2 * netifd - network interface daemon
3 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
4 * Copyright (C) 2012 Steven Barth <steven@midlink.org>
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2
8 * as published by the Free Software Foundation
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
20 #include <arpa/inet.h>
21 #include <netinet/in.h>
25 #include "interface.h"
26 #include "interface-ip.h"
47 static const struct blobmsg_policy route_attr
[__ROUTE_MAX
] = {
48 [ROUTE_INTERFACE
] = { .name
= "interface", .type
= BLOBMSG_TYPE_STRING
},
49 [ROUTE_TARGET
] = { .name
= "target", .type
= BLOBMSG_TYPE_STRING
},
50 [ROUTE_MASK
] = { .name
= "netmask", .type
= BLOBMSG_TYPE_STRING
},
51 [ROUTE_GATEWAY
] = { .name
= "gateway", .type
= BLOBMSG_TYPE_STRING
},
52 [ROUTE_METRIC
] = { .name
= "metric", .type
= BLOBMSG_TYPE_INT32
},
53 [ROUTE_MTU
] = { .name
= "mtu", .type
= BLOBMSG_TYPE_INT32
},
54 [ROUTE_TABLE
] = { .name
= "table", .type
= BLOBMSG_TYPE_STRING
},
55 [ROUTE_VALID
] = { .name
= "valid", .type
= BLOBMSG_TYPE_INT32
},
56 [ROUTE_SOURCE
] = { .name
= "source", .type
= BLOBMSG_TYPE_STRING
},
57 [ROUTE_ONLINK
] = { .name
= "onlink", .type
= BLOBMSG_TYPE_BOOL
},
58 [ROUTE_TYPE
] = { .name
= "type", .type
= BLOBMSG_TYPE_STRING
},
59 [ROUTE_PROTO
] = { .name
= "proto", .type
= BLOBMSG_TYPE_STRING
},
62 const struct uci_blob_param_list route_attr_list
= {
63 .n_params
= __ROUTE_MAX
,
68 struct list_head prefixes
= LIST_HEAD_INIT(prefixes
);
69 static struct device_prefix
*ula_prefix
= NULL
;
70 static struct uloop_timeout valid_until_timeout
;
74 clear_if_addr(union if_addr
*a
, int mask
)
76 int m_bytes
= (mask
+ 7) / 8;
77 uint8_t m_clear
= (1 << (m_bytes
* 8 - mask
)) - 1;
78 uint8_t *p
= (uint8_t *) a
;
80 if (m_bytes
< sizeof(*a
))
81 memset(p
+ m_bytes
, 0, sizeof(*a
) - m_bytes
);
83 p
[m_bytes
- 1] &= ~m_clear
;
87 match_if_addr(union if_addr
*a1
, union if_addr
*a2
, int mask
)
89 union if_addr
*p1
, *p2
;
91 p1
= alloca(sizeof(*a1
));
92 p2
= alloca(sizeof(*a2
));
94 memcpy(p1
, a1
, sizeof(*a1
));
95 clear_if_addr(p1
, mask
);
96 memcpy(p2
, a2
, sizeof(*a2
));
97 clear_if_addr(p2
, mask
);
99 return !memcmp(p1
, p2
, sizeof(*p1
));
102 static int set_ip_source_policy(bool add
, bool v6
, unsigned int priority
,
103 const union if_addr
*addr
, uint8_t mask
, unsigned int table
,
104 struct interface
*in_iface
, const char *action
, bool src
)
106 struct iprule rule
= {
107 .flags
= IPRULE_PRIORITY
,
113 rule
.flags
|= IPRULE_SRC
;
114 rule
.src_addr
= *addr
;
115 rule
.src_mask
= mask
;
117 rule
.flags
|= IPRULE_DEST
;
118 rule
.dest_addr
= *addr
;
119 rule
.dest_mask
= mask
;
124 rule
.flags
|= IPRULE_LOOKUP
;
130 rule
.flags
|= IPRULE_ACTION
;
131 system_resolve_iprule_action(action
, &rule
.action
);
134 if (in_iface
&& in_iface
->l3_dev
.dev
) {
135 rule
.flags
|= IPRULE_IN
;
136 strcpy(rule
.in_dev
, in_iface
->l3_dev
.dev
->ifname
);
139 rule
.flags
|= (v6
) ? IPRULE_INET6
: IPRULE_INET4
;
141 return (add
) ? system_add_iprule(&rule
) : system_del_iprule(&rule
);
144 static int set_ip_lo_policy(bool add
, bool v6
, struct interface
*iface
)
146 struct iprule rule
= {
147 .flags
= IPRULE_IN
| IPRULE_LOOKUP
| IPRULE_PRIORITY
,
148 .priority
= IPRULE_PRIORITY_NW
+ iface
->l3_dev
.dev
->ifindex
,
149 .lookup
= (v6
) ? iface
->ip6table
: iface
->ip4table
,
156 rule
.flags
|= (v6
) ? IPRULE_INET6
: IPRULE_INET4
;
158 return (add
) ? system_add_iprule(&rule
) : system_del_iprule(&rule
);
162 __find_ip_addr_target(struct interface_ip_settings
*ip
, union if_addr
*a
, bool v6
)
164 struct device_addr
*addr
;
166 vlist_for_each_element(&ip
->addr
, addr
, node
) {
170 if (v6
!= ((addr
->flags
& DEVADDR_FAMILY
) == DEVADDR_INET6
))
173 // Handle offlink addresses correctly
174 unsigned int mask
= addr
->mask
;
175 if ((addr
->flags
& DEVADDR_FAMILY
) == DEVADDR_INET6
&&
176 (addr
->flags
& DEVADDR_OFFLINK
))
179 if (!match_if_addr(&addr
->addr
, a
, mask
))
189 __find_ip_route_target(struct interface_ip_settings
*ip
, union if_addr
*a
,
190 bool v6
, struct device_route
**res
)
192 struct device_route
*route
;
194 vlist_for_each_element(&ip
->route
, route
, node
) {
198 if (v6
!= ((route
->flags
& DEVADDR_FAMILY
) == DEVADDR_INET6
))
201 if (!match_if_addr(&route
->addr
, a
, route
->mask
))
204 if (route
->flags
& DEVROUTE_TABLE
)
207 if (!*res
|| route
->mask
< (*res
)->mask
)
213 interface_ip_find_addr_target(struct interface
*iface
, union if_addr
*a
, bool v6
)
215 return __find_ip_addr_target(&iface
->proto_ip
, a
, v6
) ||
216 __find_ip_addr_target(&iface
->config_ip
, a
, v6
);
220 interface_ip_find_route_target(struct interface
*iface
, union if_addr
*a
,
221 bool v6
, struct device_route
**route
)
223 __find_ip_route_target(&iface
->proto_ip
, a
, v6
, route
);
224 __find_ip_route_target(&iface
->config_ip
, a
, v6
, route
);
228 interface_ip_add_target_route(union if_addr
*addr
, bool v6
, struct interface
*iface
)
230 struct device_route
*route
, *r_next
= NULL
;
231 bool defaultroute_target
= false;
232 int addrsize
= v6
? sizeof(addr
->in6
) : sizeof(addr
->in
);
234 route
= calloc(1, sizeof(*route
));
238 route
->flags
= v6
? DEVADDR_INET6
: DEVADDR_INET4
;
239 route
->mask
= v6
? 128 : 32;
240 if (memcmp(&route
->addr
, addr
, addrsize
) == 0)
241 defaultroute_target
= true;
243 memcpy(&route
->addr
, addr
, addrsize
);
246 /* look for locally addressable target first */
247 if (interface_ip_find_addr_target(iface
, addr
, v6
))
250 /* do not stop at the first route, let the lookup compare
251 * masks to find the best match */
252 interface_ip_find_route_target(iface
, addr
, v6
, &r_next
);
254 vlist_for_each_element(&interfaces
, iface
, node
) {
255 /* look for locally addressable target first */
256 if (interface_ip_find_addr_target(iface
, addr
, v6
))
259 /* do not stop at the first route, let the lookup compare
260 * masks to find the best match */
261 interface_ip_find_route_target(iface
, addr
, v6
, &r_next
);
270 iface
= r_next
->iface
;
271 memcpy(&route
->nexthop
, &r_next
->nexthop
, sizeof(route
->nexthop
));
272 route
->mtu
= r_next
->mtu
;
273 route
->metric
= r_next
->metric
;
274 route
->table
= r_next
->table
;
277 route
->iface
= iface
;
278 if (defaultroute_target
)
281 vlist_add(&iface
->host_routes
, &route
->node
, route
);
286 interface_set_route_info(struct interface
*iface
, struct device_route
*route
)
288 bool v6
= ((route
->flags
& DEVADDR_FAMILY
) == DEVADDR_INET6
);
293 if (!(route
->flags
& DEVROUTE_METRIC
))
294 route
->metric
= iface
->metric
;
296 if (!(route
->flags
& DEVROUTE_TABLE
)) {
297 route
->table
= (v6
) ? iface
->ip6table
: iface
->ip4table
;
299 route
->flags
|= DEVROUTE_SRCTABLE
;
304 interface_ip_add_route(struct interface
*iface
, struct blob_attr
*attr
, bool v6
)
306 struct interface_ip_settings
*ip
;
307 struct blob_attr
*tb
[__ROUTE_MAX
], *cur
;
308 struct device_route
*route
;
309 int af
= v6
? AF_INET6
: AF_INET
;
311 blobmsg_parse(route_attr
, __ROUTE_MAX
, tb
, blobmsg_data(attr
), blobmsg_data_len(attr
));
314 if ((cur
= tb
[ROUTE_INTERFACE
]) == NULL
)
317 iface
= vlist_find(&interfaces
, blobmsg_data(cur
), iface
, node
);
321 ip
= &iface
->config_ip
;
323 ip
= &iface
->proto_ip
;
326 route
= calloc(1, sizeof(*route
));
330 route
->flags
= v6
? DEVADDR_INET6
: DEVADDR_INET4
;
331 route
->mask
= v6
? 128 : 32;
332 if ((cur
= tb
[ROUTE_MASK
]) != NULL
) {
333 route
->mask
= parse_netmask_string(blobmsg_data(cur
), v6
);
334 if (route
->mask
> (v6
? 128 : 32))
338 if ((cur
= tb
[ROUTE_TARGET
]) != NULL
) {
339 if (!parse_ip_and_netmask(af
, blobmsg_data(cur
), &route
->addr
, &route
->mask
)) {
340 DPRINTF("Failed to parse route target: %s\n", (char *) blobmsg_data(cur
));
345 if ((cur
= tb
[ROUTE_GATEWAY
]) != NULL
) {
346 if (!inet_pton(af
, blobmsg_data(cur
), &route
->nexthop
)) {
347 DPRINTF("Failed to parse route gateway: %s\n", (char *) blobmsg_data(cur
));
352 if ((cur
= tb
[ROUTE_METRIC
]) != NULL
) {
353 route
->metric
= blobmsg_get_u32(cur
);
354 route
->flags
|= DEVROUTE_METRIC
;
357 if ((cur
= tb
[ROUTE_MTU
]) != NULL
) {
358 route
->mtu
= blobmsg_get_u32(cur
);
359 route
->flags
|= DEVROUTE_MTU
;
362 // Use source-based routing
363 if ((cur
= tb
[ROUTE_SOURCE
]) != NULL
) {
364 char *saveptr
, *source
= alloca(blobmsg_data_len(cur
));
365 memcpy(source
, blobmsg_data(cur
), blobmsg_data_len(cur
));
367 const char *addr
= strtok_r(source
, "/", &saveptr
);
368 const char *mask
= strtok_r(NULL
, "/", &saveptr
);
370 if (!addr
|| inet_pton(af
, addr
, &route
->source
) < 1) {
371 DPRINTF("Failed to parse route source: %s\n", addr
? addr
: "NULL");
375 route
->sourcemask
= (mask
) ? atoi(mask
) : ((af
== AF_INET6
) ? 128 : 32);
378 if ((cur
= tb
[ROUTE_ONLINK
]) != NULL
&& blobmsg_get_bool(cur
))
379 route
->flags
|= DEVROUTE_ONLINK
;
381 if ((cur
= tb
[ROUTE_TABLE
]) != NULL
) {
382 if (!system_resolve_rt_table(blobmsg_data(cur
), &route
->table
)) {
383 DPRINTF("Failed to resolve routing table: %s\n", (char *) blobmsg_data(cur
));
387 /* only set the table flag if not using the main (default) table */
388 if (system_is_default_rt_table(route
->table
))
392 route
->flags
|= DEVROUTE_TABLE
;
395 if ((cur
= tb
[ROUTE_VALID
]) != NULL
) {
396 int64_t valid
= blobmsg_get_u32(cur
);
397 int64_t valid_until
= valid
+ (int64_t)system_get_rtime();
398 if (valid_until
<= LONG_MAX
&& valid
!= 0xffffffffLL
) // Catch overflow
399 route
->valid_until
= valid_until
;
402 if ((cur
= tb
[ROUTE_TYPE
]) != NULL
) {
403 if (!system_resolve_rt_type(blobmsg_data(cur
), &route
->type
)) {
404 DPRINTF("Failed to resolve routing type: %s\n", (char *) blobmsg_data(cur
));
407 route
->flags
|= DEVROUTE_TYPE
;
410 if ((cur
= tb
[ROUTE_PROTO
]) != NULL
) {
411 if (!system_resolve_rt_proto(blobmsg_data(cur
), &route
->proto
)) {
412 DPRINTF("Failed to resolve proto type: %s\n", (char *) blobmsg_data(cur
));
415 route
->flags
|= DEVROUTE_PROTO
;
418 interface_set_route_info(iface
, route
);
419 vlist_add(&ip
->route
, &route
->node
, route
);
427 addr_cmp(const void *k1
, const void *k2
, void *ptr
)
429 return memcmp(k1
, k2
, sizeof(struct device_addr
) -
430 offsetof(struct device_addr
, flags
));
434 route_cmp(const void *k1
, const void *k2
, void *ptr
)
436 const struct device_route
*r1
= k1
, *r2
= k2
;
438 if (r1
->mask
!= r2
->mask
)
439 return r2
->mask
- r1
->mask
;
441 if (r1
->metric
!= r2
->metric
)
442 return r1
->metric
- r2
->metric
;
444 if (r1
->flags
!= r2
->flags
)
445 return r2
->flags
- r1
->flags
;
447 if (r1
->sourcemask
!= r2
->sourcemask
)
448 return r1
->sourcemask
- r2
->sourcemask
;
450 if (r1
->table
!= r2
->table
)
451 return r1
->table
- r2
->table
;
453 int maskcmp
= memcmp(&r1
->source
, &r2
->source
, sizeof(r1
->source
));
457 return memcmp(&r1
->addr
, &r2
->addr
, sizeof(r1
->addr
));
461 prefix_cmp(const void *k1
, const void *k2
, void *ptr
)
463 return memcmp(k1
, k2
, offsetof(struct device_prefix
, pclass
) -
464 offsetof(struct device_prefix
, addr
));
468 interface_handle_subnet_route(struct interface
*iface
, struct device_addr
*addr
, bool add
)
470 struct device
*dev
= iface
->l3_dev
.dev
;
471 struct device_route
*r
= &addr
->subnet
;
473 if (addr
->flags
& DEVADDR_OFFLINK
)
477 if (!addr
->subnet
.iface
)
480 system_del_route(dev
, r
);
481 memset(r
, 0, sizeof(*r
));
486 r
->flags
= addr
->flags
;
487 r
->mask
= addr
->mask
;
488 memcpy(&r
->addr
, &addr
->addr
, sizeof(r
->addr
));
489 clear_if_addr(&r
->addr
, r
->mask
);
491 if (!system_resolve_rt_proto("kernel", &r
->proto
))
494 r
->flags
|= DEVROUTE_PROTO
;
495 system_del_route(dev
, r
);
497 r
->flags
&= ~DEVROUTE_PROTO
;
498 interface_set_route_info(iface
, r
);
500 system_add_route(dev
, r
);
504 interface_add_addr_rules(struct device_addr
*addr
, bool enabled
)
506 bool v6
= (addr
->flags
& DEVADDR_FAMILY
) == DEVADDR_INET6
;
508 set_ip_source_policy(enabled
, v6
, IPRULE_PRIORITY_ADDR
, &addr
->addr
,
509 (v6
) ? 128 : 32, addr
->policy_table
, NULL
, NULL
,
511 set_ip_source_policy(enabled
, v6
, IPRULE_PRIORITY_ADDR_MASK
,
512 &addr
->addr
, addr
->mask
, addr
->policy_table
, NULL
,
517 interface_update_proto_addr(struct vlist_tree
*tree
,
518 struct vlist_node
*node_new
,
519 struct vlist_node
*node_old
)
521 struct interface_ip_settings
*ip
;
522 struct interface
*iface
;
524 struct device_addr
*a_new
= NULL
, *a_old
= NULL
;
525 bool replace
= false;
529 ip
= container_of(tree
, struct interface_ip_settings
, addr
);
531 dev
= iface
->l3_dev
.dev
;
533 if (!node_new
|| !node_old
)
534 iface
->updated
|= IUF_ADDRESS
;
537 a_new
= container_of(node_new
, struct device_addr
, node
);
539 if ((a_new
->flags
& DEVADDR_FAMILY
) == DEVADDR_INET4
&&
542 /* /31 and /32 addressing need 255.255.255.255
543 * as broadcast address. */
544 if (a_new
->mask
>= 31) {
545 a_new
->broadcast
= (uint32_t) ~0;
548 uint32_t *a
= (uint32_t *) &a_new
->addr
;
550 mask
>>= a_new
->mask
;
551 a_new
->broadcast
= *a
| htonl(mask
);
557 a_old
= container_of(node_old
, struct device_addr
, node
);
559 if (a_new
&& a_old
) {
562 if (a_old
->flags
!= a_new
->flags
|| a_old
->failed
)
565 if (a_old
->valid_until
!= a_new
->valid_until
||
566 a_old
->preferred_until
!= a_new
->preferred_until
)
569 if ((a_new
->flags
& DEVADDR_FAMILY
) == DEVADDR_INET4
&&
570 a_new
->broadcast
!= a_old
->broadcast
)
575 if (a_old
->enabled
&& !keep
) {
576 //This is needed for source routing to work correctly. If a device
577 //has two connections to a network using the same subnet, adding
578 //only the network-rule will cause packets to be routed through the
579 //first matching network (source IP matches both masks).
580 if (a_old
->policy_table
)
581 interface_add_addr_rules(a_old
, false);
583 if (!(a_old
->flags
& DEVADDR_EXTERNAL
)) {
584 interface_handle_subnet_route(iface
, a_old
, false);
585 system_del_address(dev
, a_old
);
593 a_new
->enabled
= true;
595 if ((a_new
->flags
& DEVADDR_FAMILY
) == DEVADDR_INET6
)
598 a_new
->policy_table
= (v6
) ? iface
->ip6table
: iface
->ip4table
;
600 if (!keep
|| replace
) {
601 if (!(a_new
->flags
& DEVADDR_EXTERNAL
)) {
602 if (system_add_address(dev
, a_new
))
603 a_new
->failed
= true;
605 if (iface
->metric
|| a_new
->policy_table
)
606 interface_handle_subnet_route(iface
, a_new
, true);
610 if (a_new
->policy_table
)
611 interface_add_addr_rules(a_new
, true);
618 enable_route(struct interface_ip_settings
*ip
, struct device_route
*route
)
620 if (ip
->no_defaultroute
&& !route
->mask
)
627 interface_update_proto_route(struct vlist_tree
*tree
,
628 struct vlist_node
*node_new
,
629 struct vlist_node
*node_old
)
631 struct interface_ip_settings
*ip
;
632 struct interface
*iface
;
634 struct device_route
*route_old
, *route_new
;
637 ip
= container_of(tree
, struct interface_ip_settings
, route
);
639 dev
= iface
->l3_dev
.dev
;
641 if (!node_new
|| !node_old
)
642 iface
->updated
|= IUF_ROUTE
;
644 route_old
= container_of(node_old
, struct device_route
, node
);
645 route_new
= container_of(node_new
, struct device_route
, node
);
647 if (node_old
&& node_new
)
648 keep
= !memcmp(&route_old
->nexthop
, &route_new
->nexthop
, sizeof(route_old
->nexthop
)) &&
649 (route_old
->mtu
== route_new
->mtu
) && (route_old
->type
== route_new
->type
) &&
650 (route_old
->proto
== route_new
->proto
) && !route_old
->failed
;
653 if (!(route_old
->flags
& DEVADDR_EXTERNAL
) && route_old
->enabled
&& !keep
)
654 system_del_route(dev
, route_old
);
660 bool _enabled
= enable_route(ip
, route_new
);
662 if (!(route_new
->flags
& DEVADDR_EXTERNAL
) && !keep
&& _enabled
)
663 if (system_add_route(dev
, route_new
))
664 route_new
->failed
= true;
666 route_new
->iface
= iface
;
667 route_new
->enabled
= _enabled
;
672 interface_update_host_route(struct vlist_tree
*tree
,
673 struct vlist_node
*node_new
,
674 struct vlist_node
*node_old
)
676 struct interface
*iface
;
678 struct device_route
*route_old
, *route_new
;
680 iface
= container_of(tree
, struct interface
, host_routes
);
681 dev
= iface
->l3_dev
.dev
;
683 route_old
= container_of(node_old
, struct device_route
, node
);
684 route_new
= container_of(node_new
, struct device_route
, node
);
687 system_del_route(dev
, route_old
);
692 if (system_add_route(dev
, route_new
))
693 route_new
->failed
= true;
698 random_ifaceid(struct in6_addr
*addr
)
700 static bool initialized
= false;
705 gettimeofday(&t
, NULL
);
706 seed
= t
.tv_sec
^ t
.tv_usec
^ getpid();
710 addr
->s6_addr32
[2] = (uint32_t)mrand48();
711 addr
->s6_addr32
[3] = (uint32_t)mrand48();
715 eui64_ifaceid(struct interface
*iface
, struct in6_addr
*addr
)
717 /* get mac address */
718 uint8_t *macaddr
= iface
->l3_dev
.dev
->settings
.macaddr
;
719 uint8_t *ifaceid
= addr
->s6_addr
+ 8;
720 memcpy(ifaceid
,macaddr
,3);
721 memcpy(ifaceid
+ 5,macaddr
+ 3, 3);
728 generate_ifaceid(struct interface
*iface
, struct in6_addr
*addr
)
730 /* generate new iface id */
731 switch (iface
->assignment_iface_id_selection
) {
734 /* copy host part from assignment_fixed_iface_id */
735 memcpy(addr
->s6_addr
+ 8, iface
->assignment_fixed_iface_id
.s6_addr
+ 8, 8);
738 /* randomize last 64 bits */
739 random_ifaceid(addr
);
743 eui64_ifaceid(iface
, addr
);
749 interface_set_prefix_address(struct device_prefix_assignment
*assignment
,
750 const struct device_prefix
*prefix
, struct interface
*iface
, bool add
)
752 const struct interface
*uplink
= prefix
->iface
;
753 if (!iface
->l3_dev
.dev
)
756 struct device
*l3_downlink
= iface
->l3_dev
.dev
;
758 struct device_addr addr
;
759 struct device_route route
;
760 memset(&addr
, 0, sizeof(addr
));
761 memset(&route
, 0, sizeof(route
));
763 if (IN6_IS_ADDR_UNSPECIFIED(&assignment
->addr
)) {
764 addr
.addr
.in6
= prefix
->addr
;
765 addr
.addr
.in6
.s6_addr32
[1] |= htonl(assignment
->assigned
);
766 generate_ifaceid(iface
, &addr
.addr
.in6
);
767 assignment
->addr
= addr
.addr
.in6
;
770 addr
.addr
.in6
= assignment
->addr
;
772 addr
.mask
= assignment
->length
;
773 addr
.flags
= DEVADDR_INET6
| DEVADDR_OFFLINK
;
774 addr
.preferred_until
= prefix
->preferred_until
;
775 addr
.valid_until
= prefix
->valid_until
;
777 route
.flags
= DEVADDR_INET6
;
778 route
.mask
= addr
.mask
< 64 ? 64 : addr
.mask
;
779 route
.addr
= addr
.addr
;
780 clear_if_addr(&route
.addr
, route
.mask
);
781 interface_set_route_info(iface
, &route
);
783 if (!add
&& assignment
->enabled
) {
784 time_t now
= system_get_rtime();
785 addr
.preferred_until
= now
;
786 if (!addr
.valid_until
|| addr
.valid_until
- now
> 7200)
787 addr
.valid_until
= now
+ 7200;
790 if (prefix
->iface
->ip6table
)
791 set_ip_source_policy(false, true, IPRULE_PRIORITY_NW
, &addr
.addr
,
792 addr
.mask
, prefix
->iface
->ip6table
, iface
, NULL
, true);
794 set_ip_source_policy(false, true, IPRULE_PRIORITY_REJECT
, &addr
.addr
,
795 addr
.mask
, 0, iface
, "unreachable", true);
798 system_del_route(l3_downlink
, &route
);
799 system_add_address(l3_downlink
, &addr
);
801 assignment
->enabled
= false;
802 } else if (add
&& (iface
->state
== IFS_UP
|| iface
->state
== IFS_SETUP
) &&
803 !system_add_address(l3_downlink
, &addr
)) {
805 if (prefix
->iface
&& !assignment
->enabled
) {
806 set_ip_source_policy(true, true, IPRULE_PRIORITY_REJECT
, &addr
.addr
,
807 addr
.mask
, 0, iface
, "unreachable", true);
809 if (prefix
->iface
->ip6table
)
810 set_ip_source_policy(true, true, IPRULE_PRIORITY_NW
, &addr
.addr
,
811 addr
.mask
, prefix
->iface
->ip6table
, iface
, NULL
, true);
814 route
.metric
= iface
->metric
;
815 system_add_route(l3_downlink
, &route
);
817 if (uplink
&& uplink
->l3_dev
.dev
&& !(l3_downlink
->settings
.flags
& DEV_OPT_MTU6
)) {
818 int mtu
= system_update_ipv6_mtu(uplink
->l3_dev
.dev
, 0);
819 int mtu_old
= system_update_ipv6_mtu(l3_downlink
, 0);
821 if (mtu
> 0 && mtu_old
> mtu
)
822 system_update_ipv6_mtu(l3_downlink
, mtu
);
825 assignment
->enabled
= true;
829 static bool interface_prefix_assign(struct list_head
*list
,
830 struct device_prefix_assignment
*assign
)
832 int32_t current
= 0, asize
= (1 << (64 - assign
->length
)) - 1;
833 struct device_prefix_assignment
*c
;
834 list_for_each_entry(c
, list
, head
) {
835 if (assign
->assigned
!= -1) {
836 if (assign
->assigned
>= current
&& assign
->assigned
+ asize
< c
->assigned
) {
837 list_add_tail(&assign
->head
, &c
->head
);
840 } else if (assign
->assigned
== -1) {
841 current
= (current
+ asize
) & (~asize
);
842 if (current
+ asize
< c
->assigned
) {
843 assign
->assigned
= current
;
844 list_add_tail(&assign
->head
, &c
->head
);
848 current
= (c
->assigned
+ (1 << (64 - c
->length
)));
853 static void interface_update_prefix_assignments(struct device_prefix
*prefix
, bool setup
)
855 struct device_prefix_assignment
*c
;
856 struct interface
*iface
;
858 // Delete all assignments
859 while (!list_empty(&prefix
->assignments
)) {
860 c
= list_first_entry(&prefix
->assignments
,
861 struct device_prefix_assignment
, head
);
862 if ((iface
= vlist_find(&interfaces
, c
->name
, iface
, node
)))
863 interface_set_prefix_address(c
, prefix
, iface
, false);
871 // End-of-assignment sentinel
872 c
= malloc(sizeof(*c
) + 1);
876 c
->assigned
= 1 << (64 - prefix
->length
);
879 c
->addr
= in6addr_any
;
880 list_add(&c
->head
, &prefix
->assignments
);
883 if (prefix
->excl_length
> 0) {
884 const char name
[] = "!excluded";
885 c
= malloc(sizeof(*c
) + sizeof(name
));
887 c
->assigned
= ntohl(prefix
->excl_addr
.s6_addr32
[1]) &
888 ((1 << (64 - prefix
->length
)) - 1);
889 c
->length
= prefix
->excl_length
;
890 c
->addr
= in6addr_any
;
891 memcpy(c
->name
, name
, sizeof(name
));
892 list_add(&c
->head
, &prefix
->assignments
);
896 bool assigned_any
= false;
897 struct list_head assign_later
= LIST_HEAD_INIT(assign_later
);
898 vlist_for_each_element(&interfaces
, iface
, node
) {
899 if (iface
->assignment_length
< 48 ||
900 iface
->assignment_length
> 64)
903 // Test whether there is a matching class
904 if (!list_empty(&iface
->assignment_classes
)) {
907 struct interface_assignment_class
*c
;
908 list_for_each_entry(c
, &iface
->assignment_classes
, head
) {
909 if (!strcmp(c
->name
, prefix
->pclass
)) {
919 size_t namelen
= strlen(iface
->name
) + 1;
920 c
= malloc(sizeof(*c
) + namelen
);
924 c
->length
= iface
->assignment_length
;
925 c
->assigned
= iface
->assignment_hint
;
926 c
->addr
= in6addr_any
;
928 memcpy(c
->name
, iface
->name
, namelen
);
930 // First process all custom assignments, put all others in later-list
931 if (c
->assigned
== -1 || !interface_prefix_assign(&prefix
->assignments
, c
)) {
932 if (c
->assigned
!= -1) {
934 netifd_log_message(L_WARNING
, "Failed to assign requested subprefix "
935 "of size %hhu for %s, trying other\n", c
->length
, c
->name
);
938 struct list_head
*next
= &assign_later
;
939 struct device_prefix_assignment
*n
;
940 list_for_each_entry(n
, &assign_later
, head
) {
941 if (n
->length
< c
->length
) {
946 list_add_tail(&c
->head
, next
);
949 if (c
->assigned
!= -1)
953 // Then try to assign all other + failed custom assignments
954 while (!list_empty(&assign_later
)) {
955 c
= list_first_entry(&assign_later
, struct device_prefix_assignment
, head
);
958 bool assigned
= false;
960 assigned
= interface_prefix_assign(&prefix
->assignments
, c
);
961 } while (!assigned
&& ++c
->length
<= 64);
964 netifd_log_message(L_WARNING
, "Failed to assign subprefix "
965 "of size %hhu for %s\n", c
->length
, c
->name
);
972 list_for_each_entry(c
, &prefix
->assignments
, head
)
973 if ((iface
= vlist_find(&interfaces
, c
->name
, iface
, node
)))
974 interface_set_prefix_address(c
, prefix
, iface
, true);
977 netifd_log_message(L_WARNING
, "You have delegated IPv6-prefixes but haven't assigned them "
978 "to any interface. Did you forget to set option ip6assign on your lan-interfaces?");
982 void interface_refresh_assignments(bool hint
)
984 static bool refresh
= false;
985 if (!hint
&& refresh
) {
986 struct device_prefix
*p
;
987 list_for_each_entry(p
, &prefixes
, head
)
988 interface_update_prefix_assignments(p
, true);
995 interface_update_prefix(struct vlist_tree
*tree
,
996 struct vlist_node
*node_new
,
997 struct vlist_node
*node_old
)
999 struct device_prefix
*prefix_old
, *prefix_new
;
1000 prefix_old
= container_of(node_old
, struct device_prefix
, node
);
1001 prefix_new
= container_of(node_new
, struct device_prefix
, node
);
1003 struct interface_ip_settings
*ip
= container_of(tree
, struct interface_ip_settings
, prefix
);
1004 if (tree
&& (!node_new
|| !node_old
))
1005 ip
->iface
->updated
|= IUF_PREFIX
;
1007 struct device_route route
;
1008 memset(&route
, 0, sizeof(route
));
1009 route
.flags
= DEVADDR_INET6
;
1010 route
.metric
= INT32_MAX
;
1011 route
.mask
= (node_new
) ? prefix_new
->length
: prefix_old
->length
;
1012 route
.addr
.in6
= (node_new
) ? prefix_new
->addr
: prefix_old
->addr
;
1015 struct device_prefix_assignment
*c
;
1016 struct interface
*iface
;
1018 if (node_old
&& node_new
) {
1019 // Move assignments and refresh addresses to update valid times
1020 list_splice(&prefix_old
->assignments
, &prefix_new
->assignments
);
1022 list_for_each_entry(c
, &prefix_new
->assignments
, head
)
1023 if ((iface
= vlist_find(&interfaces
, c
->name
, iface
, node
)))
1024 interface_set_prefix_address(c
, prefix_new
, iface
, true);
1025 } else if (node_new
) {
1026 // Set null-route to avoid routing loops
1027 system_add_route(NULL
, &route
);
1029 if (!prefix_new
->iface
|| !prefix_new
->iface
->proto_ip
.no_delegation
)
1030 interface_update_prefix_assignments(prefix_new
, true);
1031 } else if (node_old
) {
1032 // Remove null-route
1033 interface_update_prefix_assignments(prefix_old
, false);
1034 system_del_route(NULL
, &route
);
1038 if (prefix_old
->head
.next
)
1039 list_del(&prefix_old
->head
);
1043 if (node_new
&& (!prefix_new
->iface
|| !prefix_new
->iface
->proto_ip
.no_delegation
))
1044 list_add(&prefix_new
->head
, &prefixes
);
1048 struct device_prefix
*
1049 interface_ip_add_device_prefix(struct interface
*iface
, struct in6_addr
*addr
,
1050 uint8_t length
, time_t valid_until
, time_t preferred_until
,
1051 struct in6_addr
*excl_addr
, uint8_t excl_length
, const char *pclass
)
1054 pclass
= (iface
) ? iface
->name
: "local";
1056 struct device_prefix
*prefix
= calloc(1, sizeof(*prefix
) + strlen(pclass
) + 1);
1060 prefix
->length
= length
;
1061 prefix
->addr
= *addr
;
1062 prefix
->preferred_until
= preferred_until
;
1063 prefix
->valid_until
= valid_until
;
1064 prefix
->iface
= iface
;
1065 INIT_LIST_HEAD(&prefix
->assignments
);
1068 prefix
->excl_addr
= *excl_addr
;
1069 prefix
->excl_length
= excl_length
;
1072 strcpy(prefix
->pclass
, pclass
);
1075 vlist_add(&iface
->proto_ip
.prefix
, &prefix
->node
, &prefix
->addr
);
1077 interface_update_prefix(NULL
, &prefix
->node
, NULL
);
1083 interface_ip_set_ula_prefix(const char *prefix
)
1085 char buf
[INET6_ADDRSTRLEN
+ 4] = {0}, *saveptr
;
1087 strncpy(buf
, prefix
, sizeof(buf
) - 1);
1088 char *prefixaddr
= strtok_r(buf
, "/", &saveptr
);
1090 struct in6_addr addr
;
1091 if (!prefixaddr
|| inet_pton(AF_INET6
, prefixaddr
, &addr
) < 1) {
1093 interface_update_prefix(NULL
, NULL
, &ula_prefix
->node
);
1100 char *prefixlen
= strtok_r(NULL
, ",", &saveptr
);
1101 if (!prefixlen
|| (length
= atoi(prefixlen
)) < 1 || length
> 64)
1104 if (!ula_prefix
|| !IN6_ARE_ADDR_EQUAL(&addr
, &ula_prefix
->addr
) ||
1105 ula_prefix
->length
!= length
) {
1107 interface_update_prefix(NULL
, NULL
, &ula_prefix
->node
);
1109 ula_prefix
= interface_ip_add_device_prefix(NULL
, &addr
, length
,
1110 0, 0, NULL
, 0, NULL
);
1115 interface_add_dns_server(struct interface_ip_settings
*ip
, const char *str
)
1117 struct dns_server
*s
;
1119 s
= calloc(1, sizeof(*s
));
1124 if (inet_pton(s
->af
, str
, &s
->addr
.in
))
1128 if (inet_pton(s
->af
, str
, &s
->addr
.in
))
1135 D(INTERFACE
, "Add IPv%c DNS server: %s\n",
1136 s
->af
== AF_INET6
? '6' : '4', str
);
1137 vlist_simple_add(&ip
->dns_servers
, &s
->node
);
1141 interface_add_dns_server_list(struct interface_ip_settings
*ip
, struct blob_attr
*list
)
1143 struct blob_attr
*cur
;
1146 blobmsg_for_each_attr(cur
, list
, rem
) {
1147 if (blobmsg_type(cur
) != BLOBMSG_TYPE_STRING
)
1150 if (!blobmsg_check_attr(cur
, NULL
))
1153 interface_add_dns_server(ip
, blobmsg_data(cur
));
1158 interface_add_dns_search_domain(struct interface_ip_settings
*ip
, const char *str
)
1160 struct dns_search_domain
*s
;
1161 int len
= strlen(str
);
1163 s
= calloc(1, sizeof(*s
) + len
+ 1);
1167 D(INTERFACE
, "Add DNS search domain: %s\n", str
);
1168 memcpy(s
->name
, str
, len
);
1169 vlist_simple_add(&ip
->dns_search
, &s
->node
);
1173 interface_add_dns_search_list(struct interface_ip_settings
*ip
, struct blob_attr
*list
)
1175 struct blob_attr
*cur
;
1178 blobmsg_for_each_attr(cur
, list
, rem
) {
1179 if (blobmsg_type(cur
) != BLOBMSG_TYPE_STRING
)
1182 if (!blobmsg_check_attr(cur
, NULL
))
1185 interface_add_dns_search_domain(ip
, blobmsg_data(cur
));
1190 write_resolv_conf_entries(FILE *f
, struct interface_ip_settings
*ip
, const char *dev
)
1192 struct dns_server
*s
;
1193 struct dns_search_domain
*d
;
1195 char buf
[INET6_ADDRSTRLEN
];
1197 vlist_simple_for_each_element(&ip
->dns_servers
, s
, node
) {
1198 str
= inet_ntop(s
->af
, &s
->addr
, buf
, sizeof(buf
));
1202 if (s
->af
== AF_INET6
&& IN6_IS_ADDR_LINKLOCAL(&s
->addr
.in6
))
1203 fprintf(f
, "nameserver %s%%%s\n", str
, dev
);
1205 fprintf(f
, "nameserver %s\n", str
);
1208 vlist_simple_for_each_element(&ip
->dns_search
, d
, node
) {
1209 fprintf(f
, "search %s\n", d
->name
);
1213 /* Sorting of interface resolver entries : */
1214 /* Primary on interface dns_metric : lowest metric first */
1215 /* Secondary on interface metric : lowest metric first */
1216 /* Finally alphabetical order of interface names */
1217 static int resolv_conf_iface_cmp(const void *k1
, const void *k2
, void *ptr
)
1219 const struct interface
*iface1
= k1
, *iface2
= k2
;
1221 if (iface1
->dns_metric
!= iface2
->dns_metric
)
1222 return iface1
->dns_metric
- iface2
->dns_metric
;
1224 if (iface1
->metric
!= iface2
->metric
)
1225 return iface1
->metric
- iface2
->metric
;
1227 return strcmp(iface1
->name
, iface2
->name
);
1231 __interface_write_dns_entries(FILE *f
)
1233 struct interface
*iface
;
1235 struct avl_node node
;
1237 struct avl_tree resolv_conf_iface_entries
;
1239 avl_init(&resolv_conf_iface_entries
, resolv_conf_iface_cmp
, false, NULL
);
1241 vlist_for_each_element(&interfaces
, iface
, node
) {
1242 if (iface
->state
!= IFS_UP
)
1245 if (vlist_simple_empty(&iface
->proto_ip
.dns_search
) &&
1246 vlist_simple_empty(&iface
->proto_ip
.dns_servers
) &&
1247 vlist_simple_empty(&iface
->config_ip
.dns_search
) &&
1248 vlist_simple_empty(&iface
->config_ip
.dns_servers
))
1251 entry
= calloc(1, sizeof(*entry
));
1255 entry
->node
.key
= iface
;
1256 avl_insert(&resolv_conf_iface_entries
, &entry
->node
);
1259 avl_for_each_element(&resolv_conf_iface_entries
, entry
, node
) {
1260 iface
= (struct interface
*)entry
->node
.key
;
1262 fprintf(f
, "# Interface %s\n", iface
->name
);
1264 write_resolv_conf_entries(f
, &iface
->config_ip
, iface
->ifname
);
1266 if (!iface
->proto_ip
.no_dns
)
1267 write_resolv_conf_entries(f
, &iface
->proto_ip
, iface
->ifname
);
1270 avl_remove_all_elements(&resolv_conf_iface_entries
, entry
, node
, n_entry
)
1275 interface_write_resolv_conf(void)
1277 char *path
= alloca(strlen(resolv_conf
) + 5);
1279 uint32_t crcold
, crcnew
;
1281 sprintf(path
, "%s.tmp", resolv_conf
);
1283 f
= fopen(path
, "w+");
1285 D(INTERFACE
, "Failed to open %s for writing\n", path
);
1289 __interface_write_dns_entries(f
);
1293 crcnew
= crc32_file(f
);
1296 crcold
= crcnew
+ 1;
1297 f
= fopen(resolv_conf
, "r");
1299 crcold
= crc32_file(f
);
1303 if (crcold
== crcnew
) {
1305 } else if (rename(path
, resolv_conf
) < 0) {
1306 D(INTERFACE
, "Failed to replace %s\n", resolv_conf
);
1311 void interface_ip_set_enabled(struct interface_ip_settings
*ip
, bool enabled
)
1313 struct device_addr
*addr
;
1314 struct device_route
*route
;
1316 struct interface
*iface
;
1318 ip
->enabled
= enabled
;
1320 dev
= iface
->l3_dev
.dev
;
1324 vlist_for_each_element(&ip
->addr
, addr
, node
) {
1325 bool v6
= ((addr
->flags
& DEVADDR_FAMILY
) == DEVADDR_INET6
) ? true : false;
1327 if (addr
->flags
& DEVADDR_EXTERNAL
)
1330 if (addr
->enabled
== enabled
)
1334 system_add_address(dev
, addr
);
1336 addr
->policy_table
= (v6
) ? iface
->ip6table
: iface
->ip4table
;
1337 if (iface
->metric
|| addr
->policy_table
)
1338 interface_handle_subnet_route(iface
, addr
, true);
1340 if (addr
->policy_table
)
1341 interface_add_addr_rules(addr
, true);
1343 interface_handle_subnet_route(iface
, addr
, false);
1344 system_del_address(dev
, addr
);
1346 if (addr
->policy_table
)
1347 interface_add_addr_rules(addr
, false);
1349 addr
->enabled
= enabled
;
1352 vlist_for_each_element(&ip
->route
, route
, node
) {
1353 bool _enabled
= enabled
;
1355 if (route
->flags
& DEVADDR_EXTERNAL
)
1358 if (!enable_route(ip
, route
))
1361 if (route
->enabled
== _enabled
)
1365 interface_set_route_info(ip
->iface
, route
);
1367 if (system_add_route(dev
, route
))
1368 route
->failed
= true;
1370 system_del_route(dev
, route
);
1371 route
->enabled
= _enabled
;
1374 struct device_prefix
*c
;
1375 struct device_prefix_assignment
*a
;
1376 list_for_each_entry(c
, &prefixes
, head
)
1377 list_for_each_entry(a
, &c
->assignments
, head
)
1378 if (!strcmp(a
->name
, ip
->iface
->name
))
1379 interface_set_prefix_address(a
, c
, ip
->iface
, enabled
);
1381 if (ip
->iface
&& ip
->iface
->policy_rules_set
!= enabled
&&
1382 ip
->iface
->l3_dev
.dev
) {
1383 set_ip_lo_policy(enabled
, true, ip
->iface
);
1384 set_ip_lo_policy(enabled
, false, ip
->iface
);
1386 set_ip_source_policy(enabled
, true, IPRULE_PRIORITY_REJECT
+ ip
->iface
->l3_dev
.dev
->ifindex
,
1387 NULL
, 0, 0, ip
->iface
, "failed_policy", true);
1388 ip
->iface
->policy_rules_set
= enabled
;
1393 interface_ip_update_start(struct interface_ip_settings
*ip
)
1395 if (ip
!= &ip
->iface
->config_ip
) {
1396 vlist_simple_update(&ip
->dns_servers
);
1397 vlist_simple_update(&ip
->dns_search
);
1399 vlist_update(&ip
->route
);
1400 vlist_update(&ip
->addr
);
1401 vlist_update(&ip
->prefix
);
1405 interface_ip_update_complete(struct interface_ip_settings
*ip
)
1407 vlist_simple_flush(&ip
->dns_servers
);
1408 vlist_simple_flush(&ip
->dns_search
);
1409 vlist_flush(&ip
->route
);
1410 vlist_flush(&ip
->addr
);
1411 vlist_flush(&ip
->prefix
);
1412 interface_write_resolv_conf();
1416 interface_ip_flush(struct interface_ip_settings
*ip
)
1418 if (ip
== &ip
->iface
->proto_ip
)
1419 vlist_flush_all(&ip
->iface
->host_routes
);
1420 vlist_simple_flush_all(&ip
->dns_servers
);
1421 vlist_simple_flush_all(&ip
->dns_search
);
1422 vlist_flush_all(&ip
->route
);
1423 vlist_flush_all(&ip
->addr
);
1424 vlist_flush_all(&ip
->prefix
);
1428 __interface_ip_init(struct interface_ip_settings
*ip
, struct interface
*iface
)
1432 vlist_simple_init(&ip
->dns_search
, struct dns_search_domain
, node
);
1433 vlist_simple_init(&ip
->dns_servers
, struct dns_server
, node
);
1434 vlist_init(&ip
->route
, route_cmp
, interface_update_proto_route
);
1435 vlist_init(&ip
->addr
, addr_cmp
, interface_update_proto_addr
);
1436 vlist_init(&ip
->prefix
, prefix_cmp
, interface_update_prefix
);
1440 interface_ip_init(struct interface
*iface
)
1442 __interface_ip_init(&iface
->proto_ip
, iface
);
1443 __interface_ip_init(&iface
->config_ip
, iface
);
1444 vlist_init(&iface
->host_routes
, route_cmp
, interface_update_host_route
);
1448 interface_ip_valid_until_handler(struct uloop_timeout
*t
)
1450 time_t now
= system_get_rtime();
1451 struct interface
*iface
;
1452 vlist_for_each_element(&interfaces
, iface
, node
) {
1453 if (iface
->state
!= IFS_UP
)
1456 struct device_addr
*addr
, *addrp
;
1457 struct device_route
*route
, *routep
;
1458 struct device_prefix
*pref
, *prefp
;
1460 vlist_for_each_element_safe(&iface
->proto_ip
.addr
, addr
, node
, addrp
)
1461 if (addr
->valid_until
&& addr
->valid_until
< now
)
1462 vlist_delete(&iface
->proto_ip
.addr
, &addr
->node
);
1464 vlist_for_each_element_safe(&iface
->proto_ip
.route
, route
, node
, routep
)
1465 if (route
->valid_until
&& route
->valid_until
< now
)
1466 vlist_delete(&iface
->proto_ip
.route
, &route
->node
);
1468 vlist_for_each_element_safe(&iface
->proto_ip
.prefix
, pref
, node
, prefp
)
1469 if (pref
->valid_until
&& pref
->valid_until
< now
)
1470 vlist_delete(&iface
->proto_ip
.prefix
, &pref
->node
);
1474 uloop_timeout_set(t
, 1000);
1478 interface_ip_init_worker(void)
1480 valid_until_timeout
.cb
= interface_ip_valid_until_handler
;
1481 uloop_timeout_set(&valid_until_timeout
, 1000);