1966 lines
65 KiB
C
1966 lines
65 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
|
|
#include <linux/icmpv6.h>
|
|
#include <linux/ipv6_route.h>
|
|
#include <linux/nexthop.h>
|
|
|
|
#include "alloc-util.h"
|
|
#include "event-util.h"
|
|
#include "netlink-util.h"
|
|
#include "networkd-address.h"
|
|
#include "networkd-ipv4ll.h"
|
|
#include "networkd-manager.h"
|
|
#include "networkd-network.h"
|
|
#include "networkd-nexthop.h"
|
|
#include "networkd-queue.h"
|
|
#include "networkd-route-util.h"
|
|
#include "networkd-route.h"
|
|
#include "parse-util.h"
|
|
#include "string-util.h"
|
|
#include "strv.h"
|
|
#include "vrf.h"
|
|
#include "wireguard.h"
|
|
|
|
static Route* route_detach_impl(Route *route) {
|
|
assert(route);
|
|
assert(!!route->network + !!route->manager + !!route->wireguard <= 1);
|
|
|
|
if (route->network) {
|
|
assert(route->section);
|
|
hashmap_remove(route->network->routes_by_section, route->section);
|
|
route->network = NULL;
|
|
return route;
|
|
}
|
|
|
|
if (route->manager) {
|
|
route_detach_from_nexthop(route);
|
|
set_remove(route->manager->routes, route);
|
|
route->manager = NULL;
|
|
return route;
|
|
}
|
|
|
|
if (route->wireguard) {
|
|
set_remove(route->wireguard->routes, route);
|
|
route->wireguard = NULL;
|
|
return route;
|
|
}
|
|
|
|
return NULL;
|
|
}
|
|
|
|
static void route_detach(Route *route) {
|
|
route_unref(route_detach_impl(route));
|
|
}
|
|
|
|
static Route* route_free(Route *route) {
|
|
if (!route)
|
|
return NULL;
|
|
|
|
route_detach_impl(route);
|
|
|
|
config_section_free(route->section);
|
|
route_nexthops_done(route);
|
|
route_metric_done(&route->metric);
|
|
sd_event_source_disable_unref(route->expire);
|
|
|
|
return mfree(route);
|
|
}
|
|
|
|
DEFINE_TRIVIAL_REF_UNREF_FUNC(Route, route, route_free);
|
|
|
|
static void route_hash_func(const Route *route, struct siphash *state) {
|
|
assert(route);
|
|
|
|
siphash24_compress_typesafe(route->family, state);
|
|
|
|
switch (route->family) {
|
|
case AF_INET:
|
|
/* First, the table, destination prefix, priority, and tos (dscp), are used to find routes.
|
|
* See fib_table_insert(), fib_find_node(), and fib_find_alias() in net/ipv4/fib_trie.c of the kernel. */
|
|
siphash24_compress_typesafe(route->table, state);
|
|
in_addr_hash_func(&route->dst, route->family, state);
|
|
siphash24_compress_typesafe(route->dst_prefixlen, state);
|
|
siphash24_compress_typesafe(route->priority, state);
|
|
siphash24_compress_typesafe(route->tos, state);
|
|
|
|
/* Then, protocol, scope, type, flags, prefsrc, metrics (RTAX_* attributes), and nexthops (gateways)
|
|
* are used to find routes. See fib_find_info() in net/ipv4/fib_semantics.c of the kernel. */
|
|
siphash24_compress_typesafe(route->protocol, state);
|
|
siphash24_compress_typesafe(route->scope, state);
|
|
siphash24_compress_typesafe(route->type, state);
|
|
unsigned flags = route->flags & ~RTNH_COMPARE_MASK;
|
|
siphash24_compress_typesafe(flags, state);
|
|
in_addr_hash_func(&route->prefsrc, route->family, state);
|
|
|
|
/* nexthops (id, number of nexthops, nexthop) */
|
|
route_nexthops_hash_func(route, state);
|
|
|
|
/* metrics */
|
|
route_metric_hash_func(&route->metric, state);
|
|
break;
|
|
|
|
case AF_INET6:
|
|
/* First, table and destination prefix are used for classifying routes.
|
|
* See fib6_add() and fib6_add_1() in net/ipv6/ip6_fib.c of the kernel. */
|
|
siphash24_compress_typesafe(route->table, state);
|
|
in_addr_hash_func(&route->dst, route->family, state);
|
|
siphash24_compress_typesafe(route->dst_prefixlen, state);
|
|
|
|
/* Then, source prefix is used. See fib6_add(). */
|
|
in_addr_hash_func(&route->src, route->family, state);
|
|
siphash24_compress_typesafe(route->src_prefixlen, state);
|
|
|
|
/* See fib6_add_rt2node(). */
|
|
siphash24_compress_typesafe(route->priority, state);
|
|
|
|
/* See rt6_duplicate_nexthop() in include/net/ip6_route.h of the kernel.
|
|
* Here, we hash nexthop in a similar way as the one for IPv4. */
|
|
route_nexthops_hash_func(route, state);
|
|
|
|
/* Unlike IPv4 routes, metrics are not taken into account. */
|
|
break;
|
|
|
|
default:
|
|
/* treat any other address family as AF_UNSPEC */
|
|
break;
|
|
}
|
|
}
|
|
|
|
static int route_compare_func(const Route *a, const Route *b) {
|
|
int r;
|
|
|
|
r = CMP(a->family, b->family);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
switch (a->family) {
|
|
case AF_INET:
|
|
r = CMP(a->table, b->table);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = memcmp(&a->dst, &b->dst, FAMILY_ADDRESS_SIZE(a->family));
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = CMP(a->dst_prefixlen, b->dst_prefixlen);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = CMP(a->priority, b->priority);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = CMP(a->tos, b->tos);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = CMP(a->protocol, b->protocol);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = CMP(a->scope, b->scope);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = CMP(a->type, b->type);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = CMP(a->flags & ~RTNH_COMPARE_MASK, b->flags & ~RTNH_COMPARE_MASK);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = memcmp(&a->prefsrc, &b->prefsrc, FAMILY_ADDRESS_SIZE(a->family));
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = route_nexthops_compare_func(a, b);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
return route_metric_compare_func(&a->metric, &b->metric);
|
|
|
|
case AF_INET6:
|
|
r = CMP(a->table, b->table);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = memcmp(&a->dst, &b->dst, FAMILY_ADDRESS_SIZE(a->family));
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = CMP(a->dst_prefixlen, b->dst_prefixlen);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = memcmp(&a->src, &b->src, FAMILY_ADDRESS_SIZE(a->family));
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = CMP(a->src_prefixlen, b->src_prefixlen);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = CMP(a->priority, b->priority);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
return route_nexthops_compare_func(a, b);
|
|
|
|
default:
|
|
/* treat any other address family as AF_UNSPEC */
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
DEFINE_HASH_OPS_WITH_KEY_DESTRUCTOR(
|
|
route_hash_ops,
|
|
Route,
|
|
route_hash_func,
|
|
route_compare_func,
|
|
route_detach);
|
|
|
|
DEFINE_HASH_OPS_WITH_KEY_DESTRUCTOR(
|
|
route_hash_ops_unref,
|
|
Route,
|
|
route_hash_func,
|
|
route_compare_func,
|
|
route_unref);
|
|
|
|
DEFINE_HASH_OPS_WITH_VALUE_DESTRUCTOR(
|
|
route_section_hash_ops,
|
|
ConfigSection,
|
|
config_section_hash_func,
|
|
config_section_compare_func,
|
|
Route,
|
|
route_detach);
|
|
|
|
int route_new(Route **ret) {
|
|
_cleanup_(route_unrefp) Route *route = NULL;
|
|
|
|
route = new(Route, 1);
|
|
if (!route)
|
|
return -ENOMEM;
|
|
|
|
*route = (Route) {
|
|
.n_ref = 1,
|
|
.family = AF_UNSPEC,
|
|
.scope = RT_SCOPE_UNIVERSE,
|
|
.protocol = RTPROT_UNSPEC,
|
|
.type = RTN_UNICAST,
|
|
.table = RT_TABLE_MAIN,
|
|
.lifetime_usec = USEC_INFINITY,
|
|
.gateway_onlink = -1,
|
|
};
|
|
|
|
*ret = TAKE_PTR(route);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int route_new_static(Network *network, const char *filename, unsigned section_line, Route **ret) {
|
|
_cleanup_(config_section_freep) ConfigSection *n = NULL;
|
|
_cleanup_(route_unrefp) Route *route = NULL;
|
|
int r;
|
|
|
|
assert(network);
|
|
assert(ret);
|
|
assert(filename);
|
|
assert(section_line > 0);
|
|
|
|
r = config_section_new(filename, section_line, &n);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
route = hashmap_get(network->routes_by_section, n);
|
|
if (route) {
|
|
*ret = TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
if (hashmap_size(network->routes_by_section) >= routes_max())
|
|
return -E2BIG;
|
|
|
|
r = route_new(&route);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
route->protocol = RTPROT_STATIC;
|
|
route->network = network;
|
|
route->section = TAKE_PTR(n);
|
|
route->source = NETWORK_CONFIG_SOURCE_STATIC;
|
|
|
|
r = hashmap_ensure_put(&network->routes_by_section, &route_section_hash_ops, route->section, route);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
*ret = TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
static int route_attach(Manager *manager, Route *route) {
|
|
int r;
|
|
|
|
assert(manager);
|
|
assert(route);
|
|
assert(!route->network);
|
|
assert(!route->wireguard);
|
|
|
|
r = set_ensure_put(&manager->routes, &route_hash_ops, route);
|
|
if (r < 0)
|
|
return r;
|
|
if (r == 0)
|
|
return -EEXIST;
|
|
|
|
route->manager = manager;
|
|
return 0;
|
|
}
|
|
|
|
int route_get(Manager *manager, const Route *route, Route **ret) {
|
|
Route *existing;
|
|
|
|
assert(manager);
|
|
assert(route);
|
|
|
|
existing = set_get(manager->routes, route);
|
|
if (!existing)
|
|
return -ENOENT;
|
|
|
|
if (ret)
|
|
*ret = existing;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int route_get_link(Manager *manager, const Route *route, Link **ret) {
|
|
int r;
|
|
|
|
assert(manager);
|
|
assert(route);
|
|
|
|
if (route->nexthop_id != 0) {
|
|
NextHop *nh;
|
|
|
|
r = nexthop_get_by_id(manager, route->nexthop_id, &nh);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
return link_get_by_index(manager, nh->ifindex, ret);
|
|
}
|
|
|
|
return route_nexthop_get_link(manager, &route->nexthop, ret);
|
|
}
|
|
|
|
int route_get_request(Manager *manager, const Route *route, Request **ret) {
|
|
Request *req;
|
|
|
|
assert(manager);
|
|
assert(route);
|
|
|
|
req = ordered_set_get(manager->request_queue,
|
|
&(const Request) {
|
|
.type = REQUEST_TYPE_ROUTE,
|
|
.userdata = (void*) route,
|
|
.hash_func = (hash_func_t) route_hash_func,
|
|
.compare_func = (compare_func_t) route_compare_func,
|
|
});
|
|
if (!req)
|
|
return -ENOENT;
|
|
|
|
if (ret)
|
|
*ret = req;
|
|
return 0;
|
|
}
|
|
|
|
int route_dup(const Route *src, const RouteNextHop *nh, Route **ret) {
|
|
_cleanup_(route_unrefp) Route *dest = NULL;
|
|
int r;
|
|
|
|
assert(src);
|
|
assert(ret);
|
|
|
|
dest = newdup(Route, src, 1);
|
|
if (!dest)
|
|
return -ENOMEM;
|
|
|
|
/* Unset number of reference and all pointers */
|
|
dest->n_ref = 1;
|
|
dest->manager = NULL;
|
|
dest->network = NULL;
|
|
dest->wireguard = NULL;
|
|
dest->section = NULL;
|
|
dest->nexthop = ROUTE_NEXTHOP_NULL;
|
|
dest->nexthops = NULL;
|
|
dest->metric = ROUTE_METRIC_NULL;
|
|
dest->expire = NULL;
|
|
|
|
r = route_nexthops_copy(src, nh, dest);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = route_metric_copy(&src->metric, &dest->metric);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
*ret = TAKE_PTR(dest);
|
|
return 0;
|
|
}
|
|
|
|
static void log_route_debug(const Route *route, const char *str, Manager *manager) {
|
|
_cleanup_free_ char *state = NULL, *nexthop = NULL, *prefsrc = NULL,
|
|
*table = NULL, *scope = NULL, *proto = NULL, *flags = NULL;
|
|
const char *dst, *src;
|
|
Link *link = NULL;
|
|
|
|
assert(route);
|
|
assert(str);
|
|
assert(manager);
|
|
|
|
if (!DEBUG_LOGGING)
|
|
return;
|
|
|
|
(void) route_get_link(manager, route, &link);
|
|
|
|
(void) network_config_state_to_string_alloc(route->state, &state);
|
|
|
|
dst = in_addr_is_set(route->family, &route->dst) || route->dst_prefixlen > 0 ?
|
|
IN_ADDR_PREFIX_TO_STRING(route->family, &route->dst, route->dst_prefixlen) : NULL;
|
|
src = in_addr_is_set(route->family, &route->src) || route->src_prefixlen > 0 ?
|
|
IN_ADDR_PREFIX_TO_STRING(route->family, &route->src, route->src_prefixlen) : NULL;
|
|
|
|
(void) route_nexthops_to_string(route, &nexthop);
|
|
|
|
if (in_addr_is_set(route->family, &route->prefsrc))
|
|
(void) in_addr_to_string(route->family, &route->prefsrc, &prefsrc);
|
|
(void) route_scope_to_string_alloc(route->scope, &scope);
|
|
(void) manager_get_route_table_to_string(manager, route->table, /* append_num = */ true, &table);
|
|
(void) route_protocol_full_to_string_alloc(route->protocol, &proto);
|
|
(void) route_flags_to_string_alloc(route->flags, &flags);
|
|
|
|
log_link_debug(link,
|
|
"%s %s route (%s): dst: %s, src: %s, %s, prefsrc: %s, "
|
|
"table: %s, priority: %"PRIu32", "
|
|
"proto: %s, scope: %s, type: %s, flags: %s",
|
|
str, strna(network_config_source_to_string(route->source)), strna(state),
|
|
strna(dst), strna(src), strna(nexthop), strna(prefsrc),
|
|
strna(table), route->priority,
|
|
strna(proto), strna(scope), strna(route_type_to_string(route->type)), strna(flags));
|
|
}
|
|
|
|
static int route_set_netlink_message(const Route *route, sd_netlink_message *m) {
|
|
int r;
|
|
|
|
assert(route);
|
|
assert(m);
|
|
|
|
/* rtmsg header (and relevant attributes) */
|
|
if (route->dst_prefixlen > 0) {
|
|
r = netlink_message_append_in_addr_union(m, RTA_DST, route->family, &route->dst);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_rtnl_message_route_set_dst_prefixlen(m, route->dst_prefixlen);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
if (route->src_prefixlen > 0) {
|
|
r = netlink_message_append_in_addr_union(m, RTA_SRC, route->family, &route->src);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_rtnl_message_route_set_src_prefixlen(m, route->src_prefixlen);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
r = sd_rtnl_message_route_set_tos(m, route->tos);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_rtnl_message_route_set_scope(m, route->scope);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_rtnl_message_route_set_type(m, route->type);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = sd_rtnl_message_route_set_flags(m, route->flags & ~RTNH_COMPARE_MASK);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
/* attributes */
|
|
r = sd_netlink_message_append_u32(m, RTA_PRIORITY, route->priority);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (in_addr_is_set(route->family, &route->prefsrc)) {
|
|
r = netlink_message_append_in_addr_union(m, RTA_PREFSRC, route->family, &route->prefsrc);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
if (route->table < 256) {
|
|
r = sd_rtnl_message_route_set_table(m, route->table);
|
|
if (r < 0)
|
|
return r;
|
|
} else {
|
|
r = sd_rtnl_message_route_set_table(m, RT_TABLE_UNSPEC);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
/* Table attribute to allow more than 256. */
|
|
r = sd_netlink_message_append_u32(m, RTA_TABLE, route->table);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
r = sd_netlink_message_append_u8(m, RTA_PREF, route->pref);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
/* nexthops */
|
|
r = route_nexthops_set_netlink_message(route, m);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
/* metrics */
|
|
r = route_metric_set_netlink_message(&route->metric, m);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int route_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, RemoveRequest *rreq) {
|
|
int r;
|
|
|
|
assert(m);
|
|
assert(rreq);
|
|
|
|
Manager *manager = ASSERT_PTR(rreq->manager);
|
|
Route *route = ASSERT_PTR(rreq->userdata);
|
|
|
|
r = sd_netlink_message_get_errno(m);
|
|
if (r < 0) {
|
|
log_message_full_errno(m,
|
|
(r == -ESRCH || /* the route is already removed? */
|
|
(r == -EINVAL && route->nexthop_id != 0) || /* The nexthop is already removed? */
|
|
!route->manager) ? /* already detached? */
|
|
LOG_DEBUG : LOG_WARNING,
|
|
r, "Could not drop route, ignoring");
|
|
|
|
if (route->manager) {
|
|
/* If the route cannot be removed, then assume the route is already removed. */
|
|
log_route_debug(route, "Forgetting", manager);
|
|
|
|
Request *req;
|
|
if (route_get_request(manager, route, &req) >= 0)
|
|
route_enter_removed(req->userdata);
|
|
|
|
route_detach(route);
|
|
}
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
int route_remove(Route *route, Manager *manager) {
|
|
_cleanup_(sd_netlink_message_unrefp) sd_netlink_message *m = NULL;
|
|
Link *link = NULL;
|
|
int r;
|
|
|
|
assert(route);
|
|
assert(manager);
|
|
|
|
/* If the route is remembered, then use the remembered object. */
|
|
(void) route_get(manager, route, &route);
|
|
|
|
log_route_debug(route, "Removing", manager);
|
|
|
|
/* For logging. */
|
|
(void) route_get_link(manager, route, &link);
|
|
|
|
r = sd_rtnl_message_new_route(manager->rtnl, &m, RTM_DELROUTE, route->family, route->protocol);
|
|
if (r < 0)
|
|
return log_link_warning_errno(link, r, "Could not create netlink message: %m");
|
|
|
|
r = route_set_netlink_message(route, m);
|
|
if (r < 0)
|
|
return log_link_warning_errno(link, r, "Could not fill netlink message: %m");
|
|
|
|
r = manager_remove_request_add(manager, route, route, manager->rtnl, m, route_remove_handler);
|
|
if (r < 0)
|
|
return log_link_warning_errno(link, r, "Could not queue rtnetlink message: %m");
|
|
|
|
route_enter_removing(route);
|
|
return 0;
|
|
}
|
|
|
|
int route_remove_and_cancel(Route *route, Manager *manager) {
|
|
_cleanup_(request_unrefp) Request *req = NULL;
|
|
bool waiting = false;
|
|
|
|
assert(route);
|
|
assert(manager);
|
|
|
|
/* If the route is remembered by the manager, then use the remembered object. */
|
|
(void) route_get(manager, route, &route);
|
|
|
|
/* Cancel the request for the route. If the request is already called but we have not received the
|
|
* notification about the request, then explicitly remove the route. */
|
|
if (route_get_request(manager, route, &req) >= 0) {
|
|
request_ref(req); /* avoid the request freed by request_detach() */
|
|
waiting = req->waiting_reply;
|
|
request_detach(req);
|
|
route_cancel_requesting(route);
|
|
}
|
|
|
|
/* If we know that the route will come or already exists, remove it. */
|
|
if (waiting || (route->manager && route_exists(route)))
|
|
return route_remove(route, manager);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int route_expire_handler(sd_event_source *s, uint64_t usec, void *userdata) {
|
|
Route *route = ASSERT_PTR(userdata);
|
|
int r;
|
|
|
|
if (!route->manager)
|
|
return 0; /* already detached. */
|
|
|
|
r = route_remove(route, route->manager);
|
|
if (r < 0) {
|
|
Link *link = NULL;
|
|
(void) route_get_link(route->manager, route, &link);
|
|
log_link_warning_errno(link, r, "Could not remove route: %m");
|
|
if (link)
|
|
link_enter_failed(link);
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
static int route_setup_timer(Route *route, const struct rta_cacheinfo *cacheinfo) {
|
|
int r;
|
|
|
|
assert(route);
|
|
|
|
if (cacheinfo && cacheinfo->rta_expires != 0)
|
|
route->expiration_managed_by_kernel = true;
|
|
|
|
if (route->lifetime_usec == USEC_INFINITY || /* We do not request expiration for the route. */
|
|
route->expiration_managed_by_kernel) { /* We have received nonzero expiration previously. The expiration is managed by the kernel. */
|
|
route->expire = sd_event_source_disable_unref(route->expire);
|
|
return 0;
|
|
}
|
|
|
|
Manager *manager = ASSERT_PTR(route->manager);
|
|
r = event_reset_time(manager->event, &route->expire, CLOCK_BOOTTIME,
|
|
route->lifetime_usec, 0, route_expire_handler, route, 0, "route-expiration", true);
|
|
if (r < 0) {
|
|
Link *link = NULL;
|
|
(void) route_get_link(manager, route, &link);
|
|
return log_link_warning_errno(link, r, "Failed to configure expiration timer for route, ignoring: %m");
|
|
}
|
|
|
|
log_route_debug(route, "Configured expiration timer for", manager);
|
|
return 1;
|
|
}
|
|
|
|
int route_configure_handler_internal(sd_netlink *rtnl, sd_netlink_message *m, Link *link, Route *route, const char *error_msg) {
|
|
int r;
|
|
|
|
assert(m);
|
|
assert(link);
|
|
assert(link->manager);
|
|
assert(route);
|
|
assert(error_msg);
|
|
|
|
r = sd_netlink_message_get_errno(m);
|
|
if (r == -EEXIST) {
|
|
Route *existing;
|
|
|
|
if (route_get(link->manager, route, &existing) >= 0) {
|
|
/* When re-configuring an existing route, kernel does not send RTM_NEWROUTE
|
|
* notification, so we need to update the timer here. */
|
|
existing->lifetime_usec = route->lifetime_usec;
|
|
(void) route_setup_timer(existing, NULL);
|
|
|
|
/* This may be a bug in the kernel, but the MTU of an IPv6 route can be updated only
|
|
* when the route has an expiration timer managed by the kernel (not by us).
|
|
* See fib6_add_rt2node() in net/ipv6/ip6_fib.c of the kernel. */
|
|
if (existing->family == AF_INET6 &&
|
|
existing->expiration_managed_by_kernel) {
|
|
r = route_metric_set(&existing->metric, RTAX_MTU, route_metric_get(&route->metric, RTAX_MTU));
|
|
if (r < 0) {
|
|
log_oom();
|
|
link_enter_failed(link);
|
|
return 0;
|
|
}
|
|
}
|
|
}
|
|
|
|
} else if (r < 0) {
|
|
log_link_message_warning_errno(link, m, r, error_msg);
|
|
link_enter_failed(link);
|
|
return 0;
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
static int route_configure(const Route *route, uint32_t lifetime_sec, Link *link, Request *req) {
|
|
_cleanup_(sd_netlink_message_unrefp) sd_netlink_message *m = NULL;
|
|
int r;
|
|
|
|
assert(route);
|
|
assert(link);
|
|
assert(link->manager);
|
|
assert(req);
|
|
|
|
log_route_debug(route, "Configuring", link->manager);
|
|
|
|
r = sd_rtnl_message_new_route(link->manager->rtnl, &m, RTM_NEWROUTE, route->family, route->protocol);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = route_set_netlink_message(route, m);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (lifetime_sec != UINT32_MAX) {
|
|
r = sd_netlink_message_append_u32(m, RTA_EXPIRES, lifetime_sec);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
return request_call_netlink_async(link->manager->rtnl, m, req);
|
|
}
|
|
|
|
static int route_requeue_request(Request *req, Link *link, const Route *route) {
|
|
_unused_ _cleanup_(request_unrefp) Request *req_unref = NULL;
|
|
_cleanup_(route_unrefp) Route *tmp = NULL;
|
|
int r;
|
|
|
|
assert(req);
|
|
assert(link);
|
|
assert(link->manager);
|
|
assert(route);
|
|
|
|
/* It is not possible to adjust the Route object owned by Request, as it is used as a key to manage
|
|
* Request objects in the queue. Hence, we need to re-request with the updated Route object. */
|
|
|
|
if (!route_nexthops_needs_adjust(route))
|
|
return 0; /* The Route object does not need the adjustment. Continue with it. */
|
|
|
|
r = route_dup(route, NULL, &tmp);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = route_adjust_nexthops(tmp, link);
|
|
if (r <= 0)
|
|
return r;
|
|
|
|
if (route_compare_func(route, tmp) == 0 && route->type == tmp->type)
|
|
return 0; /* No effective change?? That's OK. */
|
|
|
|
/* Avoid the request to be freed by request_detach(). */
|
|
req_unref = request_ref(req);
|
|
|
|
/* Detach the request from the queue, to make not the new request is deduped.
|
|
* Why this is necessary? IPv6 routes with different type may be handled as the same,
|
|
* As commented in route_adjust_nexthops(), we need to configure the adjusted type,
|
|
* otherwise we cannot remove the route on reconfigure or so. If we request the new Route object
|
|
* without detaching the current request, the new request is deduped, and the route is configured
|
|
* with unmodified type. */
|
|
request_detach(req);
|
|
|
|
/* Request the route with the adjusted Route object combined with the same other parameters. */
|
|
r = link_requeue_request(link, req, tmp, NULL);
|
|
if (r < 0)
|
|
return r;
|
|
if (r == 0)
|
|
return 1; /* Already queued?? That's OK. Maybe, [Route] section is effectively duplicated. */
|
|
|
|
TAKE_PTR(tmp);
|
|
return 1; /* New request is queued. Finish to process this request. */
|
|
}
|
|
|
|
static int route_is_ready_to_configure(const Route *route, Link *link) {
|
|
int r;
|
|
|
|
assert(route);
|
|
assert(link);
|
|
|
|
if (!link_is_ready_to_configure(link, /* allow_unmanaged = */ false))
|
|
return false;
|
|
|
|
if (in_addr_is_set(route->family, &route->prefsrc) > 0) {
|
|
r = manager_has_address(link->manager, route->family, &route->prefsrc);
|
|
if (r <= 0)
|
|
return r;
|
|
}
|
|
|
|
return route_nexthops_is_ready_to_configure(route, link->manager);
|
|
}
|
|
|
|
static int route_process_request(Request *req, Link *link, Route *route) {
|
|
Route *existing;
|
|
int r;
|
|
|
|
assert(req);
|
|
assert(link);
|
|
assert(link->manager);
|
|
assert(route);
|
|
|
|
r = route_is_ready_to_configure(route, link);
|
|
if (r < 0)
|
|
return log_link_warning_errno(link, r, "Failed to check if route is ready to configure: %m");
|
|
if (r == 0)
|
|
return 0;
|
|
|
|
usec_t now_usec;
|
|
assert_se(sd_event_now(link->manager->event, CLOCK_BOOTTIME, &now_usec) >= 0);
|
|
uint32_t sec = usec_to_sec(route->lifetime_usec, now_usec);
|
|
if (sec == 0) {
|
|
log_link_debug(link, "Refuse to configure %s route with zero lifetime.",
|
|
network_config_source_to_string(route->source));
|
|
|
|
route_cancel_requesting(route);
|
|
if (route_get(link->manager, route, &existing) >= 0)
|
|
route_cancel_requesting(existing);
|
|
return 1;
|
|
}
|
|
|
|
r = route_requeue_request(req, link, route);
|
|
if (r != 0)
|
|
return r;
|
|
|
|
r = route_configure(route, sec, link, req);
|
|
if (r < 0)
|
|
return log_link_warning_errno(link, r, "Failed to configure route: %m");
|
|
|
|
route_enter_configuring(route);
|
|
if (route_get(link->manager, route, &existing) >= 0)
|
|
route_enter_configuring(existing);
|
|
return 1;
|
|
}
|
|
|
|
static int link_request_route_one(
|
|
Link *link,
|
|
const Route *route,
|
|
const RouteNextHop *nh,
|
|
unsigned *message_counter,
|
|
route_netlink_handler_t netlink_handler) {
|
|
|
|
_cleanup_(route_unrefp) Route *tmp = NULL;
|
|
Route *existing = NULL;
|
|
int r;
|
|
|
|
assert(link);
|
|
assert(link->manager);
|
|
assert(route);
|
|
|
|
r = route_dup(route, nh, &tmp);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = route_adjust_nexthops(tmp, link);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (route_get(link->manager, tmp, &existing) >= 0)
|
|
/* Copy state for logging below. */
|
|
tmp->state = existing->state;
|
|
|
|
log_route_debug(tmp, "Requesting", link->manager);
|
|
r = link_queue_request_safe(link, REQUEST_TYPE_ROUTE,
|
|
tmp,
|
|
route_unref,
|
|
route_hash_func,
|
|
route_compare_func,
|
|
route_process_request,
|
|
message_counter,
|
|
netlink_handler,
|
|
NULL);
|
|
if (r <= 0)
|
|
return r;
|
|
|
|
route_enter_requesting(tmp);
|
|
if (existing)
|
|
route_enter_requesting(existing);
|
|
|
|
TAKE_PTR(tmp);
|
|
return 1;
|
|
}
|
|
|
|
int link_request_route(
|
|
Link *link,
|
|
const Route *route,
|
|
unsigned *message_counter,
|
|
route_netlink_handler_t netlink_handler) {
|
|
|
|
int r;
|
|
|
|
assert(link);
|
|
assert(link->manager);
|
|
assert(route);
|
|
assert(route->source != NETWORK_CONFIG_SOURCE_FOREIGN);
|
|
|
|
if (route->family == AF_INET || route_type_is_reject(route) || ordered_set_isempty(route->nexthops))
|
|
return link_request_route_one(link, route, NULL, message_counter, netlink_handler);
|
|
|
|
RouteNextHop *nh;
|
|
ORDERED_SET_FOREACH(nh, route->nexthops) {
|
|
r = link_request_route_one(link, route, nh, message_counter, netlink_handler);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int static_route_handler(sd_netlink *rtnl, sd_netlink_message *m, Request *req, Link *link, Route *route) {
|
|
int r;
|
|
|
|
assert(link);
|
|
|
|
r = route_configure_handler_internal(rtnl, m, link, route, "Could not set route");
|
|
if (r <= 0)
|
|
return r;
|
|
|
|
if (link->static_route_messages == 0) {
|
|
log_link_debug(link, "Routes set");
|
|
link->static_routes_configured = true;
|
|
link_check_ready(link);
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
static int link_request_wireguard_routes(Link *link, bool only_ipv4) {
|
|
NetDev *netdev;
|
|
Route *route;
|
|
int r;
|
|
|
|
assert(link);
|
|
|
|
if (!streq_ptr(link->kind, "wireguard"))
|
|
return 0;
|
|
|
|
if (netdev_get(link->manager, link->ifname, &netdev) < 0)
|
|
return 0;
|
|
|
|
Wireguard *w = WIREGUARD(netdev);
|
|
|
|
SET_FOREACH(route, w->routes) {
|
|
if (only_ipv4 && route->family != AF_INET)
|
|
continue;
|
|
|
|
r = link_request_route(link, route, &link->static_route_messages, static_route_handler);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int link_request_static_routes(Link *link, bool only_ipv4) {
|
|
Route *route;
|
|
int r;
|
|
|
|
assert(link);
|
|
assert(link->network);
|
|
|
|
link->static_routes_configured = false;
|
|
|
|
HASHMAP_FOREACH(route, link->network->routes_by_section) {
|
|
if (route->gateway_from_dhcp_or_ra)
|
|
continue;
|
|
|
|
if (only_ipv4 && route->family != AF_INET)
|
|
continue;
|
|
|
|
r = link_request_route(link, route, &link->static_route_messages, static_route_handler);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
r = link_request_wireguard_routes(link, only_ipv4);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (link->static_route_messages == 0) {
|
|
link->static_routes_configured = true;
|
|
link_check_ready(link);
|
|
} else {
|
|
log_link_debug(link, "Requesting routes");
|
|
link_set_state(link, LINK_STATE_CONFIGURING);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int process_route_one(
|
|
Manager *manager,
|
|
uint16_t type,
|
|
Route *tmp,
|
|
const struct rta_cacheinfo *cacheinfo) {
|
|
|
|
Request *req = NULL;
|
|
Route *route = NULL;
|
|
Link *link = NULL;
|
|
bool is_new = false, update_dhcp4;
|
|
int r;
|
|
|
|
assert(manager);
|
|
assert(tmp);
|
|
assert(IN_SET(type, RTM_NEWROUTE, RTM_DELROUTE));
|
|
|
|
(void) route_get(manager, tmp, &route);
|
|
(void) route_get_request(manager, tmp, &req);
|
|
(void) route_get_link(manager, tmp, &link);
|
|
|
|
update_dhcp4 = link && tmp->family == AF_INET6 && tmp->dst_prefixlen == 0;
|
|
|
|
switch (type) {
|
|
case RTM_NEWROUTE:
|
|
if (!route) {
|
|
if (!manager->manage_foreign_routes && !(req && req->waiting_reply)) {
|
|
route_enter_configured(tmp);
|
|
log_route_debug(tmp, "Ignoring received", manager);
|
|
return 0;
|
|
}
|
|
|
|
/* If we do not know the route, then save it. */
|
|
r = route_attach(manager, tmp);
|
|
if (r < 0) {
|
|
log_link_warning_errno(link, r, "Failed to remember foreign route, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
route = route_ref(tmp);
|
|
is_new = true;
|
|
|
|
} else
|
|
/* Update remembered route with the received notification. */
|
|
route->nexthop.weight = tmp->nexthop.weight;
|
|
|
|
/* Also update information that cannot be obtained through netlink notification. */
|
|
if (req && req->waiting_reply) {
|
|
Route *rt = ASSERT_PTR(req->userdata);
|
|
|
|
route->source = rt->source;
|
|
route->provider = rt->provider;
|
|
route->lifetime_usec = rt->lifetime_usec;
|
|
}
|
|
|
|
route_enter_configured(route);
|
|
log_route_debug(route, is_new ? "Received new" : "Received remembered", manager);
|
|
|
|
(void) route_setup_timer(route, cacheinfo);
|
|
|
|
break;
|
|
|
|
case RTM_DELROUTE:
|
|
if (route) {
|
|
route_enter_removed(route);
|
|
log_route_debug(route, "Forgetting removed", manager);
|
|
route_detach(route);
|
|
} else
|
|
log_route_debug(tmp,
|
|
manager->manage_foreign_routes ? "Kernel removed unknown" : "Ignoring received",
|
|
manager);
|
|
|
|
if (req)
|
|
route_enter_removed(req->userdata);
|
|
|
|
break;
|
|
|
|
default:
|
|
assert_not_reached();
|
|
}
|
|
|
|
if (update_dhcp4) {
|
|
r = dhcp4_update_ipv6_connectivity(link);
|
|
if (r < 0) {
|
|
log_link_warning_errno(link, r, "Failed to notify IPv6 connectivity to DHCPv4 client: %m");
|
|
link_enter_failed(link);
|
|
}
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
int manager_rtnl_process_route(sd_netlink *rtnl, sd_netlink_message *message, Manager *m) {
|
|
_cleanup_(route_unrefp) Route *tmp = NULL;
|
|
int r;
|
|
|
|
assert(rtnl);
|
|
assert(message);
|
|
assert(m);
|
|
|
|
if (sd_netlink_message_is_error(message)) {
|
|
r = sd_netlink_message_get_errno(message);
|
|
if (r < 0)
|
|
log_message_warning_errno(message, r, "rtnl: failed to receive route message, ignoring");
|
|
|
|
return 0;
|
|
}
|
|
|
|
uint16_t type;
|
|
r = sd_netlink_message_get_type(message, &type);
|
|
if (r < 0) {
|
|
log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
|
|
return 0;
|
|
} else if (!IN_SET(type, RTM_NEWROUTE, RTM_DELROUTE)) {
|
|
log_warning("rtnl: received unexpected message type %u when processing route, ignoring.", type);
|
|
return 0;
|
|
}
|
|
|
|
r = route_new(&tmp);
|
|
if (r < 0)
|
|
return log_oom();
|
|
|
|
/* rtmsg header */
|
|
r = sd_rtnl_message_route_get_family(message, &tmp->family);
|
|
if (r < 0) {
|
|
log_warning_errno(r, "rtnl: received route message without family, ignoring: %m");
|
|
return 0;
|
|
} else if (!IN_SET(tmp->family, AF_INET, AF_INET6)) {
|
|
log_debug("rtnl: received route message with invalid family '%i', ignoring.", tmp->family);
|
|
return 0;
|
|
}
|
|
|
|
r = sd_rtnl_message_route_get_dst_prefixlen(message, &tmp->dst_prefixlen);
|
|
if (r < 0) {
|
|
log_warning_errno(r, "rtnl: received route message with invalid destination prefixlen, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = sd_rtnl_message_route_get_src_prefixlen(message, &tmp->src_prefixlen);
|
|
if (r < 0) {
|
|
log_warning_errno(r, "rtnl: received route message with invalid source prefixlen, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = sd_rtnl_message_route_get_tos(message, &tmp->tos);
|
|
if (r < 0) {
|
|
log_warning_errno(r, "rtnl: received route message with invalid tos, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = sd_rtnl_message_route_get_protocol(message, &tmp->protocol);
|
|
if (r < 0) {
|
|
log_warning_errno(r, "rtnl: received route message without route protocol, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = sd_rtnl_message_route_get_scope(message, &tmp->scope);
|
|
if (r < 0) {
|
|
log_warning_errno(r, "rtnl: received route message with invalid scope, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = sd_rtnl_message_route_get_type(message, &tmp->type);
|
|
if (r < 0) {
|
|
log_warning_errno(r, "rtnl: received route message with invalid type, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = sd_rtnl_message_route_get_flags(message, &tmp->flags);
|
|
if (r < 0) {
|
|
log_warning_errno(r, "rtnl: received route message without route flags, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
/* attributes */
|
|
r = netlink_message_read_in_addr_union(message, RTA_DST, tmp->family, &tmp->dst);
|
|
if (r < 0 && r != -ENODATA) {
|
|
log_warning_errno(r, "rtnl: received route message without valid destination, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = netlink_message_read_in_addr_union(message, RTA_SRC, tmp->family, &tmp->src);
|
|
if (r < 0 && r != -ENODATA) {
|
|
log_warning_errno(r, "rtnl: received route message without valid source, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = sd_netlink_message_read_u32(message, RTA_PRIORITY, &tmp->priority);
|
|
if (r < 0 && r != -ENODATA) {
|
|
log_warning_errno(r, "rtnl: received route message with invalid priority, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = netlink_message_read_in_addr_union(message, RTA_PREFSRC, tmp->family, &tmp->prefsrc);
|
|
if (r < 0 && r != -ENODATA) {
|
|
log_warning_errno(r, "rtnl: received route message without valid preferred source, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = sd_netlink_message_read_u32(message, RTA_TABLE, &tmp->table);
|
|
if (r == -ENODATA) {
|
|
unsigned char table;
|
|
|
|
r = sd_rtnl_message_route_get_table(message, &table);
|
|
if (r >= 0)
|
|
tmp->table = table;
|
|
}
|
|
if (r < 0) {
|
|
log_warning_errno(r, "rtnl: received route message with invalid table, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = sd_netlink_message_read_u8(message, RTA_PREF, &tmp->pref);
|
|
if (r < 0 && r != -ENODATA) {
|
|
log_warning_errno(r, "rtnl: received route message with invalid preference, ignoring: %m");
|
|
return 0;
|
|
}
|
|
|
|
/* nexthops */
|
|
if (route_nexthops_read_netlink_message(tmp, message) < 0)
|
|
return 0;
|
|
|
|
/* metrics */
|
|
if (route_metric_read_netlink_message(&tmp->metric, message) < 0)
|
|
return 0;
|
|
|
|
bool has_cacheinfo;
|
|
struct rta_cacheinfo cacheinfo;
|
|
r = sd_netlink_message_read(message, RTA_CACHEINFO, sizeof(cacheinfo), &cacheinfo);
|
|
if (r < 0 && r != -ENODATA) {
|
|
log_warning_errno(r, "rtnl: failed to read RTA_CACHEINFO attribute, ignoring: %m");
|
|
return 0;
|
|
}
|
|
has_cacheinfo = r >= 0;
|
|
|
|
if (tmp->family == AF_INET || ordered_set_isempty(tmp->nexthops))
|
|
return process_route_one(m, type, tmp, has_cacheinfo ? &cacheinfo : NULL);
|
|
|
|
RouteNextHop *nh;
|
|
ORDERED_SET_FOREACH(nh, tmp->nexthops) {
|
|
_cleanup_(route_unrefp) Route *dup = NULL;
|
|
|
|
r = route_dup(tmp, nh, &dup);
|
|
if (r < 0)
|
|
return log_oom();
|
|
|
|
r = process_route_one(m, type, dup, has_cacheinfo ? &cacheinfo : NULL);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
void manager_mark_routes(Manager *manager, Link *link, NetworkConfigSource source) {
|
|
Route *route;
|
|
|
|
assert(manager);
|
|
|
|
SET_FOREACH(route, manager->routes) {
|
|
if (route->source != source)
|
|
continue;
|
|
|
|
if (link) {
|
|
Link *route_link;
|
|
|
|
if (route_get_link(manager, route, &route_link) < 0)
|
|
continue;
|
|
if (route_link != link)
|
|
continue;
|
|
}
|
|
|
|
route_mark(route);
|
|
}
|
|
}
|
|
|
|
static bool route_by_kernel(const Route *route) {
|
|
assert(route);
|
|
|
|
if (route->protocol == RTPROT_KERNEL)
|
|
return true;
|
|
|
|
/* The kernels older than a826b04303a40d52439aa141035fca5654ccaccd (v5.11) create the IPv6
|
|
* multicast with RTPROT_BOOT. Do not touch it. */
|
|
if (route->protocol == RTPROT_BOOT &&
|
|
route->family == AF_INET6 &&
|
|
route->dst_prefixlen == 8 &&
|
|
in6_addr_equal(&route->dst.in6, & (struct in6_addr) {{{ 0xff,0,0,0, 0,0,0,0, 0,0,0,0, 0,0,0,0 }}}))
|
|
return true;
|
|
|
|
return false;
|
|
}
|
|
|
|
bool route_can_update(const Route *existing, const Route *requesting) {
|
|
assert(existing);
|
|
assert(requesting);
|
|
|
|
if (route_compare_func(existing, requesting) != 0)
|
|
return false;
|
|
|
|
switch (existing->family) {
|
|
case AF_INET:
|
|
if (existing->nexthop.weight != requesting->nexthop.weight)
|
|
return false;
|
|
return true;
|
|
|
|
case AF_INET6:
|
|
if (existing->protocol != requesting->protocol)
|
|
return false;
|
|
if (existing->type != requesting->type)
|
|
return false;
|
|
if (existing->flags != requesting->flags)
|
|
return false;
|
|
if (!in6_addr_equal(&existing->prefsrc.in6, &requesting->prefsrc.in6))
|
|
return false;
|
|
if (existing->pref != requesting->pref)
|
|
return false;
|
|
if (existing->expiration_managed_by_kernel && requesting->lifetime_usec != USEC_INFINITY)
|
|
return false; /* We cannot disable expiration timer in the kernel. */
|
|
if (!route_metric_can_update(&existing->metric, &requesting->metric, existing->expiration_managed_by_kernel))
|
|
return false;
|
|
if (existing->nexthop.weight != requesting->nexthop.weight)
|
|
return false;
|
|
return true;
|
|
|
|
default:
|
|
assert_not_reached();
|
|
}
|
|
}
|
|
|
|
static int link_unmark_route(Link *link, const Route *route, const RouteNextHop *nh) {
|
|
_cleanup_(route_unrefp) Route *tmp = NULL;
|
|
Route *existing;
|
|
int r;
|
|
|
|
assert(link);
|
|
assert(route);
|
|
|
|
r = route_dup(route, nh, &tmp);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = route_adjust_nexthops(tmp, link);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (route_get(link->manager, tmp, &existing) < 0)
|
|
return 0;
|
|
|
|
if (!route_can_update(existing, tmp))
|
|
return 0;
|
|
|
|
route_unmark(existing);
|
|
return 1;
|
|
}
|
|
|
|
static int link_mark_routes(Link *link, bool foreign) {
|
|
Route *route;
|
|
Link *other;
|
|
int r;
|
|
|
|
assert(link);
|
|
assert(link->manager);
|
|
|
|
/* First, mark all routes. */
|
|
SET_FOREACH(route, link->manager->routes) {
|
|
/* Do not touch routes managed by the kernel. */
|
|
if (route_by_kernel(route))
|
|
continue;
|
|
|
|
/* When 'foreign' is true, mark only foreign routes, and vice versa.
|
|
* Note, do not touch dynamic routes. They will removed by when e.g. lease is lost. */
|
|
if (route->source != (foreign ? NETWORK_CONFIG_SOURCE_FOREIGN : NETWORK_CONFIG_SOURCE_STATIC))
|
|
continue;
|
|
|
|
/* Ignore routes not assigned yet or already removed. */
|
|
if (!route_exists(route))
|
|
continue;
|
|
|
|
if (link->network) {
|
|
if (route->protocol == RTPROT_STATIC &&
|
|
FLAGS_SET(link->network->keep_configuration, KEEP_CONFIGURATION_STATIC))
|
|
continue;
|
|
|
|
if (route->protocol == RTPROT_DHCP &&
|
|
FLAGS_SET(link->network->keep_configuration, KEEP_CONFIGURATION_DHCP))
|
|
continue;
|
|
}
|
|
|
|
/* When we mark foreign routes, do not mark routes assigned to other interfaces.
|
|
* Otherwise, routes assigned to unmanaged interfaces will be dropped.
|
|
* Note, route_get_link() does not provide assigned link for routes with an unreachable type
|
|
* or IPv4 multipath routes. So, the current implementation does not support managing such
|
|
* routes by other daemon or so, unless ManageForeignRoutes=no. */
|
|
if (foreign) {
|
|
Link *route_link;
|
|
|
|
if (route_get_link(link->manager, route, &route_link) >= 0 && route_link != link)
|
|
continue;
|
|
}
|
|
|
|
route_mark(route);
|
|
}
|
|
|
|
/* Then, unmark all routes requested by active links. */
|
|
HASHMAP_FOREACH(other, link->manager->links_by_index) {
|
|
if (!foreign && other == link)
|
|
continue;
|
|
|
|
if (!IN_SET(other->state, LINK_STATE_CONFIGURING, LINK_STATE_CONFIGURED))
|
|
continue;
|
|
|
|
HASHMAP_FOREACH(route, other->network->routes_by_section) {
|
|
if (route->family == AF_INET || ordered_set_isempty(route->nexthops)) {
|
|
r = link_unmark_route(other, route, NULL);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
} else {
|
|
RouteNextHop *nh;
|
|
ORDERED_SET_FOREACH(nh, route->nexthops) {
|
|
r = link_unmark_route(other, route, nh);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/* Also unmark routes requested in .netdev file. */
|
|
if (foreign && link->netdev && link->netdev->kind == NETDEV_KIND_WIREGUARD) {
|
|
Wireguard *w = WIREGUARD(link->netdev);
|
|
|
|
SET_FOREACH(route, w->routes) {
|
|
r = link_unmark_route(link, route, NULL);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int link_drop_routes(Link *link, bool foreign) {
|
|
Route *route;
|
|
int r;
|
|
|
|
assert(link);
|
|
assert(link->manager);
|
|
|
|
r = link_mark_routes(link, foreign);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
SET_FOREACH(route, link->manager->routes) {
|
|
if (!route_is_marked(route))
|
|
continue;
|
|
|
|
RET_GATHER(r, route_remove(route, link->manager));
|
|
}
|
|
|
|
return r;
|
|
}
|
|
|
|
int link_foreignize_routes(Link *link) {
|
|
Route *route;
|
|
int r;
|
|
|
|
assert(link);
|
|
assert(link->manager);
|
|
|
|
r = link_mark_routes(link, /* foreign = */ false);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
SET_FOREACH(route, link->manager->routes) {
|
|
if (!route_is_marked(route))
|
|
continue;
|
|
|
|
route->source = NETWORK_CONFIG_SOURCE_FOREIGN;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int network_add_ipv4ll_route(Network *network) {
|
|
_cleanup_(route_unref_or_set_invalidp) Route *route = NULL;
|
|
unsigned section_line;
|
|
int r;
|
|
|
|
assert(network);
|
|
|
|
if (!network->ipv4ll_route)
|
|
return 0;
|
|
|
|
r = hashmap_by_section_find_unused_line(network->routes_by_section, network->filename, §ion_line);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
/* IPv4LLRoute= is in [Network] section. */
|
|
r = route_new_static(network, network->filename, section_line, &route);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
r = in_addr_from_string(AF_INET, "169.254.0.0", &route->dst);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
route->family = AF_INET;
|
|
route->dst_prefixlen = 16;
|
|
route->scope = RT_SCOPE_LINK;
|
|
route->scope_set = true;
|
|
route->table_set = true;
|
|
route->priority = IPV4LL_ROUTE_METRIC;
|
|
route->protocol = RTPROT_STATIC;
|
|
|
|
TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
int network_add_default_route_on_device(Network *network) {
|
|
_cleanup_(route_unref_or_set_invalidp) Route *route = NULL;
|
|
unsigned section_line;
|
|
int r;
|
|
|
|
assert(network);
|
|
|
|
if (!network->default_route_on_device)
|
|
return 0;
|
|
|
|
r = hashmap_by_section_find_unused_line(network->routes_by_section, network->filename, §ion_line);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
/* DefaultRouteOnDevice= is in [Network] section. */
|
|
r = route_new_static(network, network->filename, section_line, &route);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
route->family = AF_INET;
|
|
route->scope = RT_SCOPE_LINK;
|
|
route->scope_set = true;
|
|
route->protocol = RTPROT_STATIC;
|
|
|
|
TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_preferred_src(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
Network *network = userdata;
|
|
_cleanup_(route_unref_or_set_invalidp) Route *route = NULL;
|
|
int r;
|
|
|
|
assert(filename);
|
|
assert(section);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(data);
|
|
|
|
r = route_new_static(network, filename, section_line, &route);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to allocate route, ignoring assignment: %m");
|
|
return 0;
|
|
}
|
|
|
|
if (route->family == AF_UNSPEC)
|
|
r = in_addr_from_string_auto(rvalue, &route->family, &route->prefsrc);
|
|
else
|
|
r = in_addr_from_string(route->family, rvalue, &route->prefsrc);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, EINVAL,
|
|
"Invalid %s='%s', ignoring assignment: %m", lvalue, rvalue);
|
|
return 0;
|
|
}
|
|
|
|
TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_destination(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
Network *network = userdata;
|
|
_cleanup_(route_unref_or_set_invalidp) Route *route = NULL;
|
|
union in_addr_union *buffer;
|
|
unsigned char *prefixlen;
|
|
int r;
|
|
|
|
assert(filename);
|
|
assert(section);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(data);
|
|
|
|
r = route_new_static(network, filename, section_line, &route);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to allocate route, ignoring assignment: %m");
|
|
return 0;
|
|
}
|
|
|
|
if (streq(lvalue, "Destination")) {
|
|
buffer = &route->dst;
|
|
prefixlen = &route->dst_prefixlen;
|
|
} else if (streq(lvalue, "Source")) {
|
|
buffer = &route->src;
|
|
prefixlen = &route->src_prefixlen;
|
|
} else
|
|
assert_not_reached();
|
|
|
|
if (route->family == AF_UNSPEC)
|
|
r = in_addr_prefix_from_string_auto(rvalue, &route->family, buffer, prefixlen);
|
|
else
|
|
r = in_addr_prefix_from_string(rvalue, route->family, buffer, prefixlen);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, EINVAL,
|
|
"Invalid %s='%s', ignoring assignment: %m", lvalue, rvalue);
|
|
return 0;
|
|
}
|
|
|
|
(void) in_addr_mask(route->family, buffer, *prefixlen);
|
|
|
|
TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_route_priority(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
Network *network = userdata;
|
|
_cleanup_(route_unref_or_set_invalidp) Route *route = NULL;
|
|
int r;
|
|
|
|
assert(filename);
|
|
assert(section);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(data);
|
|
|
|
r = route_new_static(network, filename, section_line, &route);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to allocate route, ignoring assignment: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = safe_atou32(rvalue, &route->priority);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Could not parse route priority \"%s\", ignoring assignment: %m", rvalue);
|
|
return 0;
|
|
}
|
|
|
|
route->priority_set = true;
|
|
TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_route_scope(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
Network *network = userdata;
|
|
_cleanup_(route_unref_or_set_invalidp) Route *route = NULL;
|
|
int r;
|
|
|
|
assert(filename);
|
|
assert(section);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(data);
|
|
|
|
r = route_new_static(network, filename, section_line, &route);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to allocate route, ignoring assignment: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = route_scope_from_string(rvalue);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r, "Unknown route scope: %s", rvalue);
|
|
return 0;
|
|
}
|
|
|
|
route->scope = r;
|
|
route->scope_set = true;
|
|
TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_route_table(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
_cleanup_(route_unref_or_set_invalidp) Route *route = NULL;
|
|
Network *network = userdata;
|
|
int r;
|
|
|
|
assert(filename);
|
|
assert(section);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(data);
|
|
|
|
r = route_new_static(network, filename, section_line, &route);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to allocate route, ignoring assignment: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = manager_get_route_table_from_string(network->manager, rvalue, &route->table);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Could not parse route table \"%s\", ignoring assignment: %m", rvalue);
|
|
return 0;
|
|
}
|
|
|
|
route->table_set = true;
|
|
TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_ipv6_route_preference(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
Network *network = userdata;
|
|
_cleanup_(route_unref_or_set_invalidp) Route *route = NULL;
|
|
int r;
|
|
|
|
r = route_new_static(network, filename, section_line, &route);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to allocate route, ignoring assignment: %m");
|
|
return 0;
|
|
}
|
|
|
|
if (streq(rvalue, "low"))
|
|
route->pref = ICMPV6_ROUTER_PREF_LOW;
|
|
else if (streq(rvalue, "medium"))
|
|
route->pref = ICMPV6_ROUTER_PREF_MEDIUM;
|
|
else if (streq(rvalue, "high"))
|
|
route->pref = ICMPV6_ROUTER_PREF_HIGH;
|
|
else {
|
|
log_syntax(unit, LOG_WARNING, filename, line, 0, "Unknown route preference: %s", rvalue);
|
|
return 0;
|
|
}
|
|
|
|
route->pref_set = true;
|
|
TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_route_protocol(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
Network *network = userdata;
|
|
_cleanup_(route_unref_or_set_invalidp) Route *route = NULL;
|
|
int r;
|
|
|
|
r = route_new_static(network, filename, section_line, &route);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to allocate route, ignoring assignment: %m");
|
|
return 0;
|
|
}
|
|
|
|
r = route_protocol_from_string(rvalue);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to parse route protocol \"%s\", ignoring assignment: %m", rvalue);
|
|
return 0;
|
|
}
|
|
|
|
route->protocol = r;
|
|
|
|
TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_route_type(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
Network *network = userdata;
|
|
_cleanup_(route_unref_or_set_invalidp) Route *route = NULL;
|
|
int t, r;
|
|
|
|
r = route_new_static(network, filename, section_line, &route);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to allocate route, ignoring assignment: %m");
|
|
return 0;
|
|
}
|
|
|
|
t = route_type_from_string(rvalue);
|
|
if (t < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Could not parse route type \"%s\", ignoring assignment: %m", rvalue);
|
|
return 0;
|
|
}
|
|
|
|
route->type = (unsigned char) t;
|
|
|
|
TAKE_PTR(route);
|
|
return 0;
|
|
}
|
|
|
|
int route_section_verify(Route *route) {
|
|
int r;
|
|
|
|
assert(route);
|
|
assert(route->section);
|
|
|
|
if (section_is_invalid(route->section))
|
|
return -EINVAL;
|
|
|
|
/* Currently, we do not support static route with finite lifetime. */
|
|
assert(route->lifetime_usec == USEC_INFINITY);
|
|
|
|
r = route_section_verify_nexthops(route);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
/* table */
|
|
if (!route->table_set && route->network && route->network->vrf) {
|
|
route->table = VRF(route->network->vrf)->table;
|
|
route->table_set = true;
|
|
}
|
|
|
|
if (!route->table_set && IN_SET(route->type, RTN_LOCAL, RTN_BROADCAST, RTN_ANYCAST, RTN_NAT))
|
|
route->table = RT_TABLE_LOCAL;
|
|
|
|
/* scope */
|
|
if (!route->scope_set && route->family == AF_INET) {
|
|
if (IN_SET(route->type, RTN_LOCAL, RTN_NAT))
|
|
route->scope = RT_SCOPE_HOST;
|
|
else if (IN_SET(route->type, RTN_BROADCAST, RTN_ANYCAST, RTN_MULTICAST))
|
|
route->scope = RT_SCOPE_LINK;
|
|
else if (IN_SET(route->type, RTN_UNICAST, RTN_UNSPEC) &&
|
|
!route->gateway_from_dhcp_or_ra &&
|
|
!in_addr_is_set(route->nexthop.family, &route->nexthop.gw) &&
|
|
ordered_set_isempty(route->nexthops) &&
|
|
route->nexthop_id == 0)
|
|
route->scope = RT_SCOPE_LINK;
|
|
}
|
|
|
|
/* IPv6 route */
|
|
if (route->family == AF_INET6) {
|
|
if (route->scope != RT_SCOPE_UNIVERSE) {
|
|
log_warning("%s: Scope= is specified for IPv6 route. It will be ignored.", route->section->filename);
|
|
route->scope = RT_SCOPE_UNIVERSE;
|
|
}
|
|
|
|
if (route->priority == 0)
|
|
route->priority = IP6_RT_PRIO_USER;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
void network_drop_invalid_routes(Network *network) {
|
|
Route *route;
|
|
|
|
assert(network);
|
|
|
|
HASHMAP_FOREACH(route, network->routes_by_section)
|
|
if (route_section_verify(route) < 0)
|
|
route_detach(route);
|
|
}
|