| // SPDX-License-Identifier: GPL-2.0-or-later |
| /* |
| * Linux NET3: IP/IP protocol decoder. |
| * |
| * Authors: |
| * Sam Lantinga (slouken@cs.ucdavis.edu) 02/01/95 |
| * |
| * Fixes: |
| * Alan Cox : Merged and made usable non modular (its so tiny its silly as |
| * a module taking up 2 pages). |
| * Alan Cox : Fixed bug with 1.3.18 and IPIP not working (now needs to set skb->h.iph) |
| * to keep ip_forward happy. |
| * Alan Cox : More fixes for 1.3.21, and firewall fix. Maybe this will work soon 8). |
| * Kai Schulte : Fixed #defines for IP_FIREWALL->FIREWALL |
| * David Woodhouse : Perform some basic ICMP handling. |
| * IPIP Routing without decapsulation. |
| * Carlos Picoto : GRE over IP support |
| * Alexey Kuznetsov: Reworked. Really, now it is truncated version of ipv4/ip_gre.c. |
| * I do not want to merge them together. |
| */ |
| |
| /* tunnel.c: an IP tunnel driver |
| |
| The purpose of this driver is to provide an IP tunnel through |
| which you can tunnel network traffic transparently across subnets. |
| |
| This was written by looking at Nick Holloway's dummy driver |
| Thanks for the great code! |
| |
| -Sam Lantinga (slouken@cs.ucdavis.edu) 02/01/95 |
| |
| Minor tweaks: |
| Cleaned up the code a little and added some pre-1.3.0 tweaks. |
| dev->hard_header/hard_header_len changed to use no headers. |
| Comments/bracketing tweaked. |
| Made the tunnels use dev->name not tunnel: when error reporting. |
| Added tx_dropped stat |
| |
| -Alan Cox (alan@lxorguk.ukuu.org.uk) 21 March 95 |
| |
| Reworked: |
| Changed to tunnel to destination gateway in addition to the |
| tunnel's pointopoint address |
| Almost completely rewritten |
| Note: There is currently no firewall or ICMP handling done. |
| |
| -Sam Lantinga (slouken@cs.ucdavis.edu) 02/13/96 |
| |
| */ |
| |
| /* Things I wish I had known when writing the tunnel driver: |
| |
| When the tunnel_xmit() function is called, the skb contains the |
| packet to be sent (plus a great deal of extra info), and dev |
| contains the tunnel device that _we_ are. |
| |
| When we are passed a packet, we are expected to fill in the |
| source address with our source IP address. |
| |
| What is the proper way to allocate, copy and free a buffer? |
| After you allocate it, it is a "0 length" chunk of memory |
| starting at zero. If you want to add headers to the buffer |
| later, you'll have to call "skb_reserve(skb, amount)" with |
| the amount of memory you want reserved. Then, you call |
| "skb_put(skb, amount)" with the amount of space you want in |
| the buffer. skb_put() returns a pointer to the top (#0) of |
| that buffer. skb->len is set to the amount of space you have |
| "allocated" with skb_put(). You can then write up to skb->len |
| bytes to that buffer. If you need more, you can call skb_put() |
| again with the additional amount of space you need. You can |
| find out how much more space you can allocate by calling |
| "skb_tailroom(skb)". |
| Now, to add header space, call "skb_push(skb, header_len)". |
| This creates space at the beginning of the buffer and returns |
| a pointer to this new space. If later you need to strip a |
| header from a buffer, call "skb_pull(skb, header_len)". |
| skb_headroom() will return how much space is left at the top |
| of the buffer (before the main data). Remember, this headroom |
| space must be reserved before the skb_put() function is called. |
| */ |
| |
| /* |
| This version of net/ipv4/ipip.c is cloned of net/ipv4/ip_gre.c |
| |
| For comments look at net/ipv4/ip_gre.c --ANK |
| */ |
| |
| |
| #include <linux/capability.h> |
| #include <linux/module.h> |
| #include <linux/types.h> |
| #include <linux/kernel.h> |
| #include <linux/slab.h> |
| #include <linux/uaccess.h> |
| #include <linux/skbuff.h> |
| #include <linux/netdevice.h> |
| #include <linux/in.h> |
| #include <linux/tcp.h> |
| #include <linux/udp.h> |
| #include <linux/if_arp.h> |
| #include <linux/init.h> |
| #include <linux/netfilter_ipv4.h> |
| #include <linux/if_ether.h> |
| |
| #include <net/sock.h> |
| #include <net/ip.h> |
| #include <net/icmp.h> |
| #include <net/ip_tunnels.h> |
| #include <net/inet_ecn.h> |
| #include <net/xfrm.h> |
| #include <net/net_namespace.h> |
| #include <net/netns/generic.h> |
| #include <net/dst_metadata.h> |
| |
| static bool log_ecn_error = true; |
| module_param(log_ecn_error, bool, 0644); |
| MODULE_PARM_DESC(log_ecn_error, "Log packets received with corrupted ECN"); |
| |
| static unsigned int ipip_net_id __read_mostly; |
| |
| static int ipip_tunnel_init(struct net_device *dev); |
| static struct rtnl_link_ops ipip_link_ops __read_mostly; |
| |
| static int ipip_err(struct sk_buff *skb, u32 info) |
| { |
| /* All the routers (except for Linux) return only |
| * 8 bytes of packet payload. It means, that precise relaying of |
| * ICMP in the real Internet is absolutely infeasible. |
| */ |
| struct net *net = dev_net(skb->dev); |
| struct ip_tunnel_net *itn = net_generic(net, ipip_net_id); |
| const struct iphdr *iph = (const struct iphdr *)skb->data; |
| const int type = icmp_hdr(skb)->type; |
| const int code = icmp_hdr(skb)->code; |
| struct ip_tunnel *t; |
| int err = 0; |
| |
| t = ip_tunnel_lookup(itn, skb->dev->ifindex, TUNNEL_NO_KEY, |
| iph->daddr, iph->saddr, 0); |
| if (!t) { |
| err = -ENOENT; |
| goto out; |
| } |
| |
| switch (type) { |
| case ICMP_DEST_UNREACH: |
| switch (code) { |
| case ICMP_SR_FAILED: |
| /* Impossible event. */ |
| goto out; |
| default: |
| /* All others are translated to HOST_UNREACH. |
| * rfc2003 contains "deep thoughts" about NET_UNREACH, |
| * I believe they are just ether pollution. --ANK |
| */ |
| break; |
| } |
| break; |
| |
| case ICMP_TIME_EXCEEDED: |
| if (code != ICMP_EXC_TTL) |
| goto out; |
| break; |
| |
| case ICMP_REDIRECT: |
| break; |
| |
| default: |
| goto out; |
| } |
| |
| if (type == ICMP_DEST_UNREACH && code == ICMP_FRAG_NEEDED) { |
| ipv4_update_pmtu(skb, net, info, t->parms.link, iph->protocol); |
| goto out; |
| } |
| |
| if (type == ICMP_REDIRECT) { |
| ipv4_redirect(skb, net, t->parms.link, iph->protocol); |
| goto out; |
| } |
| |
| if (t->parms.iph.daddr == 0) { |
| err = -ENOENT; |
| goto out; |
| } |
| |
| if (t->parms.iph.ttl == 0 && type == ICMP_TIME_EXCEEDED) |
| goto out; |
| |
| if (time_before(jiffies, t->err_time + IPTUNNEL_ERR_TIMEO)) |
| t->err_count++; |
| else |
| t->err_count = 1; |
| t->err_time = jiffies; |
| |
| out: |
| return err; |
| } |
| |
| static const struct tnl_ptk_info ipip_tpi = { |
| /* no tunnel info required for ipip. */ |
| .proto = htons(ETH_P_IP), |
| }; |
| |
| #if IS_ENABLED(CONFIG_MPLS) |
| static const struct tnl_ptk_info mplsip_tpi = { |
| /* no tunnel info required for mplsip. */ |
| .proto = htons(ETH_P_MPLS_UC), |
| }; |
| #endif |
| |
| static int ipip_tunnel_rcv(struct sk_buff *skb, u8 ipproto) |
| { |
| struct net *net = dev_net(skb->dev); |
| struct ip_tunnel_net *itn = net_generic(net, ipip_net_id); |
| struct metadata_dst *tun_dst = NULL; |
| struct ip_tunnel *tunnel; |
| const struct iphdr *iph; |
| |
| iph = ip_hdr(skb); |
| tunnel = ip_tunnel_lookup(itn, skb->dev->ifindex, TUNNEL_NO_KEY, |
| iph->saddr, iph->daddr, 0); |
| if (tunnel) { |
| const struct tnl_ptk_info *tpi; |
| |
| if (tunnel->parms.iph.protocol != ipproto && |
| tunnel->parms.iph.protocol != 0) |
| goto drop; |
| |
| if (!xfrm4_policy_check(NULL, XFRM_POLICY_IN, skb)) |
| goto drop; |
| #if IS_ENABLED(CONFIG_MPLS) |
| if (ipproto == IPPROTO_MPLS) |
| tpi = &mplsip_tpi; |
| else |
| #endif |
| tpi = &ipip_tpi; |
| if (iptunnel_pull_header(skb, 0, tpi->proto, false)) |
| goto drop; |
| if (tunnel->collect_md) { |
| tun_dst = ip_tun_rx_dst(skb, 0, 0, 0); |
| if (!tun_dst) |
| return 0; |
| } |
| skb_reset_mac_header(skb); |
| |
| return ip_tunnel_rcv(tunnel, skb, tpi, tun_dst, log_ecn_error); |
| } |
| |
| return -1; |
| |
| drop: |
| kfree_skb(skb); |
| return 0; |
| } |
| |
| static int ipip_rcv(struct sk_buff *skb) |
| { |
| return ipip_tunnel_rcv(skb, IPPROTO_IPIP); |
| } |
| |
| #if IS_ENABLED(CONFIG_MPLS) |
| static int mplsip_rcv(struct sk_buff *skb) |
| { |
| return ipip_tunnel_rcv(skb, IPPROTO_MPLS); |
| } |
| #endif |
| |
| /* |
| * This function assumes it is being called from dev_queue_xmit() |
| * and that skb is filled properly by that function. |
| */ |
| static netdev_tx_t ipip_tunnel_xmit(struct sk_buff *skb, |
| struct net_device *dev) |
| { |
| struct ip_tunnel *tunnel = netdev_priv(dev); |
| const struct iphdr *tiph = &tunnel->parms.iph; |
| u8 ipproto; |
| |
| if (!pskb_inet_may_pull(skb)) |
| goto tx_error; |
| |
| switch (skb->protocol) { |
| case htons(ETH_P_IP): |
| ipproto = IPPROTO_IPIP; |
| break; |
| #if IS_ENABLED(CONFIG_MPLS) |
| case htons(ETH_P_MPLS_UC): |
| ipproto = IPPROTO_MPLS; |
| break; |
| #endif |
| default: |
| goto tx_error; |
| } |
| |
| if (tiph->protocol != ipproto && tiph->protocol != 0) |
| goto tx_error; |
| |
| if (iptunnel_handle_offloads(skb, SKB_GSO_IPXIP4)) |
| goto tx_error; |
| |
| skb_set_inner_ipproto(skb, ipproto); |
| |
| if (tunnel->collect_md) |
| ip_md_tunnel_xmit(skb, dev, ipproto, 0); |
| else |
| ip_tunnel_xmit(skb, dev, tiph, ipproto); |
| return NETDEV_TX_OK; |
| |
| tx_error: |
| kfree_skb(skb); |
| |
| dev->stats.tx_errors++; |
| return NETDEV_TX_OK; |
| } |
| |
| static bool ipip_tunnel_ioctl_verify_protocol(u8 ipproto) |
| { |
| switch (ipproto) { |
| case 0: |
| case IPPROTO_IPIP: |
| #if IS_ENABLED(CONFIG_MPLS) |
| case IPPROTO_MPLS: |
| #endif |
| return true; |
| } |
| |
| return false; |
| } |
| |
| static int |
| ipip_tunnel_ctl(struct net_device *dev, struct ip_tunnel_parm *p, int cmd) |
| { |
| if (cmd == SIOCADDTUNNEL || cmd == SIOCCHGTUNNEL) { |
| if (p->iph.version != 4 || |
| !ipip_tunnel_ioctl_verify_protocol(p->iph.protocol) || |
| p->iph.ihl != 5 || (p->iph.frag_off & htons(~IP_DF))) |
| return -EINVAL; |
| } |
| |
| p->i_key = p->o_key = 0; |
| p->i_flags = p->o_flags = 0; |
| return ip_tunnel_ctl(dev, p, cmd); |
| } |
| |
| static const struct net_device_ops ipip_netdev_ops = { |
| .ndo_init = ipip_tunnel_init, |
| .ndo_uninit = ip_tunnel_uninit, |
| .ndo_start_xmit = ipip_tunnel_xmit, |
| .ndo_do_ioctl = ip_tunnel_ioctl, |
| .ndo_change_mtu = ip_tunnel_change_mtu, |
| .ndo_get_stats64 = dev_get_tstats64, |
| .ndo_get_iflink = ip_tunnel_get_iflink, |
| .ndo_tunnel_ctl = ipip_tunnel_ctl, |
| }; |
| |
| #define IPIP_FEATURES (NETIF_F_SG | \ |
| NETIF_F_FRAGLIST | \ |
| NETIF_F_HIGHDMA | \ |
| NETIF_F_GSO_SOFTWARE | \ |
| NETIF_F_HW_CSUM) |
| |
| static void ipip_tunnel_setup(struct net_device *dev) |
| { |
| dev->netdev_ops = &ipip_netdev_ops; |
| dev->header_ops = &ip_tunnel_header_ops; |
| |
| dev->type = ARPHRD_TUNNEL; |
| dev->flags = IFF_NOARP; |
| dev->addr_len = 4; |
| dev->features |= NETIF_F_LLTX; |
| netif_keep_dst(dev); |
| |
| dev->features |= IPIP_FEATURES; |
| dev->hw_features |= IPIP_FEATURES; |
| ip_tunnel_setup(dev, ipip_net_id); |
| } |
| |
| static int ipip_tunnel_init(struct net_device *dev) |
| { |
| struct ip_tunnel *tunnel = netdev_priv(dev); |
| |
| memcpy(dev->dev_addr, &tunnel->parms.iph.saddr, 4); |
| memcpy(dev->broadcast, &tunnel->parms.iph.daddr, 4); |
| |
| tunnel->tun_hlen = 0; |
| tunnel->hlen = tunnel->tun_hlen + tunnel->encap_hlen; |
| return ip_tunnel_init(dev); |
| } |
| |
| static int ipip_tunnel_validate(struct nlattr *tb[], struct nlattr *data[], |
| struct netlink_ext_ack *extack) |
| { |
| u8 proto; |
| |
| if (!data || !data[IFLA_IPTUN_PROTO]) |
| return 0; |
| |
| proto = nla_get_u8(data[IFLA_IPTUN_PROTO]); |
| if (proto != IPPROTO_IPIP && proto != IPPROTO_MPLS && proto != 0) |
| return -EINVAL; |
| |
| return 0; |
| } |
| |
| static void ipip_netlink_parms(struct nlattr *data[], |
| struct ip_tunnel_parm *parms, bool *collect_md, |
| __u32 *fwmark) |
| { |
| memset(parms, 0, sizeof(*parms)); |
| |
| parms->iph.version = 4; |
| parms->iph.protocol = IPPROTO_IPIP; |
| parms->iph.ihl = 5; |
| *collect_md = false; |
| |
| if (!data) |
| return; |
| |
| if (data[IFLA_IPTUN_LINK]) |
| parms->link = nla_get_u32(data[IFLA_IPTUN_LINK]); |
| |
| if (data[IFLA_IPTUN_LOCAL]) |
| parms->iph.saddr = nla_get_in_addr(data[IFLA_IPTUN_LOCAL]); |
| |
| if (data[IFLA_IPTUN_REMOTE]) |
| parms->iph.daddr = nla_get_in_addr(data[IFLA_IPTUN_REMOTE]); |
| |
| if (data[IFLA_IPTUN_TTL]) { |
| parms->iph.ttl = nla_get_u8(data[IFLA_IPTUN_TTL]); |
| if (parms->iph.ttl) |
| parms->iph.frag_off = htons(IP_DF); |
| } |
| |
| if (data[IFLA_IPTUN_TOS]) |
| parms->iph.tos = nla_get_u8(data[IFLA_IPTUN_TOS]); |
| |
| if (data[IFLA_IPTUN_PROTO]) |
| parms->iph.protocol = nla_get_u8(data[IFLA_IPTUN_PROTO]); |
| |
| if (!data[IFLA_IPTUN_PMTUDISC] || nla_get_u8(data[IFLA_IPTUN_PMTUDISC])) |
| parms->iph.frag_off = htons(IP_DF); |
| |
| if (data[IFLA_IPTUN_COLLECT_METADATA]) |
| *collect_md = true; |
| |
| if (data[IFLA_IPTUN_FWMARK]) |
| *fwmark = nla_get_u32(data[IFLA_IPTUN_FWMARK]); |
| } |
| |
| /* This function returns true when ENCAP attributes are present in the nl msg */ |
| static bool ipip_netlink_encap_parms(struct nlattr *data[], |
| struct ip_tunnel_encap *ipencap) |
| { |
| bool ret = false; |
| |
| memset(ipencap, 0, sizeof(*ipencap)); |
| |
| if (!data) |
| return ret; |
| |
| if (data[IFLA_IPTUN_ENCAP_TYPE]) { |
| ret = true; |
| ipencap->type = nla_get_u16(data[IFLA_IPTUN_ENCAP_TYPE]); |
| } |
| |
| if (data[IFLA_IPTUN_ENCAP_FLAGS]) { |
| ret = true; |
| ipencap->flags = nla_get_u16(data[IFLA_IPTUN_ENCAP_FLAGS]); |
| } |
| |
| if (data[IFLA_IPTUN_ENCAP_SPORT]) { |
| ret = true; |
| ipencap->sport = nla_get_be16(data[IFLA_IPTUN_ENCAP_SPORT]); |
| } |
| |
| if (data[IFLA_IPTUN_ENCAP_DPORT]) { |
| ret = true; |
| ipencap->dport = nla_get_be16(data[IFLA_IPTUN_ENCAP_DPORT]); |
| } |
| |
| return ret; |
| } |
| |
| static int ipip_newlink(struct net *src_net, struct net_device *dev, |
| struct nlattr *tb[], struct nlattr *data[], |
| struct netlink_ext_ack *extack) |
| { |
| struct ip_tunnel *t = netdev_priv(dev); |
| struct ip_tunnel_parm p; |
| struct ip_tunnel_encap ipencap; |
| __u32 fwmark = 0; |
| |
| if (ipip_netlink_encap_parms(data, &ipencap)) { |
| int err = ip_tunnel_encap_setup(t, &ipencap); |
| |
| if (err < 0) |
| return err; |
| } |
| |
| ipip_netlink_parms(data, &p, &t->collect_md, &fwmark); |
| return ip_tunnel_newlink(dev, tb, &p, fwmark); |
| } |
| |
| static int ipip_changelink(struct net_device *dev, struct nlattr *tb[], |
| struct nlattr *data[], |
| struct netlink_ext_ack *extack) |
| { |
| struct ip_tunnel *t = netdev_priv(dev); |
| struct ip_tunnel_parm p; |
| struct ip_tunnel_encap ipencap; |
| bool collect_md; |
| __u32 fwmark = t->fwmark; |
| |
| if (ipip_netlink_encap_parms(data, &ipencap)) { |
| int err = ip_tunnel_encap_setup(t, &ipencap); |
| |
| if (err < 0) |
| return err; |
| } |
| |
| ipip_netlink_parms(data, &p, &collect_md, &fwmark); |
| if (collect_md) |
| return -EINVAL; |
| |
| if (((dev->flags & IFF_POINTOPOINT) && !p.iph.daddr) || |
| (!(dev->flags & IFF_POINTOPOINT) && p.iph.daddr)) |
| return -EINVAL; |
| |
| return ip_tunnel_changelink(dev, tb, &p, fwmark); |
| } |
| |
| static size_t ipip_get_size(const struct net_device *dev) |
| { |
| return |
| /* IFLA_IPTUN_LINK */ |
| nla_total_size(4) + |
| /* IFLA_IPTUN_LOCAL */ |
| nla_total_size(4) + |
| /* IFLA_IPTUN_REMOTE */ |
| nla_total_size(4) + |
| /* IFLA_IPTUN_TTL */ |
| nla_total_size(1) + |
| /* IFLA_IPTUN_TOS */ |
| nla_total_size(1) + |
| /* IFLA_IPTUN_PROTO */ |
| nla_total_size(1) + |
| /* IFLA_IPTUN_PMTUDISC */ |
| nla_total_size(1) + |
| /* IFLA_IPTUN_ENCAP_TYPE */ |
| nla_total_size(2) + |
| /* IFLA_IPTUN_ENCAP_FLAGS */ |
| nla_total_size(2) + |
| /* IFLA_IPTUN_ENCAP_SPORT */ |
| nla_total_size(2) + |
| /* IFLA_IPTUN_ENCAP_DPORT */ |
| nla_total_size(2) + |
| /* IFLA_IPTUN_COLLECT_METADATA */ |
| nla_total_size(0) + |
| /* IFLA_IPTUN_FWMARK */ |
| nla_total_size(4) + |
| 0; |
| } |
| |
| static int ipip_fill_info(struct sk_buff *skb, const struct net_device *dev) |
| { |
| struct ip_tunnel *tunnel = netdev_priv(dev); |
| struct ip_tunnel_parm *parm = &tunnel->parms; |
| |
| if (nla_put_u32(skb, IFLA_IPTUN_LINK, parm->link) || |
| nla_put_in_addr(skb, IFLA_IPTUN_LOCAL, parm->iph.saddr) || |
| nla_put_in_addr(skb, IFLA_IPTUN_REMOTE, parm->iph.daddr) || |
| nla_put_u8(skb, IFLA_IPTUN_TTL, parm->iph.ttl) || |
| nla_put_u8(skb, IFLA_IPTUN_TOS, parm->iph.tos) || |
| nla_put_u8(skb, IFLA_IPTUN_PROTO, parm->iph.protocol) || |
| nla_put_u8(skb, IFLA_IPTUN_PMTUDISC, |
| !!(parm->iph.frag_off & htons(IP_DF))) || |
| nla_put_u32(skb, IFLA_IPTUN_FWMARK, tunnel->fwmark)) |
| goto nla_put_failure; |
| |
| if (nla_put_u16(skb, IFLA_IPTUN_ENCAP_TYPE, |
| tunnel->encap.type) || |
| nla_put_be16(skb, IFLA_IPTUN_ENCAP_SPORT, |
| tunnel->encap.sport) || |
| nla_put_be16(skb, IFLA_IPTUN_ENCAP_DPORT, |
| tunnel->encap.dport) || |
| nla_put_u16(skb, IFLA_IPTUN_ENCAP_FLAGS, |
| tunnel->encap.flags)) |
| goto nla_put_failure; |
| |
| if (tunnel->collect_md) |
| if (nla_put_flag(skb, IFLA_IPTUN_COLLECT_METADATA)) |
| goto nla_put_failure; |
| return 0; |
| |
| nla_put_failure: |
| return -EMSGSIZE; |
| } |
| |
| static const struct nla_policy ipip_policy[IFLA_IPTUN_MAX + 1] = { |
| [IFLA_IPTUN_LINK] = { .type = NLA_U32 }, |
| [IFLA_IPTUN_LOCAL] = { .type = NLA_U32 }, |
| [IFLA_IPTUN_REMOTE] = { .type = NLA_U32 }, |
| [IFLA_IPTUN_TTL] = { .type = NLA_U8 }, |
| [IFLA_IPTUN_TOS] = { .type = NLA_U8 }, |
| [IFLA_IPTUN_PROTO] = { .type = NLA_U8 }, |
| [IFLA_IPTUN_PMTUDISC] = { .type = NLA_U8 }, |
| [IFLA_IPTUN_ENCAP_TYPE] = { .type = NLA_U16 }, |
| [IFLA_IPTUN_ENCAP_FLAGS] = { .type = NLA_U16 }, |
| [IFLA_IPTUN_ENCAP_SPORT] = { .type = NLA_U16 }, |
| [IFLA_IPTUN_ENCAP_DPORT] = { .type = NLA_U16 }, |
| [IFLA_IPTUN_COLLECT_METADATA] = { .type = NLA_FLAG }, |
| [IFLA_IPTUN_FWMARK] = { .type = NLA_U32 }, |
| }; |
| |
| static struct rtnl_link_ops ipip_link_ops __read_mostly = { |
| .kind = "ipip", |
| .maxtype = IFLA_IPTUN_MAX, |
| .policy = ipip_policy, |
| .priv_size = sizeof(struct ip_tunnel), |
| .setup = ipip_tunnel_setup, |
| .validate = ipip_tunnel_validate, |
| .newlink = ipip_newlink, |
| .changelink = ipip_changelink, |
| .dellink = ip_tunnel_dellink, |
| .get_size = ipip_get_size, |
| .fill_info = ipip_fill_info, |
| .get_link_net = ip_tunnel_get_link_net, |
| }; |
| |
| static struct xfrm_tunnel ipip_handler __read_mostly = { |
| .handler = ipip_rcv, |
| .err_handler = ipip_err, |
| .priority = 1, |
| }; |
| |
| #if IS_ENABLED(CONFIG_MPLS) |
| static struct xfrm_tunnel mplsip_handler __read_mostly = { |
| .handler = mplsip_rcv, |
| .err_handler = ipip_err, |
| .priority = 1, |
| }; |
| #endif |
| |
| static int __net_init ipip_init_net(struct net *net) |
| { |
| return ip_tunnel_init_net(net, ipip_net_id, &ipip_link_ops, "tunl0"); |
| } |
| |
| static void __net_exit ipip_exit_batch_net(struct list_head *list_net) |
| { |
| ip_tunnel_delete_nets(list_net, ipip_net_id, &ipip_link_ops); |
| } |
| |
| static struct pernet_operations ipip_net_ops = { |
| .init = ipip_init_net, |
| .exit_batch = ipip_exit_batch_net, |
| .id = &ipip_net_id, |
| .size = sizeof(struct ip_tunnel_net), |
| }; |
| |
| static int __init ipip_init(void) |
| { |
| int err; |
| |
| pr_info("ipip: IPv4 and MPLS over IPv4 tunneling driver\n"); |
| |
| err = register_pernet_device(&ipip_net_ops); |
| if (err < 0) |
| return err; |
| err = xfrm4_tunnel_register(&ipip_handler, AF_INET); |
| if (err < 0) { |
| pr_info("%s: can't register tunnel\n", __func__); |
| goto xfrm_tunnel_ipip_failed; |
| } |
| #if IS_ENABLED(CONFIG_MPLS) |
| err = xfrm4_tunnel_register(&mplsip_handler, AF_MPLS); |
| if (err < 0) { |
| pr_info("%s: can't register tunnel\n", __func__); |
| goto xfrm_tunnel_mplsip_failed; |
| } |
| #endif |
| err = rtnl_link_register(&ipip_link_ops); |
| if (err < 0) |
| goto rtnl_link_failed; |
| |
| out: |
| return err; |
| |
| rtnl_link_failed: |
| #if IS_ENABLED(CONFIG_MPLS) |
| xfrm4_tunnel_deregister(&mplsip_handler, AF_MPLS); |
| xfrm_tunnel_mplsip_failed: |
| |
| #endif |
| xfrm4_tunnel_deregister(&ipip_handler, AF_INET); |
| xfrm_tunnel_ipip_failed: |
| unregister_pernet_device(&ipip_net_ops); |
| goto out; |
| } |
| |
| static void __exit ipip_fini(void) |
| { |
| rtnl_link_unregister(&ipip_link_ops); |
| if (xfrm4_tunnel_deregister(&ipip_handler, AF_INET)) |
| pr_info("%s: can't deregister tunnel\n", __func__); |
| #if IS_ENABLED(CONFIG_MPLS) |
| if (xfrm4_tunnel_deregister(&mplsip_handler, AF_MPLS)) |
| pr_info("%s: can't deregister tunnel\n", __func__); |
| #endif |
| unregister_pernet_device(&ipip_net_ops); |
| } |
| |
| module_init(ipip_init); |
| module_exit(ipip_fini); |
| MODULE_LICENSE("GPL"); |
| MODULE_ALIAS_RTNL_LINK("ipip"); |
| MODULE_ALIAS_NETDEV("tunl0"); |