1 /*-
2 * SPDX-License-Identifier: BSD-2-Clause
3 *
4 * Copyright (c) 2021 Ng Peng Nam Sean
5 * Copyright (c) 2022 Alexander V. Chernikov <melifaro@FreeBSD.org>
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 *
16 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26 * SUCH DAMAGE.
27 */
28
29 #include <sys/cdefs.h>
30 #include "opt_inet.h"
31 #include "opt_inet6.h"
32 #include "opt_route.h"
33 #include <sys/types.h>
34 #include <sys/malloc.h>
35 #include <sys/rmlock.h>
36 #include <sys/socket.h>
37
38 #include <net/if.h>
39 #include <net/route.h>
40 #include <net/route/nhop.h>
41 #include <net/route/route_ctl.h>
42 #include <net/route/route_var.h>
43 #include <netinet6/scope6_var.h>
44 #include <netlink/netlink.h>
45 #include <netlink/netlink_ctl.h>
46 #include <netlink/netlink_route.h>
47 #include <netlink/route/route_var.h>
48
49 #define DEBUG_MOD_NAME nl_route
50 #define DEBUG_MAX_LEVEL LOG_DEBUG3
51 #include <netlink/netlink_debug.h>
52 _DECLARE_DEBUG(LOG_INFO);
53
54 static unsigned char
get_rtm_type(const struct nhop_object * nh)55 get_rtm_type(const struct nhop_object *nh)
56 {
57 int nh_flags = nh->nh_flags;
58
59 /* Use the fact that nhg runtime flags are only NHF_MULTIPATH */
60 if (nh_flags & NHF_BLACKHOLE)
61 return (RTN_BLACKHOLE);
62 else if (nh_flags & NHF_REJECT)
63 return (RTN_PROHIBIT);
64 return (RTN_UNICAST);
65 }
66
67 static uint8_t
nl_get_rtm_protocol(const struct nhop_object * nh)68 nl_get_rtm_protocol(const struct nhop_object *nh)
69 {
70 #ifdef ROUTE_MPATH
71 if (NH_IS_NHGRP(nh)) {
72 const struct nhgrp_object *nhg = (const struct nhgrp_object *)nh;
73 uint8_t origin = nhgrp_get_origin(nhg);
74 if (origin != RTPROT_UNSPEC)
75 return (origin);
76 nh = nhg->nhops[0];
77 }
78 #endif
79 uint8_t origin = nhop_get_origin(nh);
80 if (origin != RTPROT_UNSPEC)
81 return (origin);
82 /* TODO: remove guesswork once all kernel users fill in origin */
83 int rt_flags = nhop_get_rtflags(nh);
84 if (rt_flags & RTF_PROTO1)
85 return (RTPROT_ZEBRA);
86 if (rt_flags & RTF_STATIC)
87 return (RTPROT_STATIC);
88 return (RTPROT_KERNEL);
89 }
90
91 static int
get_rtmsg_type_from_rtsock(int cmd)92 get_rtmsg_type_from_rtsock(int cmd)
93 {
94 switch (cmd) {
95 case RTM_ADD:
96 case RTM_CHANGE:
97 case RTM_GET:
98 return NL_RTM_NEWROUTE;
99 case RTM_DELETE:
100 return NL_RTM_DELROUTE;
101 }
102
103 return (0);
104 }
105
106 /*
107 * fibnum heuristics
108 *
109 * if (dump && rtm_table == 0 && !rta_table) RT_ALL_FIBS
110 * msg rtm_table RTA_TABLE result
111 * RTM_GETROUTE/dump 0 - RT_ALL_FIBS
112 * RTM_GETROUTE/dump 1 - 1
113 * RTM_GETROUTE/get 0 - 0
114 *
115 */
116
117 static struct nhop_object *
rc_get_nhop(const struct rib_cmd_info * rc)118 rc_get_nhop(const struct rib_cmd_info *rc)
119 {
120 return ((rc->rc_cmd == RTM_DELETE) ? rc->rc_nh_old : rc->rc_nh_new);
121 }
122
123 static void
dump_rc_nhop_gw(struct nl_writer * nw,const struct nhop_object * nh)124 dump_rc_nhop_gw(struct nl_writer *nw, const struct nhop_object *nh)
125 {
126 #ifdef INET6
127 int upper_family;
128 #endif
129
130 switch (nhop_get_neigh_family(nh)) {
131 case AF_LINK:
132 /* onlink prefix, skip */
133 break;
134 case AF_INET:
135 nlattr_add(nw, NL_RTA_GATEWAY, 4, &nh->gw4_sa.sin_addr);
136 break;
137 #ifdef INET6
138 case AF_INET6:
139 upper_family = nhop_get_upper_family(nh);
140 if (upper_family == AF_INET6) {
141 struct in6_addr gw6 = nh->gw6_sa.sin6_addr;
142 in6_clearscope(&gw6);
143
144 nlattr_add(nw, NL_RTA_GATEWAY, 16, &gw6);
145 } else if (upper_family == AF_INET) {
146 /* IPv4 over IPv6 */
147 struct in6_addr gw6 = nh->gw6_sa.sin6_addr;
148 in6_clearscope(&gw6);
149
150 char buf[20];
151 struct rtvia *via = (struct rtvia *)&buf[0];
152 via->rtvia_family = AF_INET6;
153 memcpy(via->rtvia_addr, &gw6, 16);
154 nlattr_add(nw, NL_RTA_VIA, 17, via);
155 }
156 break;
157 #endif
158 }
159 }
160
161 static void
dump_rc_nhop_mtu(struct nl_writer * nw,const struct nhop_object * nh)162 dump_rc_nhop_mtu(struct nl_writer *nw, const struct nhop_object *nh)
163 {
164 int nla_len = sizeof(struct nlattr) * 2 + sizeof(uint32_t);
165 struct nlattr *nla = nlmsg_reserve_data(nw, nla_len, struct nlattr);
166
167 if (nla == NULL)
168 return;
169 nla->nla_type = NL_RTA_METRICS;
170 nla->nla_len = nla_len;
171 nla++;
172 nla->nla_type = NL_RTAX_MTU;
173 nla->nla_len = sizeof(struct nlattr) + sizeof(uint32_t);
174 *((uint32_t *)(nla + 1)) = nh->nh_mtu;
175 }
176
177 #ifdef ROUTE_MPATH
178 static void
dump_rc_nhg(struct nl_writer * nw,const struct nhgrp_object * nhg,struct rtmsg * rtm)179 dump_rc_nhg(struct nl_writer *nw, const struct nhgrp_object *nhg, struct rtmsg *rtm)
180 {
181 uint32_t uidx = nhgrp_get_uidx(nhg);
182 uint32_t num_nhops;
183 const struct weightened_nhop *wn = nhgrp_get_nhops(nhg, &num_nhops);
184 uint32_t base_rtflags = nhop_get_rtflags(wn[0].nh);
185
186 if (uidx != 0)
187 nlattr_add_u32(nw, NL_RTA_NH_ID, uidx);
188 nlattr_add_u32(nw, NL_RTA_KNH_ID, nhgrp_get_idx(nhg));
189
190 nlattr_add_u32(nw, NL_RTA_RTFLAGS, base_rtflags);
191 int off = nlattr_add_nested(nw, NL_RTA_MULTIPATH);
192 if (off == 0)
193 return;
194
195 for (int i = 0; i < num_nhops; i++) {
196 int nh_off = nlattr_save_offset(nw);
197 struct rtnexthop *rtnh = nlmsg_reserve_object(nw, struct rtnexthop);
198 if (rtnh == NULL)
199 return;
200 rtnh->rtnh_flags = 0;
201 rtnh->rtnh_ifindex = if_getindex(wn[i].nh->nh_ifp);
202 rtnh->rtnh_hops = wn[i].weight;
203 dump_rc_nhop_gw(nw, wn[i].nh);
204 uint32_t rtflags = nhop_get_rtflags(wn[i].nh);
205 if (rtflags != base_rtflags)
206 nlattr_add_u32(nw, NL_RTA_RTFLAGS, rtflags);
207 if (rtflags & RTF_FIXEDMTU)
208 dump_rc_nhop_mtu(nw, wn[i].nh);
209 rtnh = nlattr_restore_offset(nw, nh_off, struct rtnexthop);
210 /*
211 * nlattr_add() allocates 4-byte aligned storage, no need to aligh
212 * length here
213 * */
214 rtnh->rtnh_len = nlattr_save_offset(nw) - nh_off;
215 }
216 nlattr_set_len(nw, off);
217 }
218 #endif
219
220 static void
dump_rc_nhop(struct nl_writer * nw,const struct route_nhop_data * rnd,struct rtmsg * rtm)221 dump_rc_nhop(struct nl_writer *nw, const struct route_nhop_data *rnd, struct rtmsg *rtm)
222 {
223 #ifdef ROUTE_MPATH
224 if (NH_IS_NHGRP(rnd->rnd_nhop)) {
225 dump_rc_nhg(nw, rnd->rnd_nhgrp, rtm);
226 return;
227 }
228 #endif
229 const struct nhop_object *nh = rnd->rnd_nhop;
230 uint32_t rtflags = nhop_get_rtflags(nh);
231
232 /*
233 * IPv4 over IPv6
234 * ('RTA_VIA', {'family': 10, 'addr': 'fe80::20c:29ff:fe67:2dd'}), ('RTA_OIF', 2),
235 * IPv4 w/ gw
236 * ('RTA_GATEWAY', '172.16.107.131'), ('RTA_OIF', 2)],
237 * Direct route:
238 * ('RTA_OIF', 2)
239 */
240 if (nh->nh_flags & NHF_GATEWAY)
241 dump_rc_nhop_gw(nw, nh);
242
243 uint32_t uidx = nhop_get_uidx(nh);
244 if (uidx != 0)
245 nlattr_add_u32(nw, NL_RTA_NH_ID, uidx);
246 nlattr_add_u32(nw, NL_RTA_KNH_ID, nhop_get_idx(nh));
247 nlattr_add_u32(nw, NL_RTA_RTFLAGS, rtflags);
248
249 if (rtflags & RTF_FIXEDMTU)
250 dump_rc_nhop_mtu(nw, nh);
251 uint32_t nh_expire = nhop_get_expire(nh);
252 if (nh_expire > 0)
253 nlattr_add_u32(nw, NL_RTA_EXPIRES, nh_expire - time_uptime);
254
255 /* In any case, fill outgoing interface */
256 nlattr_add_u32(nw, NL_RTA_OIF, if_getindex(nh->nh_ifp));
257
258 if (rnd->rnd_weight != RT_DEFAULT_WEIGHT)
259 nlattr_add_u32(nw, NL_RTA_WEIGHT, rnd->rnd_weight);
260 }
261
262 /*
263 * Dumps output from a rib command into an rtmsg
264 */
265
266 static int
dump_px(uint32_t fibnum,const struct nlmsghdr * hdr,const struct rtentry * rt,struct route_nhop_data * rnd,struct nl_writer * nw)267 dump_px(uint32_t fibnum, const struct nlmsghdr *hdr,
268 const struct rtentry *rt, struct route_nhop_data *rnd,
269 struct nl_writer *nw)
270 {
271 struct rtmsg *rtm;
272 int error = 0;
273
274 NET_EPOCH_ASSERT();
275
276 if (!nlmsg_reply(nw, hdr, sizeof(struct rtmsg)))
277 goto enomem;
278
279 int family = rt_get_family(rt);
280 int rtm_off = nlattr_save_offset(nw);
281 rtm = nlmsg_reserve_object(nw, struct rtmsg);
282 rtm->rtm_family = family;
283 rtm->rtm_dst_len = 0;
284 rtm->rtm_src_len = 0;
285 rtm->rtm_tos = 0;
286 if (fibnum < 255)
287 rtm->rtm_table = (unsigned char)fibnum;
288 rtm->rtm_scope = RT_SCOPE_UNIVERSE;
289 rtm->rtm_protocol = nl_get_rtm_protocol(rnd->rnd_nhop);
290 rtm->rtm_type = get_rtm_type(rnd->rnd_nhop);
291
292 nlattr_add_u32(nw, NL_RTA_TABLE, fibnum);
293
294 int plen = 0;
295 #if defined(INET) || defined(INET6)
296 uint32_t scopeid;
297 #endif
298 switch (family) {
299 #ifdef INET
300 case AF_INET:
301 {
302 struct in_addr addr;
303 rt_get_inet_prefix_plen(rt, &addr, &plen, &scopeid);
304 nlattr_add(nw, NL_RTA_DST, 4, &addr);
305 break;
306 }
307 #endif
308 #ifdef INET6
309 case AF_INET6:
310 {
311 struct in6_addr addr;
312 rt_get_inet6_prefix_plen(rt, &addr, &plen, &scopeid);
313 nlattr_add(nw, NL_RTA_DST, 16, &addr);
314 break;
315 }
316 #endif
317 default:
318 FIB_LOG(LOG_NOTICE, fibnum, family, "unsupported rt family: %d", family);
319 error = EAFNOSUPPORT;
320 goto flush;
321 }
322
323 rtm = nlattr_restore_offset(nw, rtm_off, struct rtmsg);
324 if (plen > 0)
325 rtm->rtm_dst_len = plen;
326 dump_rc_nhop(nw, rnd, rtm);
327
328 if (nlmsg_end(nw))
329 return (0);
330 enomem:
331 error = ENOMEM;
332 flush:
333 nlmsg_abort(nw);
334 return (error);
335 }
336
337 static int
family_to_group(int family)338 family_to_group(int family)
339 {
340 switch (family) {
341 case AF_INET:
342 return (RTNLGRP_IPV4_ROUTE);
343 case AF_INET6:
344 return (RTNLGRP_IPV6_ROUTE);
345 }
346 return (0);
347 }
348
349 static void
report_operation(uint32_t fibnum,struct rib_cmd_info * rc,struct nlpcb * nlp,struct nlmsghdr * hdr)350 report_operation(uint32_t fibnum, struct rib_cmd_info *rc,
351 struct nlpcb *nlp, struct nlmsghdr *hdr)
352 {
353 struct nl_writer nw = {};
354 uint32_t group_id = family_to_group(rt_get_family(rc->rc_rt));
355
356 if (nlmsg_get_group_writer(&nw, NLMSG_SMALL, NETLINK_ROUTE, group_id)) {
357 struct route_nhop_data rnd = {
358 .rnd_nhop = rc_get_nhop(rc),
359 .rnd_weight = rc->rc_nh_weight,
360 };
361 hdr->nlmsg_flags &= ~(NLM_F_REPLACE | NLM_F_CREATE);
362 hdr->nlmsg_flags &= ~(NLM_F_EXCL | NLM_F_APPEND);
363 switch (rc->rc_cmd) {
364 case RTM_ADD:
365 hdr->nlmsg_type = NL_RTM_NEWROUTE;
366 hdr->nlmsg_flags |= NLM_F_CREATE | NLM_F_EXCL;
367 break;
368 case RTM_CHANGE:
369 hdr->nlmsg_type = NL_RTM_NEWROUTE;
370 hdr->nlmsg_flags |= NLM_F_REPLACE;
371 break;
372 case RTM_DELETE:
373 hdr->nlmsg_type = NL_RTM_DELROUTE;
374 break;
375 }
376 dump_px(fibnum, hdr, rc->rc_rt, &rnd, &nw);
377 nlmsg_flush(&nw);
378 }
379
380 rtsock_callback_p->route_f(fibnum, rc);
381 }
382
383 static void
set_scope6(struct sockaddr * sa,struct ifnet * ifp)384 set_scope6(struct sockaddr *sa, struct ifnet *ifp)
385 {
386 #ifdef INET6
387 if (sa != NULL && sa->sa_family == AF_INET6 && ifp != NULL) {
388 struct sockaddr_in6 *sa6 = (struct sockaddr_in6 *)sa;
389
390 if (IN6_IS_ADDR_LINKLOCAL(&sa6->sin6_addr))
391 in6_set_unicast_scopeid(&sa6->sin6_addr, if_getindex(ifp));
392 }
393 #endif
394 }
395
396 struct rta_mpath_nh {
397 struct sockaddr *gw;
398 struct ifnet *ifp;
399 uint8_t rtnh_flags;
400 uint8_t rtnh_weight;
401 };
402
403 #define _IN(_field) offsetof(struct rtnexthop, _field)
404 #define _OUT(_field) offsetof(struct rta_mpath_nh, _field)
405 const static struct nlattr_parser nla_p_rtnh[] = {
406 { .type = NL_RTA_GATEWAY, .off = _OUT(gw), .cb = nlattr_get_ip },
407 { .type = NL_RTA_VIA, .off = _OUT(gw), .cb = nlattr_get_ipvia },
408 };
409 const static struct nlfield_parser nlf_p_rtnh[] = {
410 { .off_in = _IN(rtnh_flags), .off_out = _OUT(rtnh_flags), .cb = nlf_get_u8 },
411 { .off_in = _IN(rtnh_hops), .off_out = _OUT(rtnh_weight), .cb = nlf_get_u8 },
412 { .off_in = _IN(rtnh_ifindex), .off_out = _OUT(ifp), .cb = nlf_get_ifpz },
413 };
414 #undef _IN
415 #undef _OUT
416
417 static bool
post_p_rtnh(void * _attrs,struct nl_pstate * npt __unused)418 post_p_rtnh(void *_attrs, struct nl_pstate *npt __unused)
419 {
420 struct rta_mpath_nh *attrs = (struct rta_mpath_nh *)_attrs;
421
422 set_scope6(attrs->gw, attrs->ifp);
423 return (true);
424 }
425 NL_DECLARE_PARSER_EXT(mpath_parser, struct rtnexthop, NULL, nlf_p_rtnh, nla_p_rtnh, post_p_rtnh);
426
427 struct rta_mpath {
428 int num_nhops;
429 struct rta_mpath_nh nhops[0];
430 };
431
432 static int
nlattr_get_multipath(struct nlattr * nla,struct nl_pstate * npt,const void * arg,void * target)433 nlattr_get_multipath(struct nlattr *nla, struct nl_pstate *npt, const void *arg, void *target)
434 {
435 int data_len = nla->nla_len - sizeof(struct nlattr);
436 struct rtnexthop *rtnh;
437
438 int max_nhops = data_len / sizeof(struct rtnexthop);
439
440 struct rta_mpath *mp = npt_alloc(npt, (max_nhops + 2) * sizeof(struct rta_mpath_nh));
441 mp->num_nhops = 0;
442
443 for (rtnh = (struct rtnexthop *)(nla + 1); data_len > 0; ) {
444 struct rta_mpath_nh *mpnh = &mp->nhops[mp->num_nhops++];
445
446 int error = nl_parse_header(rtnh, rtnh->rtnh_len, &mpath_parser,
447 npt, mpnh);
448 if (error != 0) {
449 NLMSG_REPORT_ERR_MSG(npt, "RTA_MULTIPATH: nexhop %d: parse failed",
450 mp->num_nhops - 1);
451 return (error);
452 }
453
454 int len = NL_ITEM_ALIGN(rtnh->rtnh_len);
455 data_len -= len;
456 rtnh = (struct rtnexthop *)((char *)rtnh + len);
457 }
458 if (data_len != 0 || mp->num_nhops == 0) {
459 NLMSG_REPORT_ERR_MSG(npt, "invalid RTA_MULTIPATH attr");
460 return (EINVAL);
461 }
462
463 *((struct rta_mpath **)target) = mp;
464 return (0);
465 }
466
467
468 struct nl_parsed_route {
469 struct sockaddr *rta_dst;
470 struct sockaddr *rta_gw;
471 struct ifnet *rta_oif;
472 struct rta_mpath *rta_multipath;
473 uint32_t rta_table;
474 uint32_t rta_rtflags;
475 uint32_t rta_nh_id;
476 uint32_t rta_weight;
477 uint32_t rtax_mtu;
478 uint8_t rtm_table;
479 uint8_t rtm_family;
480 uint8_t rtm_dst_len;
481 uint8_t rtm_protocol;
482 uint8_t rtm_type;
483 uint32_t rtm_flags;
484 };
485
486 #define _IN(_field) offsetof(struct rtmsg, _field)
487 #define _OUT(_field) offsetof(struct nl_parsed_route, _field)
488 static struct nlattr_parser nla_p_rtmetrics[] = {
489 { .type = NL_RTAX_MTU, .off = _OUT(rtax_mtu), .cb = nlattr_get_uint32 },
490 };
491 NL_DECLARE_ATTR_PARSER(metrics_parser, nla_p_rtmetrics);
492
493 static const struct nlattr_parser nla_p_rtmsg[] = {
494 { .type = NL_RTA_DST, .off = _OUT(rta_dst), .cb = nlattr_get_ip },
495 { .type = NL_RTA_OIF, .off = _OUT(rta_oif), .cb = nlattr_get_ifp },
496 { .type = NL_RTA_GATEWAY, .off = _OUT(rta_gw), .cb = nlattr_get_ip },
497 { .type = NL_RTA_METRICS, .arg = &metrics_parser, .cb = nlattr_get_nested },
498 { .type = NL_RTA_MULTIPATH, .off = _OUT(rta_multipath), .cb = nlattr_get_multipath },
499 { .type = NL_RTA_WEIGHT, .off = _OUT(rta_weight), .cb = nlattr_get_uint32 },
500 { .type = NL_RTA_RTFLAGS, .off = _OUT(rta_rtflags), .cb = nlattr_get_uint32 },
501 { .type = NL_RTA_TABLE, .off = _OUT(rta_table), .cb = nlattr_get_uint32 },
502 { .type = NL_RTA_VIA, .off = _OUT(rta_gw), .cb = nlattr_get_ipvia },
503 { .type = NL_RTA_NH_ID, .off = _OUT(rta_nh_id), .cb = nlattr_get_uint32 },
504 };
505
506 static const struct nlfield_parser nlf_p_rtmsg[] = {
507 { .off_in = _IN(rtm_family), .off_out = _OUT(rtm_family), .cb = nlf_get_u8 },
508 { .off_in = _IN(rtm_dst_len), .off_out = _OUT(rtm_dst_len), .cb = nlf_get_u8 },
509 { .off_in = _IN(rtm_protocol), .off_out = _OUT(rtm_protocol), .cb = nlf_get_u8 },
510 { .off_in = _IN(rtm_type), .off_out = _OUT(rtm_type), .cb = nlf_get_u8 },
511 { .off_in = _IN(rtm_table), .off_out = _OUT(rtm_table), .cb = nlf_get_u8 },
512 { .off_in = _IN(rtm_flags), .off_out = _OUT(rtm_flags), .cb = nlf_get_u32 },
513 };
514 #undef _IN
515 #undef _OUT
516
517 static bool
post_p_rtmsg(void * _attrs,struct nl_pstate * npt __unused)518 post_p_rtmsg(void *_attrs, struct nl_pstate *npt __unused)
519 {
520 struct nl_parsed_route *attrs = (struct nl_parsed_route *)_attrs;
521
522 set_scope6(attrs->rta_dst, attrs->rta_oif);
523 set_scope6(attrs->rta_gw, attrs->rta_oif);
524 return (true);
525 }
526 NL_DECLARE_PARSER_EXT(rtm_parser, struct rtmsg, NULL, nlf_p_rtmsg, nla_p_rtmsg, post_p_rtmsg);
527
528 struct netlink_walkargs {
529 struct nl_writer *nw;
530 struct route_nhop_data rnd;
531 struct nlmsghdr hdr;
532 struct nlpcb *nlp;
533 uint32_t fibnum;
534 int family;
535 int error;
536 int count;
537 int dumped;
538 int dumped_tables;
539 };
540
541 static int
dump_rtentry(struct rtentry * rt,void * _arg)542 dump_rtentry(struct rtentry *rt, void *_arg)
543 {
544 struct netlink_walkargs *wa = (struct netlink_walkargs *)_arg;
545 int error;
546
547 wa->count++;
548 if (wa->error != 0)
549 return (0);
550 if (!rt_is_exportable(rt, nlp_get_cred(wa->nlp)))
551 return (0);
552 wa->dumped++;
553
554 rt_get_rnd(rt, &wa->rnd);
555
556 error = dump_px(wa->fibnum, &wa->hdr, rt, &wa->rnd, wa->nw);
557
558 IF_DEBUG_LEVEL(LOG_DEBUG3) {
559 char rtbuf[INET6_ADDRSTRLEN + 5];
560 FIB_LOG(LOG_DEBUG3, wa->fibnum, wa->family,
561 "Dump %s, error %d",
562 rt_print_buf(rt, rtbuf, sizeof(rtbuf)), error);
563 }
564 wa->error = error;
565
566 return (0);
567 }
568
569 static void
dump_rtable_one(struct netlink_walkargs * wa,uint32_t fibnum,int family)570 dump_rtable_one(struct netlink_walkargs *wa, uint32_t fibnum, int family)
571 {
572 FIB_LOG(LOG_DEBUG2, fibnum, family, "Start dump");
573 wa->count = 0;
574 wa->dumped = 0;
575
576 rib_walk(fibnum, family, false, dump_rtentry, wa);
577
578 wa->dumped_tables++;
579
580 FIB_LOG(LOG_DEBUG2, fibnum, family, "End dump, iterated %d dumped %d",
581 wa->count, wa->dumped);
582 }
583
584 static int
dump_rtable_fib(struct netlink_walkargs * wa,uint32_t fibnum,int family)585 dump_rtable_fib(struct netlink_walkargs *wa, uint32_t fibnum, int family)
586 {
587 wa->fibnum = fibnum;
588
589 if (family == AF_UNSPEC) {
590 for (int i = 0; i < AF_MAX; i++) {
591 if (rt_tables_get_rnh(fibnum, i) != 0) {
592 wa->family = i;
593 dump_rtable_one(wa, fibnum, i);
594 if (wa->error != 0)
595 break;
596 }
597 }
598 } else {
599 if (rt_tables_get_rnh(fibnum, family) != 0) {
600 wa->family = family;
601 dump_rtable_one(wa, fibnum, family);
602 }
603 }
604
605 return (wa->error);
606 }
607
608 static int
handle_rtm_getroute(struct nlpcb * nlp,struct nl_parsed_route * attrs,struct nlmsghdr * hdr,struct nl_pstate * npt)609 handle_rtm_getroute(struct nlpcb *nlp, struct nl_parsed_route *attrs,
610 struct nlmsghdr *hdr, struct nl_pstate *npt)
611 {
612 RIB_RLOCK_TRACKER;
613 struct rib_head *rnh;
614 const struct rtentry *rt;
615 struct route_nhop_data rnd;
616 uint32_t fibnum = attrs->rta_table;
617 sa_family_t family = attrs->rtm_family;
618
619 if (attrs->rta_dst == NULL) {
620 NLMSG_REPORT_ERR_MSG(npt, "No RTA_DST supplied");
621 return (EINVAL);
622 }
623
624 rnh = rt_tables_get_rnh(fibnum, family);
625 if (rnh == NULL)
626 return (EAFNOSUPPORT);
627
628 RIB_RLOCK(rnh);
629
630 struct sockaddr *dst = attrs->rta_dst;
631
632 if (attrs->rtm_flags & RTM_F_PREFIX)
633 rt = rib_lookup_prefix_plen(rnh, dst, attrs->rtm_dst_len, &rnd);
634 else
635 rt = (const struct rtentry *)rnh->rnh_matchaddr(dst, &rnh->head);
636 if (rt == NULL) {
637 RIB_RUNLOCK(rnh);
638 return (ESRCH);
639 }
640
641 rt_get_rnd(rt, &rnd);
642 rnd.rnd_nhop = nhop_select_func(rnd.rnd_nhop, 0);
643
644 RIB_RUNLOCK(rnh);
645
646 if (!rt_is_exportable(rt, nlp_get_cred(nlp)))
647 return (ESRCH);
648
649 IF_DEBUG_LEVEL(LOG_DEBUG2) {
650 char rtbuf[NHOP_PRINT_BUFSIZE] __unused, nhbuf[NHOP_PRINT_BUFSIZE] __unused;
651 FIB_LOG(LOG_DEBUG2, fibnum, family, "getroute completed: got %s for %s",
652 nhop_print_buf_any(rnd.rnd_nhop, nhbuf, sizeof(nhbuf)),
653 rt_print_buf(rt, rtbuf, sizeof(rtbuf)));
654 }
655
656 hdr->nlmsg_type = NL_RTM_NEWROUTE;
657 dump_px(fibnum, hdr, rt, &rnd, npt->nw);
658
659 return (0);
660 }
661
662 static int
handle_rtm_dump(struct nlpcb * nlp,uint32_t fibnum,int family,struct nlmsghdr * hdr,struct nl_writer * nw)663 handle_rtm_dump(struct nlpcb *nlp, uint32_t fibnum, int family,
664 struct nlmsghdr *hdr, struct nl_writer *nw)
665 {
666 struct netlink_walkargs wa = {
667 .nlp = nlp,
668 .nw = nw,
669 .hdr.nlmsg_pid = hdr->nlmsg_pid,
670 .hdr.nlmsg_seq = hdr->nlmsg_seq,
671 .hdr.nlmsg_type = NL_RTM_NEWROUTE,
672 .hdr.nlmsg_flags = hdr->nlmsg_flags | NLM_F_MULTI,
673 };
674
675 if (fibnum == RT_TABLE_UNSPEC) {
676 for (int i = 0; i < V_rt_numfibs; i++) {
677 dump_rtable_fib(&wa, fibnum, family);
678 if (wa.error != 0)
679 break;
680 }
681 } else
682 dump_rtable_fib(&wa, fibnum, family);
683
684 if (wa.error == 0 && wa.dumped_tables == 0) {
685 FIB_LOG(LOG_DEBUG, fibnum, family, "incorrect fibnum/family");
686 wa.error = ESRCH;
687 // How do we propagate it?
688 }
689
690 if (!nlmsg_end_dump(wa.nw, wa.error, &wa.hdr)) {
691 NL_LOG(LOG_DEBUG, "Unable to finalize the dump");
692 return (ENOMEM);
693 }
694
695 return (wa.error);
696 }
697
698 static struct nhop_object *
finalize_nhop(struct nhop_object * nh,const struct sockaddr * dst,int * perror)699 finalize_nhop(struct nhop_object *nh, const struct sockaddr *dst, int *perror)
700 {
701 /*
702 * The following MUST be filled:
703 * nh_ifp, nh_ifa, nh_gw
704 */
705 if (nh->gw_sa.sa_family == 0) {
706 /*
707 * Empty gateway. Can be direct route with RTA_OIF set.
708 */
709 if (nh->nh_ifp != NULL)
710 nhop_set_direct_gw(nh, nh->nh_ifp);
711 else {
712 NL_LOG(LOG_DEBUG, "empty gateway and interface, skipping");
713 *perror = EINVAL;
714 return (NULL);
715 }
716 /* Both nh_ifp and gateway are set */
717 } else {
718 /* Gateway is set up, we can derive ifp if not set */
719 if (nh->nh_ifp == NULL) {
720 uint32_t fibnum = nhop_get_fibnum(nh);
721 uint32_t flags = 0;
722
723 if (nh->nh_flags & NHF_GATEWAY)
724 flags = RTF_GATEWAY;
725 else if (nh->nh_flags & NHF_HOST)
726 flags = RTF_HOST;
727
728 struct ifaddr *ifa = ifa_ifwithroute(flags, dst, &nh->gw_sa, fibnum);
729 if (ifa == NULL) {
730 NL_LOG(LOG_DEBUG, "Unable to determine ifp, skipping");
731 *perror = EINVAL;
732 return (NULL);
733 }
734 nhop_set_transmit_ifp(nh, ifa->ifa_ifp);
735 }
736 }
737 /* Both nh_ifp and gateway are set */
738 if (nh->nh_ifa == NULL) {
739 const struct sockaddr *gw_sa = &nh->gw_sa;
740
741 if (gw_sa->sa_family != dst->sa_family) {
742 /*
743 * Use dst as the target for determining the default
744 * preferred ifa IF
745 * 1) the gateway is link-level (e.g. direct route)
746 * 2) the gateway family is different (e.g. IPv4 over IPv6).
747 */
748 gw_sa = dst;
749 }
750
751 struct ifaddr *ifa = ifaof_ifpforaddr(gw_sa, nh->nh_ifp);
752 if (ifa == NULL) {
753 /* Try link-level ifa. */
754 gw_sa = &nh->gw_sa;
755 ifa = ifaof_ifpforaddr(gw_sa, nh->nh_ifp);
756 if (ifa == NULL) {
757 NL_LOG(LOG_DEBUG, "Unable to determine ifa, skipping");
758 *perror = EINVAL;
759 return (NULL);
760 }
761 }
762 nhop_set_src(nh, ifa);
763 }
764
765 return (nhop_get_nhop(nh, perror));
766 }
767
768 static int
get_pxflag(const struct nl_parsed_route * attrs)769 get_pxflag(const struct nl_parsed_route *attrs)
770 {
771 int pxflag = 0;
772 switch (attrs->rtm_family) {
773 case AF_INET:
774 if (attrs->rtm_dst_len == 32)
775 pxflag = NHF_HOST;
776 else if (attrs->rtm_dst_len == 0)
777 pxflag = NHF_DEFAULT;
778 break;
779 case AF_INET6:
780 if (attrs->rtm_dst_len == 128)
781 pxflag = NHF_HOST;
782 else if (attrs->rtm_dst_len == 0)
783 pxflag = NHF_DEFAULT;
784 break;
785 }
786
787 return (pxflag);
788 }
789
790 static int
get_op_flags(int nlm_flags)791 get_op_flags(int nlm_flags)
792 {
793 int op_flags = 0;
794
795 op_flags |= (nlm_flags & NLM_F_REPLACE) ? RTM_F_REPLACE : 0;
796 op_flags |= (nlm_flags & NLM_F_EXCL) ? RTM_F_EXCL : 0;
797 op_flags |= (nlm_flags & NLM_F_CREATE) ? RTM_F_CREATE : 0;
798 op_flags |= (nlm_flags & NLM_F_APPEND) ? RTM_F_APPEND : 0;
799
800 return (op_flags);
801 }
802
803 #ifdef ROUTE_MPATH
804 static int
create_nexthop_one(struct nl_parsed_route * attrs,struct rta_mpath_nh * mpnh,struct nl_pstate * npt,struct nhop_object ** pnh)805 create_nexthop_one(struct nl_parsed_route *attrs, struct rta_mpath_nh *mpnh,
806 struct nl_pstate *npt, struct nhop_object **pnh)
807 {
808 int error;
809
810 if (mpnh->gw == NULL)
811 return (EINVAL);
812
813 struct nhop_object *nh = nhop_alloc(attrs->rta_table, attrs->rtm_family);
814 if (nh == NULL)
815 return (ENOMEM);
816
817 error = nl_set_nexthop_gw(nh, mpnh->gw, mpnh->ifp, npt);
818 if (error != 0) {
819 nhop_free(nh);
820 return (error);
821 }
822 if (mpnh->ifp != NULL)
823 nhop_set_transmit_ifp(nh, mpnh->ifp);
824 nhop_set_pxtype_flag(nh, get_pxflag(attrs));
825 nhop_set_rtflags(nh, attrs->rta_rtflags);
826 if (attrs->rtm_protocol > RTPROT_STATIC)
827 nhop_set_origin(nh, attrs->rtm_protocol);
828
829 *pnh = finalize_nhop(nh, attrs->rta_dst, &error);
830
831 return (error);
832 }
833 #endif
834
835 static struct nhop_object *
create_nexthop_from_attrs(struct nl_parsed_route * attrs,struct nl_pstate * npt,int * perror)836 create_nexthop_from_attrs(struct nl_parsed_route *attrs,
837 struct nl_pstate *npt, int *perror)
838 {
839 struct nhop_object *nh = NULL;
840 int error = 0;
841
842 if (attrs->rta_multipath != NULL) {
843 #ifdef ROUTE_MPATH
844 /* Multipath w/o explicit nexthops */
845 int num_nhops = attrs->rta_multipath->num_nhops;
846 struct weightened_nhop *wn = npt_alloc(npt, sizeof(*wn) * num_nhops);
847
848 for (int i = 0; i < num_nhops; i++) {
849 struct rta_mpath_nh *mpnh = &attrs->rta_multipath->nhops[i];
850
851 error = create_nexthop_one(attrs, mpnh, npt, &wn[i].nh);
852 if (error != 0) {
853 for (int j = 0; j < i; j++)
854 nhop_free(wn[j].nh);
855 break;
856 }
857 wn[i].weight = mpnh->rtnh_weight > 0 ? mpnh->rtnh_weight : 1;
858 }
859 if (error == 0) {
860 struct rib_head *rh = nhop_get_rh(wn[0].nh);
861 struct nhgrp_object *nhg;
862
863 nhg = nhgrp_alloc(rh->rib_fibnum, rh->rib_family,
864 wn, num_nhops, perror);
865 if (nhg != NULL) {
866 if (attrs->rtm_protocol > RTPROT_STATIC)
867 nhgrp_set_origin(nhg, attrs->rtm_protocol);
868 nhg = nhgrp_get_nhgrp(nhg, perror);
869 }
870 for (int i = 0; i < num_nhops; i++)
871 nhop_free(wn[i].nh);
872 if (nhg != NULL)
873 return ((struct nhop_object *)nhg);
874 error = *perror;
875 }
876 #else
877 error = ENOTSUP;
878 #endif
879 *perror = error;
880 } else {
881 nh = nhop_alloc(attrs->rta_table, attrs->rtm_family);
882 if (nh == NULL) {
883 *perror = ENOMEM;
884 return (NULL);
885 }
886 if (attrs->rta_gw != NULL) {
887 *perror = nl_set_nexthop_gw(nh, attrs->rta_gw, attrs->rta_oif, npt);
888 if (*perror != 0) {
889 nhop_free(nh);
890 return (NULL);
891 }
892 }
893 if (attrs->rta_oif != NULL)
894 nhop_set_transmit_ifp(nh, attrs->rta_oif);
895 if (attrs->rtax_mtu != 0)
896 nhop_set_mtu(nh, attrs->rtax_mtu, true);
897 if (attrs->rta_rtflags & RTF_BROADCAST)
898 nhop_set_broadcast(nh, true);
899 if (attrs->rtm_protocol > RTPROT_STATIC)
900 nhop_set_origin(nh, attrs->rtm_protocol);
901 nhop_set_pxtype_flag(nh, get_pxflag(attrs));
902 nhop_set_rtflags(nh, attrs->rta_rtflags);
903
904 switch (attrs->rtm_type) {
905 case RTN_UNICAST:
906 break;
907 case RTN_BLACKHOLE:
908 nhop_set_blackhole(nh, RTF_BLACKHOLE);
909 break;
910 case RTN_PROHIBIT:
911 case RTN_UNREACHABLE:
912 nhop_set_blackhole(nh, RTF_REJECT);
913 break;
914 /* TODO: return ENOTSUP for other types if strict option is set */
915 }
916
917 nh = finalize_nhop(nh, attrs->rta_dst, perror);
918 }
919
920 return (nh);
921 }
922
923 static int
rtnl_handle_newroute(struct nlmsghdr * hdr,struct nlpcb * nlp,struct nl_pstate * npt)924 rtnl_handle_newroute(struct nlmsghdr *hdr, struct nlpcb *nlp,
925 struct nl_pstate *npt)
926 {
927 struct rib_cmd_info rc = {};
928 struct nhop_object *nh = NULL;
929 int error;
930
931 struct nl_parsed_route attrs = {};
932 error = nl_parse_nlmsg(hdr, &rtm_parser, npt, &attrs);
933 if (error != 0)
934 return (error);
935
936 /* Check if we have enough data */
937 if (attrs.rta_dst == NULL) {
938 NL_LOG(LOG_DEBUG, "missing RTA_DST");
939 return (EINVAL);
940 }
941
942 if (attrs.rtm_table > 0 && attrs.rta_table == 0) {
943 /* pre-2.6.19 Linux API compatibility */
944 attrs.rta_table = attrs.rtm_table;
945 } else if (attrs.rta_table >= V_rt_numfibs) {
946 NLMSG_REPORT_ERR_MSG(npt, "invalid fib");
947 return (EINVAL);
948 }
949
950 if (attrs.rta_nh_id != 0) {
951 /* Referenced uindex */
952 int pxflag = get_pxflag(&attrs);
953 nh = nl_find_nhop(attrs.rta_table, attrs.rtm_family, attrs.rta_nh_id,
954 pxflag, &error);
955 if (error != 0)
956 return (error);
957 } else {
958 nh = create_nexthop_from_attrs(&attrs, npt, &error);
959 if (error != 0) {
960 NL_LOG(LOG_DEBUG, "Error creating nexthop");
961 return (error);
962 }
963 }
964
965 if (!NH_IS_NHGRP(nh) && attrs.rta_weight == 0)
966 attrs.rta_weight = RT_DEFAULT_WEIGHT;
967 struct route_nhop_data rnd = { .rnd_nhop = nh, .rnd_weight = attrs.rta_weight };
968 int op_flags = get_op_flags(hdr->nlmsg_flags);
969
970 error = rib_add_route_px(attrs.rta_table, attrs.rta_dst, attrs.rtm_dst_len,
971 &rnd, op_flags, &rc);
972 if (error == 0)
973 report_operation(attrs.rta_table, &rc, nlp, hdr);
974 return (error);
975 }
976
977 static int
path_match_func(const struct rtentry * rt,const struct nhop_object * nh,void * _data)978 path_match_func(const struct rtentry *rt, const struct nhop_object *nh, void *_data)
979 {
980 struct nl_parsed_route *attrs = (struct nl_parsed_route *)_data;
981
982 if ((attrs->rta_gw != NULL) && !rib_match_gw(rt, nh, attrs->rta_gw))
983 return (0);
984
985 if ((attrs->rta_oif != NULL) && (attrs->rta_oif != nh->nh_ifp))
986 return (0);
987
988 return (1);
989 }
990
991 static int
rtnl_handle_delroute(struct nlmsghdr * hdr,struct nlpcb * nlp,struct nl_pstate * npt)992 rtnl_handle_delroute(struct nlmsghdr *hdr, struct nlpcb *nlp,
993 struct nl_pstate *npt)
994 {
995 struct rib_cmd_info rc;
996 int error;
997
998 struct nl_parsed_route attrs = {};
999 error = nl_parse_nlmsg(hdr, &rtm_parser, npt, &attrs);
1000 if (error != 0)
1001 return (error);
1002
1003 if (attrs.rta_dst == NULL) {
1004 NLMSG_REPORT_ERR_MSG(npt, "RTA_DST is not set");
1005 return (ESRCH);
1006 }
1007
1008 if (attrs.rta_table >= V_rt_numfibs) {
1009 NLMSG_REPORT_ERR_MSG(npt, "invalid fib");
1010 return (EINVAL);
1011 }
1012
1013 error = rib_del_route_px(attrs.rta_table, attrs.rta_dst,
1014 attrs.rtm_dst_len, path_match_func, &attrs, 0, &rc);
1015 if (error == 0)
1016 report_operation(attrs.rta_table, &rc, nlp, hdr);
1017 return (error);
1018 }
1019
1020 static int
rtnl_handle_getroute(struct nlmsghdr * hdr,struct nlpcb * nlp,struct nl_pstate * npt)1021 rtnl_handle_getroute(struct nlmsghdr *hdr, struct nlpcb *nlp, struct nl_pstate *npt)
1022 {
1023 int error;
1024
1025 struct nl_parsed_route attrs = {};
1026 error = nl_parse_nlmsg(hdr, &rtm_parser, npt, &attrs);
1027 if (error != 0)
1028 return (error);
1029
1030 if (attrs.rta_table >= V_rt_numfibs) {
1031 NLMSG_REPORT_ERR_MSG(npt, "invalid fib");
1032 return (EINVAL);
1033 }
1034
1035 if (hdr->nlmsg_flags & NLM_F_DUMP)
1036 error = handle_rtm_dump(nlp, attrs.rta_table, attrs.rtm_family, hdr, npt->nw);
1037 else
1038 error = handle_rtm_getroute(nlp, &attrs, hdr, npt);
1039
1040 return (error);
1041 }
1042
1043 void
rtnl_handle_route_event(uint32_t fibnum,const struct rib_cmd_info * rc)1044 rtnl_handle_route_event(uint32_t fibnum, const struct rib_cmd_info *rc)
1045 {
1046 struct nl_writer nw = {};
1047 int family, nlm_flags = 0;
1048
1049 family = rt_get_family(rc->rc_rt);
1050
1051 /* XXX: check if there are active listeners first */
1052
1053 /* TODO: consider passing PID/type/seq */
1054 switch (rc->rc_cmd) {
1055 case RTM_ADD:
1056 nlm_flags = NLM_F_EXCL | NLM_F_CREATE;
1057 break;
1058 case RTM_CHANGE:
1059 nlm_flags = NLM_F_REPLACE;
1060 break;
1061 case RTM_DELETE:
1062 nlm_flags = 0;
1063 break;
1064 }
1065 IF_DEBUG_LEVEL(LOG_DEBUG2) {
1066 char rtbuf[NHOP_PRINT_BUFSIZE] __unused;
1067 FIB_LOG(LOG_DEBUG2, fibnum, family,
1068 "received event %s for %s / nlm_flags=%X",
1069 rib_print_cmd(rc->rc_cmd),
1070 rt_print_buf(rc->rc_rt, rtbuf, sizeof(rtbuf)),
1071 nlm_flags);
1072 }
1073
1074 struct nlmsghdr hdr = {
1075 .nlmsg_flags = nlm_flags,
1076 .nlmsg_type = get_rtmsg_type_from_rtsock(rc->rc_cmd),
1077 };
1078
1079 struct route_nhop_data rnd = {
1080 .rnd_nhop = rc_get_nhop(rc),
1081 .rnd_weight = rc->rc_nh_weight,
1082 };
1083
1084 uint32_t group_id = family_to_group(family);
1085 if (!nlmsg_get_group_writer(&nw, NLMSG_SMALL, NETLINK_ROUTE, group_id)) {
1086 NL_LOG(LOG_DEBUG, "error allocating event buffer");
1087 return;
1088 }
1089
1090 dump_px(fibnum, &hdr, rc->rc_rt, &rnd, &nw);
1091 nlmsg_flush(&nw);
1092 }
1093
1094 static const struct rtnl_cmd_handler cmd_handlers[] = {
1095 {
1096 .cmd = NL_RTM_GETROUTE,
1097 .name = "RTM_GETROUTE",
1098 .cb = &rtnl_handle_getroute,
1099 .flags = RTNL_F_ALLOW_NONVNET_JAIL,
1100 },
1101 {
1102 .cmd = NL_RTM_DELROUTE,
1103 .name = "RTM_DELROUTE",
1104 .cb = &rtnl_handle_delroute,
1105 .priv = PRIV_NET_ROUTE,
1106 },
1107 {
1108 .cmd = NL_RTM_NEWROUTE,
1109 .name = "RTM_NEWROUTE",
1110 .cb = &rtnl_handle_newroute,
1111 .priv = PRIV_NET_ROUTE,
1112 }
1113 };
1114
1115 static const struct nlhdr_parser *all_parsers[] = {&mpath_parser, &metrics_parser, &rtm_parser};
1116
1117 void
rtnl_routes_init(void)1118 rtnl_routes_init(void)
1119 {
1120 NL_VERIFY_PARSERS(all_parsers);
1121 rtnl_register_messages(cmd_handlers, NL_ARRAY_LEN(cmd_handlers));
1122 }
1123