2015-08-14 03:59:10 +07:00
|
|
|
/*
|
|
|
|
* vrf.c: device driver to encapsulate a VRF space
|
|
|
|
*
|
|
|
|
* Copyright (c) 2015 Cumulus Networks. All rights reserved.
|
|
|
|
* Copyright (c) 2015 Shrijeet Mukherjee <shm@cumulusnetworks.com>
|
|
|
|
* Copyright (c) 2015 David Ahern <dsa@cumulusnetworks.com>
|
|
|
|
*
|
|
|
|
* Based on dummy, team and ipvlan drivers
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU General Public License as published by
|
|
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
|
|
* (at your option) any later version.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include <linux/module.h>
|
|
|
|
#include <linux/kernel.h>
|
|
|
|
#include <linux/netdevice.h>
|
|
|
|
#include <linux/etherdevice.h>
|
|
|
|
#include <linux/ip.h>
|
|
|
|
#include <linux/init.h>
|
|
|
|
#include <linux/moduleparam.h>
|
|
|
|
#include <linux/netfilter.h>
|
|
|
|
#include <linux/rtnetlink.h>
|
|
|
|
#include <net/rtnetlink.h>
|
|
|
|
#include <linux/u64_stats_sync.h>
|
|
|
|
#include <linux/hashtable.h>
|
|
|
|
|
|
|
|
#include <linux/inetdevice.h>
|
net: Add ethernet header for pass through VRF device
The change to use a custom dst broke tcpdump captures on the VRF device:
$ tcpdump -n -i vrf10
...
05:32:29.009362 IP 10.2.1.254 > 10.2.1.2: ICMP echo request, id 21989, seq 1, length 64
05:32:29.009855 00:00:40:01:8d:36 > 45:00:00:54:d6:6f, ethertype Unknown (0x0a02), length 84:
0x0000: 0102 0a02 01fe 0000 9181 55e5 0001 bd11 ..........U.....
0x0010: da55 0000 0000 bb5d 0700 0000 0000 1011 .U.....]........
0x0020: 1213 1415 1617 1819 1a1b 1c1d 1e1f 2021 ...............!
0x0030: 2223 2425 2627 2829 2a2b 2c2d 2e2f 3031 "#$%&'()*+,-./01
0x0040: 3233 3435 3637 234567
Local packets going through the VRF device are missing an ethernet header.
Fix by adding one and then stripping it off before pushing back to the IP
stack. With this patch you get the expected dumps:
...
05:36:15.713944 IP 10.2.1.254 > 10.2.1.2: ICMP echo request, id 23795, seq 1, length 64
05:36:15.714160 IP 10.2.1.2 > 10.2.1.254: ICMP echo reply, id 23795, seq 1, length 64
...
Signed-off-by: David Ahern <dsa@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-08-28 00:10:50 +07:00
|
|
|
#include <net/arp.h>
|
2015-08-14 03:59:10 +07:00
|
|
|
#include <net/ip.h>
|
|
|
|
#include <net/ip_fib.h>
|
2015-10-13 01:47:09 +07:00
|
|
|
#include <net/ip6_fib.h>
|
2015-08-14 03:59:10 +07:00
|
|
|
#include <net/ip6_route.h>
|
|
|
|
#include <net/route.h>
|
|
|
|
#include <net/addrconf.h>
|
2015-09-30 10:07:12 +07:00
|
|
|
#include <net/l3mdev.h>
|
2015-08-14 03:59:10 +07:00
|
|
|
|
2015-10-05 22:51:26 +07:00
|
|
|
#define RT_FL_TOS(oldflp4) \
|
|
|
|
((oldflp4)->flowi4_tos & (IPTOS_RT_MASK | RTO_ONLINK))
|
|
|
|
|
2015-08-14 03:59:10 +07:00
|
|
|
#define DRV_NAME "vrf"
|
|
|
|
#define DRV_VERSION "1.0"
|
|
|
|
|
|
|
|
#define vrf_master_get_rcu(dev) \
|
|
|
|
((struct net_device *)rcu_dereference(dev->rx_handler_data))
|
|
|
|
|
2015-09-30 10:07:17 +07:00
|
|
|
struct net_vrf {
|
|
|
|
struct rtable *rth;
|
2015-10-13 01:47:09 +07:00
|
|
|
struct rt6_info *rt6;
|
2015-09-30 10:07:17 +07:00
|
|
|
u32 tb_id;
|
|
|
|
};
|
|
|
|
|
2015-08-14 03:59:10 +07:00
|
|
|
struct pcpu_dstats {
|
|
|
|
u64 tx_pkts;
|
|
|
|
u64 tx_bytes;
|
|
|
|
u64 tx_drps;
|
|
|
|
u64 rx_pkts;
|
|
|
|
u64 rx_bytes;
|
|
|
|
struct u64_stats_sync syncp;
|
|
|
|
};
|
|
|
|
|
2015-10-13 01:47:09 +07:00
|
|
|
/* neighbor handling is done with actual device; do not want
|
|
|
|
* to flip skb->dev for those ndisc packets. This really fails
|
|
|
|
* for multiple next protocols (e.g., NEXTHDR_HOP). But it is
|
|
|
|
* a start.
|
|
|
|
*/
|
|
|
|
#if IS_ENABLED(CONFIG_IPV6)
|
|
|
|
static bool check_ipv6_frame(const struct sk_buff *skb)
|
|
|
|
{
|
2016-02-24 01:10:26 +07:00
|
|
|
const struct ipv6hdr *ipv6h;
|
|
|
|
struct ipv6hdr _ipv6h;
|
2015-10-13 01:47:09 +07:00
|
|
|
bool rc = true;
|
|
|
|
|
2016-02-24 01:10:26 +07:00
|
|
|
ipv6h = skb_header_pointer(skb, 0, sizeof(_ipv6h), &_ipv6h);
|
|
|
|
if (!ipv6h)
|
2015-10-13 01:47:09 +07:00
|
|
|
goto out;
|
|
|
|
|
|
|
|
if (ipv6h->nexthdr == NEXTHDR_ICMP) {
|
|
|
|
const struct icmp6hdr *icmph;
|
2016-02-24 01:10:26 +07:00
|
|
|
struct icmp6hdr _icmph;
|
2015-10-13 01:47:09 +07:00
|
|
|
|
2016-02-24 01:10:26 +07:00
|
|
|
icmph = skb_header_pointer(skb, sizeof(_ipv6h),
|
|
|
|
sizeof(_icmph), &_icmph);
|
|
|
|
if (!icmph)
|
2015-10-13 01:47:09 +07:00
|
|
|
goto out;
|
|
|
|
|
|
|
|
switch (icmph->icmp6_type) {
|
|
|
|
case NDISC_ROUTER_SOLICITATION:
|
|
|
|
case NDISC_ROUTER_ADVERTISEMENT:
|
|
|
|
case NDISC_NEIGHBOUR_SOLICITATION:
|
|
|
|
case NDISC_NEIGHBOUR_ADVERTISEMENT:
|
|
|
|
case NDISC_REDIRECT:
|
|
|
|
rc = false;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
out:
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
#else
|
|
|
|
static bool check_ipv6_frame(const struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
2015-08-14 03:59:10 +07:00
|
|
|
static bool is_ip_rx_frame(struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
switch (skb->protocol) {
|
|
|
|
case htons(ETH_P_IP):
|
|
|
|
return true;
|
2015-10-13 01:47:09 +07:00
|
|
|
case htons(ETH_P_IPV6):
|
|
|
|
return check_ipv6_frame(skb);
|
2015-08-14 03:59:10 +07:00
|
|
|
}
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
2015-08-19 10:12:29 +07:00
|
|
|
static void vrf_tx_error(struct net_device *vrf_dev, struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
vrf_dev->stats.tx_errors++;
|
|
|
|
kfree_skb(skb);
|
|
|
|
}
|
|
|
|
|
2015-08-14 03:59:10 +07:00
|
|
|
/* note: already called with rcu_read_lock */
|
|
|
|
static rx_handler_result_t vrf_handle_frame(struct sk_buff **pskb)
|
|
|
|
{
|
|
|
|
struct sk_buff *skb = *pskb;
|
|
|
|
|
|
|
|
if (is_ip_rx_frame(skb)) {
|
|
|
|
struct net_device *dev = vrf_master_get_rcu(skb->dev);
|
|
|
|
struct pcpu_dstats *dstats = this_cpu_ptr(dev->dstats);
|
|
|
|
|
|
|
|
u64_stats_update_begin(&dstats->syncp);
|
|
|
|
dstats->rx_pkts++;
|
|
|
|
dstats->rx_bytes += skb->len;
|
|
|
|
u64_stats_update_end(&dstats->syncp);
|
|
|
|
|
|
|
|
skb->dev = dev;
|
|
|
|
|
|
|
|
return RX_HANDLER_ANOTHER;
|
|
|
|
}
|
|
|
|
return RX_HANDLER_PASS;
|
|
|
|
}
|
|
|
|
|
|
|
|
static struct rtnl_link_stats64 *vrf_get_stats64(struct net_device *dev,
|
|
|
|
struct rtnl_link_stats64 *stats)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
|
|
|
for_each_possible_cpu(i) {
|
|
|
|
const struct pcpu_dstats *dstats;
|
|
|
|
u64 tbytes, tpkts, tdrops, rbytes, rpkts;
|
|
|
|
unsigned int start;
|
|
|
|
|
|
|
|
dstats = per_cpu_ptr(dev->dstats, i);
|
|
|
|
do {
|
|
|
|
start = u64_stats_fetch_begin_irq(&dstats->syncp);
|
|
|
|
tbytes = dstats->tx_bytes;
|
|
|
|
tpkts = dstats->tx_pkts;
|
|
|
|
tdrops = dstats->tx_drps;
|
|
|
|
rbytes = dstats->rx_bytes;
|
|
|
|
rpkts = dstats->rx_pkts;
|
|
|
|
} while (u64_stats_fetch_retry_irq(&dstats->syncp, start));
|
|
|
|
stats->tx_bytes += tbytes;
|
|
|
|
stats->tx_packets += tpkts;
|
|
|
|
stats->tx_dropped += tdrops;
|
|
|
|
stats->rx_bytes += rbytes;
|
|
|
|
stats->rx_packets += rpkts;
|
|
|
|
}
|
|
|
|
return stats;
|
|
|
|
}
|
|
|
|
|
2015-10-13 01:47:09 +07:00
|
|
|
#if IS_ENABLED(CONFIG_IPV6)
|
|
|
|
static netdev_tx_t vrf_process_v6_outbound(struct sk_buff *skb,
|
|
|
|
struct net_device *dev)
|
|
|
|
{
|
|
|
|
const struct ipv6hdr *iph = ipv6_hdr(skb);
|
|
|
|
struct net *net = dev_net(skb->dev);
|
|
|
|
struct flowi6 fl6 = {
|
|
|
|
/* needed to match OIF rule */
|
|
|
|
.flowi6_oif = dev->ifindex,
|
|
|
|
.flowi6_iif = LOOPBACK_IFINDEX,
|
|
|
|
.daddr = iph->daddr,
|
|
|
|
.saddr = iph->saddr,
|
|
|
|
.flowlabel = ip6_flowinfo(iph),
|
|
|
|
.flowi6_mark = skb->mark,
|
|
|
|
.flowi6_proto = iph->nexthdr,
|
|
|
|
.flowi6_flags = FLOWI_FLAG_L3MDEV_SRC | FLOWI_FLAG_SKIP_NH_OIF,
|
|
|
|
};
|
|
|
|
int ret = NET_XMIT_DROP;
|
|
|
|
struct dst_entry *dst;
|
|
|
|
struct dst_entry *dst_null = &net->ipv6.ip6_null_entry->dst;
|
|
|
|
|
|
|
|
dst = ip6_route_output(net, NULL, &fl6);
|
|
|
|
if (dst == dst_null)
|
|
|
|
goto err;
|
|
|
|
|
|
|
|
skb_dst_drop(skb);
|
|
|
|
skb_dst_set(skb, dst);
|
|
|
|
|
|
|
|
ret = ip6_local_out(net, skb->sk, skb);
|
|
|
|
if (unlikely(net_xmit_eval(ret)))
|
|
|
|
dev->stats.tx_errors++;
|
|
|
|
else
|
|
|
|
ret = NET_XMIT_SUCCESS;
|
|
|
|
|
|
|
|
return ret;
|
|
|
|
err:
|
|
|
|
vrf_tx_error(dev, skb);
|
|
|
|
return NET_XMIT_DROP;
|
|
|
|
}
|
|
|
|
#else
|
2015-08-14 03:59:10 +07:00
|
|
|
static netdev_tx_t vrf_process_v6_outbound(struct sk_buff *skb,
|
|
|
|
struct net_device *dev)
|
|
|
|
{
|
2015-08-19 10:12:29 +07:00
|
|
|
vrf_tx_error(dev, skb);
|
|
|
|
return NET_XMIT_DROP;
|
2015-08-14 03:59:10 +07:00
|
|
|
}
|
2015-10-13 01:47:09 +07:00
|
|
|
#endif
|
2015-08-14 03:59:10 +07:00
|
|
|
|
|
|
|
static int vrf_send_v4_prep(struct sk_buff *skb, struct flowi4 *fl4,
|
|
|
|
struct net_device *vrf_dev)
|
|
|
|
{
|
|
|
|
struct rtable *rt;
|
|
|
|
int err = 1;
|
|
|
|
|
|
|
|
rt = ip_route_output_flow(dev_net(vrf_dev), fl4, NULL);
|
|
|
|
if (IS_ERR(rt))
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
/* TO-DO: what about broadcast ? */
|
|
|
|
if (rt->rt_type != RTN_UNICAST && rt->rt_type != RTN_LOCAL) {
|
|
|
|
ip_rt_put(rt);
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
skb_dst_drop(skb);
|
|
|
|
skb_dst_set(skb, &rt->dst);
|
|
|
|
err = 0;
|
|
|
|
out:
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
static netdev_tx_t vrf_process_v4_outbound(struct sk_buff *skb,
|
|
|
|
struct net_device *vrf_dev)
|
|
|
|
{
|
|
|
|
struct iphdr *ip4h = ip_hdr(skb);
|
|
|
|
int ret = NET_XMIT_DROP;
|
|
|
|
struct flowi4 fl4 = {
|
|
|
|
/* needed to match OIF rule */
|
|
|
|
.flowi4_oif = vrf_dev->ifindex,
|
|
|
|
.flowi4_iif = LOOPBACK_IFINDEX,
|
|
|
|
.flowi4_tos = RT_TOS(ip4h->tos),
|
2015-10-05 22:51:23 +07:00
|
|
|
.flowi4_flags = FLOWI_FLAG_ANYSRC | FLOWI_FLAG_L3MDEV_SRC |
|
2015-09-16 05:10:50 +07:00
|
|
|
FLOWI_FLAG_SKIP_NH_OIF,
|
2015-08-14 03:59:10 +07:00
|
|
|
.daddr = ip4h->daddr,
|
|
|
|
};
|
|
|
|
|
|
|
|
if (vrf_send_v4_prep(skb, &fl4, vrf_dev))
|
|
|
|
goto err;
|
|
|
|
|
|
|
|
if (!ip4h->saddr) {
|
|
|
|
ip4h->saddr = inet_select_addr(skb_dst(skb)->dev, 0,
|
|
|
|
RT_SCOPE_LINK);
|
|
|
|
}
|
|
|
|
|
2015-10-08 04:48:46 +07:00
|
|
|
ret = ip_local_out(dev_net(skb_dst(skb)->dev), skb->sk, skb);
|
2015-08-14 03:59:10 +07:00
|
|
|
if (unlikely(net_xmit_eval(ret)))
|
|
|
|
vrf_dev->stats.tx_errors++;
|
|
|
|
else
|
|
|
|
ret = NET_XMIT_SUCCESS;
|
|
|
|
|
|
|
|
out:
|
|
|
|
return ret;
|
|
|
|
err:
|
2015-08-19 10:12:29 +07:00
|
|
|
vrf_tx_error(vrf_dev, skb);
|
2015-08-14 03:59:10 +07:00
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
static netdev_tx_t is_ip_tx_frame(struct sk_buff *skb, struct net_device *dev)
|
|
|
|
{
|
net: Add ethernet header for pass through VRF device
The change to use a custom dst broke tcpdump captures on the VRF device:
$ tcpdump -n -i vrf10
...
05:32:29.009362 IP 10.2.1.254 > 10.2.1.2: ICMP echo request, id 21989, seq 1, length 64
05:32:29.009855 00:00:40:01:8d:36 > 45:00:00:54:d6:6f, ethertype Unknown (0x0a02), length 84:
0x0000: 0102 0a02 01fe 0000 9181 55e5 0001 bd11 ..........U.....
0x0010: da55 0000 0000 bb5d 0700 0000 0000 1011 .U.....]........
0x0020: 1213 1415 1617 1819 1a1b 1c1d 1e1f 2021 ...............!
0x0030: 2223 2425 2627 2829 2a2b 2c2d 2e2f 3031 "#$%&'()*+,-./01
0x0040: 3233 3435 3637 234567
Local packets going through the VRF device are missing an ethernet header.
Fix by adding one and then stripping it off before pushing back to the IP
stack. With this patch you get the expected dumps:
...
05:36:15.713944 IP 10.2.1.254 > 10.2.1.2: ICMP echo request, id 23795, seq 1, length 64
05:36:15.714160 IP 10.2.1.2 > 10.2.1.254: ICMP echo reply, id 23795, seq 1, length 64
...
Signed-off-by: David Ahern <dsa@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-08-28 00:10:50 +07:00
|
|
|
/* strip the ethernet header added for pass through VRF device */
|
|
|
|
__skb_pull(skb, skb_network_offset(skb));
|
|
|
|
|
2015-08-14 03:59:10 +07:00
|
|
|
switch (skb->protocol) {
|
|
|
|
case htons(ETH_P_IP):
|
|
|
|
return vrf_process_v4_outbound(skb, dev);
|
|
|
|
case htons(ETH_P_IPV6):
|
|
|
|
return vrf_process_v6_outbound(skb, dev);
|
|
|
|
default:
|
2015-08-19 10:12:29 +07:00
|
|
|
vrf_tx_error(dev, skb);
|
2015-08-14 03:59:10 +07:00
|
|
|
return NET_XMIT_DROP;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static netdev_tx_t vrf_xmit(struct sk_buff *skb, struct net_device *dev)
|
|
|
|
{
|
|
|
|
netdev_tx_t ret = is_ip_tx_frame(skb, dev);
|
|
|
|
|
|
|
|
if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN)) {
|
|
|
|
struct pcpu_dstats *dstats = this_cpu_ptr(dev->dstats);
|
|
|
|
|
|
|
|
u64_stats_update_begin(&dstats->syncp);
|
|
|
|
dstats->tx_pkts++;
|
|
|
|
dstats->tx_bytes += skb->len;
|
|
|
|
u64_stats_update_end(&dstats->syncp);
|
|
|
|
} else {
|
|
|
|
this_cpu_inc(dev->dstats->tx_drps);
|
|
|
|
}
|
|
|
|
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2015-10-13 01:47:09 +07:00
|
|
|
#if IS_ENABLED(CONFIG_IPV6)
|
|
|
|
/* modelled after ip6_finish_output2 */
|
|
|
|
static int vrf_finish_output6(struct net *net, struct sock *sk,
|
|
|
|
struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
struct dst_entry *dst = skb_dst(skb);
|
|
|
|
struct net_device *dev = dst->dev;
|
|
|
|
struct neighbour *neigh;
|
|
|
|
struct in6_addr *nexthop;
|
|
|
|
int ret;
|
|
|
|
|
|
|
|
skb->protocol = htons(ETH_P_IPV6);
|
|
|
|
skb->dev = dev;
|
|
|
|
|
|
|
|
rcu_read_lock_bh();
|
|
|
|
nexthop = rt6_nexthop((struct rt6_info *)dst, &ipv6_hdr(skb)->daddr);
|
|
|
|
neigh = __ipv6_neigh_lookup_noref(dst->dev, nexthop);
|
|
|
|
if (unlikely(!neigh))
|
|
|
|
neigh = __neigh_create(&nd_tbl, nexthop, dst->dev, false);
|
|
|
|
if (!IS_ERR(neigh)) {
|
|
|
|
ret = dst_neigh_output(dst, neigh, skb);
|
|
|
|
rcu_read_unlock_bh();
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
rcu_read_unlock_bh();
|
|
|
|
|
|
|
|
IP6_INC_STATS(dev_net(dst->dev),
|
|
|
|
ip6_dst_idev(dst), IPSTATS_MIB_OUTNOROUTES);
|
|
|
|
kfree_skb(skb);
|
|
|
|
return -EINVAL;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* modelled after ip6_output */
|
|
|
|
static int vrf_output6(struct net *net, struct sock *sk, struct sk_buff *skb)
|
|
|
|
{
|
|
|
|
return NF_HOOK_COND(NFPROTO_IPV6, NF_INET_POST_ROUTING,
|
|
|
|
net, sk, skb, NULL, skb_dst(skb)->dev,
|
|
|
|
vrf_finish_output6,
|
|
|
|
!(IP6CB(skb)->flags & IP6SKB_REROUTED));
|
|
|
|
}
|
|
|
|
|
2016-04-08 01:10:06 +07:00
|
|
|
static void vrf_rt6_release(struct net_vrf *vrf)
|
2015-10-13 01:47:09 +07:00
|
|
|
{
|
2016-04-08 01:10:06 +07:00
|
|
|
dst_release(&vrf->rt6->dst);
|
2015-10-13 01:47:09 +07:00
|
|
|
vrf->rt6 = NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int vrf_rt6_create(struct net_device *dev)
|
|
|
|
{
|
|
|
|
struct net_vrf *vrf = netdev_priv(dev);
|
2016-04-08 01:10:06 +07:00
|
|
|
struct net *net = dev_net(dev);
|
2016-05-05 11:46:12 +07:00
|
|
|
struct fib6_table *rt6i_table;
|
2015-10-13 01:47:09 +07:00
|
|
|
struct rt6_info *rt6;
|
|
|
|
int rc = -ENOMEM;
|
|
|
|
|
2016-05-05 11:46:12 +07:00
|
|
|
rt6i_table = fib6_new_table(net, vrf->tb_id);
|
|
|
|
if (!rt6i_table)
|
|
|
|
goto out;
|
|
|
|
|
2016-04-08 01:10:06 +07:00
|
|
|
rt6 = ip6_dst_alloc(net, dev,
|
|
|
|
DST_HOST | DST_NOPOLICY | DST_NOXFRM | DST_NOCACHE);
|
2015-10-13 01:47:09 +07:00
|
|
|
if (!rt6)
|
|
|
|
goto out;
|
|
|
|
|
2016-04-08 01:10:06 +07:00
|
|
|
dst_hold(&rt6->dst);
|
2016-05-05 11:46:12 +07:00
|
|
|
|
|
|
|
rt6->rt6i_table = rt6i_table;
|
|
|
|
rt6->dst.output = vrf_output6;
|
2015-10-13 01:47:09 +07:00
|
|
|
vrf->rt6 = rt6;
|
|
|
|
rc = 0;
|
|
|
|
out:
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
#else
|
2016-04-08 01:10:06 +07:00
|
|
|
static void vrf_rt6_release(struct net_vrf *vrf)
|
2015-10-13 01:47:09 +07:00
|
|
|
{
|
|
|
|
}
|
|
|
|
|
|
|
|
static int vrf_rt6_create(struct net_device *dev)
|
|
|
|
{
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
net: Add ethernet header for pass through VRF device
The change to use a custom dst broke tcpdump captures on the VRF device:
$ tcpdump -n -i vrf10
...
05:32:29.009362 IP 10.2.1.254 > 10.2.1.2: ICMP echo request, id 21989, seq 1, length 64
05:32:29.009855 00:00:40:01:8d:36 > 45:00:00:54:d6:6f, ethertype Unknown (0x0a02), length 84:
0x0000: 0102 0a02 01fe 0000 9181 55e5 0001 bd11 ..........U.....
0x0010: da55 0000 0000 bb5d 0700 0000 0000 1011 .U.....]........
0x0020: 1213 1415 1617 1819 1a1b 1c1d 1e1f 2021 ...............!
0x0030: 2223 2425 2627 2829 2a2b 2c2d 2e2f 3031 "#$%&'()*+,-./01
0x0040: 3233 3435 3637 234567
Local packets going through the VRF device are missing an ethernet header.
Fix by adding one and then stripping it off before pushing back to the IP
stack. With this patch you get the expected dumps:
...
05:36:15.713944 IP 10.2.1.254 > 10.2.1.2: ICMP echo request, id 23795, seq 1, length 64
05:36:15.714160 IP 10.2.1.2 > 10.2.1.254: ICMP echo reply, id 23795, seq 1, length 64
...
Signed-off-by: David Ahern <dsa@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-08-28 00:10:50 +07:00
|
|
|
/* modelled after ip_finish_output2 */
|
2015-09-16 08:04:18 +07:00
|
|
|
static int vrf_finish_output(struct net *net, struct sock *sk, struct sk_buff *skb)
|
2015-08-14 03:59:10 +07:00
|
|
|
{
|
net: Add ethernet header for pass through VRF device
The change to use a custom dst broke tcpdump captures on the VRF device:
$ tcpdump -n -i vrf10
...
05:32:29.009362 IP 10.2.1.254 > 10.2.1.2: ICMP echo request, id 21989, seq 1, length 64
05:32:29.009855 00:00:40:01:8d:36 > 45:00:00:54:d6:6f, ethertype Unknown (0x0a02), length 84:
0x0000: 0102 0a02 01fe 0000 9181 55e5 0001 bd11 ..........U.....
0x0010: da55 0000 0000 bb5d 0700 0000 0000 1011 .U.....]........
0x0020: 1213 1415 1617 1819 1a1b 1c1d 1e1f 2021 ...............!
0x0030: 2223 2425 2627 2829 2a2b 2c2d 2e2f 3031 "#$%&'()*+,-./01
0x0040: 3233 3435 3637 234567
Local packets going through the VRF device are missing an ethernet header.
Fix by adding one and then stripping it off before pushing back to the IP
stack. With this patch you get the expected dumps:
...
05:36:15.713944 IP 10.2.1.254 > 10.2.1.2: ICMP echo request, id 23795, seq 1, length 64
05:36:15.714160 IP 10.2.1.2 > 10.2.1.254: ICMP echo reply, id 23795, seq 1, length 64
...
Signed-off-by: David Ahern <dsa@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-08-28 00:10:50 +07:00
|
|
|
struct dst_entry *dst = skb_dst(skb);
|
|
|
|
struct rtable *rt = (struct rtable *)dst;
|
|
|
|
struct net_device *dev = dst->dev;
|
|
|
|
unsigned int hh_len = LL_RESERVED_SPACE(dev);
|
|
|
|
struct neighbour *neigh;
|
|
|
|
u32 nexthop;
|
|
|
|
int ret = -EINVAL;
|
|
|
|
|
|
|
|
/* Be paranoid, rather than too clever. */
|
|
|
|
if (unlikely(skb_headroom(skb) < hh_len && dev->header_ops)) {
|
|
|
|
struct sk_buff *skb2;
|
|
|
|
|
|
|
|
skb2 = skb_realloc_headroom(skb, LL_RESERVED_SPACE(dev));
|
|
|
|
if (!skb2) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
if (skb->sk)
|
|
|
|
skb_set_owner_w(skb2, skb->sk);
|
|
|
|
|
|
|
|
consume_skb(skb);
|
|
|
|
skb = skb2;
|
|
|
|
}
|
|
|
|
|
|
|
|
rcu_read_lock_bh();
|
|
|
|
|
|
|
|
nexthop = (__force u32)rt_nexthop(rt, ip_hdr(skb)->daddr);
|
|
|
|
neigh = __ipv4_neigh_lookup_noref(dev, nexthop);
|
|
|
|
if (unlikely(!neigh))
|
|
|
|
neigh = __neigh_create(&arp_tbl, &nexthop, dev, false);
|
|
|
|
if (!IS_ERR(neigh))
|
|
|
|
ret = dst_neigh_output(dst, neigh, skb);
|
|
|
|
|
|
|
|
rcu_read_unlock_bh();
|
|
|
|
err:
|
|
|
|
if (unlikely(ret < 0))
|
|
|
|
vrf_tx_error(skb->dev, skb);
|
|
|
|
return ret;
|
2015-08-14 03:59:10 +07:00
|
|
|
}
|
|
|
|
|
2015-10-08 04:48:47 +07:00
|
|
|
static int vrf_output(struct net *net, struct sock *sk, struct sk_buff *skb)
|
2015-08-14 03:59:10 +07:00
|
|
|
{
|
|
|
|
struct net_device *dev = skb_dst(skb)->dev;
|
|
|
|
|
2015-09-16 08:04:16 +07:00
|
|
|
IP_UPD_PO_STATS(net, IPSTATS_MIB_OUT, skb->len);
|
2015-08-14 03:59:10 +07:00
|
|
|
|
|
|
|
skb->dev = dev;
|
|
|
|
skb->protocol = htons(ETH_P_IP);
|
|
|
|
|
2015-09-16 08:04:16 +07:00
|
|
|
return NF_HOOK_COND(NFPROTO_IPV4, NF_INET_POST_ROUTING,
|
|
|
|
net, sk, skb, NULL, dev,
|
net: Add ethernet header for pass through VRF device
The change to use a custom dst broke tcpdump captures on the VRF device:
$ tcpdump -n -i vrf10
...
05:32:29.009362 IP 10.2.1.254 > 10.2.1.2: ICMP echo request, id 21989, seq 1, length 64
05:32:29.009855 00:00:40:01:8d:36 > 45:00:00:54:d6:6f, ethertype Unknown (0x0a02), length 84:
0x0000: 0102 0a02 01fe 0000 9181 55e5 0001 bd11 ..........U.....
0x0010: da55 0000 0000 bb5d 0700 0000 0000 1011 .U.....]........
0x0020: 1213 1415 1617 1819 1a1b 1c1d 1e1f 2021 ...............!
0x0030: 2223 2425 2627 2829 2a2b 2c2d 2e2f 3031 "#$%&'()*+,-./01
0x0040: 3233 3435 3637 234567
Local packets going through the VRF device are missing an ethernet header.
Fix by adding one and then stripping it off before pushing back to the IP
stack. With this patch you get the expected dumps:
...
05:36:15.713944 IP 10.2.1.254 > 10.2.1.2: ICMP echo request, id 23795, seq 1, length 64
05:36:15.714160 IP 10.2.1.2 > 10.2.1.254: ICMP echo reply, id 23795, seq 1, length 64
...
Signed-off-by: David Ahern <dsa@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-08-28 00:10:50 +07:00
|
|
|
vrf_finish_output,
|
2015-08-14 03:59:10 +07:00
|
|
|
!(IPCB(skb)->flags & IPSKB_REROUTED));
|
|
|
|
}
|
|
|
|
|
2016-04-08 01:10:06 +07:00
|
|
|
static void vrf_rtable_release(struct net_vrf *vrf)
|
2015-08-14 03:59:10 +07:00
|
|
|
{
|
|
|
|
struct dst_entry *dst = (struct dst_entry *)vrf->rth;
|
|
|
|
|
2016-04-08 01:10:06 +07:00
|
|
|
dst_release(dst);
|
2015-08-14 03:59:10 +07:00
|
|
|
vrf->rth = NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static struct rtable *vrf_rtable_create(struct net_device *dev)
|
|
|
|
{
|
2015-09-03 03:58:35 +07:00
|
|
|
struct net_vrf *vrf = netdev_priv(dev);
|
2015-08-14 03:59:10 +07:00
|
|
|
struct rtable *rth;
|
|
|
|
|
2016-05-05 11:46:12 +07:00
|
|
|
if (!fib_new_table(dev_net(dev), vrf->tb_id))
|
|
|
|
return NULL;
|
|
|
|
|
2016-04-08 01:10:06 +07:00
|
|
|
rth = rt_dst_alloc(dev, 0, RTN_UNICAST, 1, 1, 0);
|
2015-08-14 03:59:10 +07:00
|
|
|
if (rth) {
|
|
|
|
rth->dst.output = vrf_output;
|
2015-09-03 03:58:35 +07:00
|
|
|
rth->rt_table_id = vrf->tb_id;
|
2015-08-14 03:59:10 +07:00
|
|
|
}
|
|
|
|
|
|
|
|
return rth;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**************************** device handling ********************/
|
|
|
|
|
|
|
|
/* cycle interface to flush neighbor cache and move routes across tables */
|
|
|
|
static void cycle_netdev(struct net_device *dev)
|
|
|
|
{
|
|
|
|
unsigned int flags = dev->flags;
|
|
|
|
int ret;
|
|
|
|
|
|
|
|
if (!netif_running(dev))
|
|
|
|
return;
|
|
|
|
|
|
|
|
ret = dev_change_flags(dev, flags & ~IFF_UP);
|
|
|
|
if (ret >= 0)
|
|
|
|
ret = dev_change_flags(dev, flags);
|
|
|
|
|
|
|
|
if (ret < 0) {
|
|
|
|
netdev_err(dev,
|
|
|
|
"Failed to cycle device %s; route tables might be wrong!\n",
|
|
|
|
dev->name);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static int do_vrf_add_slave(struct net_device *dev, struct net_device *port_dev)
|
|
|
|
{
|
2015-11-24 20:29:16 +07:00
|
|
|
int ret;
|
2015-08-14 03:59:10 +07:00
|
|
|
|
|
|
|
/* register the packet handler for slave ports */
|
|
|
|
ret = netdev_rx_handler_register(port_dev, vrf_handle_frame, dev);
|
|
|
|
if (ret) {
|
|
|
|
netdev_err(port_dev,
|
|
|
|
"Device %s failed to register rx_handler\n",
|
|
|
|
port_dev->name);
|
2015-08-19 10:27:09 +07:00
|
|
|
goto out_fail;
|
2015-08-14 03:59:10 +07:00
|
|
|
}
|
|
|
|
|
2015-12-03 18:12:11 +07:00
|
|
|
ret = netdev_master_upper_dev_link(port_dev, dev, NULL, NULL);
|
2015-08-14 03:59:10 +07:00
|
|
|
if (ret < 0)
|
|
|
|
goto out_unregister;
|
|
|
|
|
2015-10-05 22:51:24 +07:00
|
|
|
port_dev->priv_flags |= IFF_L3MDEV_SLAVE;
|
2015-08-14 03:59:10 +07:00
|
|
|
cycle_netdev(port_dev);
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
out_unregister:
|
|
|
|
netdev_rx_handler_unregister(port_dev);
|
|
|
|
out_fail:
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int vrf_add_slave(struct net_device *dev, struct net_device *port_dev)
|
|
|
|
{
|
2015-10-05 22:51:24 +07:00
|
|
|
if (netif_is_l3_master(port_dev) || netif_is_l3_slave(port_dev))
|
2015-08-14 03:59:10 +07:00
|
|
|
return -EINVAL;
|
|
|
|
|
|
|
|
return do_vrf_add_slave(dev, port_dev);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* inverse of do_vrf_add_slave */
|
|
|
|
static int do_vrf_del_slave(struct net_device *dev, struct net_device *port_dev)
|
|
|
|
{
|
|
|
|
netdev_upper_dev_unlink(port_dev, dev);
|
2015-10-05 22:51:24 +07:00
|
|
|
port_dev->priv_flags &= ~IFF_L3MDEV_SLAVE;
|
2015-08-14 03:59:10 +07:00
|
|
|
|
|
|
|
netdev_rx_handler_unregister(port_dev);
|
|
|
|
|
|
|
|
cycle_netdev(port_dev);
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int vrf_del_slave(struct net_device *dev, struct net_device *port_dev)
|
|
|
|
{
|
|
|
|
return do_vrf_del_slave(dev, port_dev);
|
|
|
|
}
|
|
|
|
|
|
|
|
static void vrf_dev_uninit(struct net_device *dev)
|
|
|
|
{
|
|
|
|
struct net_vrf *vrf = netdev_priv(dev);
|
2015-11-24 20:29:16 +07:00
|
|
|
struct net_device *port_dev;
|
|
|
|
struct list_head *iter;
|
2015-08-14 03:59:10 +07:00
|
|
|
|
2016-04-08 01:10:06 +07:00
|
|
|
vrf_rtable_release(vrf);
|
|
|
|
vrf_rt6_release(vrf);
|
2015-08-14 03:59:10 +07:00
|
|
|
|
2015-11-24 20:29:16 +07:00
|
|
|
netdev_for_each_lower_dev(dev, port_dev, iter)
|
|
|
|
vrf_del_slave(dev, port_dev);
|
2015-08-14 03:59:10 +07:00
|
|
|
|
2015-08-19 00:28:03 +07:00
|
|
|
free_percpu(dev->dstats);
|
2015-08-14 03:59:10 +07:00
|
|
|
dev->dstats = NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int vrf_dev_init(struct net_device *dev)
|
|
|
|
{
|
|
|
|
struct net_vrf *vrf = netdev_priv(dev);
|
|
|
|
|
|
|
|
dev->dstats = netdev_alloc_pcpu_stats(struct pcpu_dstats);
|
|
|
|
if (!dev->dstats)
|
|
|
|
goto out_nomem;
|
|
|
|
|
|
|
|
/* create the default dst which points back to us */
|
|
|
|
vrf->rth = vrf_rtable_create(dev);
|
|
|
|
if (!vrf->rth)
|
|
|
|
goto out_stats;
|
|
|
|
|
2015-10-13 01:47:09 +07:00
|
|
|
if (vrf_rt6_create(dev) != 0)
|
|
|
|
goto out_rth;
|
|
|
|
|
2015-08-14 03:59:10 +07:00
|
|
|
dev->flags = IFF_MASTER | IFF_NOARP;
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
|
2015-10-13 01:47:09 +07:00
|
|
|
out_rth:
|
2016-04-08 01:10:06 +07:00
|
|
|
vrf_rtable_release(vrf);
|
2015-08-14 03:59:10 +07:00
|
|
|
out_stats:
|
|
|
|
free_percpu(dev->dstats);
|
|
|
|
dev->dstats = NULL;
|
|
|
|
out_nomem:
|
|
|
|
return -ENOMEM;
|
|
|
|
}
|
|
|
|
|
|
|
|
static const struct net_device_ops vrf_netdev_ops = {
|
|
|
|
.ndo_init = vrf_dev_init,
|
|
|
|
.ndo_uninit = vrf_dev_uninit,
|
|
|
|
.ndo_start_xmit = vrf_xmit,
|
|
|
|
.ndo_get_stats64 = vrf_get_stats64,
|
|
|
|
.ndo_add_slave = vrf_add_slave,
|
|
|
|
.ndo_del_slave = vrf_del_slave,
|
|
|
|
};
|
|
|
|
|
2015-09-30 10:07:12 +07:00
|
|
|
static u32 vrf_fib_table(const struct net_device *dev)
|
|
|
|
{
|
|
|
|
struct net_vrf *vrf = netdev_priv(dev);
|
|
|
|
|
|
|
|
return vrf->tb_id;
|
|
|
|
}
|
|
|
|
|
|
|
|
static struct rtable *vrf_get_rtable(const struct net_device *dev,
|
|
|
|
const struct flowi4 *fl4)
|
|
|
|
{
|
|
|
|
struct rtable *rth = NULL;
|
|
|
|
|
2015-10-05 22:51:23 +07:00
|
|
|
if (!(fl4->flowi4_flags & FLOWI_FLAG_L3MDEV_SRC)) {
|
2015-09-30 10:07:12 +07:00
|
|
|
struct net_vrf *vrf = netdev_priv(dev);
|
|
|
|
|
|
|
|
rth = vrf->rth;
|
2016-04-08 01:10:06 +07:00
|
|
|
dst_hold(&rth->dst);
|
2015-09-30 10:07:12 +07:00
|
|
|
}
|
|
|
|
|
|
|
|
return rth;
|
|
|
|
}
|
|
|
|
|
2015-10-05 22:51:26 +07:00
|
|
|
/* called under rcu_read_lock */
|
2016-01-05 00:09:27 +07:00
|
|
|
static int vrf_get_saddr(struct net_device *dev, struct flowi4 *fl4)
|
2015-10-05 22:51:26 +07:00
|
|
|
{
|
|
|
|
struct fib_result res = { .tclassid = 0 };
|
|
|
|
struct net *net = dev_net(dev);
|
|
|
|
u32 orig_tos = fl4->flowi4_tos;
|
|
|
|
u8 flags = fl4->flowi4_flags;
|
|
|
|
u8 scope = fl4->flowi4_scope;
|
|
|
|
u8 tos = RT_FL_TOS(fl4);
|
2016-01-05 00:09:27 +07:00
|
|
|
int rc;
|
2015-10-05 22:51:26 +07:00
|
|
|
|
|
|
|
if (unlikely(!fl4->daddr))
|
2016-01-05 00:09:27 +07:00
|
|
|
return 0;
|
2015-10-05 22:51:26 +07:00
|
|
|
|
|
|
|
fl4->flowi4_flags |= FLOWI_FLAG_SKIP_NH_OIF;
|
|
|
|
fl4->flowi4_iif = LOOPBACK_IFINDEX;
|
|
|
|
fl4->flowi4_tos = tos & IPTOS_RT_MASK;
|
|
|
|
fl4->flowi4_scope = ((tos & RTO_ONLINK) ?
|
|
|
|
RT_SCOPE_LINK : RT_SCOPE_UNIVERSE);
|
|
|
|
|
2016-01-05 00:09:27 +07:00
|
|
|
rc = fib_lookup(net, fl4, &res, 0);
|
|
|
|
if (!rc) {
|
2015-10-05 22:51:26 +07:00
|
|
|
if (res.type == RTN_LOCAL)
|
|
|
|
fl4->saddr = res.fi->fib_prefsrc ? : fl4->daddr;
|
|
|
|
else
|
|
|
|
fib_select_path(net, &res, fl4, -1);
|
|
|
|
}
|
|
|
|
|
|
|
|
fl4->flowi4_flags = flags;
|
|
|
|
fl4->flowi4_tos = orig_tos;
|
|
|
|
fl4->flowi4_scope = scope;
|
2016-01-05 00:09:27 +07:00
|
|
|
|
|
|
|
return rc;
|
2015-10-05 22:51:26 +07:00
|
|
|
}
|
|
|
|
|
2015-10-13 01:47:09 +07:00
|
|
|
#if IS_ENABLED(CONFIG_IPV6)
|
|
|
|
static struct dst_entry *vrf_get_rt6_dst(const struct net_device *dev,
|
|
|
|
const struct flowi6 *fl6)
|
|
|
|
{
|
|
|
|
struct rt6_info *rt = NULL;
|
|
|
|
|
|
|
|
if (!(fl6->flowi6_flags & FLOWI_FLAG_L3MDEV_SRC)) {
|
|
|
|
struct net_vrf *vrf = netdev_priv(dev);
|
|
|
|
|
|
|
|
rt = vrf->rt6;
|
2016-04-08 01:10:06 +07:00
|
|
|
dst_hold(&rt->dst);
|
2015-10-13 01:47:09 +07:00
|
|
|
}
|
|
|
|
|
|
|
|
return (struct dst_entry *)rt;
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
2015-09-30 10:07:12 +07:00
|
|
|
static const struct l3mdev_ops vrf_l3mdev_ops = {
|
|
|
|
.l3mdev_fib_table = vrf_fib_table,
|
|
|
|
.l3mdev_get_rtable = vrf_get_rtable,
|
2015-10-05 22:51:26 +07:00
|
|
|
.l3mdev_get_saddr = vrf_get_saddr,
|
2015-10-13 01:47:09 +07:00
|
|
|
#if IS_ENABLED(CONFIG_IPV6)
|
|
|
|
.l3mdev_get_rt6_dst = vrf_get_rt6_dst,
|
|
|
|
#endif
|
2015-09-30 10:07:12 +07:00
|
|
|
};
|
|
|
|
|
2015-08-14 03:59:10 +07:00
|
|
|
static void vrf_get_drvinfo(struct net_device *dev,
|
|
|
|
struct ethtool_drvinfo *info)
|
|
|
|
{
|
|
|
|
strlcpy(info->driver, DRV_NAME, sizeof(info->driver));
|
|
|
|
strlcpy(info->version, DRV_VERSION, sizeof(info->version));
|
|
|
|
}
|
|
|
|
|
|
|
|
static const struct ethtool_ops vrf_ethtool_ops = {
|
|
|
|
.get_drvinfo = vrf_get_drvinfo,
|
|
|
|
};
|
|
|
|
|
|
|
|
static void vrf_setup(struct net_device *dev)
|
|
|
|
{
|
|
|
|
ether_setup(dev);
|
|
|
|
|
|
|
|
/* Initialize the device structure. */
|
|
|
|
dev->netdev_ops = &vrf_netdev_ops;
|
2015-09-30 10:07:12 +07:00
|
|
|
dev->l3mdev_ops = &vrf_l3mdev_ops;
|
2015-08-14 03:59:10 +07:00
|
|
|
dev->ethtool_ops = &vrf_ethtool_ops;
|
|
|
|
dev->destructor = free_netdev;
|
|
|
|
|
|
|
|
/* Fill in device structure with ethernet-generic values. */
|
|
|
|
eth_hw_addr_random(dev);
|
|
|
|
|
|
|
|
/* don't acquire vrf device's netif_tx_lock when transmitting */
|
|
|
|
dev->features |= NETIF_F_LLTX;
|
|
|
|
|
|
|
|
/* don't allow vrf devices to change network namespaces. */
|
|
|
|
dev->features |= NETIF_F_NETNS_LOCAL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int vrf_validate(struct nlattr *tb[], struct nlattr *data[])
|
|
|
|
{
|
|
|
|
if (tb[IFLA_ADDRESS]) {
|
|
|
|
if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
|
|
|
|
return -EINVAL;
|
|
|
|
if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
|
|
|
|
return -EADDRNOTAVAIL;
|
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void vrf_dellink(struct net_device *dev, struct list_head *head)
|
|
|
|
{
|
|
|
|
unregister_netdevice_queue(dev, head);
|
|
|
|
}
|
|
|
|
|
|
|
|
static int vrf_newlink(struct net *src_net, struct net_device *dev,
|
|
|
|
struct nlattr *tb[], struct nlattr *data[])
|
|
|
|
{
|
|
|
|
struct net_vrf *vrf = netdev_priv(dev);
|
|
|
|
|
|
|
|
if (!data || !data[IFLA_VRF_TABLE])
|
|
|
|
return -EINVAL;
|
|
|
|
|
|
|
|
vrf->tb_id = nla_get_u32(data[IFLA_VRF_TABLE]);
|
|
|
|
|
2015-09-30 10:07:10 +07:00
|
|
|
dev->priv_flags |= IFF_L3MDEV_MASTER;
|
2015-08-14 03:59:10 +07:00
|
|
|
|
2015-11-22 01:46:19 +07:00
|
|
|
return register_netdevice(dev);
|
2015-08-14 03:59:10 +07:00
|
|
|
}
|
|
|
|
|
|
|
|
static size_t vrf_nl_getsize(const struct net_device *dev)
|
|
|
|
{
|
|
|
|
return nla_total_size(sizeof(u32)); /* IFLA_VRF_TABLE */
|
|
|
|
}
|
|
|
|
|
|
|
|
static int vrf_fillinfo(struct sk_buff *skb,
|
|
|
|
const struct net_device *dev)
|
|
|
|
{
|
|
|
|
struct net_vrf *vrf = netdev_priv(dev);
|
|
|
|
|
|
|
|
return nla_put_u32(skb, IFLA_VRF_TABLE, vrf->tb_id);
|
|
|
|
}
|
|
|
|
|
2016-02-02 22:43:45 +07:00
|
|
|
static size_t vrf_get_slave_size(const struct net_device *bond_dev,
|
|
|
|
const struct net_device *slave_dev)
|
|
|
|
{
|
|
|
|
return nla_total_size(sizeof(u32)); /* IFLA_VRF_PORT_TABLE */
|
|
|
|
}
|
|
|
|
|
|
|
|
static int vrf_fill_slave_info(struct sk_buff *skb,
|
|
|
|
const struct net_device *vrf_dev,
|
|
|
|
const struct net_device *slave_dev)
|
|
|
|
{
|
|
|
|
struct net_vrf *vrf = netdev_priv(vrf_dev);
|
|
|
|
|
|
|
|
if (nla_put_u32(skb, IFLA_VRF_PORT_TABLE, vrf->tb_id))
|
|
|
|
return -EMSGSIZE;
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2015-08-14 03:59:10 +07:00
|
|
|
static const struct nla_policy vrf_nl_policy[IFLA_VRF_MAX + 1] = {
|
|
|
|
[IFLA_VRF_TABLE] = { .type = NLA_U32 },
|
|
|
|
};
|
|
|
|
|
|
|
|
static struct rtnl_link_ops vrf_link_ops __read_mostly = {
|
|
|
|
.kind = DRV_NAME,
|
|
|
|
.priv_size = sizeof(struct net_vrf),
|
|
|
|
|
|
|
|
.get_size = vrf_nl_getsize,
|
|
|
|
.policy = vrf_nl_policy,
|
|
|
|
.validate = vrf_validate,
|
|
|
|
.fill_info = vrf_fillinfo,
|
|
|
|
|
2016-02-02 22:43:45 +07:00
|
|
|
.get_slave_size = vrf_get_slave_size,
|
|
|
|
.fill_slave_info = vrf_fill_slave_info,
|
|
|
|
|
2015-08-14 03:59:10 +07:00
|
|
|
.newlink = vrf_newlink,
|
|
|
|
.dellink = vrf_dellink,
|
|
|
|
.setup = vrf_setup,
|
|
|
|
.maxtype = IFLA_VRF_MAX,
|
|
|
|
};
|
|
|
|
|
|
|
|
static int vrf_device_event(struct notifier_block *unused,
|
|
|
|
unsigned long event, void *ptr)
|
|
|
|
{
|
|
|
|
struct net_device *dev = netdev_notifier_info_to_dev(ptr);
|
|
|
|
|
|
|
|
/* only care about unregister events to drop slave references */
|
|
|
|
if (event == NETDEV_UNREGISTER) {
|
|
|
|
struct net_device *vrf_dev;
|
|
|
|
|
2015-10-05 22:51:24 +07:00
|
|
|
if (!netif_is_l3_slave(dev))
|
2015-08-14 03:59:10 +07:00
|
|
|
goto out;
|
|
|
|
|
2015-08-19 00:28:04 +07:00
|
|
|
vrf_dev = netdev_master_upper_dev_get(dev);
|
|
|
|
vrf_del_slave(vrf_dev, dev);
|
2015-08-14 03:59:10 +07:00
|
|
|
}
|
|
|
|
out:
|
|
|
|
return NOTIFY_DONE;
|
|
|
|
}
|
|
|
|
|
|
|
|
static struct notifier_block vrf_notifier_block __read_mostly = {
|
|
|
|
.notifier_call = vrf_device_event,
|
|
|
|
};
|
|
|
|
|
|
|
|
static int __init vrf_init_module(void)
|
|
|
|
{
|
|
|
|
int rc;
|
|
|
|
|
|
|
|
register_netdevice_notifier(&vrf_notifier_block);
|
|
|
|
|
|
|
|
rc = rtnl_link_register(&vrf_link_ops);
|
|
|
|
if (rc < 0)
|
|
|
|
goto error;
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
error:
|
|
|
|
unregister_netdevice_notifier(&vrf_notifier_block);
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
module_init(vrf_init_module);
|
|
|
|
MODULE_AUTHOR("Shrijeet Mukherjee, David Ahern");
|
|
|
|
MODULE_DESCRIPTION("Device driver to instantiate VRF domains");
|
|
|
|
MODULE_LICENSE("GPL");
|
|
|
|
MODULE_ALIAS_RTNL_LINK(DRV_NAME);
|
|
|
|
MODULE_VERSION(DRV_VERSION);
|