xfrm6_mode_tunnel.c 3.99 KB
Newer Older
1 2 3 4 5 6 7
/*
 * xfrm6_mode_tunnel.c - Tunnel mode encapsulation for IPv6.
 *
 * Copyright (C) 2002 USAGI/WIDE Project
 * Copyright (c) 2004-2006 Herbert Xu <herbert@gondor.apana.org.au>
 */

8
#include <linux/gfp.h>
9 10 11 12 13 14 15 16
#include <linux/init.h>
#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/skbuff.h>
#include <linux/stringify.h>
#include <net/dsfield.h>
#include <net/dst.h>
#include <net/inet_ecn.h>
17
#include <net/ip6_route.h>
18 19 20 21 22
#include <net/ipv6.h>
#include <net/xfrm.h>

static inline void ipip6_ecn_decapsulate(struct sk_buff *skb)
{
23
	struct ipv6hdr *inner_iph = ipipv6_hdr(skb);
24

25
	if (INET_ECN_is_ce(XFRM_MODE_SKB_CB(skb)->tos))
26
		IP6_ECN_set_ce(skb, inner_iph);
27 28 29 30
}

/* Add encapsulation header.
 *
31
 * The top IP header will be constructed per RFC 2401.
32
 */
33
static int xfrm6_mode_tunnel_output(struct xfrm_state *x, struct sk_buff *skb)
34
{
Eric Dumazet's avatar
Eric Dumazet committed
35
	struct dst_entry *dst = skb_dst(skb);
36
	struct ipv6hdr *top_iph;
37 38
	int dsfield;

39 40 41
	skb_set_inner_network_header(skb, skb_network_offset(skb));
	skb_set_inner_transport_header(skb, skb_transport_offset(skb));

42
	skb_set_network_header(skb, -x->props.header_len);
43 44
	skb->mac_header = skb->network_header +
			  offsetof(struct ipv6hdr, nexthdr);
45
	skb->transport_header = skb->network_header + sizeof(*top_iph);
46
	top_iph = ipv6_hdr(skb);
47 48

	top_iph->version = 6;
49 50 51

	memcpy(top_iph->flow_lbl, XFRM_MODE_SKB_CB(skb)->flow_lbl,
	       sizeof(top_iph->flow_lbl));
Eric Dumazet's avatar
Eric Dumazet committed
52
	top_iph->nexthdr = xfrm_af2proto(skb_dst(skb)->ops->family);
53

54 55 56 57 58
	if (x->props.extra_flags & XFRM_SA_XFLAG_DONT_ENCAP_DSCP)
		dsfield = 0;
	else
		dsfield = XFRM_MODE_SKB_CB(skb)->tos;
	dsfield = INET_ECN_encapsulate(dsfield, XFRM_MODE_SKB_CB(skb)->tos);
59 60 61
	if (x->props.flags & XFRM_STATE_NOECN)
		dsfield &= ~INET_ECN_MASK;
	ipv6_change_dsfield(top_iph, 0, dsfield);
62
	top_iph->hop_limit = ip6_dst_hoplimit(dst->child);
Alexey Dobriyan's avatar
Alexey Dobriyan committed
63 64
	top_iph->saddr = *(struct in6_addr *)&x->props.saddr;
	top_iph->daddr = *(struct in6_addr *)&x->id.daddr;
65 66 67
	return 0;
}

68 69 70 71 72 73
#define for_each_input_rcu(head, handler)	\
	for (handler = rcu_dereference(head);	\
	     handler != NULL;			\
	     handler = rcu_dereference(handler->next))


74
static int xfrm6_mode_tunnel_input(struct xfrm_state *x, struct sk_buff *skb)
75 76 77
{
	int err = -EINVAL;

78
	if (XFRM_MODE_SKB_CB(skb)->protocol != IPPROTO_IPV6)
79 80 81 82
		goto out;
	if (!pskb_may_pull(skb, sizeof(struct ipv6hdr)))
		goto out;

83 84
	err = skb_unclone(skb, GFP_ATOMIC);
	if (err)
85 86
		goto out;

87 88 89 90 91 92
	if (x->props.flags & XFRM_STATE_DECAP_DSCP)
		ipv6_copy_dscp(ipv6_get_dsfield(ipv6_hdr(skb)),
			       ipipv6_hdr(skb));
	if (!(x->props.flags & XFRM_STATE_NOECN))
		ipip6_ecn_decapsulate(skb);

93
	skb_reset_network_header(skb);
94
	skb_mac_header_rebuild(skb);
95
	eth_hdr(skb)->h_proto = skb->protocol;
96

97 98 99 100 101 102
	err = 0;

out:
	return err;
}

103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124
static struct sk_buff *xfrm6_mode_tunnel_gso_segment(struct xfrm_state *x,
						     struct sk_buff *skb,
						     netdev_features_t features)
{
	__skb_push(skb, skb->mac_len);
	return skb_mac_gso_segment(skb, features);

}

static void xfrm6_mode_tunnel_xmit(struct xfrm_state *x, struct sk_buff *skb)
{
	struct xfrm_offload *xo = xfrm_offload(skb);

	if (xo->flags & XFRM_GSO_SEGMENT) {
		skb->network_header = skb->network_header - x->props.header_len;
		skb->transport_header = skb->network_header + sizeof(struct ipv6hdr);
	}

	skb_reset_mac_len(skb);
	pskb_pull(skb, skb->mac_len + x->props.header_len);
}

125
static struct xfrm_mode xfrm6_tunnel_mode = {
126
	.input2 = xfrm6_mode_tunnel_input,
127
	.input = xfrm_prepare_input,
128
	.output2 = xfrm6_mode_tunnel_output,
129
	.output = xfrm6_prepare_output,
130 131
	.gso_segment = xfrm6_mode_tunnel_gso_segment,
	.xmit = xfrm6_mode_tunnel_xmit,
132 133
	.owner = THIS_MODULE,
	.encap = XFRM_MODE_TUNNEL,
Herbert Xu's avatar
Herbert Xu committed
134
	.flags = XFRM_MODE_FLAG_TUNNEL,
135 136
};

137
static int __init xfrm6_mode_tunnel_init(void)
138 139 140 141
{
	return xfrm_register_mode(&xfrm6_tunnel_mode, AF_INET6);
}

142
static void __exit xfrm6_mode_tunnel_exit(void)
143 144 145 146 147 148 149
{
	int err;

	err = xfrm_unregister_mode(&xfrm6_tunnel_mode, AF_INET6);
	BUG_ON(err);
}

150 151
module_init(xfrm6_mode_tunnel_init);
module_exit(xfrm6_mode_tunnel_exit);
152 153
MODULE_LICENSE("GPL");
MODULE_ALIAS_XFRM_MODE(AF_INET6, XFRM_MODE_TUNNEL);