1 /*- 2 * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved. 3 * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved. 4 * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions are met: 8 * 9 * a) Redistributions of source code must retain the above copyright notice, 10 * this list of conditions and the following disclaimer. 11 * 12 * b) Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in 14 * the documentation and/or other materials provided with the distribution. 15 * 16 * c) Neither the name of Cisco Systems, Inc. nor the names of its 17 * contributors may be used to endorse or promote products derived 18 * from this software without specific prior written permission. 19 * 20 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 21 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, 22 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 24 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 25 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 26 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 27 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 28 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 29 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF 30 * THE POSSIBILITY OF SUCH DAMAGE. 31 */ 32 33 #include <sys/cdefs.h> 34 __FBSDID("$FreeBSD$"); 35 36 #define _IP_VHL 37 #include <netinet/sctp_os.h> 38 #include <netinet/sctp_pcb.h> 39 #ifdef INET6 40 #endif 41 #include <netinet/sctp_var.h> 42 #include <netinet/sctp_sysctl.h> 43 #include <netinet/sctp_timer.h> 44 #include <netinet/sctputil.h> 45 #include <netinet/sctp_output.h> 46 #include <netinet/sctp_header.h> 47 #include <netinet/sctp_indata.h> 48 #include <netinet/sctp_asconf.h> 49 #include <netinet/sctp_input.h> 50 #include <netinet/sctp.h> 51 #include <netinet/sctp_uio.h> 52 #if defined(INET) || defined(INET6) 53 #include <netinet/udp.h> 54 #endif 55 56 57 void 58 sctp_audit_retranmission_queue(struct sctp_association *asoc) 59 { 60 struct sctp_tmit_chunk *chk; 61 62 SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n", 63 asoc->sent_queue_retran_cnt, 64 asoc->sent_queue_cnt); 65 asoc->sent_queue_retran_cnt = 0; 66 asoc->sent_queue_cnt = 0; 67 TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) { 68 if (chk->sent == SCTP_DATAGRAM_RESEND) { 69 sctp_ucount_incr(asoc->sent_queue_retran_cnt); 70 } 71 asoc->sent_queue_cnt++; 72 } 73 TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) { 74 if (chk->sent == SCTP_DATAGRAM_RESEND) { 75 sctp_ucount_incr(asoc->sent_queue_retran_cnt); 76 } 77 } 78 TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) { 79 if (chk->sent == SCTP_DATAGRAM_RESEND) { 80 sctp_ucount_incr(asoc->sent_queue_retran_cnt); 81 } 82 } 83 SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n", 84 asoc->sent_queue_retran_cnt, 85 asoc->sent_queue_cnt); 86 } 87 88 static int 89 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 90 struct sctp_nets *net, uint16_t threshold) 91 { 92 if (net) { 93 net->error_count++; 94 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n", 95 (void *)net, net->error_count, 96 net->failure_threshold); 97 if (net->error_count > net->failure_threshold) { 98 /* We had a threshold failure */ 99 if (net->dest_state & SCTP_ADDR_REACHABLE) { 100 net->dest_state &= ~SCTP_ADDR_REACHABLE; 101 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY; 102 net->dest_state &= ~SCTP_ADDR_PF; 103 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN, 104 stcb, 0, 105 (void *)net, SCTP_SO_NOT_LOCKED); 106 } 107 } else if ((net->pf_threshold < net->failure_threshold) && 108 (net->error_count > net->pf_threshold)) { 109 if (!(net->dest_state & SCTP_ADDR_PF)) { 110 net->dest_state |= SCTP_ADDR_PF; 111 net->last_active = sctp_get_tick_count(); 112 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED); 113 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, 114 inp, stcb, net, 115 SCTP_FROM_SCTP_TIMER + SCTP_LOC_1); 116 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net); 117 } 118 } 119 } 120 if (stcb == NULL) 121 return (0); 122 123 if (net) { 124 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) { 125 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) { 126 sctp_misc_ints(SCTP_THRESHOLD_INCR, 127 stcb->asoc.overall_error_count, 128 (stcb->asoc.overall_error_count + 1), 129 SCTP_FROM_SCTP_TIMER, 130 __LINE__); 131 } 132 stcb->asoc.overall_error_count++; 133 } 134 } else { 135 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) { 136 sctp_misc_ints(SCTP_THRESHOLD_INCR, 137 stcb->asoc.overall_error_count, 138 (stcb->asoc.overall_error_count + 1), 139 SCTP_FROM_SCTP_TIMER, 140 __LINE__); 141 } 142 stcb->asoc.overall_error_count++; 143 } 144 SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n", 145 (void *)&stcb->asoc, stcb->asoc.overall_error_count, 146 (uint32_t)threshold, 147 ((net == NULL) ? (uint32_t)0 : (uint32_t)net->dest_state)); 148 /* 149 * We specifically do not do >= to give the assoc one more change 150 * before we fail it. 151 */ 152 if (stcb->asoc.overall_error_count > threshold) { 153 /* Abort notification sends a ULP notify */ 154 struct mbuf *op_err; 155 156 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code), 157 "Association error counter exceeded"); 158 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_2; 159 sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED); 160 return (1); 161 } 162 return (0); 163 } 164 165 /* 166 * sctp_find_alternate_net() returns a non-NULL pointer as long 167 * the argument net is non-NULL. 168 */ 169 struct sctp_nets * 170 sctp_find_alternate_net(struct sctp_tcb *stcb, 171 struct sctp_nets *net, 172 int mode) 173 { 174 /* Find and return an alternate network if possible */ 175 struct sctp_nets *alt, *mnet, *min_errors_net = NULL, *max_cwnd_net = NULL; 176 int once; 177 178 /* JRS 5/14/07 - Initialize min_errors to an impossible value. */ 179 int min_errors = -1; 180 uint32_t max_cwnd = 0; 181 182 if (stcb->asoc.numnets == 1) { 183 /* No others but net */ 184 return (TAILQ_FIRST(&stcb->asoc.nets)); 185 } 186 /* 187 * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate 188 * net algorithm. This algorithm chooses the active destination (not 189 * in PF state) with the largest cwnd value. If all destinations are 190 * in PF state, unreachable, or unconfirmed, choose the desination 191 * that is in PF state with the lowest error count. In case of a 192 * tie, choose the destination that was most recently active. 193 */ 194 if (mode == 2) { 195 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) { 196 /* 197 * JRS 5/14/07 - If the destination is unreachable 198 * or unconfirmed, skip it. 199 */ 200 if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) || 201 (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) { 202 continue; 203 } 204 /* 205 * JRS 5/14/07 - If the destination is reachable 206 * but in PF state, compare the error count of the 207 * destination to the minimum error count seen thus 208 * far. Store the destination with the lower error 209 * count. If the error counts are equal, store the 210 * destination that was most recently active. 211 */ 212 if (mnet->dest_state & SCTP_ADDR_PF) { 213 /* 214 * JRS 5/14/07 - If the destination under 215 * consideration is the current destination, 216 * work as if the error count is one higher. 217 * The actual error count will not be 218 * incremented until later in the t3 219 * handler. 220 */ 221 if (mnet == net) { 222 if (min_errors == -1) { 223 min_errors = mnet->error_count + 1; 224 min_errors_net = mnet; 225 } else if (mnet->error_count + 1 < min_errors) { 226 min_errors = mnet->error_count + 1; 227 min_errors_net = mnet; 228 } else if (mnet->error_count + 1 == min_errors 229 && mnet->last_active > min_errors_net->last_active) { 230 min_errors_net = mnet; 231 min_errors = mnet->error_count + 1; 232 } 233 continue; 234 } else { 235 if (min_errors == -1) { 236 min_errors = mnet->error_count; 237 min_errors_net = mnet; 238 } else if (mnet->error_count < min_errors) { 239 min_errors = mnet->error_count; 240 min_errors_net = mnet; 241 } else if (mnet->error_count == min_errors 242 && mnet->last_active > min_errors_net->last_active) { 243 min_errors_net = mnet; 244 min_errors = mnet->error_count; 245 } 246 continue; 247 } 248 } 249 /* 250 * JRS 5/14/07 - If the destination is reachable and 251 * not in PF state, compare the cwnd of the 252 * destination to the highest cwnd seen thus far. 253 * Store the destination with the higher cwnd value. 254 * If the cwnd values are equal, randomly choose one 255 * of the two destinations. 256 */ 257 if (max_cwnd < mnet->cwnd) { 258 max_cwnd_net = mnet; 259 max_cwnd = mnet->cwnd; 260 } else if (max_cwnd == mnet->cwnd) { 261 uint32_t rndval; 262 uint8_t this_random; 263 264 if (stcb->asoc.hb_random_idx > 3) { 265 rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep); 266 memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values)); 267 this_random = stcb->asoc.hb_random_values[0]; 268 stcb->asoc.hb_random_idx++; 269 stcb->asoc.hb_ect_randombit = 0; 270 } else { 271 this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx]; 272 stcb->asoc.hb_random_idx++; 273 stcb->asoc.hb_ect_randombit = 0; 274 } 275 if (this_random % 2 == 1) { 276 max_cwnd_net = mnet; 277 max_cwnd = mnet->cwnd; /* Useless? */ 278 } 279 } 280 } 281 if (max_cwnd_net == NULL) { 282 if (min_errors_net == NULL) { 283 return (net); 284 } 285 return (min_errors_net); 286 } else { 287 return (max_cwnd_net); 288 } 289 } /* JRS 5/14/07 - If mode is set to 1, use the 290 * CMT policy for choosing an alternate net. */ 291 else if (mode == 1) { 292 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) { 293 if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) || 294 (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) { 295 /* 296 * will skip ones that are not-reachable or 297 * unconfirmed 298 */ 299 continue; 300 } 301 if (max_cwnd < mnet->cwnd) { 302 max_cwnd_net = mnet; 303 max_cwnd = mnet->cwnd; 304 } else if (max_cwnd == mnet->cwnd) { 305 uint32_t rndval; 306 uint8_t this_random; 307 308 if (stcb->asoc.hb_random_idx > 3) { 309 rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep); 310 memcpy(stcb->asoc.hb_random_values, &rndval, 311 sizeof(stcb->asoc.hb_random_values)); 312 this_random = stcb->asoc.hb_random_values[0]; 313 stcb->asoc.hb_random_idx = 0; 314 stcb->asoc.hb_ect_randombit = 0; 315 } else { 316 this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx]; 317 stcb->asoc.hb_random_idx++; 318 stcb->asoc.hb_ect_randombit = 0; 319 } 320 if (this_random % 2) { 321 max_cwnd_net = mnet; 322 max_cwnd = mnet->cwnd; 323 } 324 } 325 } 326 if (max_cwnd_net) { 327 return (max_cwnd_net); 328 } 329 } 330 mnet = net; 331 once = 0; 332 333 if (mnet == NULL) { 334 mnet = TAILQ_FIRST(&stcb->asoc.nets); 335 if (mnet == NULL) { 336 return (NULL); 337 } 338 } 339 for (;;) { 340 alt = TAILQ_NEXT(mnet, sctp_next); 341 if (alt == NULL) { 342 once++; 343 if (once > 1) { 344 break; 345 } 346 alt = TAILQ_FIRST(&stcb->asoc.nets); 347 if (alt == NULL) { 348 return (NULL); 349 } 350 } 351 if (alt->ro.ro_rt == NULL) { 352 if (alt->ro._s_addr) { 353 sctp_free_ifa(alt->ro._s_addr); 354 alt->ro._s_addr = NULL; 355 } 356 alt->src_addr_selected = 0; 357 } 358 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) && 359 (alt->ro.ro_rt != NULL) && 360 (!(alt->dest_state & SCTP_ADDR_UNCONFIRMED))) { 361 /* Found a reachable address */ 362 break; 363 } 364 mnet = alt; 365 } 366 367 if (alt == NULL) { 368 /* Case where NO insv network exists (dormant state) */ 369 /* we rotate destinations */ 370 once = 0; 371 mnet = net; 372 for (;;) { 373 if (mnet == NULL) { 374 return (TAILQ_FIRST(&stcb->asoc.nets)); 375 } 376 alt = TAILQ_NEXT(mnet, sctp_next); 377 if (alt == NULL) { 378 once++; 379 if (once > 1) { 380 break; 381 } 382 alt = TAILQ_FIRST(&stcb->asoc.nets); 383 if (alt == NULL) { 384 break; 385 } 386 } 387 if ((!(alt->dest_state & SCTP_ADDR_UNCONFIRMED)) && 388 (alt != net)) { 389 /* Found an alternate address */ 390 break; 391 } 392 mnet = alt; 393 } 394 } 395 if (alt == NULL) { 396 return (net); 397 } 398 return (alt); 399 } 400 401 static void 402 sctp_backoff_on_timeout(struct sctp_tcb *stcb, 403 struct sctp_nets *net, 404 int win_probe, 405 int num_marked, int num_abandoned) 406 { 407 if (net->RTO == 0) { 408 if (net->RTO_measured) { 409 net->RTO = stcb->asoc.minrto; 410 } else { 411 net->RTO = stcb->asoc.initial_rto; 412 } 413 } 414 net->RTO <<= 1; 415 if (net->RTO > stcb->asoc.maxrto) { 416 net->RTO = stcb->asoc.maxrto; 417 } 418 if ((win_probe == 0) && (num_marked || num_abandoned)) { 419 /* We don't apply penalty to window probe scenarios */ 420 /* JRS - Use the congestion control given in the CC module */ 421 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net); 422 } 423 } 424 425 #ifndef INVARIANTS 426 static void 427 sctp_recover_sent_list(struct sctp_tcb *stcb) 428 { 429 struct sctp_tmit_chunk *chk, *nchk; 430 struct sctp_association *asoc; 431 432 asoc = &stcb->asoc; 433 TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) { 434 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.tsn)) { 435 SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n", 436 (void *)chk, chk->rec.data.tsn, asoc->last_acked_seq); 437 if (chk->sent != SCTP_DATAGRAM_NR_ACKED) { 438 if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) { 439 asoc->strmout[chk->rec.data.sid].chunks_on_queues--; 440 } 441 } 442 if ((asoc->strmout[chk->rec.data.sid].chunks_on_queues == 0) && 443 (asoc->strmout[chk->rec.data.sid].state == SCTP_STREAM_RESET_PENDING) && 444 TAILQ_EMPTY(&asoc->strmout[chk->rec.data.sid].outqueue)) { 445 asoc->trigger_reset = 1; 446 } 447 TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next); 448 if (PR_SCTP_ENABLED(chk->flags)) { 449 if (asoc->pr_sctp_cnt != 0) 450 asoc->pr_sctp_cnt--; 451 } 452 if (chk->data) { 453 /* sa_ignore NO_NULL_CHK */ 454 sctp_free_bufspace(stcb, asoc, chk, 1); 455 sctp_m_freem(chk->data); 456 chk->data = NULL; 457 if (asoc->prsctp_supported && PR_SCTP_BUF_ENABLED(chk->flags)) { 458 asoc->sent_queue_cnt_removeable--; 459 } 460 } 461 asoc->sent_queue_cnt--; 462 sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED); 463 } 464 } 465 SCTP_PRINTF("after recover order is as follows\n"); 466 TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) { 467 SCTP_PRINTF("chk:%p TSN:%x\n", (void *)chk, chk->rec.data.tsn); 468 } 469 } 470 #endif 471 472 static int 473 sctp_mark_all_for_resend(struct sctp_tcb *stcb, 474 struct sctp_nets *net, 475 struct sctp_nets *alt, 476 int window_probe, 477 int *num_marked, 478 int *num_abandoned) 479 { 480 481 /* 482 * Mark all chunks (well not all) that were sent to *net for 483 * retransmission. Move them to alt for there destination as well... 484 * We only mark chunks that have been outstanding long enough to 485 * have received feed-back. 486 */ 487 struct sctp_tmit_chunk *chk, *nchk; 488 struct sctp_nets *lnets; 489 struct timeval now, min_wait, tv; 490 int cur_rto; 491 int cnt_abandoned; 492 int audit_tf, num_mk, fir; 493 unsigned int cnt_mk; 494 uint32_t orig_flight, orig_tf; 495 uint32_t tsnlast, tsnfirst; 496 int recovery_cnt = 0; 497 498 499 /* none in flight now */ 500 audit_tf = 0; 501 fir = 0; 502 /* 503 * figure out how long a data chunk must be pending before we can 504 * mark it .. 505 */ 506 (void)SCTP_GETTIME_TIMEVAL(&now); 507 /* get cur rto in micro-seconds */ 508 cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv; 509 cur_rto *= 1000; 510 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 511 sctp_log_fr(cur_rto, 512 stcb->asoc.peers_rwnd, 513 window_probe, 514 SCTP_FR_T3_MARK_TIME); 515 sctp_log_fr(net->flight_size, 0, 0, SCTP_FR_CWND_REPORT); 516 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT); 517 } 518 tv.tv_sec = cur_rto / 1000000; 519 tv.tv_usec = cur_rto % 1000000; 520 min_wait = now; 521 timevalsub(&min_wait, &tv); 522 if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) { 523 /* 524 * if we hit here, we don't have enough seconds on the clock 525 * to account for the RTO. We just let the lower seconds be 526 * the bounds and don't worry about it. This may mean we 527 * will mark a lot more than we should. 528 */ 529 min_wait.tv_sec = min_wait.tv_usec = 0; 530 } 531 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 532 sctp_log_fr(cur_rto, now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME); 533 sctp_log_fr(0, min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME); 534 } 535 /* 536 * Our rwnd will be incorrect here since we are not adding back the 537 * cnt * mbuf but we will fix that down below. 538 */ 539 orig_flight = net->flight_size; 540 orig_tf = stcb->asoc.total_flight; 541 542 net->fast_retran_ip = 0; 543 /* Now on to each chunk */ 544 cnt_abandoned = 0; 545 num_mk = cnt_mk = 0; 546 tsnfirst = tsnlast = 0; 547 #ifndef INVARIANTS 548 start_again: 549 #endif 550 TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) { 551 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.tsn)) { 552 /* Strange case our list got out of order? */ 553 SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x\n", 554 (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.tsn); 555 recovery_cnt++; 556 #ifdef INVARIANTS 557 panic("last acked >= chk on sent-Q"); 558 #else 559 SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt); 560 sctp_recover_sent_list(stcb); 561 if (recovery_cnt < 10) { 562 goto start_again; 563 } else { 564 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt); 565 } 566 #endif 567 } 568 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) { 569 /* 570 * found one to mark: If it is less than 571 * DATAGRAM_ACKED it MUST not be a skipped or marked 572 * TSN but instead one that is either already set 573 * for retransmission OR one that needs 574 * retransmission. 575 */ 576 577 /* validate its been outstanding long enough */ 578 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 579 sctp_log_fr(chk->rec.data.tsn, 580 chk->sent_rcv_time.tv_sec, 581 chk->sent_rcv_time.tv_usec, 582 SCTP_FR_T3_MARK_TIME); 583 } 584 if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) { 585 /* 586 * we have reached a chunk that was sent 587 * some seconds past our min.. forget it we 588 * will find no more to send. 589 */ 590 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 591 sctp_log_fr(0, 592 chk->sent_rcv_time.tv_sec, 593 chk->sent_rcv_time.tv_usec, 594 SCTP_FR_T3_STOPPED); 595 } 596 continue; 597 } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) && 598 (window_probe == 0)) { 599 /* 600 * we must look at the micro seconds to 601 * know. 602 */ 603 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) { 604 /* 605 * ok it was sent after our boundary 606 * time. 607 */ 608 continue; 609 } 610 } 611 if (stcb->asoc.prsctp_supported && PR_SCTP_TTL_ENABLED(chk->flags)) { 612 /* Is it expired? */ 613 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) { 614 /* Yes so drop it */ 615 if (chk->data) { 616 (void)sctp_release_pr_sctp_chunk(stcb, 617 chk, 618 1, 619 SCTP_SO_NOT_LOCKED); 620 cnt_abandoned++; 621 } 622 continue; 623 } 624 } 625 if (stcb->asoc.prsctp_supported && PR_SCTP_RTX_ENABLED(chk->flags)) { 626 /* Has it been retransmitted tv_sec times? */ 627 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) { 628 if (chk->data) { 629 (void)sctp_release_pr_sctp_chunk(stcb, 630 chk, 631 1, 632 SCTP_SO_NOT_LOCKED); 633 cnt_abandoned++; 634 } 635 continue; 636 } 637 } 638 if (chk->sent < SCTP_DATAGRAM_RESEND) { 639 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 640 num_mk++; 641 if (fir == 0) { 642 fir = 1; 643 tsnfirst = chk->rec.data.tsn; 644 } 645 tsnlast = chk->rec.data.tsn; 646 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 647 sctp_log_fr(chk->rec.data.tsn, chk->snd_count, 648 0, SCTP_FR_T3_MARKED); 649 } 650 if (chk->rec.data.chunk_was_revoked) { 651 /* deflate the cwnd */ 652 chk->whoTo->cwnd -= chk->book_size; 653 chk->rec.data.chunk_was_revoked = 0; 654 } 655 net->marked_retrans++; 656 stcb->asoc.marked_retrans++; 657 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) { 658 sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO, 659 chk->whoTo->flight_size, 660 chk->book_size, 661 (uint32_t)(uintptr_t)chk->whoTo, 662 chk->rec.data.tsn); 663 } 664 sctp_flight_size_decrease(chk); 665 sctp_total_flight_decrease(stcb, chk); 666 stcb->asoc.peers_rwnd += chk->send_size; 667 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh); 668 } 669 chk->sent = SCTP_DATAGRAM_RESEND; 670 SCTP_STAT_INCR(sctps_markedretrans); 671 672 /* reset the TSN for striking and other FR stuff */ 673 chk->rec.data.doing_fast_retransmit = 0; 674 /* Clear any time so NO RTT is being done */ 675 676 if (chk->do_rtt) { 677 if (chk->whoTo->rto_needed == 0) { 678 chk->whoTo->rto_needed = 1; 679 } 680 } 681 chk->do_rtt = 0; 682 if (alt != net) { 683 sctp_free_remote_addr(chk->whoTo); 684 chk->no_fr_allowed = 1; 685 chk->whoTo = alt; 686 atomic_add_int(&alt->ref_count, 1); 687 } else { 688 chk->no_fr_allowed = 0; 689 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) { 690 chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq; 691 } else { 692 chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.tsn; 693 } 694 } 695 /* 696 * CMT: Do not allow FRs on retransmitted TSNs. 697 */ 698 if (stcb->asoc.sctp_cmt_on_off > 0) { 699 chk->no_fr_allowed = 1; 700 } 701 #ifdef THIS_SHOULD_NOT_BE_DONE 702 } else if (chk->sent == SCTP_DATAGRAM_ACKED) { 703 /* remember highest acked one */ 704 could_be_sent = chk; 705 #endif 706 } 707 if (chk->sent == SCTP_DATAGRAM_RESEND) { 708 cnt_mk++; 709 } 710 } 711 if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) { 712 /* we did not subtract the same things? */ 713 audit_tf = 1; 714 } 715 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 716 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT); 717 } 718 #ifdef SCTP_DEBUG 719 if (num_mk) { 720 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n", 721 tsnlast); 722 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%ld\n", 723 num_mk, (u_long)stcb->asoc.peers_rwnd); 724 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n", 725 tsnlast); 726 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%d\n", 727 num_mk, 728 (int)stcb->asoc.peers_rwnd); 729 } 730 #endif 731 *num_marked = num_mk; 732 *num_abandoned = cnt_abandoned; 733 /* 734 * Now check for a ECN Echo that may be stranded And include the 735 * cnt_mk'd to have all resends in the control queue. 736 */ 737 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) { 738 if (chk->sent == SCTP_DATAGRAM_RESEND) { 739 cnt_mk++; 740 } 741 if ((chk->whoTo == net) && 742 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) { 743 sctp_free_remote_addr(chk->whoTo); 744 chk->whoTo = alt; 745 if (chk->sent != SCTP_DATAGRAM_RESEND) { 746 chk->sent = SCTP_DATAGRAM_RESEND; 747 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 748 cnt_mk++; 749 } 750 atomic_add_int(&alt->ref_count, 1); 751 } 752 } 753 #ifdef THIS_SHOULD_NOT_BE_DONE 754 if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) { 755 /* fix it so we retransmit the highest acked anyway */ 756 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 757 cnt_mk++; 758 could_be_sent->sent = SCTP_DATAGRAM_RESEND; 759 } 760 #endif 761 if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) { 762 #ifdef INVARIANTS 763 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n", 764 cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk); 765 #endif 766 #ifndef SCTP_AUDITING_ENABLED 767 stcb->asoc.sent_queue_retran_cnt = cnt_mk; 768 #endif 769 } 770 if (audit_tf) { 771 SCTPDBG(SCTP_DEBUG_TIMER4, 772 "Audit total flight due to negative value net:%p\n", 773 (void *)net); 774 stcb->asoc.total_flight = 0; 775 stcb->asoc.total_flight_count = 0; 776 /* Clear all networks flight size */ 777 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) { 778 lnets->flight_size = 0; 779 SCTPDBG(SCTP_DEBUG_TIMER4, 780 "Net:%p c-f cwnd:%d ssthresh:%d\n", 781 (void *)lnets, lnets->cwnd, lnets->ssthresh); 782 } 783 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) { 784 if (chk->sent < SCTP_DATAGRAM_RESEND) { 785 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) { 786 sctp_misc_ints(SCTP_FLIGHT_LOG_UP, 787 chk->whoTo->flight_size, 788 chk->book_size, 789 (uint32_t)(uintptr_t)chk->whoTo, 790 chk->rec.data.tsn); 791 } 792 sctp_flight_size_increase(chk); 793 sctp_total_flight_increase(stcb, chk); 794 } 795 } 796 } 797 /* We return 1 if we only have a window probe outstanding */ 798 return (0); 799 } 800 801 802 int 803 sctp_t3rxt_timer(struct sctp_inpcb *inp, 804 struct sctp_tcb *stcb, 805 struct sctp_nets *net) 806 { 807 struct sctp_nets *alt; 808 int win_probe, num_mk, num_abandoned; 809 810 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 811 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT); 812 } 813 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) { 814 struct sctp_nets *lnet; 815 816 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) { 817 if (net == lnet) { 818 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3); 819 } else { 820 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3); 821 } 822 } 823 } 824 /* Find an alternate and mark those for retransmission */ 825 if ((stcb->asoc.peers_rwnd == 0) && 826 (stcb->asoc.total_flight < net->mtu)) { 827 SCTP_STAT_INCR(sctps_timowindowprobe); 828 win_probe = 1; 829 } else { 830 win_probe = 0; 831 } 832 833 if (win_probe == 0) { 834 /* We don't do normal threshold management on window probes */ 835 if (sctp_threshold_management(inp, stcb, net, 836 stcb->asoc.max_send_times)) { 837 /* Association was destroyed */ 838 return (1); 839 } else { 840 if (net != stcb->asoc.primary_destination) { 841 /* send a immediate HB if our RTO is stale */ 842 struct timeval now; 843 unsigned int ms_goneby; 844 845 (void)SCTP_GETTIME_TIMEVAL(&now); 846 if (net->last_sent_time.tv_sec) { 847 ms_goneby = (now.tv_sec - net->last_sent_time.tv_sec) * 1000; 848 } else { 849 ms_goneby = 0; 850 } 851 if ((net->dest_state & SCTP_ADDR_PF) == 0) { 852 if ((ms_goneby > net->RTO) || (net->RTO == 0)) { 853 /* 854 * no recent feed back in an 855 * RTO or more, request a 856 * RTT update 857 */ 858 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED); 859 } 860 } 861 } 862 } 863 } else { 864 /* 865 * For a window probe we don't penalize the net's but only 866 * the association. This may fail it if SACKs are not coming 867 * back. If sack's are coming with rwnd locked at 0, we will 868 * continue to hold things waiting for rwnd to raise 869 */ 870 if (sctp_threshold_management(inp, stcb, NULL, 871 stcb->asoc.max_send_times)) { 872 /* Association was destroyed */ 873 return (1); 874 } 875 } 876 if (stcb->asoc.sctp_cmt_on_off > 0) { 877 if (net->pf_threshold < net->failure_threshold) { 878 alt = sctp_find_alternate_net(stcb, net, 2); 879 } else { 880 /* 881 * CMT: Using RTX_SSTHRESH policy for CMT. If CMT is 882 * being used, then pick dest with largest ssthresh 883 * for any retransmission. 884 */ 885 alt = sctp_find_alternate_net(stcb, net, 1); 886 /* 887 * CUCv2: If a different dest is picked for the 888 * retransmission, then new (rtx-)pseudo_cumack 889 * needs to be tracked for orig dest. Let CUCv2 890 * track new (rtx-) pseudo-cumack always. 891 */ 892 net->find_pseudo_cumack = 1; 893 net->find_rtx_pseudo_cumack = 1; 894 } 895 } else { 896 alt = sctp_find_alternate_net(stcb, net, 0); 897 } 898 899 num_mk = 0; 900 num_abandoned = 0; 901 (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe, 902 &num_mk, &num_abandoned); 903 /* FR Loss recovery just ended with the T3. */ 904 stcb->asoc.fast_retran_loss_recovery = 0; 905 906 /* CMT FR loss recovery ended with the T3 */ 907 net->fast_retran_loss_recovery = 0; 908 if ((stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) && 909 (net->flight_size == 0)) { 910 (*stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) (stcb, net); 911 } 912 /* 913 * setup the sat loss recovery that prevents satellite cwnd advance. 914 */ 915 stcb->asoc.sat_t3_loss_recovery = 1; 916 stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq; 917 918 /* Backoff the timer and cwnd */ 919 sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned); 920 if ((!(net->dest_state & SCTP_ADDR_REACHABLE)) || 921 (net->dest_state & SCTP_ADDR_PF)) { 922 /* Move all pending over too */ 923 sctp_move_chunks_from_net(stcb, net); 924 925 /* 926 * Get the address that failed, to force a new src address 927 * selecton and a route allocation. 928 */ 929 if (net->ro._s_addr) { 930 sctp_free_ifa(net->ro._s_addr); 931 net->ro._s_addr = NULL; 932 } 933 net->src_addr_selected = 0; 934 935 /* Force a route allocation too */ 936 if (net->ro.ro_rt) { 937 RTFREE(net->ro.ro_rt); 938 net->ro.ro_rt = NULL; 939 } 940 /* Was it our primary? */ 941 if ((stcb->asoc.primary_destination == net) && (alt != net)) { 942 /* 943 * Yes, note it as such and find an alternate note: 944 * this means HB code must use this to resent the 945 * primary if it goes active AND if someone does a 946 * change-primary then this flag must be cleared 947 * from any net structures. 948 */ 949 if (stcb->asoc.alternate) { 950 sctp_free_remote_addr(stcb->asoc.alternate); 951 } 952 stcb->asoc.alternate = alt; 953 atomic_add_int(&stcb->asoc.alternate->ref_count, 1); 954 } 955 } 956 /* 957 * Special case for cookie-echo'ed case, we don't do output but must 958 * await the COOKIE-ACK before retransmission 959 */ 960 if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) { 961 /* 962 * Here we just reset the timer and start again since we 963 * have not established the asoc 964 */ 965 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net); 966 return (0); 967 } 968 if (stcb->asoc.prsctp_supported) { 969 struct sctp_tmit_chunk *lchk; 970 971 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc); 972 /* C3. See if we need to send a Fwd-TSN */ 973 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) { 974 send_forward_tsn(stcb, &stcb->asoc); 975 if (lchk) { 976 /* Assure a timer is up */ 977 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo); 978 } 979 } 980 } 981 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) { 982 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX); 983 } 984 return (0); 985 } 986 987 int 988 sctp_t1init_timer(struct sctp_inpcb *inp, 989 struct sctp_tcb *stcb, 990 struct sctp_nets *net) 991 { 992 /* bump the thresholds */ 993 if (stcb->asoc.delayed_connection) { 994 /* 995 * special hook for delayed connection. The library did NOT 996 * complete the rest of its sends. 997 */ 998 stcb->asoc.delayed_connection = 0; 999 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED); 1000 return (0); 1001 } 1002 if (SCTP_GET_STATE((&stcb->asoc)) != SCTP_STATE_COOKIE_WAIT) { 1003 return (0); 1004 } 1005 if (sctp_threshold_management(inp, stcb, net, 1006 stcb->asoc.max_init_times)) { 1007 /* Association was destroyed */ 1008 return (1); 1009 } 1010 stcb->asoc.dropped_special_cnt = 0; 1011 sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0); 1012 if (stcb->asoc.initial_init_rto_max < net->RTO) { 1013 net->RTO = stcb->asoc.initial_init_rto_max; 1014 } 1015 if (stcb->asoc.numnets > 1) { 1016 /* If we have more than one addr use it */ 1017 struct sctp_nets *alt; 1018 1019 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0); 1020 if (alt != stcb->asoc.primary_destination) { 1021 sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination); 1022 stcb->asoc.primary_destination = alt; 1023 } 1024 } 1025 /* Send out a new init */ 1026 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED); 1027 return (0); 1028 } 1029 1030 /* 1031 * For cookie and asconf we actually need to find and mark for resend, then 1032 * increment the resend counter (after all the threshold management stuff of 1033 * course). 1034 */ 1035 int 1036 sctp_cookie_timer(struct sctp_inpcb *inp, 1037 struct sctp_tcb *stcb, 1038 struct sctp_nets *net SCTP_UNUSED) 1039 { 1040 struct sctp_nets *alt; 1041 struct sctp_tmit_chunk *cookie; 1042 1043 /* first before all else we must find the cookie */ 1044 TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) { 1045 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) { 1046 break; 1047 } 1048 } 1049 if (cookie == NULL) { 1050 if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) { 1051 /* FOOBAR! */ 1052 struct mbuf *op_err; 1053 1054 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code), 1055 "Cookie timer expired, but no cookie"); 1056 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_3; 1057 sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED); 1058 } else { 1059 #ifdef INVARIANTS 1060 panic("Cookie timer expires in wrong state?"); 1061 #else 1062 SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(&stcb->asoc)); 1063 return (0); 1064 #endif 1065 } 1066 return (0); 1067 } 1068 /* Ok we found the cookie, threshold management next */ 1069 if (sctp_threshold_management(inp, stcb, cookie->whoTo, 1070 stcb->asoc.max_init_times)) { 1071 /* Assoc is over */ 1072 return (1); 1073 } 1074 /* 1075 * Cleared threshold management, now lets backoff the address and 1076 * select an alternate 1077 */ 1078 stcb->asoc.dropped_special_cnt = 0; 1079 sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0); 1080 alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0); 1081 if (alt != cookie->whoTo) { 1082 sctp_free_remote_addr(cookie->whoTo); 1083 cookie->whoTo = alt; 1084 atomic_add_int(&alt->ref_count, 1); 1085 } 1086 /* Now mark the retran info */ 1087 if (cookie->sent != SCTP_DATAGRAM_RESEND) { 1088 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1089 } 1090 cookie->sent = SCTP_DATAGRAM_RESEND; 1091 /* 1092 * Now call the output routine to kick out the cookie again, Note we 1093 * don't mark any chunks for retran so that FR will need to kick in 1094 * to move these (or a send timer). 1095 */ 1096 return (0); 1097 } 1098 1099 int 1100 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 1101 struct sctp_nets *net) 1102 { 1103 struct sctp_nets *alt; 1104 struct sctp_tmit_chunk *strrst = NULL, *chk = NULL; 1105 1106 if (stcb->asoc.stream_reset_outstanding == 0) { 1107 return (0); 1108 } 1109 /* find the existing STRRESET, we use the seq number we sent out on */ 1110 (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst); 1111 if (strrst == NULL) { 1112 return (0); 1113 } 1114 /* do threshold management */ 1115 if (sctp_threshold_management(inp, stcb, strrst->whoTo, 1116 stcb->asoc.max_send_times)) { 1117 /* Assoc is over */ 1118 return (1); 1119 } 1120 /* 1121 * Cleared threshold management, now lets backoff the address and 1122 * select an alternate 1123 */ 1124 sctp_backoff_on_timeout(stcb, strrst->whoTo, 1, 0, 0); 1125 alt = sctp_find_alternate_net(stcb, strrst->whoTo, 0); 1126 sctp_free_remote_addr(strrst->whoTo); 1127 strrst->whoTo = alt; 1128 atomic_add_int(&alt->ref_count, 1); 1129 1130 /* See if a ECN Echo is also stranded */ 1131 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) { 1132 if ((chk->whoTo == net) && 1133 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) { 1134 sctp_free_remote_addr(chk->whoTo); 1135 if (chk->sent != SCTP_DATAGRAM_RESEND) { 1136 chk->sent = SCTP_DATAGRAM_RESEND; 1137 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1138 } 1139 chk->whoTo = alt; 1140 atomic_add_int(&alt->ref_count, 1); 1141 } 1142 } 1143 if (!(net->dest_state & SCTP_ADDR_REACHABLE)) { 1144 /* 1145 * If the address went un-reachable, we need to move to 1146 * alternates for ALL chk's in queue 1147 */ 1148 sctp_move_chunks_from_net(stcb, net); 1149 } 1150 /* mark the retran info */ 1151 if (strrst->sent != SCTP_DATAGRAM_RESEND) 1152 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1153 strrst->sent = SCTP_DATAGRAM_RESEND; 1154 1155 /* restart the timer */ 1156 sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, strrst->whoTo); 1157 return (0); 1158 } 1159 1160 int 1161 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 1162 struct sctp_nets *net) 1163 { 1164 struct sctp_nets *alt; 1165 struct sctp_tmit_chunk *asconf, *chk; 1166 1167 /* is this a first send, or a retransmission? */ 1168 if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) { 1169 /* compose a new ASCONF chunk and send it */ 1170 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED); 1171 } else { 1172 /* 1173 * Retransmission of the existing ASCONF is needed 1174 */ 1175 1176 /* find the existing ASCONF */ 1177 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue); 1178 if (asconf == NULL) { 1179 return (0); 1180 } 1181 /* do threshold management */ 1182 if (sctp_threshold_management(inp, stcb, asconf->whoTo, 1183 stcb->asoc.max_send_times)) { 1184 /* Assoc is over */ 1185 return (1); 1186 } 1187 if (asconf->snd_count > stcb->asoc.max_send_times) { 1188 /* 1189 * Something is rotten: our peer is not responding 1190 * to ASCONFs but apparently is to other chunks. 1191 * i.e. it is not properly handling the chunk type 1192 * upper bits. Mark this peer as ASCONF incapable 1193 * and cleanup. 1194 */ 1195 SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n"); 1196 sctp_asconf_cleanup(stcb, net); 1197 return (0); 1198 } 1199 /* 1200 * cleared threshold management, so now backoff the net and 1201 * select an alternate 1202 */ 1203 sctp_backoff_on_timeout(stcb, asconf->whoTo, 1, 0, 0); 1204 alt = sctp_find_alternate_net(stcb, asconf->whoTo, 0); 1205 if (asconf->whoTo != alt) { 1206 sctp_free_remote_addr(asconf->whoTo); 1207 asconf->whoTo = alt; 1208 atomic_add_int(&alt->ref_count, 1); 1209 } 1210 /* See if an ECN Echo is also stranded */ 1211 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) { 1212 if ((chk->whoTo == net) && 1213 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) { 1214 sctp_free_remote_addr(chk->whoTo); 1215 chk->whoTo = alt; 1216 if (chk->sent != SCTP_DATAGRAM_RESEND) { 1217 chk->sent = SCTP_DATAGRAM_RESEND; 1218 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1219 } 1220 atomic_add_int(&alt->ref_count, 1); 1221 } 1222 } 1223 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) { 1224 if (chk->whoTo != alt) { 1225 sctp_free_remote_addr(chk->whoTo); 1226 chk->whoTo = alt; 1227 atomic_add_int(&alt->ref_count, 1); 1228 } 1229 if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT) 1230 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1231 chk->sent = SCTP_DATAGRAM_RESEND; 1232 } 1233 if (!(net->dest_state & SCTP_ADDR_REACHABLE)) { 1234 /* 1235 * If the address went un-reachable, we need to move 1236 * to the alternate for ALL chunks in queue 1237 */ 1238 sctp_move_chunks_from_net(stcb, net); 1239 } 1240 /* mark the retran info */ 1241 if (asconf->sent != SCTP_DATAGRAM_RESEND) 1242 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1243 asconf->sent = SCTP_DATAGRAM_RESEND; 1244 1245 /* send another ASCONF if any and we can do */ 1246 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED); 1247 } 1248 return (0); 1249 } 1250 1251 /* Mobility adaptation */ 1252 void 1253 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 1254 struct sctp_nets *net SCTP_UNUSED) 1255 { 1256 if (stcb->asoc.deleted_primary == NULL) { 1257 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n"); 1258 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED); 1259 return; 1260 } 1261 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary "); 1262 SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa); 1263 sctp_free_remote_addr(stcb->asoc.deleted_primary); 1264 stcb->asoc.deleted_primary = NULL; 1265 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED); 1266 return; 1267 } 1268 1269 /* 1270 * For the shutdown and shutdown-ack, we do not keep one around on the 1271 * control queue. This means we must generate a new one and call the general 1272 * chunk output routine, AFTER having done threshold management. 1273 * It is assumed that net is non-NULL. 1274 */ 1275 int 1276 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 1277 struct sctp_nets *net) 1278 { 1279 struct sctp_nets *alt; 1280 1281 /* first threshold management */ 1282 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) { 1283 /* Assoc is over */ 1284 return (1); 1285 } 1286 sctp_backoff_on_timeout(stcb, net, 1, 0, 0); 1287 /* second select an alternative */ 1288 alt = sctp_find_alternate_net(stcb, net, 0); 1289 1290 /* third generate a shutdown into the queue for out net */ 1291 sctp_send_shutdown(stcb, alt); 1292 1293 /* fourth restart timer */ 1294 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt); 1295 return (0); 1296 } 1297 1298 int 1299 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 1300 struct sctp_nets *net) 1301 { 1302 struct sctp_nets *alt; 1303 1304 /* first threshold management */ 1305 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) { 1306 /* Assoc is over */ 1307 return (1); 1308 } 1309 sctp_backoff_on_timeout(stcb, net, 1, 0, 0); 1310 /* second select an alternative */ 1311 alt = sctp_find_alternate_net(stcb, net, 0); 1312 1313 /* third generate a shutdown into the queue for out net */ 1314 sctp_send_shutdown_ack(stcb, alt); 1315 1316 /* fourth restart timer */ 1317 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt); 1318 return (0); 1319 } 1320 1321 static void 1322 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp, 1323 struct sctp_tcb *stcb) 1324 { 1325 struct sctp_stream_queue_pending *sp; 1326 unsigned int i, chks_in_queue = 0; 1327 int being_filled = 0; 1328 1329 /* 1330 * This function is ONLY called when the send/sent queues are empty. 1331 */ 1332 if ((stcb == NULL) || (inp == NULL)) 1333 return; 1334 1335 if (stcb->asoc.sent_queue_retran_cnt) { 1336 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n", 1337 stcb->asoc.sent_queue_retran_cnt); 1338 stcb->asoc.sent_queue_retran_cnt = 0; 1339 } 1340 if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) { 1341 /* No stream scheduler information, initialize scheduler */ 1342 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc, 0); 1343 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) { 1344 /* yep, we lost a stream or two */ 1345 SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n"); 1346 } else { 1347 /* no streams lost */ 1348 stcb->asoc.total_output_queue_size = 0; 1349 } 1350 } 1351 /* Check to see if some data queued, if so report it */ 1352 for (i = 0; i < stcb->asoc.streamoutcnt; i++) { 1353 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) { 1354 TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) { 1355 if (sp->msg_is_complete) 1356 being_filled++; 1357 chks_in_queue++; 1358 } 1359 } 1360 } 1361 if (chks_in_queue != stcb->asoc.stream_queue_cnt) { 1362 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n", 1363 stcb->asoc.stream_queue_cnt, chks_in_queue); 1364 } 1365 if (chks_in_queue) { 1366 /* call the output queue function */ 1367 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED); 1368 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) && 1369 (TAILQ_EMPTY(&stcb->asoc.sent_queue))) { 1370 /* 1371 * Probably should go in and make it go back through 1372 * and add fragments allowed 1373 */ 1374 if (being_filled == 0) { 1375 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n", 1376 chks_in_queue); 1377 } 1378 } 1379 } else { 1380 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n", 1381 (u_long)stcb->asoc.total_output_queue_size); 1382 stcb->asoc.total_output_queue_size = 0; 1383 } 1384 } 1385 1386 int 1387 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 1388 struct sctp_nets *net) 1389 { 1390 uint8_t net_was_pf; 1391 1392 if (net->dest_state & SCTP_ADDR_PF) { 1393 net_was_pf = 1; 1394 } else { 1395 net_was_pf = 0; 1396 } 1397 if (net->hb_responded == 0) { 1398 if (net->ro._s_addr) { 1399 /* 1400 * Invalidate the src address if we did not get a 1401 * response last time. 1402 */ 1403 sctp_free_ifa(net->ro._s_addr); 1404 net->ro._s_addr = NULL; 1405 net->src_addr_selected = 0; 1406 } 1407 sctp_backoff_on_timeout(stcb, net, 1, 0, 0); 1408 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) { 1409 /* Assoc is over */ 1410 return (1); 1411 } 1412 } 1413 /* Zero PBA, if it needs it */ 1414 if (net->partial_bytes_acked) { 1415 net->partial_bytes_acked = 0; 1416 } 1417 if ((stcb->asoc.total_output_queue_size > 0) && 1418 (TAILQ_EMPTY(&stcb->asoc.send_queue)) && 1419 (TAILQ_EMPTY(&stcb->asoc.sent_queue))) { 1420 sctp_audit_stream_queues_for_size(inp, stcb); 1421 } 1422 if (!(net->dest_state & SCTP_ADDR_NOHB) && 1423 !((net_was_pf == 0) && (net->dest_state & SCTP_ADDR_PF))) { 1424 /* 1425 * when move to PF during threshold mangement, a HB has been 1426 * queued in that routine 1427 */ 1428 uint32_t ms_gone_by; 1429 1430 if ((net->last_sent_time.tv_sec > 0) || 1431 (net->last_sent_time.tv_usec > 0)) { 1432 struct timeval diff; 1433 1434 SCTP_GETTIME_TIMEVAL(&diff); 1435 timevalsub(&diff, &net->last_sent_time); 1436 ms_gone_by = (uint32_t)(diff.tv_sec * 1000) + 1437 (uint32_t)(diff.tv_usec / 1000); 1438 } else { 1439 ms_gone_by = 0xffffffff; 1440 } 1441 if ((ms_gone_by >= net->heart_beat_delay) || 1442 (net->dest_state & SCTP_ADDR_PF)) { 1443 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED); 1444 } 1445 } 1446 return (0); 1447 } 1448 1449 void 1450 sctp_pathmtu_timer(struct sctp_inpcb *inp, 1451 struct sctp_tcb *stcb, 1452 struct sctp_nets *net) 1453 { 1454 uint32_t next_mtu, mtu; 1455 1456 next_mtu = sctp_get_next_mtu(net->mtu); 1457 1458 if ((next_mtu > net->mtu) && (net->port == 0)) { 1459 if ((net->src_addr_selected == 0) || 1460 (net->ro._s_addr == NULL) || 1461 (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) { 1462 if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) { 1463 sctp_free_ifa(net->ro._s_addr); 1464 net->ro._s_addr = NULL; 1465 net->src_addr_selected = 0; 1466 } else if (net->ro._s_addr == NULL) { 1467 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE) 1468 if (net->ro._l_addr.sa.sa_family == AF_INET6) { 1469 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr; 1470 1471 /* KAME hack: embed scopeid */ 1472 (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone)); 1473 } 1474 #endif 1475 1476 net->ro._s_addr = sctp_source_address_selection(inp, 1477 stcb, 1478 (sctp_route_t *)&net->ro, 1479 net, 0, stcb->asoc.vrf_id); 1480 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE) 1481 if (net->ro._l_addr.sa.sa_family == AF_INET6) { 1482 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr; 1483 1484 (void)sa6_recoverscope(sin6); 1485 } 1486 #endif /* INET6 */ 1487 } 1488 if (net->ro._s_addr) 1489 net->src_addr_selected = 1; 1490 } 1491 if (net->ro._s_addr) { 1492 mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_rt); 1493 #if defined(INET) || defined(INET6) 1494 if (net->port) { 1495 mtu -= sizeof(struct udphdr); 1496 } 1497 #endif 1498 if (mtu > next_mtu) { 1499 net->mtu = next_mtu; 1500 } else { 1501 net->mtu = mtu; 1502 } 1503 } 1504 } 1505 /* restart the timer */ 1506 sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net); 1507 } 1508 1509 void 1510 sctp_autoclose_timer(struct sctp_inpcb *inp, 1511 struct sctp_tcb *stcb, 1512 struct sctp_nets *net) 1513 { 1514 struct timeval tn, *tim_touse; 1515 struct sctp_association *asoc; 1516 int ticks_gone_by; 1517 1518 (void)SCTP_GETTIME_TIMEVAL(&tn); 1519 if (stcb->asoc.sctp_autoclose_ticks && 1520 sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) { 1521 /* Auto close is on */ 1522 asoc = &stcb->asoc; 1523 /* pick the time to use */ 1524 if (asoc->time_last_rcvd.tv_sec > 1525 asoc->time_last_sent.tv_sec) { 1526 tim_touse = &asoc->time_last_rcvd; 1527 } else { 1528 tim_touse = &asoc->time_last_sent; 1529 } 1530 /* Now has long enough transpired to autoclose? */ 1531 ticks_gone_by = SEC_TO_TICKS(tn.tv_sec - tim_touse->tv_sec); 1532 if ((ticks_gone_by > 0) && 1533 (ticks_gone_by >= (int)asoc->sctp_autoclose_ticks)) { 1534 /* 1535 * autoclose time has hit, call the output routine, 1536 * which should do nothing just to be SURE we don't 1537 * have hanging data. We can then safely check the 1538 * queues and know that we are clear to send 1539 * shutdown 1540 */ 1541 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED); 1542 /* Are we clean? */ 1543 if (TAILQ_EMPTY(&asoc->send_queue) && 1544 TAILQ_EMPTY(&asoc->sent_queue)) { 1545 /* 1546 * there is nothing queued to send, so I'm 1547 * done... 1548 */ 1549 if (SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_SENT) { 1550 /* only send SHUTDOWN 1st time thru */ 1551 struct sctp_nets *netp; 1552 1553 if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) || 1554 (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) { 1555 SCTP_STAT_DECR_GAUGE32(sctps_currestab); 1556 } 1557 SCTP_SET_STATE(asoc, SCTP_STATE_SHUTDOWN_SENT); 1558 SCTP_CLEAR_SUBSTATE(asoc, SCTP_STATE_SHUTDOWN_PENDING); 1559 sctp_stop_timers_for_shutdown(stcb); 1560 if (stcb->asoc.alternate) { 1561 netp = stcb->asoc.alternate; 1562 } else { 1563 netp = stcb->asoc.primary_destination; 1564 } 1565 sctp_send_shutdown(stcb, netp); 1566 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, 1567 stcb->sctp_ep, stcb, 1568 netp); 1569 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD, 1570 stcb->sctp_ep, stcb, 1571 netp); 1572 } 1573 } 1574 } else { 1575 /* 1576 * No auto close at this time, reset t-o to check 1577 * later 1578 */ 1579 int tmp; 1580 1581 /* fool the timer startup to use the time left */ 1582 tmp = asoc->sctp_autoclose_ticks; 1583 asoc->sctp_autoclose_ticks -= ticks_gone_by; 1584 sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb, 1585 net); 1586 /* restore the real tick value */ 1587 asoc->sctp_autoclose_ticks = tmp; 1588 } 1589 } 1590 } 1591