2 # map.sh - IPv4-in-IPv6 tunnel backend
4 # Author: Steven Barth <cyrus@openwrt.org>
5 # Copyright (c) 2014 cisco Systems, Inc.
7 # This program is free software; you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License version 2
9 # as published by the Free Software Foundation
11 # This program is distributed in the hope that it will be useful,
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 # GNU General Public License for more details.
16 [ -n "$INCLUDE_ONLY" ] ||
{
18 .
/lib
/functions
/network.sh
28 # uncomment for legacy MAP0 mode
31 local type mtu ttl tunlink zone encaplimit
32 local rule ipaddr ip4prefixlen ip6prefix ip6prefixlen peeraddr ealen psidlen psid offset
33 json_get_vars
type mtu ttl tunlink zone encaplimit
34 json_get_vars rule ipaddr ip4prefixlen ip6prefix ip6prefixlen peeraddr ealen psidlen psid offset
36 [ "$zone" = "-" ] && zone
=""
37 [ -z "$type" ] && type="map-e"
38 [ -z "$ip4prefixlen" ] && ip4prefixlen
=32
40 ( proto_add_host_dependency
"$cfg" "::" "$tunlink" )
42 # fixme: handle RA/DHCPv6 address race for LW
43 [ "$type" = lw4o6
] && sleep 5
45 if [ -z "$rule" ]; then
46 rule
="type=$type,ipv6prefix=$ip6prefix,prefix6len=$ip6prefixlen,ipv4prefix=$ipaddr,prefix4len=$ip4prefixlen"
47 [ -n "$psid" ] && rule
="$rule,psid=$psid"
48 [ -n "$psidlen" ] && rule
="$rule,psidlen=$psidlen"
49 [ -n "$offset" ] && rule
="$rule,offset=$offset"
50 [ -n "$ealen" ] && rule
="$rule,ealen=$ealen"
51 if [ "$type" = "map-t" ]; then
52 rule
="$rule,dmr=$peeraddr"
54 rule
="$rule,br=$peeraddr"
58 echo "rule=$rule" > /tmp
/map-
$cfg.rules
59 RULE_DATA
=$
(mapcalc
${tunlink:-\*} $rule)
60 if [ "$?" != 0 ]; then
61 proto_notify_error
"$cfg" "INVALID_MAP_RULE"
62 proto_block_restart
"$cfg"
66 echo "$RULE_DATA" >> /tmp
/map-
$cfg.rules
69 if [ -z "$RULE_BMR" ]; then
70 proto_notify_error
"$cfg" "NO_MATCHING_PD"
71 proto_block_restart
"$cfg"
76 if [ "$type" = "lw4o6" -o "$type" = "map-e" ]; then
77 proto_init_update
"$link" 1
78 proto_add_ipv4_address $
(eval "echo \$RULE_${k}_IPV4ADDR") "" "" ""
81 json_add_string mode ipip6
82 json_add_int mtu
"${mtu:-1280}"
83 json_add_int ttl
"${ttl:-64}"
84 json_add_string
local $
(eval "echo \$RULE_${k}_IPV6ADDR")
85 json_add_string remote $
(eval "echo \$RULE_${k}_BR")
86 json_add_string link $
(eval "echo \$RULE_${k}_PD6IFACE")
87 json_add_object
"data"
88 [ -n "$encaplimit" ] && json_add_string encaplimit
"$encaplimit"
89 if [ "$type" = "map-e" ]; then
91 for i
in $
(seq $RULE_COUNT); do
92 [ "$(eval "echo \
$RULE_${i}_FMR
")" != 1 ] && continue
94 json_add_string prefix6
"$(eval "echo \
$RULE_${i}_IPV6PREFIX
")/$(eval "echo \
$RULE_${i}_PREFIX6LEN
")"
95 json_add_string prefix4
"$(eval "echo \
$RULE_${i}_IPV4PREFIX
")/$(eval "echo \
$RULE_${i}_PREFIX4LEN
")"
96 json_add_int ealen $
(eval "echo \$RULE_${i}_EALEN")
97 json_add_int offset $
(eval "echo \$RULE_${i}_OFFSET")
106 elif [ "$type" = "map-t" -a -f "/proc/net/nat46/control" ]; then
107 proto_init_update
"$link" 1
109 [ "$LEGACY" = 1 ] && style
="MAP0"
111 echo add
$link > /proc
/net
/nat46
/control
112 local cfgstr
="local.style $style local.v4 $(eval "echo \
$RULE_${k}_IPV4PREFIX
")/$(eval "echo \
$RULE_${k}_PREFIX4LEN
")"
113 cfgstr
="$cfgstr local.v6 $(eval "echo \
$RULE_${k}_IPV6PREFIX
")/$(eval "echo \
$RULE_${k}_PREFIX6LEN
")"
114 cfgstr
="$cfgstr local.ea-len $(eval "echo \
$RULE_${k}_EALEN
") local.psid-offset $(eval "echo \
$RULE_${k}_OFFSET
")"
115 cfgstr
="$cfgstr remote.v4 0.0.0.0/0 remote.v6 $(eval "echo \
$RULE_${k}_DMR
") remote.style RFC6052 remote.ea-len 0 remote.psid-offset 0"
116 echo config
$link $cfgstr > /proc
/net
/nat46
/control
118 for i
in $
(seq $RULE_COUNT); do
119 [ "$(eval "echo \
$RULE_${i}_FMR
")" != 1 ] && continue
120 local cfgstr
="remote.style $style remote.v4 $(eval "echo \
$RULE_${i}_IPV4PREFIX
")/$(eval "echo \
$RULE_${i}_PREFIX4LEN
")"
121 cfgstr
="$cfgstr remote.v6 $(eval "echo \
$RULE_${i}_IPV6PREFIX
")/$(eval "echo \
$RULE_${i}_PREFIX6LEN
")"
122 cfgstr
="$cfgstr remote.ea-len $(eval "echo \
$RULE_${i}_EALEN
") remote.psid-offset $(eval "echo \
$RULE_${i}_OFFSET
")"
123 echo insert
$link $cfgstr > /proc
/net
/nat46
/control
126 proto_notify_error
"$cfg" "UNSUPPORTED_TYPE"
127 proto_block_restart
"$cfg"
130 proto_add_ipv4_route
"0.0.0.0" 0
132 [ -n "$zone" ] && json_add_string zone
"$zone"
134 json_add_array firewall
135 if [ -z "$(eval "echo \
$RULE_${k}_PORTSETS
")" ]; then
137 json_add_string
type nat
138 json_add_string target SNAT
139 json_add_string family inet
140 json_add_string snat_ip $
(eval "echo \$RULE_${k}_IPV4ADDR")
143 for portset
in $
(eval "echo \$RULE_${k}_PORTSETS"); do
144 for proto
in icmp tcp udp
; do
146 json_add_string
type nat
147 json_add_string target SNAT
148 json_add_string family inet
149 json_add_string proto
"$proto"
150 json_add_boolean connlimit_ports
1
151 json_add_string snat_ip $
(eval "echo \$RULE_${k}_IPV4ADDR")
152 json_add_string snat_port
"$portset"
157 if [ "$type" = "map-t" ]; then
158 [ -z "$zone" ] && zone
=$
(fw3
-q network
$iface 2>/dev
/null
)
162 json_add_string
type rule
163 json_add_string family inet6
164 json_add_string proto all
165 json_add_string direction
in
166 json_add_string dest
"$zone"
167 json_add_string src
"$zone"
168 json_add_string src_ip $
(eval "echo \$RULE_${k}_IPV6ADDR")
169 json_add_string target ACCEPT
172 json_add_string
type rule
173 json_add_string family inet6
174 json_add_string proto all
175 json_add_string direction out
176 json_add_string dest
"$zone"
177 json_add_string src
"$zone"
178 json_add_string dest_ip $
(eval "echo \$RULE_${k}_IPV6ADDR")
179 json_add_string target ACCEPT
182 proto_add_ipv6_route $
(eval "echo \$RULE_${k}_IPV6ADDR") 128
187 proto_send_update
"$cfg"
189 if [ "$type" = "lw4o6" -o "$type" = "map-e" ]; then
191 json_add_string name
"${cfg}_"
192 json_add_string ifname
"@$(eval "echo \
$RULE_${k}_PD6IFACE
")"
193 json_add_string proto
"static"
194 json_add_array ip6addr
195 json_add_string
"" "$(eval "echo \
$RULE_${k}_IPV6ADDR
")"
198 ubus call network add_dynamic
"$(json_dump)"
202 proto_map_teardown
() {
204 local link
="map-$cfg"
206 json_get_var
type type
208 [ -z "$type" ] && type="map-e"
211 "map-e"|
"lw4o6") ifdown
"${cfg}_" ;;
212 "map-t") [ -f "/proc/net/nat46/control" ] && echo del
$link > /proc
/net
/nat46
/control
;;
215 rm -f /tmp
/map-
$cfg.rules
218 proto_map_init_config
() {
222 proto_config_add_string
"rule"
223 proto_config_add_string
"ipaddr"
224 proto_config_add_int
"ip4prefixlen"
225 proto_config_add_string
"ip6prefix"
226 proto_config_add_int
"ip6prefixlen"
227 proto_config_add_string
"peeraddr"
228 proto_config_add_int
"ealen"
229 proto_config_add_int
"psidlen"
230 proto_config_add_int
"psid"
231 proto_config_add_int
"offset"
233 proto_config_add_string
"tunlink"
234 proto_config_add_int
"mtu"
235 proto_config_add_int
"ttl"
236 proto_config_add_string
"zone"
237 proto_config_add_string
"encaplimit"
240 [ -n "$INCLUDE_ONLY" ] ||
{