map: Fix white space errors
[openwrt/svn-archive/archive.git] / package / network / ipv6 / map / files / map.sh
1 #!/bin/sh
2 # map.sh - IPv4-in-IPv6 tunnel backend
3 #
4 # Author: Steven Barth <cyrus@openwrt.org>
5 # Copyright (c) 2014 cisco Systems, Inc.
6 #
7 # This program is free software; you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License version 2
9 # as published by the Free Software Foundation
10 #
11 # This program is distributed in the hope that it will be useful,
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 # GNU General Public License for more details.
15
16 [ -n "$INCLUDE_ONLY" ] || {
17 . /lib/functions.sh
18 . /lib/functions/network.sh
19 . ../netifd-proto.sh
20 init_proto "$@"
21 }
22
23 proto_map_setup() {
24 local cfg="$1"
25 local iface="$2"
26 local link="map-$cfg"
27
28 # uncomment for legacy MAP0 mode
29 #export LEGACY=1
30
31 local type mtu ttl tunlink zone
32 local rule ipaddr ip4prefixlen ip6prefix ip6prefixlen peeraddr ealen psidlen psid offset
33 json_get_vars type mtu ttl tunlink zone
34 json_get_vars rule ipaddr ip4prefixlen ip6prefix ip6prefixlen peeraddr ealen psidlen psid offset
35
36 [ -z "$zone" ] && zone="wan"
37 [ -z "$type" ] && type="map-e"
38 [ -z "$ip4prefixlen" ] && ip4prefixlen=32
39
40 ( proto_add_host_dependency "$cfg" "::" "$tunlink" )
41
42 if [ -z "$rule" ]; then
43 rule="type=$type,ipv6prefix=$ip6prefix,prefix6len=$ip6prefixlen,ipv4prefix=$ipaddr,prefix4len=$ip4prefixlen"
44 [ -n "$psid" ] && rule="$rule,psid=$psid"
45 [ -n "$psidlen" ] && rule="$rule,psidlen=$psidlen"
46 [ -n "$offset" ] && rule="$rule,offset=$offset"
47 [ -n "$ealen" ] && rule="$rule,ealen=$ealen"
48 if [ "$type" = "map-t" ]; then
49 rule="$rule,dmr=$peeraddr"
50 else
51 rule="$rule,br=$peeraddr"
52 fi
53 fi
54
55 echo "rule=$rule" > /tmp/map-$cfg.rules
56 RULE_DATA=$(mapcalc ${tunlink:-\*} $rule)
57 if [ "$?" != 0 ]; then
58 proto_notify_error "$cfg" "INVALID_MAP_RULE"
59 proto_block_restart "$cfg"
60 return
61 fi
62
63 echo "$RULE_DATA" >> /tmp/map-$cfg.rules
64 eval $RULE_DATA
65
66 if [ -z "$RULE_BMR" ]; then
67 proto_notify_error "$cfg" "NO_MATCHING_PD"
68 proto_block_restart "$cfg"
69 return
70 fi
71
72 k=$RULE_BMR
73 if [ "$type" = "lw4o6" -o "$type" = "map-e" ]; then
74 proto_init_update "$link" 1
75 proto_add_ipv4_address $(eval "echo \$RULE_${k}_IPV4ADDR") "" "" ""
76
77 proto_add_tunnel
78 json_add_string mode ipip6
79 json_add_int mtu "${mtu:-1280}"
80 json_add_int ttl "${ttl:-64}"
81 json_add_string local $(eval "echo \$RULE_${k}_IPV6ADDR")
82 json_add_string remote $(eval "echo \$RULE_${k}_BR")
83 json_add_string link $(eval "echo \$RULE_${k}_PD6IFACE")
84
85 if [ "$type" = "map-e" ]; then
86 json_add_array "fmrs"
87 for i in $(seq $RULE_COUNT); do
88 [ "$(eval "echo \$RULE_${i}_FMR")" != 1 ] && continue
89 fmr="$(eval "echo \$RULE_${i}_IPV6PREFIX")/$(eval "echo \$RULE_${i}_PREFIX6LEN")"
90 fmr="$fmr,$(eval "echo \$RULE_${i}_IPV4PREFIX")/$(eval "echo \$RULE_${i}_PREFIX4LEN")"
91 fmr="$fmr,$(eval "echo \$RULE_${i}_EALEN"),$(eval "echo \$RULE_${i}_OFFSET")"
92 json_add_string "" "$fmr"
93 done
94 json_close_array
95 fi
96
97 proto_close_tunnel
98 elif [ "$type" = "map-t" -a -f "/proc/net/nat46/control" ]; then
99 proto_init_update "$link" 1
100 local style="MAP"
101 [ "$LEGACY" = 1 ] && style="MAP0"
102
103 echo add $link > /proc/net/nat46/control
104 local cfgstr="local.style $style local.v4 $(eval "echo \$RULE_${k}_IPV4PREFIX")/$(eval "echo \$RULE_${k}_PREFIX4LEN")"
105 cfgstr="$cfgstr local.v6 $(eval "echo \$RULE_${k}_IPV6PREFIX")/$(eval "echo \$RULE_${k}_PREFIX6LEN")"
106 cfgstr="$cfgstr local.ea-len $(eval "echo \$RULE_${k}_EALEN") local.psid-offset $(eval "echo \$RULE_${k}_OFFSET")"
107 cfgstr="$cfgstr remote.v4 0.0.0.0/0 remote.v6 $(eval "echo \$RULE_${k}_DMR") remote.style RFC6052 remote.ea-len 0 remote.psid-offset 0"
108 echo config $link $cfgstr > /proc/net/nat46/control
109
110 for i in $(seq $RULE_COUNT); do
111 [ "$(eval "echo \$RULE_${i}_FMR")" != 1 ] && continue
112 local cfgstr="remote.style $style remote.v4 $(eval "echo \$RULE_${i}_IPV4PREFIX")/$(eval "echo \$RULE_${i}_PREFIX4LEN")"
113 cfgstr="$cfgstr remote.v6 $(eval "echo \$RULE_${i}_IPV6PREFIX")/$(eval "echo \$RULE_${i}_PREFIX6LEN")"
114 cfgstr="$cfgstr remote.ea-len $(eval "echo \$RULE_${i}_EALEN") remote.psid-offset $(eval "echo \$RULE_${i}_OFFSET")"
115 echo insert $link $cfgstr > /proc/net/nat46/control
116 done
117 else
118 proto_notify_error "$cfg" "UNSUPPORTED_TYPE"
119 proto_block_restart "$cfg"
120 fi
121
122 proto_add_ipv4_route "0.0.0.0" 0
123 proto_add_data
124 [ "$zone" != "-" ] && json_add_string zone "$zone"
125
126 json_add_array firewall
127 if [ -z "$(eval "echo \$RULE_${k}_PORTSETS")" ]; then
128 json_add_object ""
129 json_add_string type nat
130 json_add_string target SNAT
131 json_add_string family inet
132 json_add_string snat_ip $(eval "echo \$RULE_${k}_IPV4ADDR")
133 json_close_object
134 else
135 for portset in $(eval "echo \$RULE_${k}_PORTSETS"); do
136 for proto in icmp tcp udp; do
137 json_add_object ""
138 json_add_string type nat
139 json_add_string target SNAT
140 json_add_string family inet
141 json_add_string proto "$proto"
142 json_add_boolean connlimit_ports 1
143 json_add_string snat_ip $(eval "echo \$RULE_${k}_IPV4ADDR")
144 json_add_string snat_port "$portset"
145 json_close_object
146 done
147 done
148 fi
149 if [ "$type" = "map-t" ]; then
150 json_add_object ""
151 json_add_string type rule
152 json_add_string family inet6
153 json_add_string proto all
154 json_add_string direction in
155 json_add_string dest "$zone"
156 json_add_string src "$zone"
157 json_add_string src_ip $(eval "echo \$RULE_${k}_IPV6ADDR")
158 json_add_string target ACCEPT
159 json_close_object
160 json_add_object ""
161 json_add_string type rule
162 json_add_string family inet6
163 json_add_string proto all
164 json_add_string direction out
165 json_add_string dest "$zone"
166 json_add_string src "$zone"
167 json_add_string dest_ip $(eval "echo \$RULE_${k}_IPV6ADDR")
168 json_add_string target ACCEPT
169 json_close_object
170 proto_add_ipv6_route $(eval "echo \$RULE_${k}_IPV6ADDR") 128
171 fi
172 json_close_array
173 proto_close_data
174
175 proto_send_update "$cfg"
176
177 if [ "$type" = "lw4o6" -o "$type" = "map-e" ]; then
178 json_init
179 json_add_string name "${cfg}_local"
180 json_add_string ifname "@$(eval "echo \$RULE_${k}_PD6IFACE")"
181 json_add_string proto "static"
182 json_add_array ip6addr
183 json_add_string "" "$(eval "echo \$RULE_${k}_IPV6ADDR")"
184 json_close_array
185 json_close_object
186 ubus call network add_dynamic "$(json_dump)"
187 fi
188 }
189
190 proto_map_teardown() {
191 local cfg="$1"
192 ifdown "${cfg}_local"
193 rm -f /tmp/map-$cfg.rules
194 }
195
196 proto_map_init_config() {
197 no_device=1
198 available=1
199
200 proto_config_add_string "rule"
201 proto_config_add_string "ipaddr"
202 proto_config_add_int "ip4prefixlen"
203 proto_config_add_string "ip6prefix"
204 proto_config_add_int "ip6prefixlen"
205 proto_config_add_string "peeraddr"
206 proto_config_add_int "psidlen"
207 proto_config_add_int "psid"
208 proto_config_add_int "offset"
209
210 proto_config_add_string "tunlink"
211 proto_config_add_int "mtu"
212 proto_config_add_int "ttl"
213 proto_config_add_string "zone"
214 }
215
216 [ -n "$INCLUDE_ONLY" ] || {
217 add_protocol map
218 }