2 * netifd - network interface daemon
3 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2
7 * as published by the Free Software Foundation
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
19 #include <arpa/inet.h>
23 #include "interface.h"
24 #include "interface-ip.h"
39 static const struct blobmsg_policy route_attr[__ROUTE_MAX] = {
40 [ROUTE_INTERFACE] = { .name = "interface", .type = BLOBMSG_TYPE_STRING },
41 [ROUTE_TARGET] = { .name = "target", .type = BLOBMSG_TYPE_STRING },
42 [ROUTE_MASK] = { .name = "netmask", .type = BLOBMSG_TYPE_STRING },
43 [ROUTE_GATEWAY] = { .name = "gateway", .type = BLOBMSG_TYPE_STRING },
44 [ROUTE_METRIC] = { .name = "metric", .type = BLOBMSG_TYPE_INT32 },
45 [ROUTE_MTU] = { .name = "mtu", .type = BLOBMSG_TYPE_INT32 },
48 const struct config_param_list route_attr_list = {
49 .n_params = __ROUTE_MAX,
54 struct list_head prefixes = LIST_HEAD_INIT(prefixes);
55 static struct device_prefix *ula_prefix = NULL;
59 clear_if_addr(union if_addr *a, int mask)
61 int m_bytes = (mask + 7) / 8;
62 uint8_t m_clear = (1 << (m_bytes * 8 - mask)) - 1;
63 uint8_t *p = (uint8_t *) a;
65 if (m_bytes < sizeof(a))
66 memset(p + m_bytes, 0, sizeof(a) - m_bytes);
68 p[m_bytes - 1] &= ~m_clear;
72 match_if_addr(union if_addr *a1, union if_addr *a2, int mask)
74 union if_addr *p1, *p2;
76 p1 = alloca(sizeof(*a1));
77 p2 = alloca(sizeof(*a2));
79 memcpy(p1, a1, sizeof(*a1));
80 clear_if_addr(p1, mask);
81 memcpy(p2, a2, sizeof(*a2));
82 clear_if_addr(p2, mask);
84 return !memcmp(p1, p2, sizeof(*p1));
88 __find_ip_addr_target(struct interface_ip_settings *ip, union if_addr *a, bool v6)
90 struct device_addr *addr;
92 vlist_for_each_element(&ip->addr, addr, node) {
96 if (v6 != ((addr->flags & DEVADDR_FAMILY) == DEVADDR_INET6))
99 if (!match_if_addr(&addr->addr, a, addr->mask))
109 __find_ip_route_target(struct interface_ip_settings *ip, union if_addr *a,
110 bool v6, struct device_route **res)
112 struct device_route *route;
114 vlist_for_each_element(&ip->route, route, node) {
118 if (v6 != ((route->flags & DEVADDR_FAMILY) == DEVADDR_INET6))
121 if (!match_if_addr(&route->addr, a, route->mask))
124 if (!*res || route->mask < (*res)->mask)
130 interface_ip_find_addr_target(struct interface *iface, union if_addr *a, bool v6)
132 return __find_ip_addr_target(&iface->proto_ip, a, v6) ||
133 __find_ip_addr_target(&iface->config_ip, a, v6);
137 interface_ip_find_route_target(struct interface *iface, union if_addr *a,
138 bool v6, struct device_route **route)
140 __find_ip_route_target(&iface->proto_ip, a, v6, route);
141 __find_ip_route_target(&iface->config_ip, a, v6, route);
145 interface_ip_add_target_route(union if_addr *addr, bool v6)
147 struct interface *iface;
148 struct device_route *route, *r_next = NULL;
149 bool defaultroute_target = false;
150 int addrsize = v6 ? sizeof(addr->in6) : sizeof(addr->in);
152 route = calloc(1, sizeof(*route));
156 route->flags = v6 ? DEVADDR_INET6 : DEVADDR_INET4;
157 route->mask = v6 ? 128 : 32;
158 if (memcmp(&route->addr, addr, addrsize) == 0)
159 defaultroute_target = true;
161 memcpy(&route->addr, addr, addrsize);
163 vlist_for_each_element(&interfaces, iface, node) {
164 /* look for locally addressable target first */
165 if (interface_ip_find_addr_target(iface, addr, v6))
168 /* do not stop at the first route, let the lookup compare
169 * masks to find the best match */
170 interface_ip_find_route_target(iface, addr, v6, &r_next);
178 iface = r_next->iface;
179 memcpy(&route->nexthop, &r_next->nexthop, sizeof(route->nexthop));
180 route->mtu = r_next->mtu;
181 route->metric = r_next->metric;
184 route->iface = iface;
185 if (defaultroute_target)
188 vlist_add(&iface->host_routes, &route->node, &route->flags);
193 interface_ip_add_route(struct interface *iface, struct blob_attr *attr, bool v6)
195 struct interface_ip_settings *ip;
196 struct blob_attr *tb[__ROUTE_MAX], *cur;
197 struct device_route *route;
198 int af = v6 ? AF_INET6 : AF_INET;
200 blobmsg_parse(route_attr, __ROUTE_MAX, tb, blobmsg_data(attr), blobmsg_data_len(attr));
203 if ((cur = tb[ROUTE_INTERFACE]) == NULL)
206 iface = vlist_find(&interfaces, blobmsg_data(cur), iface, node);
210 ip = &iface->config_ip;
212 ip = &iface->proto_ip;
215 route = calloc(1, sizeof(*route));
219 route->flags = v6 ? DEVADDR_INET6 : DEVADDR_INET4;
220 route->mask = v6 ? 128 : 32;
221 if ((cur = tb[ROUTE_MASK]) != NULL) {
222 route->mask = parse_netmask_string(blobmsg_data(cur), v6);
223 if (route->mask > (v6 ? 128 : 32))
227 if ((cur = tb[ROUTE_TARGET]) != NULL) {
228 if (!parse_ip_and_netmask(af, blobmsg_data(cur), &route->addr, &route->mask)) {
229 DPRINTF("Failed to parse route target: %s\n", (char *) blobmsg_data(cur));
234 if ((cur = tb[ROUTE_GATEWAY]) != NULL) {
235 if (!inet_pton(af, blobmsg_data(cur), &route->nexthop)) {
236 DPRINTF("Failed to parse route gateway: %s\n", (char *) blobmsg_data(cur));
241 if ((cur = tb[ROUTE_METRIC]) != NULL) {
242 route->metric = blobmsg_get_u32(cur);
243 route->flags |= DEVROUTE_METRIC;
246 if ((cur = tb[ROUTE_MTU]) != NULL) {
247 route->mtu = blobmsg_get_u32(cur);
248 route->flags |= DEVROUTE_MTU;
251 vlist_add(&ip->route, &route->node, &route->flags);
259 addr_cmp(const void *k1, const void *k2, void *ptr)
261 return memcmp(k1, k2, sizeof(struct device_addr) -
262 offsetof(struct device_addr, flags));
266 route_cmp(const void *k1, const void *k2, void *ptr)
268 return memcmp(k1, k2, sizeof(struct device_route) -
269 offsetof(struct device_route, flags));
273 prefix_cmp(const void *k1, const void *k2, void *ptr)
275 return memcmp(k1, k2, sizeof(struct device_prefix) -
276 offsetof(struct device_prefix, addr));
280 interface_handle_subnet_route(struct interface *iface, struct device_addr *addr, bool add)
282 struct device *dev = iface->l3_dev.dev;
283 struct device_route route;
285 memset(&route, 0, sizeof(route));
287 route.flags = addr->flags;
288 route.mask = addr->mask;
289 memcpy(&route.addr, &addr->addr, sizeof(route.addr));
290 clear_if_addr(&route.addr, route.mask);
293 route.flags |= DEVADDR_KERNEL;
294 system_del_route(dev, &route);
296 route.flags &= ~DEVADDR_KERNEL;
297 route.metric = iface->metric;
298 system_add_route(dev, &route);
300 system_del_route(dev, &route);
305 interface_update_proto_addr(struct vlist_tree *tree,
306 struct vlist_node *node_new,
307 struct vlist_node *node_old)
309 struct interface_ip_settings *ip;
310 struct interface *iface;
312 struct device_addr *a_new = NULL, *a_old = NULL;
315 ip = container_of(tree, struct interface_ip_settings, addr);
317 dev = iface->l3_dev.dev;
320 a_new = container_of(node_new, struct device_addr, node);
322 if ((a_new->flags & DEVADDR_FAMILY) == DEVADDR_INET4 &&
326 uint32_t *a = (uint32_t *) &a_new->addr;
328 mask >>= a_new->mask;
329 a_new->broadcast = *a | htonl(mask);
334 a_old = container_of(node_old, struct device_addr, node);
336 if (a_new && a_old) {
339 if (a_old->flags != a_new->flags)
342 if ((a_new->flags & DEVADDR_FAMILY) == DEVADDR_INET4 &&
343 a_new->broadcast != a_old->broadcast)
348 if (!(a_old->flags & DEVADDR_EXTERNAL) && a_old->enabled && !keep) {
349 interface_handle_subnet_route(iface, a_old, false);
350 system_del_address(dev, a_old);
356 a_new->enabled = true;
357 if (!(a_new->flags & DEVADDR_EXTERNAL) && !keep) {
358 system_add_address(dev, a_new);
360 interface_handle_subnet_route(iface, a_new, true);
366 enable_route(struct interface_ip_settings *ip, struct device_route *route)
368 if (ip->no_defaultroute && !route->mask)
375 interface_update_proto_route(struct vlist_tree *tree,
376 struct vlist_node *node_new,
377 struct vlist_node *node_old)
379 struct interface_ip_settings *ip;
380 struct interface *iface;
382 struct device_route *route_old, *route_new;
385 ip = container_of(tree, struct interface_ip_settings, route);
387 dev = iface->l3_dev.dev;
389 route_old = container_of(node_old, struct device_route, node);
390 route_new = container_of(node_new, struct device_route, node);
392 if (node_old && node_new)
393 keep = !memcmp(&route_old->nexthop, &route_new->nexthop, sizeof(route_old->nexthop));
396 if (!(route_old->flags & DEVADDR_EXTERNAL) && route_old->enabled && !keep)
397 system_del_route(dev, route_old);
402 bool _enabled = enable_route(ip, route_new);
404 if (!(route_new->flags & DEVROUTE_METRIC))
405 route_new->metric = iface->metric;
407 if (!(route_new->flags & DEVADDR_EXTERNAL) && !keep && _enabled)
408 system_add_route(dev, route_new);
410 route_new->iface = iface;
411 route_new->enabled = _enabled;
416 interface_update_host_route(struct vlist_tree *tree,
417 struct vlist_node *node_new,
418 struct vlist_node *node_old)
420 struct interface *iface;
422 struct device_route *route_old, *route_new;
424 iface = container_of(tree, struct interface, host_routes);
425 dev = iface->l3_dev.dev;
427 route_old = container_of(node_old, struct device_route, node);
428 route_new = container_of(node_new, struct device_route, node);
431 system_del_route(dev, route_old);
436 system_add_route(dev, route_new);
441 interface_set_prefix_address(struct interface *iface, bool add,
442 struct device_prefix_assignment *assignment)
444 struct interface *uplink = assignment->prefix->iface;
445 if (!iface->l3_dev.dev)
448 struct device *l3_downlink = iface->l3_dev.dev;
450 struct device_addr addr;
451 memset(&addr, 0, sizeof(addr));
452 addr.addr.in6 = assignment->addr;
453 addr.mask = assignment->length;
454 addr.flags = DEVADDR_INET6;
455 addr.preferred_until = assignment->prefix->preferred_until;
456 addr.valid_until = assignment->prefix->valid_until;
459 if (assignment->enabled)
460 system_del_address(l3_downlink, &addr);
462 system_add_address(l3_downlink, &addr);
464 if (uplink && uplink->l3_dev.dev) {
465 int mtu = system_update_ipv6_mtu(
466 uplink->l3_dev.dev, 0);
468 system_update_ipv6_mtu(l3_downlink, mtu);
471 assignment->enabled = add;
476 interface_update_prefix_assignments(struct vlist_tree *tree,
477 struct vlist_node *node_new,
478 struct vlist_node *node_old)
480 struct device_prefix_assignment *old, *new;
481 old = container_of(node_old, struct device_prefix_assignment, node);
482 new = container_of(node_new, struct device_prefix_assignment, node);
484 // Assignments persist across interface reloads etc.
485 // so use indirection to avoid dangling pointers
486 struct interface *iface = vlist_find(&interfaces,
487 (node_new) ? new->name : old->name, iface, node);
489 if (node_old && node_new) {
490 new->addr = old->addr;
491 new->length = old->length;
492 } else if (node_old) {
494 interface_set_prefix_address(iface, false, old);
497 } else if (node_new) {
498 struct device_prefix *prefix = new->prefix;
499 uint64_t want = 1ULL << (64 - new->length);
500 prefix->avail &= ~(want - 1);
501 prefix->avail -= want;
504 uint64_t assigned = ~prefix->avail;
505 assigned &= (1ULL << (64 - prefix->length)) - 1;
506 assigned &= ~(want - 1);
509 new->addr = prefix->addr;
510 new->addr.s6_addr32[0] |=
511 htonl(assigned >> 32);
512 new->addr.s6_addr32[1] |=
513 htonl(assigned & 0xffffffffU);
514 new->addr.s6_addr[15] += 1;
517 if (node_new && (iface->state == IFS_UP || iface->state == IFS_SETUP))
518 interface_set_prefix_address(iface, true, new);
523 interface_ip_set_prefix_assignment(struct device_prefix *prefix,
524 struct interface *iface, uint8_t length)
526 if (!length || length > 64) {
527 struct device_prefix_assignment *assignment = vlist_find(
528 prefix->assignments, &iface, assignment, node);
530 interface_set_prefix_address(iface, false, assignment);
532 uint8_t length = iface->proto_ip.assignment_length;
533 uint64_t want = 1ULL << (64 - length);
534 if (prefix->avail < want && prefix->avail > 0) {
536 want = 1ULL << (64 - ++length);
537 } while (want > prefix->avail);
540 if (prefix->avail < want)
544 struct device_prefix_assignment *assignment = calloc(1, sizeof(*assignment));
545 assignment->prefix = prefix;
546 assignment->length = length;
547 assignment->name = strdup(iface->name);
549 vlist_add(prefix->assignments, &assignment->node, assignment->name);
554 interface_update_prefix(struct vlist_tree *tree,
555 struct vlist_node *node_new,
556 struct vlist_node *node_old)
558 struct device_prefix *prefix_old, *prefix_new;
559 prefix_old = container_of(node_old, struct device_prefix, node);
560 prefix_new = container_of(node_new, struct device_prefix, node);
562 struct device_route route;
563 memset(&route, 0, sizeof(route));
564 route.flags = DEVADDR_INET6;
565 route.metric = INT32_MAX;
566 route.mask = (node_new) ? prefix_new->length : prefix_old->length;
567 route.addr.in6 = (node_new) ? prefix_new->addr : prefix_old->addr;
569 if (node_old && node_new) {
570 prefix_new->avail = prefix_old->avail;
571 prefix_new->assignments = prefix_old->assignments;
572 prefix_old->assignments = NULL;
574 // Update all assignments
575 struct device_prefix_assignment *assignment;
576 struct vlist_tree *assignments = prefix_new->assignments;
577 vlist_for_each_element(assignments, assignment, node)
578 assignments->update(assignments,
579 &assignment->node, &assignment->node);
580 } else if (node_new) {
581 prefix_new->avail = 1ULL << (64 - prefix_new->length);
582 prefix_new->assignments = calloc(1, sizeof(*prefix_new->assignments));
583 vlist_init(prefix_new->assignments, avl_strcmp,
584 interface_update_prefix_assignments);
586 // Create initial assignments for interfaces
587 struct interface *iface;
588 vlist_for_each_element(&interfaces, iface, node)
589 interface_ip_set_prefix_assignment(prefix_new, iface,
590 iface->proto_ip.assignment_length);
592 list_add(&prefix_new->head, &prefixes);
594 // Set null-route to avoid routing loops
595 system_add_route(NULL, &route);
600 system_del_route(NULL, &route);
602 list_del(&prefix_old->head);
604 if (prefix_old->assignments) {
605 vlist_flush_all(prefix_old->assignments);
606 free(prefix_old->assignments);
613 interface_ip_add_device_prefix(struct interface *iface, struct in6_addr *addr,
614 uint8_t length, time_t valid_until, time_t preferred_until)
616 struct device_prefix *prefix = calloc(1, sizeof(*prefix));
617 prefix->length = length;
618 prefix->addr = *addr;
619 prefix->preferred_until = preferred_until;
620 prefix->valid_until = valid_until;
621 prefix->iface = iface;
624 vlist_add(&iface->proto_ip.prefix, &prefix->node, &prefix->addr);
626 interface_update_prefix(NULL, &prefix->node, NULL);
630 interface_ip_set_ula_prefix(const char *prefix)
632 char buf[INET6_ADDRSTRLEN + 4] = {0}, *saveptr;
633 strncpy(buf, prefix, sizeof(buf) - 1);
634 char *prefixaddr = strtok_r(buf, "/", &saveptr);
636 struct in6_addr addr;
637 if (!prefixaddr || inet_pton(AF_INET6, prefixaddr, &addr) < 1)
641 char *prefixlen = strtok_r(NULL, ",", &saveptr);
642 if (!prefixlen || (length = atoi(prefixlen)) < 1 || length > 64)
645 if (ula_prefix && (!IN6_ARE_ADDR_EQUAL(&addr, &ula_prefix->addr) ||
646 ula_prefix->length != length)) {
647 interface_update_prefix(NULL, NULL, &ula_prefix->node);
651 interface_ip_add_device_prefix(NULL, &addr, length, 0, 0);
655 interface_add_dns_server(struct interface_ip_settings *ip, const char *str)
657 struct dns_server *s;
659 s = calloc(1, sizeof(*s));
664 if (inet_pton(s->af, str, &s->addr.in))
668 if (inet_pton(s->af, str, &s->addr.in))
675 D(INTERFACE, "Add IPv%c DNS server: %s\n",
676 s->af == AF_INET6 ? '6' : '4', str);
677 vlist_simple_add(&ip->dns_servers, &s->node);
681 interface_add_dns_server_list(struct interface_ip_settings *ip, struct blob_attr *list)
683 struct blob_attr *cur;
686 blobmsg_for_each_attr(cur, list, rem) {
687 if (blobmsg_type(cur) != BLOBMSG_TYPE_STRING)
690 if (!blobmsg_check_attr(cur, NULL))
693 interface_add_dns_server(ip, blobmsg_data(cur));
698 interface_add_dns_search_domain(struct interface_ip_settings *ip, const char *str)
700 struct dns_search_domain *s;
701 int len = strlen(str);
703 s = calloc(1, sizeof(*s) + len + 1);
707 D(INTERFACE, "Add DNS search domain: %s\n", str);
708 memcpy(s->name, str, len);
709 vlist_simple_add(&ip->dns_search, &s->node);
713 interface_add_dns_search_list(struct interface_ip_settings *ip, struct blob_attr *list)
715 struct blob_attr *cur;
718 blobmsg_for_each_attr(cur, list, rem) {
719 if (blobmsg_type(cur) != BLOBMSG_TYPE_STRING)
722 if (!blobmsg_check_attr(cur, NULL))
725 interface_add_dns_search_domain(ip, blobmsg_data(cur));
730 write_resolv_conf_entries(FILE *f, struct interface_ip_settings *ip)
732 struct dns_server *s;
733 struct dns_search_domain *d;
737 vlist_simple_for_each_element(&ip->dns_servers, s, node) {
738 str = inet_ntop(s->af, &s->addr, buf, sizeof(buf));
742 fprintf(f, "nameserver %s\n", str);
745 vlist_simple_for_each_element(&ip->dns_search, d, node) {
746 fprintf(f, "search %s\n", d->name);
751 interface_write_resolv_conf(void)
753 struct interface *iface;
754 char *path = alloca(strlen(resolv_conf) + 5);
757 sprintf(path, "%s.tmp", resolv_conf);
759 f = fopen(path, "w");
761 D(INTERFACE, "Failed to open %s for writing\n", path);
765 vlist_for_each_element(&interfaces, iface, node) {
766 if (iface->state != IFS_UP)
769 if (vlist_simple_empty(&iface->proto_ip.dns_search) &&
770 vlist_simple_empty(&iface->proto_ip.dns_servers) &&
771 vlist_simple_empty(&iface->config_ip.dns_search) &&
772 vlist_simple_empty(&iface->config_ip.dns_servers))
775 fprintf(f, "# Interface %s\n", iface->name);
776 write_resolv_conf_entries(f, &iface->config_ip);
777 if (!iface->proto_ip.no_dns)
778 write_resolv_conf_entries(f, &iface->proto_ip);
781 if (rename(path, resolv_conf) < 0) {
782 D(INTERFACE, "Failed to replace %s\n", resolv_conf);
787 void interface_ip_set_enabled(struct interface_ip_settings *ip, bool enabled)
789 struct device_addr *addr;
790 struct device_route *route;
793 ip->enabled = enabled;
794 dev = ip->iface->l3_dev.dev;
798 vlist_for_each_element(&ip->addr, addr, node) {
799 if (addr->enabled == enabled)
803 system_add_address(dev, addr);
805 system_del_address(dev, addr);
806 addr->enabled = enabled;
809 vlist_for_each_element(&ip->route, route, node) {
810 bool _enabled = enabled;
812 if (!enable_route(ip, route))
815 if (route->enabled == _enabled)
819 if (!(route->flags & DEVROUTE_METRIC))
820 route->metric = ip->iface->metric;
822 system_add_route(dev, route);
824 system_del_route(dev, route);
825 route->enabled = _enabled;
830 interface_ip_update_start(struct interface_ip_settings *ip)
832 if (ip != &ip->iface->config_ip) {
833 vlist_simple_update(&ip->dns_servers);
834 vlist_simple_update(&ip->dns_search);
836 vlist_update(&ip->route);
837 vlist_update(&ip->addr);
838 vlist_update(&ip->prefix);
842 interface_ip_update_complete(struct interface_ip_settings *ip)
844 vlist_simple_flush(&ip->dns_servers);
845 vlist_simple_flush(&ip->dns_search);
846 vlist_flush(&ip->route);
847 vlist_flush(&ip->addr);
848 vlist_flush(&ip->prefix);
849 interface_write_resolv_conf();
853 interface_ip_flush(struct interface_ip_settings *ip)
855 if (ip == &ip->iface->proto_ip)
856 vlist_flush_all(&ip->iface->host_routes);
857 vlist_simple_flush_all(&ip->dns_servers);
858 vlist_simple_flush_all(&ip->dns_search);
859 vlist_flush_all(&ip->route);
860 vlist_flush_all(&ip->addr);
861 vlist_flush_all(&ip->prefix);
865 __interface_ip_init(struct interface_ip_settings *ip, struct interface *iface)
869 vlist_simple_init(&ip->dns_search, struct dns_search_domain, node);
870 vlist_simple_init(&ip->dns_servers, struct dns_server, node);
871 vlist_init(&ip->route, route_cmp, interface_update_proto_route);
872 vlist_init(&ip->addr, addr_cmp, interface_update_proto_addr);
873 vlist_init(&ip->prefix, prefix_cmp, interface_update_prefix);
877 interface_ip_init(struct interface *iface)
879 __interface_ip_init(&iface->proto_ip, iface);
880 __interface_ip_init(&iface->config_ip, iface);
881 vlist_init(&iface->host_routes, route_cmp, interface_update_host_route);