/* SPDX-License-Identifier: LGPL-2.1+ */ #include #include "alloc-util.h" #include "conf-parser.h" #include "in-addr-util.h" #include "missing_network.h" #include "netlink-util.h" #include "networkd-ipv4ll.h" #include "networkd-manager.h" #include "networkd-route.h" #include "parse-util.h" #include "set.h" #include "string-util.h" #include "sysctl-util.h" #include "util.h" #define ROUTES_DEFAULT_MAX_PER_FAMILY 4096U static unsigned routes_max(void) { static thread_local unsigned cached = 0; _cleanup_free_ char *s4 = NULL, *s6 = NULL; unsigned val4 = ROUTES_DEFAULT_MAX_PER_FAMILY, val6 = ROUTES_DEFAULT_MAX_PER_FAMILY; if (cached > 0) return cached; if (sysctl_read("net/ipv4/route/max_size", &s4) >= 0) { truncate_nl(s4); if (safe_atou(s4, &val4) >= 0 && val4 == 2147483647U) /* This is the default "no limit" value in the kernel */ val4 = ROUTES_DEFAULT_MAX_PER_FAMILY; } if (sysctl_read("net/ipv6/route/max_size", &s6) >= 0) { truncate_nl(s6); (void) safe_atou(s6, &val6); } cached = MAX(ROUTES_DEFAULT_MAX_PER_FAMILY, val4) + MAX(ROUTES_DEFAULT_MAX_PER_FAMILY, val6); return cached; } int route_new(Route **ret) { _cleanup_(route_freep) Route *route = NULL; route = new(Route, 1); if (!route) return -ENOMEM; *route = (Route) { .family = AF_UNSPEC, .scope = RT_SCOPE_UNIVERSE, .protocol = RTPROT_UNSPEC, .type = RTN_UNICAST, .table = RT_TABLE_MAIN, .lifetime = USEC_INFINITY, .quickack = -1, .fast_open_no_cookie = -1, .gateway_onlink = -1, .ttl_propagate = -1, }; *ret = TAKE_PTR(route); return 0; } static int route_new_static(Network *network, const char *filename, unsigned section_line, Route **ret) { _cleanup_(network_config_section_freep) NetworkConfigSection *n = NULL; _cleanup_(route_freep) Route *route = NULL; int r; assert(network); assert(ret); assert(!!filename == (section_line > 0)); if (filename) { r = network_config_section_new(filename, section_line, &n); if (r < 0) return r; route = hashmap_get(network->routes_by_section, n); if (route) { *ret = TAKE_PTR(route); return 0; } } if (network->n_static_routes >= routes_max()) return -E2BIG; r = route_new(&route); if (r < 0) return r; route->protocol = RTPROT_STATIC; route->network = network; LIST_PREPEND(routes, network->static_routes, route); network->n_static_routes++; if (filename) { route->section = TAKE_PTR(n); r = hashmap_ensure_allocated(&network->routes_by_section, &network_config_hash_ops); if (r < 0) return r; r = hashmap_put(network->routes_by_section, route->section, route); if (r < 0) return r; } *ret = TAKE_PTR(route); return 0; } void route_free(Route *route) { if (!route) return; if (route->network) { LIST_REMOVE(routes, route->network->static_routes, route); assert(route->network->n_static_routes > 0); route->network->n_static_routes--; if (route->section) hashmap_remove(route->network->routes_by_section, route->section); } network_config_section_free(route->section); if (route->link) { set_remove(route->link->routes, route); set_remove(route->link->routes_foreign, route); } sd_event_source_unref(route->expire); free(route); } static void route_hash_func(const Route *route, struct siphash *state) { assert(route); siphash24_compress(&route->family, sizeof(route->family), state); switch (route->family) { case AF_INET: case AF_INET6: /* Equality of routes are given by the 4-touple (dst_prefix,dst_prefixlen,tos,priority,table) */ siphash24_compress(&route->dst, FAMILY_ADDRESS_SIZE(route->family), state); siphash24_compress(&route->dst_prefixlen, sizeof(route->dst_prefixlen), state); siphash24_compress(&route->tos, sizeof(route->tos), state); siphash24_compress(&route->priority, sizeof(route->priority), state); siphash24_compress(&route->table, sizeof(route->table), state); break; default: /* treat any other address family as AF_UNSPEC */ break; } } static int route_compare_func(const Route *a, const Route *b) { int r; r = CMP(a->family, b->family); if (r != 0) return r; switch (a->family) { case AF_INET: case AF_INET6: r = CMP(a->dst_prefixlen, b->dst_prefixlen); if (r != 0) return r; r = CMP(a->tos, b->tos); if (r != 0) return r; r = CMP(a->priority, b->priority); if (r != 0) return r; r = CMP(a->table, b->table); if (r != 0) return r; return memcmp(&a->dst, &b->dst, FAMILY_ADDRESS_SIZE(a->family)); default: /* treat any other address family as AF_UNSPEC */ return 0; } } DEFINE_PRIVATE_HASH_OPS(route_hash_ops, Route, route_hash_func, route_compare_func); bool route_equal(Route *r1, Route *r2) { if (r1 == r2) return true; if (!r1 || !r2) return false; return route_compare_func(r1, r2) == 0; } int route_get(Link *link, int family, const union in_addr_union *dst, unsigned char dst_prefixlen, unsigned char tos, uint32_t priority, uint32_t table, Route **ret) { Route route, *existing; assert(link); assert(dst); route = (Route) { .family = family, .dst = *dst, .dst_prefixlen = dst_prefixlen, .tos = tos, .priority = priority, .table = table, }; existing = set_get(link->routes, &route); if (existing) { if (ret) *ret = existing; return 1; } existing = set_get(link->routes_foreign, &route); if (existing) { if (ret) *ret = existing; return 0; } return -ENOENT; } static int route_add_internal( Link *link, Set **routes, int family, const union in_addr_union *dst, unsigned char dst_prefixlen, unsigned char tos, uint32_t priority, uint32_t table, Route **ret) { _cleanup_(route_freep) Route *route = NULL; int r; assert(link); assert(routes); assert(dst); r = route_new(&route); if (r < 0) return r; route->family = family; route->dst = *dst; route->dst_prefixlen = dst_prefixlen; route->tos = tos; route->priority = priority; route->table = table; r = set_ensure_allocated(routes, &route_hash_ops); if (r < 0) return r; r = set_put(*routes, route); if (r < 0) return r; route->link = link; if (ret) *ret = route; route = NULL; return 0; } int route_add_foreign( Link *link, int family, const union in_addr_union *dst, unsigned char dst_prefixlen, unsigned char tos, uint32_t priority, uint32_t table, Route **ret) { return route_add_internal(link, &link->routes_foreign, family, dst, dst_prefixlen, tos, priority, table, ret); } int route_add(Link *link, int family, const union in_addr_union *dst, unsigned char dst_prefixlen, unsigned char tos, uint32_t priority, uint32_t table, Route **ret) { Route *route; int r; r = route_get(link, family, dst, dst_prefixlen, tos, priority, table, &route); if (r == -ENOENT) { /* Route does not exist, create a new one */ r = route_add_internal(link, &link->routes, family, dst, dst_prefixlen, tos, priority, table, &route); if (r < 0) return r; } else if (r == 0) { /* Take over a foreign route */ r = set_ensure_allocated(&link->routes, &route_hash_ops); if (r < 0) return r; r = set_put(link->routes, route); if (r < 0) return r; set_remove(link->routes_foreign, route); } else if (r == 1) { /* Route exists, do nothing */ ; } else return r; if (ret) *ret = route; return 0; } void route_update(Route *route, const union in_addr_union *src, unsigned char src_prefixlen, const union in_addr_union *gw, const union in_addr_union *prefsrc, unsigned char scope, unsigned char protocol, unsigned char type) { assert(route); assert(src || src_prefixlen == 0); route->src = src ? *src : IN_ADDR_NULL; route->src_prefixlen = src_prefixlen; route->gw = gw ? *gw : IN_ADDR_NULL; route->prefsrc = prefsrc ? *prefsrc : IN_ADDR_NULL; route->scope = scope; route->protocol = protocol; route->type = type; } static int route_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) { int r; assert(m); assert(link); assert(link->ifname); if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER)) return 1; r = sd_netlink_message_get_errno(m); if (r < 0 && r != -ESRCH) log_link_warning_errno(link, r, "Could not drop route: %m"); return 1; } int route_remove(Route *route, Link *link, link_netlink_message_handler_t callback) { _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL; int r; assert(link); assert(link->manager); assert(link->manager->rtnl); assert(link->ifindex > 0); assert(IN_SET(route->family, AF_INET, AF_INET6)); r = sd_rtnl_message_new_route(link->manager->rtnl, &req, RTM_DELROUTE, route->family, route->protocol); if (r < 0) return log_link_error_errno(link, r, "Could not create RTM_DELROUTE message: %m"); if (in_addr_is_null(route->family, &route->gw) == 0) { r = netlink_message_append_in_addr_union(req, RTA_GATEWAY, route->family, &route->gw); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_GATEWAY attribute: %m"); } if (route->dst_prefixlen) { r = netlink_message_append_in_addr_union(req, RTA_DST, route->family, &route->dst); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_DST attribute: %m"); r = sd_rtnl_message_route_set_dst_prefixlen(req, route->dst_prefixlen); if (r < 0) return log_link_error_errno(link, r, "Could not set destination prefix length: %m"); } if (route->src_prefixlen) { r = netlink_message_append_in_addr_union(req, RTA_SRC, route->family, &route->src); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_SRC attribute: %m"); r = sd_rtnl_message_route_set_src_prefixlen(req, route->src_prefixlen); if (r < 0) return log_link_error_errno(link, r, "Could not set source prefix length: %m"); } if (in_addr_is_null(route->family, &route->prefsrc) == 0) { r = netlink_message_append_in_addr_union(req, RTA_PREFSRC, route->family, &route->prefsrc); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_PREFSRC attribute: %m"); } r = sd_rtnl_message_route_set_scope(req, route->scope); if (r < 0) return log_link_error_errno(link, r, "Could not set scope: %m"); r = sd_netlink_message_append_u32(req, RTA_PRIORITY, route->priority); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_PRIORITY attribute: %m"); if (!IN_SET(route->type, RTN_UNREACHABLE, RTN_PROHIBIT, RTN_BLACKHOLE, RTN_THROW)) { r = sd_netlink_message_append_u32(req, RTA_OIF, link->ifindex); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_OIF attribute: %m"); } r = netlink_call_async(link->manager->rtnl, NULL, req, callback ?: route_remove_handler, link_netlink_destroy_callback, link); if (r < 0) return log_link_error_errno(link, r, "Could not send rtnetlink message: %m"); link_ref(link); return 0; } int route_expire_handler(sd_event_source *s, uint64_t usec, void *userdata) { Route *route = userdata; int r; assert(route); r = route_remove(route, route->link, NULL); if (r < 0) log_warning_errno(r, "Could not remove route: %m"); else route_free(route); return 1; } int route_configure( Route *route, Link *link, link_netlink_message_handler_t callback) { _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL; _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL; usec_t lifetime; int r; assert(link); assert(link->manager); assert(link->manager->rtnl); assert(link->ifindex > 0); assert(IN_SET(route->family, AF_INET, AF_INET6)); assert(callback); if (route->family == AF_INET6 && link_sysctl_ipv6_enabled(link) == 0) { log_link_warning(link, "An IPv6 route is requested, but IPv6 is disabled by sysctl, ignoring."); return 0; } if (route_get(link, route->family, &route->dst, route->dst_prefixlen, route->tos, route->priority, route->table, NULL) <= 0 && set_size(link->routes) >= routes_max()) return log_link_error_errno(link, SYNTHETIC_ERRNO(E2BIG), "Too many routes are configured, refusing: %m"); if (DEBUG_LOGGING) { _cleanup_free_ char *dst = NULL, *dst_prefixlen = NULL, *src = NULL, *gw = NULL, *prefsrc = NULL; if (!in_addr_is_null(route->family, &route->dst)) { (void) in_addr_to_string(route->family, &route->dst, &dst); (void) asprintf(&dst_prefixlen, "/%u", route->dst_prefixlen); } if (!in_addr_is_null(route->family, &route->src)) (void) in_addr_to_string(route->family, &route->src, &src); if (!in_addr_is_null(route->family, &route->gw)) (void) in_addr_to_string(route->family, &route->gw, &gw); if (!in_addr_is_null(route->family, &route->prefsrc)) (void) in_addr_to_string(route->family, &route->prefsrc, &prefsrc); log_link_debug(link, "Configuring route: dst: %s%s, src: %s, gw: %s, prefsrc: %s", strna(dst), strempty(dst_prefixlen), strna(src), strna(gw), strna(prefsrc)); } r = sd_rtnl_message_new_route(link->manager->rtnl, &req, RTM_NEWROUTE, route->family, route->protocol); if (r < 0) return log_link_error_errno(link, r, "Could not create RTM_NEWROUTE message: %m"); if (in_addr_is_null(route->family, &route->gw) == 0) { r = netlink_message_append_in_addr_union(req, RTA_GATEWAY, route->family, &route->gw); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_GATEWAY attribute: %m"); r = sd_rtnl_message_route_set_family(req, route->family); if (r < 0) return log_link_error_errno(link, r, "Could not set route family: %m"); } if (route->dst_prefixlen) { r = netlink_message_append_in_addr_union(req, RTA_DST, route->family, &route->dst); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_DST attribute: %m"); r = sd_rtnl_message_route_set_dst_prefixlen(req, route->dst_prefixlen); if (r < 0) return log_link_error_errno(link, r, "Could not set destination prefix length: %m"); } if (route->src_prefixlen) { r = netlink_message_append_in_addr_union(req, RTA_SRC, route->family, &route->src); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_SRC attribute: %m"); r = sd_rtnl_message_route_set_src_prefixlen(req, route->src_prefixlen); if (r < 0) return log_link_error_errno(link, r, "Could not set source prefix length: %m"); } if (in_addr_is_null(route->family, &route->prefsrc) == 0) { r = netlink_message_append_in_addr_union(req, RTA_PREFSRC, route->family, &route->prefsrc); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_PREFSRC attribute: %m"); } r = sd_rtnl_message_route_set_scope(req, route->scope); if (r < 0) return log_link_error_errno(link, r, "Could not set scope: %m"); if (route->gateway_onlink >= 0) SET_FLAG(route->flags, RTNH_F_ONLINK, route->gateway_onlink); r = sd_rtnl_message_route_set_flags(req, route->flags); if (r < 0) return log_link_error_errno(link, r, "Could not set flags: %m"); if (route->table != RT_TABLE_MAIN) { if (route->table < 256) { r = sd_rtnl_message_route_set_table(req, route->table); if (r < 0) return log_link_error_errno(link, r, "Could not set route table: %m"); } else { r = sd_rtnl_message_route_set_table(req, RT_TABLE_UNSPEC); if (r < 0) return log_link_error_errno(link, r, "Could not set route table: %m"); /* Table attribute to allow more than 256. */ r = sd_netlink_message_append_data(req, RTA_TABLE, &route->table, sizeof(route->table)); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_TABLE attribute: %m"); } } r = sd_netlink_message_append_u32(req, RTA_PRIORITY, route->priority); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_PRIORITY attribute: %m"); r = sd_netlink_message_append_u8(req, RTA_PREF, route->pref); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_PREF attribute: %m"); if (route->lifetime != USEC_INFINITY && kernel_route_expiration_supported()) { r = sd_netlink_message_append_u32(req, RTA_EXPIRES, DIV_ROUND_UP(usec_sub_unsigned(route->lifetime, now(clock_boottime_or_monotonic())), USEC_PER_SEC)); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_EXPIRES attribute: %m"); } r = sd_rtnl_message_route_set_type(req, route->type); if (r < 0) return log_link_error_errno(link, r, "Could not set route type: %m"); if (!IN_SET(route->type, RTN_UNREACHABLE, RTN_PROHIBIT, RTN_BLACKHOLE, RTN_THROW)) { r = sd_netlink_message_append_u32(req, RTA_OIF, link->ifindex); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_OIF attribute: %m"); } if (route->ttl_propagate >= 0) { r = sd_netlink_message_append_u8(req, RTA_TTL_PROPAGATE, route->ttl_propagate); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_TTL_PROPAGATE attribute: %m"); } r = sd_netlink_message_open_container(req, RTA_METRICS); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_METRICS attribute: %m"); if (route->mtu > 0) { r = sd_netlink_message_append_u32(req, RTAX_MTU, route->mtu); if (r < 0) return log_link_error_errno(link, r, "Could not append RTAX_MTU attribute: %m"); } if (route->initcwnd > 0) { r = sd_netlink_message_append_u32(req, RTAX_INITCWND, route->initcwnd); if (r < 0) return log_link_error_errno(link, r, "Could not append RTAX_INITCWND attribute: %m"); } if (route->initrwnd > 0) { r = sd_netlink_message_append_u32(req, RTAX_INITRWND, route->initrwnd); if (r < 0) return log_link_error_errno(link, r, "Could not append RTAX_INITRWND attribute: %m"); } if (route->quickack >= 0) { r = sd_netlink_message_append_u32(req, RTAX_QUICKACK, route->quickack); if (r < 0) return log_link_error_errno(link, r, "Could not append RTAX_QUICKACK attribute: %m"); } if (route->fast_open_no_cookie >= 0) { r = sd_netlink_message_append_u32(req, RTAX_FASTOPEN_NO_COOKIE, route->fast_open_no_cookie); if (r < 0) return log_link_error_errno(link, r, "Could not append RTAX_FASTOPEN_NO_COOKIE attribute: %m"); } r = sd_netlink_message_close_container(req); if (r < 0) return log_link_error_errno(link, r, "Could not append RTA_METRICS attribute: %m"); r = netlink_call_async(link->manager->rtnl, NULL, req, callback, link_netlink_destroy_callback, link); if (r < 0) return log_link_error_errno(link, r, "Could not send rtnetlink message: %m"); link_ref(link); lifetime = route->lifetime; r = route_add(link, route->family, &route->dst, route->dst_prefixlen, route->tos, route->priority, route->table, &route); if (r < 0) return log_link_error_errno(link, r, "Could not add route: %m"); /* TODO: drop expiration handling once it can be pushed into the kernel */ route->lifetime = lifetime; if (route->lifetime != USEC_INFINITY && !kernel_route_expiration_supported()) { r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), route->lifetime, 0, route_expire_handler, route); if (r < 0) return log_link_error_errno(link, r, "Could not arm expiration timer: %m"); } sd_event_source_unref(route->expire); route->expire = TAKE_PTR(expire); return 1; } int network_add_ipv4ll_route(Network *network) { _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; assert(network); if (!network->ipv4ll_route) return 0; /* IPv4LLRoute= is in [Network] section. */ r = route_new_static(network, NULL, 0, &n); if (r < 0) return r; r = in_addr_from_string(AF_INET, "169.254.0.0", &n->dst); if (r < 0) return r; n->family = AF_INET; n->dst_prefixlen = 16; n->scope = RT_SCOPE_LINK; n->priority = IPV4LL_ROUTE_METRIC; n->protocol = RTPROT_STATIC; TAKE_PTR(n); return 0; } int network_add_default_route_on_device(Network *network) { _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; assert(network); if (!network->default_route_on_device) return 0; /* DefaultRouteOnDevice= is in [Network] section. */ r = route_new_static(network, NULL, 0, &n); if (r < 0) return r; r = in_addr_from_string(AF_INET, "169.254.0.0", &n->dst); if (r < 0) return r; n->family = AF_INET; TAKE_PTR(n); return 0; } int config_parse_gateway( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); if (streq(section, "Network")) { /* we are not in an Route section, so treat * this as the special '0' section */ r = route_new_static(network, NULL, 0, &n); } else r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; if (n->family == AF_UNSPEC) r = in_addr_from_string_auto(rvalue, &n->family, &n->gw); else r = in_addr_from_string(n->family, rvalue, &n->gw); if (r < 0) { log_syntax(unit, LOG_ERR, filename, line, r, "Invalid %s='%s', ignoring assignment: %m", lvalue, rvalue); return 0; } TAKE_PTR(n); return 0; } int config_parse_preferred_src( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; if (n->family == AF_UNSPEC) r = in_addr_from_string_auto(rvalue, &n->family, &n->prefsrc); else r = in_addr_from_string(n->family, rvalue, &n->prefsrc); if (r < 0) { log_syntax(unit, LOG_ERR, filename, line, EINVAL, "Invalid %s='%s', ignoring assignment: %m", lvalue, rvalue); return 0; } TAKE_PTR(n); return 0; } int config_parse_destination( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; union in_addr_union *buffer; unsigned char *prefixlen; int r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; if (streq(lvalue, "Destination")) { buffer = &n->dst; prefixlen = &n->dst_prefixlen; } else if (streq(lvalue, "Source")) { buffer = &n->src; prefixlen = &n->src_prefixlen; } else assert_not_reached(lvalue); if (n->family == AF_UNSPEC) r = in_addr_prefix_from_string_auto(rvalue, &n->family, buffer, prefixlen); else r = in_addr_prefix_from_string(rvalue, n->family, buffer, prefixlen); if (r < 0) { log_syntax(unit, LOG_ERR, filename, line, EINVAL, "Invalid %s='%s', ignoring assignment: %m", lvalue, rvalue); return 0; } TAKE_PTR(n); return 0; } int config_parse_route_priority( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; r = safe_atou32(rvalue, &n->priority); if (r < 0) { log_syntax(unit, LOG_ERR, filename, line, r, "Could not parse route priority \"%s\", ignoring assignment: %m", rvalue); return 0; } TAKE_PTR(n); return 0; } int config_parse_route_scope( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; if (streq(rvalue, "host")) n->scope = RT_SCOPE_HOST; else if (streq(rvalue, "link")) n->scope = RT_SCOPE_LINK; else if (streq(rvalue, "global")) n->scope = RT_SCOPE_UNIVERSE; else { log_syntax(unit, LOG_ERR, filename, line, 0, "Unknown route scope: %s", rvalue); return 0; } TAKE_PTR(n); return 0; } int config_parse_route_table( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { _cleanup_(route_free_or_set_invalidp) Route *n = NULL; Network *network = userdata; int r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; r = safe_atou32(rvalue, &n->table); if (r < 0) { log_syntax(unit, LOG_ERR, filename, line, r, "Could not parse route table number \"%s\", ignoring assignment: %m", rvalue); return 0; } TAKE_PTR(n); return 0; } int config_parse_gateway_onlink( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; r = parse_boolean(rvalue); if (r < 0) { log_syntax(unit, LOG_ERR, filename, line, r, "Could not parse %s=\"%s\", ignoring assignment: %m", lvalue, rvalue); return 0; } n->gateway_onlink = r; TAKE_PTR(n); return 0; } int config_parse_ipv6_route_preference( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; if (streq(rvalue, "low")) n->pref = ICMPV6_ROUTER_PREF_LOW; else if (streq(rvalue, "medium")) n->pref = ICMPV6_ROUTER_PREF_MEDIUM; else if (streq(rvalue, "high")) n->pref = ICMPV6_ROUTER_PREF_HIGH; else { log_syntax(unit, LOG_ERR, filename, line, 0, "Unknown route preference: %s", rvalue); return 0; } TAKE_PTR(n); return 0; } int config_parse_route_protocol( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; if (streq(rvalue, "kernel")) n->protocol = RTPROT_KERNEL; else if (streq(rvalue, "boot")) n->protocol = RTPROT_BOOT; else if (streq(rvalue, "static")) n->protocol = RTPROT_STATIC; else { r = safe_atou8(rvalue , &n->protocol); if (r < 0) { log_syntax(unit, LOG_ERR, filename, line, r, "Could not parse route protocol \"%s\", ignoring assignment: %m", rvalue); return 0; } } TAKE_PTR(n); return 0; } int config_parse_route_type( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; if (streq(rvalue, "unicast")) n->type = RTN_UNICAST; else if (streq(rvalue, "blackhole")) n->type = RTN_BLACKHOLE; else if (streq(rvalue, "unreachable")) n->type = RTN_UNREACHABLE; else if (streq(rvalue, "prohibit")) n->type = RTN_PROHIBIT; else if (streq(rvalue, "throw")) n->type = RTN_THROW; else { log_syntax(unit, LOG_ERR, filename, line, r, "Could not parse route type \"%s\", ignoring assignment: %m", rvalue); return 0; } TAKE_PTR(n); return 0; } int config_parse_tcp_window( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { _cleanup_(route_free_or_set_invalidp) Route *n = NULL; Network *network = userdata; uint64_t k; int r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; r = parse_size(rvalue, 1024, &k); if (r < 0) { log_syntax(unit, LOG_ERR, filename, line, r, "Could not parse TCP %s \"%s\", ignoring assignment: %m", lvalue, rvalue); return 0; } if (k > UINT32_MAX) { log_syntax(unit, LOG_ERR, filename, line, 0, "Specified TCP %s \"%s\" is too large, ignoring assignment: %m", lvalue, rvalue); return 0; } if (streq(lvalue, "InitialCongestionWindow")) n->initcwnd = k; else if (streq(lvalue, "InitialAdvertisedReceiveWindow")) n->initrwnd = k; else assert_not_reached("Invalid TCP window type."); TAKE_PTR(n); return 0; } int config_parse_quickack( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { _cleanup_(route_free_or_set_invalidp) Route *n = NULL; Network *network = userdata; int k, r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; k = parse_boolean(rvalue); if (k < 0) { log_syntax(unit, LOG_ERR, filename, line, k, "Failed to parse TCP quickack, ignoring: %s", rvalue); return 0; } n->quickack = !!k; TAKE_PTR(n); return 0; } int config_parse_fast_open_no_cookie( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { _cleanup_(route_free_or_set_invalidp) Route *n = NULL; Network *network = userdata; int k, r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; k = parse_boolean(rvalue); if (k < 0) { log_syntax(unit, LOG_ERR, filename, line, k, "Failed to parse TCP fastopen no cookie, ignoring: %s", rvalue); return 0; } n->fast_open_no_cookie = k; TAKE_PTR(n); return 0; } int config_parse_route_mtu( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; r = config_parse_mtu(unit, filename, line, section, section_line, lvalue, ltype, rvalue, &n->mtu, userdata); if (r < 0) return r; TAKE_PTR(n); return 0; } int config_parse_route_ttl_propagate( const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata) { Network *network = userdata; _cleanup_(route_free_or_set_invalidp) Route *n = NULL; int r, k; assert(filename); assert(section); assert(lvalue); assert(rvalue); assert(data); r = route_new_static(network, filename, section_line, &n); if (r < 0) return r; k = parse_boolean(rvalue); if (k < 0) { log_syntax(unit, LOG_ERR, filename, line, k, "Failed to parse TTLPropagate= value, ignoring: %s", rvalue); return 0; } n->ttl_propagate = k; TAKE_PTR(n); return 0; } int route_section_verify(Route *route, Network *network) { if (section_is_invalid(route->section)) return -EINVAL; if (route->family == AF_UNSPEC) { assert(route->section); return log_warning_errno(SYNTHETIC_ERRNO(EINVAL), "%s: Route section without Gateway=, Destination=, Source=, " "or PreferredSource= field configured. " "Ignoring [Route] section from line %u.", route->section->filename, route->section->line); } if (network->n_static_addresses == 0 && in_addr_is_null(route->family, &route->gw) == 0 && route->gateway_onlink < 0) { log_warning("%s: Gateway= without static address configured. " "Enabling GatewayOnLink= option.", network->filename); route->gateway_onlink = true; } return 0; }