xref: /linux/include/net/ip6_fib.h (revision 0d3b051adbb72ed81956447d0d1e54d5943ee6f5)
1 /* SPDX-License-Identifier: GPL-2.0-or-later */
2 /*
3  *	Linux INET6 implementation
4  *
5  *	Authors:
6  *	Pedro Roque		<roque@di.fc.ul.pt>
7  */
8 
9 #ifndef _IP6_FIB_H
10 #define _IP6_FIB_H
11 
12 #include <linux/ipv6_route.h>
13 #include <linux/rtnetlink.h>
14 #include <linux/spinlock.h>
15 #include <linux/notifier.h>
16 #include <net/dst.h>
17 #include <net/flow.h>
18 #include <net/ip_fib.h>
19 #include <net/netlink.h>
20 #include <net/inetpeer.h>
21 #include <net/fib_notifier.h>
22 #include <linux/indirect_call_wrapper.h>
23 
24 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
25 #define FIB6_TABLE_HASHSZ 256
26 #else
27 #define FIB6_TABLE_HASHSZ 1
28 #endif
29 
30 #define RT6_DEBUG 2
31 
32 #if RT6_DEBUG >= 3
33 #define RT6_TRACE(x...) pr_debug(x)
34 #else
35 #define RT6_TRACE(x...) do { ; } while (0)
36 #endif
37 
38 struct rt6_info;
39 struct fib6_info;
40 
41 struct fib6_config {
42 	u32		fc_table;
43 	u32		fc_metric;
44 	int		fc_dst_len;
45 	int		fc_src_len;
46 	int		fc_ifindex;
47 	u32		fc_flags;
48 	u32		fc_protocol;
49 	u16		fc_type;        /* only 8 bits are used */
50 	u16		fc_delete_all_nh : 1,
51 			fc_ignore_dev_down:1,
52 			__unused : 14;
53 	u32		fc_nh_id;
54 
55 	struct in6_addr	fc_dst;
56 	struct in6_addr	fc_src;
57 	struct in6_addr	fc_prefsrc;
58 	struct in6_addr	fc_gateway;
59 
60 	unsigned long	fc_expires;
61 	struct nlattr	*fc_mx;
62 	int		fc_mx_len;
63 	int		fc_mp_len;
64 	struct nlattr	*fc_mp;
65 
66 	struct nl_info	fc_nlinfo;
67 	struct nlattr	*fc_encap;
68 	u16		fc_encap_type;
69 	bool		fc_is_fdb;
70 };
71 
72 struct fib6_node {
73 	struct fib6_node __rcu	*parent;
74 	struct fib6_node __rcu	*left;
75 	struct fib6_node __rcu	*right;
76 #ifdef CONFIG_IPV6_SUBTREES
77 	struct fib6_node __rcu	*subtree;
78 #endif
79 	struct fib6_info __rcu	*leaf;
80 
81 	__u16			fn_bit;		/* bit key */
82 	__u16			fn_flags;
83 	int			fn_sernum;
84 	struct fib6_info __rcu	*rr_ptr;
85 	struct rcu_head		rcu;
86 };
87 
88 struct fib6_gc_args {
89 	int			timeout;
90 	int			more;
91 };
92 
93 #ifndef CONFIG_IPV6_SUBTREES
94 #define FIB6_SUBTREE(fn)	NULL
95 
96 static inline bool fib6_routes_require_src(const struct net *net)
97 {
98 	return false;
99 }
100 
101 static inline void fib6_routes_require_src_inc(struct net *net) {}
102 static inline void fib6_routes_require_src_dec(struct net *net) {}
103 
104 #else
105 
106 static inline bool fib6_routes_require_src(const struct net *net)
107 {
108 	return net->ipv6.fib6_routes_require_src > 0;
109 }
110 
111 static inline void fib6_routes_require_src_inc(struct net *net)
112 {
113 	net->ipv6.fib6_routes_require_src++;
114 }
115 
116 static inline void fib6_routes_require_src_dec(struct net *net)
117 {
118 	net->ipv6.fib6_routes_require_src--;
119 }
120 
121 #define FIB6_SUBTREE(fn)	(rcu_dereference_protected((fn)->subtree, 1))
122 #endif
123 
124 /*
125  *	routing information
126  *
127  */
128 
129 struct rt6key {
130 	struct in6_addr	addr;
131 	int		plen;
132 };
133 
134 struct fib6_table;
135 
136 struct rt6_exception_bucket {
137 	struct hlist_head	chain;
138 	int			depth;
139 };
140 
141 struct rt6_exception {
142 	struct hlist_node	hlist;
143 	struct rt6_info		*rt6i;
144 	unsigned long		stamp;
145 	struct rcu_head		rcu;
146 };
147 
148 #define FIB6_EXCEPTION_BUCKET_SIZE_SHIFT 10
149 #define FIB6_EXCEPTION_BUCKET_SIZE (1 << FIB6_EXCEPTION_BUCKET_SIZE_SHIFT)
150 #define FIB6_MAX_DEPTH 5
151 
152 struct fib6_nh {
153 	struct fib_nh_common	nh_common;
154 
155 #ifdef CONFIG_IPV6_ROUTER_PREF
156 	unsigned long		last_probe;
157 #endif
158 
159 	struct rt6_info * __percpu *rt6i_pcpu;
160 	struct rt6_exception_bucket __rcu *rt6i_exception_bucket;
161 };
162 
163 struct fib6_info {
164 	struct fib6_table		*fib6_table;
165 	struct fib6_info __rcu		*fib6_next;
166 	struct fib6_node __rcu		*fib6_node;
167 
168 	/* Multipath routes:
169 	 * siblings is a list of fib6_info that have the same metric/weight,
170 	 * destination, but not the same gateway. nsiblings is just a cache
171 	 * to speed up lookup.
172 	 */
173 	union {
174 		struct list_head	fib6_siblings;
175 		struct list_head	nh_list;
176 	};
177 	unsigned int			fib6_nsiblings;
178 
179 	refcount_t			fib6_ref;
180 	unsigned long			expires;
181 	struct dst_metrics		*fib6_metrics;
182 #define fib6_pmtu		fib6_metrics->metrics[RTAX_MTU-1]
183 
184 	struct rt6key			fib6_dst;
185 	u32				fib6_flags;
186 	struct rt6key			fib6_src;
187 	struct rt6key			fib6_prefsrc;
188 
189 	u32				fib6_metric;
190 	u8				fib6_protocol;
191 	u8				fib6_type;
192 	u8				should_flush:1,
193 					dst_nocount:1,
194 					dst_nopolicy:1,
195 					fib6_destroying:1,
196 					offload:1,
197 					trap:1,
198 					unused:2;
199 
200 	struct rcu_head			rcu;
201 	struct nexthop			*nh;
202 	struct fib6_nh			fib6_nh[];
203 };
204 
205 struct rt6_info {
206 	struct dst_entry		dst;
207 	struct fib6_info __rcu		*from;
208 	int				sernum;
209 
210 	struct rt6key			rt6i_dst;
211 	struct rt6key			rt6i_src;
212 	struct in6_addr			rt6i_gateway;
213 	struct inet6_dev		*rt6i_idev;
214 	u32				rt6i_flags;
215 
216 	struct list_head		rt6i_uncached;
217 	struct uncached_list		*rt6i_uncached_list;
218 
219 	/* more non-fragment space at head required */
220 	unsigned short			rt6i_nfheader_len;
221 };
222 
223 struct fib6_result {
224 	struct fib6_nh		*nh;
225 	struct fib6_info	*f6i;
226 	u32			fib6_flags;
227 	u8			fib6_type;
228 	struct rt6_info		*rt6;
229 };
230 
231 #define for_each_fib6_node_rt_rcu(fn)					\
232 	for (rt = rcu_dereference((fn)->leaf); rt;			\
233 	     rt = rcu_dereference(rt->fib6_next))
234 
235 #define for_each_fib6_walker_rt(w)					\
236 	for (rt = (w)->leaf; rt;					\
237 	     rt = rcu_dereference_protected(rt->fib6_next, 1))
238 
239 static inline struct inet6_dev *ip6_dst_idev(struct dst_entry *dst)
240 {
241 	return ((struct rt6_info *)dst)->rt6i_idev;
242 }
243 
244 static inline bool fib6_requires_src(const struct fib6_info *rt)
245 {
246 	return rt->fib6_src.plen > 0;
247 }
248 
249 static inline void fib6_clean_expires(struct fib6_info *f6i)
250 {
251 	f6i->fib6_flags &= ~RTF_EXPIRES;
252 	f6i->expires = 0;
253 }
254 
255 static inline void fib6_set_expires(struct fib6_info *f6i,
256 				    unsigned long expires)
257 {
258 	f6i->expires = expires;
259 	f6i->fib6_flags |= RTF_EXPIRES;
260 }
261 
262 static inline bool fib6_check_expired(const struct fib6_info *f6i)
263 {
264 	if (f6i->fib6_flags & RTF_EXPIRES)
265 		return time_after(jiffies, f6i->expires);
266 	return false;
267 }
268 
269 /* Function to safely get fn->sernum for passed in rt
270  * and store result in passed in cookie.
271  * Return true if we can get cookie safely
272  * Return false if not
273  */
274 static inline bool fib6_get_cookie_safe(const struct fib6_info *f6i,
275 					u32 *cookie)
276 {
277 	struct fib6_node *fn;
278 	bool status = false;
279 
280 	fn = rcu_dereference(f6i->fib6_node);
281 
282 	if (fn) {
283 		*cookie = fn->fn_sernum;
284 		/* pairs with smp_wmb() in fib6_update_sernum_upto_root() */
285 		smp_rmb();
286 		status = true;
287 	}
288 
289 	return status;
290 }
291 
292 static inline u32 rt6_get_cookie(const struct rt6_info *rt)
293 {
294 	struct fib6_info *from;
295 	u32 cookie = 0;
296 
297 	if (rt->sernum)
298 		return rt->sernum;
299 
300 	rcu_read_lock();
301 
302 	from = rcu_dereference(rt->from);
303 	if (from)
304 		fib6_get_cookie_safe(from, &cookie);
305 
306 	rcu_read_unlock();
307 
308 	return cookie;
309 }
310 
311 static inline void ip6_rt_put(struct rt6_info *rt)
312 {
313 	/* dst_release() accepts a NULL parameter.
314 	 * We rely on dst being first structure in struct rt6_info
315 	 */
316 	BUILD_BUG_ON(offsetof(struct rt6_info, dst) != 0);
317 	dst_release(&rt->dst);
318 }
319 
320 struct fib6_info *fib6_info_alloc(gfp_t gfp_flags, bool with_fib6_nh);
321 void fib6_info_destroy_rcu(struct rcu_head *head);
322 
323 static inline void fib6_info_hold(struct fib6_info *f6i)
324 {
325 	refcount_inc(&f6i->fib6_ref);
326 }
327 
328 static inline bool fib6_info_hold_safe(struct fib6_info *f6i)
329 {
330 	return refcount_inc_not_zero(&f6i->fib6_ref);
331 }
332 
333 static inline void fib6_info_release(struct fib6_info *f6i)
334 {
335 	if (f6i && refcount_dec_and_test(&f6i->fib6_ref))
336 		call_rcu(&f6i->rcu, fib6_info_destroy_rcu);
337 }
338 
339 static inline void fib6_info_hw_flags_set(struct fib6_info *f6i, bool offload,
340 					  bool trap)
341 {
342 	f6i->offload = offload;
343 	f6i->trap = trap;
344 }
345 
346 enum fib6_walk_state {
347 #ifdef CONFIG_IPV6_SUBTREES
348 	FWS_S,
349 #endif
350 	FWS_L,
351 	FWS_R,
352 	FWS_C,
353 	FWS_U
354 };
355 
356 struct fib6_walker {
357 	struct list_head lh;
358 	struct fib6_node *root, *node;
359 	struct fib6_info *leaf;
360 	enum fib6_walk_state state;
361 	unsigned int skip;
362 	unsigned int count;
363 	unsigned int skip_in_node;
364 	int (*func)(struct fib6_walker *);
365 	void *args;
366 };
367 
368 struct rt6_statistics {
369 	__u32		fib_nodes;		/* all fib6 nodes */
370 	__u32		fib_route_nodes;	/* intermediate nodes */
371 	__u32		fib_rt_entries;		/* rt entries in fib table */
372 	__u32		fib_rt_cache;		/* cached rt entries in exception table */
373 	__u32		fib_discarded_routes;	/* total number of routes delete */
374 
375 	/* The following stats are not protected by any lock */
376 	atomic_t	fib_rt_alloc;		/* total number of routes alloced */
377 	atomic_t	fib_rt_uncache;		/* rt entries in uncached list */
378 };
379 
380 #define RTN_TL_ROOT	0x0001
381 #define RTN_ROOT	0x0002		/* tree root node		*/
382 #define RTN_RTINFO	0x0004		/* node with valid routing info	*/
383 
384 /*
385  *	priority levels (or metrics)
386  *
387  */
388 
389 
390 struct fib6_table {
391 	struct hlist_node	tb6_hlist;
392 	u32			tb6_id;
393 	spinlock_t		tb6_lock;
394 	struct fib6_node	tb6_root;
395 	struct inet_peer_base	tb6_peers;
396 	unsigned int		flags;
397 	unsigned int		fib_seq;
398 #define RT6_TABLE_HAS_DFLT_ROUTER	BIT(0)
399 };
400 
401 #define RT6_TABLE_UNSPEC	RT_TABLE_UNSPEC
402 #define RT6_TABLE_MAIN		RT_TABLE_MAIN
403 #define RT6_TABLE_DFLT		RT6_TABLE_MAIN
404 #define RT6_TABLE_INFO		RT6_TABLE_MAIN
405 #define RT6_TABLE_PREFIX	RT6_TABLE_MAIN
406 
407 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
408 #define FIB6_TABLE_MIN		1
409 #define FIB6_TABLE_MAX		RT_TABLE_MAX
410 #define RT6_TABLE_LOCAL		RT_TABLE_LOCAL
411 #else
412 #define FIB6_TABLE_MIN		RT_TABLE_MAIN
413 #define FIB6_TABLE_MAX		FIB6_TABLE_MIN
414 #define RT6_TABLE_LOCAL		RT6_TABLE_MAIN
415 #endif
416 
417 typedef struct rt6_info *(*pol_lookup_t)(struct net *,
418 					 struct fib6_table *,
419 					 struct flowi6 *,
420 					 const struct sk_buff *, int);
421 
422 struct fib6_entry_notifier_info {
423 	struct fib_notifier_info info; /* must be first */
424 	struct fib6_info *rt;
425 	unsigned int nsiblings;
426 };
427 
428 /*
429  *	exported functions
430  */
431 
432 struct fib6_table *fib6_get_table(struct net *net, u32 id);
433 struct fib6_table *fib6_new_table(struct net *net, u32 id);
434 struct dst_entry *fib6_rule_lookup(struct net *net, struct flowi6 *fl6,
435 				   const struct sk_buff *skb,
436 				   int flags, pol_lookup_t lookup);
437 
438 /* called with rcu lock held; can return error pointer
439  * caller needs to select path
440  */
441 int fib6_lookup(struct net *net, int oif, struct flowi6 *fl6,
442 		struct fib6_result *res, int flags);
443 
444 /* called with rcu lock held; caller needs to select path */
445 int fib6_table_lookup(struct net *net, struct fib6_table *table,
446 		      int oif, struct flowi6 *fl6, struct fib6_result *res,
447 		      int strict);
448 
449 void fib6_select_path(const struct net *net, struct fib6_result *res,
450 		      struct flowi6 *fl6, int oif, bool have_oif_match,
451 		      const struct sk_buff *skb, int strict);
452 struct fib6_node *fib6_node_lookup(struct fib6_node *root,
453 				   const struct in6_addr *daddr,
454 				   const struct in6_addr *saddr);
455 
456 struct fib6_node *fib6_locate(struct fib6_node *root,
457 			      const struct in6_addr *daddr, int dst_len,
458 			      const struct in6_addr *saddr, int src_len,
459 			      bool exact_match);
460 
461 void fib6_clean_all(struct net *net, int (*func)(struct fib6_info *, void *arg),
462 		    void *arg);
463 void fib6_clean_all_skip_notify(struct net *net,
464 				int (*func)(struct fib6_info *, void *arg),
465 				void *arg);
466 
467 int fib6_add(struct fib6_node *root, struct fib6_info *rt,
468 	     struct nl_info *info, struct netlink_ext_ack *extack);
469 int fib6_del(struct fib6_info *rt, struct nl_info *info);
470 
471 static inline
472 void rt6_get_prefsrc(const struct rt6_info *rt, struct in6_addr *addr)
473 {
474 	const struct fib6_info *from;
475 
476 	rcu_read_lock();
477 
478 	from = rcu_dereference(rt->from);
479 	if (from) {
480 		*addr = from->fib6_prefsrc.addr;
481 	} else {
482 		struct in6_addr in6_zero = {};
483 
484 		*addr = in6_zero;
485 	}
486 
487 	rcu_read_unlock();
488 }
489 
490 int fib6_nh_init(struct net *net, struct fib6_nh *fib6_nh,
491 		 struct fib6_config *cfg, gfp_t gfp_flags,
492 		 struct netlink_ext_ack *extack);
493 void fib6_nh_release(struct fib6_nh *fib6_nh);
494 
495 int call_fib6_entry_notifiers(struct net *net,
496 			      enum fib_event_type event_type,
497 			      struct fib6_info *rt,
498 			      struct netlink_ext_ack *extack);
499 int call_fib6_multipath_entry_notifiers(struct net *net,
500 					enum fib_event_type event_type,
501 					struct fib6_info *rt,
502 					unsigned int nsiblings,
503 					struct netlink_ext_ack *extack);
504 int call_fib6_entry_notifiers_replace(struct net *net, struct fib6_info *rt);
505 void fib6_rt_update(struct net *net, struct fib6_info *rt,
506 		    struct nl_info *info);
507 void inet6_rt_notify(int event, struct fib6_info *rt, struct nl_info *info,
508 		     unsigned int flags);
509 
510 void fib6_run_gc(unsigned long expires, struct net *net, bool force);
511 
512 void fib6_gc_cleanup(void);
513 
514 int fib6_init(void);
515 
516 struct ipv6_route_iter {
517 	struct seq_net_private p;
518 	struct fib6_walker w;
519 	loff_t skip;
520 	struct fib6_table *tbl;
521 	int sernum;
522 };
523 
524 extern const struct seq_operations ipv6_route_seq_ops;
525 
526 int call_fib6_notifier(struct notifier_block *nb,
527 		       enum fib_event_type event_type,
528 		       struct fib_notifier_info *info);
529 int call_fib6_notifiers(struct net *net, enum fib_event_type event_type,
530 			struct fib_notifier_info *info);
531 
532 int __net_init fib6_notifier_init(struct net *net);
533 void __net_exit fib6_notifier_exit(struct net *net);
534 
535 unsigned int fib6_tables_seq_read(struct net *net);
536 int fib6_tables_dump(struct net *net, struct notifier_block *nb,
537 		     struct netlink_ext_ack *extack);
538 
539 void fib6_update_sernum(struct net *net, struct fib6_info *rt);
540 void fib6_update_sernum_upto_root(struct net *net, struct fib6_info *rt);
541 void fib6_update_sernum_stub(struct net *net, struct fib6_info *f6i);
542 
543 void fib6_metric_set(struct fib6_info *f6i, int metric, u32 val);
544 static inline bool fib6_metric_locked(struct fib6_info *f6i, int metric)
545 {
546 	return !!(f6i->fib6_metrics->metrics[RTAX_LOCK - 1] & (1 << metric));
547 }
548 
549 #if IS_BUILTIN(CONFIG_IPV6) && defined(CONFIG_BPF_SYSCALL)
550 struct bpf_iter__ipv6_route {
551 	__bpf_md_ptr(struct bpf_iter_meta *, meta);
552 	__bpf_md_ptr(struct fib6_info *, rt);
553 };
554 #endif
555 
556 INDIRECT_CALLABLE_DECLARE(struct rt6_info *ip6_pol_route_output(struct net *net,
557 					     struct fib6_table *table,
558 					     struct flowi6 *fl6,
559 					     const struct sk_buff *skb,
560 					     int flags));
561 INDIRECT_CALLABLE_DECLARE(struct rt6_info *ip6_pol_route_input(struct net *net,
562 					     struct fib6_table *table,
563 					     struct flowi6 *fl6,
564 					     const struct sk_buff *skb,
565 					     int flags));
566 INDIRECT_CALLABLE_DECLARE(struct rt6_info *__ip6_route_redirect(struct net *net,
567 					     struct fib6_table *table,
568 					     struct flowi6 *fl6,
569 					     const struct sk_buff *skb,
570 					     int flags));
571 INDIRECT_CALLABLE_DECLARE(struct rt6_info *ip6_pol_route_lookup(struct net *net,
572 					     struct fib6_table *table,
573 					     struct flowi6 *fl6,
574 					     const struct sk_buff *skb,
575 					     int flags));
576 static inline struct rt6_info *pol_lookup_func(pol_lookup_t lookup,
577 						struct net *net,
578 						struct fib6_table *table,
579 						struct flowi6 *fl6,
580 						const struct sk_buff *skb,
581 						int flags)
582 {
583 	return INDIRECT_CALL_4(lookup,
584 			       ip6_pol_route_output,
585 			       ip6_pol_route_input,
586 			       ip6_pol_route_lookup,
587 			       __ip6_route_redirect,
588 			       net, table, fl6, skb, flags);
589 }
590 
591 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
592 static inline bool fib6_has_custom_rules(const struct net *net)
593 {
594 	return net->ipv6.fib6_has_custom_rules;
595 }
596 
597 int fib6_rules_init(void);
598 void fib6_rules_cleanup(void);
599 bool fib6_rule_default(const struct fib_rule *rule);
600 int fib6_rules_dump(struct net *net, struct notifier_block *nb,
601 		    struct netlink_ext_ack *extack);
602 unsigned int fib6_rules_seq_read(struct net *net);
603 
604 static inline bool fib6_rules_early_flow_dissect(struct net *net,
605 						 struct sk_buff *skb,
606 						 struct flowi6 *fl6,
607 						 struct flow_keys *flkeys)
608 {
609 	unsigned int flag = FLOW_DISSECTOR_F_STOP_AT_ENCAP;
610 
611 	if (!net->ipv6.fib6_rules_require_fldissect)
612 		return false;
613 
614 	skb_flow_dissect_flow_keys(skb, flkeys, flag);
615 	fl6->fl6_sport = flkeys->ports.src;
616 	fl6->fl6_dport = flkeys->ports.dst;
617 	fl6->flowi6_proto = flkeys->basic.ip_proto;
618 
619 	return true;
620 }
621 #else
622 static inline bool fib6_has_custom_rules(const struct net *net)
623 {
624 	return false;
625 }
626 static inline int               fib6_rules_init(void)
627 {
628 	return 0;
629 }
630 static inline void              fib6_rules_cleanup(void)
631 {
632 	return ;
633 }
634 static inline bool fib6_rule_default(const struct fib_rule *rule)
635 {
636 	return true;
637 }
638 static inline int fib6_rules_dump(struct net *net, struct notifier_block *nb,
639 				  struct netlink_ext_ack *extack)
640 {
641 	return 0;
642 }
643 static inline unsigned int fib6_rules_seq_read(struct net *net)
644 {
645 	return 0;
646 }
647 static inline bool fib6_rules_early_flow_dissect(struct net *net,
648 						 struct sk_buff *skb,
649 						 struct flowi6 *fl6,
650 						 struct flow_keys *flkeys)
651 {
652 	return false;
653 }
654 #endif
655 #endif
656