2 * Copyright (c) 2013 Nicira, Inc.
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of version 2 of the GNU General Public
6 * License as published by the Free Software Foundation.
8 * This program is distributed in the hope that it will be useful, but
9 * WITHOUT ANY WARRANTY; without even the implied warranty of
10 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
11 * General Public License for more details.
13 * You should have received a copy of the GNU General Public License
14 * along with this program; if not, write to the Free Software
15 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
19 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
21 #include <linux/capability.h>
22 #include <linux/module.h>
23 #include <linux/types.h>
24 #include <linux/kernel.h>
25 #include <linux/slab.h>
26 #include <linux/uaccess.h>
27 #include <linux/skbuff.h>
28 #include <linux/netdevice.h>
30 #include <linux/tcp.h>
31 #include <linux/udp.h>
32 #include <linux/if_arp.h>
33 #include <linux/mroute.h>
34 #include <linux/init.h>
35 #include <linux/in6.h>
36 #include <linux/inetdevice.h>
37 #include <linux/igmp.h>
38 #include <linux/netfilter_ipv4.h>
39 #include <linux/etherdevice.h>
40 #include <linux/if_ether.h>
41 #include <linux/if_vlan.h>
42 #include <linux/rculist.h>
43 #include <linux/err.h>
48 #include <net/protocol.h>
49 #include <net/ip_tunnels.h>
51 #include <net/checksum.h>
52 #include <net/dsfield.h>
53 #include <net/inet_ecn.h>
55 #include <net/net_namespace.h>
56 #include <net/netns/generic.h>
57 #include <net/rtnetlink.h>
59 #if IS_ENABLED(CONFIG_IPV6)
61 #include <net/ip6_fib.h>
62 #include <net/ip6_route.h>
65 static unsigned int ip_tunnel_hash(__be32 key, __be32 remote)
67 return hash_32((__force u32)key ^ (__force u32)remote,
71 static void __tunnel_dst_set(struct ip_tunnel_dst *idst,
72 struct dst_entry *dst)
74 struct dst_entry *old_dst;
77 if (dst->flags & DST_NOCACHE)
82 old_dst = xchg((__force struct dst_entry **)&idst->dst, dst);
86 static void tunnel_dst_set(struct ip_tunnel *t, struct dst_entry *dst)
88 __tunnel_dst_set(this_cpu_ptr(t->dst_cache), dst);
91 static void tunnel_dst_reset(struct ip_tunnel *t)
93 tunnel_dst_set(t, NULL);
96 void ip_tunnel_dst_reset_all(struct ip_tunnel *t)
100 for_each_possible_cpu(i)
101 __tunnel_dst_set(per_cpu_ptr(t->dst_cache, i), NULL);
103 EXPORT_SYMBOL(ip_tunnel_dst_reset_all);
105 static struct rtable *tunnel_rtable_get(struct ip_tunnel *t, u32 cookie)
107 struct dst_entry *dst;
110 dst = rcu_dereference(this_cpu_ptr(t->dst_cache)->dst);
112 if (dst->obsolete && dst->ops->check(dst, cookie) == NULL) {
120 return (struct rtable *)dst;
123 static bool ip_tunnel_key_match(const struct ip_tunnel_parm *p,
124 __be16 flags, __be32 key)
126 if (p->i_flags & TUNNEL_KEY) {
127 if (flags & TUNNEL_KEY)
128 return key == p->i_key;
130 /* key expected, none present */
133 return !(flags & TUNNEL_KEY);
136 /* Fallback tunnel: no source, no destination, no key, no options
139 We require exact key match i.e. if a key is present in packet
140 it will match only tunnel with the same key; if it is not present,
141 it will match only keyless tunnel.
143 All keysless packets, if not matched configured keyless tunnels
144 will match fallback tunnel.
145 Given src, dst and key, find appropriate for input tunnel.
147 struct ip_tunnel *ip_tunnel_lookup(struct ip_tunnel_net *itn,
148 int link, __be16 flags,
149 __be32 remote, __be32 local,
153 struct ip_tunnel *t, *cand = NULL;
154 struct hlist_head *head;
156 hash = ip_tunnel_hash(key, remote);
157 head = &itn->tunnels[hash];
159 hlist_for_each_entry_rcu(t, head, hash_node) {
160 if (local != t->parms.iph.saddr ||
161 remote != t->parms.iph.daddr ||
162 !(t->dev->flags & IFF_UP))
165 if (!ip_tunnel_key_match(&t->parms, flags, key))
168 if (t->parms.link == link)
174 hlist_for_each_entry_rcu(t, head, hash_node) {
175 if (remote != t->parms.iph.daddr ||
176 !(t->dev->flags & IFF_UP))
179 if (!ip_tunnel_key_match(&t->parms, flags, key))
182 if (t->parms.link == link)
188 hash = ip_tunnel_hash(key, 0);
189 head = &itn->tunnels[hash];
191 hlist_for_each_entry_rcu(t, head, hash_node) {
192 if ((local != t->parms.iph.saddr &&
193 (local != t->parms.iph.daddr ||
194 !ipv4_is_multicast(local))) ||
195 !(t->dev->flags & IFF_UP))
198 if (!ip_tunnel_key_match(&t->parms, flags, key))
201 if (t->parms.link == link)
207 if (flags & TUNNEL_NO_KEY)
208 goto skip_key_lookup;
210 hlist_for_each_entry_rcu(t, head, hash_node) {
211 if (t->parms.i_key != key ||
212 !(t->dev->flags & IFF_UP))
215 if (t->parms.link == link)
225 if (itn->fb_tunnel_dev && itn->fb_tunnel_dev->flags & IFF_UP)
226 return netdev_priv(itn->fb_tunnel_dev);
231 EXPORT_SYMBOL_GPL(ip_tunnel_lookup);
233 static struct hlist_head *ip_bucket(struct ip_tunnel_net *itn,
234 struct ip_tunnel_parm *parms)
239 if (parms->iph.daddr && !ipv4_is_multicast(parms->iph.daddr))
240 remote = parms->iph.daddr;
244 h = ip_tunnel_hash(parms->i_key, remote);
245 return &itn->tunnels[h];
248 static void ip_tunnel_add(struct ip_tunnel_net *itn, struct ip_tunnel *t)
250 struct hlist_head *head = ip_bucket(itn, &t->parms);
252 hlist_add_head_rcu(&t->hash_node, head);
255 static void ip_tunnel_del(struct ip_tunnel *t)
257 hlist_del_init_rcu(&t->hash_node);
260 static struct ip_tunnel *ip_tunnel_find(struct ip_tunnel_net *itn,
261 struct ip_tunnel_parm *parms,
264 __be32 remote = parms->iph.daddr;
265 __be32 local = parms->iph.saddr;
266 __be32 key = parms->i_key;
267 int link = parms->link;
268 struct ip_tunnel *t = NULL;
269 struct hlist_head *head = ip_bucket(itn, parms);
271 hlist_for_each_entry_rcu(t, head, hash_node) {
272 if (local == t->parms.iph.saddr &&
273 remote == t->parms.iph.daddr &&
274 key == t->parms.i_key &&
275 link == t->parms.link &&
276 type == t->dev->type)
282 static struct net_device *__ip_tunnel_create(struct net *net,
283 const struct rtnl_link_ops *ops,
284 struct ip_tunnel_parm *parms)
287 struct ip_tunnel *tunnel;
288 struct net_device *dev;
292 strlcpy(name, parms->name, IFNAMSIZ);
294 if (strlen(ops->kind) > (IFNAMSIZ - 3)) {
298 strlcpy(name, ops->kind, IFNAMSIZ);
299 strncat(name, "%d", 2);
303 dev = alloc_netdev(ops->priv_size, name, ops->setup);
308 dev_net_set(dev, net);
310 dev->rtnl_link_ops = ops;
312 tunnel = netdev_priv(dev);
313 tunnel->parms = *parms;
316 err = register_netdevice(dev);
328 static inline void init_tunnel_flow(struct flowi4 *fl4,
330 __be32 daddr, __be32 saddr,
331 __be32 key, __u8 tos, int oif)
333 memset(fl4, 0, sizeof(*fl4));
334 fl4->flowi4_oif = oif;
337 fl4->flowi4_tos = tos;
338 fl4->flowi4_proto = proto;
339 fl4->fl4_gre_key = key;
342 static int ip_tunnel_bind_dev(struct net_device *dev)
344 struct net_device *tdev = NULL;
345 struct ip_tunnel *tunnel = netdev_priv(dev);
346 const struct iphdr *iph;
347 int hlen = LL_MAX_HEADER;
348 int mtu = ETH_DATA_LEN;
349 int t_hlen = tunnel->hlen + sizeof(struct iphdr);
351 iph = &tunnel->parms.iph;
353 /* Guess output device to choose reasonable mtu and needed_headroom */
358 init_tunnel_flow(&fl4, iph->protocol, iph->daddr,
359 iph->saddr, tunnel->parms.o_key,
360 RT_TOS(iph->tos), tunnel->parms.link);
361 rt = ip_route_output_key(tunnel->net, &fl4);
365 tunnel_dst_set(tunnel, &rt->dst);
368 if (dev->type != ARPHRD_ETHER)
369 dev->flags |= IFF_POINTOPOINT;
372 if (!tdev && tunnel->parms.link)
373 tdev = __dev_get_by_index(tunnel->net, tunnel->parms.link);
376 hlen = tdev->hard_header_len + tdev->needed_headroom;
379 dev->iflink = tunnel->parms.link;
381 dev->needed_headroom = t_hlen + hlen;
382 mtu -= (dev->hard_header_len + t_hlen);
390 static struct ip_tunnel *ip_tunnel_create(struct net *net,
391 struct ip_tunnel_net *itn,
392 struct ip_tunnel_parm *parms)
394 struct ip_tunnel *nt, *fbt;
395 struct net_device *dev;
397 BUG_ON(!itn->fb_tunnel_dev);
398 fbt = netdev_priv(itn->fb_tunnel_dev);
399 dev = __ip_tunnel_create(net, itn->fb_tunnel_dev->rtnl_link_ops, parms);
403 dev->mtu = ip_tunnel_bind_dev(dev);
405 nt = netdev_priv(dev);
406 ip_tunnel_add(itn, nt);
410 int ip_tunnel_rcv(struct ip_tunnel *tunnel, struct sk_buff *skb,
411 const struct tnl_ptk_info *tpi, bool log_ecn_error)
413 struct pcpu_sw_netstats *tstats;
414 const struct iphdr *iph = ip_hdr(skb);
417 #ifdef CONFIG_NET_IPGRE_BROADCAST
418 if (ipv4_is_multicast(iph->daddr)) {
419 tunnel->dev->stats.multicast++;
420 skb->pkt_type = PACKET_BROADCAST;
424 if ((!(tpi->flags&TUNNEL_CSUM) && (tunnel->parms.i_flags&TUNNEL_CSUM)) ||
425 ((tpi->flags&TUNNEL_CSUM) && !(tunnel->parms.i_flags&TUNNEL_CSUM))) {
426 tunnel->dev->stats.rx_crc_errors++;
427 tunnel->dev->stats.rx_errors++;
431 if (tunnel->parms.i_flags&TUNNEL_SEQ) {
432 if (!(tpi->flags&TUNNEL_SEQ) ||
433 (tunnel->i_seqno && (s32)(ntohl(tpi->seq) - tunnel->i_seqno) < 0)) {
434 tunnel->dev->stats.rx_fifo_errors++;
435 tunnel->dev->stats.rx_errors++;
438 tunnel->i_seqno = ntohl(tpi->seq) + 1;
441 skb_reset_network_header(skb);
443 err = IP_ECN_decapsulate(iph, skb);
446 net_info_ratelimited("non-ECT from %pI4 with TOS=%#x\n",
447 &iph->saddr, iph->tos);
449 ++tunnel->dev->stats.rx_frame_errors;
450 ++tunnel->dev->stats.rx_errors;
455 tstats = this_cpu_ptr(tunnel->dev->tstats);
456 u64_stats_update_begin(&tstats->syncp);
457 tstats->rx_packets++;
458 tstats->rx_bytes += skb->len;
459 u64_stats_update_end(&tstats->syncp);
461 skb_scrub_packet(skb, !net_eq(tunnel->net, dev_net(tunnel->dev)));
463 if (tunnel->dev->type == ARPHRD_ETHER) {
464 skb->protocol = eth_type_trans(skb, tunnel->dev);
465 skb_postpull_rcsum(skb, eth_hdr(skb), ETH_HLEN);
467 skb->dev = tunnel->dev;
470 gro_cells_receive(&tunnel->gro_cells, skb);
477 EXPORT_SYMBOL_GPL(ip_tunnel_rcv);
479 static int tnl_update_pmtu(struct net_device *dev, struct sk_buff *skb,
480 struct rtable *rt, __be16 df)
482 struct ip_tunnel *tunnel = netdev_priv(dev);
483 int pkt_size = skb->len - tunnel->hlen - dev->hard_header_len;
487 mtu = dst_mtu(&rt->dst) - dev->hard_header_len
488 - sizeof(struct iphdr) - tunnel->hlen;
490 mtu = skb_dst(skb) ? dst_mtu(skb_dst(skb)) : dev->mtu;
493 skb_dst(skb)->ops->update_pmtu(skb_dst(skb), NULL, skb, mtu);
495 if (skb->protocol == htons(ETH_P_IP)) {
496 if (!skb_is_gso(skb) &&
497 (df & htons(IP_DF)) && mtu < pkt_size) {
498 memset(IPCB(skb), 0, sizeof(*IPCB(skb)));
499 icmp_send(skb, ICMP_DEST_UNREACH, ICMP_FRAG_NEEDED, htonl(mtu));
503 #if IS_ENABLED(CONFIG_IPV6)
504 else if (skb->protocol == htons(ETH_P_IPV6)) {
505 struct rt6_info *rt6 = (struct rt6_info *)skb_dst(skb);
507 if (rt6 && mtu < dst_mtu(skb_dst(skb)) &&
508 mtu >= IPV6_MIN_MTU) {
509 if ((tunnel->parms.iph.daddr &&
510 !ipv4_is_multicast(tunnel->parms.iph.daddr)) ||
511 rt6->rt6i_dst.plen == 128) {
512 rt6->rt6i_flags |= RTF_MODIFIED;
513 dst_metric_set(skb_dst(skb), RTAX_MTU, mtu);
517 if (!skb_is_gso(skb) && mtu >= IPV6_MIN_MTU &&
519 icmpv6_send(skb, ICMPV6_PKT_TOOBIG, 0, mtu);
527 void ip_tunnel_xmit(struct sk_buff *skb, struct net_device *dev,
528 const struct iphdr *tnl_params, const u8 protocol)
530 struct ip_tunnel *tunnel = netdev_priv(dev);
531 const struct iphdr *inner_iph;
535 struct rtable *rt; /* Route to the other host */
536 unsigned int max_headroom; /* The extra header space needed */
539 bool connected = true;
541 inner_iph = (const struct iphdr *)skb_inner_network_header(skb);
543 dst = tnl_params->daddr;
547 if (skb_dst(skb) == NULL) {
548 dev->stats.tx_fifo_errors++;
552 if (skb->protocol == htons(ETH_P_IP)) {
553 rt = skb_rtable(skb);
554 dst = rt_nexthop(rt, inner_iph->daddr);
556 #if IS_ENABLED(CONFIG_IPV6)
557 else if (skb->protocol == htons(ETH_P_IPV6)) {
558 const struct in6_addr *addr6;
559 struct neighbour *neigh;
560 bool do_tx_error_icmp;
563 neigh = dst_neigh_lookup(skb_dst(skb),
564 &ipv6_hdr(skb)->daddr);
568 addr6 = (const struct in6_addr *)&neigh->primary_key;
569 addr_type = ipv6_addr_type(addr6);
571 if (addr_type == IPV6_ADDR_ANY) {
572 addr6 = &ipv6_hdr(skb)->daddr;
573 addr_type = ipv6_addr_type(addr6);
576 if ((addr_type & IPV6_ADDR_COMPATv4) == 0)
577 do_tx_error_icmp = true;
579 do_tx_error_icmp = false;
580 dst = addr6->s6_addr32[3];
582 neigh_release(neigh);
583 if (do_tx_error_icmp)
593 tos = tnl_params->tos;
596 if (skb->protocol == htons(ETH_P_IP)) {
597 tos = inner_iph->tos;
599 } else if (skb->protocol == htons(ETH_P_IPV6)) {
600 tos = ipv6_get_dsfield((const struct ipv6hdr *)inner_iph);
605 init_tunnel_flow(&fl4, protocol, dst, tnl_params->saddr,
606 tunnel->parms.o_key, RT_TOS(tos), tunnel->parms.link);
608 rt = connected ? tunnel_rtable_get(tunnel, 0) : NULL;
611 rt = ip_route_output_key(tunnel->net, &fl4);
614 dev->stats.tx_carrier_errors++;
618 tunnel_dst_set(tunnel, &rt->dst);
621 if (rt->dst.dev == dev) {
623 dev->stats.collisions++;
627 if (tnl_update_pmtu(dev, skb, rt, tnl_params->frag_off)) {
632 if (tunnel->err_count > 0) {
633 if (time_before(jiffies,
634 tunnel->err_time + IPTUNNEL_ERR_TIMEO)) {
637 memset(IPCB(skb), 0, sizeof(*IPCB(skb)));
638 dst_link_failure(skb);
640 tunnel->err_count = 0;
643 tos = ip_tunnel_ecn_encap(tos, inner_iph, skb);
644 ttl = tnl_params->ttl;
646 if (skb->protocol == htons(ETH_P_IP))
647 ttl = inner_iph->ttl;
648 #if IS_ENABLED(CONFIG_IPV6)
649 else if (skb->protocol == htons(ETH_P_IPV6))
650 ttl = ((const struct ipv6hdr *)inner_iph)->hop_limit;
653 ttl = ip4_dst_hoplimit(&rt->dst);
656 df = tnl_params->frag_off;
657 if (skb->protocol == htons(ETH_P_IP))
658 df |= (inner_iph->frag_off&htons(IP_DF));
660 max_headroom = LL_RESERVED_SPACE(rt->dst.dev) + sizeof(struct iphdr)
661 + rt->dst.header_len;
662 if (max_headroom > dev->needed_headroom)
663 dev->needed_headroom = max_headroom;
665 if (skb_cow_head(skb, dev->needed_headroom)) {
666 dev->stats.tx_dropped++;
671 err = iptunnel_xmit(rt, skb, fl4.saddr, fl4.daddr, protocol,
672 tos, ttl, df, !net_eq(tunnel->net, dev_net(dev)));
673 iptunnel_xmit_stats(err, &dev->stats, dev->tstats);
677 #if IS_ENABLED(CONFIG_IPV6)
679 dst_link_failure(skb);
682 dev->stats.tx_errors++;
685 EXPORT_SYMBOL_GPL(ip_tunnel_xmit);
687 static void ip_tunnel_update(struct ip_tunnel_net *itn,
689 struct net_device *dev,
690 struct ip_tunnel_parm *p,
694 t->parms.iph.saddr = p->iph.saddr;
695 t->parms.iph.daddr = p->iph.daddr;
696 t->parms.i_key = p->i_key;
697 t->parms.o_key = p->o_key;
698 if (dev->type != ARPHRD_ETHER) {
699 memcpy(dev->dev_addr, &p->iph.saddr, 4);
700 memcpy(dev->broadcast, &p->iph.daddr, 4);
702 ip_tunnel_add(itn, t);
704 t->parms.iph.ttl = p->iph.ttl;
705 t->parms.iph.tos = p->iph.tos;
706 t->parms.iph.frag_off = p->iph.frag_off;
708 if (t->parms.link != p->link) {
711 t->parms.link = p->link;
712 mtu = ip_tunnel_bind_dev(dev);
716 ip_tunnel_dst_reset_all(t);
717 netdev_state_change(dev);
720 int ip_tunnel_ioctl(struct net_device *dev, struct ip_tunnel_parm *p, int cmd)
724 struct net *net = dev_net(dev);
725 struct ip_tunnel *tunnel = netdev_priv(dev);
726 struct ip_tunnel_net *itn = net_generic(net, tunnel->ip_tnl_net_id);
728 BUG_ON(!itn->fb_tunnel_dev);
732 if (dev == itn->fb_tunnel_dev)
733 t = ip_tunnel_find(itn, p, itn->fb_tunnel_dev->type);
735 t = netdev_priv(dev);
736 memcpy(p, &t->parms, sizeof(*p));
742 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
745 p->iph.frag_off |= htons(IP_DF);
746 if (!(p->i_flags&TUNNEL_KEY))
748 if (!(p->o_flags&TUNNEL_KEY))
751 t = ip_tunnel_find(itn, p, itn->fb_tunnel_dev->type);
753 if (!t && (cmd == SIOCADDTUNNEL))
754 t = ip_tunnel_create(net, itn, p);
756 if (dev != itn->fb_tunnel_dev && cmd == SIOCCHGTUNNEL) {
763 unsigned int nflags = 0;
765 if (ipv4_is_multicast(p->iph.daddr))
766 nflags = IFF_BROADCAST;
767 else if (p->iph.daddr)
768 nflags = IFF_POINTOPOINT;
770 if ((dev->flags^nflags)&(IFF_POINTOPOINT|IFF_BROADCAST)) {
775 t = netdev_priv(dev);
781 ip_tunnel_update(itn, t, dev, p, true);
783 err = (cmd == SIOCADDTUNNEL ? -ENOBUFS : -ENOENT);
788 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
791 if (dev == itn->fb_tunnel_dev) {
793 t = ip_tunnel_find(itn, p, itn->fb_tunnel_dev->type);
797 if (t == netdev_priv(itn->fb_tunnel_dev))
801 unregister_netdevice(dev);
812 EXPORT_SYMBOL_GPL(ip_tunnel_ioctl);
814 int ip_tunnel_change_mtu(struct net_device *dev, int new_mtu)
816 struct ip_tunnel *tunnel = netdev_priv(dev);
817 int t_hlen = tunnel->hlen + sizeof(struct iphdr);
820 new_mtu > 0xFFF8 - dev->hard_header_len - t_hlen)
825 EXPORT_SYMBOL_GPL(ip_tunnel_change_mtu);
827 static void ip_tunnel_dev_free(struct net_device *dev)
829 struct ip_tunnel *tunnel = netdev_priv(dev);
831 gro_cells_destroy(&tunnel->gro_cells);
832 free_percpu(tunnel->dst_cache);
833 free_percpu(dev->tstats);
837 void ip_tunnel_dellink(struct net_device *dev, struct list_head *head)
839 struct ip_tunnel *tunnel = netdev_priv(dev);
840 struct ip_tunnel_net *itn;
842 itn = net_generic(tunnel->net, tunnel->ip_tnl_net_id);
844 if (itn->fb_tunnel_dev != dev) {
845 ip_tunnel_del(netdev_priv(dev));
846 unregister_netdevice_queue(dev, head);
849 EXPORT_SYMBOL_GPL(ip_tunnel_dellink);
851 int ip_tunnel_init_net(struct net *net, int ip_tnl_net_id,
852 struct rtnl_link_ops *ops, char *devname)
854 struct ip_tunnel_net *itn = net_generic(net, ip_tnl_net_id);
855 struct ip_tunnel_parm parms;
858 for (i = 0; i < IP_TNL_HASH_SIZE; i++)
859 INIT_HLIST_HEAD(&itn->tunnels[i]);
862 itn->fb_tunnel_dev = NULL;
866 memset(&parms, 0, sizeof(parms));
868 strlcpy(parms.name, devname, IFNAMSIZ);
871 itn->fb_tunnel_dev = __ip_tunnel_create(net, ops, &parms);
872 /* FB netdevice is special: we have one, and only one per netns.
873 * Allowing to move it to another netns is clearly unsafe.
875 if (!IS_ERR(itn->fb_tunnel_dev)) {
876 itn->fb_tunnel_dev->features |= NETIF_F_NETNS_LOCAL;
877 ip_tunnel_add(itn, netdev_priv(itn->fb_tunnel_dev));
881 return PTR_ERR_OR_ZERO(itn->fb_tunnel_dev);
883 EXPORT_SYMBOL_GPL(ip_tunnel_init_net);
885 static void ip_tunnel_destroy(struct ip_tunnel_net *itn, struct list_head *head,
886 struct rtnl_link_ops *ops)
888 struct net *net = dev_net(itn->fb_tunnel_dev);
889 struct net_device *dev, *aux;
892 for_each_netdev_safe(net, dev, aux)
893 if (dev->rtnl_link_ops == ops)
894 unregister_netdevice_queue(dev, head);
896 for (h = 0; h < IP_TNL_HASH_SIZE; h++) {
898 struct hlist_node *n;
899 struct hlist_head *thead = &itn->tunnels[h];
901 hlist_for_each_entry_safe(t, n, thead, hash_node)
902 /* If dev is in the same netns, it has already
903 * been added to the list by the previous loop.
905 if (!net_eq(dev_net(t->dev), net))
906 unregister_netdevice_queue(t->dev, head);
910 void ip_tunnel_delete_net(struct ip_tunnel_net *itn, struct rtnl_link_ops *ops)
915 ip_tunnel_destroy(itn, &list, ops);
916 unregister_netdevice_many(&list);
919 EXPORT_SYMBOL_GPL(ip_tunnel_delete_net);
921 int ip_tunnel_newlink(struct net_device *dev, struct nlattr *tb[],
922 struct ip_tunnel_parm *p)
924 struct ip_tunnel *nt;
925 struct net *net = dev_net(dev);
926 struct ip_tunnel_net *itn;
930 nt = netdev_priv(dev);
931 itn = net_generic(net, nt->ip_tnl_net_id);
933 if (ip_tunnel_find(itn, p, dev->type))
938 err = register_netdevice(dev);
942 if (dev->type == ARPHRD_ETHER && !tb[IFLA_ADDRESS])
943 eth_hw_addr_random(dev);
945 mtu = ip_tunnel_bind_dev(dev);
949 ip_tunnel_add(itn, nt);
954 EXPORT_SYMBOL_GPL(ip_tunnel_newlink);
956 int ip_tunnel_changelink(struct net_device *dev, struct nlattr *tb[],
957 struct ip_tunnel_parm *p)
960 struct ip_tunnel *tunnel = netdev_priv(dev);
961 struct net *net = tunnel->net;
962 struct ip_tunnel_net *itn = net_generic(net, tunnel->ip_tnl_net_id);
964 if (dev == itn->fb_tunnel_dev)
967 t = ip_tunnel_find(itn, p, dev->type);
975 if (dev->type != ARPHRD_ETHER) {
976 unsigned int nflags = 0;
978 if (ipv4_is_multicast(p->iph.daddr))
979 nflags = IFF_BROADCAST;
980 else if (p->iph.daddr)
981 nflags = IFF_POINTOPOINT;
983 if ((dev->flags ^ nflags) &
984 (IFF_POINTOPOINT | IFF_BROADCAST))
989 ip_tunnel_update(itn, t, dev, p, !tb[IFLA_MTU]);
992 EXPORT_SYMBOL_GPL(ip_tunnel_changelink);
994 int ip_tunnel_init(struct net_device *dev)
996 struct ip_tunnel *tunnel = netdev_priv(dev);
997 struct iphdr *iph = &tunnel->parms.iph;
1000 dev->destructor = ip_tunnel_dev_free;
1001 dev->tstats = alloc_percpu(struct pcpu_sw_netstats);
1005 for_each_possible_cpu(i) {
1006 struct pcpu_sw_netstats *ipt_stats;
1007 ipt_stats = per_cpu_ptr(dev->tstats, i);
1008 u64_stats_init(&ipt_stats->syncp);
1011 tunnel->dst_cache = alloc_percpu(struct ip_tunnel_dst);
1012 if (!tunnel->dst_cache) {
1013 free_percpu(dev->tstats);
1017 err = gro_cells_init(&tunnel->gro_cells, dev);
1019 free_percpu(tunnel->dst_cache);
1020 free_percpu(dev->tstats);
1025 tunnel->net = dev_net(dev);
1026 strcpy(tunnel->parms.name, dev->name);
1032 EXPORT_SYMBOL_GPL(ip_tunnel_init);
1034 void ip_tunnel_uninit(struct net_device *dev)
1036 struct ip_tunnel *tunnel = netdev_priv(dev);
1037 struct net *net = tunnel->net;
1038 struct ip_tunnel_net *itn;
1040 itn = net_generic(net, tunnel->ip_tnl_net_id);
1041 /* fb_tunnel_dev will be unregisted in net-exit call. */
1042 if (itn->fb_tunnel_dev != dev)
1043 ip_tunnel_del(netdev_priv(dev));
1045 ip_tunnel_dst_reset_all(tunnel);
1047 EXPORT_SYMBOL_GPL(ip_tunnel_uninit);
1049 /* Do least required initialization, rest of init is done in tunnel_init call */
1050 void ip_tunnel_setup(struct net_device *dev, int net_id)
1052 struct ip_tunnel *tunnel = netdev_priv(dev);
1053 tunnel->ip_tnl_net_id = net_id;
1055 EXPORT_SYMBOL_GPL(ip_tunnel_setup);
1057 MODULE_LICENSE("GPL");