* [Patch net-next v4 0/5] vxlan: add ipv6 support
@ 2013-04-17 5:10 Cong Wang
2013-04-17 5:10 ` [Patch net-next v4 1/5] vxlan: defer vxlan init as late as possible Cong Wang
` (5 more replies)
0 siblings, 6 replies; 33+ messages in thread
From: Cong Wang @ 2013-04-17 5:10 UTC (permalink / raw)
To: netdev
From: Cong Wang <amwang@redhat.com>
v4: rename ->sin to ->va_sin
rename ->sin6 to ->va_sin6
rename ->family to ->va_sa
support ll addr
fix more ugly #ifdef
rebased on the latest net-next
v3: fix many coding style issues
fix some ugly #ifdef
rename vxlan_ip to vxlan_addr
rename ->proto to ->family
rename ->ip4/->ip6 to ->sin/->sin6
v2: fix some compile error when !CONFIG_IPV6
improve some code based on Stephen's comments
use sockaddr suggested by David
Cong Wang (5):
vxlan: defer vxlan init as late as possible
ipv6: export ipv6_sock_mc_join and ipv6_sock_mc_drop
vxlan: add ipv6 support
vxlan: add scope_id support for ll addr
ipv6: Add generic UDP Tunnel segmentation
drivers/net/vxlan.c | 656 +++++++++++++++++++++++++++++++++---------
include/uapi/linux/if_link.h | 2 +
net/ipv6/ip6_offload.c | 4 +-
net/ipv6/mcast.c | 2 +
net/ipv6/udp_offload.c | 155 +++++++---
5 files changed, 633 insertions(+), 186 deletions(-)
--
1.7.7.6
^ permalink raw reply [flat|nested] 33+ messages in thread* [Patch net-next v4 1/5] vxlan: defer vxlan init as late as possible 2013-04-17 5:10 [Patch net-next v4 0/5] vxlan: add ipv6 support Cong Wang @ 2013-04-17 5:10 ` Cong Wang 2013-04-17 5:10 ` [Patch net-next v4 2/5] ipv6: export ipv6_sock_mc_join and ipv6_sock_mc_drop Cong Wang ` (4 subsequent siblings) 5 siblings, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-04-17 5:10 UTC (permalink / raw) To: netdev; +Cc: Stephen Hemminger, David S. Miller, Cong Wang From: Cong Wang <amwang@redhat.com> When vxlan is compiled as builtin, its init code runs before IPv6 init, this could cause problems if we create IPv6 socket in the latter patch. Cc: Stephen Hemminger <stephen@networkplumber.org> Cc: David S. Miller <davem@davemloft.net> Signed-off-by: Cong Wang <amwang@redhat.com> --- drivers/net/vxlan.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c index 916a621..f8ac900 100644 --- a/drivers/net/vxlan.c +++ b/drivers/net/vxlan.c @@ -1635,7 +1635,7 @@ out2: out1: return rc; } -module_init(vxlan_init_module); +late_initcall(vxlan_init_module); static void __exit vxlan_cleanup_module(void) { -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
* [Patch net-next v4 2/5] ipv6: export ipv6_sock_mc_join and ipv6_sock_mc_drop 2013-04-17 5:10 [Patch net-next v4 0/5] vxlan: add ipv6 support Cong Wang 2013-04-17 5:10 ` [Patch net-next v4 1/5] vxlan: defer vxlan init as late as possible Cong Wang @ 2013-04-17 5:10 ` Cong Wang 2013-04-17 5:10 ` [Patch net-next v4 3/5] vxlan: add ipv6 support Cong Wang ` (3 subsequent siblings) 5 siblings, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-04-17 5:10 UTC (permalink / raw) To: netdev; +Cc: Stephen Hemminger, David S. Miller, Cong Wang From: Cong Wang <amwang@redhat.com> They will be used by vxlan module. Cc: Stephen Hemminger <stephen@networkplumber.org> Cc: David S. Miller <davem@davemloft.net> Signed-off-by: Cong Wang <amwang@redhat.com> --- net/ipv6/mcast.c | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/net/ipv6/mcast.c b/net/ipv6/mcast.c index bfa6cc3..d03426d 100644 --- a/net/ipv6/mcast.c +++ b/net/ipv6/mcast.c @@ -200,6 +200,7 @@ int ipv6_sock_mc_join(struct sock *sk, int ifindex, const struct in6_addr *addr) return 0; } +EXPORT_SYMBOL(ipv6_sock_mc_join); /* * socket leave on multicast group @@ -246,6 +247,7 @@ int ipv6_sock_mc_drop(struct sock *sk, int ifindex, const struct in6_addr *addr) return -EADDRNOTAVAIL; } +EXPORT_SYMBOL(ipv6_sock_mc_drop); /* called with rcu_read_lock() */ static struct inet6_dev *ip6_mc_find_dev_rcu(struct net *net, -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
* [Patch net-next v4 3/5] vxlan: add ipv6 support 2013-04-17 5:10 [Patch net-next v4 0/5] vxlan: add ipv6 support Cong Wang 2013-04-17 5:10 ` [Patch net-next v4 1/5] vxlan: defer vxlan init as late as possible Cong Wang 2013-04-17 5:10 ` [Patch net-next v4 2/5] ipv6: export ipv6_sock_mc_join and ipv6_sock_mc_drop Cong Wang @ 2013-04-17 5:10 ` Cong Wang 2013-04-17 8:15 ` Mike Rapoport 2013-04-18 14:34 ` Mike Rapoport 2013-04-17 5:10 ` [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr Cong Wang ` (2 subsequent siblings) 5 siblings, 2 replies; 33+ messages in thread From: Cong Wang @ 2013-04-17 5:10 UTC (permalink / raw) To: netdev; +Cc: David Stevens, Stephen Hemminger, David S. Miller, Cong Wang From: Cong Wang <amwang@redhat.com> This patch adds IPv6 support to vxlan device, as the new version RFC already mentioned it: http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-03 Cc: David Stevens <dlstevens@us.ibm.com> Cc: Stephen Hemminger <stephen@networkplumber.org> Cc: David S. Miller <davem@davemloft.net> Signed-off-by: Cong Wang <amwang@redhat.com> --- drivers/net/vxlan.c | 639 +++++++++++++++++++++++++++++++++--------- include/uapi/linux/if_link.h | 2 + 2 files changed, 505 insertions(+), 136 deletions(-) diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c index f8ac900..43ed40f 100644 --- a/drivers/net/vxlan.c +++ b/drivers/net/vxlan.c @@ -9,7 +9,6 @@ * * TODO * - use IANA UDP port number (when defined) - * - IPv6 (not in RFC) */ #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt @@ -42,6 +41,11 @@ #include <net/inet_ecn.h> #include <net/net_namespace.h> #include <net/netns/generic.h> +#if IS_ENABLED(CONFIG_IPV6) +#include <net/addrconf.h> +#include <net/ip6_route.h> +#include <net/ip6_tunnel.h> +#endif #define VXLAN_VERSION "0.1" @@ -56,6 +60,7 @@ #define VXLAN_VID_MASK (VXLAN_N_VID - 1) /* IP header + UDP + VXLAN + Ethernet header */ #define VXLAN_HEADROOM (20 + 8 + 8 + 14) +#define VXLAN6_HEADROOM (40 + 8 + 8 + 14) #define VXLAN_FLAGS 0x08000000 /* struct vxlanhdr.vx_flags required value. */ @@ -81,9 +86,20 @@ struct vxlan_net { struct hlist_head vni_list[VNI_HASH_SIZE]; }; +struct vxlan_addr { + union { + struct sockaddr_in sin; + struct sockaddr_in6 sin6; + struct sockaddr sa; + } u; +#define va_sin u.sin.sin_addr.s_addr +#define va_sin6 u.sin6.sin6_addr +#define va_sa u.sa.sa_family +}; + struct vxlan_rdst { struct rcu_head rcu; - __be32 remote_ip; + struct vxlan_addr remote_ip; __be16 remote_port; u32 remote_vni; u32 remote_ifindex; @@ -106,7 +122,7 @@ struct vxlan_dev { struct hlist_node hlist; struct net_device *dev; struct vxlan_rdst default_dst; /* default destination */ - __be32 saddr; /* source address */ + struct vxlan_addr saddr; /* source address */ __u16 port_min; /* source port range */ __u16 port_max; __u8 tos; /* TOS override */ @@ -128,6 +144,69 @@ struct vxlan_dev { #define VXLAN_F_L2MISS 0x08 #define VXLAN_F_L3MISS 0x10 +static inline +bool vxlan_addr_equal(const struct vxlan_addr *a, const struct vxlan_addr *b) +{ +#if IS_ENABLED(CONFIG_IPV6) + if (a->va_sa != b->va_sa) + return false; + if (a->va_sa == AF_INET6) + return ipv6_addr_equal(&a->va_sin6, &b->va_sin6); + else +#endif + return a->va_sin == b->va_sin; +} + +static inline bool vxlan_addr_any(const struct vxlan_addr *ipa) +{ +#if IS_ENABLED(CONFIG_IPV6) + if (ipa->va_sa == AF_INET6) + return ipv6_addr_any(&ipa->va_sin6); + else +#endif + return ipa->va_sin == htonl(INADDR_ANY); +} + +static inline bool vxlan_addr_multicast(const struct vxlan_addr *ipa) +{ +#if IS_ENABLED(CONFIG_IPV6) + if (ipa->va_sa == AF_INET6) + return ipv6_addr_is_multicast(&ipa->va_sin6); + else +#endif + return IN_MULTICAST(ntohl(ipa->va_sin)); +} + +static int vxlan_nla_get_addr(struct vxlan_addr *ip, struct nlattr *nla) +{ + if (nla_len(nla) >= sizeof(struct in6_addr)) { +#if IS_ENABLED(CONFIG_IPV6) + nla_memcpy(&ip->va_sin6, nla, sizeof(struct in6_addr)); + ip->va_sa = AF_INET6; + return 0; +#else + return -EAFNOSUPPORT; +#endif + } else if (nla_len(nla) >= sizeof(__be32)) { + ip->va_sin = nla_get_be32(nla); + ip->va_sa = AF_INET; + return 0; + } else { + return -EAFNOSUPPORT; + } +} + +static int vxlan_nla_put_addr(struct sk_buff *skb, int attr, + const struct vxlan_addr *ip) +{ +#if IS_ENABLED(CONFIG_IPV6) + if (ip->va_sa == AF_INET6) + return nla_put(skb, attr, sizeof(struct in6_addr), &ip->va_sin6); + else +#endif + return nla_put_be32(skb, attr, ip->va_sin); +} + /* salt for hash table */ static u32 vxlan_salt __read_mostly; @@ -174,7 +253,7 @@ static int vxlan_fdb_info(struct sk_buff *skb, struct vxlan_dev *vxlan, if (type == RTM_GETNEIGH) { ndm->ndm_family = AF_INET; - send_ip = rdst->remote_ip != htonl(INADDR_ANY); + send_ip = !vxlan_addr_any(&rdst->remote_ip); send_eth = !is_zero_ether_addr(fdb->eth_addr); } else ndm->ndm_family = AF_BRIDGE; @@ -186,7 +265,7 @@ static int vxlan_fdb_info(struct sk_buff *skb, struct vxlan_dev *vxlan, if (send_eth && nla_put(skb, NDA_LLADDR, ETH_ALEN, &fdb->eth_addr)) goto nla_put_failure; - if (send_ip && nla_put_be32(skb, NDA_DST, rdst->remote_ip)) + if (send_ip && vxlan_nla_put_addr(skb, NDA_DST, &rdst->remote_ip)) goto nla_put_failure; if (rdst->remote_port && rdst->remote_port != vxlan_port && @@ -218,7 +297,7 @@ static inline size_t vxlan_nlmsg_size(void) { return NLMSG_ALIGN(sizeof(struct ndmsg)) + nla_total_size(ETH_ALEN) /* NDA_LLADDR */ - + nla_total_size(sizeof(__be32)) /* NDA_DST */ + + nla_total_size(sizeof(struct in6_addr)) /* NDA_DST */ + nla_total_size(sizeof(__be32)) /* NDA_PORT */ + nla_total_size(sizeof(__be32)) /* NDA_VNI */ + nla_total_size(sizeof(__u32)) /* NDA_IFINDEX */ @@ -251,14 +330,14 @@ errout: rtnl_set_sk_err(net, RTNLGRP_NEIGH, err); } -static void vxlan_ip_miss(struct net_device *dev, __be32 ipa) +static void vxlan_ip_miss(struct net_device *dev, struct vxlan_addr *ipa) { struct vxlan_dev *vxlan = netdev_priv(dev); struct vxlan_fdb f; memset(&f, 0, sizeof f); f.state = NUD_STALE; - f.remote.remote_ip = ipa; /* goes to NDA_DST */ + f.remote.remote_ip = *ipa; /* goes to NDA_DST */ f.remote.remote_vni = VXLAN_N_VID; vxlan_fdb_notify(vxlan, &f, RTM_GETNEIGH); @@ -313,14 +392,14 @@ static struct vxlan_fdb *vxlan_find_mac(struct vxlan_dev *vxlan, } /* Add/update destinations for multicast */ -static int vxlan_fdb_append(struct vxlan_fdb *f, - __be32 ip, __u32 port, __u32 vni, __u32 ifindex) +static int vxlan_fdb_append(struct vxlan_fdb *f, struct vxlan_addr *ip, + __u32 port, __u32 vni, __u32 ifindex) { struct vxlan_rdst *rd_prev, *rd; rd_prev = NULL; for (rd = &f->remote; rd; rd = rd->remote_next) { - if (rd->remote_ip == ip && + if (vxlan_addr_equal(&rd->remote_ip, ip) && rd->remote_port == port && rd->remote_vni == vni && rd->remote_ifindex == ifindex) @@ -330,7 +409,7 @@ static int vxlan_fdb_append(struct vxlan_fdb *f, rd = kmalloc(sizeof(*rd), GFP_ATOMIC); if (rd == NULL) return -ENOBUFS; - rd->remote_ip = ip; + rd->remote_ip = *ip; rd->remote_port = port; rd->remote_vni = vni; rd->remote_ifindex = ifindex; @@ -341,7 +420,7 @@ static int vxlan_fdb_append(struct vxlan_fdb *f, /* Add new entry to forwarding table -- assumes lock held */ static int vxlan_fdb_create(struct vxlan_dev *vxlan, - const u8 *mac, __be32 ip, + const u8 *mac, struct vxlan_addr *ip, __u16 state, __u16 flags, __u32 port, __u32 vni, __u32 ifindex) { @@ -375,13 +454,18 @@ static int vxlan_fdb_create(struct vxlan_dev *vxlan, if (vxlan->addrmax && vxlan->addrcnt >= vxlan->addrmax) return -ENOSPC; - netdev_dbg(vxlan->dev, "add %pM -> %pI4\n", mac, &ip); +#if IS_ENABLED(CONFIG_IPV6) + if (ip->va_sa == AF_INET6) + netdev_dbg(vxlan->dev, "add %pM -> %pI6\n", mac, &ip->va_sin6); + else +#endif + netdev_dbg(vxlan->dev, "add %pM -> %pI4\n", mac, &ip->va_sin); f = kmalloc(sizeof(*f), GFP_ATOMIC); if (!f) return -ENOMEM; notify = 1; - f->remote.remote_ip = ip; + f->remote.remote_ip = *ip; f->remote.remote_port = port; f->remote.remote_vni = vni; f->remote.remote_ifindex = ifindex; @@ -433,7 +517,7 @@ static int vxlan_fdb_add(struct ndmsg *ndm, struct nlattr *tb[], { struct vxlan_dev *vxlan = netdev_priv(dev); struct net *net = dev_net(vxlan->dev); - __be32 ip; + struct vxlan_addr ip; u32 port, vni, ifindex; int err; @@ -446,10 +530,9 @@ static int vxlan_fdb_add(struct ndmsg *ndm, struct nlattr *tb[], if (tb[NDA_DST] == NULL) return -EINVAL; - if (nla_len(tb[NDA_DST]) != sizeof(__be32)) - return -EAFNOSUPPORT; - - ip = nla_get_be32(tb[NDA_DST]); + err = vxlan_nla_get_addr(&ip, tb[NDA_DST]); + if (err) + return err; if (tb[NDA_PORT]) { if (nla_len(tb[NDA_PORT]) != sizeof(u32)) @@ -479,7 +562,7 @@ static int vxlan_fdb_add(struct ndmsg *ndm, struct nlattr *tb[], ifindex = 0; spin_lock_bh(&vxlan->hash_lock); - err = vxlan_fdb_create(vxlan, addr, ip, ndm->ndm_state, flags, port, + err = vxlan_fdb_create(vxlan, addr, &ip, ndm->ndm_state, flags, port, vni, ifindex); spin_unlock_bh(&vxlan->hash_lock); @@ -543,7 +626,7 @@ skip: * and Tunnel endpoint. */ static void vxlan_snoop(struct net_device *dev, - __be32 src_ip, const u8 *src_mac) + struct vxlan_addr *src_ip, const u8 *src_mac) { struct vxlan_dev *vxlan = netdev_priv(dev); struct vxlan_fdb *f; @@ -552,15 +635,25 @@ static void vxlan_snoop(struct net_device *dev, f = vxlan_find_mac(vxlan, src_mac); if (likely(f)) { f->used = jiffies; - if (likely(f->remote.remote_ip == src_ip)) + if (likely(vxlan_addr_equal(&f->remote.remote_ip, src_ip))) return; - if (net_ratelimit()) - netdev_info(dev, - "%pM migrated from %pI4 to %pI4\n", - src_mac, &f->remote.remote_ip, &src_ip); + if (net_ratelimit()) { +#if IS_ENABLED(CONFIG_IPV6) + if (src_ip->va_sa == AF_INET6) + netdev_info(dev, + "%pM migrated from %pI6 to %pI6\n", + src_mac, &f->remote.remote_ip.va_sin6, + &src_ip->va_sin6); + else +#endif + netdev_info(dev, + "%pM migrated from %pI4 to %pI4\n", + src_mac, &f->remote.remote_ip.va_sin, + &src_ip->va_sin); + } - f->remote.remote_ip = src_ip; + f->remote.remote_ip = *src_ip; f->updated = jiffies; } else { /* learned new entry */ @@ -589,7 +682,8 @@ static bool vxlan_group_used(struct vxlan_net *vn, if (!netif_running(vxlan->dev)) continue; - if (vxlan->default_dst.remote_ip == this->default_dst.remote_ip) + if (vxlan_addr_equal(&vxlan->default_dst.remote_ip, + &this->default_dst.remote_ip)) return true; } @@ -603,7 +697,7 @@ static int vxlan_join_group(struct net_device *dev) struct vxlan_net *vn = net_generic(dev_net(dev), vxlan_net_id); struct sock *sk = vn->sock->sk; struct ip_mreqn mreq = { - .imr_multiaddr.s_addr = vxlan->default_dst.remote_ip, + .imr_multiaddr.s_addr = vxlan->default_dst.remote_ip.va_sin, .imr_ifindex = vxlan->default_dst.remote_ifindex, }; int err; @@ -615,7 +709,13 @@ static int vxlan_join_group(struct net_device *dev) /* Need to drop RTNL to call multicast join */ rtnl_unlock(); lock_sock(sk); - err = ip_mc_join_group(sk, &mreq); +#if IS_ENABLED(CONFIG_IPV6) + if (vxlan->default_dst.remote_ip.va_sa == AF_INET6) + err = ipv6_sock_mc_join(sk, vxlan->default_dst.remote_ifindex, + &vxlan->default_dst.remote_ip.va_sin6); + else +#endif + err = ip_mc_join_group(sk, &mreq); release_sock(sk); rtnl_lock(); @@ -631,7 +731,7 @@ static int vxlan_leave_group(struct net_device *dev) int err = 0; struct sock *sk = vn->sock->sk; struct ip_mreqn mreq = { - .imr_multiaddr.s_addr = vxlan->default_dst.remote_ip, + .imr_multiaddr.s_addr = vxlan->default_dst.remote_ip.va_sin, .imr_ifindex = vxlan->default_dst.remote_ifindex, }; @@ -642,7 +742,13 @@ static int vxlan_leave_group(struct net_device *dev) /* Need to drop RTNL to call multicast leave */ rtnl_unlock(); lock_sock(sk); - err = ip_mc_leave_group(sk, &mreq); +#if IS_ENABLED(CONFIG_IPV6) + if (vxlan->default_dst.remote_ip.va_sa == AF_INET6) + err = ipv6_sock_mc_drop(sk, vxlan->default_dst.remote_ifindex, + &vxlan->default_dst.remote_ip.va_sin6); + else +#endif + err = ip_mc_leave_group(sk, &mreq); release_sock(sk); rtnl_lock(); @@ -652,12 +758,16 @@ static int vxlan_leave_group(struct net_device *dev) /* Callback from net/ipv4/udp.c to receive packets */ static int vxlan_udp_encap_recv(struct sock *sk, struct sk_buff *skb) { - struct iphdr *oip; + struct iphdr *oip = NULL; +#if IS_ENABLED(CONFIG_IPV6) + struct ipv6hdr *oip6 = NULL; +#endif struct vxlanhdr *vxh; struct vxlan_dev *vxlan; struct pcpu_tstats *stats; + struct vxlan_addr src_ip; __u32 vni; - int err; + int err = 0; /* pop off outer UDP header */ __skb_pull(skb, sizeof(struct udphdr)); @@ -694,7 +804,13 @@ static int vxlan_udp_encap_recv(struct sock *sk, struct sk_buff *skb) skb_reset_mac_header(skb); /* Re-examine inner Ethernet packet */ - oip = ip_hdr(skb); + if (skb->protocol == htons(ETH_P_IP)) + oip = ip_hdr(skb); +#if IS_ENABLED(CONFIG_IPV6) + if (skb->protocol == htons(ETH_P_IPV6)) + oip6 = ipv6_hdr(skb); +#endif + skb->protocol = eth_type_trans(skb, vxlan->dev); /* Ignore packet loops (and multicast echo) */ @@ -702,8 +818,19 @@ static int vxlan_udp_encap_recv(struct sock *sk, struct sk_buff *skb) vxlan->dev->dev_addr) == 0) goto drop; - if (vxlan->flags & VXLAN_F_LEARN) - vxlan_snoop(skb->dev, oip->saddr, eth_hdr(skb)->h_source); + if (vxlan->flags & VXLAN_F_LEARN) { + if (oip) { + src_ip.va_sin = oip->saddr; + src_ip.va_sa = AF_INET; + } +#if IS_ENABLED(CONFIG_IPV6) + if (oip6) { + src_ip.va_sin6 = oip6->saddr; + src_ip.va_sa = AF_INET6; + } +#endif + vxlan_snoop(skb->dev, &src_ip, eth_hdr(skb)->h_source); + } __skb_tunnel_rx(skb, vxlan->dev); skb_reset_network_header(skb); @@ -719,11 +846,24 @@ static int vxlan_udp_encap_recv(struct sock *sk, struct sk_buff *skb) skb->encapsulation = 0; - err = IP_ECN_decapsulate(oip, skb); +#if IS_ENABLED(CONFIG_IPV6) + if (oip6) + err = IP6_ECN_decapsulate(oip6, skb); +#endif + if (oip) + err = IP_ECN_decapsulate(oip, skb); + if (unlikely(err)) { - if (log_ecn_error) - net_info_ratelimited("non-ECT from %pI4 with TOS=%#x\n", - &oip->saddr, oip->tos); + if (log_ecn_error) { +#if IS_ENABLED(CONFIG_IPV6) + if (oip6) + net_info_ratelimited("non-ECT from %pI6\n", + &oip6->saddr); +#endif + if (oip) + net_info_ratelimited("non-ECT from %pI4 with TOS=%#x\n", + &oip->saddr, oip->tos); + } if (err > 1) { ++vxlan->dev->stats.rx_frame_errors; ++vxlan->dev->stats.rx_errors; @@ -758,6 +898,7 @@ static int arp_reduce(struct net_device *dev, struct sk_buff *skb) u8 *arpptr, *sha; __be32 sip, tip; struct neighbour *n; + struct vxlan_addr ipa; if (dev->flags & IFF_NOARP) goto out; @@ -799,7 +940,7 @@ static int arp_reduce(struct net_device *dev, struct sk_buff *skb) } f = vxlan_find_mac(vxlan, n->ha); - if (f && f->remote.remote_ip == htonl(INADDR_ANY)) { + if (f && vxlan_addr_any(&f->remote.remote_ip)) { /* bridge-local neighbor */ neigh_release(n); goto out; @@ -817,8 +958,11 @@ static int arp_reduce(struct net_device *dev, struct sk_buff *skb) if (netif_rx_ni(reply) == NET_RX_DROP) dev->stats.rx_dropped++; - } else if (vxlan->flags & VXLAN_F_L3MISS) - vxlan_ip_miss(dev, tip); + } else if (vxlan->flags & VXLAN_F_L3MISS) { + ipa.va_sin = tip; + ipa.va_sa = AF_INET; + vxlan_ip_miss(dev, &ipa); + } out: consume_skb(skb); return NETDEV_TX_OK; @@ -840,6 +984,14 @@ static bool route_shortcircuit(struct net_device *dev, struct sk_buff *skb) return false; pip = ip_hdr(skb); n = neigh_lookup(&arp_tbl, &pip->daddr, dev); + if (!n && vxlan->flags & VXLAN_F_L3MISS) { + struct vxlan_addr ipa; + ipa.va_sin = pip->daddr; + ipa.va_sa = AF_INET; + vxlan_ip_miss(dev, &ipa); + return false; + } + break; default: return false; @@ -856,8 +1008,8 @@ static bool route_shortcircuit(struct net_device *dev, struct sk_buff *skb) } neigh_release(n); return diff; - } else if (vxlan->flags & VXLAN_F_L3MISS) - vxlan_ip_miss(dev, pip->daddr); + } + return false; } @@ -867,7 +1019,8 @@ static void vxlan_sock_free(struct sk_buff *skb) } /* On transmit, associate with the tunnel socket */ -static void vxlan_set_owner(struct net_device *dev, struct sk_buff *skb) +static inline void vxlan_set_owner(struct net_device *dev, + struct sk_buff *skb) { struct vxlan_net *vn = net_generic(dev_net(dev), vxlan_net_id); struct sock *sk = vn->sock->sk; @@ -916,15 +1069,26 @@ static void vxlan_encap_bypass(struct sk_buff *skb, struct vxlan_dev *src_vxlan, { struct pcpu_tstats *tx_stats = this_cpu_ptr(src_vxlan->dev->tstats); struct pcpu_tstats *rx_stats = this_cpu_ptr(dst_vxlan->dev->tstats); + struct vxlan_addr loopback; skb->pkt_type = PACKET_HOST; skb->encapsulation = 0; skb->dev = dst_vxlan->dev; __skb_pull(skb, skb_network_offset(skb)); + if (dst_vxlan->default_dst.remote_ip.va_sa == AF_INET) { + loopback.va_sin = htonl(INADDR_LOOPBACK); + loopback.va_sa = AF_INET; + } +#if IS_ENABLED(CONFIG_IPV6) + else { + loopback.va_sin6 = in6addr_loopback; + loopback.va_sa = AF_INET6; + } +#endif + if (dst_vxlan->flags & VXLAN_F_LEARN) - vxlan_snoop(skb->dev, htonl(INADDR_LOOPBACK), - eth_hdr(skb)->h_source); + vxlan_snoop(skb->dev, &loopback, eth_hdr(skb)->h_source); u64_stats_update_begin(&tx_stats->syncp); tx_stats->tx_packets++; @@ -946,22 +1110,29 @@ static netdev_tx_t vxlan_xmit_one(struct sk_buff *skb, struct net_device *dev, { struct vxlan_dev *vxlan = netdev_priv(dev); struct rtable *rt; - const struct iphdr *old_iph; + const struct iphdr *old_iph = NULL; struct iphdr *iph; struct vxlanhdr *vxh; struct udphdr *uh; struct flowi4 fl4; - __be32 dst; - __u16 src_port, dst_port; +#if IS_ENABLED(CONFIG_IPV6) + struct flowi6 fl6; + struct vxlan_net *vn = net_generic(dev_net(dev), vxlan_net_id); + struct sock *sk = vn->sock->sk; + struct ipv6hdr *ip6h; +#endif + const struct vxlan_addr *dst; + struct dst_entry *ndst = NULL; + __u16 src_port = 0, dst_port; u32 vni; __be16 df = 0; __u8 tos, ttl; dst_port = rdst->remote_port ? rdst->remote_port : vxlan_port; vni = rdst->remote_vni; - dst = rdst->remote_ip; + dst = &rdst->remote_ip; - if (!dst) { + if (vxlan_addr_any(dst)) { if (did_rsc) { /* short-circuited back to local bridge */ vxlan_encap_bypass(skb, vxlan, vxlan); @@ -975,60 +1146,115 @@ static netdev_tx_t vxlan_xmit_one(struct sk_buff *skb, struct net_device *dev, skb->encapsulation = 1; } - /* Need space for new headers (invalidates iph ptr) */ - if (skb_cow_head(skb, VXLAN_HEADROOM)) - goto drop; + ttl = vxlan->ttl; + tos = vxlan->tos; + if (dst->va_sa == AF_INET) { + /* Need space for new headers (invalidates iph ptr) */ + if (skb_cow_head(skb, VXLAN_HEADROOM)) + goto drop; - old_iph = ip_hdr(skb); + old_iph = ip_hdr(skb); + if (!ttl && IN_MULTICAST(ntohl(dst->va_sin))) + ttl = 1; - ttl = vxlan->ttl; - if (!ttl && IN_MULTICAST(ntohl(dst))) - ttl = 1; + if (tos == 1) + tos = ip_tunnel_get_dsfield(old_iph, skb); - tos = vxlan->tos; - if (tos == 1) - tos = ip_tunnel_get_dsfield(old_iph, skb); - - src_port = vxlan_src_port(vxlan, skb); - - memset(&fl4, 0, sizeof(fl4)); - fl4.flowi4_oif = rdst->remote_ifindex; - fl4.flowi4_tos = RT_TOS(tos); - fl4.daddr = dst; - fl4.saddr = vxlan->saddr; - - rt = ip_route_output_key(dev_net(dev), &fl4); - if (IS_ERR(rt)) { - netdev_dbg(dev, "no route to %pI4\n", &dst); - dev->stats.tx_carrier_errors++; - goto tx_error; - } + src_port = vxlan_src_port(vxlan, skb); - if (rt->dst.dev == dev) { - netdev_dbg(dev, "circular route to %pI4\n", &dst); - ip_rt_put(rt); - dev->stats.collisions++; - goto tx_error; - } + memset(&fl4, 0, sizeof(fl4)); + fl4.flowi4_oif = rdst->remote_ifindex; + fl4.flowi4_tos = RT_TOS(tos); + fl4.daddr = dst->va_sin; + fl4.saddr = vxlan->saddr.va_sin; + + rt = ip_route_output_key(dev_net(dev), &fl4); + if (IS_ERR(rt)) { + netdev_dbg(dev, "no route to %pI4\n", &dst->va_sin); + dev->stats.tx_carrier_errors++; + goto tx_error; + } + + if (rt->dst.dev == dev) { + netdev_dbg(dev, "circular route to %pI4\n", &dst->va_sin); + ip_rt_put(rt); + dev->stats.collisions++; + goto tx_error; + } - /* Bypass encapsulation if the destination is local */ - if (rt->rt_flags & RTCF_LOCAL && - !(rt->rt_flags & (RTCF_BROADCAST | RTCF_MULTICAST))) { - struct vxlan_dev *dst_vxlan; + /* Bypass encapsulation if the destination is local */ + if (rt->rt_flags & RTCF_LOCAL && + !(rt->rt_flags & (RTCF_BROADCAST | RTCF_MULTICAST))) { + struct vxlan_dev *dst_vxlan; - ip_rt_put(rt); - dst_vxlan = vxlan_find_vni(dev_net(dev), vni); - if (!dst_vxlan) + ip_rt_put(rt); + dst_vxlan = vxlan_find_vni(dev_net(dev), vni); + if (!dst_vxlan) + goto tx_error; + vxlan_encap_bypass(skb, vxlan, dst_vxlan); + return NETDEV_TX_OK; + } + + ndst = &rt->dst; + } else { +#if IS_ENABLED(CONFIG_IPV6) + const struct ipv6hdr *old_iph6; + u32 flags; + + /* Need space for new headers (invalidates iph ptr) */ + if (skb_cow_head(skb, VXLAN6_HEADROOM)) + goto drop; + + old_iph6 = ipv6_hdr(skb); + if (!ttl && ipv6_addr_is_multicast(&dst->va_sin6)) + ttl = 1; + + if (tos == 1) + tos = ipv6_get_dsfield(old_iph6); + + src_port = vxlan_src_port(vxlan, skb); + + memset(&fl6, 0, sizeof(fl6)); + fl6.flowi6_oif = rdst->remote_ifindex; + fl6.flowi6_tos = RT_TOS(tos); + fl6.daddr = dst->va_sin6; + fl6.saddr = vxlan->saddr.va_sin6; + fl6.flowi6_proto = skb->protocol; + + if (ip6_dst_lookup(sk, &ndst, &fl6)) { + netdev_dbg(dev, "no route to %pI6\n", &dst->va_sin6); + dev->stats.tx_carrier_errors++; goto tx_error; - vxlan_encap_bypass(skb, vxlan, dst_vxlan); - return NETDEV_TX_OK; + } + + if (ndst->dev == dev) { + netdev_dbg(dev, "circular route to %pI6\n", &dst->va_sin6); + dst_release(ndst); + dev->stats.collisions++; + goto tx_error; + } + + /* Bypass encapsulation if the destination is local */ + flags = ((struct rt6_info *)ndst)->rt6i_flags; + if (flags & RTF_LOCAL && + !(flags & (RTCF_BROADCAST | RTCF_MULTICAST))) { + struct vxlan_dev *dst_vxlan; + + dst_release(ndst); + dst_vxlan = vxlan_find_vni(dev_net(dev), vni); + if (!dst_vxlan) + goto tx_error; + vxlan_encap_bypass(skb, vxlan, dst_vxlan); + return NETDEV_TX_OK; + } +#endif } memset(&(IPCB(skb)->opt), 0, sizeof(IPCB(skb)->opt)); IPCB(skb)->flags &= ~(IPSKB_XFRM_TUNNEL_SIZE | IPSKB_XFRM_TRANSFORMED | IPSKB_REROUTED); skb_dst_drop(skb); - skb_dst_set(skb, &rt->dst); + skb_dst_set(skb, ndst); vxh = (struct vxlanhdr *) __skb_push(skb, sizeof(*vxh)); vxh->vx_flags = htonl(VXLAN_FLAGS); @@ -1044,27 +1270,55 @@ static netdev_tx_t vxlan_xmit_one(struct sk_buff *skb, struct net_device *dev, uh->len = htons(skb->len); uh->check = 0; - __skb_push(skb, sizeof(*iph)); - skb_reset_network_header(skb); - iph = ip_hdr(skb); - iph->version = 4; - iph->ihl = sizeof(struct iphdr) >> 2; - iph->frag_off = df; - iph->protocol = IPPROTO_UDP; - iph->tos = ip_tunnel_ecn_encap(tos, old_iph, skb); - iph->daddr = dst; - iph->saddr = fl4.saddr; - iph->ttl = ttl ? : ip4_dst_hoplimit(&rt->dst); - tunnel_ip_select_ident(skb, old_iph, &rt->dst); - - nf_reset(skb); + if (dst->va_sa == AF_INET) { + __skb_push(skb, sizeof(*iph)); + skb_reset_network_header(skb); + iph = ip_hdr(skb); + iph->version = 4; + iph->ihl = sizeof(struct iphdr) >> 2; + iph->frag_off = df; + iph->protocol = IPPROTO_UDP; + iph->tos = ip_tunnel_ecn_encap(tos, old_iph, skb); + iph->daddr = dst->va_sin; + iph->saddr = fl4.saddr; + iph->ttl = ttl ? : ip4_dst_hoplimit(ndst); + tunnel_ip_select_ident(skb, old_iph, ndst); + } else { +#if IS_ENABLED(CONFIG_IPV6) + if (skb->ip_summed == CHECKSUM_PARTIAL) { + skb->csum_start = skb_transport_header(skb) - skb->head; + skb->csum_offset = offsetof(struct udphdr, check); + } else + uh->check = csum_ipv6_magic(&fl6.saddr, &fl6.daddr, + skb->len, IPPROTO_UDP, + csum_partial(uh, skb->len, 0)); + __skb_push(skb, sizeof(*ip6h)); + skb_reset_network_header(skb); + ip6h = ipv6_hdr(skb); + ip6h->version = 6; + ip6h->priority = 0; + ip6h->flow_lbl[0] = 0; + ip6h->flow_lbl[1] = 0; + ip6h->flow_lbl[2] = 0; + ip6h->payload_len = htons(skb->len); + ip6h->nexthdr = IPPROTO_UDP; + ip6h->hop_limit = ttl ? : ip6_dst_hoplimit(ndst); + ip6h->daddr = fl6.daddr; + ip6h->saddr = fl6.saddr; +#endif + } vxlan_set_owner(dev, skb); if (handle_offloads(skb)) goto drop; - iptunnel_xmit(skb, dev); +#if IS_ENABLED(CONFIG_IPV6) + if (dst->va_sa == AF_INET6) + ip6tunnel_xmit(skb, dev); + else +#endif + iptunnel_xmit(skb, dev); return NETDEV_TX_OK; drop: @@ -1106,7 +1360,7 @@ static netdev_tx_t vxlan_xmit(struct sk_buff *skb, struct net_device *dev) did_rsc = false; rdst0 = &vxlan->default_dst; - if (rdst0->remote_ip == htonl(INADDR_ANY) && + if (vxlan_addr_any(&rdst0->remote_ip) && (vxlan->flags & VXLAN_F_L2MISS) && !is_multicast_ether_addr(eth->h_dest)) vxlan_fdb_miss(vxlan, eth->h_dest); @@ -1184,7 +1438,7 @@ static int vxlan_open(struct net_device *dev) struct vxlan_dev *vxlan = netdev_priv(dev); int err; - if (IN_MULTICAST(ntohl(vxlan->default_dst.remote_ip))) { + if (vxlan_addr_multicast(&vxlan->default_dst.remote_ip)) { err = vxlan_join_group(dev); if (err) return err; @@ -1218,7 +1472,7 @@ static int vxlan_stop(struct net_device *dev) { struct vxlan_dev *vxlan = netdev_priv(dev); - if (IN_MULTICAST(ntohl(vxlan->default_dst.remote_ip))) + if (vxlan_addr_multicast(&vxlan->default_dst.remote_ip)) vxlan_leave_group(dev); del_timer_sync(&vxlan->age_timer); @@ -1268,7 +1522,12 @@ static void vxlan_setup(struct net_device *dev) eth_hw_addr_random(dev); ether_setup(dev); - dev->hard_header_len = ETH_HLEN + VXLAN_HEADROOM; +#if IS_ENABLED(CONFIG_IPV6) + if (vxlan->default_dst.remote_ip.va_sa == AF_INET6) + dev->hard_header_len = ETH_HLEN + VXLAN6_HEADROOM; + else +#endif + dev->hard_header_len = ETH_HLEN + VXLAN_HEADROOM; dev->netdev_ops = &vxlan_netdev_ops; dev->destructor = vxlan_free; @@ -1305,8 +1564,10 @@ static void vxlan_setup(struct net_device *dev) static const struct nla_policy vxlan_policy[IFLA_VXLAN_MAX + 1] = { [IFLA_VXLAN_ID] = { .type = NLA_U32 }, [IFLA_VXLAN_REMOTE] = { .len = FIELD_SIZEOF(struct iphdr, daddr) }, + [IFLA_VXLAN_REMOTE6] = { .len = sizeof(struct in6_addr) }, [IFLA_VXLAN_LINK] = { .type = NLA_U32 }, [IFLA_VXLAN_LOCAL] = { .len = FIELD_SIZEOF(struct iphdr, saddr) }, + [IFLA_VXLAN_LOCAL6] = { .len = sizeof(struct in6_addr) }, [IFLA_VXLAN_TOS] = { .type = NLA_U8 }, [IFLA_VXLAN_TTL] = { .type = NLA_U8 }, [IFLA_VXLAN_LEARNING] = { .type = NLA_U8 }, @@ -1342,6 +1603,25 @@ static int vxlan_validate(struct nlattr *tb[], struct nlattr *data[]) return -ERANGE; } + if (data[IFLA_VXLAN_REMOTE]) { + __be32 gaddr = nla_get_be32(data[IFLA_VXLAN_REMOTE]); + if (!IN_MULTICAST(ntohl(gaddr))) { + pr_debug("group address is not IPv4 multicast\n"); + return -EADDRNOTAVAIL; + } + } else if (data[IFLA_VXLAN_REMOTE6]) { +#if IS_ENABLED(CONFIG_IPV6) + struct in6_addr gaddr; + nla_memcpy(&gaddr, data[IFLA_VXLAN_REMOTE6], sizeof(gaddr)); + if (!ipv6_addr_is_multicast(&gaddr)) { + pr_debug("group address is not IPv6 multicast\n"); + return -EADDRNOTAVAIL; + } +#else + return -EPFNOSUPPORT; +#endif + } + if (data[IFLA_VXLAN_PORT_RANGE]) { const struct ifla_vxlan_port_range *p = nla_data(data[IFLA_VXLAN_PORT_RANGE]); @@ -1386,11 +1666,31 @@ static int vxlan_newlink(struct net *net, struct net_device *dev, } dst->remote_vni = vni; - if (data[IFLA_VXLAN_REMOTE]) - dst->remote_ip = nla_get_be32(data[IFLA_VXLAN_REMOTE]); + if (data[IFLA_VXLAN_REMOTE]) { + dst->remote_ip.va_sin = nla_get_be32(data[IFLA_VXLAN_REMOTE]); + dst->remote_ip.va_sa = AF_INET; + } else if (data[IFLA_VXLAN_REMOTE6]) { +#if IS_ENABLED(CONFIG_IPV6) + nla_memcpy(&dst->remote_ip.va_sin6, data[IFLA_VXLAN_REMOTE6], + sizeof(struct in6_addr)); + dst->remote_ip.va_sa = AF_INET6; +#else + return -EPFNOSUPPORT; +#endif + } - if (data[IFLA_VXLAN_LOCAL]) - vxlan->saddr = nla_get_be32(data[IFLA_VXLAN_LOCAL]); + if (data[IFLA_VXLAN_LOCAL]) { + vxlan->saddr.va_sin = nla_get_be32(data[IFLA_VXLAN_LOCAL]); + vxlan->saddr.va_sa = AF_INET; + } else if (data[IFLA_VXLAN_LOCAL6]) { +#if IS_ENABLED(CONFIG_IPV6) + nla_memcpy(&vxlan->saddr.va_sin6, data[IFLA_VXLAN_LOCAL6], + sizeof(struct in6_addr)); + vxlan->saddr.va_sa = AF_INET6; +#else + return -EPFNOSUPPORT; +#endif + } if (data[IFLA_VXLAN_LINK] && (dst->remote_ifindex = nla_get_u32(data[IFLA_VXLAN_LINK]))) { @@ -1468,9 +1768,9 @@ static size_t vxlan_get_size(const struct net_device *dev) { return nla_total_size(sizeof(__u32)) + /* IFLA_VXLAN_ID */ - nla_total_size(sizeof(__be32)) +/* IFLA_VXLAN_REMOTE */ + nla_total_size(sizeof(struct in6_addr)) + /* IFLA_VXLAN_REMOTE{6} */ nla_total_size(sizeof(__u32)) + /* IFLA_VXLAN_LINK */ - nla_total_size(sizeof(__be32))+ /* IFLA_VXLAN_LOCAL */ + nla_total_size(sizeof(struct in6_addr)) + /* IFLA_VXLAN_LOCAL{6} */ nla_total_size(sizeof(__u8)) + /* IFLA_VXLAN_TTL */ nla_total_size(sizeof(__u8)) + /* IFLA_VXLAN_TOS */ nla_total_size(sizeof(__u8)) + /* IFLA_VXLAN_LEARNING */ @@ -1496,14 +1796,34 @@ static int vxlan_fill_info(struct sk_buff *skb, const struct net_device *dev) if (nla_put_u32(skb, IFLA_VXLAN_ID, dst->remote_vni)) goto nla_put_failure; - if (dst->remote_ip && nla_put_be32(skb, IFLA_VXLAN_REMOTE, dst->remote_ip)) - goto nla_put_failure; + if (!vxlan_addr_any(&dst->remote_ip)) { + if (dst->remote_ip.va_sa == AF_INET) { + if (nla_put_be32(skb, IFLA_VXLAN_REMOTE, dst->remote_ip.va_sin)) + goto nla_put_failure; + } else { +#if IS_ENABLED(CONFIG_IPV6) + if (nla_put(skb, IFLA_VXLAN_REMOTE6, sizeof(struct in6_addr), + &dst->remote_ip.va_sin6)) + goto nla_put_failure; +#endif + } + } if (dst->remote_ifindex && nla_put_u32(skb, IFLA_VXLAN_LINK, dst->remote_ifindex)) goto nla_put_failure; - if (vxlan->saddr && nla_put_be32(skb, IFLA_VXLAN_LOCAL, vxlan->saddr)) - goto nla_put_failure; + if (!vxlan_addr_any(&vxlan->saddr)) { + if (vxlan->saddr.va_sa == AF_INET) { + if (nla_put_be32(skb, IFLA_VXLAN_LOCAL, vxlan->saddr.va_sin)) + goto nla_put_failure; + } else { +#if IS_ENABLED(CONFIG_IPV6) + if (nla_put(skb, IFLA_VXLAN_LOCAL6, sizeof(struct in6_addr), + &vxlan->saddr.va_sin6)) + goto nla_put_failure; +#endif + } + } if (nla_put_u8(skb, IFLA_VXLAN_TTL, vxlan->ttl) || nla_put_u8(skb, IFLA_VXLAN_TOS, vxlan->tos) || @@ -1542,38 +1862,82 @@ static struct rtnl_link_ops vxlan_link_ops __read_mostly = { .fill_info = vxlan_fill_info, }; -static __net_init int vxlan_init_net(struct net *net) +/* Create UDP socket for encapsulation receive. AF_INET6 socket + * could be used for both IPv4 and IPv6 communications. + */ +#if IS_ENABLED(CONFIG_IPV6) +static __net_init int create_sock(struct net *net, struct sock **sk) +{ + struct vxlan_net *vn = net_generic(net, vxlan_net_id); + struct sockaddr_in6 vxlan_addr = { + .sin6_family = AF_INET6, + .sin6_port = htons(vxlan_port), + }; + int rc; + + rc = sock_create_kern(AF_INET6, SOCK_DGRAM, IPPROTO_UDP, &vn->sock); + if (rc < 0) { + pr_debug("UDP socket create failed\n"); + return rc; + } + /* Put in proper namespace */ + *sk = vn->sock->sk; + sk_change_net(*sk, net); + + rc = kernel_bind(vn->sock, (struct sockaddr *)&vxlan_addr, + sizeof(struct sockaddr_in6)); + if (rc < 0) { + pr_debug("bind for UDP socket %pI6:%u (%d)\n", + &vxlan_addr.sin6_addr, ntohs(vxlan_addr.sin6_port), rc); + sk_release_kernel(*sk); + vn->sock = NULL; + return rc; + } + return 0; +} +#else +static __net_init int create_sock(struct net *net, struct sock **sk) { struct vxlan_net *vn = net_generic(net, vxlan_net_id); - struct sock *sk; struct sockaddr_in vxlan_addr = { .sin_family = AF_INET, + .sin_port = htons(vxlan_port), .sin_addr.s_addr = htonl(INADDR_ANY), }; int rc; - unsigned h; - /* Create UDP socket for encapsulation receive. */ rc = sock_create_kern(AF_INET, SOCK_DGRAM, IPPROTO_UDP, &vn->sock); if (rc < 0) { pr_debug("UDP socket create failed\n"); return rc; } /* Put in proper namespace */ - sk = vn->sock->sk; - sk_change_net(sk, net); - - vxlan_addr.sin_port = htons(vxlan_port); + *sk = vn->sock->sk; + sk_change_net(*sk, net); - rc = kernel_bind(vn->sock, (struct sockaddr *) &vxlan_addr, - sizeof(vxlan_addr)); + rc = kernel_bind(vn->sock, (struct sockaddr *)&vxlan_addr, + sizeof(struct sockaddr_in)); if (rc < 0) { pr_debug("bind for UDP socket %pI4:%u (%d)\n", &vxlan_addr.sin_addr, ntohs(vxlan_addr.sin_port), rc); - sk_release_kernel(sk); + sk_release_kernel(*sk); vn->sock = NULL; return rc; } + return 0; +} +#endif + +static __net_init int vxlan_init_net(struct net *net) +{ + struct vxlan_net *vn = net_generic(net, vxlan_net_id); + struct sock *sk; + int rc; + unsigned h; + + rc = create_sock(net, &sk); + if (rc < 0) + return rc; /* Disable multicast loopback */ inet_sk(sk)->mc_loop = 0; @@ -1582,6 +1946,9 @@ static __net_init int vxlan_init_net(struct net *net) udp_sk(sk)->encap_type = 1; udp_sk(sk)->encap_rcv = vxlan_udp_encap_recv; udp_encap_enable(); +#if IS_ENABLED(CONFIG_IPV6) + udpv6_encap_enable(); +#endif for (h = 0; h < VNI_HASH_SIZE; ++h) INIT_HLIST_HEAD(&vn->vni_list[h]); diff --git a/include/uapi/linux/if_link.h b/include/uapi/linux/if_link.h index 9922704..f47ab4c 100644 --- a/include/uapi/linux/if_link.h +++ b/include/uapi/linux/if_link.h @@ -309,6 +309,8 @@ enum { IFLA_VXLAN_RSC, IFLA_VXLAN_L2MISS, IFLA_VXLAN_L3MISS, + IFLA_VXLAN_REMOTE6, + IFLA_VXLAN_LOCAL6, __IFLA_VXLAN_MAX }; #define IFLA_VXLAN_MAX (__IFLA_VXLAN_MAX - 1) -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 3/5] vxlan: add ipv6 support 2013-04-17 5:10 ` [Patch net-next v4 3/5] vxlan: add ipv6 support Cong Wang @ 2013-04-17 8:15 ` Mike Rapoport 2013-04-17 9:57 ` Cong Wang 2013-04-18 14:34 ` Mike Rapoport 1 sibling, 1 reply; 33+ messages in thread From: Mike Rapoport @ 2013-04-17 8:15 UTC (permalink / raw) To: Cong Wang; +Cc: netdev, David Stevens, Stephen Hemminger, David S. Miller On Wed, Apr 17, 2013 at 01:10:20PM +0800, Cong Wang wrote: > From: Cong Wang <amwang@redhat.com> > > This patch adds IPv6 support to vxlan device, as the new version > RFC already mentioned it: > > http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-03 > > Cc: David Stevens <dlstevens@us.ibm.com> > Cc: Stephen Hemminger <stephen@networkplumber.org> > Cc: David S. Miller <davem@davemloft.net> > Signed-off-by: Cong Wang <amwang@redhat.com> > --- > drivers/net/vxlan.c | 639 +++++++++++++++++++++++++++++++++--------- > include/uapi/linux/if_link.h | 2 + > 2 files changed, 505 insertions(+), 136 deletions(-) > > diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c > index f8ac900..43ed40f 100644 > --- a/drivers/net/vxlan.c > +++ b/drivers/net/vxlan.c > @@ -9,7 +9,6 @@ > * > * TODO > * - use IANA UDP port number (when defined) > - * - IPv6 (not in RFC) > */ > > #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt > @@ -42,6 +41,11 @@ > #include <net/inet_ecn.h> > #include <net/net_namespace.h> > #include <net/netns/generic.h> > +#if IS_ENABLED(CONFIG_IPV6) It seems to me that some of the #ifdefs may be removed, especially on the rtnetlink path. > +#include <net/addrconf.h> > +#include <net/ip6_route.h> > +#include <net/ip6_tunnel.h> > +#endif > > #define VXLAN_VERSION "0.1" > [ snip ] > @@ -1342,6 +1603,25 @@ static int vxlan_validate(struct nlattr *tb[], struct nlattr *data[]) > return -ERANGE; > } > > + if (data[IFLA_VXLAN_REMOTE]) { > + __be32 gaddr = nla_get_be32(data[IFLA_VXLAN_REMOTE]); > + if (!IN_MULTICAST(ntohl(gaddr))) { > + pr_debug("group address is not IPv4 multicast\n"); > + return -EADDRNOTAVAIL; > + } > + } else if (data[IFLA_VXLAN_REMOTE6]) { > +#if IS_ENABLED(CONFIG_IPV6) > + struct in6_addr gaddr; > + nla_memcpy(&gaddr, data[IFLA_VXLAN_REMOTE6], sizeof(gaddr)); > + if (!ipv6_addr_is_multicast(&gaddr)) { > + pr_debug("group address is not IPv6 multicast\n"); > + return -EADDRNOTAVAIL; > + } > +#else > + return -EPFNOSUPPORT; > +#endif > + } Adding back the test for multicast address contradicts the ability to use unicast as default remote destination. > + > if (data[IFLA_VXLAN_PORT_RANGE]) { > const struct ifla_vxlan_port_range *p > = nla_data(data[IFLA_VXLAN_PORT_RANGE]); > @@ -1386,11 +1666,31 @@ static int vxlan_newlink(struct net *net, struct net_device *dev, > } > dst->remote_vni = vni; > > - if (data[IFLA_VXLAN_REMOTE]) > - dst->remote_ip = nla_get_be32(data[IFLA_VXLAN_REMOTE]); > + if (data[IFLA_VXLAN_REMOTE]) { > + dst->remote_ip.va_sin = nla_get_be32(data[IFLA_VXLAN_REMOTE]); > + dst->remote_ip.va_sa = AF_INET; > + } else if (data[IFLA_VXLAN_REMOTE6]) { > +#if IS_ENABLED(CONFIG_IPV6) > + nla_memcpy(&dst->remote_ip.va_sin6, data[IFLA_VXLAN_REMOTE6], > + sizeof(struct in6_addr)); > + dst->remote_ip.va_sa = AF_INET6; > +#else > + return -EPFNOSUPPORT; > +#endif > + } > > - if (data[IFLA_VXLAN_LOCAL]) > - vxlan->saddr = nla_get_be32(data[IFLA_VXLAN_LOCAL]); > + if (data[IFLA_VXLAN_LOCAL]) { > + vxlan->saddr.va_sin = nla_get_be32(data[IFLA_VXLAN_LOCAL]); > + vxlan->saddr.va_sa = AF_INET; > + } else if (data[IFLA_VXLAN_LOCAL6]) { > +#if IS_ENABLED(CONFIG_IPV6) > + nla_memcpy(&vxlan->saddr.va_sin6, data[IFLA_VXLAN_LOCAL6], > + sizeof(struct in6_addr)); > + vxlan->saddr.va_sa = AF_INET6; > +#else > + return -EPFNOSUPPORT; > +#endif > + } > > if (data[IFLA_VXLAN_LINK] && > (dst->remote_ifindex = nla_get_u32(data[IFLA_VXLAN_LINK]))) { > @@ -1468,9 +1768,9 @@ static size_t vxlan_get_size(const struct net_device *dev) > { > > return nla_total_size(sizeof(__u32)) + /* IFLA_VXLAN_ID */ > - nla_total_size(sizeof(__be32)) +/* IFLA_VXLAN_REMOTE */ > + nla_total_size(sizeof(struct in6_addr)) + /* IFLA_VXLAN_REMOTE{6} */ > nla_total_size(sizeof(__u32)) + /* IFLA_VXLAN_LINK */ > - nla_total_size(sizeof(__be32))+ /* IFLA_VXLAN_LOCAL */ > + nla_total_size(sizeof(struct in6_addr)) + /* IFLA_VXLAN_LOCAL{6} */ > nla_total_size(sizeof(__u8)) + /* IFLA_VXLAN_TTL */ > nla_total_size(sizeof(__u8)) + /* IFLA_VXLAN_TOS */ > nla_total_size(sizeof(__u8)) + /* IFLA_VXLAN_LEARNING */ > @@ -1496,14 +1796,34 @@ static int vxlan_fill_info(struct sk_buff *skb, const struct net_device *dev) > if (nla_put_u32(skb, IFLA_VXLAN_ID, dst->remote_vni)) > goto nla_put_failure; > > - if (dst->remote_ip && nla_put_be32(skb, IFLA_VXLAN_REMOTE, dst->remote_ip)) > - goto nla_put_failure; > + if (!vxlan_addr_any(&dst->remote_ip)) { > + if (dst->remote_ip.va_sa == AF_INET) { > + if (nla_put_be32(skb, IFLA_VXLAN_REMOTE, dst->remote_ip.va_sin)) > + goto nla_put_failure; > + } else { > +#if IS_ENABLED(CONFIG_IPV6) > + if (nla_put(skb, IFLA_VXLAN_REMOTE6, sizeof(struct in6_addr), > + &dst->remote_ip.va_sin6)) > + goto nla_put_failure; > +#endif > + } > + } > > if (dst->remote_ifindex && nla_put_u32(skb, IFLA_VXLAN_LINK, dst->remote_ifindex)) > goto nla_put_failure; > > - if (vxlan->saddr && nla_put_be32(skb, IFLA_VXLAN_LOCAL, vxlan->saddr)) > - goto nla_put_failure; > + if (!vxlan_addr_any(&vxlan->saddr)) { > + if (vxlan->saddr.va_sa == AF_INET) { > + if (nla_put_be32(skb, IFLA_VXLAN_LOCAL, vxlan->saddr.va_sin)) > + goto nla_put_failure; > + } else { > +#if IS_ENABLED(CONFIG_IPV6) > + if (nla_put(skb, IFLA_VXLAN_LOCAL6, sizeof(struct in6_addr), > + &vxlan->saddr.va_sin6)) > + goto nla_put_failure; > +#endif > + } > + } > > if (nla_put_u8(skb, IFLA_VXLAN_TTL, vxlan->ttl) || > nla_put_u8(skb, IFLA_VXLAN_TOS, vxlan->tos) || > @@ -1542,38 +1862,82 @@ static struct rtnl_link_ops vxlan_link_ops __read_mostly = { > .fill_info = vxlan_fill_info, > }; > > -static __net_init int vxlan_init_net(struct net *net) > +/* Create UDP socket for encapsulation receive. AF_INET6 socket > + * could be used for both IPv4 and IPv6 communications. > + */ > +#if IS_ENABLED(CONFIG_IPV6) > +static __net_init int create_sock(struct net *net, struct sock **sk) > +{ > + struct vxlan_net *vn = net_generic(net, vxlan_net_id); > + struct sockaddr_in6 vxlan_addr = { > + .sin6_family = AF_INET6, > + .sin6_port = htons(vxlan_port), > + }; > + int rc; > + > + rc = sock_create_kern(AF_INET6, SOCK_DGRAM, IPPROTO_UDP, &vn->sock); > + if (rc < 0) { > + pr_debug("UDP socket create failed\n"); > + return rc; > + } > + /* Put in proper namespace */ > + *sk = vn->sock->sk; > + sk_change_net(*sk, net); > + > + rc = kernel_bind(vn->sock, (struct sockaddr *)&vxlan_addr, > + sizeof(struct sockaddr_in6)); > + if (rc < 0) { > + pr_debug("bind for UDP socket %pI6:%u (%d)\n", > + &vxlan_addr.sin6_addr, ntohs(vxlan_addr.sin6_port), rc); > + sk_release_kernel(*sk); > + vn->sock = NULL; > + return rc; > + } > + return 0; > +} > +#else > +static __net_init int create_sock(struct net *net, struct sock **sk) > { > struct vxlan_net *vn = net_generic(net, vxlan_net_id); > - struct sock *sk; > struct sockaddr_in vxlan_addr = { > .sin_family = AF_INET, > + .sin_port = htons(vxlan_port), > .sin_addr.s_addr = htonl(INADDR_ANY), > }; > int rc; > - unsigned h; > > - /* Create UDP socket for encapsulation receive. */ > rc = sock_create_kern(AF_INET, SOCK_DGRAM, IPPROTO_UDP, &vn->sock); > if (rc < 0) { > pr_debug("UDP socket create failed\n"); > return rc; > } > /* Put in proper namespace */ > - sk = vn->sock->sk; > - sk_change_net(sk, net); > - > - vxlan_addr.sin_port = htons(vxlan_port); > + *sk = vn->sock->sk; > + sk_change_net(*sk, net); > > - rc = kernel_bind(vn->sock, (struct sockaddr *) &vxlan_addr, > - sizeof(vxlan_addr)); > + rc = kernel_bind(vn->sock, (struct sockaddr *)&vxlan_addr, > + sizeof(struct sockaddr_in)); > if (rc < 0) { > pr_debug("bind for UDP socket %pI4:%u (%d)\n", > &vxlan_addr.sin_addr, ntohs(vxlan_addr.sin_port), rc); > - sk_release_kernel(sk); > + sk_release_kernel(*sk); > vn->sock = NULL; > return rc; > } > + return 0; > +} > +#endif > + > +static __net_init int vxlan_init_net(struct net *net) > +{ > + struct vxlan_net *vn = net_generic(net, vxlan_net_id); > + struct sock *sk; > + int rc; > + unsigned h; > + > + rc = create_sock(net, &sk); > + if (rc < 0) > + return rc; > > /* Disable multicast loopback */ > inet_sk(sk)->mc_loop = 0; > @@ -1582,6 +1946,9 @@ static __net_init int vxlan_init_net(struct net *net) > udp_sk(sk)->encap_type = 1; > udp_sk(sk)->encap_rcv = vxlan_udp_encap_recv; > udp_encap_enable(); > +#if IS_ENABLED(CONFIG_IPV6) > + udpv6_encap_enable(); > +#endif > > for (h = 0; h < VNI_HASH_SIZE; ++h) > INIT_HLIST_HEAD(&vn->vni_list[h]); > diff --git a/include/uapi/linux/if_link.h b/include/uapi/linux/if_link.h > index 9922704..f47ab4c 100644 > --- a/include/uapi/linux/if_link.h > +++ b/include/uapi/linux/if_link.h > @@ -309,6 +309,8 @@ enum { > IFLA_VXLAN_RSC, > IFLA_VXLAN_L2MISS, > IFLA_VXLAN_L3MISS, > + IFLA_VXLAN_REMOTE6, > + IFLA_VXLAN_LOCAL6, > __IFLA_VXLAN_MAX > }; > #define IFLA_VXLAN_MAX (__IFLA_VXLAN_MAX - 1) > -- > 1.7.7.6 > > -- > To unsubscribe from this list: send the line "unsubscribe netdev" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 3/5] vxlan: add ipv6 support 2013-04-17 8:15 ` Mike Rapoport @ 2013-04-17 9:57 ` Cong Wang 2013-04-17 10:36 ` Mike Rapoport 0 siblings, 1 reply; 33+ messages in thread From: Cong Wang @ 2013-04-17 9:57 UTC (permalink / raw) To: Mike Rapoport; +Cc: netdev, David Stevens, Stephen Hemminger, David S. Miller On Wed, 2013-04-17 at 11:15 +0300, Mike Rapoport wrote: > On Wed, Apr 17, 2013 at 01:10:20PM +0800, Cong Wang wrote: > > #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt > > @@ -42,6 +41,11 @@ > > #include <net/inet_ecn.h> > > #include <net/net_namespace.h> > > #include <net/netns/generic.h> > > +#if IS_ENABLED(CONFIG_IPV6) > > It seems to me that some of the #ifdefs may be removed, especially on > the rtnetlink path. Which one? If you mean the one above, I know it can be removed, but it can save some compile time if we have it. > > > +#include <net/addrconf.h> > > +#include <net/ip6_route.h> > > +#include <net/ip6_tunnel.h> > > +#endif > > ... > > > > + if (data[IFLA_VXLAN_REMOTE]) { > > + __be32 gaddr = nla_get_be32(data[IFLA_VXLAN_REMOTE]); > > + if (!IN_MULTICAST(ntohl(gaddr))) { > > + pr_debug("group address is not IPv4 multicast\n"); > > + return -EADDRNOTAVAIL; > > + } > > + } else if (data[IFLA_VXLAN_REMOTE6]) { > > +#if IS_ENABLED(CONFIG_IPV6) > > + struct in6_addr gaddr; > > + nla_memcpy(&gaddr, data[IFLA_VXLAN_REMOTE6], sizeof(gaddr)); > > + if (!ipv6_addr_is_multicast(&gaddr)) { > > + pr_debug("group address is not IPv6 multicast\n"); > > + return -EADDRNOTAVAIL; > > + } > > +#else > > + return -EPFNOSUPPORT; > > +#endif > > + } > > Adding back the test for multicast address contradicts the ability to > use unicast as default remote destination. Oops, it is definitely my mistake when handling the conflicts here. Fixed now. Thanks. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 3/5] vxlan: add ipv6 support 2013-04-17 9:57 ` Cong Wang @ 2013-04-17 10:36 ` Mike Rapoport 2013-04-17 13:18 ` Cong Wang 0 siblings, 1 reply; 33+ messages in thread From: Mike Rapoport @ 2013-04-17 10:36 UTC (permalink / raw) To: Cong Wang; +Cc: netdev, David Stevens, Stephen Hemminger, David S. Miller On Wed, Apr 17, 2013 at 12:57 PM, Cong Wang <amwang@redhat.com> wrote: > On Wed, 2013-04-17 at 11:15 +0300, Mike Rapoport wrote: >> On Wed, Apr 17, 2013 at 01:10:20PM +0800, Cong Wang wrote: >> > #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt >> > @@ -42,6 +41,11 @@ >> > #include <net/inet_ecn.h> >> > #include <net/net_namespace.h> >> > #include <net/netns/generic.h> >> > +#if IS_ENABLED(CONFIG_IPV6) >> >> It seems to me that some of the #ifdefs may be removed, especially on >> the rtnetlink path. > > Which one? If you mean the one above, I know it can be removed, but it > can save some compile time if we have it. Well, I think that the address comparison helpers, vxlan_nla_{get,put}_addr, vxlan_newlink and vxlan_fill_info can be left with run-time checks only. Maybe some other places as well. Removing the ifdefs will increase compile time for kernels configured with IPV6=n, and may have certain run-time performance impact for such kernels. On the other hand, less ifdefs means better readability :). And, AFAIK, most distros have IPV6 in their kernels anyway... >> > +#include <net/addrconf.h> >> > +#include <net/ip6_route.h> >> > +#include <net/ip6_tunnel.h> >> > +#endif >> > -- Sincerely yours, Mike. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 3/5] vxlan: add ipv6 support 2013-04-17 10:36 ` Mike Rapoport @ 2013-04-17 13:18 ` Cong Wang 2013-04-17 16:34 ` Mike Rapoport 0 siblings, 1 reply; 33+ messages in thread From: Cong Wang @ 2013-04-17 13:18 UTC (permalink / raw) To: Mike Rapoport; +Cc: netdev, David Stevens, Stephen Hemminger, David S. Miller On Wed, 2013-04-17 at 13:36 +0300, Mike Rapoport wrote: > Well, I think that the address comparison helpers, > vxlan_nla_{get,put}_addr, vxlan_newlink and vxlan_fill_info can be > left with run-time checks only. Maybe some other places as well. > Removing the ifdefs will increase compile time for kernels configured > with IPV6=n, and may have certain run-time performance impact for such > kernels. On the other hand, less ifdefs means better readability :). In theory, yes; in this case, I don't think having these ifdefs harms the readability. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 3/5] vxlan: add ipv6 support 2013-04-17 13:18 ` Cong Wang @ 2013-04-17 16:34 ` Mike Rapoport 0 siblings, 0 replies; 33+ messages in thread From: Mike Rapoport @ 2013-04-17 16:34 UTC (permalink / raw) To: Cong Wang; +Cc: netdev, David Stevens, Stephen Hemminger, David S. Miller On Wed, Apr 17, 2013 at 4:18 PM, Cong Wang <amwang@redhat.com> wrote: > On Wed, 2013-04-17 at 13:36 +0300, Mike Rapoport wrote: >> Well, I think that the address comparison helpers, >> vxlan_nla_{get,put}_addr, vxlan_newlink and vxlan_fill_info can be >> left with run-time checks only. Maybe some other places as well. >> Removing the ifdefs will increase compile time for kernels configured >> with IPV6=n, and may have certain run-time performance impact for such >> kernels. On the other hand, less ifdefs means better readability :). > > In theory, yes; in this case, I don't think having these ifdefs harms > the readability. > IMHO, the less ifdefs the better, but I can live with them as well :) -- Sincerely yours, Mike. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 3/5] vxlan: add ipv6 support 2013-04-17 5:10 ` [Patch net-next v4 3/5] vxlan: add ipv6 support Cong Wang 2013-04-17 8:15 ` Mike Rapoport @ 2013-04-18 14:34 ` Mike Rapoport 2013-04-19 11:35 ` Cong Wang 1 sibling, 1 reply; 33+ messages in thread From: Mike Rapoport @ 2013-04-18 14:34 UTC (permalink / raw) To: Cong Wang; +Cc: netdev, David Stevens, Stephen Hemminger, David S. Miller On Wed, Apr 17, 2013 at 01:10:20PM +0800, Cong Wang wrote: > From: Cong Wang <amwang@redhat.com> > > This patch adds IPv6 support to vxlan device, as the new version > RFC already mentioned it: > > http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-03 > > Cc: David Stevens <dlstevens@us.ibm.com> > Cc: Stephen Hemminger <stephen@networkplumber.org> > Cc: David S. Miller <davem@davemloft.net> > Signed-off-by: Cong Wang <amwang@redhat.com> > --- > drivers/net/vxlan.c | 639 +++++++++++++++++++++++++++++++++--------- > include/uapi/linux/if_link.h | 2 + > 2 files changed, 505 insertions(+), 136 deletions(-) > > diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c > index f8ac900..43ed40f 100644 > --- a/drivers/net/vxlan.c > +++ b/drivers/net/vxlan.c [ snip ] > +#if IS_ENABLED(CONFIG_IPV6) > + else { > + loopback.va_sin6 = in6addr_loopback; When building vxlan as module I get: MODPOST 45 modules VOFFSET arch/x86/boot/voffset.h CC arch/x86/boot/version.o AS arch/x86/boot/compressed/head_64.o ERROR: "in6addr_loopback" [drivers/net/vxlan.ko] undefined! Seems, that either in6addr_loopback should be exported, or IN6ADDR_LOOPBACK_INIT should be used as initializer for loopback.va_sin6. > + loopback.va_sa = AF_INET6; > + } > +#endif > + > if (dst_vxlan->flags & VXLAN_F_LEARN) > - vxlan_snoop(skb->dev, htonl(INADDR_LOOPBACK), > - eth_hdr(skb)->h_source); > + vxlan_snoop(skb->dev, &loopback, eth_hdr(skb)->h_source); > > u64_stats_update_begin(&tx_stats->syncp); > tx_stats->tx_packets++; -- Sincerely yours, Mike. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 3/5] vxlan: add ipv6 support 2013-04-18 14:34 ` Mike Rapoport @ 2013-04-19 11:35 ` Cong Wang 0 siblings, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-04-19 11:35 UTC (permalink / raw) To: Mike Rapoport; +Cc: netdev, David Stevens, Stephen Hemminger, David S. Miller On Thu, 2013-04-18 at 17:34 +0300, Mike Rapoport wrote: > When building vxlan as module I get: > > MODPOST 45 modules > VOFFSET arch/x86/boot/voffset.h > CC arch/x86/boot/version.o > AS arch/x86/boot/compressed/head_64.o > ERROR: "in6addr_loopback" [drivers/net/vxlan.ko] undefined! > > Seems, that either in6addr_loopback should be exported, or > IN6ADDR_LOOPBACK_INIT should be used as initializer for > loopback.va_sin6. I tried IN6ADDR_LOOPBACK_INIT before in6addr_loopback and got: drivers/net/vxlan.c:1086:31: error: expected expression before ‘{’ token So I think we have to export in6addr_loopback. Thanks for catching it! ^ permalink raw reply [flat|nested] 33+ messages in thread
* [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr 2013-04-17 5:10 [Patch net-next v4 0/5] vxlan: add ipv6 support Cong Wang ` (2 preceding siblings ...) 2013-04-17 5:10 ` [Patch net-next v4 3/5] vxlan: add ipv6 support Cong Wang @ 2013-04-17 5:10 ` Cong Wang 2013-04-18 13:36 ` Cong Wang 2013-04-19 11:14 ` David Stevens 2013-04-17 5:10 ` [Patch net-next v4 5/5] ipv6: Add generic UDP Tunnel segmentation Cong Wang 2013-04-17 5:10 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang 5 siblings, 2 replies; 33+ messages in thread From: Cong Wang @ 2013-04-17 5:10 UTC (permalink / raw) To: netdev; +Cc: David Stevens, Stephen Hemminger, David S. Miller, Cong Wang From: Cong Wang <amwang@redhat.com> As David suggested, we should support ll addr, which requires scope id. Cc: David Stevens <dlstevens@us.ibm.com> Cc: Stephen Hemminger <stephen@networkplumber.org> Cc: David S. Miller <davem@davemloft.net> Signed-off-by: Cong Wang <amwang@redhat.com> --- drivers/net/vxlan.c | 21 ++++++++++++++++++--- 1 files changed, 18 insertions(+), 3 deletions(-) diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c index 43ed40f..531c5e2 100644 --- a/drivers/net/vxlan.c +++ b/drivers/net/vxlan.c @@ -92,9 +92,10 @@ struct vxlan_addr { struct sockaddr_in6 sin6; struct sockaddr sa; } u; -#define va_sin u.sin.sin_addr.s_addr -#define va_sin6 u.sin6.sin6_addr -#define va_sa u.sa.sa_family +#define va_sin u.sin.sin_addr.s_addr +#define va_sin6 u.sin6.sin6_addr +#define va_scope_id u.sin6.sin6_scope_id +#define va_sa u.sa.sa_family }; struct vxlan_rdst { @@ -1674,6 +1675,9 @@ static int vxlan_newlink(struct net *net, struct net_device *dev, nla_memcpy(&dst->remote_ip.va_sin6, data[IFLA_VXLAN_REMOTE6], sizeof(struct in6_addr)); dst->remote_ip.va_sa = AF_INET6; + if (__ipv6_addr_needs_scope_id(__ipv6_addr_type(&dst->remote_ip.va_sin6)) + && !data[IFLA_VXLAN_LINK]) + return -EINVAL; #else return -EPFNOSUPPORT; #endif @@ -1708,6 +1712,17 @@ static int vxlan_newlink(struct net *net, struct net_device *dev, /* update header length based on lower device */ dev->hard_header_len = lowerdev->hard_header_len + VXLAN_HEADROOM; +#if IS_ENABLED(CONFIG_IPV6) + dst->remote_ip.va_scope_id = ipv6_iface_scope_id(&dst->remote_ip.va_sin6, + dst->remote_ifindex); + if (ipv6_addr_type(&dst->remote_ip.va_sin6) & IPV6_ADDR_LINKLOCAL) { + struct vxlan_net *vn = net_generic(net, vxlan_net_id); + struct sock *sk = vn->sock->sk; + + sk->sk_bound_dev_if = dst->remote_ip.va_scope_id; + } +#endif + } if (data[IFLA_VXLAN_TOS]) -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr 2013-04-17 5:10 ` [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr Cong Wang @ 2013-04-18 13:36 ` Cong Wang 2013-04-19 11:14 ` David Stevens 1 sibling, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-04-18 13:36 UTC (permalink / raw) To: netdev; +Cc: David Stevens, Stephen Hemminger, David S. Miller On Wed, 2013-04-17 at 13:10 +0800, Cong Wang wrote: > From: Cong Wang <amwang@redhat.com> > > As David suggested, we should support ll addr, which requires > scope id. David, any comments on this patch? I am not sure it is correct. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr 2013-04-17 5:10 ` [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr Cong Wang 2013-04-18 13:36 ` Cong Wang @ 2013-04-19 11:14 ` David Stevens 2013-04-19 11:56 ` Cong Wang 2013-04-21 13:47 ` Cong Wang 1 sibling, 2 replies; 33+ messages in thread From: David Stevens @ 2013-04-19 11:14 UTC (permalink / raw) To: Cong Wang; +Cc: Cong Wang, David S. Miller, netdev, Stephen Hemminger Cong Wang <amwang@redhat.com> wrote on 04/17/2013 01:10:21 AM: > diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c > index 43ed40f..531c5e2 100644 > --- a/drivers/net/vxlan.c > +++ b/drivers/net/vxlan.c > @@ -92,9 +92,10 @@ struct vxlan_addr { > struct sockaddr_in6 sin6; > struct sockaddr sa; > } u; > -#define va_sin u.sin.sin_addr.s_addr > -#define va_sin6 u.sin6.sin6_addr > -#define va_sa u.sa.sa_family > +#define va_sin u.sin.sin_addr.s_addr > +#define va_sin6 u.sin6.sin6_addr > +#define va_scope_id u.sin6.sin6_scope_id > +#define va_sa u.sa.sa_family > }; As I commented before, you're obscuring the types here, which makes it less readable. "va_sin6" ought to be a sockaddr_in6, not a sin6_addr, and the scope id ought to then be "va_sin6.sin6_scope_id", without any other #define necessary for it. > @@ -1708,6 +1712,17 @@ static int vxlan_newlink(struct net *net, > struct net_device *dev, > /* update header length based on lower device */ > dev->hard_header_len = lowerdev->hard_header_len + > VXLAN_HEADROOM; > +#if IS_ENABLED(CONFIG_IPV6) > + dst->remote_ip.va_scope_id = ipv6_iface_scope_id > (&dst->remote_ip.va_sin6, > + dst->remote_ifindex); > + if (ipv6_addr_type(&dst->remote_ip.va_sin6) & IPV6_ADDR_LINKLOCAL) { > + struct vxlan_net *vn = net_generic(net, vxlan_net_id); > + struct sock *sk = vn->sock->sk; > + > + sk->sk_bound_dev_if = dst->remote_ip.va_scope_id; > + } > +#endif > + > } The socket is not used for transmits, which is where the sin6_scope_id is relevant-- we need this in vxlan_xmit_one() for the route lookup. It also permanently binds to an interface, which I believe prevents VXLAN traffic from other interfaces on receive, and this socket is an INADDR_ANY-bound socket for all VXLAN devices on the host. So, we shouldn't be doing anything with sk_bound_dev_if, but LL addrs need to use the the sin6_scope_id in the route lookup for transmissions. It should be saved in remote_ifindex per destination and stored in flowi6_oif for route lookup, as the v4 code does now for fdb entries, and LL v6 destinations for fdb entries ought to be done the same way. So, no, I don't think this patch is correct or complete. +-DLS ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr 2013-04-19 11:14 ` David Stevens @ 2013-04-19 11:56 ` Cong Wang 2013-04-21 13:47 ` Cong Wang 1 sibling, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-04-19 11:56 UTC (permalink / raw) To: David Stevens; +Cc: David S. Miller, netdev, Stephen Hemminger On Fri, 2013-04-19 at 07:14 -0400, David Stevens wrote: > Cong Wang <amwang@redhat.com> wrote on 04/17/2013 01:10:21 AM: > > > diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c > > index 43ed40f..531c5e2 100644 > > --- a/drivers/net/vxlan.c > > +++ b/drivers/net/vxlan.c > > @@ -92,9 +92,10 @@ struct vxlan_addr { > > struct sockaddr_in6 sin6; > > struct sockaddr sa; > > } u; > > -#define va_sin u.sin.sin_addr.s_addr > > -#define va_sin6 u.sin6.sin6_addr > > -#define va_sa u.sa.sa_family > > +#define va_sin u.sin.sin_addr.s_addr > > +#define va_sin6 u.sin6.sin6_addr > > +#define va_scope_id u.sin6.sin6_scope_id > > +#define va_sa u.sa.sa_family > > }; > > As I commented before, you're obscuring the types here, > which makes it less readable. "va_sin6" ought to be a sockaddr_in6, > not a sin6_addr, and the scope id ought to then be > "va_sin6.sin6_scope_id", > without any other #define necessary for it. OK, so #define va_sin6 u.sin6? > > So, no, I don't think this patch is correct or complete. > Then let's defer it, I need more time to make it working. I will discard the scope_id patch for now, and make a correct one later. Thanks. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr 2013-04-19 11:14 ` David Stevens 2013-04-19 11:56 ` Cong Wang @ 2013-04-21 13:47 ` Cong Wang 2013-04-21 14:46 ` Bjørn Mork 1 sibling, 1 reply; 33+ messages in thread From: Cong Wang @ 2013-04-21 13:47 UTC (permalink / raw) To: David Stevens; +Cc: David S. Miller, netdev, Stephen Hemminger On Fri, 2013-04-19 at 07:14 -0400, David Stevens wrote: > > As I commented before, you're obscuring the types here, > which makes it less readable. "va_sin6" ought to be a sockaddr_in6, > not a sin6_addr, and the scope id ought to then be > "va_sin6.sin6_scope_id", > without any other #define necessary for it. So finally you want something like: vxlan->default_dst.remote_ip.va_sin.sin_addr.s_addr and vxlan->default_dst.remote_ip.va_sin6.sin6_addr Enjoy the readable code! :) Again, I don't like this at all from the beginning! I just want to make David happy. v5 is on the way... For the record, please don't blame me if you think the code is ugly. :) ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr 2013-04-21 13:47 ` Cong Wang @ 2013-04-21 14:46 ` Bjørn Mork 2013-04-21 14:57 ` Cong Wang 0 siblings, 1 reply; 33+ messages in thread From: Bjørn Mork @ 2013-04-21 14:46 UTC (permalink / raw) To: Cong Wang; +Cc: David Stevens, David S. Miller, netdev, Stephen Hemminger Cong Wang <amwang@redhat.com> writes: > On Fri, 2013-04-19 at 07:14 -0400, David Stevens wrote: >> >> As I commented before, you're obscuring the types here, >> which makes it less readable. "va_sin6" ought to be a sockaddr_in6, >> not a sin6_addr, and the scope id ought to then be >> "va_sin6.sin6_scope_id", >> without any other #define necessary for it. > > So finally you want something like: > > vxlan->default_dst.remote_ip.va_sin.sin_addr.s_addr > > and > > vxlan->default_dst.remote_ip.va_sin6.sin6_addr > > Enjoy the readable code! :) There's nothing preventing you from using local variables and/or functions to shorten those, without obscuring things on the way. Readability depends on more than just "short". Obviously correct type is more important. But you can do both. Most kernel code does. It's not hard. struct vxlan_addr { union { struct sockaddr_in sin; struct sockaddr_in6 sin6; struct sockaddr sa; } u; #define va_sin u.sin #define va_sin6 u.sin6 #define va_sa u.sa }; struct vxlan_addr *rip = &vxlan->default_dst.remote_ip; rip->va_sin.sin_addr.s_addr rip->va_sin6.sin6_addr etc. Bjørn ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr 2013-04-21 14:46 ` Bjørn Mork @ 2013-04-21 14:57 ` Cong Wang 2013-04-21 15:10 ` Bjørn Mork 0 siblings, 1 reply; 33+ messages in thread From: Cong Wang @ 2013-04-21 14:57 UTC (permalink / raw) To: Bjørn Mork; +Cc: David Stevens, David S. Miller, netdev, Stephen Hemminger On Sun, 2013-04-21 at 16:46 +0200, Bjørn Mork wrote: > struct vxlan_addr *rip = &vxlan->default_dst.remote_ip; > > rip->va_sin.sin_addr.s_addr > rip->va_sin6.sin6_addr I don't see any difference between this with: vxlan->default_dst.remote_ip.va_sin.sin_addr.s_addr vxlan->default_dst.remote_ip.va_sin6.sin6_addr except making two lines shorter... People still have to go into 5 levels to get the final field. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr 2013-04-21 14:57 ` Cong Wang @ 2013-04-21 15:10 ` Bjørn Mork 0 siblings, 0 replies; 33+ messages in thread From: Bjørn Mork @ 2013-04-21 15:10 UTC (permalink / raw) To: Cong Wang; +Cc: David Stevens, David S. Miller, netdev, Stephen Hemminger Cong Wang <amwang@redhat.com> writes: > On Sun, 2013-04-21 at 16:46 +0200, Bjørn Mork wrote: >> struct vxlan_addr *rip = &vxlan->default_dst.remote_ip; >> >> rip->va_sin.sin_addr.s_addr >> rip->va_sin6.sin6_addr > > I don't see any difference between this with: > > vxlan->default_dst.remote_ip.va_sin.sin_addr.s_addr > vxlan->default_dst.remote_ip.va_sin6.sin6_addr > > except making two lines shorter... People still have to go into 5 levels > to get the final field. Yes, of course. That's how many levels there is in this data structure. They still have to go into 5 levels when you define away some of those levels. Only difference is that they then have to _remember_ that one of the labels actually is a macro hiding 3 levels... You are obscuring the levels, not removing them. That's the problem. Noone objects to removing levels if you can do that by moving fields around. But if you can't, then don't try to hide it. Bjørn ^ permalink raw reply [flat|nested] 33+ messages in thread
* [Patch net-next v4 5/5] ipv6: Add generic UDP Tunnel segmentation 2013-04-17 5:10 [Patch net-next v4 0/5] vxlan: add ipv6 support Cong Wang ` (3 preceding siblings ...) 2013-04-17 5:10 ` [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr Cong Wang @ 2013-04-17 5:10 ` Cong Wang 2013-04-18 17:23 ` Pravin Shelar 2013-04-17 5:10 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang 5 siblings, 1 reply; 33+ messages in thread From: Cong Wang @ 2013-04-17 5:10 UTC (permalink / raw) To: netdev Cc: Jesse Gross, Pravin B Shelar, Stephen Hemminger, David S. Miller, Cong Wang From: Cong Wang <amwang@redhat.com> Similar to commit 731362674580cb0c696cd1b1a03d8461a10cf90a (tunneling: Add generic Tunnel segmentation) This patch adds generic tunneling offloading support for IPv6-UDP based tunnels. This can be used by tunneling protocols like VXLAN. Cc: Jesse Gross <jesse@nicira.com> Cc: Pravin B Shelar <pshelar@nicira.com> Cc: Stephen Hemminger <stephen@networkplumber.org> Cc: David S. Miller <davem@davemloft.net> Signed-off-by: Cong Wang <amwang@redhat.com> --- net/ipv6/ip6_offload.c | 4 +- net/ipv6/udp_offload.c | 155 +++++++++++++++++++++++++++++++++--------------- 2 files changed, 110 insertions(+), 49 deletions(-) diff --git a/net/ipv6/ip6_offload.c b/net/ipv6/ip6_offload.c index 71b766e..87fbf2e 100644 --- a/net/ipv6/ip6_offload.c +++ b/net/ipv6/ip6_offload.c @@ -91,6 +91,7 @@ static struct sk_buff *ipv6_gso_segment(struct sk_buff *skb, unsigned int unfrag_ip6hlen; u8 *prevhdr; int offset = 0; + bool tunnel; if (unlikely(skb_shinfo(skb)->gso_type & ~(SKB_GSO_UDP | @@ -105,6 +106,7 @@ static struct sk_buff *ipv6_gso_segment(struct sk_buff *skb, if (unlikely(!pskb_may_pull(skb, sizeof(*ipv6h)))) goto out; + tunnel = skb->encapsulation; ipv6h = ipv6_hdr(skb); __skb_pull(skb, sizeof(*ipv6h)); segs = ERR_PTR(-EPROTONOSUPPORT); @@ -125,7 +127,7 @@ static struct sk_buff *ipv6_gso_segment(struct sk_buff *skb, ipv6h = ipv6_hdr(skb); ipv6h->payload_len = htons(skb->len - skb->mac_len - sizeof(*ipv6h)); - if (proto == IPPROTO_UDP) { + if (!tunnel && proto == IPPROTO_UDP) { unfrag_ip6hlen = ip6_find_1stfragopt(skb, &prevhdr); fptr = (struct frag_hdr *)(skb_network_header(skb) + unfrag_ip6hlen); diff --git a/net/ipv6/udp_offload.c b/net/ipv6/udp_offload.c index 3bb3a89..bbde7ba 100644 --- a/net/ipv6/udp_offload.c +++ b/net/ipv6/udp_offload.c @@ -21,26 +21,81 @@ static int udp6_ufo_send_check(struct sk_buff *skb) const struct ipv6hdr *ipv6h; struct udphdr *uh; - /* UDP Tunnel offload on ipv6 is not yet supported. */ - if (skb->encapsulation) - return -EINVAL; - if (!pskb_may_pull(skb, sizeof(*uh))) return -EINVAL; - ipv6h = ipv6_hdr(skb); - uh = udp_hdr(skb); + if (likely(!skb->encapsulation)) { + ipv6h = ipv6_hdr(skb); + uh = udp_hdr(skb); + + uh->check = ~csum_ipv6_magic(&ipv6h->saddr, &ipv6h->daddr, skb->len, + IPPROTO_UDP, 0); + skb->csum_start = skb_transport_header(skb) - skb->head; + skb->csum_offset = offsetof(struct udphdr, check); + skb->ip_summed = CHECKSUM_PARTIAL; + } - uh->check = ~csum_ipv6_magic(&ipv6h->saddr, &ipv6h->daddr, skb->len, - IPPROTO_UDP, 0); - skb->csum_start = skb_transport_header(skb) - skb->head; - skb->csum_offset = offsetof(struct udphdr, check); - skb->ip_summed = CHECKSUM_PARTIAL; return 0; } +static struct sk_buff *skb_udp6_tunnel_segment(struct sk_buff *skb, + netdev_features_t features) +{ + struct sk_buff *segs = ERR_PTR(-EINVAL); + int mac_len = skb->mac_len; + int tnl_hlen = skb_inner_mac_header(skb) - skb_transport_header(skb); + int outer_hlen; + netdev_features_t enc_features; + + if (unlikely(!pskb_may_pull(skb, tnl_hlen))) + goto out; + + skb->encapsulation = 0; + __skb_pull(skb, tnl_hlen); + skb_reset_mac_header(skb); + skb_set_network_header(skb, skb_inner_network_offset(skb)); + skb->mac_len = skb_inner_network_offset(skb); + + /* segment inner packet. */ + enc_features = skb->dev->hw_enc_features & netif_skb_features(skb); + segs = skb_mac_gso_segment(skb, enc_features); + if (!segs || IS_ERR(segs)) + goto out; + + outer_hlen = skb_tnl_header_len(skb); + skb = segs; + do { + struct udphdr *uh; + int udp_offset = outer_hlen - tnl_hlen; + + skb->mac_len = mac_len; + + skb_push(skb, outer_hlen); + skb_reset_mac_header(skb); + skb_set_network_header(skb, mac_len); + skb_set_transport_header(skb, udp_offset); + uh = udp_hdr(skb); + uh->len = htons(skb->len - udp_offset); + + /* csum segment if tunnel sets skb with csum. */ + if (unlikely(uh->check)) { + struct ipv6hdr *iph = ipv6_hdr(skb); + + uh->check = csum_ipv6_magic(&iph->saddr, &iph->daddr, + skb->len - udp_offset, + IPPROTO_UDP, 0); + if (uh->check == 0) + uh->check = CSUM_MANGLED_0; + + } + skb->ip_summed = CHECKSUM_NONE; + } while ((skb = skb->next)); +out: + return segs; +} + static struct sk_buff *udp6_ufo_fragment(struct sk_buff *skb, - netdev_features_t features) + netdev_features_t features) { struct sk_buff *segs = ERR_PTR(-EINVAL); unsigned int mss; @@ -73,43 +128,47 @@ static struct sk_buff *udp6_ufo_fragment(struct sk_buff *skb, goto out; } - /* Do software UFO. Complete and fill in the UDP checksum as HW cannot - * do checksum of UDP packets sent as multiple IP fragments. - */ - offset = skb_checksum_start_offset(skb); - csum = skb_checksum(skb, offset, skb->len - offset, 0); - offset += skb->csum_offset; - *(__sum16 *)(skb->data + offset) = csum_fold(csum); - skb->ip_summed = CHECKSUM_NONE; - - /* Check if there is enough headroom to insert fragment header. */ - if ((skb_mac_header(skb) < skb->head + frag_hdr_sz) && - pskb_expand_head(skb, frag_hdr_sz, 0, GFP_ATOMIC)) - goto out; + if (skb->encapsulation && skb_shinfo(skb)->gso_type & SKB_GSO_UDP_TUNNEL) + segs = skb_udp6_tunnel_segment(skb, features); + else { + /* Do software UFO. Complete and fill in the UDP checksum as HW cannot + * do checksum of UDP packets sent as multiple IP fragments. + */ + offset = skb_checksum_start_offset(skb); + csum = skb_checksum(skb, offset, skb->len - offset, 0); + offset += skb->csum_offset; + *(__sum16 *)(skb->data + offset) = csum_fold(csum); + skb->ip_summed = CHECKSUM_NONE; + + /* Check if there is enough headroom to insert fragment header. */ + if ((skb_mac_header(skb) < skb->head + frag_hdr_sz) && + pskb_expand_head(skb, frag_hdr_sz, 0, GFP_ATOMIC)) + goto out; - /* Find the unfragmentable header and shift it left by frag_hdr_sz - * bytes to insert fragment header. - */ - unfrag_ip6hlen = ip6_find_1stfragopt(skb, &prevhdr); - nexthdr = *prevhdr; - *prevhdr = NEXTHDR_FRAGMENT; - unfrag_len = skb_network_header(skb) - skb_mac_header(skb) + - unfrag_ip6hlen; - mac_start = skb_mac_header(skb); - memmove(mac_start-frag_hdr_sz, mac_start, unfrag_len); - - skb->mac_header -= frag_hdr_sz; - skb->network_header -= frag_hdr_sz; - - fptr = (struct frag_hdr *)(skb_network_header(skb) + unfrag_ip6hlen); - fptr->nexthdr = nexthdr; - fptr->reserved = 0; - ipv6_select_ident(fptr, (struct rt6_info *)skb_dst(skb)); - - /* Fragment the skb. ipv6 header and the remaining fields of the - * fragment header are updated in ipv6_gso_segment() - */ - segs = skb_segment(skb, features); + /* Find the unfragmentable header and shift it left by frag_hdr_sz + * bytes to insert fragment header. + */ + unfrag_ip6hlen = ip6_find_1stfragopt(skb, &prevhdr); + nexthdr = *prevhdr; + *prevhdr = NEXTHDR_FRAGMENT; + unfrag_len = skb_network_header(skb) - skb_mac_header(skb) + + unfrag_ip6hlen; + mac_start = skb_mac_header(skb); + memmove(mac_start-frag_hdr_sz, mac_start, unfrag_len); + + skb->mac_header -= frag_hdr_sz; + skb->network_header -= frag_hdr_sz; + + fptr = (struct frag_hdr *)(skb_network_header(skb) + unfrag_ip6hlen); + fptr->nexthdr = nexthdr; + fptr->reserved = 0; + ipv6_select_ident(fptr, (struct rt6_info *)skb_dst(skb)); + + /* Fragment the skb. ipv6 header and the remaining fields of the + * fragment header are updated in ipv6_gso_segment() + */ + segs = skb_segment(skb, features); + } out: return segs; -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 5/5] ipv6: Add generic UDP Tunnel segmentation 2013-04-17 5:10 ` [Patch net-next v4 5/5] ipv6: Add generic UDP Tunnel segmentation Cong Wang @ 2013-04-18 17:23 ` Pravin Shelar 2013-04-19 11:30 ` Cong Wang 0 siblings, 1 reply; 33+ messages in thread From: Pravin Shelar @ 2013-04-18 17:23 UTC (permalink / raw) To: Cong Wang; +Cc: netdev, Jesse Gross, Stephen Hemminger, David S. Miller On Tue, Apr 16, 2013 at 10:10 PM, Cong Wang <amwang@redhat.com> wrote: > From: Cong Wang <amwang@redhat.com> > > Similar to commit 731362674580cb0c696cd1b1a03d8461a10cf90a > (tunneling: Add generic Tunnel segmentation) > > This patch adds generic tunneling offloading support for IPv6-UDP > based tunnels. > > This can be used by tunneling protocols like VXLAN. > > Cc: Jesse Gross <jesse@nicira.com> > Cc: Pravin B Shelar <pshelar@nicira.com> > Cc: Stephen Hemminger <stephen@networkplumber.org> > Cc: David S. Miller <davem@davemloft.net> > Signed-off-by: Cong Wang <amwang@redhat.com> > --- > net/ipv6/ip6_offload.c | 4 +- > net/ipv6/udp_offload.c | 155 +++++++++++++++++++++++++++++++++--------------- > 2 files changed, 110 insertions(+), 49 deletions(-) > > diff --git a/net/ipv6/ip6_offload.c b/net/ipv6/ip6_offload.c > index 71b766e..87fbf2e 100644 > --- a/net/ipv6/ip6_offload.c > +++ b/net/ipv6/ip6_offload.c > @@ -91,6 +91,7 @@ static struct sk_buff *ipv6_gso_segment(struct sk_buff *skb, > unsigned int unfrag_ip6hlen; > u8 *prevhdr; > int offset = 0; > + bool tunnel; > > if (unlikely(skb_shinfo(skb)->gso_type & > ~(SKB_GSO_UDP | > @@ -105,6 +106,7 @@ static struct sk_buff *ipv6_gso_segment(struct sk_buff *skb, > if (unlikely(!pskb_may_pull(skb, sizeof(*ipv6h)))) > goto out; > > + tunnel = skb->encapsulation; > ipv6h = ipv6_hdr(skb); > __skb_pull(skb, sizeof(*ipv6h)); > segs = ERR_PTR(-EPROTONOSUPPORT); > @@ -125,7 +127,7 @@ static struct sk_buff *ipv6_gso_segment(struct sk_buff *skb, > ipv6h = ipv6_hdr(skb); > ipv6h->payload_len = htons(skb->len - skb->mac_len - > sizeof(*ipv6h)); > - if (proto == IPPROTO_UDP) { > + if (!tunnel && proto == IPPROTO_UDP) { > unfrag_ip6hlen = ip6_find_1stfragopt(skb, &prevhdr); > fptr = (struct frag_hdr *)(skb_network_header(skb) + > unfrag_ip6hlen); > diff --git a/net/ipv6/udp_offload.c b/net/ipv6/udp_offload.c > index 3bb3a89..bbde7ba 100644 > --- a/net/ipv6/udp_offload.c > +++ b/net/ipv6/udp_offload.c > @@ -21,26 +21,81 @@ static int udp6_ufo_send_check(struct sk_buff *skb) > const struct ipv6hdr *ipv6h; > struct udphdr *uh; > > - /* UDP Tunnel offload on ipv6 is not yet supported. */ > - if (skb->encapsulation) > - return -EINVAL; > - > if (!pskb_may_pull(skb, sizeof(*uh))) > return -EINVAL; > > - ipv6h = ipv6_hdr(skb); > - uh = udp_hdr(skb); > + if (likely(!skb->encapsulation)) { > + ipv6h = ipv6_hdr(skb); > + uh = udp_hdr(skb); > + > + uh->check = ~csum_ipv6_magic(&ipv6h->saddr, &ipv6h->daddr, skb->len, > + IPPROTO_UDP, 0); > + skb->csum_start = skb_transport_header(skb) - skb->head; > + skb->csum_offset = offsetof(struct udphdr, check); > + skb->ip_summed = CHECKSUM_PARTIAL; > + } > > - uh->check = ~csum_ipv6_magic(&ipv6h->saddr, &ipv6h->daddr, skb->len, > - IPPROTO_UDP, 0); > - skb->csum_start = skb_transport_header(skb) - skb->head; > - skb->csum_offset = offsetof(struct udphdr, check); > - skb->ip_summed = CHECKSUM_PARTIAL; > return 0; > } > > +static struct sk_buff *skb_udp6_tunnel_segment(struct sk_buff *skb, > + netdev_features_t features) > +{ > + struct sk_buff *segs = ERR_PTR(-EINVAL); > + int mac_len = skb->mac_len; > + int tnl_hlen = skb_inner_mac_header(skb) - skb_transport_header(skb); > + int outer_hlen; > + netdev_features_t enc_features; > + > + if (unlikely(!pskb_may_pull(skb, tnl_hlen))) > + goto out; > + > + skb->encapsulation = 0; > + __skb_pull(skb, tnl_hlen); > + skb_reset_mac_header(skb); > + skb_set_network_header(skb, skb_inner_network_offset(skb)); > + skb->mac_len = skb_inner_network_offset(skb); > + > + /* segment inner packet. */ > + enc_features = skb->dev->hw_enc_features & netif_skb_features(skb); > + segs = skb_mac_gso_segment(skb, enc_features); > + if (!segs || IS_ERR(segs)) > + goto out; > + > + outer_hlen = skb_tnl_header_len(skb); > + skb = segs; > + do { > + struct udphdr *uh; > + int udp_offset = outer_hlen - tnl_hlen; > + > + skb->mac_len = mac_len; > + > + skb_push(skb, outer_hlen); > + skb_reset_mac_header(skb); > + skb_set_network_header(skb, mac_len); > + skb_set_transport_header(skb, udp_offset); > + uh = udp_hdr(skb); > + uh->len = htons(skb->len - udp_offset); > + > + /* csum segment if tunnel sets skb with csum. */ > + if (unlikely(uh->check)) { > + struct ipv6hdr *iph = ipv6_hdr(skb); > + > + uh->check = csum_ipv6_magic(&iph->saddr, &iph->daddr, > + skb->len - udp_offset, > + IPPROTO_UDP, 0); > + if (uh->check == 0) > + uh->check = CSUM_MANGLED_0; > + > + } > + skb->ip_summed = CHECKSUM_NONE; > + } while ((skb = skb->next)); > +out: > + return segs; > +} > + skb_udp6_tunnel_segment() looks alot like skb_udp_tunnel_segment(), difference is checksum calculation. I think we can write a common function here. > static struct sk_buff *udp6_ufo_fragment(struct sk_buff *skb, > - netdev_features_t features) > + netdev_features_t features) > { > struct sk_buff *segs = ERR_PTR(-EINVAL); > unsigned int mss; > @@ -73,43 +128,47 @@ static struct sk_buff *udp6_ufo_fragment(struct sk_buff *skb, > goto out; > } > > - /* Do software UFO. Complete and fill in the UDP checksum as HW cannot > - * do checksum of UDP packets sent as multiple IP fragments. > - */ > - offset = skb_checksum_start_offset(skb); > - csum = skb_checksum(skb, offset, skb->len - offset, 0); > - offset += skb->csum_offset; > - *(__sum16 *)(skb->data + offset) = csum_fold(csum); > - skb->ip_summed = CHECKSUM_NONE; > - > - /* Check if there is enough headroom to insert fragment header. */ > - if ((skb_mac_header(skb) < skb->head + frag_hdr_sz) && > - pskb_expand_head(skb, frag_hdr_sz, 0, GFP_ATOMIC)) > - goto out; > + if (skb->encapsulation && skb_shinfo(skb)->gso_type & SKB_GSO_UDP_TUNNEL) > + segs = skb_udp6_tunnel_segment(skb, features); > + else { > + /* Do software UFO. Complete and fill in the UDP checksum as HW cannot > + * do checksum of UDP packets sent as multiple IP fragments. > + */ > + offset = skb_checksum_start_offset(skb); > + csum = skb_checksum(skb, offset, skb->len - offset, 0); > + offset += skb->csum_offset; > + *(__sum16 *)(skb->data + offset) = csum_fold(csum); > + skb->ip_summed = CHECKSUM_NONE; > + > + /* Check if there is enough headroom to insert fragment header. */ > + if ((skb_mac_header(skb) < skb->head + frag_hdr_sz) && > + pskb_expand_head(skb, frag_hdr_sz, 0, GFP_ATOMIC)) > + goto out; > > - /* Find the unfragmentable header and shift it left by frag_hdr_sz > - * bytes to insert fragment header. > - */ > - unfrag_ip6hlen = ip6_find_1stfragopt(skb, &prevhdr); > - nexthdr = *prevhdr; > - *prevhdr = NEXTHDR_FRAGMENT; > - unfrag_len = skb_network_header(skb) - skb_mac_header(skb) + > - unfrag_ip6hlen; > - mac_start = skb_mac_header(skb); > - memmove(mac_start-frag_hdr_sz, mac_start, unfrag_len); > - > - skb->mac_header -= frag_hdr_sz; > - skb->network_header -= frag_hdr_sz; > - > - fptr = (struct frag_hdr *)(skb_network_header(skb) + unfrag_ip6hlen); > - fptr->nexthdr = nexthdr; > - fptr->reserved = 0; > - ipv6_select_ident(fptr, (struct rt6_info *)skb_dst(skb)); > - > - /* Fragment the skb. ipv6 header and the remaining fields of the > - * fragment header are updated in ipv6_gso_segment() > - */ > - segs = skb_segment(skb, features); > + /* Find the unfragmentable header and shift it left by frag_hdr_sz > + * bytes to insert fragment header. > + */ > + unfrag_ip6hlen = ip6_find_1stfragopt(skb, &prevhdr); > + nexthdr = *prevhdr; > + *prevhdr = NEXTHDR_FRAGMENT; > + unfrag_len = skb_network_header(skb) - skb_mac_header(skb) + > + unfrag_ip6hlen; > + mac_start = skb_mac_header(skb); > + memmove(mac_start-frag_hdr_sz, mac_start, unfrag_len); > + > + skb->mac_header -= frag_hdr_sz; > + skb->network_header -= frag_hdr_sz; > + > + fptr = (struct frag_hdr *)(skb_network_header(skb) + unfrag_ip6hlen); > + fptr->nexthdr = nexthdr; > + fptr->reserved = 0; > + ipv6_select_ident(fptr, (struct rt6_info *)skb_dst(skb)); > + > + /* Fragment the skb. ipv6 header and the remaining fields of the > + * fragment header are updated in ipv6_gso_segment() > + */ > + segs = skb_segment(skb, features); > + } > > out: > return segs; > -- > 1.7.7.6 > ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [Patch net-next v4 5/5] ipv6: Add generic UDP Tunnel segmentation 2013-04-18 17:23 ` Pravin Shelar @ 2013-04-19 11:30 ` Cong Wang 0 siblings, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-04-19 11:30 UTC (permalink / raw) To: Pravin Shelar; +Cc: netdev, Jesse Gross, Stephen Hemminger, David S. Miller On Thu, 2013-04-18 at 10:23 -0700, Pravin Shelar wrote: > skb_udp6_tunnel_segment() looks alot like skb_udp_tunnel_segment(), > difference is checksum calculation. I think we can write a common > function here. Agreed, will try. ^ permalink raw reply [flat|nested] 33+ messages in thread
* [PATCH iproute2] vxlan: add ipv6 support 2013-04-17 5:10 [Patch net-next v4 0/5] vxlan: add ipv6 support Cong Wang ` (4 preceding siblings ...) 2013-04-17 5:10 ` [Patch net-next v4 5/5] ipv6: Add generic UDP Tunnel segmentation Cong Wang @ 2013-04-17 5:10 ` Cong Wang 2013-04-18 22:55 ` Stephen Hemminger 2013-04-18 22:57 ` Stephen Hemminger 5 siblings, 2 replies; 33+ messages in thread From: Cong Wang @ 2013-04-17 5:10 UTC (permalink / raw) To: netdev; +Cc: Stephen Hemminger, Cong Wang From: Cong Wang <amwang@redhat.com> Cc: Stephen Hemminger <stephen@networkplumber.org> Signed-off-by: Cong Wang <amwang@redhat.com> --- include/linux/if_link.h | 2 ++ ip/iplink_vxlan.c | 45 ++++++++++++++++++++++++++++++++++++++------- 2 files changed, 40 insertions(+), 7 deletions(-) diff --git a/include/linux/if_link.h b/include/linux/if_link.h index 40167af..a5f43d5 100644 --- a/include/linux/if_link.h +++ b/include/linux/if_link.h @@ -306,6 +306,8 @@ enum { IFLA_VXLAN_RSC, IFLA_VXLAN_L2MISS, IFLA_VXLAN_L3MISS, + IFLA_VXLAN_REMOTE6, + IFLA_VXLAN_LOCAL6, __IFLA_VXLAN_MAX }; #define IFLA_VXLAN_MAX (__IFLA_VXLAN_MAX - 1) diff --git a/ip/iplink_vxlan.c b/ip/iplink_vxlan.c index 1025326..661ab9e 100644 --- a/ip/iplink_vxlan.c +++ b/ip/iplink_vxlan.c @@ -42,6 +42,8 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, int vni_set = 0; __u32 saddr = 0; __u32 gaddr = 0; + struct in6_addr saddr6 = IN6ADDR_ANY_INIT; + struct in6_addr gaddr6 = IN6ADDR_ANY_INIT; unsigned link = 0; __u8 tos = 0; __u8 ttl = 0; @@ -65,15 +67,26 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, vni_set = 1; } else if (!matches(*argv, "group")) { NEXT_ARG(); - gaddr = get_addr32(*argv); - - if (!IN_MULTICAST(ntohl(gaddr))) - invarg("invald group address", *argv); + if (!inet_pton(AF_INET, *argv, &gaddr)) { + if (!inet_pton(AF_INET6, *argv, &gaddr6)) { + fprintf(stderr, "Invalid address \"%s\"\n", *argv); + return -1; + } else if (!IN6_IS_ADDR_MULTICAST(&gaddr6)) + invarg("invald group address", *argv); + } else if (!IN_MULTICAST(ntohl(gaddr))) + invarg("invald group address", *argv); } else if (!matches(*argv, "local")) { NEXT_ARG(); - if (strcmp(*argv, "any")) - saddr = get_addr32(*argv); - if (IN_MULTICAST(ntohl(saddr))) + if (strcmp(*argv, "any")) { + if (!inet_pton(AF_INET, *argv, &saddr)) { + if (!inet_pton(AF_INET6, *argv, &saddr6)) { + fprintf(stderr, "Invalid address \"%s\"\n", *argv); + return -1; + } + } + } + + if (IN_MULTICAST(ntohl(saddr)) || IN6_IS_ADDR_MULTICAST(&saddr6)) invarg("invalid local address", *argv); } else if (!matches(*argv, "dev")) { NEXT_ARG(); @@ -163,8 +176,14 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, addattr32(n, 1024, IFLA_VXLAN_ID, vni); if (gaddr) addattr_l(n, 1024, IFLA_VXLAN_GROUP, &gaddr, 4); + else if (memcmp(&gaddr6, &in6addr_any, sizeof(gaddr6)) != 0) + addattr_l(n, 1024, IFLA_VXLAN_REMOTE6, &gaddr6, sizeof(struct in6_addr)); + if (saddr) addattr_l(n, 1024, IFLA_VXLAN_LOCAL, &saddr, 4); + else if (memcmp(&saddr6, &in6addr_any, sizeof(saddr6)) != 0) + addattr_l(n, 1024, IFLA_VXLAN_LOCAL6, &saddr6, sizeof(struct in6_addr)); + if (link) addattr32(n, 1024, IFLA_VXLAN_LINK, link); addattr8(n, 1024, IFLA_VXLAN_TTL, ttl); @@ -211,6 +230,12 @@ static void vxlan_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[]) if (addr) fprintf(f, "group %s ", format_host(AF_INET, 4, &addr, s1, sizeof(s1))); + } else if (tb[IFLA_VXLAN_REMOTE6]) { + struct in6_addr addr; + memcpy(&addr, RTA_DATA(tb[IFLA_VXLAN_REMOTE6]), sizeof(struct in6_addr)); + if (memcmp(&addr, &in6addr_any, sizeof(addr)) != 0) + fprintf(f, "group %s ", + format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1))); } if (tb[IFLA_VXLAN_LOCAL]) { @@ -218,6 +243,12 @@ static void vxlan_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[]) if (addr) fprintf(f, "local %s ", format_host(AF_INET, 4, &addr, s1, sizeof(s1))); + } else if (tb[IFLA_VXLAN_LOCAL6]) { + struct in6_addr addr; + memcpy(&addr, RTA_DATA(tb[IFLA_VXLAN_LOCAL6]), sizeof(struct in6_addr)); + if (memcmp(&addr, &in6addr_any, sizeof(addr)) != 0) + fprintf(f, "local %s ", + format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1))); } if (tb[IFLA_VXLAN_LINK] && ^ permalink raw reply related [flat|nested] 33+ messages in thread
* Re: [PATCH iproute2] vxlan: add ipv6 support 2013-04-17 5:10 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang @ 2013-04-18 22:55 ` Stephen Hemminger 2013-04-19 11:36 ` Cong Wang 2013-04-18 22:57 ` Stephen Hemminger 1 sibling, 1 reply; 33+ messages in thread From: Stephen Hemminger @ 2013-04-18 22:55 UTC (permalink / raw) To: Cong Wang; +Cc: netdev On Wed, 17 Apr 2013 13:10:23 +0800 Cong Wang <amwang@redhat.com> wrote: > From: Cong Wang <amwang@redhat.com> > > Cc: Stephen Hemminger <stephen@networkplumber.org> > Signed-off-by: Cong Wang <amwang@redhat.com> > --- > include/linux/if_link.h | 2 ++ > ip/iplink_vxlan.c | 45 ++++++++++++++++++++++++++++++++++++++------- > 2 files changed, 40 insertions(+), 7 deletions(-) > Resubmit after net-next is merged to upstream. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [PATCH iproute2] vxlan: add ipv6 support 2013-04-18 22:55 ` Stephen Hemminger @ 2013-04-19 11:36 ` Cong Wang 0 siblings, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-04-19 11:36 UTC (permalink / raw) To: Stephen Hemminger; +Cc: netdev On Thu, 2013-04-18 at 15:55 -0700, Stephen Hemminger wrote: > On Wed, 17 Apr 2013 13:10:23 +0800 > Cong Wang <amwang@redhat.com> wrote: > > > From: Cong Wang <amwang@redhat.com> > > > > Cc: Stephen Hemminger <stephen@networkplumber.org> > > Signed-off-by: Cong Wang <amwang@redhat.com> > > --- > > include/linux/if_link.h | 2 ++ > > ip/iplink_vxlan.c | 45 ++++++++++++++++++++++++++++++++++++++------- > > 2 files changed, 40 insertions(+), 7 deletions(-) > > > > Resubmit after net-next is merged to upstream. Sure, I carry it for completeness. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [PATCH iproute2] vxlan: add ipv6 support 2013-04-17 5:10 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang 2013-04-18 22:55 ` Stephen Hemminger @ 2013-04-18 22:57 ` Stephen Hemminger 2013-04-19 14:20 ` Cong Wang 1 sibling, 1 reply; 33+ messages in thread From: Stephen Hemminger @ 2013-04-18 22:57 UTC (permalink / raw) To: Cong Wang; +Cc: netdev On Wed, 17 Apr 2013 13:10:23 +0800 Cong Wang <amwang@redhat.com> wrote: > + if (!inet_pton(AF_INET, *argv, &gaddr)) { > + if (!inet_pton(AF_INET6, *argv, &gaddr6)) { > + fprintf(stderr, "Invalid address \"%s\"\n", *argv); > + return -1; > + } else if (!IN6_IS_ADDR_MULTICAST(&gaddr6)) > + invarg("invald group address", *argv); > + } else if (!IN_MULTICAST(ntohl(gaddr))) > + invarg("invald group address", *argv); Maybe using getaddrinfo would be better to allow symbolic names as well? ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [PATCH iproute2] vxlan: add ipv6 support 2013-04-18 22:57 ` Stephen Hemminger @ 2013-04-19 14:20 ` Cong Wang 2013-04-19 15:26 ` Stephen Hemminger 0 siblings, 1 reply; 33+ messages in thread From: Cong Wang @ 2013-04-19 14:20 UTC (permalink / raw) To: Stephen Hemminger; +Cc: netdev On Thu, 2013-04-18 at 15:57 -0700, Stephen Hemminger wrote: > On Wed, 17 Apr 2013 13:10:23 +0800 > Cong Wang <amwang@redhat.com> wrote: > > > + if (!inet_pton(AF_INET, *argv, &gaddr)) { > > + if (!inet_pton(AF_INET6, *argv, &gaddr6)) { > > + fprintf(stderr, "Invalid address \"%s\"\n", *argv); > > + return -1; > > + } else if (!IN6_IS_ADDR_MULTICAST(&gaddr6)) > > + invarg("invald group address", *argv); > > + } else if (!IN_MULTICAST(ntohl(gaddr))) > > + invarg("invald group address", *argv); > > Maybe using getaddrinfo would be better to allow symbolic names as well? Yes, but I don't think many people use symbolic name for a multicast group? Thanks. ^ permalink raw reply [flat|nested] 33+ messages in thread
* Re: [PATCH iproute2] vxlan: add ipv6 support 2013-04-19 14:20 ` Cong Wang @ 2013-04-19 15:26 ` Stephen Hemminger 0 siblings, 0 replies; 33+ messages in thread From: Stephen Hemminger @ 2013-04-19 15:26 UTC (permalink / raw) To: Cong Wang; +Cc: netdev On Fri, 19 Apr 2013 22:20:12 +0800 Cong Wang <amwang@redhat.com> wrote: > On Thu, 2013-04-18 at 15:57 -0700, Stephen Hemminger wrote: > > On Wed, 17 Apr 2013 13:10:23 +0800 > > Cong Wang <amwang@redhat.com> wrote: > > > > > + if (!inet_pton(AF_INET, *argv, &gaddr)) { > > > + if (!inet_pton(AF_INET6, *argv, &gaddr6)) { > > > + fprintf(stderr, "Invalid address \"%s\"\n", *argv); > > > + return -1; > > > + } else if (!IN6_IS_ADDR_MULTICAST(&gaddr6)) > > > + invarg("invald group address", *argv); > > > + } else if (!IN_MULTICAST(ntohl(gaddr))) > > > + invarg("invald group address", *argv); > > > > Maybe using getaddrinfo would be better to allow symbolic names as well? > > Yes, but I don't think many people use symbolic name for a multicast > group? > > Thanks. > You can use AI_NUMERICHOST to avoid symbolic names. ^ permalink raw reply [flat|nested] 33+ messages in thread
* [Patch iproute2] vxlan: add ipv6 support
@ 2013-09-03 3:33 Cong Wang
2013-09-12 7:16 ` Cong Wang
0 siblings, 1 reply; 33+ messages in thread
From: Cong Wang @ 2013-09-03 3:33 UTC (permalink / raw)
To: netdev; +Cc: David S. Miller, Stephen Hemminger, Cong Wang
From: Cong Wang <amwang@redhat.com>
The kernel already supports it, so add the support
to iproute2 as well.
Cc: Stephen Hemminger <stephen@networkplumber.org>
Signed-off-by: Cong Wang <amwang@redhat.com>
---
diff --git a/include/linux/if_link.h b/include/linux/if_link.h
index d07aeca..0c37561 100644
--- a/include/linux/if_link.h
+++ b/include/linux/if_link.h
@@ -311,6 +311,8 @@ enum {
IFLA_VXLAN_L2MISS,
IFLA_VXLAN_L3MISS,
IFLA_VXLAN_PORT, /* destination port */
+ IFLA_VXLAN_GROUP6,
+ IFLA_VXLAN_LOCAL6,
__IFLA_VXLAN_MAX
};
#define IFLA_VXLAN_MAX (__IFLA_VXLAN_MAX - 1)
diff --git a/ip/iplink_vxlan.c b/ip/iplink_vxlan.c
index 4304b0d..12e1c74 100644
--- a/ip/iplink_vxlan.c
+++ b/ip/iplink_vxlan.c
@@ -43,6 +43,9 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv,
__u32 saddr = 0;
__u32 gaddr = 0;
__u32 daddr = 0;
+ struct in6_addr saddr6 = IN6ADDR_ANY_INIT;
+ struct in6_addr gaddr6 = IN6ADDR_ANY_INIT;
+ struct in6_addr daddr6 = IN6ADDR_ANY_INIT;
unsigned link = 0;
__u8 tos = 0;
__u8 ttl = 0;
@@ -66,21 +69,36 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv,
vni_set = 1;
} else if (!matches(*argv, "group")) {
NEXT_ARG();
- gaddr = get_addr32(*argv);
-
- if (!IN_MULTICAST(ntohl(gaddr)))
- invarg("invalid group address", *argv);
+ if (!inet_pton(AF_INET, *argv, &gaddr)) {
+ if (!inet_pton(AF_INET6, *argv, &gaddr6)) {
+ fprintf(stderr, "Invalid address \"%s\"\n", *argv);
+ return -1;
+ } else if (!IN6_IS_ADDR_MULTICAST(&gaddr6))
+ invarg("invald group address", *argv);
+ } else if (!IN_MULTICAST(ntohl(gaddr)))
+ invarg("invald group address", *argv);
} else if (!matches(*argv, "remote")) {
NEXT_ARG();
- daddr = get_addr32(*argv);
-
- if (IN_MULTICAST(ntohl(daddr)))
- invarg("invalid remote address", *argv);
+ if (!inet_pton(AF_INET, *argv, &daddr)) {
+ if (!inet_pton(AF_INET6, *argv, &daddr6)) {
+ fprintf(stderr, "Invalid address \"%s\"\n", *argv);
+ return -1;
+ } else if (IN6_IS_ADDR_MULTICAST(&daddr6))
+ invarg("invald remote address", *argv);
+ } else if (IN_MULTICAST(ntohl(daddr)))
+ invarg("invald remote address", *argv);
} else if (!matches(*argv, "local")) {
NEXT_ARG();
- if (strcmp(*argv, "any"))
- saddr = get_addr32(*argv);
- if (IN_MULTICAST(ntohl(saddr)))
+ if (strcmp(*argv, "any")) {
+ if (!inet_pton(AF_INET, *argv, &saddr)) {
+ if (!inet_pton(AF_INET6, *argv, &saddr6)) {
+ fprintf(stderr, "Invalid address \"%s\"\n", *argv);
+ return -1;
+ }
+ }
+ }
+
+ if (IN_MULTICAST(ntohl(saddr)) || IN6_IS_ADDR_MULTICAST(&saddr6))
invarg("invalid local address", *argv);
} else if (!matches(*argv, "dev")) {
NEXT_ARG();
@@ -167,7 +185,9 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv,
fprintf(stderr, "vxlan: missing virtual network identifier\n");
return -1;
}
- if (gaddr && daddr) {
+ if ((gaddr && daddr) ||
+ (memcmp(&gaddr6, &in6addr_any, sizeof(gaddr6)) &&
+ memcmp(&daddr6, &in6addr_any, sizeof(daddr6)))) {
fprintf(stderr, "vxlan: both group and remote cannot be specified\n");
return -1;
}
@@ -176,8 +196,16 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv,
addattr_l(n, 1024, IFLA_VXLAN_GROUP, &gaddr, 4);
else if (daddr)
addattr_l(n, 1024, IFLA_VXLAN_GROUP, &daddr, 4);
+ if (memcmp(&gaddr6, &in6addr_any, sizeof(gaddr6)) != 0)
+ addattr_l(n, 1024, IFLA_VXLAN_GROUP6, &gaddr6, sizeof(struct in6_addr));
+ else if (memcmp(&daddr6, &in6addr_any, sizeof(daddr6)) != 0)
+ addattr_l(n, 1024, IFLA_VXLAN_GROUP6, &daddr6, sizeof(struct in6_addr));
+
if (saddr)
addattr_l(n, 1024, IFLA_VXLAN_LOCAL, &saddr, 4);
+ else if (memcmp(&saddr6, &in6addr_any, sizeof(saddr6)) != 0)
+ addattr_l(n, 1024, IFLA_VXLAN_LOCAL6, &saddr6, sizeof(struct in6_addr));
+
if (link)
addattr32(n, 1024, IFLA_VXLAN_LINK, link);
addattr8(n, 1024, IFLA_VXLAN_TTL, ttl);
@@ -229,6 +257,17 @@ static void vxlan_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[])
fprintf(f, "remote %s ",
format_host(AF_INET, 4, &addr, s1, sizeof(s1)));
}
+ } else if (tb[IFLA_VXLAN_GROUP6]) {
+ struct in6_addr addr;
+ memcpy(&addr, RTA_DATA(tb[IFLA_VXLAN_GROUP6]), sizeof(struct in6_addr));
+ if (memcmp(&addr, &in6addr_any, sizeof(addr)) != 0) {
+ if (IN6_IS_ADDR_MULTICAST(&addr))
+ fprintf(f, "group %s ",
+ format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1)));
+ else
+ fprintf(f, "remote %s ",
+ format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1)));
+ }
}
if (tb[IFLA_VXLAN_LOCAL]) {
@@ -236,6 +275,12 @@ static void vxlan_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[])
if (addr)
fprintf(f, "local %s ",
format_host(AF_INET, 4, &addr, s1, sizeof(s1)));
+ } else if (tb[IFLA_VXLAN_LOCAL6]) {
+ struct in6_addr addr;
+ memcpy(&addr, RTA_DATA(tb[IFLA_VXLAN_LOCAL6]), sizeof(struct in6_addr));
+ if (memcmp(&addr, &in6addr_any, sizeof(addr)) != 0)
+ fprintf(f, "local %s ",
+ format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1)));
}
if (tb[IFLA_VXLAN_LINK] &&
^ permalink raw reply related [flat|nested] 33+ messages in thread* Re: [Patch iproute2] vxlan: add ipv6 support 2013-09-03 3:33 [Patch " Cong Wang @ 2013-09-12 7:16 ` Cong Wang 0 siblings, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-09-12 7:16 UTC (permalink / raw) To: netdev; +Cc: David S. Miller, Stephen Hemminger On Tue, 2013-09-03 at 11:33 +0800, Cong Wang wrote: > From: Cong Wang <amwang@redhat.com> > > The kernel already supports it, so add the support > to iproute2 as well. > > Cc: Stephen Hemminger <stephen@networkplumber.org> > Signed-off-by: Cong Wang <amwang@redhat.com> Stephen, could you take it if it looks good to you? Thanks! ^ permalink raw reply [flat|nested] 33+ messages in thread
* [Patch net-next v3 1/4] vxlan: defer vxlan init as late as possible @ 2013-04-08 2:18 Cong Wang 2013-04-08 2:18 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang 0 siblings, 1 reply; 33+ messages in thread From: Cong Wang @ 2013-04-08 2:18 UTC (permalink / raw) To: netdev; +Cc: Stephen Hemminger, David S. Miller, Cong Wang From: Cong Wang <amwang@redhat.com> When vxlan is compiled as builtin, its init code runs before IPv6 init, this could cause problems if we create IPv6 socket in the latter patch. Cc: Stephen Hemminger <stephen@networkplumber.org> Cc: David S. Miller <davem@davemloft.net> Signed-off-by: Cong Wang <amwang@redhat.com> --- drivers/net/vxlan.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c index 62a4438..cac4e4f 100644 --- a/drivers/net/vxlan.c +++ b/drivers/net/vxlan.c @@ -1619,7 +1619,7 @@ out2: out1: return rc; } -module_init(vxlan_init_module); +late_initcall(vxlan_init_module); static void __exit vxlan_cleanup_module(void) { -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
* [PATCH iproute2] vxlan: add ipv6 support 2013-04-08 2:18 [Patch net-next v3 1/4] vxlan: defer vxlan init as late as possible Cong Wang @ 2013-04-08 2:18 ` Cong Wang 0 siblings, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-04-08 2:18 UTC (permalink / raw) To: netdev; +Cc: Stephen Hemminger, Cong Wang From: Cong Wang <amwang@redhat.com> Cc: Stephen Hemminger <stephen@networkplumber.org> Signed-off-by: Cong Wang <amwang@redhat.com> --- include/linux/if_link.h | 2 ++ ip/iplink_vxlan.c | 45 ++++++++++++++++++++++++++++++++++++++------- 2 files changed, 40 insertions(+), 7 deletions(-) diff --git a/include/linux/if_link.h b/include/linux/if_link.h index 40167af..f74b8cc 100644 --- a/include/linux/if_link.h +++ b/include/linux/if_link.h @@ -306,6 +306,8 @@ enum { IFLA_VXLAN_RSC, IFLA_VXLAN_L2MISS, IFLA_VXLAN_L3MISS, + IFLA_VXLAN_GROUP6, + IFLA_VXLAN_LOCAL6, __IFLA_VXLAN_MAX }; #define IFLA_VXLAN_MAX (__IFLA_VXLAN_MAX - 1) diff --git a/ip/iplink_vxlan.c b/ip/iplink_vxlan.c index 1025326..c10ec0f 100644 --- a/ip/iplink_vxlan.c +++ b/ip/iplink_vxlan.c @@ -42,6 +42,8 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, int vni_set = 0; __u32 saddr = 0; __u32 gaddr = 0; + struct in6_addr saddr6 = IN6ADDR_ANY_INIT; + struct in6_addr gaddr6 = IN6ADDR_ANY_INIT; unsigned link = 0; __u8 tos = 0; __u8 ttl = 0; @@ -65,15 +67,26 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, vni_set = 1; } else if (!matches(*argv, "group")) { NEXT_ARG(); - gaddr = get_addr32(*argv); - - if (!IN_MULTICAST(ntohl(gaddr))) - invarg("invald group address", *argv); + if (!inet_pton(AF_INET, *argv, &gaddr)) { + if (!inet_pton(AF_INET6, *argv, &gaddr6)) { + fprintf(stderr, "Invalid address \"%s\"\n", *argv); + return -1; + } else if (!IN6_IS_ADDR_MULTICAST(&gaddr6)) + invarg("invald group address", *argv); + } else if (!IN_MULTICAST(ntohl(gaddr))) + invarg("invald group address", *argv); } else if (!matches(*argv, "local")) { NEXT_ARG(); - if (strcmp(*argv, "any")) - saddr = get_addr32(*argv); - if (IN_MULTICAST(ntohl(saddr))) + if (strcmp(*argv, "any")) { + if (!inet_pton(AF_INET, *argv, &saddr)) { + if (!inet_pton(AF_INET6, *argv, &saddr6)) { + fprintf(stderr, "Invalid address \"%s\"\n", *argv); + return -1; + } + } + } + + if (IN_MULTICAST(ntohl(saddr)) || IN6_IS_ADDR_MULTICAST(&saddr6)) invarg("invalid local address", *argv); } else if (!matches(*argv, "dev")) { NEXT_ARG(); @@ -163,8 +176,14 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, addattr32(n, 1024, IFLA_VXLAN_ID, vni); if (gaddr) addattr_l(n, 1024, IFLA_VXLAN_GROUP, &gaddr, 4); + else if (memcmp(&gaddr6, &in6addr_any, sizeof(gaddr6)) != 0) + addattr_l(n, 1024, IFLA_VXLAN_GROUP6, &gaddr6, sizeof(struct in6_addr)); + if (saddr) addattr_l(n, 1024, IFLA_VXLAN_LOCAL, &saddr, 4); + else if (memcmp(&saddr6, &in6addr_any, sizeof(saddr6)) != 0) + addattr_l(n, 1024, IFLA_VXLAN_LOCAL6, &saddr6, sizeof(struct in6_addr)); + if (link) addattr32(n, 1024, IFLA_VXLAN_LINK, link); addattr8(n, 1024, IFLA_VXLAN_TTL, ttl); @@ -211,6 +230,12 @@ static void vxlan_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[]) if (addr) fprintf(f, "group %s ", format_host(AF_INET, 4, &addr, s1, sizeof(s1))); + } else if (tb[IFLA_VXLAN_GROUP6]) { + struct in6_addr addr; + memcpy(&addr, RTA_DATA(tb[IFLA_VXLAN_GROUP6]), sizeof(struct in6_addr)); + if (memcmp(&addr, &in6addr_any, sizeof(addr)) != 0) + fprintf(f, "group %s ", + format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1))); } if (tb[IFLA_VXLAN_LOCAL]) { @@ -218,6 +243,12 @@ static void vxlan_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[]) if (addr) fprintf(f, "local %s ", format_host(AF_INET, 4, &addr, s1, sizeof(s1))); + } else if (tb[IFLA_VXLAN_LOCAL6]) { + struct in6_addr addr; + memcpy(&addr, RTA_DATA(tb[IFLA_VXLAN_LOCAL6]), sizeof(struct in6_addr)); + if (memcmp(&addr, &in6addr_any, sizeof(addr)) != 0) + fprintf(f, "local %s ", + format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1))); } if (tb[IFLA_VXLAN_LINK] && -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
* [Patch net-next v2 1/4] vxlan: defer vxlan init as late as possible @ 2013-04-05 12:16 Cong Wang 2013-04-05 12:16 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang 0 siblings, 1 reply; 33+ messages in thread From: Cong Wang @ 2013-04-05 12:16 UTC (permalink / raw) To: netdev; +Cc: Stephen Hemminger, David S. Miller, Cong Wang From: Cong Wang <amwang@redhat.com> When vxlan is compiled as builtin, its init code runs before IPv6 init, this could cause problems if we create IPv6 socket in the latter patch. Cc: Stephen Hemminger <stephen@networkplumber.org> Cc: David S. Miller <davem@davemloft.net> Signed-off-by: Cong Wang <amwang@redhat.com> --- drivers/net/vxlan.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c index 62a4438..cac4e4f 100644 --- a/drivers/net/vxlan.c +++ b/drivers/net/vxlan.c @@ -1619,7 +1619,7 @@ out2: out1: return rc; } -module_init(vxlan_init_module); +late_initcall(vxlan_init_module); static void __exit vxlan_cleanup_module(void) { -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
* [PATCH iproute2] vxlan: add ipv6 support 2013-04-05 12:16 [Patch net-next v2 1/4] vxlan: defer vxlan init as late as possible Cong Wang @ 2013-04-05 12:16 ` Cong Wang 0 siblings, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-04-05 12:16 UTC (permalink / raw) To: netdev; +Cc: Stephen Hemminger, Cong Wang From: Cong Wang <amwang@redhat.com> Cc: Stephen Hemminger <stephen@networkplumber.org> Signed-off-by: Cong Wang <amwang@redhat.com> --- include/linux/if_link.h | 2 ++ ip/iplink_vxlan.c | 45 ++++++++++++++++++++++++++++++++++++++------- 2 files changed, 40 insertions(+), 7 deletions(-) diff --git a/include/linux/if_link.h b/include/linux/if_link.h index 40167af..f74b8cc 100644 --- a/include/linux/if_link.h +++ b/include/linux/if_link.h @@ -306,6 +306,8 @@ enum { IFLA_VXLAN_RSC, IFLA_VXLAN_L2MISS, IFLA_VXLAN_L3MISS, + IFLA_VXLAN_GROUP6, + IFLA_VXLAN_LOCAL6, __IFLA_VXLAN_MAX }; #define IFLA_VXLAN_MAX (__IFLA_VXLAN_MAX - 1) diff --git a/ip/iplink_vxlan.c b/ip/iplink_vxlan.c index 1025326..c10ec0f 100644 --- a/ip/iplink_vxlan.c +++ b/ip/iplink_vxlan.c @@ -42,6 +42,8 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, int vni_set = 0; __u32 saddr = 0; __u32 gaddr = 0; + struct in6_addr saddr6 = IN6ADDR_ANY_INIT; + struct in6_addr gaddr6 = IN6ADDR_ANY_INIT; unsigned link = 0; __u8 tos = 0; __u8 ttl = 0; @@ -65,15 +67,26 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, vni_set = 1; } else if (!matches(*argv, "group")) { NEXT_ARG(); - gaddr = get_addr32(*argv); - - if (!IN_MULTICAST(ntohl(gaddr))) - invarg("invald group address", *argv); + if (!inet_pton(AF_INET, *argv, &gaddr)) { + if (!inet_pton(AF_INET6, *argv, &gaddr6)) { + fprintf(stderr, "Invalid address \"%s\"\n", *argv); + return -1; + } else if (!IN6_IS_ADDR_MULTICAST(&gaddr6)) + invarg("invald group address", *argv); + } else if (!IN_MULTICAST(ntohl(gaddr))) + invarg("invald group address", *argv); } else if (!matches(*argv, "local")) { NEXT_ARG(); - if (strcmp(*argv, "any")) - saddr = get_addr32(*argv); - if (IN_MULTICAST(ntohl(saddr))) + if (strcmp(*argv, "any")) { + if (!inet_pton(AF_INET, *argv, &saddr)) { + if (!inet_pton(AF_INET6, *argv, &saddr6)) { + fprintf(stderr, "Invalid address \"%s\"\n", *argv); + return -1; + } + } + } + + if (IN_MULTICAST(ntohl(saddr)) || IN6_IS_ADDR_MULTICAST(&saddr6)) invarg("invalid local address", *argv); } else if (!matches(*argv, "dev")) { NEXT_ARG(); @@ -163,8 +176,14 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, addattr32(n, 1024, IFLA_VXLAN_ID, vni); if (gaddr) addattr_l(n, 1024, IFLA_VXLAN_GROUP, &gaddr, 4); + else if (memcmp(&gaddr6, &in6addr_any, sizeof(gaddr6)) != 0) + addattr_l(n, 1024, IFLA_VXLAN_GROUP6, &gaddr6, sizeof(struct in6_addr)); + if (saddr) addattr_l(n, 1024, IFLA_VXLAN_LOCAL, &saddr, 4); + else if (memcmp(&saddr6, &in6addr_any, sizeof(saddr6)) != 0) + addattr_l(n, 1024, IFLA_VXLAN_LOCAL6, &saddr6, sizeof(struct in6_addr)); + if (link) addattr32(n, 1024, IFLA_VXLAN_LINK, link); addattr8(n, 1024, IFLA_VXLAN_TTL, ttl); @@ -211,6 +230,12 @@ static void vxlan_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[]) if (addr) fprintf(f, "group %s ", format_host(AF_INET, 4, &addr, s1, sizeof(s1))); + } else if (tb[IFLA_VXLAN_GROUP6]) { + struct in6_addr addr; + memcpy(&addr, RTA_DATA(tb[IFLA_VXLAN_GROUP6]), sizeof(struct in6_addr)); + if (memcmp(&addr, &in6addr_any, sizeof(addr)) != 0) + fprintf(f, "group %s ", + format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1))); } if (tb[IFLA_VXLAN_LOCAL]) { @@ -218,6 +243,12 @@ static void vxlan_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[]) if (addr) fprintf(f, "local %s ", format_host(AF_INET, 4, &addr, s1, sizeof(s1))); + } else if (tb[IFLA_VXLAN_LOCAL6]) { + struct in6_addr addr; + memcpy(&addr, RTA_DATA(tb[IFLA_VXLAN_LOCAL6]), sizeof(struct in6_addr)); + if (memcmp(&addr, &in6addr_any, sizeof(addr)) != 0) + fprintf(f, "local %s ", + format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1))); } if (tb[IFLA_VXLAN_LINK] && -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
* [Patch net-next v1 1/4] vxlan: defer vxlan init as late as possible @ 2013-03-31 5:43 Cong Wang 2013-03-31 6:17 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang 0 siblings, 1 reply; 33+ messages in thread From: Cong Wang @ 2013-03-31 5:43 UTC (permalink / raw) To: netdev; +Cc: Stephen Hemminger, David S. Miller, Cong Wang From: Cong Wang <amwang@redhat.com> When vxlan is compiled as builtin, its init code runs before IPv6 init, this could cause problems if we create IPv6 socket in the latter patch. Cc: Stephen Hemminger <stephen@networkplumber.org> Cc: David S. Miller <davem@davemloft.net> Signed-off-by: Cong Wang <amwang@redhat.com> --- drivers/net/vxlan.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c index 62a4438..cac4e4f 100644 --- a/drivers/net/vxlan.c +++ b/drivers/net/vxlan.c @@ -1619,7 +1619,7 @@ out2: out1: return rc; } -module_init(vxlan_init_module); +late_initcall(vxlan_init_module); static void __exit vxlan_cleanup_module(void) { -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
* [PATCH iproute2] vxlan: add ipv6 support 2013-03-31 5:43 [Patch net-next v1 1/4] vxlan: defer vxlan init as late as possible Cong Wang @ 2013-03-31 6:17 ` Cong Wang 0 siblings, 0 replies; 33+ messages in thread From: Cong Wang @ 2013-03-31 6:17 UTC (permalink / raw) To: netdev; +Cc: Stephen Hemminger, Cong Wang From: Cong Wang <amwang@redhat.com> Cc: Stephen Hemminger <stephen@networkplumber.org> Signed-off-by: Cong Wang <amwang@redhat.com> --- include/linux/if_link.h | 2 ++ ip/iplink_vxlan.c | 45 ++++++++++++++++++++++++++++++++++++++------- 2 files changed, 40 insertions(+), 7 deletions(-) diff --git a/include/linux/if_link.h b/include/linux/if_link.h index 40167af..f74b8cc 100644 --- a/include/linux/if_link.h +++ b/include/linux/if_link.h @@ -306,6 +306,8 @@ enum { IFLA_VXLAN_RSC, IFLA_VXLAN_L2MISS, IFLA_VXLAN_L3MISS, + IFLA_VXLAN_GROUP6, + IFLA_VXLAN_LOCAL6, __IFLA_VXLAN_MAX }; #define IFLA_VXLAN_MAX (__IFLA_VXLAN_MAX - 1) diff --git a/ip/iplink_vxlan.c b/ip/iplink_vxlan.c index 1025326..c10ec0f 100644 --- a/ip/iplink_vxlan.c +++ b/ip/iplink_vxlan.c @@ -42,6 +42,8 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, int vni_set = 0; __u32 saddr = 0; __u32 gaddr = 0; + struct in6_addr saddr6 = IN6ADDR_ANY_INIT; + struct in6_addr gaddr6 = IN6ADDR_ANY_INIT; unsigned link = 0; __u8 tos = 0; __u8 ttl = 0; @@ -65,15 +67,26 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, vni_set = 1; } else if (!matches(*argv, "group")) { NEXT_ARG(); - gaddr = get_addr32(*argv); - - if (!IN_MULTICAST(ntohl(gaddr))) - invarg("invald group address", *argv); + if (!inet_pton(AF_INET, *argv, &gaddr)) { + if (!inet_pton(AF_INET6, *argv, &gaddr6)) { + fprintf(stderr, "Invalid address \"%s\"\n", *argv); + return -1; + } else if (!IN6_IS_ADDR_MULTICAST(&gaddr6)) + invarg("invald group address", *argv); + } else if (!IN_MULTICAST(ntohl(gaddr))) + invarg("invald group address", *argv); } else if (!matches(*argv, "local")) { NEXT_ARG(); - if (strcmp(*argv, "any")) - saddr = get_addr32(*argv); - if (IN_MULTICAST(ntohl(saddr))) + if (strcmp(*argv, "any")) { + if (!inet_pton(AF_INET, *argv, &saddr)) { + if (!inet_pton(AF_INET6, *argv, &saddr6)) { + fprintf(stderr, "Invalid address \"%s\"\n", *argv); + return -1; + } + } + } + + if (IN_MULTICAST(ntohl(saddr)) || IN6_IS_ADDR_MULTICAST(&saddr6)) invarg("invalid local address", *argv); } else if (!matches(*argv, "dev")) { NEXT_ARG(); @@ -163,8 +176,14 @@ static int vxlan_parse_opt(struct link_util *lu, int argc, char **argv, addattr32(n, 1024, IFLA_VXLAN_ID, vni); if (gaddr) addattr_l(n, 1024, IFLA_VXLAN_GROUP, &gaddr, 4); + else if (memcmp(&gaddr6, &in6addr_any, sizeof(gaddr6)) != 0) + addattr_l(n, 1024, IFLA_VXLAN_GROUP6, &gaddr6, sizeof(struct in6_addr)); + if (saddr) addattr_l(n, 1024, IFLA_VXLAN_LOCAL, &saddr, 4); + else if (memcmp(&saddr6, &in6addr_any, sizeof(saddr6)) != 0) + addattr_l(n, 1024, IFLA_VXLAN_LOCAL6, &saddr6, sizeof(struct in6_addr)); + if (link) addattr32(n, 1024, IFLA_VXLAN_LINK, link); addattr8(n, 1024, IFLA_VXLAN_TTL, ttl); @@ -211,6 +230,12 @@ static void vxlan_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[]) if (addr) fprintf(f, "group %s ", format_host(AF_INET, 4, &addr, s1, sizeof(s1))); + } else if (tb[IFLA_VXLAN_GROUP6]) { + struct in6_addr addr; + memcpy(&addr, RTA_DATA(tb[IFLA_VXLAN_GROUP6]), sizeof(struct in6_addr)); + if (memcmp(&addr, &in6addr_any, sizeof(addr)) != 0) + fprintf(f, "group %s ", + format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1))); } if (tb[IFLA_VXLAN_LOCAL]) { @@ -218,6 +243,12 @@ static void vxlan_print_opt(struct link_util *lu, FILE *f, struct rtattr *tb[]) if (addr) fprintf(f, "local %s ", format_host(AF_INET, 4, &addr, s1, sizeof(s1))); + } else if (tb[IFLA_VXLAN_LOCAL6]) { + struct in6_addr addr; + memcpy(&addr, RTA_DATA(tb[IFLA_VXLAN_LOCAL6]), sizeof(struct in6_addr)); + if (memcmp(&addr, &in6addr_any, sizeof(addr)) != 0) + fprintf(f, "local %s ", + format_host(AF_INET6, sizeof(struct in6_addr), &addr, s1, sizeof(s1))); } if (tb[IFLA_VXLAN_LINK] && -- 1.7.7.6 ^ permalink raw reply related [flat|nested] 33+ messages in thread
end of thread, other threads:[~2013-09-12 7:16 UTC | newest] Thread overview: 33+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2013-04-17 5:10 [Patch net-next v4 0/5] vxlan: add ipv6 support Cong Wang 2013-04-17 5:10 ` [Patch net-next v4 1/5] vxlan: defer vxlan init as late as possible Cong Wang 2013-04-17 5:10 ` [Patch net-next v4 2/5] ipv6: export ipv6_sock_mc_join and ipv6_sock_mc_drop Cong Wang 2013-04-17 5:10 ` [Patch net-next v4 3/5] vxlan: add ipv6 support Cong Wang 2013-04-17 8:15 ` Mike Rapoport 2013-04-17 9:57 ` Cong Wang 2013-04-17 10:36 ` Mike Rapoport 2013-04-17 13:18 ` Cong Wang 2013-04-17 16:34 ` Mike Rapoport 2013-04-18 14:34 ` Mike Rapoport 2013-04-19 11:35 ` Cong Wang 2013-04-17 5:10 ` [Patch net-next v4 4/5] vxlan: add scope_id support for ll addr Cong Wang 2013-04-18 13:36 ` Cong Wang 2013-04-19 11:14 ` David Stevens 2013-04-19 11:56 ` Cong Wang 2013-04-21 13:47 ` Cong Wang 2013-04-21 14:46 ` Bjørn Mork 2013-04-21 14:57 ` Cong Wang 2013-04-21 15:10 ` Bjørn Mork 2013-04-17 5:10 ` [Patch net-next v4 5/5] ipv6: Add generic UDP Tunnel segmentation Cong Wang 2013-04-18 17:23 ` Pravin Shelar 2013-04-19 11:30 ` Cong Wang 2013-04-17 5:10 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang 2013-04-18 22:55 ` Stephen Hemminger 2013-04-19 11:36 ` Cong Wang 2013-04-18 22:57 ` Stephen Hemminger 2013-04-19 14:20 ` Cong Wang 2013-04-19 15:26 ` Stephen Hemminger -- strict thread matches above, loose matches on Subject: below -- 2013-09-03 3:33 [Patch " Cong Wang 2013-09-12 7:16 ` Cong Wang 2013-04-08 2:18 [Patch net-next v3 1/4] vxlan: defer vxlan init as late as possible Cong Wang 2013-04-08 2:18 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang 2013-04-05 12:16 [Patch net-next v2 1/4] vxlan: defer vxlan init as late as possible Cong Wang 2013-04-05 12:16 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang 2013-03-31 5:43 [Patch net-next v1 1/4] vxlan: defer vxlan init as late as possible Cong Wang 2013-03-31 6:17 ` [PATCH iproute2] vxlan: add ipv6 support Cong Wang
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.