1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22#include <stdio.h>
23#include <string.h>
24#include <stdlib.h>
25#include <unistd.h>
26#include <sys/types.h>
27#include <sys/socket.h>
28#include <arpa/inet.h>
29#include <sys/ioctl.h>
30#include <linux/ip.h>
31#include <linux/if.h>
32#include <linux/if_arp.h>
33#include <linux/if_tunnel.h>
34#include <linux/ip6_tunnel.h>
35
36#include "utils.h"
37#include "tunnel.h"
38#include "ip_common.h"
39
40#define IP6_FLOWINFO_TCLASS htonl(0x0FF00000)
41#define IP6_FLOWINFO_FLOWLABEL htonl(0x000FFFFF)
42
43#define DEFAULT_TNL_HOP_LIMIT (64)
44
45static void usage(void) __attribute__((noreturn));
46
47static void usage(void)
48{
49 fprintf(stderr,
50 "Usage: ip -f inet6 tunnel { add | change | del | show } [ NAME ]\n"
51 " [ mode { ip6ip6 | ipip6 | ip6gre | vti6 | any } ]\n"
52 " [ remote ADDR local ADDR ] [ dev PHYS_DEV ]\n"
53 " [ encaplimit ELIM ]\n"
54 " [ hoplimit TTL ] [ tclass TCLASS ] [ flowlabel FLOWLABEL ]\n"
55 " [ dscp inherit ]\n"
56 " [ [no]allow-localremote ]\n"
57 " [ [i|o]seq ] [ [i|o]key KEY ] [ [i|o]csum ]\n"
58 "\n"
59 "Where: NAME := STRING\n"
60 " ADDR := IPV6_ADDRESS\n"
61 " ELIM := { none | 0..255 }(default=%d)\n"
62 " TTL := 0..255 (default=%d)\n"
63 " TCLASS := { 0x0..0xff | inherit }\n"
64 " FLOWLABEL := { 0x0..0xfffff | inherit }\n"
65 " KEY := { DOTTED_QUAD | NUMBER }\n",
66 IPV6_DEFAULT_TNL_ENCAP_LIMIT,
67 DEFAULT_TNL_HOP_LIMIT);
68 exit(-1);
69}
70
71static void print_tunnel(const void *t)
72{
73 const struct ip6_tnl_parm2 *p = t;
74 SPRINT_BUF(b1);
75
76
77
78
79 open_json_object(NULL);
80 print_color_string(PRINT_ANY, COLOR_IFNAME, "ifname", "%s: ", p->name);
81 snprintf(b1, sizeof(b1), "%s/ipv6", tnl_strproto(p->proto));
82 print_string(PRINT_ANY, "mode", "%s ", b1);
83 print_string(PRINT_FP, NULL, "%s", "remote ");
84 print_color_string(PRINT_ANY, COLOR_INET6, "remote", "%s ",
85 format_host_r(AF_INET6, 16, &p->raddr, b1, sizeof(b1)));
86 print_string(PRINT_FP, NULL, "%s", "local ");
87 print_color_string(PRINT_ANY, COLOR_INET6, "local", "%s",
88 rt_addr_n2a_r(AF_INET6, 16, &p->laddr, b1, sizeof(b1)));
89
90 if (p->link) {
91 const char *n = ll_index_to_name(p->link);
92
93 if (n)
94 print_string(PRINT_ANY, "link", " dev %s", n);
95 }
96
97 if (p->flags & IP6_TNL_F_IGN_ENCAP_LIMIT)
98 print_null(PRINT_ANY, "ip6_tnl_f_ign_encap_limit",
99 " encaplimit none", NULL);
100 else
101 print_uint(PRINT_ANY, "encap_limit", " encaplimit %u",
102 p->encap_limit);
103
104 if (p->hop_limit)
105 print_uint(PRINT_ANY, "hoplimit", " hoplimit %u", p->hop_limit);
106 else
107 print_string(PRINT_FP, "hoplimit", " hoplimit %s", "inherit");
108
109 if (p->flags & IP6_TNL_F_USE_ORIG_TCLASS) {
110 print_null(PRINT_ANY, "ip6_tnl_f_use_orig_tclass",
111 " tclass inherit", NULL);
112 } else {
113 __u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_TCLASS);
114
115 snprintf(b1, sizeof(b1), "0x%02x", (__u8)(val >> 20));
116 print_string(PRINT_ANY, "tclass", " tclass %s", b1);
117 }
118
119 if (p->flags & IP6_TNL_F_USE_ORIG_FLOWLABEL) {
120 print_null(PRINT_ANY, "ip6_tnl_f_use_orig_flowlabel",
121 " flowlabel inherit", NULL);
122 } else {
123 __u32 val = ntohl(p->flowinfo & IP6_FLOWINFO_FLOWLABEL);
124
125 snprintf(b1, sizeof(b1), "0x%05x", val);
126 print_string(PRINT_ANY, "flowlabel", " flowlabel %s", b1);
127 }
128
129 snprintf(b1, sizeof(b1), "0x%08x", ntohl(p->flowinfo));
130 print_string(PRINT_ANY, "flowinfo", " (flowinfo %s)", b1);
131
132 if (p->flags & IP6_TNL_F_RCV_DSCP_COPY)
133 print_null(PRINT_ANY, "ip6_tnl_f_rcv_dscp_copy",
134 " dscp inherit", NULL);
135
136 if (p->flags & IP6_TNL_F_ALLOW_LOCAL_REMOTE)
137 print_null(PRINT_ANY, "ip6_tnl_f_allow_local_remote",
138 " allow-localremote", NULL);
139
140 tnl_print_gre_flags(p->proto, p->i_flags, p->o_flags,
141 p->i_key, p->o_key);
142
143 close_json_object();
144}
145
146static int parse_args(int argc, char **argv, int cmd, struct ip6_tnl_parm2 *p)
147{
148 int count = 0;
149 const char *medium = NULL;
150
151 while (argc > 0) {
152 if (strcmp(*argv, "mode") == 0) {
153 NEXT_ARG();
154 if (strcmp(*argv, "ipv6/ipv6") == 0 ||
155 strcmp(*argv, "ip6ip6") == 0)
156 p->proto = IPPROTO_IPV6;
157 else if (strcmp(*argv, "vti6") == 0) {
158 p->proto = IPPROTO_IPV6;
159 p->i_flags |= VTI_ISVTI;
160 } else if (strcmp(*argv, "ip/ipv6") == 0 ||
161 strcmp(*argv, "ipv4/ipv6") == 0 ||
162 strcmp(*argv, "ipip6") == 0 ||
163 strcmp(*argv, "ip4ip6") == 0)
164 p->proto = IPPROTO_IPIP;
165 else if (strcmp(*argv, "ip6gre") == 0 ||
166 strcmp(*argv, "gre/ipv6") == 0)
167 p->proto = IPPROTO_GRE;
168 else if (strcmp(*argv, "any/ipv6") == 0 ||
169 strcmp(*argv, "any") == 0)
170 p->proto = 0;
171 else {
172 fprintf(stderr, "Unknown tunnel mode \"%s\"\n", *argv);
173 exit(-1);
174 }
175 } else if (strcmp(*argv, "remote") == 0) {
176 inet_prefix raddr;
177
178 NEXT_ARG();
179 get_addr(&raddr, *argv, AF_INET6);
180 memcpy(&p->raddr, &raddr.data, sizeof(p->raddr));
181 } else if (strcmp(*argv, "local") == 0) {
182 inet_prefix laddr;
183
184 NEXT_ARG();
185 get_addr(&laddr, *argv, AF_INET6);
186 memcpy(&p->laddr, &laddr.data, sizeof(p->laddr));
187 } else if (strcmp(*argv, "dev") == 0) {
188 NEXT_ARG();
189 medium = *argv;
190 } else if (strcmp(*argv, "encaplimit") == 0) {
191 NEXT_ARG();
192 if (strcmp(*argv, "none") == 0) {
193 p->flags |= IP6_TNL_F_IGN_ENCAP_LIMIT;
194 } else {
195 __u8 uval;
196
197 if (get_u8(&uval, *argv, 0) < -1)
198 invarg("invalid ELIM", *argv);
199 p->encap_limit = uval;
200 p->flags &= ~IP6_TNL_F_IGN_ENCAP_LIMIT;
201 }
202 } else if (strcmp(*argv, "hoplimit") == 0 ||
203 strcmp(*argv, "ttl") == 0 ||
204 strcmp(*argv, "hlim") == 0) {
205 __u8 uval;
206
207 NEXT_ARG();
208 if (get_u8(&uval, *argv, 0))
209 invarg("invalid TTL", *argv);
210 p->hop_limit = uval;
211 } else if (strcmp(*argv, "tclass") == 0 ||
212 strcmp(*argv, "tc") == 0 ||
213 strcmp(*argv, "tos") == 0 ||
214 matches(*argv, "dsfield") == 0) {
215 __u8 uval;
216
217 NEXT_ARG();
218 p->flowinfo &= ~IP6_FLOWINFO_TCLASS;
219 if (strcmp(*argv, "inherit") == 0)
220 p->flags |= IP6_TNL_F_USE_ORIG_TCLASS;
221 else {
222 if (get_u8(&uval, *argv, 16))
223 invarg("invalid TClass", *argv);
224 p->flowinfo |= htonl((__u32)uval << 20) & IP6_FLOWINFO_TCLASS;
225 p->flags &= ~IP6_TNL_F_USE_ORIG_TCLASS;
226 }
227 } else if (strcmp(*argv, "flowlabel") == 0 ||
228 strcmp(*argv, "fl") == 0) {
229 __u32 uval;
230
231 NEXT_ARG();
232 p->flowinfo &= ~IP6_FLOWINFO_FLOWLABEL;
233 if (strcmp(*argv, "inherit") == 0)
234 p->flags |= IP6_TNL_F_USE_ORIG_FLOWLABEL;
235 else {
236 if (get_u32(&uval, *argv, 16))
237 invarg("invalid Flowlabel", *argv);
238 if (uval > 0xFFFFF)
239 invarg("invalid Flowlabel", *argv);
240 p->flowinfo |= htonl(uval) & IP6_FLOWINFO_FLOWLABEL;
241 p->flags &= ~IP6_TNL_F_USE_ORIG_FLOWLABEL;
242 }
243 } else if (strcmp(*argv, "dscp") == 0) {
244 NEXT_ARG();
245 if (strcmp(*argv, "inherit") != 0)
246 invarg("not inherit", *argv);
247 p->flags |= IP6_TNL_F_RCV_DSCP_COPY;
248 } else if (strcmp(*argv, "allow-localremote") == 0) {
249 p->flags |= IP6_TNL_F_ALLOW_LOCAL_REMOTE;
250 } else if (strcmp(*argv, "noallow-localremote") == 0) {
251 p->flags &= ~IP6_TNL_F_ALLOW_LOCAL_REMOTE;
252 } else if (strcmp(*argv, "key") == 0) {
253 NEXT_ARG();
254 p->i_flags |= GRE_KEY;
255 p->o_flags |= GRE_KEY;
256 p->i_key = p->o_key = tnl_parse_key("key", *argv);
257 } else if (strcmp(*argv, "ikey") == 0) {
258 NEXT_ARG();
259 p->i_flags |= GRE_KEY;
260 p->i_key = tnl_parse_key("ikey", *argv);
261 } else if (strcmp(*argv, "okey") == 0) {
262 NEXT_ARG();
263 p->o_flags |= GRE_KEY;
264 p->o_key = tnl_parse_key("okey", *argv);
265 } else if (strcmp(*argv, "seq") == 0) {
266 p->i_flags |= GRE_SEQ;
267 p->o_flags |= GRE_SEQ;
268 } else if (strcmp(*argv, "iseq") == 0) {
269 p->i_flags |= GRE_SEQ;
270 } else if (strcmp(*argv, "oseq") == 0) {
271 p->o_flags |= GRE_SEQ;
272 } else if (strcmp(*argv, "csum") == 0) {
273 p->i_flags |= GRE_CSUM;
274 p->o_flags |= GRE_CSUM;
275 } else if (strcmp(*argv, "icsum") == 0) {
276 p->i_flags |= GRE_CSUM;
277 } else if (strcmp(*argv, "ocsum") == 0) {
278 p->o_flags |= GRE_CSUM;
279 } else {
280 if (strcmp(*argv, "name") == 0) {
281 NEXT_ARG();
282 } else if (matches(*argv, "help") == 0)
283 usage();
284 if (p->name[0])
285 duparg2("name", *argv);
286 if (get_ifname(p->name, *argv))
287 invarg("\"name\" not a valid ifname", *argv);
288 if (cmd == SIOCCHGTUNNEL && count == 0) {
289 struct ip6_tnl_parm2 old_p = {};
290
291 if (tnl_get_ioctl(*argv, &old_p))
292 return -1;
293 *p = old_p;
294 }
295 }
296 count++;
297 argc--; argv++;
298 }
299 if (medium) {
300 p->link = ll_name_to_index(medium);
301 if (!p->link)
302 return nodev(medium);
303 }
304 return 0;
305}
306
307static void ip6_tnl_parm_init(struct ip6_tnl_parm2 *p, int apply_default)
308{
309 memset(p, 0, sizeof(*p));
310 p->proto = IPPROTO_IPV6;
311 if (apply_default) {
312 p->hop_limit = DEFAULT_TNL_HOP_LIMIT;
313 p->encap_limit = IPV6_DEFAULT_TNL_ENCAP_LIMIT;
314 }
315}
316
317static void ip6_tnl_parm_initialize(const struct tnl_print_nlmsg_info *info)
318{
319 const struct ifinfomsg *ifi = info->ifi;
320 const struct ip6_tnl_parm2 *p1 = info->p1;
321 struct ip6_tnl_parm2 *p2 = info->p2;
322
323 ip6_tnl_parm_init(p2, 0);
324 if (ifi->ifi_type == ARPHRD_IP6GRE)
325 p2->proto = IPPROTO_GRE;
326 p2->link = ifi->ifi_index;
327 strcpy(p2->name, p1->name);
328}
329
330static bool ip6_tnl_parm_match(const struct tnl_print_nlmsg_info *info)
331{
332 const struct ip6_tnl_parm2 *p1 = info->p1;
333 const struct ip6_tnl_parm2 *p2 = info->p2;
334
335 return ((!p1->link || p1->link == p2->link) &&
336 (!p1->name[0] || strcmp(p1->name, p2->name) == 0) &&
337 (IN6_IS_ADDR_UNSPECIFIED(&p1->laddr) ||
338 IN6_ARE_ADDR_EQUAL(&p1->laddr, &p2->laddr)) &&
339 (IN6_IS_ADDR_UNSPECIFIED(&p1->raddr) ||
340 IN6_ARE_ADDR_EQUAL(&p1->raddr, &p2->raddr)) &&
341 (!p1->proto || !p2->proto || p1->proto == p2->proto) &&
342 (!p1->encap_limit || p1->encap_limit == p2->encap_limit) &&
343 (!p1->hop_limit || p1->hop_limit == p2->hop_limit) &&
344 (!(p1->flowinfo & IP6_FLOWINFO_TCLASS) ||
345 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_TCLASS)) &&
346 (!(p1->flowinfo & IP6_FLOWINFO_FLOWLABEL) ||
347 !((p1->flowinfo ^ p2->flowinfo) & IP6_FLOWINFO_FLOWLABEL)) &&
348 (!p1->flags || (p1->flags & p2->flags)));
349}
350
351static int do_show(int argc, char **argv)
352{
353 struct ip6_tnl_parm2 p, p1;
354
355 ip6_tnl_parm_init(&p, 0);
356 p.proto = 0;
357
358 if (parse_args(argc, argv, SIOCGETTUNNEL, &p) < 0)
359 return -1;
360
361 if (!p.name[0] || show_stats) {
362 struct tnl_print_nlmsg_info info = {
363 .p1 = &p,
364 .p2 = &p1,
365 .init = ip6_tnl_parm_initialize,
366 .match = ip6_tnl_parm_match,
367 .print = print_tunnel,
368 };
369
370 return do_tunnels_list(&info);
371 }
372
373 if (tnl_get_ioctl(p.name, &p))
374 return -1;
375
376 print_tunnel(&p);
377 return 0;
378}
379
380static int do_add(int cmd, int argc, char **argv)
381{
382 struct ip6_tnl_parm2 p;
383 const char *basedev = "ip6tnl0";
384
385 ip6_tnl_parm_init(&p, 1);
386
387 if (parse_args(argc, argv, cmd, &p) < 0)
388 return -1;
389
390 if (!*p.name)
391 fprintf(stderr, "Tunnel interface name not specified\n");
392
393 if (p.proto == IPPROTO_GRE)
394 basedev = "ip6gre0";
395 else if (p.i_flags & VTI_ISVTI)
396 basedev = "ip6_vti0";
397
398 return tnl_add_ioctl(cmd, basedev, p.name, &p);
399}
400
401static int do_del(int argc, char **argv)
402{
403 struct ip6_tnl_parm2 p;
404 const char *basedev = "ip6tnl0";
405
406 ip6_tnl_parm_init(&p, 1);
407
408 if (parse_args(argc, argv, SIOCDELTUNNEL, &p) < 0)
409 return -1;
410
411 if (p.proto == IPPROTO_GRE)
412 basedev = "ip6gre0";
413 else if (p.i_flags & VTI_ISVTI)
414 basedev = "ip6_vti0";
415
416 return tnl_del_ioctl(basedev, p.name, &p);
417}
418
419int do_ip6tunnel(int argc, char **argv)
420{
421 switch (preferred_family) {
422 case AF_UNSPEC:
423 preferred_family = AF_INET6;
424 break;
425 case AF_INET6:
426 break;
427 default:
428 fprintf(stderr, "Unsupported protocol family: %d\n", preferred_family);
429 exit(-1);
430 }
431
432 if (argc > 0) {
433 if (matches(*argv, "add") == 0)
434 return do_add(SIOCADDTUNNEL, argc - 1, argv + 1);
435 if (matches(*argv, "change") == 0)
436 return do_add(SIOCCHGTUNNEL, argc - 1, argv + 1);
437 if (matches(*argv, "delete") == 0)
438 return do_del(argc - 1, argv + 1);
439 if (matches(*argv, "show") == 0 ||
440 matches(*argv, "lst") == 0 ||
441 matches(*argv, "list") == 0)
442 return do_show(argc - 1, argv + 1);
443 if (matches(*argv, "help") == 0)
444 usage();
445 } else
446 return do_show(0, NULL);
447
448 fprintf(stderr, "Command \"%s\" is unknown, try \"ip -f inet6 tunnel help\".\n", *argv);
449 exit(-1);
450}
451
