1 /* $FreeBSD: src/sys/netinet6/in6_proto.c,v 1.6.2.9 2003/01/24 05:11:35 sam Exp $ */ 2 /* $KAME: in6_proto.c,v 1.91 2001/05/27 13:28:35 itojun Exp $ */ 3 4 /* 5 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 1. Redistributions of source code must retain the above copyright 12 * notice, this list of conditions and the following disclaimer. 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 3. Neither the name of the project nor the names of its contributors 17 * may be used to endorse or promote products derived from this software 18 * without specific prior written permission. 19 * 20 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 30 * SUCH DAMAGE. 31 */ 32 33 /* 34 * Copyright (c) 1982, 1986, 1993 35 * The Regents of the University of California. All rights reserved. 36 * 37 * Redistribution and use in source and binary forms, with or without 38 * modification, are permitted provided that the following conditions 39 * are met: 40 * 1. Redistributions of source code must retain the above copyright 41 * notice, this list of conditions and the following disclaimer. 42 * 2. Redistributions in binary form must reproduce the above copyright 43 * notice, this list of conditions and the following disclaimer in the 44 * documentation and/or other materials provided with the distribution. 45 * 3. Neither the name of the University nor the names of its contributors 46 * may be used to endorse or promote products derived from this software 47 * without specific prior written permission. 48 * 49 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 50 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 51 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 52 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 53 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 54 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 55 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 56 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 57 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 58 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 59 * SUCH DAMAGE. 60 * 61 * @(#)in_proto.c 8.1 (Berkeley) 6/10/93 62 */ 63 64 #include "opt_inet.h" 65 #include "opt_inet6.h" 66 #include "opt_ipsec.h" 67 #include "opt_carp.h" 68 69 #include <sys/param.h> 70 #include <sys/socket.h> 71 #include <sys/socketvar.h> 72 #include <sys/protosw.h> 73 #include <sys/kernel.h> 74 #include <sys/domain.h> 75 #include <sys/mbuf.h> 76 #include <sys/systm.h> 77 #include <sys/sysctl.h> 78 79 #include <net/if.h> 80 #include <net/radix.h> 81 #include <net/route.h> 82 83 #include <netinet/in.h> 84 #include <netinet/in_systm.h> 85 #include <netinet/in_var.h> 86 #include <netinet/ip_encap.h> 87 #include <netinet/ip.h> 88 #include <netinet/ip_var.h> 89 #include <netinet/ip6.h> 90 #include <netinet6/ip6_var.h> 91 #include <netinet/icmp6.h> 92 93 #include <netinet/tcp.h> 94 #include <netinet/tcp_timer.h> 95 #include <netinet/tcp_var.h> 96 #include <netinet/udp.h> 97 #include <netinet/udp_var.h> 98 #include <netinet6/tcp6_var.h> 99 #include <netinet6/raw_ip6.h> 100 #include <netinet6/udp6_var.h> 101 #include <netinet6/pim6_var.h> 102 #include <netinet6/nd6.h> 103 104 #ifdef IPSEC 105 #include <netinet6/ipsec.h> 106 #ifdef INET6 107 #include <netinet6/ipsec6.h> 108 #endif 109 #include <netinet6/ah.h> 110 #ifdef INET6 111 #include <netinet6/ah6.h> 112 #endif 113 #ifdef IPSEC_ESP 114 #include <netinet6/esp.h> 115 #ifdef INET6 116 #include <netinet6/esp6.h> 117 #endif 118 #endif 119 #include <netinet6/ipcomp.h> 120 #ifdef INET6 121 #include <netinet6/ipcomp6.h> 122 #endif 123 #endif /* IPSEC */ 124 125 #ifdef FAST_IPSEC 126 #include <netproto/ipsec/ipsec6.h> 127 #define IPSEC 128 #define IPSEC_ESP 129 #define ah6_input ipsec6_common_input 130 #define esp6_input ipsec6_common_input 131 #define ipcomp6_input ipsec6_common_input 132 #endif /* FAST_IPSEC */ 133 134 #include <netinet6/ip6protosw.h> 135 136 #include <net/net_osdep.h> 137 138 #ifdef CARP 139 #include <netinet/ip_carp.h> 140 #endif 141 142 143 /* 144 * TCP/IP protocol family: IP6, ICMP6, UDP, TCP. 145 */ 146 147 extern struct domain inet6domain; 148 static struct pr_usrreqs nousrreqs; 149 150 #define PR_LISTEN 0 151 #define PR_ABRTACPTDIS 0 152 153 struct protosw inet6sw[] = { 154 { 155 .pr_type = 0, 156 .pr_domain = &inet6domain, 157 .pr_protocol = IPPROTO_IPV6, 158 .pr_flags = 0, 159 160 .pr_init = ip6_init, 161 .pr_drain = frag6_drain, 162 .pr_usrreqs = &nousrreqs 163 }, 164 { 165 .pr_type = SOCK_DGRAM, 166 .pr_domain = &inet6domain, 167 .pr_protocol = IPPROTO_UDP, 168 .pr_flags = PR_ATOMIC | PR_ADDR | PR_MPSAFE | PR_LASTHDR, 169 170 .pr_input = udp6_input, 171 .pr_output = 0, 172 .pr_ctlinput = udp6_ctlinput, 173 .pr_ctloutput = ip6_ctloutput_dispatch, 174 175 .pr_ctlport = cpu0_ctlport, 176 .pr_usrreqs = &udp6_usrreqs 177 }, 178 { 179 .pr_type = SOCK_STREAM, 180 .pr_domain = &inet6domain, 181 .pr_protocol = IPPROTO_TCP, 182 .pr_flags = PR_CONNREQUIRED | PR_WANTRCVD | PR_LISTEN | 183 PR_MPSAFE | PR_LASTHDR | PR_ASYNC_SEND | PR_ASYNC_RCVD, 184 185 .pr_input = tcp6_input, 186 .pr_output = NULL, 187 .pr_ctlinput = tcp6_ctlinput, 188 .pr_ctloutput = tcp_ctloutput, 189 190 .pr_ctlport = cpu0_ctlport, 191 #ifndef INET 192 /* don't call initialization and timeout routines twice */ 193 .pr_init = tcp_init, 194 #endif 195 .pr_drain = tcp_drain, 196 .pr_usrreqs = &tcp6_usrreqs 197 }, 198 { 199 .pr_type = SOCK_RAW, 200 .pr_domain = &inet6domain, 201 .pr_protocol = IPPROTO_RAW, 202 .pr_flags = PR_ATOMIC|PR_ADDR|PR_LASTHDR, 203 204 .pr_input = rip6_input, 205 .pr_output = rip6_output, 206 .pr_ctlinput = rip6_ctlinput, 207 .pr_ctloutput = rip6_ctloutput, 208 209 .pr_ctlport = cpu0_ctlport, 210 .pr_usrreqs = &rip6_usrreqs 211 }, 212 { 213 .pr_type = SOCK_RAW, 214 .pr_domain = &inet6domain, 215 .pr_protocol = IPPROTO_ICMPV6, 216 .pr_flags = PR_ATOMIC|PR_ADDR|PR_LASTHDR, 217 218 .pr_input = icmp6_input, 219 .pr_output = rip6_output, 220 .pr_ctlinput = rip6_ctlinput, 221 .pr_ctloutput = rip6_ctloutput, 222 223 .pr_ctlport = cpu0_ctlport, 224 .pr_init = icmp6_init, 225 .pr_drain = NULL, 226 227 .pr_usrreqs = &rip6_usrreqs 228 }, 229 { 230 .pr_type = SOCK_RAW, 231 .pr_domain = &inet6domain, 232 .pr_protocol = IPPROTO_DSTOPTS, PR_ATOMIC|PR_ADDR, 233 234 .pr_input = dest6_input, 235 .pr_output = NULL, 236 .pr_ctlinput = NULL, 237 .pr_ctloutput = NULL, 238 239 .pr_usrreqs = &nousrreqs 240 }, 241 { 242 .pr_type = SOCK_RAW, 243 .pr_domain = &inet6domain, 244 .pr_protocol = IPPROTO_ROUTING, PR_ATOMIC|PR_ADDR, 245 246 .pr_input = route6_input, 247 .pr_output = NULL, 248 .pr_ctlinput = NULL, 249 .pr_ctloutput = NULL, 250 251 .pr_usrreqs = &nousrreqs 252 }, 253 { 254 .pr_type = SOCK_RAW, 255 .pr_domain = &inet6domain, 256 .pr_protocol = IPPROTO_FRAGMENT, PR_ATOMIC|PR_ADDR, 257 258 .pr_input = frag6_input, 259 .pr_output = NULL, 260 .pr_ctlinput = NULL, 261 .pr_ctloutput = NULL, 262 263 .pr_usrreqs = &nousrreqs 264 }, 265 #ifdef IPSEC 266 { 267 .pr_type = SOCK_RAW, 268 .pr_domain = &inet6domain, 269 .pr_protocol = IPPROTO_AH, 270 .pr_flags = PR_ATOMIC|PR_ADDR, 271 272 .pr_input = ah6_input, 273 .pr_output = NULL, 274 .pr_ctlinput = NULL, 275 .pr_ctloutput = NULL, 276 277 .pr_usrreqs = &nousrreqs 278 }, 279 #ifdef IPSEC_ESP 280 { 281 .pr_type = SOCK_RAW, 282 .pr_domain = &inet6domain, 283 .pr_protocol = IPPROTO_ESP, 284 .pr_flags = PR_ATOMIC|PR_ADDR, 285 286 .pr_input = esp6_input, 287 .pr_output = NULL, 288 .pr_ctlinput = esp6_ctlinput, 289 .pr_ctloutput = NULL, 290 291 .pr_usrreqs = &nousrreqs 292 }, 293 #endif 294 { 295 .pr_type = SOCK_RAW, 296 .pr_domain = &inet6domain, 297 .pr_protocol = IPPROTO_IPCOMP, 298 .pr_flags = PR_ATOMIC|PR_ADDR, 299 300 .pr_input = ipcomp6_input, 301 .pr_output = NULL, 302 .pr_ctlinput = NULL, 303 .pr_ctloutput = NULL, 304 305 .pr_usrreqs = &nousrreqs 306 }, 307 #endif /* IPSEC */ 308 #ifdef INET 309 { 310 .pr_type = SOCK_RAW, 311 .pr_domain = &inet6domain, 312 .pr_protocol = IPPROTO_IPV4, 313 .pr_flags = PR_ATOMIC|PR_ADDR|PR_LASTHDR, 314 315 .pr_input = encap6_input, 316 .pr_output = rip6_output, 317 .pr_ctlinput = NULL, 318 .pr_ctloutput = rip6_ctloutput, 319 320 .pr_init = encap_init, 321 .pr_usrreqs = &rip6_usrreqs 322 }, 323 #endif /* INET */ 324 { 325 .pr_type = SOCK_RAW, 326 .pr_domain = &inet6domain, 327 .pr_protocol = IPPROTO_IPV6, 328 .pr_flags = PR_ATOMIC|PR_ADDR|PR_LASTHDR, 329 330 .pr_input = encap6_input, 331 .pr_output = rip6_output, 332 .pr_ctlinput = NULL, 333 .pr_ctloutput = rip6_ctloutput, 334 335 .pr_init = encap_init, 336 .pr_usrreqs = &rip6_usrreqs 337 }, 338 { 339 .pr_type = SOCK_RAW, 340 .pr_domain = &inet6domain, 341 .pr_protocol = IPPROTO_PIM, 342 .pr_flags = PR_ATOMIC|PR_ADDR|PR_LASTHDR, 343 344 .pr_input = pim6_input, 345 .pr_output = rip6_output, 346 .pr_ctlinput = NULL, 347 .pr_ctloutput = rip6_ctloutput, 348 349 .pr_usrreqs = &rip6_usrreqs 350 }, 351 #ifdef CARP 352 { 353 .pr_type = SOCK_RAW, 354 .pr_domain = &inet6domain, 355 .pr_protocol = IPPROTO_CARP, 356 .pr_flags = PR_ATOMIC|PR_ADDR, 357 358 .pr_input = carp6_proto_input, 359 .pr_output = rip6_output, 360 .pr_ctlinput = NULL, 361 .pr_ctloutput = rip6_ctloutput, 362 363 .pr_usrreqs = &rip6_usrreqs 364 }, 365 #endif /* CARP */ 366 367 /* raw wildcard */ 368 { 369 .pr_type = SOCK_RAW, 370 .pr_domain = &inet6domain, 371 .pr_protocol = 0, 372 .pr_flags = PR_ATOMIC|PR_ADDR, 373 374 .pr_input = rip6_input, 375 .pr_output = rip6_output, 376 .pr_ctlinput = NULL, 377 .pr_ctloutput = rip6_ctloutput, 378 379 .pr_usrreqs = &rip6_usrreqs 380 }, 381 }; 382 383 extern int in6_inithead (void **, int); 384 385 struct domain inet6domain = { 386 .dom_family = AF_INET6, 387 .dom_name = "internet6", 388 .dom_init = NULL, 389 .dom_externalize = NULL, 390 .dom_dispose = NULL, 391 .dom_protosw = inet6sw, 392 .dom_protoswNPROTOSW = &inet6sw[NELEM(inet6sw)], 393 .dom_next = SLIST_ENTRY_INITIALIZER, 394 .dom_rtattach = in6_inithead, 395 .dom_rtoffset = offsetof(struct sockaddr_in6, sin6_addr) << 3, 396 .dom_maxrtkey = sizeof(struct sockaddr_in6), 397 .dom_ifattach = in6_domifattach, 398 .dom_ifdetach = in6_domifdetach 399 }; 400 401 DOMAIN_SET(inet6); 402 403 /* 404 * Internet configuration info 405 */ 406 #ifndef IPV6FORWARDING 407 #ifdef GATEWAY6 408 #define IPV6FORWARDING 1 /* forward IP6 packets not for us */ 409 #else 410 #define IPV6FORWARDING 0 /* don't forward IP6 packets not for us */ 411 #endif /* GATEWAY6 */ 412 #endif /* !IPV6FORWARDING */ 413 414 #ifndef IPV6_SENDREDIRECTS 415 #define IPV6_SENDREDIRECTS 1 416 #endif 417 418 int nd6_onlink_ns_rfc4861 = 0; /* allow 'on-link' NS/NA (as in RFC 4861) */ 419 420 int ip6_forwarding = IPV6FORWARDING; /* act as router? */ 421 int ip6_sendredirects = IPV6_SENDREDIRECTS; 422 int ip6_defhlim = IPV6_DEFHLIM; 423 int ip6_minhlim = IPV6_MINHLIM; 424 int ip6_defmcasthlim = IPV6_DEFAULT_MULTICAST_HOPS; 425 int ip6_accept_rtadv = 0; /* "IPV6FORWARDING ? 0 : 1" is dangerous */ 426 int ip6_maxfragpackets; /* initialized in frag6.c:frag6_init() */ 427 int ip6_maxfrags; /* initialized in frag6.c:frag6_init() */ 428 int ip6_log_interval = 5; 429 int ip6_hdrnestlimit = 50; /* appropriate? */ 430 int ip6_dad_count = 1; /* DupAddrDetectionTransmits */ 431 u_int32_t ip6_flow_seq; 432 int ip6_auto_flowlabel = 1; 433 int ip6_gif_hlim = 0; 434 int ip6_use_deprecated = 1; /* allow deprecated addr (RFC2462 5.5.4) */ 435 int ip6_rr_prune = 5; /* router renumbering prefix 436 * walk list every 5 sec. */ 437 438 u_int32_t ip6_id = 0UL; 439 time_t ip6_log_time = (time_t)0L; 440 441 /* icmp6 */ 442 /* 443 * BSDI4 defines these variables in in_proto.c... 444 * XXX: what if we don't define INET? Should we define pmtu6_expire 445 * or so? (jinmei@kame.net 19990310) 446 */ 447 int pmtu_expire = 60*10; 448 int pmtu_probe = 60*2; 449 450 /* raw IP6 parameters */ 451 /* 452 * Nominal space allocated to a raw ip socket. 453 */ 454 #define RIPV6SNDQ 8192 455 #define RIPV6RCVQ 8192 456 457 u_long rip6_sendspace = RIPV6SNDQ; 458 u_long rip6_recvspace = RIPV6RCVQ; 459 460 /* ICMPV6 parameters */ 461 int icmp6_rediraccept = 1; /* accept and process redirects */ 462 int icmp6_redirtimeout = 10 * 60; /* 10 minutes */ 463 int icmp6errppslim = 100; /* 100pps */ 464 int icmp6_nodeinfo = 3; /* enable/disable NI response */ 465 466 /* UDP on IP6 parameters */ 467 int udp6_sendspace = 9216; /* really max datagram size */ 468 int udp6_recvspace = 40 * (1024 + sizeof(struct sockaddr_in6)); 469 /* 40 1K datagrams */ 470 471 /* 472 * sysctl related items. 473 */ 474 SYSCTL_NODE(_net, PF_INET6, inet6, CTLFLAG_RW, 0, 475 "Internet6 Family"); 476 477 /* net.inet6 */ 478 SYSCTL_NODE(_net_inet6, IPPROTO_IPV6, ip6, CTLFLAG_RW, 0, "IP6"); 479 SYSCTL_NODE(_net_inet6, IPPROTO_ICMPV6, icmp6, CTLFLAG_RW, 0, "ICMP6"); 480 SYSCTL_NODE(_net_inet6, IPPROTO_UDP, udp6, CTLFLAG_RW, 0, "UDP6"); 481 SYSCTL_NODE(_net_inet6, IPPROTO_TCP, tcp6, CTLFLAG_RW, 0, "TCP6"); 482 #ifdef IPSEC 483 SYSCTL_NODE(_net_inet6, IPPROTO_ESP, ipsec6, CTLFLAG_RW, 0, "IPSEC6"); 484 #endif /* IPSEC */ 485 486 /* net.inet6.ip6 */ 487 static int 488 sysctl_ip6_temppltime(SYSCTL_HANDLER_ARGS) 489 { 490 int error = 0; 491 int old; 492 493 error = SYSCTL_OUT(req, arg1, sizeof(int)); 494 if (error || !req->newptr) 495 return (error); 496 old = ip6_temp_preferred_lifetime; 497 error = SYSCTL_IN(req, arg1, sizeof(int)); 498 if (ip6_temp_preferred_lifetime < 499 ip6_desync_factor + ip6_temp_regen_advance) { 500 ip6_temp_preferred_lifetime = old; 501 return (EINVAL); 502 } 503 return (error); 504 } 505 506 static int 507 sysctl_ip6_tempvltime(SYSCTL_HANDLER_ARGS) 508 { 509 int error = 0; 510 int old; 511 512 error = SYSCTL_OUT(req, arg1, sizeof(int)); 513 if (error || !req->newptr) 514 return (error); 515 old = ip6_temp_valid_lifetime; 516 error = SYSCTL_IN(req, arg1, sizeof(int)); 517 if (ip6_temp_valid_lifetime < ip6_temp_preferred_lifetime) { 518 ip6_temp_preferred_lifetime = old; 519 return (EINVAL); 520 } 521 return (error); 522 } 523 524 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_FORWARDING, forwarding, CTLFLAG_RW, 525 &ip6_forwarding, 0, "Enable IP forwarding between interfaces"); 526 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_SENDREDIRECTS, redirect, CTLFLAG_RW, 527 &ip6_sendredirects, 0, "Enable sending IP redirects"); 528 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DEFHLIM, 529 hlim, CTLFLAG_RW, &ip6_defhlim, 0, "Default hop limit"); 530 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_MINHLIM, 531 minhlim, CTLFLAG_RW, &ip6_minhlim, 0, "Default hop limit"); 532 SYSCTL_STRUCT(_net_inet6_ip6, IPV6CTL_STATS, stats, CTLFLAG_RD, 533 &ip6stat, ip6stat, "IP stats"); 534 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_MAXFRAGPACKETS, maxfragpackets, 535 CTLFLAG_RW, &ip6_maxfragpackets, 0, "Maximum packets in reassembly queue"); 536 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_ACCEPT_RTADV, accept_rtadv, 537 CTLFLAG_RW, &ip6_accept_rtadv, 0, "Acts as a host not a router"); 538 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_LOG_INTERVAL, 539 log_interval, CTLFLAG_RW, &ip6_log_interval, 0, ""); 540 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_HDRNESTLIMIT, hdrnestlimit, CTLFLAG_RW, 541 &ip6_hdrnestlimit, 0, "Upper limit of # of extension headers"); 542 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DAD_COUNT, dad_count, CTLFLAG_RW, 543 &ip6_dad_count, 0, "Number of times to perform duplicate address detectione"); 544 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_AUTO_FLOWLABEL, auto_flowlabel, CTLFLAG_RW, 545 &ip6_auto_flowlabel, 0, "Enable attaching flowlabel automatically"); 546 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DEFMCASTHLIM, defmcasthlim, CTLFLAG_RW, 547 &ip6_defmcasthlim, 0, "Default multicast hop limit"); 548 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_GIF_HLIM, gifhlim, CTLFLAG_RW, 549 &ip6_gif_hlim, 0, "Hop limit for gif encap packet"); 550 SYSCTL_STRING(_net_inet6_ip6, IPV6CTL_KAME_VERSION, 551 kame_version, CTLFLAG_RD, __KAME_VERSION, 0, "Kame version"); 552 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_USE_DEPRECATED, use_deprecated, CTLFLAG_RW, 553 &ip6_use_deprecated, 0, "Allow deprecated addr as source"); 554 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_RR_PRUNE, 555 rr_prune, CTLFLAG_RW, &ip6_rr_prune, 0, 556 "Walk timer for router renumbering"); 557 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_USETEMPADDR, use_tempaddr, CTLFLAG_RW, 558 &ip6_use_tempaddr, 0, "Whether to use temporary addresses"); 559 SYSCTL_OID(_net_inet6_ip6, IPV6CTL_TEMPPLTIME, temppltime, 560 CTLTYPE_INT|CTLFLAG_RW, &ip6_temp_preferred_lifetime, 0, 561 sysctl_ip6_temppltime, "I", 562 "Preferred lifetime for tmpaddrs"); 563 SYSCTL_OID(_net_inet6_ip6, IPV6CTL_TEMPVLTIME, tempvltime, 564 CTLTYPE_INT|CTLFLAG_RW, &ip6_temp_valid_lifetime, 0, 565 sysctl_ip6_tempvltime, "I", 566 "Valid lifetime for tmpaddrs"); 567 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_AUTO_LINKLOCAL, auto_linklocal, CTLFLAG_RW, 568 &ip6_auto_linklocal, 0, "Enable auto-assigning a link-local address"); 569 SYSCTL_STRUCT(_net_inet6_ip6, IPV6CTL_RIP6STATS, rip6stats, CTLFLAG_RD, 570 &rip6stat, rip6stat, "Raw stats"); 571 SYSCTL_INT(_net_inet6_ip6, IPV6CTL_MAXFRAGS, maxfrags, CTLFLAG_RW, 572 &ip6_maxfrags, 0, "Maximum fragments in reassembly queues"); 573 574 /* net.inet6.icmp6 */ 575 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_REDIRACCEPT, rediraccept, CTLFLAG_RW, 576 &icmp6_rediraccept, 0, "If enabled, accept and process redirects"); 577 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_REDIRTIMEOUT, redirtimeout, CTLFLAG_RW, 578 &icmp6_redirtimeout, 0, "Cache time for redirect routes"); 579 SYSCTL_STRUCT(_net_inet6_icmp6, ICMPV6CTL_STATS, stats, CTLFLAG_RD, 580 &icmp6stat, icmp6stat, "Stats"); 581 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_PRUNE, nd6_prune, CTLFLAG_RW, 582 &nd6_prune, 0, "Prune interval"); 583 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_DELAY, nd6_delay, CTLFLAG_RW, 584 &nd6_delay, 0, "Reachability timeout for stale neighbors"); 585 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_UMAXTRIES, nd6_umaxtries, CTLFLAG_RW, 586 &nd6_umaxtries, 0, "Maximum unicast query"); 587 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_MMAXTRIES, nd6_mmaxtries, CTLFLAG_RW, 588 &nd6_mmaxtries, 0, "Maximum multicast query"); 589 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_USELOOPBACK, nd6_useloopback, CTLFLAG_RW, 590 &nd6_useloopback, 0, "Use loopback interface for local traffic"); 591 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_NODEINFO, 592 nodeinfo, CTLFLAG_RW, &icmp6_nodeinfo, 0, "Enable/disable NI response"); 593 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ERRPPSLIMIT, 594 errppslimit, CTLFLAG_RW, &icmp6errppslim, 0, 595 "ICMPv6 error maximum packet-per-second value (default: 100pps)"); 596 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_MAXNUDHINT, nd6_maxnudhint, CTLFLAG_RW, 597 &nd6_maxnudhint, 0, "Max # of subsequent upper layer hints"); 598 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_DEBUG, nd6_debug, CTLFLAG_RW, 599 &nd6_debug, 0, "Enable debug output"); 600 SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_ONLINKNSRFC4861, nd6_onlink_ns_rfc4861, CTLFLAG_RW, 601 &nd6_onlink_ns_rfc4861, 0, "Accept 'on-link' NS/NA in compliance with RFC 4861."); 602