2 * IPv6 over IPv4 tunnel device - Simple Internet Transition (SIT)
3 * Linux INET6 implementation
6 * Pedro Roque <roque@di.fc.ul.pt>
7 * Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
9 * $Id: sit.c,v 1.53 2001/09/25 05:09:53 davem Exp $
11 * This program is free software; you can redistribute it and/or
12 * modify it under the terms of the GNU General Public License
13 * as published by the Free Software Foundation; either version
14 * 2 of the License, or (at your option) any later version.
17 * Roger Venning <r.venning@telstra.com>: 6to4 support
18 * Nate Thompson <nate@thebog.net>: 6to4 support
19 * Fred Templin <fred.l.templin@boeing.com>: isatap support
22 #include <linux/module.h>
23 #include <linux/capability.h>
24 #include <linux/errno.h>
25 #include <linux/types.h>
26 #include <linux/socket.h>
27 #include <linux/sockios.h>
28 #include <linux/net.h>
29 #include <linux/in6.h>
30 #include <linux/netdevice.h>
31 #include <linux/if_arp.h>
32 #include <linux/icmp.h>
33 #include <asm/uaccess.h>
34 #include <linux/init.h>
35 #include <linux/netfilter_ipv4.h>
36 #include <linux/if_ether.h>
42 #include <net/protocol.h>
43 #include <net/transp_v6.h>
44 #include <net/ip6_fib.h>
45 #include <net/ip6_route.h>
46 #include <net/ndisc.h>
47 #include <net/addrconf.h>
52 #include <net/inet_ecn.h>
54 #include <net/dsfield.h>
55 #include <net/net_namespace.h>
56 #include <net/netns/generic.h>
59 This version of net/ipv6/sit.c is cloned of net/ipv4/ip_gre.c
61 For comments look at net/ipv4/ip_gre.c --ANK
65 #define HASH(addr) (((__force u32)addr^((__force u32)addr>>4))&0xF)
67 static int ipip6_fb_tunnel_init(struct net_device
*dev
);
68 static int ipip6_tunnel_init(struct net_device
*dev
);
69 static void ipip6_tunnel_setup(struct net_device
*dev
);
71 static int sit_net_id
;
75 static struct net_device
*ipip6_fb_tunnel_dev
;
77 static struct ip_tunnel
*tunnels_r_l
[HASH_SIZE
];
78 static struct ip_tunnel
*tunnels_r
[HASH_SIZE
];
79 static struct ip_tunnel
*tunnels_l
[HASH_SIZE
];
80 static struct ip_tunnel
*tunnels_wc
[1];
81 static struct ip_tunnel
**tunnels
[4] = { tunnels_wc
, tunnels_l
, tunnels_r
, tunnels_r_l
};
83 static DEFINE_RWLOCK(ipip6_lock
);
85 static struct ip_tunnel
* ipip6_tunnel_lookup(struct net
*net
,
86 __be32 remote
, __be32 local
)
88 unsigned h0
= HASH(remote
);
89 unsigned h1
= HASH(local
);
92 for (t
= tunnels_r_l
[h0
^h1
]; t
; t
= t
->next
) {
93 if (local
== t
->parms
.iph
.saddr
&&
94 remote
== t
->parms
.iph
.daddr
&& (t
->dev
->flags
&IFF_UP
))
97 for (t
= tunnels_r
[h0
]; t
; t
= t
->next
) {
98 if (remote
== t
->parms
.iph
.daddr
&& (t
->dev
->flags
&IFF_UP
))
101 for (t
= tunnels_l
[h1
]; t
; t
= t
->next
) {
102 if (local
== t
->parms
.iph
.saddr
&& (t
->dev
->flags
&IFF_UP
))
105 if ((t
= tunnels_wc
[0]) != NULL
&& (t
->dev
->flags
&IFF_UP
))
110 static struct ip_tunnel
**__ipip6_bucket(struct sit_net
*sitn
,
111 struct ip_tunnel_parm
*parms
)
113 __be32 remote
= parms
->iph
.daddr
;
114 __be32 local
= parms
->iph
.saddr
;
126 return &tunnels
[prio
][h
];
129 static inline struct ip_tunnel
**ipip6_bucket(struct sit_net
*sitn
,
132 return __ipip6_bucket(sitn
, &t
->parms
);
135 static void ipip6_tunnel_unlink(struct sit_net
*sitn
, struct ip_tunnel
*t
)
137 struct ip_tunnel
**tp
;
139 for (tp
= ipip6_bucket(sitn
, t
); *tp
; tp
= &(*tp
)->next
) {
141 write_lock_bh(&ipip6_lock
);
143 write_unlock_bh(&ipip6_lock
);
149 static void ipip6_tunnel_link(struct sit_net
*sitn
, struct ip_tunnel
*t
)
151 struct ip_tunnel
**tp
= ipip6_bucket(sitn
, t
);
154 write_lock_bh(&ipip6_lock
);
156 write_unlock_bh(&ipip6_lock
);
159 static struct ip_tunnel
* ipip6_tunnel_locate(struct net
*net
,
160 struct ip_tunnel_parm
*parms
, int create
)
162 __be32 remote
= parms
->iph
.daddr
;
163 __be32 local
= parms
->iph
.saddr
;
164 struct ip_tunnel
*t
, **tp
, *nt
;
165 struct net_device
*dev
;
167 struct sit_net
*sitn
= net_generic(net
, sit_net_id
);
169 for (tp
= __ipip6_bucket(sitn
, parms
); (t
= *tp
) != NULL
; tp
= &t
->next
) {
170 if (local
== t
->parms
.iph
.saddr
&& remote
== t
->parms
.iph
.daddr
)
177 strlcpy(name
, parms
->name
, IFNAMSIZ
);
179 sprintf(name
, "sit%%d");
181 dev
= alloc_netdev(sizeof(*t
), name
, ipip6_tunnel_setup
);
185 if (strchr(name
, '%')) {
186 if (dev_alloc_name(dev
, name
) < 0)
190 nt
= netdev_priv(dev
);
191 dev
->init
= ipip6_tunnel_init
;
194 if (parms
->i_flags
& SIT_ISATAP
)
195 dev
->priv_flags
|= IFF_ISATAP
;
197 if (register_netdevice(dev
) < 0)
202 ipip6_tunnel_link(sitn
, nt
);
211 static struct ip_tunnel_prl_entry
*
212 __ipip6_tunnel_locate_prl(struct ip_tunnel
*t
, __be32 addr
)
214 struct ip_tunnel_prl_entry
*p
= (struct ip_tunnel_prl_entry
*)NULL
;
216 for (p
= t
->prl
; p
; p
= p
->next
)
223 static int ipip6_tunnel_get_prl(struct ip_tunnel
*t
, struct ip_tunnel_prl
*a
)
225 struct ip_tunnel_prl
*kp
;
226 struct ip_tunnel_prl_entry
*prl
;
227 unsigned int cmax
, c
= 0, ca
, len
;
230 cmax
= a
->datalen
/ sizeof(*a
);
231 if (cmax
> 1 && a
->addr
!= htonl(INADDR_ANY
))
234 /* For simple GET or for root users,
235 * we try harder to allocate.
237 kp
= (cmax
<= 1 || capable(CAP_NET_ADMIN
)) ?
238 kcalloc(cmax
, sizeof(*kp
), GFP_KERNEL
) :
241 read_lock(&ipip6_lock
);
243 ca
= t
->prl_count
< cmax
? t
->prl_count
: cmax
;
246 /* We don't try hard to allocate much memory for
248 * For root users, retry allocating enough memory for
251 kp
= kcalloc(ca
, sizeof(*kp
), GFP_ATOMIC
);
259 for (prl
= t
->prl
; prl
; prl
= prl
->next
) {
262 if (a
->addr
!= htonl(INADDR_ANY
) && prl
->addr
!= a
->addr
)
264 kp
[c
].addr
= prl
->addr
;
265 kp
[c
].flags
= prl
->flags
;
267 if (a
->addr
!= htonl(INADDR_ANY
))
271 read_unlock(&ipip6_lock
);
273 len
= sizeof(*kp
) * c
;
274 ret
= len
? copy_to_user(a
->data
, kp
, len
) : 0;
285 ipip6_tunnel_add_prl(struct ip_tunnel
*t
, struct ip_tunnel_prl
*a
, int chg
)
287 struct ip_tunnel_prl_entry
*p
;
290 if (a
->addr
== htonl(INADDR_ANY
))
293 write_lock(&ipip6_lock
);
295 for (p
= t
->prl
; p
; p
= p
->next
) {
296 if (p
->addr
== a
->addr
) {
309 p
= kzalloc(sizeof(struct ip_tunnel_prl_entry
), GFP_KERNEL
);
322 write_unlock(&ipip6_lock
);
327 ipip6_tunnel_del_prl(struct ip_tunnel
*t
, struct ip_tunnel_prl
*a
)
329 struct ip_tunnel_prl_entry
*x
, **p
;
332 write_lock(&ipip6_lock
);
334 if (a
&& a
->addr
!= htonl(INADDR_ANY
)) {
335 for (p
= &t
->prl
; *p
; p
= &(*p
)->next
) {
336 if ((*p
)->addr
== a
->addr
) {
348 t
->prl
= t
->prl
->next
;
354 write_unlock(&ipip6_lock
);
359 isatap_chksrc(struct sk_buff
*skb
, struct iphdr
*iph
, struct ip_tunnel
*t
)
361 struct ip_tunnel_prl_entry
*p
;
364 read_lock(&ipip6_lock
);
365 p
= __ipip6_tunnel_locate_prl(t
, iph
->saddr
);
367 if (p
->flags
& PRL_DEFAULT
)
368 skb
->ndisc_nodetype
= NDISC_NODETYPE_DEFAULT
;
370 skb
->ndisc_nodetype
= NDISC_NODETYPE_NODEFAULT
;
372 struct in6_addr
*addr6
= &ipv6_hdr(skb
)->saddr
;
373 if (ipv6_addr_is_isatap(addr6
) &&
374 (addr6
->s6_addr32
[3] == iph
->saddr
) &&
375 ipv6_chk_prefix(addr6
, t
->dev
))
376 skb
->ndisc_nodetype
= NDISC_NODETYPE_HOST
;
380 read_unlock(&ipip6_lock
);
384 static void ipip6_tunnel_uninit(struct net_device
*dev
)
386 struct net
*net
= dev_net(dev
);
387 struct sit_net
*sitn
= net_generic(net
, sit_net_id
);
389 if (dev
== ipip6_fb_tunnel_dev
) {
390 write_lock_bh(&ipip6_lock
);
391 tunnels_wc
[0] = NULL
;
392 write_unlock_bh(&ipip6_lock
);
395 ipip6_tunnel_unlink(sitn
, netdev_priv(dev
));
396 ipip6_tunnel_del_prl(netdev_priv(dev
), NULL
);
402 static int ipip6_err(struct sk_buff
*skb
, u32 info
)
404 #ifndef I_WISH_WORLD_WERE_PERFECT
406 /* It is not :-( All the routers (except for Linux) return only
407 8 bytes of packet payload. It means, that precise relaying of
408 ICMP in the real Internet is absolutely infeasible.
410 struct iphdr
*iph
= (struct iphdr
*)skb
->data
;
411 const int type
= icmp_hdr(skb
)->type
;
412 const int code
= icmp_hdr(skb
)->code
;
418 case ICMP_PARAMETERPROB
:
421 case ICMP_DEST_UNREACH
:
424 case ICMP_PORT_UNREACH
:
425 /* Impossible event. */
427 case ICMP_FRAG_NEEDED
:
428 /* Soft state for pmtu is maintained by IP core. */
431 /* All others are translated to HOST_UNREACH.
432 rfc2003 contains "deep thoughts" about NET_UNREACH,
433 I believe they are just ether pollution. --ANK
438 case ICMP_TIME_EXCEEDED
:
439 if (code
!= ICMP_EXC_TTL
)
446 read_lock(&ipip6_lock
);
447 t
= ipip6_tunnel_lookup(dev_net(skb
->dev
), iph
->daddr
, iph
->saddr
);
448 if (t
== NULL
|| t
->parms
.iph
.daddr
== 0)
452 if (t
->parms
.iph
.ttl
== 0 && type
== ICMP_TIME_EXCEEDED
)
455 if (jiffies
- t
->err_time
< IPTUNNEL_ERR_TIMEO
)
459 t
->err_time
= jiffies
;
461 read_unlock(&ipip6_lock
);
464 struct iphdr
*iph
= (struct iphdr
*)dp
;
465 int hlen
= iph
->ihl
<<2;
466 struct ipv6hdr
*iph6
;
467 const int type
= icmp_hdr(skb
)->type
;
468 const int code
= icmp_hdr(skb
)->code
;
472 struct sk_buff
*skb2
;
473 struct rt6_info
*rt6i
;
475 if (len
< hlen
+ sizeof(struct ipv6hdr
))
477 iph6
= (struct ipv6hdr
*)(dp
+ hlen
);
482 case ICMP_PARAMETERPROB
:
483 if (icmp_hdr(skb
)->un
.gateway
< hlen
)
486 /* So... This guy found something strange INSIDE encapsulated
487 packet. Well, he is fool, but what can we do ?
489 rel_type
= ICMPV6_PARAMPROB
;
490 rel_info
= icmp_hdr(skb
)->un
.gateway
- hlen
;
493 case ICMP_DEST_UNREACH
:
496 case ICMP_PORT_UNREACH
:
497 /* Impossible event. */
499 case ICMP_FRAG_NEEDED
:
500 /* Too complicated case ... */
503 /* All others are translated to HOST_UNREACH.
504 rfc2003 contains "deep thoughts" about NET_UNREACH,
505 I believe, it is just ether pollution. --ANK
507 rel_type
= ICMPV6_DEST_UNREACH
;
508 rel_code
= ICMPV6_ADDR_UNREACH
;
512 case ICMP_TIME_EXCEEDED
:
513 if (code
!= ICMP_EXC_TTL
)
515 rel_type
= ICMPV6_TIME_EXCEED
;
516 rel_code
= ICMPV6_EXC_HOPLIMIT
;
520 /* Prepare fake skb to feed it to icmpv6_send */
521 skb2
= skb_clone(skb
, GFP_ATOMIC
);
524 dst_release(skb2
->dst
);
526 skb_pull(skb2
, skb
->data
- (u8
*)iph6
);
527 skb_reset_network_header(skb2
);
529 /* Try to guess incoming interface */
530 rt6i
= rt6_lookup(&init_net
, &iph6
->saddr
, NULL
, NULL
, 0);
531 if (rt6i
&& rt6i
->rt6i_dev
) {
532 skb2
->dev
= rt6i
->rt6i_dev
;
534 rt6i
= rt6_lookup(&init_net
, &iph6
->daddr
, &iph6
->saddr
, NULL
, 0);
536 if (rt6i
&& rt6i
->rt6i_dev
&& rt6i
->rt6i_dev
->type
== ARPHRD_SIT
) {
537 struct ip_tunnel
*t
= netdev_priv(rt6i
->rt6i_dev
);
538 if (rel_type
== ICMPV6_TIME_EXCEED
&& t
->parms
.iph
.ttl
) {
539 rel_type
= ICMPV6_DEST_UNREACH
;
540 rel_code
= ICMPV6_ADDR_UNREACH
;
542 icmpv6_send(skb2
, rel_type
, rel_code
, rel_info
, skb2
->dev
);
550 static inline void ipip6_ecn_decapsulate(struct iphdr
*iph
, struct sk_buff
*skb
)
552 if (INET_ECN_is_ce(iph
->tos
))
553 IP6_ECN_set_ce(ipv6_hdr(skb
));
556 static int ipip6_rcv(struct sk_buff
*skb
)
559 struct ip_tunnel
*tunnel
;
561 if (!pskb_may_pull(skb
, sizeof(struct ipv6hdr
)))
566 read_lock(&ipip6_lock
);
567 if ((tunnel
= ipip6_tunnel_lookup(dev_net(skb
->dev
),
568 iph
->saddr
, iph
->daddr
)) != NULL
) {
570 skb
->mac_header
= skb
->network_header
;
571 skb_reset_network_header(skb
);
572 IPCB(skb
)->flags
= 0;
573 skb
->protocol
= htons(ETH_P_IPV6
);
574 skb
->pkt_type
= PACKET_HOST
;
576 if ((tunnel
->dev
->priv_flags
& IFF_ISATAP
) &&
577 !isatap_chksrc(skb
, iph
, tunnel
)) {
578 tunnel
->stat
.rx_errors
++;
579 read_unlock(&ipip6_lock
);
583 tunnel
->stat
.rx_packets
++;
584 tunnel
->stat
.rx_bytes
+= skb
->len
;
585 skb
->dev
= tunnel
->dev
;
586 dst_release(skb
->dst
);
589 ipip6_ecn_decapsulate(iph
, skb
);
591 read_unlock(&ipip6_lock
);
595 icmp_send(skb
, ICMP_DEST_UNREACH
, ICMP_PORT_UNREACH
, 0);
597 read_unlock(&ipip6_lock
);
602 /* Returns the embedded IPv4 address if the IPv6 address
603 comes from 6to4 (RFC 3056) addr space */
605 static inline __be32
try_6to4(struct in6_addr
*v6dst
)
609 if (v6dst
->s6_addr16
[0] == htons(0x2002)) {
610 /* 6to4 v6 addr has 16 bits prefix, 32 v4addr, 16 SLA, ... */
611 memcpy(&dst
, &v6dst
->s6_addr16
[1], 4);
617 * This function assumes it is being called from dev_queue_xmit()
618 * and that skb is filled properly by that function.
621 static int ipip6_tunnel_xmit(struct sk_buff
*skb
, struct net_device
*dev
)
623 struct ip_tunnel
*tunnel
= netdev_priv(dev
);
624 struct net_device_stats
*stats
= &tunnel
->stat
;
625 struct iphdr
*tiph
= &tunnel
->parms
.iph
;
626 struct ipv6hdr
*iph6
= ipv6_hdr(skb
);
627 u8 tos
= tunnel
->parms
.iph
.tos
;
628 struct rtable
*rt
; /* Route to the other host */
629 struct net_device
*tdev
; /* Device to other host */
630 struct iphdr
*iph
; /* Our new IP header */
631 unsigned int max_headroom
; /* The extra header space needed */
632 __be32 dst
= tiph
->daddr
;
634 struct in6_addr
*addr6
;
637 if (tunnel
->recursion
++) {
638 tunnel
->stat
.collisions
++;
642 if (skb
->protocol
!= htons(ETH_P_IPV6
))
645 /* ISATAP (RFC4214) - must come before 6to4 */
646 if (dev
->priv_flags
& IFF_ISATAP
) {
647 struct neighbour
*neigh
= NULL
;
650 neigh
= skb
->dst
->neighbour
;
654 printk(KERN_DEBUG
"sit: nexthop == NULL\n");
658 addr6
= (struct in6_addr
*)&neigh
->primary_key
;
659 addr_type
= ipv6_addr_type(addr6
);
661 if ((addr_type
& IPV6_ADDR_UNICAST
) &&
662 ipv6_addr_is_isatap(addr6
))
663 dst
= addr6
->s6_addr32
[3];
669 dst
= try_6to4(&iph6
->daddr
);
672 struct neighbour
*neigh
= NULL
;
675 neigh
= skb
->dst
->neighbour
;
679 printk(KERN_DEBUG
"sit: nexthop == NULL\n");
683 addr6
= (struct in6_addr
*)&neigh
->primary_key
;
684 addr_type
= ipv6_addr_type(addr6
);
686 if (addr_type
== IPV6_ADDR_ANY
) {
687 addr6
= &ipv6_hdr(skb
)->daddr
;
688 addr_type
= ipv6_addr_type(addr6
);
691 if ((addr_type
& IPV6_ADDR_COMPATv4
) == 0)
694 dst
= addr6
->s6_addr32
[3];
698 struct flowi fl
= { .nl_u
= { .ip4_u
=
700 .saddr
= tiph
->saddr
,
701 .tos
= RT_TOS(tos
) } },
702 .oif
= tunnel
->parms
.link
,
703 .proto
= IPPROTO_IPV6
};
704 if (ip_route_output_key(&init_net
, &rt
, &fl
)) {
705 tunnel
->stat
.tx_carrier_errors
++;
709 if (rt
->rt_type
!= RTN_UNICAST
) {
711 tunnel
->stat
.tx_carrier_errors
++;
714 tdev
= rt
->u
.dst
.dev
;
718 tunnel
->stat
.collisions
++;
723 mtu
= dst_mtu(&rt
->u
.dst
) - sizeof(struct iphdr
);
725 mtu
= skb
->dst
? dst_mtu(skb
->dst
) : dev
->mtu
;
728 tunnel
->stat
.collisions
++;
732 if (mtu
< IPV6_MIN_MTU
)
734 if (tunnel
->parms
.iph
.daddr
&& skb
->dst
)
735 skb
->dst
->ops
->update_pmtu(skb
->dst
, mtu
);
737 if (skb
->len
> mtu
) {
738 icmpv6_send(skb
, ICMPV6_PKT_TOOBIG
, 0, mtu
, dev
);
743 if (tunnel
->err_count
> 0) {
744 if (jiffies
- tunnel
->err_time
< IPTUNNEL_ERR_TIMEO
) {
746 dst_link_failure(skb
);
748 tunnel
->err_count
= 0;
752 * Okay, now see if we can stuff it in the buffer as-is.
754 max_headroom
= LL_RESERVED_SPACE(tdev
)+sizeof(struct iphdr
);
756 if (skb_headroom(skb
) < max_headroom
|| skb_shared(skb
) ||
757 (skb_cloned(skb
) && !skb_clone_writable(skb
, 0))) {
758 struct sk_buff
*new_skb
= skb_realloc_headroom(skb
, max_headroom
);
767 skb_set_owner_w(new_skb
, skb
->sk
);
770 iph6
= ipv6_hdr(skb
);
773 skb
->transport_header
= skb
->network_header
;
774 skb_push(skb
, sizeof(struct iphdr
));
775 skb_reset_network_header(skb
);
776 memset(&(IPCB(skb
)->opt
), 0, sizeof(IPCB(skb
)->opt
));
777 IPCB(skb
)->flags
= 0;
778 dst_release(skb
->dst
);
779 skb
->dst
= &rt
->u
.dst
;
782 * Push down and install the IPIP header.
787 iph
->ihl
= sizeof(struct iphdr
)>>2;
788 if (mtu
> IPV6_MIN_MTU
)
789 iph
->frag_off
= htons(IP_DF
);
793 iph
->protocol
= IPPROTO_IPV6
;
794 iph
->tos
= INET_ECN_encapsulate(tos
, ipv6_get_dsfield(iph6
));
795 iph
->daddr
= rt
->rt_dst
;
796 iph
->saddr
= rt
->rt_src
;
798 if ((iph
->ttl
= tiph
->ttl
) == 0)
799 iph
->ttl
= iph6
->hop_limit
;
808 dst_link_failure(skb
);
816 static void ipip6_tunnel_bind_dev(struct net_device
*dev
)
818 struct net_device
*tdev
= NULL
;
819 struct ip_tunnel
*tunnel
;
822 tunnel
= netdev_priv(dev
);
823 iph
= &tunnel
->parms
.iph
;
826 struct flowi fl
= { .nl_u
= { .ip4_u
=
827 { .daddr
= iph
->daddr
,
829 .tos
= RT_TOS(iph
->tos
) } },
830 .oif
= tunnel
->parms
.link
,
831 .proto
= IPPROTO_IPV6
};
833 if (!ip_route_output_key(&init_net
, &rt
, &fl
)) {
834 tdev
= rt
->u
.dst
.dev
;
837 dev
->flags
|= IFF_POINTOPOINT
;
840 if (!tdev
&& tunnel
->parms
.link
)
841 tdev
= __dev_get_by_index(&init_net
, tunnel
->parms
.link
);
844 dev
->hard_header_len
= tdev
->hard_header_len
+ sizeof(struct iphdr
);
845 dev
->mtu
= tdev
->mtu
- sizeof(struct iphdr
);
846 if (dev
->mtu
< IPV6_MIN_MTU
)
847 dev
->mtu
= IPV6_MIN_MTU
;
849 dev
->iflink
= tunnel
->parms
.link
;
853 ipip6_tunnel_ioctl (struct net_device
*dev
, struct ifreq
*ifr
, int cmd
)
856 struct ip_tunnel_parm p
;
857 struct ip_tunnel_prl prl
;
859 struct net
*net
= dev_net(dev
);
860 struct sit_net
*sitn
= net_generic(net
, sit_net_id
);
865 if (dev
== ipip6_fb_tunnel_dev
) {
866 if (copy_from_user(&p
, ifr
->ifr_ifru
.ifru_data
, sizeof(p
))) {
870 t
= ipip6_tunnel_locate(net
, &p
, 0);
873 t
= netdev_priv(dev
);
874 memcpy(&p
, &t
->parms
, sizeof(p
));
875 if (copy_to_user(ifr
->ifr_ifru
.ifru_data
, &p
, sizeof(p
)))
882 if (!capable(CAP_NET_ADMIN
))
886 if (copy_from_user(&p
, ifr
->ifr_ifru
.ifru_data
, sizeof(p
)))
890 if (p
.iph
.version
!= 4 || p
.iph
.protocol
!= IPPROTO_IPV6
||
891 p
.iph
.ihl
!= 5 || (p
.iph
.frag_off
&htons(~IP_DF
)))
894 p
.iph
.frag_off
|= htons(IP_DF
);
896 t
= ipip6_tunnel_locate(net
, &p
, cmd
== SIOCADDTUNNEL
);
898 if (dev
!= ipip6_fb_tunnel_dev
&& cmd
== SIOCCHGTUNNEL
) {
905 if (((dev
->flags
&IFF_POINTOPOINT
) && !p
.iph
.daddr
) ||
906 (!(dev
->flags
&IFF_POINTOPOINT
) && p
.iph
.daddr
)) {
910 t
= netdev_priv(dev
);
911 ipip6_tunnel_unlink(sitn
, t
);
912 t
->parms
.iph
.saddr
= p
.iph
.saddr
;
913 t
->parms
.iph
.daddr
= p
.iph
.daddr
;
914 memcpy(dev
->dev_addr
, &p
.iph
.saddr
, 4);
915 memcpy(dev
->broadcast
, &p
.iph
.daddr
, 4);
916 ipip6_tunnel_link(sitn
, t
);
917 netdev_state_change(dev
);
923 if (cmd
== SIOCCHGTUNNEL
) {
924 t
->parms
.iph
.ttl
= p
.iph
.ttl
;
925 t
->parms
.iph
.tos
= p
.iph
.tos
;
926 if (t
->parms
.link
!= p
.link
) {
927 t
->parms
.link
= p
.link
;
928 ipip6_tunnel_bind_dev(dev
);
929 netdev_state_change(dev
);
932 if (copy_to_user(ifr
->ifr_ifru
.ifru_data
, &t
->parms
, sizeof(p
)))
935 err
= (cmd
== SIOCADDTUNNEL
? -ENOBUFS
: -ENOENT
);
940 if (!capable(CAP_NET_ADMIN
))
943 if (dev
== ipip6_fb_tunnel_dev
) {
945 if (copy_from_user(&p
, ifr
->ifr_ifru
.ifru_data
, sizeof(p
)))
948 if ((t
= ipip6_tunnel_locate(net
, &p
, 0)) == NULL
)
951 if (t
== netdev_priv(ipip6_fb_tunnel_dev
))
955 unregister_netdevice(dev
);
964 if (cmd
!= SIOCGETPRL
&& !capable(CAP_NET_ADMIN
))
967 if (dev
== ipip6_fb_tunnel_dev
)
970 if (copy_from_user(&prl
, ifr
->ifr_ifru
.ifru_data
, sizeof(prl
)))
973 if (!(t
= netdev_priv(dev
)))
978 err
= ipip6_tunnel_get_prl(t
, &prl
);
979 if (!err
&& copy_to_user(ifr
->ifr_ifru
.ifru_data
,
984 err
= ipip6_tunnel_del_prl(t
, &prl
);
988 err
= ipip6_tunnel_add_prl(t
, &prl
, cmd
== SIOCCHGPRL
);
991 if (cmd
!= SIOCGETPRL
)
992 netdev_state_change(dev
);
1003 static struct net_device_stats
*ipip6_tunnel_get_stats(struct net_device
*dev
)
1005 return &(((struct ip_tunnel
*)netdev_priv(dev
))->stat
);
1008 static int ipip6_tunnel_change_mtu(struct net_device
*dev
, int new_mtu
)
1010 if (new_mtu
< IPV6_MIN_MTU
|| new_mtu
> 0xFFF8 - sizeof(struct iphdr
))
1016 static void ipip6_tunnel_setup(struct net_device
*dev
)
1018 dev
->uninit
= ipip6_tunnel_uninit
;
1019 dev
->destructor
= free_netdev
;
1020 dev
->hard_start_xmit
= ipip6_tunnel_xmit
;
1021 dev
->get_stats
= ipip6_tunnel_get_stats
;
1022 dev
->do_ioctl
= ipip6_tunnel_ioctl
;
1023 dev
->change_mtu
= ipip6_tunnel_change_mtu
;
1025 dev
->type
= ARPHRD_SIT
;
1026 dev
->hard_header_len
= LL_MAX_HEADER
+ sizeof(struct iphdr
);
1027 dev
->mtu
= ETH_DATA_LEN
- sizeof(struct iphdr
);
1028 dev
->flags
= IFF_NOARP
;
1033 static int ipip6_tunnel_init(struct net_device
*dev
)
1035 struct ip_tunnel
*tunnel
;
1037 tunnel
= netdev_priv(dev
);
1040 strcpy(tunnel
->parms
.name
, dev
->name
);
1042 memcpy(dev
->dev_addr
, &tunnel
->parms
.iph
.saddr
, 4);
1043 memcpy(dev
->broadcast
, &tunnel
->parms
.iph
.daddr
, 4);
1045 ipip6_tunnel_bind_dev(dev
);
1050 static int __init
ipip6_fb_tunnel_init(struct net_device
*dev
)
1052 struct ip_tunnel
*tunnel
= netdev_priv(dev
);
1053 struct iphdr
*iph
= &tunnel
->parms
.iph
;
1056 strcpy(tunnel
->parms
.name
, dev
->name
);
1059 iph
->protocol
= IPPROTO_IPV6
;
1064 tunnels_wc
[0] = tunnel
;
1068 static struct xfrm_tunnel sit_handler
= {
1069 .handler
= ipip6_rcv
,
1070 .err_handler
= ipip6_err
,
1074 static void __exit
sit_destroy_tunnels(void)
1078 for (prio
= 1; prio
< 4; prio
++) {
1080 for (h
= 0; h
< HASH_SIZE
; h
++) {
1081 struct ip_tunnel
*t
;
1082 while ((t
= tunnels
[prio
][h
]) != NULL
)
1083 unregister_netdevice(t
->dev
);
1088 static int sit_init_net(struct net
*net
)
1091 struct sit_net
*sitn
;
1094 sitn
= kmalloc(sizeof(struct sit_net
), GFP_KERNEL
);
1098 err
= net_assign_generic(net
, sit_net_id
, sitn
);
1110 static void sit_exit_net(struct net
*net
)
1112 struct sit_net
*sitn
;
1114 sitn
= net_generic(net
, sit_net_id
);
1118 static struct pernet_operations sit_net_ops
= {
1119 .init
= sit_init_net
,
1120 .exit
= sit_exit_net
,
1123 static void __exit
sit_cleanup(void)
1125 xfrm4_tunnel_deregister(&sit_handler
, AF_INET6
);
1128 sit_destroy_tunnels();
1129 unregister_netdevice(ipip6_fb_tunnel_dev
);
1132 unregister_pernet_gen_device(sit_net_id
, &sit_net_ops
);
1135 static int __init
sit_init(void)
1139 printk(KERN_INFO
"IPv6 over IPv4 tunneling driver\n");
1141 if (xfrm4_tunnel_register(&sit_handler
, AF_INET6
) < 0) {
1142 printk(KERN_INFO
"sit init: Can't add protocol\n");
1146 ipip6_fb_tunnel_dev
= alloc_netdev(sizeof(struct ip_tunnel
), "sit0",
1147 ipip6_tunnel_setup
);
1148 if (!ipip6_fb_tunnel_dev
) {
1153 ipip6_fb_tunnel_dev
->init
= ipip6_fb_tunnel_init
;
1155 if ((err
= register_netdev(ipip6_fb_tunnel_dev
)))
1158 err
= register_pernet_gen_device(&sit_net_id
, &sit_net_ops
);
1165 free_netdev(ipip6_fb_tunnel_dev
);
1167 xfrm4_tunnel_deregister(&sit_handler
, AF_INET6
);
1170 unregister_netdevice(ipip6_fb_tunnel_dev
);
1174 module_init(sit_init
);
1175 module_exit(sit_cleanup
);
1176 MODULE_LICENSE("GPL");
1177 MODULE_ALIAS("sit0");