTL
, p
->hop_limit
) ||
1514 nla_put_u8(skb
, IFLA_GRE_ENCAP_LIMIT
, p
->encap_limit
) ||
1515 nla_put_be32(skb
, IFLA_GRE_FLOWINFO
, p
->flowinfo
) ||
1516 nla_put_u32(skb
, IFLA_GRE_FLAGS
, p
->flags
) ||
1517 nla_put_u32(skb
, IFLA_GRE_FWMARK
, p
->fwmark
))
1518 goto nla_put_failure
;
1520 if (nla_put_u16(skb
, IFLA_GRE_ENCAP_TYPE
,
1522 nla_put_be16(skb
, IFLA_GRE_ENCAP_SPORT
,
1524 nla_put_be16(skb
, IFLA_GRE_ENCAP_DPORT
,
1526 nla_put_u16(skb
, IFLA_GRE_ENCAP_FLAGS
,
1528 goto nla_put_failure
;
1536 static const struct nla_policy ip6gre_policy
[IFLA_GRE_MAX
+ 1] = {
1537 [IFLA_GRE_LINK
] = { .type
= NLA_U32
},
1538 [IFLA_GRE_IFLAGS
] = { .type
= NLA_U16
},
1539 [IFLA_GRE_OFLAGS
] = { .type
= NLA_U16
},
1540 [IFLA_GRE_IKEY
] = { .type
= NLA_U32
},
1541 [IFLA_GRE_OKEY
] = { .type
= NLA_U32
},
1542 [IFLA_GRE_LOCAL
] = { .len
= FIELD_SIZEOF(struct ipv6hdr
, saddr
) },
1543 [IFLA_GRE_REMOTE
] = { .len
= FIELD_SIZEOF(struct ipv6hdr
, daddr
) },
1544 [IFLA_GRE_TTL
] = { .type
= NLA_U8
},
1545 [IFLA_GRE_ENCAP_LIMIT
] = { .type
= NLA_U8
},
1546 [IFLA_GRE_FLOWINFO
] = { .type
= NLA_U32
},
1547 [IFLA_GRE_FLAGS
] = { .type
= NLA_U32
},
1548 [IFLA_GRE_ENCAP_TYPE
] = { .type
= NLA_U16
},
1549 [IFLA_GRE_ENCAP_FLAGS
] = { .type
= NLA_U16
},
1550 [IFLA_GRE_ENCAP_SPORT
] = { .type
= NLA_U16
},
1551 [IFLA_GRE_ENCAP_DPORT
] = { .type
= NLA_U16
},
1552 [IFLA_GRE_FWMARK
] = { .type
= NLA_U32
},
1555 static struct rtnl_link_ops ip6gre_link_ops __read_mostly
= {
1557 .maxtype
= IFLA_GRE_MAX
,
1558 .policy
= ip6gre_policy
,
1559 .priv_size
= sizeof(struct ip6_tnl
),
1560 .setup
= ip6gre_tunnel_setup
,
1561 .validate
= ip6gre_tunnel_validate
,
1562 .newlink
= ip6gre_newlink
,
1563 .changelink
= ip6gre_changelink
,
1564 .dellink
= ip6gre_dellink
,
1565 .get_size
= ip6gre_get_size
,
1566 .fill_info
= ip6gre_fill_info
,
1567 .get_link_net
= ip6_tnl_get_link_net
,
1570 static struct rtnl_link_ops ip6gre_tap_ops __read_mostly
= {
1571 .kind
= "ip6gretap",
1572 .maxtype
= IFLA_GRE_MAX
,
1573 .policy
= ip6gre_policy
,
1574 .priv_size
= sizeof(struct ip6_tnl
),
1575 .setup
= ip6gre_tap_setup
,
1576 .validate
= ip6gre_tap_validate
,
1577 .newlink
= ip6gre_newlink
,
1578 .changelink
= ip6gre_changelink
,
1579 .get_size
= ip6gre_get_size
,
1580 .fill_info
= ip6gre_fill_info
,
1581 .get_link_net
= ip6_tnl_get_link_net
,
1585 * And now the modules code and kernel interface.
1588 static int __init
ip6gre_init(void)
1592 pr_info("GRE over IPv6 tunneling driver\n");
1594 err
= register_pernet_device(&ip6gre_net_ops
);
1598 err
= inet6_add_protocol(&ip6gre_protocol
, IPPROTO_GRE
);
1600 pr_info("%s: can't add protocol\n", __func__
);
1601 goto add_proto_failed
;
1604 err
= rtnl_link_register(&ip6gre_link_ops
);
1606 goto rtnl_link_failed
;
1608 err
= rtnl_link_register(&ip6gre_tap_ops
);
1610 goto tap_ops_failed
;
1616 rtnl_link_unregister(&ip6gre_link_ops
);
1618 inet6_del_protocol(&ip6gre_protocol
, IPPROTO_GRE
);
1620 unregister_pernet_device(&ip6gre_net_ops
);
1624 static void __exit
ip6gre_fini(void)
1626 rtnl_link_unregister(&ip6gre_tap_ops
);
1627 rtnl_link_unregister(&ip6gre_link_ops
);
1628 inet6_del_protocol(&ip6gre_protocol
, IPPROTO_GRE
);
1629 unregister_pernet_device(&ip6gre_net_ops
);
1632 module_init(ip6gre_init
);
1633 module_exit(ip6gre_fini
);
1634 MODULE_LICENSE("GPL");
1635 MODULE_AUTHOR("D. Kozlov (xeb@mail.ru)");
1636 MODULE_DESCRIPTION("GRE over IPv6 tunneling device");
1637 MODULE_ALIAS_RTNL_LINK("ip6gre");
1638 MODULE_ALIAS_RTNL_LINK("ip6gretap");
1639 MODULE_ALIAS_NETDEV("ip6gre0");