1 /*
2 * Copyright (C)2006 USAGI/WIDE Project
3 *
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License as published by
6 * the Free Software Foundation; either version 2 of the License, or
7 * (at your option) any later version.
8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write to the Free Software
16 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
17 */
18 /*
19 * Author:
20 * Masahide NAKAMURA @USAGI
21 */
22
23 #include <stdio.h>
24 #include <string.h>
25 #include <stdlib.h>
26 #include <unistd.h>
27 #include <sys/types.h>
28 #include <sys/socket.h>
29 #include <arpa/inet.h>
30 #include <sys/ioctl.h>
31 #include <linux/ip.h>
32 #include <linux/if.h>
33 #include <linux/if_arp.h>
34 #include <linux/if_tunnel.h>
35 #include <linux/ip6_tunnel.h>
36
37 #include "utils.h"
38 #include "tunnel.h"
39
40 #define IP6_FLOWINFO_TCLASS htonl(0x0FF00000)
41 #define IP6_FLOWINFO_FLOWLABEL htonl(0x000FFFFF)
42
43 #define DEFAULT_TNL_HOP_LIMIT (64)
44
45 static void usage(void) __attribute__((noreturn));
46
usage(void)47 static void usage(void)
48 {
49 fprintf(stderr, "Usage: ip -f inet6 tunnel { add | change | del | show } [ NAME ]\n");
50 fprintf(stderr, " [ mode { ip6ip6 | ipip6 | any } ]\n");
51 fprintf(stderr, " [ remote ADDR local ADDR ] [ dev PHYS_DEV ]\n");
52 fprintf(stderr, " [ encaplimit ELIM ]\n");
53 fprintf(stderr ," [ hoplimit TTL ] [ tclass TCLASS ] [ flowlabel FLOWLABEL ]\n");
54 fprintf(stderr, " [ dscp inherit ]\n");
55 fprintf(stderr, "\n");
56 fprintf(stderr, "Where: NAME := STRING\n");
57 fprintf(stderr, " ADDR := IPV6_ADDRESS\n");
58 fprintf(stderr, " ELIM := { none | 0..255 }(default=%d)\n",
59 IPV6_DEFAULT_TNL_ENCAP_LIMIT);
60 fprintf(stderr, " TTL := 0..255 (default=%d)\n",
61 DEFAULT_TNL_HOP_LIMIT);
62 fprintf(stderr, " TOS := { 0x0..0xff | inherit }\n");
63 fprintf(stderr, " FLOWLABEL := { 0x0..0xfffff | inherit }\n");
64 exit(-1);
65 }
66
print_tunnel(struct ip6_tnl_parm * p)67 static void print_tunnel(struct ip6_tnl_parm *p)
68 {
69 char remote[64];
70 char local[64];
71
72 inet_ntop(AF_INET6, &p->raddr, remote, sizeof(remote));
73 inet_ntop(AF_INET6, &p->laddr, local, sizeof(local));
74
75 printf("%s: %s/ipv6 remote %s local %s",
76 p->name, tnl_strproto(p->proto), remote, local);
77 if (p->link) {
78 char *n = tnl_ioctl_get_ifname(p->link);
79 if (n)
80 printf(" dev %s", n);
81 }
82
83 if (p->flags & IP6_TNL_F_IGN_ENCAP_LIMIT)
84 printf(" encaplimit none");
85 else
86 printf(" encaplimit %u", p->encap_limit);
87
88 printf(" hoplimit %u", p->hop_limit);
89
90 if (p->flags & IP6_TNL_F_USE_ORIG_TCLASS)
91 printf(" tclass inherit");
92 else {
93 __u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_TCLASS);
94 printf(" tclass 0x%02x", (__u8)(val >> 20));
95 }
96
97 if (p->flags & IP6_TNL_F_USE_ORIG_FLOWLABEL)
98 printf(" flowlabel inherit");
99 else
100 printf(" flowlabel 0x%05x", ntohl(p->flowinfo & IP6_FLOWINFO_FLOWLABEL));
101
102 printf(" (flowinfo 0x%08x)", ntohl(p->flowinfo));
103
104 if (p->flags & IP6_TNL_F_RCV_DSCP_COPY)
105 printf(" dscp inherit");
106 }
107
parse_args(int argc,char ** argv,struct ip6_tnl_parm * p)108 static int parse_args(int argc, char **argv, struct ip6_tnl_parm *p)
109 {
110 char medium[IFNAMSIZ];
111
112 memset(medium, 0, sizeof(medium));
113
114 while (argc > 0) {
115 if (strcmp(*argv, "mode") == 0) {
116 NEXT_ARG();
117 if (strcmp(*argv, "ipv6/ipv6") == 0 ||
118 strcmp(*argv, "ip6ip6") == 0)
119 p->proto = IPPROTO_IPV6;
120 else if (strcmp(*argv, "ip/ipv6") == 0 ||
121 strcmp(*argv, "ipv4/ipv6") == 0 ||
122 strcmp(*argv, "ipip6") == 0 ||
123 strcmp(*argv, "ip4ip6") == 0)
124 p->proto = IPPROTO_IPIP;
125 else if (strcmp(*argv, "any/ipv6") == 0 ||
126 strcmp(*argv, "any") == 0)
127 p->proto = 0;
128 else {
129 fprintf(stderr,"Cannot guess tunnel mode.\n");
130 exit(-1);
131 }
132 } else if (strcmp(*argv, "remote") == 0) {
133 inet_prefix raddr;
134 NEXT_ARG();
135 get_prefix(&raddr, *argv, preferred_family);
136 if (raddr.family == AF_UNSPEC)
137 invarg("\"remote\" address family is AF_UNSPEC", *argv);
138 memcpy(&p->raddr, &raddr.data, sizeof(p->raddr));
139 } else if (strcmp(*argv, "local") == 0) {
140 inet_prefix laddr;
141 NEXT_ARG();
142 get_prefix(&laddr, *argv, preferred_family);
143 if (laddr.family == AF_UNSPEC)
144 invarg("\"local\" address family is AF_UNSPEC", *argv);
145 memcpy(&p->laddr, &laddr.data, sizeof(p->laddr));
146 } else if (strcmp(*argv, "dev") == 0) {
147 NEXT_ARG();
148 strncpy(medium, *argv, IFNAMSIZ - 1);
149 } else if (strcmp(*argv, "encaplimit") == 0) {
150 NEXT_ARG();
151 if (strcmp(*argv, "none") == 0) {
152 p->flags |= IP6_TNL_F_IGN_ENCAP_LIMIT;
153 } else {
154 __u8 uval;
155 if (get_u8(&uval, *argv, 0) < -1)
156 invarg("invalid ELIM", *argv);
157 p->encap_limit = uval;
158 }
159 } else if (strcmp(*argv, "hoplimit") == 0 ||
160 strcmp(*argv, "ttl") == 0 ||
161 strcmp(*argv, "hlim") == 0) {
162 __u8 uval;
163 NEXT_ARG();
164 if (get_u8(&uval, *argv, 0))
165 invarg("invalid TTL", *argv);
166 p->hop_limit = uval;
167 } else if (strcmp(*argv, "tclass") == 0 ||
168 strcmp(*argv, "tc") == 0 ||
169 strcmp(*argv, "tos") == 0 ||
170 matches(*argv, "dsfield") == 0) {
171 __u8 uval;
172 NEXT_ARG();
173 if (strcmp(*argv, "inherit") == 0)
174 p->flags |= IP6_TNL_F_USE_ORIG_TCLASS;
175 else {
176 if (get_u8(&uval, *argv, 16))
177 invarg("invalid TClass", *argv);
178 p->flowinfo |= htonl((__u32)uval << 20) & IP6_FLOWINFO_TCLASS;
179 p->flags &= ~IP6_TNL_F_USE_ORIG_TCLASS;
180 }
181 } else if (strcmp(*argv, "flowlabel") == 0 ||
182 strcmp(*argv, "fl") == 0) {
183 __u32 uval;
184 NEXT_ARG();
185 if (strcmp(*argv, "inherit") == 0)
186 p->flags |= IP6_TNL_F_USE_ORIG_FLOWLABEL;
187 else {
188 if (get_u32(&uval, *argv, 16))
189 invarg("invalid Flowlabel", *argv);
190 if (uval > 0xFFFFF)
191 invarg("invalid Flowlabel", *argv);
192 p->flowinfo |= htonl(uval) & IP6_FLOWINFO_FLOWLABEL;
193 p->flags &= ~IP6_TNL_F_USE_ORIG_FLOWLABEL;
194 }
195 } else if (strcmp(*argv, "dscp") == 0) {
196 NEXT_ARG();
197 if (strcmp(*argv, "inherit") != 0)
198 invarg("not inherit", *argv);
199 p->flags |= IP6_TNL_F_RCV_DSCP_COPY;
200 } else {
201 if (strcmp(*argv, "name") == 0) {
202 NEXT_ARG();
203 }
204 if (matches(*argv, "help") == 0)
205 usage();
206 if (p->name[0])
207 duparg2("name", *argv);
208 strncpy(p->name, *argv, IFNAMSIZ - 1);
209 }
210 argc--; argv++;
211 }
212 if (medium[0]) {
213 p->link = tnl_ioctl_get_ifindex(medium);
214 if (p->link == 0)
215 return -1;
216 }
217 return 0;
218 }
219
ip6_tnl_parm_init(struct ip6_tnl_parm * p,int apply_default)220 static void ip6_tnl_parm_init(struct ip6_tnl_parm *p, int apply_default)
221 {
222 memset(p, 0, sizeof(*p));
223 p->proto = IPPROTO_IPV6;
224 if (apply_default) {
225 p->hop_limit = DEFAULT_TNL_HOP_LIMIT;
226 p->encap_limit = IPV6_DEFAULT_TNL_ENCAP_LIMIT;
227 }
228 }
229
230 /*
231 * @p1: user specified parameter
232 * @p2: database entry
233 */
ip6_tnl_parm_match(const struct ip6_tnl_parm * p1,const struct ip6_tnl_parm * p2)234 static int ip6_tnl_parm_match(const struct ip6_tnl_parm *p1,
235 const struct ip6_tnl_parm *p2)
236 {
237 return ((!p1->link || p1->link == p2->link) &&
238 (!p1->name[0] || strcmp(p1->name, p2->name) == 0) &&
239 (memcmp(&p1->laddr, &in6addr_any, sizeof(p1->laddr)) == 0 ||
240 memcmp(&p1->laddr, &p2->laddr, sizeof(p1->laddr)) == 0) &&
241 (memcmp(&p1->raddr, &in6addr_any, sizeof(p1->raddr)) == 0 ||
242 memcmp(&p1->raddr, &p2->raddr, sizeof(p1->raddr)) == 0) &&
243 (!p1->proto || !p2->proto || p1->proto == p2->proto) &&
244 (!p1->encap_limit || p1->encap_limit == p2->encap_limit) &&
245 (!p1->hop_limit || p1->hop_limit == p2->hop_limit) &&
246 (!(p1->flowinfo & IP6_FLOWINFO_TCLASS) ||
247 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_TCLASS)) &&
248 (!(p1->flowinfo & IP6_FLOWINFO_FLOWLABEL) ||
249 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_FLOWLABEL)) &&
250 (!p1->flags || (p1->flags & p2->flags)));
251 }
252
do_tunnels_list(struct ip6_tnl_parm * p)253 static int do_tunnels_list(struct ip6_tnl_parm *p)
254 {
255 char buf[512];
256 int err = -1;
257 FILE *fp = fopen("/proc/net/dev", "r");
258 if (fp == NULL) {
259 perror("fopen");
260 goto end;
261 }
262
263 /* skip two lines at the begenning of the file */
264 fgets(buf, sizeof(buf), fp);
265 fgets(buf, sizeof(buf), fp);
266
267 while (fgets(buf, sizeof(buf), fp) != NULL) {
268 char name[IFNAMSIZ];
269 int type;
270 unsigned long rx_bytes, rx_packets, rx_errs, rx_drops,
271 rx_fifo, rx_frame,
272 tx_bytes, tx_packets, tx_errs, tx_drops,
273 tx_fifo, tx_colls, tx_carrier, rx_multi;
274 struct ip6_tnl_parm p1;
275 char *ptr;
276
277 buf[sizeof(buf) - 1] = '\0';
278 if ((ptr = strchr(buf, ':')) == NULL ||
279 (*ptr++ = 0, sscanf(buf, "%s", name) != 1)) {
280 fprintf(stderr, "Wrong format of /proc/net/dev. Sorry.\n");
281 goto end;
282 }
283 if (sscanf(ptr, "%ld%ld%ld%ld%ld%ld%ld%*d%ld%ld%ld%ld%ld%ld%ld",
284 &rx_bytes, &rx_packets, &rx_errs, &rx_drops,
285 &rx_fifo, &rx_frame, &rx_multi,
286 &tx_bytes, &tx_packets, &tx_errs, &tx_drops,
287 &tx_fifo, &tx_colls, &tx_carrier) != 14)
288 continue;
289 if (p->name[0] && strcmp(p->name, name))
290 continue;
291 type = tnl_ioctl_get_iftype(name);
292 if (type == -1) {
293 fprintf(stderr, "Failed to get type of [%s]\n", name);
294 continue;
295 }
296 if (type != ARPHRD_TUNNEL6)
297 continue;
298 memset(&p1, 0, sizeof(p1));
299 ip6_tnl_parm_init(&p1, 0);
300 strcpy(p1.name, name);
301 p1.link = tnl_ioctl_get_ifindex(p1.name);
302 if (p1.link == 0)
303 continue;
304 if (tnl_get_ioctl(p1.name, &p1))
305 continue;
306 if (!ip6_tnl_parm_match(p, &p1))
307 continue;
308 print_tunnel(&p1);
309 if (show_stats) {
310 printf("%s", _SL_);
311 printf("RX: Packets Bytes Errors CsumErrs OutOfSeq Mcasts%s", _SL_);
312 printf(" %-10ld %-12ld %-6ld %-8ld %-8ld %-8ld%s",
313 rx_packets, rx_bytes, rx_errs, rx_frame, rx_fifo, rx_multi, _SL_);
314 printf("TX: Packets Bytes Errors DeadLoop NoRoute NoBufs%s", _SL_);
315 printf(" %-10ld %-12ld %-6ld %-8ld %-8ld %-6ld",
316 tx_packets, tx_bytes, tx_errs, tx_colls, tx_carrier, tx_drops);
317 }
318 printf("\n");
319 }
320 err = 0;
321
322 end:
323 if (fp)
324 fclose(fp);
325 return err;
326 }
327
do_show(int argc,char ** argv)328 static int do_show(int argc, char **argv)
329 {
330 struct ip6_tnl_parm p;
331
332 ip6_tnl_parm_init(&p, 0);
333 p.proto = 0; /* default to any */
334
335 if (parse_args(argc, argv, &p) < 0)
336 return -1;
337
338 if (!p.name[0] || show_stats)
339 do_tunnels_list(&p);
340 else {
341 if (tnl_get_ioctl(p.name, &p))
342 return -1;
343 print_tunnel(&p);
344 printf("\n");
345 }
346
347 return 0;
348 }
349
do_add(int cmd,int argc,char ** argv)350 static int do_add(int cmd, int argc, char **argv)
351 {
352 struct ip6_tnl_parm p;
353
354 ip6_tnl_parm_init(&p, 1);
355
356 if (parse_args(argc, argv, &p) < 0)
357 return -1;
358
359 return tnl_add_ioctl(cmd,
360 cmd == SIOCCHGTUNNEL && p.name[0] ?
361 p.name : "ip6tnl0", p.name, &p);
362 }
363
do_del(int argc,char ** argv)364 static int do_del(int argc, char **argv)
365 {
366 struct ip6_tnl_parm p;
367
368 ip6_tnl_parm_init(&p, 1);
369
370 if (parse_args(argc, argv, &p) < 0)
371 return -1;
372
373 return tnl_del_ioctl(p.name[0] ? p.name : "ip6tnl0", p.name, &p);
374 }
375
do_ip6tunnel(int argc,char ** argv)376 int do_ip6tunnel(int argc, char **argv)
377 {
378 switch (preferred_family) {
379 case AF_UNSPEC:
380 preferred_family = AF_INET6;
381 break;
382 case AF_INET6:
383 break;
384 default:
385 fprintf(stderr, "Unsupported family:%d\n", preferred_family);
386 exit(-1);
387 }
388
389 if (argc > 0) {
390 if (matches(*argv, "add") == 0)
391 return do_add(SIOCADDTUNNEL, argc - 1, argv + 1);
392 if (matches(*argv, "change") == 0)
393 return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1);
394 if (matches(*argv, "del") == 0)
395 return do_del(argc - 1, argv + 1);
396 if (matches(*argv, "show") == 0 ||
397 matches(*argv, "lst") == 0 ||
398 matches(*argv, "list") == 0)
399 return do_show(argc - 1, argv + 1);
400 if (matches(*argv, "help") == 0)
401 usage();
402 } else
403 return do_show(0, NULL);
404
405 fprintf(stderr, "Command \"%s\" is unknown, try \"ip -f inet6 tunnel help\".\n", *argv);
406 exit(-1);
407 }
408