1 /* $NetBSD: in6_proto.c,v 1.86 2009/09/11 20:10:06 dyoung Exp $ */
2 /* $KAME: in6_proto.c,v 1.66 2000/10/10 15:35:47 itojun Exp $ */
5 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 * 3. Neither the name of the project nor the names of its contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
20 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 * Copyright (c) 1982, 1986, 1993
35 * The Regents of the University of California. All rights reserved.
37 * Redistribution and use in source and binary forms, with or without
38 * modification, are permitted provided that the following conditions
40 * 1. Redistributions of source code must retain the above copyright
41 * notice, this list of conditions and the following disclaimer.
42 * 2. Redistributions in binary form must reproduce the above copyright
43 * notice, this list of conditions and the following disclaimer in the
44 * documentation and/or other materials provided with the distribution.
45 * 3. Neither the name of the University nor the names of its contributors
46 * may be used to endorse or promote products derived from this software
47 * without specific prior written permission.
49 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
50 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
51 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
52 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
53 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
54 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
55 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
56 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
57 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
58 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
61 * @(#)in_proto.c 8.1 (Berkeley) 6/10/93
64 #include <sys/cdefs.h>
65 __KERNEL_RCSID(0, "$NetBSD: in6_proto.c,v 1.86 2009/09/11 20:10:06 dyoung Exp $");
68 #include "opt_ipsec.h"
71 #include <sys/param.h>
72 #include <sys/socket.h>
73 #include <sys/protosw.h>
74 #include <sys/kernel.h>
75 #include <sys/domain.h>
79 #include <net/radix.h>
80 #include <net/route.h>
82 #include <netinet/in.h>
83 #include <netinet/in_systm.h>
84 #include <netinet/in_var.h>
85 #include <netinet/ip_encap.h>
86 #include <netinet/ip.h>
87 #include <netinet/ip_var.h>
88 #include <netinet/in_pcb.h>
89 #include <netinet/ip6.h>
90 #include <netinet6/ip6_var.h>
91 #include <netinet/icmp6.h>
92 #include <netinet6/in6_pcb.h>
94 #include <netinet/tcp.h>
95 #include <netinet/tcp_fsm.h>
96 #include <netinet/tcp_seq.h>
97 #include <netinet/tcp_timer.h>
98 #include <netinet/tcp_var.h>
99 #include <netinet/tcpip.h>
100 #include <netinet/tcp_debug.h>
102 #include <netinet6/udp6.h>
103 #include <netinet6/udp6_var.h>
105 #include <netinet6/pim6_var.h>
107 #include <netinet6/nd6.h>
110 #include <netinet6/ipsec.h>
111 #include <netinet6/ah.h>
113 #include <netinet6/esp.h>
115 #include <netinet6/ipcomp.h>
119 #include <netipsec/ipsec.h>
120 #include <netipsec/ipsec6.h>
121 #include <netipsec/key.h>
122 #endif /* FAST_IPSEC */
127 #include <netinet/ip_carp.h>
132 #include <netinet6/ip6_etherip.h>
135 #include <netinet6/ip6protosw.h>
137 #include <net/net_osdep.h>
139 #ifndef offsetof /* XXX */
140 #define offsetof(type, member) ((size_t)(&((type *)0)->member))
144 * TCP/IP protocol family: IP6, ICMP6, UDP, TCP.
147 DOMAIN_DEFINE(inet6domain
); /* forward declare and add to link set */
149 /* Wrappers to acquire kernel_lock. */
151 PR_WRAP_USRREQ(rip6_usrreq
)
152 PR_WRAP_USRREQ(udp6_usrreq
)
153 PR_WRAP_USRREQ(tcp_usrreq
)
155 #define rip6_usrreq rip6_usrreq_wrapper
156 #define udp6_usrreq udp6_usrreq_wrapper
157 #define tcp_usrreq tcp_usrreq_wrapper
159 PR_WRAP_CTLINPUT(rip6_ctlinput
)
160 PR_WRAP_CTLINPUT(encap6_ctlinput
)
161 PR_WRAP_CTLINPUT(udp6_ctlinput
)
162 PR_WRAP_CTLINPUT(tcp6_ctlinput
)
164 #define rip6_ctlinput rip6_ctlinput_wrapper
165 #define encap6_ctlinput encap6_ctlinput_wrapper
166 #define udp6_ctlinput udp6_ctlinput_wrapper
167 #define tcp6_ctlinput tcp6_ctlinput_wrapper
169 PR_WRAP_CTLOUTPUT(rip6_ctloutput
)
170 PR_WRAP_CTLOUTPUT(ip6_ctloutput
)
171 PR_WRAP_CTLOUTPUT(tcp_ctloutput
)
172 PR_WRAP_CTLOUTPUT(icmp6_ctloutput
)
174 #define rip6_ctloutput rip6_ctloutput_wrapper
175 #define ip6_ctloutput ip6_ctloutput_wrapper
176 #define tcp_ctloutput tcp_ctloutput_wrapper
177 #define icmp6_ctloutput icmp6_ctloutput_wrapper
179 #if defined(IPSEC) || defined(FAST_IPSEC)
180 PR_WRAP_CTLINPUT(ah6_ctlinput
)
182 #define ah6_ctlinput ah6_ctlinput_wrapper
185 #if (defined(IPSEC) && defined(IPSEC_ESP)) || defined(FAST_IPSEC)
186 PR_WRAP_CTLINPUT(esp6_ctlinput
)
188 #define esp6_ctlinput esp6_ctlinput_wrapper
191 const struct ip6protosw inet6sw
[] = {
192 { .pr_domain
= &inet6domain
,
193 .pr_protocol
= IPPROTO_IPV6
,
195 .pr_slowtimo
= frag6_slowtimo
,
196 .pr_drain
= frag6_drain
,
198 { .pr_type
= SOCK_DGRAM
,
199 .pr_domain
= &inet6domain
,
200 .pr_protocol
= IPPROTO_UDP
,
201 .pr_flags
= PR_ATOMIC
|PR_ADDR
|PR_PURGEIF
,
202 .pr_input
= udp6_input
,
203 .pr_ctlinput
= udp6_ctlinput
,
204 .pr_ctloutput
= ip6_ctloutput
,
205 .pr_usrreq
= udp6_usrreq
,
206 .pr_init
= udp6_init
,
208 { .pr_type
= SOCK_STREAM
,
209 .pr_domain
= &inet6domain
,
210 .pr_protocol
= IPPROTO_TCP
,
211 .pr_flags
= PR_CONNREQUIRED
|PR_WANTRCVD
|PR_LISTEN
|PR_ABRTACPTDIS
|PR_PURGEIF
,
212 .pr_input
= tcp6_input
,
213 .pr_ctlinput
= tcp6_ctlinput
,
214 .pr_ctloutput
= tcp_ctloutput
,
215 .pr_usrreq
= tcp_usrreq
,
216 #ifndef INET /* don't call initialization and timeout routines twice */
218 .pr_slowtimo
= tcp_slowtimo
,
219 .pr_drain
= tcp_drain
,
222 { .pr_type
= SOCK_RAW
,
223 .pr_domain
= &inet6domain
,
224 .pr_protocol
= IPPROTO_RAW
,
225 .pr_flags
= PR_ATOMIC
|PR_ADDR
|PR_PURGEIF
,
226 .pr_input
= rip6_input
,
227 .pr_output
= rip6_output
,
228 .pr_ctlinput
= rip6_ctlinput
,
229 .pr_ctloutput
= rip6_ctloutput
,
230 .pr_usrreq
= rip6_usrreq
,
233 { .pr_domain
= &inet6domain
,
234 .pr_protocol
= IPPROTO_IPV6
,
235 .pr_slowtimo
= ip6flow_slowtimo
,
236 .pr_init
= ip6flow_poolinit
,
239 { .pr_type
= SOCK_RAW
,
240 .pr_domain
= &inet6domain
,
241 .pr_protocol
= IPPROTO_ICMPV6
,
242 .pr_flags
= PR_ATOMIC
|PR_ADDR
|PR_LASTHDR
,
243 .pr_input
= icmp6_input
,
244 .pr_output
= rip6_output
,
245 .pr_ctlinput
= rip6_ctlinput
,
246 .pr_ctloutput
= icmp6_ctloutput
,
247 .pr_usrreq
= rip6_usrreq
,
248 .pr_init
= icmp6_init
,
250 { .pr_type
= SOCK_RAW
,
251 .pr_domain
= &inet6domain
,
252 .pr_protocol
= IPPROTO_DSTOPTS
,
253 .pr_flags
= PR_ATOMIC
|PR_ADDR
,
254 .pr_input
= dest6_input
,
256 { .pr_type
= SOCK_RAW
,
257 .pr_domain
= &inet6domain
,
258 .pr_protocol
= IPPROTO_ROUTING
,
259 .pr_flags
= PR_ATOMIC
|PR_ADDR
,
260 .pr_input
= route6_input
,
262 { .pr_type
= SOCK_RAW
,
263 .pr_domain
= &inet6domain
,
264 .pr_protocol
= IPPROTO_FRAGMENT
,
265 .pr_flags
= PR_ATOMIC
|PR_ADDR
,
266 .pr_input
= frag6_input
,
269 { .pr_type
= SOCK_RAW
,
270 .pr_domain
= &inet6domain
,
271 .pr_protocol
= IPPROTO_AH
,
272 .pr_flags
= PR_ATOMIC
|PR_ADDR
,
273 .pr_input
= ah6_input
,
274 .pr_ctlinput
= ah6_ctlinput
,
278 { .pr_type
= SOCK_RAW
,
279 .pr_domain
= &inet6domain
,
280 .pr_protocol
= IPPROTO_ESP
,
281 .pr_flags
= PR_ATOMIC
|PR_ADDR
,
282 .pr_input
= esp6_input
,
283 .pr_ctlinput
= esp6_ctlinput
,
284 .pr_init
= esp6_init
,
287 { .pr_type
= SOCK_RAW
,
288 .pr_domain
= &inet6domain
,
289 .pr_protocol
= IPPROTO_IPCOMP
,
290 .pr_flags
= PR_ATOMIC
|PR_ADDR
,
291 .pr_input
= ipcomp6_input
,
292 .pr_init
= ipcomp6_init
,
296 { .pr_type
= SOCK_RAW
,
297 .pr_domain
= &inet6domain
,
298 .pr_protocol
= IPPROTO_AH
,
299 .pr_flags
= PR_ATOMIC
|PR_ADDR
,
300 .pr_input
= ipsec6_common_input
,
301 .pr_ctlinput
= ah6_ctlinput
,
303 { .pr_type
= SOCK_RAW
,
304 .pr_domain
= &inet6domain
,
305 .pr_protocol
= IPPROTO_ESP
,
306 .pr_flags
= PR_ATOMIC
|PR_ADDR
,
307 .pr_input
= ipsec6_common_input
,
308 .pr_ctlinput
= esp6_ctlinput
,
310 { .pr_type
= SOCK_RAW
,
311 .pr_domain
= &inet6domain
,
312 .pr_protocol
= IPPROTO_IPCOMP
,
313 .pr_flags
= PR_ATOMIC
|PR_ADDR
,
314 .pr_input
= ipsec6_common_input
,
316 #endif /* FAST_IPSEC */
318 { .pr_type
= SOCK_RAW
,
319 .pr_domain
= &inet6domain
,
320 .pr_protocol
= IPPROTO_IPV4
,
321 .pr_flags
= PR_ATOMIC
|PR_ADDR
|PR_LASTHDR
,
322 .pr_input
= encap6_input
,
323 .pr_output
= rip6_output
,
324 .pr_ctlinput
= encap6_ctlinput
,
325 .pr_ctloutput
= rip6_ctloutput
,
326 .pr_usrreq
= rip6_usrreq
,
327 .pr_init
= encap_init
,
330 { .pr_type
= SOCK_RAW
,
331 .pr_domain
= &inet6domain
,
332 .pr_protocol
= IPPROTO_IPV6
,
333 .pr_flags
= PR_ATOMIC
|PR_ADDR
|PR_LASTHDR
,
334 .pr_input
= encap6_input
,
335 .pr_output
= rip6_output
,
336 .pr_ctlinput
= encap6_ctlinput
,
337 .pr_ctloutput
= rip6_ctloutput
,
338 .pr_usrreq
= rip6_usrreq
,
339 .pr_init
= encap_init
,
342 { .pr_type
= SOCK_RAW
,
343 .pr_domain
= &inet6domain
,
344 .pr_protocol
= IPPROTO_ETHERIP
,
345 .pr_flags
= PR_ATOMIC
|PR_ADDR
|PR_LASTHDR
,
346 .pr_input
= ip6_etherip_input
,
347 .pr_output
= rip6_output
,
348 .pr_ctlinput
= rip6_ctlinput
,
349 .pr_ctloutput
= rip6_ctloutput
,
350 .pr_usrreq
= rip6_usrreq
,
354 { .pr_type
= SOCK_RAW
,
355 .pr_domain
= &inet6domain
,
356 .pr_protocol
= IPPROTO_CARP
,
357 .pr_flags
= PR_ATOMIC
|PR_ADDR
,
358 .pr_input
= carp6_proto_input
,
359 .pr_output
= rip6_output
,
360 .pr_ctloutput
= rip6_ctloutput
,
361 .pr_usrreq
= rip6_usrreq
,
365 { .pr_type
= SOCK_RAW
,
366 .pr_domain
= &inet6domain
,
367 .pr_protocol
= IPPROTO_EON
,
368 .pr_flags
= PR_ATOMIC
|PR_ADDR
|PR_LASTHDR
,
369 .pr_input
= encap6_input
,
370 .pr_output
= rip6_output
,
371 .pr_ctlinput
= encap6_ctlinput
,
372 .pr_ctloutput
= rip6_ctloutput
,
373 .pr_usrreq
= rip6_usrreq
,
375 .pr_init
= encap_init
,
378 { .pr_type
= SOCK_RAW
,
379 .pr_domain
= &inet6domain
,
380 .pr_protocol
= IPPROTO_PIM
,
381 .pr_flags
= PR_ATOMIC
|PR_ADDR
|PR_LASTHDR
,
382 .pr_input
= pim6_input
,
383 .pr_output
= rip6_output
,
384 .pr_ctloutput
= rip6_ctloutput
,
385 .pr_usrreq
= rip6_usrreq
,
386 .pr_init
= pim6_init
,
389 { .pr_type
= SOCK_RAW
,
390 .pr_domain
= &inet6domain
,
391 .pr_flags
= PR_ATOMIC
|PR_ADDR
|PR_LASTHDR
,
392 .pr_input
= rip6_input
,
393 .pr_output
= rip6_output
,
394 .pr_ctloutput
= rip6_ctloutput
,
395 .pr_usrreq
= rip6_usrreq
,
396 .pr_init
= rip6_init
,
400 static const struct sockaddr_in6 in6_any
= {
401 .sin6_len
= sizeof(in6_any
)
402 , .sin6_family
= AF_INET6
405 , .sin6_addr
= IN6ADDR_ANY_INIT
409 struct domain inet6domain
= {
410 .dom_family
= AF_INET6
, .dom_name
= "internet6",
411 .dom_init
= NULL
, .dom_externalize
= NULL
, .dom_dispose
= NULL
,
412 .dom_protosw
= (const struct protosw
*)inet6sw
,
413 .dom_protoswNPROTOSW
= (const struct protosw
*)&inet6sw
[sizeof(inet6sw
)/sizeof(inet6sw
[0])],
414 .dom_rtattach
= rn_inithead
,
415 .dom_rtoffset
= offsetof(struct sockaddr_in6
, sin6_addr
) << 3,
416 .dom_maxrtkey
= sizeof(struct ip_pack6
),
417 .dom_ifattach
= in6_domifattach
, .dom_ifdetach
= in6_domifdetach
,
418 .dom_ifqueues
= { &ip6intrq
, NULL
},
419 .dom_link
= { NULL
},
420 .dom_mowner
= MOWNER_INIT("",""),
421 .dom_sa_cmpofs
= offsetof(struct sockaddr_in6
, sin6_addr
),
422 .dom_sa_cmplen
= sizeof(struct in6_addr
),
423 .dom_sa_any
= (const struct sockaddr
*)&in6_any
,
424 .dom_sockaddr_externalize
= sockaddr_in6_externalize
,
425 .dom_rtcache
= LIST_HEAD_INITIALIZER(inet6domain
.dom_rtcache
)
430 sockaddr_in6_cmp(const struct sockaddr
*lsa
, const struct sockaddr
*rsa
)
433 const uint_fast8_t addrofs
= offsetof(struct sockaddr_in6
, sin6_addr
),
434 addrend
= addrofs
+ sizeof(struct in6_addr
);
436 const struct sockaddr_in6
*lsin6
, *rsin6
;
438 lsin6
= satocsin6(lsa
);
439 rsin6
= satocsin6(rsa
);
441 len
= MIN(addrend
, MIN(lsin6
->sin6_len
, rsin6
->sin6_len
));
444 (rc
= memcmp(&lsin6
->sin6_addr
, &rsin6
->sin6_addr
,
445 len
- addrofs
)) != 0)
448 return lsin6
->sin6_len
- rsin6
->sin6_len
;
453 * Internet configuration info
455 #ifndef IPV6FORWARDING
457 #define IPV6FORWARDING 1 /* forward IP6 packets not for us */
459 #define IPV6FORWARDING 0 /* don't forward IP6 packets not for us */
460 #endif /* GATEWAY6 */
461 #endif /* !IPV6FORWARDING */
463 int ip6_forwarding
= IPV6FORWARDING
; /* act as router? */
464 int ip6_sendredirects
= 1;
465 int ip6_defhlim
= IPV6_DEFHLIM
;
466 int ip6_defmcasthlim
= IPV6_DEFAULT_MULTICAST_HOPS
;
467 int ip6_accept_rtadv
= 0; /* "IPV6FORWARDING ? 0 : 1" is dangerous */
468 int ip6_maxfragpackets
= 200;
469 int ip6_maxfrags
= 200;
470 int ip6_log_interval
= 5;
471 int ip6_hdrnestlimit
= 50; /* appropriate? */
472 int ip6_dad_count
= 1; /* DupAddrDetectionTransmits */
473 int ip6_auto_flowlabel
= 1;
474 int ip6_use_deprecated
= 1; /* allow deprecated addr (RFC2462 5.5.4) */
475 int ip6_rr_prune
= 5; /* router renumbering prefix
476 * walk list every 5 sec. */
477 int ip6_mcast_pmtu
= 0; /* enable pMTU discovery for multicast? */
480 int ip6_keepfaith
= 0;
481 time_t ip6_log_time
= (time_t)0L;
485 * BSDI4 defines these variables in in_proto.c...
486 * XXX: what if we don't define INET? Should we define pmtu6_expire
487 * or so? (jinmei@kame.net 19990310)
489 int pmtu_expire
= 60*10;
491 /* raw IP6 parameters */
493 * Nominal space allocated to a raw ip socket.
495 #define RIPV6SNDQ 8192
496 #define RIPV6RCVQ 8192
498 u_long rip6_sendspace
= RIPV6SNDQ
;
499 u_long rip6_recvspace
= RIPV6RCVQ
;
501 /* ICMPV6 parameters */
502 int icmp6_rediraccept
= 1; /* accept and process redirects */
503 int icmp6_redirtimeout
= 10 * 60; /* 10 minutes */
504 int icmp6errppslim
= 100; /* 100pps */
505 int icmp6_nodeinfo
= 1; /* enable/disable NI response */
507 /* UDP on IP6 parameters */
508 int udp6_sendspace
= 9216; /* really max datagram size */
509 int udp6_recvspace
= 40 * (1024 + sizeof(struct sockaddr_in6
));
510 /* 40 1K datagrams */