]> git.proxmox.com Git - mirror_frr.git/blobdiff - zebra/zebra_mpls_openbsd.c
*: use frr_elevate_privs() (1/2: coccinelle)
[mirror_frr.git] / zebra / zebra_mpls_openbsd.c
index c3d09aedbd5022977c25047d98b3328da1e95586..542de27e83c35c5b981de702691c903a7cca29a2 100644 (file)
 #include "prefix.h"
 #include "interface.h"
 #include "log.h"
+#include "lib_errors.h"
 
 extern struct zebra_privs_t zserv_privs;
 
 struct {
-       u_int32_t rtseq;
+       uint32_t rtseq;
        int fd;
+       int ioctl_fd;
 } kr_state;
 
 static int kernel_send_rtmsg_v4(int action, mpls_label_t in_label,
@@ -115,14 +117,13 @@ static int kernel_send_rtmsg_v4(int action, mpls_label_t in_label,
                        hdr.rtm_mpls = MPLS_OP_SWAP;
        }
 
-       if (zserv_privs.change(ZPRIVS_RAISE))
-               zlog_err("Can't raise privileges");
-       ret = writev(kr_state.fd, iov, iovcnt);
-       if (zserv_privs.change(ZPRIVS_LOWER))
-               zlog_err("Can't lower privileges");
+       frr_elevate_privs(&zserv_privs) {
+               ret = writev(kr_state.fd, iov, iovcnt);
+       }
 
        if (ret == -1)
-               zlog_err("%s: %s", __func__, safe_strerror(errno));
+               flog_err_sys(LIB_ERR_SOCKET, "%s: %s", __func__,
+                            safe_strerror(errno));
 
        return ret;
 }
@@ -223,14 +224,13 @@ static int kernel_send_rtmsg_v6(int action, mpls_label_t in_label,
                        hdr.rtm_mpls = MPLS_OP_SWAP;
        }
 
-       if (zserv_privs.change(ZPRIVS_RAISE))
-               zlog_err("Can't raise privileges");
-       ret = writev(kr_state.fd, iov, iovcnt);
-       if (zserv_privs.change(ZPRIVS_LOWER))
-               zlog_err("Can't lower privileges");
+       frr_elevate_privs(&zserv_privs) {
+               ret = writev(kr_state.fd, iov, iovcnt);
+       }
 
        if (ret == -1)
-               zlog_err("%s: %s", __func__, safe_strerror(errno));
+               flog_err_sys(LIB_ERR_SOCKET, "%s: %s", __func__,
+                            safe_strerror(errno));
 
        return ret;
 }
@@ -255,6 +255,15 @@ static int kernel_lsp_cmd(int action, zebra_lsp_t *lsp)
                    || (action == RTM_DELETE
                        && (CHECK_FLAG(nhlfe->flags, NHLFE_FLAG_INSTALLED)
                            && CHECK_FLAG(nexthop->flags, NEXTHOP_FLAG_FIB)))) {
+                       if (nhlfe->nexthop->nh_label->num_labels > 1) {
+                               zlog_warn(
+                                       "%s: can't push %u labels at once "
+                                       "(maximum is 1)",
+                                       __func__,
+                                       nhlfe->nexthop->nh_label->num_labels);
+                               continue;
+                       }
+
                        nexthop_num++;
 
                        switch (NHLFE_FAMILY(nhlfe)) {
@@ -269,65 +278,149 @@ static int kernel_lsp_cmd(int action, zebra_lsp_t *lsp)
                        default:
                                break;
                        }
-                       if (action == RTM_ADD || action == RTM_CHANGE) {
-                               SET_FLAG(nhlfe->flags, NHLFE_FLAG_INSTALLED);
-                               SET_FLAG(nexthop->flags, NEXTHOP_FLAG_FIB);
-                       } else {
-                               UNSET_FLAG(nhlfe->flags, NHLFE_FLAG_INSTALLED);
-                               UNSET_FLAG(nexthop->flags, NEXTHOP_FLAG_FIB);
-                       }
                }
        }
 
        return (0);
 }
 
-int kernel_add_lsp(zebra_lsp_t *lsp)
+enum dp_req_result kernel_add_lsp(zebra_lsp_t *lsp)
 {
        int ret;
 
-       if (!lsp || !lsp->best_nhlfe) // unexpected
-               return -1;
+       if (!lsp || !lsp->best_nhlfe) { // unexpected
+               kernel_lsp_pass_fail(lsp, DP_INSTALL_FAILURE);
+               return DP_REQUEST_FAILURE;
+       }
 
-       UNSET_FLAG(lsp->flags, LSP_FLAG_CHANGED);
        ret = kernel_lsp_cmd(RTM_ADD, lsp);
-       if (!ret)
-               SET_FLAG(lsp->flags, LSP_FLAG_INSTALLED);
 
-       return ret;
+       kernel_lsp_pass_fail(lsp,
+                            (!ret) ? DP_INSTALL_SUCCESS
+                                   : DP_INSTALL_FAILURE);
+
+       return DP_REQUEST_SUCCESS;
 }
 
-int kernel_upd_lsp(zebra_lsp_t *lsp)
+enum dp_req_result kernel_upd_lsp(zebra_lsp_t *lsp)
 {
        int ret;
 
-       if (!lsp || !lsp->best_nhlfe) // unexpected
-               return -1;
+       if (!lsp || !lsp->best_nhlfe) { // unexpected
+               kernel_lsp_pass_fail(lsp, DP_INSTALL_FAILURE);
+               return DP_REQUEST_FAILURE;
+       }
 
-       UNSET_FLAG(lsp->flags, LSP_FLAG_CHANGED);
-       UNSET_FLAG(lsp->flags, LSP_FLAG_INSTALLED);
        ret = kernel_lsp_cmd(RTM_CHANGE, lsp);
-       if (!ret)
-               SET_FLAG(lsp->flags, LSP_FLAG_INSTALLED);
 
-       return ret;
+       kernel_lsp_pass_fail(lsp,
+                            (!ret) ? DP_INSTALL_SUCCESS
+                                   : DP_INSTALL_FAILURE);
+       return DP_REQUEST_SUCCESS;
 }
 
-int kernel_del_lsp(zebra_lsp_t *lsp)
+enum dp_req_result kernel_del_lsp(zebra_lsp_t *lsp)
 {
        int ret;
 
-       if (!lsp) // unexpected
+       if (!lsp) { // unexpected
+               kernel_lsp_pass_fail(lsp, DP_DELETE_FAILURE);
+               return DP_REQUEST_FAILURE;
+       }
+
+       if (!CHECK_FLAG(lsp->flags, LSP_FLAG_INSTALLED)) {
+               kernel_lsp_pass_fail(lsp, DP_DELETE_FAILURE);
+               return DP_REQUEST_FAILURE;
+       }
+
+       ret = kernel_lsp_cmd(RTM_DELETE, lsp);
+
+       kernel_lsp_pass_fail(lsp,
+                            (!ret) ? DP_DELETE_SUCCESS
+                                   : DP_DELETE_FAILURE);
+
+       return DP_REQUEST_SUCCESS;
+}
+
+static int kmpw_install(struct zebra_pw *pw)
+{
+       struct ifreq ifr;
+       struct ifmpwreq imr;
+       struct sockaddr_storage ss;
+       struct sockaddr_in *sa_in = (struct sockaddr_in *)&ss;
+       struct sockaddr_in6 *sa_in6 = (struct sockaddr_in6 *)&ss;
+
+       memset(&imr, 0, sizeof(imr));
+       switch (pw->type) {
+       case PW_TYPE_ETHERNET:
+               imr.imr_type = IMR_TYPE_ETHERNET;
+               break;
+       case PW_TYPE_ETHERNET_TAGGED:
+               imr.imr_type = IMR_TYPE_ETHERNET_TAGGED;
+               break;
+       default:
+               zlog_warn("%s: unhandled pseudowire type (%#X)", __func__,
+                         pw->type);
                return -1;
+       }
 
-       if (!CHECK_FLAG(lsp->flags, LSP_FLAG_INSTALLED))
+       if (pw->flags & F_PSEUDOWIRE_CWORD)
+               imr.imr_flags |= IMR_FLAG_CONTROLWORD;
+
+       /* pseudowire nexthop */
+       memset(&ss, 0, sizeof(ss));
+       switch (pw->af) {
+       case AF_INET:
+               sa_in->sin_family = AF_INET;
+               sa_in->sin_len = sizeof(struct sockaddr_in);
+               sa_in->sin_addr = pw->nexthop.ipv4;
+               break;
+       case AF_INET6:
+               sa_in6->sin6_family = AF_INET6;
+               sa_in6->sin6_len = sizeof(struct sockaddr_in6);
+               sa_in6->sin6_addr = pw->nexthop.ipv6;
+               break;
+       default:
+               zlog_warn("%s: unhandled pseudowire address-family (%u)",
+                         __func__, pw->af);
+               return -1;
+       }
+       memcpy(&imr.imr_nexthop, (struct sockaddr *)&ss,
+              sizeof(imr.imr_nexthop));
+
+       /* pseudowire local/remote labels */
+       imr.imr_lshim.shim_label = pw->local_label;
+       imr.imr_rshim.shim_label = pw->remote_label;
+
+       /* ioctl */
+       memset(&ifr, 0, sizeof(ifr));
+       strlcpy(ifr.ifr_name, pw->ifname, sizeof(ifr.ifr_name));
+       ifr.ifr_data = (caddr_t)&imr;
+       if (ioctl(kr_state.ioctl_fd, SIOCSETMPWCFG, &ifr) == -1) {
+               flog_err_sys(LIB_ERR_SYSTEM_CALL, "ioctl SIOCSETMPWCFG: %s",
+                            safe_strerror(errno));
                return -1;
+       }
 
-       ret = kernel_lsp_cmd(RTM_DELETE, lsp);
-       if (!ret)
-               UNSET_FLAG(lsp->flags, LSP_FLAG_INSTALLED);
+       return 0;
+}
 
-       return ret;
+static int kmpw_uninstall(struct zebra_pw *pw)
+{
+       struct ifreq ifr;
+       struct ifmpwreq imr;
+
+       memset(&ifr, 0, sizeof(ifr));
+       memset(&imr, 0, sizeof(imr));
+       strlcpy(ifr.ifr_name, pw->ifname, sizeof(ifr.ifr_name));
+       ifr.ifr_data = (caddr_t)&imr;
+       if (ioctl(kr_state.ioctl_fd, SIOCSETMPWCFG, &ifr) == -1) {
+               flog_err_sys(LIB_ERR_SYSTEM_CALL, "ioctl SIOCSETMPWCFG: %s",
+                            safe_strerror(errno));
+               return -1;
+       }
+
+       return 0;
 }
 
 #define MAX_RTSOCK_BUF 128 * 1024
@@ -341,6 +434,12 @@ int mpls_kernel_init(void)
                return -1;
        }
 
+       if ((kr_state.ioctl_fd = socket(AF_INET, SOCK_DGRAM | SOCK_NONBLOCK, 0))
+           == -1) {
+               zlog_warn("%s: ioctl socket", __func__);
+               return -1;
+       }
+
        /* grow receive buffer, don't wanna miss messages */
        optlen = sizeof(default_rcvbuf);
        if (getsockopt(kr_state.fd, SOL_SOCKET, SO_RCVBUF, &default_rcvbuf,
@@ -359,6 +458,10 @@ int mpls_kernel_init(void)
 
        kr_state.rtseq = 1;
 
+       /* register hook to install/uninstall pseudowires */
+       hook_register(pw_install, kmpw_install);
+       hook_register(pw_uninstall, kmpw_uninstall);
+
        return 0;
 }