Blame view
net/ipv4/ip_gre.c
45.4 KB
2874c5fd2
|
1 |
// SPDX-License-Identifier: GPL-2.0-or-later |
1da177e4c
|
2 |
/* |
e905a9eda
|
3 |
* Linux NET3: GRE over IP protocol decoder. |
1da177e4c
|
4 5 |
* * Authors: Alexey Kuznetsov (kuznet@ms2.inr.ac.ru) |
1da177e4c
|
6 |
*/ |
afd465030
|
7 |
#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt |
4fc268d24
|
8 |
#include <linux/capability.h> |
1da177e4c
|
9 10 |
#include <linux/module.h> #include <linux/types.h> |
1da177e4c
|
11 |
#include <linux/kernel.h> |
5a0e3ad6a
|
12 |
#include <linux/slab.h> |
7c0f6ba68
|
13 |
#include <linux/uaccess.h> |
1da177e4c
|
14 15 16 17 18 19 |
#include <linux/skbuff.h> #include <linux/netdevice.h> #include <linux/in.h> #include <linux/tcp.h> #include <linux/udp.h> #include <linux/if_arp.h> |
2e15ea390
|
20 |
#include <linux/if_vlan.h> |
1da177e4c
|
21 22 23 24 25 |
#include <linux/init.h> #include <linux/in6.h> #include <linux/inetdevice.h> #include <linux/igmp.h> #include <linux/netfilter_ipv4.h> |
e1a800022
|
26 |
#include <linux/etherdevice.h> |
46f25dffb
|
27 |
#include <linux/if_ether.h> |
1da177e4c
|
28 29 30 31 32 |
#include <net/sock.h> #include <net/ip.h> #include <net/icmp.h> #include <net/protocol.h> |
c54419321
|
33 |
#include <net/ip_tunnels.h> |
1da177e4c
|
34 35 36 37 38 |
#include <net/arp.h> #include <net/checksum.h> #include <net/dsfield.h> #include <net/inet_ecn.h> #include <net/xfrm.h> |
59a4c7594
|
39 40 |
#include <net/net_namespace.h> #include <net/netns/generic.h> |
c19e654dd
|
41 |
#include <net/rtnetlink.h> |
00959ade3
|
42 |
#include <net/gre.h> |
2e15ea390
|
43 |
#include <net/dst_metadata.h> |
84e54fe0a
|
44 |
#include <net/erspan.h> |
1da177e4c
|
45 |
|
1da177e4c
|
46 47 48 49 50 51 52 53 54 55 56 57 |
/* Problems & solutions -------------------- 1. The most important issue is detecting local dead loops. They would cause complete host lockup in transmit, which would be "resolved" by stack overflow or, if queueing is enabled, with infinite looping in net_bh. We cannot track such dead loops during route installation, it is infeasible task. The most general solutions would be to keep skb->encapsulation counter (sort of local ttl), |
6d0722a2c
|
58 |
and silently drop packet when it expires. It is a good |
bff528578
|
59 |
solution, but it supposes maintaining new variable in ALL |
1da177e4c
|
60 |
skb, even if no tunneling is used. |
6d0722a2c
|
61 62 63 |
Current solution: xmit_recursion breaks dead loops. This is a percpu counter, since when we enter the first ndo_xmit(), cpu migration is forbidden. We force an exit if this counter reaches RECURSION_LIMIT |
1da177e4c
|
64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 |
2. Networking dead loops would not kill routers, but would really kill network. IP hop limit plays role of "t->recursion" in this case, if we copy it from packet being encapsulated to upper header. It is very good solution, but it introduces two problems: - Routing protocols, using packets with ttl=1 (OSPF, RIP2), do not work over tunnels. - traceroute does not work. I planned to relay ICMP from tunnel, so that this problem would be solved and traceroute output would even more informative. This idea appeared to be wrong: only Linux complies to rfc1812 now (yes, guys, Linux is the only true router now :-)), all routers (at least, in neighbourhood of mine) return only 8 bytes of payload. It is the end. Hence, if we want that OSPF worked or traceroute said something reasonable, we should search for another solution. One of them is to parse packet trying to detect inner encapsulation made by our node. It is difficult or even impossible, especially, |
bff528578
|
84 |
taking into account fragmentation. TO be short, ttl is not solution at all. |
1da177e4c
|
85 86 87 88 89 90 |
Current solution: The solution was UNEXPECTEDLY SIMPLE. We force DF flag on tunnels with preconfigured hop limit, that is ALL. :-) Well, it does not remove the problem completely, but exponential growth of network traffic is changed to linear (branches, that exceed pmtu are pruned) and tunnel mtu |
bff528578
|
91 |
rapidly degrades to value <68, where looping stops. |
1da177e4c
|
92 93 94 95 96 97 |
Yes, it is not good if there exists a router in the loop, which does not force DF, even when encapsulating packets have DF set. But it is not our problem! Nobody could accuse us, we made all that we could make. Even if it is your gated who injected fatal route to network, even if it were you who configured fatal static route: you are innocent. :-) |
1da177e4c
|
98 99 |
Alexey Kuznetsov. */ |
eccc1bb8d
|
100 101 102 |
static bool log_ecn_error = true; module_param(log_ecn_error, bool, 0644); MODULE_PARM_DESC(log_ecn_error, "Log packets received with corrupted ECN"); |
c19e654dd
|
103 |
static struct rtnl_link_ops ipgre_link_ops __read_mostly; |
1da177e4c
|
104 |
static int ipgre_tunnel_init(struct net_device *dev); |
1a66a836d
|
105 |
static void erspan_build_header(struct sk_buff *skb, |
c69de58ba
|
106 |
u32 id, u32 index, |
a3222dc95
|
107 |
bool truncate, bool is_ipv4); |
eb8ce741a
|
108 |
|
c7d03a00b
|
109 110 |
static unsigned int ipgre_net_id __read_mostly; static unsigned int gre_tap_net_id __read_mostly; |
84e54fe0a
|
111 |
static unsigned int erspan_net_id __read_mostly; |
1da177e4c
|
112 |
|
32bbd8793
|
113 114 |
static int ipgre_err(struct sk_buff *skb, u32 info, const struct tnl_ptk_info *tpi) |
1da177e4c
|
115 |
{ |
1da177e4c
|
116 |
|
c54419321
|
117 118 119 |
/* All the routers (except for Linux) return only 8 bytes of packet payload. It means, that precise relaying of ICMP in the real Internet is absolutely infeasible. |
1da177e4c
|
120 |
|
c54419321
|
121 122 123 124 |
Moreover, Cisco "wise men" put GRE key to the third word in GRE header. It makes impossible maintaining even soft state for keyed GRE tunnels with enabled checksum. Tell them "thank you". |
1da177e4c
|
125 |
|
c54419321
|
126 127 128 129 130 131 |
Well, I wonder, rfc1812 was written by Cisco employee, what the hell these idiots break standards established by themselves??? */ struct net *net = dev_net(skb->dev); struct ip_tunnel_net *itn; |
96f5a846b
|
132 |
const struct iphdr *iph; |
88c7664f1
|
133 134 |
const int type = icmp_hdr(skb)->type; const int code = icmp_hdr(skb)->code; |
20e1954fe
|
135 |
unsigned int data_len = 0; |
1da177e4c
|
136 |
struct ip_tunnel *t; |
1da177e4c
|
137 |
|
32bbd8793
|
138 139 140 141 142 143 144 145 146 147 148 149 150 151 |
if (tpi->proto == htons(ETH_P_TEB)) itn = net_generic(net, gre_tap_net_id); else if (tpi->proto == htons(ETH_P_ERSPAN) || tpi->proto == htons(ETH_P_ERSPAN2)) itn = net_generic(net, erspan_net_id); else itn = net_generic(net, ipgre_net_id); iph = (const struct iphdr *)(icmp_hdr(skb) + 1); t = ip_tunnel_lookup(itn, skb->dev->ifindex, tpi->flags, iph->daddr, iph->saddr, tpi->key); if (!t) return -ENOENT; |
1da177e4c
|
152 153 154 |
switch (type) { default: case ICMP_PARAMETERPROB: |
32bbd8793
|
155 |
return 0; |
1da177e4c
|
156 157 158 159 160 161 |
case ICMP_DEST_UNREACH: switch (code) { case ICMP_SR_FAILED: case ICMP_PORT_UNREACH: /* Impossible event. */ |
32bbd8793
|
162 |
return 0; |
1da177e4c
|
163 164 165 166 167 168 169 170 |
default: /* All others are translated to HOST_UNREACH. rfc2003 contains "deep thoughts" about NET_UNREACH, I believe they are just ether pollution. --ANK */ break; } break; |
9f57c67c3
|
171 |
|
1da177e4c
|
172 173 |
case ICMP_TIME_EXCEEDED: if (code != ICMP_EXC_TTL) |
32bbd8793
|
174 |
return 0; |
20e1954fe
|
175 |
data_len = icmp_hdr(skb)->un.reserved[1] * 4; /* RFC 4884 4.1 */ |
1da177e4c
|
176 |
break; |
55be7a9c6
|
177 178 179 |
case ICMP_REDIRECT: break; |
1da177e4c
|
180 |
} |
9b8c6d7bf
|
181 182 |
#if IS_ENABLED(CONFIG_IPV6) if (tpi->proto == htons(ETH_P_IPV6) && |
20e1954fe
|
183 184 |
!ip6_err_gen_icmpv6_unreach(skb, iph->ihl * 4 + tpi->hdr_len, type, data_len)) |
32bbd8793
|
185 |
return 0; |
9b8c6d7bf
|
186 |
#endif |
363933955
|
187 |
if (t->parms.iph.daddr == 0 || |
f97c1e0c6
|
188 |
ipv4_is_multicast(t->parms.iph.daddr)) |
32bbd8793
|
189 |
return 0; |
1da177e4c
|
190 191 |
if (t->parms.iph.ttl == 0 && type == ICMP_TIME_EXCEEDED) |
32bbd8793
|
192 |
return 0; |
1da177e4c
|
193 |
|
da6185d87
|
194 |
if (time_before(jiffies, t->err_time + IPTUNNEL_ERR_TIMEO)) |
1da177e4c
|
195 196 197 198 |
t->err_count++; else t->err_count = 1; t->err_time = jiffies; |
32bbd8793
|
199 200 |
return 0; |
9f57c67c3
|
201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 |
} static void gre_err(struct sk_buff *skb, u32 info) { /* All the routers (except for Linux) return only * 8 bytes of packet payload. It means, that precise relaying of * ICMP in the real Internet is absolutely infeasible. * * Moreover, Cisco "wise men" put GRE key to the third word * in GRE header. It makes impossible maintaining even soft * state for keyed * GRE tunnels with enabled checksum. Tell them "thank you". * * Well, I wonder, rfc1812 was written by Cisco employee, * what the hell these idiots break standards established * by themselves??? */ |
e582615ad
|
218 |
const struct iphdr *iph = (struct iphdr *)skb->data; |
9f57c67c3
|
219 220 221 |
const int type = icmp_hdr(skb)->type; const int code = icmp_hdr(skb)->code; struct tnl_ptk_info tpi; |
9f57c67c3
|
222 |
|
b0350d51f
|
223 224 225 |
if (gre_parse_header(skb, &tpi, NULL, htons(ETH_P_IP), iph->ihl * 4) < 0) return; |
9f57c67c3
|
226 227 228 |
if (type == ICMP_DEST_UNREACH && code == ICMP_FRAG_NEEDED) { ipv4_update_pmtu(skb, dev_net(skb->dev), info, |
d888f3966
|
229 |
skb->dev->ifindex, IPPROTO_GRE); |
9f57c67c3
|
230 231 232 |
return; } if (type == ICMP_REDIRECT) { |
1042caa79
|
233 234 |
ipv4_redirect(skb, dev_net(skb->dev), skb->dev->ifindex, IPPROTO_GRE); |
9f57c67c3
|
235 236 237 238 |
return; } ipgre_err(skb, info, &tpi); |
1da177e4c
|
239 |
} |
f989d546a
|
240 241 242 243 244 245 246 247 |
static bool is_erspan_type1(int gre_hdr_len) { /* Both ERSPAN type I (version 0) and type II (version 1) use * protocol 0x88BE, but the type I has only 4-byte GRE header, * while type II has 8-byte. */ return gre_hdr_len == 4; } |
84e54fe0a
|
248 249 250 251 252 |
static int erspan_rcv(struct sk_buff *skb, struct tnl_ptk_info *tpi, int gre_hdr_len) { struct net *net = dev_net(skb->dev); struct metadata_dst *tun_dst = NULL; |
1d7e2ed22
|
253 |
struct erspan_base_hdr *ershdr; |
84e54fe0a
|
254 255 |
struct ip_tunnel_net *itn; struct ip_tunnel *tunnel; |
84e54fe0a
|
256 |
const struct iphdr *iph; |
3df192830
|
257 |
struct erspan_md2 *md2; |
1d7e2ed22
|
258 |
int ver; |
84e54fe0a
|
259 260 261 |
int len; itn = net_generic(net, erspan_net_id); |
84e54fe0a
|
262 |
iph = ip_hdr(skb); |
f989d546a
|
263 264 265 266 267 268 269 270 271 272 273 274 |
if (is_erspan_type1(gre_hdr_len)) { ver = 0; tunnel = ip_tunnel_lookup(itn, skb->dev->ifindex, tpi->flags | TUNNEL_NO_KEY, iph->saddr, iph->daddr, 0); } else { ershdr = (struct erspan_base_hdr *)(skb->data + gre_hdr_len); ver = ershdr->ver; tunnel = ip_tunnel_lookup(itn, skb->dev->ifindex, tpi->flags | TUNNEL_KEY, iph->saddr, iph->daddr, tpi->key); } |
84e54fe0a
|
275 276 |
if (tunnel) { |
f989d546a
|
277 278 279 280 |
if (is_erspan_type1(gre_hdr_len)) len = gre_hdr_len; else len = gre_hdr_len + erspan_hdr_len(ver); |
1d7e2ed22
|
281 |
if (unlikely(!pskb_may_pull(skb, len))) |
ae3e13373
|
282 |
return PACKET_REJECT; |
1d7e2ed22
|
283 |
|
84e54fe0a
|
284 |
if (__iptunnel_pull_header(skb, |
1d7e2ed22
|
285 |
len, |
84e54fe0a
|
286 287 288 |
htons(ETH_P_TEB), false, false) < 0) goto drop; |
1a66a836d
|
289 |
if (tunnel->collect_md) { |
492b67e28
|
290 |
struct erspan_metadata *pkt_md, *md; |
1a66a836d
|
291 |
struct ip_tunnel_info *info; |
492b67e28
|
292 |
unsigned char *gh; |
1a66a836d
|
293 294 295 296 297 298 299 300 301 302 303 |
__be64 tun_id; __be16 flags; tpi->flags |= TUNNEL_KEY; flags = tpi->flags; tun_id = key32_to_tunnel_id(tpi->key); tun_dst = ip_tun_rx_dst(skb, flags, tun_id, sizeof(*md)); if (!tun_dst) return PACKET_REJECT; |
492b67e28
|
304 305 306 307 308 309 310 311 |
/* skb can be uncloned in __iptunnel_pull_header, so * old pkt_md is no longer valid and we need to reset * it */ gh = skb_network_header(skb) + skb_network_header_len(skb); pkt_md = (struct erspan_metadata *)(gh + gre_hdr_len + sizeof(*ershdr)); |
1a66a836d
|
312 |
md = ip_tunnel_info_opts(&tun_dst->u.tun_info); |
f551c91de
|
313 |
md->version = ver; |
3df192830
|
314 315 316 |
md2 = &md->u.md2; memcpy(md2, pkt_md, ver == 1 ? ERSPAN_V1_MDSIZE : ERSPAN_V2_MDSIZE); |
f551c91de
|
317 |
|
1a66a836d
|
318 319 320 |
info = &tun_dst->u.tun_info; info->key.tun_flags |= TUNNEL_ERSPAN_OPT; info->options_len = sizeof(*md); |
1a66a836d
|
321 |
} |
84e54fe0a
|
322 323 324 325 |
skb_reset_mac_header(skb); ip_tunnel_rcv(tunnel, skb, tpi, tun_dst, log_ecn_error); return PACKET_RCVD; } |
5a64506b5
|
326 |
return PACKET_REJECT; |
84e54fe0a
|
327 328 329 330 |
drop: kfree_skb(skb); return PACKET_RCVD; } |
125372faa
|
331 332 |
static int __ipgre_rcv(struct sk_buff *skb, const struct tnl_ptk_info *tpi, struct ip_tunnel_net *itn, int hdr_len, bool raw_proto) |
1da177e4c
|
333 |
{ |
2e15ea390
|
334 |
struct metadata_dst *tun_dst = NULL; |
b71d1d426
|
335 |
const struct iphdr *iph; |
1da177e4c
|
336 |
struct ip_tunnel *tunnel; |
1da177e4c
|
337 |
|
c54419321
|
338 |
iph = ip_hdr(skb); |
bda7bb463
|
339 340 |
tunnel = ip_tunnel_lookup(itn, skb->dev->ifindex, tpi->flags, iph->saddr, iph->daddr, tpi->key); |
e1a800022
|
341 |
|
d20832876
|
342 |
if (tunnel) { |
c0d59da79
|
343 |
const struct iphdr *tnl_params; |
125372faa
|
344 345 |
if (__iptunnel_pull_header(skb, hdr_len, tpi->proto, raw_proto, false) < 0) |
244a797bd
|
346 |
goto drop; |
e271c7b44
|
347 348 349 350 |
if (tunnel->dev->type != ARPHRD_NONE) skb_pop_mac_header(skb); else skb_reset_mac_header(skb); |
c0d59da79
|
351 352 353 |
tnl_params = &tunnel->parms.iph; if (tunnel->collect_md || tnl_params->daddr == 0) { |
c29a70d2c
|
354 355 |
__be16 flags; __be64 tun_id; |
2e15ea390
|
356 |
|
c29a70d2c
|
357 |
flags = tpi->flags & (TUNNEL_CSUM | TUNNEL_KEY); |
d817f432c
|
358 |
tun_id = key32_to_tunnel_id(tpi->key); |
c29a70d2c
|
359 |
tun_dst = ip_tun_rx_dst(skb, flags, tun_id, 0); |
2e15ea390
|
360 361 |
if (!tun_dst) return PACKET_REJECT; |
2e15ea390
|
362 363 364 |
} ip_tunnel_rcv(tunnel, skb, tpi, tun_dst, log_ecn_error); |
bda7bb463
|
365 |
return PACKET_RCVD; |
1da177e4c
|
366 |
} |
125372faa
|
367 |
return PACKET_NEXT; |
244a797bd
|
368 369 370 371 |
drop: kfree_skb(skb); return PACKET_RCVD; |
1da177e4c
|
372 |
} |
125372faa
|
373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 |
static int ipgre_rcv(struct sk_buff *skb, const struct tnl_ptk_info *tpi, int hdr_len) { struct net *net = dev_net(skb->dev); struct ip_tunnel_net *itn; int res; if (tpi->proto == htons(ETH_P_TEB)) itn = net_generic(net, gre_tap_net_id); else itn = net_generic(net, ipgre_net_id); res = __ipgre_rcv(skb, tpi, itn, hdr_len, false); if (res == PACKET_NEXT && tpi->proto == htons(ETH_P_TEB)) { /* ipgre tunnels in collect metadata mode should receive * also ETH_P_TEB traffic. */ itn = net_generic(net, ipgre_net_id); res = __ipgre_rcv(skb, tpi, itn, hdr_len, true); } return res; } |
9f57c67c3
|
395 396 397 398 |
static int gre_rcv(struct sk_buff *skb) { struct tnl_ptk_info tpi; bool csum_err = false; |
95f5c64c3
|
399 |
int hdr_len; |
9f57c67c3
|
400 401 402 403 404 405 406 407 |
#ifdef CONFIG_NET_IPGRE_BROADCAST if (ipv4_is_multicast(ip_hdr(skb)->daddr)) { /* Looped back packet, drop it! */ if (rt_is_output_route(skb_rtable(skb))) goto drop; } #endif |
e582615ad
|
408 |
hdr_len = gre_parse_header(skb, &tpi, &csum_err, htons(ETH_P_IP), 0); |
f132ae7c4
|
409 |
if (hdr_len < 0) |
95f5c64c3
|
410 |
goto drop; |
f551c91de
|
411 412 |
if (unlikely(tpi.proto == htons(ETH_P_ERSPAN) || tpi.proto == htons(ETH_P_ERSPAN2))) { |
84e54fe0a
|
413 414 |
if (erspan_rcv(skb, &tpi, hdr_len) == PACKET_RCVD) return 0; |
dd8d5b8c5
|
415 |
goto out; |
84e54fe0a
|
416 |
} |
244a797bd
|
417 |
if (ipgre_rcv(skb, &tpi, hdr_len) == PACKET_RCVD) |
9f57c67c3
|
418 |
return 0; |
dd8d5b8c5
|
419 |
out: |
9f57c67c3
|
420 421 422 423 424 |
icmp_send(skb, ICMP_DEST_UNREACH, ICMP_PORT_UNREACH, 0); drop: kfree_skb(skb); return 0; } |
c54419321
|
425 426 427 428 429 |
static void __gre_xmit(struct sk_buff *skb, struct net_device *dev, const struct iphdr *tnl_params, __be16 proto) { struct ip_tunnel *tunnel = netdev_priv(dev); |
1da177e4c
|
430 |
|
c54419321
|
431 432 |
if (tunnel->parms.o_flags & TUNNEL_SEQ) tunnel->o_seqno++; |
1da177e4c
|
433 |
|
c54419321
|
434 |
/* Push GRE header. */ |
182a352d2
|
435 436 437 |
gre_build_header(skb, tunnel->tun_hlen, tunnel->parms.o_flags, proto, tunnel->parms.o_key, htonl(tunnel->o_seqno)); |
54bc9bac3
|
438 |
|
bf3d6a8f7
|
439 |
ip_tunnel_xmit(skb, dev, tnl_params, tnl_params->protocol); |
c54419321
|
440 |
} |
1da177e4c
|
441 |
|
aed069df0
|
442 |
static int gre_handle_offloads(struct sk_buff *skb, bool csum) |
b2acd1dc3
|
443 |
{ |
6fa79666e
|
444 |
return iptunnel_handle_offloads(skb, csum ? SKB_GSO_GRE_CSUM : SKB_GSO_GRE); |
b2acd1dc3
|
445 |
} |
862a03c35
|
446 447 448 |
static void gre_fb_xmit(struct sk_buff *skb, struct net_device *dev, __be16 proto) { |
77a5196a8
|
449 |
struct ip_tunnel *tunnel = netdev_priv(dev); |
862a03c35
|
450 451 |
struct ip_tunnel_info *tun_info; const struct ip_tunnel_key *key; |
862a03c35
|
452 |
int tunnel_hlen; |
962924fa2
|
453 |
__be16 flags; |
862a03c35
|
454 455 456 457 458 459 460 461 |
tun_info = skb_tunnel_info(skb); if (unlikely(!tun_info || !(tun_info->mode & IP_TUNNEL_INFO_TX) || ip_tunnel_info_af(tun_info) != AF_INET)) goto err_free_skb; key = &tun_info->key; tunnel_hlen = gre_calc_hlen(key->tun_flags); |
962924fa2
|
462 463 |
if (skb_cow_head(skb, dev->needed_headroom)) goto err_free_skb; |
2e15ea390
|
464 465 |
/* Push Tunnel header. */ |
aed069df0
|
466 |
if (gre_handle_offloads(skb, !!(tun_info->key.tun_flags & TUNNEL_CSUM))) |
962924fa2
|
467 |
goto err_free_skb; |
2e15ea390
|
468 |
|
77a5196a8
|
469 470 |
flags = tun_info->key.tun_flags & (TUNNEL_CSUM | TUNNEL_KEY | TUNNEL_SEQ); |
cba653210
|
471 |
gre_build_header(skb, tunnel_hlen, flags, proto, |
77a5196a8
|
472 |
tunnel_id_to_key32(tun_info->key.tun_id), |
157463941
|
473 |
(flags & TUNNEL_SEQ) ? htonl(tunnel->o_seqno++) : 0); |
2e15ea390
|
474 |
|
962924fa2
|
475 |
ip_md_tunnel_xmit(skb, dev, IPPROTO_GRE, tunnel_hlen); |
039f50629
|
476 |
|
2e15ea390
|
477 |
return; |
2e15ea390
|
478 479 480 481 |
err_free_skb: kfree_skb(skb); dev->stats.tx_dropped++; } |
20704bd16
|
482 |
static void erspan_fb_xmit(struct sk_buff *skb, struct net_device *dev) |
1a66a836d
|
483 484 485 486 487 |
{ struct ip_tunnel *tunnel = netdev_priv(dev); struct ip_tunnel_info *tun_info; const struct ip_tunnel_key *key; struct erspan_metadata *md; |
1a66a836d
|
488 |
bool truncate = false; |
962924fa2
|
489 |
__be16 proto; |
1a66a836d
|
490 |
int tunnel_hlen; |
f551c91de
|
491 |
int version; |
1baf5ebf8
|
492 |
int nhoff; |
d5db21a3e
|
493 |
int thoff; |
1a66a836d
|
494 495 496 497 498 499 500 |
tun_info = skb_tunnel_info(skb); if (unlikely(!tun_info || !(tun_info->mode & IP_TUNNEL_INFO_TX) || ip_tunnel_info_af(tun_info) != AF_INET)) goto err_free_skb; key = &tun_info->key; |
256c87c17
|
501 |
if (!(tun_info->key.tun_flags & TUNNEL_ERSPAN_OPT)) |
962924fa2
|
502 |
goto err_free_skb; |
2eb8d6d29
|
503 |
if (tun_info->options_len < sizeof(*md)) |
962924fa2
|
504 |
goto err_free_skb; |
2eb8d6d29
|
505 |
md = ip_tunnel_info_opts(tun_info); |
1a66a836d
|
506 507 |
/* ERSPAN has fixed 8 byte GRE header */ |
f551c91de
|
508 509 |
version = md->version; tunnel_hlen = 8 + erspan_hdr_len(version); |
1a66a836d
|
510 |
|
962924fa2
|
511 512 |
if (skb_cow_head(skb, dev->needed_headroom)) goto err_free_skb; |
1a66a836d
|
513 514 |
if (gre_handle_offloads(skb, false)) |
962924fa2
|
515 |
goto err_free_skb; |
1a66a836d
|
516 |
|
f192970de
|
517 518 |
if (skb->len > dev->mtu + dev->hard_header_len) { pskb_trim(skb, dev->mtu + dev->hard_header_len); |
1a66a836d
|
519 520 |
truncate = true; } |
1baf5ebf8
|
521 522 523 524 |
nhoff = skb_network_header(skb) - skb_mac_header(skb); if (skb->protocol == htons(ETH_P_IP) && (ntohs(ip_hdr(skb)->tot_len) > skb->len - nhoff)) truncate = true; |
d5db21a3e
|
525 526 527 528 529 |
thoff = skb_transport_header(skb) - skb_mac_header(skb); if (skb->protocol == htons(ETH_P_IPV6) && (ntohs(ipv6_hdr(skb)->payload_len) > skb->len - thoff)) truncate = true; |
1baf5ebf8
|
530 |
|
f551c91de
|
531 |
if (version == 1) { |
c69de58ba
|
532 |
erspan_build_header(skb, ntohl(tunnel_id_to_key32(key->tun_id)), |
f551c91de
|
533 |
ntohl(md->u.index), truncate, true); |
20704bd16
|
534 |
proto = htons(ETH_P_ERSPAN); |
f551c91de
|
535 |
} else if (version == 2) { |
c69de58ba
|
536 537 538 539 540 |
erspan_build_header_v2(skb, ntohl(tunnel_id_to_key32(key->tun_id)), md->u.md2.dir, get_hwid(&md->u.md2), truncate, true); |
20704bd16
|
541 |
proto = htons(ETH_P_ERSPAN2); |
f551c91de
|
542 |
} else { |
962924fa2
|
543 |
goto err_free_skb; |
f551c91de
|
544 |
} |
1a66a836d
|
545 546 |
gre_build_header(skb, 8, TUNNEL_SEQ, |
20704bd16
|
547 |
proto, 0, htonl(tunnel->o_seqno++)); |
1a66a836d
|
548 |
|
962924fa2
|
549 |
ip_md_tunnel_xmit(skb, dev, IPPROTO_GRE, tunnel_hlen); |
1a66a836d
|
550 |
|
1a66a836d
|
551 |
return; |
1a66a836d
|
552 553 554 555 |
err_free_skb: kfree_skb(skb); dev->stats.tx_dropped++; } |
fc4099f17
|
556 557 558 |
static int gre_fill_metadata_dst(struct net_device *dev, struct sk_buff *skb) { struct ip_tunnel_info *info = skb_tunnel_info(skb); |
962924fa2
|
559 |
const struct ip_tunnel_key *key; |
fc4099f17
|
560 561 562 563 564 |
struct rtable *rt; struct flowi4 fl4; if (ip_tunnel_info_af(info) != AF_INET) return -EINVAL; |
962924fa2
|
565 566 567 |
key = &info->key; ip_tunnel_init_flow(&fl4, IPPROTO_GRE, key->u.ipv4.dst, key->u.ipv4.src, tunnel_id_to_key32(key->tun_id), key->tos, 0, |
24ba14406
|
568 |
skb->mark, skb_get_hash(skb)); |
962924fa2
|
569 |
rt = ip_route_output_key(dev_net(dev), &fl4); |
fc4099f17
|
570 571 572 573 574 575 576 |
if (IS_ERR(rt)) return PTR_ERR(rt); ip_rt_put(rt); info->key.u.ipv4.src = fl4.saddr; return 0; } |
c54419321
|
577 578 579 580 581 |
static netdev_tx_t ipgre_xmit(struct sk_buff *skb, struct net_device *dev) { struct ip_tunnel *tunnel = netdev_priv(dev); const struct iphdr *tnl_params; |
1da177e4c
|
582 |
|
cb9f1b783
|
583 584 |
if (!pskb_inet_may_pull(skb)) goto free_skb; |
2e15ea390
|
585 |
if (tunnel->collect_md) { |
2090714e1
|
586 |
gre_fb_xmit(skb, dev, skb->protocol); |
2e15ea390
|
587 588 |
return NETDEV_TX_OK; } |
c54419321
|
589 |
if (dev->header_ops) { |
fdafed459
|
590 |
if (skb_cow_head(skb, 0)) |
c54419321
|
591 |
goto free_skb; |
1da177e4c
|
592 |
|
c54419321
|
593 |
tnl_params = (const struct iphdr *)skb->data; |
1da177e4c
|
594 |
|
c54419321
|
595 596 597 598 |
/* Pull skb since ip_tunnel_xmit() needs skb->data pointing * to gre header. */ skb_pull(skb, tunnel->hlen + sizeof(struct iphdr)); |
8a0033a94
|
599 |
skb_reset_mac_header(skb); |
c54419321
|
600 601 602 |
} else { if (skb_cow_head(skb, dev->needed_headroom)) goto free_skb; |
1da177e4c
|
603 |
|
c54419321
|
604 |
tnl_params = &tunnel->parms.iph; |
1da177e4c
|
605 |
} |
aed069df0
|
606 607 |
if (gre_handle_offloads(skb, !!(tunnel->parms.o_flags & TUNNEL_CSUM))) goto free_skb; |
8a0033a94
|
608 |
|
c54419321
|
609 |
__gre_xmit(skb, dev, tnl_params, skb->protocol); |
6ed106549
|
610 |
return NETDEV_TX_OK; |
1da177e4c
|
611 |
|
c54419321
|
612 |
free_skb: |
3acfa1e73
|
613 |
kfree_skb(skb); |
c54419321
|
614 |
dev->stats.tx_dropped++; |
6ed106549
|
615 |
return NETDEV_TX_OK; |
1da177e4c
|
616 |
} |
84e54fe0a
|
617 618 619 620 621 |
static netdev_tx_t erspan_xmit(struct sk_buff *skb, struct net_device *dev) { struct ip_tunnel *tunnel = netdev_priv(dev); bool truncate = false; |
20704bd16
|
622 |
__be16 proto; |
84e54fe0a
|
623 |
|
cb9f1b783
|
624 625 |
if (!pskb_inet_may_pull(skb)) goto free_skb; |
1a66a836d
|
626 |
if (tunnel->collect_md) { |
20704bd16
|
627 |
erspan_fb_xmit(skb, dev); |
1a66a836d
|
628 629 |
return NETDEV_TX_OK; } |
84e54fe0a
|
630 631 632 633 634 |
if (gre_handle_offloads(skb, false)) goto free_skb; if (skb_cow_head(skb, dev->needed_headroom)) goto free_skb; |
f192970de
|
635 636 |
if (skb->len > dev->mtu + dev->hard_header_len) { pskb_trim(skb, dev->mtu + dev->hard_header_len); |
84e54fe0a
|
637 638 639 640 |
truncate = true; } /* Push ERSPAN header */ |
f989d546a
|
641 642 643 644 |
if (tunnel->erspan_ver == 0) { proto = htons(ETH_P_ERSPAN); tunnel->parms.o_flags &= ~TUNNEL_SEQ; } else if (tunnel->erspan_ver == 1) { |
c69de58ba
|
645 646 |
erspan_build_header(skb, ntohl(tunnel->parms.o_key), tunnel->index, |
f551c91de
|
647 |
truncate, true); |
20704bd16
|
648 649 |
proto = htons(ETH_P_ERSPAN); } else if (tunnel->erspan_ver == 2) { |
c69de58ba
|
650 |
erspan_build_header_v2(skb, ntohl(tunnel->parms.o_key), |
f551c91de
|
651 652 |
tunnel->dir, tunnel->hwid, truncate, true); |
20704bd16
|
653 654 |
proto = htons(ETH_P_ERSPAN2); } else { |
02f99df18
|
655 |
goto free_skb; |
20704bd16
|
656 |
} |
f551c91de
|
657 |
|
84e54fe0a
|
658 |
tunnel->parms.o_flags &= ~TUNNEL_KEY; |
20704bd16
|
659 |
__gre_xmit(skb, dev, &tunnel->parms.iph, proto); |
84e54fe0a
|
660 661 662 663 664 665 666 |
return NETDEV_TX_OK; free_skb: kfree_skb(skb); dev->stats.tx_dropped++; return NETDEV_TX_OK; } |
c54419321
|
667 668 |
static netdev_tx_t gre_tap_xmit(struct sk_buff *skb, struct net_device *dev) |
ee34c1eb3
|
669 |
{ |
c54419321
|
670 |
struct ip_tunnel *tunnel = netdev_priv(dev); |
ee34c1eb3
|
671 |
|
cb9f1b783
|
672 673 |
if (!pskb_inet_may_pull(skb)) goto free_skb; |
2e15ea390
|
674 |
if (tunnel->collect_md) { |
2090714e1
|
675 |
gre_fb_xmit(skb, dev, htons(ETH_P_TEB)); |
2e15ea390
|
676 677 |
return NETDEV_TX_OK; } |
aed069df0
|
678 679 |
if (gre_handle_offloads(skb, !!(tunnel->parms.o_flags & TUNNEL_CSUM))) goto free_skb; |
ee34c1eb3
|
680 |
|
c54419321
|
681 682 |
if (skb_cow_head(skb, dev->needed_headroom)) goto free_skb; |
42aa91626
|
683 |
|
c54419321
|
684 |
__gre_xmit(skb, dev, &tunnel->parms.iph, htons(ETH_P_TEB)); |
c54419321
|
685 |
return NETDEV_TX_OK; |
ee34c1eb3
|
686 |
|
c54419321
|
687 |
free_skb: |
3acfa1e73
|
688 |
kfree_skb(skb); |
c54419321
|
689 690 |
dev->stats.tx_dropped++; return NETDEV_TX_OK; |
ee34c1eb3
|
691 |
} |
dd9d598c6
|
692 693 694 695 696 697 698 699 700 |
static void ipgre_link_update(struct net_device *dev, bool set_mtu) { struct ip_tunnel *tunnel = netdev_priv(dev); int len; len = tunnel->tun_hlen; tunnel->tun_hlen = gre_calc_hlen(tunnel->parms.o_flags); len = tunnel->tun_hlen - len; tunnel->hlen = tunnel->hlen + len; |
fdafed459
|
701 702 703 704 |
if (dev->header_ops) dev->hard_header_len += len; else dev->needed_headroom += len; |
dd9d598c6
|
705 706 707 708 709 710 711 712 |
if (set_mtu) dev->mtu = max_t(int, dev->mtu - len, 68); if (!(tunnel->parms.o_flags & TUNNEL_SEQ)) { if (!(tunnel->parms.o_flags & TUNNEL_CSUM) || tunnel->encap.type == TUNNEL_ENCAP_NONE) { dev->features |= NETIF_F_GSO_SOFTWARE; dev->hw_features |= NETIF_F_GSO_SOFTWARE; |
1cc5954f4
|
713 714 715 |
} else { dev->features &= ~NETIF_F_GSO_SOFTWARE; dev->hw_features &= ~NETIF_F_GSO_SOFTWARE; |
dd9d598c6
|
716 717 |
} dev->features |= NETIF_F_LLTX; |
1cc5954f4
|
718 719 720 |
} else { dev->hw_features &= ~NETIF_F_GSO_SOFTWARE; dev->features &= ~(NETIF_F_LLTX | NETIF_F_GSO_SOFTWARE); |
dd9d598c6
|
721 722 |
} } |
607259a69
|
723 724 |
static int ipgre_tunnel_ctl(struct net_device *dev, struct ip_tunnel_parm *p, int cmd) |
1da177e4c
|
725 |
{ |
a0efab67a
|
726 |
int err; |
1da177e4c
|
727 |
|
6c734fb85
|
728 |
if (cmd == SIOCADDTUNNEL || cmd == SIOCCHGTUNNEL) { |
607259a69
|
729 730 731 |
if (p->iph.version != 4 || p->iph.protocol != IPPROTO_GRE || p->iph.ihl != 5 || (p->iph.frag_off & htons(~IP_DF)) || ((p->i_flags | p->o_flags) & (GRE_VERSION | GRE_ROUTING))) |
6c734fb85
|
732 |
return -EINVAL; |
1da177e4c
|
733 |
} |
a0efab67a
|
734 |
|
607259a69
|
735 736 |
p->i_flags = gre_flags_to_tnl_flags(p->i_flags); p->o_flags = gre_flags_to_tnl_flags(p->o_flags); |
1da177e4c
|
737 |
|
607259a69
|
738 |
err = ip_tunnel_ctl(dev, p, cmd); |
c54419321
|
739 740 |
if (err) return err; |
1da177e4c
|
741 |
|
a0efab67a
|
742 743 |
if (cmd == SIOCCHGTUNNEL) { struct ip_tunnel *t = netdev_priv(dev); |
607259a69
|
744 745 |
t->parms.i_flags = p->i_flags; t->parms.o_flags = p->o_flags; |
a0efab67a
|
746 747 748 749 |
if (strcmp(dev->rtnl_link_ops->kind, "erspan")) ipgre_link_update(dev, true); } |
607259a69
|
750 751 |
p->i_flags = gre_tnl_flags_to_gre_flags(p->i_flags); p->o_flags = gre_tnl_flags_to_gre_flags(p->o_flags); |
1da177e4c
|
752 753 |
return 0; } |
1da177e4c
|
754 755 756 757 758 759 760 761 762 |
/* Nice toy. Unfortunately, useless in real life :-) It allows to construct virtual multiprotocol broadcast "LAN" over the Internet, provided multicast routing is tuned. I have no idea was this bicycle invented before me, so that I had to set ARPHRD_IPGRE to a random value. I have an impression, that Cisco could make something similar, but this feature is apparently missing in IOS<=11.2(8). |
e905a9eda
|
763 |
|
1da177e4c
|
764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 |
I set up 10.66.66/24 and fec0:6666:6666::0/96 as virtual networks with broadcast 224.66.66.66. If you have access to mbone, play with me :-) ping -t 255 224.66.66.66 If nobody answers, mbone does not work. ip tunnel add Universe mode gre remote 224.66.66.66 local <Your_real_addr> ttl 255 ip addr add 10.66.66.<somewhat>/24 dev Universe ifconfig Universe up ifconfig Universe add fe80::<Your_real_addr>/10 ifconfig Universe add fec0:6666:6666::<Your_real_addr>/96 ftp 10.66.66.66 ... ftp fec0:6666:6666::193.233.7.65 ... |
1da177e4c
|
780 |
*/ |
3b04ddde0
|
781 782 |
static int ipgre_header(struct sk_buff *skb, struct net_device *dev, unsigned short type, |
1507850b4
|
783 |
const void *daddr, const void *saddr, unsigned int len) |
1da177e4c
|
784 |
{ |
2941a4863
|
785 |
struct ip_tunnel *t = netdev_priv(dev); |
c54419321
|
786 787 |
struct iphdr *iph; struct gre_base_hdr *greh; |
1da177e4c
|
788 |
|
d58ff3512
|
789 |
iph = skb_push(skb, t->hlen + sizeof(*iph)); |
c54419321
|
790 |
greh = (struct gre_base_hdr *)(iph+1); |
95f5c64c3
|
791 |
greh->flags = gre_tnl_flags_to_gre_flags(t->parms.o_flags); |
c54419321
|
792 |
greh->protocol = htons(type); |
1da177e4c
|
793 |
|
c54419321
|
794 |
memcpy(iph, &t->parms.iph, sizeof(struct iphdr)); |
e905a9eda
|
795 |
|
c54419321
|
796 |
/* Set the source hardware address. */ |
1da177e4c
|
797 798 |
if (saddr) memcpy(&iph->saddr, saddr, 4); |
6d55cb91a
|
799 |
if (daddr) |
1da177e4c
|
800 |
memcpy(&iph->daddr, daddr, 4); |
6d55cb91a
|
801 |
if (iph->daddr) |
77a482bdb
|
802 |
return t->hlen + sizeof(*iph); |
e905a9eda
|
803 |
|
c54419321
|
804 |
return -(t->hlen + sizeof(*iph)); |
1da177e4c
|
805 |
} |
6a5f44d7a
|
806 807 |
static int ipgre_header_parse(const struct sk_buff *skb, unsigned char *haddr) { |
b71d1d426
|
808 |
const struct iphdr *iph = (const struct iphdr *) skb_mac_header(skb); |
6a5f44d7a
|
809 810 811 |
memcpy(haddr, &iph->saddr, 4); return 4; } |
3b04ddde0
|
812 813 |
static const struct header_ops ipgre_header_ops = { .create = ipgre_header, |
6a5f44d7a
|
814 |
.parse = ipgre_header_parse, |
3b04ddde0
|
815 |
}; |
6a5f44d7a
|
816 |
#ifdef CONFIG_NET_IPGRE_BROADCAST |
1da177e4c
|
817 818 |
static int ipgre_open(struct net_device *dev) { |
2941a4863
|
819 |
struct ip_tunnel *t = netdev_priv(dev); |
1da177e4c
|
820 |
|
f97c1e0c6
|
821 |
if (ipv4_is_multicast(t->parms.iph.daddr)) { |
cbb1e85f9
|
822 823 |
struct flowi4 fl4; struct rtable *rt; |
b57708add
|
824 |
rt = ip_route_output_gre(t->net, &fl4, |
cbb1e85f9
|
825 826 827 828 829 |
t->parms.iph.daddr, t->parms.iph.saddr, t->parms.o_key, RT_TOS(t->parms.iph.tos), t->parms.link); |
b23dd4fe4
|
830 |
if (IS_ERR(rt)) |
1da177e4c
|
831 |
return -EADDRNOTAVAIL; |
d8d1f30b9
|
832 |
dev = rt->dst.dev; |
1da177e4c
|
833 |
ip_rt_put(rt); |
51456b291
|
834 |
if (!__in_dev_get_rtnl(dev)) |
1da177e4c
|
835 836 |
return -EADDRNOTAVAIL; t->mlink = dev->ifindex; |
e5ed63991
|
837 |
ip_mc_inc_group(__in_dev_get_rtnl(dev), t->parms.iph.daddr); |
1da177e4c
|
838 839 840 841 842 843 |
} return 0; } static int ipgre_close(struct net_device *dev) { |
2941a4863
|
844 |
struct ip_tunnel *t = netdev_priv(dev); |
b8c26a33c
|
845 |
|
f97c1e0c6
|
846 |
if (ipv4_is_multicast(t->parms.iph.daddr) && t->mlink) { |
7fee0ca23
|
847 |
struct in_device *in_dev; |
b57708add
|
848 |
in_dev = inetdev_by_index(t->net, t->mlink); |
8723e1b4a
|
849 |
if (in_dev) |
1da177e4c
|
850 |
ip_mc_dec_group(in_dev, t->parms.iph.daddr); |
1da177e4c
|
851 852 853 |
} return 0; } |
1da177e4c
|
854 |
#endif |
b8c26a33c
|
855 856 |
static const struct net_device_ops ipgre_netdev_ops = { .ndo_init = ipgre_tunnel_init, |
c54419321
|
857 |
.ndo_uninit = ip_tunnel_uninit, |
b8c26a33c
|
858 859 860 861 |
#ifdef CONFIG_NET_IPGRE_BROADCAST .ndo_open = ipgre_open, .ndo_stop = ipgre_close, #endif |
c54419321
|
862 |
.ndo_start_xmit = ipgre_xmit, |
607259a69
|
863 |
.ndo_do_ioctl = ip_tunnel_ioctl, |
c54419321
|
864 865 |
.ndo_change_mtu = ip_tunnel_change_mtu, .ndo_get_stats64 = ip_tunnel_get_stats64, |
1e99584b9
|
866 |
.ndo_get_iflink = ip_tunnel_get_iflink, |
607259a69
|
867 |
.ndo_tunnel_ctl = ipgre_tunnel_ctl, |
b8c26a33c
|
868 |
}; |
6b78f16e4
|
869 870 871 872 |
#define GRE_FEATURES (NETIF_F_SG | \ NETIF_F_FRAGLIST | \ NETIF_F_HIGHDMA | \ NETIF_F_HW_CSUM) |
1da177e4c
|
873 874 |
static void ipgre_tunnel_setup(struct net_device *dev) { |
b8c26a33c
|
875 |
dev->netdev_ops = &ipgre_netdev_ops; |
5a4552752
|
876 |
dev->type = ARPHRD_IPGRE; |
c54419321
|
877 878 |
ip_tunnel_setup(dev, ipgre_net_id); } |
1da177e4c
|
879 |
|
c54419321
|
880 881 882 883 884 |
static void __gre_tunnel_init(struct net_device *dev) { struct ip_tunnel *tunnel; tunnel = netdev_priv(dev); |
95f5c64c3
|
885 |
tunnel->tun_hlen = gre_calc_hlen(tunnel->parms.o_flags); |
c54419321
|
886 |
tunnel->parms.iph.protocol = IPPROTO_GRE; |
4565e9919
|
887 |
tunnel->hlen = tunnel->tun_hlen + tunnel->encap_hlen; |
fdafed459
|
888 |
dev->needed_headroom = tunnel->hlen + sizeof(tunnel->parms.iph); |
4565e9919
|
889 |
|
b57708add
|
890 |
dev->features |= GRE_FEATURES; |
6b78f16e4
|
891 |
dev->hw_features |= GRE_FEATURES; |
c54419321
|
892 893 |
if (!(tunnel->parms.o_flags & TUNNEL_SEQ)) { |
a0ca153f9
|
894 895 896 897 898 899 900 901 902 |
/* TCP offload with GRE SEQ is not supported, nor * can we support 2 levels of outer headers requiring * an update. */ if (!(tunnel->parms.o_flags & TUNNEL_CSUM) || (tunnel->encap.type == TUNNEL_ENCAP_NONE)) { dev->features |= NETIF_F_GSO_SOFTWARE; dev->hw_features |= NETIF_F_GSO_SOFTWARE; } |
c54419321
|
903 904 905 906 907 |
/* Can use a lockless transmit, unless we generate * output sequences */ dev->features |= NETIF_F_LLTX; } |
1da177e4c
|
908 909 910 911 |
} static int ipgre_tunnel_init(struct net_device *dev) { |
c54419321
|
912 913 |
struct ip_tunnel *tunnel = netdev_priv(dev); struct iphdr *iph = &tunnel->parms.iph; |
1da177e4c
|
914 |
|
c54419321
|
915 |
__gre_tunnel_init(dev); |
1da177e4c
|
916 |
|
c54419321
|
917 918 |
memcpy(dev->dev_addr, &iph->saddr, 4); memcpy(dev->broadcast, &iph->daddr, 4); |
1da177e4c
|
919 |
|
c54419321
|
920 |
dev->flags = IFF_NOARP; |
028758788
|
921 |
netif_keep_dst(dev); |
c54419321
|
922 |
dev->addr_len = 4; |
1da177e4c
|
923 |
|
a64b04d86
|
924 |
if (iph->daddr && !tunnel->collect_md) { |
1da177e4c
|
925 |
#ifdef CONFIG_NET_IPGRE_BROADCAST |
f97c1e0c6
|
926 |
if (ipv4_is_multicast(iph->daddr)) { |
1da177e4c
|
927 928 929 |
if (!iph->saddr) return -EINVAL; dev->flags = IFF_BROADCAST; |
3b04ddde0
|
930 |
dev->header_ops = &ipgre_header_ops; |
fdafed459
|
931 932 |
dev->hard_header_len = tunnel->hlen + sizeof(*iph); dev->needed_headroom = 0; |
1da177e4c
|
933 934 |
} #endif |
a64b04d86
|
935 |
} else if (!tunnel->collect_md) { |
6a5f44d7a
|
936 |
dev->header_ops = &ipgre_header_ops; |
fdafed459
|
937 938 |
dev->hard_header_len = tunnel->hlen + sizeof(*iph); dev->needed_headroom = 0; |
a64b04d86
|
939 |
} |
1da177e4c
|
940 |
|
c54419321
|
941 |
return ip_tunnel_init(dev); |
1da177e4c
|
942 |
} |
9f57c67c3
|
943 944 945 |
static const struct gre_protocol ipgre_protocol = { .handler = gre_rcv, .err_handler = gre_err, |
1da177e4c
|
946 |
}; |
2c8c1e729
|
947 |
static int __net_init ipgre_init_net(struct net *net) |
59a4c7594
|
948 |
{ |
c54419321
|
949 |
return ip_tunnel_init_net(net, ipgre_net_id, &ipgre_link_ops, NULL); |
59a4c7594
|
950 |
} |
64bc17811
|
951 |
static void __net_exit ipgre_exit_batch_net(struct list_head *list_net) |
59a4c7594
|
952 |
{ |
64bc17811
|
953 |
ip_tunnel_delete_nets(list_net, ipgre_net_id, &ipgre_link_ops); |
59a4c7594
|
954 955 956 957 |
} static struct pernet_operations ipgre_net_ops = { .init = ipgre_init_net, |
64bc17811
|
958 |
.exit_batch = ipgre_exit_batch_net, |
cfb8fbf22
|
959 |
.id = &ipgre_net_id, |
c54419321
|
960 |
.size = sizeof(struct ip_tunnel_net), |
59a4c7594
|
961 |
}; |
1da177e4c
|
962 |
|
a8b8a889e
|
963 964 |
static int ipgre_tunnel_validate(struct nlattr *tb[], struct nlattr *data[], struct netlink_ext_ack *extack) |
c19e654dd
|
965 966 967 968 969 970 971 972 973 974 975 976 977 |
{ __be16 flags; if (!data) return 0; flags = 0; if (data[IFLA_GRE_IFLAGS]) flags |= nla_get_be16(data[IFLA_GRE_IFLAGS]); if (data[IFLA_GRE_OFLAGS]) flags |= nla_get_be16(data[IFLA_GRE_OFLAGS]); if (flags & (GRE_VERSION|GRE_ROUTING)) return -EINVAL; |
946b636f1
|
978 979 980 981 |
if (data[IFLA_GRE_COLLECT_METADATA] && data[IFLA_GRE_ENCAP_TYPE] && nla_get_u16(data[IFLA_GRE_ENCAP_TYPE]) != TUNNEL_ENCAP_NONE) return -EINVAL; |
c19e654dd
|
982 983 |
return 0; } |
a8b8a889e
|
984 985 |
static int ipgre_tap_validate(struct nlattr *tb[], struct nlattr *data[], struct netlink_ext_ack *extack) |
e1a800022
|
986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 |
{ __be32 daddr; if (tb[IFLA_ADDRESS]) { if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN) return -EINVAL; if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS]))) return -EADDRNOTAVAIL; } if (!data) goto out; if (data[IFLA_GRE_REMOTE]) { memcpy(&daddr, nla_data(data[IFLA_GRE_REMOTE]), 4); if (!daddr) return -EINVAL; } out: |
a8b8a889e
|
1006 |
return ipgre_tunnel_validate(tb, data, extack); |
e1a800022
|
1007 |
} |
84e54fe0a
|
1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 |
static int erspan_validate(struct nlattr *tb[], struct nlattr *data[], struct netlink_ext_ack *extack) { __be16 flags = 0; int ret; if (!data) return 0; ret = ipgre_tap_validate(tb, data, extack); if (ret) return ret; |
51fa960d3
|
1020 1021 |
if (data[IFLA_GRE_ERSPAN_VER] && nla_get_u8(data[IFLA_GRE_ERSPAN_VER]) == 0) |
f989d546a
|
1022 1023 1024 |
return 0; /* ERSPAN type II/III should only have GRE sequence and key flag */ |
1a66a836d
|
1025 1026 1027 1028 1029 1030 |
if (data[IFLA_GRE_OFLAGS]) flags |= nla_get_be16(data[IFLA_GRE_OFLAGS]); if (data[IFLA_GRE_IFLAGS]) flags |= nla_get_be16(data[IFLA_GRE_IFLAGS]); if (!data[IFLA_GRE_COLLECT_METADATA] && flags != (GRE_SEQ | GRE_KEY)) |
84e54fe0a
|
1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 |
return -EINVAL; /* ERSPAN Session ID only has 10-bit. Since we reuse * 32-bit key field as ID, check it's range. */ if (data[IFLA_GRE_IKEY] && (ntohl(nla_get_be32(data[IFLA_GRE_IKEY])) & ~ID_MASK)) return -EINVAL; if (data[IFLA_GRE_OKEY] && (ntohl(nla_get_be32(data[IFLA_GRE_OKEY])) & ~ID_MASK)) return -EINVAL; return 0; } |
22a59be8b
|
1046 |
static int ipgre_netlink_parms(struct net_device *dev, |
2e15ea390
|
1047 1048 |
struct nlattr *data[], struct nlattr *tb[], |
9830ad4c6
|
1049 1050 |
struct ip_tunnel_parm *parms, __u32 *fwmark) |
c19e654dd
|
1051 |
{ |
22a59be8b
|
1052 |
struct ip_tunnel *t = netdev_priv(dev); |
7bb82d924
|
1053 |
memset(parms, 0, sizeof(*parms)); |
c19e654dd
|
1054 1055 1056 1057 |
parms->iph.protocol = IPPROTO_GRE; if (!data) |
22a59be8b
|
1058 |
return 0; |
c19e654dd
|
1059 1060 1061 1062 1063 |
if (data[IFLA_GRE_LINK]) parms->link = nla_get_u32(data[IFLA_GRE_LINK]); if (data[IFLA_GRE_IFLAGS]) |
c54419321
|
1064 |
parms->i_flags = gre_flags_to_tnl_flags(nla_get_be16(data[IFLA_GRE_IFLAGS])); |
c19e654dd
|
1065 1066 |
if (data[IFLA_GRE_OFLAGS]) |
c54419321
|
1067 |
parms->o_flags = gre_flags_to_tnl_flags(nla_get_be16(data[IFLA_GRE_OFLAGS])); |
c19e654dd
|
1068 1069 1070 1071 1072 1073 1074 1075 |
if (data[IFLA_GRE_IKEY]) parms->i_key = nla_get_be32(data[IFLA_GRE_IKEY]); if (data[IFLA_GRE_OKEY]) parms->o_key = nla_get_be32(data[IFLA_GRE_OKEY]); if (data[IFLA_GRE_LOCAL]) |
67b61f6c1
|
1076 |
parms->iph.saddr = nla_get_in_addr(data[IFLA_GRE_LOCAL]); |
c19e654dd
|
1077 1078 |
if (data[IFLA_GRE_REMOTE]) |
67b61f6c1
|
1079 |
parms->iph.daddr = nla_get_in_addr(data[IFLA_GRE_REMOTE]); |
c19e654dd
|
1080 1081 1082 1083 1084 1085 |
if (data[IFLA_GRE_TTL]) parms->iph.ttl = nla_get_u8(data[IFLA_GRE_TTL]); if (data[IFLA_GRE_TOS]) parms->iph.tos = nla_get_u8(data[IFLA_GRE_TOS]); |
22a59be8b
|
1086 1087 1088 |
if (!data[IFLA_GRE_PMTUDISC] || nla_get_u8(data[IFLA_GRE_PMTUDISC])) { if (t->ignore_df) return -EINVAL; |
c19e654dd
|
1089 |
parms->iph.frag_off = htons(IP_DF); |
22a59be8b
|
1090 |
} |
2e15ea390
|
1091 1092 |
if (data[IFLA_GRE_COLLECT_METADATA]) { |
2e15ea390
|
1093 |
t->collect_md = true; |
e271c7b44
|
1094 1095 |
if (dev->type == ARPHRD_IPGRE) dev->type = ARPHRD_NONE; |
2e15ea390
|
1096 |
} |
22a59be8b
|
1097 1098 1099 1100 1101 1102 1103 |
if (data[IFLA_GRE_IGNORE_DF]) { if (nla_get_u8(data[IFLA_GRE_IGNORE_DF]) && (parms->iph.frag_off & htons(IP_DF))) return -EINVAL; t->ignore_df = !!nla_get_u8(data[IFLA_GRE_IGNORE_DF]); } |
9830ad4c6
|
1104 1105 |
if (data[IFLA_GRE_FWMARK]) *fwmark = nla_get_u32(data[IFLA_GRE_FWMARK]); |
e1f8f78ff
|
1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 |
return 0; } static int erspan_netlink_parms(struct net_device *dev, struct nlattr *data[], struct nlattr *tb[], struct ip_tunnel_parm *parms, __u32 *fwmark) { struct ip_tunnel *t = netdev_priv(dev); int err; err = ipgre_netlink_parms(dev, data, tb, parms, fwmark); if (err) return err; |
32ca98fea
|
1121 1122 |
if (!data) return 0; |
e1f8f78ff
|
1123 |
|
f551c91de
|
1124 1125 |
if (data[IFLA_GRE_ERSPAN_VER]) { t->erspan_ver = nla_get_u8(data[IFLA_GRE_ERSPAN_VER]); |
84e54fe0a
|
1126 |
|
f989d546a
|
1127 |
if (t->erspan_ver > 2) |
84e54fe0a
|
1128 1129 |
return -EINVAL; } |
f551c91de
|
1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 |
if (t->erspan_ver == 1) { if (data[IFLA_GRE_ERSPAN_INDEX]) { t->index = nla_get_u32(data[IFLA_GRE_ERSPAN_INDEX]); if (t->index & ~INDEX_MASK) return -EINVAL; } } else if (t->erspan_ver == 2) { if (data[IFLA_GRE_ERSPAN_DIR]) { t->dir = nla_get_u8(data[IFLA_GRE_ERSPAN_DIR]); if (t->dir & ~(DIR_MASK >> DIR_OFFSET)) return -EINVAL; } if (data[IFLA_GRE_ERSPAN_HWID]) { t->hwid = nla_get_u16(data[IFLA_GRE_ERSPAN_HWID]); if (t->hwid & ~(HWID_MASK >> HWID_OFFSET)) return -EINVAL; } } |
22a59be8b
|
1148 |
return 0; |
c19e654dd
|
1149 |
} |
4565e9919
|
1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 |
/* This function returns true when ENCAP attributes are present in the nl msg */ static bool ipgre_netlink_encap_parms(struct nlattr *data[], struct ip_tunnel_encap *ipencap) { bool ret = false; memset(ipencap, 0, sizeof(*ipencap)); if (!data) return ret; if (data[IFLA_GRE_ENCAP_TYPE]) { ret = true; ipencap->type = nla_get_u16(data[IFLA_GRE_ENCAP_TYPE]); } if (data[IFLA_GRE_ENCAP_FLAGS]) { ret = true; ipencap->flags = nla_get_u16(data[IFLA_GRE_ENCAP_FLAGS]); } if (data[IFLA_GRE_ENCAP_SPORT]) { ret = true; |
3e97fa705
|
1173 |
ipencap->sport = nla_get_be16(data[IFLA_GRE_ENCAP_SPORT]); |
4565e9919
|
1174 1175 1176 1177 |
} if (data[IFLA_GRE_ENCAP_DPORT]) { ret = true; |
3e97fa705
|
1178 |
ipencap->dport = nla_get_be16(data[IFLA_GRE_ENCAP_DPORT]); |
4565e9919
|
1179 1180 1181 1182 |
} return ret; } |
c54419321
|
1183 |
static int gre_tap_init(struct net_device *dev) |
e1a800022
|
1184 |
{ |
c54419321
|
1185 |
__gre_tunnel_init(dev); |
bec94d430
|
1186 |
dev->priv_flags |= IFF_LIVE_ADDR_CHANGE; |
d51711c05
|
1187 |
netif_keep_dst(dev); |
e1a800022
|
1188 |
|
c54419321
|
1189 |
return ip_tunnel_init(dev); |
e1a800022
|
1190 |
} |
c54419321
|
1191 1192 1193 1194 |
static const struct net_device_ops gre_tap_netdev_ops = { .ndo_init = gre_tap_init, .ndo_uninit = ip_tunnel_uninit, .ndo_start_xmit = gre_tap_xmit, |
b8c26a33c
|
1195 1196 |
.ndo_set_mac_address = eth_mac_addr, .ndo_validate_addr = eth_validate_addr, |
c54419321
|
1197 1198 |
.ndo_change_mtu = ip_tunnel_change_mtu, .ndo_get_stats64 = ip_tunnel_get_stats64, |
1e99584b9
|
1199 |
.ndo_get_iflink = ip_tunnel_get_iflink, |
fc4099f17
|
1200 |
.ndo_fill_metadata_dst = gre_fill_metadata_dst, |
b8c26a33c
|
1201 |
}; |
84e54fe0a
|
1202 1203 1204 |
static int erspan_tunnel_init(struct net_device *dev) { struct ip_tunnel *tunnel = netdev_priv(dev); |
84e54fe0a
|
1205 |
|
f989d546a
|
1206 1207 1208 1209 |
if (tunnel->erspan_ver == 0) tunnel->tun_hlen = 4; /* 4-byte GRE hdr. */ else tunnel->tun_hlen = 8; /* 8-byte GRE hdr. */ |
84e54fe0a
|
1210 |
tunnel->parms.iph.protocol = IPPROTO_GRE; |
c122fda27
|
1211 |
tunnel->hlen = tunnel->tun_hlen + tunnel->encap_hlen + |
f551c91de
|
1212 |
erspan_hdr_len(tunnel->erspan_ver); |
84e54fe0a
|
1213 |
|
84e54fe0a
|
1214 1215 1216 |
dev->features |= GRE_FEATURES; dev->hw_features |= GRE_FEATURES; dev->priv_flags |= IFF_LIVE_ADDR_CHANGE; |
c84bed440
|
1217 |
netif_keep_dst(dev); |
84e54fe0a
|
1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 |
return ip_tunnel_init(dev); } static const struct net_device_ops erspan_netdev_ops = { .ndo_init = erspan_tunnel_init, .ndo_uninit = ip_tunnel_uninit, .ndo_start_xmit = erspan_xmit, .ndo_set_mac_address = eth_mac_addr, .ndo_validate_addr = eth_validate_addr, .ndo_change_mtu = ip_tunnel_change_mtu, .ndo_get_stats64 = ip_tunnel_get_stats64, .ndo_get_iflink = ip_tunnel_get_iflink, .ndo_fill_metadata_dst = gre_fill_metadata_dst, }; |
e1a800022
|
1233 1234 |
static void ipgre_tap_setup(struct net_device *dev) { |
e1a800022
|
1235 |
ether_setup(dev); |
cfddd4c33
|
1236 |
dev->max_mtu = 0; |
d13b161c2
|
1237 1238 1239 |
dev->netdev_ops = &gre_tap_netdev_ops; dev->priv_flags &= ~IFF_TX_SKB_SHARING; dev->priv_flags |= IFF_LIVE_ADDR_CHANGE; |
c54419321
|
1240 |
ip_tunnel_setup(dev, gre_tap_net_id); |
e1a800022
|
1241 |
} |
e1f8f78ff
|
1242 1243 |
static int ipgre_newlink_encap_setup(struct net_device *dev, struct nlattr *data[]) |
c19e654dd
|
1244 |
{ |
4565e9919
|
1245 1246 1247 1248 |
struct ip_tunnel_encap ipencap; if (ipgre_netlink_encap_parms(data, &ipencap)) { struct ip_tunnel *t = netdev_priv(dev); |
e1f8f78ff
|
1249 |
int err = ip_tunnel_encap_setup(t, &ipencap); |
4565e9919
|
1250 1251 1252 1253 |
if (err < 0) return err; } |
c19e654dd
|
1254 |
|
e1f8f78ff
|
1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 |
return 0; } static int ipgre_newlink(struct net *src_net, struct net_device *dev, struct nlattr *tb[], struct nlattr *data[], struct netlink_ext_ack *extack) { struct ip_tunnel_parm p; __u32 fwmark = 0; int err; err = ipgre_newlink_encap_setup(dev, data); if (err) return err; |
9830ad4c6
|
1269 |
err = ipgre_netlink_parms(dev, data, tb, &p, &fwmark); |
22a59be8b
|
1270 1271 |
if (err < 0) return err; |
9830ad4c6
|
1272 |
return ip_tunnel_newlink(dev, tb, &p, fwmark); |
c19e654dd
|
1273 |
} |
e1f8f78ff
|
1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 |
static int erspan_newlink(struct net *src_net, struct net_device *dev, struct nlattr *tb[], struct nlattr *data[], struct netlink_ext_ack *extack) { struct ip_tunnel_parm p; __u32 fwmark = 0; int err; err = ipgre_newlink_encap_setup(dev, data); if (err) return err; err = erspan_netlink_parms(dev, data, tb, &p, &fwmark); if (err) return err; return ip_tunnel_newlink(dev, tb, &p, fwmark); } |
c19e654dd
|
1291 |
static int ipgre_changelink(struct net_device *dev, struct nlattr *tb[], |
ad744b223
|
1292 1293 |
struct nlattr *data[], struct netlink_ext_ack *extack) |
c19e654dd
|
1294 |
{ |
9830ad4c6
|
1295 |
struct ip_tunnel *t = netdev_priv(dev); |
9830ad4c6
|
1296 |
__u32 fwmark = t->fwmark; |
dd9d598c6
|
1297 |
struct ip_tunnel_parm p; |
22a59be8b
|
1298 |
int err; |
4565e9919
|
1299 |
|
e1f8f78ff
|
1300 1301 1302 |
err = ipgre_newlink_encap_setup(dev, data); if (err) return err; |
c19e654dd
|
1303 |
|
9830ad4c6
|
1304 |
err = ipgre_netlink_parms(dev, data, tb, &p, &fwmark); |
22a59be8b
|
1305 1306 |
if (err < 0) return err; |
dd9d598c6
|
1307 1308 1309 1310 1311 1312 1313 |
err = ip_tunnel_changelink(dev, tb, &p, fwmark); if (err < 0) return err; t->parms.i_flags = p.i_flags; t->parms.o_flags = p.o_flags; |
e1f8f78ff
|
1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 |
ipgre_link_update(dev, !tb[IFLA_MTU]); return 0; } static int erspan_changelink(struct net_device *dev, struct nlattr *tb[], struct nlattr *data[], struct netlink_ext_ack *extack) { struct ip_tunnel *t = netdev_priv(dev); __u32 fwmark = t->fwmark; struct ip_tunnel_parm p; int err; err = ipgre_newlink_encap_setup(dev, data); if (err) return err; err = erspan_netlink_parms(dev, data, tb, &p, &fwmark); if (err < 0) return err; err = ip_tunnel_changelink(dev, tb, &p, fwmark); if (err < 0) return err; t->parms.i_flags = p.i_flags; t->parms.o_flags = p.o_flags; |
dd9d598c6
|
1342 1343 |
return 0; |
c19e654dd
|
1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 |
} static size_t ipgre_get_size(const struct net_device *dev) { return /* IFLA_GRE_LINK */ nla_total_size(4) + /* IFLA_GRE_IFLAGS */ nla_total_size(2) + /* IFLA_GRE_OFLAGS */ nla_total_size(2) + /* IFLA_GRE_IKEY */ nla_total_size(4) + /* IFLA_GRE_OKEY */ nla_total_size(4) + /* IFLA_GRE_LOCAL */ nla_total_size(4) + /* IFLA_GRE_REMOTE */ nla_total_size(4) + /* IFLA_GRE_TTL */ nla_total_size(1) + /* IFLA_GRE_TOS */ nla_total_size(1) + /* IFLA_GRE_PMTUDISC */ nla_total_size(1) + |
4565e9919
|
1369 1370 1371 1372 1373 1374 1375 1376 |
/* IFLA_GRE_ENCAP_TYPE */ nla_total_size(2) + /* IFLA_GRE_ENCAP_FLAGS */ nla_total_size(2) + /* IFLA_GRE_ENCAP_SPORT */ nla_total_size(2) + /* IFLA_GRE_ENCAP_DPORT */ nla_total_size(2) + |
2e15ea390
|
1377 1378 |
/* IFLA_GRE_COLLECT_METADATA */ nla_total_size(0) + |
22a59be8b
|
1379 1380 |
/* IFLA_GRE_IGNORE_DF */ nla_total_size(1) + |
9830ad4c6
|
1381 1382 |
/* IFLA_GRE_FWMARK */ nla_total_size(4) + |
84e54fe0a
|
1383 1384 |
/* IFLA_GRE_ERSPAN_INDEX */ nla_total_size(4) + |
f551c91de
|
1385 1386 1387 1388 1389 1390 |
/* IFLA_GRE_ERSPAN_VER */ nla_total_size(1) + /* IFLA_GRE_ERSPAN_DIR */ nla_total_size(1) + /* IFLA_GRE_ERSPAN_HWID */ nla_total_size(2) + |
c19e654dd
|
1391 1392 1393 1394 1395 1396 1397 |
0; } static int ipgre_fill_info(struct sk_buff *skb, const struct net_device *dev) { struct ip_tunnel *t = netdev_priv(dev); struct ip_tunnel_parm *p = &t->parms; |
feaf5c796
|
1398 |
__be16 o_flags = p->o_flags; |
f989d546a
|
1399 1400 |
if (t->erspan_ver <= 2) { if (t->erspan_ver != 0 && !t->collect_md) |
2bdf700e5
|
1401 1402 1403 1404 1405 1406 1407 1408 |
o_flags |= TUNNEL_KEY; if (nla_put_u8(skb, IFLA_GRE_ERSPAN_VER, t->erspan_ver)) goto nla_put_failure; if (t->erspan_ver == 1) { if (nla_put_u32(skb, IFLA_GRE_ERSPAN_INDEX, t->index)) goto nla_put_failure; |
f989d546a
|
1409 |
} else if (t->erspan_ver == 2) { |
2bdf700e5
|
1410 1411 1412 1413 1414 1415 |
if (nla_put_u8(skb, IFLA_GRE_ERSPAN_DIR, t->dir)) goto nla_put_failure; if (nla_put_u16(skb, IFLA_GRE_ERSPAN_HWID, t->hwid)) goto nla_put_failure; } } |
c19e654dd
|
1416 |
|
f3756b79e
|
1417 |
if (nla_put_u32(skb, IFLA_GRE_LINK, p->link) || |
95f5c64c3
|
1418 1419 1420 |
nla_put_be16(skb, IFLA_GRE_IFLAGS, gre_tnl_flags_to_gre_flags(p->i_flags)) || nla_put_be16(skb, IFLA_GRE_OFLAGS, |
feaf5c796
|
1421 |
gre_tnl_flags_to_gre_flags(o_flags)) || |
f3756b79e
|
1422 1423 |
nla_put_be32(skb, IFLA_GRE_IKEY, p->i_key) || nla_put_be32(skb, IFLA_GRE_OKEY, p->o_key) || |
930345ea6
|
1424 1425 |
nla_put_in_addr(skb, IFLA_GRE_LOCAL, p->iph.saddr) || nla_put_in_addr(skb, IFLA_GRE_REMOTE, p->iph.daddr) || |
f3756b79e
|
1426 1427 1428 |
nla_put_u8(skb, IFLA_GRE_TTL, p->iph.ttl) || nla_put_u8(skb, IFLA_GRE_TOS, p->iph.tos) || nla_put_u8(skb, IFLA_GRE_PMTUDISC, |
9830ad4c6
|
1429 1430 |
!!(p->iph.frag_off & htons(IP_DF))) || nla_put_u32(skb, IFLA_GRE_FWMARK, t->fwmark)) |
f3756b79e
|
1431 |
goto nla_put_failure; |
4565e9919
|
1432 1433 1434 |
if (nla_put_u16(skb, IFLA_GRE_ENCAP_TYPE, t->encap.type) || |
3e97fa705
|
1435 1436 1437 1438 |
nla_put_be16(skb, IFLA_GRE_ENCAP_SPORT, t->encap.sport) || nla_put_be16(skb, IFLA_GRE_ENCAP_DPORT, t->encap.dport) || |
4565e9919
|
1439 |
nla_put_u16(skb, IFLA_GRE_ENCAP_FLAGS, |
e1b2cb655
|
1440 |
t->encap.flags)) |
4565e9919
|
1441 |
goto nla_put_failure; |
22a59be8b
|
1442 1443 |
if (nla_put_u8(skb, IFLA_GRE_IGNORE_DF, t->ignore_df)) goto nla_put_failure; |
2e15ea390
|
1444 1445 1446 1447 |
if (t->collect_md) { if (nla_put_flag(skb, IFLA_GRE_COLLECT_METADATA)) goto nla_put_failure; } |
c19e654dd
|
1448 1449 1450 1451 1452 |
return 0; nla_put_failure: return -EMSGSIZE; } |
84e54fe0a
|
1453 1454 |
static void erspan_setup(struct net_device *dev) { |
84581bdae
|
1455 |
struct ip_tunnel *t = netdev_priv(dev); |
84e54fe0a
|
1456 |
ether_setup(dev); |
0e141f757
|
1457 |
dev->max_mtu = 0; |
84e54fe0a
|
1458 1459 1460 1461 |
dev->netdev_ops = &erspan_netdev_ops; dev->priv_flags &= ~IFF_TX_SKB_SHARING; dev->priv_flags |= IFF_LIVE_ADDR_CHANGE; ip_tunnel_setup(dev, erspan_net_id); |
84581bdae
|
1462 |
t->erspan_ver = 1; |
84e54fe0a
|
1463 |
} |
c19e654dd
|
1464 1465 1466 1467 1468 1469 |
static const struct nla_policy ipgre_policy[IFLA_GRE_MAX + 1] = { [IFLA_GRE_LINK] = { .type = NLA_U32 }, [IFLA_GRE_IFLAGS] = { .type = NLA_U16 }, [IFLA_GRE_OFLAGS] = { .type = NLA_U16 }, [IFLA_GRE_IKEY] = { .type = NLA_U32 }, [IFLA_GRE_OKEY] = { .type = NLA_U32 }, |
c593642c8
|
1470 1471 |
[IFLA_GRE_LOCAL] = { .len = sizeof_field(struct iphdr, saddr) }, [IFLA_GRE_REMOTE] = { .len = sizeof_field(struct iphdr, daddr) }, |
c19e654dd
|
1472 1473 1474 |
[IFLA_GRE_TTL] = { .type = NLA_U8 }, [IFLA_GRE_TOS] = { .type = NLA_U8 }, [IFLA_GRE_PMTUDISC] = { .type = NLA_U8 }, |
4565e9919
|
1475 1476 1477 1478 |
[IFLA_GRE_ENCAP_TYPE] = { .type = NLA_U16 }, [IFLA_GRE_ENCAP_FLAGS] = { .type = NLA_U16 }, [IFLA_GRE_ENCAP_SPORT] = { .type = NLA_U16 }, [IFLA_GRE_ENCAP_DPORT] = { .type = NLA_U16 }, |
2e15ea390
|
1479 |
[IFLA_GRE_COLLECT_METADATA] = { .type = NLA_FLAG }, |
22a59be8b
|
1480 |
[IFLA_GRE_IGNORE_DF] = { .type = NLA_U8 }, |
9830ad4c6
|
1481 |
[IFLA_GRE_FWMARK] = { .type = NLA_U32 }, |
84e54fe0a
|
1482 |
[IFLA_GRE_ERSPAN_INDEX] = { .type = NLA_U32 }, |
f551c91de
|
1483 1484 1485 |
[IFLA_GRE_ERSPAN_VER] = { .type = NLA_U8 }, [IFLA_GRE_ERSPAN_DIR] = { .type = NLA_U8 }, [IFLA_GRE_ERSPAN_HWID] = { .type = NLA_U16 }, |
c19e654dd
|
1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 |
}; static struct rtnl_link_ops ipgre_link_ops __read_mostly = { .kind = "gre", .maxtype = IFLA_GRE_MAX, .policy = ipgre_policy, .priv_size = sizeof(struct ip_tunnel), .setup = ipgre_tunnel_setup, .validate = ipgre_tunnel_validate, .newlink = ipgre_newlink, .changelink = ipgre_changelink, |
c54419321
|
1497 |
.dellink = ip_tunnel_dellink, |
c19e654dd
|
1498 1499 |
.get_size = ipgre_get_size, .fill_info = ipgre_fill_info, |
1728d4fab
|
1500 |
.get_link_net = ip_tunnel_get_link_net, |
c19e654dd
|
1501 |
}; |
e1a800022
|
1502 1503 1504 1505 1506 1507 1508 1509 1510 |
static struct rtnl_link_ops ipgre_tap_ops __read_mostly = { .kind = "gretap", .maxtype = IFLA_GRE_MAX, .policy = ipgre_policy, .priv_size = sizeof(struct ip_tunnel), .setup = ipgre_tap_setup, .validate = ipgre_tap_validate, .newlink = ipgre_newlink, .changelink = ipgre_changelink, |
c54419321
|
1511 |
.dellink = ip_tunnel_dellink, |
e1a800022
|
1512 1513 |
.get_size = ipgre_get_size, .fill_info = ipgre_fill_info, |
1728d4fab
|
1514 |
.get_link_net = ip_tunnel_get_link_net, |
e1a800022
|
1515 |
}; |
84e54fe0a
|
1516 1517 1518 1519 1520 1521 1522 |
static struct rtnl_link_ops erspan_link_ops __read_mostly = { .kind = "erspan", .maxtype = IFLA_GRE_MAX, .policy = ipgre_policy, .priv_size = sizeof(struct ip_tunnel), .setup = erspan_setup, .validate = erspan_validate, |
e1f8f78ff
|
1523 1524 |
.newlink = erspan_newlink, .changelink = erspan_changelink, |
84e54fe0a
|
1525 1526 1527 1528 1529 |
.dellink = ip_tunnel_dellink, .get_size = ipgre_get_size, .fill_info = ipgre_fill_info, .get_link_net = ip_tunnel_get_link_net, }; |
b2acd1dc3
|
1530 1531 1532 1533 1534 |
struct net_device *gretap_fb_dev_create(struct net *net, const char *name, u8 name_assign_type) { struct nlattr *tb[IFLA_MAX + 1]; struct net_device *dev; |
106da663f
|
1535 |
LIST_HEAD(list_kill); |
b2acd1dc3
|
1536 1537 1538 1539 1540 1541 |
struct ip_tunnel *t; int err; memset(&tb, 0, sizeof(tb)); dev = rtnl_create_link(net, name, name_assign_type, |
d0522f1cd
|
1542 |
&ipgre_tap_ops, tb, NULL); |
b2acd1dc3
|
1543 1544 1545 1546 1547 1548 |
if (IS_ERR(dev)) return dev; /* Configure flow based GRE device. */ t = netdev_priv(dev); t->collect_md = true; |
7a3f4a185
|
1549 |
err = ipgre_newlink(net, dev, tb, NULL, NULL); |
106da663f
|
1550 1551 1552 1553 |
if (err < 0) { free_netdev(dev); return ERR_PTR(err); } |
7e059158d
|
1554 1555 1556 1557 1558 1559 1560 |
/* openvswitch users expect packet sizes to be unrestricted, * so set the largest MTU we can. */ err = __ip_tunnel_change_mtu(dev, IP_MAX_MTU, false); if (err) goto out; |
da6f1da81
|
1561 1562 1563 |
err = rtnl_configure_link(dev, NULL); if (err < 0) goto out; |
b2acd1dc3
|
1564 1565 |
return dev; out: |
106da663f
|
1566 1567 |
ip_tunnel_dellink(dev, &list_kill); unregister_netdevice_many(&list_kill); |
b2acd1dc3
|
1568 1569 1570 |
return ERR_PTR(err); } EXPORT_SYMBOL_GPL(gretap_fb_dev_create); |
c54419321
|
1571 1572 |
static int __net_init ipgre_tap_init_net(struct net *net) { |
2e15ea390
|
1573 |
return ip_tunnel_init_net(net, gre_tap_net_id, &ipgre_tap_ops, "gretap0"); |
c54419321
|
1574 |
} |
64bc17811
|
1575 |
static void __net_exit ipgre_tap_exit_batch_net(struct list_head *list_net) |
c54419321
|
1576 |
{ |
64bc17811
|
1577 |
ip_tunnel_delete_nets(list_net, gre_tap_net_id, &ipgre_tap_ops); |
c54419321
|
1578 1579 1580 1581 |
} static struct pernet_operations ipgre_tap_net_ops = { .init = ipgre_tap_init_net, |
64bc17811
|
1582 |
.exit_batch = ipgre_tap_exit_batch_net, |
c54419321
|
1583 1584 1585 |
.id = &gre_tap_net_id, .size = sizeof(struct ip_tunnel_net), }; |
1da177e4c
|
1586 |
|
84e54fe0a
|
1587 1588 1589 1590 1591 |
static int __net_init erspan_init_net(struct net *net) { return ip_tunnel_init_net(net, erspan_net_id, &erspan_link_ops, "erspan0"); } |
64bc17811
|
1592 |
static void __net_exit erspan_exit_batch_net(struct list_head *net_list) |
84e54fe0a
|
1593 |
{ |
64bc17811
|
1594 |
ip_tunnel_delete_nets(net_list, erspan_net_id, &erspan_link_ops); |
84e54fe0a
|
1595 1596 1597 1598 |
} static struct pernet_operations erspan_net_ops = { .init = erspan_init_net, |
64bc17811
|
1599 |
.exit_batch = erspan_exit_batch_net, |
84e54fe0a
|
1600 1601 1602 |
.id = &erspan_net_id, .size = sizeof(struct ip_tunnel_net), }; |
1da177e4c
|
1603 1604 1605 |
static int __init ipgre_init(void) { int err; |
058bd4d2a
|
1606 1607 |
pr_info("GRE over IPv4 tunneling driver "); |
1da177e4c
|
1608 |
|
cfb8fbf22
|
1609 |
err = register_pernet_device(&ipgre_net_ops); |
59a4c7594
|
1610 |
if (err < 0) |
c2892f027
|
1611 |
return err; |
c54419321
|
1612 1613 |
err = register_pernet_device(&ipgre_tap_net_ops); if (err < 0) |
e3d0328c7
|
1614 |
goto pnet_tap_failed; |
c54419321
|
1615 |
|
84e54fe0a
|
1616 1617 1618 |
err = register_pernet_device(&erspan_net_ops); if (err < 0) goto pnet_erspan_failed; |
9f57c67c3
|
1619 |
err = gre_add_protocol(&ipgre_protocol, GREPROTO_CISCO); |
c2892f027
|
1620 |
if (err < 0) { |
058bd4d2a
|
1621 1622 |
pr_info("%s: can't add protocol ", __func__); |
c2892f027
|
1623 1624 |
goto add_proto_failed; } |
7daa00048
|
1625 |
|
c19e654dd
|
1626 1627 1628 |
err = rtnl_link_register(&ipgre_link_ops); if (err < 0) goto rtnl_link_failed; |
e1a800022
|
1629 1630 1631 |
err = rtnl_link_register(&ipgre_tap_ops); if (err < 0) goto tap_ops_failed; |
84e54fe0a
|
1632 1633 1634 |
err = rtnl_link_register(&erspan_link_ops); if (err < 0) goto erspan_link_failed; |
c54419321
|
1635 |
return 0; |
c19e654dd
|
1636 |
|
84e54fe0a
|
1637 1638 |
erspan_link_failed: rtnl_link_unregister(&ipgre_tap_ops); |
e1a800022
|
1639 1640 |
tap_ops_failed: rtnl_link_unregister(&ipgre_link_ops); |
c19e654dd
|
1641 |
rtnl_link_failed: |
9f57c67c3
|
1642 |
gre_del_protocol(&ipgre_protocol, GREPROTO_CISCO); |
c2892f027
|
1643 |
add_proto_failed: |
84e54fe0a
|
1644 1645 |
unregister_pernet_device(&erspan_net_ops); pnet_erspan_failed: |
c54419321
|
1646 |
unregister_pernet_device(&ipgre_tap_net_ops); |
e3d0328c7
|
1647 |
pnet_tap_failed: |
c2892f027
|
1648 |
unregister_pernet_device(&ipgre_net_ops); |
c54419321
|
1649 |
return err; |
1da177e4c
|
1650 |
} |
db44575f6
|
1651 |
static void __exit ipgre_fini(void) |
1da177e4c
|
1652 |
{ |
e1a800022
|
1653 |
rtnl_link_unregister(&ipgre_tap_ops); |
c19e654dd
|
1654 |
rtnl_link_unregister(&ipgre_link_ops); |
84e54fe0a
|
1655 |
rtnl_link_unregister(&erspan_link_ops); |
9f57c67c3
|
1656 |
gre_del_protocol(&ipgre_protocol, GREPROTO_CISCO); |
c54419321
|
1657 |
unregister_pernet_device(&ipgre_tap_net_ops); |
c2892f027
|
1658 |
unregister_pernet_device(&ipgre_net_ops); |
84e54fe0a
|
1659 |
unregister_pernet_device(&erspan_net_ops); |
1da177e4c
|
1660 1661 1662 1663 1664 |
} module_init(ipgre_init); module_exit(ipgre_fini); MODULE_LICENSE("GPL"); |
4d74f8ba1
|
1665 1666 |
MODULE_ALIAS_RTNL_LINK("gre"); MODULE_ALIAS_RTNL_LINK("gretap"); |
84e54fe0a
|
1667 |
MODULE_ALIAS_RTNL_LINK("erspan"); |
8909c9ad8
|
1668 |
MODULE_ALIAS_NETDEV("gre0"); |
c54419321
|
1669 |
MODULE_ALIAS_NETDEV("gretap0"); |
84e54fe0a
|
1670 |
MODULE_ALIAS_NETDEV("erspan0"); |