1caf43b02SWarner Losh /*- 2686cdd19SJun-ichiro itojun Hagino * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 3686cdd19SJun-ichiro itojun Hagino * All rights reserved. 4686cdd19SJun-ichiro itojun Hagino * 5686cdd19SJun-ichiro itojun Hagino * Redistribution and use in source and binary forms, with or without 6686cdd19SJun-ichiro itojun Hagino * modification, are permitted provided that the following conditions 7686cdd19SJun-ichiro itojun Hagino * are met: 8686cdd19SJun-ichiro itojun Hagino * 1. Redistributions of source code must retain the above copyright 9686cdd19SJun-ichiro itojun Hagino * notice, this list of conditions and the following disclaimer. 10686cdd19SJun-ichiro itojun Hagino * 2. Redistributions in binary form must reproduce the above copyright 11686cdd19SJun-ichiro itojun Hagino * notice, this list of conditions and the following disclaimer in the 12686cdd19SJun-ichiro itojun Hagino * documentation and/or other materials provided with the distribution. 13686cdd19SJun-ichiro itojun Hagino * 3. Neither the name of the project nor the names of its contributors 14686cdd19SJun-ichiro itojun Hagino * may be used to endorse or promote products derived from this software 15686cdd19SJun-ichiro itojun Hagino * without specific prior written permission. 16686cdd19SJun-ichiro itojun Hagino * 17686cdd19SJun-ichiro itojun Hagino * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 18686cdd19SJun-ichiro itojun Hagino * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19686cdd19SJun-ichiro itojun Hagino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20686cdd19SJun-ichiro itojun Hagino * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 21686cdd19SJun-ichiro itojun Hagino * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22686cdd19SJun-ichiro itojun Hagino * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23686cdd19SJun-ichiro itojun Hagino * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24686cdd19SJun-ichiro itojun Hagino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25686cdd19SJun-ichiro itojun Hagino * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26686cdd19SJun-ichiro itojun Hagino * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27686cdd19SJun-ichiro itojun Hagino * SUCH DAMAGE. 28b48287a3SDavid E. O'Brien * 29b48287a3SDavid E. O'Brien * $KAME: in6_src.c,v 1.132 2003/08/26 04:42:27 keiichi Exp $ 30686cdd19SJun-ichiro itojun Hagino */ 31686cdd19SJun-ichiro itojun Hagino 32caf43b02SWarner Losh /*- 33686cdd19SJun-ichiro itojun Hagino * Copyright (c) 1982, 1986, 1991, 1993 34686cdd19SJun-ichiro itojun Hagino * The Regents of the University of California. All rights reserved. 35686cdd19SJun-ichiro itojun Hagino * 36686cdd19SJun-ichiro itojun Hagino * Redistribution and use in source and binary forms, with or without 37686cdd19SJun-ichiro itojun Hagino * modification, are permitted provided that the following conditions 38686cdd19SJun-ichiro itojun Hagino * are met: 39686cdd19SJun-ichiro itojun Hagino * 1. Redistributions of source code must retain the above copyright 40686cdd19SJun-ichiro itojun Hagino * notice, this list of conditions and the following disclaimer. 41686cdd19SJun-ichiro itojun Hagino * 2. Redistributions in binary form must reproduce the above copyright 42686cdd19SJun-ichiro itojun Hagino * notice, this list of conditions and the following disclaimer in the 43686cdd19SJun-ichiro itojun Hagino * documentation and/or other materials provided with the distribution. 44686cdd19SJun-ichiro itojun Hagino * 4. Neither the name of the University nor the names of its contributors 45686cdd19SJun-ichiro itojun Hagino * may be used to endorse or promote products derived from this software 46686cdd19SJun-ichiro itojun Hagino * without specific prior written permission. 47686cdd19SJun-ichiro itojun Hagino * 48686cdd19SJun-ichiro itojun Hagino * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 49686cdd19SJun-ichiro itojun Hagino * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 50686cdd19SJun-ichiro itojun Hagino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 51686cdd19SJun-ichiro itojun Hagino * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 52686cdd19SJun-ichiro itojun Hagino * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 53686cdd19SJun-ichiro itojun Hagino * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 54686cdd19SJun-ichiro itojun Hagino * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 55686cdd19SJun-ichiro itojun Hagino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 56686cdd19SJun-ichiro itojun Hagino * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 57686cdd19SJun-ichiro itojun Hagino * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 58686cdd19SJun-ichiro itojun Hagino * SUCH DAMAGE. 59686cdd19SJun-ichiro itojun Hagino * 60686cdd19SJun-ichiro itojun Hagino * @(#)in_pcb.c 8.2 (Berkeley) 1/4/94 61686cdd19SJun-ichiro itojun Hagino */ 62686cdd19SJun-ichiro itojun Hagino 63b48287a3SDavid E. O'Brien #include <sys/cdefs.h> 64b48287a3SDavid E. O'Brien __FBSDID("$FreeBSD$"); 65b48287a3SDavid E. O'Brien 66686cdd19SJun-ichiro itojun Hagino #include "opt_inet.h" 67686cdd19SJun-ichiro itojun Hagino #include "opt_inet6.h" 68e440aed9SQing Li #include "opt_mpath.h" 69686cdd19SJun-ichiro itojun Hagino 70686cdd19SJun-ichiro itojun Hagino #include <sys/param.h> 71686cdd19SJun-ichiro itojun Hagino #include <sys/systm.h> 724e7f640dSJohn Baldwin #include <sys/lock.h> 7333841545SHajimu UMEMOTO #include <sys/malloc.h> 74686cdd19SJun-ichiro itojun Hagino #include <sys/mbuf.h> 75acd3428bSRobert Watson #include <sys/priv.h> 76686cdd19SJun-ichiro itojun Hagino #include <sys/protosw.h> 77686cdd19SJun-ichiro itojun Hagino #include <sys/socket.h> 78686cdd19SJun-ichiro itojun Hagino #include <sys/socketvar.h> 797fc91b3fSHajimu UMEMOTO #include <sys/sockio.h> 807fc91b3fSHajimu UMEMOTO #include <sys/sysctl.h> 81686cdd19SJun-ichiro itojun Hagino #include <sys/errno.h> 82686cdd19SJun-ichiro itojun Hagino #include <sys/time.h> 83413628a7SBjoern A. Zeeb #include <sys/jail.h> 844a201dfcSHajimu UMEMOTO #include <sys/kernel.h> 855d525653SHajimu UMEMOTO #include <sys/sx.h> 86686cdd19SJun-ichiro itojun Hagino 87686cdd19SJun-ichiro itojun Hagino #include <net/if.h> 8876039bc8SGleb Smirnoff #include <net/if_var.h> 899452b0d2SQing Li #include <net/if_dl.h> 90686cdd19SJun-ichiro itojun Hagino #include <net/route.h> 916e6b3f7cSQing Li #include <net/if_llatbl.h> 92e440aed9SQing Li #ifdef RADIX_MPATH 93e440aed9SQing Li #include <net/radix_mpath.h> 94e440aed9SQing Li #endif 95686cdd19SJun-ichiro itojun Hagino 96686cdd19SJun-ichiro itojun Hagino #include <netinet/in.h> 97686cdd19SJun-ichiro itojun Hagino #include <netinet/in_var.h> 98686cdd19SJun-ichiro itojun Hagino #include <netinet/in_systm.h> 99686cdd19SJun-ichiro itojun Hagino #include <netinet/ip.h> 100686cdd19SJun-ichiro itojun Hagino #include <netinet/in_pcb.h> 101dc3c09c8SBjoern A. Zeeb #include <netinet/ip_var.h> 102dc3c09c8SBjoern A. Zeeb #include <netinet/udp.h> 103dc3c09c8SBjoern A. Zeeb #include <netinet/udp_var.h> 1044b79449eSBjoern A. Zeeb 105686cdd19SJun-ichiro itojun Hagino #include <netinet6/in6_var.h> 106686cdd19SJun-ichiro itojun Hagino #include <netinet/ip6.h> 107686cdd19SJun-ichiro itojun Hagino #include <netinet6/in6_pcb.h> 108686cdd19SJun-ichiro itojun Hagino #include <netinet6/ip6_var.h> 109a1f7e5f8SHajimu UMEMOTO #include <netinet6/scope6_var.h> 110686cdd19SJun-ichiro itojun Hagino #include <netinet6/nd6.h> 111686cdd19SJun-ichiro itojun Hagino 1127fc91b3fSHajimu UMEMOTO static struct mtx addrsel_lock; 1137fc91b3fSHajimu UMEMOTO #define ADDRSEL_LOCK_INIT() mtx_init(&addrsel_lock, "addrsel_lock", NULL, MTX_DEF) 1147fc91b3fSHajimu UMEMOTO #define ADDRSEL_LOCK() mtx_lock(&addrsel_lock) 1157fc91b3fSHajimu UMEMOTO #define ADDRSEL_UNLOCK() mtx_unlock(&addrsel_lock) 1167fc91b3fSHajimu UMEMOTO #define ADDRSEL_LOCK_ASSERT() mtx_assert(&addrsel_lock, MA_OWNED) 1177fc91b3fSHajimu UMEMOTO 1185d525653SHajimu UMEMOTO static struct sx addrsel_sxlock; 1195d525653SHajimu UMEMOTO #define ADDRSEL_SXLOCK_INIT() sx_init(&addrsel_sxlock, "addrsel_sxlock") 1205d525653SHajimu UMEMOTO #define ADDRSEL_SLOCK() sx_slock(&addrsel_sxlock) 1215d525653SHajimu UMEMOTO #define ADDRSEL_SUNLOCK() sx_sunlock(&addrsel_sxlock) 1225d525653SHajimu UMEMOTO #define ADDRSEL_XLOCK() sx_xlock(&addrsel_sxlock) 1235d525653SHajimu UMEMOTO #define ADDRSEL_XUNLOCK() sx_xunlock(&addrsel_sxlock) 1245d525653SHajimu UMEMOTO 1257fc91b3fSHajimu UMEMOTO #define ADDR_LABEL_NOTAPP (-1) 1263e288e62SDimitry Andric static VNET_DEFINE(struct in6_addrpolicy, defaultaddrpolicy); 1271e77c105SRobert Watson #define V_defaultaddrpolicy VNET(defaultaddrpolicy) 128d6385b1cSHajimu UMEMOTO 12982cea7e6SBjoern A. Zeeb VNET_DEFINE(int, ip6_prefer_tempaddr) = 0; 13082cea7e6SBjoern A. Zeeb 1316f56329aSXin LI static int selectroute(struct sockaddr_in6 *, struct ip6_pktopts *, 132a1f7e5f8SHajimu UMEMOTO struct ip6_moptions *, struct route_in6 *, struct ifnet **, 1336f56329aSXin LI struct rtentry **, int, u_int); 1346f56329aSXin LI static int in6_selectif(struct sockaddr_in6 *, struct ip6_pktopts *, 1351b46c7f8SBjoern A. Zeeb struct ip6_moptions *, struct route_in6 *ro, struct ifnet **, 1366f56329aSXin LI struct ifnet *, u_int); 137d6385b1cSHajimu UMEMOTO 1389233d8f3SDavid E. O'Brien static struct in6_addrpolicy *lookup_addrsel_policy(struct sockaddr_in6 *); 139d6385b1cSHajimu UMEMOTO 1409233d8f3SDavid E. O'Brien static void init_policy_queue(void); 1419233d8f3SDavid E. O'Brien static int add_addrsel_policyent(struct in6_addrpolicy *); 1429233d8f3SDavid E. O'Brien static int delete_addrsel_policyent(struct in6_addrpolicy *); 1436f56329aSXin LI static int walk_addrsel_policy(int (*)(struct in6_addrpolicy *, void *), 1446f56329aSXin LI void *); 1459233d8f3SDavid E. O'Brien static int dump_addrsel_policyent(struct in6_addrpolicy *, void *); 1469233d8f3SDavid E. O'Brien static struct in6_addrpolicy *match_addrsel_policy(struct sockaddr_in6 *); 1477fc91b3fSHajimu UMEMOTO 148686cdd19SJun-ichiro itojun Hagino /* 14933841545SHajimu UMEMOTO * Return an IPv6 address, which is the most appropriate for a given 150686cdd19SJun-ichiro itojun Hagino * destination and user specified options. 15133841545SHajimu UMEMOTO * If necessary, this function lookups the routing table and returns 152686cdd19SJun-ichiro itojun Hagino * an entry to the caller for later use. 153686cdd19SJun-ichiro itojun Hagino */ 154d6385b1cSHajimu UMEMOTO #define REPLACE(r) do {\ 1554ff7c740SAndrey V. Elsukov IP6STAT_INC(ip6s_sources_rule[(r)]); \ 156e7a87117SAndrey V. Elsukov rule = (r); \ 157ab569b9cSBjoern A. Zeeb /* { \ 158ab569b9cSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN], ip6b[INET6_ADDRSTRLEN]; \ 159ab569b9cSBjoern A. Zeeb printf("in6_selectsrc: replace %s with %s by %d\n", ia_best ? ip6_sprintf(ip6buf, &ia_best->ia_addr.sin6_addr) : "none", ip6_sprintf(ip6b, &ia->ia_addr.sin6_addr), (r)); \ 160ab569b9cSBjoern A. Zeeb } */ \ 161d6385b1cSHajimu UMEMOTO goto replace; \ 162d6385b1cSHajimu UMEMOTO } while(0) 163d6385b1cSHajimu UMEMOTO #define NEXT(r) do {\ 164ab569b9cSBjoern A. Zeeb /* { \ 165ab569b9cSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN], ip6b[INET6_ADDRSTRLEN]; \ 166ab569b9cSBjoern A. Zeeb printf("in6_selectsrc: keep %s against %s by %d\n", ia_best ? ip6_sprintf(ip6buf, &ia_best->ia_addr.sin6_addr) : "none", ip6_sprintf(ip6b, &ia->ia_addr.sin6_addr), (r)); \ 167ab569b9cSBjoern A. Zeeb } */ \ 168d6385b1cSHajimu UMEMOTO goto next; /* XXX: we can't use 'continue' here */ \ 169d6385b1cSHajimu UMEMOTO } while(0) 170d6385b1cSHajimu UMEMOTO #define BREAK(r) do { \ 1714ff7c740SAndrey V. Elsukov IP6STAT_INC(ip6s_sources_rule[(r)]); \ 172e7a87117SAndrey V. Elsukov rule = (r); \ 173d6385b1cSHajimu UMEMOTO goto out; /* XXX: we can't use 'break' here */ \ 174d6385b1cSHajimu UMEMOTO } while(0) 175d6385b1cSHajimu UMEMOTO 17688d166bfSBjoern A. Zeeb int 1771272577eSXin LI in6_selectsrc(struct sockaddr_in6 *dstsock, struct ip6_pktopts *opts, 178f2f877d3SBjoern A. Zeeb struct inpcb *inp, struct route_in6 *ro, struct ucred *cred, 17988d166bfSBjoern A. Zeeb struct ifnet **ifpp, struct in6_addr *srcp) 180686cdd19SJun-ichiro itojun Hagino { 181877fc3b6SBjoern A. Zeeb struct in6_addr dst, tmp; 1821b46c7f8SBjoern A. Zeeb struct ifnet *ifp = NULL, *oifp = NULL; 183d6385b1cSHajimu UMEMOTO struct in6_ifaddr *ia = NULL, *ia_best = NULL; 184686cdd19SJun-ichiro itojun Hagino struct in6_pktinfo *pi = NULL; 185d6385b1cSHajimu UMEMOTO int dst_scope = -1, best_scope = -1, best_matchlen = -1; 186d6385b1cSHajimu UMEMOTO struct in6_addrpolicy *dst_policy = NULL, *best_policy = NULL; 187d6385b1cSHajimu UMEMOTO u_int32_t odstzone; 188d6385b1cSHajimu UMEMOTO int prefer_tempaddr; 189e7a87117SAndrey V. Elsukov int error, rule; 190f2f877d3SBjoern A. Zeeb struct ip6_moptions *mopts; 191e6a27350SHajimu UMEMOTO 19288d166bfSBjoern A. Zeeb KASSERT(srcp != NULL, ("%s: srcp is NULL", __func__)); 19388d166bfSBjoern A. Zeeb 194a1f7e5f8SHajimu UMEMOTO dst = dstsock->sin6_addr; /* make a copy for local operation */ 1951b46c7f8SBjoern A. Zeeb if (ifpp) { 1961b46c7f8SBjoern A. Zeeb /* 1971b46c7f8SBjoern A. Zeeb * Save a possibly passed in ifp for in6_selectsrc. Only 1981b46c7f8SBjoern A. Zeeb * neighbor discovery code should use this feature, where 1991b46c7f8SBjoern A. Zeeb * we may know the interface but not the FIB number holding 2001b46c7f8SBjoern A. Zeeb * the connected subnet in case someone deleted it from the 2011b46c7f8SBjoern A. Zeeb * default FIB and we need to check the interface. 2021b46c7f8SBjoern A. Zeeb */ 2031b46c7f8SBjoern A. Zeeb if (*ifpp != NULL) 2041b46c7f8SBjoern A. Zeeb oifp = *ifpp; 205a1f7e5f8SHajimu UMEMOTO *ifpp = NULL; 2061b46c7f8SBjoern A. Zeeb } 207686cdd19SJun-ichiro itojun Hagino 208a55b8b20SBjoern A. Zeeb if (inp != NULL) { 209a55b8b20SBjoern A. Zeeb INP_LOCK_ASSERT(inp); 210f2f877d3SBjoern A. Zeeb mopts = inp->in6p_moptions; 211a55b8b20SBjoern A. Zeeb } else { 212f2f877d3SBjoern A. Zeeb mopts = NULL; 213a55b8b20SBjoern A. Zeeb } 214f2f877d3SBjoern A. Zeeb 215686cdd19SJun-ichiro itojun Hagino /* 216686cdd19SJun-ichiro itojun Hagino * If the source address is explicitly specified by the caller, 217d6385b1cSHajimu UMEMOTO * check if the requested source address is indeed a unicast address 218d6385b1cSHajimu UMEMOTO * assigned to the node, and can be used as the packet's source 219d6385b1cSHajimu UMEMOTO * address. If everything is okay, use the address as source. 220686cdd19SJun-ichiro itojun Hagino */ 221686cdd19SJun-ichiro itojun Hagino if (opts && (pi = opts->ip6po_pktinfo) && 222d6385b1cSHajimu UMEMOTO !IN6_IS_ADDR_UNSPECIFIED(&pi->ipi6_addr)) { 223d6385b1cSHajimu UMEMOTO struct sockaddr_in6 srcsock; 224d6385b1cSHajimu UMEMOTO struct in6_ifaddr *ia6; 225d6385b1cSHajimu UMEMOTO 226d6385b1cSHajimu UMEMOTO /* get the outgoing interface */ 2271b46c7f8SBjoern A. Zeeb if ((error = in6_selectif(dstsock, opts, mopts, ro, &ifp, oifp, 22881d5d46bSBjoern A. Zeeb (inp != NULL) ? inp->inp_inc.inc_fibnum : RT_DEFAULT_FIB)) 22981d5d46bSBjoern A. Zeeb != 0) 23088d166bfSBjoern A. Zeeb return (error); 23168efda09SHajimu UMEMOTO 232686cdd19SJun-ichiro itojun Hagino /* 233d6385b1cSHajimu UMEMOTO * determine the appropriate zone id of the source based on 234d6385b1cSHajimu UMEMOTO * the zone of the destination and the outgoing interface. 235a1f7e5f8SHajimu UMEMOTO * If the specified address is ambiguous wrt the scope zone, 236a1f7e5f8SHajimu UMEMOTO * the interface must be specified; otherwise, ifa_ifwithaddr() 237a1f7e5f8SHajimu UMEMOTO * will fail matching the address. 238d6385b1cSHajimu UMEMOTO */ 239d6385b1cSHajimu UMEMOTO bzero(&srcsock, sizeof(srcsock)); 240d6385b1cSHajimu UMEMOTO srcsock.sin6_family = AF_INET6; 241d6385b1cSHajimu UMEMOTO srcsock.sin6_len = sizeof(srcsock); 242d6385b1cSHajimu UMEMOTO srcsock.sin6_addr = pi->ipi6_addr; 243d6385b1cSHajimu UMEMOTO if (ifp) { 24488d166bfSBjoern A. Zeeb error = in6_setscope(&srcsock.sin6_addr, ifp, NULL); 24588d166bfSBjoern A. Zeeb if (error) 24688d166bfSBjoern A. Zeeb return (error); 247d6385b1cSHajimu UMEMOTO } 24888d166bfSBjoern A. Zeeb if (cred != NULL && (error = prison_local_ip6(cred, 249b89e82ddSJamie Gritton &srcsock.sin6_addr, (inp != NULL && 250b89e82ddSJamie Gritton (inp->inp_flags & IN6P_IPV6_V6ONLY) != 0))) != 0) 25188d166bfSBjoern A. Zeeb return (error); 252a1f7e5f8SHajimu UMEMOTO 2538c0fec80SRobert Watson ia6 = (struct in6_ifaddr *)ifa_ifwithaddr( 2548c0fec80SRobert Watson (struct sockaddr *)&srcsock); 255d6385b1cSHajimu UMEMOTO if (ia6 == NULL || 256d6385b1cSHajimu UMEMOTO (ia6->ia6_flags & (IN6_IFF_ANYCAST | IN6_IFF_NOTREADY))) { 2578c0fec80SRobert Watson if (ia6 != NULL) 2588c0fec80SRobert Watson ifa_free(&ia6->ia_ifa); 25988d166bfSBjoern A. Zeeb return (EADDRNOTAVAIL); 260d6385b1cSHajimu UMEMOTO } 261d6385b1cSHajimu UMEMOTO pi->ipi6_addr = srcsock.sin6_addr; /* XXX: this overrides pi */ 262a1f7e5f8SHajimu UMEMOTO if (ifpp) 263a1f7e5f8SHajimu UMEMOTO *ifpp = ifp; 26488d166bfSBjoern A. Zeeb bcopy(&ia6->ia_addr.sin6_addr, srcp, sizeof(*srcp)); 2658c0fec80SRobert Watson ifa_free(&ia6->ia_ifa); 26688d166bfSBjoern A. Zeeb return (0); 267d6385b1cSHajimu UMEMOTO } 268d6385b1cSHajimu UMEMOTO 269d6385b1cSHajimu UMEMOTO /* 270d6385b1cSHajimu UMEMOTO * Otherwise, if the socket has already bound the source, just use it. 271686cdd19SJun-ichiro itojun Hagino */ 272f2f877d3SBjoern A. Zeeb if (inp != NULL && !IN6_IS_ADDR_UNSPECIFIED(&inp->in6p_laddr)) { 273b89e82ddSJamie Gritton if (cred != NULL && 27488d166bfSBjoern A. Zeeb (error = prison_local_ip6(cred, &inp->in6p_laddr, 275b89e82ddSJamie Gritton ((inp->inp_flags & IN6P_IPV6_V6ONLY) != 0))) != 0) 27688d166bfSBjoern A. Zeeb return (error); 27788d166bfSBjoern A. Zeeb bcopy(&inp->in6p_laddr, srcp, sizeof(*srcp)); 27888d166bfSBjoern A. Zeeb return (0); 279f2f877d3SBjoern A. Zeeb } 280686cdd19SJun-ichiro itojun Hagino 281686cdd19SJun-ichiro itojun Hagino /* 282592bcae8SBjoern A. Zeeb * Bypass source address selection and use the primary jail IP 283592bcae8SBjoern A. Zeeb * if requested. 284592bcae8SBjoern A. Zeeb */ 285592bcae8SBjoern A. Zeeb if (cred != NULL && !prison_saddrsel_ip6(cred, srcp)) 286592bcae8SBjoern A. Zeeb return (0); 287592bcae8SBjoern A. Zeeb 288592bcae8SBjoern A. Zeeb /* 289d6385b1cSHajimu UMEMOTO * If the address is not specified, choose the best one based on 290d6385b1cSHajimu UMEMOTO * the outgoing interface and the destination address. 291686cdd19SJun-ichiro itojun Hagino */ 292d6385b1cSHajimu UMEMOTO /* get the outgoing interface */ 2931b46c7f8SBjoern A. Zeeb if ((error = in6_selectif(dstsock, opts, mopts, ro, &ifp, oifp, 29481d5d46bSBjoern A. Zeeb (inp != NULL) ? inp->inp_inc.inc_fibnum : RT_DEFAULT_FIB)) != 0) 29588d166bfSBjoern A. Zeeb return (error); 296686cdd19SJun-ichiro itojun Hagino 297d6385b1cSHajimu UMEMOTO #ifdef DIAGNOSTIC 298d6385b1cSHajimu UMEMOTO if (ifp == NULL) /* this should not happen */ 299d6385b1cSHajimu UMEMOTO panic("in6_selectsrc: NULL ifp"); 300d6385b1cSHajimu UMEMOTO #endif 30188d166bfSBjoern A. Zeeb error = in6_setscope(&dst, ifp, &odstzone); 30288d166bfSBjoern A. Zeeb if (error) 30388d166bfSBjoern A. Zeeb return (error); 304a1f7e5f8SHajimu UMEMOTO 305e7a87117SAndrey V. Elsukov rule = 0; 306d1da0a06SRobert Watson IN6_IFADDR_RLOCK(); 30780af0152SRobert Watson TAILQ_FOREACH(ia, &V_in6_ifaddrhead, ia_link) { 308d6385b1cSHajimu UMEMOTO int new_scope = -1, new_matchlen = -1; 309d6385b1cSHajimu UMEMOTO struct in6_addrpolicy *new_policy = NULL; 310d6385b1cSHajimu UMEMOTO u_int32_t srczone, osrczone, dstzone; 311a1f7e5f8SHajimu UMEMOTO struct in6_addr src; 312d6385b1cSHajimu UMEMOTO struct ifnet *ifp1 = ia->ia_ifp; 313d6385b1cSHajimu UMEMOTO 314d6385b1cSHajimu UMEMOTO /* 315d6385b1cSHajimu UMEMOTO * We'll never take an address that breaks the scope zone 316d6385b1cSHajimu UMEMOTO * of the destination. We also skip an address if its zone 317d6385b1cSHajimu UMEMOTO * does not contain the outgoing interface. 318d6385b1cSHajimu UMEMOTO * XXX: we should probably use sin6_scope_id here. 319d6385b1cSHajimu UMEMOTO */ 320a1f7e5f8SHajimu UMEMOTO if (in6_setscope(&dst, ifp1, &dstzone) || 321d6385b1cSHajimu UMEMOTO odstzone != dstzone) { 322d6385b1cSHajimu UMEMOTO continue; 323d6385b1cSHajimu UMEMOTO } 324a1f7e5f8SHajimu UMEMOTO src = ia->ia_addr.sin6_addr; 325a1f7e5f8SHajimu UMEMOTO if (in6_setscope(&src, ifp, &osrczone) || 326a1f7e5f8SHajimu UMEMOTO in6_setscope(&src, ifp1, &srczone) || 327d6385b1cSHajimu UMEMOTO osrczone != srczone) { 328d6385b1cSHajimu UMEMOTO continue; 329686cdd19SJun-ichiro itojun Hagino } 330686cdd19SJun-ichiro itojun Hagino 331d6385b1cSHajimu UMEMOTO /* avoid unusable addresses */ 332d6385b1cSHajimu UMEMOTO if ((ia->ia6_flags & 333d6385b1cSHajimu UMEMOTO (IN6_IFF_NOTREADY | IN6_IFF_ANYCAST | IN6_IFF_DETACHED))) { 334d6385b1cSHajimu UMEMOTO continue; 335d6385b1cSHajimu UMEMOTO } 336603724d3SBjoern A. Zeeb if (!V_ip6_use_deprecated && IFA6_IS_DEPRECATED(ia)) 337d6385b1cSHajimu UMEMOTO continue; 338d6385b1cSHajimu UMEMOTO 339877fc3b6SBjoern A. Zeeb /* If jailed only take addresses of the jail into account. */ 340413628a7SBjoern A. Zeeb if (cred != NULL && 341877fc3b6SBjoern A. Zeeb prison_check_ip6(cred, &ia->ia_addr.sin6_addr) != 0) 342413628a7SBjoern A. Zeeb continue; 343413628a7SBjoern A. Zeeb 344d6385b1cSHajimu UMEMOTO /* Rule 1: Prefer same address */ 345a1f7e5f8SHajimu UMEMOTO if (IN6_ARE_ADDR_EQUAL(&dst, &ia->ia_addr.sin6_addr)) { 346d6385b1cSHajimu UMEMOTO ia_best = ia; 347d6385b1cSHajimu UMEMOTO BREAK(1); /* there should be no better candidate */ 348d6385b1cSHajimu UMEMOTO } 349d6385b1cSHajimu UMEMOTO 350d6385b1cSHajimu UMEMOTO if (ia_best == NULL) 351d6385b1cSHajimu UMEMOTO REPLACE(0); 352d6385b1cSHajimu UMEMOTO 353d6385b1cSHajimu UMEMOTO /* Rule 2: Prefer appropriate scope */ 354d6385b1cSHajimu UMEMOTO if (dst_scope < 0) 355a1f7e5f8SHajimu UMEMOTO dst_scope = in6_addrscope(&dst); 356d6385b1cSHajimu UMEMOTO new_scope = in6_addrscope(&ia->ia_addr.sin6_addr); 357d6385b1cSHajimu UMEMOTO if (IN6_ARE_SCOPE_CMP(best_scope, new_scope) < 0) { 358d6385b1cSHajimu UMEMOTO if (IN6_ARE_SCOPE_CMP(best_scope, dst_scope) < 0) 359d6385b1cSHajimu UMEMOTO REPLACE(2); 360d6385b1cSHajimu UMEMOTO NEXT(2); 361d6385b1cSHajimu UMEMOTO } else if (IN6_ARE_SCOPE_CMP(new_scope, best_scope) < 0) { 362d6385b1cSHajimu UMEMOTO if (IN6_ARE_SCOPE_CMP(new_scope, dst_scope) < 0) 363d6385b1cSHajimu UMEMOTO NEXT(2); 364d6385b1cSHajimu UMEMOTO REPLACE(2); 365d6385b1cSHajimu UMEMOTO } 366d6385b1cSHajimu UMEMOTO 367d6385b1cSHajimu UMEMOTO /* 368d6385b1cSHajimu UMEMOTO * Rule 3: Avoid deprecated addresses. Note that the case of 369d6385b1cSHajimu UMEMOTO * !ip6_use_deprecated is already rejected above. 370d6385b1cSHajimu UMEMOTO */ 371d6385b1cSHajimu UMEMOTO if (!IFA6_IS_DEPRECATED(ia_best) && IFA6_IS_DEPRECATED(ia)) 372d6385b1cSHajimu UMEMOTO NEXT(3); 373d6385b1cSHajimu UMEMOTO if (IFA6_IS_DEPRECATED(ia_best) && !IFA6_IS_DEPRECATED(ia)) 374d6385b1cSHajimu UMEMOTO REPLACE(3); 375d6385b1cSHajimu UMEMOTO 376d6385b1cSHajimu UMEMOTO /* Rule 4: Prefer home addresses */ 377d6385b1cSHajimu UMEMOTO /* 378d6385b1cSHajimu UMEMOTO * XXX: This is a TODO. We should probably merge the MIP6 379d6385b1cSHajimu UMEMOTO * case above. 380d6385b1cSHajimu UMEMOTO */ 381d6385b1cSHajimu UMEMOTO 382d6385b1cSHajimu UMEMOTO /* Rule 5: Prefer outgoing interface */ 383164051ceSHajimu UMEMOTO if (!(ND_IFINFO(ifp)->flags & ND6_IFF_NO_PREFER_IFACE)) { 384d6385b1cSHajimu UMEMOTO if (ia_best->ia_ifp == ifp && ia->ia_ifp != ifp) 385d6385b1cSHajimu UMEMOTO NEXT(5); 386d6385b1cSHajimu UMEMOTO if (ia_best->ia_ifp != ifp && ia->ia_ifp == ifp) 387d6385b1cSHajimu UMEMOTO REPLACE(5); 388164051ceSHajimu UMEMOTO } 389d6385b1cSHajimu UMEMOTO 390d6385b1cSHajimu UMEMOTO /* 391d6385b1cSHajimu UMEMOTO * Rule 6: Prefer matching label 392d6385b1cSHajimu UMEMOTO * Note that best_policy should be non-NULL here. 393d6385b1cSHajimu UMEMOTO */ 394d6385b1cSHajimu UMEMOTO if (dst_policy == NULL) 395d6385b1cSHajimu UMEMOTO dst_policy = lookup_addrsel_policy(dstsock); 396d6385b1cSHajimu UMEMOTO if (dst_policy->label != ADDR_LABEL_NOTAPP) { 397d6385b1cSHajimu UMEMOTO new_policy = lookup_addrsel_policy(&ia->ia_addr); 398d6385b1cSHajimu UMEMOTO if (dst_policy->label == best_policy->label && 399d6385b1cSHajimu UMEMOTO dst_policy->label != new_policy->label) 400d6385b1cSHajimu UMEMOTO NEXT(6); 401d6385b1cSHajimu UMEMOTO if (dst_policy->label != best_policy->label && 402d6385b1cSHajimu UMEMOTO dst_policy->label == new_policy->label) 403d6385b1cSHajimu UMEMOTO REPLACE(6); 404d6385b1cSHajimu UMEMOTO } 405d6385b1cSHajimu UMEMOTO 406d6385b1cSHajimu UMEMOTO /* 407d6385b1cSHajimu UMEMOTO * Rule 7: Prefer public addresses. 408d6385b1cSHajimu UMEMOTO * We allow users to reverse the logic by configuring 409d6385b1cSHajimu UMEMOTO * a sysctl variable, so that privacy conscious users can 410d6385b1cSHajimu UMEMOTO * always prefer temporary addresses. 411d6385b1cSHajimu UMEMOTO */ 412d6385b1cSHajimu UMEMOTO if (opts == NULL || 413d6385b1cSHajimu UMEMOTO opts->ip6po_prefer_tempaddr == IP6PO_TEMPADDR_SYSTEM) { 414603724d3SBjoern A. Zeeb prefer_tempaddr = V_ip6_prefer_tempaddr; 415d6385b1cSHajimu UMEMOTO } else if (opts->ip6po_prefer_tempaddr == 416d6385b1cSHajimu UMEMOTO IP6PO_TEMPADDR_NOTPREFER) { 417d6385b1cSHajimu UMEMOTO prefer_tempaddr = 0; 418d6385b1cSHajimu UMEMOTO } else 419d6385b1cSHajimu UMEMOTO prefer_tempaddr = 1; 420d6385b1cSHajimu UMEMOTO if (!(ia_best->ia6_flags & IN6_IFF_TEMPORARY) && 421d6385b1cSHajimu UMEMOTO (ia->ia6_flags & IN6_IFF_TEMPORARY)) { 422d6385b1cSHajimu UMEMOTO if (prefer_tempaddr) 423d6385b1cSHajimu UMEMOTO REPLACE(7); 424d6385b1cSHajimu UMEMOTO else 425d6385b1cSHajimu UMEMOTO NEXT(7); 426d6385b1cSHajimu UMEMOTO } 427d6385b1cSHajimu UMEMOTO if ((ia_best->ia6_flags & IN6_IFF_TEMPORARY) && 428d6385b1cSHajimu UMEMOTO !(ia->ia6_flags & IN6_IFF_TEMPORARY)) { 429d6385b1cSHajimu UMEMOTO if (prefer_tempaddr) 430d6385b1cSHajimu UMEMOTO NEXT(7); 431d6385b1cSHajimu UMEMOTO else 432d6385b1cSHajimu UMEMOTO REPLACE(7); 433d6385b1cSHajimu UMEMOTO } 434d6385b1cSHajimu UMEMOTO 435d6385b1cSHajimu UMEMOTO /* 436d6385b1cSHajimu UMEMOTO * Rule 8: prefer addresses on alive interfaces. 437d6385b1cSHajimu UMEMOTO * This is a KAME specific rule. 438d6385b1cSHajimu UMEMOTO */ 439d6385b1cSHajimu UMEMOTO if ((ia_best->ia_ifp->if_flags & IFF_UP) && 440d6385b1cSHajimu UMEMOTO !(ia->ia_ifp->if_flags & IFF_UP)) 441d6385b1cSHajimu UMEMOTO NEXT(8); 442d6385b1cSHajimu UMEMOTO if (!(ia_best->ia_ifp->if_flags & IFF_UP) && 443d6385b1cSHajimu UMEMOTO (ia->ia_ifp->if_flags & IFF_UP)) 444d6385b1cSHajimu UMEMOTO REPLACE(8); 445d6385b1cSHajimu UMEMOTO 446d6385b1cSHajimu UMEMOTO /* 447*d6e6b994SAndrey V. Elsukov * Rule 9: prefer address with better virtual status. 448*d6e6b994SAndrey V. Elsukov */ 449*d6e6b994SAndrey V. Elsukov if (ifa_preferred(&ia_best->ia_ifa, &ia->ia_ifa)) 450*d6e6b994SAndrey V. Elsukov REPLACE(9); 451*d6e6b994SAndrey V. Elsukov 452*d6e6b994SAndrey V. Elsukov /* 453d6385b1cSHajimu UMEMOTO * Rule 14: Use longest matching prefix. 454d6385b1cSHajimu UMEMOTO * Note: in the address selection draft, this rule is 455d6385b1cSHajimu UMEMOTO * documented as "Rule 8". However, since it is also 456d6385b1cSHajimu UMEMOTO * documented that this rule can be overridden, we assign 457d6385b1cSHajimu UMEMOTO * a large number so that it is easy to assign smaller numbers 458d6385b1cSHajimu UMEMOTO * to more preferred rules. 459d6385b1cSHajimu UMEMOTO */ 460a1f7e5f8SHajimu UMEMOTO new_matchlen = in6_matchlen(&ia->ia_addr.sin6_addr, &dst); 461d6385b1cSHajimu UMEMOTO if (best_matchlen < new_matchlen) 462d6385b1cSHajimu UMEMOTO REPLACE(14); 463d6385b1cSHajimu UMEMOTO if (new_matchlen < best_matchlen) 464d6385b1cSHajimu UMEMOTO NEXT(14); 465d6385b1cSHajimu UMEMOTO 466d6385b1cSHajimu UMEMOTO /* Rule 15 is reserved. */ 467d6385b1cSHajimu UMEMOTO 468d6385b1cSHajimu UMEMOTO /* 469d6385b1cSHajimu UMEMOTO * Last resort: just keep the current candidate. 470d6385b1cSHajimu UMEMOTO * Or, do we need more rules? 471d6385b1cSHajimu UMEMOTO */ 472d6385b1cSHajimu UMEMOTO continue; 473d6385b1cSHajimu UMEMOTO 474d6385b1cSHajimu UMEMOTO replace: 475d6385b1cSHajimu UMEMOTO ia_best = ia; 476d6385b1cSHajimu UMEMOTO best_scope = (new_scope >= 0 ? new_scope : 477d6385b1cSHajimu UMEMOTO in6_addrscope(&ia_best->ia_addr.sin6_addr)); 478d6385b1cSHajimu UMEMOTO best_policy = (new_policy ? new_policy : 479d6385b1cSHajimu UMEMOTO lookup_addrsel_policy(&ia_best->ia_addr)); 480d6385b1cSHajimu UMEMOTO best_matchlen = (new_matchlen >= 0 ? new_matchlen : 481d6385b1cSHajimu UMEMOTO in6_matchlen(&ia_best->ia_addr.sin6_addr, 482a1f7e5f8SHajimu UMEMOTO &dst)); 483d6385b1cSHajimu UMEMOTO 484d6385b1cSHajimu UMEMOTO next: 485d6385b1cSHajimu UMEMOTO continue; 486d6385b1cSHajimu UMEMOTO 487d6385b1cSHajimu UMEMOTO out: 488d6385b1cSHajimu UMEMOTO break; 489d6385b1cSHajimu UMEMOTO } 490d6385b1cSHajimu UMEMOTO 491d1da0a06SRobert Watson if ((ia = ia_best) == NULL) { 492d1da0a06SRobert Watson IN6_IFADDR_RUNLOCK(); 493e7a87117SAndrey V. Elsukov IP6STAT_INC(ip6s_sources_none); 49488d166bfSBjoern A. Zeeb return (EADDRNOTAVAIL); 495d1da0a06SRobert Watson } 496686cdd19SJun-ichiro itojun Hagino 497877fc3b6SBjoern A. Zeeb /* 498877fc3b6SBjoern A. Zeeb * At this point at least one of the addresses belonged to the jail 499877fc3b6SBjoern A. Zeeb * but it could still be, that we want to further restrict it, e.g. 500877fc3b6SBjoern A. Zeeb * theoratically IN6_IS_ADDR_LOOPBACK. 501877fc3b6SBjoern A. Zeeb * It must not be IN6_IS_ADDR_UNSPECIFIED anymore. 502877fc3b6SBjoern A. Zeeb * prison_local_ip6() will fix an IN6_IS_ADDR_LOOPBACK but should 503877fc3b6SBjoern A. Zeeb * let all others previously selected pass. 504877fc3b6SBjoern A. Zeeb * Use tmp to not change ::1 on lo0 to the primary jail address. 505877fc3b6SBjoern A. Zeeb */ 506877fc3b6SBjoern A. Zeeb tmp = ia->ia_addr.sin6_addr; 507877fc3b6SBjoern A. Zeeb if (cred != NULL && prison_local_ip6(cred, &tmp, (inp != NULL && 508877fc3b6SBjoern A. Zeeb (inp->inp_flags & IN6P_IPV6_V6ONLY) != 0)) != 0) { 509877fc3b6SBjoern A. Zeeb IN6_IFADDR_RUNLOCK(); 510e7a87117SAndrey V. Elsukov IP6STAT_INC(ip6s_sources_none); 511877fc3b6SBjoern A. Zeeb return (EADDRNOTAVAIL); 512877fc3b6SBjoern A. Zeeb } 513877fc3b6SBjoern A. Zeeb 514a1f7e5f8SHajimu UMEMOTO if (ifpp) 515a1f7e5f8SHajimu UMEMOTO *ifpp = ifp; 516a1f7e5f8SHajimu UMEMOTO 517877fc3b6SBjoern A. Zeeb bcopy(&tmp, srcp, sizeof(*srcp)); 5184ff7c740SAndrey V. Elsukov if (ia->ia_ifp == ifp) 5194ff7c740SAndrey V. Elsukov IP6STAT_INC(ip6s_sources_sameif[best_scope]); 5204ff7c740SAndrey V. Elsukov else 5214ff7c740SAndrey V. Elsukov IP6STAT_INC(ip6s_sources_otherif[best_scope]); 5224ff7c740SAndrey V. Elsukov if (dst_scope == best_scope) 5234ff7c740SAndrey V. Elsukov IP6STAT_INC(ip6s_sources_samescope[best_scope]); 5244ff7c740SAndrey V. Elsukov else 5254ff7c740SAndrey V. Elsukov IP6STAT_INC(ip6s_sources_otherscope[best_scope]); 5264ff7c740SAndrey V. Elsukov if (IFA6_IS_DEPRECATED(ia)) 5274ff7c740SAndrey V. Elsukov IP6STAT_INC(ip6s_sources_deprecated[best_scope]); 528d1da0a06SRobert Watson IN6_IFADDR_RUNLOCK(); 52988d166bfSBjoern A. Zeeb return (0); 530d6385b1cSHajimu UMEMOTO } 531d6385b1cSHajimu UMEMOTO 5321272577eSXin LI /* 5331272577eSXin LI * clone - meaningful only for bsdi and freebsd 5341272577eSXin LI */ 535d6385b1cSHajimu UMEMOTO static int 5361272577eSXin LI selectroute(struct sockaddr_in6 *dstsock, struct ip6_pktopts *opts, 5371272577eSXin LI struct ip6_moptions *mopts, struct route_in6 *ro, 5385aa7e8edSBjoern A. Zeeb struct ifnet **retifp, struct rtentry **retrt, int norouteok, u_int fibnum) 539d6385b1cSHajimu UMEMOTO { 540d6385b1cSHajimu UMEMOTO int error = 0; 541d6385b1cSHajimu UMEMOTO struct ifnet *ifp = NULL; 542d6385b1cSHajimu UMEMOTO struct rtentry *rt = NULL; 543d6385b1cSHajimu UMEMOTO struct sockaddr_in6 *sin6_next; 544d6385b1cSHajimu UMEMOTO struct in6_pktinfo *pi = NULL; 545d6385b1cSHajimu UMEMOTO struct in6_addr *dst = &dstsock->sin6_addr; 546d6385b1cSHajimu UMEMOTO #if 0 5471d54aa3bSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN]; 5481d54aa3bSBjoern A. Zeeb 549d6385b1cSHajimu UMEMOTO if (dstsock->sin6_addr.s6_addr32[0] == 0 && 550d6385b1cSHajimu UMEMOTO dstsock->sin6_addr.s6_addr32[1] == 0 && 551d6385b1cSHajimu UMEMOTO !IN6_IS_ADDR_LOOPBACK(&dstsock->sin6_addr)) { 552d6385b1cSHajimu UMEMOTO printf("in6_selectroute: strange destination %s\n", 5531d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &dstsock->sin6_addr)); 554d6385b1cSHajimu UMEMOTO } else { 555d6385b1cSHajimu UMEMOTO printf("in6_selectroute: destination = %s%%%d\n", 5561d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &dstsock->sin6_addr), 557d6385b1cSHajimu UMEMOTO dstsock->sin6_scope_id); /* for debug */ 558d6385b1cSHajimu UMEMOTO } 559d6385b1cSHajimu UMEMOTO #endif 560d6385b1cSHajimu UMEMOTO 561d6385b1cSHajimu UMEMOTO /* If the caller specify the outgoing interface explicitly, use it. */ 562d6385b1cSHajimu UMEMOTO if (opts && (pi = opts->ip6po_pktinfo) != NULL && pi->ipi6_ifindex) { 563d6385b1cSHajimu UMEMOTO /* XXX boundary check is assumed to be already done. */ 564d6385b1cSHajimu UMEMOTO ifp = ifnet_byindex(pi->ipi6_ifindex); 565d6385b1cSHajimu UMEMOTO if (ifp != NULL && 566a1f7e5f8SHajimu UMEMOTO (norouteok || retrt == NULL || 567a1f7e5f8SHajimu UMEMOTO IN6_IS_ADDR_MULTICAST(dst))) { 568d6385b1cSHajimu UMEMOTO /* 569cd0fdcf7SHajimu UMEMOTO * we do not have to check or get the route for 570d6385b1cSHajimu UMEMOTO * multicast. 571d6385b1cSHajimu UMEMOTO */ 572d6385b1cSHajimu UMEMOTO goto done; 573d6385b1cSHajimu UMEMOTO } else 574d6385b1cSHajimu UMEMOTO goto getroute; 575d6385b1cSHajimu UMEMOTO } 576d6385b1cSHajimu UMEMOTO 577d6385b1cSHajimu UMEMOTO /* 578d6385b1cSHajimu UMEMOTO * If the destination address is a multicast address and the outgoing 579d6385b1cSHajimu UMEMOTO * interface for the address is specified by the caller, use it. 580d6385b1cSHajimu UMEMOTO */ 581d6385b1cSHajimu UMEMOTO if (IN6_IS_ADDR_MULTICAST(dst) && 582d6385b1cSHajimu UMEMOTO mopts != NULL && (ifp = mopts->im6o_multicast_ifp) != NULL) { 583d6385b1cSHajimu UMEMOTO goto done; /* we do not need a route for multicast. */ 584d6385b1cSHajimu UMEMOTO } 585d6385b1cSHajimu UMEMOTO 586d6385b1cSHajimu UMEMOTO getroute: 587d6385b1cSHajimu UMEMOTO /* 588d6385b1cSHajimu UMEMOTO * If the next hop address for the packet is specified by the caller, 589d6385b1cSHajimu UMEMOTO * use it as the gateway. 590d6385b1cSHajimu UMEMOTO */ 591d6385b1cSHajimu UMEMOTO if (opts && opts->ip6po_nexthop) { 592d6385b1cSHajimu UMEMOTO struct route_in6 *ron; 5936e6b3f7cSQing Li struct llentry *la; 594d6385b1cSHajimu UMEMOTO 595d6385b1cSHajimu UMEMOTO sin6_next = satosin6(opts->ip6po_nexthop); 596d6385b1cSHajimu UMEMOTO 597d6385b1cSHajimu UMEMOTO /* at this moment, we only support AF_INET6 next hops */ 598d6385b1cSHajimu UMEMOTO if (sin6_next->sin6_family != AF_INET6) { 599d6385b1cSHajimu UMEMOTO error = EAFNOSUPPORT; /* or should we proceed? */ 600d6385b1cSHajimu UMEMOTO goto done; 601d6385b1cSHajimu UMEMOTO } 602d6385b1cSHajimu UMEMOTO 603d6385b1cSHajimu UMEMOTO /* 604d6385b1cSHajimu UMEMOTO * If the next hop is an IPv6 address, then the node identified 605d6385b1cSHajimu UMEMOTO * by that address must be a neighbor of the sending host. 606d6385b1cSHajimu UMEMOTO */ 607d6385b1cSHajimu UMEMOTO ron = &opts->ip6po_nextroute; 6086e6b3f7cSQing Li /* 6096e6b3f7cSQing Li * XXX what do we do here? 6106e6b3f7cSQing Li * PLZ to be fixing 6116e6b3f7cSQing Li */ 6126e6b3f7cSQing Li 6136e6b3f7cSQing Li 6146e6b3f7cSQing Li if (ron->ro_rt == NULL) { 61581d5d46bSBjoern A. Zeeb in6_rtalloc(ron, fibnum); /* multi path case? */ 6166e6b3f7cSQing Li if (ron->ro_rt == NULL) { 61723bc7025SBjoern A. Zeeb /* XXX-BZ WT.? */ 6186e6b3f7cSQing Li if (ron->ro_rt) { 6196e6b3f7cSQing Li RTFREE(ron->ro_rt); 6206e6b3f7cSQing Li ron->ro_rt = NULL; 6216e6b3f7cSQing Li } 6226e6b3f7cSQing Li error = EHOSTUNREACH; 6236e6b3f7cSQing Li goto done; 6246e6b3f7cSQing Li } 6256e6b3f7cSQing Li } 6266e6b3f7cSQing Li 6276e6b3f7cSQing Li rt = ron->ro_rt; 6286e6b3f7cSQing Li ifp = rt->rt_ifp; 62973cb2f38SAndrey V. Elsukov IF_AFDATA_RLOCK(ifp); 630b88aef1dSAndrey V. Elsukov la = lla_lookup(LLTABLE6(ifp), 0, (struct sockaddr *)sin6_next); 63173cb2f38SAndrey V. Elsukov IF_AFDATA_RUNLOCK(ifp); 632688d079bSKip Macy if (la != NULL) 6336e6b3f7cSQing Li LLE_RUNLOCK(la); 6346e6b3f7cSQing Li else { 6356e6b3f7cSQing Li error = EHOSTUNREACH; 6366e6b3f7cSQing Li goto done; 6376e6b3f7cSQing Li } 6386e6b3f7cSQing Li #if 0 639d6385b1cSHajimu UMEMOTO if ((ron->ro_rt && 640d6385b1cSHajimu UMEMOTO (ron->ro_rt->rt_flags & (RTF_UP | RTF_LLINFO)) != 641d6385b1cSHajimu UMEMOTO (RTF_UP | RTF_LLINFO)) || 642c1a049acSSUZUKI Shinsuke !IN6_ARE_ADDR_EQUAL(&satosin6(&ron->ro_dst)->sin6_addr, 643c1a049acSSUZUKI Shinsuke &sin6_next->sin6_addr)) { 644d6385b1cSHajimu UMEMOTO if (ron->ro_rt) { 645d6385b1cSHajimu UMEMOTO RTFREE(ron->ro_rt); 646d6385b1cSHajimu UMEMOTO ron->ro_rt = NULL; 647d6385b1cSHajimu UMEMOTO } 648d6385b1cSHajimu UMEMOTO *satosin6(&ron->ro_dst) = *sin6_next; 649d6385b1cSHajimu UMEMOTO } 650d6385b1cSHajimu UMEMOTO if (ron->ro_rt == NULL) { 6515aa7e8edSBjoern A. Zeeb in6_rtalloc(ron, fibnum); /* multi path case? */ 652d6385b1cSHajimu UMEMOTO if (ron->ro_rt == NULL || 653d6385b1cSHajimu UMEMOTO !(ron->ro_rt->rt_flags & RTF_LLINFO)) { 654d6385b1cSHajimu UMEMOTO if (ron->ro_rt) { 655d6385b1cSHajimu UMEMOTO RTFREE(ron->ro_rt); 656d6385b1cSHajimu UMEMOTO ron->ro_rt = NULL; 657d6385b1cSHajimu UMEMOTO } 658d6385b1cSHajimu UMEMOTO error = EHOSTUNREACH; 659d6385b1cSHajimu UMEMOTO goto done; 660d6385b1cSHajimu UMEMOTO } 661d6385b1cSHajimu UMEMOTO } 6626e6b3f7cSQing Li #endif 663d6385b1cSHajimu UMEMOTO 664d6385b1cSHajimu UMEMOTO /* 665d6385b1cSHajimu UMEMOTO * When cloning is required, try to allocate a route to the 666d6385b1cSHajimu UMEMOTO * destination so that the caller can store path MTU 667d6385b1cSHajimu UMEMOTO * information. 668d6385b1cSHajimu UMEMOTO */ 669d6385b1cSHajimu UMEMOTO goto done; 670d6385b1cSHajimu UMEMOTO } 671d6385b1cSHajimu UMEMOTO 672d6385b1cSHajimu UMEMOTO /* 673d6385b1cSHajimu UMEMOTO * Use a cached route if it exists and is valid, else try to allocate 674d6385b1cSHajimu UMEMOTO * a new one. Note that we should check the address family of the 675d6385b1cSHajimu UMEMOTO * cached destination, in case of sharing the cache with IPv4. 676686cdd19SJun-ichiro itojun Hagino */ 677686cdd19SJun-ichiro itojun Hagino if (ro) { 678686cdd19SJun-ichiro itojun Hagino if (ro->ro_rt && 67954c1b882SHajimu UMEMOTO (!(ro->ro_rt->rt_flags & RTF_UP) || 680d6385b1cSHajimu UMEMOTO ((struct sockaddr *)(&ro->ro_dst))->sa_family != AF_INET6 || 68154c1b882SHajimu UMEMOTO !IN6_ARE_ADDR_EQUAL(&satosin6(&ro->ro_dst)->sin6_addr, 68254c1b882SHajimu UMEMOTO dst))) { 683686cdd19SJun-ichiro itojun Hagino RTFREE(ro->ro_rt); 684d6385b1cSHajimu UMEMOTO ro->ro_rt = (struct rtentry *)NULL; 685686cdd19SJun-ichiro itojun Hagino } 686d6385b1cSHajimu UMEMOTO if (ro->ro_rt == (struct rtentry *)NULL) { 68733841545SHajimu UMEMOTO struct sockaddr_in6 *sa6; 68833841545SHajimu UMEMOTO 689686cdd19SJun-ichiro itojun Hagino /* No route yet, so try to acquire one */ 690686cdd19SJun-ichiro itojun Hagino bzero(&ro->ro_dst, sizeof(struct sockaddr_in6)); 69133841545SHajimu UMEMOTO sa6 = (struct sockaddr_in6 *)&ro->ro_dst; 692d6385b1cSHajimu UMEMOTO *sa6 = *dstsock; 693e6a27350SHajimu UMEMOTO sa6->sin6_scope_id = 0; 69497d8d152SAndre Oppermann 695e440aed9SQing Li #ifdef RADIX_MPATH 69681d5d46bSBjoern A. Zeeb rtalloc_mpath_fib((struct route *)ro, 69781d5d46bSBjoern A. Zeeb ntohl(sa6->sin6_addr.s6_addr32[3]), fibnum); 698e440aed9SQing Li #else 69981d5d46bSBjoern A. Zeeb ro->ro_rt = in6_rtalloc1((struct sockaddr *) 70081d5d46bSBjoern A. Zeeb &ro->ro_dst, 0, 0UL, fibnum); 70137bdc280SSam Leffler if (ro->ro_rt) 702d1dd20beSSam Leffler RT_UNLOCK(ro->ro_rt); 7036e6b3f7cSQing Li #endif 704686cdd19SJun-ichiro itojun Hagino } 705686cdd19SJun-ichiro itojun Hagino 706686cdd19SJun-ichiro itojun Hagino /* 707d6385b1cSHajimu UMEMOTO * do not care about the result if we have the nexthop 708d6385b1cSHajimu UMEMOTO * explicitly specified. 709686cdd19SJun-ichiro itojun Hagino */ 710d6385b1cSHajimu UMEMOTO if (opts && opts->ip6po_nexthop) 711d6385b1cSHajimu UMEMOTO goto done; 712686cdd19SJun-ichiro itojun Hagino 713686cdd19SJun-ichiro itojun Hagino if (ro->ro_rt) { 714d6385b1cSHajimu UMEMOTO ifp = ro->ro_rt->rt_ifp; 715d6385b1cSHajimu UMEMOTO 716d6385b1cSHajimu UMEMOTO if (ifp == NULL) { /* can this really happen? */ 717d6385b1cSHajimu UMEMOTO RTFREE(ro->ro_rt); 718d6385b1cSHajimu UMEMOTO ro->ro_rt = NULL; 719686cdd19SJun-ichiro itojun Hagino } 720686cdd19SJun-ichiro itojun Hagino } 721d6385b1cSHajimu UMEMOTO if (ro->ro_rt == NULL) 722d6385b1cSHajimu UMEMOTO error = EHOSTUNREACH; 723d6385b1cSHajimu UMEMOTO rt = ro->ro_rt; 724d6385b1cSHajimu UMEMOTO 725d6385b1cSHajimu UMEMOTO /* 726d6385b1cSHajimu UMEMOTO * Check if the outgoing interface conflicts with 727d6385b1cSHajimu UMEMOTO * the interface specified by ipi6_ifindex (if specified). 728d6385b1cSHajimu UMEMOTO * Note that loopback interface is always okay. 729d6385b1cSHajimu UMEMOTO * (this may happen when we are sending a packet to one of 730d6385b1cSHajimu UMEMOTO * our own addresses.) 731d6385b1cSHajimu UMEMOTO */ 732403cbcf5SGeorge V. Neville-Neil if (ifp && opts && opts->ip6po_pktinfo && 73368efda09SHajimu UMEMOTO opts->ip6po_pktinfo->ipi6_ifindex) { 734d6385b1cSHajimu UMEMOTO if (!(ifp->if_flags & IFF_LOOPBACK) && 735d6385b1cSHajimu UMEMOTO ifp->if_index != 736d6385b1cSHajimu UMEMOTO opts->ip6po_pktinfo->ipi6_ifindex) { 737d6385b1cSHajimu UMEMOTO error = EHOSTUNREACH; 738d6385b1cSHajimu UMEMOTO goto done; 739d6385b1cSHajimu UMEMOTO } 740d6385b1cSHajimu UMEMOTO } 741686cdd19SJun-ichiro itojun Hagino } 742686cdd19SJun-ichiro itojun Hagino 743d6385b1cSHajimu UMEMOTO done: 744d6385b1cSHajimu UMEMOTO if (ifp == NULL && rt == NULL) { 745d6385b1cSHajimu UMEMOTO /* 746d6385b1cSHajimu UMEMOTO * This can happen if the caller did not pass a cached route 747d6385b1cSHajimu UMEMOTO * nor any other hints. We treat this case an error. 748d6385b1cSHajimu UMEMOTO */ 749d6385b1cSHajimu UMEMOTO error = EHOSTUNREACH; 750d6385b1cSHajimu UMEMOTO } 751d6385b1cSHajimu UMEMOTO if (error == EHOSTUNREACH) 7529cb8d207SAndrey V. Elsukov IP6STAT_INC(ip6s_noroute); 753d6385b1cSHajimu UMEMOTO 7549452b0d2SQing Li if (retifp != NULL) { 755d6385b1cSHajimu UMEMOTO *retifp = ifp; 7569452b0d2SQing Li 7579452b0d2SQing Li /* 7589452b0d2SQing Li * Adjust the "outgoing" interface. If we're going to loop 7599452b0d2SQing Li * the packet back to ourselves, the ifp would be the loopback 7609452b0d2SQing Li * interface. However, we'd rather know the interface associated 7619452b0d2SQing Li * to the destination address (which should probably be one of 7629452b0d2SQing Li * our own addresses.) 7639452b0d2SQing Li */ 7649452b0d2SQing Li if (rt) { 7659452b0d2SQing Li if ((rt->rt_ifp->if_flags & IFF_LOOPBACK) && 7669452b0d2SQing Li (rt->rt_gateway->sa_family == AF_LINK)) 7679452b0d2SQing Li *retifp = 7689452b0d2SQing Li ifnet_byindex(((struct sockaddr_dl *) 7699452b0d2SQing Li rt->rt_gateway)->sdl_index); 7709452b0d2SQing Li } 7719452b0d2SQing Li } 7729452b0d2SQing Li 773d6385b1cSHajimu UMEMOTO if (retrt != NULL) 774d6385b1cSHajimu UMEMOTO *retrt = rt; /* rt may be NULL */ 775d6385b1cSHajimu UMEMOTO 776d6385b1cSHajimu UMEMOTO return (error); 777686cdd19SJun-ichiro itojun Hagino } 778686cdd19SJun-ichiro itojun Hagino 779a1f7e5f8SHajimu UMEMOTO static int 7801272577eSXin LI in6_selectif(struct sockaddr_in6 *dstsock, struct ip6_pktopts *opts, 78181d5d46bSBjoern A. Zeeb struct ip6_moptions *mopts, struct route_in6 *ro, struct ifnet **retifp, 7825aa7e8edSBjoern A. Zeeb struct ifnet *oifp, u_int fibnum) 783a1f7e5f8SHajimu UMEMOTO { 784a1f7e5f8SHajimu UMEMOTO int error; 785a1f7e5f8SHajimu UMEMOTO struct route_in6 sro; 786a1f7e5f8SHajimu UMEMOTO struct rtentry *rt = NULL; 787a1f7e5f8SHajimu UMEMOTO 7881b46c7f8SBjoern A. Zeeb KASSERT(retifp != NULL, ("%s: retifp is NULL", __func__)); 7891b46c7f8SBjoern A. Zeeb 790a1f7e5f8SHajimu UMEMOTO if (ro == NULL) { 791a1f7e5f8SHajimu UMEMOTO bzero(&sro, sizeof(sro)); 792a1f7e5f8SHajimu UMEMOTO ro = &sro; 793a1f7e5f8SHajimu UMEMOTO } 794a1f7e5f8SHajimu UMEMOTO 795a1f7e5f8SHajimu UMEMOTO if ((error = selectroute(dstsock, opts, mopts, ro, retifp, 79681d5d46bSBjoern A. Zeeb &rt, 1, fibnum)) != 0) { 797f8366b03SSeigo Tanimura if (ro == &sro && rt && rt == sro.ro_rt) 798a1f7e5f8SHajimu UMEMOTO RTFREE(rt); 7991b46c7f8SBjoern A. Zeeb /* Help ND. See oifp comment in in6_selectsrc(). */ 8001b46c7f8SBjoern A. Zeeb if (oifp != NULL && fibnum == RT_DEFAULT_FIB) { 8011b46c7f8SBjoern A. Zeeb *retifp = oifp; 8021b46c7f8SBjoern A. Zeeb error = 0; 8031b46c7f8SBjoern A. Zeeb } 804a1f7e5f8SHajimu UMEMOTO return (error); 805a1f7e5f8SHajimu UMEMOTO } 806a1f7e5f8SHajimu UMEMOTO 807a1f7e5f8SHajimu UMEMOTO /* 808a1f7e5f8SHajimu UMEMOTO * do not use a rejected or black hole route. 809a1f7e5f8SHajimu UMEMOTO * XXX: this check should be done in the L2 output routine. 810a1f7e5f8SHajimu UMEMOTO * However, if we skipped this check here, we'd see the following 811a1f7e5f8SHajimu UMEMOTO * scenario: 812a1f7e5f8SHajimu UMEMOTO * - install a rejected route for a scoped address prefix 813a1f7e5f8SHajimu UMEMOTO * (like fe80::/10) 814a1f7e5f8SHajimu UMEMOTO * - send a packet to a destination that matches the scoped prefix, 815a1f7e5f8SHajimu UMEMOTO * with ambiguity about the scope zone. 816a1f7e5f8SHajimu UMEMOTO * - pick the outgoing interface from the route, and disambiguate the 817a1f7e5f8SHajimu UMEMOTO * scope zone with the interface. 818a1f7e5f8SHajimu UMEMOTO * - ip6_output() would try to get another route with the "new" 819a1f7e5f8SHajimu UMEMOTO * destination, which may be valid. 820a1f7e5f8SHajimu UMEMOTO * - we'd see no error on output. 821a1f7e5f8SHajimu UMEMOTO * Although this may not be very harmful, it should still be confusing. 822a1f7e5f8SHajimu UMEMOTO * We thus reject the case here. 823a1f7e5f8SHajimu UMEMOTO */ 824a1f7e5f8SHajimu UMEMOTO if (rt && (rt->rt_flags & (RTF_REJECT | RTF_BLACKHOLE))) { 825a1f7e5f8SHajimu UMEMOTO int flags = (rt->rt_flags & RTF_HOST ? EHOSTUNREACH : ENETUNREACH); 826a1f7e5f8SHajimu UMEMOTO 827f8366b03SSeigo Tanimura if (ro == &sro && rt && rt == sro.ro_rt) 828a1f7e5f8SHajimu UMEMOTO RTFREE(rt); 829a1f7e5f8SHajimu UMEMOTO return (flags); 830a1f7e5f8SHajimu UMEMOTO } 831a1f7e5f8SHajimu UMEMOTO 832f8366b03SSeigo Tanimura if (ro == &sro && rt && rt == sro.ro_rt) 833a1f7e5f8SHajimu UMEMOTO RTFREE(rt); 834a1f7e5f8SHajimu UMEMOTO return (0); 835a1f7e5f8SHajimu UMEMOTO } 836a1f7e5f8SHajimu UMEMOTO 8371272577eSXin LI /* 83881d5d46bSBjoern A. Zeeb * Public wrapper function to selectroute(). 83981d5d46bSBjoern A. Zeeb * 84081d5d46bSBjoern A. Zeeb * XXX-BZ in6_selectroute() should and will grow the FIB argument. The 84181d5d46bSBjoern A. Zeeb * in6_selectroute_fib() function is only there for backward compat on stable. 8421272577eSXin LI */ 843a1f7e5f8SHajimu UMEMOTO int 8441272577eSXin LI in6_selectroute(struct sockaddr_in6 *dstsock, struct ip6_pktopts *opts, 8451272577eSXin LI struct ip6_moptions *mopts, struct route_in6 *ro, 8466e6b3f7cSQing Li struct ifnet **retifp, struct rtentry **retrt) 847a1f7e5f8SHajimu UMEMOTO { 8481272577eSXin LI 849a1f7e5f8SHajimu UMEMOTO return (selectroute(dstsock, opts, mopts, ro, retifp, 85081d5d46bSBjoern A. Zeeb retrt, 0, RT_DEFAULT_FIB)); 851a1f7e5f8SHajimu UMEMOTO } 852a1f7e5f8SHajimu UMEMOTO 85381d5d46bSBjoern A. Zeeb #ifndef BURN_BRIDGES 85481d5d46bSBjoern A. Zeeb int 85581d5d46bSBjoern A. Zeeb in6_selectroute_fib(struct sockaddr_in6 *dstsock, struct ip6_pktopts *opts, 85681d5d46bSBjoern A. Zeeb struct ip6_moptions *mopts, struct route_in6 *ro, 8575aa7e8edSBjoern A. Zeeb struct ifnet **retifp, struct rtentry **retrt, u_int fibnum) 85881d5d46bSBjoern A. Zeeb { 85981d5d46bSBjoern A. Zeeb 86081d5d46bSBjoern A. Zeeb return (selectroute(dstsock, opts, mopts, ro, retifp, 86181d5d46bSBjoern A. Zeeb retrt, 0, fibnum)); 86281d5d46bSBjoern A. Zeeb } 86381d5d46bSBjoern A. Zeeb #endif 86481d5d46bSBjoern A. Zeeb 865686cdd19SJun-ichiro itojun Hagino /* 866686cdd19SJun-ichiro itojun Hagino * Default hop limit selection. The precedence is as follows: 867686cdd19SJun-ichiro itojun Hagino * 1. Hoplimit value specified via ioctl. 868686cdd19SJun-ichiro itojun Hagino * 2. (If the outgoing interface is detected) the current 869686cdd19SJun-ichiro itojun Hagino * hop limit of the interface specified by router advertisement. 870686cdd19SJun-ichiro itojun Hagino * 3. The system default hoplimit. 871686cdd19SJun-ichiro itojun Hagino */ 872686cdd19SJun-ichiro itojun Hagino int 873fc384fa5SBjoern A. Zeeb in6_selecthlim(struct inpcb *in6p, struct ifnet *ifp) 874686cdd19SJun-ichiro itojun Hagino { 8751272577eSXin LI 876686cdd19SJun-ichiro itojun Hagino if (in6p && in6p->in6p_hops >= 0) 877686cdd19SJun-ichiro itojun Hagino return (in6p->in6p_hops); 878686cdd19SJun-ichiro itojun Hagino else if (ifp) 87931b1bfe1SHajimu UMEMOTO return (ND_IFINFO(ifp)->chlim); 88097d8d152SAndre Oppermann else if (in6p && !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_faddr)) { 88197d8d152SAndre Oppermann struct route_in6 ro6; 88297d8d152SAndre Oppermann struct ifnet *lifp; 88397d8d152SAndre Oppermann 88497d8d152SAndre Oppermann bzero(&ro6, sizeof(ro6)); 88597d8d152SAndre Oppermann ro6.ro_dst.sin6_family = AF_INET6; 88697d8d152SAndre Oppermann ro6.ro_dst.sin6_len = sizeof(struct sockaddr_in6); 88797d8d152SAndre Oppermann ro6.ro_dst.sin6_addr = in6p->in6p_faddr; 8885aa7e8edSBjoern A. Zeeb in6_rtalloc(&ro6, in6p->inp_inc.inc_fibnum); 88997d8d152SAndre Oppermann if (ro6.ro_rt) { 89097d8d152SAndre Oppermann lifp = ro6.ro_rt->rt_ifp; 89197d8d152SAndre Oppermann RTFREE(ro6.ro_rt); 89297d8d152SAndre Oppermann if (lifp) 89397d8d152SAndre Oppermann return (ND_IFINFO(lifp)->chlim); 894f8315b5fSBjoern A. Zeeb } 89597d8d152SAndre Oppermann } 896603724d3SBjoern A. Zeeb return (V_ip6_defhlim); 897686cdd19SJun-ichiro itojun Hagino } 898686cdd19SJun-ichiro itojun Hagino 899686cdd19SJun-ichiro itojun Hagino /* 900686cdd19SJun-ichiro itojun Hagino * XXX: this is borrowed from in6_pcbbind(). If possible, we should 901686cdd19SJun-ichiro itojun Hagino * share this function by all *bsd*... 902686cdd19SJun-ichiro itojun Hagino */ 903686cdd19SJun-ichiro itojun Hagino int 9041272577eSXin LI in6_pcbsetport(struct in6_addr *laddr, struct inpcb *inp, struct ucred *cred) 905686cdd19SJun-ichiro itojun Hagino { 906686cdd19SJun-ichiro itojun Hagino struct socket *so = inp->inp_socket; 907efc76f72SBjoern A. Zeeb u_int16_t lport = 0; 90868e0d7e0SRobert Watson int error, lookupflags = 0; 909efc76f72SBjoern A. Zeeb #ifdef INVARIANTS 910686cdd19SJun-ichiro itojun Hagino struct inpcbinfo *pcbinfo = inp->inp_pcbinfo; 911efc76f72SBjoern A. Zeeb #endif 912686cdd19SJun-ichiro itojun Hagino 9138501a69cSRobert Watson INP_WLOCK_ASSERT(inp); 914fa046d87SRobert Watson INP_HASH_WLOCK_ASSERT(pcbinfo); 9158deea4a8SRobert Watson 916b89e82ddSJamie Gritton error = prison_local_ip6(cred, laddr, 917b89e82ddSJamie Gritton ((inp->inp_flags & IN6P_IPV6_V6ONLY) != 0)); 918b89e82ddSJamie Gritton if (error) 919b89e82ddSJamie Gritton return(error); 920413628a7SBjoern A. Zeeb 921686cdd19SJun-ichiro itojun Hagino /* XXX: this is redundant when called from in6_pcbbind */ 922686cdd19SJun-ichiro itojun Hagino if ((so->so_options & (SO_REUSEADDR|SO_REUSEPORT)) == 0) 92368e0d7e0SRobert Watson lookupflags = INPLOOKUP_WILDCARD; 924686cdd19SJun-ichiro itojun Hagino 925686cdd19SJun-ichiro itojun Hagino inp->inp_flags |= INP_ANONPORT; 926686cdd19SJun-ichiro itojun Hagino 92768e0d7e0SRobert Watson error = in_pcb_lport(inp, NULL, &lport, cred, lookupflags); 928efc76f72SBjoern A. Zeeb if (error != 0) 929efc76f72SBjoern A. Zeeb return (error); 930686cdd19SJun-ichiro itojun Hagino 931686cdd19SJun-ichiro itojun Hagino inp->inp_lport = lport; 932686cdd19SJun-ichiro itojun Hagino if (in_pcbinshash(inp) != 0) { 933686cdd19SJun-ichiro itojun Hagino inp->in6p_laddr = in6addr_any; 934686cdd19SJun-ichiro itojun Hagino inp->inp_lport = 0; 935686cdd19SJun-ichiro itojun Hagino return (EAGAIN); 936686cdd19SJun-ichiro itojun Hagino } 937686cdd19SJun-ichiro itojun Hagino 938686cdd19SJun-ichiro itojun Hagino return (0); 939686cdd19SJun-ichiro itojun Hagino } 940686cdd19SJun-ichiro itojun Hagino 9417fc91b3fSHajimu UMEMOTO void 9421272577eSXin LI addrsel_policy_init(void) 9437fc91b3fSHajimu UMEMOTO { 9447fc91b3fSHajimu UMEMOTO 9457fc91b3fSHajimu UMEMOTO init_policy_queue(); 9467fc91b3fSHajimu UMEMOTO 9477fc91b3fSHajimu UMEMOTO /* initialize the "last resort" policy */ 948603724d3SBjoern A. Zeeb bzero(&V_defaultaddrpolicy, sizeof(V_defaultaddrpolicy)); 949603724d3SBjoern A. Zeeb V_defaultaddrpolicy.label = ADDR_LABEL_NOTAPP; 9501ed81b73SMarko Zec 9511ed81b73SMarko Zec if (!IS_DEFAULT_VNET(curvnet)) 9521ed81b73SMarko Zec return; 9531ed81b73SMarko Zec 9541ed81b73SMarko Zec ADDRSEL_LOCK_INIT(); 9551ed81b73SMarko Zec ADDRSEL_SXLOCK_INIT(); 9567fc91b3fSHajimu UMEMOTO } 9577fc91b3fSHajimu UMEMOTO 958d6385b1cSHajimu UMEMOTO static struct in6_addrpolicy * 9591272577eSXin LI lookup_addrsel_policy(struct sockaddr_in6 *key) 960d6385b1cSHajimu UMEMOTO { 961d6385b1cSHajimu UMEMOTO struct in6_addrpolicy *match = NULL; 962d6385b1cSHajimu UMEMOTO 963d6385b1cSHajimu UMEMOTO ADDRSEL_LOCK(); 964d6385b1cSHajimu UMEMOTO match = match_addrsel_policy(key); 965d6385b1cSHajimu UMEMOTO 966d6385b1cSHajimu UMEMOTO if (match == NULL) 967603724d3SBjoern A. Zeeb match = &V_defaultaddrpolicy; 968d6385b1cSHajimu UMEMOTO else 969d6385b1cSHajimu UMEMOTO match->use++; 970d6385b1cSHajimu UMEMOTO ADDRSEL_UNLOCK(); 971d6385b1cSHajimu UMEMOTO 972d6385b1cSHajimu UMEMOTO return (match); 973d6385b1cSHajimu UMEMOTO } 974d6385b1cSHajimu UMEMOTO 9757fc91b3fSHajimu UMEMOTO /* 9767fc91b3fSHajimu UMEMOTO * Subroutines to manage the address selection policy table via sysctl. 9777fc91b3fSHajimu UMEMOTO */ 9787fc91b3fSHajimu UMEMOTO struct walkarg { 9797fc91b3fSHajimu UMEMOTO struct sysctl_req *w_req; 9807fc91b3fSHajimu UMEMOTO }; 9817fc91b3fSHajimu UMEMOTO 9827fc91b3fSHajimu UMEMOTO static int in6_src_sysctl(SYSCTL_HANDLER_ARGS); 9837fc91b3fSHajimu UMEMOTO SYSCTL_DECL(_net_inet6_ip6); 9846472ac3dSEd Schouten static SYSCTL_NODE(_net_inet6_ip6, IPV6CTL_ADDRCTLPOLICY, addrctlpolicy, 9857fc91b3fSHajimu UMEMOTO CTLFLAG_RD, in6_src_sysctl, ""); 9867fc91b3fSHajimu UMEMOTO 9877fc91b3fSHajimu UMEMOTO static int 9887fc91b3fSHajimu UMEMOTO in6_src_sysctl(SYSCTL_HANDLER_ARGS) 9897fc91b3fSHajimu UMEMOTO { 9907fc91b3fSHajimu UMEMOTO struct walkarg w; 9917fc91b3fSHajimu UMEMOTO 9927fc91b3fSHajimu UMEMOTO if (req->newptr) 9937fc91b3fSHajimu UMEMOTO return EPERM; 9947fc91b3fSHajimu UMEMOTO 9957fc91b3fSHajimu UMEMOTO bzero(&w, sizeof(w)); 9967fc91b3fSHajimu UMEMOTO w.w_req = req; 9977fc91b3fSHajimu UMEMOTO 9987fc91b3fSHajimu UMEMOTO return (walk_addrsel_policy(dump_addrsel_policyent, &w)); 9997fc91b3fSHajimu UMEMOTO } 10007fc91b3fSHajimu UMEMOTO 10017fc91b3fSHajimu UMEMOTO int 10021272577eSXin LI in6_src_ioctl(u_long cmd, caddr_t data) 10037fc91b3fSHajimu UMEMOTO { 10047fc91b3fSHajimu UMEMOTO struct in6_addrpolicy ent0; 10057fc91b3fSHajimu UMEMOTO 10067fc91b3fSHajimu UMEMOTO if (cmd != SIOCAADDRCTL_POLICY && cmd != SIOCDADDRCTL_POLICY) 10077fc91b3fSHajimu UMEMOTO return (EOPNOTSUPP); /* check for safety */ 10087fc91b3fSHajimu UMEMOTO 10097fc91b3fSHajimu UMEMOTO ent0 = *(struct in6_addrpolicy *)data; 10107fc91b3fSHajimu UMEMOTO 10117fc91b3fSHajimu UMEMOTO if (ent0.label == ADDR_LABEL_NOTAPP) 10127fc91b3fSHajimu UMEMOTO return (EINVAL); 10137fc91b3fSHajimu UMEMOTO /* check if the prefix mask is consecutive. */ 10147fc91b3fSHajimu UMEMOTO if (in6_mask2len(&ent0.addrmask.sin6_addr, NULL) < 0) 10157fc91b3fSHajimu UMEMOTO return (EINVAL); 10167fc91b3fSHajimu UMEMOTO /* clear trailing garbages (if any) of the prefix address. */ 10171dc8f6a8SAlexander V. Chernikov IN6_MASK_ADDR(&ent0.addr.sin6_addr, &ent0.addrmask.sin6_addr); 10187fc91b3fSHajimu UMEMOTO ent0.use = 0; 10197fc91b3fSHajimu UMEMOTO 10207fc91b3fSHajimu UMEMOTO switch (cmd) { 10217fc91b3fSHajimu UMEMOTO case SIOCAADDRCTL_POLICY: 10227fc91b3fSHajimu UMEMOTO return (add_addrsel_policyent(&ent0)); 10237fc91b3fSHajimu UMEMOTO case SIOCDADDRCTL_POLICY: 10247fc91b3fSHajimu UMEMOTO return (delete_addrsel_policyent(&ent0)); 10257fc91b3fSHajimu UMEMOTO } 10267fc91b3fSHajimu UMEMOTO 10277fc91b3fSHajimu UMEMOTO return (0); /* XXX: compromise compilers */ 10287fc91b3fSHajimu UMEMOTO } 10297fc91b3fSHajimu UMEMOTO 10307fc91b3fSHajimu UMEMOTO /* 10317fc91b3fSHajimu UMEMOTO * The followings are implementation of the policy table using a 10327fc91b3fSHajimu UMEMOTO * simple tail queue. 10337fc91b3fSHajimu UMEMOTO * XXX such details should be hidden. 10347fc91b3fSHajimu UMEMOTO * XXX implementation using binary tree should be more efficient. 10357fc91b3fSHajimu UMEMOTO */ 10367fc91b3fSHajimu UMEMOTO struct addrsel_policyent { 10377fc91b3fSHajimu UMEMOTO TAILQ_ENTRY(addrsel_policyent) ape_entry; 10387fc91b3fSHajimu UMEMOTO struct in6_addrpolicy ape_policy; 10397fc91b3fSHajimu UMEMOTO }; 10407fc91b3fSHajimu UMEMOTO 10417fc91b3fSHajimu UMEMOTO TAILQ_HEAD(addrsel_policyhead, addrsel_policyent); 10427fc91b3fSHajimu UMEMOTO 10433e288e62SDimitry Andric static VNET_DEFINE(struct addrsel_policyhead, addrsel_policytab); 10441e77c105SRobert Watson #define V_addrsel_policytab VNET(addrsel_policytab) 10457fc91b3fSHajimu UMEMOTO 10467fc91b3fSHajimu UMEMOTO static void 10471272577eSXin LI init_policy_queue(void) 10487fc91b3fSHajimu UMEMOTO { 10491272577eSXin LI 1050603724d3SBjoern A. Zeeb TAILQ_INIT(&V_addrsel_policytab); 10517fc91b3fSHajimu UMEMOTO } 10527fc91b3fSHajimu UMEMOTO 10537fc91b3fSHajimu UMEMOTO static int 10541272577eSXin LI add_addrsel_policyent(struct in6_addrpolicy *newpolicy) 10557fc91b3fSHajimu UMEMOTO { 10567fc91b3fSHajimu UMEMOTO struct addrsel_policyent *new, *pol; 10577fc91b3fSHajimu UMEMOTO 10581ede983cSDag-Erling Smørgrav new = malloc(sizeof(*new), M_IFADDR, 1059349b668aSHajimu UMEMOTO M_WAITOK); 10605d525653SHajimu UMEMOTO ADDRSEL_XLOCK(); 10617fc91b3fSHajimu UMEMOTO ADDRSEL_LOCK(); 10627fc91b3fSHajimu UMEMOTO 10637fc91b3fSHajimu UMEMOTO /* duplication check */ 1064603724d3SBjoern A. Zeeb TAILQ_FOREACH(pol, &V_addrsel_policytab, ape_entry) { 1065c1a049acSSUZUKI Shinsuke if (IN6_ARE_ADDR_EQUAL(&newpolicy->addr.sin6_addr, 1066c1a049acSSUZUKI Shinsuke &pol->ape_policy.addr.sin6_addr) && 1067c1a049acSSUZUKI Shinsuke IN6_ARE_ADDR_EQUAL(&newpolicy->addrmask.sin6_addr, 1068c1a049acSSUZUKI Shinsuke &pol->ape_policy.addrmask.sin6_addr)) { 1069349b668aSHajimu UMEMOTO ADDRSEL_UNLOCK(); 10705d525653SHajimu UMEMOTO ADDRSEL_XUNLOCK(); 10711ede983cSDag-Erling Smørgrav free(new, M_IFADDR); 10727fc91b3fSHajimu UMEMOTO return (EEXIST); /* or override it? */ 10737fc91b3fSHajimu UMEMOTO } 10747fc91b3fSHajimu UMEMOTO } 10757fc91b3fSHajimu UMEMOTO 10767fc91b3fSHajimu UMEMOTO bzero(new, sizeof(*new)); 10777fc91b3fSHajimu UMEMOTO 10787fc91b3fSHajimu UMEMOTO /* XXX: should validate entry */ 10797fc91b3fSHajimu UMEMOTO new->ape_policy = *newpolicy; 10807fc91b3fSHajimu UMEMOTO 1081603724d3SBjoern A. Zeeb TAILQ_INSERT_TAIL(&V_addrsel_policytab, new, ape_entry); 10827fc91b3fSHajimu UMEMOTO ADDRSEL_UNLOCK(); 10835d525653SHajimu UMEMOTO ADDRSEL_XUNLOCK(); 10847fc91b3fSHajimu UMEMOTO 10857fc91b3fSHajimu UMEMOTO return (0); 10867fc91b3fSHajimu UMEMOTO } 10877fc91b3fSHajimu UMEMOTO 10887fc91b3fSHajimu UMEMOTO static int 10891272577eSXin LI delete_addrsel_policyent(struct in6_addrpolicy *key) 10907fc91b3fSHajimu UMEMOTO { 10917fc91b3fSHajimu UMEMOTO struct addrsel_policyent *pol; 10927fc91b3fSHajimu UMEMOTO 10935d525653SHajimu UMEMOTO ADDRSEL_XLOCK(); 10947fc91b3fSHajimu UMEMOTO ADDRSEL_LOCK(); 10957fc91b3fSHajimu UMEMOTO 10967fc91b3fSHajimu UMEMOTO /* search for the entry in the table */ 1097603724d3SBjoern A. Zeeb TAILQ_FOREACH(pol, &V_addrsel_policytab, ape_entry) { 1098c1a049acSSUZUKI Shinsuke if (IN6_ARE_ADDR_EQUAL(&key->addr.sin6_addr, 1099c1a049acSSUZUKI Shinsuke &pol->ape_policy.addr.sin6_addr) && 1100c1a049acSSUZUKI Shinsuke IN6_ARE_ADDR_EQUAL(&key->addrmask.sin6_addr, 1101c1a049acSSUZUKI Shinsuke &pol->ape_policy.addrmask.sin6_addr)) { 11027fc91b3fSHajimu UMEMOTO break; 11037fc91b3fSHajimu UMEMOTO } 11047fc91b3fSHajimu UMEMOTO } 1105349b668aSHajimu UMEMOTO if (pol == NULL) { 1106349b668aSHajimu UMEMOTO ADDRSEL_UNLOCK(); 11075d525653SHajimu UMEMOTO ADDRSEL_XUNLOCK(); 11087fc91b3fSHajimu UMEMOTO return (ESRCH); 1109349b668aSHajimu UMEMOTO } 11107fc91b3fSHajimu UMEMOTO 1111603724d3SBjoern A. Zeeb TAILQ_REMOVE(&V_addrsel_policytab, pol, ape_entry); 11127fc91b3fSHajimu UMEMOTO ADDRSEL_UNLOCK(); 11135d525653SHajimu UMEMOTO ADDRSEL_XUNLOCK(); 1114ecc5c738SAndrey V. Elsukov free(pol, M_IFADDR); 11157fc91b3fSHajimu UMEMOTO 11167fc91b3fSHajimu UMEMOTO return (0); 11177fc91b3fSHajimu UMEMOTO } 11187fc91b3fSHajimu UMEMOTO 11197fc91b3fSHajimu UMEMOTO static int 1120f1e0de69SDavid E. O'Brien walk_addrsel_policy(int (*callback)(struct in6_addrpolicy *, void *), void *w) 11217fc91b3fSHajimu UMEMOTO { 11227fc91b3fSHajimu UMEMOTO struct addrsel_policyent *pol; 11237fc91b3fSHajimu UMEMOTO int error = 0; 11247fc91b3fSHajimu UMEMOTO 11255d525653SHajimu UMEMOTO ADDRSEL_SLOCK(); 1126603724d3SBjoern A. Zeeb TAILQ_FOREACH(pol, &V_addrsel_policytab, ape_entry) { 11275d525653SHajimu UMEMOTO if ((error = (*callback)(&pol->ape_policy, w)) != 0) { 11285d525653SHajimu UMEMOTO ADDRSEL_SUNLOCK(); 11297fc91b3fSHajimu UMEMOTO return (error); 1130349b668aSHajimu UMEMOTO } 11315d525653SHajimu UMEMOTO } 11325d525653SHajimu UMEMOTO ADDRSEL_SUNLOCK(); 11337fc91b3fSHajimu UMEMOTO return (error); 11347fc91b3fSHajimu UMEMOTO } 11357fc91b3fSHajimu UMEMOTO 11367fc91b3fSHajimu UMEMOTO static int 11371272577eSXin LI dump_addrsel_policyent(struct in6_addrpolicy *pol, void *arg) 11387fc91b3fSHajimu UMEMOTO { 11397fc91b3fSHajimu UMEMOTO int error = 0; 11407fc91b3fSHajimu UMEMOTO struct walkarg *w = arg; 11417fc91b3fSHajimu UMEMOTO 11427fc91b3fSHajimu UMEMOTO error = SYSCTL_OUT(w->w_req, pol, sizeof(*pol)); 11437fc91b3fSHajimu UMEMOTO 11447fc91b3fSHajimu UMEMOTO return (error); 11457fc91b3fSHajimu UMEMOTO } 1146d6385b1cSHajimu UMEMOTO 1147d6385b1cSHajimu UMEMOTO static struct in6_addrpolicy * 11481272577eSXin LI match_addrsel_policy(struct sockaddr_in6 *key) 1149d6385b1cSHajimu UMEMOTO { 1150d6385b1cSHajimu UMEMOTO struct addrsel_policyent *pent; 1151d6385b1cSHajimu UMEMOTO struct in6_addrpolicy *bestpol = NULL, *pol; 1152d6385b1cSHajimu UMEMOTO int matchlen, bestmatchlen = -1; 1153d6385b1cSHajimu UMEMOTO u_char *mp, *ep, *k, *p, m; 1154d6385b1cSHajimu UMEMOTO 1155603724d3SBjoern A. Zeeb TAILQ_FOREACH(pent, &V_addrsel_policytab, ape_entry) { 1156d6385b1cSHajimu UMEMOTO matchlen = 0; 1157d6385b1cSHajimu UMEMOTO 1158d6385b1cSHajimu UMEMOTO pol = &pent->ape_policy; 1159d6385b1cSHajimu UMEMOTO mp = (u_char *)&pol->addrmask.sin6_addr; 1160d6385b1cSHajimu UMEMOTO ep = mp + 16; /* XXX: scope field? */ 1161d6385b1cSHajimu UMEMOTO k = (u_char *)&key->sin6_addr; 1162d6385b1cSHajimu UMEMOTO p = (u_char *)&pol->addr.sin6_addr; 1163d6385b1cSHajimu UMEMOTO for (; mp < ep && *mp; mp++, k++, p++) { 1164d6385b1cSHajimu UMEMOTO m = *mp; 1165d6385b1cSHajimu UMEMOTO if ((*k & m) != *p) 1166d6385b1cSHajimu UMEMOTO goto next; /* not match */ 1167d6385b1cSHajimu UMEMOTO if (m == 0xff) /* short cut for a typical case */ 1168d6385b1cSHajimu UMEMOTO matchlen += 8; 1169d6385b1cSHajimu UMEMOTO else { 1170d6385b1cSHajimu UMEMOTO while (m >= 0x80) { 1171d6385b1cSHajimu UMEMOTO matchlen++; 1172d6385b1cSHajimu UMEMOTO m <<= 1; 1173d6385b1cSHajimu UMEMOTO } 1174d6385b1cSHajimu UMEMOTO } 1175d6385b1cSHajimu UMEMOTO } 1176d6385b1cSHajimu UMEMOTO 1177d6385b1cSHajimu UMEMOTO /* matched. check if this is better than the current best. */ 1178d6385b1cSHajimu UMEMOTO if (bestpol == NULL || 1179d6385b1cSHajimu UMEMOTO matchlen > bestmatchlen) { 1180d6385b1cSHajimu UMEMOTO bestpol = pol; 1181d6385b1cSHajimu UMEMOTO bestmatchlen = matchlen; 1182d6385b1cSHajimu UMEMOTO } 1183d6385b1cSHajimu UMEMOTO 1184d6385b1cSHajimu UMEMOTO next: 1185d6385b1cSHajimu UMEMOTO continue; 1186d6385b1cSHajimu UMEMOTO } 1187d6385b1cSHajimu UMEMOTO 1188d6385b1cSHajimu UMEMOTO return (bestpol); 1189d6385b1cSHajimu UMEMOTO } 1190