365 lines
11 KiB
C
365 lines
11 KiB
C
/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
|
|
|
|
/***
|
|
This file is part of systemd.
|
|
|
|
Copyright 2014 Susant Sahani <susant@redhat.com>
|
|
|
|
systemd is free software; you can redistribute it and/or modify it
|
|
under the terms of the GNU Lesser General Public License as published by
|
|
the Free Software Foundation; either version 2.1 of the License, or
|
|
(at your option) any later version.
|
|
|
|
systemd is distributed in the hope that it will be useful, but
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public License
|
|
along with systemd; If not, see <http://www.gnu.org/licenses/>.
|
|
***/
|
|
|
|
#include <netinet/ether.h>
|
|
#include <arpa/inet.h>
|
|
#include <net/if.h>
|
|
#include <linux/ip.h>
|
|
#include <linux/if_tunnel.h>
|
|
|
|
#include "sd-rtnl.h"
|
|
#include "networkd-netdev-tunnel.h"
|
|
#include "network-internal.h"
|
|
#include "util.h"
|
|
#include "missing.h"
|
|
#include "conf-parser.h"
|
|
|
|
static int netdev_ipip_fill_message_create(NetDev *netdev, Link *link, sd_rtnl_message *m) {
|
|
Tunnel *t = IPIP(netdev);
|
|
int r;
|
|
|
|
assert(netdev);
|
|
assert(link);
|
|
assert(m);
|
|
assert(t);
|
|
assert(t->family == AF_INET);
|
|
|
|
r = sd_rtnl_message_append_u32(m, IFLA_IPTUN_LINK, link->ifindex);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_LINK attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_in_addr(m, IFLA_IPTUN_LOCAL, &t->local.in);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_LOCAL attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_in_addr(m, IFLA_IPTUN_REMOTE, &t->remote.in);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_REMOTE attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_u8(m, IFLA_IPTUN_TTL, t->ttl);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_TTL attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
return r;
|
|
}
|
|
|
|
static int netdev_sit_fill_message_create(NetDev *netdev, Link *link, sd_rtnl_message *m) {
|
|
Tunnel *t = SIT(netdev);
|
|
int r;
|
|
|
|
assert(netdev);
|
|
assert(link);
|
|
assert(m);
|
|
assert(t);
|
|
assert(t->family == AF_INET);
|
|
|
|
r = sd_rtnl_message_append_u32(m, IFLA_IPTUN_LINK, link->ifindex);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_LINK attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_in_addr(m, IFLA_IPTUN_LOCAL, &t->local.in);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_LOCAL attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_in_addr(m, IFLA_IPTUN_REMOTE, &t->remote.in);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_REMOTE attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_u8(m, IFLA_IPTUN_TTL, t->ttl);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_TTL attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
return r;
|
|
}
|
|
|
|
static int netdev_gre_fill_message_create(NetDev *netdev, Link *link, sd_rtnl_message *m) {
|
|
Tunnel *t = GRE(netdev);
|
|
int r;
|
|
|
|
assert(netdev);
|
|
assert(link);
|
|
assert(m);
|
|
assert(t);
|
|
assert(t->family == AF_INET);
|
|
|
|
r = sd_rtnl_message_append_u32(m, IFLA_GRE_LINK, link->ifindex);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_GRE_LINK attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_in_addr(m, IFLA_GRE_LOCAL, &t->local.in);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_GRE_LOCAL attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_in_addr(m, IFLA_GRE_REMOTE, &t->remote.in);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_GRE_REMOTE attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_u8(m, IFLA_GRE_TTL, t->ttl);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_GRE_TTL attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_u8(m, IFLA_GRE_TOS, t->tos);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_GRE_TOS attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
return r;
|
|
}
|
|
|
|
static int netdev_vti_fill_message_create(NetDev *netdev, Link *link, sd_rtnl_message *m) {
|
|
Tunnel *t = VTI(netdev);
|
|
int r;
|
|
|
|
assert(netdev);
|
|
assert(link);
|
|
assert(m);
|
|
assert(t);
|
|
assert(t->family == AF_INET);
|
|
|
|
r = sd_rtnl_message_append_u32(m, IFLA_VTI_LINK, link->ifindex);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_LINK attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_in_addr(m, IFLA_VTI_LOCAL, &t->local.in);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_LOCAL attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_append_in_addr(m, IFLA_VTI_REMOTE, &t->remote.in);
|
|
if (r < 0) {
|
|
log_error_netdev(netdev,
|
|
"Could not append IFLA_IPTUN_REMOTE attribute: %s",
|
|
strerror(-r));
|
|
return r;
|
|
}
|
|
|
|
return r;
|
|
}
|
|
|
|
static int netdev_tunnel_verify(NetDev *netdev, const char *filename) {
|
|
Tunnel *t = NULL;
|
|
|
|
assert(netdev);
|
|
assert(filename);
|
|
|
|
switch (netdev->kind) {
|
|
case NETDEV_KIND_IPIP:
|
|
t = IPIP(netdev);
|
|
break;
|
|
case NETDEV_KIND_SIT:
|
|
t = SIT(netdev);
|
|
break;
|
|
case NETDEV_KIND_GRE:
|
|
t = GRE(netdev);
|
|
break;
|
|
case NETDEV_KIND_VTI:
|
|
t = VTI(netdev);
|
|
break;
|
|
default:
|
|
assert_not_reached("Invalid tunnel kind");
|
|
}
|
|
|
|
assert(t);
|
|
|
|
if (t->local.in.s_addr == INADDR_ANY) {
|
|
log_warning("Tunnel without local address configured in %s. Ignoring", filename);
|
|
return -EINVAL;
|
|
}
|
|
|
|
if (t->remote.in.s_addr == INADDR_ANY) {
|
|
log_warning("Tunnel without remote address configured in %s. Ignoring", filename);
|
|
return -EINVAL;
|
|
}
|
|
|
|
if (t->family != AF_INET) {
|
|
log_warning("Tunnel with invalid address family configured in %s. Ignoring", filename);
|
|
return -EINVAL;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_tunnel_address(const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
Tunnel *t = userdata;
|
|
union in_addr_union *addr = data, buffer;
|
|
int r, f;
|
|
|
|
assert(filename);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(data);
|
|
|
|
r = in_addr_from_string_auto(rvalue, &f, &buffer);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_ERR, filename, line, EINVAL, "Tunnel address is invalid, ignoring assignment: %s", rvalue);
|
|
return 0;
|
|
}
|
|
|
|
if (t->family != AF_UNSPEC && t->family != f) {
|
|
log_syntax(unit, LOG_ERR, filename, line, EINVAL, "Tunnel addresses incompatible, ignoring assignment: %s", rvalue);
|
|
return 0;
|
|
}
|
|
|
|
t->family = f;
|
|
*addr = buffer;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void ipip_init(NetDev *n) {
|
|
Tunnel *t = IPIP(n);
|
|
|
|
assert(n);
|
|
assert(t);
|
|
|
|
t->pmtudisc = true;
|
|
}
|
|
|
|
static void sit_init(NetDev *n) {
|
|
Tunnel *t = SIT(n);
|
|
|
|
assert(n);
|
|
assert(t);
|
|
|
|
t->pmtudisc = true;
|
|
}
|
|
|
|
static void vti_init(NetDev *n) {
|
|
Tunnel *t = VTI(n);
|
|
|
|
assert(n);
|
|
assert(t);
|
|
|
|
t->pmtudisc = true;
|
|
}
|
|
|
|
static void gre_init(NetDev *n) {
|
|
Tunnel *t = GRE(n);
|
|
|
|
assert(n);
|
|
assert(t);
|
|
|
|
t->pmtudisc = true;
|
|
}
|
|
|
|
const NetDevVTable ipip_vtable = {
|
|
.object_size = sizeof(Tunnel),
|
|
.init = ipip_init,
|
|
.sections = "Match\0NetDev\0Tunnel\0",
|
|
.fill_message_create = netdev_ipip_fill_message_create,
|
|
.create_type = NETDEV_CREATE_STACKED,
|
|
.config_verify = netdev_tunnel_verify,
|
|
};
|
|
|
|
const NetDevVTable sit_vtable = {
|
|
.object_size = sizeof(Tunnel),
|
|
.init = sit_init,
|
|
.sections = "Match\0NetDev\0Tunnel\0",
|
|
.fill_message_create = netdev_sit_fill_message_create,
|
|
.create_type = NETDEV_CREATE_STACKED,
|
|
.config_verify = netdev_tunnel_verify,
|
|
};
|
|
|
|
const NetDevVTable vti_vtable = {
|
|
.object_size = sizeof(Tunnel),
|
|
.init = vti_init,
|
|
.sections = "Match\0NetDev\0Tunnel\0",
|
|
.fill_message_create = netdev_vti_fill_message_create,
|
|
.create_type = NETDEV_CREATE_STACKED,
|
|
.config_verify = netdev_tunnel_verify,
|
|
};
|
|
|
|
const NetDevVTable gre_vtable = {
|
|
.object_size = sizeof(Tunnel),
|
|
.init = gre_init,
|
|
.sections = "Match\0NetDev\0Tunnel\0",
|
|
.fill_message_create = netdev_gre_fill_message_create,
|
|
.create_type = NETDEV_CREATE_STACKED,
|
|
.config_verify = netdev_tunnel_verify,
|
|
};
|