]>
Commit | Line | Data |
---|---|---|
0a69452c DB |
1 | /* |
2 | * xfrm6_mode_beet.c - BEET mode encapsulation for IPv6. | |
3 | * | |
4 | * Copyright (c) 2006 Diego Beltrami <[email protected]> | |
5 | * Miika Komu <[email protected]> | |
6 | * Herbert Xu <[email protected]> | |
7 | * Abhinav Pathak <[email protected]> | |
8 | * Jeff Ahrenholz <[email protected]> | |
9 | */ | |
10 | ||
11 | #include <linux/init.h> | |
12 | #include <linux/kernel.h> | |
13 | #include <linux/module.h> | |
14 | #include <linux/skbuff.h> | |
15 | #include <linux/stringify.h> | |
16 | #include <net/dsfield.h> | |
17 | #include <net/dst.h> | |
18 | #include <net/inet_ecn.h> | |
19 | #include <net/ipv6.h> | |
20 | #include <net/xfrm.h> | |
21 | ||
227620e2 HX |
22 | static void xfrm6_beet_make_header(struct sk_buff *skb) |
23 | { | |
24 | struct ipv6hdr *iph = ipv6_hdr(skb); | |
25 | ||
26 | iph->version = 6; | |
27 | ||
28 | memcpy(iph->flow_lbl, XFRM_MODE_SKB_CB(skb)->flow_lbl, | |
29 | sizeof(iph->flow_lbl)); | |
30 | iph->nexthdr = XFRM_MODE_SKB_CB(skb)->protocol; | |
31 | ||
32 | ipv6_change_dsfield(iph, 0, XFRM_MODE_SKB_CB(skb)->tos); | |
33 | iph->hop_limit = XFRM_MODE_SKB_CB(skb)->ttl; | |
34 | } | |
35 | ||
0a69452c DB |
36 | /* Add encapsulation header. |
37 | * | |
38 | * The top IP header will be constructed per draft-nikander-esp-beet-mode-06.txt. | |
0a69452c DB |
39 | */ |
40 | static int xfrm6_beet_output(struct xfrm_state *x, struct sk_buff *skb) | |
41 | { | |
36cf9acf | 42 | struct ipv6hdr *top_iph; |
abf5cdb8 | 43 | struct ip_beet_phdr *ph; |
abf5cdb8 | 44 | int optlen, hdr_len; |
0a69452c | 45 | |
abf5cdb8 JK |
46 | hdr_len = 0; |
47 | optlen = XFRM_MODE_SKB_CB(skb)->optlen; | |
48 | if (unlikely(optlen)) | |
49 | hdr_len += IPV4_BEET_PHMAXLEN - (optlen & 4); | |
50 | ||
51 | skb_set_network_header(skb, -x->props.header_len - hdr_len); | |
52 | if (x->sel.family != AF_INET6) | |
53 | skb->network_header += IPV4_BEET_PHMAXLEN; | |
36cf9acf HX |
54 | skb->mac_header = skb->network_header + |
55 | offsetof(struct ipv6hdr, nexthdr); | |
56 | skb->transport_header = skb->network_header + sizeof(*top_iph); | |
abf5cdb8 | 57 | ph = (struct ip_beet_phdr *)__skb_pull(skb, XFRM_MODE_SKB_CB(skb)->ihl-hdr_len); |
0a69452c | 58 | |
227620e2 | 59 | xfrm6_beet_make_header(skb); |
36cf9acf | 60 | |
227620e2 | 61 | top_iph = ipv6_hdr(skb); |
abf5cdb8 JK |
62 | if (unlikely(optlen)) { |
63 | ||
64 | BUG_ON(optlen < 0); | |
65 | ||
66 | ph->padlen = 4 - (optlen & 4); | |
67 | ph->hdrlen = optlen / 8; | |
68 | ph->nexthdr = top_iph->nexthdr; | |
69 | if (ph->padlen) | |
70 | memset(ph + 1, IPOPT_NOP, ph->padlen); | |
71 | ||
72 | top_iph->nexthdr = IPPROTO_BEETPH; | |
73 | } | |
36cf9acf | 74 | |
4e3fd7a0 AD |
75 | top_iph->saddr = *(struct in6_addr *)&x->props.saddr; |
76 | top_iph->daddr = *(struct in6_addr *)&x->id.daddr; | |
0a69452c DB |
77 | return 0; |
78 | } | |
79 | ||
80 | static int xfrm6_beet_input(struct xfrm_state *x, struct sk_buff *skb) | |
81 | { | |
82 | struct ipv6hdr *ip6h; | |
39f69c6f | 83 | const unsigned char *old_mac; |
0a69452c | 84 | int size = sizeof(struct ipv6hdr); |
227620e2 | 85 | int err; |
0a69452c | 86 | |
227620e2 HX |
87 | err = skb_cow_head(skb, size + skb->mac_len); |
88 | if (err) | |
0a69452c DB |
89 | goto out; |
90 | ||
227620e2 | 91 | __skb_push(skb, size); |
c1d2bbe1 | 92 | skb_reset_network_header(skb); |
0a69452c | 93 | |
98e399f8 | 94 | old_mac = skb_mac_header(skb); |
39f69c6f | 95 | skb_set_mac_header(skb, -skb->mac_len); |
98e399f8 | 96 | memmove(skb_mac_header(skb), old_mac, skb->mac_len); |
0a69452c | 97 | |
227620e2 HX |
98 | xfrm6_beet_make_header(skb); |
99 | ||
0660e03f | 100 | ip6h = ipv6_hdr(skb); |
0a69452c | 101 | ip6h->payload_len = htons(skb->len - size); |
4e3fd7a0 AD |
102 | ip6h->daddr = *(struct in6_addr *)&x->sel.daddr.a6; |
103 | ip6h->saddr = *(struct in6_addr *)&x->sel.saddr.a6; | |
0a69452c DB |
104 | err = 0; |
105 | out: | |
106 | return err; | |
107 | } | |
108 | ||
109 | static struct xfrm_mode xfrm6_beet_mode = { | |
227620e2 HX |
110 | .input2 = xfrm6_beet_input, |
111 | .input = xfrm_prepare_input, | |
36cf9acf HX |
112 | .output2 = xfrm6_beet_output, |
113 | .output = xfrm6_prepare_output, | |
0a69452c DB |
114 | .owner = THIS_MODULE, |
115 | .encap = XFRM_MODE_BEET, | |
1bfcb10f | 116 | .flags = XFRM_MODE_FLAG_TUNNEL, |
0a69452c DB |
117 | }; |
118 | ||
119 | static int __init xfrm6_beet_init(void) | |
120 | { | |
121 | return xfrm_register_mode(&xfrm6_beet_mode, AF_INET6); | |
122 | } | |
123 | ||
124 | static void __exit xfrm6_beet_exit(void) | |
125 | { | |
126 | int err; | |
127 | ||
128 | err = xfrm_unregister_mode(&xfrm6_beet_mode, AF_INET6); | |
129 | BUG_ON(err); | |
130 | } | |
131 | ||
132 | module_init(xfrm6_beet_init); | |
133 | module_exit(xfrm6_beet_exit); | |
134 | MODULE_LICENSE("GPL"); | |
135 | MODULE_ALIAS_XFRM_MODE(AF_INET6, XFRM_MODE_BEET); |