2 * xfrm6_policy.c: based on xfrm4_policy.c
6 * Kazunori MIYAZAWA @USAGI
7 * Kunihiro Ishiguro <kunihiro@ipinfusion.com>
10 * Split up af-specific portion
14 #include <linux/err.h>
15 #include <linux/kernel.h>
16 #include <linux/netdevice.h>
17 #include <net/addrconf.h>
22 #include <net/ip6_route.h>
23 #if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
27 static struct dst_ops xfrm6_dst_ops
;
28 static struct xfrm_policy_afinfo xfrm6_policy_afinfo
;
30 static struct dst_entry
*xfrm6_dst_lookup(int tos
, xfrm_address_t
*saddr
,
31 xfrm_address_t
*daddr
)
34 struct dst_entry
*dst
;
37 memcpy(&fl
.fl6_dst
, daddr
, sizeof(fl
.fl6_dst
));
39 memcpy(&fl
.fl6_src
, saddr
, sizeof(fl
.fl6_src
));
41 dst
= ip6_route_output(&init_net
, NULL
, &fl
);
52 static int xfrm6_get_saddr(xfrm_address_t
*saddr
, xfrm_address_t
*daddr
)
54 struct dst_entry
*dst
;
55 struct net_device
*dev
;
57 dst
= xfrm6_dst_lookup(0, NULL
, daddr
);
61 dev
= ip6_dst_idev(dst
)->dev
;
62 ipv6_dev_get_saddr(dev_net(dev
), dev
,
63 (struct in6_addr
*)&daddr
->a6
, 0,
64 (struct in6_addr
*)&saddr
->a6
);
69 static struct dst_entry
*
70 __xfrm6_find_bundle(struct flowi
*fl
, struct xfrm_policy
*policy
)
72 struct dst_entry
*dst
;
74 /* Still not clear if we should set fl->fl6_{src,dst}... */
75 read_lock_bh(&policy
->lock
);
76 for (dst
= policy
->bundles
; dst
; dst
= dst
->next
) {
77 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
78 struct in6_addr fl_dst_prefix
, fl_src_prefix
;
80 ipv6_addr_prefix(&fl_dst_prefix
,
82 xdst
->u
.rt6
.rt6i_dst
.plen
);
83 ipv6_addr_prefix(&fl_src_prefix
,
85 xdst
->u
.rt6
.rt6i_src
.plen
);
86 if (ipv6_addr_equal(&xdst
->u
.rt6
.rt6i_dst
.addr
, &fl_dst_prefix
) &&
87 ipv6_addr_equal(&xdst
->u
.rt6
.rt6i_src
.addr
, &fl_src_prefix
) &&
88 xfrm_bundle_ok(policy
, xdst
, fl
, AF_INET6
,
89 (xdst
->u
.rt6
.rt6i_dst
.plen
!= 128 ||
90 xdst
->u
.rt6
.rt6i_src
.plen
!= 128))) {
95 read_unlock_bh(&policy
->lock
);
99 static int xfrm6_get_tos(struct flowi
*fl
)
104 static int xfrm6_init_path(struct xfrm_dst
*path
, struct dst_entry
*dst
,
107 if (dst
->ops
->family
== AF_INET6
) {
108 struct rt6_info
*rt
= (struct rt6_info
*)dst
;
110 path
->path_cookie
= rt
->rt6i_node
->fn_sernum
;
113 path
->u
.rt6
.rt6i_nfheader_len
= nfheader_len
;
118 static int xfrm6_fill_dst(struct xfrm_dst
*xdst
, struct net_device
*dev
)
120 struct rt6_info
*rt
= (struct rt6_info
*)xdst
->route
;
122 xdst
->u
.dst
.dev
= dev
;
125 xdst
->u
.rt6
.rt6i_idev
= in6_dev_get(rt
->u
.dst
.dev
);
126 if (!xdst
->u
.rt6
.rt6i_idev
)
129 /* Sheit... I remember I did this right. Apparently,
130 * it was magically lost, so this code needs audit */
131 xdst
->u
.rt6
.rt6i_flags
= rt
->rt6i_flags
& (RTF_ANYCAST
|
133 xdst
->u
.rt6
.rt6i_metric
= rt
->rt6i_metric
;
134 xdst
->u
.rt6
.rt6i_node
= rt
->rt6i_node
;
136 xdst
->route_cookie
= rt
->rt6i_node
->fn_sernum
;
137 xdst
->u
.rt6
.rt6i_gateway
= rt
->rt6i_gateway
;
138 xdst
->u
.rt6
.rt6i_dst
= rt
->rt6i_dst
;
139 xdst
->u
.rt6
.rt6i_src
= rt
->rt6i_src
;
145 _decode_session6(struct sk_buff
*skb
, struct flowi
*fl
, int reverse
)
148 u16 offset
= skb_network_header_len(skb
);
149 struct ipv6hdr
*hdr
= ipv6_hdr(skb
);
150 struct ipv6_opt_hdr
*exthdr
;
151 const unsigned char *nh
= skb_network_header(skb
);
152 u8 nexthdr
= nh
[IP6CB(skb
)->nhoff
];
154 memset(fl
, 0, sizeof(struct flowi
));
155 ipv6_addr_copy(&fl
->fl6_dst
, reverse
? &hdr
->saddr
: &hdr
->daddr
);
156 ipv6_addr_copy(&fl
->fl6_src
, reverse
? &hdr
->daddr
: &hdr
->saddr
);
158 while (pskb_may_pull(skb
, nh
+ offset
+ 1 - skb
->data
)) {
159 nh
= skb_network_header(skb
);
160 exthdr
= (struct ipv6_opt_hdr
*)(nh
+ offset
);
163 case NEXTHDR_FRAGMENT
:
165 case NEXTHDR_ROUTING
:
168 offset
+= ipv6_optlen(exthdr
);
169 nexthdr
= exthdr
->nexthdr
;
170 exthdr
= (struct ipv6_opt_hdr
*)(nh
+ offset
);
174 case IPPROTO_UDPLITE
:
178 if (!onlyproto
&& pskb_may_pull(skb
, nh
+ offset
+ 4 - skb
->data
)) {
179 __be16
*ports
= (__be16
*)exthdr
;
181 fl
->fl_ip_sport
= ports
[!!reverse
];
182 fl
->fl_ip_dport
= ports
[!reverse
];
188 if (!onlyproto
&& pskb_may_pull(skb
, nh
+ offset
+ 2 - skb
->data
)) {
189 u8
*icmp
= (u8
*)exthdr
;
191 fl
->fl_icmp_type
= icmp
[0];
192 fl
->fl_icmp_code
= icmp
[1];
197 #if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
199 if (!onlyproto
&& pskb_may_pull(skb
, nh
+ offset
+ 3 - skb
->data
)) {
201 mh
= (struct ip6_mh
*)exthdr
;
203 fl
->fl_mh_type
= mh
->ip6mh_type
;
209 /* XXX Why are there these headers? */
214 fl
->fl_ipsec_spi
= 0;
221 static inline int xfrm6_garbage_collect(struct dst_ops
*ops
)
223 xfrm6_policy_afinfo
.garbage_collect();
224 return (atomic_read(&xfrm6_dst_ops
.entries
) > xfrm6_dst_ops
.gc_thresh
*2);
227 static void xfrm6_update_pmtu(struct dst_entry
*dst
, u32 mtu
)
229 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
230 struct dst_entry
*path
= xdst
->route
;
232 path
->ops
->update_pmtu(path
, mtu
);
235 static void xfrm6_dst_destroy(struct dst_entry
*dst
)
237 struct xfrm_dst
*xdst
= (struct xfrm_dst
*)dst
;
239 if (likely(xdst
->u
.rt6
.rt6i_idev
))
240 in6_dev_put(xdst
->u
.rt6
.rt6i_idev
);
241 xfrm_dst_destroy(xdst
);
244 static void xfrm6_dst_ifdown(struct dst_entry
*dst
, struct net_device
*dev
,
247 struct xfrm_dst
*xdst
;
252 xdst
= (struct xfrm_dst
*)dst
;
253 if (xdst
->u
.rt6
.rt6i_idev
->dev
== dev
) {
254 struct inet6_dev
*loopback_idev
=
255 in6_dev_get(dev_net(dev
)->loopback_dev
);
256 BUG_ON(!loopback_idev
);
259 in6_dev_put(xdst
->u
.rt6
.rt6i_idev
);
260 xdst
->u
.rt6
.rt6i_idev
= loopback_idev
;
261 in6_dev_hold(loopback_idev
);
262 xdst
= (struct xfrm_dst
*)xdst
->u
.dst
.child
;
263 } while (xdst
->u
.dst
.xfrm
);
265 __in6_dev_put(loopback_idev
);
268 xfrm_dst_ifdown(dst
, dev
);
271 static struct dst_ops xfrm6_dst_ops
= {
273 .protocol
= __constant_htons(ETH_P_IPV6
),
274 .gc
= xfrm6_garbage_collect
,
275 .update_pmtu
= xfrm6_update_pmtu
,
276 .destroy
= xfrm6_dst_destroy
,
277 .ifdown
= xfrm6_dst_ifdown
,
278 .local_out
= __ip6_local_out
,
280 .entry_size
= sizeof(struct xfrm_dst
),
281 .entries
= ATOMIC_INIT(0),
284 static struct xfrm_policy_afinfo xfrm6_policy_afinfo
= {
286 .dst_ops
= &xfrm6_dst_ops
,
287 .dst_lookup
= xfrm6_dst_lookup
,
288 .get_saddr
= xfrm6_get_saddr
,
289 .find_bundle
= __xfrm6_find_bundle
,
290 .decode_session
= _decode_session6
,
291 .get_tos
= xfrm6_get_tos
,
292 .init_path
= xfrm6_init_path
,
293 .fill_dst
= xfrm6_fill_dst
,
296 static int __init
xfrm6_policy_init(void)
298 return xfrm_policy_register_afinfo(&xfrm6_policy_afinfo
);
301 static void xfrm6_policy_fini(void)
303 xfrm_policy_unregister_afinfo(&xfrm6_policy_afinfo
);
306 int __init
xfrm6_init(void)
310 ret
= xfrm6_policy_init();
314 ret
= xfrm6_state_init();
324 void xfrm6_fini(void)
326 //xfrm6_input_fini();