xref: /titanic_44/usr/src/cmd/svc/milestone/net-routing-setup (revision ef2c19a1d5242688ccc42f46886fcc495f8e1141)
1a192e900Samaguire#!/sbin/sh
2a192e900Samaguire#
3a192e900Samaguire# CDDL HEADER START
4a192e900Samaguire#
5a192e900Samaguire# The contents of this file are subject to the terms of the
6a192e900Samaguire# Common Development and Distribution License (the "License").
7a192e900Samaguire# You may not use this file except in compliance with the License.
8a192e900Samaguire#
9a192e900Samaguire# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10a192e900Samaguire# or http://www.opensolaris.org/os/licensing.
11a192e900Samaguire# See the License for the specific language governing permissions
12a192e900Samaguire# and limitations under the License.
13a192e900Samaguire#
14a192e900Samaguire# When distributing Covered Code, include this CDDL HEADER in each
15a192e900Samaguire# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16a192e900Samaguire# If applicable, add the following below this CDDL HEADER, with the
17a192e900Samaguire# fields enclosed by brackets "[]" replaced with your own identifying
18a192e900Samaguire# information: Portions Copyright [yyyy] [name of copyright owner]
19a192e900Samaguire#
20a192e900Samaguire# CDDL HEADER END
21a192e900Samaguire#
22a192e900Samaguire#
23a192e900Samaguire# Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
24a192e900Samaguire# Use is subject to license terms.
25a192e900Samaguire#
26a192e900Samaguire# ident	"%Z%%M%	%I%	%E% SMI"
27a192e900Samaguire
28a192e900Samaguire# This script configures IP routing.
29a192e900Samaguire
30a192e900Samaguire. /lib/svc/share/smf_include.sh
31a192e900Samaguire
32a192e900Samaguire#
33a192e900Samaguire# In a zone we need this service to be up, but all of the work
34a192e900Samaguire# it tries to do is irrelevant (and will actually lead to the service
35a192e900Samaguire# failing if we try to do it), so just bail out.
36a192e900Samaguire#
37a192e900Samaguiresmf_is_globalzone || exit $SMF_EXIT_OK
38a192e900Samaguire
39a192e900Samaguire#
40a192e900Samaguire# If routing.conf file is in place, and has not already been read in
41ceb97a6aSamaguire# by previous invokation of routeadm, legacy configuration is upgraded
42ceb97a6aSamaguire# by this call to "routeadm -u".  This call is also needed when
43a192e900Samaguire# a /var/svc/profile/upgrade file is found, as it may contain routeadm commands
44ceb97a6aSamaguire# which need to be applied.  Finally, routeadm starts in.ndpd by
45ceb97a6aSamaguire# enabling the ndp service (in.ndpd), which is required for IPv6 address
46ceb97a6aSamaguire# autoconfiguration. It would be nice if we could do this in
47a192e900Samaguire# network/loopback, but since the SMF backend is read-only at that
48a192e900Samaguire# point in boot, we cannot.
49a192e900Samaguire#
50a192e900Samaguire/sbin/routeadm -u
51a192e900Samaguire
52a192e900Samaguire#
53a192e900Samaguire# Are we routing dynamically? routeadm(1M) reports this in the
54a192e900Samaguire# "current" values of ipv4/6-routing - if either are true, we are running
55a192e900Samaguire# routing daemons (or at least they are enabled to run).
56a192e900Samaguire#
57a192e900Samaguiredynamic_routing_test=`/sbin/routeadm -p | \
58a192e900Samaguirenawk '/^ipv[46]-routing [.]*/ { print $2 }'  | /usr/bin/grep "current=enabled"`
59a192e900Samaguireif [ -n "$dynamic_routing_test" ]; then
60a192e900Samaguire	dynamic_routing="true"
61a192e900Samaguirefi
62a192e900Samaguire
63a192e900Samaguire/usr/sbin/ifconfig -a6u >/etc/svc/volatile/ifconfig.$$
64a192e900Samaguirenumv6ifs=`/usr/bin/grep -c inet6 /etc/svc/volatile/ifconfig.$$`
65ceb97a6aSamaguire
66a192e900Samaguireif  [ $numv6ifs -gt 1 ]; then
67a192e900Samaguire	#
68a192e900Samaguire	# Add a static route for multicast packets out of a link-local
69a192e900Samaguire	# interface, although would like to specify multicast interface using
70a192e900Samaguire	# an interface name!
71a192e900Samaguire	#
72a192e900Samaguire	set -- `/usr/bin/awk '
73a192e900Samaguire		/inet6 fe80:/ {
74a192e900Samaguire			print substr($2, 1, index($2, "/") - 1)
75a192e900Samaguire		}' /etc/svc/volatile/ifconfig.$$`
76a192e900Samaguire
77a192e900Samaguire	if [ -n "$1" ]; then
78a192e900Samaguire		echo "Setting default IPv6 interface for multicast:" \
79a192e900Samaguire			"add net ff00::/8: gateway $1"
80a192e900Samaguire		/usr/sbin/route -n add -interface -inet6 "ff00::/8" "$1" \
81a192e900Samaguire			>/dev/null
82a192e900Samaguire	fi
83a192e900Samaguirefi
84a192e900Samaguire/usr/bin/rm -f /etc/svc/volatile/ifconfig.$$
85a192e900Samaguire
86a192e900Samaguire#
87a192e900Samaguire# Configure default IPv4 routers using the local "/etc/defaultrouter"
88a192e900Samaguire# configuration file.  The file can contain the hostnames or IP
89a192e900Samaguire# addresses of one or more default routers.  If hostnames are used,
90a192e900Samaguire# each hostname must also be listed in the local "/etc/hosts" file
91a192e900Samaguire# because NIS and NIS+ are not running at the time that this script is
92a192e900Samaguire# run.  Each router name or address is listed on a single line by
93a192e900Samaguire# itself in the file.  Anything else on that line after the router's
94a192e900Samaguire# name or address is ignored.  Lines that begin with "#" are
95a192e900Samaguire# considered comments and ignored.
96a192e900Samaguire#
97a192e900Samaguire# The default routes listed in the "/etc/defaultrouter" file will
98a192e900Samaguire# replace those added by the kernel during diskless booting.  An
99a192e900Samaguire# empty "/etc/defaultrouter" file will cause the default route
100a192e900Samaguire# added by the kernel to be deleted.
101a192e900Samaguire#
102a192e900Samaguire# Note that the default router file is ignored if we received routes
103a192e900Samaguire# from a DHCP server.  Our policy is to always trust DHCP over local
104a192e900Samaguire# administration.
105a192e900Samaguire#
106a192e900Samaguiresmf_netstrategy
107a192e900Samaguire
108a192e900Samaguireif [ "$_INIT_NET_STRATEGY" = "dhcp" ] && \
109a192e900Samaguire    [ -n "`/sbin/dhcpinfo Router`" ]; then
110a192e900Samaguire	defrouters=`/sbin/dhcpinfo Router`
111a192e900Samaguireelif [ -f /etc/defaultrouter ]; then
112a192e900Samaguire	defrouters=`/usr/bin/grep -v \^\# /etc/defaultrouter | \
113a192e900Samaguire	    /usr/bin/awk '{print $1}'`
114a192e900Samaguire	if [ -n "$defrouters" ]; then
115a192e900Samaguire		#
116a192e900Samaguire		# We want the default router(s) listed in
117a192e900Samaguire		# /etc/defaultrouter to replace the one added from the
118a192e900Samaguire		# BOOTPARAMS WHOAMI response but we must avoid flushing
119a192e900Samaguire		# the last route between the running system and its
120a192e900Samaguire		# /usr file system.
121a192e900Samaguire		#
122a192e900Samaguire
123a192e900Samaguire		# First, remember the original route.
124a192e900Samaguire		shift $#
125a192e900Samaguire		set -- `/usr/bin/netstat -rn -f inet | \
126a192e900Samaguire		    /usr/bin/grep '^default'`
127a192e900Samaguire		route_IP="$2"
128a192e900Samaguire
129a192e900Samaguire		#
130a192e900Samaguire		# Next, add those from /etc/defaultrouter.  While doing
131a192e900Samaguire		# this, if one of the routes we add is for the route
132a192e900Samaguire		# previously added as a result of the BOOTPARAMS
133a192e900Samaguire		# response, we will see a message of the form:
134a192e900Samaguire		#       "add net default: gateway a.b.c.d: entry exists"
135a192e900Samaguire		#
136a192e900Samaguire		do_delete=yes
137a192e900Samaguire		for router in $defrouters; do
138a192e900Samaguire			set -- `/usr/sbin/route -n add default \
139a192e900Samaguire			    -gateway $router`
140a192e900Samaguire			[ $? -ne 0 -a "x$5" = "x$route_IP:" ] \
141a192e900Samaguire			    && do_delete=no
142a192e900Samaguire		done
143a192e900Samaguire
144a192e900Samaguire		#
145a192e900Samaguire		# Finally, delete the original default route unless it
146a192e900Samaguire		# was also listed in the defaultrouter file.
147a192e900Samaguire		#
148a192e900Samaguire		if [ -n "$route_IP" -a $do_delete = yes ]; then
149a192e900Samaguire			/usr/sbin/route -n delete default \
150a192e900Samaguire			    -gateway $route_IP >/dev/null
151a192e900Samaguire		fi
152a192e900Samaguire	else
153a192e900Samaguire		/usr/sbin/route -fn > /dev/null
154a192e900Samaguire	fi
155a192e900Samaguireelse
156a192e900Samaguire	defrouters=
157a192e900Samaguirefi
158a192e900Samaguire
159a192e900Samaguire#
160a192e900Samaguire# Use routeadm(1M) to configure forwarding and launch routing daemons
161a192e900Samaguire# for IPv4 and IPv6 based on preset values.  These settings only apply
162a192e900Samaguire# to the global zone.  For IPv4 dynamic routing, the system will default
163a192e900Samaguire# to disabled if a default route was previously added via BOOTP, DHCP,
164a192e900Samaguire# or the /etc/defaultrouter file.  routeadm also starts in.ndpd.
165a192e900Samaguire#
166a192e900Samaguireif [ "$dynamic_routing" != "true"  ] && [ -z "$defrouters" ]; then
167a192e900Samaguire	#
168a192e900Samaguire	# No default routes were setup by "route" command above.
169a192e900Samaguire	# Check the kernel routing table for any other default
170a192e900Samaguire	# routes.
171a192e900Samaguire	#
172a192e900Samaguire	/usr/bin/netstat -rn -f inet | \
173a192e900Samaguire	    /usr/bin/grep default >/dev/null 2>&1 && defrouters=yes
174a192e900Samaguirefi
175a192e900Samaguire
176a192e900Samaguire#
177a192e900Samaguire# The routeadm/ipv4-routing-set property is true if the administrator
178a192e900Samaguire# has run "routeadm -e/-d ipv4-routing".  If not, we revert to the
179a192e900Samaguire# appropriate defaults.  We no longer run "routeadm -u" on every boot
180a192e900Samaguire# however, as persistent daemon state is now controlled by SMF.
181a192e900Samaguire#
182a192e900Samaguireipv4_routing_set=`/usr/bin/svcprop -p routeadm/ipv4-routing-set $SMF_FMRI`
183a192e900Samaguireif [ -z "$defrouters" ]; then
184a192e900Samaguire	#
185a192e900Samaguire	# Set default value for ipv4-routing to enabled.  If routeadm -e/-d
186a192e900Samaguire	# has not yet been run by the administrator, we apply this default.
187*ef2c19a1Samaguire	# The -b option is project-private and informs routeadm not
188*ef2c19a1Samaguire	# to treat the enable as administrator-driven.
189a192e900Samaguire	#
190a192e900Samaguire	/usr/sbin/svccfg -s $SMF_FMRI \
191a192e900Samaguire	    setprop routeadm/default-ipv4-routing = true
192a192e900Samaguire	if [ "$ipv4_routing_set" = "false" ]; then
193*ef2c19a1Samaguire		/sbin/routeadm -b -e ipv4-routing -u
194a192e900Samaguire	fi
195a192e900Samaguireelse
196a192e900Samaguire	#
197a192e900Samaguire	# Default router(s) have been found,  so ipv4-routing default value
198a192e900Samaguire	# should be disabled.  If routaedm -e/d has not yet been run by
199*ef2c19a1Samaguire	# the administrator, we apply this default.  The -b option is
200*ef2c19a1Samaguire	# project-private and informs routeadm not to treat the disable as
201*ef2c19a1Samaguire	# administrator-driven.
202*ef2c19a1Samaguire	#
203a192e900Samaguire	/usr/sbin/svccfg -s $SMF_FMRI \
204a192e900Samaguire	    setprop routeadm/default-ipv4-routing = false
205a192e900Samaguire	if [ "$ipv4_routing_set" = "false" ]; then
206*ef2c19a1Samaguire		/sbin/routeadm -b -d ipv4-routing -u
207a192e900Samaguire	fi
208a192e900Samaguirefi
209a192e900Samaguire
210a192e900Samaguire#
211a192e900Samaguire# Set 6to4 Relay Router communication support policy and, if applicable,
212a192e900Samaguire# the destination Relay Router IPv4 address.  See /etc/default/inetinit for
213a192e900Samaguire# setting and further info on ACCEPT6TO4RELAY and RELAY6TO4ADDR.
214a192e900Samaguire# If ACCEPT6TO4RELAY=NO, the default value in the kernel will
215a192e900Samaguire# be used.
216a192e900Samaguire#
217a192e900SamaguireACCEPT6TO4RELAY=`echo "$ACCEPT6TO4RELAY" | /usr/bin/tr '[A-Z]' '[a-z]'`
218a192e900Samaguireif [ "$ACCEPT6TO4RELAY" = yes ]; then
219a192e900Samaguire	if [ "$RELAY6TO4ADDR" ]; then
220a192e900Samaguire		/usr/sbin/6to4relay -e -a $RELAY6TO4ADDR
221a192e900Samaguire	else
222a192e900Samaguire		/usr/sbin/6to4relay -e
223a192e900Samaguire	fi
224a192e900Samaguirefi
225a192e900Samaguire
226a192e900Samaguire#
227a192e900Samaguire# Read /etc/inet/static_routes and add each route.
228a192e900Samaguire#
229a192e900Samaguireif [ -f /etc/inet/static_routes ]; then
230a192e900Samaguire	echo "Adding persistent routes:"
231a192e900Samaguire	/usr/bin/egrep -v "^(#|$)" /etc/inet/static_routes | while read line; do
232a192e900Samaguire		/usr/sbin/route add $line
233a192e900Samaguire	done
234a192e900Samaguirefi
235a192e900Samaguire
236a192e900Samaguire# Clear exit status.
237a192e900Samaguireexit $SMF_EXIT_OK
238