2 * netifd - network interface daemon
3 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
4 * Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
5 * Copyright (C) 2018 Alexander Couzens <lynxis@fe80.eu>
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License version 2
9 * as published by the Free Software Foundation
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
20 #include <arpa/inet.h>
24 #include "interface.h"
30 struct vlist_tree iprules;
31 static bool iprules_flushed = false;
32 static unsigned int iprules_counter[2];
50 static const struct blobmsg_policy rule_attr[__RULE_MAX] = {
51 [RULE_INTERFACE_IN] = { .name = "in", .type = BLOBMSG_TYPE_STRING },
52 [RULE_INTERFACE_OUT] = { .name = "out", .type = BLOBMSG_TYPE_STRING },
53 [RULE_INVERT] = { .name = "invert", .type = BLOBMSG_TYPE_BOOL },
54 [RULE_SRC] = { .name = "src", .type = BLOBMSG_TYPE_STRING },
55 [RULE_DEST] = { .name = "dest", .type = BLOBMSG_TYPE_STRING },
56 [RULE_PRIORITY] = { .name = "priority", .type = BLOBMSG_TYPE_INT32 },
57 [RULE_TOS] = { .name = "tos", .type = BLOBMSG_TYPE_INT32 },
58 [RULE_FWMARK] = { .name = "mark", .type = BLOBMSG_TYPE_STRING },
59 [RULE_LOOKUP] = { .name = "lookup", .type = BLOBMSG_TYPE_STRING },
60 [RULE_SUP_PREFIXLEN] = { .name = "suppress_prefixlength", .type = BLOBMSG_TYPE_INT32 },
61 [RULE_ACTION] = { .name = "action", .type = BLOBMSG_TYPE_STRING },
62 [RULE_GOTO] = { .name = "goto", .type = BLOBMSG_TYPE_INT32 },
65 const struct uci_blob_param_list rule_attr_list = {
66 .n_params = __RULE_MAX,
70 /* interface based rules are dynamic. */
72 rule_ready(struct iprule *rule)
74 if (rule->flags & IPRULE_OUT && !rule->out_dev[0])
77 if (rule->flags & IPRULE_IN && !rule->in_dev[0])
84 iprule_parse_mark(const char *mark, struct iprule *rule)
89 if ((s = strchr(mark, '/')) != NULL)
92 n = strtoul(mark, &e, 0);
98 rule->flags |= IPRULE_FWMARK;
101 n = strtoul(s, &e, 0);
107 rule->flags |= IPRULE_FWMASK;
113 /* called on interface changes of the incoming interface */
115 rule_in_cb(struct interface_user *dep, struct interface *iface, enum interface_event ev)
117 struct iprule *rule = container_of(dep, struct iprule, in_iface_user);
121 if (!iface->l3_dev.dev)
124 strcpy(rule->in_dev, iface->l3_dev.dev->ifname);
125 if (rule_ready(rule))
126 system_add_iprule(rule);
131 if (rule_ready(rule))
132 system_del_iprule(rule);
141 /* called on interface changes of the outgoing interface */
143 rule_out_cb(struct interface_user *dep, struct interface *iface, enum interface_event ev)
145 struct iprule *rule = container_of(dep, struct iprule, out_iface_user);
149 if (!iface->l3_dev.dev)
152 strcpy(rule->out_dev, iface->l3_dev.dev->ifname);
153 if (rule_ready(rule))
154 system_add_iprule(rule);
159 if (rule_ready(rule))
160 system_del_iprule(rule);
162 rule->out_dev[0] = 0;
169 /* called on all interface events */
171 generic_interface_cb(struct interface_user *dep,
172 struct interface *iface, enum interface_event ev)
176 if (ev != IFEV_CREATE)
179 /* add new interfaces to rules */
180 vlist_for_each_element(&iprules, rule, node) {
181 if (rule_ready(rule))
184 if ((rule->flags & IPRULE_OUT) && !strcmp(rule->out_iface, iface->name))
185 interface_add_user(&rule->out_iface_user, iface);
187 if ((rule->flags & IPRULE_IN) && !strcmp(rule->in_iface, iface->name))
188 interface_add_user(&rule->in_iface_user, iface);
192 struct interface_user generic_listener = {
193 .cb = generic_interface_cb
197 iprule_add(struct blob_attr *attr, bool v6)
199 struct blob_attr *tb[__RULE_MAX], *cur;
202 int af = v6 ? AF_INET6 : AF_INET;
204 blobmsg_parse(rule_attr, __RULE_MAX, tb, blobmsg_data(attr), blobmsg_data_len(attr));
206 rule = calloc(1, sizeof(*rule));
210 rule->flags = v6 ? IPRULE_INET6 : IPRULE_INET4;
211 rule->order = iprules_counter[rule->flags]++;
213 if ((cur = tb[RULE_INVERT]) != NULL)
214 rule->invert = blobmsg_get_bool(cur);
216 if ((cur = tb[RULE_INTERFACE_IN]) != NULL) {
217 iface_name = calloc(1, strlen(blobmsg_data(cur)) + 1);
218 rule->in_iface = strcpy(iface_name, blobmsg_data(cur));
219 rule->in_iface_user.cb = &rule_in_cb;
220 rule->flags |= IPRULE_IN;
223 if ((cur = tb[RULE_INTERFACE_OUT]) != NULL) {
224 iface_name = calloc(1, strlen(blobmsg_data(cur)) + 1);
225 rule->out_iface = strcpy(iface_name, blobmsg_data(cur));
226 rule->out_iface_user.cb = &rule_out_cb;
227 rule->flags |= IPRULE_OUT;
230 if ((cur = tb[RULE_SRC]) != NULL) {
231 if (!parse_ip_and_netmask(af, blobmsg_data(cur), &rule->src_addr, &rule->src_mask)) {
232 DPRINTF("Failed to parse rule source: %s\n", (char *) blobmsg_data(cur));
235 rule->flags |= IPRULE_SRC;
238 if ((cur = tb[RULE_DEST]) != NULL) {
239 if (!parse_ip_and_netmask(af, blobmsg_data(cur), &rule->dest_addr, &rule->dest_mask)) {
240 DPRINTF("Failed to parse rule destination: %s\n", (char *) blobmsg_data(cur));
243 rule->flags |= IPRULE_DEST;
246 if ((cur = tb[RULE_PRIORITY]) != NULL) {
247 rule->priority = blobmsg_get_u32(cur);
248 rule->flags |= IPRULE_PRIORITY;
251 if ((cur = tb[RULE_TOS]) != NULL) {
252 if ((rule->tos = blobmsg_get_u32(cur)) > 255) {
253 DPRINTF("Invalid TOS value: %u\n", blobmsg_get_u32(cur));
256 rule->flags |= IPRULE_TOS;
259 if ((cur = tb[RULE_FWMARK]) != NULL) {
260 if (!iprule_parse_mark(blobmsg_data(cur), rule)) {
261 DPRINTF("Failed to parse rule fwmark: %s\n", (char *) blobmsg_data(cur));
264 /* flags set by iprule_parse_mark() */
267 if ((cur = tb[RULE_LOOKUP]) != NULL) {
268 if (!system_resolve_rt_table(blobmsg_data(cur), &rule->lookup)) {
269 DPRINTF("Failed to parse rule lookup table: %s\n", (char *) blobmsg_data(cur));
272 rule->flags |= IPRULE_LOOKUP;
275 if ((cur = tb[RULE_SUP_PREFIXLEN]) != NULL) {
276 rule->sup_prefixlen = blobmsg_get_u32(cur);
277 rule->flags |= IPRULE_SUP_PREFIXLEN;
280 if ((cur = tb[RULE_ACTION]) != NULL) {
281 if (!system_resolve_iprule_action(blobmsg_data(cur), &rule->action)) {
282 DPRINTF("Failed to parse rule action: %s\n", (char *) blobmsg_data(cur));
285 rule->flags |= IPRULE_ACTION;
288 if ((cur = tb[RULE_GOTO]) != NULL) {
289 rule->gotoid = blobmsg_get_u32(cur);
290 rule->flags |= IPRULE_GOTO;
293 vlist_add(&iprules, &rule->node, rule);
301 iprule_update_start(void)
303 if (!iprules_flushed) {
304 system_flush_iprules();
305 iprules_flushed = true;
308 iprules_counter[0] = 1;
309 iprules_counter[1] = 1;
310 vlist_update(&iprules);
314 iprule_update_complete(void)
316 vlist_flush(&iprules);
321 rule_cmp(const void *k1, const void *k2, void *ptr)
323 const struct iprule *r1 = k1, *r2 = k2;
326 /* First compare the interface names */
327 if (r1->flags & IPRULE_IN || r2->flags & IPRULE_IN) {
328 char *str1 = r1->flags & IPRULE_IN ? r1->in_iface : "";
329 char *str2 = r2->flags & IPRULE_IN ? r2->in_iface : "";
331 ret = strcmp(str1, str2);
336 if (r1->flags & IPRULE_OUT || r2->flags & IPRULE_OUT) {
337 char *str1 = r1->flags & IPRULE_OUT ? r1->out_iface : "";
338 char *str2 = r2->flags & IPRULE_OUT ? r2->out_iface : "";
340 ret = strcmp(str1, str2);
345 /* Next compare everything after the flags field */
346 return memcmp(k1 + offsetof(struct iprule, flags),
347 k2 + offsetof(struct iprule, flags),
348 sizeof(struct iprule) - offsetof(struct iprule, flags));
351 static void deregister_interfaces(struct iprule *rule)
353 if (rule->flags & IPRULE_IN && rule->in_iface_user.iface)
354 interface_remove_user(&rule->in_iface_user);
356 if (rule->flags & IPRULE_OUT && rule->out_iface_user.iface)
357 interface_remove_user(&rule->out_iface_user);
360 static void register_interfaces(struct iprule *rule)
362 struct interface *iface, *tmp;
364 if (rule->flags & IPRULE_IN) {
365 tmp = vlist_find(&interfaces, rule->in_iface, iface, node);
367 interface_add_user(&rule->in_iface_user, tmp);
369 if (rule->flags & IPRULE_OUT) {
370 tmp = vlist_find(&interfaces, rule->out_iface, iface, node);
372 interface_add_user(&rule->out_iface_user, tmp);
377 iprule_update_rule(struct vlist_tree *tree,
378 struct vlist_node *node_new, struct vlist_node *node_old)
380 struct iprule *rule_old, *rule_new;
382 rule_old = container_of(node_old, struct iprule, node);
383 rule_new = container_of(node_new, struct iprule, node);
386 if (rule_ready(rule_old))
387 system_del_iprule(rule_old);
389 if (rule_old->flags & (IPRULE_IN | IPRULE_OUT))
390 deregister_interfaces(rule_old);
392 if (rule_old->in_iface)
393 free(rule_old->in_iface);
395 if (rule_old->out_iface)
396 free(rule_old->out_iface);
402 /* interface based rules calls system_add_iprule over the event cb */
403 if (rule_new->flags & (IPRULE_IN | IPRULE_OUT)) {
404 register_interfaces(rule_new);
406 system_add_iprule(rule_new);
412 iprule_init_list(void)
414 vlist_init(&iprules, rule_cmp, iprule_update_rule);
415 interface_add_user(&generic_listener, NULL);