IPv6: fix wrap-arounds in address lifetimes
[project/netifd.git] / interface-ip.c
1 /*
2 * netifd - network interface daemon
3 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
4 * Copyright (C) 2012 Steven Barth <steven@midlink.org>
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2
8 * as published by the Free Software Foundation
9 *
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
14 */
15 #include <string.h>
16 #include <stdlib.h>
17 #include <stdio.h>
18 #include <unistd.h>
19
20 #include <limits.h>
21 #include <arpa/inet.h>
22
23 #include "netifd.h"
24 #include "device.h"
25 #include "interface.h"
26 #include "interface-ip.h"
27 #include "proto.h"
28 #include "ubus.h"
29 #include "system.h"
30
31 enum {
32 ROUTE_INTERFACE,
33 ROUTE_TARGET,
34 ROUTE_MASK,
35 ROUTE_GATEWAY,
36 ROUTE_METRIC,
37 ROUTE_MTU,
38 ROUTE_VALID,
39 ROUTE_TABLE,
40 __ROUTE_MAX
41 };
42
43 static const struct blobmsg_policy route_attr[__ROUTE_MAX] = {
44 [ROUTE_INTERFACE] = { .name = "interface", .type = BLOBMSG_TYPE_STRING },
45 [ROUTE_TARGET] = { .name = "target", .type = BLOBMSG_TYPE_STRING },
46 [ROUTE_MASK] = { .name = "netmask", .type = BLOBMSG_TYPE_STRING },
47 [ROUTE_GATEWAY] = { .name = "gateway", .type = BLOBMSG_TYPE_STRING },
48 [ROUTE_METRIC] = { .name = "metric", .type = BLOBMSG_TYPE_INT32 },
49 [ROUTE_MTU] = { .name = "mtu", .type = BLOBMSG_TYPE_INT32 },
50 [ROUTE_TABLE] = { .name = "table", .type = BLOBMSG_TYPE_STRING },
51 [ROUTE_VALID] = { .name = "valid", .type = BLOBMSG_TYPE_INT32 },
52 };
53
54 const struct config_param_list route_attr_list = {
55 .n_params = __ROUTE_MAX,
56 .params = route_attr,
57 };
58
59
60 struct list_head prefixes = LIST_HEAD_INIT(prefixes);
61 static struct device_prefix *ula_prefix = NULL;
62 static struct uloop_timeout valid_until_timeout;
63
64
65 static void
66 clear_if_addr(union if_addr *a, int mask)
67 {
68 int m_bytes = (mask + 7) / 8;
69 uint8_t m_clear = (1 << (m_bytes * 8 - mask)) - 1;
70 uint8_t *p = (uint8_t *) a;
71
72 if (m_bytes < sizeof(a))
73 memset(p + m_bytes, 0, sizeof(a) - m_bytes);
74
75 p[m_bytes - 1] &= ~m_clear;
76 }
77
78 static bool
79 match_if_addr(union if_addr *a1, union if_addr *a2, int mask)
80 {
81 union if_addr *p1, *p2;
82
83 p1 = alloca(sizeof(*a1));
84 p2 = alloca(sizeof(*a2));
85
86 memcpy(p1, a1, sizeof(*a1));
87 clear_if_addr(p1, mask);
88 memcpy(p2, a2, sizeof(*a2));
89 clear_if_addr(p2, mask);
90
91 return !memcmp(p1, p2, sizeof(*p1));
92 }
93
94 static int set_ip_source_policy(bool add, bool v6, unsigned int priority,
95 const union if_addr *addr, uint8_t mask, struct interface *iface)
96 {
97
98
99 struct iprule rule = {
100 .flags = IPRULE_SRC | IPRULE_LOOKUP | IPRULE_PRIORITY,
101 .priority = priority,
102 .lookup = (v6) ? iface->ip6table : iface->ip4table,
103 .src_addr = *addr,
104 .src_mask = mask,
105 };
106
107 if (!rule.lookup)
108 return 0;
109
110 rule.flags |= (v6) ? IPRULE_INET6 : IPRULE_INET4;
111
112 return (add) ? system_add_iprule(&rule) : system_del_iprule(&rule);
113 }
114
115 static int set_ip_lo_policy(bool add, bool v6, struct interface *iface)
116 {
117 struct iprule rule = {
118 .flags = IPRULE_IN | IPRULE_LOOKUP | IPRULE_PRIORITY,
119 .priority = IPRULE_PRIORITY_NW + iface->l3_dev.dev->ifindex,
120 .lookup = (v6) ? iface->ip6table : iface->ip4table,
121 .in_dev = "lo"
122 };
123
124 if (!rule.lookup)
125 return 0;
126
127 rule.flags |= (v6) ? IPRULE_INET6 : IPRULE_INET4;
128
129 return (add) ? system_add_iprule(&rule) : system_del_iprule(&rule);
130 }
131
132 static bool
133 __find_ip_addr_target(struct interface_ip_settings *ip, union if_addr *a, bool v6)
134 {
135 struct device_addr *addr;
136
137 vlist_for_each_element(&ip->addr, addr, node) {
138 if (!addr->enabled)
139 continue;
140
141 if (v6 != ((addr->flags & DEVADDR_FAMILY) == DEVADDR_INET6))
142 continue;
143
144 // Handle offlink addresses correctly
145 unsigned int mask = addr->mask;
146 if ((addr->flags & DEVADDR_FAMILY) == DEVADDR_INET6 &&
147 (addr->flags & DEVADDR_OFFLINK))
148 mask = 128;
149
150 if (!match_if_addr(&addr->addr, a, mask))
151 continue;
152
153 return true;
154 }
155
156 return false;
157 }
158
159 static void
160 __find_ip_route_target(struct interface_ip_settings *ip, union if_addr *a,
161 bool v6, struct device_route **res)
162 {
163 struct device_route *route;
164
165 vlist_for_each_element(&ip->route, route, node) {
166 if (!route->enabled)
167 continue;
168
169 if (v6 != ((route->flags & DEVADDR_FAMILY) == DEVADDR_INET6))
170 continue;
171
172 if (!match_if_addr(&route->addr, a, route->mask))
173 continue;
174
175 if (route->flags & DEVROUTE_TABLE)
176 continue;
177
178 if (!*res || route->mask < (*res)->mask)
179 *res = route;
180 }
181 }
182
183 static bool
184 interface_ip_find_addr_target(struct interface *iface, union if_addr *a, bool v6)
185 {
186 return __find_ip_addr_target(&iface->proto_ip, a, v6) ||
187 __find_ip_addr_target(&iface->config_ip, a, v6);
188 }
189
190 static void
191 interface_ip_find_route_target(struct interface *iface, union if_addr *a,
192 bool v6, struct device_route **route)
193 {
194 __find_ip_route_target(&iface->proto_ip, a, v6, route);
195 __find_ip_route_target(&iface->config_ip, a, v6, route);
196 }
197
198 struct interface *
199 interface_ip_add_target_route(union if_addr *addr, bool v6, struct interface *iface)
200 {
201 struct device_route *route, *r_next = NULL;
202 bool defaultroute_target = false;
203 int addrsize = v6 ? sizeof(addr->in6) : sizeof(addr->in);
204
205 route = calloc(1, sizeof(*route));
206 if (!route)
207 return NULL;
208
209 route->flags = v6 ? DEVADDR_INET6 : DEVADDR_INET4;
210 route->mask = v6 ? 128 : 32;
211 if (memcmp(&route->addr, addr, addrsize) == 0)
212 defaultroute_target = true;
213 else
214 memcpy(&route->addr, addr, addrsize);
215
216 if (iface) {
217 /* look for locally addressable target first */
218 if (interface_ip_find_addr_target(iface, addr, v6))
219 goto done;
220
221 /* do not stop at the first route, let the lookup compare
222 * masks to find the best match */
223 interface_ip_find_route_target(iface, addr, v6, &r_next);
224 } else {
225 vlist_for_each_element(&interfaces, iface, node) {
226 /* look for locally addressable target first */
227 if (interface_ip_find_addr_target(iface, addr, v6))
228 goto done;
229
230 /* do not stop at the first route, let the lookup compare
231 * masks to find the best match */
232 interface_ip_find_route_target(iface, addr, v6, &r_next);
233 }
234 }
235
236 if (!r_next) {
237 free(route);
238 return NULL;
239 }
240
241 iface = r_next->iface;
242 memcpy(&route->nexthop, &r_next->nexthop, sizeof(route->nexthop));
243 route->mtu = r_next->mtu;
244 route->metric = r_next->metric;
245 route->table = r_next->table;
246
247 done:
248 route->iface = iface;
249 if (defaultroute_target)
250 free(route);
251 else
252 vlist_add(&iface->host_routes, &route->node, route);
253 return iface;
254 }
255
256 void
257 interface_ip_add_route(struct interface *iface, struct blob_attr *attr, bool v6)
258 {
259 struct interface_ip_settings *ip;
260 struct blob_attr *tb[__ROUTE_MAX], *cur;
261 struct device_route *route;
262 int af = v6 ? AF_INET6 : AF_INET;
263 bool is_proto_route = !!iface;
264
265 blobmsg_parse(route_attr, __ROUTE_MAX, tb, blobmsg_data(attr), blobmsg_data_len(attr));
266
267 if (!iface) {
268 if ((cur = tb[ROUTE_INTERFACE]) == NULL)
269 return;
270
271 iface = vlist_find(&interfaces, blobmsg_data(cur), iface, node);
272 if (!iface)
273 return;
274
275 ip = &iface->config_ip;
276 } else {
277 ip = &iface->proto_ip;
278 }
279
280 route = calloc(1, sizeof(*route));
281 if (!route)
282 return;
283
284 route->flags = v6 ? DEVADDR_INET6 : DEVADDR_INET4;
285 route->mask = v6 ? 128 : 32;
286 if ((cur = tb[ROUTE_MASK]) != NULL) {
287 route->mask = parse_netmask_string(blobmsg_data(cur), v6);
288 if (route->mask > (v6 ? 128 : 32))
289 goto error;
290 }
291
292 if ((cur = tb[ROUTE_TARGET]) != NULL) {
293 if (!parse_ip_and_netmask(af, blobmsg_data(cur), &route->addr, &route->mask)) {
294 DPRINTF("Failed to parse route target: %s\n", (char *) blobmsg_data(cur));
295 goto error;
296 }
297 }
298
299 if ((cur = tb[ROUTE_GATEWAY]) != NULL) {
300 if (!inet_pton(af, blobmsg_data(cur), &route->nexthop)) {
301 DPRINTF("Failed to parse route gateway: %s\n", (char *) blobmsg_data(cur));
302 goto error;
303 }
304 }
305
306 if ((cur = tb[ROUTE_METRIC]) != NULL) {
307 route->metric = blobmsg_get_u32(cur);
308 route->flags |= DEVROUTE_METRIC;
309 }
310
311 if ((cur = tb[ROUTE_MTU]) != NULL) {
312 route->mtu = blobmsg_get_u32(cur);
313 route->flags |= DEVROUTE_MTU;
314 }
315
316 // Use source-based routing
317 if (is_proto_route) {
318 route->table = (v6) ? iface->ip6table : iface->ip4table;
319 route->flags |= DEVROUTE_SRCTABLE;
320 }
321
322 if ((cur = tb[ROUTE_TABLE]) != NULL) {
323 if (!system_resolve_rt_table(blobmsg_data(cur), &route->table)) {
324 DPRINTF("Failed to resolve routing table: %s\n", (char *) blobmsg_data(cur));
325 goto error;
326 }
327
328 if (route->table)
329 route->flags |= DEVROUTE_TABLE;
330 }
331
332 if ((cur = tb[ROUTE_VALID]) != NULL) {
333 int64_t valid = blobmsg_get_u32(cur);
334 int64_t valid_until = valid + (int64_t)system_get_rtime();
335 if (valid_until <= LONG_MAX && valid != 0xffffffffLL) // Catch overflow
336 route->valid_until = valid_until;
337 }
338
339 vlist_add(&ip->route, &route->node, route);
340 return;
341
342 error:
343 free(route);
344 }
345
346 static int
347 addr_cmp(const void *k1, const void *k2, void *ptr)
348 {
349 return memcmp(k1, k2, sizeof(struct device_addr) -
350 offsetof(struct device_addr, flags));
351 }
352
353 static int
354 route_cmp(const void *k1, const void *k2, void *ptr)
355 {
356 const struct device_route *r1 = k1, *r2 = k2;
357
358 if (r1->mask != r2->mask)
359 return r2->mask - r1->mask;
360
361 if (r1->metric != r2->metric)
362 return r1->metric - r2->metric;
363
364 if (r1->flags != r2->flags)
365 return r2->flags - r1->flags;
366
367 return memcmp(&r1->addr, &r2->addr, sizeof(r1->addr));
368 }
369
370 static int
371 prefix_cmp(const void *k1, const void *k2, void *ptr)
372 {
373 return memcmp(k1, k2, sizeof(struct device_prefix) -
374 offsetof(struct device_prefix, addr));
375 }
376
377 static void
378 interface_handle_subnet_route(struct interface *iface, struct device_addr *addr, bool add)
379 {
380 struct device *dev = iface->l3_dev.dev;
381 struct device_route route;
382
383 memset(&route, 0, sizeof(route));
384 route.iface = iface;
385 route.flags = addr->flags;
386 route.mask = addr->mask;
387 memcpy(&route.addr, &addr->addr, sizeof(route.addr));
388 clear_if_addr(&route.addr, route.mask);
389
390 if (add) {
391 route.flags |= DEVADDR_KERNEL;
392 system_del_route(dev, &route);
393
394 if (!(addr->flags & DEVADDR_OFFLINK)) {
395 route.flags &= ~DEVADDR_KERNEL;
396 route.metric = iface->metric;
397 system_add_route(dev, &route);
398 }
399 } else {
400 if (!(addr->flags & DEVADDR_OFFLINK))
401 system_del_route(dev, &route);
402 }
403 }
404
405 static void
406 interface_update_proto_addr(struct vlist_tree *tree,
407 struct vlist_node *node_new,
408 struct vlist_node *node_old)
409 {
410 struct interface_ip_settings *ip;
411 struct interface *iface;
412 struct device *dev;
413 struct device_addr *a_new = NULL, *a_old = NULL;
414 bool keep = false;
415 bool v6 = false;
416
417 ip = container_of(tree, struct interface_ip_settings, addr);
418 iface = ip->iface;
419 dev = iface->l3_dev.dev;
420
421 if (node_new) {
422 a_new = container_of(node_new, struct device_addr, node);
423
424 if ((a_new->flags & DEVADDR_FAMILY) == DEVADDR_INET4 &&
425 !a_new->broadcast) {
426
427 uint32_t mask = ~0;
428 uint32_t *a = (uint32_t *) &a_new->addr;
429
430 mask >>= a_new->mask;
431 a_new->broadcast = *a | htonl(mask);
432 }
433 }
434
435 if (node_old)
436 a_old = container_of(node_old, struct device_addr, node);
437
438 if (a_new && a_old) {
439 keep = true;
440
441 if (a_old->flags != a_new->flags ||
442 a_old->valid_until != a_new->valid_until ||
443 a_old->preferred_until != a_new->preferred_until)
444 keep = false;
445
446 if ((a_new->flags & DEVADDR_FAMILY) == DEVADDR_INET4 &&
447 a_new->broadcast != a_old->broadcast)
448 keep = false;
449 }
450
451 if (node_old) {
452 if (!(a_old->flags & DEVADDR_EXTERNAL) && a_old->enabled && !keep) {
453 interface_handle_subnet_route(iface, a_old, false);
454
455 if ((a_old->flags & DEVADDR_FAMILY) == DEVADDR_INET6)
456 v6 = true;
457
458 //This is needed for source routing to work correctly. If a device
459 //has two connections to a network using the same subnet, adding
460 //only the network-rule will cause packets to be routed through the
461 //first matching network (source IP matches both masks).
462 set_ip_source_policy(false, v6, IPRULE_PRIORITY_ADDR, &a_old->addr,
463 (v6) ? 128 : 32, iface);
464 set_ip_source_policy(false, v6, IPRULE_PRIORITY_NW, &a_old->addr,
465 a_old->mask, iface);
466
467 system_del_address(dev, a_old);
468 }
469 free(a_old);
470 }
471
472 if (node_new) {
473 a_new->enabled = true;
474 if (!(a_new->flags & DEVADDR_EXTERNAL) && !keep) {
475 system_add_address(dev, a_new);
476
477 if ((a_new->flags & DEVADDR_FAMILY) == DEVADDR_INET6)
478 v6 = true;
479
480 set_ip_source_policy(true, v6, IPRULE_PRIORITY_ADDR, &a_new->addr,
481 (v6) ? 128 : 32, iface);
482 set_ip_source_policy(true, v6, IPRULE_PRIORITY_NW, &a_new->addr,
483 a_new->mask, iface);
484
485 if ((a_new->flags & DEVADDR_OFFLINK) || iface->metric)
486 interface_handle_subnet_route(iface, a_new, true);
487 }
488 }
489 }
490
491 static bool
492 enable_route(struct interface_ip_settings *ip, struct device_route *route)
493 {
494 if (ip->no_defaultroute && !route->mask)
495 return false;
496
497 return ip->enabled;
498 }
499
500 static void
501 interface_update_proto_route(struct vlist_tree *tree,
502 struct vlist_node *node_new,
503 struct vlist_node *node_old)
504 {
505 struct interface_ip_settings *ip;
506 struct interface *iface;
507 struct device *dev;
508 struct device_route *route_old, *route_new;
509 bool keep = false;
510
511 ip = container_of(tree, struct interface_ip_settings, route);
512 iface = ip->iface;
513 dev = iface->l3_dev.dev;
514
515 route_old = container_of(node_old, struct device_route, node);
516 route_new = container_of(node_new, struct device_route, node);
517
518 if (node_old && node_new)
519 keep = !memcmp(&route_old->nexthop, &route_new->nexthop, sizeof(route_old->nexthop));
520
521 if (node_old) {
522 if (!(route_old->flags & DEVADDR_EXTERNAL) && route_old->enabled && !keep)
523 system_del_route(dev, route_old);
524 free(route_old);
525 }
526
527 if (node_new) {
528 bool _enabled = enable_route(ip, route_new);
529
530 if (!(route_new->flags & DEVROUTE_METRIC))
531 route_new->metric = iface->metric;
532
533 if (!(route_new->flags & DEVADDR_EXTERNAL) && !keep && _enabled)
534 system_add_route(dev, route_new);
535
536 route_new->iface = iface;
537 route_new->enabled = _enabled;
538 }
539 }
540
541 static void
542 interface_update_host_route(struct vlist_tree *tree,
543 struct vlist_node *node_new,
544 struct vlist_node *node_old)
545 {
546 struct interface *iface;
547 struct device *dev;
548 struct device_route *route_old, *route_new;
549
550 iface = container_of(tree, struct interface, host_routes);
551 dev = iface->l3_dev.dev;
552
553 route_old = container_of(node_old, struct device_route, node);
554 route_new = container_of(node_new, struct device_route, node);
555
556 if (node_old) {
557 system_del_route(dev, route_old);
558 free(route_old);
559 }
560
561 if (node_new)
562 system_add_route(dev, route_new);
563 }
564
565
566 static void
567 interface_set_prefix_address(struct device_prefix_assignment *assignment,
568 const struct device_prefix *prefix, struct interface *iface, bool add);
569
570 static void interface_trigger_ula_prefix(struct interface *iface,
571 const struct device_prefix *prefix, bool enable)
572 {
573 if (prefix == ula_prefix || (prefix->addr.s6_addr[0] & 0xfe) != 0xfc)
574 return;
575
576 bool external_ula = false;
577 struct device_prefix_assignment *ula_assign = NULL;
578 struct device_prefix *c;
579 list_for_each_entry(c, &prefixes, head) {
580 if (c != ula_prefix && (c->addr.s6_addr[0] & 0xfe) != 0xfc)
581 continue;
582
583 struct device_prefix_assignment *a;
584 list_for_each_entry(a, &c->assignments, head) {
585 if (!strcmp(a->name, iface->name)) {
586 if (c == ula_prefix)
587 ula_assign = a;
588 else if (a->enabled)
589 external_ula = true;
590 }
591 }
592
593 }
594
595 // Remove ULA assignment if there is an externally managed ULA and vice versa
596 if (ula_assign && ((enable && !external_ula) || (!enable && external_ula)))
597 interface_set_prefix_address(ula_assign, ula_prefix, iface, enable);
598 }
599
600
601 static void
602 interface_set_prefix_address(struct device_prefix_assignment *assignment,
603 const struct device_prefix *prefix, struct interface *iface, bool add)
604 {
605 const struct interface *uplink = prefix->iface;
606 if (!iface->l3_dev.dev)
607 return;
608
609 struct device *l3_downlink = iface->l3_dev.dev;
610
611 struct device_addr addr;
612 memset(&addr, 0, sizeof(addr));
613 addr.addr.in6 = prefix->addr;
614 addr.addr.in6.s6_addr32[1] |= htonl(assignment->assigned);
615 addr.addr.in6.s6_addr[15] += 1;
616 addr.mask = assignment->length;
617 addr.flags = DEVADDR_INET6;
618 addr.preferred_until = prefix->preferred_until;
619 addr.valid_until = prefix->valid_until;
620
621 if (!add && assignment->enabled) {
622 time_t now = system_get_rtime();
623 addr.preferred_until = now;
624 if (!addr.valid_until || addr.valid_until - now > 7200)
625 addr.valid_until = now + 7200;
626 system_add_address(l3_downlink, &addr);
627 assignment->enabled = false;
628
629 interface_trigger_ula_prefix(iface, prefix, true);
630 } else if (add && (iface->state == IFS_UP || iface->state == IFS_SETUP)) {
631 system_add_address(l3_downlink, &addr);
632 if (uplink && uplink->l3_dev.dev) {
633 int mtu = system_update_ipv6_mtu(
634 uplink->l3_dev.dev, 0);
635 if (mtu > 0)
636 system_update_ipv6_mtu(l3_downlink, mtu);
637 }
638 assignment->enabled = true;
639
640 interface_trigger_ula_prefix(iface, prefix, false);
641 }
642 }
643
644 static bool interface_prefix_assign(struct list_head *list,
645 struct device_prefix_assignment *assign)
646 {
647 int32_t current = 0, asize = (1 << (64 - assign->length)) - 1;
648 struct device_prefix_assignment *c;
649 list_for_each_entry(c, list, head) {
650 if (assign->assigned != -1) {
651 if (assign->assigned > current && assign->assigned + asize < c->assigned) {
652 list_add_tail(&assign->head, &c->head);
653 return true;
654 }
655 } else if (assign->assigned == -1) {
656 current = (current + asize) & (~asize);
657 if (current + asize < c->assigned) {
658 assign->assigned = current;
659 list_add_tail(&assign->head, &c->head);
660 return true;
661 }
662 }
663 current = (c->assigned + (1 << (64 - c->length)));
664 }
665 return false;
666 }
667
668 static void interface_update_prefix_assignments(struct device_prefix *prefix, bool setup)
669 {
670 struct device_prefix_assignment *c;
671 struct interface *iface;
672
673 // Delete all assignments
674 while (!list_empty(&prefix->assignments)) {
675 c = list_first_entry(&prefix->assignments,
676 struct device_prefix_assignment, head);
677 if ((iface = vlist_find(&interfaces, c->name, iface, node)))
678 interface_set_prefix_address(c, prefix, iface, false);
679 list_del(&c->head);
680 free(c);
681 }
682
683 if (!setup)
684 return;
685
686 // End-of-assignment sentinel
687 c = malloc(sizeof(*c) + 1);
688 c->assigned = 1 << (64 - prefix->length);
689 c->length = 64;
690 c->name[0] = 0;
691 list_add(&c->head, &prefix->assignments);
692
693 // Excluded prefix
694 if (prefix->excl_length > 0) {
695 const char name[] = "!excluded";
696 c = malloc(sizeof(*c) + sizeof(name));
697 c->assigned = ntohl(prefix->excl_addr.s6_addr32[1]) &
698 ((1 << (64 - prefix->length)) - 1);
699 c->length = prefix->excl_length;
700 memcpy(c->name, name, sizeof(name));
701 list_add(&c->head, &prefix->assignments);
702 }
703
704 struct list_head assign_later = LIST_HEAD_INIT(assign_later);
705 vlist_for_each_element(&interfaces, iface, node) {
706 if (iface->config_ip.assignment_length < 48 ||
707 iface->config_ip.assignment_length > 64)
708 continue;
709
710 size_t namelen = strlen(iface->name) + 1;
711 c = malloc(sizeof(*c) + namelen);
712 c->length = iface->config_ip.assignment_length;
713 c->assigned = iface->config_ip.assignment_hint;
714 c->enabled = false;
715 memcpy(c->name, iface->name, namelen);
716
717 // First process all custom assignments, put all others in later-list
718 if (c->assigned == -1 || !interface_prefix_assign(&prefix->assignments, c)) {
719 if (c->assigned != -1) {
720 c->assigned = -1;
721 netifd_log_message(L_WARNING, "Failed to assign requested subprefix "
722 "of size %hhu for %s, trying other\n", c->length, c->name);
723 }
724 list_add_tail(&c->head, &assign_later);
725 }
726 }
727
728 // Then try to assign all other + failed custom assignments
729 while (!list_empty(&assign_later)) {
730 c = list_first_entry(&assign_later, struct device_prefix_assignment, head);
731 list_del(&c->head);
732
733 bool assigned = false;
734 do {
735 assigned = interface_prefix_assign(&prefix->assignments, c);
736 } while (!assigned && ++c->length <= 64);
737
738 if (!assigned) {
739 netifd_log_message(L_WARNING, "Failed to assign subprefix "
740 "of size %hhu for %s\n", c->length, c->name);
741 free(c);
742 }
743 }
744
745 list_for_each_entry(c, &prefix->assignments, head)
746 if ((iface = vlist_find(&interfaces, c->name, iface, node)))
747 interface_set_prefix_address(c, prefix, iface, true);
748 }
749
750
751 void interface_refresh_assignments(bool hint)
752 {
753 static bool refresh = false;
754 if (!hint && refresh) {
755 struct device_prefix *p;
756 list_for_each_entry(p, &prefixes, head)
757 interface_update_prefix_assignments(p, true);
758 }
759 refresh = hint;
760 }
761
762
763 static void
764 interface_update_prefix(struct vlist_tree *tree,
765 struct vlist_node *node_new,
766 struct vlist_node *node_old)
767 {
768 struct device_prefix *prefix_old, *prefix_new;
769 prefix_old = container_of(node_old, struct device_prefix, node);
770 prefix_new = container_of(node_new, struct device_prefix, node);
771
772 struct device_route route;
773 memset(&route, 0, sizeof(route));
774 route.flags = DEVADDR_INET6;
775 route.metric = INT32_MAX;
776 route.mask = (node_new) ? prefix_new->length : prefix_old->length;
777 route.addr.in6 = (node_new) ? prefix_new->addr : prefix_old->addr;
778
779
780 struct device_prefix_assignment *c;
781 struct interface *iface;
782
783 if (node_old && node_new) {
784 // Move assignments and refresh addresses to update valid times
785 list_splice(&prefix_old->assignments, &prefix_new->assignments);
786
787 list_for_each_entry(c, &prefix_new->assignments, head)
788 if ((iface = vlist_find(&interfaces, c->name, iface, node)))
789 interface_set_prefix_address(c, prefix_new, iface, true);
790 } else if (node_new) {
791 // Set null-route to avoid routing loops and set routing policy
792 system_add_route(NULL, &route);
793 if (prefix_new->iface)
794 set_ip_source_policy(true, true, IPRULE_PRIORITY_NW, &route.addr,
795 route.mask, prefix_new->iface);
796
797
798 interface_update_prefix_assignments(prefix_new, true);
799 } else if (node_old) {
800 interface_update_prefix_assignments(prefix_old, false);
801
802 // Remove null-route
803 if (prefix_old->iface)
804 set_ip_source_policy(false, true, IPRULE_PRIORITY_NW, &route.addr,
805 route.mask, prefix_old->iface);
806 system_del_route(NULL, &route);
807 }
808
809 if (node_old) {
810 list_del(&prefix_old->head);
811 free(prefix_old);
812 }
813
814 if (node_new)
815 list_add(&prefix_new->head, &prefixes);
816
817 }
818
819 struct device_prefix*
820 interface_ip_add_device_prefix(struct interface *iface, struct in6_addr *addr,
821 uint8_t length, time_t valid_until, time_t preferred_until,
822 struct in6_addr *excl_addr, uint8_t excl_length)
823 {
824 struct device_prefix *prefix = calloc(1, sizeof(*prefix));
825 prefix->length = length;
826 prefix->addr = *addr;
827 prefix->preferred_until = preferred_until;
828 prefix->valid_until = valid_until;
829 prefix->iface = iface;
830 INIT_LIST_HEAD(&prefix->assignments);
831
832 if (excl_addr) {
833 prefix->excl_addr = *excl_addr;
834 prefix->excl_length = excl_length;
835 }
836
837 if (iface)
838 vlist_add(&iface->proto_ip.prefix, &prefix->node, &prefix->addr);
839 else
840 interface_update_prefix(NULL, &prefix->node, NULL);
841
842 return prefix;
843 }
844
845 void
846 interface_ip_set_ula_prefix(const char *prefix)
847 {
848 char buf[INET6_ADDRSTRLEN + 4] = {0}, *saveptr;
849 if (prefix)
850 strncpy(buf, prefix, sizeof(buf) - 1);
851 char *prefixaddr = strtok_r(buf, "/", &saveptr);
852
853 struct in6_addr addr;
854 if (!prefixaddr || inet_pton(AF_INET6, prefixaddr, &addr) < 1) {
855 if (ula_prefix) {
856 interface_update_prefix(NULL, NULL, &ula_prefix->node);
857 ula_prefix = NULL;
858 }
859 return;
860 }
861
862 int length;
863 char *prefixlen = strtok_r(NULL, ",", &saveptr);
864 if (!prefixlen || (length = atoi(prefixlen)) < 1 || length > 64)
865 return;
866
867 if (!ula_prefix || !IN6_ARE_ADDR_EQUAL(&addr, &ula_prefix->addr) ||
868 ula_prefix->length != length) {
869 if (ula_prefix)
870 interface_update_prefix(NULL, NULL, &ula_prefix->node);
871
872 ula_prefix = interface_ip_add_device_prefix(NULL, &addr, length,
873 0, 0, NULL, 0);
874 }
875 }
876
877 void
878 interface_add_dns_server(struct interface_ip_settings *ip, const char *str)
879 {
880 struct dns_server *s;
881
882 s = calloc(1, sizeof(*s));
883 if (!s)
884 return;
885
886 s->af = AF_INET;
887 if (inet_pton(s->af, str, &s->addr.in))
888 goto add;
889
890 s->af = AF_INET6;
891 if (inet_pton(s->af, str, &s->addr.in))
892 goto add;
893
894 free(s);
895 return;
896
897 add:
898 D(INTERFACE, "Add IPv%c DNS server: %s\n",
899 s->af == AF_INET6 ? '6' : '4', str);
900 vlist_simple_add(&ip->dns_servers, &s->node);
901 }
902
903 void
904 interface_add_dns_server_list(struct interface_ip_settings *ip, struct blob_attr *list)
905 {
906 struct blob_attr *cur;
907 int rem;
908
909 blobmsg_for_each_attr(cur, list, rem) {
910 if (blobmsg_type(cur) != BLOBMSG_TYPE_STRING)
911 continue;
912
913 if (!blobmsg_check_attr(cur, NULL))
914 continue;
915
916 interface_add_dns_server(ip, blobmsg_data(cur));
917 }
918 }
919
920 static void
921 interface_add_dns_search_domain(struct interface_ip_settings *ip, const char *str)
922 {
923 struct dns_search_domain *s;
924 int len = strlen(str);
925
926 s = calloc(1, sizeof(*s) + len + 1);
927 if (!s)
928 return;
929
930 D(INTERFACE, "Add DNS search domain: %s\n", str);
931 memcpy(s->name, str, len);
932 vlist_simple_add(&ip->dns_search, &s->node);
933 }
934
935 void
936 interface_add_dns_search_list(struct interface_ip_settings *ip, struct blob_attr *list)
937 {
938 struct blob_attr *cur;
939 int rem;
940
941 blobmsg_for_each_attr(cur, list, rem) {
942 if (blobmsg_type(cur) != BLOBMSG_TYPE_STRING)
943 continue;
944
945 if (!blobmsg_check_attr(cur, NULL))
946 continue;
947
948 interface_add_dns_search_domain(ip, blobmsg_data(cur));
949 }
950 }
951
952 static void
953 write_resolv_conf_entries(FILE *f, struct interface_ip_settings *ip)
954 {
955 struct dns_server *s;
956 struct dns_search_domain *d;
957 const char *str;
958 char buf[INET6_ADDRSTRLEN];
959
960 vlist_simple_for_each_element(&ip->dns_servers, s, node) {
961 str = inet_ntop(s->af, &s->addr, buf, sizeof(buf));
962 if (!str)
963 continue;
964
965 fprintf(f, "nameserver %s\n", str);
966 }
967
968 vlist_simple_for_each_element(&ip->dns_search, d, node) {
969 fprintf(f, "search %s\n", d->name);
970 }
971 }
972
973 void
974 interface_write_resolv_conf(void)
975 {
976 struct interface *iface;
977 char *path = alloca(strlen(resolv_conf) + 5);
978 FILE *f;
979 uint32_t crcold, crcnew;
980
981 sprintf(path, "%s.tmp", resolv_conf);
982 unlink(path);
983 f = fopen(path, "w+");
984 if (!f) {
985 D(INTERFACE, "Failed to open %s for writing\n", path);
986 return;
987 }
988
989 vlist_for_each_element(&interfaces, iface, node) {
990 if (iface->state != IFS_UP)
991 continue;
992
993 if (vlist_simple_empty(&iface->proto_ip.dns_search) &&
994 vlist_simple_empty(&iface->proto_ip.dns_servers) &&
995 vlist_simple_empty(&iface->config_ip.dns_search) &&
996 vlist_simple_empty(&iface->config_ip.dns_servers))
997 continue;
998
999 fprintf(f, "# Interface %s\n", iface->name);
1000 write_resolv_conf_entries(f, &iface->config_ip);
1001 if (!iface->proto_ip.no_dns)
1002 write_resolv_conf_entries(f, &iface->proto_ip);
1003 }
1004 fflush(f);
1005 rewind(f);
1006 crcnew = crc32_file(f);
1007 fclose(f);
1008
1009 crcold = crcnew + 1;
1010 f = fopen(resolv_conf, "r");
1011 if (f) {
1012 crcold = crc32_file(f);
1013 fclose(f);
1014 }
1015
1016 if (crcold == crcnew) {
1017 unlink(path);
1018 } else if (rename(path, resolv_conf) < 0) {
1019 D(INTERFACE, "Failed to replace %s\n", resolv_conf);
1020 unlink(path);
1021 }
1022 }
1023
1024 void interface_ip_set_enabled(struct interface_ip_settings *ip, bool enabled)
1025 {
1026 struct device_addr *addr;
1027 struct device_route *route;
1028 struct device *dev;
1029
1030 ip->enabled = enabled;
1031 dev = ip->iface->l3_dev.dev;
1032 if (!dev)
1033 return;
1034
1035 vlist_for_each_element(&ip->addr, addr, node) {
1036 if (addr->enabled == enabled)
1037 continue;
1038
1039 if (enabled)
1040 system_add_address(dev, addr);
1041 else
1042 system_del_address(dev, addr);
1043 addr->enabled = enabled;
1044 }
1045
1046 vlist_for_each_element(&ip->route, route, node) {
1047 bool _enabled = enabled;
1048
1049 if (!enable_route(ip, route))
1050 _enabled = false;
1051
1052 if (route->enabled == _enabled)
1053 continue;
1054
1055 if (_enabled) {
1056 if (!(route->flags & DEVROUTE_METRIC))
1057 route->metric = ip->iface->metric;
1058
1059 system_add_route(dev, route);
1060 } else
1061 system_del_route(dev, route);
1062 route->enabled = _enabled;
1063 }
1064
1065 struct device_prefix *c;
1066 struct device_prefix_assignment *a;
1067 list_for_each_entry(c, &prefixes, head)
1068 list_for_each_entry(a, &c->assignments, head)
1069 if (!strcmp(a->name, ip->iface->name))
1070 interface_set_prefix_address(a, c, ip->iface, enabled);
1071
1072 set_ip_lo_policy(enabled, true, ip->iface);
1073 set_ip_lo_policy(enabled, false, ip->iface);
1074 }
1075
1076 void
1077 interface_ip_update_start(struct interface_ip_settings *ip)
1078 {
1079 if (ip != &ip->iface->config_ip) {
1080 vlist_simple_update(&ip->dns_servers);
1081 vlist_simple_update(&ip->dns_search);
1082 }
1083 vlist_update(&ip->route);
1084 vlist_update(&ip->addr);
1085 vlist_update(&ip->prefix);
1086 }
1087
1088 void
1089 interface_ip_update_complete(struct interface_ip_settings *ip)
1090 {
1091 vlist_simple_flush(&ip->dns_servers);
1092 vlist_simple_flush(&ip->dns_search);
1093 vlist_flush(&ip->route);
1094 vlist_flush(&ip->addr);
1095 vlist_flush(&ip->prefix);
1096 interface_write_resolv_conf();
1097 }
1098
1099 void
1100 interface_ip_flush(struct interface_ip_settings *ip)
1101 {
1102 if (ip == &ip->iface->proto_ip)
1103 vlist_flush_all(&ip->iface->host_routes);
1104 vlist_simple_flush_all(&ip->dns_servers);
1105 vlist_simple_flush_all(&ip->dns_search);
1106 vlist_flush_all(&ip->route);
1107 vlist_flush_all(&ip->addr);
1108 vlist_flush_all(&ip->prefix);
1109 }
1110
1111 static void
1112 __interface_ip_init(struct interface_ip_settings *ip, struct interface *iface)
1113 {
1114 ip->iface = iface;
1115 ip->enabled = true;
1116 vlist_simple_init(&ip->dns_search, struct dns_search_domain, node);
1117 vlist_simple_init(&ip->dns_servers, struct dns_server, node);
1118 vlist_init(&ip->route, route_cmp, interface_update_proto_route);
1119 vlist_init(&ip->addr, addr_cmp, interface_update_proto_addr);
1120 vlist_init(&ip->prefix, prefix_cmp, interface_update_prefix);
1121 }
1122
1123 void
1124 interface_ip_init(struct interface *iface)
1125 {
1126 __interface_ip_init(&iface->proto_ip, iface);
1127 __interface_ip_init(&iface->config_ip, iface);
1128 vlist_init(&iface->host_routes, route_cmp, interface_update_host_route);
1129
1130 }
1131
1132 static void
1133 interface_ip_valid_until_handler(struct uloop_timeout *t)
1134 {
1135 time_t now = system_get_rtime();
1136 struct interface *iface;
1137 vlist_for_each_element(&interfaces, iface, node) {
1138 if (iface->state != IFS_UP)
1139 continue;
1140
1141 struct device_addr *addr, *addrp;
1142 struct device_route *route, *routep;
1143 struct device_prefix *pref, *prefp;
1144
1145 vlist_for_each_element_safe(&iface->proto_ip.addr, addr, node, addrp)
1146 if (addr->valid_until && addr->valid_until < now)
1147 vlist_delete(&iface->proto_ip.addr, &addr->node);
1148
1149 vlist_for_each_element_safe(&iface->proto_ip.route, route, node, routep)
1150 if (route->valid_until && route->valid_until < now)
1151 vlist_delete(&iface->proto_ip.route, &route->node);
1152
1153 vlist_for_each_element_safe(&iface->proto_ip.prefix, pref, node, prefp)
1154 if (pref->valid_until && pref->valid_until < now)
1155 vlist_delete(&iface->proto_ip.prefix, &pref->node);
1156
1157 }
1158
1159 uloop_timeout_set(t, 1000);
1160 }
1161
1162 static void __init
1163 interface_ip_init_worker(void)
1164 {
1165 valid_until_timeout.cb = interface_ip_valid_until_handler;
1166 uloop_timeout_set(&valid_until_timeout, 1000);
1167 }