1*f46db49eSbluhm /* $OpenBSD: nd6.c,v 1.280 2023/05/13 16:27:59 bluhm Exp $ */
2d8a7e3a7Sitojun /* $KAME: nd6.c,v 1.280 2002/06/08 19:52:07 itojun Exp $ */
3287546eaSitojun
4287546eaSitojun /*
5287546eaSitojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6287546eaSitojun * All rights reserved.
7287546eaSitojun *
8287546eaSitojun * Redistribution and use in source and binary forms, with or without
9287546eaSitojun * modification, are permitted provided that the following conditions
10287546eaSitojun * are met:
11287546eaSitojun * 1. Redistributions of source code must retain the above copyright
12287546eaSitojun * notice, this list of conditions and the following disclaimer.
13287546eaSitojun * 2. Redistributions in binary form must reproduce the above copyright
14287546eaSitojun * notice, this list of conditions and the following disclaimer in the
15287546eaSitojun * documentation and/or other materials provided with the distribution.
16287546eaSitojun * 3. Neither the name of the project nor the names of its contributors
17287546eaSitojun * may be used to endorse or promote products derived from this software
18287546eaSitojun * without specific prior written permission.
19287546eaSitojun *
20287546eaSitojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21287546eaSitojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22287546eaSitojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23287546eaSitojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24287546eaSitojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25287546eaSitojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26287546eaSitojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27287546eaSitojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28287546eaSitojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29287546eaSitojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30287546eaSitojun * SUCH DAMAGE.
31287546eaSitojun */
32287546eaSitojun
33287546eaSitojun #include <sys/param.h>
34287546eaSitojun #include <sys/systm.h>
35b3c1e4c1Sitojun #include <sys/timeout.h>
36287546eaSitojun #include <sys/malloc.h>
37287546eaSitojun #include <sys/mbuf.h>
38287546eaSitojun #include <sys/socket.h>
39287546eaSitojun #include <sys/sockio.h>
40287546eaSitojun #include <sys/time.h>
41287546eaSitojun #include <sys/kernel.h>
4293fbd125Sbluhm #include <sys/pool.h>
43287546eaSitojun #include <sys/errno.h>
44287546eaSitojun #include <sys/ioctl.h>
45287546eaSitojun #include <sys/syslog.h>
46287546eaSitojun #include <sys/queue.h>
47c6bbd2a8Sflorian #include <sys/stdint.h>
48a09574ebSkettenis #include <sys/task.h>
49287546eaSitojun
50287546eaSitojun #include <net/if.h>
51287546eaSitojun #include <net/if_dl.h>
52287546eaSitojun #include <net/if_types.h>
53287546eaSitojun #include <net/route.h>
54287546eaSitojun
55287546eaSitojun #include <netinet/in.h>
56287546eaSitojun #include <netinet/if_ether.h>
57cb39d30aSangelos #include <netinet/ip_ipsp.h>
5858aa7d74Sangelos
59287546eaSitojun #include <netinet6/in6_var.h>
60fa86ee14Sitojun #include <netinet/ip6.h>
61287546eaSitojun #include <netinet6/ip6_var.h>
62287546eaSitojun #include <netinet6/nd6.h>
63fa86ee14Sitojun #include <netinet/icmp6.h>
64287546eaSitojun
65e298277cSbluhm /*
66e298277cSbluhm * Locks used to protect struct members in this file:
67e298277cSbluhm * a atomic operations
68e298277cSbluhm * I immutable after creation
69e298277cSbluhm * K kernel lock
70e298277cSbluhm * m nd6 mutex, needed when net lock is shared
71e298277cSbluhm * N net lock
72e298277cSbluhm */
73e298277cSbluhm
74287546eaSitojun #define ND6_SLOWTIMER_INTERVAL (60 * 60) /* 1 hour */
75287546eaSitojun #define ND6_RECALC_REACHTM_INTERVAL (60 * 120) /* 2 hours */
76287546eaSitojun
77287546eaSitojun /* timer values */
783209772dScheloha int nd6_timer_next = -1; /* at which uptime nd6_timer runs */
793209772dScheloha time_t nd6_expire_next = -1; /* at which uptime nd6_expire runs */
80287546eaSitojun int nd6_delay = 5; /* delay first probe time 5 second */
81287546eaSitojun int nd6_umaxtries = 3; /* maximum unicast query */
82287546eaSitojun int nd6_mmaxtries = 3; /* maximum multicast query */
83be4e9e12Sitojun int nd6_gctimer = (60 * 60 * 24); /* 1 day: garbage collection timer */
84287546eaSitojun
85287546eaSitojun /* preventing too many loops in ND option parsing */
86287546eaSitojun int nd6_maxndopt = 10; /* max # of ND options allowed */
87287546eaSitojun
88f6e55599Sitojun int nd6_maxnudhint = 0; /* max # of subsequent upper layer hints */
89f6e55599Sitojun
90b79da24aSitojun #ifdef ND6_DEBUG
91b79da24aSitojun int nd6_debug = 1;
92b79da24aSitojun #else
93b79da24aSitojun int nd6_debug = 0;
94b79da24aSitojun #endif
95b79da24aSitojun
96e298277cSbluhm /* llinfo_nd6 live time, rt_llinfo and RTF_LLINFO are protected by nd6_mtx */
97e298277cSbluhm struct mutex nd6_mtx = MUTEX_INITIALIZER(IPL_SOFTNET);
98e298277cSbluhm
99e298277cSbluhm TAILQ_HEAD(llinfo_nd6_head, llinfo_nd6) nd6_list =
100e298277cSbluhm TAILQ_HEAD_INITIALIZER(nd6_list); /* [mN] list of llinfo_nd6 structures */
101e298277cSbluhm struct pool nd6_pool; /* [I] pool for llinfo_nd6 structures */
102e298277cSbluhm int nd6_inuse; /* [m] limit neigbor discovery routes */
103e2c34204Sbluhm unsigned int ln_hold_total; /* [a] packets currently in the nd6 queue */
104287546eaSitojun
105334bfa0aSmpi void nd6_timer(void *);
106a0aa363cSjsing void nd6_slowtimo(void *);
107088d4855Smpi void nd6_expire(void *);
108088d4855Smpi void nd6_expire_timer(void *);
109c370e97fSmpi void nd6_invalidate(struct rtentry *);
11018e33022Sbluhm void nd6_free(struct rtentry *);
111334bfa0aSmpi int nd6_llinfo_timer(struct rtentry *);
112287546eaSitojun
113334bfa0aSmpi struct timeout nd6_timer_to;
114b3c1e4c1Sitojun struct timeout nd6_slowtimo_ch;
115088d4855Smpi struct timeout nd6_expire_timeout;
116088d4855Smpi struct task nd6_expire_task;
117b3c1e4c1Sitojun
118287546eaSitojun void
nd6_init(void)119a0aa363cSjsing nd6_init(void)
120287546eaSitojun {
1211378bae2Sdlg pool_init(&nd6_pool, sizeof(struct llinfo_nd6), 0,
1221378bae2Sdlg IPL_SOFTNET, 0, "nd6", NULL);
12393fbd125Sbluhm
124088d4855Smpi task_set(&nd6_expire_task, nd6_expire, NULL);
125a09574ebSkettenis
126287546eaSitojun /* start timer */
127713fe098Skn timeout_set_proc(&nd6_timer_to, nd6_timer, NULL);
12822e88dadSmpi timeout_set_proc(&nd6_slowtimo_ch, nd6_slowtimo, NULL);
12929e86e5eSblambert timeout_add_sec(&nd6_slowtimo_ch, ND6_SLOWTIMER_INTERVAL);
130088d4855Smpi timeout_set(&nd6_expire_timeout, nd6_expire_timer, NULL);
131287546eaSitojun }
132287546eaSitojun
1334d7e99f8Skn void
nd6_ifattach(struct ifnet * ifp)134ee37ea65Smcbride nd6_ifattach(struct ifnet *ifp)
135287546eaSitojun {
136d6b9e9b9Sitojun struct nd_ifinfo *nd;
137287546eaSitojun
138393af863Skrw nd = malloc(sizeof(*nd), M_IP6NDP, M_WAITOK | M_ZERO);
139287546eaSitojun
140abcde9bcSkn nd->reachable = ND_COMPUTE_RTIME(REACHABLE_TIME);
1411b5f410aSitojun
1424d7e99f8Skn ifp->if_nd = nd;
143287546eaSitojun }
144287546eaSitojun
145d6b9e9b9Sitojun void
nd6_ifdetach(struct ifnet * ifp)1464d7e99f8Skn nd6_ifdetach(struct ifnet *ifp)
147d6b9e9b9Sitojun {
1484d7e99f8Skn struct nd_ifinfo *nd = ifp->if_nd;
149d374aaacSitojun
15062cf959dSmpi free(nd, M_IP6NDP, sizeof(*nd));
151287546eaSitojun }
152287546eaSitojun
153287546eaSitojun /*
154287546eaSitojun * Parse multiple ND options.
155287546eaSitojun * This function is much easier to use, for ND routines that do not need
156287546eaSitojun * multiple options of the same type.
157287546eaSitojun */
158287546eaSitojun int
nd6_options(void * opt,int icmp6len,struct nd_opts * ndopts)1592a46a9b4Skn nd6_options(void *opt, int icmp6len, struct nd_opts *ndopts)
160287546eaSitojun {
1610a52e75eSclaudio struct nd_opt_hdr *nd_opt, *next_opt, *last_opt;
162287546eaSitojun int i = 0;
163287546eaSitojun
1642a46a9b4Skn bzero(ndopts, sizeof(*ndopts));
1650a2b5415Skn
1660a2b5415Skn if (icmp6len == 0)
1670a2b5415Skn return 0;
1680a2b5415Skn
1690a52e75eSclaudio next_opt = opt;
1700a52e75eSclaudio last_opt = (struct nd_opt_hdr *)((u_char *)opt + icmp6len);
1712a46a9b4Skn
1720a52e75eSclaudio while (next_opt != NULL) {
17340a2ab36Skn int olen;
174287546eaSitojun
175f704dce3Skn nd_opt = next_opt;
17640a2ab36Skn
17740a2ab36Skn /* make sure nd_opt_len is inside the buffer */
178f704dce3Skn if ((caddr_t)&nd_opt->nd_opt_len >= (caddr_t)last_opt)
17940a2ab36Skn goto invalid;
18040a2ab36Skn
18140a2ab36Skn /* every option must have a length greater than zero */
18240a2ab36Skn olen = nd_opt->nd_opt_len << 3;
18340a2ab36Skn if (olen == 0)
18440a2ab36Skn goto invalid;
18540a2ab36Skn
186f704dce3Skn next_opt = (struct nd_opt_hdr *)((caddr_t)nd_opt + olen);
187f704dce3Skn if (next_opt > last_opt) {
18840a2ab36Skn /* option overruns the end of buffer */
18940a2ab36Skn goto invalid;
190f704dce3Skn } else if (next_opt == last_opt) {
19140a2ab36Skn /* reached the end of options chain */
192f704dce3Skn next_opt = NULL;
19340a2ab36Skn }
19440a2ab36Skn
195287546eaSitojun switch (nd_opt->nd_opt_type) {
196287546eaSitojun case ND_OPT_SOURCE_LINKADDR:
197eaf13d83Sclaudio if (ndopts->nd_opts_src_lladdr != NULL)
198eaf13d83Sclaudio nd6log((LOG_INFO, "duplicated ND6 option found "
199eaf13d83Sclaudio "(type=%d)\n", nd_opt->nd_opt_type));
200eaf13d83Sclaudio else
201eaf13d83Sclaudio ndopts->nd_opts_src_lladdr = nd_opt;
202eaf13d83Sclaudio break;
203287546eaSitojun case ND_OPT_TARGET_LINKADDR:
204eaf13d83Sclaudio if (ndopts->nd_opts_tgt_lladdr != NULL)
205eaf13d83Sclaudio nd6log((LOG_INFO, "duplicated ND6 option found "
206eaf13d83Sclaudio "(type=%d)\n", nd_opt->nd_opt_type));
207eaf13d83Sclaudio else
208eaf13d83Sclaudio ndopts->nd_opts_tgt_lladdr = nd_opt;
209eaf13d83Sclaudio break;
210287546eaSitojun case ND_OPT_MTU:
211287546eaSitojun case ND_OPT_REDIRECTED_HEADER:
212287546eaSitojun case ND_OPT_PREFIX_INFORMATION:
2134043f337Ssthen case ND_OPT_DNSSL:
2144043f337Ssthen case ND_OPT_RDNSS:
215eaf13d83Sclaudio /* Don't warn, not used by kernel */
2164043f337Ssthen break;
217287546eaSitojun default:
218287546eaSitojun /*
219287546eaSitojun * Unknown options must be silently ignored,
220e4d25771Stodd * to accommodate future extension to the protocol.
221287546eaSitojun */
222b79da24aSitojun nd6log((LOG_DEBUG,
223287546eaSitojun "nd6_options: unsupported option %d - "
224b79da24aSitojun "option ignored\n", nd_opt->nd_opt_type));
225eaf13d83Sclaudio break;
226287546eaSitojun }
227287546eaSitojun
228287546eaSitojun i++;
229287546eaSitojun if (i > nd6_maxndopt) {
23007ba5f7cSjca icmp6stat_inc(icp6s_nd_toomanyopt);
231b79da24aSitojun nd6log((LOG_INFO, "too many loop in nd opt\n"));
232287546eaSitojun break;
233287546eaSitojun }
234287546eaSitojun }
235287546eaSitojun
236287546eaSitojun return 0;
23740a2ab36Skn
23840a2ab36Skn invalid:
23940a2ab36Skn bzero(ndopts, sizeof(*ndopts));
24040a2ab36Skn icmp6stat_inc(icp6s_nd_badopt);
24140a2ab36Skn return -1;
242287546eaSitojun }
243287546eaSitojun
244287546eaSitojun /*
2459631a17bSitojun * ND6 timer routine to handle ND6 entries
246287546eaSitojun */
247287546eaSitojun void
nd6_llinfo_settimer(const struct llinfo_nd6 * ln,unsigned int secs)248b7607505Skn nd6_llinfo_settimer(const struct llinfo_nd6 *ln, unsigned int secs)
2499631a17bSitojun {
2503209772dScheloha time_t expire = getuptime() + secs;
251334bfa0aSmpi
252334bfa0aSmpi NET_ASSERT_LOCKED();
2539a2314e5Smpi KASSERT(!ISSET(ln->ln_rt->rt_flags, RTF_LOCAL));
254334bfa0aSmpi
255334bfa0aSmpi ln->ln_rt->rt_expire = expire;
256334bfa0aSmpi if (!timeout_pending(&nd6_timer_to) || expire < nd6_timer_next) {
257334bfa0aSmpi nd6_timer_next = expire;
258334bfa0aSmpi timeout_add_sec(&nd6_timer_to, secs);
2599631a17bSitojun }
2609631a17bSitojun }
2619631a17bSitojun
262a0aa363cSjsing void
nd6_timer(void * unused)263713fe098Skn nd6_timer(void *unused)
264287546eaSitojun {
265334bfa0aSmpi struct llinfo_nd6 *ln, *nln;
2660c275c01Skn time_t uptime, expire;
267a01b2dc3Skn int secs;
268334bfa0aSmpi
269334bfa0aSmpi NET_LOCK();
2700c275c01Skn
2710c275c01Skn uptime = getuptime();
2720c275c01Skn expire = uptime + nd6_gctimer;
2730c275c01Skn
274e298277cSbluhm /* Net lock is exclusive, no nd6 mutex needed for nd6_list here. */
275334bfa0aSmpi TAILQ_FOREACH_SAFE(ln, &nd6_list, ln_list, nln) {
276334bfa0aSmpi struct rtentry *rt = ln->ln_rt;
277334bfa0aSmpi
2780c275c01Skn if (rt->rt_expire && rt->rt_expire <= uptime)
279334bfa0aSmpi if (nd6_llinfo_timer(rt))
280334bfa0aSmpi continue;
281334bfa0aSmpi
282334bfa0aSmpi if (rt->rt_expire && rt->rt_expire < expire)
283334bfa0aSmpi expire = rt->rt_expire;
284334bfa0aSmpi }
285334bfa0aSmpi
2860c275c01Skn secs = expire - uptime;
287a01b2dc3Skn if (secs < 0)
288a01b2dc3Skn secs = 0;
289b089e30eSflorian if (!TAILQ_EMPTY(&nd6_list)) {
2900c275c01Skn nd6_timer_next = uptime + secs;
291a01b2dc3Skn timeout_add_sec(&nd6_timer_to, secs);
292b089e30eSflorian }
293334bfa0aSmpi
294334bfa0aSmpi NET_UNLOCK();
295334bfa0aSmpi }
296334bfa0aSmpi
297334bfa0aSmpi /*
298334bfa0aSmpi * ND timer state handling.
299334bfa0aSmpi *
300334bfa0aSmpi * Returns 1 if `rt' should no longer be used, 0 otherwise.
301334bfa0aSmpi */
302334bfa0aSmpi int
nd6_llinfo_timer(struct rtentry * rt)303334bfa0aSmpi nd6_llinfo_timer(struct rtentry *rt)
304334bfa0aSmpi {
305334bfa0aSmpi struct llinfo_nd6 *ln = (struct llinfo_nd6 *)rt->rt_llinfo;
306334bfa0aSmpi struct sockaddr_in6 *dst = satosin6(rt_key(rt));
3079631a17bSitojun struct ifnet *ifp;
308287546eaSitojun
309*f46db49eSbluhm NET_ASSERT_LOCKED_EXCLUSIVE();
3109631a17bSitojun
311334bfa0aSmpi if ((ifp = if_get(rt->rt_ifidx)) == NULL)
312334bfa0aSmpi return 1;
3139631a17bSitojun
314287546eaSitojun switch (ln->ln_state) {
315287546eaSitojun case ND6_LLINFO_INCOMPLETE:
316287546eaSitojun if (ln->ln_asked < nd6_mmaxtries) {
317287546eaSitojun ln->ln_asked++;
318abcde9bcSkn nd6_llinfo_settimer(ln, RETRANS_TIMER / 1000);
31975660b8fSbluhm nd6_ns_output(ifp, NULL, &dst->sin6_addr,
32075660b8fSbluhm &ln->ln_saddr6, 0);
321287546eaSitojun } else {
322e0e67b98Sbluhm struct mbuf_list ml;
323e0e67b98Sbluhm struct mbuf *m;
324e0e67b98Sbluhm unsigned int len;
325e0e67b98Sbluhm
326e0e67b98Sbluhm mq_delist(&ln->ln_mq, &ml);
327e0e67b98Sbluhm len = ml_len(&ml);
328e0e67b98Sbluhm while ((m = ml_dequeue(&ml)) != NULL) {
329287546eaSitojun /*
330d8a7e3a7Sitojun * Fake rcvif to make the ICMP error
331d8a7e3a7Sitojun * more helpful in diagnosing for the
332d8a7e3a7Sitojun * receiver.
333e0e67b98Sbluhm * XXX: should we consider older rcvif?
334287546eaSitojun */
33528112c65Smpi m->m_pkthdr.ph_ifidx = rt->rt_ifidx;
336d8a7e3a7Sitojun
337287546eaSitojun icmp6_error(m, ICMP6_DST_UNREACH,
338287546eaSitojun ICMP6_DST_UNREACH_ADDR, 0);
339e212adedSkrw }
340e0e67b98Sbluhm
341e0e67b98Sbluhm /* XXXSMP we also discard if other CPU enqueues */
342e0e67b98Sbluhm if (mq_len(&ln->ln_mq) > 0) {
343e0e67b98Sbluhm /* mbuf is back in queue. Discard. */
344e0e67b98Sbluhm atomic_sub_int(&ln_hold_total,
345e0e67b98Sbluhm len + mq_purge(&ln->ln_mq));
346e0e67b98Sbluhm } else
347e0e67b98Sbluhm atomic_sub_int(&ln_hold_total, len);
348e0e67b98Sbluhm
34918e33022Sbluhm nd6_free(rt);
3509631a17bSitojun ln = NULL;
351287546eaSitojun }
352287546eaSitojun break;
35375660b8fSbluhm
354287546eaSitojun case ND6_LLINFO_REACHABLE:
3559631a17bSitojun if (!ND6_LLINFO_PERMANENT(ln)) {
356287546eaSitojun ln->ln_state = ND6_LLINFO_STALE;
357134b71fcSdlg nd6_llinfo_settimer(ln, nd6_gctimer);
358be4e9e12Sitojun }
359287546eaSitojun break;
360be4e9e12Sitojun
361be4e9e12Sitojun case ND6_LLINFO_STALE:
362f3fcf2f3Smcbride case ND6_LLINFO_PURGE:
363be4e9e12Sitojun /* Garbage Collection(RFC 2461 5.3) */
3649631a17bSitojun if (!ND6_LLINFO_PERMANENT(ln)) {
36518e33022Sbluhm nd6_free(rt);
3669631a17bSitojun ln = NULL;
3679631a17bSitojun }
368be4e9e12Sitojun break;
369be4e9e12Sitojun
370287546eaSitojun case ND6_LLINFO_DELAY:
371d374aaacSitojun /* We need NUD */
372287546eaSitojun ln->ln_asked = 1;
373287546eaSitojun ln->ln_state = ND6_LLINFO_PROBE;
374abcde9bcSkn nd6_llinfo_settimer(ln, RETRANS_TIMER / 1000);
37575660b8fSbluhm nd6_ns_output(ifp, &dst->sin6_addr, &dst->sin6_addr,
37675660b8fSbluhm &ln->ln_saddr6, 0);
377287546eaSitojun break;
37875660b8fSbluhm
379287546eaSitojun case ND6_LLINFO_PROBE:
380287546eaSitojun if (ln->ln_asked < nd6_umaxtries) {
381287546eaSitojun ln->ln_asked++;
382abcde9bcSkn nd6_llinfo_settimer(ln, RETRANS_TIMER / 1000);
38375660b8fSbluhm nd6_ns_output(ifp, &dst->sin6_addr, &dst->sin6_addr,
38475660b8fSbluhm &ln->ln_saddr6, 0);
385d8a7e3a7Sitojun } else {
38618e33022Sbluhm nd6_free(rt);
3879631a17bSitojun ln = NULL;
388d8a7e3a7Sitojun }
389287546eaSitojun break;
390287546eaSitojun }
3919631a17bSitojun
392f5e0f62bSmpi if_put(ifp);
393334bfa0aSmpi
394334bfa0aSmpi return (ln == NULL);
395287546eaSitojun }
396287546eaSitojun
397c6bbd2a8Sflorian void
nd6_expire_timer_update(struct in6_ifaddr * ia6)398c6bbd2a8Sflorian nd6_expire_timer_update(struct in6_ifaddr *ia6)
399c6bbd2a8Sflorian {
400c6bbd2a8Sflorian time_t expire_time = INT64_MAX;
401c6bbd2a8Sflorian
402c6bbd2a8Sflorian if (ia6->ia6_lifetime.ia6t_vltime != ND6_INFINITE_LIFETIME)
403c6bbd2a8Sflorian expire_time = ia6->ia6_lifetime.ia6t_expire;
404c6bbd2a8Sflorian
405c6bbd2a8Sflorian if (!(ia6->ia6_flags & IN6_IFF_DEPRECATED) &&
406c6bbd2a8Sflorian ia6->ia6_lifetime.ia6t_pltime != ND6_INFINITE_LIFETIME &&
407c6bbd2a8Sflorian expire_time > ia6->ia6_lifetime.ia6t_preferred)
408c6bbd2a8Sflorian expire_time = ia6->ia6_lifetime.ia6t_preferred;
409c6bbd2a8Sflorian
410c6bbd2a8Sflorian if (expire_time == INT64_MAX)
411c6bbd2a8Sflorian return;
412c6bbd2a8Sflorian
413c6bbd2a8Sflorian /*
414c6bbd2a8Sflorian * IFA6_IS_INVALID() and IFA6_IS_DEPRECATED() check for uptime
415c6bbd2a8Sflorian * greater than ia6t_expire or ia6t_preferred, not greater or equal.
416c6bbd2a8Sflorian * Schedule timeout one second later so that either IFA6_IS_INVALID()
417c6bbd2a8Sflorian * or IFA6_IS_DEPRECATED() is true.
418c6bbd2a8Sflorian */
419c6bbd2a8Sflorian expire_time++;
420c6bbd2a8Sflorian
421334bfa0aSmpi if (!timeout_pending(&nd6_expire_timeout) ||
422334bfa0aSmpi nd6_expire_next > expire_time) {
4230c275c01Skn int secs;
4240c275c01Skn
4253209772dScheloha secs = expire_time - getuptime();
426c6bbd2a8Sflorian if (secs < 0)
427c6bbd2a8Sflorian secs = 0;
428c6bbd2a8Sflorian
429c6bbd2a8Sflorian timeout_add_sec(&nd6_expire_timeout, secs);
430334bfa0aSmpi nd6_expire_next = expire_time;
431c6bbd2a8Sflorian }
432c6bbd2a8Sflorian }
433c6bbd2a8Sflorian
4349631a17bSitojun /*
435088d4855Smpi * Expire interface addresses.
4369631a17bSitojun */
4379631a17bSitojun void
nd6_expire(void * unused)438088d4855Smpi nd6_expire(void *unused)
4399631a17bSitojun {
440a44d5cf0Smpi struct ifnet *ifp;
4419631a17bSitojun
442aa28b9a6Smpi NET_LOCK();
44322e88dadSmpi
444ccb45f8eSkn TAILQ_FOREACH(ifp, &ifnetlist, if_list) {
445a44d5cf0Smpi struct ifaddr *ifa, *nifa;
446a44d5cf0Smpi struct in6_ifaddr *ia6;
447a44d5cf0Smpi
448a44d5cf0Smpi TAILQ_FOREACH_SAFE(ifa, &ifp->if_addrlist, ifa_list, nifa) {
449a44d5cf0Smpi if (ifa->ifa_addr->sa_family != AF_INET6)
450a44d5cf0Smpi continue;
45177b9cbdfSkn ia6 = ifatoia6(ifa);
452d8a7e3a7Sitojun /* check address lifetime */
453d8a7e3a7Sitojun if (IFA6_IS_INVALID(ia6)) {
454d8a7e3a7Sitojun in6_purgeaddr(&ia6->ia_ifa);
455d8a7e3a7Sitojun } else {
456c6bbd2a8Sflorian if (IFA6_IS_DEPRECATED(ia6))
457c6bbd2a8Sflorian ia6->ia6_flags |= IN6_IFF_DEPRECATED;
458c6bbd2a8Sflorian nd6_expire_timer_update(ia6);
459d8a7e3a7Sitojun }
460d8a7e3a7Sitojun }
461a44d5cf0Smpi }
462d8a7e3a7Sitojun
463aa28b9a6Smpi NET_UNLOCK();
464287546eaSitojun }
465287546eaSitojun
466a09574ebSkettenis void
nd6_expire_timer(void * unused)467088d4855Smpi nd6_expire_timer(void *unused)
468a09574ebSkettenis {
46993865884Ssashan task_add(net_tq(0), &nd6_expire_task);
470a09574ebSkettenis }
471a09574ebSkettenis
47222770369Sitojun /*
47322770369Sitojun * Nuke neighbor cache/prefix/default router management table, right before
47422770369Sitojun * ifp goes away.
47522770369Sitojun */
47622770369Sitojun void
nd6_purge(struct ifnet * ifp)477ee37ea65Smcbride nd6_purge(struct ifnet *ifp)
47822770369Sitojun {
47922770369Sitojun struct llinfo_nd6 *ln, *nln;
48022770369Sitojun
481e298277cSbluhm NET_ASSERT_LOCKED_EXCLUSIVE();
48245ffa37bSmpi
48322770369Sitojun /*
48422770369Sitojun * Nuke neighbor cache entries for the ifp.
48522770369Sitojun */
48692c821ddSbluhm TAILQ_FOREACH_SAFE(ln, &nd6_list, ln_list, nln) {
48722770369Sitojun struct rtentry *rt;
48822770369Sitojun struct sockaddr_dl *sdl;
48922770369Sitojun
49022770369Sitojun rt = ln->ln_rt;
49192c821ddSbluhm if (rt != NULL && rt->rt_gateway != NULL &&
49222770369Sitojun rt->rt_gateway->sa_family == AF_LINK) {
493c7b7b779Sbluhm sdl = satosdl(rt->rt_gateway);
49422770369Sitojun if (sdl->sdl_index == ifp->if_index)
49518e33022Sbluhm nd6_free(rt);
49622770369Sitojun }
49722770369Sitojun }
49822770369Sitojun }
49922770369Sitojun
500287546eaSitojun struct rtentry *
nd6_lookup(const struct in6_addr * addr6,int create,struct ifnet * ifp,u_int rtableid)501b7607505Skn nd6_lookup(const struct in6_addr *addr6, int create, struct ifnet *ifp,
502f4d1af37Smikeb u_int rtableid)
503287546eaSitojun {
504287546eaSitojun struct rtentry *rt;
505287546eaSitojun struct sockaddr_in6 sin6;
5065148b194Smpi int flags;
507287546eaSitojun
508287546eaSitojun bzero(&sin6, sizeof(sin6));
509287546eaSitojun sin6.sin6_len = sizeof(struct sockaddr_in6);
510287546eaSitojun sin6.sin6_family = AF_INET6;
511287546eaSitojun sin6.sin6_addr = *addr6;
51212d3c25cSclaudio flags = (create) ? RT_RESOLVE : 0;
513d8a7e3a7Sitojun
5145148b194Smpi rt = rtalloc(sin6tosa(&sin6), flags, rtableid);
51516119bbfSmpi if (rt != NULL && (rt->rt_flags & RTF_LLINFO) == 0) {
516287546eaSitojun /*
517287546eaSitojun * This is the case for the default route.
518287546eaSitojun * If we want to create a neighbor cache for the address, we
519287546eaSitojun * should free the route for the destination and allocate an
520287546eaSitojun * interface route.
521287546eaSitojun */
522287546eaSitojun if (create) {
52327ae666cSmpi rtfree(rt);
52427ae666cSmpi rt = NULL;
525287546eaSitojun }
526287546eaSitojun }
52716119bbfSmpi if (rt == NULL) {
528287546eaSitojun if (create && ifp) {
529cb24f5e5Sclaudio struct rt_addrinfo info;
5305e9e8a91Sbluhm struct llinfo_nd6 *ln;
53166f69fe1Smpi struct ifaddr *ifa;
5320ffd01d4Sbluhm int error;
533d374aaacSitojun
534287546eaSitojun /*
535287546eaSitojun * If no route is available and create is set,
536287546eaSitojun * we allocate a host route for the destination
537287546eaSitojun * and treat it like an interface route.
538287546eaSitojun * This hack is necessary for a neighbor which can't
539287546eaSitojun * be covered by our own prefix.
540287546eaSitojun */
54166f69fe1Smpi ifa = ifaof_ifpforaddr(sin6tosa(&sin6), ifp);
542287546eaSitojun if (ifa == NULL)
543287546eaSitojun return (NULL);
544287546eaSitojun
545287546eaSitojun /*
546287546eaSitojun * Create a new route. RTF_LLINFO is necessary
547287546eaSitojun * to create a Neighbor Cache entry for the
548287546eaSitojun * destination in nd6_rtrequest which will be
5497ffb277fSbluhm * called in rtrequest.
550287546eaSitojun */
551cb24f5e5Sclaudio bzero(&info, sizeof(info));
55266f69fe1Smpi info.rti_ifa = ifa;
553c29fc46aSmpi info.rti_flags = RTF_HOST | RTF_LLINFO;
554c3c56496Sbluhm info.rti_info[RTAX_DST] = sin6tosa(&sin6);
555c7b7b779Sbluhm info.rti_info[RTAX_GATEWAY] = sdltosa(ifp->if_sadl);
5567ffb277fSbluhm error = rtrequest(RTM_ADD, &info, RTP_CONNECTED, &rt,
5570ffd01d4Sbluhm rtableid);
5580ffd01d4Sbluhm if (error)
559287546eaSitojun return (NULL);
560*f46db49eSbluhm mtx_enter(&nd6_mtx);
5615e9e8a91Sbluhm ln = (struct llinfo_nd6 *)rt->rt_llinfo;
5625e9e8a91Sbluhm if (ln != NULL)
563287546eaSitojun ln->ln_state = ND6_LLINFO_NOSTATE;
564*f46db49eSbluhm mtx_leave(&nd6_mtx);
565f6e55599Sitojun } else
566287546eaSitojun return (NULL);
567287546eaSitojun }
568287546eaSitojun /*
569287546eaSitojun * Validation for the entry.
570d8a7e3a7Sitojun * Note that the check for rt_llinfo is necessary because a cloned
571d8a7e3a7Sitojun * route from a parent route that has the L flag (e.g. the default
572d8a7e3a7Sitojun * route to a p2p interface) may have the flag, too, while the
573d8a7e3a7Sitojun * destination is not actually a neighbor.
574287546eaSitojun */
575287546eaSitojun if ((rt->rt_flags & RTF_GATEWAY) || (rt->rt_flags & RTF_LLINFO) == 0 ||
576d8a7e3a7Sitojun rt->rt_gateway->sa_family != AF_LINK || rt->rt_llinfo == NULL ||
577248f6870Smpi (ifp != NULL && rt->rt_ifidx != ifp->if_index)) {
578287546eaSitojun if (create) {
579bbcf0337Smpi char addr[INET6_ADDRSTRLEN];
58035075f95Smpi nd6log((LOG_DEBUG, "%s: failed to lookup %s (if=%s)\n",
58135075f95Smpi __func__,
582bbcf0337Smpi inet_ntop(AF_INET6, addr6, addr, sizeof(addr)),
583da592434Sitojun ifp ? ifp->if_xname : "unspec"));
584287546eaSitojun }
58516119bbfSmpi rtfree(rt);
586d8a7e3a7Sitojun return (NULL);
587287546eaSitojun }
588287546eaSitojun return (rt);
589287546eaSitojun }
590287546eaSitojun
591287546eaSitojun /*
592287546eaSitojun * Detect if a given IPv6 address identifies a neighbor on a given link.
593287546eaSitojun * XXX: should take care of the destination of a p2p link?
594287546eaSitojun */
595287546eaSitojun int
nd6_is_addr_neighbor(const struct sockaddr_in6 * addr,struct ifnet * ifp)596b7607505Skn nd6_is_addr_neighbor(const struct sockaddr_in6 *addr, struct ifnet *ifp)
597287546eaSitojun {
598ef6620bcSmpi struct in6_ifaddr *ia6;
599ef6620bcSmpi struct ifaddr *ifa;
600d8a7e3a7Sitojun struct rtentry *rt;
601287546eaSitojun
602cfb6b8dfSitojun /*
603cfb6b8dfSitojun * A link-local address is always a neighbor.
604cfb6b8dfSitojun * XXX: we should use the sin6_scope_id field rather than the embedded
605cfb6b8dfSitojun * interface index.
606d8a7e3a7Sitojun * XXX: a link does not necessarily specify a single interface.
607cfb6b8dfSitojun */
608cfb6b8dfSitojun if (IN6_IS_ADDR_LINKLOCAL(&addr->sin6_addr) &&
609cfb6b8dfSitojun ntohs(*(u_int16_t *)&addr->sin6_addr.s6_addr[2]) == ifp->if_index)
610287546eaSitojun return (1);
611287546eaSitojun
612ef6620bcSmpi TAILQ_FOREACH(ifa, &ifp->if_addrlist, ifa_list) {
613ef6620bcSmpi if (ifa->ifa_addr->sa_family != AF_INET6)
614ef6620bcSmpi continue;
615ef6620bcSmpi
616ef6620bcSmpi ia6 = ifatoia6(ifa);
617ef6620bcSmpi
618ef6620bcSmpi /* Prefix check down below. */
619ef6620bcSmpi if (ia6->ia6_flags & IN6_IFF_AUTOCONF)
620ef6620bcSmpi continue;
621ef6620bcSmpi
622ef6620bcSmpi if (IN6_ARE_MASKED_ADDR_EQUAL(&addr->sin6_addr,
623ef6620bcSmpi &ia6->ia_addr.sin6_addr,
624ef6620bcSmpi &ia6->ia_prefixmask.sin6_addr))
625ef6620bcSmpi return (1);
626ef6620bcSmpi }
627ef6620bcSmpi
628287546eaSitojun /*
629287546eaSitojun * Even if the address matches none of our addresses, it might be
630287546eaSitojun * in the neighbor cache.
631287546eaSitojun */
63216119bbfSmpi rt = nd6_lookup(&addr->sin6_addr, 0, ifp, ifp->if_rdomain);
63316119bbfSmpi if (rt != NULL) {
63416119bbfSmpi rtfree(rt);
635287546eaSitojun return (1);
63616119bbfSmpi }
637287546eaSitojun
638287546eaSitojun return (0);
639287546eaSitojun }
640287546eaSitojun
641c370e97fSmpi void
nd6_invalidate(struct rtentry * rt)642c370e97fSmpi nd6_invalidate(struct rtentry *rt)
643c370e97fSmpi {
644e298277cSbluhm struct llinfo_nd6 *ln;
6456143f866Sflorian struct sockaddr_dl *sdl = satosdl(rt->rt_gateway);
646c370e97fSmpi
647e298277cSbluhm mtx_enter(&nd6_mtx);
648e298277cSbluhm ln = (struct llinfo_nd6 *)rt->rt_llinfo;
649e298277cSbluhm if (ln == NULL) {
650e298277cSbluhm mtx_leave(&nd6_mtx);
651e298277cSbluhm return;
652e298277cSbluhm }
653e0e67b98Sbluhm atomic_sub_int(&ln_hold_total, mq_purge(&ln->ln_mq));
6546143f866Sflorian sdl->sdl_alen = 0;
655c370e97fSmpi ln->ln_state = ND6_LLINFO_INCOMPLETE;
656c370e97fSmpi ln->ln_asked = 0;
657e298277cSbluhm mtx_leave(&nd6_mtx);
658c370e97fSmpi }
659c370e97fSmpi
660287546eaSitojun /*
661287546eaSitojun * Free an nd6 llinfo entry.
662287546eaSitojun */
66318e33022Sbluhm void
nd6_free(struct rtentry * rt)66418e33022Sbluhm nd6_free(struct rtentry *rt)
665287546eaSitojun {
66618e33022Sbluhm struct llinfo_nd6 *ln = (struct llinfo_nd6 *)rt->rt_llinfo;
667c3c56496Sbluhm struct in6_addr in6 = satosin6(rt_key(rt))->sin6_addr;
668248f6870Smpi struct ifnet *ifp;
66945ffa37bSmpi
670*f46db49eSbluhm NET_ASSERT_LOCKED_EXCLUSIVE();
671287546eaSitojun
672248f6870Smpi ifp = if_get(rt->rt_ifidx);
673f4f4d166Sitojun
67481d38878Smpi if (!ip6_forwarding) {
6754a2f474dSflorian if (ln->ln_router) {
676f4f4d166Sitojun /*
677f4f4d166Sitojun * rt6_flush must be called whether or not the neighbor
678f4f4d166Sitojun * is in the Default Router List.
679f4f4d166Sitojun * See a corresponding comment in nd6_na_input().
680f4f4d166Sitojun */
681248f6870Smpi rt6_flush(&in6, ifp);
682f4f4d166Sitojun }
683287546eaSitojun }
684287546eaSitojun
6856348db95Sbluhm KASSERT(!ISSET(rt->rt_flags, RTF_LOCAL));
6864dfec2cfSmpi nd6_invalidate(rt);
6874dfec2cfSmpi
68829760ae1Sitojun /*
68929760ae1Sitojun * Detach the route from the routing tree and the list of neighbor
69029760ae1Sitojun * caches, and disable the route entry not to be used in already
69129760ae1Sitojun * cached routes.
69229760ae1Sitojun */
693c370e97fSmpi if (!ISSET(rt->rt_flags, RTF_STATIC|RTF_CACHED))
694c4cbcae8Sbluhm rtdeletemsg(rt, ifp, ifp->if_rdomain);
69529760ae1Sitojun
696248f6870Smpi if_put(ifp);
697287546eaSitojun }
698287546eaSitojun
699287546eaSitojun /*
700287546eaSitojun * Upper-layer reachability hint for Neighbor Unreachability Detection.
701287546eaSitojun *
7028b542bbeSpascoe * XXX cost-effective methods?
703287546eaSitojun */
704287546eaSitojun void
nd6_nud_hint(struct rtentry * rt)705a7fa3e84Smpi nd6_nud_hint(struct rtentry *rt)
706287546eaSitojun {
707287546eaSitojun struct llinfo_nd6 *ln;
708a7fa3e84Smpi struct ifnet *ifp;
709287546eaSitojun
710*f46db49eSbluhm NET_ASSERT_LOCKED_EXCLUSIVE();
711*f46db49eSbluhm
712a7fa3e84Smpi ifp = if_get(rt->rt_ifidx);
713a7fa3e84Smpi if (ifp == NULL)
714287546eaSitojun return;
715287546eaSitojun
716f6e55599Sitojun if ((rt->rt_flags & RTF_GATEWAY) != 0 ||
717f6e55599Sitojun (rt->rt_flags & RTF_LLINFO) == 0 ||
7189c0643cdSbluhm rt->rt_llinfo == NULL || rt->rt_gateway == NULL ||
719f6e55599Sitojun rt->rt_gateway->sa_family != AF_LINK) {
720287546eaSitojun /* This is not a host route. */
721a7fa3e84Smpi goto out;
722287546eaSitojun }
723287546eaSitojun
724287546eaSitojun ln = (struct llinfo_nd6 *)rt->rt_llinfo;
725804d8827Sitojun if (ln->ln_state < ND6_LLINFO_REACHABLE)
726a7fa3e84Smpi goto out;
727287546eaSitojun
728f6e55599Sitojun /*
729f6e55599Sitojun * if we get upper-layer reachability confirmation many times,
730f6e55599Sitojun * it is possible we have false information.
731f6e55599Sitojun */
732f6e55599Sitojun ln->ln_byhint++;
733f6e55599Sitojun if (ln->ln_byhint > nd6_maxnudhint)
734a7fa3e84Smpi goto out;
735f6e55599Sitojun
736287546eaSitojun ln->ln_state = ND6_LLINFO_REACHABLE;
737a7fa3e84Smpi if (!ND6_LLINFO_PERMANENT(ln))
738cc076951Skn nd6_llinfo_settimer(ln, ifp->if_nd->reachable);
739a7fa3e84Smpi out:
740a7fa3e84Smpi if_put(ifp);
741287546eaSitojun }
742287546eaSitojun
743287546eaSitojun void
nd6_rtrequest(struct ifnet * ifp,int req,struct rtentry * rt)744dcb17c31Smpi nd6_rtrequest(struct ifnet *ifp, int req, struct rtentry *rt)
745287546eaSitojun {
746287546eaSitojun struct sockaddr *gate = rt->rt_gateway;
7475e9e8a91Sbluhm struct llinfo_nd6 *ln;
748287546eaSitojun struct ifaddr *ifa;
7497e3957d1Sbluhm struct in6_ifaddr *ifa6;
750287546eaSitojun
7514cb08838Sclaudio if (ISSET(rt->rt_flags, RTF_GATEWAY|RTF_MULTICAST|RTF_MPLS))
752287546eaSitojun return;
753287546eaSitojun
754d8a7e3a7Sitojun if (nd6_need_cache(ifp) == 0 && (rt->rt_flags & RTF_HOST) == 0) {
755d8a7e3a7Sitojun /*
756d8a7e3a7Sitojun * This is probably an interface direct route for a link
757d8a7e3a7Sitojun * which does not need neighbor caches (e.g. fe80::%lo0/64).
758d8a7e3a7Sitojun * We do not need special treatment below for such a route.
759d8a7e3a7Sitojun * Moreover, the RTF_LLINFO flag which would be set below
760d8a7e3a7Sitojun * would annoy the ndp(8) command.
761d8a7e3a7Sitojun */
762d8a7e3a7Sitojun return;
763d8a7e3a7Sitojun }
764d8a7e3a7Sitojun
765af1344beSbluhm if (req == RTM_RESOLVE && nd6_need_cache(ifp) == 0) {
766d8a7e3a7Sitojun /*
767af1344beSbluhm * For routing daemons like ospf6d we allow neighbor discovery
7683bb2119cSkn * based on the cloning route only. This allows us to send
769af1344beSbluhm * packets directly into a network without having an address
770af1344beSbluhm * with matching prefix on the interface. If the cloning
7713bb2119cSkn * route is used for an 6to4 interface, we would mistakenly
772af1344beSbluhm * make a neighbor cache for the host route, and would see
773af1344beSbluhm * strange neighbor solicitation for the corresponding
774af1344beSbluhm * destination. In order to avoid confusion, we check if the
775af1344beSbluhm * interface is suitable for neighbor discovery, and stop the
776d8a7e3a7Sitojun * process if not. Additionally, we remove the LLINFO flag
777d8a7e3a7Sitojun * so that ndp(8) will not try to get the neighbor information
778d8a7e3a7Sitojun * of the destination.
779d8a7e3a7Sitojun */
780d8a7e3a7Sitojun rt->rt_flags &= ~RTF_LLINFO;
781d8a7e3a7Sitojun return;
782d8a7e3a7Sitojun }
783d8a7e3a7Sitojun
784287546eaSitojun switch (req) {
785287546eaSitojun case RTM_ADD:
786f583c2e8Sbluhm if (rt->rt_flags & RTF_CLONING) {
787f583c2e8Sbluhm rt->rt_expire = 0;
788287546eaSitojun break;
789287546eaSitojun }
790f583c2e8Sbluhm if ((rt->rt_flags & RTF_LOCAL) && rt->rt_llinfo == NULL)
791f583c2e8Sbluhm rt->rt_expire = 0;
792287546eaSitojun /* FALLTHROUGH */
793287546eaSitojun case RTM_RESOLVE:
794287546eaSitojun if (gate->sa_family != AF_LINK ||
795cfc71c8bSclaudio gate->sa_len < sizeof(struct sockaddr_dl)) {
79686b61919Smpi log(LOG_DEBUG, "%s: bad gateway value: %s\n",
79786b61919Smpi __func__, ifp->if_xname);
798287546eaSitojun break;
799287546eaSitojun }
800c7b7b779Sbluhm satosdl(gate)->sdl_type = ifp->if_type;
801c7b7b779Sbluhm satosdl(gate)->sdl_index = ifp->if_index;
802287546eaSitojun /*
803287546eaSitojun * Case 2: This route may come from cloning, or a manual route
804287546eaSitojun * add with a LL address.
805287546eaSitojun */
80693fbd125Sbluhm ln = pool_get(&nd6_pool, PR_NOWAIT | PR_ZERO);
8079c0643cdSbluhm if (ln == NULL) {
80893fbd125Sbluhm log(LOG_DEBUG, "%s: pool get failed\n", __func__);
809287546eaSitojun break;
810287546eaSitojun }
811e298277cSbluhm
812e298277cSbluhm mtx_enter(&nd6_mtx);
813e298277cSbluhm if (rt->rt_llinfo != NULL) {
814e298277cSbluhm /* we lost the race, another thread has entered it */
815e298277cSbluhm mtx_leave(&nd6_mtx);
816e298277cSbluhm pool_put(&nd6_pool, ln);
817e298277cSbluhm break;
818e298277cSbluhm }
819287546eaSitojun nd6_inuse++;
820e298277cSbluhm mq_init(&ln->ln_mq, LN_HOLD_QUEUE, IPL_SOFTNET);
821e298277cSbluhm rt->rt_llinfo = (caddr_t)ln;
822287546eaSitojun ln->ln_rt = rt;
823b30bd431Sbluhm rt->rt_flags |= RTF_LLINFO;
824b30bd431Sbluhm TAILQ_INSERT_HEAD(&nd6_list, ln, ln_list);
825287546eaSitojun /* this is required for "ndp" command. - shin */
826287546eaSitojun if (req == RTM_ADD) {
827287546eaSitojun /*
828287546eaSitojun * gate should have some valid AF_LINK entry,
8293bc414e3Sdlg * and ln expire should have some lifetime
830287546eaSitojun * which is specified by ndp command.
831287546eaSitojun */
832287546eaSitojun ln->ln_state = ND6_LLINFO_REACHABLE;
833f6e55599Sitojun ln->ln_byhint = 0;
834287546eaSitojun } else {
835287546eaSitojun /*
836287546eaSitojun * When req == RTM_RESOLVE, rt is created and
837287546eaSitojun * initialized in rtrequest(), so rt_expire is 0.
838287546eaSitojun */
839287546eaSitojun ln->ln_state = ND6_LLINFO_NOSTATE;
8409631a17bSitojun nd6_llinfo_settimer(ln, 0);
841287546eaSitojun }
842287546eaSitojun
843287546eaSitojun /*
844f3fcf2f3Smcbride * If we have too many cache entries, initiate immediate
845f3fcf2f3Smcbride * purging for some "less recently used" entries. Note that
846f3fcf2f3Smcbride * we cannot directly call nd6_free() here because it would
8473bb2119cSkn * cause re-entering rtable related routines triggering
8483bb2119cSkn * lock-order-reversal problems.
849f3fcf2f3Smcbride */
850f3fcf2f3Smcbride if (ip6_neighborgcthresh >= 0 &&
851f3fcf2f3Smcbride nd6_inuse >= ip6_neighborgcthresh) {
852f3fcf2f3Smcbride int i;
853f3fcf2f3Smcbride
85492c821ddSbluhm for (i = 0; i < 10; i++) {
85592c821ddSbluhm struct llinfo_nd6 *ln_end;
85692c821ddSbluhm
85792c821ddSbluhm ln_end = TAILQ_LAST(&nd6_list, llinfo_nd6_head);
85892c821ddSbluhm if (ln_end == ln)
85992c821ddSbluhm break;
860f3fcf2f3Smcbride
861f3fcf2f3Smcbride /* Move this entry to the head */
86292c821ddSbluhm TAILQ_REMOVE(&nd6_list, ln_end, ln_list);
86392c821ddSbluhm TAILQ_INSERT_HEAD(&nd6_list, ln_end, ln_list);
864f3fcf2f3Smcbride
865f3fcf2f3Smcbride if (ND6_LLINFO_PERMANENT(ln_end))
866f3fcf2f3Smcbride continue;
867f3fcf2f3Smcbride
868f3fcf2f3Smcbride if (ln_end->ln_state > ND6_LLINFO_INCOMPLETE)
869f3fcf2f3Smcbride ln_end->ln_state = ND6_LLINFO_STALE;
870f3fcf2f3Smcbride else
871f3fcf2f3Smcbride ln_end->ln_state = ND6_LLINFO_PURGE;
872f3fcf2f3Smcbride nd6_llinfo_settimer(ln_end, 0);
873f3fcf2f3Smcbride }
874f3fcf2f3Smcbride }
875f3fcf2f3Smcbride
876f3fcf2f3Smcbride /*
877287546eaSitojun * check if rt_key(rt) is one of my address assigned
878287546eaSitojun * to the interface.
879287546eaSitojun */
8807e3957d1Sbluhm ifa6 = in6ifa_ifpwithaddr(ifp,
8817e3957d1Sbluhm &satosin6(rt_key(rt))->sin6_addr);
8827e3957d1Sbluhm ifa = ifa6 ? &ifa6->ia_ifa : NULL;
883b30bd431Sbluhm if (ifa != NULL ||
884b30bd431Sbluhm (rt->rt_flags & RTF_ANNOUNCE)) {
885287546eaSitojun ln->ln_state = ND6_LLINFO_REACHABLE;
886f6e55599Sitojun ln->ln_byhint = 0;
887334bfa0aSmpi rt->rt_expire = 0;
888b30bd431Sbluhm }
889b30bd431Sbluhm mtx_leave(&nd6_mtx);
890f4f4d166Sitojun
891f4f4d166Sitojun /* join solicited node multicast for proxy ND */
892b30bd431Sbluhm if (ifa == NULL &&
893b30bd431Sbluhm (rt->rt_flags & RTF_ANNOUNCE) &&
894b30bd431Sbluhm (ifp->if_flags & IFF_MULTICAST)) {
895f4f4d166Sitojun struct in6_addr llsol;
896f4f4d166Sitojun int error;
897f4f4d166Sitojun
898c3c56496Sbluhm llsol = satosin6(rt_key(rt))->sin6_addr;
899f4f4d166Sitojun llsol.s6_addr16[0] = htons(0xff02);
900f4f4d166Sitojun llsol.s6_addr16[1] = htons(ifp->if_index);
901f4f4d166Sitojun llsol.s6_addr32[1] = 0;
902f4f4d166Sitojun llsol.s6_addr32[2] = htonl(1);
903f4f4d166Sitojun llsol.s6_addr8[12] = 0xff;
904f4f4d166Sitojun
905e298277cSbluhm KERNEL_LOCK();
906d8a7e3a7Sitojun if (in6_addmulti(&llsol, ifp, &error)) {
907bbcf0337Smpi char addr[INET6_ADDRSTRLEN];
908d8a7e3a7Sitojun nd6log((LOG_ERR, "%s: failed to join "
909d8a7e3a7Sitojun "%s (errno=%d)\n", ifp->if_xname,
910bbcf0337Smpi inet_ntop(AF_INET6, &llsol,
911bbcf0337Smpi addr, sizeof(addr)),
912bbcf0337Smpi error));
913d8a7e3a7Sitojun }
914e298277cSbluhm KERNEL_UNLOCK();
915f4f4d166Sitojun }
916287546eaSitojun break;
917287546eaSitojun
918287546eaSitojun case RTM_DELETE:
919e298277cSbluhm mtx_enter(&nd6_mtx);
920e298277cSbluhm ln = (struct llinfo_nd6 *)rt->rt_llinfo;
921e298277cSbluhm if (ln == NULL) {
922e298277cSbluhm /* we lost the race, another thread has removed it */
923e298277cSbluhm mtx_leave(&nd6_mtx);
924287546eaSitojun break;
925e298277cSbluhm }
926e298277cSbluhm nd6_inuse--;
927e298277cSbluhm TAILQ_REMOVE(&nd6_list, ln, ln_list);
928e298277cSbluhm rt->rt_expire = 0;
929e298277cSbluhm rt->rt_llinfo = NULL;
930e298277cSbluhm rt->rt_flags &= ~RTF_LLINFO;
931e298277cSbluhm atomic_sub_int(&ln_hold_total, mq_purge(&ln->ln_mq));
932e298277cSbluhm mtx_leave(&nd6_mtx);
933e298277cSbluhm
934e298277cSbluhm pool_put(&nd6_pool, ln);
935e298277cSbluhm
936f4f4d166Sitojun /* leave from solicited node multicast for proxy ND */
937f4f4d166Sitojun if ((rt->rt_flags & RTF_ANNOUNCE) != 0 &&
938f4f4d166Sitojun (ifp->if_flags & IFF_MULTICAST) != 0) {
939f4f4d166Sitojun struct in6_addr llsol;
940f4f4d166Sitojun struct in6_multi *in6m;
941f4f4d166Sitojun
942c3c56496Sbluhm llsol = satosin6(rt_key(rt))->sin6_addr;
943f4f4d166Sitojun llsol.s6_addr16[0] = htons(0xff02);
944f4f4d166Sitojun llsol.s6_addr16[1] = htons(ifp->if_index);
945f4f4d166Sitojun llsol.s6_addr32[1] = 0;
946f4f4d166Sitojun llsol.s6_addr32[2] = htonl(1);
947f4f4d166Sitojun llsol.s6_addr8[12] = 0xff;
948f4f4d166Sitojun
949e298277cSbluhm KERNEL_LOCK();
950f4f4d166Sitojun IN6_LOOKUP_MULTI(llsol, ifp, in6m);
951f4f4d166Sitojun if (in6m)
952f4f4d166Sitojun in6_delmulti(in6m);
953e298277cSbluhm KERNEL_UNLOCK();
954f4f4d166Sitojun }
955c370e97fSmpi break;
956c370e97fSmpi
957c370e97fSmpi case RTM_INVALIDATE:
958ad57c59cSbluhm if (!ISSET(rt->rt_flags, RTF_LOCAL))
959c370e97fSmpi nd6_invalidate(rt);
960c370e97fSmpi break;
961287546eaSitojun }
962287546eaSitojun }
963287546eaSitojun
964287546eaSitojun int
nd6_ioctl(u_long cmd,caddr_t data,struct ifnet * ifp)965ee37ea65Smcbride nd6_ioctl(u_long cmd, caddr_t data, struct ifnet *ifp)
966287546eaSitojun {
967287546eaSitojun struct in6_ndireq *ndi = (struct in6_ndireq *)data;
968287546eaSitojun struct in6_nbrinfo *nbi = (struct in6_nbrinfo *)data;
969287546eaSitojun struct rtentry *rt;
970287546eaSitojun
971287546eaSitojun switch (cmd) {
972d6b9e9b9Sitojun case SIOCGIFINFO_IN6:
9736a1c2aefSbluhm NET_LOCK_SHARED();
974cc076951Skn ndi->ndi = *ifp->if_nd;
9756a1c2aefSbluhm NET_UNLOCK_SHARED();
976dd66399bStb return (0);
977287546eaSitojun case SIOCGNBRINFO_IN6:
978287546eaSitojun {
979287546eaSitojun struct llinfo_nd6 *ln;
980287546eaSitojun struct in6_addr nb_addr = nbi->addr; /* make local for safety */
981f303499dSdlg time_t expire;
982287546eaSitojun
9836a1c2aefSbluhm NET_LOCK_SHARED();
984287546eaSitojun /*
985287546eaSitojun * XXX: KAME specific hack for scoped addresses
986287546eaSitojun * XXXX: for other scopes than link-local?
987287546eaSitojun */
988a37edb63Skn if (IN6_IS_ADDR_LINKLOCAL(&nb_addr) ||
989a37edb63Skn IN6_IS_ADDR_MC_LINKLOCAL(&nb_addr)) {
990287546eaSitojun u_int16_t *idp = (u_int16_t *)&nb_addr.s6_addr[2];
991287546eaSitojun
992287546eaSitojun if (*idp == 0)
993287546eaSitojun *idp = htons(ifp->if_index);
994287546eaSitojun }
995287546eaSitojun
99616119bbfSmpi rt = nd6_lookup(&nb_addr, 0, ifp, ifp->if_rdomain);
997*f46db49eSbluhm mtx_enter(&nd6_mtx);
99816119bbfSmpi if (rt == NULL ||
999d8a7e3a7Sitojun (ln = (struct llinfo_nd6 *)rt->rt_llinfo) == NULL) {
1000*f46db49eSbluhm mtx_leave(&nd6_mtx);
100116119bbfSmpi rtfree(rt);
10026a1c2aefSbluhm NET_UNLOCK_SHARED();
1003dd66399bStb return (EINVAL);
1004287546eaSitojun }
10053bc414e3Sdlg expire = ln->ln_rt->rt_expire;
1006f303499dSdlg if (expire != 0) {
10073209772dScheloha expire -= getuptime();
10083209772dScheloha expire += gettime();
1009f303499dSdlg }
1010f303499dSdlg
1011287546eaSitojun nbi->state = ln->ln_state;
1012287546eaSitojun nbi->asked = ln->ln_asked;
1013287546eaSitojun nbi->isrouter = ln->ln_router;
1014f303499dSdlg nbi->expire = expire;
1015*f46db49eSbluhm mtx_leave(&nd6_mtx);
1016287546eaSitojun
1017dd66399bStb rtfree(rt);
10186a1c2aefSbluhm NET_UNLOCK_SHARED();
1019dd66399bStb return (0);
1020287546eaSitojun }
1021287546eaSitojun }
1022dd66399bStb return (0);
1023287546eaSitojun }
1024287546eaSitojun
1025287546eaSitojun /*
1026287546eaSitojun * Create neighbor cache entry and cache link-layer address,
1027287546eaSitojun * on reception of inbound ND6 packets. (RS/RA/NS/redirect)
1028ee37ea65Smcbride *
1029ee37ea65Smcbride * type - ICMP6 type
1030ee37ea65Smcbride * code - type dependent information
1031287546eaSitojun */
1032db435b2aSmpi void
nd6_cache_lladdr(struct ifnet * ifp,const struct in6_addr * from,char * lladdr,int lladdrlen,int type,int code)1033b7607505Skn nd6_cache_lladdr(struct ifnet *ifp, const struct in6_addr *from, char *lladdr,
1034ee37ea65Smcbride int lladdrlen, int type, int code)
1035287546eaSitojun {
10365e9e8a91Sbluhm struct rtentry *rt;
10375e9e8a91Sbluhm struct llinfo_nd6 *ln;
1038287546eaSitojun int is_newentry;
10395e9e8a91Sbluhm struct sockaddr_dl *sdl;
1040287546eaSitojun int do_update;
1041287546eaSitojun int olladdr;
1042287546eaSitojun int llchange;
1043287546eaSitojun int newstate = 0;
1044287546eaSitojun
1045*f46db49eSbluhm NET_ASSERT_LOCKED_EXCLUSIVE();
1046*f46db49eSbluhm
1047287546eaSitojun if (!ifp)
1048ab0ea4a9Snayden panic("%s: ifp == NULL", __func__);
1049287546eaSitojun if (!from)
1050ab0ea4a9Snayden panic("%s: from == NULL", __func__);
1051287546eaSitojun
1052287546eaSitojun /* nothing must be updated for unspecified address */
1053287546eaSitojun if (IN6_IS_ADDR_UNSPECIFIED(from))
1054db435b2aSmpi return;
1055287546eaSitojun
1056287546eaSitojun /*
1057287546eaSitojun * Validation about ifp->if_addrlen and lladdrlen must be done in
1058287546eaSitojun * the caller.
1059287546eaSitojun *
10608b542bbeSpascoe * XXX If the link does not have link-layer address, what should
1061287546eaSitojun * we do? (ifp->if_addrlen == 0)
1062287546eaSitojun * Spec says nothing in sections for RA, RS and NA. There's small
1063287546eaSitojun * description on it in NS section (RFC 2461 7.2.3).
1064287546eaSitojun */
1065287546eaSitojun
1066f4d1af37Smikeb rt = nd6_lookup(from, 0, ifp, ifp->if_rdomain);
106716119bbfSmpi if (rt == NULL) {
10685148b194Smpi rt = nd6_lookup(from, 1, ifp, ifp->if_rdomain);
1069287546eaSitojun is_newentry = 1;
10700a2c5741Sitojun } else {
10718e6c5245Smpi /* do not overwrite local or static entry */
10728e6c5245Smpi if (ISSET(rt->rt_flags, RTF_STATIC|RTF_LOCAL)) {
107316119bbfSmpi rtfree(rt);
1074db435b2aSmpi return;
107516119bbfSmpi }
1076287546eaSitojun is_newentry = 0;
10770a2c5741Sitojun }
1078287546eaSitojun
1079287546eaSitojun if (!rt)
1080db435b2aSmpi return;
1081287546eaSitojun if ((rt->rt_flags & (RTF_GATEWAY | RTF_LLINFO)) != RTF_LLINFO) {
1082287546eaSitojun fail:
108318e33022Sbluhm nd6_free(rt);
108416119bbfSmpi rtfree(rt);
1085db435b2aSmpi return;
1086287546eaSitojun }
1087287546eaSitojun ln = (struct llinfo_nd6 *)rt->rt_llinfo;
10889c0643cdSbluhm if (ln == NULL)
1089287546eaSitojun goto fail;
10909c0643cdSbluhm if (rt->rt_gateway == NULL)
1091287546eaSitojun goto fail;
1092287546eaSitojun if (rt->rt_gateway->sa_family != AF_LINK)
1093287546eaSitojun goto fail;
1094c7b7b779Sbluhm sdl = satosdl(rt->rt_gateway);
1095287546eaSitojun
1096287546eaSitojun olladdr = (sdl->sdl_alen) ? 1 : 0;
1097287546eaSitojun if (olladdr && lladdr) {
1098287546eaSitojun if (bcmp(lladdr, LLADDR(sdl), ifp->if_addrlen))
1099287546eaSitojun llchange = 1;
1100287546eaSitojun else
1101287546eaSitojun llchange = 0;
1102287546eaSitojun } else
1103287546eaSitojun llchange = 0;
1104287546eaSitojun
1105287546eaSitojun /*
1106287546eaSitojun * newentry olladdr lladdr llchange (*=record)
1107287546eaSitojun * 0 n n -- (1)
1108287546eaSitojun * 0 y n -- (2)
1109287546eaSitojun * 0 n y -- (3) * STALE
1110287546eaSitojun * 0 y y n (4) *
1111287546eaSitojun * 0 y y y (5) * STALE
1112287546eaSitojun * 1 -- n -- (6) NOSTATE(= PASSIVE)
1113287546eaSitojun * 1 -- y -- (7) * STALE
1114287546eaSitojun */
1115287546eaSitojun
1116c8a7c9e3Sbluhm if (llchange) {
1117bbcf0337Smpi char addr[INET6_ADDRSTRLEN];
1118c8a7c9e3Sbluhm log(LOG_INFO, "ndp info overwritten for %s by %s on %s\n",
1119bbcf0337Smpi inet_ntop(AF_INET6, from, addr, sizeof(addr)),
1120bbcf0337Smpi ether_sprintf(lladdr), ifp->if_xname);
1121c8a7c9e3Sbluhm }
1122287546eaSitojun if (lladdr) { /* (3-5) and (7) */
1123287546eaSitojun /*
1124287546eaSitojun * Record source link-layer address
1125287546eaSitojun * XXX is it dependent to ifp->if_type?
1126287546eaSitojun */
1127287546eaSitojun sdl->sdl_alen = ifp->if_addrlen;
1128287546eaSitojun bcopy(lladdr, LLADDR(sdl), ifp->if_addrlen);
1129287546eaSitojun }
1130287546eaSitojun
1131287546eaSitojun if (!is_newentry) {
1132d8a7e3a7Sitojun if ((!olladdr && lladdr) || /* (3) */
1133d8a7e3a7Sitojun (olladdr && lladdr && llchange)) { /* (5) */
1134287546eaSitojun do_update = 1;
1135287546eaSitojun newstate = ND6_LLINFO_STALE;
1136287546eaSitojun } else /* (1-2,4) */
1137287546eaSitojun do_update = 0;
1138287546eaSitojun } else {
1139287546eaSitojun do_update = 1;
1140287546eaSitojun if (!lladdr) /* (6) */
1141287546eaSitojun newstate = ND6_LLINFO_NOSTATE;
1142287546eaSitojun else /* (7) */
1143287546eaSitojun newstate = ND6_LLINFO_STALE;
1144287546eaSitojun }
1145287546eaSitojun
1146287546eaSitojun if (do_update) {
1147287546eaSitojun /*
1148287546eaSitojun * Update the state of the neighbor cache.
1149287546eaSitojun */
1150287546eaSitojun ln->ln_state = newstate;
1151287546eaSitojun
1152287546eaSitojun if (ln->ln_state == ND6_LLINFO_STALE) {
11538a7bb304Sitojun /*
115453b39a0bSmpi * Since nd6_resolve() in ifp->if_output() will cause
11558b542bbeSpascoe * state transition to DELAY and reset the timer,
11568a7bb304Sitojun * we must set the timer now, although it is actually
11578a7bb304Sitojun * meaningless.
11588a7bb304Sitojun */
1159134b71fcSdlg nd6_llinfo_settimer(ln, nd6_gctimer);
1160b8646e37Sbluhm if_output_mq(ifp, &ln->ln_mq, &ln_hold_total,
1161e0e67b98Sbluhm rt_key(rt), rt);
1162287546eaSitojun } else if (ln->ln_state == ND6_LLINFO_INCOMPLETE) {
1163287546eaSitojun /* probe right away */
1164334bfa0aSmpi nd6_llinfo_settimer(ln, 0);
1165287546eaSitojun }
1166287546eaSitojun }
1167287546eaSitojun
1168287546eaSitojun /*
1169287546eaSitojun * ICMP6 type dependent behavior.
1170287546eaSitojun *
1171287546eaSitojun * NS: clear IsRouter if new entry
1172287546eaSitojun * RS: clear IsRouter
1173287546eaSitojun * RA: set IsRouter if there's lladdr
1174287546eaSitojun * redir: clear IsRouter if new entry
1175287546eaSitojun *
1176287546eaSitojun * RA case, (1):
1177287546eaSitojun * The spec says that we must set IsRouter in the following cases:
1178287546eaSitojun * - If lladdr exist, set IsRouter. This means (1-5).
1179287546eaSitojun * - If it is old entry (!newentry), set IsRouter. This means (7).
1180287546eaSitojun * So, based on the spec, in (1-5) and (7) cases we must set IsRouter.
11818b542bbeSpascoe * A question arises for (1) case. (1) case has no lladdr in the
1182287546eaSitojun * neighbor cache, this is similar to (6).
1183287546eaSitojun * This case is rare but we figured that we MUST NOT set IsRouter.
1184287546eaSitojun *
1185287546eaSitojun * newentry olladdr lladdr llchange NS RS RA redir
1186287546eaSitojun * D R
1187287546eaSitojun * 0 n n -- (1) c ? s
1188287546eaSitojun * 0 y n -- (2) c s s
1189287546eaSitojun * 0 n y -- (3) c s s
1190287546eaSitojun * 0 y y n (4) c s s
1191287546eaSitojun * 0 y y y (5) c s s
1192287546eaSitojun * 1 -- n -- (6) c c c s
1193287546eaSitojun * 1 -- y -- (7) c c s c s
1194287546eaSitojun *
1195287546eaSitojun * (c=clear s=set)
1196287546eaSitojun */
1197287546eaSitojun switch (type & 0xff) {
1198287546eaSitojun case ND_NEIGHBOR_SOLICIT:
1199287546eaSitojun /*
1200287546eaSitojun * New entry must have is_router flag cleared.
1201287546eaSitojun */
1202287546eaSitojun if (is_newentry) /* (6-7) */
1203287546eaSitojun ln->ln_router = 0;
1204287546eaSitojun break;
1205287546eaSitojun case ND_REDIRECT:
1206287546eaSitojun /*
1207287546eaSitojun * If the icmp is a redirect to a better router, always set the
1208287546eaSitojun * is_router flag. Otherwise, if the entry is newly created,
1209287546eaSitojun * clear the flag. [RFC 2461, sec 8.3]
1210287546eaSitojun */
1211287546eaSitojun if (code == ND_REDIRECT_ROUTER)
1212287546eaSitojun ln->ln_router = 1;
1213287546eaSitojun else if (is_newentry) /* (6-7) */
1214287546eaSitojun ln->ln_router = 0;
1215287546eaSitojun break;
1216287546eaSitojun case ND_ROUTER_SOLICIT:
1217287546eaSitojun /*
1218287546eaSitojun * is_router flag must always be cleared.
1219287546eaSitojun */
1220287546eaSitojun ln->ln_router = 0;
1221287546eaSitojun break;
1222287546eaSitojun case ND_ROUTER_ADVERT:
1223287546eaSitojun /*
1224287546eaSitojun * Mark an entry with lladdr as a router.
1225287546eaSitojun */
1226d8a7e3a7Sitojun if ((!is_newentry && (olladdr || lladdr)) || /* (2-5) */
1227d8a7e3a7Sitojun (is_newentry && lladdr)) { /* (7) */
1228287546eaSitojun ln->ln_router = 1;
1229287546eaSitojun }
1230287546eaSitojun break;
1231287546eaSitojun }
1232287546eaSitojun
123316119bbfSmpi rtfree(rt);
1234287546eaSitojun }
1235287546eaSitojun
1236a0aa363cSjsing void
nd6_slowtimo(void * ignored_arg)1237ee37ea65Smcbride nd6_slowtimo(void *ignored_arg)
1238287546eaSitojun {
1239b3c1e4c1Sitojun struct nd_ifinfo *nd6if;
1240d6b9e9b9Sitojun struct ifnet *ifp;
124122e88dadSmpi
1242aa28b9a6Smpi NET_LOCK();
1243287546eaSitojun
124429e86e5eSblambert timeout_add_sec(&nd6_slowtimo_ch, ND6_SLOWTIMER_INTERVAL);
124522e88dadSmpi
1246ccb45f8eSkn TAILQ_FOREACH(ifp, &ifnetlist, if_list) {
1247cc076951Skn nd6if = ifp->if_nd;
1248abcde9bcSkn if ((nd6if->recalctm -= ND6_SLOWTIMER_INTERVAL) <= 0) {
1249287546eaSitojun /*
1250287546eaSitojun * Since reachable time rarely changes by router
1251287546eaSitojun * advertisements, we SHOULD insure that a new random
1252287546eaSitojun * value gets recomputed at least once every few hours.
1253287546eaSitojun * (RFC 2461, 6.3.4)
1254287546eaSitojun */
1255185986d5Skn nd6if->recalctm = ND6_RECALC_REACHTM_INTERVAL;
1256abcde9bcSkn nd6if->reachable = ND_COMPUTE_RTIME(REACHABLE_TIME);
1257287546eaSitojun }
1258287546eaSitojun }
1259aa28b9a6Smpi NET_UNLOCK();
1260287546eaSitojun }
1261287546eaSitojun
1262287546eaSitojun int
nd6_resolve(struct ifnet * ifp,struct rtentry * rt0,struct mbuf * m,struct sockaddr * dst,u_char * desten)12635d32b3a0Smpi nd6_resolve(struct ifnet *ifp, struct rtentry *rt0, struct mbuf *m,
12645d32b3a0Smpi struct sockaddr *dst, u_char *desten)
12655d32b3a0Smpi {
12665d32b3a0Smpi struct sockaddr_dl *sdl;
12675d32b3a0Smpi struct rtentry *rt;
12685e9e8a91Sbluhm struct llinfo_nd6 *ln;
126975660b8fSbluhm struct in6_addr saddr6;
12709cbdb196Skn time_t uptime;
127175660b8fSbluhm int solicit = 0;
1272287546eaSitojun
12735d32b3a0Smpi if (m->m_flags & M_MCAST) {
12745d32b3a0Smpi ETHER_MAP_IPV6_MULTICAST(&satosin6(dst)->sin6_addr, desten);
12755d32b3a0Smpi return (0);
12765d32b3a0Smpi }
12775b3a2895Ssthen
12789cbdb196Skn uptime = getuptime();
1279c370e97fSmpi rt = rt_getll(rt0);
1280c370e97fSmpi
1281c370e97fSmpi if (ISSET(rt->rt_flags, RTF_REJECT) &&
12829cbdb196Skn (rt->rt_expire == 0 || rt->rt_expire > uptime)) {
12838c023157Smpi m_freem(m);
1284c370e97fSmpi return (rt == rt0 ? EHOSTDOWN : EHOSTUNREACH);
1285287546eaSitojun }
1286cfb6b8dfSitojun
1287287546eaSitojun /*
1288287546eaSitojun * Address resolution or Neighbor Unreachability Detection
1289287546eaSitojun * for the next hop.
1290287546eaSitojun * At this point, the destination of the packet must be a unicast
1291287546eaSitojun * or an anycast address(i.e. not a multicast).
1292287546eaSitojun */
12935da3fb44Smpi if (!ISSET(rt->rt_flags, RTF_LLINFO)) {
1294bbcf0337Smpi char addr[INET6_ADDRSTRLEN];
12955da3fb44Smpi log(LOG_DEBUG, "%s: %s: route contains no ND information\n",
12965da3fb44Smpi __func__, inet_ntop(AF_INET6,
12975da3fb44Smpi &satosin6(rt_key(rt))->sin6_addr, addr, sizeof(addr)));
1298c255d607Skn goto bad;
1299287546eaSitojun }
1300287546eaSitojun
13015d32b3a0Smpi if (rt->rt_gateway->sa_family != AF_LINK) {
13025d32b3a0Smpi printf("%s: something odd happens\n", __func__);
1303c255d607Skn goto bad;
13045d32b3a0Smpi }
13055d32b3a0Smpi
1306*f46db49eSbluhm mtx_enter(&nd6_mtx);
1307*f46db49eSbluhm ln = (struct llinfo_nd6 *)rt->rt_llinfo;
1308*f46db49eSbluhm if (ln == NULL) {
1309*f46db49eSbluhm mtx_leave(&nd6_mtx);
131087a4c0a8Sbluhm goto bad;
131187a4c0a8Sbluhm }
1312cfb6b8dfSitojun
1313f3fcf2f3Smcbride /*
1314f3fcf2f3Smcbride * Move this entry to the head of the queue so that it is less likely
1315f3fcf2f3Smcbride * for this entry to be a target of forced garbage collection (see
1316f3fcf2f3Smcbride * nd6_rtrequest()).
1317f3fcf2f3Smcbride */
131892c821ddSbluhm TAILQ_REMOVE(&nd6_list, ln, ln_list);
131992c821ddSbluhm TAILQ_INSERT_HEAD(&nd6_list, ln, ln_list);
1320f3fcf2f3Smcbride
1321287546eaSitojun /*
1322287546eaSitojun * The first time we send a packet to a neighbor whose entry is
13233bb2119cSkn * STALE, we have to change the state to DELAY and set a timer to
13243bb2119cSkn * expire in DELAY_FIRST_PROBE_TIME seconds to ensure we do
1325287546eaSitojun * neighbor unreachability detection on expiration.
1326287546eaSitojun * (RFC 2461 7.3.3)
1327287546eaSitojun */
1328287546eaSitojun if (ln->ln_state == ND6_LLINFO_STALE) {
1329287546eaSitojun ln->ln_asked = 0;
1330287546eaSitojun ln->ln_state = ND6_LLINFO_DELAY;
1331134b71fcSdlg nd6_llinfo_settimer(ln, nd6_delay);
1332287546eaSitojun }
1333287546eaSitojun
1334287546eaSitojun /*
1335287546eaSitojun * If the neighbor cache entry has a state other than INCOMPLETE
133634deef1eSitojun * (i.e. its link-layer address is already resolved), just
1337287546eaSitojun * send the packet.
1338287546eaSitojun */
13395d32b3a0Smpi if (ln->ln_state > ND6_LLINFO_INCOMPLETE) {
1340*f46db49eSbluhm mtx_leave(&nd6_mtx);
134187a4c0a8Sbluhm
13425d32b3a0Smpi sdl = satosdl(rt->rt_gateway);
13435d32b3a0Smpi if (sdl->sdl_alen != ETHER_ADDR_LEN) {
13445d32b3a0Smpi char addr[INET6_ADDRSTRLEN];
13455d32b3a0Smpi log(LOG_DEBUG, "%s: %s: incorrect nd6 information\n",
13465d32b3a0Smpi __func__,
13475d32b3a0Smpi inet_ntop(AF_INET6, &satosin6(dst)->sin6_addr,
13485d32b3a0Smpi addr, sizeof(addr)));
1349c255d607Skn goto bad;
13505d32b3a0Smpi }
13515d32b3a0Smpi
13525d32b3a0Smpi bcopy(LLADDR(sdl), desten, sdl->sdl_alen);
13535d32b3a0Smpi return (0);
13545d32b3a0Smpi }
1355287546eaSitojun
1356287546eaSitojun /*
1357287546eaSitojun * There is a neighbor cache entry, but no ethernet address
1358e0e67b98Sbluhm * response yet. Insert mbuf in hold queue if below limit.
1359e0e67b98Sbluhm * If above the limit free the queue without queuing the new packet.
1360287546eaSitojun */
1361efcf292bSitojun if (ln->ln_state == ND6_LLINFO_NOSTATE)
1362287546eaSitojun ln->ln_state = ND6_LLINFO_INCOMPLETE;
1363e0e67b98Sbluhm /* source address of prompting packet is needed by nd6_ns_output() */
1364e0e67b98Sbluhm if (m->m_len >= sizeof(struct ip6_hdr)) {
1365e0e67b98Sbluhm memcpy(&ln->ln_saddr6, &mtod(m, struct ip6_hdr *)->ip6_src,
1366e0e67b98Sbluhm sizeof(ln->ln_saddr6));
1367e0e67b98Sbluhm }
1368e0e67b98Sbluhm if (atomic_inc_int_nv(&ln_hold_total) <= LN_HOLD_TOTAL) {
1369e0e67b98Sbluhm if (mq_push(&ln->ln_mq, m) != 0)
1370e0e67b98Sbluhm atomic_dec_int(&ln_hold_total);
1371e0e67b98Sbluhm } else {
1372e0e67b98Sbluhm atomic_sub_int(&ln_hold_total, mq_purge(&ln->ln_mq) + 1);
1373e0e67b98Sbluhm m_freem(m);
1374e0e67b98Sbluhm }
13755d32b3a0Smpi
137676843262Sitojun /*
137776843262Sitojun * If there has been no NS for the neighbor after entering the
137876843262Sitojun * INCOMPLETE state, send the first solicitation.
137976843262Sitojun */
13809631a17bSitojun if (!ND6_LLINFO_PERMANENT(ln) && ln->ln_asked == 0) {
1381287546eaSitojun ln->ln_asked++;
1382abcde9bcSkn nd6_llinfo_settimer(ln, RETRANS_TIMER / 1000);
138375660b8fSbluhm saddr6 = ln->ln_saddr6;
138475660b8fSbluhm solicit = 1;
1385287546eaSitojun }
1386*f46db49eSbluhm mtx_leave(&nd6_mtx);
138775660b8fSbluhm
138875660b8fSbluhm if (solicit)
138975660b8fSbluhm nd6_ns_output(ifp, NULL, &satosin6(dst)->sin6_addr, &saddr6, 0);
13905d32b3a0Smpi return (EAGAIN);
1391c255d607Skn
1392c255d607Skn bad:
1393c255d607Skn m_freem(m);
1394c255d607Skn return (EINVAL);
1395287546eaSitojun }
1396287546eaSitojun
1397287546eaSitojun int
nd6_need_cache(struct ifnet * ifp)1398ee37ea65Smcbride nd6_need_cache(struct ifnet *ifp)
1399d8a7e3a7Sitojun {
1400d8a7e3a7Sitojun /*
1401d8a7e3a7Sitojun * RFC2893 says:
1402d8a7e3a7Sitojun * - unidirectional tunnels needs no ND
1403d8a7e3a7Sitojun */
1404d8a7e3a7Sitojun switch (ifp->if_type) {
1405d8a7e3a7Sitojun case IFT_ETHER:
1406d8a7e3a7Sitojun case IFT_IEEE80211:
1407f4433d56Shenning case IFT_CARP:
1408d8a7e3a7Sitojun return (1);
1409d8a7e3a7Sitojun default:
1410d8a7e3a7Sitojun return (0);
1411d8a7e3a7Sitojun }
1412d8a7e3a7Sitojun }
1413