2 * netifd - network interface daemon
3 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2
7 * as published by the Free Software Foundation
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
19 #include <arpa/inet.h>
23 #include "interface.h"
24 #include "interface-ip.h"
39 static const struct blobmsg_policy route_attr[__ROUTE_MAX] = {
40 [ROUTE_INTERFACE] = { .name = "interface", .type = BLOBMSG_TYPE_STRING },
41 [ROUTE_TARGET] = { .name = "target", .type = BLOBMSG_TYPE_STRING },
42 [ROUTE_MASK] = { .name = "netmask", .type = BLOBMSG_TYPE_STRING },
43 [ROUTE_GATEWAY] = { .name = "gateway", .type = BLOBMSG_TYPE_STRING },
44 [ROUTE_METRIC] = { .name = "metric", .type = BLOBMSG_TYPE_INT32 },
45 [ROUTE_MTU] = { .name = "mtu", .type = BLOBMSG_TYPE_INT32 },
48 const struct config_param_list route_attr_list = {
49 .n_params = __ROUTE_MAX,
54 struct list_head prefixes = LIST_HEAD_INIT(prefixes);
55 static struct device_prefix *ula_prefix = NULL;
59 clear_if_addr(union if_addr *a, int mask)
61 int m_bytes = (mask + 7) / 8;
62 uint8_t m_clear = (1 << (m_bytes * 8 - mask)) - 1;
63 uint8_t *p = (uint8_t *) a;
65 if (m_bytes < sizeof(a))
66 memset(p + m_bytes, 0, sizeof(a) - m_bytes);
68 p[m_bytes - 1] &= ~m_clear;
72 match_if_addr(union if_addr *a1, union if_addr *a2, int mask)
74 union if_addr *p1, *p2;
76 p1 = alloca(sizeof(*a1));
77 p2 = alloca(sizeof(*a2));
79 memcpy(p1, a1, sizeof(*a1));
80 clear_if_addr(p1, mask);
81 memcpy(p2, a2, sizeof(*a2));
82 clear_if_addr(p2, mask);
84 return !memcmp(p1, p2, sizeof(*p1));
88 __find_ip_addr_target(struct interface_ip_settings *ip, union if_addr *a, bool v6)
90 struct device_addr *addr;
92 vlist_for_each_element(&ip->addr, addr, node) {
96 if (v6 != ((addr->flags & DEVADDR_FAMILY) == DEVADDR_INET6))
99 if (!match_if_addr(&addr->addr, a, addr->mask))
109 __find_ip_route_target(struct interface_ip_settings *ip, union if_addr *a,
110 bool v6, struct device_route **res)
112 struct device_route *route;
114 vlist_for_each_element(&ip->route, route, node) {
118 if (v6 != ((route->flags & DEVADDR_FAMILY) == DEVADDR_INET6))
121 if (!match_if_addr(&route->addr, a, route->mask))
124 if (!*res || route->mask < (*res)->mask)
130 interface_ip_find_addr_target(struct interface *iface, union if_addr *a, bool v6)
132 return __find_ip_addr_target(&iface->proto_ip, a, v6) ||
133 __find_ip_addr_target(&iface->config_ip, a, v6);
137 interface_ip_find_route_target(struct interface *iface, union if_addr *a,
138 bool v6, struct device_route **route)
140 __find_ip_route_target(&iface->proto_ip, a, v6, route);
141 __find_ip_route_target(&iface->config_ip, a, v6, route);
145 interface_ip_add_target_route(union if_addr *addr, bool v6)
147 struct interface *iface;
148 struct device_route *route, *r_next = NULL;
149 bool defaultroute_target = false;
150 int addrsize = v6 ? sizeof(addr->in6) : sizeof(addr->in);
152 route = calloc(1, sizeof(*route));
156 route->flags = v6 ? DEVADDR_INET6 : DEVADDR_INET4;
157 route->mask = v6 ? 128 : 32;
158 if (memcmp(&route->addr, addr, addrsize) == 0)
159 defaultroute_target = true;
161 memcpy(&route->addr, addr, addrsize);
163 vlist_for_each_element(&interfaces, iface, node) {
164 /* look for locally addressable target first */
165 if (interface_ip_find_addr_target(iface, addr, v6))
168 /* do not stop at the first route, let the lookup compare
169 * masks to find the best match */
170 interface_ip_find_route_target(iface, addr, v6, &r_next);
178 iface = r_next->iface;
179 memcpy(&route->nexthop, &r_next->nexthop, sizeof(route->nexthop));
180 route->mtu = r_next->mtu;
181 route->metric = r_next->metric;
184 route->iface = iface;
185 if (defaultroute_target)
188 vlist_add(&iface->host_routes, &route->node, &route->flags);
193 interface_ip_add_route(struct interface *iface, struct blob_attr *attr, bool v6)
195 struct interface_ip_settings *ip;
196 struct blob_attr *tb[__ROUTE_MAX], *cur;
197 struct device_route *route;
198 int af = v6 ? AF_INET6 : AF_INET;
200 blobmsg_parse(route_attr, __ROUTE_MAX, tb, blobmsg_data(attr), blobmsg_data_len(attr));
203 if ((cur = tb[ROUTE_INTERFACE]) == NULL)
206 iface = vlist_find(&interfaces, blobmsg_data(cur), iface, node);
210 ip = &iface->config_ip;
212 ip = &iface->proto_ip;
215 route = calloc(1, sizeof(*route));
219 route->flags = v6 ? DEVADDR_INET6 : DEVADDR_INET4;
220 route->mask = v6 ? 128 : 32;
221 if ((cur = tb[ROUTE_MASK]) != NULL) {
222 route->mask = parse_netmask_string(blobmsg_data(cur), v6);
223 if (route->mask > (v6 ? 128 : 32))
227 if ((cur = tb[ROUTE_TARGET]) != NULL) {
228 if (!parse_ip_and_netmask(af, blobmsg_data(cur), &route->addr, &route->mask)) {
229 DPRINTF("Failed to parse route target: %s\n", (char *) blobmsg_data(cur));
234 if ((cur = tb[ROUTE_GATEWAY]) != NULL) {
235 if (!inet_pton(af, blobmsg_data(cur), &route->nexthop)) {
236 DPRINTF("Failed to parse route gateway: %s\n", (char *) blobmsg_data(cur));
241 if ((cur = tb[ROUTE_METRIC]) != NULL) {
242 route->metric = blobmsg_get_u32(cur);
243 route->flags |= DEVROUTE_METRIC;
246 if ((cur = tb[ROUTE_MTU]) != NULL) {
247 route->mtu = blobmsg_get_u32(cur);
248 route->flags |= DEVROUTE_MTU;
251 vlist_add(&ip->route, &route->node, &route->flags);
259 addr_cmp(const void *k1, const void *k2, void *ptr)
261 return memcmp(k1, k2, sizeof(struct device_addr) -
262 offsetof(struct device_addr, flags));
266 route_cmp(const void *k1, const void *k2, void *ptr)
268 return memcmp(k1, k2, sizeof(struct device_route) -
269 offsetof(struct device_route, flags));
273 prefix_cmp(const void *k1, const void *k2, void *ptr)
275 return memcmp(k1, k2, sizeof(struct device_prefix) -
276 offsetof(struct device_prefix, addr));
280 interface_handle_subnet_route(struct interface *iface, struct device_addr *addr, bool add)
282 struct device *dev = iface->l3_dev.dev;
283 struct device_route route;
285 memset(&route, 0, sizeof(route));
287 route.flags = addr->flags;
288 route.mask = addr->mask;
289 memcpy(&route.addr, &addr->addr, sizeof(route.addr));
290 clear_if_addr(&route.addr, route.mask);
293 route.flags |= DEVADDR_KERNEL;
294 system_del_route(dev, &route);
296 route.flags &= ~DEVADDR_KERNEL;
297 route.metric = iface->metric;
298 system_add_route(dev, &route);
300 system_del_route(dev, &route);
305 interface_update_proto_addr(struct vlist_tree *tree,
306 struct vlist_node *node_new,
307 struct vlist_node *node_old)
309 struct interface_ip_settings *ip;
310 struct interface *iface;
312 struct device_addr *a_new = NULL, *a_old = NULL;
315 ip = container_of(tree, struct interface_ip_settings, addr);
317 dev = iface->l3_dev.dev;
320 a_new = container_of(node_new, struct device_addr, node);
322 if ((a_new->flags & DEVADDR_FAMILY) == DEVADDR_INET4 &&
326 uint32_t *a = (uint32_t *) &a_new->addr;
328 mask >>= a_new->mask;
329 a_new->broadcast = *a | htonl(mask);
334 a_old = container_of(node_old, struct device_addr, node);
336 if (a_new && a_old) {
339 if (a_old->flags != a_new->flags)
342 if ((a_new->flags & DEVADDR_FAMILY) == DEVADDR_INET4 &&
343 a_new->broadcast != a_old->broadcast)
348 if (!(a_old->flags & DEVADDR_EXTERNAL) && a_old->enabled && !keep) {
349 interface_handle_subnet_route(iface, a_old, false);
350 system_del_address(dev, a_old);
356 a_new->enabled = true;
357 if (!(a_new->flags & DEVADDR_EXTERNAL) && !keep) {
358 system_add_address(dev, a_new);
360 interface_handle_subnet_route(iface, a_new, true);
366 enable_route(struct interface_ip_settings *ip, struct device_route *route)
368 if (ip->no_defaultroute && !route->mask)
375 interface_update_proto_route(struct vlist_tree *tree,
376 struct vlist_node *node_new,
377 struct vlist_node *node_old)
379 struct interface_ip_settings *ip;
380 struct interface *iface;
382 struct device_route *route_old, *route_new;
385 ip = container_of(tree, struct interface_ip_settings, route);
387 dev = iface->l3_dev.dev;
389 route_old = container_of(node_old, struct device_route, node);
390 route_new = container_of(node_new, struct device_route, node);
392 if (node_old && node_new)
393 keep = !memcmp(&route_old->nexthop, &route_new->nexthop, sizeof(route_old->nexthop));
396 if (!(route_old->flags & DEVADDR_EXTERNAL) && route_old->enabled && !keep)
397 system_del_route(dev, route_old);
402 bool _enabled = enable_route(ip, route_new);
404 if (!(route_new->flags & DEVROUTE_METRIC))
405 route_new->metric = iface->metric;
407 if (!(route_new->flags & DEVADDR_EXTERNAL) && !keep && _enabled)
408 system_add_route(dev, route_new);
410 route_new->iface = iface;
411 route_new->enabled = _enabled;
416 interface_update_host_route(struct vlist_tree *tree,
417 struct vlist_node *node_new,
418 struct vlist_node *node_old)
420 struct interface *iface;
422 struct device_route *route_old, *route_new;
424 iface = container_of(tree, struct interface, host_routes);
425 dev = iface->l3_dev.dev;
427 route_old = container_of(node_old, struct device_route, node);
428 route_new = container_of(node_new, struct device_route, node);
431 system_del_route(dev, route_old);
436 system_add_route(dev, route_new);
441 interface_set_prefix_address(struct interface *iface, bool add,
442 struct device_prefix_assignment *assignment)
444 struct interface *uplink = assignment->prefix->iface;
445 if (!iface->l3_dev.dev)
448 struct device *l3_downlink = iface->l3_dev.dev;
450 struct device_addr addr;
451 memset(&addr, 0, sizeof(addr));
452 addr.addr.in6 = assignment->addr;
453 addr.mask = assignment->length;
454 addr.flags = DEVADDR_INET6;
455 addr.preferred_until = assignment->prefix->preferred_until;
456 addr.valid_until = assignment->prefix->valid_until;
459 if (assignment->enabled) {
460 time_t now = system_get_rtime();
461 addr.preferred_until = now;
462 if (!addr.valid_until || addr.valid_until - now > 7200)
463 addr.valid_until = now + 7200;
464 system_add_address(l3_downlink, &addr);
467 system_add_address(l3_downlink, &addr);
469 if (uplink && uplink->l3_dev.dev) {
470 int mtu = system_update_ipv6_mtu(
471 uplink->l3_dev.dev, 0);
473 system_update_ipv6_mtu(l3_downlink, mtu);
476 assignment->enabled = add;
481 interface_update_prefix_assignments(struct vlist_tree *tree,
482 struct vlist_node *node_new,
483 struct vlist_node *node_old)
485 struct device_prefix_assignment *old, *new;
486 old = container_of(node_old, struct device_prefix_assignment, node);
487 new = container_of(node_new, struct device_prefix_assignment, node);
489 // Assignments persist across interface reloads etc.
490 // so use indirection to avoid dangling pointers
491 struct interface *iface = vlist_find(&interfaces,
492 (node_new) ? new->name : old->name, iface, node);
494 if (node_old && node_new) {
495 new->addr = old->addr;
496 new->length = old->length;
497 } else if (node_old) {
499 interface_set_prefix_address(iface, false, old);
501 } else if (node_new) {
502 struct device_prefix *prefix = new->prefix;
503 uint64_t want = 1ULL << (64 - new->length);
504 prefix->avail &= ~(want - 1);
505 prefix->avail -= want;
508 uint64_t assigned = ~prefix->avail;
509 assigned &= (1ULL << (64 - prefix->length)) - 1;
510 assigned &= ~(want - 1);
513 new->addr = prefix->addr;
514 new->addr.s6_addr32[0] |=
515 htonl(assigned >> 32);
516 new->addr.s6_addr32[1] |=
517 htonl(assigned & 0xffffffffU);
518 new->addr.s6_addr[15] += 1;
521 if (node_new && (iface->state == IFS_UP || iface->state == IFS_SETUP))
522 interface_set_prefix_address(iface, true, new);
527 interface_ip_set_prefix_assignment(struct device_prefix *prefix,
528 struct interface *iface, uint8_t length)
530 struct device_prefix_assignment *assignment;
532 if (!length || length > 64) {
533 assignment = vlist_find(prefix->assignments, iface->name, assignment, node);
535 interface_set_prefix_address(iface, false, assignment);
537 uint64_t want = 1ULL << (64 - length);
540 if (prefix->avail < want && prefix->avail > 0) {
542 want = 1ULL << (64 - ++length);
543 } while (want > prefix->avail);
546 if (prefix->avail < want)
549 assignment = calloc_a(sizeof(*assignment),
550 &name, strlen(iface->name) + 1);
551 assignment->prefix = prefix;
552 assignment->length = length;
553 assignment->name = strcpy(name, iface->name);
555 vlist_add(prefix->assignments, &assignment->node, assignment->name);
560 interface_update_prefix(struct vlist_tree *tree,
561 struct vlist_node *node_new,
562 struct vlist_node *node_old)
564 struct device_prefix *prefix_old, *prefix_new;
565 prefix_old = container_of(node_old, struct device_prefix, node);
566 prefix_new = container_of(node_new, struct device_prefix, node);
568 struct device_route route;
569 memset(&route, 0, sizeof(route));
570 route.flags = DEVADDR_INET6;
571 route.metric = INT32_MAX;
572 route.mask = (node_new) ? prefix_new->length : prefix_old->length;
573 route.addr.in6 = (node_new) ? prefix_new->addr : prefix_old->addr;
575 if (node_old && node_new) {
576 prefix_new->avail = prefix_old->avail;
577 prefix_new->assignments = prefix_old->assignments;
578 prefix_old->assignments = NULL;
580 // Update all assignments
581 struct device_prefix_assignment *assignment;
582 struct vlist_tree *assignments = prefix_new->assignments;
583 vlist_for_each_element(assignments, assignment, node) {
584 assignment->prefix = prefix_new;
585 assignments->update(assignments,
586 &assignment->node, &assignment->node);
588 } else if (node_new) {
589 prefix_new->avail = 1ULL << (64 - prefix_new->length);
590 prefix_new->assignments = calloc(1, sizeof(*prefix_new->assignments));
591 vlist_init(prefix_new->assignments, avl_strcmp,
592 interface_update_prefix_assignments);
594 // Create initial assignments for interfaces
595 struct interface *iface;
596 vlist_for_each_element(&interfaces, iface, node)
597 interface_ip_set_prefix_assignment(prefix_new, iface,
598 iface->proto_ip.assignment_length);
600 // Set null-route to avoid routing loops
601 system_add_route(NULL, &route);
606 system_del_route(NULL, &route);
608 list_del(&prefix_old->head);
610 if (prefix_old->assignments) {
611 vlist_flush_all(prefix_old->assignments);
612 free(prefix_old->assignments);
618 list_add(&prefix_new->head, &prefixes);
622 interface_ip_add_device_prefix(struct interface *iface, struct in6_addr *addr,
623 uint8_t length, time_t valid_until, time_t preferred_until)
625 struct device_prefix *prefix = calloc(1, sizeof(*prefix));
626 prefix->length = length;
627 prefix->addr = *addr;
628 prefix->preferred_until = preferred_until;
629 prefix->valid_until = valid_until;
630 prefix->iface = iface;
633 vlist_add(&iface->proto_ip.prefix, &prefix->node, &prefix->addr);
635 interface_update_prefix(NULL, &prefix->node, NULL);
639 interface_ip_set_ula_prefix(const char *prefix)
641 char buf[INET6_ADDRSTRLEN + 4] = {0}, *saveptr;
643 strncpy(buf, prefix, sizeof(buf) - 1);
644 char *prefixaddr = strtok_r(buf, "/", &saveptr);
646 struct in6_addr addr;
647 if (!prefixaddr || inet_pton(AF_INET6, prefixaddr, &addr) < 1) {
649 interface_update_prefix(NULL, NULL, &ula_prefix->node);
656 char *prefixlen = strtok_r(NULL, ",", &saveptr);
657 if (!prefixlen || (length = atoi(prefixlen)) < 1 || length > 64)
660 if (ula_prefix && (!IN6_ARE_ADDR_EQUAL(&addr, &ula_prefix->addr) ||
661 ula_prefix->length != length)) {
662 interface_update_prefix(NULL, NULL, &ula_prefix->node);
666 interface_ip_add_device_prefix(NULL, &addr, length, 0, 0);
670 interface_add_dns_server(struct interface_ip_settings *ip, const char *str)
672 struct dns_server *s;
674 s = calloc(1, sizeof(*s));
679 if (inet_pton(s->af, str, &s->addr.in))
683 if (inet_pton(s->af, str, &s->addr.in))
690 D(INTERFACE, "Add IPv%c DNS server: %s\n",
691 s->af == AF_INET6 ? '6' : '4', str);
692 vlist_simple_add(&ip->dns_servers, &s->node);
696 interface_add_dns_server_list(struct interface_ip_settings *ip, struct blob_attr *list)
698 struct blob_attr *cur;
701 blobmsg_for_each_attr(cur, list, rem) {
702 if (blobmsg_type(cur) != BLOBMSG_TYPE_STRING)
705 if (!blobmsg_check_attr(cur, NULL))
708 interface_add_dns_server(ip, blobmsg_data(cur));
713 interface_add_dns_search_domain(struct interface_ip_settings *ip, const char *str)
715 struct dns_search_domain *s;
716 int len = strlen(str);
718 s = calloc(1, sizeof(*s) + len + 1);
722 D(INTERFACE, "Add DNS search domain: %s\n", str);
723 memcpy(s->name, str, len);
724 vlist_simple_add(&ip->dns_search, &s->node);
728 interface_add_dns_search_list(struct interface_ip_settings *ip, struct blob_attr *list)
730 struct blob_attr *cur;
733 blobmsg_for_each_attr(cur, list, rem) {
734 if (blobmsg_type(cur) != BLOBMSG_TYPE_STRING)
737 if (!blobmsg_check_attr(cur, NULL))
740 interface_add_dns_search_domain(ip, blobmsg_data(cur));
745 write_resolv_conf_entries(FILE *f, struct interface_ip_settings *ip)
747 struct dns_server *s;
748 struct dns_search_domain *d;
752 vlist_simple_for_each_element(&ip->dns_servers, s, node) {
753 str = inet_ntop(s->af, &s->addr, buf, sizeof(buf));
757 fprintf(f, "nameserver %s\n", str);
760 vlist_simple_for_each_element(&ip->dns_search, d, node) {
761 fprintf(f, "search %s\n", d->name);
766 interface_write_resolv_conf(void)
768 struct interface *iface;
769 char *path = alloca(strlen(resolv_conf) + 5);
772 sprintf(path, "%s.tmp", resolv_conf);
774 f = fopen(path, "w");
776 D(INTERFACE, "Failed to open %s for writing\n", path);
780 vlist_for_each_element(&interfaces, iface, node) {
781 if (iface->state != IFS_UP)
784 if (vlist_simple_empty(&iface->proto_ip.dns_search) &&
785 vlist_simple_empty(&iface->proto_ip.dns_servers) &&
786 vlist_simple_empty(&iface->config_ip.dns_search) &&
787 vlist_simple_empty(&iface->config_ip.dns_servers))
790 fprintf(f, "# Interface %s\n", iface->name);
791 write_resolv_conf_entries(f, &iface->config_ip);
792 if (!iface->proto_ip.no_dns)
793 write_resolv_conf_entries(f, &iface->proto_ip);
796 if (rename(path, resolv_conf) < 0) {
797 D(INTERFACE, "Failed to replace %s\n", resolv_conf);
802 void interface_ip_set_enabled(struct interface_ip_settings *ip, bool enabled)
804 struct device_addr *addr;
805 struct device_route *route;
808 ip->enabled = enabled;
809 dev = ip->iface->l3_dev.dev;
813 vlist_for_each_element(&ip->addr, addr, node) {
814 if (addr->enabled == enabled)
818 system_add_address(dev, addr);
820 system_del_address(dev, addr);
821 addr->enabled = enabled;
824 vlist_for_each_element(&ip->route, route, node) {
825 bool _enabled = enabled;
827 if (!enable_route(ip, route))
830 if (route->enabled == _enabled)
834 if (!(route->flags & DEVROUTE_METRIC))
835 route->metric = ip->iface->metric;
837 system_add_route(dev, route);
839 system_del_route(dev, route);
840 route->enabled = _enabled;
845 interface_ip_update_start(struct interface_ip_settings *ip)
847 if (ip != &ip->iface->config_ip) {
848 vlist_simple_update(&ip->dns_servers);
849 vlist_simple_update(&ip->dns_search);
851 vlist_update(&ip->route);
852 vlist_update(&ip->addr);
853 vlist_update(&ip->prefix);
857 interface_ip_update_complete(struct interface_ip_settings *ip)
859 vlist_simple_flush(&ip->dns_servers);
860 vlist_simple_flush(&ip->dns_search);
861 vlist_flush(&ip->route);
862 vlist_flush(&ip->addr);
863 vlist_flush(&ip->prefix);
864 interface_write_resolv_conf();
868 interface_ip_flush(struct interface_ip_settings *ip)
870 if (ip == &ip->iface->proto_ip)
871 vlist_flush_all(&ip->iface->host_routes);
872 vlist_simple_flush_all(&ip->dns_servers);
873 vlist_simple_flush_all(&ip->dns_search);
874 vlist_flush_all(&ip->route);
875 vlist_flush_all(&ip->addr);
876 vlist_flush_all(&ip->prefix);
880 __interface_ip_init(struct interface_ip_settings *ip, struct interface *iface)
884 vlist_simple_init(&ip->dns_search, struct dns_search_domain, node);
885 vlist_simple_init(&ip->dns_servers, struct dns_server, node);
886 vlist_init(&ip->route, route_cmp, interface_update_proto_route);
887 vlist_init(&ip->addr, addr_cmp, interface_update_proto_addr);
888 vlist_init(&ip->prefix, prefix_cmp, interface_update_prefix);
892 interface_ip_init(struct interface *iface)
894 __interface_ip_init(&iface->proto_ip, iface);
895 __interface_ip_init(&iface->config_ip, iface);
896 vlist_init(&iface->host_routes, route_cmp, interface_update_host_route);