1caf43b02SWarner Losh /*- 282cd038dSYoshinobu Inoue * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 382cd038dSYoshinobu Inoue * All rights reserved. 482cd038dSYoshinobu Inoue * 582cd038dSYoshinobu Inoue * Redistribution and use in source and binary forms, with or without 682cd038dSYoshinobu Inoue * modification, are permitted provided that the following conditions 782cd038dSYoshinobu Inoue * are met: 882cd038dSYoshinobu Inoue * 1. Redistributions of source code must retain the above copyright 982cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer. 1082cd038dSYoshinobu Inoue * 2. Redistributions in binary form must reproduce the above copyright 1182cd038dSYoshinobu Inoue * notice, this list of conditions and the following disclaimer in the 1282cd038dSYoshinobu Inoue * documentation and/or other materials provided with the distribution. 1382cd038dSYoshinobu Inoue * 3. Neither the name of the project nor the names of its contributors 1482cd038dSYoshinobu Inoue * may be used to endorse or promote products derived from this software 1582cd038dSYoshinobu Inoue * without specific prior written permission. 1682cd038dSYoshinobu Inoue * 1782cd038dSYoshinobu Inoue * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 1882cd038dSYoshinobu Inoue * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 1982cd038dSYoshinobu Inoue * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 2082cd038dSYoshinobu Inoue * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 2182cd038dSYoshinobu Inoue * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 2282cd038dSYoshinobu Inoue * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 2382cd038dSYoshinobu Inoue * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 2482cd038dSYoshinobu Inoue * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 2582cd038dSYoshinobu Inoue * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 2682cd038dSYoshinobu Inoue * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 2782cd038dSYoshinobu Inoue * SUCH DAMAGE. 28b48287a3SDavid E. O'Brien * 29b48287a3SDavid E. O'Brien * $KAME: nd6_rtr.c,v 1.111 2001/04/27 01:37:15 jinmei Exp $ 3082cd038dSYoshinobu Inoue */ 3182cd038dSYoshinobu Inoue 32b48287a3SDavid E. O'Brien #include <sys/cdefs.h> 33b48287a3SDavid E. O'Brien __FBSDID("$FreeBSD$"); 34b48287a3SDavid E. O'Brien 35686cdd19SJun-ichiro itojun Hagino #include "opt_inet.h" 36686cdd19SJun-ichiro itojun Hagino #include "opt_inet6.h" 37686cdd19SJun-ichiro itojun Hagino 3882cd038dSYoshinobu Inoue #include <sys/param.h> 3982cd038dSYoshinobu Inoue #include <sys/systm.h> 4082cd038dSYoshinobu Inoue #include <sys/malloc.h> 4182cd038dSYoshinobu Inoue #include <sys/mbuf.h> 4282cd038dSYoshinobu Inoue #include <sys/socket.h> 4382cd038dSYoshinobu Inoue #include <sys/sockio.h> 4482cd038dSYoshinobu Inoue #include <sys/time.h> 4533841545SHajimu UMEMOTO #include <sys/kernel.h> 46609ff41fSWarner Losh #include <sys/lock.h> 4782cd038dSYoshinobu Inoue #include <sys/errno.h> 483120b9d4SKip Macy #include <sys/rwlock.h> 4982cd038dSYoshinobu Inoue #include <sys/syslog.h> 5033841545SHajimu UMEMOTO #include <sys/queue.h> 5182cd038dSYoshinobu Inoue 5282cd038dSYoshinobu Inoue #include <net/if.h> 5382cd038dSYoshinobu Inoue #include <net/if_types.h> 5482cd038dSYoshinobu Inoue #include <net/if_dl.h> 5582cd038dSYoshinobu Inoue #include <net/route.h> 5682cd038dSYoshinobu Inoue #include <net/radix.h> 574b79449eSBjoern A. Zeeb #include <net/vnet.h> 5882cd038dSYoshinobu Inoue 5982cd038dSYoshinobu Inoue #include <netinet/in.h> 606e6b3f7cSQing Li #include <net/if_llatbl.h> 6182cd038dSYoshinobu Inoue #include <netinet6/in6_var.h> 6233841545SHajimu UMEMOTO #include <netinet6/in6_ifattach.h> 63686cdd19SJun-ichiro itojun Hagino #include <netinet/ip6.h> 6482cd038dSYoshinobu Inoue #include <netinet6/ip6_var.h> 6582cd038dSYoshinobu Inoue #include <netinet6/nd6.h> 66686cdd19SJun-ichiro itojun Hagino #include <netinet/icmp6.h> 67686cdd19SJun-ichiro itojun Hagino #include <netinet6/scope6_var.h> 6882cd038dSYoshinobu Inoue 699233d8f3SDavid E. O'Brien static int rtpref(struct nd_defrouter *); 709233d8f3SDavid E. O'Brien static struct nd_defrouter *defrtrlist_update(struct nd_defrouter *); 71743eee66SSUZUKI Shinsuke static int prelist_update __P((struct nd_prefixctl *, struct nd_defrouter *, 72743eee66SSUZUKI Shinsuke struct mbuf *, int)); 739233d8f3SDavid E. O'Brien static struct in6_ifaddr *in6_ifadd(struct nd_prefixctl *, int); 7482cd038dSYoshinobu Inoue static struct nd_pfxrouter *pfxrtr_lookup __P((struct nd_prefix *, 7582cd038dSYoshinobu Inoue struct nd_defrouter *)); 769233d8f3SDavid E. O'Brien static void pfxrtr_add(struct nd_prefix *, struct nd_defrouter *); 779233d8f3SDavid E. O'Brien static void pfxrtr_del(struct nd_pfxrouter *); 78686cdd19SJun-ichiro itojun Hagino static struct nd_pfxrouter *find_pfxlist_reachable_router 799233d8f3SDavid E. O'Brien (struct nd_prefix *); 809233d8f3SDavid E. O'Brien static void defrouter_delreq(struct nd_defrouter *); 819233d8f3SDavid E. O'Brien static void nd6_rtmsg(int, struct rtentry *); 8282cd038dSYoshinobu Inoue 839233d8f3SDavid E. O'Brien static int in6_init_prefix_ltimes(struct nd_prefix *); 8407eb2995SHajimu UMEMOTO static void in6_init_address_ltimes __P((struct nd_prefix *, 8507eb2995SHajimu UMEMOTO struct in6_addrlifetime *)); 8682cd038dSYoshinobu Inoue 879d9b92f2SBjoern A. Zeeb static int nd6_prefix_onlink(struct nd_prefix *); 889d9b92f2SBjoern A. Zeeb static int nd6_prefix_offlink(struct nd_prefix *); 899d9b92f2SBjoern A. Zeeb 909233d8f3SDavid E. O'Brien static int rt6_deleteroute(struct radix_node *, void *); 9182cd038dSYoshinobu Inoue 92eddfbb76SRobert Watson VNET_DECLARE(int, nd6_recalc_reachtm_interval); 931e77c105SRobert Watson #define V_nd6_recalc_reachtm_interval VNET(nd6_recalc_reachtm_interval) 9482cd038dSYoshinobu Inoue 953e288e62SDimitry Andric static VNET_DEFINE(struct ifnet *, nd6_defifp); 9682cea7e6SBjoern A. Zeeb VNET_DEFINE(int, nd6_defifindex); 971e77c105SRobert Watson #define V_nd6_defifp VNET(nd6_defifp) 98686cdd19SJun-ichiro itojun Hagino 9982cea7e6SBjoern A. Zeeb VNET_DEFINE(int, ip6_use_tempaddr) = 0; 10082cea7e6SBjoern A. Zeeb 101eddfbb76SRobert Watson VNET_DEFINE(int, ip6_desync_factor); 10282cea7e6SBjoern A. Zeeb VNET_DEFINE(u_int32_t, ip6_temp_preferred_lifetime) = DEF_TEMP_PREFERRED_LIFETIME; 10382cea7e6SBjoern A. Zeeb VNET_DEFINE(u_int32_t, ip6_temp_valid_lifetime) = DEF_TEMP_VALID_LIFETIME; 10482cea7e6SBjoern A. Zeeb 10582cea7e6SBjoern A. Zeeb VNET_DEFINE(int, ip6_temp_regen_advance) = TEMPADDR_REGEN_ADVANCE; 10633841545SHajimu UMEMOTO 107743eee66SSUZUKI Shinsuke /* RTPREF_MEDIUM has to be 0! */ 108743eee66SSUZUKI Shinsuke #define RTPREF_HIGH 1 109743eee66SSUZUKI Shinsuke #define RTPREF_MEDIUM 0 110743eee66SSUZUKI Shinsuke #define RTPREF_LOW (-1) 111743eee66SSUZUKI Shinsuke #define RTPREF_RESERVED (-2) 112743eee66SSUZUKI Shinsuke #define RTPREF_INVALID (-3) /* internal */ 113743eee66SSUZUKI Shinsuke 11482cd038dSYoshinobu Inoue /* 11582cd038dSYoshinobu Inoue * Receive Router Solicitation Message - just for routers. 11682cd038dSYoshinobu Inoue * Router solicitation/advertisement is mostly managed by userland program 11782cd038dSYoshinobu Inoue * (rtadvd) so here we have no function like nd6_ra_output(). 11882cd038dSYoshinobu Inoue * 11982cd038dSYoshinobu Inoue * Based on RFC 2461 12082cd038dSYoshinobu Inoue */ 12182cd038dSYoshinobu Inoue void 1221272577eSXin LI nd6_rs_input(struct mbuf *m, int off, int icmp6len) 12382cd038dSYoshinobu Inoue { 12482cd038dSYoshinobu Inoue struct ifnet *ifp = m->m_pkthdr.rcvif; 12582cd038dSYoshinobu Inoue struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *); 126686cdd19SJun-ichiro itojun Hagino struct nd_router_solicit *nd_rs; 12782cd038dSYoshinobu Inoue struct in6_addr saddr6 = ip6->ip6_src; 12882cd038dSYoshinobu Inoue char *lladdr = NULL; 12982cd038dSYoshinobu Inoue int lladdrlen = 0; 13082cd038dSYoshinobu Inoue union nd_opts ndopts; 1311d54aa3bSBjoern A. Zeeb char ip6bufs[INET6_ADDRSTRLEN], ip6bufd[INET6_ADDRSTRLEN]; 13282cd038dSYoshinobu Inoue 133e7fa8d0aSHiroki Sato /* 134e7fa8d0aSHiroki Sato * Accept RS only when V_ip6_forwarding=1 and the interface has 135e7fa8d0aSHiroki Sato * no ND6_IFF_ACCEPT_RTADV. 136e7fa8d0aSHiroki Sato */ 137e7fa8d0aSHiroki Sato if (!V_ip6_forwarding || ND_IFINFO(ifp)->flags & ND6_IFF_ACCEPT_RTADV) 138686cdd19SJun-ichiro itojun Hagino goto freeit; 13982cd038dSYoshinobu Inoue 14082cd038dSYoshinobu Inoue /* Sanity checks */ 14182cd038dSYoshinobu Inoue if (ip6->ip6_hlim != 255) { 14233841545SHajimu UMEMOTO nd6log((LOG_ERR, 14333841545SHajimu UMEMOTO "nd6_rs_input: invalid hlim (%d) from %s to %s on %s\n", 1441d54aa3bSBjoern A. Zeeb ip6->ip6_hlim, ip6_sprintf(ip6bufs, &ip6->ip6_src), 1451d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6bufd, &ip6->ip6_dst), if_name(ifp))); 14633841545SHajimu UMEMOTO goto bad; 14782cd038dSYoshinobu Inoue } 14882cd038dSYoshinobu Inoue 14982cd038dSYoshinobu Inoue /* 15082cd038dSYoshinobu Inoue * Don't update the neighbor cache, if src = ::. 15182cd038dSYoshinobu Inoue * This indicates that the src has no IP address assigned yet. 15282cd038dSYoshinobu Inoue */ 15382cd038dSYoshinobu Inoue if (IN6_IS_ADDR_UNSPECIFIED(&saddr6)) 154686cdd19SJun-ichiro itojun Hagino goto freeit; 155686cdd19SJun-ichiro itojun Hagino 156686cdd19SJun-ichiro itojun Hagino #ifndef PULLDOWN_TEST 157686cdd19SJun-ichiro itojun Hagino IP6_EXTHDR_CHECK(m, off, icmp6len,); 158686cdd19SJun-ichiro itojun Hagino nd_rs = (struct nd_router_solicit *)((caddr_t)ip6 + off); 159686cdd19SJun-ichiro itojun Hagino #else 160686cdd19SJun-ichiro itojun Hagino IP6_EXTHDR_GET(nd_rs, struct nd_router_solicit *, m, off, icmp6len); 161686cdd19SJun-ichiro itojun Hagino if (nd_rs == NULL) { 162e27b0c87SRobert Watson ICMP6STAT_INC(icp6s_tooshort); 16382cd038dSYoshinobu Inoue return; 164686cdd19SJun-ichiro itojun Hagino } 165686cdd19SJun-ichiro itojun Hagino #endif 16682cd038dSYoshinobu Inoue 16782cd038dSYoshinobu Inoue icmp6len -= sizeof(*nd_rs); 16882cd038dSYoshinobu Inoue nd6_option_init(nd_rs + 1, icmp6len, &ndopts); 16982cd038dSYoshinobu Inoue if (nd6_options(&ndopts) < 0) { 17033841545SHajimu UMEMOTO nd6log((LOG_INFO, 17133841545SHajimu UMEMOTO "nd6_rs_input: invalid ND option, ignored\n")); 17233841545SHajimu UMEMOTO /* nd6_options have incremented stats */ 173686cdd19SJun-ichiro itojun Hagino goto freeit; 17482cd038dSYoshinobu Inoue } 17582cd038dSYoshinobu Inoue 17682cd038dSYoshinobu Inoue if (ndopts.nd_opts_src_lladdr) { 17782cd038dSYoshinobu Inoue lladdr = (char *)(ndopts.nd_opts_src_lladdr + 1); 17882cd038dSYoshinobu Inoue lladdrlen = ndopts.nd_opts_src_lladdr->nd_opt_len << 3; 17982cd038dSYoshinobu Inoue } 18082cd038dSYoshinobu Inoue 18182cd038dSYoshinobu Inoue if (lladdr && ((ifp->if_addrlen + 2 + 7) & ~7) != lladdrlen) { 18233841545SHajimu UMEMOTO nd6log((LOG_INFO, 18382cd038dSYoshinobu Inoue "nd6_rs_input: lladdrlen mismatch for %s " 18482cd038dSYoshinobu Inoue "(if %d, RS packet %d)\n", 1851d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6bufs, &saddr6), 18607eb2995SHajimu UMEMOTO ifp->if_addrlen, lladdrlen - 2)); 18733841545SHajimu UMEMOTO goto bad; 18882cd038dSYoshinobu Inoue } 18982cd038dSYoshinobu Inoue 19082cd038dSYoshinobu Inoue nd6_cache_lladdr(ifp, &saddr6, lladdr, lladdrlen, ND_ROUTER_SOLICIT, 0); 191686cdd19SJun-ichiro itojun Hagino 192686cdd19SJun-ichiro itojun Hagino freeit: 193686cdd19SJun-ichiro itojun Hagino m_freem(m); 19433841545SHajimu UMEMOTO return; 19533841545SHajimu UMEMOTO 19633841545SHajimu UMEMOTO bad: 197e27b0c87SRobert Watson ICMP6STAT_INC(icp6s_badrs); 19833841545SHajimu UMEMOTO m_freem(m); 19982cd038dSYoshinobu Inoue } 20082cd038dSYoshinobu Inoue 20182cd038dSYoshinobu Inoue /* 20282cd038dSYoshinobu Inoue * Receive Router Advertisement Message. 20382cd038dSYoshinobu Inoue * 20482cd038dSYoshinobu Inoue * Based on RFC 2461 20582cd038dSYoshinobu Inoue * TODO: on-link bit on prefix information 20682cd038dSYoshinobu Inoue * TODO: ND_RA_FLAG_{OTHER,MANAGED} processing 20782cd038dSYoshinobu Inoue */ 20882cd038dSYoshinobu Inoue void 2091272577eSXin LI nd6_ra_input(struct mbuf *m, int off, int icmp6len) 21082cd038dSYoshinobu Inoue { 21182cd038dSYoshinobu Inoue struct ifnet *ifp = m->m_pkthdr.rcvif; 21231b1bfe1SHajimu UMEMOTO struct nd_ifinfo *ndi = ND_IFINFO(ifp); 21382cd038dSYoshinobu Inoue struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *); 214686cdd19SJun-ichiro itojun Hagino struct nd_router_advert *nd_ra; 21582cd038dSYoshinobu Inoue struct in6_addr saddr6 = ip6->ip6_src; 216743eee66SSUZUKI Shinsuke int mcast = 0; 21782cd038dSYoshinobu Inoue union nd_opts ndopts; 21882cd038dSYoshinobu Inoue struct nd_defrouter *dr; 2191d54aa3bSBjoern A. Zeeb char ip6bufs[INET6_ADDRSTRLEN], ip6bufd[INET6_ADDRSTRLEN]; 22082cd038dSYoshinobu Inoue 22107cf047dSHajimu UMEMOTO /* 222e7fa8d0aSHiroki Sato * We only accept RAs only when the per-interface flag 223e7fa8d0aSHiroki Sato * ND6_IFF_ACCEPT_RTADV is on the receiving interface. 22407cf047dSHajimu UMEMOTO */ 225e7fa8d0aSHiroki Sato if (!(ndi->flags & ND6_IFF_ACCEPT_RTADV)) 22607cf047dSHajimu UMEMOTO goto freeit; 22782cd038dSYoshinobu Inoue 22882cd038dSYoshinobu Inoue if (ip6->ip6_hlim != 255) { 22933841545SHajimu UMEMOTO nd6log((LOG_ERR, 23033841545SHajimu UMEMOTO "nd6_ra_input: invalid hlim (%d) from %s to %s on %s\n", 2311d54aa3bSBjoern A. Zeeb ip6->ip6_hlim, ip6_sprintf(ip6bufs, &ip6->ip6_src), 2321d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6bufd, &ip6->ip6_dst), if_name(ifp))); 23333841545SHajimu UMEMOTO goto bad; 23482cd038dSYoshinobu Inoue } 23582cd038dSYoshinobu Inoue 23682cd038dSYoshinobu Inoue if (!IN6_IS_ADDR_LINKLOCAL(&saddr6)) { 23733841545SHajimu UMEMOTO nd6log((LOG_ERR, 23882cd038dSYoshinobu Inoue "nd6_ra_input: src %s is not link-local\n", 2391d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6bufs, &saddr6))); 24033841545SHajimu UMEMOTO goto bad; 241686cdd19SJun-ichiro itojun Hagino } 242686cdd19SJun-ichiro itojun Hagino 243686cdd19SJun-ichiro itojun Hagino #ifndef PULLDOWN_TEST 244686cdd19SJun-ichiro itojun Hagino IP6_EXTHDR_CHECK(m, off, icmp6len,); 245686cdd19SJun-ichiro itojun Hagino nd_ra = (struct nd_router_advert *)((caddr_t)ip6 + off); 246686cdd19SJun-ichiro itojun Hagino #else 247686cdd19SJun-ichiro itojun Hagino IP6_EXTHDR_GET(nd_ra, struct nd_router_advert *, m, off, icmp6len); 248686cdd19SJun-ichiro itojun Hagino if (nd_ra == NULL) { 249e27b0c87SRobert Watson ICMP6STAT_INC(icp6s_tooshort); 25082cd038dSYoshinobu Inoue return; 25182cd038dSYoshinobu Inoue } 252686cdd19SJun-ichiro itojun Hagino #endif 25382cd038dSYoshinobu Inoue 25482cd038dSYoshinobu Inoue icmp6len -= sizeof(*nd_ra); 25582cd038dSYoshinobu Inoue nd6_option_init(nd_ra + 1, icmp6len, &ndopts); 25682cd038dSYoshinobu Inoue if (nd6_options(&ndopts) < 0) { 25733841545SHajimu UMEMOTO nd6log((LOG_INFO, 25833841545SHajimu UMEMOTO "nd6_ra_input: invalid ND option, ignored\n")); 25933841545SHajimu UMEMOTO /* nd6_options have incremented stats */ 260686cdd19SJun-ichiro itojun Hagino goto freeit; 26182cd038dSYoshinobu Inoue } 26282cd038dSYoshinobu Inoue 26382cd038dSYoshinobu Inoue { 26482cd038dSYoshinobu Inoue struct nd_defrouter dr0; 26582cd038dSYoshinobu Inoue u_int32_t advreachable = nd_ra->nd_ra_reachable; 26682cd038dSYoshinobu Inoue 267743eee66SSUZUKI Shinsuke /* remember if this is a multicasted advertisement */ 268743eee66SSUZUKI Shinsuke if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst)) 269743eee66SSUZUKI Shinsuke mcast = 1; 270743eee66SSUZUKI Shinsuke 271743eee66SSUZUKI Shinsuke bzero(&dr0, sizeof(dr0)); 27282cd038dSYoshinobu Inoue dr0.rtaddr = saddr6; 27382cd038dSYoshinobu Inoue dr0.flags = nd_ra->nd_ra_flags_reserved; 274e7fa8d0aSHiroki Sato /* 275049087a0SHiroki Sato * Effectively-disable routes from RA messages when 276049087a0SHiroki Sato * ND6_IFF_NO_RADR enabled on the receiving interface or 277049087a0SHiroki Sato * (ip6.forwarding == 1 && ip6.rfc6204w3 != 1). 278e7fa8d0aSHiroki Sato */ 279049087a0SHiroki Sato if (ndi->flags & ND6_IFF_NO_RADR) 280049087a0SHiroki Sato dr0.rtlifetime = 0; 281049087a0SHiroki Sato else if (V_ip6_forwarding && !V_ip6_rfc6204w3) 282e7fa8d0aSHiroki Sato dr0.rtlifetime = 0; 283e7fa8d0aSHiroki Sato else 28482cd038dSYoshinobu Inoue dr0.rtlifetime = ntohs(nd_ra->nd_ra_router_lifetime); 28582cd038dSYoshinobu Inoue dr0.expire = time_second + dr0.rtlifetime; 28682cd038dSYoshinobu Inoue dr0.ifp = ifp; 28782cd038dSYoshinobu Inoue /* unspecified or not? (RFC 2461 6.3.4) */ 28882cd038dSYoshinobu Inoue if (advreachable) { 289fd8e4ebcSMike Barcroft advreachable = ntohl(advreachable); 29082cd038dSYoshinobu Inoue if (advreachable <= MAX_REACHABLE_TIME && 29182cd038dSYoshinobu Inoue ndi->basereachable != advreachable) { 29282cd038dSYoshinobu Inoue ndi->basereachable = advreachable; 29382cd038dSYoshinobu Inoue ndi->reachable = ND_COMPUTE_RTIME(ndi->basereachable); 294603724d3SBjoern A. Zeeb ndi->recalctm = V_nd6_recalc_reachtm_interval; /* reset */ 29582cd038dSYoshinobu Inoue } 29682cd038dSYoshinobu Inoue } 29782cd038dSYoshinobu Inoue if (nd_ra->nd_ra_retransmit) 29882cd038dSYoshinobu Inoue ndi->retrans = ntohl(nd_ra->nd_ra_retransmit); 29982cd038dSYoshinobu Inoue if (nd_ra->nd_ra_curhoplimit) 30082cd038dSYoshinobu Inoue ndi->chlim = nd_ra->nd_ra_curhoplimit; 30182cd038dSYoshinobu Inoue dr = defrtrlist_update(&dr0); 30282cd038dSYoshinobu Inoue } 30382cd038dSYoshinobu Inoue 30482cd038dSYoshinobu Inoue /* 30582cd038dSYoshinobu Inoue * prefix 30682cd038dSYoshinobu Inoue */ 30782cd038dSYoshinobu Inoue if (ndopts.nd_opts_pi) { 30882cd038dSYoshinobu Inoue struct nd_opt_hdr *pt; 30933841545SHajimu UMEMOTO struct nd_opt_prefix_info *pi = NULL; 310743eee66SSUZUKI Shinsuke struct nd_prefixctl pr; 31182cd038dSYoshinobu Inoue 31282cd038dSYoshinobu Inoue for (pt = (struct nd_opt_hdr *)ndopts.nd_opts_pi; 31382cd038dSYoshinobu Inoue pt <= (struct nd_opt_hdr *)ndopts.nd_opts_pi_end; 31482cd038dSYoshinobu Inoue pt = (struct nd_opt_hdr *)((caddr_t)pt + 31582cd038dSYoshinobu Inoue (pt->nd_opt_len << 3))) { 31682cd038dSYoshinobu Inoue if (pt->nd_opt_type != ND_OPT_PREFIX_INFORMATION) 31782cd038dSYoshinobu Inoue continue; 31882cd038dSYoshinobu Inoue pi = (struct nd_opt_prefix_info *)pt; 31982cd038dSYoshinobu Inoue 32082cd038dSYoshinobu Inoue if (pi->nd_opt_pi_len != 4) { 32133841545SHajimu UMEMOTO nd6log((LOG_INFO, 32233841545SHajimu UMEMOTO "nd6_ra_input: invalid option " 32382cd038dSYoshinobu Inoue "len %d for prefix information option, " 32433841545SHajimu UMEMOTO "ignored\n", pi->nd_opt_pi_len)); 32582cd038dSYoshinobu Inoue continue; 32682cd038dSYoshinobu Inoue } 32782cd038dSYoshinobu Inoue 32882cd038dSYoshinobu Inoue if (128 < pi->nd_opt_pi_prefix_len) { 32933841545SHajimu UMEMOTO nd6log((LOG_INFO, 33033841545SHajimu UMEMOTO "nd6_ra_input: invalid prefix " 33182cd038dSYoshinobu Inoue "len %d for prefix information option, " 33233841545SHajimu UMEMOTO "ignored\n", pi->nd_opt_pi_prefix_len)); 33382cd038dSYoshinobu Inoue continue; 33482cd038dSYoshinobu Inoue } 33582cd038dSYoshinobu Inoue 33682cd038dSYoshinobu Inoue if (IN6_IS_ADDR_MULTICAST(&pi->nd_opt_pi_prefix) 33782cd038dSYoshinobu Inoue || IN6_IS_ADDR_LINKLOCAL(&pi->nd_opt_pi_prefix)) { 33833841545SHajimu UMEMOTO nd6log((LOG_INFO, 33933841545SHajimu UMEMOTO "nd6_ra_input: invalid prefix " 34082cd038dSYoshinobu Inoue "%s, ignored\n", 3411d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6bufs, 3421d54aa3bSBjoern A. Zeeb &pi->nd_opt_pi_prefix))); 34382cd038dSYoshinobu Inoue continue; 34482cd038dSYoshinobu Inoue } 34582cd038dSYoshinobu Inoue 34682cd038dSYoshinobu Inoue bzero(&pr, sizeof(pr)); 34782cd038dSYoshinobu Inoue pr.ndpr_prefix.sin6_family = AF_INET6; 34882cd038dSYoshinobu Inoue pr.ndpr_prefix.sin6_len = sizeof(pr.ndpr_prefix); 34982cd038dSYoshinobu Inoue pr.ndpr_prefix.sin6_addr = pi->nd_opt_pi_prefix; 35082cd038dSYoshinobu Inoue pr.ndpr_ifp = (struct ifnet *)m->m_pkthdr.rcvif; 35182cd038dSYoshinobu Inoue 35282cd038dSYoshinobu Inoue pr.ndpr_raf_onlink = (pi->nd_opt_pi_flags_reserved & 35382cd038dSYoshinobu Inoue ND_OPT_PI_FLAG_ONLINK) ? 1 : 0; 35482cd038dSYoshinobu Inoue pr.ndpr_raf_auto = (pi->nd_opt_pi_flags_reserved & 35582cd038dSYoshinobu Inoue ND_OPT_PI_FLAG_AUTO) ? 1 : 0; 35682cd038dSYoshinobu Inoue pr.ndpr_plen = pi->nd_opt_pi_prefix_len; 35782cd038dSYoshinobu Inoue pr.ndpr_vltime = ntohl(pi->nd_opt_pi_valid_time); 35807eb2995SHajimu UMEMOTO pr.ndpr_pltime = ntohl(pi->nd_opt_pi_preferred_time); 359743eee66SSUZUKI Shinsuke (void)prelist_update(&pr, dr, m, mcast); 36082cd038dSYoshinobu Inoue } 36182cd038dSYoshinobu Inoue } 36282cd038dSYoshinobu Inoue 36382cd038dSYoshinobu Inoue /* 36482cd038dSYoshinobu Inoue * MTU 36582cd038dSYoshinobu Inoue */ 36682cd038dSYoshinobu Inoue if (ndopts.nd_opts_mtu && ndopts.nd_opts_mtu->nd_opt_mtu_len == 1) { 36731b3783cSHajimu UMEMOTO u_long mtu; 36831b3783cSHajimu UMEMOTO u_long maxmtu; 36907eb2995SHajimu UMEMOTO 37031b3783cSHajimu UMEMOTO mtu = (u_long)ntohl(ndopts.nd_opts_mtu->nd_opt_mtu_mtu); 37182cd038dSYoshinobu Inoue 37282cd038dSYoshinobu Inoue /* lower bound */ 37382cd038dSYoshinobu Inoue if (mtu < IPV6_MMTU) { 37433841545SHajimu UMEMOTO nd6log((LOG_INFO, "nd6_ra_input: bogus mtu option " 37531b3783cSHajimu UMEMOTO "mtu=%lu sent from %s, ignoring\n", 3761d54aa3bSBjoern A. Zeeb mtu, ip6_sprintf(ip6bufs, &ip6->ip6_src))); 37782cd038dSYoshinobu Inoue goto skip; 37882cd038dSYoshinobu Inoue } 37982cd038dSYoshinobu Inoue 38082cd038dSYoshinobu Inoue /* upper bound */ 38131b3783cSHajimu UMEMOTO maxmtu = (ndi->maxmtu && ndi->maxmtu < ifp->if_mtu) 38231b3783cSHajimu UMEMOTO ? ndi->maxmtu : ifp->if_mtu; 38331b3783cSHajimu UMEMOTO if (mtu <= maxmtu) { 38482cd038dSYoshinobu Inoue int change = (ndi->linkmtu != mtu); 38582cd038dSYoshinobu Inoue 38682cd038dSYoshinobu Inoue ndi->linkmtu = mtu; 38782cd038dSYoshinobu Inoue if (change) /* in6_maxmtu may change */ 38882cd038dSYoshinobu Inoue in6_setmaxmtu(); 38982cd038dSYoshinobu Inoue } else { 39033841545SHajimu UMEMOTO nd6log((LOG_INFO, "nd6_ra_input: bogus mtu " 39131b3783cSHajimu UMEMOTO "mtu=%lu sent from %s; " 39231b3783cSHajimu UMEMOTO "exceeds maxmtu %lu, ignoring\n", 3931d54aa3bSBjoern A. Zeeb mtu, ip6_sprintf(ip6bufs, &ip6->ip6_src), maxmtu)); 39482cd038dSYoshinobu Inoue } 39582cd038dSYoshinobu Inoue } 39682cd038dSYoshinobu Inoue 39782cd038dSYoshinobu Inoue skip: 39882cd038dSYoshinobu Inoue 39982cd038dSYoshinobu Inoue /* 40088ff5695SSUZUKI Shinsuke * Source link layer address 40182cd038dSYoshinobu Inoue */ 40282cd038dSYoshinobu Inoue { 40382cd038dSYoshinobu Inoue char *lladdr = NULL; 40482cd038dSYoshinobu Inoue int lladdrlen = 0; 40582cd038dSYoshinobu Inoue 40682cd038dSYoshinobu Inoue if (ndopts.nd_opts_src_lladdr) { 40782cd038dSYoshinobu Inoue lladdr = (char *)(ndopts.nd_opts_src_lladdr + 1); 40882cd038dSYoshinobu Inoue lladdrlen = ndopts.nd_opts_src_lladdr->nd_opt_len << 3; 40982cd038dSYoshinobu Inoue } 41082cd038dSYoshinobu Inoue 41182cd038dSYoshinobu Inoue if (lladdr && ((ifp->if_addrlen + 2 + 7) & ~7) != lladdrlen) { 41233841545SHajimu UMEMOTO nd6log((LOG_INFO, 41382cd038dSYoshinobu Inoue "nd6_ra_input: lladdrlen mismatch for %s " 4141d54aa3bSBjoern A. Zeeb "(if %d, RA packet %d)\n", ip6_sprintf(ip6bufs, &saddr6), 41507eb2995SHajimu UMEMOTO ifp->if_addrlen, lladdrlen - 2)); 41633841545SHajimu UMEMOTO goto bad; 41782cd038dSYoshinobu Inoue } 41882cd038dSYoshinobu Inoue 41907eb2995SHajimu UMEMOTO nd6_cache_lladdr(ifp, &saddr6, lladdr, 42007eb2995SHajimu UMEMOTO lladdrlen, ND_ROUTER_ADVERT, 0); 421686cdd19SJun-ichiro itojun Hagino 422686cdd19SJun-ichiro itojun Hagino /* 423686cdd19SJun-ichiro itojun Hagino * Installing a link-layer address might change the state of the 424686cdd19SJun-ichiro itojun Hagino * router's neighbor cache, which might also affect our on-link 425686cdd19SJun-ichiro itojun Hagino * detection of adveritsed prefixes. 426686cdd19SJun-ichiro itojun Hagino */ 427686cdd19SJun-ichiro itojun Hagino pfxlist_onlink_check(); 42882cd038dSYoshinobu Inoue } 429686cdd19SJun-ichiro itojun Hagino 430686cdd19SJun-ichiro itojun Hagino freeit: 431686cdd19SJun-ichiro itojun Hagino m_freem(m); 43233841545SHajimu UMEMOTO return; 43333841545SHajimu UMEMOTO 43433841545SHajimu UMEMOTO bad: 435e27b0c87SRobert Watson ICMP6STAT_INC(icp6s_badra); 43633841545SHajimu UMEMOTO m_freem(m); 43782cd038dSYoshinobu Inoue } 43882cd038dSYoshinobu Inoue 43982cd038dSYoshinobu Inoue /* 44082cd038dSYoshinobu Inoue * default router list proccessing sub routines 44182cd038dSYoshinobu Inoue */ 442686cdd19SJun-ichiro itojun Hagino 443686cdd19SJun-ichiro itojun Hagino /* tell the change to user processes watching the routing socket. */ 444686cdd19SJun-ichiro itojun Hagino static void 4451272577eSXin LI nd6_rtmsg(int cmd, struct rtentry *rt) 446686cdd19SJun-ichiro itojun Hagino { 447686cdd19SJun-ichiro itojun Hagino struct rt_addrinfo info; 4481e6a4139SRobert Watson struct ifnet *ifp; 4498c0fec80SRobert Watson struct ifaddr *ifa; 450686cdd19SJun-ichiro itojun Hagino 451686cdd19SJun-ichiro itojun Hagino bzero((caddr_t)&info, sizeof(info)); 452686cdd19SJun-ichiro itojun Hagino info.rti_info[RTAX_DST] = rt_key(rt); 453686cdd19SJun-ichiro itojun Hagino info.rti_info[RTAX_GATEWAY] = rt->rt_gateway; 454686cdd19SJun-ichiro itojun Hagino info.rti_info[RTAX_NETMASK] = rt_mask(rt); 4551e6a4139SRobert Watson ifp = rt->rt_ifp; 4561e6a4139SRobert Watson if (ifp != NULL) { 457137f91e8SJohn Baldwin IF_ADDR_RLOCK(ifp); 4588c0fec80SRobert Watson ifa = TAILQ_FIRST(&ifp->if_addrhead); 4598c0fec80SRobert Watson info.rti_info[RTAX_IFP] = ifa->ifa_addr; 4608c0fec80SRobert Watson ifa_ref(ifa); 461137f91e8SJohn Baldwin IF_ADDR_RUNLOCK(ifp); 46233841545SHajimu UMEMOTO info.rti_info[RTAX_IFA] = rt->rt_ifa->ifa_addr; 4638c0fec80SRobert Watson } else 4648c0fec80SRobert Watson ifa = NULL; 465686cdd19SJun-ichiro itojun Hagino 466*81d5d46bSBjoern A. Zeeb rt_missmsg_fib(cmd, &info, rt->rt_flags, 0, rt->rt_fibnum); 4678c0fec80SRobert Watson if (ifa != NULL) 4688c0fec80SRobert Watson ifa_free(ifa); 469686cdd19SJun-ichiro itojun Hagino } 470686cdd19SJun-ichiro itojun Hagino 4719d9b92f2SBjoern A. Zeeb static void 4721272577eSXin LI defrouter_addreq(struct nd_defrouter *new) 47382cd038dSYoshinobu Inoue { 47482cd038dSYoshinobu Inoue struct sockaddr_in6 def, mask, gate; 475686cdd19SJun-ichiro itojun Hagino struct rtentry *newrt = NULL; 476743eee66SSUZUKI Shinsuke int s; 477743eee66SSUZUKI Shinsuke int error; 47882cd038dSYoshinobu Inoue 479056c7327SLuigi Rizzo bzero(&def, sizeof(def)); 480056c7327SLuigi Rizzo bzero(&mask, sizeof(mask)); 481056c7327SLuigi Rizzo bzero(&gate, sizeof(gate)); 48282cd038dSYoshinobu Inoue 48307eb2995SHajimu UMEMOTO def.sin6_len = mask.sin6_len = gate.sin6_len = 48407eb2995SHajimu UMEMOTO sizeof(struct sockaddr_in6); 485743eee66SSUZUKI Shinsuke def.sin6_family = gate.sin6_family = AF_INET6; 48682cd038dSYoshinobu Inoue gate.sin6_addr = new->rtaddr; 48782cd038dSYoshinobu Inoue 488743eee66SSUZUKI Shinsuke s = splnet(); 489*81d5d46bSBjoern A. Zeeb error = in6_rtrequest(RTM_ADD, (struct sockaddr *)&def, 49082cd038dSYoshinobu Inoue (struct sockaddr *)&gate, (struct sockaddr *)&mask, 491*81d5d46bSBjoern A. Zeeb RTF_GATEWAY, &newrt, RT_DEFAULT_FIB); 492686cdd19SJun-ichiro itojun Hagino if (newrt) { 49333841545SHajimu UMEMOTO nd6_rtmsg(RTM_ADD, newrt); /* tell user process */ 4946e6b3f7cSQing Li RTFREE(newrt); 495686cdd19SJun-ichiro itojun Hagino } 496743eee66SSUZUKI Shinsuke if (error == 0) 497743eee66SSUZUKI Shinsuke new->installed = 1; 498743eee66SSUZUKI Shinsuke splx(s); 49982cd038dSYoshinobu Inoue return; 50082cd038dSYoshinobu Inoue } 50182cd038dSYoshinobu Inoue 50282cd038dSYoshinobu Inoue struct nd_defrouter * 5031272577eSXin LI defrouter_lookup(struct in6_addr *addr, struct ifnet *ifp) 50482cd038dSYoshinobu Inoue { 50582cd038dSYoshinobu Inoue struct nd_defrouter *dr; 50682cd038dSYoshinobu Inoue 5073b0b2840SJohn Baldwin TAILQ_FOREACH(dr, &V_nd_defrouter, dr_entry) { 50882cd038dSYoshinobu Inoue if (dr->ifp == ifp && IN6_ARE_ADDR_EQUAL(addr, &dr->rtaddr)) 50982cd038dSYoshinobu Inoue return (dr); 510686cdd19SJun-ichiro itojun Hagino } 51182cd038dSYoshinobu Inoue 51282cd038dSYoshinobu Inoue return (NULL); /* search failed */ 51382cd038dSYoshinobu Inoue } 51482cd038dSYoshinobu Inoue 515743eee66SSUZUKI Shinsuke /* 516743eee66SSUZUKI Shinsuke * Remove the default route for a given router. 517743eee66SSUZUKI Shinsuke * This is just a subroutine function for defrouter_select(), and should 518743eee66SSUZUKI Shinsuke * not be called from anywhere else. 519743eee66SSUZUKI Shinsuke */ 520743eee66SSUZUKI Shinsuke static void 5211272577eSXin LI defrouter_delreq(struct nd_defrouter *dr) 52282cd038dSYoshinobu Inoue { 52382cd038dSYoshinobu Inoue struct sockaddr_in6 def, mask, gate; 524686cdd19SJun-ichiro itojun Hagino struct rtentry *oldrt = NULL; 52582cd038dSYoshinobu Inoue 526056c7327SLuigi Rizzo bzero(&def, sizeof(def)); 527056c7327SLuigi Rizzo bzero(&mask, sizeof(mask)); 528056c7327SLuigi Rizzo bzero(&gate, sizeof(gate)); 52982cd038dSYoshinobu Inoue 53007eb2995SHajimu UMEMOTO def.sin6_len = mask.sin6_len = gate.sin6_len = 53107eb2995SHajimu UMEMOTO sizeof(struct sockaddr_in6); 532743eee66SSUZUKI Shinsuke def.sin6_family = gate.sin6_family = AF_INET6; 53382cd038dSYoshinobu Inoue gate.sin6_addr = dr->rtaddr; 53482cd038dSYoshinobu Inoue 535*81d5d46bSBjoern A. Zeeb in6_rtrequest(RTM_DELETE, (struct sockaddr *)&def, 53682cd038dSYoshinobu Inoue (struct sockaddr *)&gate, 537*81d5d46bSBjoern A. Zeeb (struct sockaddr *)&mask, RTF_GATEWAY, &oldrt, RT_DEFAULT_FIB); 538686cdd19SJun-ichiro itojun Hagino if (oldrt) { 53933841545SHajimu UMEMOTO nd6_rtmsg(RTM_DELETE, oldrt); 54071eba915SRuslan Ermilov RTFREE(oldrt); 54120220070SJun-ichiro itojun Hagino } 54282cd038dSYoshinobu Inoue 543743eee66SSUZUKI Shinsuke dr->installed = 0; 544743eee66SSUZUKI Shinsuke } 545743eee66SSUZUKI Shinsuke 546743eee66SSUZUKI Shinsuke /* 547743eee66SSUZUKI Shinsuke * remove all default routes from default router list 548743eee66SSUZUKI Shinsuke */ 549743eee66SSUZUKI Shinsuke void 5501272577eSXin LI defrouter_reset(void) 551743eee66SSUZUKI Shinsuke { 552743eee66SSUZUKI Shinsuke struct nd_defrouter *dr; 553743eee66SSUZUKI Shinsuke 5543b0b2840SJohn Baldwin TAILQ_FOREACH(dr, &V_nd_defrouter, dr_entry) 555743eee66SSUZUKI Shinsuke defrouter_delreq(dr); 556743eee66SSUZUKI Shinsuke 557743eee66SSUZUKI Shinsuke /* 558743eee66SSUZUKI Shinsuke * XXX should we also nuke any default routers in the kernel, by 559743eee66SSUZUKI Shinsuke * going through them by rtalloc1()? 560743eee66SSUZUKI Shinsuke */ 56182cd038dSYoshinobu Inoue } 56282cd038dSYoshinobu Inoue 56382cd038dSYoshinobu Inoue void 5641272577eSXin LI defrtrlist_del(struct nd_defrouter *dr) 56582cd038dSYoshinobu Inoue { 56682cd038dSYoshinobu Inoue struct nd_defrouter *deldr = NULL; 56782cd038dSYoshinobu Inoue struct nd_prefix *pr; 56882cd038dSYoshinobu Inoue 56982cd038dSYoshinobu Inoue /* 57082cd038dSYoshinobu Inoue * Flush all the routing table entries that use the router 57182cd038dSYoshinobu Inoue * as a next hop. 57282cd038dSYoshinobu Inoue */ 573e7fa8d0aSHiroki Sato if (ND_IFINFO(dr->ifp)->flags & ND6_IFF_ACCEPT_RTADV) 57482cd038dSYoshinobu Inoue rt6_flush(&dr->rtaddr, dr->ifp); 57582cd038dSYoshinobu Inoue 576743eee66SSUZUKI Shinsuke if (dr->installed) { 577743eee66SSUZUKI Shinsuke deldr = dr; 578743eee66SSUZUKI Shinsuke defrouter_delreq(dr); 579743eee66SSUZUKI Shinsuke } 580603724d3SBjoern A. Zeeb TAILQ_REMOVE(&V_nd_defrouter, dr, dr_entry); 58182cd038dSYoshinobu Inoue 58282cd038dSYoshinobu Inoue /* 58382cd038dSYoshinobu Inoue * Also delete all the pointers to the router in each prefix lists. 58482cd038dSYoshinobu Inoue */ 5853b0b2840SJohn Baldwin LIST_FOREACH(pr, &V_nd_prefix, ndpr_entry) { 58682cd038dSYoshinobu Inoue struct nd_pfxrouter *pfxrtr; 58782cd038dSYoshinobu Inoue if ((pfxrtr = pfxrtr_lookup(pr, dr)) != NULL) 58882cd038dSYoshinobu Inoue pfxrtr_del(pfxrtr); 58982cd038dSYoshinobu Inoue } 59082cd038dSYoshinobu Inoue pfxlist_onlink_check(); 59182cd038dSYoshinobu Inoue 59282cd038dSYoshinobu Inoue /* 593686cdd19SJun-ichiro itojun Hagino * If the router is the primary one, choose a new one. 594686cdd19SJun-ichiro itojun Hagino * Note that defrouter_select() will remove the current gateway 595686cdd19SJun-ichiro itojun Hagino * from the routing table. 59682cd038dSYoshinobu Inoue */ 59782cd038dSYoshinobu Inoue if (deldr) 598686cdd19SJun-ichiro itojun Hagino defrouter_select(); 599686cdd19SJun-ichiro itojun Hagino 60082cd038dSYoshinobu Inoue free(dr, M_IP6NDP); 60182cd038dSYoshinobu Inoue } 60282cd038dSYoshinobu Inoue 603686cdd19SJun-ichiro itojun Hagino /* 604743eee66SSUZUKI Shinsuke * Default Router Selection according to Section 6.3.6 of RFC 2461 and 605743eee66SSUZUKI Shinsuke * draft-ietf-ipngwg-router-selection: 606743eee66SSUZUKI Shinsuke * 1) Routers that are reachable or probably reachable should be preferred. 607743eee66SSUZUKI Shinsuke * If we have more than one (probably) reachable router, prefer ones 608743eee66SSUZUKI Shinsuke * with the highest router preference. 609686cdd19SJun-ichiro itojun Hagino * 2) When no routers on the list are known to be reachable or 610686cdd19SJun-ichiro itojun Hagino * probably reachable, routers SHOULD be selected in a round-robin 611743eee66SSUZUKI Shinsuke * fashion, regardless of router preference values. 612686cdd19SJun-ichiro itojun Hagino * 3) If the Default Router List is empty, assume that all 613686cdd19SJun-ichiro itojun Hagino * destinations are on-link. 614743eee66SSUZUKI Shinsuke * 615743eee66SSUZUKI Shinsuke * We assume nd_defrouter is sorted by router preference value. 616743eee66SSUZUKI Shinsuke * Since the code below covers both with and without router preference cases, 617743eee66SSUZUKI Shinsuke * we do not need to classify the cases by ifdef. 618743eee66SSUZUKI Shinsuke * 619743eee66SSUZUKI Shinsuke * At this moment, we do not try to install more than one default router, 620743eee66SSUZUKI Shinsuke * even when the multipath routing is available, because we're not sure about 621743eee66SSUZUKI Shinsuke * the benefits for stub hosts comparing to the risk of making the code 622743eee66SSUZUKI Shinsuke * complicated and the possibility of introducing bugs. 623686cdd19SJun-ichiro itojun Hagino */ 624686cdd19SJun-ichiro itojun Hagino void 6251272577eSXin LI defrouter_select(void) 626686cdd19SJun-ichiro itojun Hagino { 627686cdd19SJun-ichiro itojun Hagino int s = splnet(); 628743eee66SSUZUKI Shinsuke struct nd_defrouter *dr, *selected_dr = NULL, *installed_dr = NULL; 6296e6b3f7cSQing Li struct llentry *ln = NULL; 630686cdd19SJun-ichiro itojun Hagino 631686cdd19SJun-ichiro itojun Hagino /* 632743eee66SSUZUKI Shinsuke * Let's handle easy case (3) first: 633743eee66SSUZUKI Shinsuke * If default router list is empty, there's nothing to be done. 634743eee66SSUZUKI Shinsuke */ 6353b0b2840SJohn Baldwin if (TAILQ_EMPTY(&V_nd_defrouter)) { 636743eee66SSUZUKI Shinsuke splx(s); 637743eee66SSUZUKI Shinsuke return; 638743eee66SSUZUKI Shinsuke } 639743eee66SSUZUKI Shinsuke 640743eee66SSUZUKI Shinsuke /* 641686cdd19SJun-ichiro itojun Hagino * Search for a (probably) reachable router from the list. 642743eee66SSUZUKI Shinsuke * We just pick up the first reachable one (if any), assuming that 643743eee66SSUZUKI Shinsuke * the ordering rule of the list described in defrtrlist_update(). 644686cdd19SJun-ichiro itojun Hagino */ 6453b0b2840SJohn Baldwin TAILQ_FOREACH(dr, &V_nd_defrouter, dr_entry) { 6466e6b3f7cSQing Li IF_AFDATA_LOCK(dr->ifp); 647743eee66SSUZUKI Shinsuke if (selected_dr == NULL && 6486e6b3f7cSQing Li (ln = nd6_lookup(&dr->rtaddr, 0, dr->ifp)) && 649686cdd19SJun-ichiro itojun Hagino ND6_IS_LLINFO_PROBREACH(ln)) { 650743eee66SSUZUKI Shinsuke selected_dr = dr; 651686cdd19SJun-ichiro itojun Hagino } 6526e6b3f7cSQing Li IF_AFDATA_UNLOCK(dr->ifp); 6535f16e341SBjoern A. Zeeb if (ln != NULL) { 654c0641cc0SKip Macy LLE_RUNLOCK(ln); 6555f16e341SBjoern A. Zeeb ln = NULL; 6565f16e341SBjoern A. Zeeb } 657686cdd19SJun-ichiro itojun Hagino 658743eee66SSUZUKI Shinsuke if (dr->installed && installed_dr == NULL) 659743eee66SSUZUKI Shinsuke installed_dr = dr; 660743eee66SSUZUKI Shinsuke else if (dr->installed && installed_dr) { 661743eee66SSUZUKI Shinsuke /* this should not happen. warn for diagnosis. */ 662743eee66SSUZUKI Shinsuke log(LOG_ERR, "defrouter_select: more than one router" 663743eee66SSUZUKI Shinsuke " is installed\n"); 66433841545SHajimu UMEMOTO } 665686cdd19SJun-ichiro itojun Hagino } 666743eee66SSUZUKI Shinsuke /* 667743eee66SSUZUKI Shinsuke * If none of the default routers was found to be reachable, 668743eee66SSUZUKI Shinsuke * round-robin the list regardless of preference. 669743eee66SSUZUKI Shinsuke * Otherwise, if we have an installed router, check if the selected 670743eee66SSUZUKI Shinsuke * (reachable) router should really be preferred to the installed one. 671743eee66SSUZUKI Shinsuke * We only prefer the new router when the old one is not reachable 672743eee66SSUZUKI Shinsuke * or when the new one has a really higher preference value. 673743eee66SSUZUKI Shinsuke */ 674743eee66SSUZUKI Shinsuke if (selected_dr == NULL) { 675743eee66SSUZUKI Shinsuke if (installed_dr == NULL || !TAILQ_NEXT(installed_dr, dr_entry)) 676603724d3SBjoern A. Zeeb selected_dr = TAILQ_FIRST(&V_nd_defrouter); 677743eee66SSUZUKI Shinsuke else 678743eee66SSUZUKI Shinsuke selected_dr = TAILQ_NEXT(installed_dr, dr_entry); 6796e6b3f7cSQing Li } else if (installed_dr) { 6806e6b3f7cSQing Li IF_AFDATA_LOCK(installed_dr->ifp); 6816e6b3f7cSQing Li if ((ln = nd6_lookup(&installed_dr->rtaddr, 0, installed_dr->ifp)) && 682743eee66SSUZUKI Shinsuke ND6_IS_LLINFO_PROBREACH(ln) && 683743eee66SSUZUKI Shinsuke rtpref(selected_dr) <= rtpref(installed_dr)) { 684743eee66SSUZUKI Shinsuke selected_dr = installed_dr; 685743eee66SSUZUKI Shinsuke } 6866e6b3f7cSQing Li IF_AFDATA_UNLOCK(installed_dr->ifp); 687c0641cc0SKip Macy if (ln != NULL) 688c0641cc0SKip Macy LLE_RUNLOCK(ln); 6896e6b3f7cSQing Li } 690743eee66SSUZUKI Shinsuke 691743eee66SSUZUKI Shinsuke /* 692743eee66SSUZUKI Shinsuke * If the selected router is different than the installed one, 693743eee66SSUZUKI Shinsuke * remove the installed router and install the selected one. 694743eee66SSUZUKI Shinsuke * Note that the selected router is never NULL here. 695743eee66SSUZUKI Shinsuke */ 696743eee66SSUZUKI Shinsuke if (installed_dr != selected_dr) { 697743eee66SSUZUKI Shinsuke if (installed_dr) 698743eee66SSUZUKI Shinsuke defrouter_delreq(installed_dr); 699743eee66SSUZUKI Shinsuke defrouter_addreq(selected_dr); 700686cdd19SJun-ichiro itojun Hagino } 701686cdd19SJun-ichiro itojun Hagino 702686cdd19SJun-ichiro itojun Hagino splx(s); 703686cdd19SJun-ichiro itojun Hagino return; 704686cdd19SJun-ichiro itojun Hagino } 705686cdd19SJun-ichiro itojun Hagino 706743eee66SSUZUKI Shinsuke /* 707743eee66SSUZUKI Shinsuke * for default router selection 708743eee66SSUZUKI Shinsuke * regards router-preference field as a 2-bit signed integer 709743eee66SSUZUKI Shinsuke */ 710743eee66SSUZUKI Shinsuke static int 711743eee66SSUZUKI Shinsuke rtpref(struct nd_defrouter *dr) 712743eee66SSUZUKI Shinsuke { 713743eee66SSUZUKI Shinsuke switch (dr->flags & ND_RA_FLAG_RTPREF_MASK) { 714743eee66SSUZUKI Shinsuke case ND_RA_FLAG_RTPREF_HIGH: 715743eee66SSUZUKI Shinsuke return (RTPREF_HIGH); 716743eee66SSUZUKI Shinsuke case ND_RA_FLAG_RTPREF_MEDIUM: 717743eee66SSUZUKI Shinsuke case ND_RA_FLAG_RTPREF_RSV: 718d3693a63SSUZUKI Shinsuke return (RTPREF_MEDIUM); 719743eee66SSUZUKI Shinsuke case ND_RA_FLAG_RTPREF_LOW: 720743eee66SSUZUKI Shinsuke return (RTPREF_LOW); 721743eee66SSUZUKI Shinsuke default: 722743eee66SSUZUKI Shinsuke /* 723743eee66SSUZUKI Shinsuke * This case should never happen. If it did, it would mean a 724743eee66SSUZUKI Shinsuke * serious bug of kernel internal. We thus always bark here. 725743eee66SSUZUKI Shinsuke * Or, can we even panic? 726743eee66SSUZUKI Shinsuke */ 727743eee66SSUZUKI Shinsuke log(LOG_ERR, "rtpref: impossible RA flag %x\n", dr->flags); 728743eee66SSUZUKI Shinsuke return (RTPREF_INVALID); 729743eee66SSUZUKI Shinsuke } 730743eee66SSUZUKI Shinsuke /* NOTREACHED */ 731743eee66SSUZUKI Shinsuke } 732743eee66SSUZUKI Shinsuke 73382cd038dSYoshinobu Inoue static struct nd_defrouter * 7341272577eSXin LI defrtrlist_update(struct nd_defrouter *new) 73582cd038dSYoshinobu Inoue { 73682cd038dSYoshinobu Inoue struct nd_defrouter *dr, *n; 73782cd038dSYoshinobu Inoue int s = splnet(); 73882cd038dSYoshinobu Inoue 73982cd038dSYoshinobu Inoue if ((dr = defrouter_lookup(&new->rtaddr, new->ifp)) != NULL) { 74082cd038dSYoshinobu Inoue /* entry exists */ 74182cd038dSYoshinobu Inoue if (new->rtlifetime == 0) { 74282cd038dSYoshinobu Inoue defrtrlist_del(dr); 74382cd038dSYoshinobu Inoue dr = NULL; 74482cd038dSYoshinobu Inoue } else { 745743eee66SSUZUKI Shinsuke int oldpref = rtpref(dr); 746743eee66SSUZUKI Shinsuke 74782cd038dSYoshinobu Inoue /* override */ 74882cd038dSYoshinobu Inoue dr->flags = new->flags; /* xxx flag check */ 74982cd038dSYoshinobu Inoue dr->rtlifetime = new->rtlifetime; 75082cd038dSYoshinobu Inoue dr->expire = new->expire; 751743eee66SSUZUKI Shinsuke 752743eee66SSUZUKI Shinsuke /* 753743eee66SSUZUKI Shinsuke * If the preference does not change, there's no need 7540f1aca65SQing Li * to sort the entries. Also make sure the selected 7550f1aca65SQing Li * router is still installed in the kernel. 756743eee66SSUZUKI Shinsuke */ 7570f1aca65SQing Li if (dr->installed && rtpref(new) == oldpref) { 758743eee66SSUZUKI Shinsuke splx(s); 759743eee66SSUZUKI Shinsuke return (dr); 760743eee66SSUZUKI Shinsuke } 761743eee66SSUZUKI Shinsuke 762743eee66SSUZUKI Shinsuke /* 763743eee66SSUZUKI Shinsuke * preferred router may be changed, so relocate 764743eee66SSUZUKI Shinsuke * this router. 765743eee66SSUZUKI Shinsuke * XXX: calling TAILQ_REMOVE directly is a bad manner. 766743eee66SSUZUKI Shinsuke * However, since defrtrlist_del() has many side 767743eee66SSUZUKI Shinsuke * effects, we intentionally do so here. 768743eee66SSUZUKI Shinsuke * defrouter_select() below will handle routing 769743eee66SSUZUKI Shinsuke * changes later. 770743eee66SSUZUKI Shinsuke */ 771603724d3SBjoern A. Zeeb TAILQ_REMOVE(&V_nd_defrouter, dr, dr_entry); 772743eee66SSUZUKI Shinsuke n = dr; 773743eee66SSUZUKI Shinsuke goto insert; 77482cd038dSYoshinobu Inoue } 77582cd038dSYoshinobu Inoue splx(s); 77682cd038dSYoshinobu Inoue return (dr); 77782cd038dSYoshinobu Inoue } 77882cd038dSYoshinobu Inoue 77982cd038dSYoshinobu Inoue /* entry does not exist */ 78082cd038dSYoshinobu Inoue if (new->rtlifetime == 0) { 78182cd038dSYoshinobu Inoue splx(s); 78282cd038dSYoshinobu Inoue return (NULL); 78382cd038dSYoshinobu Inoue } 78482cd038dSYoshinobu Inoue 78582cd038dSYoshinobu Inoue n = (struct nd_defrouter *)malloc(sizeof(*n), M_IP6NDP, M_NOWAIT); 78682cd038dSYoshinobu Inoue if (n == NULL) { 78782cd038dSYoshinobu Inoue splx(s); 78882cd038dSYoshinobu Inoue return (NULL); 78982cd038dSYoshinobu Inoue } 79082cd038dSYoshinobu Inoue bzero(n, sizeof(*n)); 79182cd038dSYoshinobu Inoue *n = *new; 792686cdd19SJun-ichiro itojun Hagino 793743eee66SSUZUKI Shinsuke insert: 794686cdd19SJun-ichiro itojun Hagino /* 795743eee66SSUZUKI Shinsuke * Insert the new router in the Default Router List; 796743eee66SSUZUKI Shinsuke * The Default Router List should be in the descending order 797743eee66SSUZUKI Shinsuke * of router-preferece. Routers with the same preference are 798743eee66SSUZUKI Shinsuke * sorted in the arriving time order. 799686cdd19SJun-ichiro itojun Hagino */ 800743eee66SSUZUKI Shinsuke 801743eee66SSUZUKI Shinsuke /* insert at the end of the group */ 8023b0b2840SJohn Baldwin TAILQ_FOREACH(dr, &V_nd_defrouter, dr_entry) { 803743eee66SSUZUKI Shinsuke if (rtpref(n) > rtpref(dr)) 804743eee66SSUZUKI Shinsuke break; 805743eee66SSUZUKI Shinsuke } 806743eee66SSUZUKI Shinsuke if (dr) 807743eee66SSUZUKI Shinsuke TAILQ_INSERT_BEFORE(dr, n, dr_entry); 808743eee66SSUZUKI Shinsuke else 809603724d3SBjoern A. Zeeb TAILQ_INSERT_TAIL(&V_nd_defrouter, n, dr_entry); 810743eee66SSUZUKI Shinsuke 811686cdd19SJun-ichiro itojun Hagino defrouter_select(); 812743eee66SSUZUKI Shinsuke 81382cd038dSYoshinobu Inoue splx(s); 81482cd038dSYoshinobu Inoue 81582cd038dSYoshinobu Inoue return (n); 81682cd038dSYoshinobu Inoue } 81782cd038dSYoshinobu Inoue 81882cd038dSYoshinobu Inoue static struct nd_pfxrouter * 8191272577eSXin LI pfxrtr_lookup(struct nd_prefix *pr, struct nd_defrouter *dr) 82082cd038dSYoshinobu Inoue { 82182cd038dSYoshinobu Inoue struct nd_pfxrouter *search; 82282cd038dSYoshinobu Inoue 8233b0b2840SJohn Baldwin LIST_FOREACH(search, &pr->ndpr_advrtrs, pfr_entry) { 82482cd038dSYoshinobu Inoue if (search->router == dr) 82582cd038dSYoshinobu Inoue break; 82682cd038dSYoshinobu Inoue } 82782cd038dSYoshinobu Inoue 82882cd038dSYoshinobu Inoue return (search); 82982cd038dSYoshinobu Inoue } 83082cd038dSYoshinobu Inoue 83182cd038dSYoshinobu Inoue static void 8321272577eSXin LI pfxrtr_add(struct nd_prefix *pr, struct nd_defrouter *dr) 83382cd038dSYoshinobu Inoue { 83482cd038dSYoshinobu Inoue struct nd_pfxrouter *new; 83582cd038dSYoshinobu Inoue 83682cd038dSYoshinobu Inoue new = (struct nd_pfxrouter *)malloc(sizeof(*new), M_IP6NDP, M_NOWAIT); 83782cd038dSYoshinobu Inoue if (new == NULL) 83882cd038dSYoshinobu Inoue return; 83982cd038dSYoshinobu Inoue bzero(new, sizeof(*new)); 84082cd038dSYoshinobu Inoue new->router = dr; 84182cd038dSYoshinobu Inoue 84282cd038dSYoshinobu Inoue LIST_INSERT_HEAD(&pr->ndpr_advrtrs, new, pfr_entry); 84382cd038dSYoshinobu Inoue 84482cd038dSYoshinobu Inoue pfxlist_onlink_check(); 84582cd038dSYoshinobu Inoue } 84682cd038dSYoshinobu Inoue 84782cd038dSYoshinobu Inoue static void 8481272577eSXin LI pfxrtr_del(struct nd_pfxrouter *pfr) 84982cd038dSYoshinobu Inoue { 85082cd038dSYoshinobu Inoue LIST_REMOVE(pfr, pfr_entry); 85182cd038dSYoshinobu Inoue free(pfr, M_IP6NDP); 85282cd038dSYoshinobu Inoue } 85382cd038dSYoshinobu Inoue 85433841545SHajimu UMEMOTO struct nd_prefix * 8551272577eSXin LI nd6_prefix_lookup(struct nd_prefixctl *key) 85682cd038dSYoshinobu Inoue { 85782cd038dSYoshinobu Inoue struct nd_prefix *search; 85882cd038dSYoshinobu Inoue 8593b0b2840SJohn Baldwin LIST_FOREACH(search, &V_nd_prefix, ndpr_entry) { 860743eee66SSUZUKI Shinsuke if (key->ndpr_ifp == search->ndpr_ifp && 861743eee66SSUZUKI Shinsuke key->ndpr_plen == search->ndpr_plen && 862743eee66SSUZUKI Shinsuke in6_are_prefix_equal(&key->ndpr_prefix.sin6_addr, 863743eee66SSUZUKI Shinsuke &search->ndpr_prefix.sin6_addr, key->ndpr_plen)) { 86482cd038dSYoshinobu Inoue break; 86582cd038dSYoshinobu Inoue } 86682cd038dSYoshinobu Inoue } 86782cd038dSYoshinobu Inoue 86882cd038dSYoshinobu Inoue return (search); 86982cd038dSYoshinobu Inoue } 87082cd038dSYoshinobu Inoue 87133841545SHajimu UMEMOTO int 8721272577eSXin LI nd6_prelist_add(struct nd_prefixctl *pr, struct nd_defrouter *dr, 8731272577eSXin LI struct nd_prefix **newp) 87482cd038dSYoshinobu Inoue { 87533841545SHajimu UMEMOTO struct nd_prefix *new = NULL; 876743eee66SSUZUKI Shinsuke int error = 0; 87782cd038dSYoshinobu Inoue int i, s; 8781d54aa3bSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN]; 87982cd038dSYoshinobu Inoue 88082cd038dSYoshinobu Inoue new = (struct nd_prefix *)malloc(sizeof(*new), M_IP6NDP, M_NOWAIT); 88182cd038dSYoshinobu Inoue if (new == NULL) 88207eb2995SHajimu UMEMOTO return(ENOMEM); 88382cd038dSYoshinobu Inoue bzero(new, sizeof(*new)); 884743eee66SSUZUKI Shinsuke new->ndpr_ifp = pr->ndpr_ifp; 885743eee66SSUZUKI Shinsuke new->ndpr_prefix = pr->ndpr_prefix; 886743eee66SSUZUKI Shinsuke new->ndpr_plen = pr->ndpr_plen; 887743eee66SSUZUKI Shinsuke new->ndpr_vltime = pr->ndpr_vltime; 888743eee66SSUZUKI Shinsuke new->ndpr_pltime = pr->ndpr_pltime; 889743eee66SSUZUKI Shinsuke new->ndpr_flags = pr->ndpr_flags; 890743eee66SSUZUKI Shinsuke if ((error = in6_init_prefix_ltimes(new)) != 0) { 891743eee66SSUZUKI Shinsuke free(new, M_IP6NDP); 892743eee66SSUZUKI Shinsuke return(error); 893743eee66SSUZUKI Shinsuke } 894743eee66SSUZUKI Shinsuke new->ndpr_lastupdate = time_second; 89533841545SHajimu UMEMOTO if (newp != NULL) 89633841545SHajimu UMEMOTO *newp = new; 89782cd038dSYoshinobu Inoue 89807eb2995SHajimu UMEMOTO /* initialization */ 89982cd038dSYoshinobu Inoue LIST_INIT(&new->ndpr_advrtrs); 90082cd038dSYoshinobu Inoue in6_prefixlen2mask(&new->ndpr_mask, new->ndpr_plen); 90182cd038dSYoshinobu Inoue /* make prefix in the canonical form */ 90282cd038dSYoshinobu Inoue for (i = 0; i < 4; i++) 90382cd038dSYoshinobu Inoue new->ndpr_prefix.sin6_addr.s6_addr32[i] &= 90482cd038dSYoshinobu Inoue new->ndpr_mask.s6_addr32[i]; 90582cd038dSYoshinobu Inoue 90682cd038dSYoshinobu Inoue s = splnet(); 90782cd038dSYoshinobu Inoue /* link ndpr_entry to nd_prefix list */ 908603724d3SBjoern A. Zeeb LIST_INSERT_HEAD(&V_nd_prefix, new, ndpr_entry); 90982cd038dSYoshinobu Inoue splx(s); 91082cd038dSYoshinobu Inoue 91133841545SHajimu UMEMOTO /* ND_OPT_PI_FLAG_ONLINK processing */ 91233841545SHajimu UMEMOTO if (new->ndpr_raf_onlink) { 91333841545SHajimu UMEMOTO int e; 91433841545SHajimu UMEMOTO 91533841545SHajimu UMEMOTO if ((e = nd6_prefix_onlink(new)) != 0) { 91633841545SHajimu UMEMOTO nd6log((LOG_ERR, "nd6_prelist_add: failed to make " 91733841545SHajimu UMEMOTO "the prefix %s/%d on-link on %s (errno=%d)\n", 9181d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &pr->ndpr_prefix.sin6_addr), 91933841545SHajimu UMEMOTO pr->ndpr_plen, if_name(pr->ndpr_ifp), e)); 92033841545SHajimu UMEMOTO /* proceed anyway. XXX: is it correct? */ 92133841545SHajimu UMEMOTO } 92233841545SHajimu UMEMOTO } 92333841545SHajimu UMEMOTO 92407eb2995SHajimu UMEMOTO if (dr) 92582cd038dSYoshinobu Inoue pfxrtr_add(new, dr); 92682cd038dSYoshinobu Inoue 92782cd038dSYoshinobu Inoue return 0; 92882cd038dSYoshinobu Inoue } 92982cd038dSYoshinobu Inoue 93082cd038dSYoshinobu Inoue void 9311272577eSXin LI prelist_remove(struct nd_prefix *pr) 93282cd038dSYoshinobu Inoue { 93382cd038dSYoshinobu Inoue struct nd_pfxrouter *pfr, *next; 93433841545SHajimu UMEMOTO int e, s; 9351d54aa3bSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN]; 93633841545SHajimu UMEMOTO 93733841545SHajimu UMEMOTO /* make sure to invalidate the prefix until it is really freed. */ 93833841545SHajimu UMEMOTO pr->ndpr_vltime = 0; 93933841545SHajimu UMEMOTO pr->ndpr_pltime = 0; 940743eee66SSUZUKI Shinsuke 94133841545SHajimu UMEMOTO /* 94233841545SHajimu UMEMOTO * Though these flags are now meaningless, we'd rather keep the value 9437aa59493SSUZUKI Shinsuke * of pr->ndpr_raf_onlink and pr->ndpr_raf_auto not to confuse users 9447aa59493SSUZUKI Shinsuke * when executing "ndp -p". 94533841545SHajimu UMEMOTO */ 9467aa59493SSUZUKI Shinsuke 94733841545SHajimu UMEMOTO if ((pr->ndpr_stateflags & NDPRF_ONLINK) != 0 && 94833841545SHajimu UMEMOTO (e = nd6_prefix_offlink(pr)) != 0) { 94933841545SHajimu UMEMOTO nd6log((LOG_ERR, "prelist_remove: failed to make %s/%d offlink " 95033841545SHajimu UMEMOTO "on %s, errno=%d\n", 9511d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &pr->ndpr_prefix.sin6_addr), 95233841545SHajimu UMEMOTO pr->ndpr_plen, if_name(pr->ndpr_ifp), e)); 95333841545SHajimu UMEMOTO /* what should we do? */ 95433841545SHajimu UMEMOTO } 95533841545SHajimu UMEMOTO 95633841545SHajimu UMEMOTO if (pr->ndpr_refcnt > 0) 95733841545SHajimu UMEMOTO return; /* notice here? */ 95882cd038dSYoshinobu Inoue 95982cd038dSYoshinobu Inoue s = splnet(); 96033841545SHajimu UMEMOTO 96182cd038dSYoshinobu Inoue /* unlink ndpr_entry from nd_prefix list */ 96282cd038dSYoshinobu Inoue LIST_REMOVE(pr, ndpr_entry); 96382cd038dSYoshinobu Inoue 96482cd038dSYoshinobu Inoue /* free list of routers that adversed the prefix */ 9653b0b2840SJohn Baldwin LIST_FOREACH_SAFE(pfr, &pr->ndpr_advrtrs, pfr_entry, next) { 96682cd038dSYoshinobu Inoue free(pfr, M_IP6NDP); 96782cd038dSYoshinobu Inoue } 96833841545SHajimu UMEMOTO splx(s); 96933841545SHajimu UMEMOTO 97082cd038dSYoshinobu Inoue free(pr, M_IP6NDP); 97182cd038dSYoshinobu Inoue 97282cd038dSYoshinobu Inoue pfxlist_onlink_check(); 97382cd038dSYoshinobu Inoue } 97482cd038dSYoshinobu Inoue 9751272577eSXin LI /* 9761272577eSXin LI * dr - may be NULL 9771272577eSXin LI */ 9781272577eSXin LI 979743eee66SSUZUKI Shinsuke static int 9801272577eSXin LI prelist_update(struct nd_prefixctl *new, struct nd_defrouter *dr, 9811272577eSXin LI struct mbuf *m, int mcast) 98282cd038dSYoshinobu Inoue { 98333841545SHajimu UMEMOTO struct in6_ifaddr *ia6 = NULL, *ia6_match = NULL; 98433841545SHajimu UMEMOTO struct ifaddr *ifa; 98533841545SHajimu UMEMOTO struct ifnet *ifp = new->ndpr_ifp; 98682cd038dSYoshinobu Inoue struct nd_prefix *pr; 98782cd038dSYoshinobu Inoue int s = splnet(); 98882cd038dSYoshinobu Inoue int error = 0; 98933841545SHajimu UMEMOTO int newprefix = 0; 99082cd038dSYoshinobu Inoue int auth; 99133841545SHajimu UMEMOTO struct in6_addrlifetime lt6_tmp; 9921d54aa3bSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN]; 99382cd038dSYoshinobu Inoue 99482cd038dSYoshinobu Inoue auth = 0; 99582cd038dSYoshinobu Inoue if (m) { 99682cd038dSYoshinobu Inoue /* 99782cd038dSYoshinobu Inoue * Authenticity for NA consists authentication for 99882cd038dSYoshinobu Inoue * both IP header and IP datagrams, doesn't it ? 99982cd038dSYoshinobu Inoue */ 100082cd038dSYoshinobu Inoue #if defined(M_AUTHIPHDR) && defined(M_AUTHIPDGM) 100107eb2995SHajimu UMEMOTO auth = ((m->m_flags & M_AUTHIPHDR) && 100207eb2995SHajimu UMEMOTO (m->m_flags & M_AUTHIPDGM)); 100382cd038dSYoshinobu Inoue #endif 100482cd038dSYoshinobu Inoue } 100582cd038dSYoshinobu Inoue 100633841545SHajimu UMEMOTO if ((pr = nd6_prefix_lookup(new)) != NULL) { 100733841545SHajimu UMEMOTO /* 100833841545SHajimu UMEMOTO * nd6_prefix_lookup() ensures that pr and new have the same 100933841545SHajimu UMEMOTO * prefix on a same interface. 101033841545SHajimu UMEMOTO */ 101133841545SHajimu UMEMOTO 101233841545SHajimu UMEMOTO /* 101333841545SHajimu UMEMOTO * Update prefix information. Note that the on-link (L) bit 101433841545SHajimu UMEMOTO * and the autonomous (A) bit should NOT be changed from 1 101533841545SHajimu UMEMOTO * to 0. 101633841545SHajimu UMEMOTO */ 101733841545SHajimu UMEMOTO if (new->ndpr_raf_onlink == 1) 101833841545SHajimu UMEMOTO pr->ndpr_raf_onlink = 1; 101933841545SHajimu UMEMOTO if (new->ndpr_raf_auto == 1) 102033841545SHajimu UMEMOTO pr->ndpr_raf_auto = 1; 102133841545SHajimu UMEMOTO if (new->ndpr_raf_onlink) { 102282cd038dSYoshinobu Inoue pr->ndpr_vltime = new->ndpr_vltime; 102382cd038dSYoshinobu Inoue pr->ndpr_pltime = new->ndpr_pltime; 1024743eee66SSUZUKI Shinsuke (void)in6_init_prefix_ltimes(pr); /* XXX error case? */ 1025743eee66SSUZUKI Shinsuke pr->ndpr_lastupdate = time_second; 102682cd038dSYoshinobu Inoue } 102782cd038dSYoshinobu Inoue 102833841545SHajimu UMEMOTO if (new->ndpr_raf_onlink && 102933841545SHajimu UMEMOTO (pr->ndpr_stateflags & NDPRF_ONLINK) == 0) { 103033841545SHajimu UMEMOTO int e; 103182cd038dSYoshinobu Inoue 103233841545SHajimu UMEMOTO if ((e = nd6_prefix_onlink(pr)) != 0) { 103333841545SHajimu UMEMOTO nd6log((LOG_ERR, 103433841545SHajimu UMEMOTO "prelist_update: failed to make " 103533841545SHajimu UMEMOTO "the prefix %s/%d on-link on %s " 103633841545SHajimu UMEMOTO "(errno=%d)\n", 10371d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, 10381d54aa3bSBjoern A. Zeeb &pr->ndpr_prefix.sin6_addr), 103933841545SHajimu UMEMOTO pr->ndpr_plen, if_name(pr->ndpr_ifp), e)); 104033841545SHajimu UMEMOTO /* proceed anyway. XXX: is it correct? */ 1041686cdd19SJun-ichiro itojun Hagino } 104282cd038dSYoshinobu Inoue } 104382cd038dSYoshinobu Inoue 104482cd038dSYoshinobu Inoue if (dr && pfxrtr_lookup(pr, dr) == NULL) 104582cd038dSYoshinobu Inoue pfxrtr_add(pr, dr); 104682cd038dSYoshinobu Inoue } else { 104733841545SHajimu UMEMOTO struct nd_prefix *newpr = NULL; 104882cd038dSYoshinobu Inoue 104933841545SHajimu UMEMOTO newprefix = 1; 105033841545SHajimu UMEMOTO 105133841545SHajimu UMEMOTO if (new->ndpr_vltime == 0) 105233841545SHajimu UMEMOTO goto end; 105333841545SHajimu UMEMOTO if (new->ndpr_raf_onlink == 0 && new->ndpr_raf_auto == 0) 105433841545SHajimu UMEMOTO goto end; 105582cd038dSYoshinobu Inoue 105633841545SHajimu UMEMOTO error = nd6_prelist_add(new, dr, &newpr); 105733841545SHajimu UMEMOTO if (error != 0 || newpr == NULL) { 105833841545SHajimu UMEMOTO nd6log((LOG_NOTICE, "prelist_update: " 105933841545SHajimu UMEMOTO "nd6_prelist_add failed for %s/%d on %s " 106033841545SHajimu UMEMOTO "errno=%d, returnpr=%p\n", 10611d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &new->ndpr_prefix.sin6_addr), 106233841545SHajimu UMEMOTO new->ndpr_plen, if_name(new->ndpr_ifp), 106333841545SHajimu UMEMOTO error, newpr)); 106433841545SHajimu UMEMOTO goto end; /* we should just give up in this case. */ 106533841545SHajimu UMEMOTO } 106633841545SHajimu UMEMOTO 106782cd038dSYoshinobu Inoue /* 106833841545SHajimu UMEMOTO * XXX: from the ND point of view, we can ignore a prefix 106933841545SHajimu UMEMOTO * with the on-link bit being zero. However, we need a 107033841545SHajimu UMEMOTO * prefix structure for references from autoconfigured 107107eb2995SHajimu UMEMOTO * addresses. Thus, we explicitly make sure that the prefix 107233841545SHajimu UMEMOTO * itself expires now. 107382cd038dSYoshinobu Inoue */ 107433841545SHajimu UMEMOTO if (newpr->ndpr_raf_onlink == 0) { 107533841545SHajimu UMEMOTO newpr->ndpr_vltime = 0; 107633841545SHajimu UMEMOTO newpr->ndpr_pltime = 0; 107733841545SHajimu UMEMOTO in6_init_prefix_ltimes(newpr); 107833841545SHajimu UMEMOTO } 107933841545SHajimu UMEMOTO 108033841545SHajimu UMEMOTO pr = newpr; 108133841545SHajimu UMEMOTO } 108233841545SHajimu UMEMOTO 108333841545SHajimu UMEMOTO /* 108433841545SHajimu UMEMOTO * Address autoconfiguration based on Section 5.5.3 of RFC 2462. 108533841545SHajimu UMEMOTO * Note that pr must be non NULL at this point. 108633841545SHajimu UMEMOTO */ 108733841545SHajimu UMEMOTO 108833841545SHajimu UMEMOTO /* 5.5.3 (a). Ignore the prefix without the A bit set. */ 108982cd038dSYoshinobu Inoue if (!new->ndpr_raf_auto) 1090743eee66SSUZUKI Shinsuke goto end; 109182cd038dSYoshinobu Inoue 109233841545SHajimu UMEMOTO /* 109333841545SHajimu UMEMOTO * 5.5.3 (b). the link-local prefix should have been ignored in 109433841545SHajimu UMEMOTO * nd6_ra_input. 109533841545SHajimu UMEMOTO */ 109633841545SHajimu UMEMOTO 1097743eee66SSUZUKI Shinsuke /* 5.5.3 (c). Consistency check on lifetimes: pltime <= vltime. */ 1098743eee66SSUZUKI Shinsuke if (new->ndpr_pltime > new->ndpr_vltime) { 1099743eee66SSUZUKI Shinsuke error = EINVAL; /* XXX: won't be used */ 1100743eee66SSUZUKI Shinsuke goto end; 1101743eee66SSUZUKI Shinsuke } 110233841545SHajimu UMEMOTO 110333841545SHajimu UMEMOTO /* 1104743eee66SSUZUKI Shinsuke * 5.5.3 (d). If the prefix advertised is not equal to the prefix of 1105743eee66SSUZUKI Shinsuke * an address configured by stateless autoconfiguration already in the 1106743eee66SSUZUKI Shinsuke * list of addresses associated with the interface, and the Valid 1107743eee66SSUZUKI Shinsuke * Lifetime is not 0, form an address. We first check if we have 1108743eee66SSUZUKI Shinsuke * a matching prefix. 1109743eee66SSUZUKI Shinsuke * Note: we apply a clarification in rfc2462bis-02 here. We only 1110743eee66SSUZUKI Shinsuke * consider autoconfigured addresses while RFC2462 simply said 1111743eee66SSUZUKI Shinsuke * "address". 111233841545SHajimu UMEMOTO */ 1113137f91e8SJohn Baldwin IF_ADDR_RLOCK(ifp); 1114c4dd3fe1SRobert Watson TAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link) { 111533841545SHajimu UMEMOTO struct in6_ifaddr *ifa6; 1116743eee66SSUZUKI Shinsuke u_int32_t remaininglifetime; 111733841545SHajimu UMEMOTO 111833841545SHajimu UMEMOTO if (ifa->ifa_addr->sa_family != AF_INET6) 111933841545SHajimu UMEMOTO continue; 112033841545SHajimu UMEMOTO 112133841545SHajimu UMEMOTO ifa6 = (struct in6_ifaddr *)ifa; 112233841545SHajimu UMEMOTO 112333841545SHajimu UMEMOTO /* 1124743eee66SSUZUKI Shinsuke * We only consider autoconfigured addresses as per rfc2462bis. 1125743eee66SSUZUKI Shinsuke */ 1126743eee66SSUZUKI Shinsuke if (!(ifa6->ia6_flags & IN6_IFF_AUTOCONF)) 1127743eee66SSUZUKI Shinsuke continue; 1128743eee66SSUZUKI Shinsuke 1129743eee66SSUZUKI Shinsuke /* 113033841545SHajimu UMEMOTO * Spec is not clear here, but I believe we should concentrate 113133841545SHajimu UMEMOTO * on unicast (i.e. not anycast) addresses. 113233841545SHajimu UMEMOTO * XXX: other ia6_flags? detached or duplicated? 113333841545SHajimu UMEMOTO */ 113433841545SHajimu UMEMOTO if ((ifa6->ia6_flags & IN6_IFF_ANYCAST) != 0) 113533841545SHajimu UMEMOTO continue; 113633841545SHajimu UMEMOTO 1137743eee66SSUZUKI Shinsuke /* 1138743eee66SSUZUKI Shinsuke * Ignore the address if it is not associated with a prefix 1139743eee66SSUZUKI Shinsuke * or is associated with a prefix that is different from this 1140743eee66SSUZUKI Shinsuke * one. (pr is never NULL here) 1141743eee66SSUZUKI Shinsuke */ 1142743eee66SSUZUKI Shinsuke if (ifa6->ia6_ndpr != pr) 114333841545SHajimu UMEMOTO continue; 114433841545SHajimu UMEMOTO 114533841545SHajimu UMEMOTO if (ia6_match == NULL) /* remember the first one */ 114633841545SHajimu UMEMOTO ia6_match = ifa6; 114733841545SHajimu UMEMOTO 114833841545SHajimu UMEMOTO /* 114933841545SHajimu UMEMOTO * An already autoconfigured address matched. Now that we 115033841545SHajimu UMEMOTO * are sure there is at least one matched address, we can 115133841545SHajimu UMEMOTO * proceed to 5.5.3. (e): update the lifetimes according to the 115233841545SHajimu UMEMOTO * "two hours" rule and the privacy extension. 1153743eee66SSUZUKI Shinsuke * We apply some clarifications in rfc2462bis: 1154743eee66SSUZUKI Shinsuke * - use remaininglifetime instead of storedlifetime as a 1155743eee66SSUZUKI Shinsuke * variable name 1156743eee66SSUZUKI Shinsuke * - remove the dead code in the "two-hour" rule 115733841545SHajimu UMEMOTO */ 115833841545SHajimu UMEMOTO #define TWOHOUR (120*60) 115933841545SHajimu UMEMOTO lt6_tmp = ifa6->ia6_lifetime; 116033841545SHajimu UMEMOTO 116111f3a6e2SHajimu UMEMOTO if (lt6_tmp.ia6t_vltime == ND6_INFINITE_LIFETIME) 1162743eee66SSUZUKI Shinsuke remaininglifetime = ND6_INFINITE_LIFETIME; 1163743eee66SSUZUKI Shinsuke else if (time_second - ifa6->ia6_updatetime > 1164743eee66SSUZUKI Shinsuke lt6_tmp.ia6t_vltime) { 1165743eee66SSUZUKI Shinsuke /* 1166743eee66SSUZUKI Shinsuke * The case of "invalid" address. We should usually 1167743eee66SSUZUKI Shinsuke * not see this case. 1168743eee66SSUZUKI Shinsuke */ 1169743eee66SSUZUKI Shinsuke remaininglifetime = 0; 1170743eee66SSUZUKI Shinsuke } else 1171743eee66SSUZUKI Shinsuke remaininglifetime = lt6_tmp.ia6t_vltime - 1172743eee66SSUZUKI Shinsuke (time_second - ifa6->ia6_updatetime); 117311f3a6e2SHajimu UMEMOTO 117411f3a6e2SHajimu UMEMOTO /* when not updating, keep the current stored lifetime. */ 1175743eee66SSUZUKI Shinsuke lt6_tmp.ia6t_vltime = remaininglifetime; 117633841545SHajimu UMEMOTO 117733841545SHajimu UMEMOTO if (TWOHOUR < new->ndpr_vltime || 1178743eee66SSUZUKI Shinsuke remaininglifetime < new->ndpr_vltime) { 117933841545SHajimu UMEMOTO lt6_tmp.ia6t_vltime = new->ndpr_vltime; 1180743eee66SSUZUKI Shinsuke } else if (remaininglifetime <= TWOHOUR) { 118133841545SHajimu UMEMOTO if (auth) { 118233841545SHajimu UMEMOTO lt6_tmp.ia6t_vltime = new->ndpr_vltime; 118382cd038dSYoshinobu Inoue } 118433841545SHajimu UMEMOTO } else { 118533841545SHajimu UMEMOTO /* 118633841545SHajimu UMEMOTO * new->ndpr_vltime <= TWOHOUR && 1187743eee66SSUZUKI Shinsuke * TWOHOUR < remaininglifetime 118833841545SHajimu UMEMOTO */ 118933841545SHajimu UMEMOTO lt6_tmp.ia6t_vltime = TWOHOUR; 119082cd038dSYoshinobu Inoue } 119182cd038dSYoshinobu Inoue 119233841545SHajimu UMEMOTO /* The 2 hour rule is not imposed for preferred lifetime. */ 119333841545SHajimu UMEMOTO lt6_tmp.ia6t_pltime = new->ndpr_pltime; 119433841545SHajimu UMEMOTO 119533841545SHajimu UMEMOTO in6_init_address_ltimes(pr, <6_tmp); 119633841545SHajimu UMEMOTO 119733841545SHajimu UMEMOTO /* 1198743eee66SSUZUKI Shinsuke * We need to treat lifetimes for temporary addresses 1199743eee66SSUZUKI Shinsuke * differently, according to 1200743eee66SSUZUKI Shinsuke * draft-ietf-ipv6-privacy-addrs-v2-01.txt 3.3 (1); 1201743eee66SSUZUKI Shinsuke * we only update the lifetimes when they are in the maximum 1202743eee66SSUZUKI Shinsuke * intervals. 120333841545SHajimu UMEMOTO */ 120433841545SHajimu UMEMOTO if ((ifa6->ia6_flags & IN6_IFF_TEMPORARY) != 0) { 1205743eee66SSUZUKI Shinsuke u_int32_t maxvltime, maxpltime; 120633841545SHajimu UMEMOTO 1207603724d3SBjoern A. Zeeb if (V_ip6_temp_valid_lifetime > 1208743eee66SSUZUKI Shinsuke (u_int32_t)((time_second - ifa6->ia6_createtime) + 1209603724d3SBjoern A. Zeeb V_ip6_desync_factor)) { 1210603724d3SBjoern A. Zeeb maxvltime = V_ip6_temp_valid_lifetime - 1211743eee66SSUZUKI Shinsuke (time_second - ifa6->ia6_createtime) - 1212603724d3SBjoern A. Zeeb V_ip6_desync_factor; 1213743eee66SSUZUKI Shinsuke } else 1214743eee66SSUZUKI Shinsuke maxvltime = 0; 1215603724d3SBjoern A. Zeeb if (V_ip6_temp_preferred_lifetime > 1216743eee66SSUZUKI Shinsuke (u_int32_t)((time_second - ifa6->ia6_createtime) + 1217603724d3SBjoern A. Zeeb V_ip6_desync_factor)) { 1218603724d3SBjoern A. Zeeb maxpltime = V_ip6_temp_preferred_lifetime - 1219743eee66SSUZUKI Shinsuke (time_second - ifa6->ia6_createtime) - 1220603724d3SBjoern A. Zeeb V_ip6_desync_factor; 1221743eee66SSUZUKI Shinsuke } else 1222743eee66SSUZUKI Shinsuke maxpltime = 0; 1223743eee66SSUZUKI Shinsuke 1224743eee66SSUZUKI Shinsuke if (lt6_tmp.ia6t_vltime == ND6_INFINITE_LIFETIME || 1225743eee66SSUZUKI Shinsuke lt6_tmp.ia6t_vltime > maxvltime) { 1226743eee66SSUZUKI Shinsuke lt6_tmp.ia6t_vltime = maxvltime; 1227743eee66SSUZUKI Shinsuke } 1228743eee66SSUZUKI Shinsuke if (lt6_tmp.ia6t_pltime == ND6_INFINITE_LIFETIME || 1229743eee66SSUZUKI Shinsuke lt6_tmp.ia6t_pltime > maxpltime) { 1230743eee66SSUZUKI Shinsuke lt6_tmp.ia6t_pltime = maxpltime; 1231743eee66SSUZUKI Shinsuke } 1232743eee66SSUZUKI Shinsuke } 123333841545SHajimu UMEMOTO ifa6->ia6_lifetime = lt6_tmp; 1234743eee66SSUZUKI Shinsuke ifa6->ia6_updatetime = time_second; 123533841545SHajimu UMEMOTO } 1236137f91e8SJohn Baldwin IF_ADDR_RUNLOCK(ifp); 123733841545SHajimu UMEMOTO if (ia6_match == NULL && new->ndpr_vltime) { 1238743eee66SSUZUKI Shinsuke int ifidlen; 1239743eee66SSUZUKI Shinsuke 124033841545SHajimu UMEMOTO /* 1241743eee66SSUZUKI Shinsuke * 5.5.3 (d) (continued) 124233841545SHajimu UMEMOTO * No address matched and the valid lifetime is non-zero. 124333841545SHajimu UMEMOTO * Create a new address. 124433841545SHajimu UMEMOTO */ 1245743eee66SSUZUKI Shinsuke 1246743eee66SSUZUKI Shinsuke /* 1247743eee66SSUZUKI Shinsuke * Prefix Length check: 1248743eee66SSUZUKI Shinsuke * If the sum of the prefix length and interface identifier 1249743eee66SSUZUKI Shinsuke * length does not equal 128 bits, the Prefix Information 1250743eee66SSUZUKI Shinsuke * option MUST be ignored. The length of the interface 1251743eee66SSUZUKI Shinsuke * identifier is defined in a separate link-type specific 1252743eee66SSUZUKI Shinsuke * document. 1253743eee66SSUZUKI Shinsuke */ 1254743eee66SSUZUKI Shinsuke ifidlen = in6_if2idlen(ifp); 1255743eee66SSUZUKI Shinsuke if (ifidlen < 0) { 1256743eee66SSUZUKI Shinsuke /* this should not happen, so we always log it. */ 1257743eee66SSUZUKI Shinsuke log(LOG_ERR, "prelist_update: IFID undefined (%s)\n", 1258743eee66SSUZUKI Shinsuke if_name(ifp)); 1259743eee66SSUZUKI Shinsuke goto end; 1260743eee66SSUZUKI Shinsuke } 1261743eee66SSUZUKI Shinsuke if (ifidlen + pr->ndpr_plen != 128) { 1262743eee66SSUZUKI Shinsuke nd6log((LOG_INFO, 1263743eee66SSUZUKI Shinsuke "prelist_update: invalid prefixlen " 1264743eee66SSUZUKI Shinsuke "%d for %s, ignored\n", 1265743eee66SSUZUKI Shinsuke pr->ndpr_plen, if_name(ifp))); 1266743eee66SSUZUKI Shinsuke goto end; 1267743eee66SSUZUKI Shinsuke } 1268743eee66SSUZUKI Shinsuke 1269743eee66SSUZUKI Shinsuke if ((ia6 = in6_ifadd(new, mcast)) != NULL) { 127033841545SHajimu UMEMOTO /* 127133841545SHajimu UMEMOTO * note that we should use pr (not new) for reference. 127233841545SHajimu UMEMOTO */ 127333841545SHajimu UMEMOTO pr->ndpr_refcnt++; 127433841545SHajimu UMEMOTO ia6->ia6_ndpr = pr; 127533841545SHajimu UMEMOTO 127633841545SHajimu UMEMOTO /* 127733841545SHajimu UMEMOTO * RFC 3041 3.3 (2). 127833841545SHajimu UMEMOTO * When a new public address is created as described 127933841545SHajimu UMEMOTO * in RFC2462, also create a new temporary address. 128033841545SHajimu UMEMOTO * 128133841545SHajimu UMEMOTO * RFC 3041 3.5. 128233841545SHajimu UMEMOTO * When an interface connects to a new link, a new 128333841545SHajimu UMEMOTO * randomized interface identifier should be generated 128433841545SHajimu UMEMOTO * immediately together with a new set of temporary 128533841545SHajimu UMEMOTO * addresses. Thus, we specifiy 1 as the 2nd arg of 128633841545SHajimu UMEMOTO * in6_tmpifadd(). 128733841545SHajimu UMEMOTO */ 1288603724d3SBjoern A. Zeeb if (V_ip6_use_tempaddr) { 128933841545SHajimu UMEMOTO int e; 1290743eee66SSUZUKI Shinsuke if ((e = in6_tmpifadd(ia6, 1, 1)) != 0) { 129133841545SHajimu UMEMOTO nd6log((LOG_NOTICE, "prelist_update: " 129233841545SHajimu UMEMOTO "failed to create a temporary " 129333841545SHajimu UMEMOTO "address, errno=%d\n", 129433841545SHajimu UMEMOTO e)); 129533841545SHajimu UMEMOTO } 129633841545SHajimu UMEMOTO } 12978c0fec80SRobert Watson ifa_free(&ia6->ia_ifa); 129833841545SHajimu UMEMOTO 129933841545SHajimu UMEMOTO /* 130033841545SHajimu UMEMOTO * A newly added address might affect the status 130133841545SHajimu UMEMOTO * of other addresses, so we check and update it. 130233841545SHajimu UMEMOTO * XXX: what if address duplication happens? 130333841545SHajimu UMEMOTO */ 130433841545SHajimu UMEMOTO pfxlist_onlink_check(); 130533841545SHajimu UMEMOTO } else { 130633841545SHajimu UMEMOTO /* just set an error. do not bark here. */ 130733841545SHajimu UMEMOTO error = EADDRNOTAVAIL; /* XXX: might be unused. */ 130833841545SHajimu UMEMOTO } 130933841545SHajimu UMEMOTO } 131033841545SHajimu UMEMOTO 131182cd038dSYoshinobu Inoue end: 131282cd038dSYoshinobu Inoue splx(s); 131382cd038dSYoshinobu Inoue return error; 131482cd038dSYoshinobu Inoue } 131582cd038dSYoshinobu Inoue 131682cd038dSYoshinobu Inoue /* 1317686cdd19SJun-ichiro itojun Hagino * A supplement function used in the on-link detection below; 1318686cdd19SJun-ichiro itojun Hagino * detect if a given prefix has a (probably) reachable advertising router. 1319686cdd19SJun-ichiro itojun Hagino * XXX: lengthy function name... 1320686cdd19SJun-ichiro itojun Hagino */ 132133841545SHajimu UMEMOTO static struct nd_pfxrouter * 13221272577eSXin LI find_pfxlist_reachable_router(struct nd_prefix *pr) 1323686cdd19SJun-ichiro itojun Hagino { 1324686cdd19SJun-ichiro itojun Hagino struct nd_pfxrouter *pfxrtr; 13256e6b3f7cSQing Li struct llentry *ln; 1326d78be3a9SKip Macy int canreach; 1327686cdd19SJun-ichiro itojun Hagino 13283b0b2840SJohn Baldwin LIST_FOREACH(pfxrtr, &pr->ndpr_advrtrs, pfr_entry) { 13296e6b3f7cSQing Li IF_AFDATA_LOCK(pfxrtr->router->ifp); 1330d78be3a9SKip Macy ln = nd6_lookup(&pfxrtr->router->rtaddr, 0, pfxrtr->router->ifp); 13316e6b3f7cSQing Li IF_AFDATA_UNLOCK(pfxrtr->router->ifp); 1332a6146780SKip Macy if (ln == NULL) 1333a6146780SKip Macy continue; 1334d78be3a9SKip Macy canreach = ND6_IS_LLINFO_PROBREACH(ln); 1335d78be3a9SKip Macy LLE_RUNLOCK(ln); 1336d78be3a9SKip Macy if (canreach) 1337d78be3a9SKip Macy break; 13386e6b3f7cSQing Li } 1339686cdd19SJun-ichiro itojun Hagino return (pfxrtr); 1340686cdd19SJun-ichiro itojun Hagino } 1341686cdd19SJun-ichiro itojun Hagino 1342686cdd19SJun-ichiro itojun Hagino /* 134382cd038dSYoshinobu Inoue * Check if each prefix in the prefix list has at least one available router 134433841545SHajimu UMEMOTO * that advertised the prefix (a router is "available" if its neighbor cache 134533841545SHajimu UMEMOTO * entry is reachable or probably reachable). 1346686cdd19SJun-ichiro itojun Hagino * If the check fails, the prefix may be off-link, because, for example, 134782cd038dSYoshinobu Inoue * we have moved from the network but the lifetime of the prefix has not 134833841545SHajimu UMEMOTO * expired yet. So we should not use the prefix if there is another prefix 134933841545SHajimu UMEMOTO * that has an available router. 135033841545SHajimu UMEMOTO * But, if there is no prefix that has an available router, we still regards 135182cd038dSYoshinobu Inoue * all the prefixes as on-link. This is because we can't tell if all the 135282cd038dSYoshinobu Inoue * routers are simply dead or if we really moved from the network and there 135382cd038dSYoshinobu Inoue * is no router around us. 135482cd038dSYoshinobu Inoue */ 1355686cdd19SJun-ichiro itojun Hagino void 135682cd038dSYoshinobu Inoue pfxlist_onlink_check() 135782cd038dSYoshinobu Inoue { 135882cd038dSYoshinobu Inoue struct nd_prefix *pr; 135933841545SHajimu UMEMOTO struct in6_ifaddr *ifa; 1360743eee66SSUZUKI Shinsuke struct nd_defrouter *dr; 1361743eee66SSUZUKI Shinsuke struct nd_pfxrouter *pfxrtr = NULL; 136282cd038dSYoshinobu Inoue 1363686cdd19SJun-ichiro itojun Hagino /* 1364686cdd19SJun-ichiro itojun Hagino * Check if there is a prefix that has a reachable advertising 1365686cdd19SJun-ichiro itojun Hagino * router. 1366686cdd19SJun-ichiro itojun Hagino */ 13673b0b2840SJohn Baldwin LIST_FOREACH(pr, &V_nd_prefix, ndpr_entry) { 136833841545SHajimu UMEMOTO if (pr->ndpr_raf_onlink && find_pfxlist_reachable_router(pr)) 136982cd038dSYoshinobu Inoue break; 1370686cdd19SJun-ichiro itojun Hagino } 137182cd038dSYoshinobu Inoue 137282cd038dSYoshinobu Inoue /* 1373743eee66SSUZUKI Shinsuke * If we have no such prefix, check whether we still have a router 1374743eee66SSUZUKI Shinsuke * that does not advertise any prefixes. 1375743eee66SSUZUKI Shinsuke */ 1376743eee66SSUZUKI Shinsuke if (pr == NULL) { 13773b0b2840SJohn Baldwin TAILQ_FOREACH(dr, &V_nd_defrouter, dr_entry) { 1378743eee66SSUZUKI Shinsuke struct nd_prefix *pr0; 1379743eee66SSUZUKI Shinsuke 13803b0b2840SJohn Baldwin LIST_FOREACH(pr0, &V_nd_prefix, ndpr_entry) { 1381743eee66SSUZUKI Shinsuke if ((pfxrtr = pfxrtr_lookup(pr0, dr)) != NULL) 1382743eee66SSUZUKI Shinsuke break; 1383743eee66SSUZUKI Shinsuke } 1384743eee66SSUZUKI Shinsuke if (pfxrtr != NULL) 1385743eee66SSUZUKI Shinsuke break; 1386743eee66SSUZUKI Shinsuke } 1387743eee66SSUZUKI Shinsuke } 13883b0b2840SJohn Baldwin if (pr != NULL || (!TAILQ_EMPTY(&V_nd_defrouter) && pfxrtr == NULL)) { 1389743eee66SSUZUKI Shinsuke /* 1390743eee66SSUZUKI Shinsuke * There is at least one prefix that has a reachable router, 1391743eee66SSUZUKI Shinsuke * or at least a router which probably does not advertise 1392743eee66SSUZUKI Shinsuke * any prefixes. The latter would be the case when we move 1393743eee66SSUZUKI Shinsuke * to a new link where we have a router that does not provide 1394743eee66SSUZUKI Shinsuke * prefixes and we configure an address by hand. 139533841545SHajimu UMEMOTO * Detach prefixes which have no reachable advertising 139633841545SHajimu UMEMOTO * router, and attach other prefixes. 139782cd038dSYoshinobu Inoue */ 13983b0b2840SJohn Baldwin LIST_FOREACH(pr, &V_nd_prefix, ndpr_entry) { 139933841545SHajimu UMEMOTO /* XXX: a link-local prefix should never be detached */ 140033841545SHajimu UMEMOTO if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr)) 140133841545SHajimu UMEMOTO continue; 140233841545SHajimu UMEMOTO 140333841545SHajimu UMEMOTO /* 140433841545SHajimu UMEMOTO * we aren't interested in prefixes without the L bit 140533841545SHajimu UMEMOTO * set. 140633841545SHajimu UMEMOTO */ 140733841545SHajimu UMEMOTO if (pr->ndpr_raf_onlink == 0) 140833841545SHajimu UMEMOTO continue; 140933841545SHajimu UMEMOTO 141042cb3aa4SQing Li if (pr->ndpr_raf_auto == 0) 141142cb3aa4SQing Li continue; 141242cb3aa4SQing Li 141333841545SHajimu UMEMOTO if ((pr->ndpr_stateflags & NDPRF_DETACHED) == 0 && 141433841545SHajimu UMEMOTO find_pfxlist_reachable_router(pr) == NULL) 141533841545SHajimu UMEMOTO pr->ndpr_stateflags |= NDPRF_DETACHED; 141633841545SHajimu UMEMOTO if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0 && 141733841545SHajimu UMEMOTO find_pfxlist_reachable_router(pr) != 0) 141833841545SHajimu UMEMOTO pr->ndpr_stateflags &= ~NDPRF_DETACHED; 141982cd038dSYoshinobu Inoue } 142033841545SHajimu UMEMOTO } else { 142133841545SHajimu UMEMOTO /* there is no prefix that has a reachable router */ 14223b0b2840SJohn Baldwin LIST_FOREACH(pr, &V_nd_prefix, ndpr_entry) { 142333841545SHajimu UMEMOTO if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr)) 142433841545SHajimu UMEMOTO continue; 142533841545SHajimu UMEMOTO 142633841545SHajimu UMEMOTO if (pr->ndpr_raf_onlink == 0) 142733841545SHajimu UMEMOTO continue; 142833841545SHajimu UMEMOTO 142942cb3aa4SQing Li if (pr->ndpr_raf_auto == 0) 143042cb3aa4SQing Li continue; 143142cb3aa4SQing Li 143233841545SHajimu UMEMOTO if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0) 143333841545SHajimu UMEMOTO pr->ndpr_stateflags &= ~NDPRF_DETACHED; 143433841545SHajimu UMEMOTO } 143533841545SHajimu UMEMOTO } 143633841545SHajimu UMEMOTO 143733841545SHajimu UMEMOTO /* 143833841545SHajimu UMEMOTO * Remove each interface route associated with a (just) detached 143933841545SHajimu UMEMOTO * prefix, and reinstall the interface route for a (just) attached 144033841545SHajimu UMEMOTO * prefix. Note that all attempt of reinstallation does not 144133841545SHajimu UMEMOTO * necessarily success, when a same prefix is shared among multiple 144233841545SHajimu UMEMOTO * interfaces. Such cases will be handled in nd6_prefix_onlink, 144333841545SHajimu UMEMOTO * so we don't have to care about them. 144433841545SHajimu UMEMOTO */ 14453b0b2840SJohn Baldwin LIST_FOREACH(pr, &V_nd_prefix, ndpr_entry) { 144633841545SHajimu UMEMOTO int e; 14471d54aa3bSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN]; 144833841545SHajimu UMEMOTO 144933841545SHajimu UMEMOTO if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr)) 145033841545SHajimu UMEMOTO continue; 145133841545SHajimu UMEMOTO 145233841545SHajimu UMEMOTO if (pr->ndpr_raf_onlink == 0) 145333841545SHajimu UMEMOTO continue; 145433841545SHajimu UMEMOTO 145542cb3aa4SQing Li if (pr->ndpr_raf_auto == 0) 145642cb3aa4SQing Li continue; 145742cb3aa4SQing Li 145833841545SHajimu UMEMOTO if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0 && 145933841545SHajimu UMEMOTO (pr->ndpr_stateflags & NDPRF_ONLINK) != 0) { 146033841545SHajimu UMEMOTO if ((e = nd6_prefix_offlink(pr)) != 0) { 146133841545SHajimu UMEMOTO nd6log((LOG_ERR, 146233841545SHajimu UMEMOTO "pfxlist_onlink_check: failed to " 14637aa59493SSUZUKI Shinsuke "make %s/%d offlink, errno=%d\n", 14641d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, 14651d54aa3bSBjoern A. Zeeb &pr->ndpr_prefix.sin6_addr), 146633841545SHajimu UMEMOTO pr->ndpr_plen, e)); 146733841545SHajimu UMEMOTO } 146833841545SHajimu UMEMOTO } 146933841545SHajimu UMEMOTO if ((pr->ndpr_stateflags & NDPRF_DETACHED) == 0 && 147033841545SHajimu UMEMOTO (pr->ndpr_stateflags & NDPRF_ONLINK) == 0 && 147133841545SHajimu UMEMOTO pr->ndpr_raf_onlink) { 147233841545SHajimu UMEMOTO if ((e = nd6_prefix_onlink(pr)) != 0) { 147333841545SHajimu UMEMOTO nd6log((LOG_ERR, 147433841545SHajimu UMEMOTO "pfxlist_onlink_check: failed to " 14757aa59493SSUZUKI Shinsuke "make %s/%d onlink, errno=%d\n", 14761d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, 14771d54aa3bSBjoern A. Zeeb &pr->ndpr_prefix.sin6_addr), 147833841545SHajimu UMEMOTO pr->ndpr_plen, e)); 147933841545SHajimu UMEMOTO } 148033841545SHajimu UMEMOTO } 148133841545SHajimu UMEMOTO } 148233841545SHajimu UMEMOTO 148333841545SHajimu UMEMOTO /* 148433841545SHajimu UMEMOTO * Changes on the prefix status might affect address status as well. 148533841545SHajimu UMEMOTO * Make sure that all addresses derived from an attached prefix are 148633841545SHajimu UMEMOTO * attached, and that all addresses derived from a detached prefix are 148733841545SHajimu UMEMOTO * detached. Note, however, that a manually configured address should 148833841545SHajimu UMEMOTO * always be attached. 148933841545SHajimu UMEMOTO * The precise detection logic is same as the one for prefixes. 1490d1da0a06SRobert Watson * 1491d1da0a06SRobert Watson * XXXRW: in6_ifaddrhead locking. 149233841545SHajimu UMEMOTO */ 149380af0152SRobert Watson TAILQ_FOREACH(ifa, &V_in6_ifaddrhead, ia_link) { 149407eb2995SHajimu UMEMOTO if (!(ifa->ia6_flags & IN6_IFF_AUTOCONF)) 149533841545SHajimu UMEMOTO continue; 149633841545SHajimu UMEMOTO 149733841545SHajimu UMEMOTO if (ifa->ia6_ndpr == NULL) { 149833841545SHajimu UMEMOTO /* 149933841545SHajimu UMEMOTO * This can happen when we first configure the address 150033841545SHajimu UMEMOTO * (i.e. the address exists, but the prefix does not). 150133841545SHajimu UMEMOTO * XXX: complicated relationships... 150233841545SHajimu UMEMOTO */ 150333841545SHajimu UMEMOTO continue; 150433841545SHajimu UMEMOTO } 150533841545SHajimu UMEMOTO 150633841545SHajimu UMEMOTO if (find_pfxlist_reachable_router(ifa->ia6_ndpr)) 150733841545SHajimu UMEMOTO break; 150833841545SHajimu UMEMOTO } 150933841545SHajimu UMEMOTO if (ifa) { 151080af0152SRobert Watson TAILQ_FOREACH(ifa, &V_in6_ifaddrhead, ia_link) { 151133841545SHajimu UMEMOTO if ((ifa->ia6_flags & IN6_IFF_AUTOCONF) == 0) 151233841545SHajimu UMEMOTO continue; 151333841545SHajimu UMEMOTO 151433841545SHajimu UMEMOTO if (ifa->ia6_ndpr == NULL) /* XXX: see above. */ 151533841545SHajimu UMEMOTO continue; 151633841545SHajimu UMEMOTO 1517743eee66SSUZUKI Shinsuke if (find_pfxlist_reachable_router(ifa->ia6_ndpr)) { 1518743eee66SSUZUKI Shinsuke if (ifa->ia6_flags & IN6_IFF_DETACHED) { 151933841545SHajimu UMEMOTO ifa->ia6_flags &= ~IN6_IFF_DETACHED; 1520743eee66SSUZUKI Shinsuke ifa->ia6_flags |= IN6_IFF_TENTATIVE; 1521743eee66SSUZUKI Shinsuke nd6_dad_start((struct ifaddr *)ifa, 0); 1522743eee66SSUZUKI Shinsuke } 1523743eee66SSUZUKI Shinsuke } else { 152433841545SHajimu UMEMOTO ifa->ia6_flags |= IN6_IFF_DETACHED; 152582cd038dSYoshinobu Inoue } 1526686cdd19SJun-ichiro itojun Hagino } 1527743eee66SSUZUKI Shinsuke } 1528686cdd19SJun-ichiro itojun Hagino else { 152980af0152SRobert Watson TAILQ_FOREACH(ifa, &V_in6_ifaddrhead, ia_link) { 153033841545SHajimu UMEMOTO if ((ifa->ia6_flags & IN6_IFF_AUTOCONF) == 0) 153133841545SHajimu UMEMOTO continue; 153233841545SHajimu UMEMOTO 1533743eee66SSUZUKI Shinsuke if (ifa->ia6_flags & IN6_IFF_DETACHED) { 153433841545SHajimu UMEMOTO ifa->ia6_flags &= ~IN6_IFF_DETACHED; 1535743eee66SSUZUKI Shinsuke ifa->ia6_flags |= IN6_IFF_TENTATIVE; 1536743eee66SSUZUKI Shinsuke /* Do we need a delay in this case? */ 1537743eee66SSUZUKI Shinsuke nd6_dad_start((struct ifaddr *)ifa, 0); 1538743eee66SSUZUKI Shinsuke } 153933841545SHajimu UMEMOTO } 154082cd038dSYoshinobu Inoue } 154182cd038dSYoshinobu Inoue } 154282cd038dSYoshinobu Inoue 15439d9b92f2SBjoern A. Zeeb static int 1544*81d5d46bSBjoern A. Zeeb nd6_prefix_onlink_rtrequest(struct nd_prefix *pr, struct ifaddr *ifa) 1545*81d5d46bSBjoern A. Zeeb { 1546*81d5d46bSBjoern A. Zeeb static struct sockaddr_dl null_sdl = {sizeof(null_sdl), AF_LINK}; 1547*81d5d46bSBjoern A. Zeeb struct radix_node_head *rnh; 1548*81d5d46bSBjoern A. Zeeb struct rtentry *rt; 1549*81d5d46bSBjoern A. Zeeb struct sockaddr_in6 mask6; 1550*81d5d46bSBjoern A. Zeeb u_long rtflags; 1551*81d5d46bSBjoern A. Zeeb int error, a_failure, fibnum; 1552*81d5d46bSBjoern A. Zeeb 1553*81d5d46bSBjoern A. Zeeb /* 1554*81d5d46bSBjoern A. Zeeb * in6_ifinit() sets nd6_rtrequest to ifa_rtrequest for all ifaddrs. 1555*81d5d46bSBjoern A. Zeeb * ifa->ifa_rtrequest = nd6_rtrequest; 1556*81d5d46bSBjoern A. Zeeb */ 1557*81d5d46bSBjoern A. Zeeb bzero(&mask6, sizeof(mask6)); 1558*81d5d46bSBjoern A. Zeeb mask6.sin6_len = sizeof(mask6); 1559*81d5d46bSBjoern A. Zeeb mask6.sin6_addr = pr->ndpr_mask; 1560*81d5d46bSBjoern A. Zeeb rtflags = (ifa->ifa_flags & ~IFA_RTSELF) | RTF_UP; 1561*81d5d46bSBjoern A. Zeeb 1562*81d5d46bSBjoern A. Zeeb a_failure = 0; 1563*81d5d46bSBjoern A. Zeeb for (fibnum = 0; fibnum < rt_numfibs; fibnum++) { 1564*81d5d46bSBjoern A. Zeeb 1565*81d5d46bSBjoern A. Zeeb rt = NULL; 1566*81d5d46bSBjoern A. Zeeb error = in6_rtrequest(RTM_ADD, 1567*81d5d46bSBjoern A. Zeeb (struct sockaddr *)&pr->ndpr_prefix, ifa->ifa_addr, 1568*81d5d46bSBjoern A. Zeeb (struct sockaddr *)&mask6, rtflags, &rt, fibnum); 1569*81d5d46bSBjoern A. Zeeb if (error == 0) { 1570*81d5d46bSBjoern A. Zeeb KASSERT(rt != NULL, ("%s: in6_rtrequest return no " 1571*81d5d46bSBjoern A. Zeeb "error(%d) but rt is NULL, pr=%p, ifa=%p", __func__, 1572*81d5d46bSBjoern A. Zeeb error, pr, ifa)); 1573*81d5d46bSBjoern A. Zeeb 1574*81d5d46bSBjoern A. Zeeb rnh = rt_tables_get_rnh(rt->rt_fibnum, AF_INET6); 1575*81d5d46bSBjoern A. Zeeb /* XXX what if rhn == NULL? */ 1576*81d5d46bSBjoern A. Zeeb RADIX_NODE_HEAD_LOCK(rnh); 1577*81d5d46bSBjoern A. Zeeb RT_LOCK(rt); 1578*81d5d46bSBjoern A. Zeeb if (rt_setgate(rt, rt_key(rt), 1579*81d5d46bSBjoern A. Zeeb (struct sockaddr *)&null_sdl) == 0) { 1580*81d5d46bSBjoern A. Zeeb struct sockaddr_dl *dl; 1581*81d5d46bSBjoern A. Zeeb 1582*81d5d46bSBjoern A. Zeeb dl = (struct sockaddr_dl *)rt->rt_gateway; 1583*81d5d46bSBjoern A. Zeeb dl->sdl_type = rt->rt_ifp->if_type; 1584*81d5d46bSBjoern A. Zeeb dl->sdl_index = rt->rt_ifp->if_index; 1585*81d5d46bSBjoern A. Zeeb } 1586*81d5d46bSBjoern A. Zeeb RADIX_NODE_HEAD_UNLOCK(rnh); 1587*81d5d46bSBjoern A. Zeeb nd6_rtmsg(RTM_ADD, rt); 1588*81d5d46bSBjoern A. Zeeb RT_UNLOCK(rt); 1589*81d5d46bSBjoern A. Zeeb pr->ndpr_stateflags |= NDPRF_ONLINK; 1590*81d5d46bSBjoern A. Zeeb } else { 1591*81d5d46bSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN]; 1592*81d5d46bSBjoern A. Zeeb char ip6bufg[INET6_ADDRSTRLEN]; 1593*81d5d46bSBjoern A. Zeeb char ip6bufm[INET6_ADDRSTRLEN]; 1594*81d5d46bSBjoern A. Zeeb struct sockaddr_in6 *sin6; 1595*81d5d46bSBjoern A. Zeeb 1596*81d5d46bSBjoern A. Zeeb sin6 = (struct sockaddr_in6 *)ifa->ifa_addr; 1597*81d5d46bSBjoern A. Zeeb nd6log((LOG_ERR, "nd6_prefix_onlink: failed to add " 1598*81d5d46bSBjoern A. Zeeb "route for a prefix (%s/%d) on %s, gw=%s, mask=%s, " 1599*81d5d46bSBjoern A. Zeeb "flags=%lx errno = %d\n", 1600*81d5d46bSBjoern A. Zeeb ip6_sprintf(ip6buf, &pr->ndpr_prefix.sin6_addr), 1601*81d5d46bSBjoern A. Zeeb pr->ndpr_plen, if_name(pr->ndpr_ifp), 1602*81d5d46bSBjoern A. Zeeb ip6_sprintf(ip6bufg, &sin6->sin6_addr), 1603*81d5d46bSBjoern A. Zeeb ip6_sprintf(ip6bufm, &mask6.sin6_addr), 1604*81d5d46bSBjoern A. Zeeb rtflags, error)); 1605*81d5d46bSBjoern A. Zeeb 1606*81d5d46bSBjoern A. Zeeb /* Save last error to return, see rtinit(). */ 1607*81d5d46bSBjoern A. Zeeb a_failure = error; 1608*81d5d46bSBjoern A. Zeeb } 1609*81d5d46bSBjoern A. Zeeb 1610*81d5d46bSBjoern A. Zeeb if (rt != NULL) { 1611*81d5d46bSBjoern A. Zeeb RT_LOCK(rt); 1612*81d5d46bSBjoern A. Zeeb RT_REMREF(rt); 1613*81d5d46bSBjoern A. Zeeb RT_UNLOCK(rt); 1614*81d5d46bSBjoern A. Zeeb } 1615*81d5d46bSBjoern A. Zeeb } 1616*81d5d46bSBjoern A. Zeeb 1617*81d5d46bSBjoern A. Zeeb /* Return the last error we got. */ 1618*81d5d46bSBjoern A. Zeeb return (a_failure); 1619*81d5d46bSBjoern A. Zeeb } 1620*81d5d46bSBjoern A. Zeeb 1621*81d5d46bSBjoern A. Zeeb static int 16221272577eSXin LI nd6_prefix_onlink(struct nd_prefix *pr) 162382cd038dSYoshinobu Inoue { 162433841545SHajimu UMEMOTO struct ifaddr *ifa; 162533841545SHajimu UMEMOTO struct ifnet *ifp = pr->ndpr_ifp; 162633841545SHajimu UMEMOTO struct nd_prefix *opr; 162733841545SHajimu UMEMOTO int error = 0; 16281d54aa3bSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN]; 162933841545SHajimu UMEMOTO 163033841545SHajimu UMEMOTO /* sanity check */ 163133841545SHajimu UMEMOTO if ((pr->ndpr_stateflags & NDPRF_ONLINK) != 0) { 163233841545SHajimu UMEMOTO nd6log((LOG_ERR, 163333841545SHajimu UMEMOTO "nd6_prefix_onlink: %s/%d is already on-link\n", 16341d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &pr->ndpr_prefix.sin6_addr), 16351d54aa3bSBjoern A. Zeeb pr->ndpr_plen)); 16362ce62dceSSUZUKI Shinsuke return (EEXIST); 163733841545SHajimu UMEMOTO } 163882cd038dSYoshinobu Inoue 163982cd038dSYoshinobu Inoue /* 164033841545SHajimu UMEMOTO * Add the interface route associated with the prefix. Before 164133841545SHajimu UMEMOTO * installing the route, check if there's the same prefix on another 164233841545SHajimu UMEMOTO * interface, and the prefix has already installed the interface route. 164333841545SHajimu UMEMOTO * Although such a configuration is expected to be rare, we explicitly 164433841545SHajimu UMEMOTO * allow it. 164582cd038dSYoshinobu Inoue */ 16463b0b2840SJohn Baldwin LIST_FOREACH(opr, &V_nd_prefix, ndpr_entry) { 164733841545SHajimu UMEMOTO if (opr == pr) 164833841545SHajimu UMEMOTO continue; 164933841545SHajimu UMEMOTO 165033841545SHajimu UMEMOTO if ((opr->ndpr_stateflags & NDPRF_ONLINK) == 0) 165133841545SHajimu UMEMOTO continue; 165233841545SHajimu UMEMOTO 165333841545SHajimu UMEMOTO if (opr->ndpr_plen == pr->ndpr_plen && 165433841545SHajimu UMEMOTO in6_are_prefix_equal(&pr->ndpr_prefix.sin6_addr, 165507eb2995SHajimu UMEMOTO &opr->ndpr_prefix.sin6_addr, pr->ndpr_plen)) 165633841545SHajimu UMEMOTO return (0); 165733841545SHajimu UMEMOTO } 165833841545SHajimu UMEMOTO 165933841545SHajimu UMEMOTO /* 166033841545SHajimu UMEMOTO * We prefer link-local addresses as the associated interface address. 166133841545SHajimu UMEMOTO */ 166233841545SHajimu UMEMOTO /* search for a link-local addr */ 166333841545SHajimu UMEMOTO ifa = (struct ifaddr *)in6ifa_ifpforlinklocal(ifp, 166407eb2995SHajimu UMEMOTO IN6_IFF_NOTREADY | IN6_IFF_ANYCAST); 166533841545SHajimu UMEMOTO if (ifa == NULL) { 166633841545SHajimu UMEMOTO /* XXX: freebsd does not have ifa_ifwithaf */ 1667137f91e8SJohn Baldwin IF_ADDR_RLOCK(ifp); 1668c4dd3fe1SRobert Watson TAILQ_FOREACH(ifa, &ifp->if_addrhead, ifa_link) { 166933841545SHajimu UMEMOTO if (ifa->ifa_addr->sa_family == AF_INET6) 167033841545SHajimu UMEMOTO break; 167133841545SHajimu UMEMOTO } 16728c0fec80SRobert Watson if (ifa != NULL) 16738c0fec80SRobert Watson ifa_ref(ifa); 1674137f91e8SJohn Baldwin IF_ADDR_RUNLOCK(ifp); 167533841545SHajimu UMEMOTO /* should we care about ia6_flags? */ 167633841545SHajimu UMEMOTO } 167733841545SHajimu UMEMOTO if (ifa == NULL) { 167833841545SHajimu UMEMOTO /* 167933841545SHajimu UMEMOTO * This can still happen, when, for example, we receive an RA 168033841545SHajimu UMEMOTO * containing a prefix with the L bit set and the A bit clear, 168133841545SHajimu UMEMOTO * after removing all IPv6 addresses on the receiving 168233841545SHajimu UMEMOTO * interface. This should, of course, be rare though. 168333841545SHajimu UMEMOTO */ 168433841545SHajimu UMEMOTO nd6log((LOG_NOTICE, 168533841545SHajimu UMEMOTO "nd6_prefix_onlink: failed to find any ifaddr" 168633841545SHajimu UMEMOTO " to add route for a prefix(%s/%d) on %s\n", 16871d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &pr->ndpr_prefix.sin6_addr), 168833841545SHajimu UMEMOTO pr->ndpr_plen, if_name(ifp))); 168933841545SHajimu UMEMOTO return (0); 169033841545SHajimu UMEMOTO } 169133841545SHajimu UMEMOTO 1692*81d5d46bSBjoern A. Zeeb error = nd6_prefix_onlink_rtrequest(pr, ifa); 169333841545SHajimu UMEMOTO 16948c0fec80SRobert Watson if (ifa != NULL) 16958c0fec80SRobert Watson ifa_free(ifa); 169633841545SHajimu UMEMOTO 169733841545SHajimu UMEMOTO return (error); 169833841545SHajimu UMEMOTO } 169933841545SHajimu UMEMOTO 17009d9b92f2SBjoern A. Zeeb static int 17011272577eSXin LI nd6_prefix_offlink(struct nd_prefix *pr) 170233841545SHajimu UMEMOTO { 170333841545SHajimu UMEMOTO int error = 0; 170433841545SHajimu UMEMOTO struct ifnet *ifp = pr->ndpr_ifp; 170533841545SHajimu UMEMOTO struct nd_prefix *opr; 170633841545SHajimu UMEMOTO struct sockaddr_in6 sa6, mask6; 1707*81d5d46bSBjoern A. Zeeb struct rtentry *rt; 17081d54aa3bSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN]; 1709*81d5d46bSBjoern A. Zeeb int fibnum, a_failure; 171033841545SHajimu UMEMOTO 171133841545SHajimu UMEMOTO /* sanity check */ 171233841545SHajimu UMEMOTO if ((pr->ndpr_stateflags & NDPRF_ONLINK) == 0) { 171333841545SHajimu UMEMOTO nd6log((LOG_ERR, 171433841545SHajimu UMEMOTO "nd6_prefix_offlink: %s/%d is already off-link\n", 17151d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &pr->ndpr_prefix.sin6_addr), 17161d54aa3bSBjoern A. Zeeb pr->ndpr_plen)); 171733841545SHajimu UMEMOTO return (EEXIST); 171833841545SHajimu UMEMOTO } 171933841545SHajimu UMEMOTO 172082cd038dSYoshinobu Inoue bzero(&sa6, sizeof(sa6)); 172182cd038dSYoshinobu Inoue sa6.sin6_family = AF_INET6; 172282cd038dSYoshinobu Inoue sa6.sin6_len = sizeof(sa6); 172382cd038dSYoshinobu Inoue bcopy(&pr->ndpr_prefix.sin6_addr, &sa6.sin6_addr, 172482cd038dSYoshinobu Inoue sizeof(struct in6_addr)); 172582cd038dSYoshinobu Inoue bzero(&mask6, sizeof(mask6)); 172682cd038dSYoshinobu Inoue mask6.sin6_family = AF_INET6; 172782cd038dSYoshinobu Inoue mask6.sin6_len = sizeof(sa6); 172882cd038dSYoshinobu Inoue bcopy(&pr->ndpr_mask, &mask6.sin6_addr, sizeof(struct in6_addr)); 172933841545SHajimu UMEMOTO 1730*81d5d46bSBjoern A. Zeeb a_failure = 0; 1731*81d5d46bSBjoern A. Zeeb for (fibnum = 0; fibnum < rt_numfibs; fibnum++) { 1732*81d5d46bSBjoern A. Zeeb rt = NULL; 1733*81d5d46bSBjoern A. Zeeb error = in6_rtrequest(RTM_DELETE, (struct sockaddr *)&sa6, NULL, 1734*81d5d46bSBjoern A. Zeeb (struct sockaddr *)&mask6, 0, &rt, fibnum); 1735*81d5d46bSBjoern A. Zeeb if (error == 0) { 173633841545SHajimu UMEMOTO /* report the route deletion to the routing socket. */ 173733841545SHajimu UMEMOTO if (rt != NULL) 173833841545SHajimu UMEMOTO nd6_rtmsg(RTM_DELETE, rt); 1739*81d5d46bSBjoern A. Zeeb } else { 1740*81d5d46bSBjoern A. Zeeb /* Save last error to return, see rtinit(). */ 1741*81d5d46bSBjoern A. Zeeb a_failure = error; 1742*81d5d46bSBjoern A. Zeeb } 1743*81d5d46bSBjoern A. Zeeb if (rt != NULL) { 1744*81d5d46bSBjoern A. Zeeb RTFREE(rt); 1745*81d5d46bSBjoern A. Zeeb } 1746*81d5d46bSBjoern A. Zeeb } 1747*81d5d46bSBjoern A. Zeeb error = a_failure; 1748*81d5d46bSBjoern A. Zeeb if (error == 0) { 1749*81d5d46bSBjoern A. Zeeb pr->ndpr_stateflags &= ~NDPRF_ONLINK; 175033841545SHajimu UMEMOTO 175133841545SHajimu UMEMOTO /* 175233841545SHajimu UMEMOTO * There might be the same prefix on another interface, 175333841545SHajimu UMEMOTO * the prefix which could not be on-link just because we have 175433841545SHajimu UMEMOTO * the interface route (see comments in nd6_prefix_onlink). 175533841545SHajimu UMEMOTO * If there's one, try to make the prefix on-link on the 175633841545SHajimu UMEMOTO * interface. 175733841545SHajimu UMEMOTO */ 17583b0b2840SJohn Baldwin LIST_FOREACH(opr, &V_nd_prefix, ndpr_entry) { 175933841545SHajimu UMEMOTO if (opr == pr) 176033841545SHajimu UMEMOTO continue; 176133841545SHajimu UMEMOTO 176233841545SHajimu UMEMOTO if ((opr->ndpr_stateflags & NDPRF_ONLINK) != 0) 176333841545SHajimu UMEMOTO continue; 176433841545SHajimu UMEMOTO 176533841545SHajimu UMEMOTO /* 176633841545SHajimu UMEMOTO * KAME specific: detached prefixes should not be 176733841545SHajimu UMEMOTO * on-link. 176833841545SHajimu UMEMOTO */ 176933841545SHajimu UMEMOTO if ((opr->ndpr_stateflags & NDPRF_DETACHED) != 0) 177033841545SHajimu UMEMOTO continue; 177133841545SHajimu UMEMOTO 177233841545SHajimu UMEMOTO if (opr->ndpr_plen == pr->ndpr_plen && 177333841545SHajimu UMEMOTO in6_are_prefix_equal(&pr->ndpr_prefix.sin6_addr, 177407eb2995SHajimu UMEMOTO &opr->ndpr_prefix.sin6_addr, pr->ndpr_plen)) { 177582cd038dSYoshinobu Inoue int e; 177682cd038dSYoshinobu Inoue 177733841545SHajimu UMEMOTO if ((e = nd6_prefix_onlink(opr)) != 0) { 177833841545SHajimu UMEMOTO nd6log((LOG_ERR, 177933841545SHajimu UMEMOTO "nd6_prefix_offlink: failed to " 178033841545SHajimu UMEMOTO "recover a prefix %s/%d from %s " 178133841545SHajimu UMEMOTO "to %s (errno = %d)\n", 17821d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, 17831d54aa3bSBjoern A. Zeeb &opr->ndpr_prefix.sin6_addr), 178433841545SHajimu UMEMOTO opr->ndpr_plen, if_name(ifp), 178533841545SHajimu UMEMOTO if_name(opr->ndpr_ifp), e)); 178682cd038dSYoshinobu Inoue } 178782cd038dSYoshinobu Inoue } 178882cd038dSYoshinobu Inoue } 178907eb2995SHajimu UMEMOTO } else { 179033841545SHajimu UMEMOTO /* XXX: can we still set the NDPRF_ONLINK flag? */ 179133841545SHajimu UMEMOTO nd6log((LOG_ERR, 179233841545SHajimu UMEMOTO "nd6_prefix_offlink: failed to delete route: " 179333841545SHajimu UMEMOTO "%s/%d on %s (errno = %d)\n", 17941d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &sa6.sin6_addr), pr->ndpr_plen, 17951d54aa3bSBjoern A. Zeeb if_name(ifp), error)); 179633841545SHajimu UMEMOTO } 179782cd038dSYoshinobu Inoue 179833841545SHajimu UMEMOTO return (error); 179982cd038dSYoshinobu Inoue } 180082cd038dSYoshinobu Inoue 180182cd038dSYoshinobu Inoue static struct in6_ifaddr * 18021272577eSXin LI in6_ifadd(struct nd_prefixctl *pr, int mcast) 180382cd038dSYoshinobu Inoue { 180433841545SHajimu UMEMOTO struct ifnet *ifp = pr->ndpr_ifp; 180582cd038dSYoshinobu Inoue struct ifaddr *ifa; 180633841545SHajimu UMEMOTO struct in6_aliasreq ifra; 180733841545SHajimu UMEMOTO struct in6_ifaddr *ia, *ib; 180833841545SHajimu UMEMOTO int error, plen0; 180982cd038dSYoshinobu Inoue struct in6_addr mask; 181033841545SHajimu UMEMOTO int prefixlen = pr->ndpr_plen; 1811743eee66SSUZUKI Shinsuke int updateflags; 18121d54aa3bSBjoern A. Zeeb char ip6buf[INET6_ADDRSTRLEN]; 181382cd038dSYoshinobu Inoue 1814ae360dddSHajimu UMEMOTO in6_prefixlen2mask(&mask, prefixlen); 181582cd038dSYoshinobu Inoue 181633841545SHajimu UMEMOTO /* 181733841545SHajimu UMEMOTO * find a link-local address (will be interface ID). 181833841545SHajimu UMEMOTO * Is it really mandatory? Theoretically, a global or a site-local 181933841545SHajimu UMEMOTO * address can be configured without a link-local address, if we 182033841545SHajimu UMEMOTO * have a unique interface identifier... 182133841545SHajimu UMEMOTO * 182233841545SHajimu UMEMOTO * it is not mandatory to have a link-local address, we can generate 182333841545SHajimu UMEMOTO * interface identifier on the fly. we do this because: 182433841545SHajimu UMEMOTO * (1) it should be the easiest way to find interface identifier. 182533841545SHajimu UMEMOTO * (2) RFC2462 5.4 suggesting the use of the same interface identifier 182633841545SHajimu UMEMOTO * for multiple addresses on a single interface, and possible shortcut 182733841545SHajimu UMEMOTO * of DAD. we omitted DAD for this reason in the past. 182833841545SHajimu UMEMOTO * (3) a user can prevent autoconfiguration of global address 182933841545SHajimu UMEMOTO * by removing link-local address by hand (this is partly because we 18309d5abbddSJens Schweikhardt * don't have other way to control the use of IPv6 on an interface. 183133841545SHajimu UMEMOTO * this has been our design choice - cf. NRL's "ifconfig auto"). 183233841545SHajimu UMEMOTO * (4) it is easier to manage when an interface has addresses 183333841545SHajimu UMEMOTO * with the same interface identifier, than to have multiple addresses 183433841545SHajimu UMEMOTO * with different interface identifiers. 183533841545SHajimu UMEMOTO */ 1836686cdd19SJun-ichiro itojun Hagino ifa = (struct ifaddr *)in6ifa_ifpforlinklocal(ifp, 0); /* 0 is OK? */ 183782cd038dSYoshinobu Inoue if (ifa) 183882cd038dSYoshinobu Inoue ib = (struct in6_ifaddr *)ifa; 183982cd038dSYoshinobu Inoue else 184082cd038dSYoshinobu Inoue return NULL; 184182cd038dSYoshinobu Inoue 184282cd038dSYoshinobu Inoue /* prefixlen + ifidlen must be equal to 128 */ 184333841545SHajimu UMEMOTO plen0 = in6_mask2len(&ib->ia_prefixmask.sin6_addr, NULL); 184433841545SHajimu UMEMOTO if (prefixlen != plen0) { 18458c0fec80SRobert Watson ifa_free(ifa); 184633841545SHajimu UMEMOTO nd6log((LOG_INFO, "in6_ifadd: wrong prefixlen for %s " 184733841545SHajimu UMEMOTO "(prefix=%d ifid=%d)\n", 184833841545SHajimu UMEMOTO if_name(ifp), prefixlen, 128 - plen0)); 184982cd038dSYoshinobu Inoue return NULL; 185082cd038dSYoshinobu Inoue } 185182cd038dSYoshinobu Inoue 185282cd038dSYoshinobu Inoue /* make ifaddr */ 185382cd038dSYoshinobu Inoue 185433841545SHajimu UMEMOTO bzero(&ifra, sizeof(ifra)); 1855686cdd19SJun-ichiro itojun Hagino /* 185633841545SHajimu UMEMOTO * in6_update_ifa() does not use ifra_name, but we accurately set it 185733841545SHajimu UMEMOTO * for safety. 1858686cdd19SJun-ichiro itojun Hagino */ 185933841545SHajimu UMEMOTO strncpy(ifra.ifra_name, if_name(ifp), sizeof(ifra.ifra_name)); 186033841545SHajimu UMEMOTO ifra.ifra_addr.sin6_family = AF_INET6; 186133841545SHajimu UMEMOTO ifra.ifra_addr.sin6_len = sizeof(struct sockaddr_in6); 186282cd038dSYoshinobu Inoue /* prefix */ 1863743eee66SSUZUKI Shinsuke ifra.ifra_addr.sin6_addr = pr->ndpr_prefix.sin6_addr; 186433841545SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[0] &= mask.s6_addr32[0]; 186533841545SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[1] &= mask.s6_addr32[1]; 186633841545SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[2] &= mask.s6_addr32[2]; 186733841545SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[3] &= mask.s6_addr32[3]; 186833841545SHajimu UMEMOTO 186982cd038dSYoshinobu Inoue /* interface ID */ 187007eb2995SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[0] |= 1871743eee66SSUZUKI Shinsuke (ib->ia_addr.sin6_addr.s6_addr32[0] & ~mask.s6_addr32[0]); 187207eb2995SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[1] |= 1873743eee66SSUZUKI Shinsuke (ib->ia_addr.sin6_addr.s6_addr32[1] & ~mask.s6_addr32[1]); 187407eb2995SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[2] |= 1875743eee66SSUZUKI Shinsuke (ib->ia_addr.sin6_addr.s6_addr32[2] & ~mask.s6_addr32[2]); 187607eb2995SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[3] |= 1877743eee66SSUZUKI Shinsuke (ib->ia_addr.sin6_addr.s6_addr32[3] & ~mask.s6_addr32[3]); 18788c0fec80SRobert Watson ifa_free(ifa); 187982cd038dSYoshinobu Inoue 188033841545SHajimu UMEMOTO /* new prefix mask. */ 188133841545SHajimu UMEMOTO ifra.ifra_prefixmask.sin6_len = sizeof(struct sockaddr_in6); 188233841545SHajimu UMEMOTO ifra.ifra_prefixmask.sin6_family = AF_INET6; 188333841545SHajimu UMEMOTO bcopy(&mask, &ifra.ifra_prefixmask.sin6_addr, 188433841545SHajimu UMEMOTO sizeof(ifra.ifra_prefixmask.sin6_addr)); 188582cd038dSYoshinobu Inoue 1886743eee66SSUZUKI Shinsuke /* lifetimes. */ 188733841545SHajimu UMEMOTO ifra.ifra_lifetime.ia6t_vltime = pr->ndpr_vltime; 188833841545SHajimu UMEMOTO ifra.ifra_lifetime.ia6t_pltime = pr->ndpr_pltime; 188933841545SHajimu UMEMOTO 189033841545SHajimu UMEMOTO /* XXX: scope zone ID? */ 189133841545SHajimu UMEMOTO 189233841545SHajimu UMEMOTO ifra.ifra_flags |= IN6_IFF_AUTOCONF; /* obey autoconf */ 189333841545SHajimu UMEMOTO 189433841545SHajimu UMEMOTO /* 1895743eee66SSUZUKI Shinsuke * Make sure that we do not have this address already. This should 1896743eee66SSUZUKI Shinsuke * usually not happen, but we can still see this case, e.g., if we 1897743eee66SSUZUKI Shinsuke * have manually configured the exact address to be configured. 189833841545SHajimu UMEMOTO */ 18998c0fec80SRobert Watson ifa = (struct ifaddr *)in6ifa_ifpwithaddr(ifp, 19008c0fec80SRobert Watson &ifra.ifra_addr.sin6_addr); 19018c0fec80SRobert Watson if (ifa != NULL) { 19028c0fec80SRobert Watson ifa_free(ifa); 1903743eee66SSUZUKI Shinsuke /* this should be rare enough to make an explicit log */ 1904743eee66SSUZUKI Shinsuke log(LOG_INFO, "in6_ifadd: %s is already configured\n", 19051d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &ifra.ifra_addr.sin6_addr)); 1906743eee66SSUZUKI Shinsuke return (NULL); 1907743eee66SSUZUKI Shinsuke } 190833841545SHajimu UMEMOTO 1909743eee66SSUZUKI Shinsuke /* 1910743eee66SSUZUKI Shinsuke * Allocate ifaddr structure, link into chain, etc. 1911743eee66SSUZUKI Shinsuke * If we are going to create a new address upon receiving a multicasted 1912743eee66SSUZUKI Shinsuke * RA, we need to impose a random delay before starting DAD. 1913743eee66SSUZUKI Shinsuke * [draft-ietf-ipv6-rfc2462bis-02.txt, Section 5.4.2] 1914743eee66SSUZUKI Shinsuke */ 1915743eee66SSUZUKI Shinsuke updateflags = 0; 1916743eee66SSUZUKI Shinsuke if (mcast) 1917743eee66SSUZUKI Shinsuke updateflags |= IN6_IFAUPDATE_DADDELAY; 1918743eee66SSUZUKI Shinsuke if ((error = in6_update_ifa(ifp, &ifra, NULL, updateflags)) != 0) { 191933841545SHajimu UMEMOTO nd6log((LOG_ERR, 192033841545SHajimu UMEMOTO "in6_ifadd: failed to make ifaddr %s on %s (errno=%d)\n", 19211d54aa3bSBjoern A. Zeeb ip6_sprintf(ip6buf, &ifra.ifra_addr.sin6_addr), 19221d54aa3bSBjoern A. Zeeb if_name(ifp), error)); 192333841545SHajimu UMEMOTO return (NULL); /* ifaddr must not have been allocated. */ 192482cd038dSYoshinobu Inoue } 192582cd038dSYoshinobu Inoue 192633841545SHajimu UMEMOTO ia = in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr); 19278c0fec80SRobert Watson /* 19288c0fec80SRobert Watson * XXXRW: Assumption of non-NULLness here might not be true with 19298c0fec80SRobert Watson * fine-grained locking -- should we validate it? Or just return 19308c0fec80SRobert Watson * earlier ifa rather than looking it up again? 19318c0fec80SRobert Watson */ 19328c0fec80SRobert Watson return (ia); /* this is always non-NULL and referenced. */ 193382cd038dSYoshinobu Inoue } 193482cd038dSYoshinobu Inoue 19351272577eSXin LI /* 19361272577eSXin LI * ia0 - corresponding public address 19371272577eSXin LI */ 193882cd038dSYoshinobu Inoue int 19391272577eSXin LI in6_tmpifadd(const struct in6_ifaddr *ia0, int forcegen, int delay) 194082cd038dSYoshinobu Inoue { 194133841545SHajimu UMEMOTO struct ifnet *ifp = ia0->ia_ifa.ifa_ifp; 1942743eee66SSUZUKI Shinsuke struct in6_ifaddr *newia, *ia; 194333841545SHajimu UMEMOTO struct in6_aliasreq ifra; 194433841545SHajimu UMEMOTO int i, error; 194533841545SHajimu UMEMOTO int trylimit = 3; /* XXX: adhoc value */ 1946743eee66SSUZUKI Shinsuke int updateflags; 194733841545SHajimu UMEMOTO u_int32_t randid[2]; 194833841545SHajimu UMEMOTO time_t vltime0, pltime0; 194982cd038dSYoshinobu Inoue 195033841545SHajimu UMEMOTO bzero(&ifra, sizeof(ifra)); 195133841545SHajimu UMEMOTO strncpy(ifra.ifra_name, if_name(ifp), sizeof(ifra.ifra_name)); 195233841545SHajimu UMEMOTO ifra.ifra_addr = ia0->ia_addr; 195333841545SHajimu UMEMOTO /* copy prefix mask */ 195433841545SHajimu UMEMOTO ifra.ifra_prefixmask = ia0->ia_prefixmask; 195533841545SHajimu UMEMOTO /* clear the old IFID */ 195633841545SHajimu UMEMOTO for (i = 0; i < 4; i++) { 195707eb2995SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[i] &= 195807eb2995SHajimu UMEMOTO ifra.ifra_prefixmask.sin6_addr.s6_addr32[i]; 195933841545SHajimu UMEMOTO } 196082cd038dSYoshinobu Inoue 196133841545SHajimu UMEMOTO again: 1962743eee66SSUZUKI Shinsuke if (in6_get_tmpifid(ifp, (u_int8_t *)randid, 1963743eee66SSUZUKI Shinsuke (const u_int8_t *)&ia0->ia_addr.sin6_addr.s6_addr[8], forcegen)) { 1964743eee66SSUZUKI Shinsuke nd6log((LOG_NOTICE, "in6_tmpifadd: failed to find a good " 1965743eee66SSUZUKI Shinsuke "random IFID\n")); 1966743eee66SSUZUKI Shinsuke return (EINVAL); 1967743eee66SSUZUKI Shinsuke } 196807eb2995SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[2] |= 196907eb2995SHajimu UMEMOTO (randid[0] & ~(ifra.ifra_prefixmask.sin6_addr.s6_addr32[2])); 197007eb2995SHajimu UMEMOTO ifra.ifra_addr.sin6_addr.s6_addr32[3] |= 197107eb2995SHajimu UMEMOTO (randid[1] & ~(ifra.ifra_prefixmask.sin6_addr.s6_addr32[3])); 197282cd038dSYoshinobu Inoue 197382cd038dSYoshinobu Inoue /* 1974743eee66SSUZUKI Shinsuke * in6_get_tmpifid() quite likely provided a unique interface ID. 1975743eee66SSUZUKI Shinsuke * However, we may still have a chance to see collision, because 1976743eee66SSUZUKI Shinsuke * there may be a time lag between generation of the ID and generation 1977743eee66SSUZUKI Shinsuke * of the address. So, we'll do one more sanity check. 197882cd038dSYoshinobu Inoue */ 1979d1da0a06SRobert Watson IN6_IFADDR_RLOCK(); 198080af0152SRobert Watson TAILQ_FOREACH(ia, &V_in6_ifaddrhead, ia_link) { 1981743eee66SSUZUKI Shinsuke if (IN6_ARE_ADDR_EQUAL(&ia->ia_addr.sin6_addr, 1982743eee66SSUZUKI Shinsuke &ifra.ifra_addr.sin6_addr)) { 198333841545SHajimu UMEMOTO if (trylimit-- == 0) { 1984d1da0a06SRobert Watson IN6_IFADDR_RUNLOCK(); 1985743eee66SSUZUKI Shinsuke /* 1986743eee66SSUZUKI Shinsuke * Give up. Something strange should have 1987743eee66SSUZUKI Shinsuke * happened. 1988743eee66SSUZUKI Shinsuke */ 1989743eee66SSUZUKI Shinsuke nd6log((LOG_NOTICE, "in6_tmpifadd: failed to " 1990743eee66SSUZUKI Shinsuke "find a unique random IFID\n")); 199133841545SHajimu UMEMOTO return (EEXIST); 199233841545SHajimu UMEMOTO } 1993d1da0a06SRobert Watson IN6_IFADDR_RUNLOCK(); 199433841545SHajimu UMEMOTO forcegen = 1; 199533841545SHajimu UMEMOTO goto again; 199682cd038dSYoshinobu Inoue } 1997743eee66SSUZUKI Shinsuke } 1998d1da0a06SRobert Watson IN6_IFADDR_RUNLOCK(); 199982cd038dSYoshinobu Inoue 200033841545SHajimu UMEMOTO /* 200133841545SHajimu UMEMOTO * The Valid Lifetime is the lower of the Valid Lifetime of the 200233841545SHajimu UMEMOTO * public address or TEMP_VALID_LIFETIME. 200333841545SHajimu UMEMOTO * The Preferred Lifetime is the lower of the Preferred Lifetime 200433841545SHajimu UMEMOTO * of the public address or TEMP_PREFERRED_LIFETIME - 200533841545SHajimu UMEMOTO * DESYNC_FACTOR. 200682cd038dSYoshinobu Inoue */ 2007743eee66SSUZUKI Shinsuke if (ia0->ia6_lifetime.ia6t_vltime != ND6_INFINITE_LIFETIME) { 200833841545SHajimu UMEMOTO vltime0 = IFA6_IS_INVALID(ia0) ? 0 : 2009743eee66SSUZUKI Shinsuke (ia0->ia6_lifetime.ia6t_vltime - 2010743eee66SSUZUKI Shinsuke (time_second - ia0->ia6_updatetime)); 2011603724d3SBjoern A. Zeeb if (vltime0 > V_ip6_temp_valid_lifetime) 2012603724d3SBjoern A. Zeeb vltime0 = V_ip6_temp_valid_lifetime; 201333841545SHajimu UMEMOTO } else 2014603724d3SBjoern A. Zeeb vltime0 = V_ip6_temp_valid_lifetime; 2015743eee66SSUZUKI Shinsuke if (ia0->ia6_lifetime.ia6t_pltime != ND6_INFINITE_LIFETIME) { 201633841545SHajimu UMEMOTO pltime0 = IFA6_IS_DEPRECATED(ia0) ? 0 : 2017743eee66SSUZUKI Shinsuke (ia0->ia6_lifetime.ia6t_pltime - 2018743eee66SSUZUKI Shinsuke (time_second - ia0->ia6_updatetime)); 2019603724d3SBjoern A. Zeeb if (pltime0 > V_ip6_temp_preferred_lifetime - V_ip6_desync_factor){ 2020603724d3SBjoern A. Zeeb pltime0 = V_ip6_temp_preferred_lifetime - 2021603724d3SBjoern A. Zeeb V_ip6_desync_factor; 202233841545SHajimu UMEMOTO } 202333841545SHajimu UMEMOTO } else 2024603724d3SBjoern A. Zeeb pltime0 = V_ip6_temp_preferred_lifetime - V_ip6_desync_factor; 202533841545SHajimu UMEMOTO ifra.ifra_lifetime.ia6t_vltime = vltime0; 202633841545SHajimu UMEMOTO ifra.ifra_lifetime.ia6t_pltime = pltime0; 202733841545SHajimu UMEMOTO 202833841545SHajimu UMEMOTO /* 202933841545SHajimu UMEMOTO * A temporary address is created only if this calculated Preferred 203033841545SHajimu UMEMOTO * Lifetime is greater than REGEN_ADVANCE time units. 203133841545SHajimu UMEMOTO */ 2032603724d3SBjoern A. Zeeb if (ifra.ifra_lifetime.ia6t_pltime <= V_ip6_temp_regen_advance) 203333841545SHajimu UMEMOTO return (0); 203433841545SHajimu UMEMOTO 203533841545SHajimu UMEMOTO /* XXX: scope zone ID? */ 203633841545SHajimu UMEMOTO 203733841545SHajimu UMEMOTO ifra.ifra_flags |= (IN6_IFF_AUTOCONF|IN6_IFF_TEMPORARY); 203833841545SHajimu UMEMOTO 203933841545SHajimu UMEMOTO /* allocate ifaddr structure, link into chain, etc. */ 2040743eee66SSUZUKI Shinsuke updateflags = 0; 2041743eee66SSUZUKI Shinsuke if (delay) 2042743eee66SSUZUKI Shinsuke updateflags |= IN6_IFAUPDATE_DADDELAY; 2043743eee66SSUZUKI Shinsuke if ((error = in6_update_ifa(ifp, &ifra, NULL, updateflags)) != 0) 204433841545SHajimu UMEMOTO return (error); 204533841545SHajimu UMEMOTO 204633841545SHajimu UMEMOTO newia = in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr); 204733841545SHajimu UMEMOTO if (newia == NULL) { /* XXX: can it happen? */ 204833841545SHajimu UMEMOTO nd6log((LOG_ERR, 204933841545SHajimu UMEMOTO "in6_tmpifadd: ifa update succeeded, but we got " 205033841545SHajimu UMEMOTO "no ifaddr\n")); 205133841545SHajimu UMEMOTO return (EINVAL); /* XXX */ 205233841545SHajimu UMEMOTO } 205333841545SHajimu UMEMOTO newia->ia6_ndpr = ia0->ia6_ndpr; 205433841545SHajimu UMEMOTO newia->ia6_ndpr->ndpr_refcnt++; 20558c0fec80SRobert Watson ifa_free(&newia->ia_ifa); 205633841545SHajimu UMEMOTO 2057c3aacd9eSHajimu UMEMOTO /* 2058c3aacd9eSHajimu UMEMOTO * A newly added address might affect the status of other addresses. 2059c3aacd9eSHajimu UMEMOTO * XXX: when the temporary address is generated with a new public 2060c3aacd9eSHajimu UMEMOTO * address, the onlink check is redundant. However, it would be safe 2061c3aacd9eSHajimu UMEMOTO * to do the check explicitly everywhere a new address is generated, 2062c3aacd9eSHajimu UMEMOTO * and, in fact, we surely need the check when we create a new 2063c3aacd9eSHajimu UMEMOTO * temporary address due to deprecation of an old temporary address. 2064c3aacd9eSHajimu UMEMOTO */ 2065c3aacd9eSHajimu UMEMOTO pfxlist_onlink_check(); 2066c3aacd9eSHajimu UMEMOTO 206733841545SHajimu UMEMOTO return (0); 206882cd038dSYoshinobu Inoue } 206982cd038dSYoshinobu Inoue 2070743eee66SSUZUKI Shinsuke static int 207182cd038dSYoshinobu Inoue in6_init_prefix_ltimes(struct nd_prefix *ndpr) 207282cd038dSYoshinobu Inoue { 207382cd038dSYoshinobu Inoue if (ndpr->ndpr_pltime == ND6_INFINITE_LIFETIME) 207482cd038dSYoshinobu Inoue ndpr->ndpr_preferred = 0; 207582cd038dSYoshinobu Inoue else 207682cd038dSYoshinobu Inoue ndpr->ndpr_preferred = time_second + ndpr->ndpr_pltime; 207782cd038dSYoshinobu Inoue if (ndpr->ndpr_vltime == ND6_INFINITE_LIFETIME) 207882cd038dSYoshinobu Inoue ndpr->ndpr_expire = 0; 207982cd038dSYoshinobu Inoue else 208082cd038dSYoshinobu Inoue ndpr->ndpr_expire = time_second + ndpr->ndpr_vltime; 208182cd038dSYoshinobu Inoue 208282cd038dSYoshinobu Inoue return 0; 208382cd038dSYoshinobu Inoue } 208482cd038dSYoshinobu Inoue 208582cd038dSYoshinobu Inoue static void 208633841545SHajimu UMEMOTO in6_init_address_ltimes(struct nd_prefix *new, struct in6_addrlifetime *lt6) 208782cd038dSYoshinobu Inoue { 208882cd038dSYoshinobu Inoue /* init ia6t_expire */ 208982cd038dSYoshinobu Inoue if (lt6->ia6t_vltime == ND6_INFINITE_LIFETIME) 209082cd038dSYoshinobu Inoue lt6->ia6t_expire = 0; 209182cd038dSYoshinobu Inoue else { 209282cd038dSYoshinobu Inoue lt6->ia6t_expire = time_second; 209382cd038dSYoshinobu Inoue lt6->ia6t_expire += lt6->ia6t_vltime; 209482cd038dSYoshinobu Inoue } 2095686cdd19SJun-ichiro itojun Hagino 209682cd038dSYoshinobu Inoue /* init ia6t_preferred */ 209782cd038dSYoshinobu Inoue if (lt6->ia6t_pltime == ND6_INFINITE_LIFETIME) 209882cd038dSYoshinobu Inoue lt6->ia6t_preferred = 0; 209982cd038dSYoshinobu Inoue else { 210082cd038dSYoshinobu Inoue lt6->ia6t_preferred = time_second; 210182cd038dSYoshinobu Inoue lt6->ia6t_preferred += lt6->ia6t_pltime; 210282cd038dSYoshinobu Inoue } 210382cd038dSYoshinobu Inoue } 210482cd038dSYoshinobu Inoue 210582cd038dSYoshinobu Inoue /* 210682cd038dSYoshinobu Inoue * Delete all the routing table entries that use the specified gateway. 210782cd038dSYoshinobu Inoue * XXX: this function causes search through all entries of routing table, so 210882cd038dSYoshinobu Inoue * it shouldn't be called when acting as a router. 210982cd038dSYoshinobu Inoue */ 211082cd038dSYoshinobu Inoue void 21111272577eSXin LI rt6_flush(struct in6_addr *gateway, struct ifnet *ifp) 211282cd038dSYoshinobu Inoue { 2113c2c2a7c1SBjoern A. Zeeb struct radix_node_head *rnh; 2114*81d5d46bSBjoern A. Zeeb u_int fibnum; 211582cd038dSYoshinobu Inoue int s = splnet(); 211682cd038dSYoshinobu Inoue 211782cd038dSYoshinobu Inoue /* We'll care only link-local addresses */ 211882cd038dSYoshinobu Inoue if (!IN6_IS_ADDR_LINKLOCAL(gateway)) { 211982cd038dSYoshinobu Inoue splx(s); 212082cd038dSYoshinobu Inoue return; 212182cd038dSYoshinobu Inoue } 212282cd038dSYoshinobu Inoue 2123*81d5d46bSBjoern A. Zeeb /* XXX Do we really need to walk any but the default FIB? */ 2124*81d5d46bSBjoern A. Zeeb for (fibnum = 0; fibnum < rt_numfibs; fibnum++) { 2125*81d5d46bSBjoern A. Zeeb rnh = rt_tables_get_rnh(fibnum, AF_INET6); 2126c2c2a7c1SBjoern A. Zeeb if (rnh == NULL) 2127*81d5d46bSBjoern A. Zeeb continue; 2128c2c2a7c1SBjoern A. Zeeb 2129956b0b65SJeffrey Hsu RADIX_NODE_HEAD_LOCK(rnh); 213082cd038dSYoshinobu Inoue rnh->rnh_walktree(rnh, rt6_deleteroute, (void *)gateway); 2131956b0b65SJeffrey Hsu RADIX_NODE_HEAD_UNLOCK(rnh); 2132*81d5d46bSBjoern A. Zeeb } 213382cd038dSYoshinobu Inoue splx(s); 213482cd038dSYoshinobu Inoue } 213582cd038dSYoshinobu Inoue 213682cd038dSYoshinobu Inoue static int 21371272577eSXin LI rt6_deleteroute(struct radix_node *rn, void *arg) 213882cd038dSYoshinobu Inoue { 213982cd038dSYoshinobu Inoue #define SIN6(s) ((struct sockaddr_in6 *)s) 214082cd038dSYoshinobu Inoue struct rtentry *rt = (struct rtentry *)rn; 214182cd038dSYoshinobu Inoue struct in6_addr *gate = (struct in6_addr *)arg; 214282cd038dSYoshinobu Inoue 214382cd038dSYoshinobu Inoue if (rt->rt_gateway == NULL || rt->rt_gateway->sa_family != AF_INET6) 214482cd038dSYoshinobu Inoue return (0); 214582cd038dSYoshinobu Inoue 214607eb2995SHajimu UMEMOTO if (!IN6_ARE_ADDR_EQUAL(gate, &SIN6(rt->rt_gateway)->sin6_addr)) { 214782cd038dSYoshinobu Inoue return (0); 214807eb2995SHajimu UMEMOTO } 214982cd038dSYoshinobu Inoue 215082cd038dSYoshinobu Inoue /* 215133841545SHajimu UMEMOTO * Do not delete a static route. 215233841545SHajimu UMEMOTO * XXX: this seems to be a bit ad-hoc. Should we consider the 215333841545SHajimu UMEMOTO * 'cloned' bit instead? 215433841545SHajimu UMEMOTO */ 215533841545SHajimu UMEMOTO if ((rt->rt_flags & RTF_STATIC) != 0) 215633841545SHajimu UMEMOTO return (0); 215733841545SHajimu UMEMOTO 215833841545SHajimu UMEMOTO /* 215982cd038dSYoshinobu Inoue * We delete only host route. This means, in particular, we don't 216082cd038dSYoshinobu Inoue * delete default route. 216182cd038dSYoshinobu Inoue */ 216282cd038dSYoshinobu Inoue if ((rt->rt_flags & RTF_HOST) == 0) 216382cd038dSYoshinobu Inoue return (0); 216482cd038dSYoshinobu Inoue 2165*81d5d46bSBjoern A. Zeeb return (in6_rtrequest(RTM_DELETE, rt_key(rt), rt->rt_gateway, 2166*81d5d46bSBjoern A. Zeeb rt_mask(rt), rt->rt_flags, NULL, rt->rt_fibnum)); 216782cd038dSYoshinobu Inoue #undef SIN6 216882cd038dSYoshinobu Inoue } 2169686cdd19SJun-ichiro itojun Hagino 2170686cdd19SJun-ichiro itojun Hagino int 21711272577eSXin LI nd6_setdefaultiface(int ifindex) 2172686cdd19SJun-ichiro itojun Hagino { 2173686cdd19SJun-ichiro itojun Hagino int error = 0; 2174686cdd19SJun-ichiro itojun Hagino 2175603724d3SBjoern A. Zeeb if (ifindex < 0 || V_if_index < ifindex) 2176686cdd19SJun-ichiro itojun Hagino return (EINVAL); 2177743eee66SSUZUKI Shinsuke if (ifindex != 0 && !ifnet_byindex(ifindex)) 2178743eee66SSUZUKI Shinsuke return (EINVAL); 2179686cdd19SJun-ichiro itojun Hagino 2180603724d3SBjoern A. Zeeb if (V_nd6_defifindex != ifindex) { 2181603724d3SBjoern A. Zeeb V_nd6_defifindex = ifindex; 2182603724d3SBjoern A. Zeeb if (V_nd6_defifindex > 0) 2183603724d3SBjoern A. Zeeb V_nd6_defifp = ifnet_byindex(V_nd6_defifindex); 2184686cdd19SJun-ichiro itojun Hagino else 2185603724d3SBjoern A. Zeeb V_nd6_defifp = NULL; 2186686cdd19SJun-ichiro itojun Hagino 2187686cdd19SJun-ichiro itojun Hagino /* 2188686cdd19SJun-ichiro itojun Hagino * Our current implementation assumes one-to-one maping between 2189686cdd19SJun-ichiro itojun Hagino * interfaces and links, so it would be natural to use the 2190686cdd19SJun-ichiro itojun Hagino * default interface as the default link. 2191686cdd19SJun-ichiro itojun Hagino */ 2192603724d3SBjoern A. Zeeb scope6_setdefault(V_nd6_defifp); 2193686cdd19SJun-ichiro itojun Hagino } 2194686cdd19SJun-ichiro itojun Hagino 2195686cdd19SJun-ichiro itojun Hagino return (error); 2196686cdd19SJun-ichiro itojun Hagino } 2197