1 /*
2 * Copyright (C)2006 USAGI/WIDE Project
3 *
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License as published by
6 * the Free Software Foundation; either version 2 of the License, or
7 * (at your option) any later version.
8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, see <http://www.gnu.org/licenses>.
16 */
17 /*
18 * Author:
19 * Masahide NAKAMURA @USAGI
20 */
21
22 #include <stdio.h>
23 #include <string.h>
24 #include <stdlib.h>
25 #include <unistd.h>
26 #include <sys/types.h>
27 #include <sys/socket.h>
28 #include <arpa/inet.h>
29 #include <sys/ioctl.h>
30 #include <linux/ip.h>
31 #include <linux/if.h>
32 #include <linux/if_arp.h>
33 #include <linux/if_tunnel.h>
34 #include <linux/ip6_tunnel.h>
35
36 #include "utils.h"
37 #include "tunnel.h"
38 #include "ip_common.h"
39
40 #define IP6_FLOWINFO_TCLASS htonl(0x0FF00000)
41 #define IP6_FLOWINFO_FLOWLABEL htonl(0x000FFFFF)
42
43 #define DEFAULT_TNL_HOP_LIMIT (64)
44
45 static void usage(void) __attribute__((noreturn));
46
usage(void)47 static void usage(void)
48 {
49 fprintf(stderr, "Usage: ip -f inet6 tunnel { add | change | del | show } [ NAME ]\n");
50 fprintf(stderr, " [ mode { ip6ip6 | ipip6 | ip6gre | vti6 | any } ]\n");
51 fprintf(stderr, " [ remote ADDR local ADDR ] [ dev PHYS_DEV ]\n");
52 fprintf(stderr, " [ encaplimit ELIM ]\n");
53 fprintf(stderr ," [ hoplimit TTL ] [ tclass TCLASS ] [ flowlabel FLOWLABEL ]\n");
54 fprintf(stderr, " [ dscp inherit ]\n");
55 fprintf(stderr, " [ [i|o]seq ] [ [i|o]key KEY ] [ [i|o]csum ]\n");
56 fprintf(stderr, "\n");
57 fprintf(stderr, "Where: NAME := STRING\n");
58 fprintf(stderr, " ADDR := IPV6_ADDRESS\n");
59 fprintf(stderr, " ELIM := { none | 0..255 }(default=%d)\n",
60 IPV6_DEFAULT_TNL_ENCAP_LIMIT);
61 fprintf(stderr, " TTL := 0..255 (default=%d)\n",
62 DEFAULT_TNL_HOP_LIMIT);
63 fprintf(stderr, " TCLASS := { 0x0..0xff | inherit }\n");
64 fprintf(stderr, " FLOWLABEL := { 0x0..0xfffff | inherit }\n");
65 fprintf(stderr, " KEY := { DOTTED_QUAD | NUMBER }\n");
66 exit(-1);
67 }
68
print_tunnel(struct ip6_tnl_parm2 * p)69 static void print_tunnel(struct ip6_tnl_parm2 *p)
70 {
71 char s1[1024];
72 char s2[1024];
73
74 /* Do not use format_host() for local addr,
75 * symbolic name will not be useful.
76 */
77 printf("%s: %s/ipv6 remote %s local %s",
78 p->name,
79 tnl_strproto(p->proto),
80 format_host(AF_INET6, 16, &p->raddr, s1, sizeof(s1)),
81 rt_addr_n2a(AF_INET6, 16, &p->laddr, s2, sizeof(s2)));
82 if (p->link) {
83 const char *n = ll_index_to_name(p->link);
84 if (n)
85 printf(" dev %s", n);
86 }
87
88 if (p->flags & IP6_TNL_F_IGN_ENCAP_LIMIT)
89 printf(" encaplimit none");
90 else
91 printf(" encaplimit %u", p->encap_limit);
92
93 printf(" hoplimit %u", p->hop_limit);
94
95 if (p->flags & IP6_TNL_F_USE_ORIG_TCLASS)
96 printf(" tclass inherit");
97 else {
98 __u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_TCLASS);
99 printf(" tclass 0x%02x", (__u8)(val >> 20));
100 }
101
102 if (p->flags & IP6_TNL_F_USE_ORIG_FLOWLABEL)
103 printf(" flowlabel inherit");
104 else
105 printf(" flowlabel 0x%05x", ntohl(p->flowinfo & IP6_FLOWINFO_FLOWLABEL));
106
107 printf(" (flowinfo 0x%08x)", ntohl(p->flowinfo));
108
109 if (p->flags & IP6_TNL_F_RCV_DSCP_COPY)
110 printf(" dscp inherit");
111
112 if (p->proto == IPPROTO_GRE) {
113 if ((p->i_flags & GRE_KEY) && (p->o_flags & GRE_KEY) && p->o_key == p->i_key)
114 printf(" key %u", ntohl(p->i_key));
115 else if ((p->i_flags | p->o_flags) & GRE_KEY) {
116 if (p->i_flags & GRE_KEY)
117 printf(" ikey %u", ntohl(p->i_key));
118 if (p->o_flags & GRE_KEY)
119 printf(" okey %u", ntohl(p->o_key));
120 }
121
122 if (p->i_flags & GRE_SEQ)
123 printf("%s Drop packets out of sequence.", _SL_);
124 if (p->i_flags & GRE_CSUM)
125 printf("%s Checksum in received packet is required.", _SL_);
126 if (p->o_flags & GRE_SEQ)
127 printf("%s Sequence packets on output.", _SL_);
128 if (p->o_flags & GRE_CSUM)
129 printf("%s Checksum output packets.", _SL_);
130 }
131 }
132
parse_args(int argc,char ** argv,int cmd,struct ip6_tnl_parm2 * p)133 static int parse_args(int argc, char **argv, int cmd, struct ip6_tnl_parm2 *p)
134 {
135 int count = 0;
136 char medium[IFNAMSIZ];
137
138 memset(medium, 0, sizeof(medium));
139
140 while (argc > 0) {
141 if (strcmp(*argv, "mode") == 0) {
142 NEXT_ARG();
143 if (strcmp(*argv, "ipv6/ipv6") == 0 ||
144 strcmp(*argv, "ip6ip6") == 0)
145 p->proto = IPPROTO_IPV6;
146 else if (strcmp(*argv, "vti6") == 0) {
147 p->proto = IPPROTO_IPV6;
148 p->i_flags |= VTI_ISVTI;
149 } else if (strcmp(*argv, "ip/ipv6") == 0 ||
150 strcmp(*argv, "ipv4/ipv6") == 0 ||
151 strcmp(*argv, "ipip6") == 0 ||
152 strcmp(*argv, "ip4ip6") == 0)
153 p->proto = IPPROTO_IPIP;
154 else if (strcmp(*argv, "ip6gre") == 0 ||
155 strcmp(*argv, "gre/ipv6") == 0)
156 p->proto = IPPROTO_GRE;
157 else if (strcmp(*argv, "any/ipv6") == 0 ||
158 strcmp(*argv, "any") == 0)
159 p->proto = 0;
160 else {
161 fprintf(stderr,"Unknown tunnel mode \"%s\"\n", *argv);
162 exit(-1);
163 }
164 } else if (strcmp(*argv, "remote") == 0) {
165 inet_prefix raddr;
166 NEXT_ARG();
167 get_prefix(&raddr, *argv, preferred_family);
168 if (raddr.family == AF_UNSPEC)
169 invarg("\"remote\" address family is AF_UNSPEC", *argv);
170 memcpy(&p->raddr, &raddr.data, sizeof(p->raddr));
171 } else if (strcmp(*argv, "local") == 0) {
172 inet_prefix laddr;
173 NEXT_ARG();
174 get_prefix(&laddr, *argv, preferred_family);
175 if (laddr.family == AF_UNSPEC)
176 invarg("\"local\" address family is AF_UNSPEC", *argv);
177 memcpy(&p->laddr, &laddr.data, sizeof(p->laddr));
178 } else if (strcmp(*argv, "dev") == 0) {
179 NEXT_ARG();
180 strncpy(medium, *argv, IFNAMSIZ - 1);
181 } else if (strcmp(*argv, "encaplimit") == 0) {
182 NEXT_ARG();
183 if (strcmp(*argv, "none") == 0) {
184 p->flags |= IP6_TNL_F_IGN_ENCAP_LIMIT;
185 } else {
186 __u8 uval;
187 if (get_u8(&uval, *argv, 0) < -1)
188 invarg("invalid ELIM", *argv);
189 p->encap_limit = uval;
190 p->flags &= ~IP6_TNL_F_IGN_ENCAP_LIMIT;
191 }
192 } else if (strcmp(*argv, "hoplimit") == 0 ||
193 strcmp(*argv, "ttl") == 0 ||
194 strcmp(*argv, "hlim") == 0) {
195 __u8 uval;
196 NEXT_ARG();
197 if (get_u8(&uval, *argv, 0))
198 invarg("invalid TTL", *argv);
199 p->hop_limit = uval;
200 } else if (strcmp(*argv, "tclass") == 0 ||
201 strcmp(*argv, "tc") == 0 ||
202 strcmp(*argv, "tos") == 0 ||
203 matches(*argv, "dsfield") == 0) {
204 __u8 uval;
205 NEXT_ARG();
206 p->flowinfo &= ~IP6_FLOWINFO_TCLASS;
207 if (strcmp(*argv, "inherit") == 0)
208 p->flags |= IP6_TNL_F_USE_ORIG_TCLASS;
209 else {
210 if (get_u8(&uval, *argv, 16))
211 invarg("invalid TClass", *argv);
212 p->flowinfo |= htonl((__u32)uval << 20) & IP6_FLOWINFO_TCLASS;
213 p->flags &= ~IP6_TNL_F_USE_ORIG_TCLASS;
214 }
215 } else if (strcmp(*argv, "flowlabel") == 0 ||
216 strcmp(*argv, "fl") == 0) {
217 __u32 uval;
218 NEXT_ARG();
219 p->flowinfo &= ~IP6_FLOWINFO_FLOWLABEL;
220 if (strcmp(*argv, "inherit") == 0)
221 p->flags |= IP6_TNL_F_USE_ORIG_FLOWLABEL;
222 else {
223 if (get_u32(&uval, *argv, 16))
224 invarg("invalid Flowlabel", *argv);
225 if (uval > 0xFFFFF)
226 invarg("invalid Flowlabel", *argv);
227 p->flowinfo |= htonl(uval) & IP6_FLOWINFO_FLOWLABEL;
228 p->flags &= ~IP6_TNL_F_USE_ORIG_FLOWLABEL;
229 }
230 } else if (strcmp(*argv, "dscp") == 0) {
231 NEXT_ARG();
232 if (strcmp(*argv, "inherit") != 0)
233 invarg("not inherit", *argv);
234 p->flags |= IP6_TNL_F_RCV_DSCP_COPY;
235 } else if (strcmp(*argv, "key") == 0) {
236 NEXT_ARG();
237 p->i_flags |= GRE_KEY;
238 p->o_flags |= GRE_KEY;
239 p->i_key = p->o_key = tnl_parse_key("key", *argv);
240 } else if (strcmp(*argv, "ikey") == 0) {
241 NEXT_ARG();
242 p->i_flags |= GRE_KEY;
243 p->i_key = tnl_parse_key("ikey", *argv);
244 } else if (strcmp(*argv, "okey") == 0) {
245 NEXT_ARG();
246 p->o_flags |= GRE_KEY;
247 p->o_key = tnl_parse_key("okey", *argv);
248 } else if (strcmp(*argv, "seq") == 0) {
249 p->i_flags |= GRE_SEQ;
250 p->o_flags |= GRE_SEQ;
251 } else if (strcmp(*argv, "iseq") == 0) {
252 p->i_flags |= GRE_SEQ;
253 } else if (strcmp(*argv, "oseq") == 0) {
254 p->o_flags |= GRE_SEQ;
255 } else if (strcmp(*argv, "csum") == 0) {
256 p->i_flags |= GRE_CSUM;
257 p->o_flags |= GRE_CSUM;
258 } else if (strcmp(*argv, "icsum") == 0) {
259 p->i_flags |= GRE_CSUM;
260 } else if (strcmp(*argv, "ocsum") == 0) {
261 p->o_flags |= GRE_CSUM;
262 } else {
263 if (strcmp(*argv, "name") == 0) {
264 NEXT_ARG();
265 } else if (matches(*argv, "help") == 0)
266 usage();
267 if (p->name[0])
268 duparg2("name", *argv);
269 strncpy(p->name, *argv, IFNAMSIZ - 1);
270 if (cmd == SIOCCHGTUNNEL && count == 0) {
271 struct ip6_tnl_parm2 old_p;
272 memset(&old_p, 0, sizeof(old_p));
273 if (tnl_get_ioctl(*argv, &old_p))
274 return -1;
275 *p = old_p;
276 }
277 }
278 count++;
279 argc--; argv++;
280 }
281 if (medium[0]) {
282 p->link = ll_name_to_index(medium);
283 if (p->link == 0) {
284 fprintf(stderr, "Cannot find device \"%s\"\n", medium);
285 return -1;
286 }
287 }
288 return 0;
289 }
290
ip6_tnl_parm_init(struct ip6_tnl_parm2 * p,int apply_default)291 static void ip6_tnl_parm_init(struct ip6_tnl_parm2 *p, int apply_default)
292 {
293 memset(p, 0, sizeof(*p));
294 p->proto = IPPROTO_IPV6;
295 if (apply_default) {
296 p->hop_limit = DEFAULT_TNL_HOP_LIMIT;
297 p->encap_limit = IPV6_DEFAULT_TNL_ENCAP_LIMIT;
298 }
299 }
300
301 /*
302 * @p1: user specified parameter
303 * @p2: database entry
304 */
ip6_tnl_parm_match(const struct ip6_tnl_parm2 * p1,const struct ip6_tnl_parm2 * p2)305 static int ip6_tnl_parm_match(const struct ip6_tnl_parm2 *p1,
306 const struct ip6_tnl_parm2 *p2)
307 {
308 return ((!p1->link || p1->link == p2->link) &&
309 (!p1->name[0] || strcmp(p1->name, p2->name) == 0) &&
310 (memcmp(&p1->laddr, &in6addr_any, sizeof(p1->laddr)) == 0 ||
311 memcmp(&p1->laddr, &p2->laddr, sizeof(p1->laddr)) == 0) &&
312 (memcmp(&p1->raddr, &in6addr_any, sizeof(p1->raddr)) == 0 ||
313 memcmp(&p1->raddr, &p2->raddr, sizeof(p1->raddr)) == 0) &&
314 (!p1->proto || !p2->proto || p1->proto == p2->proto) &&
315 (!p1->encap_limit || p1->encap_limit == p2->encap_limit) &&
316 (!p1->hop_limit || p1->hop_limit == p2->hop_limit) &&
317 (!(p1->flowinfo & IP6_FLOWINFO_TCLASS) ||
318 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_TCLASS)) &&
319 (!(p1->flowinfo & IP6_FLOWINFO_FLOWLABEL) ||
320 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_FLOWLABEL)) &&
321 (!p1->flags || (p1->flags & p2->flags)));
322 }
323
do_tunnels_list(struct ip6_tnl_parm2 * p)324 static int do_tunnels_list(struct ip6_tnl_parm2 *p)
325 {
326 char buf[512];
327 int err = -1;
328 FILE *fp = fopen("/proc/net/dev", "r");
329 if (fp == NULL) {
330 perror("fopen");
331 return -1;
332 }
333
334 /* skip two lines at the begenning of the file */
335 if (!fgets(buf, sizeof(buf), fp) ||
336 !fgets(buf, sizeof(buf), fp)) {
337 fprintf(stderr, "/proc/net/dev read error\n");
338 goto end;
339 }
340
341 while (fgets(buf, sizeof(buf), fp) != NULL) {
342 char name[IFNAMSIZ];
343 int index, type;
344 struct ip6_tnl_parm2 p1;
345 char *ptr;
346
347 buf[sizeof(buf) - 1] = '\0';
348 if ((ptr = strchr(buf, ':')) == NULL ||
349 (*ptr++ = 0, sscanf(buf, "%s", name) != 1)) {
350 fprintf(stderr, "Wrong format for /proc/net/dev. Giving up.\n");
351 goto end;
352 }
353 if (p->name[0] && strcmp(p->name, name))
354 continue;
355 index = ll_name_to_index(name);
356 if (index == 0)
357 continue;
358 type = ll_index_to_type(index);
359 if (type == -1) {
360 fprintf(stderr, "Failed to get type of \"%s\"\n", name);
361 continue;
362 }
363 if (type != ARPHRD_TUNNEL6 && type != ARPHRD_IP6GRE)
364 continue;
365 memset(&p1, 0, sizeof(p1));
366 ip6_tnl_parm_init(&p1, 0);
367 if (type == ARPHRD_IP6GRE)
368 p1.proto = IPPROTO_GRE;
369 strcpy(p1.name, name);
370 p1.link = ll_name_to_index(p1.name);
371 if (p1.link == 0)
372 continue;
373 if (tnl_get_ioctl(p1.name, &p1))
374 continue;
375 if (!ip6_tnl_parm_match(p, &p1))
376 continue;
377 print_tunnel(&p1);
378 if (show_stats)
379 tnl_print_stats(ptr);
380 printf("\n");
381 }
382 err = 0;
383 end:
384 fclose(fp);
385 return err;
386 }
387
do_show(int argc,char ** argv)388 static int do_show(int argc, char **argv)
389 {
390 struct ip6_tnl_parm2 p;
391
392 ll_init_map(&rth);
393 ip6_tnl_parm_init(&p, 0);
394 p.proto = 0; /* default to any */
395
396 if (parse_args(argc, argv, SIOCGETTUNNEL, &p) < 0)
397 return -1;
398
399 if (!p.name[0] || show_stats)
400 do_tunnels_list(&p);
401 else {
402 if (tnl_get_ioctl(p.name, &p))
403 return -1;
404 print_tunnel(&p);
405 printf("\n");
406 }
407
408 return 0;
409 }
410
do_add(int cmd,int argc,char ** argv)411 static int do_add(int cmd, int argc, char **argv)
412 {
413 struct ip6_tnl_parm2 p;
414 const char *basedev = "ip6tnl0";
415
416 ip6_tnl_parm_init(&p, 1);
417
418 if (parse_args(argc, argv, cmd, &p) < 0)
419 return -1;
420
421 if (p.proto == IPPROTO_GRE)
422 basedev = "ip6gre0";
423 else if (p.i_flags & VTI_ISVTI)
424 basedev = "ip6_vti0";
425
426 return tnl_add_ioctl(cmd, basedev, p.name, &p);
427 }
428
do_del(int argc,char ** argv)429 static int do_del(int argc, char **argv)
430 {
431 struct ip6_tnl_parm2 p;
432 const char *basedev = "ip6tnl0";
433
434 ip6_tnl_parm_init(&p, 1);
435
436 if (parse_args(argc, argv, SIOCDELTUNNEL, &p) < 0)
437 return -1;
438
439 if (p.proto == IPPROTO_GRE)
440 basedev = "ip6gre0";
441 else if (p.i_flags & VTI_ISVTI)
442 basedev = "ip6_vti0";
443
444 return tnl_del_ioctl(basedev, p.name, &p);
445 }
446
do_ip6tunnel(int argc,char ** argv)447 int do_ip6tunnel(int argc, char **argv)
448 {
449 switch (preferred_family) {
450 case AF_UNSPEC:
451 preferred_family = AF_INET6;
452 break;
453 case AF_INET6:
454 break;
455 default:
456 fprintf(stderr, "Unsupported protocol family: %d\n", preferred_family);
457 exit(-1);
458 }
459
460 if (argc > 0) {
461 if (matches(*argv, "add") == 0)
462 return do_add(SIOCADDTUNNEL, argc - 1, argv + 1);
463 if (matches(*argv, "change") == 0)
464 return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1);
465 if (matches(*argv, "delete") == 0)
466 return do_del(argc - 1, argv + 1);
467 if (matches(*argv, "show") == 0 ||
468 matches(*argv, "lst") == 0 ||
469 matches(*argv, "list") == 0)
470 return do_show(argc - 1, argv + 1);
471 if (matches(*argv, "help") == 0)
472 usage();
473 } else
474 return do_show(0, NULL);
475
476 fprintf(stderr, "Command \"%s\" is unknown, try \"ip -f inet6 tunnel help\".\n", *argv);
477 exit(-1);
478 }
479