xref: /openbsd/sys/netinet/in.h (revision 94c0e2bd)
1 /*	$OpenBSD: in.h,v 1.148 2024/02/13 12:22:09 bluhm Exp $	*/
2 /*	$NetBSD: in.h,v 1.20 1996/02/13 23:41:47 christos Exp $	*/
3 
4 /*
5  * Copyright (c) 1982, 1986, 1990, 1993
6  *	The Regents of the University of California.  All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  * 1. Redistributions of source code must retain the above copyright
12  *    notice, this list of conditions and the following disclaimer.
13  * 2. Redistributions in binary form must reproduce the above copyright
14  *    notice, this list of conditions and the following disclaimer in the
15  *    documentation and/or other materials provided with the distribution.
16  * 3. Neither the name of the University nor the names of its contributors
17  *    may be used to endorse or promote products derived from this software
18  *    without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  */
32 
33 /*
34  * Constants and structures defined by the internet system,
35  * Per RFC 790, September 1981, and numerous additions.
36  */
37 
38 #ifndef _NETINET_IN_H_
39 #define	_NETINET_IN_H_
40 
41 #include <sys/cdefs.h>
42 
43 #ifndef _KERNEL
44 #include <sys/types.h>
45 
46 /* <sys/_endian.h> is pulled in by <sys/types.h> */
47 #ifndef htons
48 #define htons(x)	__htobe16(x)
49 #define htonl(x)	__htobe32(x)
50 #define ntohs(x)	__htobe16(x)
51 #define ntohl(x)	__htobe32(x)
52 #endif
53 
54 #endif /* _KERNEL */
55 
56 #ifndef	_SA_FAMILY_T_DEFINED_
57 #define	_SA_FAMILY_T_DEFINED_
58 typedef	__sa_family_t	sa_family_t;	/* sockaddr address family type */
59 #endif /* _SA_FAMILY_T_DEFINED_ */
60 
61 #ifndef _IN_TYPES_DEFINED_
62 #define _IN_TYPES_DEFINED_
63 typedef __in_addr_t	in_addr_t;	/* base type for internet address */
64 typedef __in_port_t	in_port_t;	/* IP port type */
65 #endif
66 
67 /*
68  * Protocols
69  */
70 #define	IPPROTO_IP		0		/* dummy for IP */
71 #define	IPPROTO_HOPOPTS		IPPROTO_IP	/* Hop-by-hop option header */
72 #define	IPPROTO_ICMP		1		/* control message protocol */
73 #define	IPPROTO_IGMP		2		/* group mgmt protocol */
74 #define	IPPROTO_GGP		3		/* gateway^2 (deprecated) */
75 #define	IPPROTO_IPIP		4		/* IP inside IP */
76 #define	IPPROTO_IPV4		IPPROTO_IPIP	/* IP inside IP */
77 #define	IPPROTO_TCP		6		/* tcp */
78 #define	IPPROTO_EGP		8		/* exterior gateway protocol */
79 #define	IPPROTO_PUP		12		/* pup */
80 #define	IPPROTO_UDP		17		/* user datagram protocol */
81 #define	IPPROTO_IDP		22		/* xns idp */
82 #define	IPPROTO_TP		29		/* tp-4 w/ class negotiation */
83 #define	IPPROTO_IPV6		41		/* IPv6 in IPv6 */
84 #define	IPPROTO_ROUTING		43		/* Routing header */
85 #define	IPPROTO_FRAGMENT	44		/* Fragmentation/reassembly header */
86 #define	IPPROTO_RSVP		46		/* resource reservation */
87 #define	IPPROTO_GRE		47		/* GRE encap, RFCs 1701/1702 */
88 #define	IPPROTO_ESP		50		/* Encap. Security Payload */
89 #define	IPPROTO_AH		51		/* Authentication header */
90 #define	IPPROTO_MOBILE		55		/* IP Mobility, RFC 2004 */
91 #define	IPPROTO_ICMPV6		58		/* ICMP for IPv6 */
92 #define	IPPROTO_NONE		59		/* No next header */
93 #define	IPPROTO_DSTOPTS		60		/* Destination options header */
94 #define	IPPROTO_EON		80		/* ISO cnlp */
95 #define	IPPROTO_ETHERIP		97		/* Ethernet in IPv4 */
96 #define	IPPROTO_ENCAP		98		/* encapsulation header */
97 #define	IPPROTO_PIM		103		/* Protocol indep. multicast */
98 #define	IPPROTO_IPCOMP		108		/* IP Payload Comp. Protocol */
99 #define	IPPROTO_CARP		112		/* CARP */
100 #define	IPPROTO_SCTP		132		/* SCTP, RFC 4960 */
101 #define	IPPROTO_UDPLITE		136		/* UDP-Lite, RFC 3828 */
102 #define	IPPROTO_MPLS		137		/* unicast MPLS packet */
103 #define	IPPROTO_PFSYNC		240		/* PFSYNC */
104 #define	IPPROTO_RAW		255		/* raw IP packet */
105 
106 #define	IPPROTO_MAX		256
107 
108 /* Only used internally, so it can be outside the range of valid IP protocols */
109 #define	IPPROTO_DIVERT		258		/* Divert sockets */
110 
111 /*
112  * From FreeBSD:
113  *
114  * Local port number conventions:
115  *
116  * When a user does a bind(2) or connect(2) with a port number of zero,
117  * a non-conflicting local port address is chosen.
118  * The default range is IPPORT_RESERVED through
119  * IPPORT_USERRESERVED, although that is settable by sysctl.
120  *
121  * A user may set the IPPROTO_IP option IP_PORTRANGE to change this
122  * default assignment range.
123  *
124  * The value IP_PORTRANGE_DEFAULT causes the default behavior.
125  *
126  * The value IP_PORTRANGE_HIGH changes the range of candidate port numbers
127  * into the "high" range.  These are reserved for client outbound connections
128  * which do not want to be filtered by any firewalls.
129  *
130  * The value IP_PORTRANGE_LOW changes the range to the "low" are
131  * that is (by convention) restricted to privileged processes.  This
132  * convention is based on "vouchsafe" principles only.  It is only secure
133  * if you trust the remote host to restrict these ports.
134  *
135  * The default range of ports and the high range can be changed by
136  * sysctl(3).  (net.inet.ip.port{hi}{first,last})
137  *
138  * Changing those values has bad security implications if you are
139  * using a stateless firewall that is allowing packets outside of that
140  * range in order to allow transparent outgoing connections.
141  *
142  * Such a firewall configuration will generally depend on the use of these
143  * default values.  If you change them, you may find your Security
144  * Administrator looking for you with a heavy object.
145  */
146 
147 /*
148  * Ports < IPPORT_RESERVED are reserved for
149  * privileged processes (e.g. root).
150  * Ports > IPPORT_USERRESERVED are reserved
151  * for servers, not necessarily privileged.
152  */
153 #define	IPPORT_RESERVED		1024
154 #define	IPPORT_USERRESERVED	49151
155 
156 /*
157  * Default local port range to use by setting IP_PORTRANGE_HIGH
158  */
159 #define IPPORT_HIFIRSTAUTO	49152
160 #define IPPORT_HILASTAUTO	65535
161 
162 #ifndef _IN_ADDR_DECLARED
163 #define _IN_ADDR_DECLARED
164 /*
165  * IP Version 4 Internet address (a structure for historical reasons)
166  */
167 struct in_addr {
168 	in_addr_t s_addr;
169 };
170 #endif /* _IN_ADDR_DECLARED */
171 
172 /* last return value of *_input(), meaning "all job for this pkt is done".  */
173 #define	IPPROTO_DONE		257
174 
175 /*
176  * Definitions of bits in internet address integers.
177  * On subnets, the decomposition of addresses to host and net parts
178  * is done according to subnet mask, not the masks here.
179  *
180  * By byte-swapping the constants, we avoid ever having to byte-swap IP
181  * addresses inside the kernel.  Unfortunately, user-level programs rely
182  * on these macros not doing byte-swapping.
183  */
184 #ifdef _KERNEL
185 #define	__IPADDR(x)	((u_int32_t) htonl((u_int32_t)(x)))
186 #else
187 #define	__IPADDR(x)	((u_int32_t)(x))
188 #endif /* _KERNEL */
189 
190 #define	IN_CLASSA(i)		(((u_int32_t)(i) & __IPADDR(0x80000000)) == \
191 				 __IPADDR(0x00000000))
192 #define	IN_CLASSA_NET		__IPADDR(0xff000000)
193 #define	IN_CLASSA_NSHIFT	24
194 #define	IN_CLASSA_HOST		__IPADDR(0x00ffffff)
195 #define	IN_CLASSA_MAX		128
196 
197 #define	IN_CLASSB(i)		(((u_int32_t)(i) & __IPADDR(0xc0000000)) == \
198 				 __IPADDR(0x80000000))
199 #define	IN_CLASSB_NET		__IPADDR(0xffff0000)
200 #define	IN_CLASSB_NSHIFT	16
201 #define	IN_CLASSB_HOST		__IPADDR(0x0000ffff)
202 #define	IN_CLASSB_MAX		65536
203 
204 #define	IN_CLASSC(i)		(((u_int32_t)(i) & __IPADDR(0xe0000000)) == \
205 				 __IPADDR(0xc0000000))
206 #define	IN_CLASSC_NET		__IPADDR(0xffffff00)
207 #define	IN_CLASSC_NSHIFT	8
208 #define	IN_CLASSC_HOST		__IPADDR(0x000000ff)
209 
210 #define	IN_CLASSD(i)		(((u_int32_t)(i) & __IPADDR(0xf0000000)) == \
211 				 __IPADDR(0xe0000000))
212 /* These ones aren't really net and host fields, but routing needn't know. */
213 #define	IN_CLASSD_NET		__IPADDR(0xf0000000)
214 #define	IN_CLASSD_NSHIFT	28
215 #define	IN_CLASSD_HOST		__IPADDR(0x0fffffff)
216 #define	IN_MULTICAST(i)		IN_CLASSD(i)
217 
218 #define	IN_RFC3021_NET		__IPADDR(0xfffffffe)
219 #define	IN_RFC3021_NSHIFT	31
220 #define	IN_RFC3021_HOST		__IPADDR(0x00000001)
221 #define	IN_RFC3021_SUBNET(n)	(((u_int32_t)(n) & IN_RFC3021_NET) == \
222 				 IN_RFC3021_NET)
223 
224 #define	IN_EXPERIMENTAL(i)	(((u_int32_t)(i) & __IPADDR(0xf0000000)) == \
225 				 __IPADDR(0xf0000000))
226 #define	IN_BADCLASS(i)		(((u_int32_t)(i) & __IPADDR(0xf0000000)) == \
227 				 __IPADDR(0xf0000000))
228 
229 #define	IN_LOCAL_GROUP(i)	(((u_int32_t)(i) & __IPADDR(0xffffff00)) == \
230 				 __IPADDR(0xe0000000))
231 
232 #ifdef _KERNEL
233 #define IN_CLASSFULBROADCAST(i, b) \
234 				((IN_CLASSC(b) && (b | IN_CLASSC_HOST) == i) ||	\
235 				 (IN_CLASSB(b) && (b | IN_CLASSB_HOST) == i) ||	\
236 				 (IN_CLASSA(b) && (b | IN_CLASSA_HOST) == i))
237 #endif	/* _KERNEL */
238 
239 #define	INADDR_ANY		__IPADDR(0x00000000)
240 #define	INADDR_LOOPBACK		__IPADDR(0x7f000001)
241 #define	INADDR_BROADCAST	__IPADDR(0xffffffff)	/* must be masked */
242 #ifndef _KERNEL
243 #define	INADDR_NONE		__IPADDR(0xffffffff)	/* -1 return */
244 #endif /* _KERNEL */
245 
246 #define	INADDR_UNSPEC_GROUP	__IPADDR(0xe0000000)	/* 224.0.0.0 */
247 #define	INADDR_ALLHOSTS_GROUP	__IPADDR(0xe0000001)	/* 224.0.0.1 */
248 #define	INADDR_ALLROUTERS_GROUP __IPADDR(0xe0000002)	/* 224.0.0.2 */
249 #define	INADDR_CARP_GROUP	__IPADDR(0xe0000012)	/* 224.0.0.18 */
250 #define	INADDR_PFSYNC_GROUP	__IPADDR(0xe00000f0)	/* 224.0.0.240 */
251 #define INADDR_MAX_LOCAL_GROUP	__IPADDR(0xe00000ff)	/* 224.0.0.255 */
252 
253 #define	IN_LOOPBACKNET		127			/* official! */
254 
255 /*
256  * IP Version 4 socket address.
257  */
258 struct sockaddr_in {
259 	u_int8_t    sin_len;
260 	sa_family_t sin_family;
261 	in_port_t   sin_port;
262 	struct	    in_addr sin_addr;
263 	int8_t	    sin_zero[8];
264 };
265 
266 /*
267  * Structure used to describe IP options.
268  * Used to store options internally, to pass them to a process,
269  * or to restore options retrieved earlier.
270  * The ip_dst is used for the first-hop gateway when using a source route
271  * (this gets put into the header proper).
272  */
273 struct ip_opts {
274 	struct in_addr	ip_dst;		/* first hop, 0 w/o src rt */
275 #if defined(__cplusplus)
276 	int8_t		Ip_opts[40];	/* cannot have same name as class */
277 #else
278 	int8_t		ip_opts[40];	/* actually variable in size */
279 #endif /* defined(__cplusplus) */
280 };
281 
282 /*
283  * Options for use with [gs]etsockopt at the IP level.
284  * First word of comment is data type; bool is stored in int.
285  */
286 #define	IP_OPTIONS		1    /* buf/ip_opts; set/get IP options */
287 #define	IP_HDRINCL		2    /* int; header is included with data */
288 #define	IP_TOS			3    /* int; IP type of service and preced. */
289 #define	IP_TTL			4    /* int; IP time to live */
290 #define	IP_RECVOPTS		5    /* bool; receive all IP opts w/dgram */
291 #define	IP_RECVRETOPTS		6    /* bool; receive IP opts for response */
292 #define	IP_RECVDSTADDR		7    /* bool; receive IP dst addr w/dgram */
293 #define	IP_RETOPTS		8    /* ip_opts; set/get IP options */
294 #define	IP_MULTICAST_IF		9    /* in_addr; set/get IP multicast i/f  */
295 #define	IP_MULTICAST_TTL	10   /* u_char; set/get IP multicast ttl */
296 #define	IP_MULTICAST_LOOP	11   /* u_char; set/get IP multicast loopback */
297 #define	IP_ADD_MEMBERSHIP	12   /* ip_mreq; add an IP group membership */
298 #define	IP_DROP_MEMBERSHIP	13   /* ip_mreq; drop an IP group membership */
299 #define IP_PORTRANGE		19   /* int; range to choose for unspec port */
300 #define IP_AUTH_LEVEL		20   /* int; authentication used */
301 #define IP_ESP_TRANS_LEVEL	21   /* int; transport encryption */
302 #define IP_ESP_NETWORK_LEVEL	22   /* int; full-packet encryption */
303 #define IP_IPSEC_LOCAL_ID	23   /* buf; IPsec local ID */
304 #define IP_IPSEC_REMOTE_ID	24   /* buf; IPsec remote ID */
305 #define IP_IPSEC_LOCAL_CRED	25   /* buf; was: IPsec local credentials */
306 #define IP_IPSEC_REMOTE_CRED	26   /* buf; was: IPsec remote credentials */
307 #define IP_IPSEC_LOCAL_AUTH	27   /* buf; was: IPsec local auth material */
308 #define IP_IPSEC_REMOTE_AUTH	28   /* buf; was: IPsec remote auth material */
309 #define IP_IPCOMP_LEVEL		29   /* int; compression used */
310 #define IP_RECVIF		30   /* bool; receive reception if w/dgram */
311 #define IP_RECVTTL		31   /* bool; receive IP TTL w/dgram */
312 #define IP_MINTTL		32   /* minimum TTL for packet or drop */
313 #define IP_RECVDSTPORT		33   /* bool; receive IP dst port w/dgram */
314 #define IP_PIPEX		34   /* bool; using PIPEX */
315 #define IP_RECVRTABLE		35   /* bool; receive rdomain w/dgram */
316 #define IP_IPSECFLOWINFO	36   /* bool; IPsec flow info for dgram */
317 #define IP_IPDEFTTL		37   /* int; IP TTL system default */
318 #define IP_SENDSRCADDR		IP_RECVDSTADDR  /* struct in_addr; */
319 						/* source address to use */
320 
321 #define IP_RTABLE		0x1021	/* int; routing table, see SO_RTABLE */
322 
323 #if __BSD_VISIBLE
324 /*
325  * Security levels - IPsec, not IPSO
326  */
327 
328 #define IPSEC_LEVEL_BYPASS      0x00    /* Bypass policy altogether */
329 #define IPSEC_LEVEL_NONE        0x00    /* Send clear, accept any */
330 #define IPSEC_LEVEL_AVAIL       0x01    /* Send secure if SA available */
331 #define IPSEC_LEVEL_USE         0x02    /* Send secure, accept any */
332 #define IPSEC_LEVEL_REQUIRE     0x03    /* Require secure inbound, also use */
333 #define IPSEC_LEVEL_UNIQUE      0x04    /* Use outbound SA that is unique */
334 #define IPSEC_LEVEL_DEFAULT     IPSEC_LEVEL_AVAIL
335 
336 #define IPSEC_AUTH_LEVEL_DEFAULT IPSEC_LEVEL_DEFAULT
337 #define IPSEC_ESP_TRANS_LEVEL_DEFAULT IPSEC_LEVEL_DEFAULT
338 #define IPSEC_ESP_NETWORK_LEVEL_DEFAULT IPSEC_LEVEL_DEFAULT
339 #define IPSEC_IPCOMP_LEVEL_DEFAULT IPSEC_LEVEL_DEFAULT
340 
341 #endif /* __BSD_VISIBLE */
342 
343 /*
344  * Defaults and limits for options
345  */
346 #define	IP_DEFAULT_MULTICAST_TTL  1	/* normally limit m'casts to 1 hop  */
347 #define	IP_DEFAULT_MULTICAST_LOOP 1	/* normally hear sends if a member  */
348 /*
349  * The imo_membership vector for each socket starts at IP_MIN_MEMBERSHIPS
350  * and is dynamically allocated at run-time, bounded by IP_MAX_MEMBERSHIPS,
351  * and is reallocated when needed, sized according to a power-of-two increment.
352  */
353 #define	IP_MIN_MEMBERSHIPS	15
354 #define	IP_MAX_MEMBERSHIPS	4095
355 
356 /*
357  * Argument structure for IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP.
358  */
359 struct ip_mreq {
360 	struct	in_addr imr_multiaddr;	/* IP multicast address of group */
361 	struct	in_addr imr_interface;	/* local IP address of interface */
362 };
363 
364 struct ip_mreqn {
365 	struct	in_addr imr_multiaddr;	/* IP multicast address of group */
366 	struct	in_addr imr_address;	/* local IP address of interface */
367 	int		imr_ifindex;	/* interface index */
368 };
369 
370 /*
371  * Argument for IP_PORTRANGE:
372  * - which range to search when port is unspecified at bind() or connect()
373  */
374 #define IP_PORTRANGE_DEFAULT	0	/* default range */
375 #define IP_PORTRANGE_HIGH	1	/* "high" - request firewall bypass */
376 #define IP_PORTRANGE_LOW	2	/* "low" - vouchsafe security */
377 
378 /*
379  * Buffer lengths for strings containing printable IP addresses
380  */
381 #ifndef INET_ADDRSTRLEN
382 #define INET_ADDRSTRLEN		16
383 #endif /* INET_ADDRSTRLEN */
384 
385 
386 #if __BSD_VISIBLE
387 /*
388  * Definitions for inet sysctl operations.
389  *
390  * Third level is protocol number.
391  * Fourth level is desired variable within that protocol.
392  */
393 #define	IPPROTO_MAXID	(IPPROTO_DIVERT + 1)	/* don't list to IPPROTO_MAX */
394 
395 #define	CTL_IPPROTO_NAMES { \
396 	{ "ip", CTLTYPE_NODE }, \
397 	{ "icmp", CTLTYPE_NODE }, \
398 	{ "igmp", CTLTYPE_NODE }, \
399 	{ "ggp", CTLTYPE_NODE }, \
400 	{ "ipip", CTLTYPE_NODE }, \
401 	{ 0, 0 }, \
402 	{ "tcp", CTLTYPE_NODE }, \
403 	{ 0, 0 }, \
404 	{ "egp", CTLTYPE_NODE }, \
405 	{ 0, 0 }, \
406 	{ 0, 0 }, \
407 	{ 0, 0 }, \
408 	{ "pup", CTLTYPE_NODE }, \
409 	{ 0, 0 }, \
410 	{ 0, 0 }, \
411 	{ 0, 0 }, \
412 	{ 0, 0 }, \
413 	{ "udp", CTLTYPE_NODE }, \
414 	{ 0, 0 }, \
415 	{ 0, 0 }, \
416 	{ 0, 0 }, \
417 	{ 0, 0 }, \
418 	{ 0, 0 }, \
419 	{ 0, 0 }, \
420 	{ 0, 0 }, \
421 	{ 0, 0 }, \
422 	{ 0, 0 }, \
423 	{ 0, 0 }, \
424 	{ 0, 0 }, \
425 	{ 0, 0 }, \
426 	{ 0, 0 }, \
427 	{ 0, 0 }, \
428 	{ 0, 0 }, \
429 	{ 0, 0 }, \
430 	{ 0, 0 }, \
431 	{ 0, 0 }, \
432 	{ 0, 0 }, \
433 	{ 0, 0 }, \
434 	{ 0, 0 }, \
435 	{ 0, 0 }, \
436 	{ 0, 0 }, \
437 	{ 0, 0 }, \
438 	{ 0, 0 }, \
439 	{ 0, 0 }, \
440 	{ 0, 0 }, \
441 	{ 0, 0 }, \
442 	{ 0, 0 }, \
443 	{ "gre", CTLTYPE_NODE }, \
444 	{ 0, 0 }, \
445 	{ 0, 0 }, \
446 	{ "esp", CTLTYPE_NODE }, \
447 	{ "ah", CTLTYPE_NODE }, \
448 	{ 0, 0 }, \
449 	{ 0, 0 }, \
450 	{ 0, 0 }, \
451 	{ 0, 0 }, \
452 	{ 0, 0 }, \
453 	{ 0, 0 }, \
454 	{ 0, 0 }, \
455 	{ 0, 0 }, \
456 	{ 0, 0 }, \
457 	{ 0, 0 }, \
458 	{ 0, 0 }, \
459 	{ 0, 0 }, \
460 	{ 0, 0 }, \
461 	{ 0, 0 }, \
462 	{ 0, 0 }, \
463 	{ 0, 0 }, \
464 	{ 0, 0 }, \
465 	{ 0, 0 }, \
466 	{ 0, 0 }, \
467 	{ 0, 0 }, \
468 	{ 0, 0 }, \
469 	{ 0, 0 }, \
470 	{ 0, 0 }, \
471 	{ 0, 0 }, \
472 	{ 0, 0 }, \
473 	{ 0, 0 }, \
474 	{ 0, 0 }, \
475 	{ 0, 0 }, \
476 	{ 0, 0 }, \
477 	{ 0, 0 }, \
478 	{ 0, 0 }, \
479 	{ 0, 0 }, \
480 	{ 0, 0 }, \
481 	{ 0, 0 }, \
482 	{ 0, 0 }, \
483 	{ 0, 0 }, \
484 	{ 0, 0 }, \
485 	{ 0, 0 }, \
486 	{ 0, 0 }, \
487 	{ 0, 0 }, \
488 	{ 0, 0 }, \
489 	{ 0, 0 }, \
490 	{ 0, 0 }, \
491 	{ 0, 0 }, \
492 	{ 0, 0 }, \
493 	{ "etherip", CTLTYPE_NODE }, \
494 	{ 0, 0 }, \
495 	{ 0, 0 }, \
496 	{ 0, 0 }, \
497 	{ 0, 0 }, \
498 	{ 0, 0 }, \
499 	{ 0, 0 }, \
500 	{ 0, 0 }, \
501 	{ 0, 0 }, \
502 	{ 0, 0 }, \
503 	{ 0, 0 }, \
504 	{ "ipcomp", CTLTYPE_NODE }, \
505 	{ 0, 0 }, \
506 	{ 0, 0 }, \
507 	{ 0, 0 }, \
508 	{ "carp", CTLTYPE_NODE }, \
509 	{ 0, 0 }, \
510 	{ 0, 0 }, \
511 	{ 0, 0 }, \
512 	{ 0, 0 }, \
513 	{ 0, 0 }, \
514 	{ 0, 0 }, \
515 	{ 0, 0 }, \
516 	{ 0, 0 }, \
517 	{ 0, 0 }, \
518 	{ 0, 0 }, \
519 	{ 0, 0 }, \
520 	{ 0, 0 }, \
521 	{ 0, 0 }, \
522 	{ 0, 0 }, \
523 	{ 0, 0 }, \
524 	{ 0, 0 }, \
525 	{ 0, 0 }, \
526 	{ 0, 0 }, \
527 	{ 0, 0 }, \
528 	{ 0, 0 }, \
529 	{ 0, 0 }, \
530 	{ 0, 0 }, \
531 	{ 0, 0 }, \
532 	{ 0, 0 }, \
533 	{ 0, 0 }, \
534 	{ 0, 0 }, \
535 	{ 0, 0 }, \
536 	{ 0, 0 }, \
537 	{ 0, 0 }, \
538 	{ 0, 0 }, \
539 	{ 0, 0 }, \
540 	{ 0, 0 }, \
541 	{ 0, 0 }, \
542 	{ 0, 0 }, \
543 	{ 0, 0 }, \
544 	{ 0, 0 }, \
545 	{ 0, 0 }, \
546 	{ 0, 0 }, \
547 	{ 0, 0 }, \
548 	{ 0, 0 }, \
549 	{ 0, 0 }, \
550 	{ 0, 0 }, \
551 	{ 0, 0 }, \
552 	{ 0, 0 }, \
553 	{ 0, 0 }, \
554 	{ 0, 0 }, \
555 	{ 0, 0 }, \
556 	{ 0, 0 }, \
557 	{ 0, 0 }, \
558 	{ 0, 0 }, \
559 	{ 0, 0 }, \
560 	{ 0, 0 }, \
561 	{ 0, 0 }, \
562 	{ 0, 0 }, \
563 	{ 0, 0 }, \
564 	{ 0, 0 }, \
565 	{ 0, 0 }, \
566 	{ 0, 0 }, \
567 	{ 0, 0 }, \
568 	{ 0, 0 }, \
569 	{ 0, 0 }, \
570 	{ 0, 0 }, \
571 	{ 0, 0 }, \
572 	{ 0, 0 }, \
573 	{ 0, 0 }, \
574 	{ 0, 0 }, \
575 	{ 0, 0 }, \
576 	{ 0, 0 }, \
577 	{ 0, 0 }, \
578 	{ 0, 0 }, \
579 	{ 0, 0 }, \
580 	{ 0, 0 }, \
581 	{ 0, 0 }, \
582 	{ 0, 0 }, \
583 	{ 0, 0 }, \
584 	{ 0, 0 }, \
585 	{ 0, 0 }, \
586 	{ 0, 0 }, \
587 	{ 0, 0 }, \
588 	{ 0, 0 }, \
589 	{ 0, 0 }, \
590 	{ 0, 0 }, \
591 	{ 0, 0 }, \
592 	{ 0, 0 }, \
593 	{ 0, 0 }, \
594 	{ 0, 0 }, \
595 	{ 0, 0 }, \
596 	{ 0, 0 }, \
597 	{ 0, 0 }, \
598 	{ 0, 0 }, \
599 	{ 0, 0 }, \
600 	{ 0, 0 }, \
601 	{ 0, 0 }, \
602 	{ 0, 0 }, \
603 	{ 0, 0 }, \
604 	{ 0, 0 }, \
605 	{ 0, 0 }, \
606 	{ 0, 0 }, \
607 	{ 0, 0 }, \
608 	{ 0, 0 }, \
609 	{ 0, 0 }, \
610 	{ 0, 0 }, \
611 	{ 0, 0 }, \
612 	{ 0, 0 }, \
613 	{ 0, 0 }, \
614 	{ 0, 0 }, \
615 	{ 0, 0 }, \
616 	{ 0, 0 }, \
617 	{ 0, 0 }, \
618 	{ 0, 0 }, \
619 	{ 0, 0 }, \
620 	{ 0, 0 }, \
621 	{ 0, 0 }, \
622 	{ 0, 0 }, \
623 	{ 0, 0 }, \
624 	{ 0, 0 }, \
625 	{ 0, 0 }, \
626 	{ 0, 0 }, \
627 	{ 0, 0 }, \
628 	{ 0, 0 }, \
629 	{ 0, 0 }, \
630 	{ 0, 0 }, \
631 	{ 0, 0 }, \
632 	{ 0, 0 }, \
633 	{ 0, 0 }, \
634 	{ 0, 0 }, \
635 	{ 0, 0 }, \
636 	{ "pfsync", CTLTYPE_NODE }, \
637 	{ 0, 0 }, \
638 	{ 0, 0 }, \
639 	{ 0, 0 }, \
640 	{ 0, 0 }, \
641 	{ 0, 0 }, \
642 	{ 0, 0 }, \
643 	{ 0, 0 }, \
644 	{ 0, 0 }, \
645 	{ 0, 0 }, \
646 	{ 0, 0 }, \
647 	{ 0, 0 }, \
648 	{ 0, 0 }, \
649 	{ 0, 0 }, \
650 	{ 0, 0 }, \
651 	{ 0, 0 }, \
652 	{ 0, 0 }, \
653 	{ 0, 0 }, \
654 	{ "divert", CTLTYPE_NODE }, \
655 }
656 
657 /*
658  * Names for IP sysctl objects
659  */
660 #define	IPCTL_FORWARDING	1	/* act as router */
661 #define	IPCTL_SENDREDIRECTS	2	/* may send redirects when forwarding */
662 #define	IPCTL_DEFTTL		3	/* default TTL */
663 #define	IPCTL_SOURCEROUTE	5	/* may perform source routes */
664 #define	IPCTL_DIRECTEDBCAST	6	/* default broadcast behavior */
665 #define IPCTL_IPPORT_FIRSTAUTO	7
666 #define IPCTL_IPPORT_LASTAUTO	8
667 #define IPCTL_IPPORT_HIFIRSTAUTO 9
668 #define IPCTL_IPPORT_HILASTAUTO	10
669 #define	IPCTL_IPPORT_MAXQUEUE	11
670 #define	IPCTL_ENCDEBUG		12
671 #define IPCTL_IPSEC_STATS	13
672 #define IPCTL_IPSEC_EXPIRE_ACQUIRE 14   /* How long to wait for key mgmt. */
673 #define IPCTL_IPSEC_EMBRYONIC_SA_TIMEOUT	15 /* new SA lifetime */
674 #define IPCTL_IPSEC_REQUIRE_PFS 16
675 #define IPCTL_IPSEC_SOFT_ALLOCATIONS            17
676 #define IPCTL_IPSEC_ALLOCATIONS 18
677 #define IPCTL_IPSEC_SOFT_BYTES  19
678 #define IPCTL_IPSEC_BYTES       20
679 #define IPCTL_IPSEC_TIMEOUT     21
680 #define IPCTL_IPSEC_SOFT_TIMEOUT 22
681 #define IPCTL_IPSEC_SOFT_FIRSTUSE 23
682 #define IPCTL_IPSEC_FIRSTUSE    24
683 #define IPCTL_IPSEC_ENC_ALGORITHM 25
684 #define IPCTL_IPSEC_AUTH_ALGORITHM 26
685 #define	IPCTL_MTUDISC		27	/* allow path MTU discovery */
686 #define	IPCTL_MTUDISCTIMEOUT	28	/* allow path MTU discovery */
687 #define	IPCTL_IPSEC_IPCOMP_ALGORITHM	29
688 #define	IPCTL_IFQUEUE		30
689 #define	IPCTL_MFORWARDING	31
690 #define	IPCTL_MULTIPATH		32
691 #define	IPCTL_STATS		33	/* IP statistics */
692 #define	IPCTL_MRTPROTO		34	/* type of multicast */
693 #define	IPCTL_MRTSTATS		35
694 #define	IPCTL_ARPQUEUED		36
695 #define	IPCTL_MRTMFC		37
696 #define	IPCTL_MRTVIF		38
697 #define	IPCTL_ARPTIMEOUT	39
698 #define	IPCTL_ARPDOWN		40
699 #define	IPCTL_ARPQUEUE		41
700 #define	IPCTL_MAXID		42
701 
702 #define	IPCTL_NAMES { \
703 	{ 0, 0 }, \
704 	{ "forwarding", CTLTYPE_INT }, \
705 	{ "redirect", CTLTYPE_INT }, \
706 	{ "ttl", CTLTYPE_INT }, \
707 	/* { "mtu", CTLTYPE_INT }, */ { 0, 0 }, \
708 	{ "sourceroute", CTLTYPE_INT }, \
709 	{ "directed-broadcast", CTLTYPE_INT }, \
710 	{ "portfirst", CTLTYPE_INT }, \
711 	{ "portlast", CTLTYPE_INT }, \
712 	{ "porthifirst", CTLTYPE_INT }, \
713 	{ "porthilast", CTLTYPE_INT }, \
714 	{ "maxqueue", CTLTYPE_INT }, \
715 	{ "encdebug", CTLTYPE_INT }, \
716 	{ 0, 0 /* ipsecstat */ }, \
717 	{ "ipsec-expire-acquire", CTLTYPE_INT }, \
718 	{ "ipsec-invalid-life", CTLTYPE_INT }, \
719 	{ "ipsec-pfs", CTLTYPE_INT }, \
720 	{ "ipsec-soft-allocs", CTLTYPE_INT }, \
721 	{ "ipsec-allocs", CTLTYPE_INT }, \
722 	{ "ipsec-soft-bytes", CTLTYPE_INT }, \
723 	{ "ipsec-bytes", CTLTYPE_INT }, \
724 	{ "ipsec-timeout", CTLTYPE_INT }, \
725 	{ "ipsec-soft-timeout", CTLTYPE_INT }, \
726 	{ "ipsec-soft-firstuse", CTLTYPE_INT }, \
727 	{ "ipsec-firstuse", CTLTYPE_INT }, \
728 	{ "ipsec-enc-alg", CTLTYPE_STRING }, \
729 	{ "ipsec-auth-alg", CTLTYPE_STRING }, \
730 	{ "mtudisc", CTLTYPE_INT }, \
731 	{ "mtudisctimeout", CTLTYPE_INT }, \
732 	{ "ipsec-comp-alg", CTLTYPE_STRING }, \
733 	{ "ifq", CTLTYPE_NODE }, \
734 	{ "mforwarding", CTLTYPE_INT }, \
735 	{ "multipath", CTLTYPE_INT }, \
736 	{ "stats", CTLTYPE_STRUCT }, \
737 	{ "mrtproto", CTLTYPE_INT }, \
738 	{ "mrtstats", CTLTYPE_STRUCT }, \
739 	{ "arpqueued", CTLTYPE_INT }, \
740 	{ "mrtmfc", CTLTYPE_STRUCT }, \
741 	{ "mrtvif", CTLTYPE_STRUCT }, \
742 	{ "arptimeout", CTLTYPE_INT }, \
743 	{ "arpdown", CTLTYPE_INT }, \
744 	{ "arpq", CTLTYPE_NODE }, \
745 }
746 
747 #endif /* __BSD_VISIBLE */
748 
749 /* INET6 stuff */
750 #define __KAME_NETINET_IN_H_INCLUDED_
751 #include <netinet6/in6.h>
752 #undef __KAME_NETINET_IN_H_INCLUDED_
753 
754 #ifndef _KERNEL
755 #if __BSD_VISIBLE
756 __BEGIN_DECLS
757 int	   bindresvport(int, struct sockaddr_in *);
758 struct sockaddr;
759 int	   bindresvport_sa(int, struct sockaddr *);
760 __END_DECLS
761 #endif /* __BSD_VISIBLE */
762 #endif /* !_KERNEL */
763 
764 #ifdef _KERNEL
765 extern const u_char inetctlerrmap[];
766 extern const struct in_addr zeroin_addr;
767 
768 struct mbuf;
769 struct sockaddr;
770 struct sockaddr_in;
771 struct ifaddr;
772 struct in_ifaddr;
773 struct route;
774 
775 void	   ipv4_input(struct ifnet *, struct mbuf *);
776 struct mbuf *
777 	   ipv4_check(struct ifnet *, struct mbuf *);
778 
779 int	   in_broadcast(struct in_addr, u_int);
780 int	   in_canforward(struct in_addr);
781 int	   in_cksum(struct mbuf *, int);
782 int	   in4_cksum(struct mbuf *, u_int8_t, int, int);
783 void	   in_hdr_cksum_out(struct mbuf *, struct ifnet *);
784 void	   in_proto_cksum_out(struct mbuf *, struct ifnet *);
785 int	   in_ifcap_cksum(struct mbuf *, struct ifnet *, int);
786 void	   in_ifdetach(struct ifnet *);
787 int	   in_mask2len(struct in_addr *);
788 void	   in_len2mask(struct in_addr *, int);
789 int	   in_nam2sin(const struct mbuf *, struct sockaddr_in **);
790 int	   in_sa2sin(struct sockaddr *, struct sockaddr_in **);
791 
792 char	  *inet_ntoa(struct in_addr);
793 int	   inet_nat64(int, const void *, void *, const void *, u_int8_t);
794 int	   inet_nat46(int, const void *, void *, const void *, u_int8_t);
795 
796 const char *inet_ntop(int, const void *, char *, socklen_t);
797 const char *sockaddr_ntop(struct sockaddr *, char *, size_t);
798 
799 #define	in_hosteq(s,t)	((s).s_addr == (t).s_addr)
800 #define	in_nullhost(x)	((x).s_addr == INADDR_ANY)
801 
802 /*
803  * Convert between address family specific and general structs.
804  * Inline functions check the source type and are stricter than
805  * casts or defines.
806  */
807 
808 static inline struct sockaddr_in *
satosin(struct sockaddr * sa)809 satosin(struct sockaddr *sa)
810 {
811 	return ((struct sockaddr_in *)(sa));
812 }
813 
814 static inline const struct sockaddr_in *
satosin_const(const struct sockaddr * sa)815 satosin_const(const struct sockaddr *sa)
816 {
817 	return ((const struct sockaddr_in *)(sa));
818 }
819 
820 static inline struct sockaddr *
sintosa(struct sockaddr_in * sin)821 sintosa(struct sockaddr_in *sin)
822 {
823 	return ((struct sockaddr *)(sin));
824 }
825 
826 static inline struct in_ifaddr *
ifatoia(struct ifaddr * ifa)827 ifatoia(struct ifaddr *ifa)
828 {
829 	return ((struct in_ifaddr *)(ifa));
830 }
831 #endif /* _KERNEL */
832 #endif /* _NETINET_IN_H_ */
833