mirror of
https://git.proxmox.com/git/mirror_iproute2
synced 2025-10-17 07:07:15 +00:00

This patch adds support to configure foo-over-udp (FOU) and Generic UDP Encapsulation for GRE tunnels. This configuration allows selection of FOU or GUE for the tunnel, specification of the source and destination ports for UDP tunnel, and enabling TX checksum. This configuration only affects the transmit side of a tunnel. Example: ip link add name tun1 type gre remote 192.168.1.1 local 192.168.1.2 \ ttl 225 encap fou encap-sport auto encap-dport 7777 encap-csum This would create an GRE tunnel in GUE encapsulation where the source port is automatically selected (based on hash of inner packet) and checksums in the encapsulating UDP header are enabled. Signed-off-by: Tom Herbert <therbert@google.com>
472 lines
12 KiB
C
472 lines
12 KiB
C
/*
|
|
* link_gre.c gre driver module
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version
|
|
* 2 of the License, or (at your option) any later version.
|
|
*
|
|
* Authors: Herbert Xu <herbert@gondor.apana.org.au>
|
|
*
|
|
*/
|
|
|
|
#include <string.h>
|
|
#include <net/if.h>
|
|
#include <sys/types.h>
|
|
#include <sys/socket.h>
|
|
#include <arpa/inet.h>
|
|
|
|
#include <linux/ip.h>
|
|
#include <linux/if_tunnel.h>
|
|
#include "rt_names.h"
|
|
#include "utils.h"
|
|
#include "ip_common.h"
|
|
#include "tunnel.h"
|
|
|
|
static void print_usage(FILE *f)
|
|
{
|
|
fprintf(f, "Usage: ip link { add | set | change | replace | del } NAME\n");
|
|
fprintf(f, " type { gre | gretap } [ remote ADDR ] [ local ADDR ]\n");
|
|
fprintf(f, " [ [i|o]seq ] [ [i|o]key KEY ] [ [i|o]csum ]\n");
|
|
fprintf(f, " [ ttl TTL ] [ tos TOS ] [ [no]pmtudisc ] [ dev PHYS_DEV ]\n");
|
|
fprintf(f, " [ noencap ] [ encap { fou | gue | none } ]\n");
|
|
fprintf(f, " [ encap-sport PORT ] [ encap-dport PORT ]\n");
|
|
fprintf(f, " [ [no]encap-csum ] [ [no]encap-csum6 ]\n");
|
|
fprintf(f, "\n");
|
|
fprintf(f, "Where: NAME := STRING\n");
|
|
fprintf(f, " ADDR := { IP_ADDRESS | any }\n");
|
|
fprintf(f, " TOS := { NUMBER | inherit }\n");
|
|
fprintf(f, " TTL := { 1..255 | inherit }\n");
|
|
fprintf(f, " KEY := { DOTTED_QUAD | NUMBER }\n");
|
|
}
|
|
|
|
static void usage(void) __attribute__((noreturn));
|
|
static void usage(void)
|
|
{
|
|
print_usage(stderr);
|
|
exit(-1);
|
|
}
|
|
|
|
static int gre_parse_opt(struct link_util *lu, int argc, char **argv,
|
|
struct nlmsghdr *n)
|
|
{
|
|
struct {
|
|
struct nlmsghdr n;
|
|
struct ifinfomsg i;
|
|
char buf[1024];
|
|
} req;
|
|
struct ifinfomsg *ifi = (struct ifinfomsg *)(n + 1);
|
|
struct rtattr *tb[IFLA_MAX + 1];
|
|
struct rtattr *linkinfo[IFLA_INFO_MAX+1];
|
|
struct rtattr *greinfo[IFLA_GRE_MAX + 1];
|
|
__u16 iflags = 0;
|
|
__u16 oflags = 0;
|
|
unsigned ikey = 0;
|
|
unsigned okey = 0;
|
|
unsigned saddr = 0;
|
|
unsigned daddr = 0;
|
|
unsigned link = 0;
|
|
__u8 pmtudisc = 1;
|
|
__u8 ttl = 0;
|
|
__u8 tos = 0;
|
|
int len;
|
|
__u16 encaptype = 0;
|
|
__u16 encapflags = 0;
|
|
__u16 encapsport = 0;
|
|
__u16 encapdport = 0;
|
|
|
|
if (!(n->nlmsg_flags & NLM_F_CREATE)) {
|
|
memset(&req, 0, sizeof(req));
|
|
|
|
req.n.nlmsg_len = NLMSG_LENGTH(sizeof(*ifi));
|
|
req.n.nlmsg_flags = NLM_F_REQUEST;
|
|
req.n.nlmsg_type = RTM_GETLINK;
|
|
req.i.ifi_family = preferred_family;
|
|
req.i.ifi_index = ifi->ifi_index;
|
|
|
|
if (rtnl_talk(&rth, &req.n, 0, 0, &req.n) < 0) {
|
|
get_failed:
|
|
fprintf(stderr,
|
|
"Failed to get existing tunnel info.\n");
|
|
return -1;
|
|
}
|
|
|
|
len = req.n.nlmsg_len;
|
|
len -= NLMSG_LENGTH(sizeof(*ifi));
|
|
if (len < 0)
|
|
goto get_failed;
|
|
|
|
parse_rtattr(tb, IFLA_MAX, IFLA_RTA(&req.i), len);
|
|
|
|
if (!tb[IFLA_LINKINFO])
|
|
goto get_failed;
|
|
|
|
parse_rtattr_nested(linkinfo, IFLA_INFO_MAX, tb[IFLA_LINKINFO]);
|
|
|
|
if (!linkinfo[IFLA_INFO_DATA])
|
|
goto get_failed;
|
|
|
|
parse_rtattr_nested(greinfo, IFLA_GRE_MAX,
|
|
linkinfo[IFLA_INFO_DATA]);
|
|
|
|
if (greinfo[IFLA_GRE_IKEY])
|
|
ikey = rta_getattr_u32(greinfo[IFLA_GRE_IKEY]);
|
|
|
|
if (greinfo[IFLA_GRE_OKEY])
|
|
okey = rta_getattr_u32(greinfo[IFLA_GRE_OKEY]);
|
|
|
|
if (greinfo[IFLA_GRE_IFLAGS])
|
|
iflags = rta_getattr_u16(greinfo[IFLA_GRE_IFLAGS]);
|
|
|
|
if (greinfo[IFLA_GRE_OFLAGS])
|
|
oflags = rta_getattr_u16(greinfo[IFLA_GRE_OFLAGS]);
|
|
|
|
if (greinfo[IFLA_GRE_LOCAL])
|
|
saddr = rta_getattr_u32(greinfo[IFLA_GRE_LOCAL]);
|
|
|
|
if (greinfo[IFLA_GRE_REMOTE])
|
|
daddr = rta_getattr_u32(greinfo[IFLA_GRE_REMOTE]);
|
|
|
|
if (greinfo[IFLA_GRE_PMTUDISC])
|
|
pmtudisc = rta_getattr_u8(
|
|
greinfo[IFLA_GRE_PMTUDISC]);
|
|
|
|
if (greinfo[IFLA_GRE_TTL])
|
|
ttl = rta_getattr_u8(greinfo[IFLA_GRE_TTL]);
|
|
|
|
if (greinfo[IFLA_GRE_TOS])
|
|
tos = rta_getattr_u8(greinfo[IFLA_GRE_TOS]);
|
|
|
|
if (greinfo[IFLA_GRE_LINK])
|
|
link = rta_getattr_u8(greinfo[IFLA_GRE_LINK]);
|
|
|
|
if (greinfo[IFLA_GRE_ENCAP_TYPE])
|
|
encaptype = rta_getattr_u16(greinfo[IFLA_GRE_ENCAP_TYPE]);
|
|
if (greinfo[IFLA_GRE_ENCAP_FLAGS])
|
|
encapflags = rta_getattr_u16(greinfo[IFLA_GRE_ENCAP_FLAGS]);
|
|
if (greinfo[IFLA_GRE_ENCAP_SPORT])
|
|
encapsport = rta_getattr_u16(greinfo[IFLA_GRE_ENCAP_SPORT]);
|
|
if (greinfo[IFLA_GRE_ENCAP_DPORT])
|
|
encapdport = rta_getattr_u16(greinfo[IFLA_GRE_ENCAP_DPORT]);
|
|
}
|
|
|
|
while (argc > 0) {
|
|
if (!matches(*argv, "key")) {
|
|
unsigned uval;
|
|
|
|
NEXT_ARG();
|
|
iflags |= GRE_KEY;
|
|
oflags |= GRE_KEY;
|
|
if (strchr(*argv, '.'))
|
|
uval = get_addr32(*argv);
|
|
else {
|
|
if (get_unsigned(&uval, *argv, 0) < 0) {
|
|
fprintf(stderr,
|
|
"Invalid value for \"key\": \"%s\"; it should be an unsigned integer\n", *argv);
|
|
exit(-1);
|
|
}
|
|
uval = htonl(uval);
|
|
}
|
|
|
|
ikey = okey = uval;
|
|
} else if (!matches(*argv, "ikey")) {
|
|
unsigned uval;
|
|
|
|
NEXT_ARG();
|
|
iflags |= GRE_KEY;
|
|
if (strchr(*argv, '.'))
|
|
uval = get_addr32(*argv);
|
|
else {
|
|
if (get_unsigned(&uval, *argv, 0)<0) {
|
|
fprintf(stderr, "invalid value for \"ikey\": \"%s\"; it should be an unsigned integer\n", *argv);
|
|
exit(-1);
|
|
}
|
|
uval = htonl(uval);
|
|
}
|
|
ikey = uval;
|
|
} else if (!matches(*argv, "okey")) {
|
|
unsigned uval;
|
|
|
|
NEXT_ARG();
|
|
oflags |= GRE_KEY;
|
|
if (strchr(*argv, '.'))
|
|
uval = get_addr32(*argv);
|
|
else {
|
|
if (get_unsigned(&uval, *argv, 0)<0) {
|
|
fprintf(stderr, "invalid value for \"okey\": \"%s\"; it should be an unsigned integer\n", *argv);
|
|
exit(-1);
|
|
}
|
|
uval = htonl(uval);
|
|
}
|
|
okey = uval;
|
|
} else if (!matches(*argv, "seq")) {
|
|
iflags |= GRE_SEQ;
|
|
oflags |= GRE_SEQ;
|
|
} else if (!matches(*argv, "iseq")) {
|
|
iflags |= GRE_SEQ;
|
|
} else if (!matches(*argv, "oseq")) {
|
|
oflags |= GRE_SEQ;
|
|
} else if (!matches(*argv, "csum")) {
|
|
iflags |= GRE_CSUM;
|
|
oflags |= GRE_CSUM;
|
|
} else if (!matches(*argv, "icsum")) {
|
|
iflags |= GRE_CSUM;
|
|
} else if (!matches(*argv, "ocsum")) {
|
|
oflags |= GRE_CSUM;
|
|
} else if (!matches(*argv, "nopmtudisc")) {
|
|
pmtudisc = 0;
|
|
} else if (!matches(*argv, "pmtudisc")) {
|
|
pmtudisc = 1;
|
|
} else if (!matches(*argv, "remote")) {
|
|
NEXT_ARG();
|
|
if (strcmp(*argv, "any"))
|
|
daddr = get_addr32(*argv);
|
|
} else if (!matches(*argv, "local")) {
|
|
NEXT_ARG();
|
|
if (strcmp(*argv, "any"))
|
|
saddr = get_addr32(*argv);
|
|
} else if (!matches(*argv, "dev")) {
|
|
NEXT_ARG();
|
|
link = if_nametoindex(*argv);
|
|
if (link == 0) {
|
|
fprintf(stderr, "Cannot find device \"%s\"\n",
|
|
*argv);
|
|
exit(-1);
|
|
}
|
|
} else if (!matches(*argv, "ttl") ||
|
|
!matches(*argv, "hoplimit")) {
|
|
unsigned uval;
|
|
|
|
NEXT_ARG();
|
|
if (strcmp(*argv, "inherit") != 0) {
|
|
if (get_unsigned(&uval, *argv, 0))
|
|
invarg("invalid TTL\n", *argv);
|
|
if (uval > 255)
|
|
invarg("TTL must be <= 255\n", *argv);
|
|
ttl = uval;
|
|
}
|
|
} else if (!matches(*argv, "tos") ||
|
|
!matches(*argv, "tclass") ||
|
|
!matches(*argv, "dsfield")) {
|
|
__u32 uval;
|
|
|
|
NEXT_ARG();
|
|
if (strcmp(*argv, "inherit") != 0) {
|
|
if (rtnl_dsfield_a2n(&uval, *argv))
|
|
invarg("bad TOS value", *argv);
|
|
tos = uval;
|
|
} else
|
|
tos = 1;
|
|
} else if (strcmp(*argv, "noencap") == 0) {
|
|
encaptype = TUNNEL_ENCAP_NONE;
|
|
} else if (strcmp(*argv, "encap") == 0) {
|
|
NEXT_ARG();
|
|
if (strcmp(*argv, "fou") == 0)
|
|
encaptype = TUNNEL_ENCAP_FOU;
|
|
else if (strcmp(*argv, "gue") == 0)
|
|
encaptype = TUNNEL_ENCAP_GUE;
|
|
else if (strcmp(*argv, "none") == 0)
|
|
encaptype = TUNNEL_ENCAP_NONE;
|
|
else
|
|
invarg("Invalid encap type.", *argv);
|
|
} else if (strcmp(*argv, "encap-sport") == 0) {
|
|
NEXT_ARG();
|
|
if (strcmp(*argv, "auto") == 0)
|
|
encapsport = 0;
|
|
else if (get_u16(&encapsport, *argv, 0))
|
|
invarg("Invalid source port.", *argv);
|
|
} else if (strcmp(*argv, "encap-dport") == 0) {
|
|
NEXT_ARG();
|
|
if (get_u16(&encapdport, *argv, 0))
|
|
invarg("Invalid destination port.", *argv);
|
|
} else if (strcmp(*argv, "encap-csum") == 0) {
|
|
encapflags |= TUNNEL_ENCAP_FLAG_CSUM;
|
|
} else if (strcmp(*argv, "noencap-csum") == 0) {
|
|
encapflags &= ~TUNNEL_ENCAP_FLAG_CSUM;
|
|
} else if (strcmp(*argv, "encap-udp6-csum") == 0) {
|
|
encapflags |= TUNNEL_ENCAP_FLAG_CSUM6;
|
|
} else if (strcmp(*argv, "noencap-udp6-csum") == 0) {
|
|
encapflags |= ~TUNNEL_ENCAP_FLAG_CSUM6;
|
|
} else
|
|
usage();
|
|
argc--; argv++;
|
|
}
|
|
|
|
if (!ikey && IN_MULTICAST(ntohl(daddr))) {
|
|
ikey = daddr;
|
|
iflags |= GRE_KEY;
|
|
}
|
|
if (!okey && IN_MULTICAST(ntohl(daddr))) {
|
|
okey = daddr;
|
|
oflags |= GRE_KEY;
|
|
}
|
|
if (IN_MULTICAST(ntohl(daddr)) && !saddr) {
|
|
fprintf(stderr, "A broadcast tunnel requires a source address.\n");
|
|
return -1;
|
|
}
|
|
|
|
addattr32(n, 1024, IFLA_GRE_IKEY, ikey);
|
|
addattr32(n, 1024, IFLA_GRE_OKEY, okey);
|
|
addattr_l(n, 1024, IFLA_GRE_IFLAGS, &iflags, 2);
|
|
addattr_l(n, 1024, IFLA_GRE_OFLAGS, &oflags, 2);
|
|
addattr_l(n, 1024, IFLA_GRE_LOCAL, &saddr, 4);
|
|
addattr_l(n, 1024, IFLA_GRE_REMOTE, &daddr, 4);
|
|
addattr_l(n, 1024, IFLA_GRE_PMTUDISC, &pmtudisc, 1);
|
|
if (link)
|
|
addattr32(n, 1024, IFLA_GRE_LINK, link);
|
|
addattr_l(n, 1024, IFLA_GRE_TTL, &ttl, 1);
|
|
addattr_l(n, 1024, IFLA_GRE_TOS, &tos, 1);
|
|
|
|
addattr16(n, 1024, IFLA_GRE_ENCAP_TYPE, encaptype);
|
|
addattr16(n, 1024, IFLA_GRE_ENCAP_FLAGS, encapflags);
|
|
addattr16(n, 1024, IFLA_GRE_ENCAP_SPORT, htons(encapsport));
|
|
addattr16(n, 1024, IFLA_GRE_ENCAP_DPORT, htons(encapdport));
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void gre_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[])
|
|
{
|
|
char s1[1024];
|
|
char s2[64];
|
|
const char *local = "any";
|
|
const char *remote = "any";
|
|
unsigned iflags = 0;
|
|
unsigned oflags = 0;
|
|
|
|
if (!tb)
|
|
return;
|
|
|
|
if (tb[IFLA_GRE_REMOTE]) {
|
|
unsigned addr = rta_getattr_u32(tb[IFLA_GRE_REMOTE]);
|
|
|
|
if (addr)
|
|
remote = format_host(AF_INET, 4, &addr, s1, sizeof(s1));
|
|
}
|
|
|
|
fprintf(f, "remote %s ", remote);
|
|
|
|
if (tb[IFLA_GRE_LOCAL]) {
|
|
unsigned addr = rta_getattr_u32(tb[IFLA_GRE_LOCAL]);
|
|
|
|
if (addr)
|
|
local = format_host(AF_INET, 4, &addr, s1, sizeof(s1));
|
|
}
|
|
|
|
fprintf(f, "local %s ", local);
|
|
|
|
if (tb[IFLA_GRE_LINK] && rta_getattr_u32(tb[IFLA_GRE_LINK])) {
|
|
unsigned link = rta_getattr_u32(tb[IFLA_GRE_LINK]);
|
|
const char *n = if_indextoname(link, s2);
|
|
|
|
if (n)
|
|
fprintf(f, "dev %s ", n);
|
|
else
|
|
fprintf(f, "dev %u ", link);
|
|
}
|
|
|
|
if (tb[IFLA_GRE_TTL] && rta_getattr_u8(tb[IFLA_GRE_TTL]))
|
|
fprintf(f, "ttl %d ", rta_getattr_u8(tb[IFLA_GRE_TTL]));
|
|
else
|
|
fprintf(f, "ttl inherit ");
|
|
|
|
if (tb[IFLA_GRE_TOS] && rta_getattr_u8(tb[IFLA_GRE_TOS])) {
|
|
int tos = rta_getattr_u8(tb[IFLA_GRE_TOS]);
|
|
|
|
fputs("tos ", f);
|
|
if (tos == 1)
|
|
fputs("inherit ", f);
|
|
else
|
|
fprintf(f, "0x%x ", tos);
|
|
}
|
|
|
|
if (tb[IFLA_GRE_PMTUDISC] &&
|
|
!rta_getattr_u8(tb[IFLA_GRE_PMTUDISC]))
|
|
fputs("nopmtudisc ", f);
|
|
|
|
if (tb[IFLA_GRE_IFLAGS])
|
|
iflags = rta_getattr_u16(tb[IFLA_GRE_IFLAGS]);
|
|
|
|
if (tb[IFLA_GRE_OFLAGS])
|
|
oflags = rta_getattr_u16(tb[IFLA_GRE_OFLAGS]);
|
|
|
|
if ((iflags & GRE_KEY) && tb[IFLA_GRE_IKEY]) {
|
|
inet_ntop(AF_INET, RTA_DATA(tb[IFLA_GRE_IKEY]), s2, sizeof(s2));
|
|
fprintf(f, "ikey %s ", s2);
|
|
}
|
|
|
|
if ((oflags & GRE_KEY) && tb[IFLA_GRE_OKEY]) {
|
|
inet_ntop(AF_INET, RTA_DATA(tb[IFLA_GRE_OKEY]), s2, sizeof(s2));
|
|
fprintf(f, "okey %s ", s2);
|
|
}
|
|
|
|
if (iflags & GRE_SEQ)
|
|
fputs("iseq ", f);
|
|
if (oflags & GRE_SEQ)
|
|
fputs("oseq ", f);
|
|
if (iflags & GRE_CSUM)
|
|
fputs("icsum ", f);
|
|
if (oflags & GRE_CSUM)
|
|
fputs("ocsum ", f);
|
|
|
|
if (tb[IFLA_GRE_ENCAP_TYPE] &&
|
|
*(__u16 *)RTA_DATA(tb[IFLA_GRE_ENCAP_TYPE]) != TUNNEL_ENCAP_NONE) {
|
|
__u16 type = rta_getattr_u16(tb[IFLA_GRE_ENCAP_TYPE]);
|
|
__u16 flags = rta_getattr_u16(tb[IFLA_GRE_ENCAP_FLAGS]);
|
|
__u16 sport = rta_getattr_u16(tb[IFLA_GRE_ENCAP_SPORT]);
|
|
__u16 dport = rta_getattr_u16(tb[IFLA_GRE_ENCAP_DPORT]);
|
|
|
|
fputs("encap ", f);
|
|
switch (type) {
|
|
case TUNNEL_ENCAP_FOU:
|
|
fputs("fou ", f);
|
|
break;
|
|
case TUNNEL_ENCAP_GUE:
|
|
fputs("gue ", f);
|
|
break;
|
|
default:
|
|
fputs("unknown ", f);
|
|
break;
|
|
}
|
|
|
|
if (sport == 0)
|
|
fputs("encap-sport auto ", f);
|
|
else
|
|
fprintf(f, "encap-sport %u", ntohs(sport));
|
|
|
|
fprintf(f, "encap-dport %u ", ntohs(dport));
|
|
|
|
if (flags & TUNNEL_ENCAP_FLAG_CSUM)
|
|
fputs("encap-csum ", f);
|
|
else
|
|
fputs("noencap-csum ", f);
|
|
|
|
if (flags & TUNNEL_ENCAP_FLAG_CSUM6)
|
|
fputs("encap-csum6 ", f);
|
|
else
|
|
fputs("noencap-csum6 ", f);
|
|
}
|
|
}
|
|
|
|
static void gre_print_help(struct link_util *lu, int argc, char **argv,
|
|
FILE *f)
|
|
{
|
|
print_usage(f);
|
|
}
|
|
|
|
struct link_util gre_link_util = {
|
|
.id = "gre",
|
|
.maxattr = IFLA_GRE_MAX,
|
|
.parse_opt = gre_parse_opt,
|
|
.print_opt = gre_print_opt,
|
|
.print_help = gre_print_help,
|
|
};
|
|
|
|
struct link_util gretap_link_util = {
|
|
.id = "gretap",
|
|
.maxattr = IFLA_GRE_MAX,
|
|
.parse_opt = gre_parse_opt,
|
|
.print_opt = gre_print_opt,
|
|
.print_help = gre_print_help,
|
|
};
|