2 * IPv6 over IPv4 tunnel device - Simple Internet Transition (SIT)
3 * Linux INET6 implementation
6 * Pedro Roque <roque@di.fc.ul.pt>
7 * Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
9 * $Id: sit.c,v 1.53 2001/09/25 05:09:53 davem Exp $
11 * This program is free software; you can redistribute it and/or
12 * modify it under the terms of the GNU General Public License
13 * as published by the Free Software Foundation; either version
14 * 2 of the License, or (at your option) any later version.
17 * Roger Venning <r.venning@telstra.com>: 6to4 support
18 * Nate Thompson <nate@thebog.net>: 6to4 support
21 #include <linux/config.h>
22 #include <linux/module.h>
23 #include <linux/errno.h>
24 #include <linux/types.h>
25 #include <linux/socket.h>
26 #include <linux/sockios.h>
27 #include <linux/sched.h>
28 #include <linux/net.h>
29 #include <linux/in6.h>
30 #include <linux/netdevice.h>
31 #include <linux/if_arp.h>
32 #include <linux/icmp.h>
33 #include <asm/uaccess.h>
34 #include <linux/init.h>
35 #include <linux/netfilter_ipv4.h>
36 #include <linux/if_ether.h>
42 #include <net/protocol.h>
43 #include <net/transp_v6.h>
44 #include <net/ip6_fib.h>
45 #include <net/ip6_route.h>
46 #include <net/ndisc.h>
47 #include <net/addrconf.h>
52 #include <net/inet_ecn.h>
54 #include <net/dsfield.h>
57 This version of net/ipv6/sit.c is cloned of net/ipv4/ip_gre.c
59 For comments look at net/ipv4/ip_gre.c --ANK
63 #define HASH(addr) ((addr^(addr>>4))&0xF)
65 static int ipip6_fb_tunnel_init(struct net_device
*dev
);
66 static int ipip6_tunnel_init(struct net_device
*dev
);
67 static void ipip6_tunnel_setup(struct net_device
*dev
);
69 static struct net_device
*ipip6_fb_tunnel_dev
;
71 static struct ip_tunnel
*tunnels_r_l
[HASH_SIZE
];
72 static struct ip_tunnel
*tunnels_r
[HASH_SIZE
];
73 static struct ip_tunnel
*tunnels_l
[HASH_SIZE
];
74 static struct ip_tunnel
*tunnels_wc
[1];
75 static struct ip_tunnel
**tunnels
[4] = { tunnels_wc
, tunnels_l
, tunnels_r
, tunnels_r_l
};
77 static DEFINE_RWLOCK(ipip6_lock
);
79 static struct ip_tunnel
* ipip6_tunnel_lookup(u32 remote
, u32 local
)
81 unsigned h0
= HASH(remote
);
82 unsigned h1
= HASH(local
);
85 for (t
= tunnels_r_l
[h0
^h1
]; t
; t
= t
->next
) {
86 if (local
== t
->parms
.iph
.saddr
&&
87 remote
== t
->parms
.iph
.daddr
&& (t
->dev
->flags
&IFF_UP
))
90 for (t
= tunnels_r
[h0
]; t
; t
= t
->next
) {
91 if (remote
== t
->parms
.iph
.daddr
&& (t
->dev
->flags
&IFF_UP
))
94 for (t
= tunnels_l
[h1
]; t
; t
= t
->next
) {
95 if (local
== t
->parms
.iph
.saddr
&& (t
->dev
->flags
&IFF_UP
))
98 if ((t
= tunnels_wc
[0]) != NULL
&& (t
->dev
->flags
&IFF_UP
))
103 static struct ip_tunnel
** ipip6_bucket(struct ip_tunnel
*t
)
105 u32 remote
= t
->parms
.iph
.daddr
;
106 u32 local
= t
->parms
.iph
.saddr
;
118 return &tunnels
[prio
][h
];
121 static void ipip6_tunnel_unlink(struct ip_tunnel
*t
)
123 struct ip_tunnel
**tp
;
125 for (tp
= ipip6_bucket(t
); *tp
; tp
= &(*tp
)->next
) {
127 write_lock_bh(&ipip6_lock
);
129 write_unlock_bh(&ipip6_lock
);
135 static void ipip6_tunnel_link(struct ip_tunnel
*t
)
137 struct ip_tunnel
**tp
= ipip6_bucket(t
);
140 write_lock_bh(&ipip6_lock
);
142 write_unlock_bh(&ipip6_lock
);
145 static struct ip_tunnel
* ipip6_tunnel_locate(struct ip_tunnel_parm
*parms
, int create
)
147 u32 remote
= parms
->iph
.daddr
;
148 u32 local
= parms
->iph
.saddr
;
149 struct ip_tunnel
*t
, **tp
, *nt
;
150 struct net_device
*dev
;
163 for (tp
= &tunnels
[prio
][h
]; (t
= *tp
) != NULL
; tp
= &t
->next
) {
164 if (local
== t
->parms
.iph
.saddr
&& remote
== t
->parms
.iph
.daddr
)
171 strlcpy(name
, parms
->name
, IFNAMSIZ
);
174 for (i
=1; i
<100; i
++) {
175 sprintf(name
, "sit%d", i
);
176 if (__dev_get_by_name(name
) == NULL
)
183 dev
= alloc_netdev(sizeof(*t
), name
, ipip6_tunnel_setup
);
188 dev
->init
= ipip6_tunnel_init
;
191 if (register_netdevice(dev
) < 0) {
198 ipip6_tunnel_link(nt
);
205 static void ipip6_tunnel_uninit(struct net_device
*dev
)
207 if (dev
== ipip6_fb_tunnel_dev
) {
208 write_lock_bh(&ipip6_lock
);
209 tunnels_wc
[0] = NULL
;
210 write_unlock_bh(&ipip6_lock
);
213 ipip6_tunnel_unlink((struct ip_tunnel
*)dev
->priv
);
219 static void ipip6_err(struct sk_buff
*skb
, u32 info
)
221 #ifndef I_WISH_WORLD_WERE_PERFECT
223 /* It is not :-( All the routers (except for Linux) return only
224 8 bytes of packet payload. It means, that precise relaying of
225 ICMP in the real Internet is absolutely infeasible.
227 struct iphdr
*iph
= (struct iphdr
*)skb
->data
;
228 int type
= skb
->h
.icmph
->type
;
229 int code
= skb
->h
.icmph
->code
;
234 case ICMP_PARAMETERPROB
:
237 case ICMP_DEST_UNREACH
:
240 case ICMP_PORT_UNREACH
:
241 /* Impossible event. */
243 case ICMP_FRAG_NEEDED
:
244 /* Soft state for pmtu is maintained by IP core. */
247 /* All others are translated to HOST_UNREACH.
248 rfc2003 contains "deep thoughts" about NET_UNREACH,
249 I believe they are just ether pollution. --ANK
254 case ICMP_TIME_EXCEEDED
:
255 if (code
!= ICMP_EXC_TTL
)
260 read_lock(&ipip6_lock
);
261 t
= ipip6_tunnel_lookup(iph
->daddr
, iph
->saddr
);
262 if (t
== NULL
|| t
->parms
.iph
.daddr
== 0)
264 if (t
->parms
.iph
.ttl
== 0 && type
== ICMP_TIME_EXCEEDED
)
267 if (jiffies
- t
->err_time
< IPTUNNEL_ERR_TIMEO
)
271 t
->err_time
= jiffies
;
273 read_unlock(&ipip6_lock
);
276 struct iphdr
*iph
= (struct iphdr
*)dp
;
277 int hlen
= iph
->ihl
<<2;
278 struct ipv6hdr
*iph6
;
279 int type
= skb
->h
.icmph
->type
;
280 int code
= skb
->h
.icmph
->code
;
284 struct sk_buff
*skb2
;
285 struct rt6_info
*rt6i
;
287 if (len
< hlen
+ sizeof(struct ipv6hdr
))
289 iph6
= (struct ipv6hdr
*)(dp
+ hlen
);
294 case ICMP_PARAMETERPROB
:
295 if (skb
->h
.icmph
->un
.gateway
< hlen
)
298 /* So... This guy found something strange INSIDE encapsulated
299 packet. Well, he is fool, but what can we do ?
301 rel_type
= ICMPV6_PARAMPROB
;
302 rel_info
= skb
->h
.icmph
->un
.gateway
- hlen
;
305 case ICMP_DEST_UNREACH
:
308 case ICMP_PORT_UNREACH
:
309 /* Impossible event. */
311 case ICMP_FRAG_NEEDED
:
312 /* Too complicated case ... */
315 /* All others are translated to HOST_UNREACH.
316 rfc2003 contains "deep thoughts" about NET_UNREACH,
317 I believe, it is just ether pollution. --ANK
319 rel_type
= ICMPV6_DEST_UNREACH
;
320 rel_code
= ICMPV6_ADDR_UNREACH
;
324 case ICMP_TIME_EXCEEDED
:
325 if (code
!= ICMP_EXC_TTL
)
327 rel_type
= ICMPV6_TIME_EXCEED
;
328 rel_code
= ICMPV6_EXC_HOPLIMIT
;
332 /* Prepare fake skb to feed it to icmpv6_send */
333 skb2
= skb_clone(skb
, GFP_ATOMIC
);
336 dst_release(skb2
->dst
);
338 skb_pull(skb2
, skb
->data
- (u8
*)iph6
);
339 skb2
->nh
.raw
= skb2
->data
;
341 /* Try to guess incoming interface */
342 rt6i
= rt6_lookup(&iph6
->saddr
, NULL
, NULL
, 0);
343 if (rt6i
&& rt6i
->rt6i_dev
) {
344 skb2
->dev
= rt6i
->rt6i_dev
;
346 rt6i
= rt6_lookup(&iph6
->daddr
, &iph6
->saddr
, NULL
, 0);
348 if (rt6i
&& rt6i
->rt6i_dev
&& rt6i
->rt6i_dev
->type
== ARPHRD_SIT
) {
349 struct ip_tunnel
* t
= (struct ip_tunnel
*)rt6i
->rt6i_dev
->priv
;
350 if (rel_type
== ICMPV6_TIME_EXCEED
&& t
->parms
.iph
.ttl
) {
351 rel_type
= ICMPV6_DEST_UNREACH
;
352 rel_code
= ICMPV6_ADDR_UNREACH
;
354 icmpv6_send(skb2
, rel_type
, rel_code
, rel_info
, skb2
->dev
);
362 static inline void ipip6_ecn_decapsulate(struct iphdr
*iph
, struct sk_buff
*skb
)
364 if (INET_ECN_is_ce(iph
->tos
))
365 IP6_ECN_set_ce(skb
->nh
.ipv6h
);
368 static int ipip6_rcv(struct sk_buff
*skb
)
371 struct ip_tunnel
*tunnel
;
373 if (!pskb_may_pull(skb
, sizeof(struct ipv6hdr
)))
378 read_lock(&ipip6_lock
);
379 if ((tunnel
= ipip6_tunnel_lookup(iph
->saddr
, iph
->daddr
)) != NULL
) {
381 skb
->mac
.raw
= skb
->nh
.raw
;
382 skb
->nh
.raw
= skb
->data
;
383 memset(&(IPCB(skb
)->opt
), 0, sizeof(struct ip_options
));
384 IPCB(skb
)->flags
= 0;
385 skb
->protocol
= htons(ETH_P_IPV6
);
386 skb
->pkt_type
= PACKET_HOST
;
387 tunnel
->stat
.rx_packets
++;
388 tunnel
->stat
.rx_bytes
+= skb
->len
;
389 skb
->dev
= tunnel
->dev
;
390 dst_release(skb
->dst
);
393 ipip6_ecn_decapsulate(iph
, skb
);
395 read_unlock(&ipip6_lock
);
399 icmp_send(skb
, ICMP_DEST_UNREACH
, ICMP_PROT_UNREACH
, 0);
401 read_unlock(&ipip6_lock
);
406 /* Returns the embedded IPv4 address if the IPv6 address
407 comes from 6to4 (RFC 3056) addr space */
409 static inline u32
try_6to4(struct in6_addr
*v6dst
)
413 if (v6dst
->s6_addr16
[0] == htons(0x2002)) {
414 /* 6to4 v6 addr has 16 bits prefix, 32 v4addr, 16 SLA, ... */
415 memcpy(&dst
, &v6dst
->s6_addr16
[1], 4);
421 * This function assumes it is being called from dev_queue_xmit()
422 * and that skb is filled properly by that function.
425 static int ipip6_tunnel_xmit(struct sk_buff
*skb
, struct net_device
*dev
)
427 struct ip_tunnel
*tunnel
= (struct ip_tunnel
*)dev
->priv
;
428 struct net_device_stats
*stats
= &tunnel
->stat
;
429 struct iphdr
*tiph
= &tunnel
->parms
.iph
;
430 struct ipv6hdr
*iph6
= skb
->nh
.ipv6h
;
431 u8 tos
= tunnel
->parms
.iph
.tos
;
432 struct rtable
*rt
; /* Route to the other host */
433 struct net_device
*tdev
; /* Device to other host */
434 struct iphdr
*iph
; /* Our new IP header */
435 int max_headroom
; /* The extra header space needed */
436 u32 dst
= tiph
->daddr
;
438 struct in6_addr
*addr6
;
441 if (tunnel
->recursion
++) {
442 tunnel
->stat
.collisions
++;
446 if (skb
->protocol
!= htons(ETH_P_IPV6
))
450 dst
= try_6to4(&iph6
->daddr
);
453 struct neighbour
*neigh
= NULL
;
456 neigh
= skb
->dst
->neighbour
;
460 printk(KERN_DEBUG
"sit: nexthop == NULL\n");
464 addr6
= (struct in6_addr
*)&neigh
->primary_key
;
465 addr_type
= ipv6_addr_type(addr6
);
467 if (addr_type
== IPV6_ADDR_ANY
) {
468 addr6
= &skb
->nh
.ipv6h
->daddr
;
469 addr_type
= ipv6_addr_type(addr6
);
472 if ((addr_type
& IPV6_ADDR_COMPATv4
) == 0)
475 dst
= addr6
->s6_addr32
[3];
479 struct flowi fl
= { .nl_u
= { .ip4_u
=
481 .saddr
= tiph
->saddr
,
482 .tos
= RT_TOS(tos
) } },
483 .oif
= tunnel
->parms
.link
,
484 .proto
= IPPROTO_IPV6
};
485 if (ip_route_output_key(&rt
, &fl
)) {
486 tunnel
->stat
.tx_carrier_errors
++;
490 if (rt
->rt_type
!= RTN_UNICAST
) {
492 tunnel
->stat
.tx_carrier_errors
++;
495 tdev
= rt
->u
.dst
.dev
;
499 tunnel
->stat
.collisions
++;
504 mtu
= dst_mtu(&rt
->u
.dst
) - sizeof(struct iphdr
);
506 mtu
= skb
->dst
? dst_mtu(skb
->dst
) : dev
->mtu
;
509 tunnel
->stat
.collisions
++;
513 if (mtu
< IPV6_MIN_MTU
)
515 if (tunnel
->parms
.iph
.daddr
&& skb
->dst
)
516 skb
->dst
->ops
->update_pmtu(skb
->dst
, mtu
);
518 if (skb
->len
> mtu
) {
519 icmpv6_send(skb
, ICMPV6_PKT_TOOBIG
, 0, mtu
, dev
);
524 if (tunnel
->err_count
> 0) {
525 if (jiffies
- tunnel
->err_time
< IPTUNNEL_ERR_TIMEO
) {
527 dst_link_failure(skb
);
529 tunnel
->err_count
= 0;
533 * Okay, now see if we can stuff it in the buffer as-is.
535 max_headroom
= LL_RESERVED_SPACE(tdev
)+sizeof(struct iphdr
);
537 if (skb_headroom(skb
) < max_headroom
|| skb_cloned(skb
) || skb_shared(skb
)) {
538 struct sk_buff
*new_skb
= skb_realloc_headroom(skb
, max_headroom
);
547 skb_set_owner_w(new_skb
, skb
->sk
);
550 iph6
= skb
->nh
.ipv6h
;
553 skb
->h
.raw
= skb
->nh
.raw
;
554 skb
->nh
.raw
= skb_push(skb
, sizeof(struct iphdr
));
555 memset(&(IPCB(skb
)->opt
), 0, sizeof(IPCB(skb
)->opt
));
556 IPCB(skb
)->flags
= 0;
557 dst_release(skb
->dst
);
558 skb
->dst
= &rt
->u
.dst
;
561 * Push down and install the IPIP header.
566 iph
->ihl
= sizeof(struct iphdr
)>>2;
567 if (mtu
> IPV6_MIN_MTU
)
568 iph
->frag_off
= htons(IP_DF
);
572 iph
->protocol
= IPPROTO_IPV6
;
573 iph
->tos
= INET_ECN_encapsulate(tos
, ipv6_get_dsfield(iph6
));
574 iph
->daddr
= rt
->rt_dst
;
575 iph
->saddr
= rt
->rt_src
;
577 if ((iph
->ttl
= tiph
->ttl
) == 0)
578 iph
->ttl
= iph6
->hop_limit
;
587 dst_link_failure(skb
);
596 ipip6_tunnel_ioctl (struct net_device
*dev
, struct ifreq
*ifr
, int cmd
)
599 struct ip_tunnel_parm p
;
605 if (dev
== ipip6_fb_tunnel_dev
) {
606 if (copy_from_user(&p
, ifr
->ifr_ifru
.ifru_data
, sizeof(p
))) {
610 t
= ipip6_tunnel_locate(&p
, 0);
613 t
= (struct ip_tunnel
*)dev
->priv
;
614 memcpy(&p
, &t
->parms
, sizeof(p
));
615 if (copy_to_user(ifr
->ifr_ifru
.ifru_data
, &p
, sizeof(p
)))
622 if (!capable(CAP_NET_ADMIN
))
626 if (copy_from_user(&p
, ifr
->ifr_ifru
.ifru_data
, sizeof(p
)))
630 if (p
.iph
.version
!= 4 || p
.iph
.protocol
!= IPPROTO_IPV6
||
631 p
.iph
.ihl
!= 5 || (p
.iph
.frag_off
&htons(~IP_DF
)))
634 p
.iph
.frag_off
|= htons(IP_DF
);
636 t
= ipip6_tunnel_locate(&p
, cmd
== SIOCADDTUNNEL
);
638 if (dev
!= ipip6_fb_tunnel_dev
&& cmd
== SIOCCHGTUNNEL
) {
645 if (((dev
->flags
&IFF_POINTOPOINT
) && !p
.iph
.daddr
) ||
646 (!(dev
->flags
&IFF_POINTOPOINT
) && p
.iph
.daddr
)) {
650 t
= (struct ip_tunnel
*)dev
->priv
;
651 ipip6_tunnel_unlink(t
);
652 t
->parms
.iph
.saddr
= p
.iph
.saddr
;
653 t
->parms
.iph
.daddr
= p
.iph
.daddr
;
654 memcpy(dev
->dev_addr
, &p
.iph
.saddr
, 4);
655 memcpy(dev
->broadcast
, &p
.iph
.daddr
, 4);
656 ipip6_tunnel_link(t
);
657 netdev_state_change(dev
);
663 if (cmd
== SIOCCHGTUNNEL
) {
664 t
->parms
.iph
.ttl
= p
.iph
.ttl
;
665 t
->parms
.iph
.tos
= p
.iph
.tos
;
667 if (copy_to_user(ifr
->ifr_ifru
.ifru_data
, &t
->parms
, sizeof(p
)))
670 err
= (cmd
== SIOCADDTUNNEL
? -ENOBUFS
: -ENOENT
);
675 if (!capable(CAP_NET_ADMIN
))
678 if (dev
== ipip6_fb_tunnel_dev
) {
680 if (copy_from_user(&p
, ifr
->ifr_ifru
.ifru_data
, sizeof(p
)))
683 if ((t
= ipip6_tunnel_locate(&p
, 0)) == NULL
)
686 if (t
== ipip6_fb_tunnel_dev
->priv
)
690 err
= unregister_netdevice(dev
);
701 static struct net_device_stats
*ipip6_tunnel_get_stats(struct net_device
*dev
)
703 return &(((struct ip_tunnel
*)dev
->priv
)->stat
);
706 static int ipip6_tunnel_change_mtu(struct net_device
*dev
, int new_mtu
)
708 if (new_mtu
< IPV6_MIN_MTU
|| new_mtu
> 0xFFF8 - sizeof(struct iphdr
))
714 static void ipip6_tunnel_setup(struct net_device
*dev
)
716 SET_MODULE_OWNER(dev
);
717 dev
->uninit
= ipip6_tunnel_uninit
;
718 dev
->destructor
= free_netdev
;
719 dev
->hard_start_xmit
= ipip6_tunnel_xmit
;
720 dev
->get_stats
= ipip6_tunnel_get_stats
;
721 dev
->do_ioctl
= ipip6_tunnel_ioctl
;
722 dev
->change_mtu
= ipip6_tunnel_change_mtu
;
724 dev
->type
= ARPHRD_SIT
;
725 dev
->hard_header_len
= LL_MAX_HEADER
+ sizeof(struct iphdr
);
726 dev
->mtu
= ETH_DATA_LEN
- sizeof(struct iphdr
);
727 dev
->flags
= IFF_NOARP
;
732 static int ipip6_tunnel_init(struct net_device
*dev
)
734 struct net_device
*tdev
= NULL
;
735 struct ip_tunnel
*tunnel
;
738 tunnel
= (struct ip_tunnel
*)dev
->priv
;
739 iph
= &tunnel
->parms
.iph
;
742 strcpy(tunnel
->parms
.name
, dev
->name
);
744 memcpy(dev
->dev_addr
, &tunnel
->parms
.iph
.saddr
, 4);
745 memcpy(dev
->broadcast
, &tunnel
->parms
.iph
.daddr
, 4);
748 struct flowi fl
= { .nl_u
= { .ip4_u
=
749 { .daddr
= iph
->daddr
,
751 .tos
= RT_TOS(iph
->tos
) } },
752 .oif
= tunnel
->parms
.link
,
753 .proto
= IPPROTO_IPV6
};
755 if (!ip_route_output_key(&rt
, &fl
)) {
756 tdev
= rt
->u
.dst
.dev
;
759 dev
->flags
|= IFF_POINTOPOINT
;
762 if (!tdev
&& tunnel
->parms
.link
)
763 tdev
= __dev_get_by_index(tunnel
->parms
.link
);
766 dev
->hard_header_len
= tdev
->hard_header_len
+ sizeof(struct iphdr
);
767 dev
->mtu
= tdev
->mtu
- sizeof(struct iphdr
);
768 if (dev
->mtu
< IPV6_MIN_MTU
)
769 dev
->mtu
= IPV6_MIN_MTU
;
771 dev
->iflink
= tunnel
->parms
.link
;
776 static int __init
ipip6_fb_tunnel_init(struct net_device
*dev
)
778 struct ip_tunnel
*tunnel
= dev
->priv
;
779 struct iphdr
*iph
= &tunnel
->parms
.iph
;
782 strcpy(tunnel
->parms
.name
, dev
->name
);
785 iph
->protocol
= IPPROTO_IPV6
;
790 tunnels_wc
[0] = tunnel
;
794 static struct net_protocol sit_protocol
= {
795 .handler
= ipip6_rcv
,
796 .err_handler
= ipip6_err
,
799 static void __exit
sit_destroy_tunnels(void)
803 for (prio
= 1; prio
< 4; prio
++) {
805 for (h
= 0; h
< HASH_SIZE
; h
++) {
807 while ((t
= tunnels
[prio
][h
]) != NULL
)
808 unregister_netdevice(t
->dev
);
813 void __exit
sit_cleanup(void)
815 inet_del_protocol(&sit_protocol
, IPPROTO_IPV6
);
818 sit_destroy_tunnels();
819 unregister_netdevice(ipip6_fb_tunnel_dev
);
823 int __init
sit_init(void)
827 printk(KERN_INFO
"IPv6 over IPv4 tunneling driver\n");
829 if (inet_add_protocol(&sit_protocol
, IPPROTO_IPV6
) < 0) {
830 printk(KERN_INFO
"sit init: Can't add protocol\n");
834 ipip6_fb_tunnel_dev
= alloc_netdev(sizeof(struct ip_tunnel
), "sit0",
836 if (!ipip6_fb_tunnel_dev
) {
841 ipip6_fb_tunnel_dev
->init
= ipip6_fb_tunnel_init
;
843 if ((err
= register_netdev(ipip6_fb_tunnel_dev
)))
849 free_netdev(ipip6_fb_tunnel_dev
);
851 inet_del_protocol(&sit_protocol
, IPPROTO_IPV6
);