1 /* 2 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. Neither the name of the project nor the names of its contributors 14 * may be used to endorse or promote products derived from this software 15 * without specific prior written permission. 16 * 17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27 * SUCH DAMAGE. 28 * 29 * $FreeBSD$ 30 */ 31 32 /* 33 * Copyright (c) 1982, 1986, 1993 34 * The Regents of the University of California. All rights reserved. 35 * 36 * Redistribution and use in source and binary forms, with or without 37 * modification, are permitted provided that the following conditions 38 * are met: 39 * 1. Redistributions of source code must retain the above copyright 40 * notice, this list of conditions and the following disclaimer. 41 * 2. Redistributions in binary form must reproduce the above copyright 42 * notice, this list of conditions and the following disclaimer in the 43 * documentation and/or other materials provided with the distribution. 44 * 3. All advertising materials mentioning features or use of this software 45 * must display the following acknowledgement: 46 * This product includes software developed by the University of 47 * California, Berkeley and its contributors. 48 * 4. Neither the name of the University nor the names of its contributors 49 * may be used to endorse or promote products derived from this software 50 * without specific prior written permission. 51 * 52 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 53 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 54 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 55 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 56 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 57 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 58 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 59 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 60 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 61 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 62 * SUCH DAMAGE. 63 * 64 * @(#)in_proto.c 8.1 (Berkeley) 6/10/93 65 */ 66 67 #include <sys/param.h> 68 #include <sys/socket.h> 69 #include <sys/socketvar.h> 70 #include <sys/protosw.h> 71 #include <sys/kernel.h> 72 #include <sys/domain.h> 73 #include <sys/mbuf.h> 74 #include <sys/systm.h> 75 #include <sys/sysctl.h> 76 77 #include <net/if.h> 78 #include <net/radix.h> 79 #include <net/route.h> 80 81 #include <netinet/in.h> 82 #include <netinet/in_systm.h> 83 #include <netinet/in_var.h> 84 #include <netinet/ip.h> 85 #include <netinet/ip_var.h> 86 #include <netinet6/ip6.h> 87 #include <netinet6/ip6_var.h> 88 #include <netinet6/icmp6.h> 89 90 #include <netinet/tcp.h> 91 #include <netinet/tcp_timer.h> 92 #include <netinet/tcp_var.h> 93 #include <netinet/udp.h> 94 #include <netinet/udp_var.h> 95 #include <netinet6/tcp6_var.h> 96 #include <netinet6/udp6_var.h> 97 98 #include <netinet6/pim6_var.h> 99 100 #include <netinet6/nd6.h> 101 #include <netinet6/in6_prefix.h> 102 103 #ifdef IPSEC 104 #include <netinet6/ipsec.h> 105 #include <netinet6/ipsec6.h> 106 #include <netinet6/ah.h> 107 #ifdef IPSEC_ESP 108 #include <netinet6/esp.h> 109 #endif 110 #include <netinet6/ipcomp.h> 111 #endif /*IPSEC*/ 112 113 #include <netinet6/ip6protosw.h> 114 115 #include "gif.h" 116 #if NGIF > 0 117 #include <netinet6/in6_gif.h> 118 #endif 119 120 #include <net/net_osdep.h> 121 122 #define offsetof(type, member) ((size_t)(&((type *)0)->member)) 123 124 /* 125 * TCP/IP protocol family: IP6, ICMP6, UDP, TCP. 126 */ 127 128 extern struct domain inet6domain; 129 static struct pr_usrreqs nousrreqs; 130 131 struct ip6protosw inet6sw[] = { 132 { 0, &inet6domain, IPPROTO_IPV6, 0, 133 0, 0, 0, 0, 134 0, 135 ip6_init, 0, frag6_slowtimo, frag6_drain, 136 &nousrreqs, 137 }, 138 { SOCK_DGRAM, &inet6domain, IPPROTO_UDP, PR_ATOMIC | PR_ADDR, 139 udp6_input, 0, udp6_ctlinput, ip6_ctloutput, 140 0, 141 0, 0, 0, 0, 142 &udp6_usrreqs, 143 }, 144 { SOCK_RAW, &inet6domain, IPPROTO_RAW, PR_ATOMIC | PR_ADDR, 145 rip6_input, rip6_output, 0, rip6_ctloutput, 146 0, 147 0, 0, 0, 0, 148 &rip6_usrreqs 149 }, 150 { SOCK_RAW, &inet6domain, IPPROTO_ICMPV6, PR_ATOMIC | PR_ADDR, 151 icmp6_input, rip6_output, 0, rip6_ctloutput, 152 0, 153 icmp6_init, icmp6_fasttimo, 0, 0, 154 &rip6_usrreqs 155 }, 156 { SOCK_RAW, &inet6domain, IPPROTO_DSTOPTS,PR_ATOMIC|PR_ADDR, 157 dest6_input, 0, 0, 0, 158 0, 159 0, 0, 0, 0, 160 &nousrreqs 161 }, 162 { SOCK_RAW, &inet6domain, IPPROTO_ROUTING,PR_ATOMIC|PR_ADDR, 163 route6_input, 0, 0, 0, 164 0, 165 0, 0, 0, 0, 166 &nousrreqs 167 }, 168 { SOCK_RAW, &inet6domain, IPPROTO_FRAGMENT,PR_ATOMIC|PR_ADDR, 169 frag6_input, 0, 0, 0, 170 0, 171 0, 0, 0, 0, 172 &nousrreqs 173 }, 174 #ifdef IPSEC 175 { SOCK_RAW, &inet6domain, IPPROTO_AH, PR_ATOMIC|PR_ADDR, 176 ah6_input, 0, 0, 0, 177 0, 178 0, 0, 0, 0, 179 &nousrreqs, 180 }, 181 #ifdef IPSEC_ESP 182 { SOCK_RAW, &inet6domain, IPPROTO_ESP, PR_ATOMIC|PR_ADDR, 183 esp6_input, 0, 0, 0, 184 0, 185 0, 0, 0, 0, 186 &nousrreqs, 187 }, 188 #endif 189 { SOCK_RAW, &inet6domain, IPPROTO_IPCOMP, PR_ATOMIC|PR_ADDR, 190 ipcomp6_input, 0, 0, 0, 191 0, 192 0, 0, 0, 0, 193 &nousrreqs, 194 }, 195 #endif /* IPSEC */ 196 #if NGIF > 0 197 { SOCK_RAW, &inet6domain, IPPROTO_IPV4, PR_ATOMIC|PR_ADDR, 198 in6_gif_input,0, 0, 0, 199 0, 200 0, 0, 0, 0, 201 &nousrreqs 202 }, 203 { SOCK_RAW, &inet6domain, IPPROTO_IPV6, PR_ATOMIC|PR_ADDR, 204 in6_gif_input,0, 0, 0, 205 0, 206 0, 0, 0, 0, 207 &nousrreqs 208 }, 209 #endif /* GIF */ 210 /* raw wildcard */ 211 { SOCK_RAW, &inet6domain, 0, PR_ATOMIC | PR_ADDR, 212 rip6_input, rip6_output, 0, rip6_ctloutput, 213 0, 214 0, 0, 0, 0, 215 &rip6_usrreqs 216 }, 217 }; 218 219 extern int in6_inithead __P((void **, int)); 220 221 struct domain inet6domain = 222 { AF_INET6, "internet6", 0, 0, 0, 223 (struct protosw *)inet6sw, 224 (struct protosw *)&inet6sw[sizeof(inet6sw)/sizeof(inet6sw[0])], 0, 225 in6_inithead, 226 offsetof(struct sockaddr_in6, sin6_addr) << 3, 227 sizeof(struct sockaddr_in6) }; 228 229 DOMAIN_SET(inet6); 230 231 /* 232 * Internet configuration info 233 */ 234 #ifndef IPV6FORWARDING 235 #ifdef GATEWAY6 236 #define IPV6FORWARDING 1 /* forward IP6 packets not for us */ 237 #else 238 #define IPV6FORWARDING 0 /* don't forward IP6 packets not for us */ 239 #endif /* GATEWAY6 */ 240 #endif /* !IPV6FORWARDING */ 241 242 #ifndef IPV6_SENDREDIRECTS 243 #define IPV6_SENDREDIRECTS 1 244 #endif 245 246 int ip6_forwarding = IPV6FORWARDING; /* act as router? */ 247 int ip6_sendredirects = IPV6_SENDREDIRECTS; 248 int ip6_defhlim = IPV6_DEFHLIM; 249 int ip6_defmcasthlim = IPV6_DEFAULT_MULTICAST_HOPS; 250 int ip6_accept_rtadv = 0; /* "IPV6FORWARDING ? 0 : 1" is dangerous */ 251 int ip6_maxfragpackets = 200; 252 int ip6_log_interval = 5; 253 int ip6_hdrnestlimit = 50; /* appropriate? */ 254 int ip6_dad_count = 1; /* DupAddrDetectionTransmits */ 255 u_int32_t ip6_flow_seq; 256 int ip6_auto_flowlabel = 1; 257 #if NGIF > 0 258 int ip6_gif_hlim = GIF_HLIM; 259 #else 260 int ip6_gif_hlim = 0; 261 #endif 262 int ip6_use_deprecated = 1; /* allow deprecated addr (RFC2462 5.5.4) */ 263 int ip6_rr_prune = 5; /* router renumbering prefix 264 * walk list every 5 sec. */ 265 int ip6_mapped_addr_on = 1; 266 267 u_int32_t ip6_id = 0UL; 268 int ip6_keepfaith = 0; 269 time_t ip6_log_time = (time_t)0L; 270 271 /* icmp6 */ 272 /* 273 * BSDI4 defines these variables in in_proto.c... 274 * XXX: what if we don't define INET? Should we define pmtu6_expire 275 * or so? (jinmei@kame.net 19990310) 276 */ 277 int pmtu_expire = 60*10; 278 int pmtu_probe = 60*2; 279 280 /* raw IP6 parameters */ 281 /* 282 * Nominal space allocated to a raw ip socket. 283 */ 284 #define RIPV6SNDQ 8192 285 #define RIPV6RCVQ 8192 286 287 u_long rip6_sendspace = RIPV6SNDQ; 288 u_long rip6_recvspace = RIPV6RCVQ; 289 290 /* ICMPV6 parameters */ 291 int icmp6_rediraccept = 1; /* accept and process redirects */ 292 int icmp6_redirtimeout = 10 * 60; /* 10 minutes */ 293 u_int icmp6errratelim = 1000; /* 1000usec = 1msec */ 294 295 /* UDP on IP6 parameters */ 296 int udp6_sendspace = 9216; /* really max datagram size */ 297 int udp6_recvspace = 40 * (1024 + sizeof(struct sockaddr_in6)); 298 /* 40 1K datagrams */ 299 300 /* 301 * sysctl related items. 302 */ 303 SYSCTL_NODE(_net, PF_INET6, inet6, CTLFLAG_RW, 0, 304 "Internet6 Family"); 305 306 /* net.inet6 */ 307 SYSCTL_NODE(_net_inet6, IPPROTO_IPV6, ip6, CTLFLAG_RW, 0, "IP6"); 308 SYSCTL_NODE(_net_inet6, IPPROTO_ICMPV6, icmp6, CTLFLAG_RW, 0, "ICMP6"); 309 SYSCTL_NODE(_net_inet6, IPPROTO_UDP, udp6, CTLFLAG_RW, 0, "UDP6"); 310 SYSCTL_NODE(_net_inet6, IPPROTO_TCP, tcp6, CTLFLAG_RW, 0, "TCP6"); 311 #ifdef IPSEC 312 SYSCTL_NODE(_net_inet6, IPPROTO_ESP, ipsec6, CTLFLAG_RW, 0, "IPSEC6"); 313 #endif /* IPSEC */ 314 315 /* net.inet6.ip6 */ 316 static int 317 sysctl_ip6_forwarding SYSCTL_HANDLER_ARGS 318 { 319 int error = 0; 320 int old_ip6_forwarding; 321 int changed; 322 323 error = SYSCTL_OUT(req, arg1, sizeof(int)); 324 if (error || !req->newptr) 325 return (error); 326 old_ip6_forwarding = ip6_forwarding; 327 error = SYSCTL_IN(req, arg1, sizeof(int)); 328 if (error != 0) 329 return (error); 330 changed = (ip6_forwarding ? 1 : 0) ^ (old_ip6_forwarding ? 1 : 0); 331 if (changed == 0) 332 return (error); 333 if (ip6_forwarding != 0) { /* host becomes router */ 334 int s = splnet(); 335 struct nd_prefix *pr, *next; 336 337 for (pr = LIST_FIRST(&nd_prefix); pr; pr = next) { 338 next = LIST_NEXT(pr, ndpr_entry); 339 if (!IN6_IS_ADDR_UNSPECIFIED(&pr->ndpr_addr)) 340 in6_ifdel(pr->ndpr_ifp, &pr->ndpr_addr); 341 prelist_remove(pr); 342 } 343 splx(s); 344 } else { /* router becomes host */ 345 struct socket so; 346 347 /* XXX: init dummy so */ 348 bzero(&so, sizeof(so)); 349 while(!LIST_EMPTY(&rr_prefix)) 350 delete_each_prefix(&so, LIST_FIRST(&rr_prefix), 351 PR_ORIG_KERNEL); 352 } 353 354 return (error); 355 } 356 357 SYSCTL_OID(_net_inet6_ip6, IPV6CTL_FORWARDING, forwarding, 358 CTLTYPE_INT|CTLFLAG_RW, &ip6_forwarding, 0, sysctl_ip6_forwarding, 359 "I", ""); 360 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_SENDREDIRECTS, 361 redirect, CTLFLAG_RW, &ip6_sendredirects, 0, ""); 362 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DEFHLIM, 363 hlim, CTLFLAG_RW, &ip6_defhlim, 0, ""); 364 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_MAXFRAGPACKETS, 365 maxfragpackets, CTLFLAG_RW, &ip6_maxfragpackets, 0, ""); 366 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_ACCEPT_RTADV, 367 accept_rtadv, CTLFLAG_RW, &ip6_accept_rtadv, 0, ""); 368 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_KEEPFAITH, 369 keepfaith, CTLFLAG_RW, &ip6_keepfaith, 0, ""); 370 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_LOG_INTERVAL, 371 log_interval, CTLFLAG_RW, &ip6_log_interval, 0, ""); 372 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_HDRNESTLIMIT, 373 hdrnestlimit, CTLFLAG_RW, &ip6_hdrnestlimit, 0, ""); 374 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DAD_COUNT, 375 dad_count, CTLFLAG_RW, &ip6_dad_count, 0, ""); 376 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_AUTO_FLOWLABEL, 377 auto_flowlabel, CTLFLAG_RW, &ip6_auto_flowlabel, 0, ""); 378 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DEFMCASTHLIM, 379 defmcasthlim, CTLFLAG_RW, &ip6_defmcasthlim, 0, ""); 380 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_GIF_HLIM, 381 gifhlim, CTLFLAG_RW, &ip6_gif_hlim, 0, ""); 382 SYSCTL_STRING(_net_inet6_ip6, IPV6CTL_KAME_VERSION, 383 kame_version, CTLFLAG_RD, __KAME_VERSION, 0, ""); 384 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_USE_DEPRECATED, 385 use_deprecated, CTLFLAG_RW, &ip6_use_deprecated, 0, ""); 386 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_RR_PRUNE, 387 rr_prune, CTLFLAG_RW, &ip6_rr_prune, 0, ""); 388 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_MAPPED_ADDR, 389 mapped_addr, CTLFLAG_RW, &ip6_mapped_addr_on, 0, ""); 390 391 /* net.inet6.icmp6 */ 392 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_REDIRACCEPT, 393 rediraccept, CTLFLAG_RW, &icmp6_rediraccept, 0, ""); 394 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_REDIRTIMEOUT, 395 redirtimeout, CTLFLAG_RW, &icmp6_redirtimeout, 0, ""); 396 SYSCTL_STRUCT(_net_inet6_icmp6, ICMPV6CTL_STATS, stats, CTLFLAG_RD, 397 &icmp6stat, icmp6stat, ""); 398 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ERRRATELIMIT, 399 errratelimit, CTLFLAG_RW, &icmp6errratelim, 0, ""); 400 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_PRUNE, 401 nd6_prune, CTLFLAG_RW, &nd6_prune, 0, ""); 402 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_DELAY, 403 nd6_delay, CTLFLAG_RW, &nd6_delay, 0, ""); 404 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_UMAXTRIES, 405 nd6_umaxtries, CTLFLAG_RW, &nd6_umaxtries, 0, ""); 406 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_MMAXTRIES, 407 nd6_mmaxtries, CTLFLAG_RW, &nd6_mmaxtries, 0, ""); 408 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_USELOOPBACK, 409 nd6_useloopback, CTLFLAG_RW, &nd6_useloopback, 0, ""); 410 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_PROXYALL, 411 nd6_proxyall, CTLFLAG_RW, &nd6_proxyall, 0, ""); 412