2 * Linux NET3: IP/IP protocol decoder modified to support
3 * virtual tunnel interface
6 * Saurabh Mohan (saurabh.mohan@vyatta.com) 05/07/2012
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License
10 * as published by the Free Software Foundation; either version
11 * 2 of the License, or (at your option) any later version.
16 This version of net/ipv4/ip_vti.c is cloned of net/ipv4/ipip.c
18 For comments look at net/ipv4/ip_gre.c --ANK
22 #include <linux/capability.h>
23 #include <linux/module.h>
24 #include <linux/types.h>
25 #include <linux/kernel.h>
26 #include <linux/uaccess.h>
27 #include <linux/skbuff.h>
28 #include <linux/netdevice.h>
30 #include <linux/tcp.h>
31 #include <linux/udp.h>
32 #include <linux/if_arp.h>
33 #include <linux/mroute.h>
34 #include <linux/init.h>
35 #include <linux/netfilter_ipv4.h>
36 #include <linux/if_ether.h>
41 #include <net/ip_tunnels.h>
42 #include <net/inet_ecn.h>
44 #include <net/net_namespace.h>
45 #include <net/netns/generic.h>
47 static struct rtnl_link_ops vti_link_ops __read_mostly;
49 static int vti_net_id __read_mostly;
50 static int vti_tunnel_init(struct net_device *dev);
52 /* We dont digest the packet therefore let the packet pass */
53 static int vti_rcv(struct sk_buff *skb)
55 struct ip_tunnel *tunnel;
56 const struct iphdr *iph = ip_hdr(skb);
57 struct net *net = dev_net(skb->dev);
58 struct ip_tunnel_net *itn = net_generic(net, vti_net_id);
60 tunnel = ip_tunnel_lookup(itn, skb->dev->ifindex, TUNNEL_NO_KEY,
61 iph->saddr, iph->daddr, 0);
63 struct pcpu_tstats *tstats;
64 u32 oldmark = skb->mark;
68 /* temporarily mark the skb with the tunnel o_key, to
69 * only match policies with this mark.
71 skb->mark = be32_to_cpu(tunnel->parms.o_key);
72 ret = xfrm4_policy_check(NULL, XFRM_POLICY_IN, skb);
77 tstats = this_cpu_ptr(tunnel->dev->tstats);
78 u64_stats_update_begin(&tstats->syncp);
80 tstats->rx_bytes += skb->len;
81 u64_stats_update_end(&tstats->syncp);
84 skb->dev = tunnel->dev;
91 /* This function assumes it is being called from dev_queue_xmit()
92 * and that skb is filled properly by that function.
95 static netdev_tx_t vti_tunnel_xmit(struct sk_buff *skb, struct net_device *dev)
97 struct ip_tunnel *tunnel = netdev_priv(dev);
98 struct iphdr *tiph = &tunnel->parms.iph;
100 struct rtable *rt; /* Route to the other host */
101 struct net_device *tdev; /* Device to other host */
102 struct iphdr *old_iph = ip_hdr(skb);
103 __be32 dst = tiph->daddr;
107 if (skb->protocol != htons(ETH_P_IP))
112 memset(&fl4, 0, sizeof(fl4));
113 flowi4_init_output(&fl4, tunnel->parms.link,
114 be32_to_cpu(tunnel->parms.o_key), RT_TOS(tos),
117 dst, tiph->saddr, 0, 0);
118 rt = ip_route_output_key(dev_net(dev), &fl4);
120 dev->stats.tx_carrier_errors++;
123 /* if there is no transform then this tunnel is not functional.
124 * Or if the xfrm is not mode tunnel.
127 rt->dst.xfrm->props.mode != XFRM_MODE_TUNNEL) {
128 dev->stats.tx_carrier_errors++;
135 dev->stats.collisions++;
139 if (tunnel->err_count > 0) {
140 if (time_before(jiffies,
141 tunnel->err_time + IPTUNNEL_ERR_TIMEO)) {
143 dst_link_failure(skb);
145 tunnel->err_count = 0;
148 memset(IPCB(skb), 0, sizeof(*IPCB(skb)));
150 skb_dst_set(skb, &rt->dst);
152 skb->dev = skb_dst(skb)->dev;
154 err = dst_output(skb);
155 if (net_xmit_eval(err) == 0)
157 iptunnel_xmit_stats(err, &dev->stats, dev->tstats);
161 dst_link_failure(skb);
163 dev->stats.tx_errors++;
169 vti_tunnel_ioctl(struct net_device *dev, struct ifreq *ifr, int cmd)
172 struct ip_tunnel_parm p;
174 if (copy_from_user(&p, ifr->ifr_ifru.ifru_data, sizeof(p)))
177 if (cmd == SIOCADDTUNNEL || cmd == SIOCCHGTUNNEL) {
178 if (p.iph.version != 4 || p.iph.protocol != IPPROTO_IPIP ||
183 err = ip_tunnel_ioctl(dev, &p, cmd);
187 if (cmd != SIOCDELTUNNEL) {
188 p.i_flags |= GRE_KEY | VTI_ISVTI;
189 p.o_flags |= GRE_KEY;
192 if (copy_to_user(ifr->ifr_ifru.ifru_data, &p, sizeof(p)))
197 static const struct net_device_ops vti_netdev_ops = {
198 .ndo_init = vti_tunnel_init,
199 .ndo_uninit = ip_tunnel_uninit,
200 .ndo_start_xmit = vti_tunnel_xmit,
201 .ndo_do_ioctl = vti_tunnel_ioctl,
202 .ndo_change_mtu = ip_tunnel_change_mtu,
203 .ndo_get_stats64 = ip_tunnel_get_stats64,
206 static void vti_tunnel_setup(struct net_device *dev)
208 dev->netdev_ops = &vti_netdev_ops;
209 ip_tunnel_setup(dev, vti_net_id);
212 static int vti_tunnel_init(struct net_device *dev)
214 struct ip_tunnel *tunnel = netdev_priv(dev);
215 struct iphdr *iph = &tunnel->parms.iph;
217 memcpy(dev->dev_addr, &iph->saddr, 4);
218 memcpy(dev->broadcast, &iph->daddr, 4);
220 dev->type = ARPHRD_TUNNEL;
221 dev->hard_header_len = LL_MAX_HEADER + sizeof(struct iphdr);
222 dev->mtu = ETH_DATA_LEN;
223 dev->flags = IFF_NOARP;
226 dev->features |= NETIF_F_NETNS_LOCAL;
227 dev->features |= NETIF_F_LLTX;
228 dev->priv_flags &= ~IFF_XMIT_DST_RELEASE;
230 return ip_tunnel_init(dev);
233 static void __net_init vti_fb_tunnel_init(struct net_device *dev)
235 struct ip_tunnel *tunnel = netdev_priv(dev);
236 struct iphdr *iph = &tunnel->parms.iph;
239 iph->protocol = IPPROTO_IPIP;
243 static struct xfrm_tunnel_notifier vti_handler __read_mostly = {
248 static int __net_init vti_init_net(struct net *net)
251 struct ip_tunnel_net *itn;
253 err = ip_tunnel_init_net(net, vti_net_id, &vti_link_ops, "ip_vti0");
256 itn = net_generic(net, vti_net_id);
257 vti_fb_tunnel_init(itn->fb_tunnel_dev);
261 static void __net_exit vti_exit_net(struct net *net)
263 struct ip_tunnel_net *itn = net_generic(net, vti_net_id);
264 ip_tunnel_delete_net(itn, &vti_link_ops);
267 static struct pernet_operations vti_net_ops = {
268 .init = vti_init_net,
269 .exit = vti_exit_net,
271 .size = sizeof(struct ip_tunnel_net),
274 static int vti_tunnel_validate(struct nlattr *tb[], struct nlattr *data[])
279 static void vti_netlink_parms(struct nlattr *data[],
280 struct ip_tunnel_parm *parms)
282 memset(parms, 0, sizeof(*parms));
284 parms->iph.protocol = IPPROTO_IPIP;
289 if (data[IFLA_VTI_LINK])
290 parms->link = nla_get_u32(data[IFLA_VTI_LINK]);
292 if (data[IFLA_VTI_IKEY])
293 parms->i_key = nla_get_be32(data[IFLA_VTI_IKEY]);
295 if (data[IFLA_VTI_OKEY])
296 parms->o_key = nla_get_be32(data[IFLA_VTI_OKEY]);
298 if (data[IFLA_VTI_LOCAL])
299 parms->iph.saddr = nla_get_be32(data[IFLA_VTI_LOCAL]);
301 if (data[IFLA_VTI_REMOTE])
302 parms->iph.daddr = nla_get_be32(data[IFLA_VTI_REMOTE]);
306 static int vti_newlink(struct net *src_net, struct net_device *dev,
307 struct nlattr *tb[], struct nlattr *data[])
309 struct ip_tunnel_parm parms;
311 vti_netlink_parms(data, &parms);
312 return ip_tunnel_newlink(dev, tb, &parms);
315 static int vti_changelink(struct net_device *dev, struct nlattr *tb[],
316 struct nlattr *data[])
318 struct ip_tunnel_parm p;
320 vti_netlink_parms(data, &p);
321 return ip_tunnel_changelink(dev, tb, &p);
324 static size_t vti_get_size(const struct net_device *dev)
335 /* IFLA_VTI_REMOTE */
340 static int vti_fill_info(struct sk_buff *skb, const struct net_device *dev)
342 struct ip_tunnel *t = netdev_priv(dev);
343 struct ip_tunnel_parm *p = &t->parms;
345 nla_put_u32(skb, IFLA_VTI_LINK, p->link);
346 nla_put_be32(skb, IFLA_VTI_IKEY, p->i_key);
347 nla_put_be32(skb, IFLA_VTI_OKEY, p->o_key);
348 nla_put_be32(skb, IFLA_VTI_LOCAL, p->iph.saddr);
349 nla_put_be32(skb, IFLA_VTI_REMOTE, p->iph.daddr);
354 static const struct nla_policy vti_policy[IFLA_VTI_MAX + 1] = {
355 [IFLA_VTI_LINK] = { .type = NLA_U32 },
356 [IFLA_VTI_IKEY] = { .type = NLA_U32 },
357 [IFLA_VTI_OKEY] = { .type = NLA_U32 },
358 [IFLA_VTI_LOCAL] = { .len = FIELD_SIZEOF(struct iphdr, saddr) },
359 [IFLA_VTI_REMOTE] = { .len = FIELD_SIZEOF(struct iphdr, daddr) },
362 static struct rtnl_link_ops vti_link_ops __read_mostly = {
364 .maxtype = IFLA_VTI_MAX,
365 .policy = vti_policy,
366 .priv_size = sizeof(struct ip_tunnel),
367 .setup = vti_tunnel_setup,
368 .validate = vti_tunnel_validate,
369 .newlink = vti_newlink,
370 .changelink = vti_changelink,
371 .get_size = vti_get_size,
372 .fill_info = vti_fill_info,
375 static int __init vti_init(void)
379 pr_info("IPv4 over IPSec tunneling driver\n");
381 err = register_pernet_device(&vti_net_ops);
384 err = xfrm4_mode_tunnel_input_register(&vti_handler);
386 unregister_pernet_device(&vti_net_ops);
387 pr_info("vti init: can't register tunnel\n");
390 err = rtnl_link_register(&vti_link_ops);
392 goto rtnl_link_failed;
397 xfrm4_mode_tunnel_input_deregister(&vti_handler);
398 unregister_pernet_device(&vti_net_ops);
402 static void __exit vti_fini(void)
404 rtnl_link_unregister(&vti_link_ops);
405 if (xfrm4_mode_tunnel_input_deregister(&vti_handler))
406 pr_info("vti close: can't deregister tunnel\n");
408 unregister_pernet_device(&vti_net_ops);
411 module_init(vti_init);
412 module_exit(vti_fini);
413 MODULE_LICENSE("GPL");
414 MODULE_ALIAS_RTNL_LINK("vti");
415 MODULE_ALIAS_NETDEV("ip_vti0");