[mirror_iproute2.git] / ip / ip6tunnel.c

/*
 * Copyright (C)2006 USAGI/WIDE Project
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, see <http://www.gnu.org/licenses>.
 */
/*
 * Author:
 *	Masahide NAKAMURA @USAGI
 */

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <arpa/inet.h>
#include <sys/ioctl.h>
#include <linux/ip.h>
#include <linux/if.h>
#include <linux/if_arp.h>
#include <linux/if_tunnel.h>
#include <linux/ip6_tunnel.h>

#include "utils.h"
#include "tunnel.h"
#include "ip_common.h"

#define IP6_FLOWINFO_TCLASS	htonl(0x0FF00000)
#define IP6_FLOWINFO_FLOWLABEL	htonl(0x000FFFFF)

#define DEFAULT_TNL_HOP_LIMIT	(64)

static void usage(void) __attribute__((noreturn));

static void usage(void)
{
	fprintf(stderr,
		"Usage: ip -f inet6 tunnel { add | change | del | show } [ NAME ]\n"
		"          [ mode { ip6ip6 | ipip6 | ip6gre | vti6 | any } ]\n"
		"          [ remote ADDR local ADDR ] [ dev PHYS_DEV ]\n"
		"          [ encaplimit ELIM ]\n"
		"          [ hoplimit TTL ] [ tclass TCLASS ] [ flowlabel FLOWLABEL ]\n"
		"          [ dscp inherit ]\n"
		"          [ [no]allow-localremote ]\n"
		"          [ [i|o]seq ] [ [i|o]key KEY ] [ [i|o]csum ]\n"
		"\n"
		"Where: NAME      := STRING\n"
		"       ADDR      := IPV6_ADDRESS\n"
		"       ELIM      := { none | 0..255 }(default=%d)\n"
		"       TTL       := 0..255 (default=%d)\n"
		"       TCLASS    := { 0x0..0xff | inherit }\n"
		"       FLOWLABEL := { 0x0..0xfffff | inherit }\n"
		"       KEY       := { DOTTED_QUAD | NUMBER }\n",
		IPV6_DEFAULT_TNL_ENCAP_LIMIT,
		DEFAULT_TNL_HOP_LIMIT);
	exit(-1);
}

static void print_tunnel(const void *t)
{
	const struct ip6_tnl_parm2 *p = t;
	SPRINT_BUF(b1);

	/* Do not use format_host() for local addr,
	 * symbolic name will not be useful.
	 */
	open_json_object(NULL);
	print_color_string(PRINT_ANY, COLOR_IFNAME, "ifname", "%s: ", p->name);
	snprintf(b1, sizeof(b1), "%s/ipv6", tnl_strproto(p->proto));
	print_string(PRINT_ANY, "mode", "%s ", b1);
	print_string(PRINT_FP, NULL, "%s", "remote ");
	print_color_string(PRINT_ANY, COLOR_INET6, "remote", "%s ",
			   format_host_r(AF_INET6, 16, &p->raddr, b1, sizeof(b1)));
	print_string(PRINT_FP, NULL, "%s", "local ");
	print_color_string(PRINT_ANY, COLOR_INET6, "local", "%s",
			   rt_addr_n2a_r(AF_INET6, 16, &p->laddr, b1, sizeof(b1)));

	if (p->link) {
		const char *n = ll_index_to_name(p->link);

		if (n)
			print_string(PRINT_ANY, "link", " dev %s", n);
	}

	if (p->flags & IP6_TNL_F_IGN_ENCAP_LIMIT)
		print_null(PRINT_ANY, "ip6_tnl_f_ign_encap_limit",
			   " encaplimit none", NULL);
	else
		print_uint(PRINT_ANY, "encap_limit", " encaplimit %u",
			   p->encap_limit);

	if (p->hop_limit)
		print_uint(PRINT_ANY, "hoplimit", " hoplimit %u", p->hop_limit);
	else
		print_string(PRINT_FP, "hoplimit", " hoplimit %s", "inherit");

	if (p->flags & IP6_TNL_F_USE_ORIG_TCLASS) {
		print_null(PRINT_ANY, "ip6_tnl_f_use_orig_tclass",
			   " tclass inherit", NULL);
	} else {
		__u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_TCLASS);

		snprintf(b1, sizeof(b1), "0x%02x", (__u8)(val >> 20));
		print_string(PRINT_ANY, "tclass", " tclass %s", b1);
	}

	if (p->flags & IP6_TNL_F_USE_ORIG_FLOWLABEL) {
		print_null(PRINT_ANY, "ip6_tnl_f_use_orig_flowlabel",
			   " flowlabel inherit", NULL);
	} else {
		__u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_FLOWLABEL);

		snprintf(b1, sizeof(b1), "0x%05x", val);
		print_string(PRINT_ANY, "flowlabel", " flowlabel %s", b1);
	}

	snprintf(b1, sizeof(b1), "0x%08x", ntohl(p->flowinfo));
	print_string(PRINT_ANY, "flowinfo", " (flowinfo %s)", b1);

	if (p->flags & IP6_TNL_F_RCV_DSCP_COPY)
		print_null(PRINT_ANY, "ip6_tnl_f_rcv_dscp_copy",
			   " dscp inherit", NULL);

	if (p->flags & IP6_TNL_F_ALLOW_LOCAL_REMOTE)
		print_null(PRINT_ANY, "ip6_tnl_f_allow_local_remote",
			   " allow-localremote", NULL);

	tnl_print_gre_flags(p->proto, p->i_flags, p->o_flags,
			    p->i_key, p->o_key);

	close_json_object();
}

static int parse_args(int argc, char **argv, int cmd, struct ip6_tnl_parm2 *p)
{
	int count = 0;
	const char *medium = NULL;

	while (argc > 0) {
		if (strcmp(*argv, "mode") == 0) {
			NEXT_ARG();
			if (strcmp(*argv, "ipv6/ipv6") == 0 ||
			    strcmp(*argv, "ip6ip6") == 0)
				p->proto = IPPROTO_IPV6;
			else if (strcmp(*argv, "vti6") == 0) {
				p->proto = IPPROTO_IPV6;
				p->i_flags |= VTI_ISVTI;
			} else if (strcmp(*argv, "ip/ipv6") == 0 ||
				 strcmp(*argv, "ipv4/ipv6") == 0 ||
				 strcmp(*argv, "ipip6") == 0 ||
				 strcmp(*argv, "ip4ip6") == 0)
				p->proto = IPPROTO_IPIP;
			else if (strcmp(*argv, "ip6gre") == 0 ||
				 strcmp(*argv, "gre/ipv6") == 0)
				p->proto = IPPROTO_GRE;
			else if (strcmp(*argv, "any/ipv6") == 0 ||
				 strcmp(*argv, "any") == 0)
				p->proto = 0;
			else {
				fprintf(stderr, "Unknown tunnel mode \"%s\"\n", *argv);
				exit(-1);
			}
		} else if (strcmp(*argv, "remote") == 0) {
			inet_prefix raddr;

			NEXT_ARG();
			get_addr(&raddr, *argv, AF_INET6);
			memcpy(&p->raddr, &raddr.data, sizeof(p->raddr));
		} else if (strcmp(*argv, "local") == 0) {
			inet_prefix laddr;

			NEXT_ARG();
			get_addr(&laddr, *argv, AF_INET6);
			memcpy(&p->laddr, &laddr.data, sizeof(p->laddr));
		} else if (strcmp(*argv, "dev") == 0) {
			NEXT_ARG();
			medium = *argv;
		} else if (strcmp(*argv, "encaplimit") == 0) {
			NEXT_ARG();
			if (strcmp(*argv, "none") == 0) {
				p->flags |= IP6_TNL_F_IGN_ENCAP_LIMIT;
			} else {
				__u8 uval;

				if (get_u8(&uval, *argv, 0) < -1)
					invarg("invalid ELIM", *argv);
				p->encap_limit = uval;
				p->flags &= ~IP6_TNL_F_IGN_ENCAP_LIMIT;
			}
		} else if (strcmp(*argv, "hoplimit") == 0 ||
			   strcmp(*argv, "ttl") == 0 ||
			   strcmp(*argv, "hlim") == 0) {
			__u8 uval;

			NEXT_ARG();
			if (get_u8(&uval, *argv, 0))
				invarg("invalid TTL", *argv);
			p->hop_limit = uval;
		} else if (strcmp(*argv, "tclass") == 0 ||
			   strcmp(*argv, "tc") == 0 ||
			   strcmp(*argv, "tos") == 0 ||
			   matches(*argv, "dsfield") == 0) {
			__u8 uval;

			NEXT_ARG();
			p->flowinfo &= ~IP6_FLOWINFO_TCLASS;
			if (strcmp(*argv, "inherit") == 0)
				p->flags |= IP6_TNL_F_USE_ORIG_TCLASS;
			else {
				if (get_u8(&uval, *argv, 16))
					invarg("invalid TClass", *argv);
				p->flowinfo |= htonl((__u32)uval << 20) & IP6_FLOWINFO_TCLASS;
				p->flags &= ~IP6_TNL_F_USE_ORIG_TCLASS;
			}
		} else if (strcmp(*argv, "flowlabel") == 0 ||
			   strcmp(*argv, "fl") == 0) {
			__u32 uval;

			NEXT_ARG();
			p->flowinfo &= ~IP6_FLOWINFO_FLOWLABEL;
			if (strcmp(*argv, "inherit") == 0)
				p->flags |= IP6_TNL_F_USE_ORIG_FLOWLABEL;
			else {
				if (get_u32(&uval, *argv, 16))
					invarg("invalid Flowlabel", *argv);
				if (uval > 0xFFFFF)
					invarg("invalid Flowlabel", *argv);
				p->flowinfo |= htonl(uval) & IP6_FLOWINFO_FLOWLABEL;
				p->flags &= ~IP6_TNL_F_USE_ORIG_FLOWLABEL;
			}
		} else if (strcmp(*argv, "dscp") == 0) {
			NEXT_ARG();
			if (strcmp(*argv, "inherit") != 0)
				invarg("not inherit", *argv);
			p->flags |= IP6_TNL_F_RCV_DSCP_COPY;
		} else if (strcmp(*argv, "allow-localremote") == 0) {
			p->flags |= IP6_TNL_F_ALLOW_LOCAL_REMOTE;
		} else if (strcmp(*argv, "noallow-localremote") == 0) {
			p->flags &= ~IP6_TNL_F_ALLOW_LOCAL_REMOTE;
		} else if (strcmp(*argv, "key") == 0) {
			NEXT_ARG();
			p->i_flags |= GRE_KEY;
			p->o_flags |= GRE_KEY;
			p->i_key = p->o_key = tnl_parse_key("key", *argv);
		} else if (strcmp(*argv, "ikey") == 0) {
			NEXT_ARG();
			p->i_flags |= GRE_KEY;
			p->i_key = tnl_parse_key("ikey", *argv);
		} else if (strcmp(*argv, "okey") == 0) {
			NEXT_ARG();
			p->o_flags |= GRE_KEY;
			p->o_key = tnl_parse_key("okey", *argv);
		} else if (strcmp(*argv, "seq") == 0) {
			p->i_flags |= GRE_SEQ;
			p->o_flags |= GRE_SEQ;
		} else if (strcmp(*argv, "iseq") == 0) {
			p->i_flags |= GRE_SEQ;
		} else if (strcmp(*argv, "oseq") == 0) {
			p->o_flags |= GRE_SEQ;
		} else if (strcmp(*argv, "csum") == 0) {
			p->i_flags |= GRE_CSUM;
			p->o_flags |= GRE_CSUM;
		} else if (strcmp(*argv, "icsum") == 0) {
			p->i_flags |= GRE_CSUM;
		} else if (strcmp(*argv, "ocsum") == 0) {
			p->o_flags |= GRE_CSUM;
		} else {
			if (strcmp(*argv, "name") == 0) {
				NEXT_ARG();
			} else if (matches(*argv, "help") == 0)
				usage();
			if (p->name[0])
				duparg2("name", *argv);
			if (get_ifname(p->name, *argv))
				invarg("\"name\" not a valid ifname", *argv);
			if (cmd == SIOCCHGTUNNEL && count == 0) {
				struct ip6_tnl_parm2 old_p = {};

				if (tnl_get_ioctl(*argv, &old_p))
					return -1;
				*p = old_p;
			}
		}
		count++;
		argc--; argv++;
	}
	if (medium) {
		p->link = ll_name_to_index(medium);
		if (!p->link)
			return nodev(medium);
	}
	return 0;
}

static void ip6_tnl_parm_init(struct ip6_tnl_parm2 *p, int apply_default)
{
	memset(p, 0, sizeof(*p));
	p->proto = IPPROTO_IPV6;
	if (apply_default) {
		p->hop_limit = DEFAULT_TNL_HOP_LIMIT;
		p->encap_limit = IPV6_DEFAULT_TNL_ENCAP_LIMIT;
	}
}

static void ip6_tnl_parm_initialize(const struct tnl_print_nlmsg_info *info)
{
	const struct ifinfomsg *ifi = info->ifi;
	const struct ip6_tnl_parm2 *p1 = info->p1;
	struct ip6_tnl_parm2 *p2 = info->p2;

	ip6_tnl_parm_init(p2, 0);
	if (ifi->ifi_type == ARPHRD_IP6GRE)
		p2->proto = IPPROTO_GRE;
	p2->link = ifi->ifi_index;
	strcpy(p2->name, p1->name);
}

static bool ip6_tnl_parm_match(const struct tnl_print_nlmsg_info *info)
{
	const struct ip6_tnl_parm2 *p1 = info->p1;
	const struct ip6_tnl_parm2 *p2 = info->p2;

	return ((!p1->link || p1->link == p2->link) &&
		(!p1->name[0] || strcmp(p1->name, p2->name) == 0) &&
		(IN6_IS_ADDR_UNSPECIFIED(&p1->laddr) ||
		 IN6_ARE_ADDR_EQUAL(&p1->laddr, &p2->laddr)) &&
		(IN6_IS_ADDR_UNSPECIFIED(&p1->raddr) ||
		 IN6_ARE_ADDR_EQUAL(&p1->raddr, &p2->raddr)) &&
		(!p1->proto || !p2->proto || p1->proto == p2->proto) &&
		(!p1->encap_limit || p1->encap_limit == p2->encap_limit) &&
		(!p1->hop_limit || p1->hop_limit == p2->hop_limit) &&
		(!(p1->flowinfo & IP6_FLOWINFO_TCLASS) ||
		 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_TCLASS)) &&
		(!(p1->flowinfo & IP6_FLOWINFO_FLOWLABEL) ||
		 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_FLOWLABEL)) &&
		(!p1->flags || (p1->flags & p2->flags)));
}

static int do_show(int argc, char **argv)
{
	struct ip6_tnl_parm2 p, p1;

	ip6_tnl_parm_init(&p, 0);
	p.proto = 0;  /* default to any */

	if (parse_args(argc, argv, SIOCGETTUNNEL, &p) < 0)
		return -1;

	if (!p.name[0] || show_stats) {
		struct tnl_print_nlmsg_info info = {
			.p1    = &p,
			.p2    = &p1,
			.init  = ip6_tnl_parm_initialize,
			.match = ip6_tnl_parm_match,
			.print = print_tunnel,
		};

		return do_tunnels_list(&info);
	}

	if (tnl_get_ioctl(p.name, &p))
		return -1;

	print_tunnel(&p);
	return 0;
}

static int do_add(int cmd, int argc, char **argv)
{
	struct ip6_tnl_parm2 p;
	const char *basedev = "ip6tnl0";

	ip6_tnl_parm_init(&p, 1);

	if (parse_args(argc, argv, cmd, &p) < 0)
		return -1;

	if (!*p.name)
		fprintf(stderr, "Tunnel interface name not specified\n");

	if (p.proto == IPPROTO_GRE)
		basedev = "ip6gre0";
	else if (p.i_flags & VTI_ISVTI)
		basedev = "ip6_vti0";

	return tnl_add_ioctl(cmd, basedev, p.name, &p);
}

static int do_del(int argc, char **argv)
{
	struct ip6_tnl_parm2 p;
	const char *basedev = "ip6tnl0";

	ip6_tnl_parm_init(&p, 1);

	if (parse_args(argc, argv, SIOCDELTUNNEL, &p) < 0)
		return -1;

	if (p.proto == IPPROTO_GRE)
		basedev = "ip6gre0";
	else if (p.i_flags & VTI_ISVTI)
		basedev = "ip6_vti0";

	return tnl_del_ioctl(basedev, p.name, &p);
}

int do_ip6tunnel(int argc, char **argv)
{
	switch (preferred_family) {
	case AF_UNSPEC:
		preferred_family = AF_INET6;
		break;
	case AF_INET6:
		break;
	default:
		fprintf(stderr, "Unsupported protocol family: %d\n", preferred_family);
		exit(-1);
	}

	if (argc > 0) {
		if (matches(*argv, "add") == 0)
			return do_add(SIOCADDTUNNEL, argc - 1, argv + 1);
		if (matches(*argv, "change") == 0)
			return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1);
		if (matches(*argv, "delete") == 0)
			return do_del(argc - 1, argv + 1);
		if (matches(*argv, "show") == 0 ||
		    matches(*argv, "lst") == 0 ||
		    matches(*argv, "list") == 0)
			return do_show(argc - 1, argv + 1);
		if (matches(*argv, "help") == 0)
			usage();
	} else
		return do_show(0, NULL);

	fprintf(stderr, "Command \"%s\" is unknown, try \"ip -f inet6 tunnel help\".\n", *argv);
	exit(-1);
}
Commit	Line	Data
9447a0d3 MN	1	/*
9447a0d3 MN	2	* Copyright (C)2006 USAGI/WIDE Project
ae665a52	3	*
9447a0d3 MN	4	* This program is free software; you can redistribute it and/or modify
	5	* it under the terms of the GNU General Public License as published by
	6	* the Free Software Foundation; either version 2 of the License, or
	7	* (at your option) any later version.
ae665a52	8	*
9447a0d3 MN	9	* This program is distributed in the hope that it will be useful,
	10	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	11	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	12	* GNU General Public License for more details.
ae665a52	13	*
9447a0d3	14	* You should have received a copy of the GNU General Public License
4d98ab00	15	* along with this program; if not, see <http://www.gnu.org/licenses>.
9447a0d3	16	*/
9447a0d3 MN	17	/*
	18	* Author:
	19	* Masahide NAKAMURA @USAGI
	20	*/
ae665a52	21
9447a0d3 MN	22	#include <stdio.h>
	23	#include <string.h>
	24	#include <stdlib.h>
9447a0d3	25	#include <unistd.h>
288384f2 MN	26	#include <sys/types.h>
288384f2 MN	27	#include <sys/socket.h>
9447a0d3	28	#include <arpa/inet.h>
288384f2	29	#include <sys/ioctl.h>
9447a0d3	30	#include <linux/ip.h>
288384f2 MN	31	#include <linux/if.h>
288384f2 MN	32	#include <linux/if_arp.h>
9447a0d3	33	#include <linux/if_tunnel.h>
288384f2	34	#include <linux/ip6_tunnel.h>
9447a0d3	35
288384f2 MN	36	#include "utils.h"
288384f2 MN	37	#include "tunnel.h"
ea71beac	38	#include "ip_common.h"
9447a0d3	39
288384f2 MN	40	#define IP6_FLOWINFO_TCLASS htonl(0x0FF00000)
288384f2 MN	41	#define IP6_FLOWINFO_FLOWLABEL htonl(0x000FFFFF)
9447a0d3	42
288384f2 MN	43	#define DEFAULT_TNL_HOP_LIMIT (64)
	44
	45	static void usage(void) __attribute__((noreturn));
9447a0d3 MN	46
	47	static void usage(void)
	48	{
8589eb4e MC	49	fprintf(stderr,
	50	"Usage: ip -f inet6 tunnel { add \| change \| del \| show } [ NAME ]\n"
	51	" [ mode { ip6ip6 \| ipip6 \| ip6gre \| vti6 \| any } ]\n"
	52	" [ remote ADDR local ADDR ] [ dev PHYS_DEV ]\n"
	53	" [ encaplimit ELIM ]\n"
	54	" [ hoplimit TTL ] [ tclass TCLASS ] [ flowlabel FLOWLABEL ]\n"
	55	" [ dscp inherit ]\n"
	56	" [ [no]allow-localremote ]\n"
	57	" [ [i\|o]seq ] [ [i\|o]key KEY ] [ [i\|o]csum ]\n"
	58	"\n"
	59	"Where: NAME := STRING\n"
	60	" ADDR := IPV6_ADDRESS\n"
	61	" ELIM := { none \| 0..255 }(default=%d)\n"
	62	" TTL := 0..255 (default=%d)\n"
	63	" TCLASS := { 0x0..0xff \| inherit }\n"
	64	" FLOWLABEL := { 0x0..0xfffff \| inherit }\n"
	65	" KEY := { DOTTED_QUAD \| NUMBER }\n",
	66	IPV6_DEFAULT_TNL_ENCAP_LIMIT,
288384f2	67	DEFAULT_TNL_HOP_LIMIT);
9447a0d3 MN	68	exit(-1);
	69	}
	70
3e953938	71	static void print_tunnel(const void *t)
9447a0d3	72	{
3e953938	73	const struct ip6_tnl_parm2 *p = t;
a8360dd3	74	SPRINT_BUF(b1);
9447a0d3	75
9af72f81 PS	76	/* Do not use format_host() for local addr,
	77	* symbolic name will not be useful.
	78	*/
a8360dd3 AC	79	open_json_object(NULL);
	80	print_color_string(PRINT_ANY, COLOR_IFNAME, "ifname", "%s: ", p->name);
	81	snprintf(b1, sizeof(b1), "%s/ipv6", tnl_strproto(p->proto));
	82	print_string(PRINT_ANY, "mode", "%s ", b1);
	83	print_string(PRINT_FP, NULL, "%s", "remote ");
	84	print_color_string(PRINT_ANY, COLOR_INET6, "remote", "%s ",
	85	format_host_r(AF_INET6, 16, &p->raddr, b1, sizeof(b1)));
	86	print_string(PRINT_FP, NULL, "%s", "local ");
	87	print_color_string(PRINT_ANY, COLOR_INET6, "local", "%s",
	88	rt_addr_n2a_r(AF_INET6, 16, &p->laddr, b1, sizeof(b1)));
	89
9447a0d3	90	if (p->link) {
ea71beac	91	const char *n = ll_index_to_name(p->link);
56f5daac	92
9447a0d3	93	if (n)
a8360dd3	94	print_string(PRINT_ANY, "link", " dev %s", n);
9447a0d3	95	}
9447a0d3	96
288384f2	97	if (p->flags & IP6_TNL_F_IGN_ENCAP_LIMIT)
a8360dd3 AC	98	print_null(PRINT_ANY, "ip6_tnl_f_ign_encap_limit",
a8360dd3 AC	99	" encaplimit none", NULL);
288384f2	100	else
a8360dd3 AC	101	print_uint(PRINT_ANY, "encap_limit", " encaplimit %u",
a8360dd3 AC	102	p->encap_limit);
9447a0d3	103
375560c4	104	if (p->hop_limit)
a8360dd3	105	print_uint(PRINT_ANY, "hoplimit", " hoplimit %u", p->hop_limit);
375560c4	106	else
a8360dd3	107	print_string(PRINT_FP, "hoplimit", " hoplimit %s", "inherit");
9447a0d3	108
a8360dd3 AC	109	if (p->flags & IP6_TNL_F_USE_ORIG_TCLASS) {
	110	print_null(PRINT_ANY, "ip6_tnl_f_use_orig_tclass",
	111	" tclass inherit", NULL);
	112	} else {
288384f2	113	__u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_TCLASS);
56f5daac	114
a8360dd3 AC	115	snprintf(b1, sizeof(b1), "0x%02x", (__u8)(val >> 20));
a8360dd3 AC	116	print_string(PRINT_ANY, "tclass", " tclass %s", b1);
9447a0d3	117	}
9447a0d3	118
a8360dd3 AC	119	if (p->flags & IP6_TNL_F_USE_ORIG_FLOWLABEL) {
	120	print_null(PRINT_ANY, "ip6_tnl_f_use_orig_flowlabel",
	121	" flowlabel inherit", NULL);
	122	} else {
	123	__u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_FLOWLABEL);
9447a0d3	124
a8360dd3 AC	125	snprintf(b1, sizeof(b1), "0x%05x", val);
	126	print_string(PRINT_ANY, "flowlabel", " flowlabel %s", b1);
	127	}
	128
	129	snprintf(b1, sizeof(b1), "0x%08x", ntohl(p->flowinfo));
	130	print_string(PRINT_ANY, "flowinfo", " (flowinfo %s)", b1);
9447a0d3	131
288384f2	132	if (p->flags & IP6_TNL_F_RCV_DSCP_COPY)
a8360dd3 AC	133	print_null(PRINT_ANY, "ip6_tnl_f_rcv_dscp_copy",
a8360dd3 AC	134	" dscp inherit", NULL);
af89576d	135
21440d19	136	if (p->flags & IP6_TNL_F_ALLOW_LOCAL_REMOTE)
a8360dd3 AC	137	print_null(PRINT_ANY, "ip6_tnl_f_allow_local_remote",
a8360dd3 AC	138	" allow-localremote", NULL);
21440d19	139
ee713339 AC	140	tnl_print_gre_flags(p->proto, p->i_flags, p->o_flags,
ee713339 AC	141	p->i_key, p->o_key);
a8360dd3 AC	142
a8360dd3 AC	143	close_json_object();
9447a0d3 MN	144	}
9447a0d3 MN	145
af89576d	146	static int parse_args(int argc, char *argv, int cmd, struct ip6_tnl_parm2 p)
9447a0d3	147	{
21a5a6b3	148	int count = 0;
26111ab1	149	const char *medium = NULL;
9447a0d3 MN	150
9447a0d3 MN	151	while (argc > 0) {
0b959b0f YH	152	if (strcmp(*argv, "mode") == 0) {
	153	NEXT_ARG();
	154	if (strcmp(*argv, "ipv6/ipv6") == 0 \|\|
	155	strcmp(*argv, "ip6ip6") == 0)
	156	p->proto = IPPROTO_IPV6;
f36d1140 SK	157	else if (strcmp(*argv, "vti6") == 0) {
	158	p->proto = IPPROTO_IPV6;
	159	p->i_flags \|= VTI_ISVTI;
	160	} else if (strcmp(*argv, "ip/ipv6") == 0 \|\|
0b959b0f YH	161	strcmp(*argv, "ipv4/ipv6") == 0 \|\|
	162	strcmp(*argv, "ipip6") == 0 \|\|
	163	strcmp(*argv, "ip4ip6") == 0)
	164	p->proto = IPPROTO_IPIP;
af89576d	165	else if (strcmp(*argv, "ip6gre") == 0 \|\|
	166	strcmp(*argv, "gre/ipv6") == 0)
	167	p->proto = IPPROTO_GRE;
0b959b0f YH	168	else if (strcmp(*argv, "any/ipv6") == 0 \|\|
	169	strcmp(*argv, "any") == 0)
	170	p->proto = 0;
	171	else {
56f5daac	172	fprintf(stderr, "Unknown tunnel mode \"%s\"\n", *argv);
4b726cb1 SH	173	exit(-1);
	174	}
	175	} else if (strcmp(*argv, "remote") == 0) {
288384f2	176	inet_prefix raddr;
56f5daac	177
288384f2	178	NEXT_ARG();
9aceaad7	179	get_addr(&raddr, *argv, AF_INET6);
288384f2 MN	180	memcpy(&p->raddr, &raddr.data, sizeof(p->raddr));
	181	} else if (strcmp(*argv, "local") == 0) {
	182	inet_prefix laddr;
56f5daac	183
288384f2	184	NEXT_ARG();
9aceaad7	185	get_addr(&laddr, *argv, AF_INET6);
288384f2 MN	186	memcpy(&p->laddr, &laddr.data, sizeof(p->laddr));
	187	} else if (strcmp(*argv, "dev") == 0) {
	188	NEXT_ARG();
26111ab1	189	medium = *argv;
288384f2 MN	190	} else if (strcmp(*argv, "encaplimit") == 0) {
	191	NEXT_ARG();
	192	if (strcmp(*argv, "none") == 0) {
	193	p->flags \|= IP6_TNL_F_IGN_ENCAP_LIMIT;
9447a0d3 MN	194	} else {
9447a0d3 MN	195	__u8 uval;
56f5daac	196
288384f2 MN	197	if (get_u8(&uval, *argv, 0) < -1)
288384f2 MN	198	invarg("invalid ELIM", *argv);
9447a0d3	199	p->encap_limit = uval;
3f83dce5	200	p->flags &= ~IP6_TNL_F_IGN_ENCAP_LIMIT;
9447a0d3	201	}
eddde110 YH	202	} else if (strcmp(*argv, "hoplimit") == 0 \|\|
	203	strcmp(*argv, "ttl") == 0 \|\|
	204	strcmp(*argv, "hlim") == 0) {
288384f2	205	__u8 uval;
56f5daac	206
288384f2 MN	207	NEXT_ARG();
288384f2 MN	208	if (get_u8(&uval, *argv, 0))
eddde110	209	invarg("invalid TTL", *argv);
288384f2	210	p->hop_limit = uval;
eddde110 YH	211	} else if (strcmp(*argv, "tclass") == 0 \|\|
	212	strcmp(*argv, "tc") == 0 \|\|
	213	strcmp(*argv, "tos") == 0 \|\|
	214	matches(*argv, "dsfield") == 0) {
288384f2	215	__u8 uval;
56f5daac	216
288384f2	217	NEXT_ARG();
df5574d0	218	p->flowinfo &= ~IP6_FLOWINFO_TCLASS;
288384f2 MN	219	if (strcmp(*argv, "inherit") == 0)
	220	p->flags \|= IP6_TNL_F_USE_ORIG_TCLASS;
	221	else {
	222	if (get_u8(&uval, *argv, 16))
eddde110	223	invarg("invalid TClass", *argv);
288384f2 MN	224	p->flowinfo \|= htonl((__u32)uval << 20) & IP6_FLOWINFO_TCLASS;
	225	p->flags &= ~IP6_TNL_F_USE_ORIG_TCLASS;
	226	}
eddde110 YH	227	} else if (strcmp(*argv, "flowlabel") == 0 \|\|
eddde110 YH	228	strcmp(*argv, "fl") == 0) {
288384f2	229	__u32 uval;
56f5daac	230
288384f2	231	NEXT_ARG();
df5574d0	232	p->flowinfo &= ~IP6_FLOWINFO_FLOWLABEL;
288384f2 MN	233	if (strcmp(*argv, "inherit") == 0)
	234	p->flags \|= IP6_TNL_F_USE_ORIG_FLOWLABEL;
	235	else {
	236	if (get_u32(&uval, *argv, 16))
eddde110	237	invarg("invalid Flowlabel", *argv);
288384f2	238	if (uval > 0xFFFFF)
eddde110	239	invarg("invalid Flowlabel", *argv);
288384f2 MN	240	p->flowinfo \|= htonl(uval) & IP6_FLOWINFO_FLOWLABEL;
	241	p->flags &= ~IP6_TNL_F_USE_ORIG_FLOWLABEL;
	242	}
	243	} else if (strcmp(*argv, "dscp") == 0) {
	244	NEXT_ARG();
	245	if (strcmp(*argv, "inherit") != 0)
	246	invarg("not inherit", *argv);
	247	p->flags \|= IP6_TNL_F_RCV_DSCP_COPY;
21440d19 SL	248	} else if (strcmp(*argv, "allow-localremote") == 0) {
	249	p->flags \|= IP6_TNL_F_ALLOW_LOCAL_REMOTE;
	250	} else if (strcmp(*argv, "noallow-localremote") == 0) {
	251	p->flags &= ~IP6_TNL_F_ALLOW_LOCAL_REMOTE;
af89576d	252	} else if (strcmp(*argv, "key") == 0) {
af89576d	253	NEXT_ARG();
	254	p->i_flags \|= GRE_KEY;
	255	p->o_flags \|= GRE_KEY;
a7ed1520	256	p->i_key = p->o_key = tnl_parse_key("key", *argv);
af89576d	257	} else if (strcmp(*argv, "ikey") == 0) {
af89576d	258	NEXT_ARG();
af89576d	259	p->i_flags \|= GRE_KEY;
a7ed1520	260	p->i_key = tnl_parse_key("ikey", *argv);
af89576d	261	} else if (strcmp(*argv, "okey") == 0) {
af89576d	262	NEXT_ARG();
af89576d	263	p->o_flags \|= GRE_KEY;
a7ed1520	264	p->o_key = tnl_parse_key("okey", *argv);
af89576d	265	} else if (strcmp(*argv, "seq") == 0) {
	266	p->i_flags \|= GRE_SEQ;
	267	p->o_flags \|= GRE_SEQ;
	268	} else if (strcmp(*argv, "iseq") == 0) {
	269	p->i_flags \|= GRE_SEQ;
	270	} else if (strcmp(*argv, "oseq") == 0) {
	271	p->o_flags \|= GRE_SEQ;
	272	} else if (strcmp(*argv, "csum") == 0) {
	273	p->i_flags \|= GRE_CSUM;
	274	p->o_flags \|= GRE_CSUM;
	275	} else if (strcmp(*argv, "icsum") == 0) {
	276	p->i_flags \|= GRE_CSUM;
	277	} else if (strcmp(*argv, "ocsum") == 0) {
	278	p->o_flags \|= GRE_CSUM;
9447a0d3	279	} else {
288384f2 MN	280	if (strcmp(*argv, "name") == 0) {
288384f2 MN	281	NEXT_ARG();
7894ce77	282	} else if (matches(*argv, "help") == 0)
9447a0d3	283	usage();
288384f2 MN	284	if (p->name[0])
288384f2 MN	285	duparg2("name", *argv);
625df645 PS	286	if (get_ifname(p->name, *argv))
625df645 PS	287	invarg("\"name\" not a valid ifname", *argv);
21a5a6b3	288	if (cmd == SIOCCHGTUNNEL && count == 0) {
d17b136f	289	struct ip6_tnl_parm2 old_p = {};
56f5daac	290
21a5a6b3 JB	291	if (tnl_get_ioctl(*argv, &old_p))
	292	return -1;
	293	*p = old_p;
	294	}
9447a0d3	295	}
21a5a6b3	296	count++;
9447a0d3 MN	297	argc--; argv++;
9447a0d3 MN	298	}
26111ab1	299	if (medium) {
ea71beac	300	p->link = ll_name_to_index(medium);
fe99adbc SP	301	if (!p->link)
fe99adbc SP	302	return nodev(medium);
9447a0d3 MN	303	}
	304	return 0;
	305	}
	306
af89576d	307	static void ip6_tnl_parm_init(struct ip6_tnl_parm2 *p, int apply_default)
288384f2 MN	308	{
	309	memset(p, 0, sizeof(*p));
	310	p->proto = IPPROTO_IPV6;
	311	if (apply_default) {
	312	p->hop_limit = DEFAULT_TNL_HOP_LIMIT;
	313	p->encap_limit = IPV6_DEFAULT_TNL_ENCAP_LIMIT;
	314	}
	315	}
	316
3e953938 SP	317	static void ip6_tnl_parm_initialize(const struct tnl_print_nlmsg_info *info)
	318	{
	319	const struct ifinfomsg *ifi = info->ifi;
	320	const struct ip6_tnl_parm2 *p1 = info->p1;
	321	struct ip6_tnl_parm2 *p2 = info->p2;
	322
	323	ip6_tnl_parm_init(p2, 0);
	324	if (ifi->ifi_type == ARPHRD_IP6GRE)
	325	p2->proto = IPPROTO_GRE;
	326	p2->link = ifi->ifi_index;
	327	strcpy(p2->name, p1->name);
	328	}
	329
	330	static bool ip6_tnl_parm_match(const struct tnl_print_nlmsg_info *info)
288384f2	331	{
3e953938 SP	332	const struct ip6_tnl_parm2 *p1 = info->p1;
	333	const struct ip6_tnl_parm2 *p2 = info->p2;
	334
288384f2 MN	335	return ((!p1->link \|\| p1->link == p2->link) &&
288384f2 MN	336	(!p1->name[0] \|\| strcmp(p1->name, p2->name) == 0) &&
1f4c51c0 JB	337	(IN6_IS_ADDR_UNSPECIFIED(&p1->laddr) \|\|
	338	IN6_ARE_ADDR_EQUAL(&p1->laddr, &p2->laddr)) &&
	339	(IN6_IS_ADDR_UNSPECIFIED(&p1->raddr) \|\|
	340	IN6_ARE_ADDR_EQUAL(&p1->raddr, &p2->raddr)) &&
288384f2 MN	341	(!p1->proto \|\| !p2->proto \|\| p1->proto == p2->proto) &&
	342	(!p1->encap_limit \|\| p1->encap_limit == p2->encap_limit) &&
	343	(!p1->hop_limit \|\| p1->hop_limit == p2->hop_limit) &&
	344	(!(p1->flowinfo & IP6_FLOWINFO_TCLASS) \|\|
	345	!((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_TCLASS)) &&
	346	(!(p1->flowinfo & IP6_FLOWINFO_FLOWLABEL) \|\|
	347	!((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_FLOWLABEL)) &&
	348	(!p1->flags \|\| (p1->flags & p2->flags)));
	349	}
	350
9447a0d3 MN	351	static int do_show(int argc, char **argv)
9447a0d3 MN	352	{
3e953938	353	struct ip6_tnl_parm2 p, p1;
288384f2 MN	354
288384f2 MN	355	ip6_tnl_parm_init(&p, 0);
c3651bf4	356	p.proto = 0; /* default to any */
9447a0d3	357
56f5daac SH	358	if (parse_args(argc, argv, SIOCGETTUNNEL, &p) < 0)
56f5daac SH	359	return -1;
9447a0d3	360
3e953938 SP	361	if (!p.name[0] \|\| show_stats) {
	362	struct tnl_print_nlmsg_info info = {
	363	.p1 = &p,
	364	.p2 = &p1,
	365	.init = ip6_tnl_parm_initialize,
	366	.match = ip6_tnl_parm_match,
	367	.print = print_tunnel,
	368	};
	369
	370	return do_tunnels_list(&info);
	371	}
ec895940 SP	372
	373	if (tnl_get_ioctl(p.name, &p))
	374	return -1;
9447a0d3	375
ec895940	376	print_tunnel(&p);
56f5daac	377	return 0;
9447a0d3 MN	378	}
9447a0d3 MN	379
9447a0d3 MN	380	static int do_add(int cmd, int argc, char **argv)
9447a0d3 MN	381	{
af89576d	382	struct ip6_tnl_parm2 p;
a0638e18	383	const char *basedev = "ip6tnl0";
288384f2 MN	384
288384f2 MN	385	ip6_tnl_parm_init(&p, 1);
9447a0d3	386
21a5a6b3	387	if (parse_args(argc, argv, cmd, &p) < 0)
9447a0d3	388	return -1;
288384f2	389
d035cc1b AC	390	if (!*p.name)
	391	fprintf(stderr, "Tunnel interface name not specified\n");
	392
a0638e18 AA	393	if (p.proto == IPPROTO_GRE)
	394	basedev = "ip6gre0";
	395	else if (p.i_flags & VTI_ISVTI)
	396	basedev = "ip6_vti0";
	397
	398	return tnl_add_ioctl(cmd, basedev, p.name, &p);
9447a0d3 MN	399	}
9447a0d3 MN	400
288384f2	401	static int do_del(int argc, char **argv)
9447a0d3	402	{
af89576d	403	struct ip6_tnl_parm2 p;
a0638e18	404	const char *basedev = "ip6tnl0";
288384f2 MN	405
288384f2 MN	406	ip6_tnl_parm_init(&p, 1);
9447a0d3	407
21a5a6b3	408	if (parse_args(argc, argv, SIOCDELTUNNEL, &p) < 0)
9447a0d3 MN	409	return -1;
9447a0d3 MN	410
a0638e18 AA	411	if (p.proto == IPPROTO_GRE)
	412	basedev = "ip6gre0";
	413	else if (p.i_flags & VTI_ISVTI)
	414	basedev = "ip6_vti0";
	415
	416	return tnl_del_ioctl(basedev, p.name, &p);
9447a0d3 MN	417	}
9447a0d3 MN	418
ae665a52 SH	419	int do_ip6tunnel(int argc, char **argv)
ae665a52 SH	420	{
288384f2 MN	421	switch (preferred_family) {
	422	case AF_UNSPEC:
	423	preferred_family = AF_INET6;
	424	break;
	425	case AF_INET6:
	426	break;
	427	default:
14645ec2	428	fprintf(stderr, "Unsupported protocol family: %d\n", preferred_family);
288384f2 MN	429	exit(-1);
	430	}
	431
9447a0d3	432	if (argc > 0) {
288384f2	433	if (matches(*argv, "add") == 0)
9447a0d3	434	return do_add(SIOCADDTUNNEL, argc - 1, argv + 1);
288384f2	435	if (matches(*argv, "change") == 0)
9447a0d3	436	return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1);
6e30461e	437	if (matches(*argv, "delete") == 0)
9447a0d3	438	return do_del(argc - 1, argv + 1);
288384f2 MN	439	if (matches(*argv, "show") == 0 \|\|
	440	matches(*argv, "lst") == 0 \|\|
	441	matches(*argv, "list") == 0)
9447a0d3	442	return do_show(argc - 1, argv + 1);
288384f2	443	if (matches(*argv, "help") == 0)
9447a0d3	444	usage();
9447a0d3 MN	445	} else
	446	return do_show(0, NULL);
	447
288384f2 MN	448	fprintf(stderr, "Command \"%s\" is unknown, try \"ip -f inet6 tunnel help\".\n", *argv);
288384f2 MN	449	exit(-1);
9447a0d3	450	}