Print this page
XXX function ordering, typos
XXX minor typos
XXX ill_init_common (OS-2239)
Split |
Close |
Expand all |
Collapse all |
--- old/usr/src/uts/common/inet/ip/ip_if.c
+++ new/usr/src/uts/common/inet/ip/ip_if.c
1 1 /*
2 2 * CDDL HEADER START
3 3 *
4 4 * The contents of this file are subject to the terms of the
5 5 * Common Development and Distribution License (the "License").
6 6 * You may not use this file except in compliance with the License.
7 7 *
8 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 9 * or http://www.opensolaris.org/os/licensing.
10 10 * See the License for the specific language governing permissions
11 11 * and limitations under the License.
12 12 *
13 13 * When distributing Covered Code, include this CDDL HEADER in each
14 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
↓ open down ↓ |
14 lines elided |
↑ open up ↑ |
15 15 * If applicable, add the following below this CDDL HEADER, with the
16 16 * fields enclosed by brackets "[]" replaced with your own identifying
17 17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 18 *
19 19 * CDDL HEADER END
20 20 */
21 21 /*
22 22 * Copyright (c) 1991, 2010, Oracle and/or its affiliates. All rights reserved.
23 23 * Copyright (c) 1990 Mentat Inc.
24 24 */
25 +/*
26 + * Copyright (c) 2013, Joyent, Inc. All rights reserved.
27 + */
25 28
26 29 /*
27 30 * This file contains the interface control functions for IP.
28 31 */
29 32
30 33 #include <sys/types.h>
31 34 #include <sys/stream.h>
32 35 #include <sys/dlpi.h>
33 36 #include <sys/stropts.h>
34 37 #include <sys/strsun.h>
35 38 #include <sys/sysmacros.h>
36 39 #include <sys/strsubr.h>
37 40 #include <sys/strlog.h>
38 41 #include <sys/ddi.h>
39 42 #include <sys/sunddi.h>
40 43 #include <sys/cmn_err.h>
41 44 #include <sys/kstat.h>
42 45 #include <sys/debug.h>
43 46 #include <sys/zone.h>
44 47 #include <sys/sunldi.h>
45 48 #include <sys/file.h>
46 49 #include <sys/bitmap.h>
47 50 #include <sys/cpuvar.h>
48 51 #include <sys/time.h>
49 52 #include <sys/ctype.h>
50 53 #include <sys/kmem.h>
51 54 #include <sys/systm.h>
52 55 #include <sys/param.h>
53 56 #include <sys/socket.h>
54 57 #include <sys/isa_defs.h>
55 58 #include <net/if.h>
56 59 #include <net/if_arp.h>
57 60 #include <net/if_types.h>
58 61 #include <net/if_dl.h>
59 62 #include <net/route.h>
60 63 #include <sys/sockio.h>
61 64 #include <netinet/in.h>
62 65 #include <netinet/ip6.h>
63 66 #include <netinet/icmp6.h>
64 67 #include <netinet/igmp_var.h>
65 68 #include <sys/policy.h>
66 69 #include <sys/ethernet.h>
67 70 #include <sys/callb.h>
68 71 #include <sys/md5.h>
69 72
70 73 #include <inet/common.h> /* for various inet/mi.h and inet/nd.h needs */
71 74 #include <inet/mi.h>
72 75 #include <inet/nd.h>
73 76 #include <inet/tunables.h>
74 77 #include <inet/arp.h>
75 78 #include <inet/ip_arp.h>
76 79 #include <inet/mib2.h>
77 80 #include <inet/ip.h>
78 81 #include <inet/ip6.h>
79 82 #include <inet/ip6_asp.h>
80 83 #include <inet/tcp.h>
81 84 #include <inet/ip_multi.h>
82 85 #include <inet/ip_ire.h>
83 86 #include <inet/ip_ftable.h>
84 87 #include <inet/ip_rts.h>
85 88 #include <inet/ip_ndp.h>
86 89 #include <inet/ip_if.h>
87 90 #include <inet/ip_impl.h>
88 91 #include <inet/sctp_ip.h>
89 92 #include <inet/ip_netinfo.h>
90 93 #include <inet/ilb_ip.h>
91 94
92 95 #include <netinet/igmp.h>
93 96 #include <inet/ip_listutils.h>
94 97 #include <inet/ipclassifier.h>
95 98 #include <sys/mac_client.h>
96 99 #include <sys/dld.h>
97 100 #include <sys/mac_flow.h>
98 101
99 102 #include <sys/systeminfo.h>
100 103 #include <sys/bootconf.h>
101 104
102 105 #include <sys/tsol/tndb.h>
103 106 #include <sys/tsol/tnet.h>
104 107
105 108 #include <inet/rawip_impl.h> /* needed for icmp_stack_t */
106 109 #include <inet/udp_impl.h> /* needed for udp_stack_t */
107 110
108 111 /* The character which tells where the ill_name ends */
109 112 #define IPIF_SEPARATOR_CHAR ':'
110 113
111 114 /* IP ioctl function table entry */
112 115 typedef struct ipft_s {
113 116 int ipft_cmd;
114 117 pfi_t ipft_pfi;
115 118 int ipft_min_size;
116 119 int ipft_flags;
117 120 } ipft_t;
118 121 #define IPFT_F_NO_REPLY 0x1 /* IP ioctl does not expect any reply */
119 122 #define IPFT_F_SELF_REPLY 0x2 /* ioctl callee does the ioctl reply */
120 123
121 124 static int nd_ill_forward_get(queue_t *, mblk_t *, caddr_t, cred_t *);
122 125 static int nd_ill_forward_set(queue_t *q, mblk_t *mp,
123 126 char *value, caddr_t cp, cred_t *ioc_cr);
124 127
125 128 static boolean_t ill_is_quiescent(ill_t *);
126 129 static boolean_t ip_addr_ok_v4(ipaddr_t addr, ipaddr_t subnet_mask);
127 130 static ip_m_t *ip_m_lookup(t_uscalar_t mac_type);
128 131 static int ip_sioctl_addr_tail(ipif_t *ipif, sin_t *sin, queue_t *q,
129 132 mblk_t *mp, boolean_t need_up);
130 133 static int ip_sioctl_dstaddr_tail(ipif_t *ipif, sin_t *sin, queue_t *q,
131 134 mblk_t *mp, boolean_t need_up);
132 135 static int ip_sioctl_slifzone_tail(ipif_t *ipif, zoneid_t zoneid,
133 136 queue_t *q, mblk_t *mp, boolean_t need_up);
134 137 static int ip_sioctl_flags_tail(ipif_t *ipif, uint64_t flags, queue_t *q,
135 138 mblk_t *mp);
136 139 static int ip_sioctl_netmask_tail(ipif_t *ipif, sin_t *sin, queue_t *q,
137 140 mblk_t *mp);
138 141 static int ip_sioctl_subnet_tail(ipif_t *ipif, in6_addr_t, in6_addr_t,
139 142 queue_t *q, mblk_t *mp, boolean_t need_up);
140 143 static int ip_sioctl_plink_ipmod(ipsq_t *ipsq, queue_t *q, mblk_t *mp,
141 144 int ioccmd, struct linkblk *li);
142 145 static ipaddr_t ip_subnet_mask(ipaddr_t addr, ipif_t **, ip_stack_t *);
143 146 static void ip_wput_ioctl(queue_t *q, mblk_t *mp);
144 147 static void ipsq_flush(ill_t *ill);
145 148
146 149 static int ip_sioctl_token_tail(ipif_t *ipif, sin6_t *sin6, int addrlen,
147 150 queue_t *q, mblk_t *mp, boolean_t need_up);
148 151 static void ipsq_delete(ipsq_t *);
149 152
150 153 static ipif_t *ipif_allocate(ill_t *ill, int id, uint_t ire_type,
151 154 boolean_t initialize, boolean_t insert, int *errorp);
152 155 static ire_t **ipif_create_bcast_ires(ipif_t *ipif, ire_t **irep);
153 156 static void ipif_delete_bcast_ires(ipif_t *ipif);
154 157 static int ipif_add_ires_v4(ipif_t *, boolean_t);
155 158 static boolean_t ipif_comp_multi(ipif_t *old_ipif, ipif_t *new_ipif,
156 159 boolean_t isv6);
157 160 static int ipif_logical_down(ipif_t *ipif, queue_t *q, mblk_t *mp);
158 161 static void ipif_free(ipif_t *ipif);
159 162 static void ipif_free_tail(ipif_t *ipif);
160 163 static void ipif_set_default(ipif_t *ipif);
161 164 static int ipif_set_values(queue_t *q, mblk_t *mp,
162 165 char *interf_name, uint_t *ppa);
163 166 static int ipif_set_values_tail(ill_t *ill, ipif_t *ipif, mblk_t *mp,
164 167 queue_t *q);
165 168 static ipif_t *ipif_lookup_on_name(char *name, size_t namelen,
166 169 boolean_t do_alloc, boolean_t *exists, boolean_t isv6, zoneid_t zoneid,
167 170 ip_stack_t *);
168 171 static ipif_t *ipif_lookup_on_name_async(char *name, size_t namelen,
169 172 boolean_t isv6, zoneid_t zoneid, queue_t *q, mblk_t *mp, ipsq_func_t func,
170 173 int *error, ip_stack_t *);
171 174
172 175 static int ill_alloc_ppa(ill_if_t *, ill_t *);
173 176 static void ill_delete_interface_type(ill_if_t *);
174 177 static int ill_dl_up(ill_t *ill, ipif_t *ipif, mblk_t *mp, queue_t *q);
175 178 static void ill_dl_down(ill_t *ill);
176 179 static void ill_down(ill_t *ill);
177 180 static void ill_down_ipifs(ill_t *, boolean_t);
178 181 static void ill_free_mib(ill_t *ill);
179 182 static void ill_glist_delete(ill_t *);
180 183 static void ill_phyint_reinit(ill_t *ill);
181 184 static void ill_set_nce_router_flags(ill_t *, boolean_t);
182 185 static void ill_set_phys_addr_tail(ipsq_t *, queue_t *, mblk_t *, void *);
183 186 static void ill_replumb_tail(ipsq_t *, queue_t *, mblk_t *, void *);
184 187
185 188 static ip_v6intfid_func_t ip_ether_v6intfid, ip_ib_v6intfid;
186 189 static ip_v6intfid_func_t ip_ipv4_v6intfid, ip_ipv6_v6intfid;
187 190 static ip_v6intfid_func_t ip_ipmp_v6intfid, ip_nodef_v6intfid;
188 191 static ip_v6intfid_func_t ip_ipv4_v6destintfid, ip_ipv6_v6destintfid;
189 192 static ip_v4mapinfo_func_t ip_ether_v4_mapping;
190 193 static ip_v6mapinfo_func_t ip_ether_v6_mapping;
191 194 static ip_v4mapinfo_func_t ip_ib_v4_mapping;
192 195 static ip_v6mapinfo_func_t ip_ib_v6_mapping;
193 196 static ip_v4mapinfo_func_t ip_mbcast_mapping;
194 197 static void ip_cgtp_bcast_add(ire_t *, ip_stack_t *);
195 198 static void ip_cgtp_bcast_delete(ire_t *, ip_stack_t *);
196 199 static void phyint_free(phyint_t *);
197 200
198 201 static void ill_capability_dispatch(ill_t *, mblk_t *, dl_capability_sub_t *);
199 202 static void ill_capability_id_ack(ill_t *, mblk_t *, dl_capability_sub_t *);
200 203 static void ill_capability_vrrp_ack(ill_t *, mblk_t *, dl_capability_sub_t *);
201 204 static void ill_capability_hcksum_ack(ill_t *, mblk_t *, dl_capability_sub_t *);
202 205 static void ill_capability_hcksum_reset_fill(ill_t *, mblk_t *);
203 206 static void ill_capability_zerocopy_ack(ill_t *, mblk_t *,
204 207 dl_capability_sub_t *);
205 208 static void ill_capability_zerocopy_reset_fill(ill_t *, mblk_t *);
206 209 static void ill_capability_dld_reset_fill(ill_t *, mblk_t *);
207 210 static void ill_capability_dld_ack(ill_t *, mblk_t *,
208 211 dl_capability_sub_t *);
209 212 static void ill_capability_dld_enable(ill_t *);
210 213 static void ill_capability_ack_thr(void *);
211 214 static void ill_capability_lso_enable(ill_t *);
212 215
213 216 static ill_t *ill_prev_usesrc(ill_t *);
214 217 static int ill_relink_usesrc_ills(ill_t *, ill_t *, uint_t);
↓ open down ↓ |
180 lines elided |
↑ open up ↑ |
215 218 static void ill_disband_usesrc_group(ill_t *);
216 219 static void ip_sioctl_garp_reply(mblk_t *, ill_t *, void *, int);
217 220
218 221 #ifdef DEBUG
219 222 static void ill_trace_cleanup(const ill_t *);
220 223 static void ipif_trace_cleanup(const ipif_t *);
221 224 #endif
222 225
223 226 static void ill_dlpi_clear_deferred(ill_t *ill);
224 227
228 +static void phyint_flags_init(phyint_t *, t_uscalar_t);
229 +
225 230 /*
226 231 * if we go over the memory footprint limit more than once in this msec
227 232 * interval, we'll start pruning aggressively.
228 233 */
229 234 int ip_min_frag_prune_time = 0;
230 235
231 236 static ipft_t ip_ioctl_ftbl[] = {
232 237 { IP_IOC_IRE_DELETE, ip_ire_delete, sizeof (ipid_t), 0 },
233 238 { IP_IOC_IRE_DELETE_NO_REPLY, ip_ire_delete, sizeof (ipid_t),
234 239 IPFT_F_NO_REPLY },
235 240 { IP_IOC_RTS_REQUEST, ip_rts_request, 0, IPFT_F_SELF_REPLY },
236 241 { 0 }
237 242 };
238 243
239 244 /* Simple ICMP IP Header Template */
240 245 static ipha_t icmp_ipha = {
241 246 IP_SIMPLE_HDR_VERSION, 0, 0, 0, 0, 0, IPPROTO_ICMP
242 247 };
243 248
244 249 static uchar_t ip_six_byte_all_ones[] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF };
245 250
246 251 static ip_m_t ip_m_tbl[] = {
247 252 { DL_ETHER, IFT_ETHER, ETHERTYPE_IP, ETHERTYPE_IPV6,
248 253 ip_ether_v4_mapping, ip_ether_v6_mapping, ip_ether_v6intfid,
249 254 ip_nodef_v6intfid },
250 255 { DL_CSMACD, IFT_ISO88023, ETHERTYPE_IP, ETHERTYPE_IPV6,
251 256 ip_ether_v4_mapping, ip_ether_v6_mapping, ip_nodef_v6intfid,
252 257 ip_nodef_v6intfid },
253 258 { DL_TPB, IFT_ISO88024, ETHERTYPE_IP, ETHERTYPE_IPV6,
254 259 ip_ether_v4_mapping, ip_ether_v6_mapping, ip_nodef_v6intfid,
255 260 ip_nodef_v6intfid },
256 261 { DL_TPR, IFT_ISO88025, ETHERTYPE_IP, ETHERTYPE_IPV6,
257 262 ip_ether_v4_mapping, ip_ether_v6_mapping, ip_nodef_v6intfid,
258 263 ip_nodef_v6intfid },
259 264 { DL_FDDI, IFT_FDDI, ETHERTYPE_IP, ETHERTYPE_IPV6,
260 265 ip_ether_v4_mapping, ip_ether_v6_mapping, ip_ether_v6intfid,
261 266 ip_nodef_v6intfid },
262 267 { DL_IB, IFT_IB, ETHERTYPE_IP, ETHERTYPE_IPV6,
263 268 ip_ib_v4_mapping, ip_ib_v6_mapping, ip_ib_v6intfid,
264 269 ip_nodef_v6intfid },
265 270 { DL_IPV4, IFT_IPV4, IPPROTO_ENCAP, IPPROTO_IPV6,
266 271 ip_mbcast_mapping, ip_mbcast_mapping, ip_ipv4_v6intfid,
267 272 ip_ipv4_v6destintfid },
268 273 { DL_IPV6, IFT_IPV6, IPPROTO_ENCAP, IPPROTO_IPV6,
269 274 ip_mbcast_mapping, ip_mbcast_mapping, ip_ipv6_v6intfid,
270 275 ip_ipv6_v6destintfid },
271 276 { DL_6TO4, IFT_6TO4, IPPROTO_ENCAP, IPPROTO_IPV6,
272 277 ip_mbcast_mapping, ip_mbcast_mapping, ip_ipv4_v6intfid,
↓ open down ↓ |
38 lines elided |
↑ open up ↑ |
273 278 ip_nodef_v6intfid },
274 279 { SUNW_DL_VNI, IFT_OTHER, ETHERTYPE_IP, ETHERTYPE_IPV6,
275 280 NULL, NULL, ip_nodef_v6intfid, ip_nodef_v6intfid },
276 281 { SUNW_DL_IPMP, IFT_OTHER, ETHERTYPE_IP, ETHERTYPE_IPV6,
277 282 NULL, NULL, ip_ipmp_v6intfid, ip_nodef_v6intfid },
278 283 { DL_OTHER, IFT_OTHER, ETHERTYPE_IP, ETHERTYPE_IPV6,
279 284 ip_ether_v4_mapping, ip_ether_v6_mapping, ip_nodef_v6intfid,
280 285 ip_nodef_v6intfid }
281 286 };
282 287
283 -static ill_t ill_null; /* Empty ILL for init. */
284 288 char ipif_loopback_name[] = "lo0";
285 289
286 290 /* These are used by all IP network modules. */
287 291 sin6_t sin6_null; /* Zero address for quick clears */
288 292 sin_t sin_null; /* Zero address for quick clears */
289 293
290 294 /* When set search for unused ipif_seqid */
291 295 static ipif_t ipif_zero;
292 296
293 297 /*
294 298 * ppa arena is created after these many
295 299 * interfaces have been plumbed.
296 300 */
297 301 uint_t ill_no_arena = 12; /* Setable in /etc/system */
298 302
299 303 /*
300 304 * Allocate per-interface mibs.
301 305 * Returns true if ok. False otherwise.
302 306 * ipsq may not yet be allocated (loopback case ).
303 307 */
304 308 static boolean_t
305 309 ill_allocate_mibs(ill_t *ill)
306 310 {
307 311 /* Already allocated? */
308 312 if (ill->ill_ip_mib != NULL) {
309 313 if (ill->ill_isv6)
310 314 ASSERT(ill->ill_icmp6_mib != NULL);
311 315 return (B_TRUE);
312 316 }
313 317
314 318 ill->ill_ip_mib = kmem_zalloc(sizeof (*ill->ill_ip_mib),
315 319 KM_NOSLEEP);
316 320 if (ill->ill_ip_mib == NULL) {
317 321 return (B_FALSE);
318 322 }
319 323
320 324 /* Setup static information */
321 325 SET_MIB(ill->ill_ip_mib->ipIfStatsEntrySize,
322 326 sizeof (mib2_ipIfStatsEntry_t));
323 327 if (ill->ill_isv6) {
324 328 ill->ill_ip_mib->ipIfStatsIPVersion = MIB2_INETADDRESSTYPE_ipv6;
325 329 SET_MIB(ill->ill_ip_mib->ipIfStatsAddrEntrySize,
326 330 sizeof (mib2_ipv6AddrEntry_t));
327 331 SET_MIB(ill->ill_ip_mib->ipIfStatsRouteEntrySize,
328 332 sizeof (mib2_ipv6RouteEntry_t));
329 333 SET_MIB(ill->ill_ip_mib->ipIfStatsNetToMediaEntrySize,
330 334 sizeof (mib2_ipv6NetToMediaEntry_t));
331 335 SET_MIB(ill->ill_ip_mib->ipIfStatsMemberEntrySize,
332 336 sizeof (ipv6_member_t));
333 337 SET_MIB(ill->ill_ip_mib->ipIfStatsGroupSourceEntrySize,
334 338 sizeof (ipv6_grpsrc_t));
335 339 } else {
336 340 ill->ill_ip_mib->ipIfStatsIPVersion = MIB2_INETADDRESSTYPE_ipv4;
337 341 SET_MIB(ill->ill_ip_mib->ipIfStatsAddrEntrySize,
338 342 sizeof (mib2_ipAddrEntry_t));
339 343 SET_MIB(ill->ill_ip_mib->ipIfStatsRouteEntrySize,
340 344 sizeof (mib2_ipRouteEntry_t));
341 345 SET_MIB(ill->ill_ip_mib->ipIfStatsNetToMediaEntrySize,
342 346 sizeof (mib2_ipNetToMediaEntry_t));
343 347 SET_MIB(ill->ill_ip_mib->ipIfStatsMemberEntrySize,
344 348 sizeof (ip_member_t));
345 349 SET_MIB(ill->ill_ip_mib->ipIfStatsGroupSourceEntrySize,
346 350 sizeof (ip_grpsrc_t));
347 351
348 352 /*
349 353 * For a v4 ill, we are done at this point, because per ill
350 354 * icmp mibs are only used for v6.
351 355 */
352 356 return (B_TRUE);
353 357 }
354 358
355 359 ill->ill_icmp6_mib = kmem_zalloc(sizeof (*ill->ill_icmp6_mib),
356 360 KM_NOSLEEP);
357 361 if (ill->ill_icmp6_mib == NULL) {
358 362 kmem_free(ill->ill_ip_mib, sizeof (*ill->ill_ip_mib));
359 363 ill->ill_ip_mib = NULL;
360 364 return (B_FALSE);
361 365 }
362 366 /* static icmp info */
363 367 ill->ill_icmp6_mib->ipv6IfIcmpEntrySize =
364 368 sizeof (mib2_ipv6IfIcmpEntry_t);
365 369 /*
366 370 * The ipIfStatsIfindex and ipv6IfIcmpIndex will be assigned later
367 371 * after the phyint merge occurs in ipif_set_values -> ill_glist_insert
368 372 * -> ill_phyint_reinit
369 373 */
370 374 return (B_TRUE);
371 375 }
372 376
373 377 /*
374 378 * Completely vaporize a lower level tap and all associated interfaces.
375 379 * ill_delete is called only out of ip_close when the device control
376 380 * stream is being closed.
377 381 */
378 382 void
379 383 ill_delete(ill_t *ill)
380 384 {
381 385 ipif_t *ipif;
382 386 ill_t *prev_ill;
383 387 ip_stack_t *ipst = ill->ill_ipst;
384 388
385 389 /*
386 390 * ill_delete may be forcibly entering the ipsq. The previous
387 391 * ioctl may not have completed and may need to be aborted.
388 392 * ipsq_flush takes care of it. If we don't need to enter the
389 393 * the ipsq forcibly, the 2nd invocation of ipsq_flush in
390 394 * ill_delete_tail is sufficient.
391 395 */
392 396 ipsq_flush(ill);
393 397
394 398 /*
395 399 * Nuke all interfaces. ipif_free will take down the interface,
396 400 * remove it from the list, and free the data structure.
397 401 * Walk down the ipif list and remove the logical interfaces
398 402 * first before removing the main ipif. We can't unplumb
399 403 * zeroth interface first in the case of IPv6 as update_conn_ill
400 404 * -> ip_ll_multireq de-references ill_ipif for checking
401 405 * POINTOPOINT.
402 406 *
403 407 * If ill_ipif was not properly initialized (i.e low on memory),
404 408 * then no interfaces to clean up. In this case just clean up the
405 409 * ill.
406 410 */
407 411 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next)
408 412 ipif_free(ipif);
409 413
410 414 /*
411 415 * clean out all the nce_t entries that depend on this
412 416 * ill for the ill_phys_addr.
413 417 */
414 418 nce_flush(ill, B_TRUE);
415 419
416 420 /* Clean up msgs on pending upcalls for mrouted */
417 421 reset_mrt_ill(ill);
418 422
419 423 update_conn_ill(ill, ipst);
420 424
421 425 /*
422 426 * Remove multicast references added as a result of calls to
423 427 * ip_join_allmulti().
424 428 */
425 429 ip_purge_allmulti(ill);
426 430
427 431 /*
428 432 * If the ill being deleted is under IPMP, boot it out of the illgrp.
429 433 */
430 434 if (IS_UNDER_IPMP(ill))
431 435 ipmp_ill_leave_illgrp(ill);
432 436
433 437 /*
434 438 * ill_down will arrange to blow off any IRE's dependent on this
435 439 * ILL, and shut down fragmentation reassembly.
436 440 */
437 441 ill_down(ill);
438 442
439 443 /* Let SCTP know, so that it can remove this from its list. */
440 444 sctp_update_ill(ill, SCTP_ILL_REMOVE);
441 445
442 446 /*
443 447 * Walk all CONNs that can have a reference on an ire or nce for this
444 448 * ill (we actually walk all that now have stale references).
445 449 */
446 450 ipcl_walk(conn_ixa_cleanup, (void *)B_TRUE, ipst);
447 451
448 452 /* With IPv6 we have dce_ifindex. Cleanup for neatness */
449 453 if (ill->ill_isv6)
450 454 dce_cleanup(ill->ill_phyint->phyint_ifindex, ipst);
451 455
452 456 /*
453 457 * If an address on this ILL is being used as a source address then
454 458 * clear out the pointers in other ILLs that point to this ILL.
455 459 */
456 460 rw_enter(&ipst->ips_ill_g_usesrc_lock, RW_WRITER);
457 461 if (ill->ill_usesrc_grp_next != NULL) {
458 462 if (ill->ill_usesrc_ifindex == 0) { /* usesrc ILL ? */
459 463 ill_disband_usesrc_group(ill);
460 464 } else { /* consumer of the usesrc ILL */
461 465 prev_ill = ill_prev_usesrc(ill);
462 466 prev_ill->ill_usesrc_grp_next =
463 467 ill->ill_usesrc_grp_next;
464 468 }
465 469 }
466 470 rw_exit(&ipst->ips_ill_g_usesrc_lock);
467 471 }
468 472
469 473 static void
470 474 ipif_non_duplicate(ipif_t *ipif)
471 475 {
472 476 ill_t *ill = ipif->ipif_ill;
473 477 mutex_enter(&ill->ill_lock);
474 478 if (ipif->ipif_flags & IPIF_DUPLICATE) {
475 479 ipif->ipif_flags &= ~IPIF_DUPLICATE;
476 480 ASSERT(ill->ill_ipif_dup_count > 0);
477 481 ill->ill_ipif_dup_count--;
478 482 }
479 483 mutex_exit(&ill->ill_lock);
480 484 }
481 485
482 486 /*
483 487 * ill_delete_tail is called from ip_modclose after all references
484 488 * to the closing ill are gone. The wait is done in ip_modclose
485 489 */
486 490 void
487 491 ill_delete_tail(ill_t *ill)
488 492 {
489 493 mblk_t **mpp;
490 494 ipif_t *ipif;
491 495 ip_stack_t *ipst = ill->ill_ipst;
492 496
493 497 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
494 498 ipif_non_duplicate(ipif);
495 499 (void) ipif_down_tail(ipif);
496 500 }
497 501
498 502 ASSERT(ill->ill_ipif_dup_count == 0);
499 503
500 504 /*
501 505 * If polling capability is enabled (which signifies direct
502 506 * upcall into IP and driver has ill saved as a handle),
503 507 * we need to make sure that unbind has completed before we
504 508 * let the ill disappear and driver no longer has any reference
505 509 * to this ill.
506 510 */
507 511 mutex_enter(&ill->ill_lock);
508 512 while (ill->ill_state_flags & ILL_DL_UNBIND_IN_PROGRESS)
509 513 cv_wait(&ill->ill_cv, &ill->ill_lock);
510 514 mutex_exit(&ill->ill_lock);
511 515 ASSERT(!(ill->ill_capabilities &
512 516 (ILL_CAPAB_DLD | ILL_CAPAB_DLD_POLL | ILL_CAPAB_DLD_DIRECT)));
513 517
514 518 if (ill->ill_net_type != IRE_LOOPBACK)
515 519 qprocsoff(ill->ill_rq);
516 520
517 521 /*
518 522 * We do an ipsq_flush once again now. New messages could have
519 523 * landed up from below (M_ERROR or M_HANGUP). Similarly ioctls
520 524 * could also have landed up if an ioctl thread had looked up
521 525 * the ill before we set the ILL_CONDEMNED flag, but not yet
522 526 * enqueued the ioctl when we did the ipsq_flush last time.
523 527 */
524 528 ipsq_flush(ill);
525 529
526 530 /*
527 531 * Free capabilities.
528 532 */
529 533 if (ill->ill_hcksum_capab != NULL) {
530 534 kmem_free(ill->ill_hcksum_capab, sizeof (ill_hcksum_capab_t));
531 535 ill->ill_hcksum_capab = NULL;
532 536 }
533 537
534 538 if (ill->ill_zerocopy_capab != NULL) {
535 539 kmem_free(ill->ill_zerocopy_capab,
536 540 sizeof (ill_zerocopy_capab_t));
537 541 ill->ill_zerocopy_capab = NULL;
538 542 }
539 543
540 544 if (ill->ill_lso_capab != NULL) {
541 545 kmem_free(ill->ill_lso_capab, sizeof (ill_lso_capab_t));
542 546 ill->ill_lso_capab = NULL;
543 547 }
544 548
545 549 if (ill->ill_dld_capab != NULL) {
546 550 kmem_free(ill->ill_dld_capab, sizeof (ill_dld_capab_t));
547 551 ill->ill_dld_capab = NULL;
548 552 }
549 553
550 554 /* Clean up ill_allowed_ips* related state */
551 555 if (ill->ill_allowed_ips != NULL) {
552 556 ASSERT(ill->ill_allowed_ips_cnt > 0);
553 557 kmem_free(ill->ill_allowed_ips,
554 558 ill->ill_allowed_ips_cnt * sizeof (in6_addr_t));
555 559 ill->ill_allowed_ips = NULL;
556 560 ill->ill_allowed_ips_cnt = 0;
557 561 }
558 562
559 563 while (ill->ill_ipif != NULL)
560 564 ipif_free_tail(ill->ill_ipif);
561 565
562 566 /*
563 567 * We have removed all references to ilm from conn and the ones joined
564 568 * within the kernel.
565 569 *
566 570 * We don't walk conns, mrts and ires because
567 571 *
568 572 * 1) update_conn_ill and reset_mrt_ill cleans up conns and mrts.
569 573 * 2) ill_down ->ill_downi walks all the ires and cleans up
570 574 * ill references.
571 575 */
572 576
573 577 /*
574 578 * If this ill is an IPMP meta-interface, blow away the illgrp. This
575 579 * is safe to do because the illgrp has already been unlinked from the
576 580 * group by I_PUNLINK, and thus SIOCSLIFGROUPNAME cannot find it.
577 581 */
578 582 if (IS_IPMP(ill)) {
579 583 ipmp_illgrp_destroy(ill->ill_grp);
580 584 ill->ill_grp = NULL;
581 585 }
582 586
583 587 if (ill->ill_mphysaddr_list != NULL) {
584 588 multiphysaddr_t *mpa, *tmpa;
585 589
586 590 mpa = ill->ill_mphysaddr_list;
587 591 ill->ill_mphysaddr_list = NULL;
588 592 while (mpa) {
589 593 tmpa = mpa->mpa_next;
590 594 kmem_free(mpa, sizeof (*mpa));
591 595 mpa = tmpa;
592 596 }
593 597 }
594 598 /*
595 599 * Take us out of the list of ILLs. ill_glist_delete -> phyint_free
596 600 * could free the phyint. No more reference to the phyint after this
597 601 * point.
598 602 */
599 603 (void) ill_glist_delete(ill);
600 604
601 605 if (ill->ill_frag_ptr != NULL) {
602 606 uint_t count;
603 607
604 608 for (count = 0; count < ILL_FRAG_HASH_TBL_COUNT; count++) {
605 609 mutex_destroy(&ill->ill_frag_hash_tbl[count].ipfb_lock);
606 610 }
607 611 mi_free(ill->ill_frag_ptr);
608 612 ill->ill_frag_ptr = NULL;
609 613 ill->ill_frag_hash_tbl = NULL;
610 614 }
611 615
612 616 freemsg(ill->ill_nd_lla_mp);
613 617 /* Free all retained control messages. */
614 618 mpp = &ill->ill_first_mp_to_free;
615 619 do {
616 620 while (mpp[0]) {
617 621 mblk_t *mp;
618 622 mblk_t *mp1;
619 623
620 624 mp = mpp[0];
621 625 mpp[0] = mp->b_next;
622 626 for (mp1 = mp; mp1 != NULL; mp1 = mp1->b_cont) {
623 627 mp1->b_next = NULL;
624 628 mp1->b_prev = NULL;
625 629 }
626 630 freemsg(mp);
627 631 }
628 632 } while (mpp++ != &ill->ill_last_mp_to_free);
629 633
630 634 ill_free_mib(ill);
631 635
632 636 #ifdef DEBUG
633 637 ill_trace_cleanup(ill);
634 638 #endif
635 639
636 640 /* The default multicast interface might have changed */
637 641 ire_increment_multicast_generation(ipst, ill->ill_isv6);
638 642
639 643 /* Drop refcnt here */
640 644 netstack_rele(ill->ill_ipst->ips_netstack);
641 645 ill->ill_ipst = NULL;
642 646 }
643 647
644 648 static void
645 649 ill_free_mib(ill_t *ill)
646 650 {
647 651 ip_stack_t *ipst = ill->ill_ipst;
648 652
649 653 /*
650 654 * MIB statistics must not be lost, so when an interface
651 655 * goes away the counter values will be added to the global
652 656 * MIBs.
653 657 */
654 658 if (ill->ill_ip_mib != NULL) {
655 659 if (ill->ill_isv6) {
656 660 ip_mib2_add_ip_stats(&ipst->ips_ip6_mib,
657 661 ill->ill_ip_mib);
658 662 } else {
659 663 ip_mib2_add_ip_stats(&ipst->ips_ip_mib,
660 664 ill->ill_ip_mib);
661 665 }
662 666
663 667 kmem_free(ill->ill_ip_mib, sizeof (*ill->ill_ip_mib));
664 668 ill->ill_ip_mib = NULL;
665 669 }
666 670 if (ill->ill_icmp6_mib != NULL) {
667 671 ip_mib2_add_icmp6_stats(&ipst->ips_icmp6_mib,
668 672 ill->ill_icmp6_mib);
669 673 kmem_free(ill->ill_icmp6_mib, sizeof (*ill->ill_icmp6_mib));
670 674 ill->ill_icmp6_mib = NULL;
671 675 }
672 676 }
673 677
674 678 /*
675 679 * Concatenate together a physical address and a sap.
676 680 *
677 681 * Sap_lengths are interpreted as follows:
678 682 * sap_length == 0 ==> no sap
679 683 * sap_length > 0 ==> sap is at the head of the dlpi address
680 684 * sap_length < 0 ==> sap is at the tail of the dlpi address
681 685 */
682 686 static void
683 687 ill_dlur_copy_address(uchar_t *phys_src, uint_t phys_length,
684 688 t_scalar_t sap_src, t_scalar_t sap_length, uchar_t *dst)
685 689 {
686 690 uint16_t sap_addr = (uint16_t)sap_src;
687 691
688 692 if (sap_length == 0) {
689 693 if (phys_src == NULL)
690 694 bzero(dst, phys_length);
691 695 else
692 696 bcopy(phys_src, dst, phys_length);
693 697 } else if (sap_length < 0) {
694 698 if (phys_src == NULL)
695 699 bzero(dst, phys_length);
696 700 else
697 701 bcopy(phys_src, dst, phys_length);
698 702 bcopy(&sap_addr, (char *)dst + phys_length, sizeof (sap_addr));
699 703 } else {
700 704 bcopy(&sap_addr, dst, sizeof (sap_addr));
701 705 if (phys_src == NULL)
702 706 bzero((char *)dst + sap_length, phys_length);
703 707 else
704 708 bcopy(phys_src, (char *)dst + sap_length, phys_length);
705 709 }
706 710 }
707 711
708 712 /*
709 713 * Generate a dl_unitdata_req mblk for the device and address given.
710 714 * addr_length is the length of the physical portion of the address.
711 715 * If addr is NULL include an all zero address of the specified length.
712 716 * TRUE? In any case, addr_length is taken to be the entire length of the
713 717 * dlpi address, including the absolute value of sap_length.
714 718 */
715 719 mblk_t *
716 720 ill_dlur_gen(uchar_t *addr, uint_t addr_length, t_uscalar_t sap,
717 721 t_scalar_t sap_length)
718 722 {
719 723 dl_unitdata_req_t *dlur;
720 724 mblk_t *mp;
721 725 t_scalar_t abs_sap_length; /* absolute value */
722 726
723 727 abs_sap_length = ABS(sap_length);
724 728 mp = ip_dlpi_alloc(sizeof (*dlur) + addr_length + abs_sap_length,
725 729 DL_UNITDATA_REQ);
726 730 if (mp == NULL)
727 731 return (NULL);
728 732 dlur = (dl_unitdata_req_t *)mp->b_rptr;
729 733 /* HACK: accomodate incompatible DLPI drivers */
730 734 if (addr_length == 8)
731 735 addr_length = 6;
732 736 dlur->dl_dest_addr_length = addr_length + abs_sap_length;
733 737 dlur->dl_dest_addr_offset = sizeof (*dlur);
734 738 dlur->dl_priority.dl_min = 0;
735 739 dlur->dl_priority.dl_max = 0;
736 740 ill_dlur_copy_address(addr, addr_length, sap, sap_length,
737 741 (uchar_t *)&dlur[1]);
738 742 return (mp);
739 743 }
740 744
741 745 /*
742 746 * Add the pending mp to the list. There can be only 1 pending mp
743 747 * in the list. Any exclusive ioctl that needs to wait for a response
744 748 * from another module or driver needs to use this function to set
745 749 * the ipx_pending_mp to the ioctl mblk and wait for the response from
746 750 * the other module/driver. This is also used while waiting for the
747 751 * ipif/ill/ire refcnts to drop to zero in bringing down an ipif.
748 752 */
749 753 boolean_t
750 754 ipsq_pending_mp_add(conn_t *connp, ipif_t *ipif, queue_t *q, mblk_t *add_mp,
751 755 int waitfor)
752 756 {
753 757 ipxop_t *ipx = ipif->ipif_ill->ill_phyint->phyint_ipsq->ipsq_xop;
754 758
755 759 ASSERT(IAM_WRITER_IPIF(ipif));
756 760 ASSERT(MUTEX_HELD(&ipif->ipif_ill->ill_lock));
757 761 ASSERT((add_mp->b_next == NULL) && (add_mp->b_prev == NULL));
758 762 ASSERT(ipx->ipx_pending_mp == NULL);
759 763 /*
760 764 * The caller may be using a different ipif than the one passed into
761 765 * ipsq_current_start() (e.g., suppose an ioctl that came in on the V4
762 766 * ill needs to wait for the V6 ill to quiesce). So we can't ASSERT
763 767 * that `ipx_current_ipif == ipif'.
764 768 */
765 769 ASSERT(ipx->ipx_current_ipif != NULL);
766 770
767 771 /*
768 772 * M_IOCDATA from ioctls, M_ERROR/M_HANGUP/M_PROTO/M_PCPROTO from the
769 773 * driver.
770 774 */
771 775 ASSERT((DB_TYPE(add_mp) == M_IOCDATA) || (DB_TYPE(add_mp) == M_ERROR) ||
772 776 (DB_TYPE(add_mp) == M_HANGUP) || (DB_TYPE(add_mp) == M_PROTO) ||
773 777 (DB_TYPE(add_mp) == M_PCPROTO));
774 778
775 779 if (connp != NULL) {
776 780 ASSERT(MUTEX_HELD(&connp->conn_lock));
777 781 /*
778 782 * Return error if the conn has started closing. The conn
779 783 * could have finished cleaning up the pending mp list,
780 784 * If so we should not add another mp to the list negating
781 785 * the cleanup.
782 786 */
783 787 if (connp->conn_state_flags & CONN_CLOSING)
784 788 return (B_FALSE);
785 789 }
786 790 mutex_enter(&ipx->ipx_lock);
787 791 ipx->ipx_pending_ipif = ipif;
788 792 /*
789 793 * Note down the queue in b_queue. This will be returned by
790 794 * ipsq_pending_mp_get. Caller will then use these values to restart
791 795 * the processing
792 796 */
793 797 add_mp->b_next = NULL;
794 798 add_mp->b_queue = q;
795 799 ipx->ipx_pending_mp = add_mp;
796 800 ipx->ipx_waitfor = waitfor;
797 801 mutex_exit(&ipx->ipx_lock);
798 802
799 803 if (connp != NULL)
800 804 connp->conn_oper_pending_ill = ipif->ipif_ill;
801 805
802 806 return (B_TRUE);
803 807 }
804 808
805 809 /*
806 810 * Retrieve the ipx_pending_mp and return it. There can be only 1 mp
807 811 * queued in the list.
808 812 */
809 813 mblk_t *
810 814 ipsq_pending_mp_get(ipsq_t *ipsq, conn_t **connpp)
811 815 {
812 816 mblk_t *curr = NULL;
813 817 ipxop_t *ipx = ipsq->ipsq_xop;
814 818
815 819 *connpp = NULL;
816 820 mutex_enter(&ipx->ipx_lock);
817 821 if (ipx->ipx_pending_mp == NULL) {
818 822 mutex_exit(&ipx->ipx_lock);
819 823 return (NULL);
820 824 }
821 825
822 826 /* There can be only 1 such excl message */
823 827 curr = ipx->ipx_pending_mp;
824 828 ASSERT(curr->b_next == NULL);
825 829 ipx->ipx_pending_ipif = NULL;
826 830 ipx->ipx_pending_mp = NULL;
827 831 ipx->ipx_waitfor = 0;
828 832 mutex_exit(&ipx->ipx_lock);
829 833
830 834 if (CONN_Q(curr->b_queue)) {
831 835 /*
832 836 * This mp did a refhold on the conn, at the start of the ioctl.
833 837 * So we can safely return a pointer to the conn to the caller.
834 838 */
835 839 *connpp = Q_TO_CONN(curr->b_queue);
836 840 } else {
837 841 *connpp = NULL;
838 842 }
839 843 curr->b_next = NULL;
840 844 curr->b_prev = NULL;
841 845 return (curr);
842 846 }
843 847
844 848 /*
845 849 * Cleanup the ioctl mp queued in ipx_pending_mp
846 850 * - Called in the ill_delete path
847 851 * - Called in the M_ERROR or M_HANGUP path on the ill.
848 852 * - Called in the conn close path.
849 853 *
850 854 * Returns success on finding the pending mblk associated with the ioctl or
851 855 * exclusive operation in progress, failure otherwise.
852 856 */
853 857 boolean_t
854 858 ipsq_pending_mp_cleanup(ill_t *ill, conn_t *connp)
855 859 {
856 860 mblk_t *mp;
857 861 ipxop_t *ipx;
858 862 queue_t *q;
859 863 ipif_t *ipif;
860 864 int cmd;
861 865
862 866 ASSERT(IAM_WRITER_ILL(ill));
863 867 ipx = ill->ill_phyint->phyint_ipsq->ipsq_xop;
864 868
865 869 mutex_enter(&ipx->ipx_lock);
866 870 mp = ipx->ipx_pending_mp;
867 871 if (connp != NULL) {
868 872 if (mp == NULL || mp->b_queue != CONNP_TO_WQ(connp)) {
869 873 /*
870 874 * Nothing to clean since the conn that is closing
871 875 * does not have a matching pending mblk in
872 876 * ipx_pending_mp.
873 877 */
874 878 mutex_exit(&ipx->ipx_lock);
875 879 return (B_FALSE);
876 880 }
877 881 } else {
878 882 /*
879 883 * A non-zero ill_error signifies we are called in the
880 884 * M_ERROR or M_HANGUP path and we need to unconditionally
881 885 * abort any current ioctl and do the corresponding cleanup.
882 886 * A zero ill_error means we are in the ill_delete path and
883 887 * we do the cleanup only if there is a pending mp.
884 888 */
885 889 if (mp == NULL && ill->ill_error == 0) {
886 890 mutex_exit(&ipx->ipx_lock);
887 891 return (B_FALSE);
888 892 }
889 893 }
890 894
891 895 /* Now remove from the ipx_pending_mp */
892 896 ipx->ipx_pending_mp = NULL;
893 897 ipif = ipx->ipx_pending_ipif;
894 898 ipx->ipx_pending_ipif = NULL;
895 899 ipx->ipx_waitfor = 0;
896 900 ipx->ipx_current_ipif = NULL;
897 901 cmd = ipx->ipx_current_ioctl;
898 902 ipx->ipx_current_ioctl = 0;
899 903 ipx->ipx_current_done = B_TRUE;
900 904 mutex_exit(&ipx->ipx_lock);
901 905
902 906 if (mp == NULL)
903 907 return (B_FALSE);
904 908
905 909 q = mp->b_queue;
906 910 mp->b_next = NULL;
907 911 mp->b_prev = NULL;
908 912 mp->b_queue = NULL;
909 913
910 914 if (DB_TYPE(mp) == M_IOCTL || DB_TYPE(mp) == M_IOCDATA) {
911 915 DTRACE_PROBE4(ipif__ioctl,
912 916 char *, "ipsq_pending_mp_cleanup",
913 917 int, cmd, ill_t *, ipif == NULL ? NULL : ipif->ipif_ill,
914 918 ipif_t *, ipif);
915 919 if (connp == NULL) {
916 920 ip_ioctl_finish(q, mp, ENXIO, NO_COPYOUT, NULL);
917 921 } else {
918 922 ip_ioctl_finish(q, mp, ENXIO, CONN_CLOSE, NULL);
919 923 mutex_enter(&ipif->ipif_ill->ill_lock);
920 924 ipif->ipif_state_flags &= ~IPIF_CHANGING;
921 925 mutex_exit(&ipif->ipif_ill->ill_lock);
922 926 }
923 927 } else {
924 928 inet_freemsg(mp);
925 929 }
926 930 return (B_TRUE);
927 931 }
928 932
929 933 /*
930 934 * Called in the conn close path and ill delete path
931 935 */
932 936 static void
933 937 ipsq_xopq_mp_cleanup(ill_t *ill, conn_t *connp)
934 938 {
935 939 ipsq_t *ipsq;
936 940 mblk_t *prev;
937 941 mblk_t *curr;
938 942 mblk_t *next;
939 943 queue_t *wq, *rq = NULL;
940 944 mblk_t *tmp_list = NULL;
941 945
942 946 ASSERT(IAM_WRITER_ILL(ill));
943 947 if (connp != NULL)
944 948 wq = CONNP_TO_WQ(connp);
945 949 else
946 950 wq = ill->ill_wq;
947 951
948 952 /*
949 953 * In the case of lo0 being unplumbed, ill_wq will be NULL. Guard
950 954 * against this here.
951 955 */
952 956 if (wq != NULL)
953 957 rq = RD(wq);
954 958
955 959 ipsq = ill->ill_phyint->phyint_ipsq;
956 960 /*
957 961 * Cleanup the ioctl mp's queued in ipsq_xopq_pending_mp if any.
958 962 * In the case of ioctl from a conn, there can be only 1 mp
959 963 * queued on the ipsq. If an ill is being unplumbed flush all
960 964 * the messages.
961 965 */
962 966 mutex_enter(&ipsq->ipsq_lock);
963 967 for (prev = NULL, curr = ipsq->ipsq_xopq_mphead; curr != NULL;
964 968 curr = next) {
965 969 next = curr->b_next;
966 970 if (connp == NULL ||
967 971 (curr->b_queue == wq || curr->b_queue == rq)) {
968 972 /* Unlink the mblk from the pending mp list */
969 973 if (prev != NULL) {
970 974 prev->b_next = curr->b_next;
971 975 } else {
972 976 ASSERT(ipsq->ipsq_xopq_mphead == curr);
973 977 ipsq->ipsq_xopq_mphead = curr->b_next;
974 978 }
975 979 if (ipsq->ipsq_xopq_mptail == curr)
976 980 ipsq->ipsq_xopq_mptail = prev;
977 981 /*
978 982 * Create a temporary list and release the ipsq lock
979 983 * New elements are added to the head of the tmp_list
980 984 */
981 985 curr->b_next = tmp_list;
982 986 tmp_list = curr;
983 987 } else {
984 988 prev = curr;
985 989 }
986 990 }
987 991 mutex_exit(&ipsq->ipsq_lock);
988 992
989 993 while (tmp_list != NULL) {
990 994 curr = tmp_list;
991 995 tmp_list = curr->b_next;
992 996 curr->b_next = NULL;
993 997 curr->b_prev = NULL;
994 998 wq = curr->b_queue;
995 999 curr->b_queue = NULL;
996 1000 if (DB_TYPE(curr) == M_IOCTL || DB_TYPE(curr) == M_IOCDATA) {
997 1001 DTRACE_PROBE4(ipif__ioctl,
998 1002 char *, "ipsq_xopq_mp_cleanup",
999 1003 int, 0, ill_t *, NULL, ipif_t *, NULL);
1000 1004 ip_ioctl_finish(wq, curr, ENXIO, connp != NULL ?
1001 1005 CONN_CLOSE : NO_COPYOUT, NULL);
1002 1006 } else {
1003 1007 /*
1004 1008 * IP-MT XXX In the case of TLI/XTI bind / optmgmt
1005 1009 * this can't be just inet_freemsg. we have to
1006 1010 * restart it otherwise the thread will be stuck.
1007 1011 */
1008 1012 inet_freemsg(curr);
1009 1013 }
1010 1014 }
1011 1015 }
1012 1016
1013 1017 /*
1014 1018 * This conn has started closing. Cleanup any pending ioctl from this conn.
1015 1019 * STREAMS ensures that there can be at most 1 active ioctl on a stream.
1016 1020 */
1017 1021 void
1018 1022 conn_ioctl_cleanup(conn_t *connp)
1019 1023 {
1020 1024 ipsq_t *ipsq;
1021 1025 ill_t *ill;
1022 1026 boolean_t refheld;
1023 1027
1024 1028 /*
1025 1029 * Check for a queued ioctl. If the ioctl has not yet started, the mp
1026 1030 * is pending in the list headed by ipsq_xopq_head. If the ioctl has
1027 1031 * started the mp could be present in ipx_pending_mp. Note that if
1028 1032 * conn_oper_pending_ill is NULL, the ioctl may still be in flight and
1029 1033 * not yet queued anywhere. In this case, the conn close code will wait
1030 1034 * until the conn_ref is dropped. If the stream was a tcp stream, then
1031 1035 * tcp_close will wait first until all ioctls have completed for this
1032 1036 * conn.
1033 1037 */
1034 1038 mutex_enter(&connp->conn_lock);
1035 1039 ill = connp->conn_oper_pending_ill;
1036 1040 if (ill == NULL) {
1037 1041 mutex_exit(&connp->conn_lock);
1038 1042 return;
1039 1043 }
1040 1044
1041 1045 /*
1042 1046 * We may not be able to refhold the ill if the ill/ipif
1043 1047 * is changing. But we need to make sure that the ill will
1044 1048 * not vanish. So we just bump up the ill_waiter count.
1045 1049 */
1046 1050 refheld = ill_waiter_inc(ill);
1047 1051 mutex_exit(&connp->conn_lock);
1048 1052 if (refheld) {
1049 1053 if (ipsq_enter(ill, B_TRUE, NEW_OP)) {
1050 1054 ill_waiter_dcr(ill);
1051 1055 /*
1052 1056 * Check whether this ioctl has started and is
1053 1057 * pending. If it is not found there then check
1054 1058 * whether this ioctl has not even started and is in
1055 1059 * the ipsq_xopq list.
1056 1060 */
1057 1061 if (!ipsq_pending_mp_cleanup(ill, connp))
1058 1062 ipsq_xopq_mp_cleanup(ill, connp);
1059 1063 ipsq = ill->ill_phyint->phyint_ipsq;
1060 1064 ipsq_exit(ipsq);
1061 1065 return;
1062 1066 }
1063 1067 }
1064 1068
1065 1069 /*
1066 1070 * The ill is also closing and we could not bump up the
1067 1071 * ill_waiter_count or we could not enter the ipsq. Leave
1068 1072 * the cleanup to ill_delete
1069 1073 */
1070 1074 mutex_enter(&connp->conn_lock);
1071 1075 while (connp->conn_oper_pending_ill != NULL)
1072 1076 cv_wait(&connp->conn_refcv, &connp->conn_lock);
1073 1077 mutex_exit(&connp->conn_lock);
1074 1078 if (refheld)
1075 1079 ill_waiter_dcr(ill);
1076 1080 }
1077 1081
1078 1082 /*
1079 1083 * ipcl_walk function for cleaning up conn_*_ill fields.
1080 1084 * Note that we leave ixa_multicast_ifindex, conn_incoming_ifindex, and
1081 1085 * conn_bound_if in place. We prefer dropping
1082 1086 * packets instead of sending them out the wrong interface, or accepting
1083 1087 * packets from the wrong ifindex.
1084 1088 */
1085 1089 static void
1086 1090 conn_cleanup_ill(conn_t *connp, caddr_t arg)
1087 1091 {
1088 1092 ill_t *ill = (ill_t *)arg;
1089 1093
1090 1094 mutex_enter(&connp->conn_lock);
1091 1095 if (connp->conn_dhcpinit_ill == ill) {
1092 1096 connp->conn_dhcpinit_ill = NULL;
1093 1097 ASSERT(ill->ill_dhcpinit != 0);
1094 1098 atomic_dec_32(&ill->ill_dhcpinit);
1095 1099 ill_set_inputfn(ill);
1096 1100 }
1097 1101 mutex_exit(&connp->conn_lock);
1098 1102 }
1099 1103
1100 1104 static int
1101 1105 ill_down_ipifs_tail(ill_t *ill)
1102 1106 {
1103 1107 ipif_t *ipif;
1104 1108 int err;
1105 1109
1106 1110 ASSERT(IAM_WRITER_ILL(ill));
1107 1111 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
1108 1112 ipif_non_duplicate(ipif);
1109 1113 /*
1110 1114 * ipif_down_tail will call arp_ll_down on the last ipif
1111 1115 * and typically return EINPROGRESS when the DL_UNBIND is sent.
1112 1116 */
1113 1117 if ((err = ipif_down_tail(ipif)) != 0)
1114 1118 return (err);
1115 1119 }
1116 1120 return (0);
1117 1121 }
1118 1122
1119 1123 /* ARGSUSED */
1120 1124 void
1121 1125 ipif_all_down_tail(ipsq_t *ipsq, queue_t *q, mblk_t *mp, void *dummy_arg)
1122 1126 {
1123 1127 ASSERT(IAM_WRITER_IPSQ(ipsq));
1124 1128 (void) ill_down_ipifs_tail(q->q_ptr);
1125 1129 freemsg(mp);
1126 1130 ipsq_current_finish(ipsq);
1127 1131 }
1128 1132
1129 1133 /*
1130 1134 * ill_down_start is called when we want to down this ill and bring it up again
1131 1135 * It is called when we receive an M_ERROR / M_HANGUP. In this case we shut down
1132 1136 * all interfaces, but don't tear down any plumbing.
1133 1137 */
1134 1138 boolean_t
1135 1139 ill_down_start(queue_t *q, mblk_t *mp)
1136 1140 {
1137 1141 ill_t *ill = q->q_ptr;
1138 1142 ipif_t *ipif;
1139 1143
1140 1144 ASSERT(IAM_WRITER_ILL(ill));
1141 1145 /*
1142 1146 * It is possible that some ioctl is already in progress while we
1143 1147 * received the M_ERROR / M_HANGUP in which case, we need to abort
1144 1148 * the ioctl. ill_down_start() is being processed as CUR_OP rather
1145 1149 * than as NEW_OP since the cause of the M_ERROR / M_HANGUP may prevent
1146 1150 * the in progress ioctl from ever completing.
1147 1151 *
1148 1152 * The thread that started the ioctl (if any) must have returned,
1149 1153 * since we are now executing as writer. After the 2 calls below,
1150 1154 * the state of the ipsq and the ill would reflect no trace of any
1151 1155 * pending operation. Subsequently if there is any response to the
1152 1156 * original ioctl from the driver, it would be discarded as an
1153 1157 * unsolicited message from the driver.
1154 1158 */
1155 1159 (void) ipsq_pending_mp_cleanup(ill, NULL);
1156 1160 ill_dlpi_clear_deferred(ill);
1157 1161
1158 1162 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next)
1159 1163 (void) ipif_down(ipif, NULL, NULL);
1160 1164
1161 1165 ill_down(ill);
1162 1166
1163 1167 /*
1164 1168 * Walk all CONNs that can have a reference on an ire or nce for this
1165 1169 * ill (we actually walk all that now have stale references).
1166 1170 */
1167 1171 ipcl_walk(conn_ixa_cleanup, (void *)B_TRUE, ill->ill_ipst);
1168 1172
1169 1173 /* With IPv6 we have dce_ifindex. Cleanup for neatness */
1170 1174 if (ill->ill_isv6)
1171 1175 dce_cleanup(ill->ill_phyint->phyint_ifindex, ill->ill_ipst);
1172 1176
1173 1177 ipsq_current_start(ill->ill_phyint->phyint_ipsq, ill->ill_ipif, 0);
1174 1178
1175 1179 /*
1176 1180 * Atomically test and add the pending mp if references are active.
1177 1181 */
1178 1182 mutex_enter(&ill->ill_lock);
1179 1183 if (!ill_is_quiescent(ill)) {
1180 1184 /* call cannot fail since `conn_t *' argument is NULL */
1181 1185 (void) ipsq_pending_mp_add(NULL, ill->ill_ipif, ill->ill_rq,
1182 1186 mp, ILL_DOWN);
1183 1187 mutex_exit(&ill->ill_lock);
1184 1188 return (B_FALSE);
1185 1189 }
1186 1190 mutex_exit(&ill->ill_lock);
1187 1191 return (B_TRUE);
1188 1192 }
1189 1193
1190 1194 static void
1191 1195 ill_down(ill_t *ill)
1192 1196 {
1193 1197 mblk_t *mp;
1194 1198 ip_stack_t *ipst = ill->ill_ipst;
1195 1199
1196 1200 /*
1197 1201 * Blow off any IREs dependent on this ILL.
1198 1202 * The caller needs to handle conn_ixa_cleanup
1199 1203 */
1200 1204 ill_delete_ires(ill);
1201 1205
1202 1206 ire_walk_ill(0, 0, ill_downi, ill, ill);
1203 1207
1204 1208 /* Remove any conn_*_ill depending on this ill */
1205 1209 ipcl_walk(conn_cleanup_ill, (caddr_t)ill, ipst);
1206 1210
1207 1211 /*
1208 1212 * Free state for additional IREs.
1209 1213 */
1210 1214 mutex_enter(&ill->ill_saved_ire_lock);
1211 1215 mp = ill->ill_saved_ire_mp;
1212 1216 ill->ill_saved_ire_mp = NULL;
1213 1217 ill->ill_saved_ire_cnt = 0;
1214 1218 mutex_exit(&ill->ill_saved_ire_lock);
1215 1219 freemsg(mp);
1216 1220 }
1217 1221
1218 1222 /*
1219 1223 * ire_walk routine used to delete every IRE that depends on
1220 1224 * 'ill'. (Always called as writer, and may only be called from ire_walk.)
1221 1225 *
1222 1226 * Note: since the routes added by the kernel are deleted separately,
1223 1227 * this will only be 1) IRE_IF_CLONE and 2) manually added IRE_INTERFACE.
1224 1228 *
1225 1229 * We also remove references on ire_nce_cache entries that refer to the ill.
1226 1230 */
1227 1231 void
1228 1232 ill_downi(ire_t *ire, char *ill_arg)
1229 1233 {
1230 1234 ill_t *ill = (ill_t *)ill_arg;
1231 1235 nce_t *nce;
1232 1236
1233 1237 mutex_enter(&ire->ire_lock);
1234 1238 nce = ire->ire_nce_cache;
1235 1239 if (nce != NULL && nce->nce_ill == ill)
1236 1240 ire->ire_nce_cache = NULL;
1237 1241 else
1238 1242 nce = NULL;
1239 1243 mutex_exit(&ire->ire_lock);
1240 1244 if (nce != NULL)
1241 1245 nce_refrele(nce);
1242 1246 if (ire->ire_ill == ill) {
1243 1247 /*
1244 1248 * The existing interface binding for ire must be
1245 1249 * deleted before trying to bind the route to another
1246 1250 * interface. However, since we are using the contents of the
1247 1251 * ire after ire_delete, the caller has to ensure that
1248 1252 * CONDEMNED (deleted) ire's are not removed from the list
1249 1253 * when ire_delete() returns. Currently ill_downi() is
1250 1254 * only called as part of ire_walk*() routines, so that
1251 1255 * the irb_refhold() done by ire_walk*() will ensure that
1252 1256 * ire_delete() does not lead to ire_inactive().
1253 1257 */
1254 1258 ASSERT(ire->ire_bucket->irb_refcnt > 0);
1255 1259 ire_delete(ire);
1256 1260 if (ire->ire_unbound)
1257 1261 ire_rebind(ire);
1258 1262 }
1259 1263 }
1260 1264
1261 1265 /* Remove IRE_IF_CLONE on this ill */
1262 1266 void
1263 1267 ill_downi_if_clone(ire_t *ire, char *ill_arg)
1264 1268 {
1265 1269 ill_t *ill = (ill_t *)ill_arg;
1266 1270
1267 1271 ASSERT(ire->ire_type & IRE_IF_CLONE);
1268 1272 if (ire->ire_ill == ill)
1269 1273 ire_delete(ire);
1270 1274 }
1271 1275
1272 1276 /* Consume an M_IOCACK of the fastpath probe. */
1273 1277 void
1274 1278 ill_fastpath_ack(ill_t *ill, mblk_t *mp)
1275 1279 {
1276 1280 mblk_t *mp1 = mp;
1277 1281
1278 1282 /*
1279 1283 * If this was the first attempt turn on the fastpath probing.
1280 1284 */
1281 1285 mutex_enter(&ill->ill_lock);
1282 1286 if (ill->ill_dlpi_fastpath_state == IDS_INPROGRESS)
1283 1287 ill->ill_dlpi_fastpath_state = IDS_OK;
1284 1288 mutex_exit(&ill->ill_lock);
1285 1289
1286 1290 /* Free the M_IOCACK mblk, hold on to the data */
1287 1291 mp = mp->b_cont;
1288 1292 freeb(mp1);
1289 1293 if (mp == NULL)
1290 1294 return;
1291 1295 if (mp->b_cont != NULL)
1292 1296 nce_fastpath_update(ill, mp);
1293 1297 else
1294 1298 ip0dbg(("ill_fastpath_ack: no b_cont\n"));
1295 1299 freemsg(mp);
1296 1300 }
1297 1301
1298 1302 /*
1299 1303 * Throw an M_IOCTL message downstream asking "do you know fastpath?"
1300 1304 * The data portion of the request is a dl_unitdata_req_t template for
1301 1305 * what we would send downstream in the absence of a fastpath confirmation.
1302 1306 */
1303 1307 int
1304 1308 ill_fastpath_probe(ill_t *ill, mblk_t *dlur_mp)
1305 1309 {
1306 1310 struct iocblk *ioc;
1307 1311 mblk_t *mp;
1308 1312
1309 1313 if (dlur_mp == NULL)
1310 1314 return (EINVAL);
1311 1315
1312 1316 mutex_enter(&ill->ill_lock);
1313 1317 switch (ill->ill_dlpi_fastpath_state) {
1314 1318 case IDS_FAILED:
1315 1319 /*
1316 1320 * Driver NAKed the first fastpath ioctl - assume it doesn't
1317 1321 * support it.
1318 1322 */
1319 1323 mutex_exit(&ill->ill_lock);
1320 1324 return (ENOTSUP);
1321 1325 case IDS_UNKNOWN:
1322 1326 /* This is the first probe */
1323 1327 ill->ill_dlpi_fastpath_state = IDS_INPROGRESS;
1324 1328 break;
1325 1329 default:
1326 1330 break;
1327 1331 }
1328 1332 mutex_exit(&ill->ill_lock);
1329 1333
1330 1334 if ((mp = mkiocb(DL_IOC_HDR_INFO)) == NULL)
1331 1335 return (EAGAIN);
1332 1336
1333 1337 mp->b_cont = copyb(dlur_mp);
1334 1338 if (mp->b_cont == NULL) {
1335 1339 freeb(mp);
1336 1340 return (EAGAIN);
1337 1341 }
1338 1342
1339 1343 ioc = (struct iocblk *)mp->b_rptr;
1340 1344 ioc->ioc_count = msgdsize(mp->b_cont);
1341 1345
1342 1346 DTRACE_PROBE3(ill__dlpi, char *, "ill_fastpath_probe",
1343 1347 char *, "DL_IOC_HDR_INFO", ill_t *, ill);
1344 1348 putnext(ill->ill_wq, mp);
1345 1349 return (0);
1346 1350 }
1347 1351
1348 1352 void
1349 1353 ill_capability_probe(ill_t *ill)
1350 1354 {
1351 1355 mblk_t *mp;
1352 1356
1353 1357 ASSERT(IAM_WRITER_ILL(ill));
1354 1358
1355 1359 if (ill->ill_dlpi_capab_state != IDCS_UNKNOWN &&
1356 1360 ill->ill_dlpi_capab_state != IDCS_FAILED)
1357 1361 return;
1358 1362
1359 1363 /*
1360 1364 * We are starting a new cycle of capability negotiation.
1361 1365 * Free up the capab reset messages of any previous incarnation.
1362 1366 * We will do a fresh allocation when we get the response to our probe
1363 1367 */
1364 1368 if (ill->ill_capab_reset_mp != NULL) {
1365 1369 freemsg(ill->ill_capab_reset_mp);
1366 1370 ill->ill_capab_reset_mp = NULL;
1367 1371 }
1368 1372
1369 1373 ip1dbg(("ill_capability_probe: starting capability negotiation\n"));
1370 1374
1371 1375 mp = ip_dlpi_alloc(sizeof (dl_capability_req_t), DL_CAPABILITY_REQ);
1372 1376 if (mp == NULL)
1373 1377 return;
1374 1378
1375 1379 ill_capability_send(ill, mp);
1376 1380 ill->ill_dlpi_capab_state = IDCS_PROBE_SENT;
1377 1381 }
1378 1382
1379 1383 void
1380 1384 ill_capability_reset(ill_t *ill, boolean_t reneg)
1381 1385 {
1382 1386 ASSERT(IAM_WRITER_ILL(ill));
1383 1387
1384 1388 if (ill->ill_dlpi_capab_state != IDCS_OK)
1385 1389 return;
1386 1390
1387 1391 ill->ill_dlpi_capab_state = reneg ? IDCS_RENEG : IDCS_RESET_SENT;
1388 1392
1389 1393 ill_capability_send(ill, ill->ill_capab_reset_mp);
1390 1394 ill->ill_capab_reset_mp = NULL;
1391 1395 /*
1392 1396 * We turn off all capabilities except those pertaining to
1393 1397 * direct function call capabilities viz. ILL_CAPAB_DLD*
1394 1398 * which will be turned off by the corresponding reset functions.
1395 1399 */
1396 1400 ill->ill_capabilities &= ~(ILL_CAPAB_HCKSUM | ILL_CAPAB_ZEROCOPY);
1397 1401 }
1398 1402
1399 1403 static void
1400 1404 ill_capability_reset_alloc(ill_t *ill)
1401 1405 {
1402 1406 mblk_t *mp;
1403 1407 size_t size = 0;
1404 1408 int err;
1405 1409 dl_capability_req_t *capb;
1406 1410
1407 1411 ASSERT(IAM_WRITER_ILL(ill));
1408 1412 ASSERT(ill->ill_capab_reset_mp == NULL);
1409 1413
1410 1414 if (ILL_HCKSUM_CAPABLE(ill)) {
1411 1415 size += sizeof (dl_capability_sub_t) +
1412 1416 sizeof (dl_capab_hcksum_t);
1413 1417 }
1414 1418
1415 1419 if (ill->ill_capabilities & ILL_CAPAB_ZEROCOPY) {
1416 1420 size += sizeof (dl_capability_sub_t) +
1417 1421 sizeof (dl_capab_zerocopy_t);
1418 1422 }
1419 1423
1420 1424 if (ill->ill_capabilities & ILL_CAPAB_DLD) {
1421 1425 size += sizeof (dl_capability_sub_t) +
1422 1426 sizeof (dl_capab_dld_t);
1423 1427 }
1424 1428
1425 1429 mp = allocb_wait(size + sizeof (dl_capability_req_t), BPRI_MED,
1426 1430 STR_NOSIG, &err);
1427 1431
1428 1432 mp->b_datap->db_type = M_PROTO;
1429 1433 bzero(mp->b_rptr, size + sizeof (dl_capability_req_t));
1430 1434
1431 1435 capb = (dl_capability_req_t *)mp->b_rptr;
1432 1436 capb->dl_primitive = DL_CAPABILITY_REQ;
1433 1437 capb->dl_sub_offset = sizeof (dl_capability_req_t);
1434 1438 capb->dl_sub_length = size;
1435 1439
1436 1440 mp->b_wptr += sizeof (dl_capability_req_t);
1437 1441
1438 1442 /*
1439 1443 * Each handler fills in the corresponding dl_capability_sub_t
1440 1444 * inside the mblk,
1441 1445 */
1442 1446 ill_capability_hcksum_reset_fill(ill, mp);
1443 1447 ill_capability_zerocopy_reset_fill(ill, mp);
1444 1448 ill_capability_dld_reset_fill(ill, mp);
1445 1449
1446 1450 ill->ill_capab_reset_mp = mp;
1447 1451 }
1448 1452
1449 1453 static void
1450 1454 ill_capability_id_ack(ill_t *ill, mblk_t *mp, dl_capability_sub_t *outers)
1451 1455 {
1452 1456 dl_capab_id_t *id_ic;
1453 1457 uint_t sub_dl_cap = outers->dl_cap;
1454 1458 dl_capability_sub_t *inners;
1455 1459 uint8_t *capend;
1456 1460
1457 1461 ASSERT(sub_dl_cap == DL_CAPAB_ID_WRAPPER);
1458 1462
1459 1463 /*
1460 1464 * Note: range checks here are not absolutely sufficient to
1461 1465 * make us robust against malformed messages sent by drivers;
1462 1466 * this is in keeping with the rest of IP's dlpi handling.
1463 1467 * (Remember, it's coming from something else in the kernel
1464 1468 * address space)
1465 1469 */
1466 1470
1467 1471 capend = (uint8_t *)(outers + 1) + outers->dl_length;
1468 1472 if (capend > mp->b_wptr) {
1469 1473 cmn_err(CE_WARN, "ill_capability_id_ack: "
1470 1474 "malformed sub-capability too long for mblk");
1471 1475 return;
1472 1476 }
1473 1477
1474 1478 id_ic = (dl_capab_id_t *)(outers + 1);
1475 1479
1476 1480 if (outers->dl_length < sizeof (*id_ic) ||
1477 1481 (inners = &id_ic->id_subcap,
1478 1482 inners->dl_length > (outers->dl_length - sizeof (*inners)))) {
1479 1483 cmn_err(CE_WARN, "ill_capability_id_ack: malformed "
1480 1484 "encapsulated capab type %d too long for mblk",
1481 1485 inners->dl_cap);
1482 1486 return;
1483 1487 }
1484 1488
1485 1489 if (!dlcapabcheckqid(&id_ic->id_mid, ill->ill_lmod_rq)) {
1486 1490 ip1dbg(("ill_capability_id_ack: mid token for capab type %d "
1487 1491 "isn't as expected; pass-thru module(s) detected, "
1488 1492 "discarding capability\n", inners->dl_cap));
1489 1493 return;
1490 1494 }
1491 1495
1492 1496 /* Process the encapsulated sub-capability */
1493 1497 ill_capability_dispatch(ill, mp, inners);
1494 1498 }
1495 1499
1496 1500 static void
1497 1501 ill_capability_dld_reset_fill(ill_t *ill, mblk_t *mp)
1498 1502 {
1499 1503 dl_capability_sub_t *dl_subcap;
1500 1504
1501 1505 if (!(ill->ill_capabilities & ILL_CAPAB_DLD))
1502 1506 return;
1503 1507
1504 1508 /*
1505 1509 * The dl_capab_dld_t that follows the dl_capability_sub_t is not
1506 1510 * initialized below since it is not used by DLD.
1507 1511 */
1508 1512 dl_subcap = (dl_capability_sub_t *)mp->b_wptr;
1509 1513 dl_subcap->dl_cap = DL_CAPAB_DLD;
1510 1514 dl_subcap->dl_length = sizeof (dl_capab_dld_t);
1511 1515
1512 1516 mp->b_wptr += sizeof (dl_capability_sub_t) + sizeof (dl_capab_dld_t);
1513 1517 }
1514 1518
1515 1519 static void
1516 1520 ill_capability_dispatch(ill_t *ill, mblk_t *mp, dl_capability_sub_t *subp)
1517 1521 {
1518 1522 /*
1519 1523 * If no ipif was brought up over this ill, this DL_CAPABILITY_REQ/ACK
1520 1524 * is only to get the VRRP capability.
1521 1525 *
1522 1526 * Note that we cannot check ill_ipif_up_count here since
1523 1527 * ill_ipif_up_count is only incremented when the resolver is setup.
1524 1528 * That is done asynchronously, and can race with this function.
1525 1529 */
1526 1530 if (!ill->ill_dl_up) {
1527 1531 if (subp->dl_cap == DL_CAPAB_VRRP)
1528 1532 ill_capability_vrrp_ack(ill, mp, subp);
1529 1533 return;
1530 1534 }
1531 1535
1532 1536 switch (subp->dl_cap) {
1533 1537 case DL_CAPAB_HCKSUM:
1534 1538 ill_capability_hcksum_ack(ill, mp, subp);
1535 1539 break;
1536 1540 case DL_CAPAB_ZEROCOPY:
1537 1541 ill_capability_zerocopy_ack(ill, mp, subp);
1538 1542 break;
1539 1543 case DL_CAPAB_DLD:
1540 1544 ill_capability_dld_ack(ill, mp, subp);
1541 1545 break;
1542 1546 case DL_CAPAB_VRRP:
1543 1547 break;
1544 1548 default:
1545 1549 ip1dbg(("ill_capability_dispatch: unknown capab type %d\n",
1546 1550 subp->dl_cap));
1547 1551 }
1548 1552 }
1549 1553
1550 1554 /*
1551 1555 * Process the vrrp capability received from a DLS Provider. isub must point
1552 1556 * to the sub-capability (DL_CAPAB_VRRP) of a DL_CAPABILITY_ACK message.
1553 1557 */
1554 1558 static void
1555 1559 ill_capability_vrrp_ack(ill_t *ill, mblk_t *mp, dl_capability_sub_t *isub)
1556 1560 {
1557 1561 dl_capab_vrrp_t *vrrp;
1558 1562 uint_t sub_dl_cap = isub->dl_cap;
1559 1563 uint8_t *capend;
1560 1564
1561 1565 ASSERT(IAM_WRITER_ILL(ill));
1562 1566 ASSERT(sub_dl_cap == DL_CAPAB_VRRP);
1563 1567
1564 1568 /*
1565 1569 * Note: range checks here are not absolutely sufficient to
1566 1570 * make us robust against malformed messages sent by drivers;
1567 1571 * this is in keeping with the rest of IP's dlpi handling.
1568 1572 * (Remember, it's coming from something else in the kernel
1569 1573 * address space)
1570 1574 */
1571 1575 capend = (uint8_t *)(isub + 1) + isub->dl_length;
1572 1576 if (capend > mp->b_wptr) {
1573 1577 cmn_err(CE_WARN, "ill_capability_vrrp_ack: "
1574 1578 "malformed sub-capability too long for mblk");
1575 1579 return;
1576 1580 }
1577 1581 vrrp = (dl_capab_vrrp_t *)(isub + 1);
1578 1582
1579 1583 /*
1580 1584 * Compare the IP address family and set ILLF_VRRP for the right ill.
1581 1585 */
1582 1586 if ((vrrp->vrrp_af == AF_INET6 && ill->ill_isv6) ||
1583 1587 (vrrp->vrrp_af == AF_INET && !ill->ill_isv6)) {
1584 1588 ill->ill_flags |= ILLF_VRRP;
1585 1589 }
1586 1590 }
1587 1591
1588 1592 /*
1589 1593 * Process a hardware checksum offload capability negotiation ack received
1590 1594 * from a DLS Provider.isub must point to the sub-capability (DL_CAPAB_HCKSUM)
1591 1595 * of a DL_CAPABILITY_ACK message.
1592 1596 */
1593 1597 static void
1594 1598 ill_capability_hcksum_ack(ill_t *ill, mblk_t *mp, dl_capability_sub_t *isub)
1595 1599 {
1596 1600 dl_capability_req_t *ocap;
1597 1601 dl_capab_hcksum_t *ihck, *ohck;
1598 1602 ill_hcksum_capab_t **ill_hcksum;
1599 1603 mblk_t *nmp = NULL;
1600 1604 uint_t sub_dl_cap = isub->dl_cap;
1601 1605 uint8_t *capend;
1602 1606
1603 1607 ASSERT(sub_dl_cap == DL_CAPAB_HCKSUM);
1604 1608
1605 1609 ill_hcksum = (ill_hcksum_capab_t **)&ill->ill_hcksum_capab;
1606 1610
1607 1611 /*
1608 1612 * Note: range checks here are not absolutely sufficient to
1609 1613 * make us robust against malformed messages sent by drivers;
1610 1614 * this is in keeping with the rest of IP's dlpi handling.
1611 1615 * (Remember, it's coming from something else in the kernel
1612 1616 * address space)
1613 1617 */
1614 1618 capend = (uint8_t *)(isub + 1) + isub->dl_length;
1615 1619 if (capend > mp->b_wptr) {
1616 1620 cmn_err(CE_WARN, "ill_capability_hcksum_ack: "
1617 1621 "malformed sub-capability too long for mblk");
1618 1622 return;
1619 1623 }
1620 1624
1621 1625 /*
1622 1626 * There are two types of acks we process here:
1623 1627 * 1. acks in reply to a (first form) generic capability req
1624 1628 * (no ENABLE flag set)
1625 1629 * 2. acks in reply to a ENABLE capability req.
1626 1630 * (ENABLE flag set)
1627 1631 */
1628 1632 ihck = (dl_capab_hcksum_t *)(isub + 1);
1629 1633
1630 1634 if (ihck->hcksum_version != HCKSUM_VERSION_1) {
1631 1635 cmn_err(CE_CONT, "ill_capability_hcksum_ack: "
1632 1636 "unsupported hardware checksum "
1633 1637 "sub-capability (version %d, expected %d)",
1634 1638 ihck->hcksum_version, HCKSUM_VERSION_1);
1635 1639 return;
1636 1640 }
1637 1641
1638 1642 if (!dlcapabcheckqid(&ihck->hcksum_mid, ill->ill_lmod_rq)) {
1639 1643 ip1dbg(("ill_capability_hcksum_ack: mid token for hardware "
1640 1644 "checksum capability isn't as expected; pass-thru "
1641 1645 "module(s) detected, discarding capability\n"));
1642 1646 return;
1643 1647 }
1644 1648
1645 1649 #define CURR_HCKSUM_CAPAB \
1646 1650 (HCKSUM_INET_PARTIAL | HCKSUM_INET_FULL_V4 | \
1647 1651 HCKSUM_INET_FULL_V6 | HCKSUM_IPHDRCKSUM)
1648 1652
1649 1653 if ((ihck->hcksum_txflags & HCKSUM_ENABLE) &&
1650 1654 (ihck->hcksum_txflags & CURR_HCKSUM_CAPAB)) {
1651 1655 /* do ENABLE processing */
1652 1656 if (*ill_hcksum == NULL) {
1653 1657 *ill_hcksum = kmem_zalloc(sizeof (ill_hcksum_capab_t),
1654 1658 KM_NOSLEEP);
1655 1659
1656 1660 if (*ill_hcksum == NULL) {
1657 1661 cmn_err(CE_WARN, "ill_capability_hcksum_ack: "
1658 1662 "could not enable hcksum version %d "
1659 1663 "for %s (ENOMEM)\n", HCKSUM_CURRENT_VERSION,
1660 1664 ill->ill_name);
1661 1665 return;
1662 1666 }
1663 1667 }
1664 1668
1665 1669 (*ill_hcksum)->ill_hcksum_version = ihck->hcksum_version;
1666 1670 (*ill_hcksum)->ill_hcksum_txflags = ihck->hcksum_txflags;
1667 1671 ill->ill_capabilities |= ILL_CAPAB_HCKSUM;
1668 1672 ip1dbg(("ill_capability_hcksum_ack: interface %s "
1669 1673 "has enabled hardware checksumming\n ",
1670 1674 ill->ill_name));
1671 1675 } else if (ihck->hcksum_txflags & CURR_HCKSUM_CAPAB) {
1672 1676 /*
1673 1677 * Enabling hardware checksum offload
1674 1678 * Currently IP supports {TCP,UDP}/IPv4
1675 1679 * partial and full cksum offload and
1676 1680 * IPv4 header checksum offload.
1677 1681 * Allocate new mblk which will
1678 1682 * contain a new capability request
1679 1683 * to enable hardware checksum offload.
1680 1684 */
1681 1685 uint_t size;
1682 1686 uchar_t *rptr;
1683 1687
1684 1688 size = sizeof (dl_capability_req_t) +
1685 1689 sizeof (dl_capability_sub_t) + isub->dl_length;
1686 1690
1687 1691 if ((nmp = ip_dlpi_alloc(size, DL_CAPABILITY_REQ)) == NULL) {
1688 1692 cmn_err(CE_WARN, "ill_capability_hcksum_ack: "
1689 1693 "could not enable hardware cksum for %s (ENOMEM)\n",
1690 1694 ill->ill_name);
1691 1695 return;
1692 1696 }
1693 1697
1694 1698 rptr = nmp->b_rptr;
1695 1699 /* initialize dl_capability_req_t */
1696 1700 ocap = (dl_capability_req_t *)nmp->b_rptr;
1697 1701 ocap->dl_sub_offset =
1698 1702 sizeof (dl_capability_req_t);
1699 1703 ocap->dl_sub_length =
1700 1704 sizeof (dl_capability_sub_t) +
1701 1705 isub->dl_length;
1702 1706 nmp->b_rptr += sizeof (dl_capability_req_t);
1703 1707
1704 1708 /* initialize dl_capability_sub_t */
1705 1709 bcopy(isub, nmp->b_rptr, sizeof (*isub));
1706 1710 nmp->b_rptr += sizeof (*isub);
1707 1711
1708 1712 /* initialize dl_capab_hcksum_t */
1709 1713 ohck = (dl_capab_hcksum_t *)nmp->b_rptr;
1710 1714 bcopy(ihck, ohck, sizeof (*ihck));
1711 1715
1712 1716 nmp->b_rptr = rptr;
1713 1717 ASSERT(nmp->b_wptr == (nmp->b_rptr + size));
1714 1718
1715 1719 /* Set ENABLE flag */
1716 1720 ohck->hcksum_txflags &= CURR_HCKSUM_CAPAB;
1717 1721 ohck->hcksum_txflags |= HCKSUM_ENABLE;
1718 1722
1719 1723 /*
1720 1724 * nmp points to a DL_CAPABILITY_REQ message to enable
1721 1725 * hardware checksum acceleration.
1722 1726 */
1723 1727 ill_capability_send(ill, nmp);
1724 1728 } else {
1725 1729 ip1dbg(("ill_capability_hcksum_ack: interface %s has "
1726 1730 "advertised %x hardware checksum capability flags\n",
1727 1731 ill->ill_name, ihck->hcksum_txflags));
1728 1732 }
1729 1733 }
1730 1734
1731 1735 static void
1732 1736 ill_capability_hcksum_reset_fill(ill_t *ill, mblk_t *mp)
1733 1737 {
1734 1738 dl_capab_hcksum_t *hck_subcap;
1735 1739 dl_capability_sub_t *dl_subcap;
1736 1740
1737 1741 if (!ILL_HCKSUM_CAPABLE(ill))
1738 1742 return;
1739 1743
1740 1744 ASSERT(ill->ill_hcksum_capab != NULL);
1741 1745
1742 1746 dl_subcap = (dl_capability_sub_t *)mp->b_wptr;
1743 1747 dl_subcap->dl_cap = DL_CAPAB_HCKSUM;
1744 1748 dl_subcap->dl_length = sizeof (*hck_subcap);
1745 1749
1746 1750 hck_subcap = (dl_capab_hcksum_t *)(dl_subcap + 1);
1747 1751 hck_subcap->hcksum_version = ill->ill_hcksum_capab->ill_hcksum_version;
1748 1752 hck_subcap->hcksum_txflags = 0;
1749 1753
1750 1754 mp->b_wptr += sizeof (*dl_subcap) + sizeof (*hck_subcap);
1751 1755 }
1752 1756
1753 1757 static void
1754 1758 ill_capability_zerocopy_ack(ill_t *ill, mblk_t *mp, dl_capability_sub_t *isub)
1755 1759 {
1756 1760 mblk_t *nmp = NULL;
1757 1761 dl_capability_req_t *oc;
1758 1762 dl_capab_zerocopy_t *zc_ic, *zc_oc;
1759 1763 ill_zerocopy_capab_t **ill_zerocopy_capab;
1760 1764 uint_t sub_dl_cap = isub->dl_cap;
1761 1765 uint8_t *capend;
1762 1766
1763 1767 ASSERT(sub_dl_cap == DL_CAPAB_ZEROCOPY);
1764 1768
1765 1769 ill_zerocopy_capab = (ill_zerocopy_capab_t **)&ill->ill_zerocopy_capab;
1766 1770
1767 1771 /*
1768 1772 * Note: range checks here are not absolutely sufficient to
1769 1773 * make us robust against malformed messages sent by drivers;
1770 1774 * this is in keeping with the rest of IP's dlpi handling.
1771 1775 * (Remember, it's coming from something else in the kernel
1772 1776 * address space)
1773 1777 */
1774 1778 capend = (uint8_t *)(isub + 1) + isub->dl_length;
1775 1779 if (capend > mp->b_wptr) {
1776 1780 cmn_err(CE_WARN, "ill_capability_zerocopy_ack: "
1777 1781 "malformed sub-capability too long for mblk");
1778 1782 return;
1779 1783 }
1780 1784
1781 1785 zc_ic = (dl_capab_zerocopy_t *)(isub + 1);
1782 1786 if (zc_ic->zerocopy_version != ZEROCOPY_VERSION_1) {
1783 1787 cmn_err(CE_CONT, "ill_capability_zerocopy_ack: "
1784 1788 "unsupported ZEROCOPY sub-capability (version %d, "
1785 1789 "expected %d)", zc_ic->zerocopy_version,
1786 1790 ZEROCOPY_VERSION_1);
1787 1791 return;
1788 1792 }
1789 1793
1790 1794 if (!dlcapabcheckqid(&zc_ic->zerocopy_mid, ill->ill_lmod_rq)) {
1791 1795 ip1dbg(("ill_capability_zerocopy_ack: mid token for zerocopy "
1792 1796 "capability isn't as expected; pass-thru module(s) "
1793 1797 "detected, discarding capability\n"));
1794 1798 return;
1795 1799 }
1796 1800
1797 1801 if ((zc_ic->zerocopy_flags & DL_CAPAB_VMSAFE_MEM) != 0) {
1798 1802 if (*ill_zerocopy_capab == NULL) {
1799 1803 *ill_zerocopy_capab =
1800 1804 kmem_zalloc(sizeof (ill_zerocopy_capab_t),
1801 1805 KM_NOSLEEP);
1802 1806
1803 1807 if (*ill_zerocopy_capab == NULL) {
1804 1808 cmn_err(CE_WARN, "ill_capability_zerocopy_ack: "
1805 1809 "could not enable Zero-copy version %d "
1806 1810 "for %s (ENOMEM)\n", ZEROCOPY_VERSION_1,
1807 1811 ill->ill_name);
1808 1812 return;
1809 1813 }
1810 1814 }
1811 1815
1812 1816 ip1dbg(("ill_capability_zerocopy_ack: interface %s "
1813 1817 "supports Zero-copy version %d\n", ill->ill_name,
1814 1818 ZEROCOPY_VERSION_1));
1815 1819
1816 1820 (*ill_zerocopy_capab)->ill_zerocopy_version =
1817 1821 zc_ic->zerocopy_version;
1818 1822 (*ill_zerocopy_capab)->ill_zerocopy_flags =
1819 1823 zc_ic->zerocopy_flags;
1820 1824
1821 1825 ill->ill_capabilities |= ILL_CAPAB_ZEROCOPY;
1822 1826 } else {
1823 1827 uint_t size;
1824 1828 uchar_t *rptr;
1825 1829
1826 1830 size = sizeof (dl_capability_req_t) +
1827 1831 sizeof (dl_capability_sub_t) +
1828 1832 sizeof (dl_capab_zerocopy_t);
1829 1833
1830 1834 if ((nmp = ip_dlpi_alloc(size, DL_CAPABILITY_REQ)) == NULL) {
1831 1835 cmn_err(CE_WARN, "ill_capability_zerocopy_ack: "
1832 1836 "could not enable zerocopy for %s (ENOMEM)\n",
1833 1837 ill->ill_name);
1834 1838 return;
1835 1839 }
1836 1840
1837 1841 rptr = nmp->b_rptr;
1838 1842 /* initialize dl_capability_req_t */
1839 1843 oc = (dl_capability_req_t *)rptr;
1840 1844 oc->dl_sub_offset = sizeof (dl_capability_req_t);
1841 1845 oc->dl_sub_length = sizeof (dl_capability_sub_t) +
1842 1846 sizeof (dl_capab_zerocopy_t);
1843 1847 rptr += sizeof (dl_capability_req_t);
1844 1848
1845 1849 /* initialize dl_capability_sub_t */
1846 1850 bcopy(isub, rptr, sizeof (*isub));
1847 1851 rptr += sizeof (*isub);
1848 1852
1849 1853 /* initialize dl_capab_zerocopy_t */
1850 1854 zc_oc = (dl_capab_zerocopy_t *)rptr;
1851 1855 *zc_oc = *zc_ic;
1852 1856
1853 1857 ip1dbg(("ill_capability_zerocopy_ack: asking interface %s "
1854 1858 "to enable zero-copy version %d\n", ill->ill_name,
1855 1859 ZEROCOPY_VERSION_1));
1856 1860
1857 1861 /* set VMSAFE_MEM flag */
1858 1862 zc_oc->zerocopy_flags |= DL_CAPAB_VMSAFE_MEM;
1859 1863
1860 1864 /* nmp points to a DL_CAPABILITY_REQ message to enable zcopy */
1861 1865 ill_capability_send(ill, nmp);
1862 1866 }
1863 1867 }
1864 1868
1865 1869 static void
1866 1870 ill_capability_zerocopy_reset_fill(ill_t *ill, mblk_t *mp)
1867 1871 {
1868 1872 dl_capab_zerocopy_t *zerocopy_subcap;
1869 1873 dl_capability_sub_t *dl_subcap;
1870 1874
1871 1875 if (!(ill->ill_capabilities & ILL_CAPAB_ZEROCOPY))
1872 1876 return;
1873 1877
1874 1878 ASSERT(ill->ill_zerocopy_capab != NULL);
1875 1879
1876 1880 dl_subcap = (dl_capability_sub_t *)mp->b_wptr;
1877 1881 dl_subcap->dl_cap = DL_CAPAB_ZEROCOPY;
1878 1882 dl_subcap->dl_length = sizeof (*zerocopy_subcap);
1879 1883
1880 1884 zerocopy_subcap = (dl_capab_zerocopy_t *)(dl_subcap + 1);
1881 1885 zerocopy_subcap->zerocopy_version =
1882 1886 ill->ill_zerocopy_capab->ill_zerocopy_version;
1883 1887 zerocopy_subcap->zerocopy_flags = 0;
1884 1888
1885 1889 mp->b_wptr += sizeof (*dl_subcap) + sizeof (*zerocopy_subcap);
1886 1890 }
1887 1891
1888 1892 /*
1889 1893 * DLD capability
1890 1894 * Refer to dld.h for more information regarding the purpose and usage
1891 1895 * of this capability.
1892 1896 */
1893 1897 static void
1894 1898 ill_capability_dld_ack(ill_t *ill, mblk_t *mp, dl_capability_sub_t *isub)
1895 1899 {
1896 1900 dl_capab_dld_t *dld_ic, dld;
1897 1901 uint_t sub_dl_cap = isub->dl_cap;
1898 1902 uint8_t *capend;
1899 1903 ill_dld_capab_t *idc;
1900 1904
1901 1905 ASSERT(IAM_WRITER_ILL(ill));
1902 1906 ASSERT(sub_dl_cap == DL_CAPAB_DLD);
1903 1907
1904 1908 /*
1905 1909 * Note: range checks here are not absolutely sufficient to
1906 1910 * make us robust against malformed messages sent by drivers;
1907 1911 * this is in keeping with the rest of IP's dlpi handling.
1908 1912 * (Remember, it's coming from something else in the kernel
1909 1913 * address space)
1910 1914 */
1911 1915 capend = (uint8_t *)(isub + 1) + isub->dl_length;
1912 1916 if (capend > mp->b_wptr) {
1913 1917 cmn_err(CE_WARN, "ill_capability_dld_ack: "
1914 1918 "malformed sub-capability too long for mblk");
1915 1919 return;
1916 1920 }
1917 1921 dld_ic = (dl_capab_dld_t *)(isub + 1);
1918 1922 if (dld_ic->dld_version != DLD_CURRENT_VERSION) {
1919 1923 cmn_err(CE_CONT, "ill_capability_dld_ack: "
1920 1924 "unsupported DLD sub-capability (version %d, "
1921 1925 "expected %d)", dld_ic->dld_version,
1922 1926 DLD_CURRENT_VERSION);
1923 1927 return;
1924 1928 }
1925 1929 if (!dlcapabcheckqid(&dld_ic->dld_mid, ill->ill_lmod_rq)) {
1926 1930 ip1dbg(("ill_capability_dld_ack: mid token for dld "
1927 1931 "capability isn't as expected; pass-thru module(s) "
1928 1932 "detected, discarding capability\n"));
1929 1933 return;
1930 1934 }
1931 1935
1932 1936 /*
1933 1937 * Copy locally to ensure alignment.
1934 1938 */
1935 1939 bcopy(dld_ic, &dld, sizeof (dl_capab_dld_t));
1936 1940
1937 1941 if ((idc = ill->ill_dld_capab) == NULL) {
1938 1942 idc = kmem_zalloc(sizeof (ill_dld_capab_t), KM_NOSLEEP);
1939 1943 if (idc == NULL) {
1940 1944 cmn_err(CE_WARN, "ill_capability_dld_ack: "
1941 1945 "could not enable DLD version %d "
1942 1946 "for %s (ENOMEM)\n", DLD_CURRENT_VERSION,
1943 1947 ill->ill_name);
1944 1948 return;
1945 1949 }
1946 1950 ill->ill_dld_capab = idc;
1947 1951 }
1948 1952 idc->idc_capab_df = (ip_capab_func_t)dld.dld_capab;
1949 1953 idc->idc_capab_dh = (void *)dld.dld_capab_handle;
1950 1954 ip1dbg(("ill_capability_dld_ack: interface %s "
1951 1955 "supports DLD version %d\n", ill->ill_name, DLD_CURRENT_VERSION));
1952 1956
1953 1957 ill_capability_dld_enable(ill);
1954 1958 }
1955 1959
1956 1960 /*
1957 1961 * Typically capability negotiation between IP and the driver happens via
1958 1962 * DLPI message exchange. However GLD also offers a direct function call
1959 1963 * mechanism to exchange the DLD_DIRECT_CAPAB and DLD_POLL_CAPAB capabilities,
1960 1964 * But arbitrary function calls into IP or GLD are not permitted, since both
1961 1965 * of them are protected by their own perimeter mechanism. The perimeter can
1962 1966 * be viewed as a coarse lock or serialization mechanism. The hierarchy of
1963 1967 * these perimeters is IP -> MAC. Thus for example to enable the squeue
1964 1968 * polling, IP needs to enter its perimeter, then call ill_mac_perim_enter
1965 1969 * to enter the mac perimeter and then do the direct function calls into
1966 1970 * GLD to enable squeue polling. The ring related callbacks from the mac into
1967 1971 * the stack to add, bind, quiesce, restart or cleanup a ring are all
1968 1972 * protected by the mac perimeter.
1969 1973 */
1970 1974 static void
1971 1975 ill_mac_perim_enter(ill_t *ill, mac_perim_handle_t *mphp)
1972 1976 {
1973 1977 ill_dld_capab_t *idc = ill->ill_dld_capab;
1974 1978 int err;
1975 1979
1976 1980 err = idc->idc_capab_df(idc->idc_capab_dh, DLD_CAPAB_PERIM, mphp,
1977 1981 DLD_ENABLE);
1978 1982 ASSERT(err == 0);
1979 1983 }
1980 1984
1981 1985 static void
1982 1986 ill_mac_perim_exit(ill_t *ill, mac_perim_handle_t mph)
1983 1987 {
1984 1988 ill_dld_capab_t *idc = ill->ill_dld_capab;
1985 1989 int err;
1986 1990
1987 1991 err = idc->idc_capab_df(idc->idc_capab_dh, DLD_CAPAB_PERIM, mph,
1988 1992 DLD_DISABLE);
1989 1993 ASSERT(err == 0);
1990 1994 }
1991 1995
1992 1996 boolean_t
1993 1997 ill_mac_perim_held(ill_t *ill)
1994 1998 {
1995 1999 ill_dld_capab_t *idc = ill->ill_dld_capab;
1996 2000
1997 2001 return (idc->idc_capab_df(idc->idc_capab_dh, DLD_CAPAB_PERIM, NULL,
1998 2002 DLD_QUERY));
1999 2003 }
2000 2004
2001 2005 static void
2002 2006 ill_capability_direct_enable(ill_t *ill)
2003 2007 {
2004 2008 ill_dld_capab_t *idc = ill->ill_dld_capab;
2005 2009 ill_dld_direct_t *idd = &idc->idc_direct;
2006 2010 dld_capab_direct_t direct;
2007 2011 int rc;
2008 2012
2009 2013 ASSERT(!ill->ill_isv6 && IAM_WRITER_ILL(ill));
2010 2014
2011 2015 bzero(&direct, sizeof (direct));
2012 2016 direct.di_rx_cf = (uintptr_t)ip_input;
2013 2017 direct.di_rx_ch = ill;
2014 2018
2015 2019 rc = idc->idc_capab_df(idc->idc_capab_dh, DLD_CAPAB_DIRECT, &direct,
2016 2020 DLD_ENABLE);
2017 2021 if (rc == 0) {
2018 2022 idd->idd_tx_df = (ip_dld_tx_t)direct.di_tx_df;
2019 2023 idd->idd_tx_dh = direct.di_tx_dh;
2020 2024 idd->idd_tx_cb_df = (ip_dld_callb_t)direct.di_tx_cb_df;
2021 2025 idd->idd_tx_cb_dh = direct.di_tx_cb_dh;
2022 2026 idd->idd_tx_fctl_df = (ip_dld_fctl_t)direct.di_tx_fctl_df;
2023 2027 idd->idd_tx_fctl_dh = direct.di_tx_fctl_dh;
2024 2028 ASSERT(idd->idd_tx_cb_df != NULL);
2025 2029 ASSERT(idd->idd_tx_fctl_df != NULL);
2026 2030 ASSERT(idd->idd_tx_df != NULL);
2027 2031 /*
2028 2032 * One time registration of flow enable callback function
2029 2033 */
2030 2034 ill->ill_flownotify_mh = idd->idd_tx_cb_df(idd->idd_tx_cb_dh,
2031 2035 ill_flow_enable, ill);
2032 2036 ill->ill_capabilities |= ILL_CAPAB_DLD_DIRECT;
2033 2037 DTRACE_PROBE1(direct_on, (ill_t *), ill);
2034 2038 } else {
2035 2039 cmn_err(CE_WARN, "warning: could not enable DIRECT "
2036 2040 "capability, rc = %d\n", rc);
2037 2041 DTRACE_PROBE2(direct_off, (ill_t *), ill, (int), rc);
2038 2042 }
2039 2043 }
2040 2044
2041 2045 static void
2042 2046 ill_capability_poll_enable(ill_t *ill)
2043 2047 {
2044 2048 ill_dld_capab_t *idc = ill->ill_dld_capab;
2045 2049 dld_capab_poll_t poll;
2046 2050 int rc;
2047 2051
2048 2052 ASSERT(!ill->ill_isv6 && IAM_WRITER_ILL(ill));
2049 2053
2050 2054 bzero(&poll, sizeof (poll));
2051 2055 poll.poll_ring_add_cf = (uintptr_t)ip_squeue_add_ring;
2052 2056 poll.poll_ring_remove_cf = (uintptr_t)ip_squeue_clean_ring;
2053 2057 poll.poll_ring_quiesce_cf = (uintptr_t)ip_squeue_quiesce_ring;
2054 2058 poll.poll_ring_restart_cf = (uintptr_t)ip_squeue_restart_ring;
2055 2059 poll.poll_ring_bind_cf = (uintptr_t)ip_squeue_bind_ring;
2056 2060 poll.poll_ring_ch = ill;
2057 2061 rc = idc->idc_capab_df(idc->idc_capab_dh, DLD_CAPAB_POLL, &poll,
2058 2062 DLD_ENABLE);
2059 2063 if (rc == 0) {
2060 2064 ill->ill_capabilities |= ILL_CAPAB_DLD_POLL;
2061 2065 DTRACE_PROBE1(poll_on, (ill_t *), ill);
2062 2066 } else {
2063 2067 ip1dbg(("warning: could not enable POLL "
2064 2068 "capability, rc = %d\n", rc));
2065 2069 DTRACE_PROBE2(poll_off, (ill_t *), ill, (int), rc);
2066 2070 }
2067 2071 }
2068 2072
2069 2073 /*
2070 2074 * Enable the LSO capability.
2071 2075 */
2072 2076 static void
2073 2077 ill_capability_lso_enable(ill_t *ill)
2074 2078 {
2075 2079 ill_dld_capab_t *idc = ill->ill_dld_capab;
2076 2080 dld_capab_lso_t lso;
2077 2081 int rc;
2078 2082
2079 2083 ASSERT(!ill->ill_isv6 && IAM_WRITER_ILL(ill));
2080 2084
2081 2085 if (ill->ill_lso_capab == NULL) {
2082 2086 ill->ill_lso_capab = kmem_zalloc(sizeof (ill_lso_capab_t),
2083 2087 KM_NOSLEEP);
2084 2088 if (ill->ill_lso_capab == NULL) {
2085 2089 cmn_err(CE_WARN, "ill_capability_lso_enable: "
2086 2090 "could not enable LSO for %s (ENOMEM)\n",
2087 2091 ill->ill_name);
2088 2092 return;
2089 2093 }
2090 2094 }
2091 2095
2092 2096 bzero(&lso, sizeof (lso));
2093 2097 if ((rc = idc->idc_capab_df(idc->idc_capab_dh, DLD_CAPAB_LSO, &lso,
2094 2098 DLD_ENABLE)) == 0) {
2095 2099 ill->ill_lso_capab->ill_lso_flags = lso.lso_flags;
2096 2100 ill->ill_lso_capab->ill_lso_max = lso.lso_max;
2097 2101 ill->ill_capabilities |= ILL_CAPAB_LSO;
2098 2102 ip1dbg(("ill_capability_lso_enable: interface %s "
2099 2103 "has enabled LSO\n ", ill->ill_name));
2100 2104 } else {
2101 2105 kmem_free(ill->ill_lso_capab, sizeof (ill_lso_capab_t));
2102 2106 ill->ill_lso_capab = NULL;
2103 2107 DTRACE_PROBE2(lso_off, (ill_t *), ill, (int), rc);
2104 2108 }
2105 2109 }
2106 2110
2107 2111 static void
2108 2112 ill_capability_dld_enable(ill_t *ill)
2109 2113 {
2110 2114 mac_perim_handle_t mph;
2111 2115
2112 2116 ASSERT(IAM_WRITER_ILL(ill));
2113 2117
2114 2118 if (ill->ill_isv6)
2115 2119 return;
2116 2120
2117 2121 ill_mac_perim_enter(ill, &mph);
2118 2122 if (!ill->ill_isv6) {
2119 2123 ill_capability_direct_enable(ill);
2120 2124 ill_capability_poll_enable(ill);
2121 2125 ill_capability_lso_enable(ill);
2122 2126 }
2123 2127 ill->ill_capabilities |= ILL_CAPAB_DLD;
2124 2128 ill_mac_perim_exit(ill, mph);
2125 2129 }
2126 2130
2127 2131 static void
2128 2132 ill_capability_dld_disable(ill_t *ill)
2129 2133 {
2130 2134 ill_dld_capab_t *idc;
2131 2135 ill_dld_direct_t *idd;
2132 2136 mac_perim_handle_t mph;
2133 2137
2134 2138 ASSERT(IAM_WRITER_ILL(ill));
2135 2139
2136 2140 if (!(ill->ill_capabilities & ILL_CAPAB_DLD))
2137 2141 return;
2138 2142
2139 2143 ill_mac_perim_enter(ill, &mph);
2140 2144
2141 2145 idc = ill->ill_dld_capab;
2142 2146 if ((ill->ill_capabilities & ILL_CAPAB_DLD_DIRECT) != 0) {
2143 2147 /*
2144 2148 * For performance we avoid locks in the transmit data path
2145 2149 * and don't maintain a count of the number of threads using
2146 2150 * direct calls. Thus some threads could be using direct
2147 2151 * transmit calls to GLD, even after the capability mechanism
2148 2152 * turns it off. This is still safe since the handles used in
2149 2153 * the direct calls continue to be valid until the unplumb is
2150 2154 * completed. Remove the callback that was added (1-time) at
2151 2155 * capab enable time.
2152 2156 */
2153 2157 mutex_enter(&ill->ill_lock);
2154 2158 ill->ill_capabilities &= ~ILL_CAPAB_DLD_DIRECT;
2155 2159 mutex_exit(&ill->ill_lock);
2156 2160 if (ill->ill_flownotify_mh != NULL) {
2157 2161 idd = &idc->idc_direct;
2158 2162 idd->idd_tx_cb_df(idd->idd_tx_cb_dh, NULL,
2159 2163 ill->ill_flownotify_mh);
2160 2164 ill->ill_flownotify_mh = NULL;
2161 2165 }
2162 2166 (void) idc->idc_capab_df(idc->idc_capab_dh, DLD_CAPAB_DIRECT,
2163 2167 NULL, DLD_DISABLE);
2164 2168 }
2165 2169
2166 2170 if ((ill->ill_capabilities & ILL_CAPAB_DLD_POLL) != 0) {
2167 2171 ill->ill_capabilities &= ~ILL_CAPAB_DLD_POLL;
2168 2172 ip_squeue_clean_all(ill);
2169 2173 (void) idc->idc_capab_df(idc->idc_capab_dh, DLD_CAPAB_POLL,
2170 2174 NULL, DLD_DISABLE);
2171 2175 }
2172 2176
2173 2177 if ((ill->ill_capabilities & ILL_CAPAB_LSO) != 0) {
2174 2178 ASSERT(ill->ill_lso_capab != NULL);
2175 2179 /*
2176 2180 * Clear the capability flag for LSO but retain the
2177 2181 * ill_lso_capab structure since it's possible that another
2178 2182 * thread is still referring to it. The structure only gets
2179 2183 * deallocated when we destroy the ill.
2180 2184 */
2181 2185
2182 2186 ill->ill_capabilities &= ~ILL_CAPAB_LSO;
2183 2187 (void) idc->idc_capab_df(idc->idc_capab_dh, DLD_CAPAB_LSO,
2184 2188 NULL, DLD_DISABLE);
2185 2189 }
2186 2190
2187 2191 ill->ill_capabilities &= ~ILL_CAPAB_DLD;
2188 2192 ill_mac_perim_exit(ill, mph);
2189 2193 }
2190 2194
2191 2195 /*
2192 2196 * Capability Negotiation protocol
2193 2197 *
2194 2198 * We don't wait for DLPI capability operations to finish during interface
2195 2199 * bringup or teardown. Doing so would introduce more asynchrony and the
2196 2200 * interface up/down operations will need multiple return and restarts.
2197 2201 * Instead the 'ipsq_current_ipif' of the ipsq is not cleared as long as
2198 2202 * the 'ill_dlpi_deferred' chain is non-empty. This ensures that the next
2199 2203 * exclusive operation won't start until the DLPI operations of the previous
2200 2204 * exclusive operation complete.
2201 2205 *
2202 2206 * The capability state machine is shown below.
2203 2207 *
2204 2208 * state next state event, action
2205 2209 *
2206 2210 * IDCS_UNKNOWN IDCS_PROBE_SENT ill_capability_probe
2207 2211 * IDCS_PROBE_SENT IDCS_OK ill_capability_ack
2208 2212 * IDCS_PROBE_SENT IDCS_FAILED ip_rput_dlpi_writer (nack)
2209 2213 * IDCS_OK IDCS_RENEG Receipt of DL_NOTE_CAPAB_RENEG
2210 2214 * IDCS_OK IDCS_RESET_SENT ill_capability_reset
2211 2215 * IDCS_RESET_SENT IDCS_UNKNOWN ill_capability_ack_thr
2212 2216 * IDCS_RENEG IDCS_PROBE_SENT ill_capability_ack_thr ->
2213 2217 * ill_capability_probe.
2214 2218 */
2215 2219
2216 2220 /*
2217 2221 * Dedicated thread started from ip_stack_init that handles capability
2218 2222 * disable. This thread ensures the taskq dispatch does not fail by waiting
2219 2223 * for resources using TQ_SLEEP. The taskq mechanism is used to ensure
2220 2224 * that direct calls to DLD are done in a cv_waitable context.
2221 2225 */
2222 2226 void
2223 2227 ill_taskq_dispatch(ip_stack_t *ipst)
2224 2228 {
2225 2229 callb_cpr_t cprinfo;
2226 2230 char name[64];
2227 2231 mblk_t *mp;
2228 2232
2229 2233 (void) snprintf(name, sizeof (name), "ill_taskq_dispatch_%d",
2230 2234 ipst->ips_netstack->netstack_stackid);
2231 2235 CALLB_CPR_INIT(&cprinfo, &ipst->ips_capab_taskq_lock, callb_generic_cpr,
2232 2236 name);
2233 2237 mutex_enter(&ipst->ips_capab_taskq_lock);
2234 2238
2235 2239 for (;;) {
2236 2240 mp = ipst->ips_capab_taskq_head;
2237 2241 while (mp != NULL) {
2238 2242 ipst->ips_capab_taskq_head = mp->b_next;
2239 2243 if (ipst->ips_capab_taskq_head == NULL)
2240 2244 ipst->ips_capab_taskq_tail = NULL;
2241 2245 mutex_exit(&ipst->ips_capab_taskq_lock);
2242 2246 mp->b_next = NULL;
2243 2247
2244 2248 VERIFY(taskq_dispatch(system_taskq,
2245 2249 ill_capability_ack_thr, mp, TQ_SLEEP) != 0);
2246 2250 mutex_enter(&ipst->ips_capab_taskq_lock);
2247 2251 mp = ipst->ips_capab_taskq_head;
2248 2252 }
2249 2253
2250 2254 if (ipst->ips_capab_taskq_quit)
2251 2255 break;
2252 2256 CALLB_CPR_SAFE_BEGIN(&cprinfo);
2253 2257 cv_wait(&ipst->ips_capab_taskq_cv, &ipst->ips_capab_taskq_lock);
2254 2258 CALLB_CPR_SAFE_END(&cprinfo, &ipst->ips_capab_taskq_lock);
2255 2259 }
2256 2260 VERIFY(ipst->ips_capab_taskq_head == NULL);
2257 2261 VERIFY(ipst->ips_capab_taskq_tail == NULL);
2258 2262 CALLB_CPR_EXIT(&cprinfo);
2259 2263 thread_exit();
2260 2264 }
2261 2265
2262 2266 /*
2263 2267 * Consume a new-style hardware capabilities negotiation ack.
2264 2268 * Called via taskq on receipt of DL_CAPABILITY_ACK.
2265 2269 */
2266 2270 static void
2267 2271 ill_capability_ack_thr(void *arg)
2268 2272 {
2269 2273 mblk_t *mp = arg;
2270 2274 dl_capability_ack_t *capp;
2271 2275 dl_capability_sub_t *subp, *endp;
2272 2276 ill_t *ill;
2273 2277 boolean_t reneg;
2274 2278
2275 2279 ill = (ill_t *)mp->b_prev;
2276 2280 mp->b_prev = NULL;
2277 2281
2278 2282 VERIFY(ipsq_enter(ill, B_FALSE, CUR_OP) == B_TRUE);
2279 2283
2280 2284 if (ill->ill_dlpi_capab_state == IDCS_RESET_SENT ||
2281 2285 ill->ill_dlpi_capab_state == IDCS_RENEG) {
2282 2286 /*
2283 2287 * We have received the ack for our DL_CAPAB reset request.
2284 2288 * There isnt' anything in the message that needs processing.
2285 2289 * All message based capabilities have been disabled, now
2286 2290 * do the function call based capability disable.
2287 2291 */
2288 2292 reneg = ill->ill_dlpi_capab_state == IDCS_RENEG;
2289 2293 ill_capability_dld_disable(ill);
2290 2294 ill->ill_dlpi_capab_state = IDCS_UNKNOWN;
2291 2295 if (reneg)
2292 2296 ill_capability_probe(ill);
2293 2297 goto done;
2294 2298 }
2295 2299
2296 2300 if (ill->ill_dlpi_capab_state == IDCS_PROBE_SENT)
2297 2301 ill->ill_dlpi_capab_state = IDCS_OK;
2298 2302
2299 2303 capp = (dl_capability_ack_t *)mp->b_rptr;
2300 2304
2301 2305 if (capp->dl_sub_length == 0) {
2302 2306 /* no new-style capabilities */
2303 2307 goto done;
2304 2308 }
2305 2309
2306 2310 /* make sure the driver supplied correct dl_sub_length */
2307 2311 if ((sizeof (*capp) + capp->dl_sub_length) > MBLKL(mp)) {
2308 2312 ip0dbg(("ill_capability_ack: bad DL_CAPABILITY_ACK, "
2309 2313 "invalid dl_sub_length (%d)\n", capp->dl_sub_length));
2310 2314 goto done;
2311 2315 }
2312 2316
2313 2317 #define SC(base, offset) (dl_capability_sub_t *)(((uchar_t *)(base))+(offset))
2314 2318 /*
2315 2319 * There are sub-capabilities. Process the ones we know about.
2316 2320 * Loop until we don't have room for another sub-cap header..
2317 2321 */
2318 2322 for (subp = SC(capp, capp->dl_sub_offset),
2319 2323 endp = SC(subp, capp->dl_sub_length - sizeof (*subp));
2320 2324 subp <= endp;
2321 2325 subp = SC(subp, sizeof (dl_capability_sub_t) + subp->dl_length)) {
2322 2326
2323 2327 switch (subp->dl_cap) {
2324 2328 case DL_CAPAB_ID_WRAPPER:
2325 2329 ill_capability_id_ack(ill, mp, subp);
2326 2330 break;
2327 2331 default:
2328 2332 ill_capability_dispatch(ill, mp, subp);
2329 2333 break;
2330 2334 }
2331 2335 }
2332 2336 #undef SC
2333 2337 done:
2334 2338 inet_freemsg(mp);
2335 2339 ill_capability_done(ill);
2336 2340 ipsq_exit(ill->ill_phyint->phyint_ipsq);
2337 2341 }
2338 2342
2339 2343 /*
2340 2344 * This needs to be started in a taskq thread to provide a cv_waitable
2341 2345 * context.
2342 2346 */
2343 2347 void
2344 2348 ill_capability_ack(ill_t *ill, mblk_t *mp)
2345 2349 {
2346 2350 ip_stack_t *ipst = ill->ill_ipst;
2347 2351
2348 2352 mp->b_prev = (mblk_t *)ill;
2349 2353 ASSERT(mp->b_next == NULL);
2350 2354
2351 2355 if (taskq_dispatch(system_taskq, ill_capability_ack_thr, mp,
2352 2356 TQ_NOSLEEP) != 0)
2353 2357 return;
2354 2358
2355 2359 /*
2356 2360 * The taskq dispatch failed. Signal the ill_taskq_dispatch thread
2357 2361 * which will do the dispatch using TQ_SLEEP to guarantee success.
2358 2362 */
2359 2363 mutex_enter(&ipst->ips_capab_taskq_lock);
2360 2364 if (ipst->ips_capab_taskq_head == NULL) {
2361 2365 ASSERT(ipst->ips_capab_taskq_tail == NULL);
2362 2366 ipst->ips_capab_taskq_head = mp;
2363 2367 } else {
2364 2368 ipst->ips_capab_taskq_tail->b_next = mp;
2365 2369 }
2366 2370 ipst->ips_capab_taskq_tail = mp;
2367 2371
2368 2372 cv_signal(&ipst->ips_capab_taskq_cv);
2369 2373 mutex_exit(&ipst->ips_capab_taskq_lock);
2370 2374 }
2371 2375
2372 2376 /*
2373 2377 * This routine is called to scan the fragmentation reassembly table for
2374 2378 * the specified ILL for any packets that are starting to smell.
2375 2379 * dead_interval is the maximum time in seconds that will be tolerated. It
2376 2380 * will either be the value specified in ip_g_frag_timeout, or zero if the
2377 2381 * ILL is shutting down and it is time to blow everything off.
2378 2382 *
2379 2383 * It returns the number of seconds (as a time_t) that the next frag timer
2380 2384 * should be scheduled for, 0 meaning that the timer doesn't need to be
2381 2385 * re-started. Note that the method of calculating next_timeout isn't
2382 2386 * entirely accurate since time will flow between the time we grab
2383 2387 * current_time and the time we schedule the next timeout. This isn't a
2384 2388 * big problem since this is the timer for sending an ICMP reassembly time
2385 2389 * exceeded messages, and it doesn't have to be exactly accurate.
2386 2390 *
2387 2391 * This function is
2388 2392 * sometimes called as writer, although this is not required.
2389 2393 */
2390 2394 time_t
2391 2395 ill_frag_timeout(ill_t *ill, time_t dead_interval)
2392 2396 {
2393 2397 ipfb_t *ipfb;
2394 2398 ipfb_t *endp;
2395 2399 ipf_t *ipf;
2396 2400 ipf_t *ipfnext;
2397 2401 mblk_t *mp;
2398 2402 time_t current_time = gethrestime_sec();
2399 2403 time_t next_timeout = 0;
2400 2404 uint32_t hdr_length;
2401 2405 mblk_t *send_icmp_head;
2402 2406 mblk_t *send_icmp_head_v6;
2403 2407 ip_stack_t *ipst = ill->ill_ipst;
2404 2408 ip_recv_attr_t iras;
2405 2409
2406 2410 bzero(&iras, sizeof (iras));
2407 2411 iras.ira_flags = 0;
2408 2412 iras.ira_ill = iras.ira_rill = ill;
2409 2413 iras.ira_ruifindex = ill->ill_phyint->phyint_ifindex;
2410 2414 iras.ira_rifindex = iras.ira_ruifindex;
2411 2415
2412 2416 ipfb = ill->ill_frag_hash_tbl;
2413 2417 if (ipfb == NULL)
2414 2418 return (B_FALSE);
2415 2419 endp = &ipfb[ILL_FRAG_HASH_TBL_COUNT];
2416 2420 /* Walk the frag hash table. */
2417 2421 for (; ipfb < endp; ipfb++) {
2418 2422 send_icmp_head = NULL;
2419 2423 send_icmp_head_v6 = NULL;
2420 2424 mutex_enter(&ipfb->ipfb_lock);
2421 2425 while ((ipf = ipfb->ipfb_ipf) != 0) {
2422 2426 time_t frag_time = current_time - ipf->ipf_timestamp;
2423 2427 time_t frag_timeout;
2424 2428
2425 2429 if (frag_time < dead_interval) {
2426 2430 /*
2427 2431 * There are some outstanding fragments
2428 2432 * that will timeout later. Make note of
2429 2433 * the time so that we can reschedule the
2430 2434 * next timeout appropriately.
2431 2435 */
2432 2436 frag_timeout = dead_interval - frag_time;
2433 2437 if (next_timeout == 0 ||
2434 2438 frag_timeout < next_timeout) {
2435 2439 next_timeout = frag_timeout;
2436 2440 }
2437 2441 break;
2438 2442 }
2439 2443 /* Time's up. Get it out of here. */
2440 2444 hdr_length = ipf->ipf_nf_hdr_len;
2441 2445 ipfnext = ipf->ipf_hash_next;
2442 2446 if (ipfnext)
2443 2447 ipfnext->ipf_ptphn = ipf->ipf_ptphn;
2444 2448 *ipf->ipf_ptphn = ipfnext;
2445 2449 mp = ipf->ipf_mp->b_cont;
2446 2450 for (; mp; mp = mp->b_cont) {
2447 2451 /* Extra points for neatness. */
2448 2452 IP_REASS_SET_START(mp, 0);
2449 2453 IP_REASS_SET_END(mp, 0);
2450 2454 }
2451 2455 mp = ipf->ipf_mp->b_cont;
2452 2456 atomic_add_32(&ill->ill_frag_count, -ipf->ipf_count);
2453 2457 ASSERT(ipfb->ipfb_count >= ipf->ipf_count);
2454 2458 ipfb->ipfb_count -= ipf->ipf_count;
2455 2459 ASSERT(ipfb->ipfb_frag_pkts > 0);
2456 2460 ipfb->ipfb_frag_pkts--;
2457 2461 /*
2458 2462 * We do not send any icmp message from here because
2459 2463 * we currently are holding the ipfb_lock for this
2460 2464 * hash chain. If we try and send any icmp messages
2461 2465 * from here we may end up via a put back into ip
2462 2466 * trying to get the same lock, causing a recursive
2463 2467 * mutex panic. Instead we build a list and send all
2464 2468 * the icmp messages after we have dropped the lock.
2465 2469 */
2466 2470 if (ill->ill_isv6) {
2467 2471 if (hdr_length != 0) {
2468 2472 mp->b_next = send_icmp_head_v6;
2469 2473 send_icmp_head_v6 = mp;
2470 2474 } else {
2471 2475 freemsg(mp);
2472 2476 }
2473 2477 } else {
2474 2478 if (hdr_length != 0) {
2475 2479 mp->b_next = send_icmp_head;
2476 2480 send_icmp_head = mp;
2477 2481 } else {
2478 2482 freemsg(mp);
2479 2483 }
2480 2484 }
2481 2485 BUMP_MIB(ill->ill_ip_mib, ipIfStatsReasmFails);
2482 2486 ip_drop_input("ipIfStatsReasmFails", ipf->ipf_mp, ill);
2483 2487 freeb(ipf->ipf_mp);
2484 2488 }
2485 2489 mutex_exit(&ipfb->ipfb_lock);
2486 2490 /*
2487 2491 * Now need to send any icmp messages that we delayed from
2488 2492 * above.
2489 2493 */
2490 2494 while (send_icmp_head_v6 != NULL) {
2491 2495 ip6_t *ip6h;
2492 2496
2493 2497 mp = send_icmp_head_v6;
2494 2498 send_icmp_head_v6 = send_icmp_head_v6->b_next;
2495 2499 mp->b_next = NULL;
2496 2500 ip6h = (ip6_t *)mp->b_rptr;
2497 2501 iras.ira_flags = 0;
2498 2502 /*
2499 2503 * This will result in an incorrect ALL_ZONES zoneid
2500 2504 * for multicast packets, but we
2501 2505 * don't send ICMP errors for those in any case.
2502 2506 */
2503 2507 iras.ira_zoneid =
2504 2508 ipif_lookup_addr_zoneid_v6(&ip6h->ip6_dst,
2505 2509 ill, ipst);
2506 2510 ip_drop_input("ICMP_TIME_EXCEEDED reass", mp, ill);
2507 2511 icmp_time_exceeded_v6(mp,
2508 2512 ICMP_REASSEMBLY_TIME_EXCEEDED, B_FALSE,
2509 2513 &iras);
2510 2514 ASSERT(!(iras.ira_flags & IRAF_IPSEC_SECURE));
2511 2515 }
2512 2516 while (send_icmp_head != NULL) {
2513 2517 ipaddr_t dst;
2514 2518
2515 2519 mp = send_icmp_head;
2516 2520 send_icmp_head = send_icmp_head->b_next;
2517 2521 mp->b_next = NULL;
2518 2522
2519 2523 dst = ((ipha_t *)mp->b_rptr)->ipha_dst;
2520 2524
2521 2525 iras.ira_flags = IRAF_IS_IPV4;
2522 2526 /*
2523 2527 * This will result in an incorrect ALL_ZONES zoneid
2524 2528 * for broadcast and multicast packets, but we
2525 2529 * don't send ICMP errors for those in any case.
2526 2530 */
2527 2531 iras.ira_zoneid = ipif_lookup_addr_zoneid(dst,
2528 2532 ill, ipst);
2529 2533 ip_drop_input("ICMP_TIME_EXCEEDED reass", mp, ill);
2530 2534 icmp_time_exceeded(mp,
2531 2535 ICMP_REASSEMBLY_TIME_EXCEEDED, &iras);
2532 2536 ASSERT(!(iras.ira_flags & IRAF_IPSEC_SECURE));
2533 2537 }
2534 2538 }
2535 2539 /*
2536 2540 * A non-dying ILL will use the return value to decide whether to
2537 2541 * restart the frag timer, and for how long.
2538 2542 */
2539 2543 return (next_timeout);
2540 2544 }
2541 2545
2542 2546 /*
2543 2547 * This routine is called when the approximate count of mblk memory used
2544 2548 * for the specified ILL has exceeded max_count.
2545 2549 */
2546 2550 void
2547 2551 ill_frag_prune(ill_t *ill, uint_t max_count)
2548 2552 {
2549 2553 ipfb_t *ipfb;
2550 2554 ipf_t *ipf;
2551 2555 size_t count;
2552 2556 clock_t now;
2553 2557
2554 2558 /*
2555 2559 * If we are here within ip_min_frag_prune_time msecs remove
2556 2560 * ill_frag_free_num_pkts oldest packets from each bucket and increment
2557 2561 * ill_frag_free_num_pkts.
2558 2562 */
2559 2563 mutex_enter(&ill->ill_lock);
2560 2564 now = ddi_get_lbolt();
2561 2565 if (TICK_TO_MSEC(now - ill->ill_last_frag_clean_time) <=
2562 2566 (ip_min_frag_prune_time != 0 ?
2563 2567 ip_min_frag_prune_time : msec_per_tick)) {
2564 2568
2565 2569 ill->ill_frag_free_num_pkts++;
2566 2570
2567 2571 } else {
2568 2572 ill->ill_frag_free_num_pkts = 0;
2569 2573 }
2570 2574 ill->ill_last_frag_clean_time = now;
2571 2575 mutex_exit(&ill->ill_lock);
2572 2576
2573 2577 /*
2574 2578 * free ill_frag_free_num_pkts oldest packets from each bucket.
2575 2579 */
2576 2580 if (ill->ill_frag_free_num_pkts != 0) {
2577 2581 int ix;
2578 2582
2579 2583 for (ix = 0; ix < ILL_FRAG_HASH_TBL_COUNT; ix++) {
2580 2584 ipfb = &ill->ill_frag_hash_tbl[ix];
2581 2585 mutex_enter(&ipfb->ipfb_lock);
2582 2586 if (ipfb->ipfb_ipf != NULL) {
2583 2587 ill_frag_free_pkts(ill, ipfb, ipfb->ipfb_ipf,
2584 2588 ill->ill_frag_free_num_pkts);
2585 2589 }
2586 2590 mutex_exit(&ipfb->ipfb_lock);
2587 2591 }
2588 2592 }
2589 2593 /*
2590 2594 * While the reassembly list for this ILL is too big, prune a fragment
2591 2595 * queue by age, oldest first.
2592 2596 */
2593 2597 while (ill->ill_frag_count > max_count) {
2594 2598 int ix;
2595 2599 ipfb_t *oipfb = NULL;
2596 2600 uint_t oldest = UINT_MAX;
2597 2601
2598 2602 count = 0;
2599 2603 for (ix = 0; ix < ILL_FRAG_HASH_TBL_COUNT; ix++) {
2600 2604 ipfb = &ill->ill_frag_hash_tbl[ix];
2601 2605 mutex_enter(&ipfb->ipfb_lock);
2602 2606 ipf = ipfb->ipfb_ipf;
2603 2607 if (ipf != NULL && ipf->ipf_gen < oldest) {
2604 2608 oldest = ipf->ipf_gen;
2605 2609 oipfb = ipfb;
2606 2610 }
2607 2611 count += ipfb->ipfb_count;
2608 2612 mutex_exit(&ipfb->ipfb_lock);
2609 2613 }
2610 2614 if (oipfb == NULL)
2611 2615 break;
2612 2616
2613 2617 if (count <= max_count)
2614 2618 return; /* Somebody beat us to it, nothing to do */
2615 2619 mutex_enter(&oipfb->ipfb_lock);
2616 2620 ipf = oipfb->ipfb_ipf;
2617 2621 if (ipf != NULL) {
2618 2622 ill_frag_free_pkts(ill, oipfb, ipf, 1);
2619 2623 }
2620 2624 mutex_exit(&oipfb->ipfb_lock);
2621 2625 }
2622 2626 }
2623 2627
2624 2628 /*
2625 2629 * free 'free_cnt' fragmented packets starting at ipf.
2626 2630 */
2627 2631 void
2628 2632 ill_frag_free_pkts(ill_t *ill, ipfb_t *ipfb, ipf_t *ipf, int free_cnt)
2629 2633 {
2630 2634 size_t count;
2631 2635 mblk_t *mp;
2632 2636 mblk_t *tmp;
2633 2637 ipf_t **ipfp = ipf->ipf_ptphn;
2634 2638
2635 2639 ASSERT(MUTEX_HELD(&ipfb->ipfb_lock));
2636 2640 ASSERT(ipfp != NULL);
2637 2641 ASSERT(ipf != NULL);
2638 2642
2639 2643 while (ipf != NULL && free_cnt-- > 0) {
2640 2644 count = ipf->ipf_count;
2641 2645 mp = ipf->ipf_mp;
2642 2646 ipf = ipf->ipf_hash_next;
2643 2647 for (tmp = mp; tmp; tmp = tmp->b_cont) {
2644 2648 IP_REASS_SET_START(tmp, 0);
2645 2649 IP_REASS_SET_END(tmp, 0);
2646 2650 }
2647 2651 atomic_add_32(&ill->ill_frag_count, -count);
2648 2652 ASSERT(ipfb->ipfb_count >= count);
2649 2653 ipfb->ipfb_count -= count;
2650 2654 ASSERT(ipfb->ipfb_frag_pkts > 0);
2651 2655 ipfb->ipfb_frag_pkts--;
2652 2656 BUMP_MIB(ill->ill_ip_mib, ipIfStatsReasmFails);
2653 2657 ip_drop_input("ipIfStatsReasmFails", mp, ill);
2654 2658 freemsg(mp);
2655 2659 }
2656 2660
2657 2661 if (ipf)
2658 2662 ipf->ipf_ptphn = ipfp;
2659 2663 ipfp[0] = ipf;
2660 2664 }
2661 2665
2662 2666 /*
2663 2667 * Helper function for ill_forward_set().
2664 2668 */
2665 2669 static void
2666 2670 ill_forward_set_on_ill(ill_t *ill, boolean_t enable)
2667 2671 {
2668 2672 ip_stack_t *ipst = ill->ill_ipst;
2669 2673
2670 2674 ASSERT(IAM_WRITER_ILL(ill) || RW_READ_HELD(&ipst->ips_ill_g_lock));
2671 2675
2672 2676 ip1dbg(("ill_forward_set: %s %s forwarding on %s",
2673 2677 (enable ? "Enabling" : "Disabling"),
2674 2678 (ill->ill_isv6 ? "IPv6" : "IPv4"), ill->ill_name));
2675 2679 mutex_enter(&ill->ill_lock);
2676 2680 if (enable)
2677 2681 ill->ill_flags |= ILLF_ROUTER;
2678 2682 else
2679 2683 ill->ill_flags &= ~ILLF_ROUTER;
2680 2684 mutex_exit(&ill->ill_lock);
2681 2685 if (ill->ill_isv6)
2682 2686 ill_set_nce_router_flags(ill, enable);
2683 2687 /* Notify routing socket listeners of this change. */
2684 2688 if (ill->ill_ipif != NULL)
2685 2689 ip_rts_ifmsg(ill->ill_ipif, RTSQ_DEFAULT);
2686 2690 }
2687 2691
2688 2692 /*
2689 2693 * Set an ill's ILLF_ROUTER flag appropriately. Send up RTS_IFINFO routing
2690 2694 * socket messages for each interface whose flags we change.
2691 2695 */
2692 2696 int
2693 2697 ill_forward_set(ill_t *ill, boolean_t enable)
2694 2698 {
2695 2699 ipmp_illgrp_t *illg;
2696 2700 ip_stack_t *ipst = ill->ill_ipst;
2697 2701
2698 2702 ASSERT(IAM_WRITER_ILL(ill) || RW_READ_HELD(&ipst->ips_ill_g_lock));
2699 2703
2700 2704 if ((enable && (ill->ill_flags & ILLF_ROUTER)) ||
2701 2705 (!enable && !(ill->ill_flags & ILLF_ROUTER)))
2702 2706 return (0);
2703 2707
2704 2708 if (IS_LOOPBACK(ill))
2705 2709 return (EINVAL);
2706 2710
2707 2711 if (enable && ill->ill_allowed_ips_cnt > 0)
2708 2712 return (EPERM);
2709 2713
2710 2714 if (IS_IPMP(ill) || IS_UNDER_IPMP(ill)) {
2711 2715 /*
2712 2716 * Update all of the interfaces in the group.
2713 2717 */
2714 2718 illg = ill->ill_grp;
2715 2719 ill = list_head(&illg->ig_if);
2716 2720 for (; ill != NULL; ill = list_next(&illg->ig_if, ill))
2717 2721 ill_forward_set_on_ill(ill, enable);
2718 2722
2719 2723 /*
2720 2724 * Update the IPMP meta-interface.
2721 2725 */
2722 2726 ill_forward_set_on_ill(ipmp_illgrp_ipmp_ill(illg), enable);
2723 2727 return (0);
2724 2728 }
2725 2729
2726 2730 ill_forward_set_on_ill(ill, enable);
2727 2731 return (0);
2728 2732 }
2729 2733
2730 2734 /*
2731 2735 * Based on the ILLF_ROUTER flag of an ill, make sure all local nce's for
2732 2736 * addresses assigned to the ill have the NCE_F_ISROUTER flag appropriately
2733 2737 * set or clear.
2734 2738 */
2735 2739 static void
2736 2740 ill_set_nce_router_flags(ill_t *ill, boolean_t enable)
2737 2741 {
2738 2742 ipif_t *ipif;
2739 2743 ncec_t *ncec;
2740 2744 nce_t *nce;
2741 2745
2742 2746 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
2743 2747 /*
2744 2748 * NOTE: we match across the illgrp because nce's for
2745 2749 * addresses on IPMP interfaces have an nce_ill that points to
2746 2750 * the bound underlying ill.
2747 2751 */
2748 2752 nce = nce_lookup_v6(ill, &ipif->ipif_v6lcl_addr);
2749 2753 if (nce != NULL) {
2750 2754 ncec = nce->nce_common;
2751 2755 mutex_enter(&ncec->ncec_lock);
2752 2756 if (enable)
2753 2757 ncec->ncec_flags |= NCE_F_ISROUTER;
2754 2758 else
2755 2759 ncec->ncec_flags &= ~NCE_F_ISROUTER;
2756 2760 mutex_exit(&ncec->ncec_lock);
2757 2761 nce_refrele(nce);
2758 2762 }
2759 2763 }
2760 2764 }
2761 2765
2762 2766 /*
2763 2767 * Intializes the context structure and returns the first ill in the list
2764 2768 * cuurently start_list and end_list can have values:
2765 2769 * MAX_G_HEADS Traverse both IPV4 and IPV6 lists.
2766 2770 * IP_V4_G_HEAD Traverse IPV4 list only.
2767 2771 * IP_V6_G_HEAD Traverse IPV6 list only.
2768 2772 */
2769 2773
2770 2774 /*
2771 2775 * We don't check for CONDEMNED ills here. Caller must do that if
2772 2776 * necessary under the ill lock.
2773 2777 */
2774 2778 ill_t *
2775 2779 ill_first(int start_list, int end_list, ill_walk_context_t *ctx,
2776 2780 ip_stack_t *ipst)
2777 2781 {
2778 2782 ill_if_t *ifp;
2779 2783 ill_t *ill;
2780 2784 avl_tree_t *avl_tree;
2781 2785
2782 2786 ASSERT(RW_LOCK_HELD(&ipst->ips_ill_g_lock));
2783 2787 ASSERT(end_list <= MAX_G_HEADS && start_list >= 0);
2784 2788
2785 2789 /*
2786 2790 * setup the lists to search
2787 2791 */
2788 2792 if (end_list != MAX_G_HEADS) {
2789 2793 ctx->ctx_current_list = start_list;
2790 2794 ctx->ctx_last_list = end_list;
2791 2795 } else {
2792 2796 ctx->ctx_last_list = MAX_G_HEADS - 1;
2793 2797 ctx->ctx_current_list = 0;
2794 2798 }
2795 2799
2796 2800 while (ctx->ctx_current_list <= ctx->ctx_last_list) {
2797 2801 ifp = IP_VX_ILL_G_LIST(ctx->ctx_current_list, ipst);
2798 2802 if (ifp != (ill_if_t *)
2799 2803 &IP_VX_ILL_G_LIST(ctx->ctx_current_list, ipst)) {
2800 2804 avl_tree = &ifp->illif_avl_by_ppa;
2801 2805 ill = avl_first(avl_tree);
2802 2806 /*
2803 2807 * ill is guaranteed to be non NULL or ifp should have
2804 2808 * not existed.
2805 2809 */
2806 2810 ASSERT(ill != NULL);
2807 2811 return (ill);
2808 2812 }
2809 2813 ctx->ctx_current_list++;
2810 2814 }
2811 2815
2812 2816 return (NULL);
2813 2817 }
2814 2818
2815 2819 /*
2816 2820 * returns the next ill in the list. ill_first() must have been called
2817 2821 * before calling ill_next() or bad things will happen.
2818 2822 */
2819 2823
2820 2824 /*
2821 2825 * We don't check for CONDEMNED ills here. Caller must do that if
2822 2826 * necessary under the ill lock.
2823 2827 */
2824 2828 ill_t *
2825 2829 ill_next(ill_walk_context_t *ctx, ill_t *lastill)
2826 2830 {
2827 2831 ill_if_t *ifp;
2828 2832 ill_t *ill;
2829 2833 ip_stack_t *ipst = lastill->ill_ipst;
2830 2834
2831 2835 ASSERT(lastill->ill_ifptr != (ill_if_t *)
2832 2836 &IP_VX_ILL_G_LIST(ctx->ctx_current_list, ipst));
2833 2837 if ((ill = avl_walk(&lastill->ill_ifptr->illif_avl_by_ppa, lastill,
2834 2838 AVL_AFTER)) != NULL) {
2835 2839 return (ill);
2836 2840 }
2837 2841
2838 2842 /* goto next ill_ifp in the list. */
2839 2843 ifp = lastill->ill_ifptr->illif_next;
2840 2844
2841 2845 /* make sure not at end of circular list */
2842 2846 while (ifp ==
2843 2847 (ill_if_t *)&IP_VX_ILL_G_LIST(ctx->ctx_current_list, ipst)) {
2844 2848 if (++ctx->ctx_current_list > ctx->ctx_last_list)
2845 2849 return (NULL);
2846 2850 ifp = IP_VX_ILL_G_LIST(ctx->ctx_current_list, ipst);
2847 2851 }
2848 2852
2849 2853 return (avl_first(&ifp->illif_avl_by_ppa));
2850 2854 }
2851 2855
2852 2856 /*
2853 2857 * Check interface name for correct format: [a-zA-Z]+[a-zA-Z0-9._]*[0-9]+
2854 2858 * The final number (PPA) must not have any leading zeros. Upon success, a
2855 2859 * pointer to the start of the PPA is returned; otherwise NULL is returned.
2856 2860 */
2857 2861 static char *
2858 2862 ill_get_ppa_ptr(char *name)
2859 2863 {
2860 2864 int namelen = strlen(name);
2861 2865 int end_ndx = namelen - 1;
2862 2866 int ppa_ndx, i;
2863 2867
2864 2868 /*
2865 2869 * Check that the first character is [a-zA-Z], and that the last
2866 2870 * character is [0-9].
2867 2871 */
2868 2872 if (namelen == 0 || !isalpha(name[0]) || !isdigit(name[end_ndx]))
2869 2873 return (NULL);
2870 2874
2871 2875 /*
2872 2876 * Set `ppa_ndx' to the PPA start, and check for leading zeroes.
2873 2877 */
2874 2878 for (ppa_ndx = end_ndx; ppa_ndx > 0; ppa_ndx--)
2875 2879 if (!isdigit(name[ppa_ndx - 1]))
2876 2880 break;
2877 2881
2878 2882 if (name[ppa_ndx] == '0' && ppa_ndx < end_ndx)
2879 2883 return (NULL);
2880 2884
2881 2885 /*
2882 2886 * Check that the intermediate characters are [a-z0-9.]
2883 2887 */
2884 2888 for (i = 1; i < ppa_ndx; i++) {
2885 2889 if (!isalpha(name[i]) && !isdigit(name[i]) &&
2886 2890 name[i] != '.' && name[i] != '_') {
2887 2891 return (NULL);
2888 2892 }
2889 2893 }
2890 2894
2891 2895 return (name + ppa_ndx);
2892 2896 }
2893 2897
2894 2898 /*
2895 2899 * use avl tree to locate the ill.
2896 2900 */
2897 2901 static ill_t *
2898 2902 ill_find_by_name(char *name, boolean_t isv6, ip_stack_t *ipst)
2899 2903 {
2900 2904 char *ppa_ptr = NULL;
2901 2905 int len;
2902 2906 uint_t ppa;
2903 2907 ill_t *ill = NULL;
2904 2908 ill_if_t *ifp;
2905 2909 int list;
2906 2910
2907 2911 /*
2908 2912 * get ppa ptr
2909 2913 */
2910 2914 if (isv6)
2911 2915 list = IP_V6_G_HEAD;
2912 2916 else
2913 2917 list = IP_V4_G_HEAD;
2914 2918
2915 2919 if ((ppa_ptr = ill_get_ppa_ptr(name)) == NULL) {
2916 2920 return (NULL);
2917 2921 }
2918 2922
2919 2923 len = ppa_ptr - name + 1;
2920 2924
2921 2925 ppa = stoi(&ppa_ptr);
2922 2926
2923 2927 ifp = IP_VX_ILL_G_LIST(list, ipst);
2924 2928
2925 2929 while (ifp != (ill_if_t *)&IP_VX_ILL_G_LIST(list, ipst)) {
2926 2930 /*
2927 2931 * match is done on len - 1 as the name is not null
2928 2932 * terminated it contains ppa in addition to the interface
2929 2933 * name.
2930 2934 */
2931 2935 if ((ifp->illif_name_len == len) &&
2932 2936 bcmp(ifp->illif_name, name, len - 1) == 0) {
2933 2937 break;
2934 2938 } else {
2935 2939 ifp = ifp->illif_next;
2936 2940 }
2937 2941 }
2938 2942
2939 2943 if (ifp == (ill_if_t *)&IP_VX_ILL_G_LIST(list, ipst)) {
2940 2944 /*
2941 2945 * Even the interface type does not exist.
2942 2946 */
2943 2947 return (NULL);
2944 2948 }
2945 2949
2946 2950 ill = avl_find(&ifp->illif_avl_by_ppa, (void *) &ppa, NULL);
2947 2951 if (ill != NULL) {
2948 2952 mutex_enter(&ill->ill_lock);
2949 2953 if (ILL_CAN_LOOKUP(ill)) {
2950 2954 ill_refhold_locked(ill);
2951 2955 mutex_exit(&ill->ill_lock);
2952 2956 return (ill);
2953 2957 }
2954 2958 mutex_exit(&ill->ill_lock);
2955 2959 }
2956 2960 return (NULL);
2957 2961 }
2958 2962
2959 2963 /*
2960 2964 * comparison function for use with avl.
2961 2965 */
2962 2966 static int
2963 2967 ill_compare_ppa(const void *ppa_ptr, const void *ill_ptr)
2964 2968 {
2965 2969 uint_t ppa;
2966 2970 uint_t ill_ppa;
2967 2971
2968 2972 ASSERT(ppa_ptr != NULL && ill_ptr != NULL);
2969 2973
2970 2974 ppa = *((uint_t *)ppa_ptr);
2971 2975 ill_ppa = ((const ill_t *)ill_ptr)->ill_ppa;
2972 2976 /*
2973 2977 * We want the ill with the lowest ppa to be on the
2974 2978 * top.
2975 2979 */
2976 2980 if (ill_ppa < ppa)
2977 2981 return (1);
2978 2982 if (ill_ppa > ppa)
2979 2983 return (-1);
2980 2984 return (0);
2981 2985 }
2982 2986
2983 2987 /*
2984 2988 * remove an interface type from the global list.
2985 2989 */
2986 2990 static void
2987 2991 ill_delete_interface_type(ill_if_t *interface)
2988 2992 {
2989 2993 ASSERT(interface != NULL);
2990 2994 ASSERT(avl_numnodes(&interface->illif_avl_by_ppa) == 0);
2991 2995
2992 2996 avl_destroy(&interface->illif_avl_by_ppa);
2993 2997 if (interface->illif_ppa_arena != NULL)
2994 2998 vmem_destroy(interface->illif_ppa_arena);
2995 2999
2996 3000 remque(interface);
2997 3001
2998 3002 mi_free(interface);
2999 3003 }
3000 3004
3001 3005 /*
3002 3006 * remove ill from the global list.
3003 3007 */
3004 3008 static void
3005 3009 ill_glist_delete(ill_t *ill)
3006 3010 {
3007 3011 ip_stack_t *ipst;
3008 3012 phyint_t *phyi;
3009 3013
3010 3014 if (ill == NULL)
3011 3015 return;
3012 3016 ipst = ill->ill_ipst;
3013 3017 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
3014 3018
3015 3019 /*
3016 3020 * If the ill was never inserted into the AVL tree
3017 3021 * we skip the if branch.
3018 3022 */
3019 3023 if (ill->ill_ifptr != NULL) {
3020 3024 /*
3021 3025 * remove from AVL tree and free ppa number
3022 3026 */
3023 3027 avl_remove(&ill->ill_ifptr->illif_avl_by_ppa, ill);
3024 3028
3025 3029 if (ill->ill_ifptr->illif_ppa_arena != NULL) {
3026 3030 vmem_free(ill->ill_ifptr->illif_ppa_arena,
3027 3031 (void *)(uintptr_t)(ill->ill_ppa+1), 1);
3028 3032 }
3029 3033 if (avl_numnodes(&ill->ill_ifptr->illif_avl_by_ppa) == 0) {
3030 3034 ill_delete_interface_type(ill->ill_ifptr);
3031 3035 }
3032 3036
3033 3037 /*
3034 3038 * Indicate ill is no longer in the list.
3035 3039 */
3036 3040 ill->ill_ifptr = NULL;
3037 3041 ill->ill_name_length = 0;
3038 3042 ill->ill_name[0] = '\0';
3039 3043 ill->ill_ppa = UINT_MAX;
3040 3044 }
3041 3045
3042 3046 /* Generate one last event for this ill. */
3043 3047 ill_nic_event_dispatch(ill, 0, NE_UNPLUMB, ill->ill_name,
3044 3048 ill->ill_name_length);
3045 3049
3046 3050 ASSERT(ill->ill_phyint != NULL);
3047 3051 phyi = ill->ill_phyint;
3048 3052 ill->ill_phyint = NULL;
3049 3053
3050 3054 /*
3051 3055 * ill_init allocates a phyint always to store the copy
3052 3056 * of flags relevant to phyint. At that point in time, we could
3053 3057 * not assign the name and hence phyint_illv4/v6 could not be
3054 3058 * initialized. Later in ipif_set_values, we assign the name to
3055 3059 * the ill, at which point in time we assign phyint_illv4/v6.
3056 3060 * Thus we don't rely on phyint_illv6 to be initialized always.
3057 3061 */
3058 3062 if (ill->ill_flags & ILLF_IPV6)
3059 3063 phyi->phyint_illv6 = NULL;
3060 3064 else
3061 3065 phyi->phyint_illv4 = NULL;
3062 3066
3063 3067 if (phyi->phyint_illv4 != NULL || phyi->phyint_illv6 != NULL) {
3064 3068 rw_exit(&ipst->ips_ill_g_lock);
3065 3069 return;
3066 3070 }
3067 3071
3068 3072 /*
3069 3073 * There are no ills left on this phyint; pull it out of the phyint
3070 3074 * avl trees, and free it.
3071 3075 */
3072 3076 if (phyi->phyint_ifindex > 0) {
3073 3077 avl_remove(&ipst->ips_phyint_g_list->phyint_list_avl_by_index,
3074 3078 phyi);
3075 3079 avl_remove(&ipst->ips_phyint_g_list->phyint_list_avl_by_name,
3076 3080 phyi);
3077 3081 }
3078 3082 rw_exit(&ipst->ips_ill_g_lock);
3079 3083
3080 3084 phyint_free(phyi);
3081 3085 }
3082 3086
3083 3087 /*
3084 3088 * allocate a ppa, if the number of plumbed interfaces of this type are
3085 3089 * less than ill_no_arena do a linear search to find a unused ppa.
3086 3090 * When the number goes beyond ill_no_arena switch to using an arena.
3087 3091 * Note: ppa value of zero cannot be allocated from vmem_arena as it
3088 3092 * is the return value for an error condition, so allocation starts at one
3089 3093 * and is decremented by one.
3090 3094 */
3091 3095 static int
3092 3096 ill_alloc_ppa(ill_if_t *ifp, ill_t *ill)
3093 3097 {
3094 3098 ill_t *tmp_ill;
3095 3099 uint_t start, end;
3096 3100 int ppa;
3097 3101
3098 3102 if (ifp->illif_ppa_arena == NULL &&
3099 3103 (avl_numnodes(&ifp->illif_avl_by_ppa) + 1 > ill_no_arena)) {
3100 3104 /*
3101 3105 * Create an arena.
3102 3106 */
3103 3107 ifp->illif_ppa_arena = vmem_create(ifp->illif_name,
3104 3108 (void *)1, UINT_MAX - 1, 1, NULL, NULL,
3105 3109 NULL, 0, VM_SLEEP | VMC_IDENTIFIER);
3106 3110 /* allocate what has already been assigned */
3107 3111 for (tmp_ill = avl_first(&ifp->illif_avl_by_ppa);
3108 3112 tmp_ill != NULL; tmp_ill = avl_walk(&ifp->illif_avl_by_ppa,
3109 3113 tmp_ill, AVL_AFTER)) {
3110 3114 ppa = (int)(uintptr_t)vmem_xalloc(ifp->illif_ppa_arena,
3111 3115 1, /* size */
3112 3116 1, /* align/quantum */
3113 3117 0, /* phase */
3114 3118 0, /* nocross */
3115 3119 /* minaddr */
3116 3120 (void *)((uintptr_t)tmp_ill->ill_ppa + 1),
3117 3121 /* maxaddr */
3118 3122 (void *)((uintptr_t)tmp_ill->ill_ppa + 2),
3119 3123 VM_NOSLEEP|VM_FIRSTFIT);
3120 3124 if (ppa == 0) {
3121 3125 ip1dbg(("ill_alloc_ppa: ppa allocation"
3122 3126 " failed while switching"));
3123 3127 vmem_destroy(ifp->illif_ppa_arena);
3124 3128 ifp->illif_ppa_arena = NULL;
3125 3129 break;
3126 3130 }
3127 3131 }
3128 3132 }
3129 3133
3130 3134 if (ifp->illif_ppa_arena != NULL) {
3131 3135 if (ill->ill_ppa == UINT_MAX) {
3132 3136 ppa = (int)(uintptr_t)vmem_alloc(ifp->illif_ppa_arena,
3133 3137 1, VM_NOSLEEP|VM_FIRSTFIT);
3134 3138 if (ppa == 0)
3135 3139 return (EAGAIN);
3136 3140 ill->ill_ppa = --ppa;
3137 3141 } else {
3138 3142 ppa = (int)(uintptr_t)vmem_xalloc(ifp->illif_ppa_arena,
3139 3143 1, /* size */
3140 3144 1, /* align/quantum */
3141 3145 0, /* phase */
3142 3146 0, /* nocross */
3143 3147 (void *)(uintptr_t)(ill->ill_ppa + 1), /* minaddr */
3144 3148 (void *)(uintptr_t)(ill->ill_ppa + 2), /* maxaddr */
3145 3149 VM_NOSLEEP|VM_FIRSTFIT);
3146 3150 /*
3147 3151 * Most likely the allocation failed because
3148 3152 * the requested ppa was in use.
3149 3153 */
3150 3154 if (ppa == 0)
3151 3155 return (EEXIST);
3152 3156 }
3153 3157 return (0);
3154 3158 }
3155 3159
3156 3160 /*
3157 3161 * No arena is in use and not enough (>ill_no_arena) interfaces have
3158 3162 * been plumbed to create one. Do a linear search to get a unused ppa.
3159 3163 */
3160 3164 if (ill->ill_ppa == UINT_MAX) {
3161 3165 end = UINT_MAX - 1;
3162 3166 start = 0;
3163 3167 } else {
3164 3168 end = start = ill->ill_ppa;
3165 3169 }
3166 3170
3167 3171 tmp_ill = avl_find(&ifp->illif_avl_by_ppa, (void *)&start, NULL);
3168 3172 while (tmp_ill != NULL && tmp_ill->ill_ppa == start) {
3169 3173 if (start++ >= end) {
3170 3174 if (ill->ill_ppa == UINT_MAX)
3171 3175 return (EAGAIN);
3172 3176 else
3173 3177 return (EEXIST);
3174 3178 }
3175 3179 tmp_ill = avl_walk(&ifp->illif_avl_by_ppa, tmp_ill, AVL_AFTER);
3176 3180 }
3177 3181 ill->ill_ppa = start;
3178 3182 return (0);
3179 3183 }
3180 3184
3181 3185 /*
3182 3186 * Insert ill into the list of configured ill's. Once this function completes,
3183 3187 * the ill is globally visible and is available through lookups. More precisely
3184 3188 * this happens after the caller drops the ill_g_lock.
3185 3189 */
3186 3190 static int
3187 3191 ill_glist_insert(ill_t *ill, char *name, boolean_t isv6)
3188 3192 {
3189 3193 ill_if_t *ill_interface;
3190 3194 avl_index_t where = 0;
3191 3195 int error;
3192 3196 int name_length;
3193 3197 int index;
3194 3198 boolean_t check_length = B_FALSE;
3195 3199 ip_stack_t *ipst = ill->ill_ipst;
3196 3200
3197 3201 ASSERT(RW_WRITE_HELD(&ipst->ips_ill_g_lock));
3198 3202
3199 3203 name_length = mi_strlen(name) + 1;
3200 3204
3201 3205 if (isv6)
3202 3206 index = IP_V6_G_HEAD;
3203 3207 else
3204 3208 index = IP_V4_G_HEAD;
3205 3209
3206 3210 ill_interface = IP_VX_ILL_G_LIST(index, ipst);
3207 3211 /*
3208 3212 * Search for interface type based on name
3209 3213 */
3210 3214 while (ill_interface != (ill_if_t *)&IP_VX_ILL_G_LIST(index, ipst)) {
3211 3215 if ((ill_interface->illif_name_len == name_length) &&
3212 3216 (strcmp(ill_interface->illif_name, name) == 0)) {
3213 3217 break;
3214 3218 }
3215 3219 ill_interface = ill_interface->illif_next;
3216 3220 }
3217 3221
3218 3222 /*
3219 3223 * Interface type not found, create one.
3220 3224 */
3221 3225 if (ill_interface == (ill_if_t *)&IP_VX_ILL_G_LIST(index, ipst)) {
3222 3226 ill_g_head_t ghead;
3223 3227
3224 3228 /*
3225 3229 * allocate ill_if_t structure
3226 3230 */
3227 3231 ill_interface = (ill_if_t *)mi_zalloc(sizeof (ill_if_t));
3228 3232 if (ill_interface == NULL) {
3229 3233 return (ENOMEM);
3230 3234 }
3231 3235
3232 3236 (void) strcpy(ill_interface->illif_name, name);
3233 3237 ill_interface->illif_name_len = name_length;
3234 3238
3235 3239 avl_create(&ill_interface->illif_avl_by_ppa,
3236 3240 ill_compare_ppa, sizeof (ill_t),
3237 3241 offsetof(struct ill_s, ill_avl_byppa));
3238 3242
3239 3243 /*
3240 3244 * link the structure in the back to maintain order
3241 3245 * of configuration for ifconfig output.
3242 3246 */
3243 3247 ghead = ipst->ips_ill_g_heads[index];
3244 3248 insque(ill_interface, ghead.ill_g_list_tail);
3245 3249 }
3246 3250
3247 3251 if (ill->ill_ppa == UINT_MAX)
3248 3252 check_length = B_TRUE;
3249 3253
3250 3254 error = ill_alloc_ppa(ill_interface, ill);
3251 3255 if (error != 0) {
3252 3256 if (avl_numnodes(&ill_interface->illif_avl_by_ppa) == 0)
3253 3257 ill_delete_interface_type(ill->ill_ifptr);
3254 3258 return (error);
3255 3259 }
3256 3260
3257 3261 /*
3258 3262 * When the ppa is choosen by the system, check that there is
3259 3263 * enough space to insert ppa. if a specific ppa was passed in this
3260 3264 * check is not required as the interface name passed in will have
3261 3265 * the right ppa in it.
3262 3266 */
3263 3267 if (check_length) {
3264 3268 /*
3265 3269 * UINT_MAX - 1 should fit in 10 chars, alloc 12 chars.
3266 3270 */
3267 3271 char buf[sizeof (uint_t) * 3];
3268 3272
3269 3273 /*
3270 3274 * convert ppa to string to calculate the amount of space
3271 3275 * required for it in the name.
3272 3276 */
3273 3277 numtos(ill->ill_ppa, buf);
3274 3278
3275 3279 /* Do we have enough space to insert ppa ? */
3276 3280
3277 3281 if ((mi_strlen(name) + mi_strlen(buf) + 1) > LIFNAMSIZ) {
3278 3282 /* Free ppa and interface type struct */
3279 3283 if (ill_interface->illif_ppa_arena != NULL) {
3280 3284 vmem_free(ill_interface->illif_ppa_arena,
3281 3285 (void *)(uintptr_t)(ill->ill_ppa+1), 1);
3282 3286 }
3283 3287 if (avl_numnodes(&ill_interface->illif_avl_by_ppa) == 0)
3284 3288 ill_delete_interface_type(ill->ill_ifptr);
3285 3289
3286 3290 return (EINVAL);
3287 3291 }
3288 3292 }
3289 3293
3290 3294 (void) sprintf(ill->ill_name, "%s%u", name, ill->ill_ppa);
3291 3295 ill->ill_name_length = mi_strlen(ill->ill_name) + 1;
3292 3296
3293 3297 (void) avl_find(&ill_interface->illif_avl_by_ppa, &ill->ill_ppa,
3294 3298 &where);
3295 3299 ill->ill_ifptr = ill_interface;
3296 3300 avl_insert(&ill_interface->illif_avl_by_ppa, ill, where);
3297 3301
3298 3302 ill_phyint_reinit(ill);
3299 3303 return (0);
3300 3304 }
3301 3305
3302 3306 /* Initialize the per phyint ipsq used for serialization */
3303 3307 static boolean_t
3304 3308 ipsq_init(ill_t *ill, boolean_t enter)
3305 3309 {
3306 3310 ipsq_t *ipsq;
3307 3311 ipxop_t *ipx;
3308 3312
3309 3313 if ((ipsq = kmem_zalloc(sizeof (ipsq_t), KM_NOSLEEP)) == NULL)
3310 3314 return (B_FALSE);
3311 3315
3312 3316 ill->ill_phyint->phyint_ipsq = ipsq;
3313 3317 ipx = ipsq->ipsq_xop = &ipsq->ipsq_ownxop;
3314 3318 ipx->ipx_ipsq = ipsq;
3315 3319 ipsq->ipsq_next = ipsq;
3316 3320 ipsq->ipsq_phyint = ill->ill_phyint;
3317 3321 mutex_init(&ipsq->ipsq_lock, NULL, MUTEX_DEFAULT, 0);
3318 3322 mutex_init(&ipx->ipx_lock, NULL, MUTEX_DEFAULT, 0);
3319 3323 ipsq->ipsq_ipst = ill->ill_ipst; /* No netstack_hold */
3320 3324 if (enter) {
3321 3325 ipx->ipx_writer = curthread;
↓ open down ↓ |
3028 lines elided |
↑ open up ↑ |
3322 3326 ipx->ipx_forced = B_FALSE;
3323 3327 ipx->ipx_reentry_cnt = 1;
3324 3328 #ifdef DEBUG
3325 3329 ipx->ipx_depth = getpcstack(ipx->ipx_stack, IPX_STACK_DEPTH);
3326 3330 #endif
3327 3331 }
3328 3332 return (B_TRUE);
3329 3333 }
3330 3334
3331 3335 /*
3332 - * ill_init is called by ip_open when a device control stream is opened.
3333 - * It does a few initializations, and shoots a DL_INFO_REQ message down
3334 - * to the driver. The response is later picked up in ip_rput_dlpi and
3335 - * used to set up default mechanisms for talking to the driver. (Always
3336 - * called as writer.)
3337 - *
3338 - * If this function returns error, ip_open will call ip_close which in
3339 - * turn will call ill_delete to clean up any memory allocated here that
3340 - * is not yet freed.
3336 + * Here we perform initialisation of the ill_t common to both regular
3337 + * interface ILLs and the special loopback ILL created by ill_lookup_on_name.
3341 3338 */
3342 -int
3343 -ill_init(queue_t *q, ill_t *ill)
3339 +static int
3340 +ill_init_common(ill_t *ill, queue_t *q, boolean_t isv6, boolean_t is_loopback,
3341 + boolean_t ipsq_enter)
3344 3342 {
3345 - int count;
3346 - dl_info_req_t *dlir;
3347 - mblk_t *info_mp;
3343 + int count;
3348 3344 uchar_t *frag_ptr;
3349 3345
3350 - /*
3351 - * The ill is initialized to zero by mi_alloc*(). In addition
3352 - * some fields already contain valid values, initialized in
3353 - * ip_open(), before we reach here.
3354 - */
3355 3346 mutex_init(&ill->ill_lock, NULL, MUTEX_DEFAULT, 0);
3356 3347 mutex_init(&ill->ill_saved_ire_lock, NULL, MUTEX_DEFAULT, NULL);
3357 3348 ill->ill_saved_ire_cnt = 0;
3358 3349
3359 - ill->ill_rq = q;
3360 - ill->ill_wq = WR(q);
3350 + if (is_loopback == B_TRUE) {
3351 + ill->ill_max_frag = isv6 == B_TRUE ? ip_loopback_mtu_v6plus :
3352 + ip_loopback_mtuplus;
3353 + /*
3354 + * No resolver here.
3355 + */
3356 + ill->ill_net_type = IRE_LOOPBACK;
3357 + } else {
3358 + ill->ill_rq = q;
3359 + ill->ill_wq = WR(q);
3360 + ill->ill_ppa = UINT_MAX;
3361 + }
3361 3362
3362 - info_mp = allocb(MAX(sizeof (dl_info_req_t), sizeof (dl_info_ack_t)),
3363 - BPRI_HI);
3364 - if (info_mp == NULL)
3365 - return (ENOMEM);
3363 + ill->ill_isv6 = isv6;
3366 3364
3367 3365 /*
3368 3366 * Allocate sufficient space to contain our fragment hash table and
3369 3367 * the device name.
3370 3368 */
3371 3369 frag_ptr = (uchar_t *)mi_zalloc(ILL_FRAG_HASH_TBL_SIZE + 2 * LIFNAMSIZ);
3372 - if (frag_ptr == NULL) {
3373 - freemsg(info_mp);
3370 + if (frag_ptr == NULL)
3374 3371 return (ENOMEM);
3375 - }
3376 3372 ill->ill_frag_ptr = frag_ptr;
3377 3373 ill->ill_frag_free_num_pkts = 0;
3378 3374 ill->ill_last_frag_clean_time = 0;
3379 3375 ill->ill_frag_hash_tbl = (ipfb_t *)frag_ptr;
3380 3376 ill->ill_name = (char *)(frag_ptr + ILL_FRAG_HASH_TBL_SIZE);
3381 3377 for (count = 0; count < ILL_FRAG_HASH_TBL_COUNT; count++) {
3382 3378 mutex_init(&ill->ill_frag_hash_tbl[count].ipfb_lock,
3383 3379 NULL, MUTEX_DEFAULT, NULL);
3384 3380 }
3385 3381
3386 3382 ill->ill_phyint = (phyint_t *)mi_zalloc(sizeof (phyint_t));
3387 3383 if (ill->ill_phyint == NULL) {
3388 - freemsg(info_mp);
3389 3384 mi_free(frag_ptr);
3390 3385 return (ENOMEM);
3391 3386 }
3392 3387
3393 3388 mutex_init(&ill->ill_phyint->phyint_lock, NULL, MUTEX_DEFAULT, 0);
3394 - /*
3395 - * For now pretend this is a v4 ill. We need to set phyint_ill*
3396 - * at this point because of the following reason. If we can't
3397 - * enter the ipsq at some point and cv_wait, the writer that
3398 - * wakes us up tries to locate us using the list of all phyints
3399 - * in an ipsq and the ills from the phyint thru the phyint_ill*.
3400 - * If we don't set it now, we risk a missed wakeup.
3401 - */
3402 - ill->ill_phyint->phyint_illv4 = ill;
3403 - ill->ill_ppa = UINT_MAX;
3389 + if (isv6 == B_TRUE) {
3390 + ill->ill_phyint->phyint_illv6 = ill;
3391 + } else {
3392 + ill->ill_phyint->phyint_illv4 = ill;
3393 + }
3394 + if (is_loopback == B_TRUE) {
3395 + phyint_flags_init(ill->ill_phyint, DL_LOOP);
3396 + }
3397 +
3404 3398 list_create(&ill->ill_nce, sizeof (nce_t), offsetof(nce_t, nce_node));
3405 3399
3406 3400 ill_set_inputfn(ill);
3407 3401
3408 - if (!ipsq_init(ill, B_TRUE)) {
3409 - freemsg(info_mp);
3402 + if (!ipsq_init(ill, ipsq_enter)) {
3410 3403 mi_free(frag_ptr);
3411 3404 mi_free(ill->ill_phyint);
3412 3405 return (ENOMEM);
3413 3406 }
3414 3407
3415 - ill->ill_state_flags |= ILL_LL_SUBNET_PENDING;
3416 -
3417 3408 /* Frag queue limit stuff */
3418 3409 ill->ill_frag_count = 0;
3419 3410 ill->ill_ipf_gen = 0;
3420 3411
3421 3412 rw_init(&ill->ill_mcast_lock, NULL, RW_DEFAULT, NULL);
3422 3413 mutex_init(&ill->ill_mcast_serializer, NULL, MUTEX_DEFAULT, NULL);
3423 3414 ill->ill_global_timer = INFINITY;
3424 3415 ill->ill_mcast_v1_time = ill->ill_mcast_v2_time = 0;
3425 3416 ill->ill_mcast_v1_tset = ill->ill_mcast_v2_tset = 0;
3426 3417 ill->ill_mcast_rv = MCAST_DEF_ROBUSTNESS;
3427 3418 ill->ill_mcast_qi = MCAST_DEF_QUERY_INTERVAL;
3428 3419
3429 3420 /*
3430 3421 * Initialize IPv6 configuration variables. The IP module is always
↓ open down ↓ |
4 lines elided |
↑ open up ↑ |
3431 3422 * opened as an IPv4 module. Instead tracking down the cases where
3432 3423 * it switches to do ipv6, we'll just initialize the IPv6 configuration
3433 3424 * here for convenience, this has no effect until the ill is set to do
3434 3425 * IPv6.
3435 3426 */
3436 3427 ill->ill_reachable_time = ND_REACHABLE_TIME;
3437 3428 ill->ill_xmit_count = ND_MAX_MULTICAST_SOLICIT;
3438 3429 ill->ill_max_buf = ND_MAX_Q;
3439 3430 ill->ill_refcnt = 0;
3440 3431
3432 + return (0);
3433 +}
3434 +
3435 +/*
3436 + * ill_init is called by ip_open when a device control stream is opened.
3437 + * It does a few initializations, and shoots a DL_INFO_REQ message down
3438 + * to the driver. The response is later picked up in ip_rput_dlpi and
3439 + * used to set up default mechanisms for talking to the driver. (Always
3440 + * called as writer.)
3441 + *
3442 + * If this function returns error, ip_open will call ip_close which in
3443 + * turn will call ill_delete to clean up any memory allocated here that
3444 + * is not yet freed.
3445 + *
3446 + * Note: ill_ipst and ill_zoneid must be set before calling ill_init.
3447 + */
3448 +int
3449 +ill_init(queue_t *q, ill_t *ill)
3450 +{
3451 + int ret;
3452 + dl_info_req_t *dlir;
3453 + mblk_t *info_mp;
3454 +
3455 + info_mp = allocb(MAX(sizeof (dl_info_req_t), sizeof (dl_info_ack_t)),
3456 + BPRI_HI);
3457 + if (info_mp == NULL)
3458 + return (ENOMEM);
3459 +
3460 + /*
3461 + * The ill is initialized to zero by mi_alloc*(). In addition
3462 + * some fields already contain valid values, initialized in
3463 + * ip_open(), before we reach here.
3464 + *
3465 + * For now pretend this is a v4 ill. We need to set phyint_ill*
3466 + * at this point because of the following reason. If we can't
3467 + * enter the ipsq at some point and cv_wait, the writer that
3468 + * wakes us up tries to locate us using the list of all phyints
3469 + * in an ipsq and the ills from the phyint thru the phyint_ill*.
3470 + * If we don't set it now, we risk a missed wakeup.
3471 + */
3472 + if ((ret = ill_init_common(ill, q, B_FALSE, B_FALSE, B_TRUE)) != 0) {
3473 + freemsg(info_mp);
3474 + return (ret);
3475 + }
3476 +
3477 + ill->ill_state_flags |= ILL_LL_SUBNET_PENDING;
3478 +
3441 3479 /* Send down the Info Request to the driver. */
3442 3480 info_mp->b_datap->db_type = M_PCPROTO;
3443 3481 dlir = (dl_info_req_t *)info_mp->b_rptr;
3444 3482 info_mp->b_wptr = (uchar_t *)&dlir[1];
3445 3483 dlir->dl_primitive = DL_INFO_REQ;
3446 3484
3447 3485 ill->ill_dlpi_pending = DL_PRIM_INVAL;
3448 3486
3449 3487 qprocson(q);
3450 3488 ill_dlpi_send(ill, info_mp);
3451 3489
3452 3490 return (0);
3453 3491 }
3454 3492
3455 3493 /*
3456 3494 * ill_dls_info
3457 3495 * creates datalink socket info from the device.
3458 3496 */
3459 3497 int
3460 3498 ill_dls_info(struct sockaddr_dl *sdl, const ill_t *ill)
3461 3499 {
3462 3500 size_t len;
3463 3501
3464 3502 sdl->sdl_family = AF_LINK;
3465 3503 sdl->sdl_index = ill_get_upper_ifindex(ill);
3466 3504 sdl->sdl_type = ill->ill_type;
3467 3505 ill_get_name(ill, sdl->sdl_data, sizeof (sdl->sdl_data));
3468 3506 len = strlen(sdl->sdl_data);
3469 3507 ASSERT(len < 256);
3470 3508 sdl->sdl_nlen = (uchar_t)len;
3471 3509 sdl->sdl_alen = ill->ill_phys_addr_length;
3472 3510 sdl->sdl_slen = 0;
3473 3511 if (ill->ill_phys_addr_length != 0 && ill->ill_phys_addr != NULL)
3474 3512 bcopy(ill->ill_phys_addr, &sdl->sdl_data[len], sdl->sdl_alen);
3475 3513
3476 3514 return (sizeof (struct sockaddr_dl));
3477 3515 }
3478 3516
3479 3517 /*
3480 3518 * ill_xarp_info
3481 3519 * creates xarp info from the device.
3482 3520 */
3483 3521 static int
3484 3522 ill_xarp_info(struct sockaddr_dl *sdl, ill_t *ill)
3485 3523 {
3486 3524 sdl->sdl_family = AF_LINK;
3487 3525 sdl->sdl_index = ill->ill_phyint->phyint_ifindex;
3488 3526 sdl->sdl_type = ill->ill_type;
3489 3527 ill_get_name(ill, sdl->sdl_data, sizeof (sdl->sdl_data));
3490 3528 sdl->sdl_nlen = (uchar_t)mi_strlen(sdl->sdl_data);
3491 3529 sdl->sdl_alen = ill->ill_phys_addr_length;
3492 3530 sdl->sdl_slen = 0;
3493 3531 return (sdl->sdl_nlen);
3494 3532 }
3495 3533
3496 3534 static int
3497 3535 loopback_kstat_update(kstat_t *ksp, int rw)
3498 3536 {
3499 3537 kstat_named_t *kn;
3500 3538 netstackid_t stackid;
3501 3539 netstack_t *ns;
3502 3540 ip_stack_t *ipst;
3503 3541
3504 3542 if (ksp == NULL || ksp->ks_data == NULL)
3505 3543 return (EIO);
3506 3544
3507 3545 if (rw == KSTAT_WRITE)
3508 3546 return (EACCES);
3509 3547
3510 3548 kn = KSTAT_NAMED_PTR(ksp);
3511 3549 stackid = (zoneid_t)(uintptr_t)ksp->ks_private;
3512 3550
3513 3551 ns = netstack_find_by_stackid(stackid);
3514 3552 if (ns == NULL)
3515 3553 return (-1);
3516 3554
3517 3555 ipst = ns->netstack_ip;
3518 3556 if (ipst == NULL) {
3519 3557 netstack_rele(ns);
3520 3558 return (-1);
3521 3559 }
3522 3560 kn[0].value.ui32 = ipst->ips_loopback_packets;
3523 3561 kn[1].value.ui32 = ipst->ips_loopback_packets;
3524 3562 netstack_rele(ns);
3525 3563 return (0);
3526 3564 }
3527 3565
3528 3566 /*
3529 3567 * Has ifindex been plumbed already?
3530 3568 */
3531 3569 static boolean_t
3532 3570 phyint_exists(uint_t index, ip_stack_t *ipst)
3533 3571 {
3534 3572 ASSERT(index != 0);
3535 3573 ASSERT(RW_LOCK_HELD(&ipst->ips_ill_g_lock));
3536 3574
3537 3575 return (avl_find(&ipst->ips_phyint_g_list->phyint_list_avl_by_index,
3538 3576 &index, NULL) != NULL);
3539 3577 }
3540 3578
3541 3579 /*
3542 3580 * Pick a unique ifindex.
3543 3581 * When the index counter passes IF_INDEX_MAX for the first time, the wrap
3544 3582 * flag is set so that next time time ip_assign_ifindex() is called, it
3545 3583 * falls through and resets the index counter back to 1, the minimum value
3546 3584 * for the interface index. The logic below assumes that ips_ill_index
3547 3585 * can hold a value of IF_INDEX_MAX+1 without there being any loss
3548 3586 * (i.e. reset back to 0.)
3549 3587 */
3550 3588 boolean_t
3551 3589 ip_assign_ifindex(uint_t *indexp, ip_stack_t *ipst)
3552 3590 {
3553 3591 uint_t loops;
3554 3592
3555 3593 if (!ipst->ips_ill_index_wrap) {
3556 3594 *indexp = ipst->ips_ill_index++;
3557 3595 if (ipst->ips_ill_index > IF_INDEX_MAX) {
3558 3596 /*
3559 3597 * Reached the maximum ifindex value, set the wrap
3560 3598 * flag to indicate that it is no longer possible
3561 3599 * to assume that a given index is unallocated.
3562 3600 */
3563 3601 ipst->ips_ill_index_wrap = B_TRUE;
3564 3602 }
3565 3603 return (B_TRUE);
3566 3604 }
3567 3605
3568 3606 if (ipst->ips_ill_index > IF_INDEX_MAX)
3569 3607 ipst->ips_ill_index = 1;
3570 3608
3571 3609 /*
3572 3610 * Start reusing unused indexes. Note that we hold the ill_g_lock
3573 3611 * at this point and don't want to call any function that attempts
3574 3612 * to get the lock again.
3575 3613 */
3576 3614 for (loops = IF_INDEX_MAX; loops > 0; loops--) {
3577 3615 if (!phyint_exists(ipst->ips_ill_index, ipst)) {
3578 3616 /* found unused index - use it */
3579 3617 *indexp = ipst->ips_ill_index;
3580 3618 return (B_TRUE);
3581 3619 }
3582 3620
3583 3621 ipst->ips_ill_index++;
3584 3622 if (ipst->ips_ill_index > IF_INDEX_MAX)
3585 3623 ipst->ips_ill_index = 1;
3586 3624 }
3587 3625
3588 3626 /*
3589 3627 * all interface indicies are inuse.
3590 3628 */
3591 3629 return (B_FALSE);
3592 3630 }
3593 3631
3594 3632 /*
3595 3633 * Assign a unique interface index for the phyint.
3596 3634 */
3597 3635 static boolean_t
3598 3636 phyint_assign_ifindex(phyint_t *phyi, ip_stack_t *ipst)
3599 3637 {
3600 3638 ASSERT(phyi->phyint_ifindex == 0);
3601 3639 return (ip_assign_ifindex(&phyi->phyint_ifindex, ipst));
3602 3640 }
3603 3641
3604 3642 /*
3605 3643 * Initialize the flags on `phyi' as per the provided mactype.
3606 3644 */
3607 3645 static void
3608 3646 phyint_flags_init(phyint_t *phyi, t_uscalar_t mactype)
3609 3647 {
3610 3648 uint64_t flags = 0;
3611 3649
3612 3650 /*
3613 3651 * Initialize PHYI_RUNNING and PHYI_FAILED. For non-IPMP interfaces,
3614 3652 * we always presume the underlying hardware is working and set
3615 3653 * PHYI_RUNNING (if it's not, the driver will subsequently send a
3616 3654 * DL_NOTE_LINK_DOWN message). For IPMP interfaces, at initialization
3617 3655 * there are no active interfaces in the group so we set PHYI_FAILED.
3618 3656 */
3619 3657 if (mactype == SUNW_DL_IPMP)
3620 3658 flags |= PHYI_FAILED;
3621 3659 else
3622 3660 flags |= PHYI_RUNNING;
3623 3661
3624 3662 switch (mactype) {
3625 3663 case SUNW_DL_VNI:
3626 3664 flags |= PHYI_VIRTUAL;
3627 3665 break;
3628 3666 case SUNW_DL_IPMP:
3629 3667 flags |= PHYI_IPMP;
3630 3668 break;
3631 3669 case DL_LOOP:
3632 3670 flags |= (PHYI_LOOPBACK | PHYI_VIRTUAL);
3633 3671 break;
3634 3672 }
3635 3673
3636 3674 mutex_enter(&phyi->phyint_lock);
3637 3675 phyi->phyint_flags |= flags;
3638 3676 mutex_exit(&phyi->phyint_lock);
3639 3677 }
3640 3678
3641 3679 /*
3642 3680 * Return a pointer to the ill which matches the supplied name. Note that
3643 3681 * the ill name length includes the null termination character. (May be
3644 3682 * called as writer.)
3645 3683 * If do_alloc and the interface is "lo0" it will be automatically created.
3646 3684 * Cannot bump up reference on condemned ills. So dup detect can't be done
3647 3685 * using this func.
3648 3686 */
3649 3687 ill_t *
3650 3688 ill_lookup_on_name(char *name, boolean_t do_alloc, boolean_t isv6,
3651 3689 boolean_t *did_alloc, ip_stack_t *ipst)
3652 3690 {
3653 3691 ill_t *ill;
3654 3692 ipif_t *ipif;
3655 3693 ipsq_t *ipsq;
3656 3694 kstat_named_t *kn;
3657 3695 boolean_t isloopback;
3658 3696 in6_addr_t ov6addr;
3659 3697
3660 3698 isloopback = mi_strcmp(name, ipif_loopback_name) == 0;
3661 3699
3662 3700 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
3663 3701 ill = ill_find_by_name(name, isv6, ipst);
3664 3702 rw_exit(&ipst->ips_ill_g_lock);
3665 3703 if (ill != NULL)
3666 3704 return (ill);
3667 3705
3668 3706 /*
3669 3707 * Couldn't find it. Does this happen to be a lookup for the
3670 3708 * loopback device and are we allowed to allocate it?
3671 3709 */
3672 3710 if (!isloopback || !do_alloc)
3673 3711 return (NULL);
3674 3712
3675 3713 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
3676 3714 ill = ill_find_by_name(name, isv6, ipst);
3677 3715 if (ill != NULL) {
↓ open down ↓ |
227 lines elided |
↑ open up ↑ |
3678 3716 rw_exit(&ipst->ips_ill_g_lock);
3679 3717 return (ill);
3680 3718 }
3681 3719
3682 3720 /* Create the loopback device on demand */
3683 3721 ill = (ill_t *)(mi_alloc(sizeof (ill_t) +
3684 3722 sizeof (ipif_loopback_name), BPRI_MED));
3685 3723 if (ill == NULL)
3686 3724 goto done;
3687 3725
3688 - *ill = ill_null;
3689 - mutex_init(&ill->ill_lock, NULL, MUTEX_DEFAULT, NULL);
3726 + bzero(ill, sizeof (*ill));
3690 3727 ill->ill_ipst = ipst;
3691 - list_create(&ill->ill_nce, sizeof (nce_t), offsetof(nce_t, nce_node));
3692 3728 netstack_hold(ipst->ips_netstack);
3693 3729 /*
3694 3730 * For exclusive stacks we set the zoneid to zero
3695 3731 * to make IP operate as if in the global zone.
3696 3732 */
3697 3733 ill->ill_zoneid = GLOBAL_ZONEID;
3698 3734
3699 - ill->ill_phyint = (phyint_t *)mi_zalloc(sizeof (phyint_t));
3700 - if (ill->ill_phyint == NULL)
3735 + if (ill_init_common(ill, NULL, isv6, B_TRUE, B_FALSE) != 0)
3701 3736 goto done;
3702 3737
3703 - if (isv6)
3704 - ill->ill_phyint->phyint_illv6 = ill;
3705 - else
3706 - ill->ill_phyint->phyint_illv4 = ill;
3707 - mutex_init(&ill->ill_phyint->phyint_lock, NULL, MUTEX_DEFAULT, 0);
3708 - phyint_flags_init(ill->ill_phyint, DL_LOOP);
3709 -
3710 - if (isv6) {
3711 - ill->ill_isv6 = B_TRUE;
3712 - ill->ill_max_frag = ip_loopback_mtu_v6plus;
3713 - } else {
3714 - ill->ill_max_frag = ip_loopback_mtuplus;
3715 - }
3716 3738 if (!ill_allocate_mibs(ill))
3717 3739 goto done;
3740 +
3718 3741 ill->ill_current_frag = ill->ill_max_frag;
3719 3742 ill->ill_mtu = ill->ill_max_frag; /* Initial value */
3720 3743 ill->ill_mc_mtu = ill->ill_mtu;
3721 3744 /*
3722 3745 * ipif_loopback_name can't be pointed at directly because its used
3723 3746 * by both the ipv4 and ipv6 interfaces. When the ill is removed
3724 3747 * from the glist, ill_glist_delete() sets the first character of
3725 3748 * ill_name to '\0'.
3726 3749 */
3727 3750 ill->ill_name = (char *)ill + sizeof (*ill);
3728 3751 (void) strcpy(ill->ill_name, ipif_loopback_name);
3729 3752 ill->ill_name_length = sizeof (ipif_loopback_name);
3730 3753 /* Set ill_dlpi_pending for ipsq_current_finish() to work properly */
3731 3754 ill->ill_dlpi_pending = DL_PRIM_INVAL;
3732 3755
3733 - rw_init(&ill->ill_mcast_lock, NULL, RW_DEFAULT, NULL);
3734 - mutex_init(&ill->ill_mcast_serializer, NULL, MUTEX_DEFAULT, NULL);
3735 - ill->ill_global_timer = INFINITY;
3736 - ill->ill_mcast_v1_time = ill->ill_mcast_v2_time = 0;
3737 - ill->ill_mcast_v1_tset = ill->ill_mcast_v2_tset = 0;
3738 - ill->ill_mcast_rv = MCAST_DEF_ROBUSTNESS;
3739 - ill->ill_mcast_qi = MCAST_DEF_QUERY_INTERVAL;
3740 -
3741 - /* No resolver here. */
3742 - ill->ill_net_type = IRE_LOOPBACK;
3743 -
3744 - /* Initialize the ipsq */
3745 - if (!ipsq_init(ill, B_FALSE))
3746 - goto done;
3747 -
3748 3756 ipif = ipif_allocate(ill, 0L, IRE_LOOPBACK, B_TRUE, B_TRUE, NULL);
3749 3757 if (ipif == NULL)
3750 3758 goto done;
3751 3759
3752 3760 ill->ill_flags = ILLF_MULTICAST;
3753 3761
3754 3762 ov6addr = ipif->ipif_v6lcl_addr;
3755 3763 /* Set up default loopback address and mask. */
3756 3764 if (!isv6) {
3757 3765 ipaddr_t inaddr_loopback = htonl(INADDR_LOOPBACK);
3758 3766
3759 3767 IN6_IPADDR_TO_V4MAPPED(inaddr_loopback, &ipif->ipif_v6lcl_addr);
3760 3768 V4MASK_TO_V6(htonl(IN_CLASSA_NET), ipif->ipif_v6net_mask);
3761 3769 V6_MASK_COPY(ipif->ipif_v6lcl_addr, ipif->ipif_v6net_mask,
3762 3770 ipif->ipif_v6subnet);
3763 3771 ill->ill_flags |= ILLF_IPV4;
3764 3772 } else {
3765 3773 ipif->ipif_v6lcl_addr = ipv6_loopback;
↓ open down ↓ |
8 lines elided |
↑ open up ↑ |
3766 3774 ipif->ipif_v6net_mask = ipv6_all_ones;
3767 3775 V6_MASK_COPY(ipif->ipif_v6lcl_addr, ipif->ipif_v6net_mask,
3768 3776 ipif->ipif_v6subnet);
3769 3777 ill->ill_flags |= ILLF_IPV6;
3770 3778 }
3771 3779
3772 3780 /*
3773 3781 * Chain us in at the end of the ill list. hold the ill
3774 3782 * before we make it globally visible. 1 for the lookup.
3775 3783 */
3776 - ill->ill_refcnt = 0;
3777 3784 ill_refhold(ill);
3778 3785
3779 - ill->ill_frag_count = 0;
3780 - ill->ill_frag_free_num_pkts = 0;
3781 - ill->ill_last_frag_clean_time = 0;
3782 -
3783 3786 ipsq = ill->ill_phyint->phyint_ipsq;
3784 3787
3785 - ill_set_inputfn(ill);
3786 -
3787 3788 if (ill_glist_insert(ill, "lo", isv6) != 0)
3788 3789 cmn_err(CE_PANIC, "cannot insert loopback interface");
3789 3790
3790 3791 /* Let SCTP know so that it can add this to its list */
3791 3792 sctp_update_ill(ill, SCTP_ILL_INSERT);
3792 3793
3793 3794 /*
3794 3795 * We have already assigned ipif_v6lcl_addr above, but we need to
3795 3796 * call sctp_update_ipif_addr() after SCTP_ILL_INSERT, which
3796 3797 * requires to be after ill_glist_insert() since we need the
3797 3798 * ill_index set. Pass on ipv6_loopback as the old address.
3798 3799 */
3799 3800 sctp_update_ipif_addr(ipif, ov6addr);
3800 3801
3801 3802 ip_rts_newaddrmsg(RTM_CHGADDR, 0, ipif, RTSQ_DEFAULT);
3802 3803
3803 3804 /*
3804 3805 * ill_glist_insert() -> ill_phyint_reinit() may have merged IPSQs.
3805 3806 * If so, free our original one.
3806 3807 */
3807 3808 if (ipsq != ill->ill_phyint->phyint_ipsq)
3808 3809 ipsq_delete(ipsq);
3809 3810
3810 3811 if (ipst->ips_loopback_ksp == NULL) {
3811 3812 /* Export loopback interface statistics */
3812 3813 ipst->ips_loopback_ksp = kstat_create_netstack("lo", 0,
3813 3814 ipif_loopback_name, "net",
3814 3815 KSTAT_TYPE_NAMED, 2, 0,
3815 3816 ipst->ips_netstack->netstack_stackid);
3816 3817 if (ipst->ips_loopback_ksp != NULL) {
3817 3818 ipst->ips_loopback_ksp->ks_update =
3818 3819 loopback_kstat_update;
3819 3820 kn = KSTAT_NAMED_PTR(ipst->ips_loopback_ksp);
3820 3821 kstat_named_init(&kn[0], "ipackets", KSTAT_DATA_UINT32);
3821 3822 kstat_named_init(&kn[1], "opackets", KSTAT_DATA_UINT32);
3822 3823 ipst->ips_loopback_ksp->ks_private =
3823 3824 (void *)(uintptr_t)ipst->ips_netstack->
3824 3825 netstack_stackid;
3825 3826 kstat_install(ipst->ips_loopback_ksp);
3826 3827 }
3827 3828 }
3828 3829
3829 3830 *did_alloc = B_TRUE;
3830 3831 rw_exit(&ipst->ips_ill_g_lock);
3831 3832 ill_nic_event_dispatch(ill, MAP_IPIF_ID(ill->ill_ipif->ipif_id),
3832 3833 NE_PLUMB, ill->ill_name, ill->ill_name_length);
3833 3834 return (ill);
3834 3835 done:
3835 3836 if (ill != NULL) {
3836 3837 if (ill->ill_phyint != NULL) {
3837 3838 ipsq = ill->ill_phyint->phyint_ipsq;
3838 3839 if (ipsq != NULL) {
3839 3840 ipsq->ipsq_phyint = NULL;
3840 3841 ipsq_delete(ipsq);
3841 3842 }
3842 3843 mi_free(ill->ill_phyint);
3843 3844 }
3844 3845 ill_free_mib(ill);
3845 3846 if (ill->ill_ipst != NULL)
3846 3847 netstack_rele(ill->ill_ipst->ips_netstack);
3847 3848 mi_free(ill);
3848 3849 }
3849 3850 rw_exit(&ipst->ips_ill_g_lock);
3850 3851 return (NULL);
3851 3852 }
3852 3853
3853 3854 /*
3854 3855 * For IPP calls - use the ip_stack_t for global stack.
3855 3856 */
3856 3857 ill_t *
3857 3858 ill_lookup_on_ifindex_global_instance(uint_t index, boolean_t isv6)
3858 3859 {
3859 3860 ip_stack_t *ipst;
3860 3861 ill_t *ill;
3861 3862
3862 3863 ipst = netstack_find_by_stackid(GLOBAL_NETSTACKID)->netstack_ip;
3863 3864 if (ipst == NULL) {
3864 3865 cmn_err(CE_WARN, "No ip_stack_t for zoneid zero!\n");
3865 3866 return (NULL);
3866 3867 }
3867 3868
3868 3869 ill = ill_lookup_on_ifindex(index, isv6, ipst);
3869 3870 netstack_rele(ipst->ips_netstack);
3870 3871 return (ill);
3871 3872 }
3872 3873
3873 3874 /*
3874 3875 * Return a pointer to the ill which matches the index and IP version type.
3875 3876 */
3876 3877 ill_t *
3877 3878 ill_lookup_on_ifindex(uint_t index, boolean_t isv6, ip_stack_t *ipst)
3878 3879 {
3879 3880 ill_t *ill;
3880 3881 phyint_t *phyi;
3881 3882
3882 3883 /*
3883 3884 * Indexes are stored in the phyint - a common structure
3884 3885 * to both IPv4 and IPv6.
3885 3886 */
3886 3887 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
3887 3888 phyi = avl_find(&ipst->ips_phyint_g_list->phyint_list_avl_by_index,
3888 3889 (void *) &index, NULL);
3889 3890 if (phyi != NULL) {
3890 3891 ill = isv6 ? phyi->phyint_illv6: phyi->phyint_illv4;
3891 3892 if (ill != NULL) {
3892 3893 mutex_enter(&ill->ill_lock);
3893 3894 if (!ILL_IS_CONDEMNED(ill)) {
3894 3895 ill_refhold_locked(ill);
3895 3896 mutex_exit(&ill->ill_lock);
3896 3897 rw_exit(&ipst->ips_ill_g_lock);
3897 3898 return (ill);
3898 3899 }
3899 3900 mutex_exit(&ill->ill_lock);
3900 3901 }
3901 3902 }
3902 3903 rw_exit(&ipst->ips_ill_g_lock);
3903 3904 return (NULL);
3904 3905 }
3905 3906
3906 3907 /*
3907 3908 * Verify whether or not an interface index is valid for the specified zoneid
3908 3909 * to transmit packets.
3909 3910 * It can be zero (meaning "reset") or an interface index assigned
3910 3911 * to a non-VNI interface. (We don't use VNI interface to send packets.)
3911 3912 */
3912 3913 boolean_t
3913 3914 ip_xmit_ifindex_valid(uint_t ifindex, zoneid_t zoneid, boolean_t isv6,
3914 3915 ip_stack_t *ipst)
3915 3916 {
3916 3917 ill_t *ill;
3917 3918
3918 3919 if (ifindex == 0)
3919 3920 return (B_TRUE);
3920 3921
3921 3922 ill = ill_lookup_on_ifindex_zoneid(ifindex, zoneid, isv6, ipst);
3922 3923 if (ill == NULL)
3923 3924 return (B_FALSE);
3924 3925 if (IS_VNI(ill)) {
3925 3926 ill_refrele(ill);
3926 3927 return (B_FALSE);
3927 3928 }
3928 3929 ill_refrele(ill);
3929 3930 return (B_TRUE);
3930 3931 }
3931 3932
3932 3933 /*
3933 3934 * Return the ifindex next in sequence after the passed in ifindex.
3934 3935 * If there is no next ifindex for the given protocol, return 0.
3935 3936 */
3936 3937 uint_t
3937 3938 ill_get_next_ifindex(uint_t index, boolean_t isv6, ip_stack_t *ipst)
3938 3939 {
3939 3940 phyint_t *phyi;
3940 3941 phyint_t *phyi_initial;
3941 3942 uint_t ifindex;
3942 3943
3943 3944 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
3944 3945
3945 3946 if (index == 0) {
3946 3947 phyi = avl_first(
3947 3948 &ipst->ips_phyint_g_list->phyint_list_avl_by_index);
3948 3949 } else {
3949 3950 phyi = phyi_initial = avl_find(
3950 3951 &ipst->ips_phyint_g_list->phyint_list_avl_by_index,
3951 3952 (void *) &index, NULL);
3952 3953 }
3953 3954
3954 3955 for (; phyi != NULL;
3955 3956 phyi = avl_walk(&ipst->ips_phyint_g_list->phyint_list_avl_by_index,
3956 3957 phyi, AVL_AFTER)) {
3957 3958 /*
3958 3959 * If we're not returning the first interface in the tree
3959 3960 * and we still haven't moved past the phyint_t that
3960 3961 * corresponds to index, avl_walk needs to be called again
3961 3962 */
3962 3963 if (!((index != 0) && (phyi == phyi_initial))) {
3963 3964 if (isv6) {
3964 3965 if ((phyi->phyint_illv6) &&
3965 3966 ILL_CAN_LOOKUP(phyi->phyint_illv6) &&
3966 3967 (phyi->phyint_illv6->ill_isv6 == 1))
3967 3968 break;
3968 3969 } else {
3969 3970 if ((phyi->phyint_illv4) &&
3970 3971 ILL_CAN_LOOKUP(phyi->phyint_illv4) &&
3971 3972 (phyi->phyint_illv4->ill_isv6 == 0))
3972 3973 break;
3973 3974 }
3974 3975 }
3975 3976 }
3976 3977
3977 3978 rw_exit(&ipst->ips_ill_g_lock);
3978 3979
3979 3980 if (phyi != NULL)
3980 3981 ifindex = phyi->phyint_ifindex;
3981 3982 else
3982 3983 ifindex = 0;
3983 3984
3984 3985 return (ifindex);
3985 3986 }
3986 3987
3987 3988 /*
3988 3989 * Return the ifindex for the named interface.
3989 3990 * If there is no next ifindex for the interface, return 0.
3990 3991 */
3991 3992 uint_t
3992 3993 ill_get_ifindex_by_name(char *name, ip_stack_t *ipst)
3993 3994 {
3994 3995 phyint_t *phyi;
3995 3996 avl_index_t where = 0;
3996 3997 uint_t ifindex;
3997 3998
3998 3999 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
3999 4000
4000 4001 if ((phyi = avl_find(&ipst->ips_phyint_g_list->phyint_list_avl_by_name,
4001 4002 name, &where)) == NULL) {
4002 4003 rw_exit(&ipst->ips_ill_g_lock);
4003 4004 return (0);
4004 4005 }
4005 4006
4006 4007 ifindex = phyi->phyint_ifindex;
4007 4008
4008 4009 rw_exit(&ipst->ips_ill_g_lock);
4009 4010
4010 4011 return (ifindex);
4011 4012 }
4012 4013
4013 4014 /*
4014 4015 * Return the ifindex to be used by upper layer protocols for instance
4015 4016 * for IPV6_RECVPKTINFO. If IPMP this is the one for the upper ill.
4016 4017 */
4017 4018 uint_t
4018 4019 ill_get_upper_ifindex(const ill_t *ill)
4019 4020 {
4020 4021 if (IS_UNDER_IPMP(ill))
4021 4022 return (ipmp_ill_get_ipmp_ifindex(ill));
4022 4023 else
4023 4024 return (ill->ill_phyint->phyint_ifindex);
4024 4025 }
4025 4026
4026 4027
4027 4028 /*
4028 4029 * Obtain a reference to the ill. The ill_refcnt is a dynamic refcnt
4029 4030 * that gives a running thread a reference to the ill. This reference must be
4030 4031 * released by the thread when it is done accessing the ill and related
4031 4032 * objects. ill_refcnt can not be used to account for static references
4032 4033 * such as other structures pointing to an ill. Callers must generally
4033 4034 * check whether an ill can be refheld by using ILL_CAN_LOOKUP macros
4034 4035 * or be sure that the ill is not being deleted or changing state before
4035 4036 * calling the refhold functions. A non-zero ill_refcnt ensures that the
4036 4037 * ill won't change any of its critical state such as address, netmask etc.
4037 4038 */
4038 4039 void
4039 4040 ill_refhold(ill_t *ill)
4040 4041 {
4041 4042 mutex_enter(&ill->ill_lock);
4042 4043 ill->ill_refcnt++;
4043 4044 ILL_TRACE_REF(ill);
4044 4045 mutex_exit(&ill->ill_lock);
4045 4046 }
4046 4047
4047 4048 void
4048 4049 ill_refhold_locked(ill_t *ill)
4049 4050 {
4050 4051 ASSERT(MUTEX_HELD(&ill->ill_lock));
4051 4052 ill->ill_refcnt++;
4052 4053 ILL_TRACE_REF(ill);
4053 4054 }
4054 4055
4055 4056 /* Returns true if we managed to get a refhold */
4056 4057 boolean_t
4057 4058 ill_check_and_refhold(ill_t *ill)
4058 4059 {
4059 4060 mutex_enter(&ill->ill_lock);
4060 4061 if (!ILL_IS_CONDEMNED(ill)) {
4061 4062 ill_refhold_locked(ill);
4062 4063 mutex_exit(&ill->ill_lock);
4063 4064 return (B_TRUE);
4064 4065 }
4065 4066 mutex_exit(&ill->ill_lock);
4066 4067 return (B_FALSE);
4067 4068 }
4068 4069
4069 4070 /*
4070 4071 * Must not be called while holding any locks. Otherwise if this is
4071 4072 * the last reference to be released, there is a chance of recursive mutex
4072 4073 * panic due to ill_refrele -> ipif_ill_refrele_tail -> qwriter_ip trying
4073 4074 * to restart an ioctl.
4074 4075 */
4075 4076 void
4076 4077 ill_refrele(ill_t *ill)
4077 4078 {
4078 4079 mutex_enter(&ill->ill_lock);
4079 4080 ASSERT(ill->ill_refcnt != 0);
4080 4081 ill->ill_refcnt--;
4081 4082 ILL_UNTRACE_REF(ill);
4082 4083 if (ill->ill_refcnt != 0) {
4083 4084 /* Every ire pointing to the ill adds 1 to ill_refcnt */
4084 4085 mutex_exit(&ill->ill_lock);
4085 4086 return;
4086 4087 }
4087 4088
4088 4089 /* Drops the ill_lock */
4089 4090 ipif_ill_refrele_tail(ill);
4090 4091 }
4091 4092
4092 4093 /*
4093 4094 * Obtain a weak reference count on the ill. This reference ensures the
4094 4095 * ill won't be freed, but the ill may change any of its critical state
4095 4096 * such as netmask, address etc. Returns an error if the ill has started
4096 4097 * closing.
4097 4098 */
4098 4099 boolean_t
4099 4100 ill_waiter_inc(ill_t *ill)
4100 4101 {
4101 4102 mutex_enter(&ill->ill_lock);
4102 4103 if (ill->ill_state_flags & ILL_CONDEMNED) {
4103 4104 mutex_exit(&ill->ill_lock);
4104 4105 return (B_FALSE);
4105 4106 }
4106 4107 ill->ill_waiters++;
4107 4108 mutex_exit(&ill->ill_lock);
4108 4109 return (B_TRUE);
4109 4110 }
4110 4111
4111 4112 void
4112 4113 ill_waiter_dcr(ill_t *ill)
4113 4114 {
4114 4115 mutex_enter(&ill->ill_lock);
4115 4116 ill->ill_waiters--;
4116 4117 if (ill->ill_waiters == 0)
4117 4118 cv_broadcast(&ill->ill_cv);
4118 4119 mutex_exit(&ill->ill_lock);
4119 4120 }
4120 4121
4121 4122 /*
4122 4123 * ip_ll_subnet_defaults is called when we get the DL_INFO_ACK back from the
4123 4124 * driver. We construct best guess defaults for lower level information that
4124 4125 * we need. If an interface is brought up without injection of any overriding
4125 4126 * information from outside, we have to be ready to go with these defaults.
4126 4127 * When we get the first DL_INFO_ACK (from ip_open() sending a DL_INFO_REQ)
4127 4128 * we primarely want the dl_provider_style.
4128 4129 * The subsequent DL_INFO_ACK is received after doing a DL_ATTACH and DL_BIND
4129 4130 * at which point we assume the other part of the information is valid.
4130 4131 */
4131 4132 void
4132 4133 ip_ll_subnet_defaults(ill_t *ill, mblk_t *mp)
4133 4134 {
4134 4135 uchar_t *brdcst_addr;
4135 4136 uint_t brdcst_addr_length, phys_addr_length;
4136 4137 t_scalar_t sap_length;
4137 4138 dl_info_ack_t *dlia;
4138 4139 ip_m_t *ipm;
4139 4140 dl_qos_cl_sel1_t *sel1;
4140 4141 int min_mtu;
4141 4142
4142 4143 ASSERT(IAM_WRITER_ILL(ill));
4143 4144
4144 4145 /*
4145 4146 * Till the ill is fully up the ill is not globally visible.
4146 4147 * So no need for a lock.
4147 4148 */
4148 4149 dlia = (dl_info_ack_t *)mp->b_rptr;
4149 4150 ill->ill_mactype = dlia->dl_mac_type;
4150 4151
4151 4152 ipm = ip_m_lookup(dlia->dl_mac_type);
4152 4153 if (ipm == NULL) {
4153 4154 ipm = ip_m_lookup(DL_OTHER);
4154 4155 ASSERT(ipm != NULL);
4155 4156 }
4156 4157 ill->ill_media = ipm;
4157 4158
4158 4159 /*
4159 4160 * When the new DLPI stuff is ready we'll pull lengths
4160 4161 * from dlia.
4161 4162 */
4162 4163 if (dlia->dl_version == DL_VERSION_2) {
4163 4164 brdcst_addr_length = dlia->dl_brdcst_addr_length;
4164 4165 brdcst_addr = mi_offset_param(mp, dlia->dl_brdcst_addr_offset,
4165 4166 brdcst_addr_length);
4166 4167 if (brdcst_addr == NULL) {
4167 4168 brdcst_addr_length = 0;
4168 4169 }
4169 4170 sap_length = dlia->dl_sap_length;
4170 4171 phys_addr_length = dlia->dl_addr_length - ABS(sap_length);
4171 4172 ip1dbg(("ip: bcast_len %d, sap_len %d, phys_len %d\n",
4172 4173 brdcst_addr_length, sap_length, phys_addr_length));
4173 4174 } else {
4174 4175 brdcst_addr_length = 6;
4175 4176 brdcst_addr = ip_six_byte_all_ones;
4176 4177 sap_length = -2;
4177 4178 phys_addr_length = brdcst_addr_length;
4178 4179 }
4179 4180
4180 4181 ill->ill_bcast_addr_length = brdcst_addr_length;
4181 4182 ill->ill_phys_addr_length = phys_addr_length;
4182 4183 ill->ill_sap_length = sap_length;
4183 4184
4184 4185 /*
4185 4186 * Synthetic DLPI types such as SUNW_DL_IPMP specify a zero SDU,
4186 4187 * but we must ensure a minimum IP MTU is used since other bits of
4187 4188 * IP will fly apart otherwise.
4188 4189 */
4189 4190 min_mtu = ill->ill_isv6 ? IPV6_MIN_MTU : IP_MIN_MTU;
4190 4191 ill->ill_max_frag = MAX(min_mtu, dlia->dl_max_sdu);
4191 4192 ill->ill_current_frag = ill->ill_max_frag;
4192 4193 ill->ill_mtu = ill->ill_max_frag;
4193 4194 ill->ill_mc_mtu = ill->ill_mtu; /* Overridden by DL_NOTE_SDU_SIZE2 */
4194 4195
4195 4196 ill->ill_type = ipm->ip_m_type;
4196 4197
4197 4198 if (!ill->ill_dlpi_style_set) {
4198 4199 if (dlia->dl_provider_style == DL_STYLE2)
4199 4200 ill->ill_needs_attach = 1;
4200 4201
4201 4202 phyint_flags_init(ill->ill_phyint, ill->ill_mactype);
4202 4203
4203 4204 /*
4204 4205 * Allocate the first ipif on this ill. We don't delay it
4205 4206 * further as ioctl handling assumes at least one ipif exists.
4206 4207 *
4207 4208 * At this point we don't know whether the ill is v4 or v6.
4208 4209 * We will know this whan the SIOCSLIFNAME happens and
4209 4210 * the correct value for ill_isv6 will be assigned in
4210 4211 * ipif_set_values(). We need to hold the ill lock and
4211 4212 * clear the ILL_LL_SUBNET_PENDING flag and atomically do
4212 4213 * the wakeup.
4213 4214 */
4214 4215 (void) ipif_allocate(ill, 0, IRE_LOCAL,
4215 4216 dlia->dl_provider_style != DL_STYLE2, B_TRUE, NULL);
4216 4217 mutex_enter(&ill->ill_lock);
4217 4218 ASSERT(ill->ill_dlpi_style_set == 0);
4218 4219 ill->ill_dlpi_style_set = 1;
4219 4220 ill->ill_state_flags &= ~ILL_LL_SUBNET_PENDING;
4220 4221 cv_broadcast(&ill->ill_cv);
4221 4222 mutex_exit(&ill->ill_lock);
4222 4223 freemsg(mp);
4223 4224 return;
4224 4225 }
4225 4226 ASSERT(ill->ill_ipif != NULL);
4226 4227 /*
4227 4228 * We know whether it is IPv4 or IPv6 now, as this is the
4228 4229 * second DL_INFO_ACK we are recieving in response to the
4229 4230 * DL_INFO_REQ sent in ipif_set_values.
4230 4231 */
4231 4232 ill->ill_sap = (ill->ill_isv6) ? ipm->ip_m_ipv6sap : ipm->ip_m_ipv4sap;
4232 4233 /*
4233 4234 * Clear all the flags that were set based on ill_bcast_addr_length
4234 4235 * and ill_phys_addr_length (in ipif_set_values) as these could have
4235 4236 * changed now and we need to re-evaluate.
4236 4237 */
4237 4238 ill->ill_flags &= ~(ILLF_MULTICAST | ILLF_NONUD | ILLF_NOARP);
4238 4239 ill->ill_ipif->ipif_flags &= ~(IPIF_BROADCAST | IPIF_POINTOPOINT);
4239 4240
4240 4241 /*
4241 4242 * Free ill_bcast_mp as things could have changed now.
4242 4243 *
4243 4244 * NOTE: The IPMP meta-interface is special-cased because it starts
4244 4245 * with no underlying interfaces (and thus an unknown broadcast
4245 4246 * address length), but we enforce that an interface is broadcast-
4246 4247 * capable as part of allowing it to join a group.
4247 4248 */
4248 4249 if (ill->ill_bcast_addr_length == 0 && !IS_IPMP(ill)) {
4249 4250 if (ill->ill_bcast_mp != NULL)
4250 4251 freemsg(ill->ill_bcast_mp);
4251 4252 ill->ill_net_type = IRE_IF_NORESOLVER;
4252 4253
4253 4254 ill->ill_bcast_mp = ill_dlur_gen(NULL,
4254 4255 ill->ill_phys_addr_length,
4255 4256 ill->ill_sap,
4256 4257 ill->ill_sap_length);
4257 4258
4258 4259 if (ill->ill_isv6)
4259 4260 /*
4260 4261 * Note: xresolv interfaces will eventually need NOARP
4261 4262 * set here as well, but that will require those
4262 4263 * external resolvers to have some knowledge of
4263 4264 * that flag and act appropriately. Not to be changed
4264 4265 * at present.
4265 4266 */
4266 4267 ill->ill_flags |= ILLF_NONUD;
4267 4268 else
4268 4269 ill->ill_flags |= ILLF_NOARP;
4269 4270
4270 4271 if (ill->ill_mactype == SUNW_DL_VNI) {
4271 4272 ill->ill_ipif->ipif_flags |= IPIF_NOXMIT;
4272 4273 } else if (ill->ill_phys_addr_length == 0 ||
4273 4274 ill->ill_mactype == DL_IPV4 ||
4274 4275 ill->ill_mactype == DL_IPV6) {
4275 4276 /*
4276 4277 * The underying link is point-to-point, so mark the
4277 4278 * interface as such. We can do IP multicast over
4278 4279 * such a link since it transmits all network-layer
4279 4280 * packets to the remote side the same way.
4280 4281 */
4281 4282 ill->ill_flags |= ILLF_MULTICAST;
4282 4283 ill->ill_ipif->ipif_flags |= IPIF_POINTOPOINT;
4283 4284 }
4284 4285 } else {
4285 4286 ill->ill_net_type = IRE_IF_RESOLVER;
4286 4287 if (ill->ill_bcast_mp != NULL)
4287 4288 freemsg(ill->ill_bcast_mp);
4288 4289 ill->ill_bcast_mp = ill_dlur_gen(brdcst_addr,
4289 4290 ill->ill_bcast_addr_length, ill->ill_sap,
4290 4291 ill->ill_sap_length);
4291 4292 /*
4292 4293 * Later detect lack of DLPI driver multicast
4293 4294 * capability by catching DL_ENABMULTI errors in
4294 4295 * ip_rput_dlpi.
4295 4296 */
4296 4297 ill->ill_flags |= ILLF_MULTICAST;
4297 4298 if (!ill->ill_isv6)
4298 4299 ill->ill_ipif->ipif_flags |= IPIF_BROADCAST;
4299 4300 }
4300 4301
4301 4302 /* For IPMP, PHYI_IPMP should already be set by phyint_flags_init() */
4302 4303 if (ill->ill_mactype == SUNW_DL_IPMP)
4303 4304 ASSERT(ill->ill_phyint->phyint_flags & PHYI_IPMP);
4304 4305
4305 4306 /* By default an interface does not support any CoS marking */
4306 4307 ill->ill_flags &= ~ILLF_COS_ENABLED;
4307 4308
4308 4309 /*
4309 4310 * If we get QoS information in DL_INFO_ACK, the device supports
4310 4311 * some form of CoS marking, set ILLF_COS_ENABLED.
4311 4312 */
4312 4313 sel1 = (dl_qos_cl_sel1_t *)mi_offset_param(mp, dlia->dl_qos_offset,
4313 4314 dlia->dl_qos_length);
4314 4315 if ((sel1 != NULL) && (sel1->dl_qos_type == DL_QOS_CL_SEL1)) {
4315 4316 ill->ill_flags |= ILLF_COS_ENABLED;
4316 4317 }
4317 4318
4318 4319 /* Clear any previous error indication. */
4319 4320 ill->ill_error = 0;
4320 4321 freemsg(mp);
4321 4322 }
4322 4323
4323 4324 /*
4324 4325 * Perform various checks to verify that an address would make sense as a
4325 4326 * local, remote, or subnet interface address.
4326 4327 */
4327 4328 static boolean_t
4328 4329 ip_addr_ok_v4(ipaddr_t addr, ipaddr_t subnet_mask)
4329 4330 {
4330 4331 ipaddr_t net_mask;
4331 4332
4332 4333 /*
4333 4334 * Don't allow all zeroes, or all ones, but allow
4334 4335 * all ones netmask.
4335 4336 */
4336 4337 if ((net_mask = ip_net_mask(addr)) == 0)
4337 4338 return (B_FALSE);
4338 4339 /* A given netmask overrides the "guess" netmask */
4339 4340 if (subnet_mask != 0)
4340 4341 net_mask = subnet_mask;
4341 4342 if ((net_mask != ~(ipaddr_t)0) && ((addr == (addr & net_mask)) ||
4342 4343 (addr == (addr | ~net_mask)))) {
4343 4344 return (B_FALSE);
4344 4345 }
4345 4346
4346 4347 /*
4347 4348 * Even if the netmask is all ones, we do not allow address to be
4348 4349 * 255.255.255.255
4349 4350 */
4350 4351 if (addr == INADDR_BROADCAST)
4351 4352 return (B_FALSE);
4352 4353
4353 4354 if (CLASSD(addr))
4354 4355 return (B_FALSE);
4355 4356
4356 4357 return (B_TRUE);
4357 4358 }
4358 4359
4359 4360 #define V6_IPIF_LINKLOCAL(p) \
4360 4361 IN6_IS_ADDR_LINKLOCAL(&(p)->ipif_v6lcl_addr)
4361 4362
4362 4363 /*
4363 4364 * Compare two given ipifs and check if the second one is better than
4364 4365 * the first one using the order of preference (not taking deprecated
4365 4366 * into acount) specified in ipif_lookup_multicast().
4366 4367 */
4367 4368 static boolean_t
4368 4369 ipif_comp_multi(ipif_t *old_ipif, ipif_t *new_ipif, boolean_t isv6)
4369 4370 {
4370 4371 /* Check the least preferred first. */
4371 4372 if (IS_LOOPBACK(old_ipif->ipif_ill)) {
4372 4373 /* If both ipifs are the same, use the first one. */
4373 4374 if (IS_LOOPBACK(new_ipif->ipif_ill))
4374 4375 return (B_FALSE);
4375 4376 else
4376 4377 return (B_TRUE);
4377 4378 }
4378 4379
4379 4380 /* For IPv6, check for link local address. */
4380 4381 if (isv6 && V6_IPIF_LINKLOCAL(old_ipif)) {
4381 4382 if (IS_LOOPBACK(new_ipif->ipif_ill) ||
4382 4383 V6_IPIF_LINKLOCAL(new_ipif)) {
4383 4384 /* The second one is equal or less preferred. */
4384 4385 return (B_FALSE);
4385 4386 } else {
4386 4387 return (B_TRUE);
4387 4388 }
4388 4389 }
4389 4390
4390 4391 /* Then check for point to point interface. */
4391 4392 if (old_ipif->ipif_flags & IPIF_POINTOPOINT) {
4392 4393 if (IS_LOOPBACK(new_ipif->ipif_ill) ||
4393 4394 (isv6 && V6_IPIF_LINKLOCAL(new_ipif)) ||
4394 4395 (new_ipif->ipif_flags & IPIF_POINTOPOINT)) {
4395 4396 return (B_FALSE);
4396 4397 } else {
4397 4398 return (B_TRUE);
4398 4399 }
4399 4400 }
4400 4401
4401 4402 /* old_ipif is a normal interface, so no need to use the new one. */
4402 4403 return (B_FALSE);
4403 4404 }
4404 4405
4405 4406 /*
4406 4407 * Find a mulitcast-capable ipif given an IP instance and zoneid.
4407 4408 * The ipif must be up, and its ill must multicast-capable, not
4408 4409 * condemned, not an underlying interface in an IPMP group, and
4409 4410 * not a VNI interface. Order of preference:
4410 4411 *
4411 4412 * 1a. normal
4412 4413 * 1b. normal, but deprecated
4413 4414 * 2a. point to point
4414 4415 * 2b. point to point, but deprecated
4415 4416 * 3a. link local
4416 4417 * 3b. link local, but deprecated
4417 4418 * 4. loopback.
4418 4419 */
4419 4420 static ipif_t *
4420 4421 ipif_lookup_multicast(ip_stack_t *ipst, zoneid_t zoneid, boolean_t isv6)
4421 4422 {
4422 4423 ill_t *ill;
4423 4424 ill_walk_context_t ctx;
4424 4425 ipif_t *ipif;
4425 4426 ipif_t *saved_ipif = NULL;
4426 4427 ipif_t *dep_ipif = NULL;
4427 4428
4428 4429 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
4429 4430 if (isv6)
4430 4431 ill = ILL_START_WALK_V6(&ctx, ipst);
4431 4432 else
4432 4433 ill = ILL_START_WALK_V4(&ctx, ipst);
4433 4434
4434 4435 for (; ill != NULL; ill = ill_next(&ctx, ill)) {
4435 4436 mutex_enter(&ill->ill_lock);
4436 4437 if (IS_VNI(ill) || IS_UNDER_IPMP(ill) ||
4437 4438 ILL_IS_CONDEMNED(ill) ||
4438 4439 !(ill->ill_flags & ILLF_MULTICAST)) {
4439 4440 mutex_exit(&ill->ill_lock);
4440 4441 continue;
4441 4442 }
4442 4443 for (ipif = ill->ill_ipif; ipif != NULL;
4443 4444 ipif = ipif->ipif_next) {
4444 4445 if (zoneid != ipif->ipif_zoneid &&
4445 4446 zoneid != ALL_ZONES &&
4446 4447 ipif->ipif_zoneid != ALL_ZONES) {
4447 4448 continue;
4448 4449 }
4449 4450 if (!(ipif->ipif_flags & IPIF_UP) ||
4450 4451 IPIF_IS_CONDEMNED(ipif)) {
4451 4452 continue;
4452 4453 }
4453 4454
4454 4455 /*
4455 4456 * Found one candidate. If it is deprecated,
4456 4457 * remember it in dep_ipif. If it is not deprecated,
4457 4458 * remember it in saved_ipif.
4458 4459 */
4459 4460 if (ipif->ipif_flags & IPIF_DEPRECATED) {
4460 4461 if (dep_ipif == NULL) {
4461 4462 dep_ipif = ipif;
4462 4463 } else if (ipif_comp_multi(dep_ipif, ipif,
4463 4464 isv6)) {
4464 4465 /*
4465 4466 * If the previous dep_ipif does not
4466 4467 * belong to the same ill, we've done
4467 4468 * a ipif_refhold() on it. So we need
4468 4469 * to release it.
4469 4470 */
4470 4471 if (dep_ipif->ipif_ill != ill)
4471 4472 ipif_refrele(dep_ipif);
4472 4473 dep_ipif = ipif;
4473 4474 }
4474 4475 continue;
4475 4476 }
4476 4477 if (saved_ipif == NULL) {
4477 4478 saved_ipif = ipif;
4478 4479 } else {
4479 4480 if (ipif_comp_multi(saved_ipif, ipif, isv6)) {
4480 4481 if (saved_ipif->ipif_ill != ill)
4481 4482 ipif_refrele(saved_ipif);
4482 4483 saved_ipif = ipif;
4483 4484 }
4484 4485 }
4485 4486 }
4486 4487 /*
4487 4488 * Before going to the next ill, do a ipif_refhold() on the
4488 4489 * saved ones.
4489 4490 */
4490 4491 if (saved_ipif != NULL && saved_ipif->ipif_ill == ill)
4491 4492 ipif_refhold_locked(saved_ipif);
4492 4493 if (dep_ipif != NULL && dep_ipif->ipif_ill == ill)
4493 4494 ipif_refhold_locked(dep_ipif);
4494 4495 mutex_exit(&ill->ill_lock);
4495 4496 }
4496 4497 rw_exit(&ipst->ips_ill_g_lock);
4497 4498
4498 4499 /*
4499 4500 * If we have only the saved_ipif, return it. But if we have both
4500 4501 * saved_ipif and dep_ipif, check to see which one is better.
4501 4502 */
4502 4503 if (saved_ipif != NULL) {
4503 4504 if (dep_ipif != NULL) {
4504 4505 if (ipif_comp_multi(saved_ipif, dep_ipif, isv6)) {
4505 4506 ipif_refrele(saved_ipif);
4506 4507 return (dep_ipif);
4507 4508 } else {
4508 4509 ipif_refrele(dep_ipif);
4509 4510 return (saved_ipif);
4510 4511 }
4511 4512 }
4512 4513 return (saved_ipif);
4513 4514 } else {
4514 4515 return (dep_ipif);
4515 4516 }
4516 4517 }
4517 4518
4518 4519 ill_t *
4519 4520 ill_lookup_multicast(ip_stack_t *ipst, zoneid_t zoneid, boolean_t isv6)
4520 4521 {
4521 4522 ipif_t *ipif;
4522 4523 ill_t *ill;
4523 4524
4524 4525 ipif = ipif_lookup_multicast(ipst, zoneid, isv6);
4525 4526 if (ipif == NULL)
4526 4527 return (NULL);
4527 4528
4528 4529 ill = ipif->ipif_ill;
4529 4530 ill_refhold(ill);
4530 4531 ipif_refrele(ipif);
4531 4532 return (ill);
4532 4533 }
4533 4534
4534 4535 /*
4535 4536 * This function is called when an application does not specify an interface
4536 4537 * to be used for multicast traffic (joining a group/sending data). It
4537 4538 * calls ire_lookup_multi() to look for an interface route for the
4538 4539 * specified multicast group. Doing this allows the administrator to add
4539 4540 * prefix routes for multicast to indicate which interface to be used for
4540 4541 * multicast traffic in the above scenario. The route could be for all
4541 4542 * multicast (224.0/4), for a single multicast group (a /32 route) or
4542 4543 * anything in between. If there is no such multicast route, we just find
4543 4544 * any multicast capable interface and return it. The returned ipif
4544 4545 * is refhold'ed.
4545 4546 *
4546 4547 * We support MULTIRT and RTF_SETSRC on the multicast routes added to the
4547 4548 * unicast table. This is used by CGTP.
4548 4549 */
4549 4550 ill_t *
4550 4551 ill_lookup_group_v4(ipaddr_t group, zoneid_t zoneid, ip_stack_t *ipst,
4551 4552 boolean_t *multirtp, ipaddr_t *setsrcp)
4552 4553 {
4553 4554 ill_t *ill;
4554 4555
4555 4556 ill = ire_lookup_multi_ill_v4(group, zoneid, ipst, multirtp, setsrcp);
4556 4557 if (ill != NULL)
4557 4558 return (ill);
4558 4559
4559 4560 return (ill_lookup_multicast(ipst, zoneid, B_FALSE));
4560 4561 }
4561 4562
4562 4563 /*
4563 4564 * Look for an ipif with the specified interface address and destination.
4564 4565 * The destination address is used only for matching point-to-point interfaces.
4565 4566 */
4566 4567 ipif_t *
4567 4568 ipif_lookup_interface(ipaddr_t if_addr, ipaddr_t dst, ip_stack_t *ipst)
4568 4569 {
4569 4570 ipif_t *ipif;
4570 4571 ill_t *ill;
4571 4572 ill_walk_context_t ctx;
4572 4573
4573 4574 /*
4574 4575 * First match all the point-to-point interfaces
4575 4576 * before looking at non-point-to-point interfaces.
4576 4577 * This is done to avoid returning non-point-to-point
4577 4578 * ipif instead of unnumbered point-to-point ipif.
4578 4579 */
4579 4580 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
4580 4581 ill = ILL_START_WALK_V4(&ctx, ipst);
4581 4582 for (; ill != NULL; ill = ill_next(&ctx, ill)) {
4582 4583 mutex_enter(&ill->ill_lock);
4583 4584 for (ipif = ill->ill_ipif; ipif != NULL;
4584 4585 ipif = ipif->ipif_next) {
4585 4586 /* Allow the ipif to be down */
4586 4587 if ((ipif->ipif_flags & IPIF_POINTOPOINT) &&
4587 4588 (ipif->ipif_lcl_addr == if_addr) &&
4588 4589 (ipif->ipif_pp_dst_addr == dst)) {
4589 4590 if (!IPIF_IS_CONDEMNED(ipif)) {
4590 4591 ipif_refhold_locked(ipif);
4591 4592 mutex_exit(&ill->ill_lock);
4592 4593 rw_exit(&ipst->ips_ill_g_lock);
4593 4594 return (ipif);
4594 4595 }
4595 4596 }
4596 4597 }
4597 4598 mutex_exit(&ill->ill_lock);
4598 4599 }
4599 4600 rw_exit(&ipst->ips_ill_g_lock);
4600 4601
4601 4602 /* lookup the ipif based on interface address */
4602 4603 ipif = ipif_lookup_addr(if_addr, NULL, ALL_ZONES, ipst);
4603 4604 ASSERT(ipif == NULL || !ipif->ipif_isv6);
4604 4605 return (ipif);
4605 4606 }
4606 4607
4607 4608 /*
4608 4609 * Common function for ipif_lookup_addr() and ipif_lookup_addr_exact().
4609 4610 */
4610 4611 static ipif_t *
4611 4612 ipif_lookup_addr_common(ipaddr_t addr, ill_t *match_ill, uint32_t match_flags,
4612 4613 zoneid_t zoneid, ip_stack_t *ipst)
4613 4614 {
4614 4615 ipif_t *ipif;
4615 4616 ill_t *ill;
4616 4617 boolean_t ptp = B_FALSE;
4617 4618 ill_walk_context_t ctx;
4618 4619 boolean_t match_illgrp = (match_flags & IPIF_MATCH_ILLGRP);
4619 4620 boolean_t no_duplicate = (match_flags & IPIF_MATCH_NONDUP);
4620 4621
4621 4622 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
4622 4623 /*
4623 4624 * Repeat twice, first based on local addresses and
4624 4625 * next time for pointopoint.
4625 4626 */
4626 4627 repeat:
4627 4628 ill = ILL_START_WALK_V4(&ctx, ipst);
4628 4629 for (; ill != NULL; ill = ill_next(&ctx, ill)) {
4629 4630 if (match_ill != NULL && ill != match_ill &&
4630 4631 (!match_illgrp || !IS_IN_SAME_ILLGRP(ill, match_ill))) {
4631 4632 continue;
4632 4633 }
4633 4634 mutex_enter(&ill->ill_lock);
4634 4635 for (ipif = ill->ill_ipif; ipif != NULL;
4635 4636 ipif = ipif->ipif_next) {
4636 4637 if (zoneid != ALL_ZONES &&
4637 4638 zoneid != ipif->ipif_zoneid &&
4638 4639 ipif->ipif_zoneid != ALL_ZONES)
4639 4640 continue;
4640 4641
4641 4642 if (no_duplicate && !(ipif->ipif_flags & IPIF_UP))
4642 4643 continue;
4643 4644
4644 4645 /* Allow the ipif to be down */
4645 4646 if ((!ptp && (ipif->ipif_lcl_addr == addr) &&
4646 4647 ((ipif->ipif_flags & IPIF_UNNUMBERED) == 0)) ||
4647 4648 (ptp && (ipif->ipif_flags & IPIF_POINTOPOINT) &&
4648 4649 (ipif->ipif_pp_dst_addr == addr))) {
4649 4650 if (!IPIF_IS_CONDEMNED(ipif)) {
4650 4651 ipif_refhold_locked(ipif);
4651 4652 mutex_exit(&ill->ill_lock);
4652 4653 rw_exit(&ipst->ips_ill_g_lock);
4653 4654 return (ipif);
4654 4655 }
4655 4656 }
4656 4657 }
4657 4658 mutex_exit(&ill->ill_lock);
4658 4659 }
4659 4660
4660 4661 /* If we already did the ptp case, then we are done */
4661 4662 if (ptp) {
4662 4663 rw_exit(&ipst->ips_ill_g_lock);
4663 4664 return (NULL);
4664 4665 }
4665 4666 ptp = B_TRUE;
4666 4667 goto repeat;
4667 4668 }
4668 4669
4669 4670 /*
4670 4671 * Lookup an ipif with the specified address. For point-to-point links we
4671 4672 * look for matches on either the destination address or the local address,
4672 4673 * but we skip the local address check if IPIF_UNNUMBERED is set. If the
4673 4674 * `match_ill' argument is non-NULL, the lookup is restricted to that ill
4674 4675 * (or illgrp if `match_ill' is in an IPMP group).
4675 4676 */
4676 4677 ipif_t *
4677 4678 ipif_lookup_addr(ipaddr_t addr, ill_t *match_ill, zoneid_t zoneid,
4678 4679 ip_stack_t *ipst)
4679 4680 {
4680 4681 return (ipif_lookup_addr_common(addr, match_ill, IPIF_MATCH_ILLGRP,
4681 4682 zoneid, ipst));
4682 4683 }
4683 4684
4684 4685 /*
4685 4686 * Lookup an ipif with the specified address. Similar to ipif_lookup_addr,
4686 4687 * except that we will only return an address if it is not marked as
4687 4688 * IPIF_DUPLICATE
4688 4689 */
4689 4690 ipif_t *
4690 4691 ipif_lookup_addr_nondup(ipaddr_t addr, ill_t *match_ill, zoneid_t zoneid,
4691 4692 ip_stack_t *ipst)
4692 4693 {
4693 4694 return (ipif_lookup_addr_common(addr, match_ill,
4694 4695 (IPIF_MATCH_ILLGRP | IPIF_MATCH_NONDUP),
4695 4696 zoneid, ipst));
4696 4697 }
4697 4698
4698 4699 /*
4699 4700 * Special abbreviated version of ipif_lookup_addr() that doesn't match
4700 4701 * `match_ill' across the IPMP group. This function is only needed in some
4701 4702 * corner-cases; almost everything should use ipif_lookup_addr().
4702 4703 */
4703 4704 ipif_t *
4704 4705 ipif_lookup_addr_exact(ipaddr_t addr, ill_t *match_ill, ip_stack_t *ipst)
4705 4706 {
4706 4707 ASSERT(match_ill != NULL);
4707 4708 return (ipif_lookup_addr_common(addr, match_ill, 0, ALL_ZONES,
4708 4709 ipst));
4709 4710 }
4710 4711
4711 4712 /*
4712 4713 * Look for an ipif with the specified address. For point-point links
4713 4714 * we look for matches on either the destination address and the local
4714 4715 * address, but we ignore the check on the local address if IPIF_UNNUMBERED
4715 4716 * is set.
4716 4717 * If the `match_ill' argument is non-NULL, the lookup is restricted to that
4717 4718 * ill (or illgrp if `match_ill' is in an IPMP group).
4718 4719 * Return the zoneid for the ipif which matches. ALL_ZONES if no match.
4719 4720 */
4720 4721 zoneid_t
4721 4722 ipif_lookup_addr_zoneid(ipaddr_t addr, ill_t *match_ill, ip_stack_t *ipst)
4722 4723 {
4723 4724 zoneid_t zoneid;
4724 4725 ipif_t *ipif;
4725 4726 ill_t *ill;
4726 4727 boolean_t ptp = B_FALSE;
4727 4728 ill_walk_context_t ctx;
4728 4729
4729 4730 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
4730 4731 /*
4731 4732 * Repeat twice, first based on local addresses and
4732 4733 * next time for pointopoint.
4733 4734 */
4734 4735 repeat:
4735 4736 ill = ILL_START_WALK_V4(&ctx, ipst);
4736 4737 for (; ill != NULL; ill = ill_next(&ctx, ill)) {
4737 4738 if (match_ill != NULL && ill != match_ill &&
4738 4739 !IS_IN_SAME_ILLGRP(ill, match_ill)) {
4739 4740 continue;
4740 4741 }
4741 4742 mutex_enter(&ill->ill_lock);
4742 4743 for (ipif = ill->ill_ipif; ipif != NULL;
4743 4744 ipif = ipif->ipif_next) {
4744 4745 /* Allow the ipif to be down */
4745 4746 if ((!ptp && (ipif->ipif_lcl_addr == addr) &&
4746 4747 ((ipif->ipif_flags & IPIF_UNNUMBERED) == 0)) ||
4747 4748 (ptp && (ipif->ipif_flags & IPIF_POINTOPOINT) &&
4748 4749 (ipif->ipif_pp_dst_addr == addr)) &&
4749 4750 !(ipif->ipif_state_flags & IPIF_CONDEMNED)) {
4750 4751 zoneid = ipif->ipif_zoneid;
4751 4752 mutex_exit(&ill->ill_lock);
4752 4753 rw_exit(&ipst->ips_ill_g_lock);
4753 4754 /*
4754 4755 * If ipif_zoneid was ALL_ZONES then we have
4755 4756 * a trusted extensions shared IP address.
4756 4757 * In that case GLOBAL_ZONEID works to send.
4757 4758 */
4758 4759 if (zoneid == ALL_ZONES)
4759 4760 zoneid = GLOBAL_ZONEID;
4760 4761 return (zoneid);
4761 4762 }
4762 4763 }
4763 4764 mutex_exit(&ill->ill_lock);
4764 4765 }
4765 4766
4766 4767 /* If we already did the ptp case, then we are done */
4767 4768 if (ptp) {
4768 4769 rw_exit(&ipst->ips_ill_g_lock);
4769 4770 return (ALL_ZONES);
4770 4771 }
4771 4772 ptp = B_TRUE;
4772 4773 goto repeat;
4773 4774 }
4774 4775
4775 4776 /*
4776 4777 * Look for an ipif that matches the specified remote address i.e. the
4777 4778 * ipif that would receive the specified packet.
4778 4779 * First look for directly connected interfaces and then do a recursive
4779 4780 * IRE lookup and pick the first ipif corresponding to the source address in the
4780 4781 * ire.
4781 4782 * Returns: held ipif
4782 4783 *
4783 4784 * This is only used for ICMP_ADDRESS_MASK_REQUESTs
4784 4785 */
4785 4786 ipif_t *
4786 4787 ipif_lookup_remote(ill_t *ill, ipaddr_t addr, zoneid_t zoneid)
4787 4788 {
4788 4789 ipif_t *ipif;
4789 4790
4790 4791 ASSERT(!ill->ill_isv6);
4791 4792
4792 4793 /*
4793 4794 * Someone could be changing this ipif currently or change it
4794 4795 * after we return this. Thus a few packets could use the old
4795 4796 * old values. However structure updates/creates (ire, ilg, ilm etc)
4796 4797 * will atomically be updated or cleaned up with the new value
4797 4798 * Thus we don't need a lock to check the flags or other attrs below.
4798 4799 */
4799 4800 mutex_enter(&ill->ill_lock);
4800 4801 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
4801 4802 if (IPIF_IS_CONDEMNED(ipif))
4802 4803 continue;
4803 4804 if (zoneid != ALL_ZONES && zoneid != ipif->ipif_zoneid &&
4804 4805 ipif->ipif_zoneid != ALL_ZONES)
4805 4806 continue;
4806 4807 /* Allow the ipif to be down */
4807 4808 if (ipif->ipif_flags & IPIF_POINTOPOINT) {
4808 4809 if ((ipif->ipif_pp_dst_addr == addr) ||
4809 4810 (!(ipif->ipif_flags & IPIF_UNNUMBERED) &&
4810 4811 ipif->ipif_lcl_addr == addr)) {
4811 4812 ipif_refhold_locked(ipif);
4812 4813 mutex_exit(&ill->ill_lock);
4813 4814 return (ipif);
4814 4815 }
4815 4816 } else if (ipif->ipif_subnet == (addr & ipif->ipif_net_mask)) {
4816 4817 ipif_refhold_locked(ipif);
4817 4818 mutex_exit(&ill->ill_lock);
4818 4819 return (ipif);
4819 4820 }
4820 4821 }
4821 4822 mutex_exit(&ill->ill_lock);
4822 4823 /*
4823 4824 * For a remote destination it isn't possible to nail down a particular
4824 4825 * ipif.
4825 4826 */
4826 4827
4827 4828 /* Pick the first interface */
4828 4829 ipif = ipif_get_next_ipif(NULL, ill);
4829 4830 return (ipif);
4830 4831 }
4831 4832
4832 4833 /*
4833 4834 * This func does not prevent refcnt from increasing. But if
4834 4835 * the caller has taken steps to that effect, then this func
4835 4836 * can be used to determine whether the ill has become quiescent
4836 4837 */
4837 4838 static boolean_t
4838 4839 ill_is_quiescent(ill_t *ill)
4839 4840 {
4840 4841 ipif_t *ipif;
4841 4842
4842 4843 ASSERT(MUTEX_HELD(&ill->ill_lock));
4843 4844
4844 4845 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
4845 4846 if (ipif->ipif_refcnt != 0)
4846 4847 return (B_FALSE);
4847 4848 }
4848 4849 if (!ILL_DOWN_OK(ill) || ill->ill_refcnt != 0) {
4849 4850 return (B_FALSE);
4850 4851 }
4851 4852 return (B_TRUE);
4852 4853 }
4853 4854
4854 4855 boolean_t
4855 4856 ill_is_freeable(ill_t *ill)
4856 4857 {
4857 4858 ipif_t *ipif;
4858 4859
4859 4860 ASSERT(MUTEX_HELD(&ill->ill_lock));
4860 4861
4861 4862 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
4862 4863 if (ipif->ipif_refcnt != 0) {
4863 4864 return (B_FALSE);
4864 4865 }
4865 4866 }
4866 4867 if (!ILL_FREE_OK(ill) || ill->ill_refcnt != 0) {
4867 4868 return (B_FALSE);
4868 4869 }
4869 4870 return (B_TRUE);
4870 4871 }
4871 4872
4872 4873 /*
4873 4874 * This func does not prevent refcnt from increasing. But if
4874 4875 * the caller has taken steps to that effect, then this func
4875 4876 * can be used to determine whether the ipif has become quiescent
4876 4877 */
4877 4878 static boolean_t
4878 4879 ipif_is_quiescent(ipif_t *ipif)
4879 4880 {
4880 4881 ill_t *ill;
4881 4882
4882 4883 ASSERT(MUTEX_HELD(&ipif->ipif_ill->ill_lock));
4883 4884
4884 4885 if (ipif->ipif_refcnt != 0)
4885 4886 return (B_FALSE);
4886 4887
4887 4888 ill = ipif->ipif_ill;
4888 4889 if (ill->ill_ipif_up_count != 0 || ill->ill_ipif_dup_count != 0 ||
4889 4890 ill->ill_logical_down) {
4890 4891 return (B_TRUE);
4891 4892 }
4892 4893
4893 4894 /* This is the last ipif going down or being deleted on this ill */
4894 4895 if (ill->ill_ire_cnt != 0 || ill->ill_refcnt != 0) {
4895 4896 return (B_FALSE);
4896 4897 }
4897 4898
4898 4899 return (B_TRUE);
4899 4900 }
4900 4901
4901 4902 /*
4902 4903 * return true if the ipif can be destroyed: the ipif has to be quiescent
4903 4904 * with zero references from ire/ilm to it.
4904 4905 */
4905 4906 static boolean_t
4906 4907 ipif_is_freeable(ipif_t *ipif)
4907 4908 {
4908 4909 ASSERT(MUTEX_HELD(&ipif->ipif_ill->ill_lock));
4909 4910 ASSERT(ipif->ipif_id != 0);
4910 4911 return (ipif->ipif_refcnt == 0);
4911 4912 }
4912 4913
4913 4914 /*
4914 4915 * The ipif/ill/ire has been refreled. Do the tail processing.
4915 4916 * Determine if the ipif or ill in question has become quiescent and if so
4916 4917 * wakeup close and/or restart any queued pending ioctl that is waiting
4917 4918 * for the ipif_down (or ill_down)
4918 4919 */
4919 4920 void
4920 4921 ipif_ill_refrele_tail(ill_t *ill)
4921 4922 {
4922 4923 mblk_t *mp;
4923 4924 conn_t *connp;
4924 4925 ipsq_t *ipsq;
4925 4926 ipxop_t *ipx;
4926 4927 ipif_t *ipif;
4927 4928 dl_notify_ind_t *dlindp;
4928 4929
4929 4930 ASSERT(MUTEX_HELD(&ill->ill_lock));
4930 4931
4931 4932 if ((ill->ill_state_flags & ILL_CONDEMNED) && ill_is_freeable(ill)) {
4932 4933 /* ip_modclose() may be waiting */
4933 4934 cv_broadcast(&ill->ill_cv);
4934 4935 }
4935 4936
4936 4937 ipsq = ill->ill_phyint->phyint_ipsq;
4937 4938 mutex_enter(&ipsq->ipsq_lock);
4938 4939 ipx = ipsq->ipsq_xop;
4939 4940 mutex_enter(&ipx->ipx_lock);
4940 4941 if (ipx->ipx_waitfor == 0) /* no one's waiting; bail */
4941 4942 goto unlock;
4942 4943
4943 4944 ASSERT(ipx->ipx_pending_mp != NULL && ipx->ipx_pending_ipif != NULL);
4944 4945
4945 4946 ipif = ipx->ipx_pending_ipif;
4946 4947 if (ipif->ipif_ill != ill) /* wait is for another ill; bail */
4947 4948 goto unlock;
4948 4949
4949 4950 switch (ipx->ipx_waitfor) {
4950 4951 case IPIF_DOWN:
4951 4952 if (!ipif_is_quiescent(ipif))
4952 4953 goto unlock;
4953 4954 break;
4954 4955 case IPIF_FREE:
4955 4956 if (!ipif_is_freeable(ipif))
4956 4957 goto unlock;
4957 4958 break;
4958 4959 case ILL_DOWN:
4959 4960 if (!ill_is_quiescent(ill))
4960 4961 goto unlock;
4961 4962 break;
4962 4963 case ILL_FREE:
4963 4964 /*
4964 4965 * ILL_FREE is only for loopback; normal ill teardown waits
4965 4966 * synchronously in ip_modclose() without using ipx_waitfor,
4966 4967 * handled by the cv_broadcast() at the top of this function.
4967 4968 */
4968 4969 if (!ill_is_freeable(ill))
4969 4970 goto unlock;
4970 4971 break;
4971 4972 default:
4972 4973 cmn_err(CE_PANIC, "ipsq: %p unknown ipx_waitfor %d\n",
4973 4974 (void *)ipsq, ipx->ipx_waitfor);
4974 4975 }
4975 4976
4976 4977 ill_refhold_locked(ill); /* for qwriter_ip() call below */
4977 4978 mutex_exit(&ipx->ipx_lock);
4978 4979 mp = ipsq_pending_mp_get(ipsq, &connp);
4979 4980 mutex_exit(&ipsq->ipsq_lock);
4980 4981 mutex_exit(&ill->ill_lock);
4981 4982
4982 4983 ASSERT(mp != NULL);
4983 4984 /*
4984 4985 * NOTE: all of the qwriter_ip() calls below use CUR_OP since
4985 4986 * we can only get here when the current operation decides it
4986 4987 * it needs to quiesce via ipsq_pending_mp_add().
4987 4988 */
4988 4989 switch (mp->b_datap->db_type) {
4989 4990 case M_PCPROTO:
4990 4991 case M_PROTO:
4991 4992 /*
4992 4993 * For now, only DL_NOTIFY_IND messages can use this facility.
4993 4994 */
4994 4995 dlindp = (dl_notify_ind_t *)mp->b_rptr;
4995 4996 ASSERT(dlindp->dl_primitive == DL_NOTIFY_IND);
4996 4997
4997 4998 switch (dlindp->dl_notification) {
4998 4999 case DL_NOTE_PHYS_ADDR:
4999 5000 qwriter_ip(ill, ill->ill_rq, mp,
5000 5001 ill_set_phys_addr_tail, CUR_OP, B_TRUE);
5001 5002 return;
5002 5003 case DL_NOTE_REPLUMB:
5003 5004 qwriter_ip(ill, ill->ill_rq, mp,
5004 5005 ill_replumb_tail, CUR_OP, B_TRUE);
5005 5006 return;
5006 5007 default:
5007 5008 ASSERT(0);
5008 5009 ill_refrele(ill);
5009 5010 }
5010 5011 break;
5011 5012
5012 5013 case M_ERROR:
5013 5014 case M_HANGUP:
5014 5015 qwriter_ip(ill, ill->ill_rq, mp, ipif_all_down_tail, CUR_OP,
5015 5016 B_TRUE);
5016 5017 return;
5017 5018
5018 5019 case M_IOCTL:
5019 5020 case M_IOCDATA:
5020 5021 qwriter_ip(ill, (connp != NULL ? CONNP_TO_WQ(connp) :
5021 5022 ill->ill_wq), mp, ip_reprocess_ioctl, CUR_OP, B_TRUE);
5022 5023 return;
5023 5024
5024 5025 default:
5025 5026 cmn_err(CE_PANIC, "ipif_ill_refrele_tail mp %p "
5026 5027 "db_type %d\n", (void *)mp, mp->b_datap->db_type);
5027 5028 }
5028 5029 return;
5029 5030 unlock:
5030 5031 mutex_exit(&ipsq->ipsq_lock);
5031 5032 mutex_exit(&ipx->ipx_lock);
5032 5033 mutex_exit(&ill->ill_lock);
5033 5034 }
5034 5035
5035 5036 #ifdef DEBUG
5036 5037 /* Reuse trace buffer from beginning (if reached the end) and record trace */
5037 5038 static void
5038 5039 th_trace_rrecord(th_trace_t *th_trace)
5039 5040 {
5040 5041 tr_buf_t *tr_buf;
5041 5042 uint_t lastref;
5042 5043
5043 5044 lastref = th_trace->th_trace_lastref;
5044 5045 lastref++;
5045 5046 if (lastref == TR_BUF_MAX)
5046 5047 lastref = 0;
5047 5048 th_trace->th_trace_lastref = lastref;
5048 5049 tr_buf = &th_trace->th_trbuf[lastref];
5049 5050 tr_buf->tr_time = ddi_get_lbolt();
5050 5051 tr_buf->tr_depth = getpcstack(tr_buf->tr_stack, TR_STACK_DEPTH);
5051 5052 }
5052 5053
5053 5054 static void
5054 5055 th_trace_free(void *value)
5055 5056 {
5056 5057 th_trace_t *th_trace = value;
5057 5058
5058 5059 ASSERT(th_trace->th_refcnt == 0);
5059 5060 kmem_free(th_trace, sizeof (*th_trace));
5060 5061 }
5061 5062
5062 5063 /*
5063 5064 * Find or create the per-thread hash table used to track object references.
5064 5065 * The ipst argument is NULL if we shouldn't allocate.
5065 5066 *
5066 5067 * Accesses per-thread data, so there's no need to lock here.
5067 5068 */
5068 5069 static mod_hash_t *
5069 5070 th_trace_gethash(ip_stack_t *ipst)
5070 5071 {
5071 5072 th_hash_t *thh;
5072 5073
5073 5074 if ((thh = tsd_get(ip_thread_data)) == NULL && ipst != NULL) {
5074 5075 mod_hash_t *mh;
5075 5076 char name[256];
5076 5077 size_t objsize, rshift;
5077 5078 int retv;
5078 5079
5079 5080 if ((thh = kmem_alloc(sizeof (*thh), KM_NOSLEEP)) == NULL)
5080 5081 return (NULL);
5081 5082 (void) snprintf(name, sizeof (name), "th_trace_%p",
5082 5083 (void *)curthread);
5083 5084
5084 5085 /*
5085 5086 * We use mod_hash_create_extended here rather than the more
5086 5087 * obvious mod_hash_create_ptrhash because the latter has a
5087 5088 * hard-coded KM_SLEEP, and we'd prefer to fail rather than
5088 5089 * block.
5089 5090 */
5090 5091 objsize = MAX(MAX(sizeof (ill_t), sizeof (ipif_t)),
5091 5092 MAX(sizeof (ire_t), sizeof (ncec_t)));
5092 5093 rshift = highbit(objsize);
5093 5094 mh = mod_hash_create_extended(name, 64, mod_hash_null_keydtor,
5094 5095 th_trace_free, mod_hash_byptr, (void *)rshift,
5095 5096 mod_hash_ptrkey_cmp, KM_NOSLEEP);
5096 5097 if (mh == NULL) {
5097 5098 kmem_free(thh, sizeof (*thh));
5098 5099 return (NULL);
5099 5100 }
5100 5101 thh->thh_hash = mh;
5101 5102 thh->thh_ipst = ipst;
5102 5103 /*
5103 5104 * We trace ills, ipifs, ires, and nces. All of these are
5104 5105 * per-IP-stack, so the lock on the thread list is as well.
5105 5106 */
5106 5107 rw_enter(&ip_thread_rwlock, RW_WRITER);
5107 5108 list_insert_tail(&ip_thread_list, thh);
5108 5109 rw_exit(&ip_thread_rwlock);
5109 5110 retv = tsd_set(ip_thread_data, thh);
5110 5111 ASSERT(retv == 0);
5111 5112 }
5112 5113 return (thh != NULL ? thh->thh_hash : NULL);
5113 5114 }
5114 5115
5115 5116 boolean_t
5116 5117 th_trace_ref(const void *obj, ip_stack_t *ipst)
5117 5118 {
5118 5119 th_trace_t *th_trace;
5119 5120 mod_hash_t *mh;
5120 5121 mod_hash_val_t val;
5121 5122
5122 5123 if ((mh = th_trace_gethash(ipst)) == NULL)
5123 5124 return (B_FALSE);
5124 5125
5125 5126 /*
5126 5127 * Attempt to locate the trace buffer for this obj and thread.
5127 5128 * If it does not exist, then allocate a new trace buffer and
5128 5129 * insert into the hash.
5129 5130 */
5130 5131 if (mod_hash_find(mh, (mod_hash_key_t)obj, &val) == MH_ERR_NOTFOUND) {
5131 5132 th_trace = kmem_zalloc(sizeof (th_trace_t), KM_NOSLEEP);
5132 5133 if (th_trace == NULL)
5133 5134 return (B_FALSE);
5134 5135
5135 5136 th_trace->th_id = curthread;
5136 5137 if (mod_hash_insert(mh, (mod_hash_key_t)obj,
5137 5138 (mod_hash_val_t)th_trace) != 0) {
5138 5139 kmem_free(th_trace, sizeof (th_trace_t));
5139 5140 return (B_FALSE);
5140 5141 }
5141 5142 } else {
5142 5143 th_trace = (th_trace_t *)val;
5143 5144 }
5144 5145
5145 5146 ASSERT(th_trace->th_refcnt >= 0 &&
5146 5147 th_trace->th_refcnt < TR_BUF_MAX - 1);
5147 5148
5148 5149 th_trace->th_refcnt++;
5149 5150 th_trace_rrecord(th_trace);
5150 5151 return (B_TRUE);
5151 5152 }
5152 5153
5153 5154 /*
5154 5155 * For the purpose of tracing a reference release, we assume that global
5155 5156 * tracing is always on and that the same thread initiated the reference hold
5156 5157 * is releasing.
5157 5158 */
5158 5159 void
5159 5160 th_trace_unref(const void *obj)
5160 5161 {
5161 5162 int retv;
5162 5163 mod_hash_t *mh;
5163 5164 th_trace_t *th_trace;
5164 5165 mod_hash_val_t val;
5165 5166
5166 5167 mh = th_trace_gethash(NULL);
5167 5168 retv = mod_hash_find(mh, (mod_hash_key_t)obj, &val);
5168 5169 ASSERT(retv == 0);
5169 5170 th_trace = (th_trace_t *)val;
5170 5171
5171 5172 ASSERT(th_trace->th_refcnt > 0);
5172 5173 th_trace->th_refcnt--;
5173 5174 th_trace_rrecord(th_trace);
5174 5175 }
5175 5176
5176 5177 /*
5177 5178 * If tracing has been disabled, then we assume that the reference counts are
5178 5179 * now useless, and we clear them out before destroying the entries.
5179 5180 */
5180 5181 void
5181 5182 th_trace_cleanup(const void *obj, boolean_t trace_disable)
5182 5183 {
5183 5184 th_hash_t *thh;
5184 5185 mod_hash_t *mh;
5185 5186 mod_hash_val_t val;
5186 5187 th_trace_t *th_trace;
5187 5188 int retv;
5188 5189
5189 5190 rw_enter(&ip_thread_rwlock, RW_READER);
5190 5191 for (thh = list_head(&ip_thread_list); thh != NULL;
5191 5192 thh = list_next(&ip_thread_list, thh)) {
5192 5193 if (mod_hash_find(mh = thh->thh_hash, (mod_hash_key_t)obj,
5193 5194 &val) == 0) {
5194 5195 th_trace = (th_trace_t *)val;
5195 5196 if (trace_disable)
5196 5197 th_trace->th_refcnt = 0;
5197 5198 retv = mod_hash_destroy(mh, (mod_hash_key_t)obj);
5198 5199 ASSERT(retv == 0);
5199 5200 }
5200 5201 }
5201 5202 rw_exit(&ip_thread_rwlock);
5202 5203 }
5203 5204
5204 5205 void
5205 5206 ipif_trace_ref(ipif_t *ipif)
5206 5207 {
5207 5208 ASSERT(MUTEX_HELD(&ipif->ipif_ill->ill_lock));
5208 5209
5209 5210 if (ipif->ipif_trace_disable)
5210 5211 return;
5211 5212
5212 5213 if (!th_trace_ref(ipif, ipif->ipif_ill->ill_ipst)) {
5213 5214 ipif->ipif_trace_disable = B_TRUE;
5214 5215 ipif_trace_cleanup(ipif);
5215 5216 }
5216 5217 }
5217 5218
5218 5219 void
5219 5220 ipif_untrace_ref(ipif_t *ipif)
5220 5221 {
5221 5222 ASSERT(MUTEX_HELD(&ipif->ipif_ill->ill_lock));
5222 5223
5223 5224 if (!ipif->ipif_trace_disable)
5224 5225 th_trace_unref(ipif);
5225 5226 }
5226 5227
5227 5228 void
5228 5229 ill_trace_ref(ill_t *ill)
5229 5230 {
5230 5231 ASSERT(MUTEX_HELD(&ill->ill_lock));
5231 5232
5232 5233 if (ill->ill_trace_disable)
5233 5234 return;
5234 5235
5235 5236 if (!th_trace_ref(ill, ill->ill_ipst)) {
5236 5237 ill->ill_trace_disable = B_TRUE;
5237 5238 ill_trace_cleanup(ill);
5238 5239 }
5239 5240 }
5240 5241
5241 5242 void
5242 5243 ill_untrace_ref(ill_t *ill)
5243 5244 {
5244 5245 ASSERT(MUTEX_HELD(&ill->ill_lock));
5245 5246
5246 5247 if (!ill->ill_trace_disable)
5247 5248 th_trace_unref(ill);
5248 5249 }
5249 5250
5250 5251 /*
5251 5252 * Called when ipif is unplumbed or when memory alloc fails. Note that on
5252 5253 * failure, ipif_trace_disable is set.
5253 5254 */
5254 5255 static void
5255 5256 ipif_trace_cleanup(const ipif_t *ipif)
5256 5257 {
5257 5258 th_trace_cleanup(ipif, ipif->ipif_trace_disable);
5258 5259 }
5259 5260
5260 5261 /*
5261 5262 * Called when ill is unplumbed or when memory alloc fails. Note that on
5262 5263 * failure, ill_trace_disable is set.
5263 5264 */
5264 5265 static void
5265 5266 ill_trace_cleanup(const ill_t *ill)
5266 5267 {
5267 5268 th_trace_cleanup(ill, ill->ill_trace_disable);
5268 5269 }
5269 5270 #endif /* DEBUG */
5270 5271
5271 5272 void
5272 5273 ipif_refhold_locked(ipif_t *ipif)
5273 5274 {
5274 5275 ASSERT(MUTEX_HELD(&ipif->ipif_ill->ill_lock));
5275 5276 ipif->ipif_refcnt++;
5276 5277 IPIF_TRACE_REF(ipif);
5277 5278 }
5278 5279
5279 5280 void
5280 5281 ipif_refhold(ipif_t *ipif)
5281 5282 {
5282 5283 ill_t *ill;
5283 5284
5284 5285 ill = ipif->ipif_ill;
5285 5286 mutex_enter(&ill->ill_lock);
5286 5287 ipif->ipif_refcnt++;
5287 5288 IPIF_TRACE_REF(ipif);
5288 5289 mutex_exit(&ill->ill_lock);
5289 5290 }
5290 5291
5291 5292 /*
5292 5293 * Must not be called while holding any locks. Otherwise if this is
5293 5294 * the last reference to be released there is a chance of recursive mutex
5294 5295 * panic due to ipif_refrele -> ipif_ill_refrele_tail -> qwriter_ip trying
5295 5296 * to restart an ioctl.
5296 5297 */
5297 5298 void
5298 5299 ipif_refrele(ipif_t *ipif)
5299 5300 {
5300 5301 ill_t *ill;
5301 5302
5302 5303 ill = ipif->ipif_ill;
5303 5304
5304 5305 mutex_enter(&ill->ill_lock);
5305 5306 ASSERT(ipif->ipif_refcnt != 0);
5306 5307 ipif->ipif_refcnt--;
5307 5308 IPIF_UNTRACE_REF(ipif);
5308 5309 if (ipif->ipif_refcnt != 0) {
5309 5310 mutex_exit(&ill->ill_lock);
5310 5311 return;
5311 5312 }
5312 5313
5313 5314 /* Drops the ill_lock */
5314 5315 ipif_ill_refrele_tail(ill);
5315 5316 }
5316 5317
5317 5318 ipif_t *
5318 5319 ipif_get_next_ipif(ipif_t *curr, ill_t *ill)
5319 5320 {
5320 5321 ipif_t *ipif;
5321 5322
5322 5323 mutex_enter(&ill->ill_lock);
5323 5324 for (ipif = (curr == NULL ? ill->ill_ipif : curr->ipif_next);
5324 5325 ipif != NULL; ipif = ipif->ipif_next) {
5325 5326 if (IPIF_IS_CONDEMNED(ipif))
5326 5327 continue;
5327 5328 ipif_refhold_locked(ipif);
5328 5329 mutex_exit(&ill->ill_lock);
5329 5330 return (ipif);
5330 5331 }
5331 5332 mutex_exit(&ill->ill_lock);
5332 5333 return (NULL);
5333 5334 }
5334 5335
5335 5336 /*
5336 5337 * TODO: make this table extendible at run time
5337 5338 * Return a pointer to the mac type info for 'mac_type'
5338 5339 */
5339 5340 static ip_m_t *
5340 5341 ip_m_lookup(t_uscalar_t mac_type)
5341 5342 {
5342 5343 ip_m_t *ipm;
5343 5344
5344 5345 for (ipm = ip_m_tbl; ipm < A_END(ip_m_tbl); ipm++)
5345 5346 if (ipm->ip_m_mac_type == mac_type)
5346 5347 return (ipm);
5347 5348 return (NULL);
5348 5349 }
5349 5350
5350 5351 /*
5351 5352 * Make a link layer address from the multicast IP address *addr.
5352 5353 * To form the link layer address, invoke the ip_m_v*mapping function
5353 5354 * associated with the link-layer type.
5354 5355 */
5355 5356 void
5356 5357 ip_mcast_mapping(ill_t *ill, uchar_t *addr, uchar_t *hwaddr)
5357 5358 {
5358 5359 ip_m_t *ipm;
5359 5360
5360 5361 if (ill->ill_net_type == IRE_IF_NORESOLVER)
5361 5362 return;
5362 5363
5363 5364 ASSERT(addr != NULL);
5364 5365
5365 5366 ipm = ip_m_lookup(ill->ill_mactype);
5366 5367 if (ipm == NULL ||
5367 5368 (ill->ill_isv6 && ipm->ip_m_v6mapping == NULL) ||
5368 5369 (!ill->ill_isv6 && ipm->ip_m_v4mapping == NULL)) {
5369 5370 ip0dbg(("no mapping for ill %s mactype 0x%x\n",
5370 5371 ill->ill_name, ill->ill_mactype));
5371 5372 return;
5372 5373 }
5373 5374 if (ill->ill_isv6)
5374 5375 (*ipm->ip_m_v6mapping)(ill, addr, hwaddr);
5375 5376 else
5376 5377 (*ipm->ip_m_v4mapping)(ill, addr, hwaddr);
5377 5378 }
5378 5379
5379 5380 /*
5380 5381 * Returns B_FALSE if the IPv4 netmask pointed by `mask' is non-contiguous.
5381 5382 * Otherwise returns B_TRUE.
5382 5383 *
5383 5384 * The netmask can be verified to be contiguous with 32 shifts and or
5384 5385 * operations. Take the contiguous mask (in host byte order) and compute
5385 5386 * mask | mask << 1 | mask << 2 | ... | mask << 31
5386 5387 * the result will be the same as the 'mask' for contiguous mask.
5387 5388 */
5388 5389 static boolean_t
5389 5390 ip_contiguous_mask(uint32_t mask)
5390 5391 {
5391 5392 uint32_t m = mask;
5392 5393 int i;
5393 5394
5394 5395 for (i = 1; i < 32; i++)
5395 5396 m |= (mask << i);
5396 5397
5397 5398 return (m == mask);
5398 5399 }
5399 5400
5400 5401 /*
5401 5402 * ip_rt_add is called to add an IPv4 route to the forwarding table.
5402 5403 * ill is passed in to associate it with the correct interface.
5403 5404 * If ire_arg is set, then we return the held IRE in that location.
5404 5405 */
5405 5406 int
5406 5407 ip_rt_add(ipaddr_t dst_addr, ipaddr_t mask, ipaddr_t gw_addr,
5407 5408 ipaddr_t src_addr, int flags, ill_t *ill, ire_t **ire_arg,
5408 5409 boolean_t ioctl_msg, struct rtsa_s *sp, ip_stack_t *ipst, zoneid_t zoneid)
5409 5410 {
5410 5411 ire_t *ire, *nire;
5411 5412 ire_t *gw_ire = NULL;
5412 5413 ipif_t *ipif = NULL;
5413 5414 uint_t type;
5414 5415 int match_flags = MATCH_IRE_TYPE;
5415 5416 tsol_gc_t *gc = NULL;
5416 5417 tsol_gcgrp_t *gcgrp = NULL;
5417 5418 boolean_t gcgrp_xtraref = B_FALSE;
5418 5419 boolean_t cgtp_broadcast;
5419 5420 boolean_t unbound = B_FALSE;
5420 5421
5421 5422 ip1dbg(("ip_rt_add:"));
5422 5423
5423 5424 if (ire_arg != NULL)
5424 5425 *ire_arg = NULL;
5425 5426
5426 5427 /* disallow non-contiguous netmasks */
5427 5428 if (!ip_contiguous_mask(ntohl(mask)))
5428 5429 return (ENOTSUP);
5429 5430
5430 5431 /*
5431 5432 * If this is the case of RTF_HOST being set, then we set the netmask
5432 5433 * to all ones (regardless if one was supplied).
5433 5434 */
5434 5435 if (flags & RTF_HOST)
5435 5436 mask = IP_HOST_MASK;
5436 5437
5437 5438 /*
5438 5439 * Prevent routes with a zero gateway from being created (since
5439 5440 * interfaces can currently be plumbed and brought up no assigned
5440 5441 * address).
5441 5442 */
5442 5443 if (gw_addr == 0)
5443 5444 return (ENETUNREACH);
5444 5445 /*
5445 5446 * Get the ipif, if any, corresponding to the gw_addr
5446 5447 * If -ifp was specified we restrict ourselves to the ill, otherwise
5447 5448 * we match on the gatway and destination to handle unnumbered pt-pt
5448 5449 * interfaces.
5449 5450 */
5450 5451 if (ill != NULL)
5451 5452 ipif = ipif_lookup_addr(gw_addr, ill, ALL_ZONES, ipst);
5452 5453 else
5453 5454 ipif = ipif_lookup_interface(gw_addr, dst_addr, ipst);
5454 5455 if (ipif != NULL) {
5455 5456 if (IS_VNI(ipif->ipif_ill)) {
5456 5457 ipif_refrele(ipif);
5457 5458 return (EINVAL);
5458 5459 }
5459 5460 }
5460 5461
5461 5462 /*
5462 5463 * GateD will attempt to create routes with a loopback interface
5463 5464 * address as the gateway and with RTF_GATEWAY set. We allow
5464 5465 * these routes to be added, but create them as interface routes
5465 5466 * since the gateway is an interface address.
5466 5467 */
5467 5468 if ((ipif != NULL) && (ipif->ipif_ire_type == IRE_LOOPBACK)) {
5468 5469 flags &= ~RTF_GATEWAY;
5469 5470 if (gw_addr == INADDR_LOOPBACK && dst_addr == INADDR_LOOPBACK &&
5470 5471 mask == IP_HOST_MASK) {
5471 5472 ire = ire_ftable_lookup_v4(dst_addr, 0, 0, IRE_LOOPBACK,
5472 5473 NULL, ALL_ZONES, NULL, MATCH_IRE_TYPE, 0, ipst,
5473 5474 NULL);
5474 5475 if (ire != NULL) {
5475 5476 ire_refrele(ire);
5476 5477 ipif_refrele(ipif);
5477 5478 return (EEXIST);
5478 5479 }
5479 5480 ip1dbg(("ip_rt_add: 0x%p creating IRE 0x%x"
5480 5481 "for 0x%x\n", (void *)ipif,
5481 5482 ipif->ipif_ire_type,
5482 5483 ntohl(ipif->ipif_lcl_addr)));
5483 5484 ire = ire_create(
5484 5485 (uchar_t *)&dst_addr, /* dest address */
5485 5486 (uchar_t *)&mask, /* mask */
5486 5487 NULL, /* no gateway */
5487 5488 ipif->ipif_ire_type, /* LOOPBACK */
5488 5489 ipif->ipif_ill,
5489 5490 zoneid,
5490 5491 (ipif->ipif_flags & IPIF_PRIVATE) ? RTF_PRIVATE : 0,
5491 5492 NULL,
5492 5493 ipst);
5493 5494
5494 5495 if (ire == NULL) {
5495 5496 ipif_refrele(ipif);
5496 5497 return (ENOMEM);
5497 5498 }
5498 5499 /* src address assigned by the caller? */
5499 5500 if ((src_addr != INADDR_ANY) && (flags & RTF_SETSRC))
5500 5501 ire->ire_setsrc_addr = src_addr;
5501 5502
5502 5503 nire = ire_add(ire);
5503 5504 if (nire == NULL) {
5504 5505 /*
5505 5506 * In the result of failure, ire_add() will have
5506 5507 * already deleted the ire in question, so there
5507 5508 * is no need to do that here.
5508 5509 */
5509 5510 ipif_refrele(ipif);
5510 5511 return (ENOMEM);
5511 5512 }
5512 5513 /*
5513 5514 * Check if it was a duplicate entry. This handles
5514 5515 * the case of two racing route adds for the same route
5515 5516 */
5516 5517 if (nire != ire) {
5517 5518 ASSERT(nire->ire_identical_ref > 1);
5518 5519 ire_delete(nire);
5519 5520 ire_refrele(nire);
5520 5521 ipif_refrele(ipif);
5521 5522 return (EEXIST);
5522 5523 }
5523 5524 ire = nire;
5524 5525 goto save_ire;
5525 5526 }
5526 5527 }
5527 5528
5528 5529 /*
5529 5530 * The routes for multicast with CGTP are quite special in that
5530 5531 * the gateway is the local interface address, yet RTF_GATEWAY
5531 5532 * is set. We turn off RTF_GATEWAY to provide compatibility with
5532 5533 * this undocumented and unusual use of multicast routes.
5533 5534 */
5534 5535 if ((flags & RTF_MULTIRT) && ipif != NULL)
5535 5536 flags &= ~RTF_GATEWAY;
5536 5537
5537 5538 /*
5538 5539 * Traditionally, interface routes are ones where RTF_GATEWAY isn't set
5539 5540 * and the gateway address provided is one of the system's interface
5540 5541 * addresses. By using the routing socket interface and supplying an
5541 5542 * RTA_IFP sockaddr with an interface index, an alternate method of
5542 5543 * specifying an interface route to be created is available which uses
5543 5544 * the interface index that specifies the outgoing interface rather than
5544 5545 * the address of an outgoing interface (which may not be able to
5545 5546 * uniquely identify an interface). When coupled with the RTF_GATEWAY
5546 5547 * flag, routes can be specified which not only specify the next-hop to
5547 5548 * be used when routing to a certain prefix, but also which outgoing
5548 5549 * interface should be used.
5549 5550 *
5550 5551 * Previously, interfaces would have unique addresses assigned to them
5551 5552 * and so the address assigned to a particular interface could be used
5552 5553 * to identify a particular interface. One exception to this was the
5553 5554 * case of an unnumbered interface (where IPIF_UNNUMBERED was set).
5554 5555 *
5555 5556 * With the advent of IPv6 and its link-local addresses, this
5556 5557 * restriction was relaxed and interfaces could share addresses between
5557 5558 * themselves. In fact, typically all of the link-local interfaces on
5558 5559 * an IPv6 node or router will have the same link-local address. In
5559 5560 * order to differentiate between these interfaces, the use of an
5560 5561 * interface index is necessary and this index can be carried inside a
5561 5562 * RTA_IFP sockaddr (which is actually a sockaddr_dl). One restriction
5562 5563 * of using the interface index, however, is that all of the ipif's that
5563 5564 * are part of an ill have the same index and so the RTA_IFP sockaddr
5564 5565 * cannot be used to differentiate between ipif's (or logical
5565 5566 * interfaces) that belong to the same ill (physical interface).
5566 5567 *
5567 5568 * For example, in the following case involving IPv4 interfaces and
5568 5569 * logical interfaces
5569 5570 *
5570 5571 * 192.0.2.32 255.255.255.224 192.0.2.33 U if0
5571 5572 * 192.0.2.32 255.255.255.224 192.0.2.34 U if0
5572 5573 * 192.0.2.32 255.255.255.224 192.0.2.35 U if0
5573 5574 *
5574 5575 * the ipif's corresponding to each of these interface routes can be
5575 5576 * uniquely identified by the "gateway" (actually interface address).
5576 5577 *
5577 5578 * In this case involving multiple IPv6 default routes to a particular
5578 5579 * link-local gateway, the use of RTA_IFP is necessary to specify which
5579 5580 * default route is of interest:
5580 5581 *
5581 5582 * default fe80::123:4567:89ab:cdef U if0
5582 5583 * default fe80::123:4567:89ab:cdef U if1
5583 5584 */
5584 5585
5585 5586 /* RTF_GATEWAY not set */
5586 5587 if (!(flags & RTF_GATEWAY)) {
5587 5588 if (sp != NULL) {
5588 5589 ip2dbg(("ip_rt_add: gateway security attributes "
5589 5590 "cannot be set with interface route\n"));
5590 5591 if (ipif != NULL)
5591 5592 ipif_refrele(ipif);
5592 5593 return (EINVAL);
5593 5594 }
5594 5595
5595 5596 /*
5596 5597 * Whether or not ill (RTA_IFP) is set, we require that
5597 5598 * the gateway is one of our local addresses.
5598 5599 */
5599 5600 if (ipif == NULL)
5600 5601 return (ENETUNREACH);
5601 5602
5602 5603 /*
5603 5604 * We use MATCH_IRE_ILL here. If the caller specified an
5604 5605 * interface (from the RTA_IFP sockaddr) we use it, otherwise
5605 5606 * we use the ill derived from the gateway address.
5606 5607 * We can always match the gateway address since we record it
5607 5608 * in ire_gateway_addr.
5608 5609 * We don't allow RTA_IFP to specify a different ill than the
5609 5610 * one matching the ipif to make sure we can delete the route.
5610 5611 */
5611 5612 match_flags |= MATCH_IRE_GW | MATCH_IRE_ILL;
5612 5613 if (ill == NULL) {
5613 5614 ill = ipif->ipif_ill;
5614 5615 } else if (ill != ipif->ipif_ill) {
5615 5616 ipif_refrele(ipif);
5616 5617 return (EINVAL);
5617 5618 }
5618 5619
5619 5620 /*
5620 5621 * We check for an existing entry at this point.
5621 5622 *
5622 5623 * Since a netmask isn't passed in via the ioctl interface
5623 5624 * (SIOCADDRT), we don't check for a matching netmask in that
5624 5625 * case.
5625 5626 */
5626 5627 if (!ioctl_msg)
5627 5628 match_flags |= MATCH_IRE_MASK;
5628 5629 ire = ire_ftable_lookup_v4(dst_addr, mask, gw_addr,
5629 5630 IRE_INTERFACE, ill, ALL_ZONES, NULL, match_flags, 0, ipst,
5630 5631 NULL);
5631 5632 if (ire != NULL) {
5632 5633 ire_refrele(ire);
5633 5634 ipif_refrele(ipif);
5634 5635 return (EEXIST);
5635 5636 }
5636 5637
5637 5638 /*
5638 5639 * Some software (for example, GateD and Sun Cluster) attempts
5639 5640 * to create (what amount to) IRE_PREFIX routes with the
5640 5641 * loopback address as the gateway. This is primarily done to
5641 5642 * set up prefixes with the RTF_REJECT flag set (for example,
5642 5643 * when generating aggregate routes.)
5643 5644 *
5644 5645 * If the IRE type (as defined by ill->ill_net_type) would be
5645 5646 * IRE_LOOPBACK, then we map the request into a
5646 5647 * IRE_IF_NORESOLVER. We also OR in the RTF_BLACKHOLE flag as
5647 5648 * these interface routes, by definition, can only be that.
5648 5649 *
5649 5650 * Needless to say, the real IRE_LOOPBACK is NOT created by this
5650 5651 * routine, but rather using ire_create() directly.
5651 5652 *
5652 5653 */
5653 5654 type = ill->ill_net_type;
5654 5655 if (type == IRE_LOOPBACK) {
5655 5656 type = IRE_IF_NORESOLVER;
5656 5657 flags |= RTF_BLACKHOLE;
5657 5658 }
5658 5659
5659 5660 /*
5660 5661 * Create a copy of the IRE_IF_NORESOLVER or
5661 5662 * IRE_IF_RESOLVER with the modified address, netmask, and
5662 5663 * gateway.
5663 5664 */
5664 5665 ire = ire_create(
5665 5666 (uchar_t *)&dst_addr,
5666 5667 (uint8_t *)&mask,
5667 5668 (uint8_t *)&gw_addr,
5668 5669 type,
5669 5670 ill,
5670 5671 zoneid,
5671 5672 flags,
5672 5673 NULL,
5673 5674 ipst);
5674 5675 if (ire == NULL) {
5675 5676 ipif_refrele(ipif);
5676 5677 return (ENOMEM);
5677 5678 }
5678 5679
5679 5680 /* src address assigned by the caller? */
5680 5681 if ((src_addr != INADDR_ANY) && (flags & RTF_SETSRC))
5681 5682 ire->ire_setsrc_addr = src_addr;
5682 5683
5683 5684 nire = ire_add(ire);
5684 5685 if (nire == NULL) {
5685 5686 /*
5686 5687 * In the result of failure, ire_add() will have
5687 5688 * already deleted the ire in question, so there
5688 5689 * is no need to do that here.
5689 5690 */
5690 5691 ipif_refrele(ipif);
5691 5692 return (ENOMEM);
5692 5693 }
5693 5694 /*
5694 5695 * Check if it was a duplicate entry. This handles
5695 5696 * the case of two racing route adds for the same route
5696 5697 */
5697 5698 if (nire != ire) {
5698 5699 ire_delete(nire);
5699 5700 ire_refrele(nire);
5700 5701 ipif_refrele(ipif);
5701 5702 return (EEXIST);
5702 5703 }
5703 5704 ire = nire;
5704 5705 goto save_ire;
5705 5706 }
5706 5707
5707 5708 /*
5708 5709 * Get an interface IRE for the specified gateway.
5709 5710 * If we don't have an IRE_IF_NORESOLVER or IRE_IF_RESOLVER for the
5710 5711 * gateway, it is currently unreachable and we fail the request
5711 5712 * accordingly. We reject any RTF_GATEWAY routes where the gateway
5712 5713 * is an IRE_LOCAL or IRE_LOOPBACK.
5713 5714 * If RTA_IFP was specified we look on that particular ill.
5714 5715 */
5715 5716 if (ill != NULL)
5716 5717 match_flags |= MATCH_IRE_ILL;
5717 5718
5718 5719 /* Check whether the gateway is reachable. */
5719 5720 again:
5720 5721 type = IRE_INTERFACE | IRE_LOCAL | IRE_LOOPBACK;
5721 5722 if (flags & RTF_INDIRECT)
5722 5723 type |= IRE_OFFLINK;
5723 5724
5724 5725 gw_ire = ire_ftable_lookup_v4(gw_addr, 0, 0, type, ill,
5725 5726 ALL_ZONES, NULL, match_flags, 0, ipst, NULL);
5726 5727 if (gw_ire == NULL) {
5727 5728 /*
5728 5729 * With IPMP, we allow host routes to influence in.mpathd's
5729 5730 * target selection. However, if the test addresses are on
5730 5731 * their own network, the above lookup will fail since the
5731 5732 * underlying IRE_INTERFACEs are marked hidden. So allow
5732 5733 * hidden test IREs to be found and try again.
5733 5734 */
5734 5735 if (!(match_flags & MATCH_IRE_TESTHIDDEN)) {
5735 5736 match_flags |= MATCH_IRE_TESTHIDDEN;
5736 5737 goto again;
5737 5738 }
5738 5739 if (ipif != NULL)
5739 5740 ipif_refrele(ipif);
5740 5741 return (ENETUNREACH);
5741 5742 }
5742 5743 if (gw_ire->ire_type & (IRE_LOCAL|IRE_LOOPBACK)) {
5743 5744 ire_refrele(gw_ire);
5744 5745 if (ipif != NULL)
5745 5746 ipif_refrele(ipif);
5746 5747 return (ENETUNREACH);
5747 5748 }
5748 5749
5749 5750 if (ill == NULL && !(flags & RTF_INDIRECT)) {
5750 5751 unbound = B_TRUE;
5751 5752 if (ipst->ips_ip_strict_src_multihoming > 0)
5752 5753 ill = gw_ire->ire_ill;
5753 5754 }
5754 5755
5755 5756 /*
5756 5757 * We create one of three types of IREs as a result of this request
5757 5758 * based on the netmask. A netmask of all ones (which is automatically
5758 5759 * assumed when RTF_HOST is set) results in an IRE_HOST being created.
5759 5760 * An all zeroes netmask implies a default route so an IRE_DEFAULT is
5760 5761 * created. Otherwise, an IRE_PREFIX route is created for the
5761 5762 * destination prefix.
5762 5763 */
5763 5764 if (mask == IP_HOST_MASK)
5764 5765 type = IRE_HOST;
5765 5766 else if (mask == 0)
5766 5767 type = IRE_DEFAULT;
5767 5768 else
5768 5769 type = IRE_PREFIX;
5769 5770
5770 5771 /* check for a duplicate entry */
5771 5772 ire = ire_ftable_lookup_v4(dst_addr, mask, gw_addr, type, ill,
5772 5773 ALL_ZONES, NULL, match_flags | MATCH_IRE_MASK | MATCH_IRE_GW,
5773 5774 0, ipst, NULL);
5774 5775 if (ire != NULL) {
5775 5776 if (ipif != NULL)
5776 5777 ipif_refrele(ipif);
5777 5778 ire_refrele(gw_ire);
5778 5779 ire_refrele(ire);
5779 5780 return (EEXIST);
5780 5781 }
5781 5782
5782 5783 /* Security attribute exists */
5783 5784 if (sp != NULL) {
5784 5785 tsol_gcgrp_addr_t ga;
5785 5786
5786 5787 /* find or create the gateway credentials group */
5787 5788 ga.ga_af = AF_INET;
5788 5789 IN6_IPADDR_TO_V4MAPPED(gw_addr, &ga.ga_addr);
5789 5790
5790 5791 /* we hold reference to it upon success */
5791 5792 gcgrp = gcgrp_lookup(&ga, B_TRUE);
5792 5793 if (gcgrp == NULL) {
5793 5794 if (ipif != NULL)
5794 5795 ipif_refrele(ipif);
5795 5796 ire_refrele(gw_ire);
5796 5797 return (ENOMEM);
5797 5798 }
5798 5799
5799 5800 /*
5800 5801 * Create and add the security attribute to the group; a
5801 5802 * reference to the group is made upon allocating a new
5802 5803 * entry successfully. If it finds an already-existing
5803 5804 * entry for the security attribute in the group, it simply
5804 5805 * returns it and no new reference is made to the group.
5805 5806 */
5806 5807 gc = gc_create(sp, gcgrp, &gcgrp_xtraref);
5807 5808 if (gc == NULL) {
5808 5809 if (ipif != NULL)
5809 5810 ipif_refrele(ipif);
5810 5811 /* release reference held by gcgrp_lookup */
5811 5812 GCGRP_REFRELE(gcgrp);
5812 5813 ire_refrele(gw_ire);
5813 5814 return (ENOMEM);
5814 5815 }
5815 5816 }
5816 5817
5817 5818 /* Create the IRE. */
5818 5819 ire = ire_create(
5819 5820 (uchar_t *)&dst_addr, /* dest address */
5820 5821 (uchar_t *)&mask, /* mask */
5821 5822 (uchar_t *)&gw_addr, /* gateway address */
5822 5823 (ushort_t)type, /* IRE type */
5823 5824 ill,
5824 5825 zoneid,
5825 5826 flags,
5826 5827 gc, /* security attribute */
5827 5828 ipst);
5828 5829
5829 5830 /*
5830 5831 * The ire holds a reference to the 'gc' and the 'gc' holds a
5831 5832 * reference to the 'gcgrp'. We can now release the extra reference
5832 5833 * the 'gcgrp' acquired in the gcgrp_lookup, if it was not used.
5833 5834 */
5834 5835 if (gcgrp_xtraref)
5835 5836 GCGRP_REFRELE(gcgrp);
5836 5837 if (ire == NULL) {
5837 5838 if (gc != NULL)
5838 5839 GC_REFRELE(gc);
5839 5840 if (ipif != NULL)
5840 5841 ipif_refrele(ipif);
5841 5842 ire_refrele(gw_ire);
5842 5843 return (ENOMEM);
5843 5844 }
5844 5845
5845 5846 /* Before we add, check if an extra CGTP broadcast is needed */
5846 5847 cgtp_broadcast = ((flags & RTF_MULTIRT) &&
5847 5848 ip_type_v4(ire->ire_addr, ipst) == IRE_BROADCAST);
5848 5849
5849 5850 /* src address assigned by the caller? */
5850 5851 if ((src_addr != INADDR_ANY) && (flags & RTF_SETSRC))
5851 5852 ire->ire_setsrc_addr = src_addr;
5852 5853
5853 5854 ire->ire_unbound = unbound;
5854 5855
5855 5856 /*
5856 5857 * POLICY: should we allow an RTF_HOST with address INADDR_ANY?
5857 5858 * SUN/OS socket stuff does but do we really want to allow 0.0.0.0?
5858 5859 */
5859 5860
5860 5861 /* Add the new IRE. */
5861 5862 nire = ire_add(ire);
5862 5863 if (nire == NULL) {
5863 5864 /*
5864 5865 * In the result of failure, ire_add() will have
5865 5866 * already deleted the ire in question, so there
5866 5867 * is no need to do that here.
5867 5868 */
5868 5869 if (ipif != NULL)
5869 5870 ipif_refrele(ipif);
5870 5871 ire_refrele(gw_ire);
5871 5872 return (ENOMEM);
5872 5873 }
5873 5874 /*
5874 5875 * Check if it was a duplicate entry. This handles
5875 5876 * the case of two racing route adds for the same route
5876 5877 */
5877 5878 if (nire != ire) {
5878 5879 ire_delete(nire);
5879 5880 ire_refrele(nire);
5880 5881 if (ipif != NULL)
5881 5882 ipif_refrele(ipif);
5882 5883 ire_refrele(gw_ire);
5883 5884 return (EEXIST);
5884 5885 }
5885 5886 ire = nire;
5886 5887
5887 5888 if (flags & RTF_MULTIRT) {
5888 5889 /*
5889 5890 * Invoke the CGTP (multirouting) filtering module
5890 5891 * to add the dst address in the filtering database.
5891 5892 * Replicated inbound packets coming from that address
5892 5893 * will be filtered to discard the duplicates.
5893 5894 * It is not necessary to call the CGTP filter hook
5894 5895 * when the dst address is a broadcast or multicast,
5895 5896 * because an IP source address cannot be a broadcast
5896 5897 * or a multicast.
5897 5898 */
5898 5899 if (cgtp_broadcast) {
5899 5900 ip_cgtp_bcast_add(ire, ipst);
5900 5901 goto save_ire;
5901 5902 }
5902 5903 if (ipst->ips_ip_cgtp_filter_ops != NULL &&
5903 5904 !CLASSD(ire->ire_addr)) {
5904 5905 int res;
5905 5906 ipif_t *src_ipif;
5906 5907
5907 5908 /* Find the source address corresponding to gw_ire */
5908 5909 src_ipif = ipif_lookup_addr(gw_ire->ire_gateway_addr,
5909 5910 NULL, zoneid, ipst);
5910 5911 if (src_ipif != NULL) {
5911 5912 res = ipst->ips_ip_cgtp_filter_ops->
5912 5913 cfo_add_dest_v4(
5913 5914 ipst->ips_netstack->netstack_stackid,
5914 5915 ire->ire_addr,
5915 5916 ire->ire_gateway_addr,
5916 5917 ire->ire_setsrc_addr,
5917 5918 src_ipif->ipif_lcl_addr);
5918 5919 ipif_refrele(src_ipif);
5919 5920 } else {
5920 5921 res = EADDRNOTAVAIL;
5921 5922 }
5922 5923 if (res != 0) {
5923 5924 if (ipif != NULL)
5924 5925 ipif_refrele(ipif);
5925 5926 ire_refrele(gw_ire);
5926 5927 ire_delete(ire);
5927 5928 ire_refrele(ire); /* Held in ire_add */
5928 5929 return (res);
5929 5930 }
5930 5931 }
5931 5932 }
5932 5933
5933 5934 save_ire:
5934 5935 if (gw_ire != NULL) {
5935 5936 ire_refrele(gw_ire);
5936 5937 gw_ire = NULL;
5937 5938 }
5938 5939 if (ill != NULL) {
5939 5940 /*
5940 5941 * Save enough information so that we can recreate the IRE if
5941 5942 * the interface goes down and then up. The metrics associated
5942 5943 * with the route will be saved as well when rts_setmetrics() is
5943 5944 * called after the IRE has been created. In the case where
5944 5945 * memory cannot be allocated, none of this information will be
5945 5946 * saved.
5946 5947 */
5947 5948 ill_save_ire(ill, ire);
5948 5949 }
5949 5950 if (ioctl_msg)
5950 5951 ip_rts_rtmsg(RTM_OLDADD, ire, 0, ipst);
5951 5952 if (ire_arg != NULL) {
5952 5953 /*
5953 5954 * Store the ire that was successfully added into where ire_arg
5954 5955 * points to so that callers don't have to look it up
5955 5956 * themselves (but they are responsible for ire_refrele()ing
5956 5957 * the ire when they are finished with it).
5957 5958 */
5958 5959 *ire_arg = ire;
5959 5960 } else {
5960 5961 ire_refrele(ire); /* Held in ire_add */
5961 5962 }
5962 5963 if (ipif != NULL)
5963 5964 ipif_refrele(ipif);
5964 5965 return (0);
5965 5966 }
5966 5967
5967 5968 /*
5968 5969 * ip_rt_delete is called to delete an IPv4 route.
5969 5970 * ill is passed in to associate it with the correct interface.
5970 5971 */
5971 5972 /* ARGSUSED4 */
5972 5973 int
5973 5974 ip_rt_delete(ipaddr_t dst_addr, ipaddr_t mask, ipaddr_t gw_addr,
5974 5975 uint_t rtm_addrs, int flags, ill_t *ill, boolean_t ioctl_msg,
5975 5976 ip_stack_t *ipst, zoneid_t zoneid)
5976 5977 {
5977 5978 ire_t *ire = NULL;
5978 5979 ipif_t *ipif;
5979 5980 uint_t type;
5980 5981 uint_t match_flags = MATCH_IRE_TYPE;
5981 5982 int err = 0;
5982 5983
5983 5984 ip1dbg(("ip_rt_delete:"));
5984 5985 /*
5985 5986 * If this is the case of RTF_HOST being set, then we set the netmask
5986 5987 * to all ones. Otherwise, we use the netmask if one was supplied.
5987 5988 */
5988 5989 if (flags & RTF_HOST) {
5989 5990 mask = IP_HOST_MASK;
5990 5991 match_flags |= MATCH_IRE_MASK;
5991 5992 } else if (rtm_addrs & RTA_NETMASK) {
5992 5993 match_flags |= MATCH_IRE_MASK;
5993 5994 }
5994 5995
5995 5996 /*
5996 5997 * Note that RTF_GATEWAY is never set on a delete, therefore
5997 5998 * we check if the gateway address is one of our interfaces first,
5998 5999 * and fall back on RTF_GATEWAY routes.
5999 6000 *
6000 6001 * This makes it possible to delete an original
6001 6002 * IRE_IF_NORESOLVER/IRE_IF_RESOLVER - consistent with SunOS 4.1.
6002 6003 * However, we have RTF_KERNEL set on the ones created by ipif_up
6003 6004 * and those can not be deleted here.
6004 6005 *
6005 6006 * We use MATCH_IRE_ILL if we know the interface. If the caller
6006 6007 * specified an interface (from the RTA_IFP sockaddr) we use it,
6007 6008 * otherwise we use the ill derived from the gateway address.
6008 6009 * We can always match the gateway address since we record it
6009 6010 * in ire_gateway_addr.
6010 6011 *
6011 6012 * For more detail on specifying routes by gateway address and by
6012 6013 * interface index, see the comments in ip_rt_add().
6013 6014 */
6014 6015 ipif = ipif_lookup_interface(gw_addr, dst_addr, ipst);
6015 6016 if (ipif != NULL) {
6016 6017 ill_t *ill_match;
6017 6018
6018 6019 if (ill != NULL)
6019 6020 ill_match = ill;
6020 6021 else
6021 6022 ill_match = ipif->ipif_ill;
6022 6023
6023 6024 match_flags |= MATCH_IRE_ILL;
6024 6025 if (ipif->ipif_ire_type == IRE_LOOPBACK) {
6025 6026 ire = ire_ftable_lookup_v4(dst_addr, mask, 0,
6026 6027 IRE_LOOPBACK, ill_match, ALL_ZONES, NULL,
6027 6028 match_flags, 0, ipst, NULL);
6028 6029 }
6029 6030 if (ire == NULL) {
6030 6031 match_flags |= MATCH_IRE_GW;
6031 6032 ire = ire_ftable_lookup_v4(dst_addr, mask, gw_addr,
6032 6033 IRE_INTERFACE, ill_match, ALL_ZONES, NULL,
6033 6034 match_flags, 0, ipst, NULL);
6034 6035 }
6035 6036 /* Avoid deleting routes created by kernel from an ipif */
6036 6037 if (ire != NULL && (ire->ire_flags & RTF_KERNEL)) {
6037 6038 ire_refrele(ire);
6038 6039 ire = NULL;
6039 6040 }
6040 6041
6041 6042 /* Restore in case we didn't find a match */
6042 6043 match_flags &= ~(MATCH_IRE_GW|MATCH_IRE_ILL);
6043 6044 }
6044 6045
6045 6046 if (ire == NULL) {
6046 6047 /*
6047 6048 * At this point, the gateway address is not one of our own
6048 6049 * addresses or a matching interface route was not found. We
6049 6050 * set the IRE type to lookup based on whether
6050 6051 * this is a host route, a default route or just a prefix.
6051 6052 *
6052 6053 * If an ill was passed in, then the lookup is based on an
6053 6054 * interface index so MATCH_IRE_ILL is added to match_flags.
6054 6055 */
6055 6056 match_flags |= MATCH_IRE_GW;
6056 6057 if (ill != NULL)
6057 6058 match_flags |= MATCH_IRE_ILL;
6058 6059 if (mask == IP_HOST_MASK)
6059 6060 type = IRE_HOST;
6060 6061 else if (mask == 0)
6061 6062 type = IRE_DEFAULT;
6062 6063 else
6063 6064 type = IRE_PREFIX;
6064 6065 ire = ire_ftable_lookup_v4(dst_addr, mask, gw_addr, type, ill,
6065 6066 ALL_ZONES, NULL, match_flags, 0, ipst, NULL);
6066 6067 }
6067 6068
6068 6069 if (ipif != NULL) {
6069 6070 ipif_refrele(ipif);
6070 6071 ipif = NULL;
6071 6072 }
6072 6073
6073 6074 if (ire == NULL)
6074 6075 return (ESRCH);
6075 6076
6076 6077 if (ire->ire_flags & RTF_MULTIRT) {
6077 6078 /*
6078 6079 * Invoke the CGTP (multirouting) filtering module
6079 6080 * to remove the dst address from the filtering database.
6080 6081 * Packets coming from that address will no longer be
6081 6082 * filtered to remove duplicates.
6082 6083 */
6083 6084 if (ipst->ips_ip_cgtp_filter_ops != NULL) {
6084 6085 err = ipst->ips_ip_cgtp_filter_ops->cfo_del_dest_v4(
6085 6086 ipst->ips_netstack->netstack_stackid,
6086 6087 ire->ire_addr, ire->ire_gateway_addr);
6087 6088 }
6088 6089 ip_cgtp_bcast_delete(ire, ipst);
6089 6090 }
6090 6091
6091 6092 ill = ire->ire_ill;
6092 6093 if (ill != NULL)
6093 6094 ill_remove_saved_ire(ill, ire);
6094 6095 if (ioctl_msg)
6095 6096 ip_rts_rtmsg(RTM_OLDDEL, ire, 0, ipst);
6096 6097 ire_delete(ire);
6097 6098 ire_refrele(ire);
6098 6099 return (err);
6099 6100 }
6100 6101
6101 6102 /*
6102 6103 * ip_siocaddrt is called to complete processing of an SIOCADDRT IOCTL.
6103 6104 */
6104 6105 /* ARGSUSED */
6105 6106 int
6106 6107 ip_siocaddrt(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q, mblk_t *mp,
6107 6108 ip_ioctl_cmd_t *ipip, void *dummy_if_req)
6108 6109 {
6109 6110 ipaddr_t dst_addr;
6110 6111 ipaddr_t gw_addr;
6111 6112 ipaddr_t mask;
6112 6113 int error = 0;
6113 6114 mblk_t *mp1;
6114 6115 struct rtentry *rt;
6115 6116 ipif_t *ipif = NULL;
6116 6117 ip_stack_t *ipst;
6117 6118
6118 6119 ASSERT(q->q_next == NULL);
6119 6120 ipst = CONNQ_TO_IPST(q);
6120 6121
6121 6122 ip1dbg(("ip_siocaddrt:"));
6122 6123 /* Existence of mp1 verified in ip_wput_nondata */
6123 6124 mp1 = mp->b_cont->b_cont;
6124 6125 rt = (struct rtentry *)mp1->b_rptr;
6125 6126
6126 6127 dst_addr = ((sin_t *)&rt->rt_dst)->sin_addr.s_addr;
6127 6128 gw_addr = ((sin_t *)&rt->rt_gateway)->sin_addr.s_addr;
6128 6129
6129 6130 /*
6130 6131 * If the RTF_HOST flag is on, this is a request to assign a gateway
6131 6132 * to a particular host address. In this case, we set the netmask to
6132 6133 * all ones for the particular destination address. Otherwise,
6133 6134 * determine the netmask to be used based on dst_addr and the interfaces
6134 6135 * in use.
6135 6136 */
6136 6137 if (rt->rt_flags & RTF_HOST) {
6137 6138 mask = IP_HOST_MASK;
6138 6139 } else {
6139 6140 /*
6140 6141 * Note that ip_subnet_mask returns a zero mask in the case of
6141 6142 * default (an all-zeroes address).
6142 6143 */
6143 6144 mask = ip_subnet_mask(dst_addr, &ipif, ipst);
6144 6145 }
6145 6146
6146 6147 error = ip_rt_add(dst_addr, mask, gw_addr, 0, rt->rt_flags, NULL, NULL,
6147 6148 B_TRUE, NULL, ipst, ALL_ZONES);
6148 6149 if (ipif != NULL)
6149 6150 ipif_refrele(ipif);
6150 6151 return (error);
6151 6152 }
6152 6153
6153 6154 /*
6154 6155 * ip_siocdelrt is called to complete processing of an SIOCDELRT IOCTL.
6155 6156 */
6156 6157 /* ARGSUSED */
6157 6158 int
6158 6159 ip_siocdelrt(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q, mblk_t *mp,
6159 6160 ip_ioctl_cmd_t *ipip, void *dummy_if_req)
6160 6161 {
6161 6162 ipaddr_t dst_addr;
6162 6163 ipaddr_t gw_addr;
6163 6164 ipaddr_t mask;
6164 6165 int error;
6165 6166 mblk_t *mp1;
6166 6167 struct rtentry *rt;
6167 6168 ipif_t *ipif = NULL;
6168 6169 ip_stack_t *ipst;
6169 6170
6170 6171 ASSERT(q->q_next == NULL);
6171 6172 ipst = CONNQ_TO_IPST(q);
6172 6173
6173 6174 ip1dbg(("ip_siocdelrt:"));
6174 6175 /* Existence of mp1 verified in ip_wput_nondata */
6175 6176 mp1 = mp->b_cont->b_cont;
6176 6177 rt = (struct rtentry *)mp1->b_rptr;
6177 6178
6178 6179 dst_addr = ((sin_t *)&rt->rt_dst)->sin_addr.s_addr;
6179 6180 gw_addr = ((sin_t *)&rt->rt_gateway)->sin_addr.s_addr;
6180 6181
6181 6182 /*
6182 6183 * If the RTF_HOST flag is on, this is a request to delete a gateway
6183 6184 * to a particular host address. In this case, we set the netmask to
6184 6185 * all ones for the particular destination address. Otherwise,
6185 6186 * determine the netmask to be used based on dst_addr and the interfaces
6186 6187 * in use.
6187 6188 */
6188 6189 if (rt->rt_flags & RTF_HOST) {
6189 6190 mask = IP_HOST_MASK;
6190 6191 } else {
6191 6192 /*
6192 6193 * Note that ip_subnet_mask returns a zero mask in the case of
6193 6194 * default (an all-zeroes address).
6194 6195 */
6195 6196 mask = ip_subnet_mask(dst_addr, &ipif, ipst);
6196 6197 }
6197 6198
6198 6199 error = ip_rt_delete(dst_addr, mask, gw_addr,
6199 6200 RTA_DST | RTA_GATEWAY | RTA_NETMASK, rt->rt_flags, NULL, B_TRUE,
6200 6201 ipst, ALL_ZONES);
6201 6202 if (ipif != NULL)
6202 6203 ipif_refrele(ipif);
6203 6204 return (error);
6204 6205 }
6205 6206
6206 6207 /*
6207 6208 * Enqueue the mp onto the ipsq, chained by b_next.
6208 6209 * b_prev stores the function to be executed later, and b_queue the queue
6209 6210 * where this mp originated.
6210 6211 */
6211 6212 void
6212 6213 ipsq_enq(ipsq_t *ipsq, queue_t *q, mblk_t *mp, ipsq_func_t func, int type,
6213 6214 ill_t *pending_ill)
6214 6215 {
6215 6216 conn_t *connp;
6216 6217 ipxop_t *ipx = ipsq->ipsq_xop;
6217 6218
6218 6219 ASSERT(MUTEX_HELD(&ipsq->ipsq_lock));
6219 6220 ASSERT(MUTEX_HELD(&ipx->ipx_lock));
6220 6221 ASSERT(func != NULL);
6221 6222
6222 6223 mp->b_queue = q;
6223 6224 mp->b_prev = (void *)func;
6224 6225 mp->b_next = NULL;
6225 6226
6226 6227 switch (type) {
6227 6228 case CUR_OP:
6228 6229 if (ipx->ipx_mptail != NULL) {
6229 6230 ASSERT(ipx->ipx_mphead != NULL);
6230 6231 ipx->ipx_mptail->b_next = mp;
6231 6232 } else {
6232 6233 ASSERT(ipx->ipx_mphead == NULL);
6233 6234 ipx->ipx_mphead = mp;
6234 6235 }
6235 6236 ipx->ipx_mptail = mp;
6236 6237 break;
6237 6238
6238 6239 case NEW_OP:
6239 6240 if (ipsq->ipsq_xopq_mptail != NULL) {
6240 6241 ASSERT(ipsq->ipsq_xopq_mphead != NULL);
6241 6242 ipsq->ipsq_xopq_mptail->b_next = mp;
6242 6243 } else {
6243 6244 ASSERT(ipsq->ipsq_xopq_mphead == NULL);
6244 6245 ipsq->ipsq_xopq_mphead = mp;
6245 6246 }
6246 6247 ipsq->ipsq_xopq_mptail = mp;
6247 6248 ipx->ipx_ipsq_queued = B_TRUE;
6248 6249 break;
6249 6250
6250 6251 case SWITCH_OP:
6251 6252 ASSERT(ipsq->ipsq_swxop != NULL);
6252 6253 /* only one switch operation is currently allowed */
6253 6254 ASSERT(ipsq->ipsq_switch_mp == NULL);
6254 6255 ipsq->ipsq_switch_mp = mp;
6255 6256 ipx->ipx_ipsq_queued = B_TRUE;
6256 6257 break;
6257 6258 default:
6258 6259 cmn_err(CE_PANIC, "ipsq_enq %d type \n", type);
6259 6260 }
6260 6261
6261 6262 if (CONN_Q(q) && pending_ill != NULL) {
6262 6263 connp = Q_TO_CONN(q);
6263 6264 ASSERT(MUTEX_HELD(&connp->conn_lock));
6264 6265 connp->conn_oper_pending_ill = pending_ill;
6265 6266 }
6266 6267 }
6267 6268
6268 6269 /*
6269 6270 * Dequeue the next message that requested exclusive access to this IPSQ's
6270 6271 * xop. Specifically:
6271 6272 *
6272 6273 * 1. If we're still processing the current operation on `ipsq', then
6273 6274 * dequeue the next message for the operation (from ipx_mphead), or
6274 6275 * return NULL if there are no queued messages for the operation.
6275 6276 * These messages are queued via CUR_OP to qwriter_ip() and friends.
6276 6277 *
6277 6278 * 2. If the current operation on `ipsq' has completed (ipx_current_ipif is
6278 6279 * not set) see if the ipsq has requested an xop switch. If so, switch
6279 6280 * `ipsq' to a different xop. Xop switches only happen when joining or
6280 6281 * leaving IPMP groups and require a careful dance -- see the comments
6281 6282 * in-line below for details. If we're leaving a group xop or if we're
6282 6283 * joining a group xop and become writer on it, then we proceed to (3).
6283 6284 * Otherwise, we return NULL and exit the xop.
6284 6285 *
6285 6286 * 3. For each IPSQ in the xop, return any switch operation stored on
6286 6287 * ipsq_switch_mp (set via SWITCH_OP); these must be processed before
6287 6288 * any other messages queued on the IPSQ. Otherwise, dequeue the next
6288 6289 * exclusive operation (queued via NEW_OP) stored on ipsq_xopq_mphead.
6289 6290 * Note that if the phyint tied to `ipsq' is not using IPMP there will
6290 6291 * only be one IPSQ in the xop. Otherwise, there will be one IPSQ for
6291 6292 * each phyint in the group, including the IPMP meta-interface phyint.
6292 6293 */
6293 6294 static mblk_t *
6294 6295 ipsq_dq(ipsq_t *ipsq)
6295 6296 {
6296 6297 ill_t *illv4, *illv6;
6297 6298 mblk_t *mp;
6298 6299 ipsq_t *xopipsq;
6299 6300 ipsq_t *leftipsq = NULL;
6300 6301 ipxop_t *ipx;
6301 6302 phyint_t *phyi = ipsq->ipsq_phyint;
6302 6303 ip_stack_t *ipst = ipsq->ipsq_ipst;
6303 6304 boolean_t emptied = B_FALSE;
6304 6305
6305 6306 /*
6306 6307 * Grab all the locks we need in the defined order (ill_g_lock ->
6307 6308 * ipsq_lock -> ipx_lock); ill_g_lock is needed to use ipsq_next.
6308 6309 */
6309 6310 rw_enter(&ipst->ips_ill_g_lock,
6310 6311 ipsq->ipsq_swxop != NULL ? RW_WRITER : RW_READER);
6311 6312 mutex_enter(&ipsq->ipsq_lock);
6312 6313 ipx = ipsq->ipsq_xop;
6313 6314 mutex_enter(&ipx->ipx_lock);
6314 6315
6315 6316 /*
6316 6317 * Dequeue the next message associated with the current exclusive
6317 6318 * operation, if any.
6318 6319 */
6319 6320 if ((mp = ipx->ipx_mphead) != NULL) {
6320 6321 ipx->ipx_mphead = mp->b_next;
6321 6322 if (ipx->ipx_mphead == NULL)
6322 6323 ipx->ipx_mptail = NULL;
6323 6324 mp->b_next = (void *)ipsq;
6324 6325 goto out;
6325 6326 }
6326 6327
6327 6328 if (ipx->ipx_current_ipif != NULL)
6328 6329 goto empty;
6329 6330
6330 6331 if (ipsq->ipsq_swxop != NULL) {
6331 6332 /*
6332 6333 * The exclusive operation that is now being completed has
6333 6334 * requested a switch to a different xop. This happens
6334 6335 * when an interface joins or leaves an IPMP group. Joins
6335 6336 * happen through SIOCSLIFGROUPNAME (ip_sioctl_groupname()).
6336 6337 * Leaves happen via SIOCSLIFGROUPNAME, interface unplumb
6337 6338 * (phyint_free()), or interface plumb for an ill type
6338 6339 * not in the IPMP group (ip_rput_dlpi_writer()).
6339 6340 *
6340 6341 * Xop switches are not allowed on the IPMP meta-interface.
6341 6342 */
6342 6343 ASSERT(phyi == NULL || !(phyi->phyint_flags & PHYI_IPMP));
6343 6344 ASSERT(RW_WRITE_HELD(&ipst->ips_ill_g_lock));
6344 6345 DTRACE_PROBE1(ipsq__switch, (ipsq_t *), ipsq);
6345 6346
6346 6347 if (ipsq->ipsq_swxop == &ipsq->ipsq_ownxop) {
6347 6348 /*
6348 6349 * We're switching back to our own xop, so we have two
6349 6350 * xop's to drain/exit: our own, and the group xop
6350 6351 * that we are leaving.
6351 6352 *
6352 6353 * First, pull ourselves out of the group ipsq list.
6353 6354 * This is safe since we're writer on ill_g_lock.
6354 6355 */
6355 6356 ASSERT(ipsq->ipsq_xop != &ipsq->ipsq_ownxop);
6356 6357
6357 6358 xopipsq = ipx->ipx_ipsq;
6358 6359 while (xopipsq->ipsq_next != ipsq)
6359 6360 xopipsq = xopipsq->ipsq_next;
6360 6361
6361 6362 xopipsq->ipsq_next = ipsq->ipsq_next;
6362 6363 ipsq->ipsq_next = ipsq;
6363 6364 ipsq->ipsq_xop = ipsq->ipsq_swxop;
6364 6365 ipsq->ipsq_swxop = NULL;
6365 6366
6366 6367 /*
6367 6368 * Second, prepare to exit the group xop. The actual
6368 6369 * ipsq_exit() is done at the end of this function
6369 6370 * since we cannot hold any locks across ipsq_exit().
6370 6371 * Note that although we drop the group's ipx_lock, no
6371 6372 * threads can proceed since we're still ipx_writer.
6372 6373 */
6373 6374 leftipsq = xopipsq;
6374 6375 mutex_exit(&ipx->ipx_lock);
6375 6376
6376 6377 /*
6377 6378 * Third, set ipx to point to our own xop (which was
6378 6379 * inactive and therefore can be entered).
6379 6380 */
6380 6381 ipx = ipsq->ipsq_xop;
6381 6382 mutex_enter(&ipx->ipx_lock);
6382 6383 ASSERT(ipx->ipx_writer == NULL);
6383 6384 ASSERT(ipx->ipx_current_ipif == NULL);
6384 6385 } else {
6385 6386 /*
6386 6387 * We're switching from our own xop to a group xop.
6387 6388 * The requestor of the switch must ensure that the
6388 6389 * group xop cannot go away (e.g. by ensuring the
6389 6390 * phyint associated with the xop cannot go away).
6390 6391 *
6391 6392 * If we can become writer on our new xop, then we'll
6392 6393 * do the drain. Otherwise, the current writer of our
6393 6394 * new xop will do the drain when it exits.
6394 6395 *
6395 6396 * First, splice ourselves into the group IPSQ list.
6396 6397 * This is safe since we're writer on ill_g_lock.
6397 6398 */
6398 6399 ASSERT(ipsq->ipsq_xop == &ipsq->ipsq_ownxop);
6399 6400
6400 6401 xopipsq = ipsq->ipsq_swxop->ipx_ipsq;
6401 6402 while (xopipsq->ipsq_next != ipsq->ipsq_swxop->ipx_ipsq)
6402 6403 xopipsq = xopipsq->ipsq_next;
6403 6404
6404 6405 xopipsq->ipsq_next = ipsq;
6405 6406 ipsq->ipsq_next = ipsq->ipsq_swxop->ipx_ipsq;
6406 6407 ipsq->ipsq_xop = ipsq->ipsq_swxop;
6407 6408 ipsq->ipsq_swxop = NULL;
6408 6409
6409 6410 /*
6410 6411 * Second, exit our own xop, since it's now unused.
6411 6412 * This is safe since we've got the only reference.
6412 6413 */
6413 6414 ASSERT(ipx->ipx_writer == curthread);
6414 6415 ipx->ipx_writer = NULL;
6415 6416 VERIFY(--ipx->ipx_reentry_cnt == 0);
6416 6417 ipx->ipx_ipsq_queued = B_FALSE;
6417 6418 mutex_exit(&ipx->ipx_lock);
6418 6419
6419 6420 /*
6420 6421 * Third, set ipx to point to our new xop, and check
6421 6422 * if we can become writer on it. If we cannot, then
6422 6423 * the current writer will drain the IPSQ group when
6423 6424 * it exits. Our ipsq_xop is guaranteed to be stable
6424 6425 * because we're still holding ipsq_lock.
6425 6426 */
6426 6427 ipx = ipsq->ipsq_xop;
6427 6428 mutex_enter(&ipx->ipx_lock);
6428 6429 if (ipx->ipx_writer != NULL ||
6429 6430 ipx->ipx_current_ipif != NULL) {
6430 6431 goto out;
6431 6432 }
6432 6433 }
6433 6434
6434 6435 /*
6435 6436 * Fourth, become writer on our new ipx before we continue
6436 6437 * with the drain. Note that we never dropped ipsq_lock
6437 6438 * above, so no other thread could've raced with us to
6438 6439 * become writer first. Also, we're holding ipx_lock, so
6439 6440 * no other thread can examine the ipx right now.
6440 6441 */
6441 6442 ASSERT(ipx->ipx_current_ipif == NULL);
6442 6443 ASSERT(ipx->ipx_mphead == NULL && ipx->ipx_mptail == NULL);
6443 6444 VERIFY(ipx->ipx_reentry_cnt++ == 0);
6444 6445 ipx->ipx_writer = curthread;
6445 6446 ipx->ipx_forced = B_FALSE;
6446 6447 #ifdef DEBUG
6447 6448 ipx->ipx_depth = getpcstack(ipx->ipx_stack, IPX_STACK_DEPTH);
6448 6449 #endif
6449 6450 }
6450 6451
6451 6452 xopipsq = ipsq;
6452 6453 do {
6453 6454 /*
6454 6455 * So that other operations operate on a consistent and
6455 6456 * complete phyint, a switch message on an IPSQ must be
6456 6457 * handled prior to any other operations on that IPSQ.
6457 6458 */
6458 6459 if ((mp = xopipsq->ipsq_switch_mp) != NULL) {
6459 6460 xopipsq->ipsq_switch_mp = NULL;
6460 6461 ASSERT(mp->b_next == NULL);
6461 6462 mp->b_next = (void *)xopipsq;
6462 6463 goto out;
6463 6464 }
6464 6465
6465 6466 if ((mp = xopipsq->ipsq_xopq_mphead) != NULL) {
6466 6467 xopipsq->ipsq_xopq_mphead = mp->b_next;
6467 6468 if (xopipsq->ipsq_xopq_mphead == NULL)
6468 6469 xopipsq->ipsq_xopq_mptail = NULL;
6469 6470 mp->b_next = (void *)xopipsq;
6470 6471 goto out;
6471 6472 }
6472 6473 } while ((xopipsq = xopipsq->ipsq_next) != ipsq);
6473 6474 empty:
6474 6475 /*
6475 6476 * There are no messages. Further, we are holding ipx_lock, hence no
6476 6477 * new messages can end up on any IPSQ in the xop.
6477 6478 */
6478 6479 ipx->ipx_writer = NULL;
6479 6480 ipx->ipx_forced = B_FALSE;
6480 6481 VERIFY(--ipx->ipx_reentry_cnt == 0);
6481 6482 ipx->ipx_ipsq_queued = B_FALSE;
6482 6483 emptied = B_TRUE;
6483 6484 #ifdef DEBUG
6484 6485 ipx->ipx_depth = 0;
6485 6486 #endif
6486 6487 out:
6487 6488 mutex_exit(&ipx->ipx_lock);
6488 6489 mutex_exit(&ipsq->ipsq_lock);
6489 6490
6490 6491 /*
6491 6492 * If we completely emptied the xop, then wake up any threads waiting
6492 6493 * to enter any of the IPSQ's associated with it.
6493 6494 */
6494 6495 if (emptied) {
6495 6496 xopipsq = ipsq;
6496 6497 do {
6497 6498 if ((phyi = xopipsq->ipsq_phyint) == NULL)
6498 6499 continue;
6499 6500
6500 6501 illv4 = phyi->phyint_illv4;
6501 6502 illv6 = phyi->phyint_illv6;
6502 6503
6503 6504 GRAB_ILL_LOCKS(illv4, illv6);
6504 6505 if (illv4 != NULL)
6505 6506 cv_broadcast(&illv4->ill_cv);
6506 6507 if (illv6 != NULL)
6507 6508 cv_broadcast(&illv6->ill_cv);
6508 6509 RELEASE_ILL_LOCKS(illv4, illv6);
6509 6510 } while ((xopipsq = xopipsq->ipsq_next) != ipsq);
6510 6511 }
6511 6512 rw_exit(&ipst->ips_ill_g_lock);
6512 6513
6513 6514 /*
6514 6515 * Now that all locks are dropped, exit the IPSQ we left.
6515 6516 */
6516 6517 if (leftipsq != NULL)
6517 6518 ipsq_exit(leftipsq);
6518 6519
6519 6520 return (mp);
6520 6521 }
6521 6522
6522 6523 /*
6523 6524 * Return completion status of previously initiated DLPI operations on
6524 6525 * ills in the purview of an ipsq.
6525 6526 */
6526 6527 static boolean_t
6527 6528 ipsq_dlpi_done(ipsq_t *ipsq)
6528 6529 {
6529 6530 ipsq_t *ipsq_start;
6530 6531 phyint_t *phyi;
6531 6532 ill_t *ill;
6532 6533
6533 6534 ASSERT(RW_LOCK_HELD(&ipsq->ipsq_ipst->ips_ill_g_lock));
6534 6535 ipsq_start = ipsq;
6535 6536
6536 6537 do {
6537 6538 /*
6538 6539 * The only current users of this function are ipsq_try_enter
6539 6540 * and ipsq_enter which have made sure that ipsq_writer is
6540 6541 * NULL before we reach here. ill_dlpi_pending is modified
6541 6542 * only by an ipsq writer
6542 6543 */
6543 6544 ASSERT(ipsq->ipsq_xop->ipx_writer == NULL);
6544 6545 phyi = ipsq->ipsq_phyint;
6545 6546 /*
6546 6547 * phyi could be NULL if a phyint that is part of an
6547 6548 * IPMP group is being unplumbed. A more detailed
6548 6549 * comment is in ipmp_grp_update_kstats()
6549 6550 */
6550 6551 if (phyi != NULL) {
6551 6552 ill = phyi->phyint_illv4;
6552 6553 if (ill != NULL &&
6553 6554 (ill->ill_dlpi_pending != DL_PRIM_INVAL ||
6554 6555 ill->ill_arl_dlpi_pending))
6555 6556 return (B_FALSE);
6556 6557
6557 6558 ill = phyi->phyint_illv6;
6558 6559 if (ill != NULL &&
6559 6560 ill->ill_dlpi_pending != DL_PRIM_INVAL)
6560 6561 return (B_FALSE);
6561 6562 }
6562 6563
6563 6564 } while ((ipsq = ipsq->ipsq_next) != ipsq_start);
6564 6565
6565 6566 return (B_TRUE);
6566 6567 }
6567 6568
6568 6569 /*
6569 6570 * Enter the ipsq corresponding to ill, by waiting synchronously till
6570 6571 * we can enter the ipsq exclusively. Unless 'force' is used, the ipsq
6571 6572 * will have to drain completely before ipsq_enter returns success.
6572 6573 * ipx_current_ipif will be set if some exclusive op is in progress,
6573 6574 * and the ipsq_exit logic will start the next enqueued op after
6574 6575 * completion of the current op. If 'force' is used, we don't wait
6575 6576 * for the enqueued ops. This is needed when a conn_close wants to
6576 6577 * enter the ipsq and abort an ioctl that is somehow stuck. Unplumb
6577 6578 * of an ill can also use this option. But we dont' use it currently.
6578 6579 */
6579 6580 #define ENTER_SQ_WAIT_TICKS 100
6580 6581 boolean_t
6581 6582 ipsq_enter(ill_t *ill, boolean_t force, int type)
6582 6583 {
6583 6584 ipsq_t *ipsq;
6584 6585 ipxop_t *ipx;
6585 6586 boolean_t waited_enough = B_FALSE;
6586 6587 ip_stack_t *ipst = ill->ill_ipst;
6587 6588
6588 6589 /*
6589 6590 * Note that the relationship between ill and ipsq is fixed as long as
6590 6591 * the ill is not ILL_CONDEMNED. Holding ipsq_lock ensures the
6591 6592 * relationship between the IPSQ and xop cannot change. However,
6592 6593 * since we cannot hold ipsq_lock across the cv_wait(), it may change
6593 6594 * while we're waiting. We wait on ill_cv and rely on ipsq_exit()
6594 6595 * waking up all ills in the xop when it becomes available.
6595 6596 */
6596 6597 for (;;) {
6597 6598 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
6598 6599 mutex_enter(&ill->ill_lock);
6599 6600 if (ill->ill_state_flags & ILL_CONDEMNED) {
6600 6601 mutex_exit(&ill->ill_lock);
6601 6602 rw_exit(&ipst->ips_ill_g_lock);
6602 6603 return (B_FALSE);
6603 6604 }
6604 6605
6605 6606 ipsq = ill->ill_phyint->phyint_ipsq;
6606 6607 mutex_enter(&ipsq->ipsq_lock);
6607 6608 ipx = ipsq->ipsq_xop;
6608 6609 mutex_enter(&ipx->ipx_lock);
6609 6610
6610 6611 if (ipx->ipx_writer == NULL && (type == CUR_OP ||
6611 6612 (ipx->ipx_current_ipif == NULL && ipsq_dlpi_done(ipsq)) ||
6612 6613 waited_enough))
6613 6614 break;
6614 6615
6615 6616 rw_exit(&ipst->ips_ill_g_lock);
6616 6617
6617 6618 if (!force || ipx->ipx_writer != NULL) {
6618 6619 mutex_exit(&ipx->ipx_lock);
6619 6620 mutex_exit(&ipsq->ipsq_lock);
6620 6621 cv_wait(&ill->ill_cv, &ill->ill_lock);
6621 6622 } else {
6622 6623 mutex_exit(&ipx->ipx_lock);
6623 6624 mutex_exit(&ipsq->ipsq_lock);
6624 6625 (void) cv_reltimedwait(&ill->ill_cv,
6625 6626 &ill->ill_lock, ENTER_SQ_WAIT_TICKS, TR_CLOCK_TICK);
6626 6627 waited_enough = B_TRUE;
6627 6628 }
6628 6629 mutex_exit(&ill->ill_lock);
6629 6630 }
6630 6631
6631 6632 ASSERT(ipx->ipx_mphead == NULL && ipx->ipx_mptail == NULL);
6632 6633 ASSERT(ipx->ipx_reentry_cnt == 0);
6633 6634 ipx->ipx_writer = curthread;
6634 6635 ipx->ipx_forced = (ipx->ipx_current_ipif != NULL);
6635 6636 ipx->ipx_reentry_cnt++;
6636 6637 #ifdef DEBUG
6637 6638 ipx->ipx_depth = getpcstack(ipx->ipx_stack, IPX_STACK_DEPTH);
6638 6639 #endif
6639 6640 mutex_exit(&ipx->ipx_lock);
6640 6641 mutex_exit(&ipsq->ipsq_lock);
6641 6642 mutex_exit(&ill->ill_lock);
6642 6643 rw_exit(&ipst->ips_ill_g_lock);
6643 6644
6644 6645 return (B_TRUE);
6645 6646 }
6646 6647
6647 6648 /*
6648 6649 * ipif_set_values() has a constraint that it cannot drop the ips_ill_g_lock
6649 6650 * across the call to the core interface ipsq_try_enter() and hence calls this
6650 6651 * function directly. This is explained more fully in ipif_set_values().
6651 6652 * In order to support the above constraint, ipsq_try_enter is implemented as
6652 6653 * a wrapper that grabs the ips_ill_g_lock and calls this function subsequently
6653 6654 */
6654 6655 static ipsq_t *
6655 6656 ipsq_try_enter_internal(ill_t *ill, queue_t *q, mblk_t *mp, ipsq_func_t func,
6656 6657 int type, boolean_t reentry_ok)
6657 6658 {
6658 6659 ipsq_t *ipsq;
6659 6660 ipxop_t *ipx;
6660 6661 ip_stack_t *ipst = ill->ill_ipst;
6661 6662
6662 6663 /*
6663 6664 * lock ordering:
6664 6665 * ill_g_lock -> conn_lock -> ill_lock -> ipsq_lock -> ipx_lock.
6665 6666 *
6666 6667 * ipx of an ipsq can't change when ipsq_lock is held.
6667 6668 */
6668 6669 ASSERT(RW_LOCK_HELD(&ipst->ips_ill_g_lock));
6669 6670 GRAB_CONN_LOCK(q);
6670 6671 mutex_enter(&ill->ill_lock);
6671 6672 ipsq = ill->ill_phyint->phyint_ipsq;
6672 6673 mutex_enter(&ipsq->ipsq_lock);
6673 6674 ipx = ipsq->ipsq_xop;
6674 6675 mutex_enter(&ipx->ipx_lock);
6675 6676
6676 6677 /*
6677 6678 * 1. Enter the ipsq if we are already writer and reentry is ok.
6678 6679 * (Note: If the caller does not specify reentry_ok then neither
6679 6680 * 'func' nor any of its callees must ever attempt to enter the ipsq
6680 6681 * again. Otherwise it can lead to an infinite loop
6681 6682 * 2. Enter the ipsq if there is no current writer and this attempted
6682 6683 * entry is part of the current operation
6683 6684 * 3. Enter the ipsq if there is no current writer and this is a new
6684 6685 * operation and the operation queue is empty and there is no
6685 6686 * operation currently in progress and if all previously initiated
6686 6687 * DLPI operations have completed.
6687 6688 */
6688 6689 if ((ipx->ipx_writer == curthread && reentry_ok) ||
6689 6690 (ipx->ipx_writer == NULL && (type == CUR_OP || (type == NEW_OP &&
6690 6691 !ipx->ipx_ipsq_queued && ipx->ipx_current_ipif == NULL &&
6691 6692 ipsq_dlpi_done(ipsq))))) {
6692 6693 /* Success. */
6693 6694 ipx->ipx_reentry_cnt++;
6694 6695 ipx->ipx_writer = curthread;
6695 6696 ipx->ipx_forced = B_FALSE;
6696 6697 mutex_exit(&ipx->ipx_lock);
6697 6698 mutex_exit(&ipsq->ipsq_lock);
6698 6699 mutex_exit(&ill->ill_lock);
6699 6700 RELEASE_CONN_LOCK(q);
6700 6701 #ifdef DEBUG
6701 6702 ipx->ipx_depth = getpcstack(ipx->ipx_stack, IPX_STACK_DEPTH);
6702 6703 #endif
6703 6704 return (ipsq);
6704 6705 }
6705 6706
6706 6707 if (func != NULL)
6707 6708 ipsq_enq(ipsq, q, mp, func, type, ill);
6708 6709
6709 6710 mutex_exit(&ipx->ipx_lock);
6710 6711 mutex_exit(&ipsq->ipsq_lock);
6711 6712 mutex_exit(&ill->ill_lock);
6712 6713 RELEASE_CONN_LOCK(q);
6713 6714 return (NULL);
6714 6715 }
6715 6716
6716 6717 /*
6717 6718 * The ipsq_t (ipsq) is the synchronization data structure used to serialize
6718 6719 * certain critical operations like plumbing (i.e. most set ioctls), etc.
6719 6720 * There is one ipsq per phyint. The ipsq
6720 6721 * serializes exclusive ioctls issued by applications on a per ipsq basis in
6721 6722 * ipsq_xopq_mphead. It also protects against multiple threads executing in
6722 6723 * the ipsq. Responses from the driver pertain to the current ioctl (say a
6723 6724 * DL_BIND_ACK in response to a DL_BIND_REQ initiated as part of bringing
6724 6725 * up the interface) and are enqueued in ipx_mphead.
6725 6726 *
6726 6727 * If a thread does not want to reenter the ipsq when it is already writer,
6727 6728 * it must make sure that the specified reentry point to be called later
6728 6729 * when the ipsq is empty, nor any code path starting from the specified reentry
6729 6730 * point must never ever try to enter the ipsq again. Otherwise it can lead
6730 6731 * to an infinite loop. The reentry point ip_rput_dlpi_writer is an example.
6731 6732 * When the thread that is currently exclusive finishes, it (ipsq_exit)
6732 6733 * dequeues the requests waiting to become exclusive in ipx_mphead and calls
6733 6734 * the reentry point. When the list at ipx_mphead becomes empty ipsq_exit
6734 6735 * proceeds to dequeue the next ioctl in ipsq_xopq_mphead and start the next
6735 6736 * ioctl if the current ioctl has completed. If the current ioctl is still
6736 6737 * in progress it simply returns. The current ioctl could be waiting for
6737 6738 * a response from another module (the driver or could be waiting for
6738 6739 * the ipif/ill/ire refcnts to drop to zero. In such a case the ipx_pending_mp
6739 6740 * and ipx_pending_ipif are set. ipx_current_ipif is set throughout the
6740 6741 * execution of the ioctl and ipsq_exit does not start the next ioctl unless
6741 6742 * ipx_current_ipif is NULL which happens only once the ioctl is complete and
6742 6743 * all associated DLPI operations have completed.
6743 6744 */
6744 6745
6745 6746 /*
6746 6747 * Try to enter the IPSQ corresponding to `ipif' or `ill' exclusively (`ipif'
6747 6748 * and `ill' cannot both be specified). Returns a pointer to the entered IPSQ
6748 6749 * on success, or NULL on failure. The caller ensures ipif/ill is valid by
6749 6750 * refholding it as necessary. If the IPSQ cannot be entered and `func' is
6750 6751 * non-NULL, then `func' will be called back with `q' and `mp' once the IPSQ
6751 6752 * can be entered. If `func' is NULL, then `q' and `mp' are ignored.
6752 6753 */
6753 6754 ipsq_t *
6754 6755 ipsq_try_enter(ipif_t *ipif, ill_t *ill, queue_t *q, mblk_t *mp,
6755 6756 ipsq_func_t func, int type, boolean_t reentry_ok)
6756 6757 {
6757 6758 ip_stack_t *ipst;
6758 6759 ipsq_t *ipsq;
6759 6760
6760 6761 /* Only 1 of ipif or ill can be specified */
6761 6762 ASSERT((ipif != NULL) ^ (ill != NULL));
6762 6763
6763 6764 if (ipif != NULL)
6764 6765 ill = ipif->ipif_ill;
6765 6766 ipst = ill->ill_ipst;
6766 6767
6767 6768 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
6768 6769 ipsq = ipsq_try_enter_internal(ill, q, mp, func, type, reentry_ok);
6769 6770 rw_exit(&ipst->ips_ill_g_lock);
6770 6771
6771 6772 return (ipsq);
6772 6773 }
6773 6774
6774 6775 /*
6775 6776 * Try to enter the IPSQ corresponding to `ill' as writer. The caller ensures
6776 6777 * ill is valid by refholding it if necessary; we will refrele. If the IPSQ
6777 6778 * cannot be entered, the mp is queued for completion.
6778 6779 */
6779 6780 void
6780 6781 qwriter_ip(ill_t *ill, queue_t *q, mblk_t *mp, ipsq_func_t func, int type,
6781 6782 boolean_t reentry_ok)
6782 6783 {
6783 6784 ipsq_t *ipsq;
6784 6785
6785 6786 ipsq = ipsq_try_enter(NULL, ill, q, mp, func, type, reentry_ok);
6786 6787
6787 6788 /*
6788 6789 * Drop the caller's refhold on the ill. This is safe since we either
6789 6790 * entered the IPSQ (and thus are exclusive), or failed to enter the
6790 6791 * IPSQ, in which case we return without accessing ill anymore. This
6791 6792 * is needed because func needs to see the correct refcount.
6792 6793 * e.g. removeif can work only then.
6793 6794 */
6794 6795 ill_refrele(ill);
6795 6796 if (ipsq != NULL) {
6796 6797 (*func)(ipsq, q, mp, NULL);
6797 6798 ipsq_exit(ipsq);
6798 6799 }
6799 6800 }
6800 6801
6801 6802 /*
6802 6803 * Exit the specified IPSQ. If this is the final exit on it then drain it
6803 6804 * prior to exiting. Caller must be writer on the specified IPSQ.
6804 6805 */
6805 6806 void
6806 6807 ipsq_exit(ipsq_t *ipsq)
6807 6808 {
6808 6809 mblk_t *mp;
6809 6810 ipsq_t *mp_ipsq;
6810 6811 queue_t *q;
6811 6812 phyint_t *phyi;
6812 6813 ipsq_func_t func;
6813 6814
6814 6815 ASSERT(IAM_WRITER_IPSQ(ipsq));
6815 6816
6816 6817 ASSERT(ipsq->ipsq_xop->ipx_reentry_cnt >= 1);
6817 6818 if (ipsq->ipsq_xop->ipx_reentry_cnt != 1) {
6818 6819 ipsq->ipsq_xop->ipx_reentry_cnt--;
6819 6820 return;
6820 6821 }
6821 6822
6822 6823 for (;;) {
6823 6824 phyi = ipsq->ipsq_phyint;
6824 6825 mp = ipsq_dq(ipsq);
6825 6826 mp_ipsq = (mp == NULL) ? NULL : (ipsq_t *)mp->b_next;
6826 6827
6827 6828 /*
6828 6829 * If we've changed to a new IPSQ, and the phyint associated
6829 6830 * with the old one has gone away, free the old IPSQ. Note
6830 6831 * that this cannot happen while the IPSQ is in a group.
6831 6832 */
6832 6833 if (mp_ipsq != ipsq && phyi == NULL) {
6833 6834 ASSERT(ipsq->ipsq_next == ipsq);
6834 6835 ASSERT(ipsq->ipsq_xop == &ipsq->ipsq_ownxop);
6835 6836 ipsq_delete(ipsq);
6836 6837 }
6837 6838
6838 6839 if (mp == NULL)
6839 6840 break;
6840 6841
6841 6842 q = mp->b_queue;
6842 6843 func = (ipsq_func_t)mp->b_prev;
6843 6844 ipsq = mp_ipsq;
6844 6845 mp->b_next = mp->b_prev = NULL;
6845 6846 mp->b_queue = NULL;
6846 6847
6847 6848 /*
6848 6849 * If 'q' is an conn queue, it is valid, since we did a
6849 6850 * a refhold on the conn at the start of the ioctl.
6850 6851 * If 'q' is an ill queue, it is valid, since close of an
6851 6852 * ill will clean up its IPSQ.
6852 6853 */
6853 6854 (*func)(ipsq, q, mp, NULL);
6854 6855 }
6855 6856 }
6856 6857
6857 6858 /*
6858 6859 * Used to start any igmp or mld timers that could not be started
6859 6860 * while holding ill_mcast_lock. The timers can't be started while holding
6860 6861 * the lock, since mld/igmp_start_timers may need to call untimeout()
6861 6862 * which can't be done while holding the lock which the timeout handler
6862 6863 * acquires. Otherwise
6863 6864 * there could be a deadlock since the timeout handlers
6864 6865 * mld_timeout_handler_per_ill/igmp_timeout_handler_per_ill also acquire
6865 6866 * ill_mcast_lock.
6866 6867 */
6867 6868 void
6868 6869 ill_mcast_timer_start(ip_stack_t *ipst)
6869 6870 {
6870 6871 int next;
6871 6872
6872 6873 mutex_enter(&ipst->ips_igmp_timer_lock);
6873 6874 next = ipst->ips_igmp_deferred_next;
6874 6875 ipst->ips_igmp_deferred_next = INFINITY;
6875 6876 mutex_exit(&ipst->ips_igmp_timer_lock);
6876 6877
6877 6878 if (next != INFINITY)
6878 6879 igmp_start_timers(next, ipst);
6879 6880
6880 6881 mutex_enter(&ipst->ips_mld_timer_lock);
6881 6882 next = ipst->ips_mld_deferred_next;
6882 6883 ipst->ips_mld_deferred_next = INFINITY;
6883 6884 mutex_exit(&ipst->ips_mld_timer_lock);
6884 6885
6885 6886 if (next != INFINITY)
6886 6887 mld_start_timers(next, ipst);
6887 6888 }
6888 6889
6889 6890 /*
6890 6891 * Start the current exclusive operation on `ipsq'; associate it with `ipif'
6891 6892 * and `ioccmd'.
6892 6893 */
6893 6894 void
6894 6895 ipsq_current_start(ipsq_t *ipsq, ipif_t *ipif, int ioccmd)
6895 6896 {
6896 6897 ill_t *ill = ipif->ipif_ill;
6897 6898 ipxop_t *ipx = ipsq->ipsq_xop;
6898 6899
6899 6900 ASSERT(IAM_WRITER_IPSQ(ipsq));
6900 6901 ASSERT(ipx->ipx_current_ipif == NULL);
6901 6902 ASSERT(ipx->ipx_current_ioctl == 0);
6902 6903
6903 6904 ipx->ipx_current_done = B_FALSE;
6904 6905 ipx->ipx_current_ioctl = ioccmd;
6905 6906 mutex_enter(&ipx->ipx_lock);
6906 6907 ipx->ipx_current_ipif = ipif;
6907 6908 mutex_exit(&ipx->ipx_lock);
6908 6909
6909 6910 /*
6910 6911 * Set IPIF_CHANGING on one or more ipifs associated with the
6911 6912 * current exclusive operation. IPIF_CHANGING prevents any new
6912 6913 * references to the ipif (so that the references will eventually
6913 6914 * drop to zero) and also prevents any "get" operations (e.g.,
6914 6915 * SIOCGLIFFLAGS) from being able to access the ipif until the
6915 6916 * operation has completed and the ipif is again in a stable state.
6916 6917 *
6917 6918 * For ioctls, IPIF_CHANGING is set on the ipif associated with the
6918 6919 * ioctl. For internal operations (where ioccmd is zero), all ipifs
6919 6920 * on the ill are marked with IPIF_CHANGING since it's unclear which
6920 6921 * ipifs will be affected.
6921 6922 *
6922 6923 * Note that SIOCLIFREMOVEIF is a special case as it sets
6923 6924 * IPIF_CONDEMNED internally after identifying the right ipif to
6924 6925 * operate on.
6925 6926 */
6926 6927 switch (ioccmd) {
6927 6928 case SIOCLIFREMOVEIF:
6928 6929 break;
6929 6930 case 0:
6930 6931 mutex_enter(&ill->ill_lock);
6931 6932 ipif = ipif->ipif_ill->ill_ipif;
6932 6933 for (; ipif != NULL; ipif = ipif->ipif_next)
6933 6934 ipif->ipif_state_flags |= IPIF_CHANGING;
6934 6935 mutex_exit(&ill->ill_lock);
6935 6936 break;
6936 6937 default:
6937 6938 mutex_enter(&ill->ill_lock);
6938 6939 ipif->ipif_state_flags |= IPIF_CHANGING;
6939 6940 mutex_exit(&ill->ill_lock);
6940 6941 }
6941 6942 }
6942 6943
6943 6944 /*
6944 6945 * Finish the current exclusive operation on `ipsq'. Usually, this will allow
6945 6946 * the next exclusive operation to begin once we ipsq_exit(). However, if
6946 6947 * pending DLPI operations remain, then we will wait for the queue to drain
6947 6948 * before allowing the next exclusive operation to begin. This ensures that
6948 6949 * DLPI operations from one exclusive operation are never improperly processed
6949 6950 * as part of a subsequent exclusive operation.
6950 6951 */
6951 6952 void
6952 6953 ipsq_current_finish(ipsq_t *ipsq)
6953 6954 {
6954 6955 ipxop_t *ipx = ipsq->ipsq_xop;
6955 6956 t_uscalar_t dlpi_pending = DL_PRIM_INVAL;
6956 6957 ipif_t *ipif = ipx->ipx_current_ipif;
6957 6958
6958 6959 ASSERT(IAM_WRITER_IPSQ(ipsq));
6959 6960
6960 6961 /*
6961 6962 * For SIOCLIFREMOVEIF, the ipif has been already been blown away
6962 6963 * (but in that case, IPIF_CHANGING will already be clear and no
6963 6964 * pending DLPI messages can remain).
6964 6965 */
6965 6966 if (ipx->ipx_current_ioctl != SIOCLIFREMOVEIF) {
6966 6967 ill_t *ill = ipif->ipif_ill;
6967 6968
6968 6969 mutex_enter(&ill->ill_lock);
6969 6970 dlpi_pending = ill->ill_dlpi_pending;
6970 6971 if (ipx->ipx_current_ioctl == 0) {
6971 6972 ipif = ill->ill_ipif;
6972 6973 for (; ipif != NULL; ipif = ipif->ipif_next)
6973 6974 ipif->ipif_state_flags &= ~IPIF_CHANGING;
6974 6975 } else {
6975 6976 ipif->ipif_state_flags &= ~IPIF_CHANGING;
6976 6977 }
6977 6978 mutex_exit(&ill->ill_lock);
6978 6979 }
6979 6980
6980 6981 ASSERT(!ipx->ipx_current_done);
6981 6982 ipx->ipx_current_done = B_TRUE;
6982 6983 ipx->ipx_current_ioctl = 0;
6983 6984 if (dlpi_pending == DL_PRIM_INVAL) {
6984 6985 mutex_enter(&ipx->ipx_lock);
6985 6986 ipx->ipx_current_ipif = NULL;
6986 6987 mutex_exit(&ipx->ipx_lock);
6987 6988 }
6988 6989 }
6989 6990
6990 6991 /*
6991 6992 * The ill is closing. Flush all messages on the ipsq that originated
6992 6993 * from this ill. Usually there wont' be any messages on the ipsq_xopq_mphead
6993 6994 * for this ill since ipsq_enter could not have entered until then.
6994 6995 * New messages can't be queued since the CONDEMNED flag is set.
6995 6996 */
6996 6997 static void
6997 6998 ipsq_flush(ill_t *ill)
6998 6999 {
6999 7000 queue_t *q;
7000 7001 mblk_t *prev;
7001 7002 mblk_t *mp;
7002 7003 mblk_t *mp_next;
7003 7004 ipxop_t *ipx = ill->ill_phyint->phyint_ipsq->ipsq_xop;
7004 7005
7005 7006 ASSERT(IAM_WRITER_ILL(ill));
7006 7007
7007 7008 /*
7008 7009 * Flush any messages sent up by the driver.
7009 7010 */
7010 7011 mutex_enter(&ipx->ipx_lock);
7011 7012 for (prev = NULL, mp = ipx->ipx_mphead; mp != NULL; mp = mp_next) {
7012 7013 mp_next = mp->b_next;
7013 7014 q = mp->b_queue;
7014 7015 if (q == ill->ill_rq || q == ill->ill_wq) {
7015 7016 /* dequeue mp */
7016 7017 if (prev == NULL)
7017 7018 ipx->ipx_mphead = mp->b_next;
7018 7019 else
7019 7020 prev->b_next = mp->b_next;
7020 7021 if (ipx->ipx_mptail == mp) {
7021 7022 ASSERT(mp_next == NULL);
7022 7023 ipx->ipx_mptail = prev;
7023 7024 }
7024 7025 inet_freemsg(mp);
7025 7026 } else {
7026 7027 prev = mp;
7027 7028 }
7028 7029 }
7029 7030 mutex_exit(&ipx->ipx_lock);
7030 7031 (void) ipsq_pending_mp_cleanup(ill, NULL);
7031 7032 ipsq_xopq_mp_cleanup(ill, NULL);
7032 7033 }
7033 7034
7034 7035 /*
7035 7036 * Parse an ifreq or lifreq struct coming down ioctls and refhold
7036 7037 * and return the associated ipif.
7037 7038 * Return value:
7038 7039 * Non zero: An error has occurred. ci may not be filled out.
7039 7040 * zero : ci is filled out with the ioctl cmd in ci.ci_name, and
7040 7041 * a held ipif in ci.ci_ipif.
7041 7042 */
7042 7043 int
7043 7044 ip_extract_lifreq(queue_t *q, mblk_t *mp, const ip_ioctl_cmd_t *ipip,
7044 7045 cmd_info_t *ci)
7045 7046 {
7046 7047 char *name;
7047 7048 struct ifreq *ifr;
7048 7049 struct lifreq *lifr;
7049 7050 ipif_t *ipif = NULL;
7050 7051 ill_t *ill;
7051 7052 conn_t *connp;
7052 7053 boolean_t isv6;
7053 7054 int err;
7054 7055 mblk_t *mp1;
7055 7056 zoneid_t zoneid;
7056 7057 ip_stack_t *ipst;
7057 7058
7058 7059 if (q->q_next != NULL) {
7059 7060 ill = (ill_t *)q->q_ptr;
7060 7061 isv6 = ill->ill_isv6;
7061 7062 connp = NULL;
7062 7063 zoneid = ALL_ZONES;
7063 7064 ipst = ill->ill_ipst;
7064 7065 } else {
7065 7066 ill = NULL;
7066 7067 connp = Q_TO_CONN(q);
7067 7068 isv6 = (connp->conn_family == AF_INET6);
7068 7069 zoneid = connp->conn_zoneid;
7069 7070 if (zoneid == GLOBAL_ZONEID) {
7070 7071 /* global zone can access ipifs in all zones */
7071 7072 zoneid = ALL_ZONES;
7072 7073 }
7073 7074 ipst = connp->conn_netstack->netstack_ip;
7074 7075 }
7075 7076
7076 7077 /* Has been checked in ip_wput_nondata */
7077 7078 mp1 = mp->b_cont->b_cont;
7078 7079
7079 7080 if (ipip->ipi_cmd_type == IF_CMD) {
7080 7081 /* This a old style SIOC[GS]IF* command */
7081 7082 ifr = (struct ifreq *)mp1->b_rptr;
7082 7083 /*
7083 7084 * Null terminate the string to protect against buffer
7084 7085 * overrun. String was generated by user code and may not
7085 7086 * be trusted.
7086 7087 */
7087 7088 ifr->ifr_name[IFNAMSIZ - 1] = '\0';
7088 7089 name = ifr->ifr_name;
7089 7090 ci->ci_sin = (sin_t *)&ifr->ifr_addr;
7090 7091 ci->ci_sin6 = NULL;
7091 7092 ci->ci_lifr = (struct lifreq *)ifr;
7092 7093 } else {
7093 7094 /* This a new style SIOC[GS]LIF* command */
7094 7095 ASSERT(ipip->ipi_cmd_type == LIF_CMD);
7095 7096 lifr = (struct lifreq *)mp1->b_rptr;
7096 7097 /*
7097 7098 * Null terminate the string to protect against buffer
7098 7099 * overrun. String was generated by user code and may not
7099 7100 * be trusted.
7100 7101 */
7101 7102 lifr->lifr_name[LIFNAMSIZ - 1] = '\0';
7102 7103 name = lifr->lifr_name;
7103 7104 ci->ci_sin = (sin_t *)&lifr->lifr_addr;
7104 7105 ci->ci_sin6 = (sin6_t *)&lifr->lifr_addr;
7105 7106 ci->ci_lifr = lifr;
7106 7107 }
7107 7108
7108 7109 if (ipip->ipi_cmd == SIOCSLIFNAME) {
7109 7110 /*
7110 7111 * The ioctl will be failed if the ioctl comes down
7111 7112 * an conn stream
7112 7113 */
7113 7114 if (ill == NULL) {
7114 7115 /*
7115 7116 * Not an ill queue, return EINVAL same as the
7116 7117 * old error code.
7117 7118 */
7118 7119 return (ENXIO);
7119 7120 }
7120 7121 ipif = ill->ill_ipif;
7121 7122 ipif_refhold(ipif);
7122 7123 } else {
7123 7124 /*
7124 7125 * Ensure that ioctls don't see any internal state changes
7125 7126 * caused by set ioctls by deferring them if IPIF_CHANGING is
7126 7127 * set.
7127 7128 */
7128 7129 ipif = ipif_lookup_on_name_async(name, mi_strlen(name),
7129 7130 isv6, zoneid, q, mp, ip_process_ioctl, &err, ipst);
7130 7131 if (ipif == NULL) {
7131 7132 if (err == EINPROGRESS)
7132 7133 return (err);
7133 7134 err = 0; /* Ensure we don't use it below */
7134 7135 }
7135 7136 }
7136 7137
7137 7138 /*
7138 7139 * Old style [GS]IFCMD does not admit IPv6 ipif
7139 7140 */
7140 7141 if (ipif != NULL && ipif->ipif_isv6 && ipip->ipi_cmd_type == IF_CMD) {
7141 7142 ipif_refrele(ipif);
7142 7143 return (ENXIO);
7143 7144 }
7144 7145
7145 7146 if (ipif == NULL && ill != NULL && ill->ill_ipif != NULL &&
7146 7147 name[0] == '\0') {
7147 7148 /*
7148 7149 * Handle a or a SIOC?IF* with a null name
7149 7150 * during plumb (on the ill queue before the I_PLINK).
7150 7151 */
7151 7152 ipif = ill->ill_ipif;
7152 7153 ipif_refhold(ipif);
7153 7154 }
7154 7155
7155 7156 if (ipif == NULL)
7156 7157 return (ENXIO);
7157 7158
7158 7159 DTRACE_PROBE4(ipif__ioctl, char *, "ip_extract_lifreq",
7159 7160 int, ipip->ipi_cmd, ill_t *, ipif->ipif_ill, ipif_t *, ipif);
7160 7161
7161 7162 ci->ci_ipif = ipif;
7162 7163 return (0);
7163 7164 }
7164 7165
7165 7166 /*
7166 7167 * Return the total number of ipifs.
7167 7168 */
7168 7169 static uint_t
7169 7170 ip_get_numifs(zoneid_t zoneid, ip_stack_t *ipst)
7170 7171 {
7171 7172 uint_t numifs = 0;
7172 7173 ill_t *ill;
7173 7174 ill_walk_context_t ctx;
7174 7175 ipif_t *ipif;
7175 7176
7176 7177 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
7177 7178 ill = ILL_START_WALK_V4(&ctx, ipst);
7178 7179 for (; ill != NULL; ill = ill_next(&ctx, ill)) {
7179 7180 if (IS_UNDER_IPMP(ill))
7180 7181 continue;
7181 7182 for (ipif = ill->ill_ipif; ipif != NULL;
7182 7183 ipif = ipif->ipif_next) {
7183 7184 if (ipif->ipif_zoneid == zoneid ||
7184 7185 ipif->ipif_zoneid == ALL_ZONES)
7185 7186 numifs++;
7186 7187 }
7187 7188 }
7188 7189 rw_exit(&ipst->ips_ill_g_lock);
7189 7190 return (numifs);
7190 7191 }
7191 7192
7192 7193 /*
7193 7194 * Return the total number of ipifs.
7194 7195 */
7195 7196 static uint_t
7196 7197 ip_get_numlifs(int family, int lifn_flags, zoneid_t zoneid, ip_stack_t *ipst)
7197 7198 {
7198 7199 uint_t numifs = 0;
7199 7200 ill_t *ill;
7200 7201 ipif_t *ipif;
7201 7202 ill_walk_context_t ctx;
7202 7203
7203 7204 ip1dbg(("ip_get_numlifs(%d %u %d)\n", family, lifn_flags, (int)zoneid));
7204 7205
7205 7206 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
7206 7207 if (family == AF_INET)
7207 7208 ill = ILL_START_WALK_V4(&ctx, ipst);
7208 7209 else if (family == AF_INET6)
7209 7210 ill = ILL_START_WALK_V6(&ctx, ipst);
7210 7211 else
7211 7212 ill = ILL_START_WALK_ALL(&ctx, ipst);
7212 7213
7213 7214 for (; ill != NULL; ill = ill_next(&ctx, ill)) {
7214 7215 if (IS_UNDER_IPMP(ill) && !(lifn_flags & LIFC_UNDER_IPMP))
7215 7216 continue;
7216 7217
7217 7218 for (ipif = ill->ill_ipif; ipif != NULL;
7218 7219 ipif = ipif->ipif_next) {
7219 7220 if ((ipif->ipif_flags & IPIF_NOXMIT) &&
7220 7221 !(lifn_flags & LIFC_NOXMIT))
7221 7222 continue;
7222 7223 if ((ipif->ipif_flags & IPIF_TEMPORARY) &&
7223 7224 !(lifn_flags & LIFC_TEMPORARY))
7224 7225 continue;
7225 7226 if (((ipif->ipif_flags &
7226 7227 (IPIF_NOXMIT|IPIF_NOLOCAL|
7227 7228 IPIF_DEPRECATED)) ||
7228 7229 IS_LOOPBACK(ill) ||
7229 7230 !(ipif->ipif_flags & IPIF_UP)) &&
7230 7231 (lifn_flags & LIFC_EXTERNAL_SOURCE))
7231 7232 continue;
7232 7233
7233 7234 if (zoneid != ipif->ipif_zoneid &&
7234 7235 ipif->ipif_zoneid != ALL_ZONES &&
7235 7236 (zoneid != GLOBAL_ZONEID ||
7236 7237 !(lifn_flags & LIFC_ALLZONES)))
7237 7238 continue;
7238 7239
7239 7240 numifs++;
7240 7241 }
7241 7242 }
7242 7243 rw_exit(&ipst->ips_ill_g_lock);
7243 7244 return (numifs);
7244 7245 }
7245 7246
7246 7247 uint_t
7247 7248 ip_get_lifsrcofnum(ill_t *ill)
7248 7249 {
7249 7250 uint_t numifs = 0;
7250 7251 ill_t *ill_head = ill;
7251 7252 ip_stack_t *ipst = ill->ill_ipst;
7252 7253
7253 7254 /*
7254 7255 * ill_g_usesrc_lock protects ill_usesrc_grp_next, for example, some
7255 7256 * other thread may be trying to relink the ILLs in this usesrc group
7256 7257 * and adjusting the ill_usesrc_grp_next pointers
7257 7258 */
7258 7259 rw_enter(&ipst->ips_ill_g_usesrc_lock, RW_READER);
7259 7260 if ((ill->ill_usesrc_ifindex == 0) &&
7260 7261 (ill->ill_usesrc_grp_next != NULL)) {
7261 7262 for (; (ill != NULL) && (ill->ill_usesrc_grp_next != ill_head);
7262 7263 ill = ill->ill_usesrc_grp_next)
7263 7264 numifs++;
7264 7265 }
7265 7266 rw_exit(&ipst->ips_ill_g_usesrc_lock);
7266 7267
7267 7268 return (numifs);
7268 7269 }
7269 7270
7270 7271 /* Null values are passed in for ipif, sin, and ifreq */
7271 7272 /* ARGSUSED */
7272 7273 int
7273 7274 ip_sioctl_get_ifnum(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q,
7274 7275 mblk_t *mp, ip_ioctl_cmd_t *ipip, void *ifreq)
7275 7276 {
7276 7277 int *nump;
7277 7278 conn_t *connp = Q_TO_CONN(q);
7278 7279
7279 7280 ASSERT(q->q_next == NULL); /* not a valid ioctl for ip as a module */
7280 7281
7281 7282 /* Existence of b_cont->b_cont checked in ip_wput_nondata */
7282 7283 nump = (int *)mp->b_cont->b_cont->b_rptr;
7283 7284
7284 7285 *nump = ip_get_numifs(connp->conn_zoneid,
7285 7286 connp->conn_netstack->netstack_ip);
7286 7287 ip1dbg(("ip_sioctl_get_ifnum numifs %d", *nump));
7287 7288 return (0);
7288 7289 }
7289 7290
7290 7291 /* Null values are passed in for ipif, sin, and ifreq */
7291 7292 /* ARGSUSED */
7292 7293 int
7293 7294 ip_sioctl_get_lifnum(ipif_t *dummy_ipif, sin_t *dummy_sin,
7294 7295 queue_t *q, mblk_t *mp, ip_ioctl_cmd_t *ipip, void *ifreq)
7295 7296 {
7296 7297 struct lifnum *lifn;
7297 7298 mblk_t *mp1;
7298 7299 conn_t *connp = Q_TO_CONN(q);
7299 7300
7300 7301 ASSERT(q->q_next == NULL); /* not a valid ioctl for ip as a module */
7301 7302
7302 7303 /* Existence checked in ip_wput_nondata */
7303 7304 mp1 = mp->b_cont->b_cont;
7304 7305
7305 7306 lifn = (struct lifnum *)mp1->b_rptr;
7306 7307 switch (lifn->lifn_family) {
7307 7308 case AF_UNSPEC:
7308 7309 case AF_INET:
7309 7310 case AF_INET6:
7310 7311 break;
7311 7312 default:
7312 7313 return (EAFNOSUPPORT);
7313 7314 }
7314 7315
7315 7316 lifn->lifn_count = ip_get_numlifs(lifn->lifn_family, lifn->lifn_flags,
7316 7317 connp->conn_zoneid, connp->conn_netstack->netstack_ip);
7317 7318 ip1dbg(("ip_sioctl_get_lifnum numifs %d", lifn->lifn_count));
7318 7319 return (0);
7319 7320 }
7320 7321
7321 7322 /* ARGSUSED */
7322 7323 int
7323 7324 ip_sioctl_get_ifconf(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q,
7324 7325 mblk_t *mp, ip_ioctl_cmd_t *ipip, void *ifreq)
7325 7326 {
7326 7327 STRUCT_HANDLE(ifconf, ifc);
7327 7328 mblk_t *mp1;
7328 7329 struct iocblk *iocp;
7329 7330 struct ifreq *ifr;
7330 7331 ill_walk_context_t ctx;
7331 7332 ill_t *ill;
7332 7333 ipif_t *ipif;
7333 7334 struct sockaddr_in *sin;
7334 7335 int32_t ifclen;
7335 7336 zoneid_t zoneid;
7336 7337 ip_stack_t *ipst = CONNQ_TO_IPST(q);
7337 7338
7338 7339 ASSERT(q->q_next == NULL); /* not valid ioctls for ip as a module */
7339 7340
7340 7341 ip1dbg(("ip_sioctl_get_ifconf"));
7341 7342 /* Existence verified in ip_wput_nondata */
7342 7343 mp1 = mp->b_cont->b_cont;
7343 7344 iocp = (struct iocblk *)mp->b_rptr;
7344 7345 zoneid = Q_TO_CONN(q)->conn_zoneid;
7345 7346
7346 7347 /*
7347 7348 * The original SIOCGIFCONF passed in a struct ifconf which specified
7348 7349 * the user buffer address and length into which the list of struct
7349 7350 * ifreqs was to be copied. Since AT&T Streams does not seem to
7350 7351 * allow M_COPYOUT to be used in conjunction with I_STR IOCTLS,
7351 7352 * the SIOCGIFCONF operation was redefined to simply provide
7352 7353 * a large output buffer into which we are supposed to jam the ifreq
7353 7354 * array. The same ioctl command code was used, despite the fact that
7354 7355 * both the applications and the kernel code had to change, thus making
7355 7356 * it impossible to support both interfaces.
7356 7357 *
7357 7358 * For reasons not good enough to try to explain, the following
7358 7359 * algorithm is used for deciding what to do with one of these:
7359 7360 * If the IOCTL comes in as an I_STR, it is assumed to be of the new
7360 7361 * form with the output buffer coming down as the continuation message.
7361 7362 * If it arrives as a TRANSPARENT IOCTL, it is assumed to be old style,
7362 7363 * and we have to copy in the ifconf structure to find out how big the
7363 7364 * output buffer is and where to copy out to. Sure no problem...
7364 7365 *
7365 7366 */
7366 7367 STRUCT_SET_HANDLE(ifc, iocp->ioc_flag, NULL);
7367 7368 if ((mp1->b_wptr - mp1->b_rptr) == STRUCT_SIZE(ifc)) {
7368 7369 int numifs = 0;
7369 7370 size_t ifc_bufsize;
7370 7371
7371 7372 /*
7372 7373 * Must be (better be!) continuation of a TRANSPARENT
7373 7374 * IOCTL. We just copied in the ifconf structure.
7374 7375 */
7375 7376 STRUCT_SET_HANDLE(ifc, iocp->ioc_flag,
7376 7377 (struct ifconf *)mp1->b_rptr);
7377 7378
7378 7379 /*
7379 7380 * Allocate a buffer to hold requested information.
7380 7381 *
7381 7382 * If ifc_len is larger than what is needed, we only
7382 7383 * allocate what we will use.
7383 7384 *
7384 7385 * If ifc_len is smaller than what is needed, return
7385 7386 * EINVAL.
7386 7387 *
7387 7388 * XXX: the ill_t structure can hava 2 counters, for
7388 7389 * v4 and v6 (not just ill_ipif_up_count) to store the
7389 7390 * number of interfaces for a device, so we don't need
7390 7391 * to count them here...
7391 7392 */
7392 7393 numifs = ip_get_numifs(zoneid, ipst);
7393 7394
7394 7395 ifclen = STRUCT_FGET(ifc, ifc_len);
7395 7396 ifc_bufsize = numifs * sizeof (struct ifreq);
7396 7397 if (ifc_bufsize > ifclen) {
7397 7398 if (iocp->ioc_cmd == O_SIOCGIFCONF) {
7398 7399 /* old behaviour */
7399 7400 return (EINVAL);
7400 7401 } else {
7401 7402 ifc_bufsize = ifclen;
7402 7403 }
7403 7404 }
7404 7405
7405 7406 mp1 = mi_copyout_alloc(q, mp,
7406 7407 STRUCT_FGETP(ifc, ifc_buf), ifc_bufsize, B_FALSE);
7407 7408 if (mp1 == NULL)
7408 7409 return (ENOMEM);
7409 7410
7410 7411 mp1->b_wptr = mp1->b_rptr + ifc_bufsize;
7411 7412 }
7412 7413 bzero(mp1->b_rptr, mp1->b_wptr - mp1->b_rptr);
7413 7414 /*
7414 7415 * the SIOCGIFCONF ioctl only knows about
7415 7416 * IPv4 addresses, so don't try to tell
7416 7417 * it about interfaces with IPv6-only
7417 7418 * addresses. (Last parm 'isv6' is B_FALSE)
7418 7419 */
7419 7420
7420 7421 ifr = (struct ifreq *)mp1->b_rptr;
7421 7422
7422 7423 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
7423 7424 ill = ILL_START_WALK_V4(&ctx, ipst);
7424 7425 for (; ill != NULL; ill = ill_next(&ctx, ill)) {
7425 7426 if (IS_UNDER_IPMP(ill))
7426 7427 continue;
7427 7428 for (ipif = ill->ill_ipif; ipif != NULL;
7428 7429 ipif = ipif->ipif_next) {
7429 7430 if (zoneid != ipif->ipif_zoneid &&
7430 7431 ipif->ipif_zoneid != ALL_ZONES)
7431 7432 continue;
7432 7433 if ((uchar_t *)&ifr[1] > mp1->b_wptr) {
7433 7434 if (iocp->ioc_cmd == O_SIOCGIFCONF) {
7434 7435 /* old behaviour */
7435 7436 rw_exit(&ipst->ips_ill_g_lock);
7436 7437 return (EINVAL);
7437 7438 } else {
7438 7439 goto if_copydone;
7439 7440 }
7440 7441 }
7441 7442 ipif_get_name(ipif, ifr->ifr_name,
7442 7443 sizeof (ifr->ifr_name));
7443 7444 sin = (sin_t *)&ifr->ifr_addr;
7444 7445 *sin = sin_null;
7445 7446 sin->sin_family = AF_INET;
7446 7447 sin->sin_addr.s_addr = ipif->ipif_lcl_addr;
7447 7448 ifr++;
7448 7449 }
7449 7450 }
7450 7451 if_copydone:
7451 7452 rw_exit(&ipst->ips_ill_g_lock);
7452 7453 mp1->b_wptr = (uchar_t *)ifr;
7453 7454
7454 7455 if (STRUCT_BUF(ifc) != NULL) {
7455 7456 STRUCT_FSET(ifc, ifc_len,
7456 7457 (int)((uchar_t *)ifr - mp1->b_rptr));
7457 7458 }
7458 7459 return (0);
7459 7460 }
7460 7461
7461 7462 /*
7462 7463 * Get the interfaces using the address hosted on the interface passed in,
7463 7464 * as a source adddress
7464 7465 */
7465 7466 /* ARGSUSED */
7466 7467 int
7467 7468 ip_sioctl_get_lifsrcof(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q,
7468 7469 mblk_t *mp, ip_ioctl_cmd_t *ipip, void *ifreq)
7469 7470 {
7470 7471 mblk_t *mp1;
7471 7472 ill_t *ill, *ill_head;
7472 7473 ipif_t *ipif, *orig_ipif;
7473 7474 int numlifs = 0;
7474 7475 size_t lifs_bufsize, lifsmaxlen;
7475 7476 struct lifreq *lifr;
7476 7477 struct iocblk *iocp = (struct iocblk *)mp->b_rptr;
7477 7478 uint_t ifindex;
7478 7479 zoneid_t zoneid;
7479 7480 boolean_t isv6 = B_FALSE;
7480 7481 struct sockaddr_in *sin;
7481 7482 struct sockaddr_in6 *sin6;
7482 7483 STRUCT_HANDLE(lifsrcof, lifs);
7483 7484 ip_stack_t *ipst;
7484 7485
7485 7486 ipst = CONNQ_TO_IPST(q);
7486 7487
7487 7488 ASSERT(q->q_next == NULL);
7488 7489
7489 7490 zoneid = Q_TO_CONN(q)->conn_zoneid;
7490 7491
7491 7492 /* Existence verified in ip_wput_nondata */
7492 7493 mp1 = mp->b_cont->b_cont;
7493 7494
7494 7495 /*
7495 7496 * Must be (better be!) continuation of a TRANSPARENT
7496 7497 * IOCTL. We just copied in the lifsrcof structure.
7497 7498 */
7498 7499 STRUCT_SET_HANDLE(lifs, iocp->ioc_flag,
7499 7500 (struct lifsrcof *)mp1->b_rptr);
7500 7501
7501 7502 if (MBLKL(mp1) != STRUCT_SIZE(lifs))
7502 7503 return (EINVAL);
7503 7504
7504 7505 ifindex = STRUCT_FGET(lifs, lifs_ifindex);
7505 7506 isv6 = (Q_TO_CONN(q))->conn_family == AF_INET6;
7506 7507 ipif = ipif_lookup_on_ifindex(ifindex, isv6, zoneid, ipst);
7507 7508 if (ipif == NULL) {
7508 7509 ip1dbg(("ip_sioctl_get_lifsrcof: no ipif for ifindex %d\n",
7509 7510 ifindex));
7510 7511 return (ENXIO);
7511 7512 }
7512 7513
7513 7514 /* Allocate a buffer to hold requested information */
7514 7515 numlifs = ip_get_lifsrcofnum(ipif->ipif_ill);
7515 7516 lifs_bufsize = numlifs * sizeof (struct lifreq);
7516 7517 lifsmaxlen = STRUCT_FGET(lifs, lifs_maxlen);
7517 7518 /* The actual size needed is always returned in lifs_len */
7518 7519 STRUCT_FSET(lifs, lifs_len, lifs_bufsize);
7519 7520
7520 7521 /* If the amount we need is more than what is passed in, abort */
7521 7522 if (lifs_bufsize > lifsmaxlen || lifs_bufsize == 0) {
7522 7523 ipif_refrele(ipif);
7523 7524 return (0);
7524 7525 }
7525 7526
7526 7527 mp1 = mi_copyout_alloc(q, mp,
7527 7528 STRUCT_FGETP(lifs, lifs_buf), lifs_bufsize, B_FALSE);
7528 7529 if (mp1 == NULL) {
7529 7530 ipif_refrele(ipif);
7530 7531 return (ENOMEM);
7531 7532 }
7532 7533
7533 7534 mp1->b_wptr = mp1->b_rptr + lifs_bufsize;
7534 7535 bzero(mp1->b_rptr, lifs_bufsize);
7535 7536
7536 7537 lifr = (struct lifreq *)mp1->b_rptr;
7537 7538
7538 7539 ill = ill_head = ipif->ipif_ill;
7539 7540 orig_ipif = ipif;
7540 7541
7541 7542 /* ill_g_usesrc_lock protects ill_usesrc_grp_next */
7542 7543 rw_enter(&ipst->ips_ill_g_usesrc_lock, RW_READER);
7543 7544 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
7544 7545
7545 7546 ill = ill->ill_usesrc_grp_next; /* start from next ill */
7546 7547 for (; (ill != NULL) && (ill != ill_head);
7547 7548 ill = ill->ill_usesrc_grp_next) {
7548 7549
7549 7550 if ((uchar_t *)&lifr[1] > mp1->b_wptr)
7550 7551 break;
7551 7552
7552 7553 ipif = ill->ill_ipif;
7553 7554 ipif_get_name(ipif, lifr->lifr_name, sizeof (lifr->lifr_name));
7554 7555 if (ipif->ipif_isv6) {
7555 7556 sin6 = (sin6_t *)&lifr->lifr_addr;
7556 7557 *sin6 = sin6_null;
7557 7558 sin6->sin6_family = AF_INET6;
7558 7559 sin6->sin6_addr = ipif->ipif_v6lcl_addr;
7559 7560 lifr->lifr_addrlen = ip_mask_to_plen_v6(
7560 7561 &ipif->ipif_v6net_mask);
7561 7562 } else {
7562 7563 sin = (sin_t *)&lifr->lifr_addr;
7563 7564 *sin = sin_null;
7564 7565 sin->sin_family = AF_INET;
7565 7566 sin->sin_addr.s_addr = ipif->ipif_lcl_addr;
7566 7567 lifr->lifr_addrlen = ip_mask_to_plen(
7567 7568 ipif->ipif_net_mask);
7568 7569 }
7569 7570 lifr++;
7570 7571 }
7571 7572 rw_exit(&ipst->ips_ill_g_lock);
7572 7573 rw_exit(&ipst->ips_ill_g_usesrc_lock);
7573 7574 ipif_refrele(orig_ipif);
7574 7575 mp1->b_wptr = (uchar_t *)lifr;
7575 7576 STRUCT_FSET(lifs, lifs_len, (int)((uchar_t *)lifr - mp1->b_rptr));
7576 7577
7577 7578 return (0);
7578 7579 }
7579 7580
7580 7581 /* ARGSUSED */
7581 7582 int
7582 7583 ip_sioctl_get_lifconf(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q,
7583 7584 mblk_t *mp, ip_ioctl_cmd_t *ipip, void *ifreq)
7584 7585 {
7585 7586 mblk_t *mp1;
7586 7587 int list;
7587 7588 ill_t *ill;
7588 7589 ipif_t *ipif;
7589 7590 int flags;
7590 7591 int numlifs = 0;
7591 7592 size_t lifc_bufsize;
7592 7593 struct lifreq *lifr;
7593 7594 sa_family_t family;
7594 7595 struct sockaddr_in *sin;
7595 7596 struct sockaddr_in6 *sin6;
7596 7597 ill_walk_context_t ctx;
7597 7598 struct iocblk *iocp = (struct iocblk *)mp->b_rptr;
7598 7599 int32_t lifclen;
7599 7600 zoneid_t zoneid;
7600 7601 STRUCT_HANDLE(lifconf, lifc);
7601 7602 ip_stack_t *ipst = CONNQ_TO_IPST(q);
7602 7603
7603 7604 ip1dbg(("ip_sioctl_get_lifconf"));
7604 7605
7605 7606 ASSERT(q->q_next == NULL);
7606 7607
7607 7608 zoneid = Q_TO_CONN(q)->conn_zoneid;
7608 7609
7609 7610 /* Existence verified in ip_wput_nondata */
7610 7611 mp1 = mp->b_cont->b_cont;
7611 7612
7612 7613 /*
7613 7614 * An extended version of SIOCGIFCONF that takes an
7614 7615 * additional address family and flags field.
7615 7616 * AF_UNSPEC retrieve both IPv4 and IPv6.
7616 7617 * Unless LIFC_NOXMIT is specified the IPIF_NOXMIT
7617 7618 * interfaces are omitted.
7618 7619 * Similarly, IPIF_TEMPORARY interfaces are omitted
7619 7620 * unless LIFC_TEMPORARY is specified.
7620 7621 * If LIFC_EXTERNAL_SOURCE is specified, IPIF_NOXMIT,
7621 7622 * IPIF_NOLOCAL, PHYI_LOOPBACK, IPIF_DEPRECATED and
7622 7623 * not IPIF_UP interfaces are omitted. LIFC_EXTERNAL_SOURCE
7623 7624 * has priority over LIFC_NOXMIT.
7624 7625 */
7625 7626 STRUCT_SET_HANDLE(lifc, iocp->ioc_flag, NULL);
7626 7627
7627 7628 if ((mp1->b_wptr - mp1->b_rptr) != STRUCT_SIZE(lifc))
7628 7629 return (EINVAL);
7629 7630
7630 7631 /*
7631 7632 * Must be (better be!) continuation of a TRANSPARENT
7632 7633 * IOCTL. We just copied in the lifconf structure.
7633 7634 */
7634 7635 STRUCT_SET_HANDLE(lifc, iocp->ioc_flag, (struct lifconf *)mp1->b_rptr);
7635 7636
7636 7637 family = STRUCT_FGET(lifc, lifc_family);
7637 7638 flags = STRUCT_FGET(lifc, lifc_flags);
7638 7639
7639 7640 switch (family) {
7640 7641 case AF_UNSPEC:
7641 7642 /*
7642 7643 * walk all ILL's.
7643 7644 */
7644 7645 list = MAX_G_HEADS;
7645 7646 break;
7646 7647 case AF_INET:
7647 7648 /*
7648 7649 * walk only IPV4 ILL's.
7649 7650 */
7650 7651 list = IP_V4_G_HEAD;
7651 7652 break;
7652 7653 case AF_INET6:
7653 7654 /*
7654 7655 * walk only IPV6 ILL's.
7655 7656 */
7656 7657 list = IP_V6_G_HEAD;
7657 7658 break;
7658 7659 default:
7659 7660 return (EAFNOSUPPORT);
7660 7661 }
7661 7662
7662 7663 /*
7663 7664 * Allocate a buffer to hold requested information.
7664 7665 *
7665 7666 * If lifc_len is larger than what is needed, we only
7666 7667 * allocate what we will use.
7667 7668 *
7668 7669 * If lifc_len is smaller than what is needed, return
7669 7670 * EINVAL.
7670 7671 */
7671 7672 numlifs = ip_get_numlifs(family, flags, zoneid, ipst);
7672 7673 lifc_bufsize = numlifs * sizeof (struct lifreq);
7673 7674 lifclen = STRUCT_FGET(lifc, lifc_len);
7674 7675 if (lifc_bufsize > lifclen) {
7675 7676 if (iocp->ioc_cmd == O_SIOCGLIFCONF)
7676 7677 return (EINVAL);
7677 7678 else
7678 7679 lifc_bufsize = lifclen;
7679 7680 }
7680 7681
7681 7682 mp1 = mi_copyout_alloc(q, mp,
7682 7683 STRUCT_FGETP(lifc, lifc_buf), lifc_bufsize, B_FALSE);
7683 7684 if (mp1 == NULL)
7684 7685 return (ENOMEM);
7685 7686
7686 7687 mp1->b_wptr = mp1->b_rptr + lifc_bufsize;
7687 7688 bzero(mp1->b_rptr, mp1->b_wptr - mp1->b_rptr);
7688 7689
7689 7690 lifr = (struct lifreq *)mp1->b_rptr;
7690 7691
7691 7692 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
7692 7693 ill = ill_first(list, list, &ctx, ipst);
7693 7694 for (; ill != NULL; ill = ill_next(&ctx, ill)) {
7694 7695 if (IS_UNDER_IPMP(ill) && !(flags & LIFC_UNDER_IPMP))
7695 7696 continue;
7696 7697
7697 7698 for (ipif = ill->ill_ipif; ipif != NULL;
7698 7699 ipif = ipif->ipif_next) {
7699 7700 if ((ipif->ipif_flags & IPIF_NOXMIT) &&
7700 7701 !(flags & LIFC_NOXMIT))
7701 7702 continue;
7702 7703
7703 7704 if ((ipif->ipif_flags & IPIF_TEMPORARY) &&
7704 7705 !(flags & LIFC_TEMPORARY))
7705 7706 continue;
7706 7707
7707 7708 if (((ipif->ipif_flags &
7708 7709 (IPIF_NOXMIT|IPIF_NOLOCAL|
7709 7710 IPIF_DEPRECATED)) ||
7710 7711 IS_LOOPBACK(ill) ||
7711 7712 !(ipif->ipif_flags & IPIF_UP)) &&
7712 7713 (flags & LIFC_EXTERNAL_SOURCE))
7713 7714 continue;
7714 7715
7715 7716 if (zoneid != ipif->ipif_zoneid &&
7716 7717 ipif->ipif_zoneid != ALL_ZONES &&
7717 7718 (zoneid != GLOBAL_ZONEID ||
7718 7719 !(flags & LIFC_ALLZONES)))
7719 7720 continue;
7720 7721
7721 7722 if ((uchar_t *)&lifr[1] > mp1->b_wptr) {
7722 7723 if (iocp->ioc_cmd == O_SIOCGLIFCONF) {
7723 7724 rw_exit(&ipst->ips_ill_g_lock);
7724 7725 return (EINVAL);
7725 7726 } else {
7726 7727 goto lif_copydone;
7727 7728 }
7728 7729 }
7729 7730
7730 7731 ipif_get_name(ipif, lifr->lifr_name,
7731 7732 sizeof (lifr->lifr_name));
7732 7733 lifr->lifr_type = ill->ill_type;
7733 7734 if (ipif->ipif_isv6) {
7734 7735 sin6 = (sin6_t *)&lifr->lifr_addr;
7735 7736 *sin6 = sin6_null;
7736 7737 sin6->sin6_family = AF_INET6;
7737 7738 sin6->sin6_addr =
7738 7739 ipif->ipif_v6lcl_addr;
7739 7740 lifr->lifr_addrlen =
7740 7741 ip_mask_to_plen_v6(
7741 7742 &ipif->ipif_v6net_mask);
7742 7743 } else {
7743 7744 sin = (sin_t *)&lifr->lifr_addr;
7744 7745 *sin = sin_null;
7745 7746 sin->sin_family = AF_INET;
7746 7747 sin->sin_addr.s_addr =
7747 7748 ipif->ipif_lcl_addr;
7748 7749 lifr->lifr_addrlen =
7749 7750 ip_mask_to_plen(
7750 7751 ipif->ipif_net_mask);
7751 7752 }
7752 7753 lifr++;
7753 7754 }
7754 7755 }
7755 7756 lif_copydone:
7756 7757 rw_exit(&ipst->ips_ill_g_lock);
7757 7758
7758 7759 mp1->b_wptr = (uchar_t *)lifr;
7759 7760 if (STRUCT_BUF(lifc) != NULL) {
7760 7761 STRUCT_FSET(lifc, lifc_len,
7761 7762 (int)((uchar_t *)lifr - mp1->b_rptr));
7762 7763 }
7763 7764 return (0);
7764 7765 }
7765 7766
7766 7767 static void
7767 7768 ip_sioctl_ip6addrpolicy(queue_t *q, mblk_t *mp)
7768 7769 {
7769 7770 ip6_asp_t *table;
7770 7771 size_t table_size;
7771 7772 mblk_t *data_mp;
7772 7773 struct iocblk *iocp = (struct iocblk *)mp->b_rptr;
7773 7774 ip_stack_t *ipst;
7774 7775
7775 7776 if (q->q_next == NULL)
7776 7777 ipst = CONNQ_TO_IPST(q);
7777 7778 else
7778 7779 ipst = ILLQ_TO_IPST(q);
7779 7780
7780 7781 /* These two ioctls are I_STR only */
7781 7782 if (iocp->ioc_count == TRANSPARENT) {
7782 7783 miocnak(q, mp, 0, EINVAL);
7783 7784 return;
7784 7785 }
7785 7786
7786 7787 data_mp = mp->b_cont;
7787 7788 if (data_mp == NULL) {
7788 7789 /* The user passed us a NULL argument */
7789 7790 table = NULL;
7790 7791 table_size = iocp->ioc_count;
7791 7792 } else {
7792 7793 /*
7793 7794 * The user provided a table. The stream head
7794 7795 * may have copied in the user data in chunks,
7795 7796 * so make sure everything is pulled up
7796 7797 * properly.
7797 7798 */
7798 7799 if (MBLKL(data_mp) < iocp->ioc_count) {
7799 7800 mblk_t *new_data_mp;
7800 7801 if ((new_data_mp = msgpullup(data_mp, -1)) ==
7801 7802 NULL) {
7802 7803 miocnak(q, mp, 0, ENOMEM);
7803 7804 return;
7804 7805 }
7805 7806 freemsg(data_mp);
7806 7807 data_mp = new_data_mp;
7807 7808 mp->b_cont = data_mp;
7808 7809 }
7809 7810 table = (ip6_asp_t *)data_mp->b_rptr;
7810 7811 table_size = iocp->ioc_count;
7811 7812 }
7812 7813
7813 7814 switch (iocp->ioc_cmd) {
7814 7815 case SIOCGIP6ADDRPOLICY:
7815 7816 iocp->ioc_rval = ip6_asp_get(table, table_size, ipst);
7816 7817 if (iocp->ioc_rval == -1)
7817 7818 iocp->ioc_error = EINVAL;
7818 7819 #if defined(_SYSCALL32_IMPL) && _LONG_LONG_ALIGNMENT_32 == 4
7819 7820 else if (table != NULL &&
7820 7821 (iocp->ioc_flag & IOC_MODELS) == IOC_ILP32) {
7821 7822 ip6_asp_t *src = table;
7822 7823 ip6_asp32_t *dst = (void *)table;
7823 7824 int count = table_size / sizeof (ip6_asp_t);
7824 7825 int i;
7825 7826
7826 7827 /*
7827 7828 * We need to do an in-place shrink of the array
7828 7829 * to match the alignment attributes of the
7829 7830 * 32-bit ABI looking at it.
7830 7831 */
7831 7832 /* LINTED: logical expression always true: op "||" */
7832 7833 ASSERT(sizeof (*src) > sizeof (*dst));
7833 7834 for (i = 1; i < count; i++)
7834 7835 bcopy(src + i, dst + i, sizeof (*dst));
7835 7836 }
7836 7837 #endif
7837 7838 break;
7838 7839
7839 7840 case SIOCSIP6ADDRPOLICY:
7840 7841 ASSERT(mp->b_prev == NULL);
7841 7842 mp->b_prev = (void *)q;
7842 7843 #if defined(_SYSCALL32_IMPL) && _LONG_LONG_ALIGNMENT_32 == 4
7843 7844 /*
7844 7845 * We pass in the datamodel here so that the ip6_asp_replace()
7845 7846 * routine can handle converting from 32-bit to native formats
7846 7847 * where necessary.
7847 7848 *
7848 7849 * A better way to handle this might be to convert the inbound
7849 7850 * data structure here, and hang it off a new 'mp'; thus the
7850 7851 * ip6_asp_replace() logic would always be dealing with native
7851 7852 * format data structures..
7852 7853 *
7853 7854 * (An even simpler way to handle these ioctls is to just
7854 7855 * add a 32-bit trailing 'pad' field to the ip6_asp_t structure
7855 7856 * and just recompile everything that depends on it.)
7856 7857 */
7857 7858 #endif
7858 7859 ip6_asp_replace(mp, table, table_size, B_FALSE, ipst,
7859 7860 iocp->ioc_flag & IOC_MODELS);
7860 7861 return;
7861 7862 }
7862 7863
7863 7864 DB_TYPE(mp) = (iocp->ioc_error == 0) ? M_IOCACK : M_IOCNAK;
7864 7865 qreply(q, mp);
7865 7866 }
7866 7867
7867 7868 static void
7868 7869 ip_sioctl_dstinfo(queue_t *q, mblk_t *mp)
7869 7870 {
7870 7871 mblk_t *data_mp;
7871 7872 struct dstinforeq *dir;
7872 7873 uint8_t *end, *cur;
7873 7874 in6_addr_t *daddr, *saddr;
7874 7875 ipaddr_t v4daddr;
7875 7876 ire_t *ire;
7876 7877 ipaddr_t v4setsrc;
7877 7878 in6_addr_t v6setsrc;
7878 7879 char *slabel, *dlabel;
7879 7880 boolean_t isipv4;
7880 7881 int match_ire;
7881 7882 ill_t *dst_ill;
7882 7883 struct iocblk *iocp = (struct iocblk *)mp->b_rptr;
7883 7884 conn_t *connp = Q_TO_CONN(q);
7884 7885 zoneid_t zoneid = IPCL_ZONEID(connp);
7885 7886 ip_stack_t *ipst = connp->conn_netstack->netstack_ip;
7886 7887 uint64_t ipif_flags;
7887 7888
7888 7889 ASSERT(q->q_next == NULL); /* this ioctl not allowed if ip is module */
7889 7890
7890 7891 /*
7891 7892 * This ioctl is I_STR only, and must have a
7892 7893 * data mblk following the M_IOCTL mblk.
7893 7894 */
7894 7895 data_mp = mp->b_cont;
7895 7896 if (iocp->ioc_count == TRANSPARENT || data_mp == NULL) {
7896 7897 miocnak(q, mp, 0, EINVAL);
7897 7898 return;
7898 7899 }
7899 7900
7900 7901 if (MBLKL(data_mp) < iocp->ioc_count) {
7901 7902 mblk_t *new_data_mp;
7902 7903
7903 7904 if ((new_data_mp = msgpullup(data_mp, -1)) == NULL) {
7904 7905 miocnak(q, mp, 0, ENOMEM);
7905 7906 return;
7906 7907 }
7907 7908 freemsg(data_mp);
7908 7909 data_mp = new_data_mp;
7909 7910 mp->b_cont = data_mp;
7910 7911 }
7911 7912 match_ire = MATCH_IRE_DSTONLY;
7912 7913
7913 7914 for (cur = data_mp->b_rptr, end = data_mp->b_wptr;
7914 7915 end - cur >= sizeof (struct dstinforeq);
7915 7916 cur += sizeof (struct dstinforeq)) {
7916 7917 dir = (struct dstinforeq *)cur;
7917 7918 daddr = &dir->dir_daddr;
7918 7919 saddr = &dir->dir_saddr;
7919 7920
7920 7921 /*
7921 7922 * ip_addr_scope_v6() and ip6_asp_lookup() handle
7922 7923 * v4 mapped addresses; ire_ftable_lookup_v6()
7923 7924 * and ip_select_source_v6() do not.
7924 7925 */
7925 7926 dir->dir_dscope = ip_addr_scope_v6(daddr);
7926 7927 dlabel = ip6_asp_lookup(daddr, &dir->dir_precedence, ipst);
7927 7928
7928 7929 isipv4 = IN6_IS_ADDR_V4MAPPED(daddr);
7929 7930 if (isipv4) {
7930 7931 IN6_V4MAPPED_TO_IPADDR(daddr, v4daddr);
7931 7932 v4setsrc = INADDR_ANY;
7932 7933 ire = ire_route_recursive_v4(v4daddr, 0, NULL, zoneid,
7933 7934 NULL, match_ire, IRR_ALLOCATE, 0, ipst, &v4setsrc,
7934 7935 NULL, NULL);
7935 7936 } else {
7936 7937 v6setsrc = ipv6_all_zeros;
7937 7938 ire = ire_route_recursive_v6(daddr, 0, NULL, zoneid,
7938 7939 NULL, match_ire, IRR_ALLOCATE, 0, ipst, &v6setsrc,
7939 7940 NULL, NULL);
7940 7941 }
7941 7942 ASSERT(ire != NULL);
7942 7943 if (ire->ire_flags & (RTF_REJECT|RTF_BLACKHOLE)) {
7943 7944 ire_refrele(ire);
7944 7945 dir->dir_dreachable = 0;
7945 7946
7946 7947 /* move on to next dst addr */
7947 7948 continue;
7948 7949 }
7949 7950 dir->dir_dreachable = 1;
7950 7951
7951 7952 dst_ill = ire_nexthop_ill(ire);
7952 7953 if (dst_ill == NULL) {
7953 7954 ire_refrele(ire);
7954 7955 continue;
7955 7956 }
7956 7957
7957 7958 /* With ipmp we most likely look at the ipmp ill here */
7958 7959 dir->dir_dmactype = dst_ill->ill_mactype;
7959 7960
7960 7961 if (isipv4) {
7961 7962 ipaddr_t v4saddr;
7962 7963
7963 7964 if (ip_select_source_v4(dst_ill, v4setsrc, v4daddr,
7964 7965 connp->conn_ixa->ixa_multicast_ifaddr, zoneid, ipst,
7965 7966 &v4saddr, NULL, &ipif_flags) != 0) {
7966 7967 v4saddr = INADDR_ANY;
7967 7968 ipif_flags = 0;
7968 7969 }
7969 7970 IN6_IPADDR_TO_V4MAPPED(v4saddr, saddr);
7970 7971 } else {
7971 7972 if (ip_select_source_v6(dst_ill, &v6setsrc, daddr,
7972 7973 zoneid, ipst, B_FALSE, IPV6_PREFER_SRC_DEFAULT,
7973 7974 saddr, NULL, &ipif_flags) != 0) {
7974 7975 *saddr = ipv6_all_zeros;
7975 7976 ipif_flags = 0;
7976 7977 }
7977 7978 }
7978 7979
7979 7980 dir->dir_sscope = ip_addr_scope_v6(saddr);
7980 7981 slabel = ip6_asp_lookup(saddr, NULL, ipst);
7981 7982 dir->dir_labelmatch = ip6_asp_labelcmp(dlabel, slabel);
7982 7983 dir->dir_sdeprecated = (ipif_flags & IPIF_DEPRECATED) ? 1 : 0;
7983 7984 ire_refrele(ire);
7984 7985 ill_refrele(dst_ill);
7985 7986 }
7986 7987 miocack(q, mp, iocp->ioc_count, 0);
7987 7988 }
7988 7989
7989 7990 /*
7990 7991 * Check if this is an address assigned to this machine.
7991 7992 * Skips interfaces that are down by using ire checks.
7992 7993 * Translates mapped addresses to v4 addresses and then
7993 7994 * treats them as such, returning true if the v4 address
7994 7995 * associated with this mapped address is configured.
7995 7996 * Note: Applications will have to be careful what they do
7996 7997 * with the response; use of mapped addresses limits
7997 7998 * what can be done with the socket, especially with
7998 7999 * respect to socket options and ioctls - neither IPv4
7999 8000 * options nor IPv6 sticky options/ancillary data options
8000 8001 * may be used.
8001 8002 */
8002 8003 /* ARGSUSED */
8003 8004 int
8004 8005 ip_sioctl_tmyaddr(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q, mblk_t *mp,
8005 8006 ip_ioctl_cmd_t *ipip, void *dummy_ifreq)
8006 8007 {
8007 8008 struct sioc_addrreq *sia;
8008 8009 sin_t *sin;
8009 8010 ire_t *ire;
8010 8011 mblk_t *mp1;
8011 8012 zoneid_t zoneid;
8012 8013 ip_stack_t *ipst;
8013 8014
8014 8015 ip1dbg(("ip_sioctl_tmyaddr"));
8015 8016
8016 8017 ASSERT(q->q_next == NULL); /* this ioctl not allowed if ip is module */
8017 8018 zoneid = Q_TO_CONN(q)->conn_zoneid;
8018 8019 ipst = CONNQ_TO_IPST(q);
8019 8020
8020 8021 /* Existence verified in ip_wput_nondata */
8021 8022 mp1 = mp->b_cont->b_cont;
8022 8023 sia = (struct sioc_addrreq *)mp1->b_rptr;
8023 8024 sin = (sin_t *)&sia->sa_addr;
8024 8025 switch (sin->sin_family) {
8025 8026 case AF_INET6: {
8026 8027 sin6_t *sin6 = (sin6_t *)sin;
8027 8028
8028 8029 if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
8029 8030 ipaddr_t v4_addr;
8030 8031
8031 8032 IN6_V4MAPPED_TO_IPADDR(&sin6->sin6_addr,
8032 8033 v4_addr);
8033 8034 ire = ire_ftable_lookup_v4(v4_addr, 0, 0,
8034 8035 IRE_LOCAL|IRE_LOOPBACK, NULL, zoneid, NULL,
8035 8036 MATCH_IRE_TYPE | MATCH_IRE_ZONEONLY, 0, ipst, NULL);
8036 8037 } else {
8037 8038 in6_addr_t v6addr;
8038 8039
8039 8040 v6addr = sin6->sin6_addr;
8040 8041 ire = ire_ftable_lookup_v6(&v6addr, 0, 0,
8041 8042 IRE_LOCAL|IRE_LOOPBACK, NULL, zoneid, NULL,
8042 8043 MATCH_IRE_TYPE | MATCH_IRE_ZONEONLY, 0, ipst, NULL);
8043 8044 }
8044 8045 break;
8045 8046 }
8046 8047 case AF_INET: {
8047 8048 ipaddr_t v4addr;
8048 8049
8049 8050 v4addr = sin->sin_addr.s_addr;
8050 8051 ire = ire_ftable_lookup_v4(v4addr, 0, 0,
8051 8052 IRE_LOCAL|IRE_LOOPBACK, NULL, zoneid,
8052 8053 NULL, MATCH_IRE_TYPE | MATCH_IRE_ZONEONLY, 0, ipst, NULL);
8053 8054 break;
8054 8055 }
8055 8056 default:
8056 8057 return (EAFNOSUPPORT);
8057 8058 }
8058 8059 if (ire != NULL) {
8059 8060 sia->sa_res = 1;
8060 8061 ire_refrele(ire);
8061 8062 } else {
8062 8063 sia->sa_res = 0;
8063 8064 }
8064 8065 return (0);
8065 8066 }
8066 8067
8067 8068 /*
8068 8069 * Check if this is an address assigned on-link i.e. neighbor,
8069 8070 * and makes sure it's reachable from the current zone.
8070 8071 * Returns true for my addresses as well.
8071 8072 * Translates mapped addresses to v4 addresses and then
8072 8073 * treats them as such, returning true if the v4 address
8073 8074 * associated with this mapped address is configured.
8074 8075 * Note: Applications will have to be careful what they do
8075 8076 * with the response; use of mapped addresses limits
8076 8077 * what can be done with the socket, especially with
8077 8078 * respect to socket options and ioctls - neither IPv4
8078 8079 * options nor IPv6 sticky options/ancillary data options
8079 8080 * may be used.
8080 8081 */
8081 8082 /* ARGSUSED */
8082 8083 int
8083 8084 ip_sioctl_tonlink(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q, mblk_t *mp,
8084 8085 ip_ioctl_cmd_t *ipip, void *duymmy_ifreq)
8085 8086 {
8086 8087 struct sioc_addrreq *sia;
8087 8088 sin_t *sin;
8088 8089 mblk_t *mp1;
8089 8090 ire_t *ire = NULL;
8090 8091 zoneid_t zoneid;
8091 8092 ip_stack_t *ipst;
8092 8093
8093 8094 ip1dbg(("ip_sioctl_tonlink"));
8094 8095
8095 8096 ASSERT(q->q_next == NULL); /* this ioctl not allowed if ip is module */
8096 8097 zoneid = Q_TO_CONN(q)->conn_zoneid;
8097 8098 ipst = CONNQ_TO_IPST(q);
8098 8099
8099 8100 /* Existence verified in ip_wput_nondata */
8100 8101 mp1 = mp->b_cont->b_cont;
8101 8102 sia = (struct sioc_addrreq *)mp1->b_rptr;
8102 8103 sin = (sin_t *)&sia->sa_addr;
8103 8104
8104 8105 /*
8105 8106 * We check for IRE_ONLINK and exclude IRE_BROADCAST|IRE_MULTICAST
8106 8107 * to make sure we only look at on-link unicast address.
8107 8108 */
8108 8109 switch (sin->sin_family) {
8109 8110 case AF_INET6: {
8110 8111 sin6_t *sin6 = (sin6_t *)sin;
8111 8112
8112 8113 if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
8113 8114 ipaddr_t v4_addr;
8114 8115
8115 8116 IN6_V4MAPPED_TO_IPADDR(&sin6->sin6_addr,
8116 8117 v4_addr);
8117 8118 if (!CLASSD(v4_addr)) {
8118 8119 ire = ire_ftable_lookup_v4(v4_addr, 0, 0, 0,
8119 8120 NULL, zoneid, NULL, MATCH_IRE_DSTONLY,
8120 8121 0, ipst, NULL);
8121 8122 }
8122 8123 } else {
8123 8124 in6_addr_t v6addr;
8124 8125
8125 8126 v6addr = sin6->sin6_addr;
8126 8127 if (!IN6_IS_ADDR_MULTICAST(&v6addr)) {
8127 8128 ire = ire_ftable_lookup_v6(&v6addr, 0, 0, 0,
8128 8129 NULL, zoneid, NULL, MATCH_IRE_DSTONLY, 0,
8129 8130 ipst, NULL);
8130 8131 }
8131 8132 }
8132 8133 break;
8133 8134 }
8134 8135 case AF_INET: {
8135 8136 ipaddr_t v4addr;
8136 8137
8137 8138 v4addr = sin->sin_addr.s_addr;
8138 8139 if (!CLASSD(v4addr)) {
8139 8140 ire = ire_ftable_lookup_v4(v4addr, 0, 0, 0, NULL,
8140 8141 zoneid, NULL, MATCH_IRE_DSTONLY, 0, ipst, NULL);
8141 8142 }
8142 8143 break;
8143 8144 }
8144 8145 default:
8145 8146 return (EAFNOSUPPORT);
8146 8147 }
8147 8148 sia->sa_res = 0;
8148 8149 if (ire != NULL) {
8149 8150 ASSERT(!(ire->ire_type & IRE_MULTICAST));
8150 8151
8151 8152 if ((ire->ire_type & IRE_ONLINK) &&
8152 8153 !(ire->ire_type & IRE_BROADCAST))
8153 8154 sia->sa_res = 1;
8154 8155 ire_refrele(ire);
8155 8156 }
8156 8157 return (0);
8157 8158 }
8158 8159
8159 8160 /*
8160 8161 * TBD: implement when kernel maintaines a list of site prefixes.
8161 8162 */
8162 8163 /* ARGSUSED */
8163 8164 int
8164 8165 ip_sioctl_tmysite(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
8165 8166 ip_ioctl_cmd_t *ipip, void *ifreq)
8166 8167 {
8167 8168 return (ENXIO);
8168 8169 }
8169 8170
8170 8171 /* ARP IOCTLs. */
8171 8172 /* ARGSUSED */
8172 8173 int
8173 8174 ip_sioctl_arp(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
8174 8175 ip_ioctl_cmd_t *ipip, void *dummy_ifreq)
8175 8176 {
8176 8177 int err;
8177 8178 ipaddr_t ipaddr;
8178 8179 struct iocblk *iocp;
8179 8180 conn_t *connp;
8180 8181 struct arpreq *ar;
8181 8182 struct xarpreq *xar;
8182 8183 int arp_flags, flags, alength;
8183 8184 uchar_t *lladdr;
8184 8185 ip_stack_t *ipst;
8185 8186 ill_t *ill = ipif->ipif_ill;
8186 8187 ill_t *proxy_ill = NULL;
8187 8188 ipmp_arpent_t *entp = NULL;
8188 8189 boolean_t proxyarp = B_FALSE;
8189 8190 boolean_t if_arp_ioctl = B_FALSE;
8190 8191 ncec_t *ncec = NULL;
8191 8192 nce_t *nce;
8192 8193
8193 8194 ASSERT(!(q->q_flag & QREADR) && q->q_next == NULL);
8194 8195 connp = Q_TO_CONN(q);
8195 8196 ipst = connp->conn_netstack->netstack_ip;
8196 8197 iocp = (struct iocblk *)mp->b_rptr;
8197 8198
8198 8199 if (ipip->ipi_cmd_type == XARP_CMD) {
8199 8200 /* We have a chain - M_IOCTL-->MI_COPY_MBLK-->XARPREQ_MBLK */
8200 8201 xar = (struct xarpreq *)mp->b_cont->b_cont->b_rptr;
8201 8202 ar = NULL;
8202 8203
8203 8204 arp_flags = xar->xarp_flags;
8204 8205 lladdr = (uchar_t *)LLADDR(&xar->xarp_ha);
8205 8206 if_arp_ioctl = (xar->xarp_ha.sdl_nlen != 0);
8206 8207 /*
8207 8208 * Validate against user's link layer address length
8208 8209 * input and name and addr length limits.
8209 8210 */
8210 8211 alength = ill->ill_phys_addr_length;
8211 8212 if (ipip->ipi_cmd == SIOCSXARP) {
8212 8213 if (alength != xar->xarp_ha.sdl_alen ||
8213 8214 (alength + xar->xarp_ha.sdl_nlen >
8214 8215 sizeof (xar->xarp_ha.sdl_data)))
8215 8216 return (EINVAL);
8216 8217 }
8217 8218 } else {
8218 8219 /* We have a chain - M_IOCTL-->MI_COPY_MBLK-->ARPREQ_MBLK */
8219 8220 ar = (struct arpreq *)mp->b_cont->b_cont->b_rptr;
8220 8221 xar = NULL;
8221 8222
8222 8223 arp_flags = ar->arp_flags;
8223 8224 lladdr = (uchar_t *)ar->arp_ha.sa_data;
8224 8225 /*
8225 8226 * Theoretically, the sa_family could tell us what link
8226 8227 * layer type this operation is trying to deal with. By
8227 8228 * common usage AF_UNSPEC means ethernet. We'll assume
8228 8229 * any attempt to use the SIOC?ARP ioctls is for ethernet,
8229 8230 * for now. Our new SIOC*XARP ioctls can be used more
8230 8231 * generally.
8231 8232 *
8232 8233 * If the underlying media happens to have a non 6 byte
8233 8234 * address, arp module will fail set/get, but the del
8234 8235 * operation will succeed.
8235 8236 */
8236 8237 alength = 6;
8237 8238 if ((ipip->ipi_cmd != SIOCDARP) &&
8238 8239 (alength != ill->ill_phys_addr_length)) {
8239 8240 return (EINVAL);
8240 8241 }
8241 8242 }
8242 8243
8243 8244 /* Translate ATF* flags to NCE* flags */
8244 8245 flags = 0;
8245 8246 if (arp_flags & ATF_AUTHORITY)
8246 8247 flags |= NCE_F_AUTHORITY;
8247 8248 if (arp_flags & ATF_PERM)
8248 8249 flags |= NCE_F_NONUD; /* not subject to aging */
8249 8250 if (arp_flags & ATF_PUBL)
8250 8251 flags |= NCE_F_PUBLISH;
8251 8252
8252 8253 /*
8253 8254 * IPMP ARP special handling:
8254 8255 *
8255 8256 * 1. Since ARP mappings must appear consistent across the group,
8256 8257 * prohibit changing ARP mappings on the underlying interfaces.
8257 8258 *
8258 8259 * 2. Since ARP mappings for IPMP data addresses are maintained by
8259 8260 * IP itself, prohibit changing them.
8260 8261 *
8261 8262 * 3. For proxy ARP, use a functioning hardware address in the group,
8262 8263 * provided one exists. If one doesn't, just add the entry as-is;
8263 8264 * ipmp_illgrp_refresh_arpent() will refresh it if things change.
8264 8265 */
8265 8266 if (IS_UNDER_IPMP(ill)) {
8266 8267 if (ipip->ipi_cmd != SIOCGARP && ipip->ipi_cmd != SIOCGXARP)
8267 8268 return (EPERM);
8268 8269 }
8269 8270 if (IS_IPMP(ill)) {
8270 8271 ipmp_illgrp_t *illg = ill->ill_grp;
8271 8272
8272 8273 switch (ipip->ipi_cmd) {
8273 8274 case SIOCSARP:
8274 8275 case SIOCSXARP:
8275 8276 proxy_ill = ipmp_illgrp_find_ill(illg, lladdr, alength);
8276 8277 if (proxy_ill != NULL) {
8277 8278 proxyarp = B_TRUE;
8278 8279 if (!ipmp_ill_is_active(proxy_ill))
8279 8280 proxy_ill = ipmp_illgrp_next_ill(illg);
8280 8281 if (proxy_ill != NULL)
8281 8282 lladdr = proxy_ill->ill_phys_addr;
8282 8283 }
8283 8284 /* FALLTHRU */
8284 8285 }
8285 8286 }
8286 8287
8287 8288 ipaddr = sin->sin_addr.s_addr;
8288 8289 /*
8289 8290 * don't match across illgrp per case (1) and (2).
8290 8291 * XXX use IS_IPMP(ill) like ndp_sioc_update?
8291 8292 */
8292 8293 nce = nce_lookup_v4(ill, &ipaddr);
8293 8294 if (nce != NULL)
8294 8295 ncec = nce->nce_common;
8295 8296
8296 8297 switch (iocp->ioc_cmd) {
8297 8298 case SIOCDARP:
8298 8299 case SIOCDXARP: {
8299 8300 /*
8300 8301 * Delete the NCE if any.
8301 8302 */
8302 8303 if (ncec == NULL) {
8303 8304 iocp->ioc_error = ENXIO;
8304 8305 break;
8305 8306 }
8306 8307 /* Don't allow changes to arp mappings of local addresses. */
8307 8308 if (NCE_MYADDR(ncec)) {
8308 8309 nce_refrele(nce);
8309 8310 return (ENOTSUP);
8310 8311 }
8311 8312 iocp->ioc_error = 0;
8312 8313
8313 8314 /*
8314 8315 * Delete the nce_common which has ncec_ill set to ipmp_ill.
8315 8316 * This will delete all the nce entries on the under_ills.
8316 8317 */
8317 8318 ncec_delete(ncec);
8318 8319 /*
8319 8320 * Once the NCE has been deleted, then the ire_dep* consistency
8320 8321 * mechanism will find any IRE which depended on the now
8321 8322 * condemned NCE (as part of sending packets).
8322 8323 * That mechanism handles redirects by deleting redirects
8323 8324 * that refer to UNREACHABLE nces.
8324 8325 */
8325 8326 break;
8326 8327 }
8327 8328 case SIOCGARP:
8328 8329 case SIOCGXARP:
8329 8330 if (ncec != NULL) {
8330 8331 lladdr = ncec->ncec_lladdr;
8331 8332 flags = ncec->ncec_flags;
8332 8333 iocp->ioc_error = 0;
8333 8334 ip_sioctl_garp_reply(mp, ncec->ncec_ill, lladdr, flags);
8334 8335 } else {
8335 8336 iocp->ioc_error = ENXIO;
8336 8337 }
8337 8338 break;
8338 8339 case SIOCSARP:
8339 8340 case SIOCSXARP:
8340 8341 /* Don't allow changes to arp mappings of local addresses. */
8341 8342 if (ncec != NULL && NCE_MYADDR(ncec)) {
8342 8343 nce_refrele(nce);
8343 8344 return (ENOTSUP);
8344 8345 }
8345 8346
8346 8347 /* static arp entries will undergo NUD if ATF_PERM is not set */
8347 8348 flags |= NCE_F_STATIC;
8348 8349 if (!if_arp_ioctl) {
8349 8350 ip_nce_lookup_and_update(&ipaddr, NULL, ipst,
8350 8351 lladdr, alength, flags);
8351 8352 } else {
8352 8353 ipif_t *ipif = ipif_get_next_ipif(NULL, ill);
8353 8354 if (ipif != NULL) {
8354 8355 ip_nce_lookup_and_update(&ipaddr, ipif, ipst,
8355 8356 lladdr, alength, flags);
8356 8357 ipif_refrele(ipif);
8357 8358 }
8358 8359 }
8359 8360 if (nce != NULL) {
8360 8361 nce_refrele(nce);
8361 8362 nce = NULL;
8362 8363 }
8363 8364 /*
8364 8365 * NCE_F_STATIC entries will be added in state ND_REACHABLE
8365 8366 * by nce_add_common()
8366 8367 */
8367 8368 err = nce_lookup_then_add_v4(ill, lladdr,
8368 8369 ill->ill_phys_addr_length, &ipaddr, flags, ND_UNCHANGED,
8369 8370 &nce);
8370 8371 if (err == EEXIST) {
8371 8372 ncec = nce->nce_common;
8372 8373 mutex_enter(&ncec->ncec_lock);
8373 8374 ncec->ncec_state = ND_REACHABLE;
8374 8375 ncec->ncec_flags = flags;
8375 8376 nce_update(ncec, ND_UNCHANGED, lladdr);
8376 8377 mutex_exit(&ncec->ncec_lock);
8377 8378 err = 0;
8378 8379 }
8379 8380 if (nce != NULL) {
8380 8381 nce_refrele(nce);
8381 8382 nce = NULL;
8382 8383 }
8383 8384 if (IS_IPMP(ill) && err == 0) {
8384 8385 entp = ipmp_illgrp_create_arpent(ill->ill_grp,
8385 8386 proxyarp, ipaddr, lladdr, ill->ill_phys_addr_length,
8386 8387 flags);
8387 8388 if (entp == NULL || (proxyarp && proxy_ill == NULL)) {
8388 8389 iocp->ioc_error = (entp == NULL ? ENOMEM : 0);
8389 8390 break;
8390 8391 }
8391 8392 }
8392 8393 iocp->ioc_error = err;
8393 8394 }
8394 8395
8395 8396 if (nce != NULL) {
8396 8397 nce_refrele(nce);
8397 8398 }
8398 8399
8399 8400 /*
8400 8401 * If we created an IPMP ARP entry, mark that we've notified ARP.
8401 8402 */
8402 8403 if (entp != NULL)
8403 8404 ipmp_illgrp_mark_arpent(ill->ill_grp, entp);
8404 8405
8405 8406 return (iocp->ioc_error);
8406 8407 }
8407 8408
8408 8409 /*
8409 8410 * Parse an [x]arpreq structure coming down SIOC[GSD][X]ARP ioctls, identify
8410 8411 * the associated sin and refhold and return the associated ipif via `ci'.
8411 8412 */
8412 8413 int
8413 8414 ip_extract_arpreq(queue_t *q, mblk_t *mp, const ip_ioctl_cmd_t *ipip,
8414 8415 cmd_info_t *ci)
8415 8416 {
8416 8417 mblk_t *mp1;
8417 8418 sin_t *sin;
8418 8419 conn_t *connp;
8419 8420 ipif_t *ipif;
8420 8421 ire_t *ire = NULL;
8421 8422 ill_t *ill = NULL;
8422 8423 boolean_t exists;
8423 8424 ip_stack_t *ipst;
8424 8425 struct arpreq *ar;
8425 8426 struct xarpreq *xar;
8426 8427 struct sockaddr_dl *sdl;
8427 8428
8428 8429 /* ioctl comes down on a conn */
8429 8430 ASSERT(!(q->q_flag & QREADR) && q->q_next == NULL);
8430 8431 connp = Q_TO_CONN(q);
8431 8432 if (connp->conn_family == AF_INET6)
8432 8433 return (ENXIO);
8433 8434
8434 8435 ipst = connp->conn_netstack->netstack_ip;
8435 8436
8436 8437 /* Verified in ip_wput_nondata */
8437 8438 mp1 = mp->b_cont->b_cont;
8438 8439
8439 8440 if (ipip->ipi_cmd_type == XARP_CMD) {
8440 8441 ASSERT(MBLKL(mp1) >= sizeof (struct xarpreq));
8441 8442 xar = (struct xarpreq *)mp1->b_rptr;
8442 8443 sin = (sin_t *)&xar->xarp_pa;
8443 8444 sdl = &xar->xarp_ha;
8444 8445
8445 8446 if (sdl->sdl_family != AF_LINK || sin->sin_family != AF_INET)
8446 8447 return (ENXIO);
8447 8448 if (sdl->sdl_nlen >= LIFNAMSIZ)
8448 8449 return (EINVAL);
8449 8450 } else {
8450 8451 ASSERT(ipip->ipi_cmd_type == ARP_CMD);
8451 8452 ASSERT(MBLKL(mp1) >= sizeof (struct arpreq));
8452 8453 ar = (struct arpreq *)mp1->b_rptr;
8453 8454 sin = (sin_t *)&ar->arp_pa;
8454 8455 }
8455 8456
8456 8457 if (ipip->ipi_cmd_type == XARP_CMD && sdl->sdl_nlen != 0) {
8457 8458 ipif = ipif_lookup_on_name(sdl->sdl_data, sdl->sdl_nlen,
8458 8459 B_FALSE, &exists, B_FALSE, ALL_ZONES, ipst);
8459 8460 if (ipif == NULL)
8460 8461 return (ENXIO);
8461 8462 if (ipif->ipif_id != 0) {
8462 8463 ipif_refrele(ipif);
8463 8464 return (ENXIO);
8464 8465 }
8465 8466 } else {
8466 8467 /*
8467 8468 * Either an SIOC[DGS]ARP or an SIOC[DGS]XARP with an sdl_nlen
8468 8469 * of 0: use the IP address to find the ipif. If the IP
8469 8470 * address is an IPMP test address, ire_ftable_lookup() will
8470 8471 * find the wrong ill, so we first do an ipif_lookup_addr().
8471 8472 */
8472 8473 ipif = ipif_lookup_addr(sin->sin_addr.s_addr, NULL, ALL_ZONES,
8473 8474 ipst);
8474 8475 if (ipif == NULL) {
8475 8476 ire = ire_ftable_lookup_v4(sin->sin_addr.s_addr,
8476 8477 0, 0, IRE_IF_RESOLVER, NULL, ALL_ZONES,
8477 8478 NULL, MATCH_IRE_TYPE, 0, ipst, NULL);
8478 8479 if (ire == NULL || ((ill = ire->ire_ill) == NULL)) {
8479 8480 if (ire != NULL)
8480 8481 ire_refrele(ire);
8481 8482 return (ENXIO);
8482 8483 }
8483 8484 ASSERT(ire != NULL && ill != NULL);
8484 8485 ipif = ill->ill_ipif;
8485 8486 ipif_refhold(ipif);
8486 8487 ire_refrele(ire);
8487 8488 }
8488 8489 }
8489 8490
8490 8491 if (ipif->ipif_ill->ill_net_type != IRE_IF_RESOLVER) {
8491 8492 ipif_refrele(ipif);
8492 8493 return (ENXIO);
8493 8494 }
8494 8495
8495 8496 ci->ci_sin = sin;
8496 8497 ci->ci_ipif = ipif;
8497 8498 return (0);
8498 8499 }
8499 8500
8500 8501 /*
8501 8502 * Link or unlink the illgrp on IPMP meta-interface `ill' depending on the
8502 8503 * value of `ioccmd'. While an illgrp is linked to an ipmp_grp_t, it is
8503 8504 * accessible from that ipmp_grp_t, which means SIOCSLIFGROUPNAME can look it
8504 8505 * up and thus an ill can join that illgrp.
8505 8506 *
8506 8507 * We use I_PLINK/I_PUNLINK to do the link/unlink operations rather than
8507 8508 * open()/close() primarily because close() is not allowed to fail or block
8508 8509 * forever. On the other hand, I_PUNLINK *can* fail, and there's no reason
8509 8510 * why anyone should ever need to I_PUNLINK an in-use IPMP stream. To ensure
8510 8511 * symmetric behavior (e.g., doing an I_PLINK after and I_PUNLINK undoes the
8511 8512 * I_PUNLINK) we defer linking to I_PLINK. Separately, we also fail attempts
8512 8513 * to I_LINK since I_UNLINK is optional and we'd end up in an inconsistent
8513 8514 * state if I_UNLINK didn't occur.
8514 8515 *
8515 8516 * Note that for each plumb/unplumb operation, we may end up here more than
8516 8517 * once because of the way ifconfig works. However, it's OK to link the same
8517 8518 * illgrp more than once, or unlink an illgrp that's already unlinked.
8518 8519 */
8519 8520 static int
8520 8521 ip_sioctl_plink_ipmp(ill_t *ill, int ioccmd)
8521 8522 {
8522 8523 int err;
8523 8524 ip_stack_t *ipst = ill->ill_ipst;
8524 8525
8525 8526 ASSERT(IS_IPMP(ill));
8526 8527 ASSERT(IAM_WRITER_ILL(ill));
8527 8528
8528 8529 switch (ioccmd) {
8529 8530 case I_LINK:
8530 8531 return (ENOTSUP);
8531 8532
8532 8533 case I_PLINK:
8533 8534 rw_enter(&ipst->ips_ipmp_lock, RW_WRITER);
8534 8535 ipmp_illgrp_link_grp(ill->ill_grp, ill->ill_phyint->phyint_grp);
8535 8536 rw_exit(&ipst->ips_ipmp_lock);
8536 8537 break;
8537 8538
8538 8539 case I_PUNLINK:
8539 8540 /*
8540 8541 * Require all UP ipifs be brought down prior to unlinking the
8541 8542 * illgrp so any associated IREs (and other state) is torched.
8542 8543 */
8543 8544 if (ill->ill_ipif_up_count + ill->ill_ipif_dup_count > 0)
8544 8545 return (EBUSY);
8545 8546
8546 8547 /*
8547 8548 * NOTE: We hold ipmp_lock across the unlink to prevent a race
8548 8549 * with an SIOCSLIFGROUPNAME request from an ill trying to
8549 8550 * join this group. Specifically: ills trying to join grab
8550 8551 * ipmp_lock and bump a "pending join" counter checked by
8551 8552 * ipmp_illgrp_unlink_grp(). During the unlink no new pending
8552 8553 * joins can occur (since we have ipmp_lock). Once we drop
8553 8554 * ipmp_lock, subsequent SIOCSLIFGROUPNAME requests will not
8554 8555 * find the illgrp (since we unlinked it) and will return
8555 8556 * EAFNOSUPPORT. This will then take them back through the
8556 8557 * IPMP meta-interface plumbing logic in ifconfig, and thus
8557 8558 * back through I_PLINK above.
8558 8559 */
8559 8560 rw_enter(&ipst->ips_ipmp_lock, RW_WRITER);
8560 8561 err = ipmp_illgrp_unlink_grp(ill->ill_grp);
8561 8562 rw_exit(&ipst->ips_ipmp_lock);
8562 8563 return (err);
8563 8564 default:
8564 8565 break;
8565 8566 }
8566 8567 return (0);
8567 8568 }
8568 8569
8569 8570 /*
8570 8571 * Do I_PLINK/I_LINK or I_PUNLINK/I_UNLINK with consistency checks and also
8571 8572 * atomically set/clear the muxids. Also complete the ioctl by acking or
8572 8573 * naking it. Note that the code is structured such that the link type,
8573 8574 * whether it's persistent or not, is treated equally. ifconfig(1M) and
8574 8575 * its clones use the persistent link, while pppd(1M) and perhaps many
8575 8576 * other daemons may use non-persistent link. When combined with some
8576 8577 * ill_t states, linking and unlinking lower streams may be used as
8577 8578 * indicators of dynamic re-plumbing events [see PSARC/1999/348].
8578 8579 */
8579 8580 /* ARGSUSED */
8580 8581 void
8581 8582 ip_sioctl_plink(ipsq_t *ipsq, queue_t *q, mblk_t *mp, void *dummy_arg)
8582 8583 {
8583 8584 mblk_t *mp1;
8584 8585 struct linkblk *li;
8585 8586 int ioccmd = ((struct iocblk *)mp->b_rptr)->ioc_cmd;
8586 8587 int err = 0;
8587 8588
8588 8589 ASSERT(ioccmd == I_PLINK || ioccmd == I_PUNLINK ||
8589 8590 ioccmd == I_LINK || ioccmd == I_UNLINK);
8590 8591
8591 8592 mp1 = mp->b_cont; /* This is the linkblk info */
8592 8593 li = (struct linkblk *)mp1->b_rptr;
8593 8594
8594 8595 err = ip_sioctl_plink_ipmod(ipsq, q, mp, ioccmd, li);
8595 8596 if (err == EINPROGRESS)
8596 8597 return;
8597 8598 if (err == 0)
8598 8599 miocack(q, mp, 0, 0);
8599 8600 else
8600 8601 miocnak(q, mp, 0, err);
8601 8602
8602 8603 /* Conn was refheld in ip_sioctl_copyin_setup */
8603 8604 if (CONN_Q(q)) {
8604 8605 CONN_DEC_IOCTLREF(Q_TO_CONN(q));
8605 8606 CONN_OPER_PENDING_DONE(Q_TO_CONN(q));
8606 8607 }
8607 8608 }
8608 8609
8609 8610 /*
8610 8611 * Process I_{P}LINK and I_{P}UNLINK requests named by `ioccmd' and pointed to
8611 8612 * by `mp' and `li' for the IP module stream (if li->q_bot is in fact an IP
8612 8613 * module stream).
8613 8614 * Returns zero on success, EINPROGRESS if the operation is still pending, or
8614 8615 * an error code on failure.
8615 8616 */
8616 8617 static int
8617 8618 ip_sioctl_plink_ipmod(ipsq_t *ipsq, queue_t *q, mblk_t *mp, int ioccmd,
8618 8619 struct linkblk *li)
8619 8620 {
8620 8621 int err = 0;
8621 8622 ill_t *ill;
8622 8623 queue_t *ipwq, *dwq;
8623 8624 const char *name;
8624 8625 struct qinit *qinfo;
8625 8626 boolean_t islink = (ioccmd == I_PLINK || ioccmd == I_LINK);
8626 8627 boolean_t entered_ipsq = B_FALSE;
8627 8628 boolean_t is_ip = B_FALSE;
8628 8629 arl_t *arl;
8629 8630
8630 8631 /*
8631 8632 * Walk the lower stream to verify it's the IP module stream.
8632 8633 * The IP module is identified by its name, wput function,
8633 8634 * and non-NULL q_next. STREAMS ensures that the lower stream
8634 8635 * (li->l_qbot) will not vanish until this ioctl completes.
8635 8636 */
8636 8637 for (ipwq = li->l_qbot; ipwq != NULL; ipwq = ipwq->q_next) {
8637 8638 qinfo = ipwq->q_qinfo;
8638 8639 name = qinfo->qi_minfo->mi_idname;
8639 8640 if (name != NULL && strcmp(name, ip_mod_info.mi_idname) == 0 &&
8640 8641 qinfo->qi_putp != (pfi_t)ip_lwput && ipwq->q_next != NULL) {
8641 8642 is_ip = B_TRUE;
8642 8643 break;
8643 8644 }
8644 8645 if (name != NULL && strcmp(name, arp_mod_info.mi_idname) == 0 &&
8645 8646 qinfo->qi_putp != (pfi_t)ip_lwput && ipwq->q_next != NULL) {
8646 8647 break;
8647 8648 }
8648 8649 }
8649 8650
8650 8651 /*
8651 8652 * If this isn't an IP module stream, bail.
8652 8653 */
8653 8654 if (ipwq == NULL)
8654 8655 return (0);
8655 8656
8656 8657 if (!is_ip) {
8657 8658 arl = (arl_t *)ipwq->q_ptr;
8658 8659 ill = arl_to_ill(arl);
8659 8660 if (ill == NULL)
8660 8661 return (0);
8661 8662 } else {
8662 8663 ill = ipwq->q_ptr;
8663 8664 }
8664 8665 ASSERT(ill != NULL);
8665 8666
8666 8667 if (ipsq == NULL) {
8667 8668 ipsq = ipsq_try_enter(NULL, ill, q, mp, ip_sioctl_plink,
8668 8669 NEW_OP, B_FALSE);
8669 8670 if (ipsq == NULL) {
8670 8671 if (!is_ip)
8671 8672 ill_refrele(ill);
8672 8673 return (EINPROGRESS);
8673 8674 }
8674 8675 entered_ipsq = B_TRUE;
8675 8676 }
8676 8677 ASSERT(IAM_WRITER_ILL(ill));
8677 8678 mutex_enter(&ill->ill_lock);
8678 8679 if (!is_ip) {
8679 8680 if (islink && ill->ill_muxid == 0) {
8680 8681 /*
8681 8682 * Plumbing has to be done with IP plumbed first, arp
8682 8683 * second, but here we have arp being plumbed first.
8683 8684 */
8684 8685 mutex_exit(&ill->ill_lock);
8685 8686 if (entered_ipsq)
8686 8687 ipsq_exit(ipsq);
8687 8688 ill_refrele(ill);
8688 8689 return (EINVAL);
8689 8690 }
8690 8691 }
8691 8692 mutex_exit(&ill->ill_lock);
8692 8693 if (!is_ip) {
8693 8694 arl->arl_muxid = islink ? li->l_index : 0;
8694 8695 ill_refrele(ill);
8695 8696 goto done;
8696 8697 }
8697 8698
8698 8699 if (IS_IPMP(ill) && (err = ip_sioctl_plink_ipmp(ill, ioccmd)) != 0)
8699 8700 goto done;
8700 8701
8701 8702 /*
8702 8703 * As part of I_{P}LINKing, stash the number of downstream modules and
8703 8704 * the read queue of the module immediately below IP in the ill.
8704 8705 * These are used during the capability negotiation below.
8705 8706 */
8706 8707 ill->ill_lmod_rq = NULL;
8707 8708 ill->ill_lmod_cnt = 0;
8708 8709 if (islink && ((dwq = ipwq->q_next) != NULL)) {
8709 8710 ill->ill_lmod_rq = RD(dwq);
8710 8711 for (; dwq != NULL; dwq = dwq->q_next)
8711 8712 ill->ill_lmod_cnt++;
8712 8713 }
8713 8714
8714 8715 ill->ill_muxid = islink ? li->l_index : 0;
8715 8716
8716 8717 /*
8717 8718 * Mark the ipsq busy until the capability operations initiated below
8718 8719 * complete. The PLINK/UNLINK ioctl itself completes when our caller
8719 8720 * returns, but the capability operation may complete asynchronously
8720 8721 * much later.
8721 8722 */
8722 8723 ipsq_current_start(ipsq, ill->ill_ipif, ioccmd);
8723 8724 /*
8724 8725 * If there's at least one up ipif on this ill, then we're bound to
8725 8726 * the underlying driver via DLPI. In that case, renegotiate
8726 8727 * capabilities to account for any possible change in modules
8727 8728 * interposed between IP and the driver.
8728 8729 */
8729 8730 if (ill->ill_ipif_up_count > 0) {
8730 8731 if (islink)
8731 8732 ill_capability_probe(ill);
8732 8733 else
8733 8734 ill_capability_reset(ill, B_FALSE);
8734 8735 }
8735 8736 ipsq_current_finish(ipsq);
8736 8737 done:
8737 8738 if (entered_ipsq)
8738 8739 ipsq_exit(ipsq);
8739 8740
8740 8741 return (err);
8741 8742 }
8742 8743
8743 8744 /*
8744 8745 * Search the ioctl command in the ioctl tables and return a pointer
8745 8746 * to the ioctl command information. The ioctl command tables are
8746 8747 * static and fully populated at compile time.
8747 8748 */
8748 8749 ip_ioctl_cmd_t *
8749 8750 ip_sioctl_lookup(int ioc_cmd)
8750 8751 {
8751 8752 int index;
8752 8753 ip_ioctl_cmd_t *ipip;
8753 8754 ip_ioctl_cmd_t *ipip_end;
8754 8755
8755 8756 if (ioc_cmd == IPI_DONTCARE)
8756 8757 return (NULL);
8757 8758
8758 8759 /*
8759 8760 * Do a 2 step search. First search the indexed table
8760 8761 * based on the least significant byte of the ioctl cmd.
8761 8762 * If we don't find a match, then search the misc table
8762 8763 * serially.
8763 8764 */
8764 8765 index = ioc_cmd & 0xFF;
8765 8766 if (index < ip_ndx_ioctl_count) {
8766 8767 ipip = &ip_ndx_ioctl_table[index];
8767 8768 if (ipip->ipi_cmd == ioc_cmd) {
8768 8769 /* Found a match in the ndx table */
8769 8770 return (ipip);
8770 8771 }
8771 8772 }
8772 8773
8773 8774 /* Search the misc table */
8774 8775 ipip_end = &ip_misc_ioctl_table[ip_misc_ioctl_count];
8775 8776 for (ipip = ip_misc_ioctl_table; ipip < ipip_end; ipip++) {
8776 8777 if (ipip->ipi_cmd == ioc_cmd)
8777 8778 /* Found a match in the misc table */
8778 8779 return (ipip);
8779 8780 }
8780 8781
8781 8782 return (NULL);
8782 8783 }
8783 8784
8784 8785 /*
8785 8786 * helper function for ip_sioctl_getsetprop(), which does some sanity checks
8786 8787 */
8787 8788 static boolean_t
8788 8789 getset_ioctl_checks(mblk_t *mp)
8789 8790 {
8790 8791 struct iocblk *iocp = (struct iocblk *)mp->b_rptr;
8791 8792 mblk_t *mp1 = mp->b_cont;
8792 8793 mod_ioc_prop_t *pioc;
8793 8794 uint_t flags;
8794 8795 uint_t pioc_size;
8795 8796
8796 8797 /* do sanity checks on various arguments */
8797 8798 if (mp1 == NULL || iocp->ioc_count == 0 ||
8798 8799 iocp->ioc_count == TRANSPARENT) {
8799 8800 return (B_FALSE);
8800 8801 }
8801 8802 if (msgdsize(mp1) < iocp->ioc_count) {
8802 8803 if (!pullupmsg(mp1, iocp->ioc_count))
8803 8804 return (B_FALSE);
8804 8805 }
8805 8806
8806 8807 pioc = (mod_ioc_prop_t *)mp1->b_rptr;
8807 8808
8808 8809 /* sanity checks on mpr_valsize */
8809 8810 pioc_size = sizeof (mod_ioc_prop_t);
8810 8811 if (pioc->mpr_valsize != 0)
8811 8812 pioc_size += pioc->mpr_valsize - 1;
8812 8813
8813 8814 if (iocp->ioc_count != pioc_size)
8814 8815 return (B_FALSE);
8815 8816
8816 8817 flags = pioc->mpr_flags;
8817 8818 if (iocp->ioc_cmd == SIOCSETPROP) {
8818 8819 /*
8819 8820 * One can either reset the value to it's default value or
8820 8821 * change the current value or append/remove the value from
8821 8822 * a multi-valued properties.
8822 8823 */
8823 8824 if ((flags & MOD_PROP_DEFAULT) != MOD_PROP_DEFAULT &&
8824 8825 flags != MOD_PROP_ACTIVE &&
8825 8826 flags != (MOD_PROP_ACTIVE|MOD_PROP_APPEND) &&
8826 8827 flags != (MOD_PROP_ACTIVE|MOD_PROP_REMOVE))
8827 8828 return (B_FALSE);
8828 8829 } else {
8829 8830 ASSERT(iocp->ioc_cmd == SIOCGETPROP);
8830 8831
8831 8832 /*
8832 8833 * One can retrieve only one kind of property information
8833 8834 * at a time.
8834 8835 */
8835 8836 if ((flags & MOD_PROP_ACTIVE) != MOD_PROP_ACTIVE &&
8836 8837 (flags & MOD_PROP_DEFAULT) != MOD_PROP_DEFAULT &&
8837 8838 (flags & MOD_PROP_POSSIBLE) != MOD_PROP_POSSIBLE &&
8838 8839 (flags & MOD_PROP_PERM) != MOD_PROP_PERM)
8839 8840 return (B_FALSE);
8840 8841 }
8841 8842
8842 8843 return (B_TRUE);
8843 8844 }
8844 8845
8845 8846 /*
8846 8847 * process the SIOC{SET|GET}PROP ioctl's
8847 8848 */
8848 8849 /* ARGSUSED */
8849 8850 static void
8850 8851 ip_sioctl_getsetprop(queue_t *q, mblk_t *mp)
8851 8852 {
8852 8853 struct iocblk *iocp = (struct iocblk *)mp->b_rptr;
8853 8854 mblk_t *mp1 = mp->b_cont;
8854 8855 mod_ioc_prop_t *pioc;
8855 8856 mod_prop_info_t *ptbl = NULL, *pinfo = NULL;
8856 8857 ip_stack_t *ipst;
8857 8858 icmp_stack_t *is;
8858 8859 tcp_stack_t *tcps;
8859 8860 sctp_stack_t *sctps;
8860 8861 udp_stack_t *us;
8861 8862 netstack_t *stack;
8862 8863 void *cbarg;
8863 8864 cred_t *cr;
8864 8865 boolean_t set;
8865 8866 int err;
8866 8867
8867 8868 ASSERT(q->q_next == NULL);
8868 8869 ASSERT(CONN_Q(q));
8869 8870
8870 8871 if (!getset_ioctl_checks(mp)) {
8871 8872 miocnak(q, mp, 0, EINVAL);
8872 8873 return;
8873 8874 }
8874 8875 ipst = CONNQ_TO_IPST(q);
8875 8876 stack = ipst->ips_netstack;
8876 8877 pioc = (mod_ioc_prop_t *)mp1->b_rptr;
8877 8878
8878 8879 switch (pioc->mpr_proto) {
8879 8880 case MOD_PROTO_IP:
8880 8881 case MOD_PROTO_IPV4:
8881 8882 case MOD_PROTO_IPV6:
8882 8883 ptbl = ipst->ips_propinfo_tbl;
8883 8884 cbarg = ipst;
8884 8885 break;
8885 8886 case MOD_PROTO_RAWIP:
8886 8887 is = stack->netstack_icmp;
8887 8888 ptbl = is->is_propinfo_tbl;
8888 8889 cbarg = is;
8889 8890 break;
8890 8891 case MOD_PROTO_TCP:
8891 8892 tcps = stack->netstack_tcp;
8892 8893 ptbl = tcps->tcps_propinfo_tbl;
8893 8894 cbarg = tcps;
8894 8895 break;
8895 8896 case MOD_PROTO_UDP:
8896 8897 us = stack->netstack_udp;
8897 8898 ptbl = us->us_propinfo_tbl;
8898 8899 cbarg = us;
8899 8900 break;
8900 8901 case MOD_PROTO_SCTP:
8901 8902 sctps = stack->netstack_sctp;
8902 8903 ptbl = sctps->sctps_propinfo_tbl;
8903 8904 cbarg = sctps;
8904 8905 break;
8905 8906 default:
8906 8907 miocnak(q, mp, 0, EINVAL);
8907 8908 return;
8908 8909 }
8909 8910
8910 8911 /* search for given property in respective protocol propinfo table */
8911 8912 for (pinfo = ptbl; pinfo->mpi_name != NULL; pinfo++) {
8912 8913 if (strcmp(pinfo->mpi_name, pioc->mpr_name) == 0 &&
8913 8914 pinfo->mpi_proto == pioc->mpr_proto)
8914 8915 break;
8915 8916 }
8916 8917 if (pinfo->mpi_name == NULL) {
8917 8918 miocnak(q, mp, 0, ENOENT);
8918 8919 return;
8919 8920 }
8920 8921
8921 8922 set = (iocp->ioc_cmd == SIOCSETPROP) ? B_TRUE : B_FALSE;
8922 8923 if (set && pinfo->mpi_setf != NULL) {
8923 8924 cr = msg_getcred(mp, NULL);
8924 8925 if (cr == NULL)
8925 8926 cr = iocp->ioc_cr;
8926 8927 err = pinfo->mpi_setf(cbarg, cr, pinfo, pioc->mpr_ifname,
8927 8928 pioc->mpr_val, pioc->mpr_flags);
8928 8929 } else if (!set && pinfo->mpi_getf != NULL) {
8929 8930 err = pinfo->mpi_getf(cbarg, pinfo, pioc->mpr_ifname,
8930 8931 pioc->mpr_val, pioc->mpr_valsize, pioc->mpr_flags);
8931 8932 } else {
8932 8933 err = EPERM;
8933 8934 }
8934 8935
8935 8936 if (err != 0) {
8936 8937 miocnak(q, mp, 0, err);
8937 8938 } else {
8938 8939 if (set)
8939 8940 miocack(q, mp, 0, 0);
8940 8941 else /* For get, we need to return back the data */
8941 8942 miocack(q, mp, iocp->ioc_count, 0);
8942 8943 }
8943 8944 }
8944 8945
8945 8946 /*
8946 8947 * process the legacy ND_GET, ND_SET ioctl just for {ip|ip6}_forwarding
8947 8948 * as several routing daemons have unfortunately used this 'unpublished'
8948 8949 * but well-known ioctls.
8949 8950 */
8950 8951 /* ARGSUSED */
8951 8952 static void
8952 8953 ip_process_legacy_nddprop(queue_t *q, mblk_t *mp)
8953 8954 {
8954 8955 struct iocblk *iocp = (struct iocblk *)mp->b_rptr;
8955 8956 mblk_t *mp1 = mp->b_cont;
8956 8957 char *pname, *pval, *buf;
8957 8958 uint_t bufsize, proto;
8958 8959 mod_prop_info_t *ptbl = NULL, *pinfo = NULL;
8959 8960 ip_stack_t *ipst;
8960 8961 int err = 0;
8961 8962
8962 8963 ASSERT(CONN_Q(q));
8963 8964 ipst = CONNQ_TO_IPST(q);
8964 8965
8965 8966 if (iocp->ioc_count == 0 || mp1 == NULL) {
8966 8967 miocnak(q, mp, 0, EINVAL);
8967 8968 return;
8968 8969 }
8969 8970
8970 8971 mp1->b_datap->db_lim[-1] = '\0'; /* Force null termination */
8971 8972 pval = buf = pname = (char *)mp1->b_rptr;
8972 8973 bufsize = MBLKL(mp1);
8973 8974
8974 8975 if (strcmp(pname, "ip_forwarding") == 0) {
8975 8976 pname = "forwarding";
8976 8977 proto = MOD_PROTO_IPV4;
8977 8978 } else if (strcmp(pname, "ip6_forwarding") == 0) {
8978 8979 pname = "forwarding";
8979 8980 proto = MOD_PROTO_IPV6;
8980 8981 } else {
8981 8982 miocnak(q, mp, 0, EINVAL);
8982 8983 return;
8983 8984 }
8984 8985
8985 8986 ptbl = ipst->ips_propinfo_tbl;
8986 8987 for (pinfo = ptbl; pinfo->mpi_name != NULL; pinfo++) {
8987 8988 if (strcmp(pinfo->mpi_name, pname) == 0 &&
8988 8989 pinfo->mpi_proto == proto)
8989 8990 break;
8990 8991 }
8991 8992
8992 8993 ASSERT(pinfo->mpi_name != NULL);
8993 8994
8994 8995 switch (iocp->ioc_cmd) {
8995 8996 case ND_GET:
8996 8997 if ((err = pinfo->mpi_getf(ipst, pinfo, NULL, buf, bufsize,
8997 8998 0)) == 0) {
8998 8999 miocack(q, mp, iocp->ioc_count, 0);
8999 9000 return;
9000 9001 }
9001 9002 break;
9002 9003 case ND_SET:
9003 9004 /*
9004 9005 * buffer will have property name and value in the following
9005 9006 * format,
9006 9007 * <property name>'\0'<property value>'\0', extract them;
9007 9008 */
9008 9009 while (*pval++)
9009 9010 noop;
9010 9011
9011 9012 if (!*pval || pval >= (char *)mp1->b_wptr) {
9012 9013 err = EINVAL;
9013 9014 } else if ((err = pinfo->mpi_setf(ipst, NULL, pinfo, NULL,
9014 9015 pval, 0)) == 0) {
9015 9016 miocack(q, mp, 0, 0);
9016 9017 return;
9017 9018 }
9018 9019 break;
9019 9020 default:
9020 9021 err = EINVAL;
9021 9022 break;
9022 9023 }
9023 9024 miocnak(q, mp, 0, err);
9024 9025 }
9025 9026
9026 9027 /*
9027 9028 * Wrapper function for resuming deferred ioctl processing
9028 9029 * Used for SIOCGDSTINFO, SIOCGIP6ADDRPOLICY, SIOCGMSFILTER,
9029 9030 * SIOCSMSFILTER, SIOCGIPMSFILTER, and SIOCSIPMSFILTER currently.
9030 9031 */
9031 9032 /* ARGSUSED */
9032 9033 void
9033 9034 ip_sioctl_copyin_resume(ipsq_t *dummy_ipsq, queue_t *q, mblk_t *mp,
9034 9035 void *dummy_arg)
9035 9036 {
9036 9037 ip_sioctl_copyin_setup(q, mp);
9037 9038 }
9038 9039
9039 9040 /*
9040 9041 * ip_sioctl_copyin_setup is called by ip_wput_nondata with any M_IOCTL message
9041 9042 * that arrives. Most of the IOCTLs are "socket" IOCTLs which we handle
9042 9043 * in either I_STR or TRANSPARENT form, using the mi_copy facility.
9043 9044 * We establish here the size of the block to be copied in. mi_copyin
9044 9045 * arranges for this to happen, an processing continues in ip_wput_nondata with
9045 9046 * an M_IOCDATA message.
9046 9047 */
9047 9048 void
9048 9049 ip_sioctl_copyin_setup(queue_t *q, mblk_t *mp)
9049 9050 {
9050 9051 int copyin_size;
9051 9052 struct iocblk *iocp = (struct iocblk *)mp->b_rptr;
9052 9053 ip_ioctl_cmd_t *ipip;
9053 9054 cred_t *cr;
9054 9055 ip_stack_t *ipst;
9055 9056
9056 9057 if (CONN_Q(q))
9057 9058 ipst = CONNQ_TO_IPST(q);
9058 9059 else
9059 9060 ipst = ILLQ_TO_IPST(q);
9060 9061
9061 9062 ipip = ip_sioctl_lookup(iocp->ioc_cmd);
9062 9063 if (ipip == NULL) {
9063 9064 /*
9064 9065 * The ioctl is not one we understand or own.
9065 9066 * Pass it along to be processed down stream,
9066 9067 * if this is a module instance of IP, else nak
9067 9068 * the ioctl.
9068 9069 */
9069 9070 if (q->q_next == NULL) {
9070 9071 goto nak;
9071 9072 } else {
9072 9073 putnext(q, mp);
9073 9074 return;
9074 9075 }
9075 9076 }
9076 9077
9077 9078 /*
9078 9079 * If this is deferred, then we will do all the checks when we
9079 9080 * come back.
9080 9081 */
9081 9082 if ((iocp->ioc_cmd == SIOCGDSTINFO ||
9082 9083 iocp->ioc_cmd == SIOCGIP6ADDRPOLICY) && !ip6_asp_can_lookup(ipst)) {
9083 9084 ip6_asp_pending_op(q, mp, ip_sioctl_copyin_resume);
9084 9085 return;
9085 9086 }
9086 9087
9087 9088 /*
9088 9089 * Only allow a very small subset of IP ioctls on this stream if
9089 9090 * IP is a module and not a driver. Allowing ioctls to be processed
9090 9091 * in this case may cause assert failures or data corruption.
9091 9092 * Typically G[L]IFFLAGS, SLIFNAME/IF_UNITSEL are the only few
9092 9093 * ioctls allowed on an IP module stream, after which this stream
9093 9094 * normally becomes a multiplexor (at which time the stream head
9094 9095 * will fail all ioctls).
9095 9096 */
9096 9097 if ((q->q_next != NULL) && !(ipip->ipi_flags & IPI_MODOK)) {
9097 9098 goto nak;
9098 9099 }
9099 9100
9100 9101 /* Make sure we have ioctl data to process. */
9101 9102 if (mp->b_cont == NULL && !(ipip->ipi_flags & IPI_NULL_BCONT))
9102 9103 goto nak;
9103 9104
9104 9105 /*
9105 9106 * Prefer dblk credential over ioctl credential; some synthesized
9106 9107 * ioctls have kcred set because there's no way to crhold()
9107 9108 * a credential in some contexts. (ioc_cr is not crfree() by
9108 9109 * the framework; the caller of ioctl needs to hold the reference
9109 9110 * for the duration of the call).
9110 9111 */
9111 9112 cr = msg_getcred(mp, NULL);
9112 9113 if (cr == NULL)
9113 9114 cr = iocp->ioc_cr;
9114 9115
9115 9116 /* Make sure normal users don't send down privileged ioctls */
9116 9117 if ((ipip->ipi_flags & IPI_PRIV) &&
9117 9118 (cr != NULL) && secpolicy_ip_config(cr, B_TRUE) != 0) {
9118 9119 /* We checked the privilege earlier but log it here */
9119 9120 miocnak(q, mp, 0, secpolicy_ip_config(cr, B_FALSE));
9120 9121 return;
9121 9122 }
9122 9123
9123 9124 /*
9124 9125 * The ioctl command tables can only encode fixed length
9125 9126 * ioctl data. If the length is variable, the table will
9126 9127 * encode the length as zero. Such special cases are handled
9127 9128 * below in the switch.
9128 9129 */
9129 9130 if (ipip->ipi_copyin_size != 0) {
9130 9131 mi_copyin(q, mp, NULL, ipip->ipi_copyin_size);
9131 9132 return;
9132 9133 }
9133 9134
9134 9135 switch (iocp->ioc_cmd) {
9135 9136 case O_SIOCGIFCONF:
9136 9137 case SIOCGIFCONF:
9137 9138 /*
9138 9139 * This IOCTL is hilarious. See comments in
9139 9140 * ip_sioctl_get_ifconf for the story.
9140 9141 */
9141 9142 if (iocp->ioc_count == TRANSPARENT)
9142 9143 copyin_size = SIZEOF_STRUCT(ifconf,
9143 9144 iocp->ioc_flag);
9144 9145 else
9145 9146 copyin_size = iocp->ioc_count;
9146 9147 mi_copyin(q, mp, NULL, copyin_size);
9147 9148 return;
9148 9149
9149 9150 case O_SIOCGLIFCONF:
9150 9151 case SIOCGLIFCONF:
9151 9152 copyin_size = SIZEOF_STRUCT(lifconf, iocp->ioc_flag);
9152 9153 mi_copyin(q, mp, NULL, copyin_size);
9153 9154 return;
9154 9155
9155 9156 case SIOCGLIFSRCOF:
9156 9157 copyin_size = SIZEOF_STRUCT(lifsrcof, iocp->ioc_flag);
9157 9158 mi_copyin(q, mp, NULL, copyin_size);
9158 9159 return;
9159 9160
9160 9161 case SIOCGIP6ADDRPOLICY:
9161 9162 ip_sioctl_ip6addrpolicy(q, mp);
9162 9163 ip6_asp_table_refrele(ipst);
9163 9164 return;
9164 9165
9165 9166 case SIOCSIP6ADDRPOLICY:
9166 9167 ip_sioctl_ip6addrpolicy(q, mp);
9167 9168 return;
9168 9169
9169 9170 case SIOCGDSTINFO:
9170 9171 ip_sioctl_dstinfo(q, mp);
9171 9172 ip6_asp_table_refrele(ipst);
9172 9173 return;
9173 9174
9174 9175 case ND_SET:
9175 9176 case ND_GET:
9176 9177 ip_process_legacy_nddprop(q, mp);
9177 9178 return;
9178 9179
9179 9180 case SIOCSETPROP:
9180 9181 case SIOCGETPROP:
9181 9182 ip_sioctl_getsetprop(q, mp);
9182 9183 return;
9183 9184
9184 9185 case I_PLINK:
9185 9186 case I_PUNLINK:
9186 9187 case I_LINK:
9187 9188 case I_UNLINK:
9188 9189 /*
9189 9190 * We treat non-persistent link similarly as the persistent
9190 9191 * link case, in terms of plumbing/unplumbing, as well as
9191 9192 * dynamic re-plumbing events indicator. See comments
9192 9193 * in ip_sioctl_plink() for more.
9193 9194 *
9194 9195 * Request can be enqueued in the 'ipsq' while waiting
9195 9196 * to become exclusive. So bump up the conn ref.
9196 9197 */
9197 9198 if (CONN_Q(q)) {
9198 9199 CONN_INC_REF(Q_TO_CONN(q));
9199 9200 CONN_INC_IOCTLREF(Q_TO_CONN(q))
9200 9201 }
9201 9202 ip_sioctl_plink(NULL, q, mp, NULL);
9202 9203 return;
9203 9204
9204 9205 case IP_IOCTL:
9205 9206 ip_wput_ioctl(q, mp);
9206 9207 return;
9207 9208
9208 9209 case SIOCILB:
9209 9210 /* The ioctl length varies depending on the ILB command. */
9210 9211 copyin_size = iocp->ioc_count;
9211 9212 if (copyin_size < sizeof (ilb_cmd_t))
9212 9213 goto nak;
9213 9214 mi_copyin(q, mp, NULL, copyin_size);
9214 9215 return;
9215 9216
9216 9217 default:
9217 9218 cmn_err(CE_PANIC, "should not happen ");
9218 9219 }
9219 9220 nak:
9220 9221 if (mp->b_cont != NULL) {
9221 9222 freemsg(mp->b_cont);
9222 9223 mp->b_cont = NULL;
9223 9224 }
9224 9225 iocp->ioc_error = EINVAL;
9225 9226 mp->b_datap->db_type = M_IOCNAK;
9226 9227 iocp->ioc_count = 0;
9227 9228 qreply(q, mp);
9228 9229 }
9229 9230
9230 9231 static void
9231 9232 ip_sioctl_garp_reply(mblk_t *mp, ill_t *ill, void *hwaddr, int flags)
9232 9233 {
9233 9234 struct arpreq *ar;
9234 9235 struct xarpreq *xar;
9235 9236 mblk_t *tmp;
9236 9237 struct iocblk *iocp;
9237 9238 int x_arp_ioctl = B_FALSE;
9238 9239 int *flagsp;
9239 9240 char *storage = NULL;
9240 9241
9241 9242 ASSERT(ill != NULL);
9242 9243
9243 9244 iocp = (struct iocblk *)mp->b_rptr;
9244 9245 ASSERT(iocp->ioc_cmd == SIOCGXARP || iocp->ioc_cmd == SIOCGARP);
9245 9246
9246 9247 tmp = (mp->b_cont)->b_cont; /* xarpreq/arpreq */
9247 9248 if ((iocp->ioc_cmd == SIOCGXARP) ||
9248 9249 (iocp->ioc_cmd == SIOCSXARP)) {
9249 9250 x_arp_ioctl = B_TRUE;
9250 9251 xar = (struct xarpreq *)tmp->b_rptr;
9251 9252 flagsp = &xar->xarp_flags;
9252 9253 storage = xar->xarp_ha.sdl_data;
9253 9254 } else {
9254 9255 ar = (struct arpreq *)tmp->b_rptr;
9255 9256 flagsp = &ar->arp_flags;
9256 9257 storage = ar->arp_ha.sa_data;
9257 9258 }
9258 9259
9259 9260 /*
9260 9261 * We're done if this is not an SIOCG{X}ARP
9261 9262 */
9262 9263 if (x_arp_ioctl) {
9263 9264 storage += ill_xarp_info(&xar->xarp_ha, ill);
9264 9265 if ((ill->ill_phys_addr_length + ill->ill_name_length) >
9265 9266 sizeof (xar->xarp_ha.sdl_data)) {
9266 9267 iocp->ioc_error = EINVAL;
9267 9268 return;
9268 9269 }
9269 9270 }
9270 9271 *flagsp = ATF_INUSE;
9271 9272 /*
9272 9273 * If /sbin/arp told us we are the authority using the "permanent"
9273 9274 * flag, or if this is one of my addresses print "permanent"
9274 9275 * in the /sbin/arp output.
9275 9276 */
9276 9277 if ((flags & NCE_F_MYADDR) || (flags & NCE_F_AUTHORITY))
9277 9278 *flagsp |= ATF_AUTHORITY;
9278 9279 if (flags & NCE_F_NONUD)
9279 9280 *flagsp |= ATF_PERM; /* not subject to aging */
9280 9281 if (flags & NCE_F_PUBLISH)
9281 9282 *flagsp |= ATF_PUBL;
9282 9283 if (hwaddr != NULL) {
9283 9284 *flagsp |= ATF_COM;
9284 9285 bcopy((char *)hwaddr, storage, ill->ill_phys_addr_length);
9285 9286 }
9286 9287 }
9287 9288
9288 9289 /*
9289 9290 * Create a new logical interface. If ipif_id is zero (i.e. not a logical
9290 9291 * interface) create the next available logical interface for this
9291 9292 * physical interface.
9292 9293 * If ipif is NULL (i.e. the lookup didn't find one) attempt to create an
9293 9294 * ipif with the specified name.
9294 9295 *
9295 9296 * If the address family is not AF_UNSPEC then set the address as well.
9296 9297 *
9297 9298 * If ip_sioctl_addr returns EINPROGRESS then the ioctl (the copyout)
9298 9299 * is completed when the DL_BIND_ACK arrive in ip_rput_dlpi_writer.
9299 9300 *
9300 9301 * Executed as a writer on the ill.
9301 9302 * So no lock is needed to traverse the ipif chain, or examine the
9302 9303 * phyint flags.
9303 9304 */
9304 9305 /* ARGSUSED */
9305 9306 int
9306 9307 ip_sioctl_addif(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q, mblk_t *mp,
9307 9308 ip_ioctl_cmd_t *dummy_ipip, void *dummy_ifreq)
9308 9309 {
9309 9310 mblk_t *mp1;
9310 9311 struct lifreq *lifr;
9311 9312 boolean_t isv6;
9312 9313 boolean_t exists;
9313 9314 char *name;
9314 9315 char *endp;
9315 9316 char *cp;
9316 9317 int namelen;
9317 9318 ipif_t *ipif;
9318 9319 long id;
9319 9320 ipsq_t *ipsq;
9320 9321 ill_t *ill;
9321 9322 sin_t *sin;
9322 9323 int err = 0;
9323 9324 boolean_t found_sep = B_FALSE;
9324 9325 conn_t *connp;
9325 9326 zoneid_t zoneid;
9326 9327 ip_stack_t *ipst = CONNQ_TO_IPST(q);
9327 9328
9328 9329 ASSERT(q->q_next == NULL);
9329 9330 ip1dbg(("ip_sioctl_addif\n"));
9330 9331 /* Existence of mp1 has been checked in ip_wput_nondata */
9331 9332 mp1 = mp->b_cont->b_cont;
9332 9333 /*
9333 9334 * Null terminate the string to protect against buffer
9334 9335 * overrun. String was generated by user code and may not
9335 9336 * be trusted.
9336 9337 */
9337 9338 lifr = (struct lifreq *)mp1->b_rptr;
9338 9339 lifr->lifr_name[LIFNAMSIZ - 1] = '\0';
9339 9340 name = lifr->lifr_name;
9340 9341 ASSERT(CONN_Q(q));
9341 9342 connp = Q_TO_CONN(q);
9342 9343 isv6 = (connp->conn_family == AF_INET6);
9343 9344 zoneid = connp->conn_zoneid;
9344 9345 namelen = mi_strlen(name);
9345 9346 if (namelen == 0)
9346 9347 return (EINVAL);
9347 9348
9348 9349 exists = B_FALSE;
9349 9350 if ((namelen + 1 == sizeof (ipif_loopback_name)) &&
9350 9351 (mi_strcmp(name, ipif_loopback_name) == 0)) {
9351 9352 /*
9352 9353 * Allow creating lo0 using SIOCLIFADDIF.
9353 9354 * can't be any other writer thread. So can pass null below
9354 9355 * for the last 4 args to ipif_lookup_name.
9355 9356 */
9356 9357 ipif = ipif_lookup_on_name(lifr->lifr_name, namelen, B_TRUE,
9357 9358 &exists, isv6, zoneid, ipst);
9358 9359 /* Prevent any further action */
9359 9360 if (ipif == NULL) {
9360 9361 return (ENOBUFS);
9361 9362 } else if (!exists) {
9362 9363 /* We created the ipif now and as writer */
9363 9364 ipif_refrele(ipif);
9364 9365 return (0);
9365 9366 } else {
9366 9367 ill = ipif->ipif_ill;
9367 9368 ill_refhold(ill);
9368 9369 ipif_refrele(ipif);
9369 9370 }
9370 9371 } else {
9371 9372 /* Look for a colon in the name. */
9372 9373 endp = &name[namelen];
9373 9374 for (cp = endp; --cp > name; ) {
9374 9375 if (*cp == IPIF_SEPARATOR_CHAR) {
9375 9376 found_sep = B_TRUE;
9376 9377 /*
9377 9378 * Reject any non-decimal aliases for plumbing
9378 9379 * of logical interfaces. Aliases with leading
9379 9380 * zeroes are also rejected as they introduce
9380 9381 * ambiguity in the naming of the interfaces.
9381 9382 * Comparing with "0" takes care of all such
9382 9383 * cases.
9383 9384 */
9384 9385 if ((strncmp("0", cp+1, 1)) == 0)
9385 9386 return (EINVAL);
9386 9387
9387 9388 if (ddi_strtol(cp+1, &endp, 10, &id) != 0 ||
9388 9389 id <= 0 || *endp != '\0') {
9389 9390 return (EINVAL);
9390 9391 }
9391 9392 *cp = '\0';
9392 9393 break;
9393 9394 }
9394 9395 }
9395 9396 ill = ill_lookup_on_name(name, B_FALSE, isv6, NULL, ipst);
9396 9397 if (found_sep)
9397 9398 *cp = IPIF_SEPARATOR_CHAR;
9398 9399 if (ill == NULL)
9399 9400 return (ENXIO);
9400 9401 }
9401 9402
9402 9403 ipsq = ipsq_try_enter(NULL, ill, q, mp, ip_process_ioctl, NEW_OP,
9403 9404 B_TRUE);
9404 9405
9405 9406 /*
9406 9407 * Release the refhold due to the lookup, now that we are excl
9407 9408 * or we are just returning
9408 9409 */
9409 9410 ill_refrele(ill);
9410 9411
9411 9412 if (ipsq == NULL)
9412 9413 return (EINPROGRESS);
9413 9414
9414 9415 /* We are now exclusive on the IPSQ */
9415 9416 ASSERT(IAM_WRITER_ILL(ill));
9416 9417
9417 9418 if (found_sep) {
9418 9419 /* Now see if there is an IPIF with this unit number. */
9419 9420 for (ipif = ill->ill_ipif; ipif != NULL;
9420 9421 ipif = ipif->ipif_next) {
9421 9422 if (ipif->ipif_id == id) {
9422 9423 err = EEXIST;
9423 9424 goto done;
9424 9425 }
9425 9426 }
9426 9427 }
9427 9428
9428 9429 /*
9429 9430 * We use IRE_LOCAL for lo0:1 etc. for "receive only" use
9430 9431 * of lo0. Plumbing for lo0:0 happens in ipif_lookup_on_name()
9431 9432 * instead.
9432 9433 */
9433 9434 if ((ipif = ipif_allocate(ill, found_sep ? id : -1, IRE_LOCAL,
9434 9435 B_TRUE, B_TRUE, &err)) == NULL) {
9435 9436 goto done;
9436 9437 }
9437 9438
9438 9439 /* Return created name with ioctl */
9439 9440 (void) sprintf(lifr->lifr_name, "%s%c%d", ill->ill_name,
9440 9441 IPIF_SEPARATOR_CHAR, ipif->ipif_id);
9441 9442 ip1dbg(("created %s\n", lifr->lifr_name));
9442 9443
9443 9444 /* Set address */
9444 9445 sin = (sin_t *)&lifr->lifr_addr;
9445 9446 if (sin->sin_family != AF_UNSPEC) {
9446 9447 err = ip_sioctl_addr(ipif, sin, q, mp,
9447 9448 &ip_ndx_ioctl_table[SIOCLIFADDR_NDX], lifr);
9448 9449 }
9449 9450
9450 9451 done:
9451 9452 ipsq_exit(ipsq);
9452 9453 return (err);
9453 9454 }
9454 9455
9455 9456 /*
9456 9457 * Remove an existing logical interface. If ipif_id is zero (i.e. not a logical
9457 9458 * interface) delete it based on the IP address (on this physical interface).
9458 9459 * Otherwise delete it based on the ipif_id.
9459 9460 * Also, special handling to allow a removeif of lo0.
9460 9461 */
9461 9462 /* ARGSUSED */
9462 9463 int
9463 9464 ip_sioctl_removeif(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
9464 9465 ip_ioctl_cmd_t *ipip, void *dummy_if_req)
9465 9466 {
9466 9467 conn_t *connp;
9467 9468 ill_t *ill = ipif->ipif_ill;
9468 9469 boolean_t success;
9469 9470 ip_stack_t *ipst;
9470 9471
9471 9472 ipst = CONNQ_TO_IPST(q);
9472 9473
9473 9474 ASSERT(q->q_next == NULL);
9474 9475 ip1dbg(("ip_sioctl_remove_if(%s:%u %p)\n",
9475 9476 ill->ill_name, ipif->ipif_id, (void *)ipif));
9476 9477 ASSERT(IAM_WRITER_IPIF(ipif));
9477 9478
9478 9479 connp = Q_TO_CONN(q);
9479 9480 /*
9480 9481 * Special case for unplumbing lo0 (the loopback physical interface).
9481 9482 * If unplumbing lo0, the incoming address structure has been
9482 9483 * initialized to all zeros. When unplumbing lo0, all its logical
9483 9484 * interfaces must be removed too.
9484 9485 *
9485 9486 * Note that this interface may be called to remove a specific
9486 9487 * loopback logical interface (eg, lo0:1). But in that case
9487 9488 * ipif->ipif_id != 0 so that the code path for that case is the
9488 9489 * same as any other interface (meaning it skips the code directly
9489 9490 * below).
9490 9491 */
9491 9492 if (ipif->ipif_id == 0 && ill->ill_net_type == IRE_LOOPBACK) {
9492 9493 if (sin->sin_family == AF_UNSPEC &&
9493 9494 (IN6_IS_ADDR_UNSPECIFIED(&((sin6_t *)sin)->sin6_addr))) {
9494 9495 /*
9495 9496 * Mark it condemned. No new ref. will be made to ill.
9496 9497 */
9497 9498 mutex_enter(&ill->ill_lock);
9498 9499 ill->ill_state_flags |= ILL_CONDEMNED;
9499 9500 for (ipif = ill->ill_ipif; ipif != NULL;
9500 9501 ipif = ipif->ipif_next) {
9501 9502 ipif->ipif_state_flags |= IPIF_CONDEMNED;
9502 9503 }
9503 9504 mutex_exit(&ill->ill_lock);
9504 9505
9505 9506 ipif = ill->ill_ipif;
9506 9507 /* unplumb the loopback interface */
9507 9508 ill_delete(ill);
9508 9509 mutex_enter(&connp->conn_lock);
9509 9510 mutex_enter(&ill->ill_lock);
9510 9511
9511 9512 /* Are any references to this ill active */
9512 9513 if (ill_is_freeable(ill)) {
9513 9514 mutex_exit(&ill->ill_lock);
9514 9515 mutex_exit(&connp->conn_lock);
9515 9516 ill_delete_tail(ill);
9516 9517 mi_free(ill);
9517 9518 return (0);
9518 9519 }
9519 9520 success = ipsq_pending_mp_add(connp, ipif,
9520 9521 CONNP_TO_WQ(connp), mp, ILL_FREE);
9521 9522 mutex_exit(&connp->conn_lock);
9522 9523 mutex_exit(&ill->ill_lock);
9523 9524 if (success)
9524 9525 return (EINPROGRESS);
9525 9526 else
9526 9527 return (EINTR);
9527 9528 }
9528 9529 }
9529 9530
9530 9531 if (ipif->ipif_id == 0) {
9531 9532 ipsq_t *ipsq;
9532 9533
9533 9534 /* Find based on address */
9534 9535 if (ipif->ipif_isv6) {
9535 9536 sin6_t *sin6;
9536 9537
9537 9538 if (sin->sin_family != AF_INET6)
9538 9539 return (EAFNOSUPPORT);
9539 9540
9540 9541 sin6 = (sin6_t *)sin;
9541 9542 /* We are a writer, so we should be able to lookup */
9542 9543 ipif = ipif_lookup_addr_exact_v6(&sin6->sin6_addr, ill,
9543 9544 ipst);
9544 9545 } else {
9545 9546 if (sin->sin_family != AF_INET)
9546 9547 return (EAFNOSUPPORT);
9547 9548
9548 9549 /* We are a writer, so we should be able to lookup */
9549 9550 ipif = ipif_lookup_addr_exact(sin->sin_addr.s_addr, ill,
9550 9551 ipst);
9551 9552 }
9552 9553 if (ipif == NULL) {
9553 9554 return (EADDRNOTAVAIL);
9554 9555 }
9555 9556
9556 9557 /*
9557 9558 * It is possible for a user to send an SIOCLIFREMOVEIF with
9558 9559 * lifr_name of the physical interface but with an ip address
9559 9560 * lifr_addr of a logical interface plumbed over it.
9560 9561 * So update ipx_current_ipif now that ipif points to the
9561 9562 * correct one.
9562 9563 */
9563 9564 ipsq = ipif->ipif_ill->ill_phyint->phyint_ipsq;
9564 9565 ipsq->ipsq_xop->ipx_current_ipif = ipif;
9565 9566
9566 9567 /* This is a writer */
9567 9568 ipif_refrele(ipif);
9568 9569 }
9569 9570
9570 9571 /*
9571 9572 * Can not delete instance zero since it is tied to the ill.
9572 9573 */
9573 9574 if (ipif->ipif_id == 0)
9574 9575 return (EBUSY);
9575 9576
9576 9577 mutex_enter(&ill->ill_lock);
9577 9578 ipif->ipif_state_flags |= IPIF_CONDEMNED;
9578 9579 mutex_exit(&ill->ill_lock);
9579 9580
9580 9581 ipif_free(ipif);
9581 9582
9582 9583 mutex_enter(&connp->conn_lock);
9583 9584 mutex_enter(&ill->ill_lock);
9584 9585
9585 9586 /* Are any references to this ipif active */
9586 9587 if (ipif_is_freeable(ipif)) {
9587 9588 mutex_exit(&ill->ill_lock);
9588 9589 mutex_exit(&connp->conn_lock);
9589 9590 ipif_non_duplicate(ipif);
9590 9591 (void) ipif_down_tail(ipif);
9591 9592 ipif_free_tail(ipif); /* frees ipif */
9592 9593 return (0);
9593 9594 }
9594 9595 success = ipsq_pending_mp_add(connp, ipif, CONNP_TO_WQ(connp), mp,
9595 9596 IPIF_FREE);
9596 9597 mutex_exit(&ill->ill_lock);
9597 9598 mutex_exit(&connp->conn_lock);
9598 9599 if (success)
9599 9600 return (EINPROGRESS);
9600 9601 else
9601 9602 return (EINTR);
9602 9603 }
9603 9604
9604 9605 /*
9605 9606 * Restart the removeif ioctl. The refcnt has gone down to 0.
9606 9607 * The ipif is already condemned. So can't find it thru lookups.
9607 9608 */
9608 9609 /* ARGSUSED */
9609 9610 int
9610 9611 ip_sioctl_removeif_restart(ipif_t *ipif, sin_t *dummy_sin, queue_t *q,
9611 9612 mblk_t *mp, ip_ioctl_cmd_t *ipip, void *dummy_if_req)
9612 9613 {
9613 9614 ill_t *ill = ipif->ipif_ill;
9614 9615
9615 9616 ASSERT(IAM_WRITER_IPIF(ipif));
9616 9617 ASSERT(ipif->ipif_state_flags & IPIF_CONDEMNED);
9617 9618
9618 9619 ip1dbg(("ip_sioctl_removeif_restart(%s:%u %p)\n",
9619 9620 ill->ill_name, ipif->ipif_id, (void *)ipif));
9620 9621
9621 9622 if (ipif->ipif_id == 0 && ill->ill_net_type == IRE_LOOPBACK) {
9622 9623 ASSERT(ill->ill_state_flags & ILL_CONDEMNED);
9623 9624 ill_delete_tail(ill);
9624 9625 mi_free(ill);
9625 9626 return (0);
9626 9627 }
9627 9628
9628 9629 ipif_non_duplicate(ipif);
9629 9630 (void) ipif_down_tail(ipif);
9630 9631 ipif_free_tail(ipif);
9631 9632
9632 9633 return (0);
9633 9634 }
9634 9635
9635 9636 /*
9636 9637 * Set the local interface address using the given prefix and ill_token.
9637 9638 */
9638 9639 /* ARGSUSED */
9639 9640 int
9640 9641 ip_sioctl_prefix(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
9641 9642 ip_ioctl_cmd_t *dummy_ipip, void *dummy_ifreq)
9642 9643 {
9643 9644 int err;
9644 9645 in6_addr_t v6addr;
9645 9646 sin6_t *sin6;
9646 9647 ill_t *ill;
9647 9648 int i;
9648 9649
9649 9650 ip1dbg(("ip_sioctl_prefix(%s:%u %p)\n",
9650 9651 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
9651 9652
9652 9653 ASSERT(IAM_WRITER_IPIF(ipif));
9653 9654
9654 9655 if (!ipif->ipif_isv6)
9655 9656 return (EINVAL);
9656 9657
9657 9658 if (sin->sin_family != AF_INET6)
9658 9659 return (EAFNOSUPPORT);
9659 9660
9660 9661 sin6 = (sin6_t *)sin;
9661 9662 v6addr = sin6->sin6_addr;
9662 9663 ill = ipif->ipif_ill;
9663 9664
9664 9665 if (IN6_IS_ADDR_UNSPECIFIED(&v6addr) ||
9665 9666 IN6_IS_ADDR_UNSPECIFIED(&ill->ill_token))
9666 9667 return (EADDRNOTAVAIL);
9667 9668
9668 9669 for (i = 0; i < 4; i++)
9669 9670 sin6->sin6_addr.s6_addr32[i] |= ill->ill_token.s6_addr32[i];
9670 9671
9671 9672 err = ip_sioctl_addr(ipif, sin, q, mp,
9672 9673 &ip_ndx_ioctl_table[SIOCLIFADDR_NDX], dummy_ifreq);
9673 9674 return (err);
9674 9675 }
9675 9676
9676 9677 /*
9677 9678 * Restart entry point to restart the address set operation after the
9678 9679 * refcounts have dropped to zero.
9679 9680 */
9680 9681 /* ARGSUSED */
9681 9682 int
9682 9683 ip_sioctl_prefix_restart(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
9683 9684 ip_ioctl_cmd_t *ipip, void *ifreq)
9684 9685 {
9685 9686 ip1dbg(("ip_sioctl_prefix_restart(%s:%u %p)\n",
9686 9687 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
9687 9688 return (ip_sioctl_addr_restart(ipif, sin, q, mp, ipip, ifreq));
9688 9689 }
9689 9690
9690 9691 /*
9691 9692 * Set the local interface address.
9692 9693 * Allow an address of all zero when the interface is down.
9693 9694 */
9694 9695 /* ARGSUSED */
9695 9696 int
9696 9697 ip_sioctl_addr(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
9697 9698 ip_ioctl_cmd_t *dummy_ipip, void *dummy_ifreq)
9698 9699 {
9699 9700 int err = 0;
9700 9701 in6_addr_t v6addr;
9701 9702 boolean_t need_up = B_FALSE;
9702 9703 ill_t *ill;
9703 9704 int i;
9704 9705
9705 9706 ip1dbg(("ip_sioctl_addr(%s:%u %p)\n",
9706 9707 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
9707 9708
9708 9709 ASSERT(IAM_WRITER_IPIF(ipif));
9709 9710
9710 9711 ill = ipif->ipif_ill;
9711 9712 if (ipif->ipif_isv6) {
9712 9713 sin6_t *sin6;
9713 9714 phyint_t *phyi;
9714 9715
9715 9716 if (sin->sin_family != AF_INET6)
9716 9717 return (EAFNOSUPPORT);
9717 9718
9718 9719 sin6 = (sin6_t *)sin;
9719 9720 v6addr = sin6->sin6_addr;
9720 9721 phyi = ill->ill_phyint;
9721 9722
9722 9723 /*
9723 9724 * Enforce that true multicast interfaces have a link-local
9724 9725 * address for logical unit 0.
9725 9726 *
9726 9727 * However for those ipif's for which link-local address was
9727 9728 * not created by default, also allow setting :: as the address.
9728 9729 * This scenario would arise, when we delete an address on ipif
9729 9730 * with logical unit 0, we would want to set :: as the address.
9730 9731 */
9731 9732 if (ipif->ipif_id == 0 &&
9732 9733 (ill->ill_flags & ILLF_MULTICAST) &&
9733 9734 !(ipif->ipif_flags & (IPIF_POINTOPOINT)) &&
9734 9735 !(phyi->phyint_flags & (PHYI_LOOPBACK)) &&
9735 9736 !IN6_IS_ADDR_LINKLOCAL(&v6addr)) {
9736 9737
9737 9738 /*
9738 9739 * if default link-local was not created by kernel for
9739 9740 * this ill, allow setting :: as the address on ipif:0.
9740 9741 */
9741 9742 if (ill->ill_flags & ILLF_NOLINKLOCAL) {
9742 9743 if (!IN6_IS_ADDR_UNSPECIFIED(&v6addr))
9743 9744 return (EADDRNOTAVAIL);
9744 9745 } else {
9745 9746 return (EADDRNOTAVAIL);
9746 9747 }
9747 9748 }
9748 9749
9749 9750 /*
9750 9751 * up interfaces shouldn't have the unspecified address
9751 9752 * unless they also have the IPIF_NOLOCAL flags set and
9752 9753 * have a subnet assigned.
9753 9754 */
9754 9755 if ((ipif->ipif_flags & IPIF_UP) &&
9755 9756 IN6_IS_ADDR_UNSPECIFIED(&v6addr) &&
9756 9757 (!(ipif->ipif_flags & IPIF_NOLOCAL) ||
9757 9758 IN6_IS_ADDR_UNSPECIFIED(&ipif->ipif_v6subnet))) {
9758 9759 return (EADDRNOTAVAIL);
9759 9760 }
9760 9761
9761 9762 if (!ip_local_addr_ok_v6(&v6addr, &ipif->ipif_v6net_mask))
9762 9763 return (EADDRNOTAVAIL);
9763 9764 } else {
9764 9765 ipaddr_t addr;
9765 9766
9766 9767 if (sin->sin_family != AF_INET)
9767 9768 return (EAFNOSUPPORT);
9768 9769
9769 9770 addr = sin->sin_addr.s_addr;
9770 9771
9771 9772 /* Allow INADDR_ANY as the local address. */
9772 9773 if (addr != INADDR_ANY &&
9773 9774 !ip_addr_ok_v4(addr, ipif->ipif_net_mask))
9774 9775 return (EADDRNOTAVAIL);
9775 9776
9776 9777 IN6_IPADDR_TO_V4MAPPED(addr, &v6addr);
9777 9778 }
9778 9779 /*
9779 9780 * verify that the address being configured is permitted by the
9780 9781 * ill_allowed_ips[] for the interface.
9781 9782 */
9782 9783 if (ill->ill_allowed_ips_cnt > 0) {
9783 9784 for (i = 0; i < ill->ill_allowed_ips_cnt; i++) {
9784 9785 if (IN6_ARE_ADDR_EQUAL(&ill->ill_allowed_ips[i],
9785 9786 &v6addr))
9786 9787 break;
9787 9788 }
9788 9789 if (i == ill->ill_allowed_ips_cnt) {
9789 9790 pr_addr_dbg("!allowed addr %s\n", AF_INET6, &v6addr);
9790 9791 return (EPERM);
9791 9792 }
9792 9793 }
9793 9794 /*
9794 9795 * Even if there is no change we redo things just to rerun
9795 9796 * ipif_set_default.
9796 9797 */
9797 9798 if (ipif->ipif_flags & IPIF_UP) {
9798 9799 /*
9799 9800 * Setting a new local address, make sure
9800 9801 * we have net and subnet bcast ire's for
9801 9802 * the old address if we need them.
9802 9803 */
9803 9804 /*
9804 9805 * If the interface is already marked up,
9805 9806 * we call ipif_down which will take care
9806 9807 * of ditching any IREs that have been set
9807 9808 * up based on the old interface address.
9808 9809 */
9809 9810 err = ipif_logical_down(ipif, q, mp);
9810 9811 if (err == EINPROGRESS)
9811 9812 return (err);
9812 9813 (void) ipif_down_tail(ipif);
9813 9814 need_up = 1;
9814 9815 }
9815 9816
9816 9817 err = ip_sioctl_addr_tail(ipif, sin, q, mp, need_up);
9817 9818 return (err);
9818 9819 }
9819 9820
9820 9821 int
9821 9822 ip_sioctl_addr_tail(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
9822 9823 boolean_t need_up)
9823 9824 {
9824 9825 in6_addr_t v6addr;
9825 9826 in6_addr_t ov6addr;
9826 9827 ipaddr_t addr;
9827 9828 sin6_t *sin6;
9828 9829 int sinlen;
9829 9830 int err = 0;
9830 9831 ill_t *ill = ipif->ipif_ill;
9831 9832 boolean_t need_dl_down;
9832 9833 boolean_t need_arp_down;
9833 9834 struct iocblk *iocp;
9834 9835
9835 9836 iocp = (mp != NULL) ? (struct iocblk *)mp->b_rptr : NULL;
9836 9837
9837 9838 ip1dbg(("ip_sioctl_addr_tail(%s:%u %p)\n",
9838 9839 ill->ill_name, ipif->ipif_id, (void *)ipif));
9839 9840 ASSERT(IAM_WRITER_IPIF(ipif));
9840 9841
9841 9842 /* Must cancel any pending timer before taking the ill_lock */
9842 9843 if (ipif->ipif_recovery_id != 0)
9843 9844 (void) untimeout(ipif->ipif_recovery_id);
9844 9845 ipif->ipif_recovery_id = 0;
9845 9846
9846 9847 if (ipif->ipif_isv6) {
9847 9848 sin6 = (sin6_t *)sin;
9848 9849 v6addr = sin6->sin6_addr;
9849 9850 sinlen = sizeof (struct sockaddr_in6);
9850 9851 } else {
9851 9852 addr = sin->sin_addr.s_addr;
9852 9853 IN6_IPADDR_TO_V4MAPPED(addr, &v6addr);
9853 9854 sinlen = sizeof (struct sockaddr_in);
9854 9855 }
9855 9856 mutex_enter(&ill->ill_lock);
9856 9857 ov6addr = ipif->ipif_v6lcl_addr;
9857 9858 ipif->ipif_v6lcl_addr = v6addr;
9858 9859 sctp_update_ipif_addr(ipif, ov6addr);
9859 9860 ipif->ipif_addr_ready = 0;
9860 9861
9861 9862 ip_rts_newaddrmsg(RTM_CHGADDR, 0, ipif, RTSQ_DEFAULT);
9862 9863
9863 9864 /*
9864 9865 * If the interface was previously marked as a duplicate, then since
9865 9866 * we've now got a "new" address, it should no longer be considered a
9866 9867 * duplicate -- even if the "new" address is the same as the old one.
9867 9868 * Note that if all ipifs are down, we may have a pending ARP down
9868 9869 * event to handle. This is because we want to recover from duplicates
9869 9870 * and thus delay tearing down ARP until the duplicates have been
9870 9871 * removed or disabled.
9871 9872 */
9872 9873 need_dl_down = need_arp_down = B_FALSE;
9873 9874 if (ipif->ipif_flags & IPIF_DUPLICATE) {
9874 9875 need_arp_down = !need_up;
9875 9876 ipif->ipif_flags &= ~IPIF_DUPLICATE;
9876 9877 if (--ill->ill_ipif_dup_count == 0 && !need_up &&
9877 9878 ill->ill_ipif_up_count == 0 && ill->ill_dl_up) {
9878 9879 need_dl_down = B_TRUE;
9879 9880 }
9880 9881 }
9881 9882
9882 9883 ipif_set_default(ipif);
9883 9884
9884 9885 /*
9885 9886 * If we've just manually set the IPv6 link-local address (0th ipif),
9886 9887 * tag the ill so that future updates to the interface ID don't result
9887 9888 * in this address getting automatically reconfigured from under the
9888 9889 * administrator.
9889 9890 */
9890 9891 if (ipif->ipif_isv6 && ipif->ipif_id == 0) {
9891 9892 if (iocp == NULL || (iocp->ioc_cmd == SIOCSLIFADDR &&
9892 9893 !IN6_IS_ADDR_UNSPECIFIED(&v6addr)))
9893 9894 ill->ill_manual_linklocal = 1;
9894 9895 }
9895 9896
9896 9897 /*
9897 9898 * When publishing an interface address change event, we only notify
9898 9899 * the event listeners of the new address. It is assumed that if they
9899 9900 * actively care about the addresses assigned that they will have
9900 9901 * already discovered the previous address assigned (if there was one.)
9901 9902 *
9902 9903 * Don't attach nic event message for SIOCLIFADDIF ioctl.
9903 9904 */
9904 9905 if (iocp != NULL && iocp->ioc_cmd != SIOCLIFADDIF) {
9905 9906 ill_nic_event_dispatch(ill, MAP_IPIF_ID(ipif->ipif_id),
9906 9907 NE_ADDRESS_CHANGE, sin, sinlen);
9907 9908 }
9908 9909
9909 9910 mutex_exit(&ill->ill_lock);
9910 9911
9911 9912 if (need_up) {
9912 9913 /*
9913 9914 * Now bring the interface back up. If this
9914 9915 * is the only IPIF for the ILL, ipif_up
9915 9916 * will have to re-bind to the device, so
9916 9917 * we may get back EINPROGRESS, in which
9917 9918 * case, this IOCTL will get completed in
9918 9919 * ip_rput_dlpi when we see the DL_BIND_ACK.
9919 9920 */
9920 9921 err = ipif_up(ipif, q, mp);
9921 9922 } else {
9922 9923 /* Perhaps ilgs should use this ill */
9923 9924 update_conn_ill(NULL, ill->ill_ipst);
9924 9925 }
9925 9926
9926 9927 if (need_dl_down)
9927 9928 ill_dl_down(ill);
9928 9929
9929 9930 if (need_arp_down && !ill->ill_isv6)
9930 9931 (void) ipif_arp_down(ipif);
9931 9932
9932 9933 /*
9933 9934 * The default multicast interface might have changed (for
9934 9935 * instance if the IPv6 scope of the address changed)
9935 9936 */
9936 9937 ire_increment_multicast_generation(ill->ill_ipst, ill->ill_isv6);
9937 9938
9938 9939 return (err);
9939 9940 }
9940 9941
9941 9942 /*
9942 9943 * Restart entry point to restart the address set operation after the
9943 9944 * refcounts have dropped to zero.
9944 9945 */
9945 9946 /* ARGSUSED */
9946 9947 int
9947 9948 ip_sioctl_addr_restart(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
9948 9949 ip_ioctl_cmd_t *ipip, void *ifreq)
9949 9950 {
9950 9951 ip1dbg(("ip_sioctl_addr_restart(%s:%u %p)\n",
9951 9952 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
9952 9953 ASSERT(IAM_WRITER_IPIF(ipif));
9953 9954 (void) ipif_down_tail(ipif);
9954 9955 return (ip_sioctl_addr_tail(ipif, sin, q, mp, B_TRUE));
9955 9956 }
9956 9957
9957 9958 /* ARGSUSED */
9958 9959 int
9959 9960 ip_sioctl_get_addr(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
9960 9961 ip_ioctl_cmd_t *ipip, void *if_req)
9961 9962 {
9962 9963 sin6_t *sin6 = (struct sockaddr_in6 *)sin;
9963 9964 struct lifreq *lifr = (struct lifreq *)if_req;
9964 9965
9965 9966 ip1dbg(("ip_sioctl_get_addr(%s:%u %p)\n",
9966 9967 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
9967 9968 /*
9968 9969 * The net mask and address can't change since we have a
9969 9970 * reference to the ipif. So no lock is necessary.
9970 9971 */
9971 9972 if (ipif->ipif_isv6) {
9972 9973 *sin6 = sin6_null;
9973 9974 sin6->sin6_family = AF_INET6;
9974 9975 sin6->sin6_addr = ipif->ipif_v6lcl_addr;
9975 9976 ASSERT(ipip->ipi_cmd_type == LIF_CMD);
9976 9977 lifr->lifr_addrlen =
9977 9978 ip_mask_to_plen_v6(&ipif->ipif_v6net_mask);
9978 9979 } else {
9979 9980 *sin = sin_null;
9980 9981 sin->sin_family = AF_INET;
9981 9982 sin->sin_addr.s_addr = ipif->ipif_lcl_addr;
9982 9983 if (ipip->ipi_cmd_type == LIF_CMD) {
9983 9984 lifr->lifr_addrlen =
9984 9985 ip_mask_to_plen(ipif->ipif_net_mask);
9985 9986 }
9986 9987 }
9987 9988 return (0);
9988 9989 }
9989 9990
9990 9991 /*
9991 9992 * Set the destination address for a pt-pt interface.
9992 9993 */
9993 9994 /* ARGSUSED */
9994 9995 int
9995 9996 ip_sioctl_dstaddr(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
9996 9997 ip_ioctl_cmd_t *ipip, void *if_req)
9997 9998 {
9998 9999 int err = 0;
9999 10000 in6_addr_t v6addr;
10000 10001 boolean_t need_up = B_FALSE;
10001 10002
10002 10003 ip1dbg(("ip_sioctl_dstaddr(%s:%u %p)\n",
10003 10004 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
10004 10005 ASSERT(IAM_WRITER_IPIF(ipif));
10005 10006
10006 10007 if (ipif->ipif_isv6) {
10007 10008 sin6_t *sin6;
10008 10009
10009 10010 if (sin->sin_family != AF_INET6)
10010 10011 return (EAFNOSUPPORT);
10011 10012
10012 10013 sin6 = (sin6_t *)sin;
10013 10014 v6addr = sin6->sin6_addr;
10014 10015
10015 10016 if (!ip_remote_addr_ok_v6(&v6addr, &ipif->ipif_v6net_mask))
10016 10017 return (EADDRNOTAVAIL);
10017 10018 } else {
10018 10019 ipaddr_t addr;
10019 10020
10020 10021 if (sin->sin_family != AF_INET)
10021 10022 return (EAFNOSUPPORT);
10022 10023
10023 10024 addr = sin->sin_addr.s_addr;
10024 10025 if (addr != INADDR_ANY &&
10025 10026 !ip_addr_ok_v4(addr, ipif->ipif_net_mask)) {
10026 10027 return (EADDRNOTAVAIL);
10027 10028 }
10028 10029
10029 10030 IN6_IPADDR_TO_V4MAPPED(addr, &v6addr);
10030 10031 }
10031 10032
10032 10033 if (IN6_ARE_ADDR_EQUAL(&ipif->ipif_v6pp_dst_addr, &v6addr))
10033 10034 return (0); /* No change */
10034 10035
10035 10036 if (ipif->ipif_flags & IPIF_UP) {
10036 10037 /*
10037 10038 * If the interface is already marked up,
10038 10039 * we call ipif_down which will take care
10039 10040 * of ditching any IREs that have been set
10040 10041 * up based on the old pp dst address.
10041 10042 */
10042 10043 err = ipif_logical_down(ipif, q, mp);
10043 10044 if (err == EINPROGRESS)
10044 10045 return (err);
10045 10046 (void) ipif_down_tail(ipif);
10046 10047 need_up = B_TRUE;
10047 10048 }
10048 10049 /*
10049 10050 * could return EINPROGRESS. If so ioctl will complete in
10050 10051 * ip_rput_dlpi_writer
10051 10052 */
10052 10053 err = ip_sioctl_dstaddr_tail(ipif, sin, q, mp, need_up);
10053 10054 return (err);
10054 10055 }
10055 10056
10056 10057 static int
10057 10058 ip_sioctl_dstaddr_tail(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10058 10059 boolean_t need_up)
10059 10060 {
10060 10061 in6_addr_t v6addr;
10061 10062 ill_t *ill = ipif->ipif_ill;
10062 10063 int err = 0;
10063 10064 boolean_t need_dl_down;
10064 10065 boolean_t need_arp_down;
10065 10066
10066 10067 ip1dbg(("ip_sioctl_dstaddr_tail(%s:%u %p)\n", ill->ill_name,
10067 10068 ipif->ipif_id, (void *)ipif));
10068 10069
10069 10070 /* Must cancel any pending timer before taking the ill_lock */
10070 10071 if (ipif->ipif_recovery_id != 0)
10071 10072 (void) untimeout(ipif->ipif_recovery_id);
10072 10073 ipif->ipif_recovery_id = 0;
10073 10074
10074 10075 if (ipif->ipif_isv6) {
10075 10076 sin6_t *sin6;
10076 10077
10077 10078 sin6 = (sin6_t *)sin;
10078 10079 v6addr = sin6->sin6_addr;
10079 10080 } else {
10080 10081 ipaddr_t addr;
10081 10082
10082 10083 addr = sin->sin_addr.s_addr;
10083 10084 IN6_IPADDR_TO_V4MAPPED(addr, &v6addr);
10084 10085 }
10085 10086 mutex_enter(&ill->ill_lock);
10086 10087 /* Set point to point destination address. */
10087 10088 if ((ipif->ipif_flags & IPIF_POINTOPOINT) == 0) {
10088 10089 /*
10089 10090 * Allow this as a means of creating logical
10090 10091 * pt-pt interfaces on top of e.g. an Ethernet.
10091 10092 * XXX Undocumented HACK for testing.
10092 10093 * pt-pt interfaces are created with NUD disabled.
10093 10094 */
10094 10095 ipif->ipif_flags |= IPIF_POINTOPOINT;
10095 10096 ipif->ipif_flags &= ~IPIF_BROADCAST;
10096 10097 if (ipif->ipif_isv6)
10097 10098 ill->ill_flags |= ILLF_NONUD;
10098 10099 }
10099 10100
10100 10101 /*
10101 10102 * If the interface was previously marked as a duplicate, then since
10102 10103 * we've now got a "new" address, it should no longer be considered a
10103 10104 * duplicate -- even if the "new" address is the same as the old one.
10104 10105 * Note that if all ipifs are down, we may have a pending ARP down
10105 10106 * event to handle.
10106 10107 */
10107 10108 need_dl_down = need_arp_down = B_FALSE;
10108 10109 if (ipif->ipif_flags & IPIF_DUPLICATE) {
10109 10110 need_arp_down = !need_up;
10110 10111 ipif->ipif_flags &= ~IPIF_DUPLICATE;
10111 10112 if (--ill->ill_ipif_dup_count == 0 && !need_up &&
10112 10113 ill->ill_ipif_up_count == 0 && ill->ill_dl_up) {
10113 10114 need_dl_down = B_TRUE;
10114 10115 }
10115 10116 }
10116 10117
10117 10118 /*
10118 10119 * If we've just manually set the IPv6 destination link-local address
10119 10120 * (0th ipif), tag the ill so that future updates to the destination
10120 10121 * interface ID (as can happen with interfaces over IP tunnels) don't
10121 10122 * result in this address getting automatically reconfigured from
10122 10123 * under the administrator.
10123 10124 */
10124 10125 if (ipif->ipif_isv6 && ipif->ipif_id == 0)
10125 10126 ill->ill_manual_dst_linklocal = 1;
10126 10127
10127 10128 /* Set the new address. */
10128 10129 ipif->ipif_v6pp_dst_addr = v6addr;
10129 10130 /* Make sure subnet tracks pp_dst */
10130 10131 ipif->ipif_v6subnet = ipif->ipif_v6pp_dst_addr;
10131 10132 mutex_exit(&ill->ill_lock);
10132 10133
10133 10134 if (need_up) {
10134 10135 /*
10135 10136 * Now bring the interface back up. If this
10136 10137 * is the only IPIF for the ILL, ipif_up
10137 10138 * will have to re-bind to the device, so
10138 10139 * we may get back EINPROGRESS, in which
10139 10140 * case, this IOCTL will get completed in
10140 10141 * ip_rput_dlpi when we see the DL_BIND_ACK.
10141 10142 */
10142 10143 err = ipif_up(ipif, q, mp);
10143 10144 }
10144 10145
10145 10146 if (need_dl_down)
10146 10147 ill_dl_down(ill);
10147 10148 if (need_arp_down && !ipif->ipif_isv6)
10148 10149 (void) ipif_arp_down(ipif);
10149 10150
10150 10151 return (err);
10151 10152 }
10152 10153
10153 10154 /*
10154 10155 * Restart entry point to restart the dstaddress set operation after the
10155 10156 * refcounts have dropped to zero.
10156 10157 */
10157 10158 /* ARGSUSED */
10158 10159 int
10159 10160 ip_sioctl_dstaddr_restart(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10160 10161 ip_ioctl_cmd_t *ipip, void *ifreq)
10161 10162 {
10162 10163 ip1dbg(("ip_sioctl_dstaddr_restart(%s:%u %p)\n",
10163 10164 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
10164 10165 (void) ipif_down_tail(ipif);
10165 10166 return (ip_sioctl_dstaddr_tail(ipif, sin, q, mp, B_TRUE));
10166 10167 }
10167 10168
10168 10169 /* ARGSUSED */
10169 10170 int
10170 10171 ip_sioctl_get_dstaddr(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10171 10172 ip_ioctl_cmd_t *ipip, void *if_req)
10172 10173 {
10173 10174 sin6_t *sin6 = (struct sockaddr_in6 *)sin;
10174 10175
10175 10176 ip1dbg(("ip_sioctl_get_dstaddr(%s:%u %p)\n",
10176 10177 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
10177 10178 /*
10178 10179 * Get point to point destination address. The addresses can't
10179 10180 * change since we hold a reference to the ipif.
10180 10181 */
10181 10182 if ((ipif->ipif_flags & IPIF_POINTOPOINT) == 0)
10182 10183 return (EADDRNOTAVAIL);
10183 10184
10184 10185 if (ipif->ipif_isv6) {
10185 10186 ASSERT(ipip->ipi_cmd_type == LIF_CMD);
10186 10187 *sin6 = sin6_null;
10187 10188 sin6->sin6_family = AF_INET6;
10188 10189 sin6->sin6_addr = ipif->ipif_v6pp_dst_addr;
10189 10190 } else {
10190 10191 *sin = sin_null;
10191 10192 sin->sin_family = AF_INET;
10192 10193 sin->sin_addr.s_addr = ipif->ipif_pp_dst_addr;
10193 10194 }
10194 10195 return (0);
10195 10196 }
10196 10197
10197 10198 /*
10198 10199 * Check which flags will change by the given flags being set
10199 10200 * silently ignore flags which userland is not allowed to control.
10200 10201 * (Because these flags may change between SIOCGLIFFLAGS and
10201 10202 * SIOCSLIFFLAGS, and that's outside of userland's control,
10202 10203 * we need to silently ignore them rather than fail.)
10203 10204 */
10204 10205 static void
10205 10206 ip_sioctl_flags_onoff(ipif_t *ipif, uint64_t flags, uint64_t *onp,
10206 10207 uint64_t *offp)
10207 10208 {
10208 10209 ill_t *ill = ipif->ipif_ill;
10209 10210 phyint_t *phyi = ill->ill_phyint;
10210 10211 uint64_t cantchange_flags, intf_flags;
10211 10212 uint64_t turn_on, turn_off;
10212 10213
10213 10214 intf_flags = ipif->ipif_flags | ill->ill_flags | phyi->phyint_flags;
10214 10215 cantchange_flags = IFF_CANTCHANGE;
10215 10216 if (IS_IPMP(ill))
10216 10217 cantchange_flags |= IFF_IPMP_CANTCHANGE;
10217 10218 turn_on = (flags ^ intf_flags) & ~cantchange_flags;
10218 10219 turn_off = intf_flags & turn_on;
10219 10220 turn_on ^= turn_off;
10220 10221 *onp = turn_on;
10221 10222 *offp = turn_off;
10222 10223 }
10223 10224
10224 10225 /*
10225 10226 * Set interface flags. Many flags require special handling (e.g.,
10226 10227 * bringing the interface down); see below for details.
10227 10228 *
10228 10229 * NOTE : We really don't enforce that ipif_id zero should be used
10229 10230 * for setting any flags other than IFF_LOGINT_FLAGS. This
10230 10231 * is because applications generally does SICGLIFFLAGS and
10231 10232 * ORs in the new flags (that affects the logical) and does a
10232 10233 * SIOCSLIFFLAGS. Thus, "flags" below could contain bits other
10233 10234 * than IFF_LOGINT_FLAGS. One could check whether "turn_on" - the
10234 10235 * flags that will be turned on is correct with respect to
10235 10236 * ipif_id 0. For backward compatibility reasons, it is not done.
10236 10237 */
10237 10238 /* ARGSUSED */
10238 10239 int
10239 10240 ip_sioctl_flags(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10240 10241 ip_ioctl_cmd_t *ipip, void *if_req)
10241 10242 {
10242 10243 uint64_t turn_on;
10243 10244 uint64_t turn_off;
10244 10245 int err = 0;
10245 10246 phyint_t *phyi;
10246 10247 ill_t *ill;
10247 10248 conn_t *connp;
10248 10249 uint64_t intf_flags;
10249 10250 boolean_t phyint_flags_modified = B_FALSE;
10250 10251 uint64_t flags;
10251 10252 struct ifreq *ifr;
10252 10253 struct lifreq *lifr;
10253 10254 boolean_t set_linklocal = B_FALSE;
10254 10255
10255 10256 ip1dbg(("ip_sioctl_flags(%s:%u %p)\n",
10256 10257 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
10257 10258
10258 10259 ASSERT(IAM_WRITER_IPIF(ipif));
10259 10260
10260 10261 ill = ipif->ipif_ill;
10261 10262 phyi = ill->ill_phyint;
10262 10263
10263 10264 if (ipip->ipi_cmd_type == IF_CMD) {
10264 10265 ifr = (struct ifreq *)if_req;
10265 10266 flags = (uint64_t)(ifr->ifr_flags & 0x0000ffff);
10266 10267 } else {
10267 10268 lifr = (struct lifreq *)if_req;
10268 10269 flags = lifr->lifr_flags;
10269 10270 }
10270 10271
10271 10272 intf_flags = ipif->ipif_flags | ill->ill_flags | phyi->phyint_flags;
10272 10273
10273 10274 /*
10274 10275 * Have the flags been set correctly until now?
10275 10276 */
10276 10277 ASSERT((phyi->phyint_flags & ~(IFF_PHYINT_FLAGS)) == 0);
10277 10278 ASSERT((ill->ill_flags & ~(IFF_PHYINTINST_FLAGS)) == 0);
10278 10279 ASSERT((ipif->ipif_flags & ~(IFF_LOGINT_FLAGS)) == 0);
10279 10280 /*
10280 10281 * Compare the new flags to the old, and partition
10281 10282 * into those coming on and those going off.
10282 10283 * For the 16 bit command keep the bits above bit 16 unchanged.
10283 10284 */
10284 10285 if (ipip->ipi_cmd == SIOCSIFFLAGS)
10285 10286 flags |= intf_flags & ~0xFFFF;
10286 10287
10287 10288 /*
10288 10289 * Explicitly fail attempts to change flags that are always invalid on
10289 10290 * an IPMP meta-interface.
10290 10291 */
10291 10292 if (IS_IPMP(ill) && ((flags ^ intf_flags) & IFF_IPMP_INVALID))
10292 10293 return (EINVAL);
10293 10294
10294 10295 ip_sioctl_flags_onoff(ipif, flags, &turn_on, &turn_off);
10295 10296 if ((turn_on|turn_off) == 0)
10296 10297 return (0); /* No change */
10297 10298
10298 10299 /*
10299 10300 * All test addresses must be IFF_DEPRECATED (to ensure source address
10300 10301 * selection avoids them) -- so force IFF_DEPRECATED on, and do not
10301 10302 * allow it to be turned off.
10302 10303 */
10303 10304 if ((turn_off & (IFF_DEPRECATED|IFF_NOFAILOVER)) == IFF_DEPRECATED &&
10304 10305 (turn_on|intf_flags) & IFF_NOFAILOVER)
10305 10306 return (EINVAL);
10306 10307
10307 10308 if ((connp = Q_TO_CONN(q)) == NULL)
10308 10309 return (EINVAL);
10309 10310
10310 10311 /*
10311 10312 * Only vrrp control socket is allowed to change IFF_UP and
10312 10313 * IFF_NOACCEPT flags when IFF_VRRP is set.
10313 10314 */
10314 10315 if ((intf_flags & IFF_VRRP) && ((turn_off | turn_on) & IFF_UP)) {
10315 10316 if (!connp->conn_isvrrp)
10316 10317 return (EINVAL);
10317 10318 }
10318 10319
10319 10320 /*
10320 10321 * The IFF_NOACCEPT flag can only be set on an IFF_VRRP IP address by
10321 10322 * VRRP control socket.
10322 10323 */
10323 10324 if ((turn_off | turn_on) & IFF_NOACCEPT) {
10324 10325 if (!connp->conn_isvrrp || !(intf_flags & IFF_VRRP))
10325 10326 return (EINVAL);
10326 10327 }
10327 10328
10328 10329 if (turn_on & IFF_NOFAILOVER) {
10329 10330 turn_on |= IFF_DEPRECATED;
10330 10331 flags |= IFF_DEPRECATED;
10331 10332 }
10332 10333
10333 10334 /*
10334 10335 * On underlying interfaces, only allow applications to manage test
10335 10336 * addresses -- otherwise, they may get confused when the address
10336 10337 * moves as part of being brought up. Likewise, prevent an
10337 10338 * application-managed test address from being converted to a data
10338 10339 * address. To prevent migration of administratively up addresses in
10339 10340 * the kernel, we don't allow them to be converted either.
10340 10341 */
10341 10342 if (IS_UNDER_IPMP(ill)) {
10342 10343 const uint64_t appflags = IFF_DHCPRUNNING | IFF_ADDRCONF;
10343 10344
10344 10345 if ((turn_on & appflags) && !(flags & IFF_NOFAILOVER))
10345 10346 return (EINVAL);
10346 10347
10347 10348 if ((turn_off & IFF_NOFAILOVER) &&
10348 10349 (flags & (appflags | IFF_UP | IFF_DUPLICATE)))
10349 10350 return (EINVAL);
10350 10351 }
10351 10352
10352 10353 /*
10353 10354 * Only allow IFF_TEMPORARY flag to be set on
10354 10355 * IPv6 interfaces.
10355 10356 */
10356 10357 if ((turn_on & IFF_TEMPORARY) && !(ipif->ipif_isv6))
10357 10358 return (EINVAL);
10358 10359
10359 10360 /*
10360 10361 * cannot turn off IFF_NOXMIT on VNI interfaces.
10361 10362 */
10362 10363 if ((turn_off & IFF_NOXMIT) && IS_VNI(ipif->ipif_ill))
10363 10364 return (EINVAL);
10364 10365
10365 10366 /*
10366 10367 * Don't allow the IFF_ROUTER flag to be turned on on loopback
10367 10368 * interfaces. It makes no sense in that context.
10368 10369 */
10369 10370 if ((turn_on & IFF_ROUTER) && (phyi->phyint_flags & PHYI_LOOPBACK))
10370 10371 return (EINVAL);
10371 10372
10372 10373 /*
10373 10374 * For IPv6 ipif_id 0, don't allow the interface to be up without
10374 10375 * a link local address if IFF_NOLOCAL or IFF_ANYCAST are not set.
10375 10376 * If the link local address isn't set, and can be set, it will get
10376 10377 * set later on in this function.
10377 10378 */
10378 10379 if (ipif->ipif_id == 0 && ipif->ipif_isv6 &&
10379 10380 (flags & IFF_UP) && !(flags & (IFF_NOLOCAL|IFF_ANYCAST)) &&
10380 10381 IN6_IS_ADDR_UNSPECIFIED(&ipif->ipif_v6lcl_addr)) {
10381 10382 if (ipif_cant_setlinklocal(ipif))
10382 10383 return (EINVAL);
10383 10384 set_linklocal = B_TRUE;
10384 10385 }
10385 10386
10386 10387 /*
10387 10388 * If we modify physical interface flags, we'll potentially need to
10388 10389 * send up two routing socket messages for the changes (one for the
10389 10390 * IPv4 ill, and another for the IPv6 ill). Note that here.
10390 10391 */
10391 10392 if ((turn_on|turn_off) & IFF_PHYINT_FLAGS)
10392 10393 phyint_flags_modified = B_TRUE;
10393 10394
10394 10395 /*
10395 10396 * All functioning PHYI_STANDBY interfaces start life PHYI_INACTIVE
10396 10397 * (otherwise, we'd immediately use them, defeating standby). Also,
10397 10398 * since PHYI_INACTIVE has a separate meaning when PHYI_STANDBY is not
10398 10399 * set, don't allow PHYI_STANDBY to be set if PHYI_INACTIVE is already
10399 10400 * set, and clear PHYI_INACTIVE if PHYI_STANDBY is being cleared. We
10400 10401 * also don't allow PHYI_STANDBY if VNI is enabled since its semantics
10401 10402 * will not be honored.
10402 10403 */
10403 10404 if (turn_on & PHYI_STANDBY) {
10404 10405 /*
10405 10406 * No need to grab ill_g_usesrc_lock here; see the
10406 10407 * synchronization notes in ip.c.
10407 10408 */
10408 10409 if (ill->ill_usesrc_grp_next != NULL ||
10409 10410 intf_flags & PHYI_INACTIVE)
10410 10411 return (EINVAL);
10411 10412 if (!(flags & PHYI_FAILED)) {
10412 10413 flags |= PHYI_INACTIVE;
10413 10414 turn_on |= PHYI_INACTIVE;
10414 10415 }
10415 10416 }
10416 10417
10417 10418 if (turn_off & PHYI_STANDBY) {
10418 10419 flags &= ~PHYI_INACTIVE;
10419 10420 turn_off |= PHYI_INACTIVE;
10420 10421 }
10421 10422
10422 10423 /*
10423 10424 * PHYI_FAILED and PHYI_INACTIVE are mutually exclusive; fail if both
10424 10425 * would end up on.
10425 10426 */
10426 10427 if ((flags & (PHYI_FAILED | PHYI_INACTIVE)) ==
10427 10428 (PHYI_FAILED | PHYI_INACTIVE))
10428 10429 return (EINVAL);
10429 10430
10430 10431 /*
10431 10432 * If ILLF_ROUTER changes, we need to change the ip forwarding
10432 10433 * status of the interface.
10433 10434 */
10434 10435 if ((turn_on | turn_off) & ILLF_ROUTER) {
10435 10436 err = ill_forward_set(ill, ((turn_on & ILLF_ROUTER) != 0));
10436 10437 if (err != 0)
10437 10438 return (err);
10438 10439 }
10439 10440
10440 10441 /*
10441 10442 * If the interface is not UP and we are not going to
10442 10443 * bring it UP, record the flags and return. When the
10443 10444 * interface comes UP later, the right actions will be
10444 10445 * taken.
10445 10446 */
10446 10447 if (!(ipif->ipif_flags & IPIF_UP) &&
10447 10448 !(turn_on & IPIF_UP)) {
10448 10449 /* Record new flags in their respective places. */
10449 10450 mutex_enter(&ill->ill_lock);
10450 10451 mutex_enter(&ill->ill_phyint->phyint_lock);
10451 10452 ipif->ipif_flags |= (turn_on & IFF_LOGINT_FLAGS);
10452 10453 ipif->ipif_flags &= (~turn_off & IFF_LOGINT_FLAGS);
10453 10454 ill->ill_flags |= (turn_on & IFF_PHYINTINST_FLAGS);
10454 10455 ill->ill_flags &= (~turn_off & IFF_PHYINTINST_FLAGS);
10455 10456 phyi->phyint_flags |= (turn_on & IFF_PHYINT_FLAGS);
10456 10457 phyi->phyint_flags &= (~turn_off & IFF_PHYINT_FLAGS);
10457 10458 mutex_exit(&ill->ill_lock);
10458 10459 mutex_exit(&ill->ill_phyint->phyint_lock);
10459 10460
10460 10461 /*
10461 10462 * PHYI_FAILED, PHYI_INACTIVE, and PHYI_OFFLINE are all the
10462 10463 * same to the kernel: if any of them has been set by
10463 10464 * userland, the interface cannot be used for data traffic.
10464 10465 */
10465 10466 if ((turn_on|turn_off) &
10466 10467 (PHYI_FAILED | PHYI_INACTIVE | PHYI_OFFLINE)) {
10467 10468 ASSERT(!IS_IPMP(ill));
10468 10469 /*
10469 10470 * It's possible the ill is part of an "anonymous"
10470 10471 * IPMP group rather than a real group. In that case,
10471 10472 * there are no other interfaces in the group and thus
10472 10473 * no need to call ipmp_phyint_refresh_active().
10473 10474 */
10474 10475 if (IS_UNDER_IPMP(ill))
10475 10476 ipmp_phyint_refresh_active(phyi);
10476 10477 }
10477 10478
10478 10479 if (phyint_flags_modified) {
10479 10480 if (phyi->phyint_illv4 != NULL) {
10480 10481 ip_rts_ifmsg(phyi->phyint_illv4->
10481 10482 ill_ipif, RTSQ_DEFAULT);
10482 10483 }
10483 10484 if (phyi->phyint_illv6 != NULL) {
10484 10485 ip_rts_ifmsg(phyi->phyint_illv6->
10485 10486 ill_ipif, RTSQ_DEFAULT);
10486 10487 }
10487 10488 }
10488 10489 /* The default multicast interface might have changed */
10489 10490 ire_increment_multicast_generation(ill->ill_ipst,
10490 10491 ill->ill_isv6);
10491 10492
10492 10493 return (0);
10493 10494 } else if (set_linklocal) {
10494 10495 mutex_enter(&ill->ill_lock);
10495 10496 if (set_linklocal)
10496 10497 ipif->ipif_state_flags |= IPIF_SET_LINKLOCAL;
10497 10498 mutex_exit(&ill->ill_lock);
10498 10499 }
10499 10500
10500 10501 /*
10501 10502 * Disallow IPv6 interfaces coming up that have the unspecified address,
10502 10503 * or point-to-point interfaces with an unspecified destination. We do
10503 10504 * allow the address to be unspecified for IPIF_NOLOCAL interfaces that
10504 10505 * have a subnet assigned, which is how in.ndpd currently manages its
10505 10506 * onlink prefix list when no addresses are configured with those
10506 10507 * prefixes.
10507 10508 */
10508 10509 if (ipif->ipif_isv6 &&
10509 10510 ((IN6_IS_ADDR_UNSPECIFIED(&ipif->ipif_v6lcl_addr) &&
10510 10511 (!(ipif->ipif_flags & IPIF_NOLOCAL) && !(turn_on & IPIF_NOLOCAL) ||
10511 10512 IN6_IS_ADDR_UNSPECIFIED(&ipif->ipif_v6subnet))) ||
10512 10513 ((ipif->ipif_flags & IPIF_POINTOPOINT) &&
10513 10514 IN6_IS_ADDR_UNSPECIFIED(&ipif->ipif_v6pp_dst_addr)))) {
10514 10515 return (EINVAL);
10515 10516 }
10516 10517
10517 10518 /*
10518 10519 * Prevent IPv4 point-to-point interfaces with a 0.0.0.0 destination
10519 10520 * from being brought up.
10520 10521 */
10521 10522 if (!ipif->ipif_isv6 &&
10522 10523 ((ipif->ipif_flags & IPIF_POINTOPOINT) &&
10523 10524 ipif->ipif_pp_dst_addr == INADDR_ANY)) {
10524 10525 return (EINVAL);
10525 10526 }
10526 10527
10527 10528 /*
10528 10529 * If we are going to change one or more of the flags that are
10529 10530 * IPIF_UP, IPIF_DEPRECATED, IPIF_NOXMIT, IPIF_NOLOCAL, ILLF_NOARP,
10530 10531 * ILLF_NONUD, IPIF_PRIVATE, IPIF_ANYCAST, IPIF_PREFERRED, and
10531 10532 * IPIF_NOFAILOVER, we will take special action. This is
10532 10533 * done by bring the ipif down, changing the flags and bringing
10533 10534 * it back up again. For IPIF_NOFAILOVER, the act of bringing it
10534 10535 * back up will trigger the address to be moved.
10535 10536 *
10536 10537 * If we are going to change IFF_NOACCEPT, we need to bring
10537 10538 * all the ipifs down then bring them up again. The act of
10538 10539 * bringing all the ipifs back up will trigger the local
10539 10540 * ires being recreated with "no_accept" set/cleared.
10540 10541 *
10541 10542 * Note that ILLF_NOACCEPT is always set separately from the
10542 10543 * other flags.
10543 10544 */
10544 10545 if ((turn_on|turn_off) &
10545 10546 (IPIF_UP|IPIF_DEPRECATED|IPIF_NOXMIT|IPIF_NOLOCAL|ILLF_NOARP|
10546 10547 ILLF_NONUD|IPIF_PRIVATE|IPIF_ANYCAST|IPIF_PREFERRED|
10547 10548 IPIF_NOFAILOVER)) {
10548 10549 /*
10549 10550 * ipif_down() will ire_delete bcast ire's for the subnet,
10550 10551 * while the ire_identical_ref tracks the case of IRE_BROADCAST
10551 10552 * entries shared between multiple ipifs on the same subnet.
10552 10553 */
10553 10554 if (((ipif->ipif_flags | turn_on) & IPIF_UP) &&
10554 10555 !(turn_off & IPIF_UP)) {
10555 10556 if (ipif->ipif_flags & IPIF_UP)
10556 10557 ill->ill_logical_down = 1;
10557 10558 turn_on &= ~IPIF_UP;
10558 10559 }
10559 10560 err = ipif_down(ipif, q, mp);
10560 10561 ip1dbg(("ipif_down returns %d err ", err));
10561 10562 if (err == EINPROGRESS)
10562 10563 return (err);
10563 10564 (void) ipif_down_tail(ipif);
10564 10565 } else if ((turn_on|turn_off) & ILLF_NOACCEPT) {
10565 10566 /*
10566 10567 * If we can quiesce the ill, then continue. If not, then
10567 10568 * ip_sioctl_flags_tail() will be called from
10568 10569 * ipif_ill_refrele_tail().
10569 10570 */
10570 10571 ill_down_ipifs(ill, B_TRUE);
10571 10572
10572 10573 mutex_enter(&connp->conn_lock);
10573 10574 mutex_enter(&ill->ill_lock);
10574 10575 if (!ill_is_quiescent(ill)) {
10575 10576 boolean_t success;
10576 10577
10577 10578 success = ipsq_pending_mp_add(connp, ill->ill_ipif,
10578 10579 q, mp, ILL_DOWN);
10579 10580 mutex_exit(&ill->ill_lock);
10580 10581 mutex_exit(&connp->conn_lock);
10581 10582 return (success ? EINPROGRESS : EINTR);
10582 10583 }
10583 10584 mutex_exit(&ill->ill_lock);
10584 10585 mutex_exit(&connp->conn_lock);
10585 10586 }
10586 10587 return (ip_sioctl_flags_tail(ipif, flags, q, mp));
10587 10588 }
10588 10589
10589 10590 static int
10590 10591 ip_sioctl_flags_tail(ipif_t *ipif, uint64_t flags, queue_t *q, mblk_t *mp)
10591 10592 {
10592 10593 ill_t *ill;
10593 10594 phyint_t *phyi;
10594 10595 uint64_t turn_on, turn_off;
10595 10596 boolean_t phyint_flags_modified = B_FALSE;
10596 10597 int err = 0;
10597 10598 boolean_t set_linklocal = B_FALSE;
10598 10599
10599 10600 ip1dbg(("ip_sioctl_flags_tail(%s:%u)\n",
10600 10601 ipif->ipif_ill->ill_name, ipif->ipif_id));
10601 10602
10602 10603 ASSERT(IAM_WRITER_IPIF(ipif));
10603 10604
10604 10605 ill = ipif->ipif_ill;
10605 10606 phyi = ill->ill_phyint;
10606 10607
10607 10608 ip_sioctl_flags_onoff(ipif, flags, &turn_on, &turn_off);
10608 10609
10609 10610 /*
10610 10611 * IFF_UP is handled separately.
10611 10612 */
10612 10613 turn_on &= ~IFF_UP;
10613 10614 turn_off &= ~IFF_UP;
10614 10615
10615 10616 if ((turn_on|turn_off) & IFF_PHYINT_FLAGS)
10616 10617 phyint_flags_modified = B_TRUE;
10617 10618
10618 10619 /*
10619 10620 * Now we change the flags. Track current value of
10620 10621 * other flags in their respective places.
10621 10622 */
10622 10623 mutex_enter(&ill->ill_lock);
10623 10624 mutex_enter(&phyi->phyint_lock);
10624 10625 ipif->ipif_flags |= (turn_on & IFF_LOGINT_FLAGS);
10625 10626 ipif->ipif_flags &= (~turn_off & IFF_LOGINT_FLAGS);
10626 10627 ill->ill_flags |= (turn_on & IFF_PHYINTINST_FLAGS);
10627 10628 ill->ill_flags &= (~turn_off & IFF_PHYINTINST_FLAGS);
10628 10629 phyi->phyint_flags |= (turn_on & IFF_PHYINT_FLAGS);
10629 10630 phyi->phyint_flags &= (~turn_off & IFF_PHYINT_FLAGS);
10630 10631 if (ipif->ipif_state_flags & IPIF_SET_LINKLOCAL) {
10631 10632 set_linklocal = B_TRUE;
10632 10633 ipif->ipif_state_flags &= ~IPIF_SET_LINKLOCAL;
10633 10634 }
10634 10635
10635 10636 mutex_exit(&ill->ill_lock);
10636 10637 mutex_exit(&phyi->phyint_lock);
10637 10638
10638 10639 if (set_linklocal)
10639 10640 (void) ipif_setlinklocal(ipif);
10640 10641
10641 10642 /*
10642 10643 * PHYI_FAILED, PHYI_INACTIVE, and PHYI_OFFLINE are all the same to
10643 10644 * the kernel: if any of them has been set by userland, the interface
10644 10645 * cannot be used for data traffic.
10645 10646 */
10646 10647 if ((turn_on|turn_off) & (PHYI_FAILED | PHYI_INACTIVE | PHYI_OFFLINE)) {
10647 10648 ASSERT(!IS_IPMP(ill));
10648 10649 /*
10649 10650 * It's possible the ill is part of an "anonymous" IPMP group
10650 10651 * rather than a real group. In that case, there are no other
10651 10652 * interfaces in the group and thus no need for us to call
10652 10653 * ipmp_phyint_refresh_active().
10653 10654 */
10654 10655 if (IS_UNDER_IPMP(ill))
10655 10656 ipmp_phyint_refresh_active(phyi);
10656 10657 }
10657 10658
10658 10659 if ((turn_on|turn_off) & ILLF_NOACCEPT) {
10659 10660 /*
10660 10661 * If the ILLF_NOACCEPT flag is changed, bring up all the
10661 10662 * ipifs that were brought down.
10662 10663 *
10663 10664 * The routing sockets messages are sent as the result
10664 10665 * of ill_up_ipifs(), further, SCTP's IPIF list was updated
10665 10666 * as well.
10666 10667 */
10667 10668 err = ill_up_ipifs(ill, q, mp);
10668 10669 } else if ((flags & IFF_UP) && !(ipif->ipif_flags & IPIF_UP)) {
10669 10670 /*
10670 10671 * XXX ipif_up really does not know whether a phyint flags
10671 10672 * was modified or not. So, it sends up information on
10672 10673 * only one routing sockets message. As we don't bring up
10673 10674 * the interface and also set PHYI_ flags simultaneously
10674 10675 * it should be okay.
10675 10676 */
10676 10677 err = ipif_up(ipif, q, mp);
10677 10678 } else {
10678 10679 /*
10679 10680 * Make sure routing socket sees all changes to the flags.
10680 10681 * ipif_up_done* handles this when we use ipif_up.
10681 10682 */
10682 10683 if (phyint_flags_modified) {
10683 10684 if (phyi->phyint_illv4 != NULL) {
10684 10685 ip_rts_ifmsg(phyi->phyint_illv4->
10685 10686 ill_ipif, RTSQ_DEFAULT);
10686 10687 }
10687 10688 if (phyi->phyint_illv6 != NULL) {
10688 10689 ip_rts_ifmsg(phyi->phyint_illv6->
10689 10690 ill_ipif, RTSQ_DEFAULT);
10690 10691 }
10691 10692 } else {
10692 10693 ip_rts_ifmsg(ipif, RTSQ_DEFAULT);
10693 10694 }
10694 10695 /*
10695 10696 * Update the flags in SCTP's IPIF list, ipif_up() will do
10696 10697 * this in need_up case.
10697 10698 */
10698 10699 sctp_update_ipif(ipif, SCTP_IPIF_UPDATE);
10699 10700 }
10700 10701
10701 10702 /* The default multicast interface might have changed */
10702 10703 ire_increment_multicast_generation(ill->ill_ipst, ill->ill_isv6);
10703 10704 return (err);
10704 10705 }
10705 10706
10706 10707 /*
10707 10708 * Restart the flags operation now that the refcounts have dropped to zero.
10708 10709 */
10709 10710 /* ARGSUSED */
10710 10711 int
10711 10712 ip_sioctl_flags_restart(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10712 10713 ip_ioctl_cmd_t *ipip, void *if_req)
10713 10714 {
10714 10715 uint64_t flags;
10715 10716 struct ifreq *ifr = if_req;
10716 10717 struct lifreq *lifr = if_req;
10717 10718 uint64_t turn_on, turn_off;
10718 10719
10719 10720 ip1dbg(("ip_sioctl_flags_restart(%s:%u %p)\n",
10720 10721 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
10721 10722
10722 10723 if (ipip->ipi_cmd_type == IF_CMD) {
10723 10724 /* cast to uint16_t prevents unwanted sign extension */
10724 10725 flags = (uint16_t)ifr->ifr_flags;
10725 10726 } else {
10726 10727 flags = lifr->lifr_flags;
10727 10728 }
10728 10729
10729 10730 /*
10730 10731 * If this function call is a result of the ILLF_NOACCEPT flag
10731 10732 * change, do not call ipif_down_tail(). See ip_sioctl_flags().
10732 10733 */
10733 10734 ip_sioctl_flags_onoff(ipif, flags, &turn_on, &turn_off);
10734 10735 if (!((turn_on|turn_off) & ILLF_NOACCEPT))
10735 10736 (void) ipif_down_tail(ipif);
10736 10737
10737 10738 return (ip_sioctl_flags_tail(ipif, flags, q, mp));
10738 10739 }
10739 10740
10740 10741 /*
10741 10742 * Can operate on either a module or a driver queue.
10742 10743 */
10743 10744 /* ARGSUSED */
10744 10745 int
10745 10746 ip_sioctl_get_flags(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10746 10747 ip_ioctl_cmd_t *ipip, void *if_req)
10747 10748 {
10748 10749 /*
10749 10750 * Has the flags been set correctly till now ?
10750 10751 */
10751 10752 ill_t *ill = ipif->ipif_ill;
10752 10753 phyint_t *phyi = ill->ill_phyint;
10753 10754
10754 10755 ip1dbg(("ip_sioctl_get_flags(%s:%u %p)\n",
10755 10756 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
10756 10757 ASSERT((phyi->phyint_flags & ~(IFF_PHYINT_FLAGS)) == 0);
10757 10758 ASSERT((ill->ill_flags & ~(IFF_PHYINTINST_FLAGS)) == 0);
10758 10759 ASSERT((ipif->ipif_flags & ~(IFF_LOGINT_FLAGS)) == 0);
10759 10760
10760 10761 /*
10761 10762 * Need a lock since some flags can be set even when there are
10762 10763 * references to the ipif.
10763 10764 */
10764 10765 mutex_enter(&ill->ill_lock);
10765 10766 if (ipip->ipi_cmd_type == IF_CMD) {
10766 10767 struct ifreq *ifr = (struct ifreq *)if_req;
10767 10768
10768 10769 /* Get interface flags (low 16 only). */
10769 10770 ifr->ifr_flags = ((ipif->ipif_flags |
10770 10771 ill->ill_flags | phyi->phyint_flags) & 0xffff);
10771 10772 } else {
10772 10773 struct lifreq *lifr = (struct lifreq *)if_req;
10773 10774
10774 10775 /* Get interface flags. */
10775 10776 lifr->lifr_flags = ipif->ipif_flags |
10776 10777 ill->ill_flags | phyi->phyint_flags;
10777 10778 }
10778 10779 mutex_exit(&ill->ill_lock);
10779 10780 return (0);
10780 10781 }
10781 10782
10782 10783 /*
10783 10784 * We allow the MTU to be set on an ILL, but not have it be different
10784 10785 * for different IPIFs since we don't actually send packets on IPIFs.
10785 10786 */
10786 10787 /* ARGSUSED */
10787 10788 int
10788 10789 ip_sioctl_mtu(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10789 10790 ip_ioctl_cmd_t *ipip, void *if_req)
10790 10791 {
10791 10792 int mtu;
10792 10793 int ip_min_mtu;
10793 10794 struct ifreq *ifr;
10794 10795 struct lifreq *lifr;
10795 10796 ill_t *ill;
10796 10797
10797 10798 ip1dbg(("ip_sioctl_mtu(%s:%u %p)\n", ipif->ipif_ill->ill_name,
10798 10799 ipif->ipif_id, (void *)ipif));
10799 10800 if (ipip->ipi_cmd_type == IF_CMD) {
10800 10801 ifr = (struct ifreq *)if_req;
10801 10802 mtu = ifr->ifr_metric;
10802 10803 } else {
10803 10804 lifr = (struct lifreq *)if_req;
10804 10805 mtu = lifr->lifr_mtu;
10805 10806 }
10806 10807 /* Only allow for logical unit zero i.e. not on "bge0:17" */
10807 10808 if (ipif->ipif_id != 0)
10808 10809 return (EINVAL);
10809 10810
10810 10811 ill = ipif->ipif_ill;
10811 10812 if (ipif->ipif_isv6)
10812 10813 ip_min_mtu = IPV6_MIN_MTU;
10813 10814 else
10814 10815 ip_min_mtu = IP_MIN_MTU;
10815 10816
10816 10817 mutex_enter(&ill->ill_lock);
10817 10818 if (mtu > ill->ill_max_frag || mtu < ip_min_mtu) {
10818 10819 mutex_exit(&ill->ill_lock);
10819 10820 return (EINVAL);
10820 10821 }
10821 10822 /* Avoid increasing ill_mc_mtu */
10822 10823 if (ill->ill_mc_mtu > mtu)
10823 10824 ill->ill_mc_mtu = mtu;
10824 10825
10825 10826 /*
10826 10827 * The dce and fragmentation code can handle changes to ill_mtu
10827 10828 * concurrent with sending/fragmenting packets.
10828 10829 */
10829 10830 ill->ill_mtu = mtu;
10830 10831 ill->ill_flags |= ILLF_FIXEDMTU;
10831 10832 mutex_exit(&ill->ill_lock);
10832 10833
10833 10834 /*
10834 10835 * Make sure all dce_generation checks find out
10835 10836 * that ill_mtu/ill_mc_mtu has changed.
10836 10837 */
10837 10838 dce_increment_all_generations(ill->ill_isv6, ill->ill_ipst);
10838 10839
10839 10840 /*
10840 10841 * Refresh IPMP meta-interface MTU if necessary.
10841 10842 */
10842 10843 if (IS_UNDER_IPMP(ill))
10843 10844 ipmp_illgrp_refresh_mtu(ill->ill_grp);
10844 10845
10845 10846 /* Update the MTU in SCTP's list */
10846 10847 sctp_update_ipif(ipif, SCTP_IPIF_UPDATE);
10847 10848 return (0);
10848 10849 }
10849 10850
10850 10851 /* Get interface MTU. */
10851 10852 /* ARGSUSED */
10852 10853 int
10853 10854 ip_sioctl_get_mtu(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10854 10855 ip_ioctl_cmd_t *ipip, void *if_req)
10855 10856 {
10856 10857 struct ifreq *ifr;
10857 10858 struct lifreq *lifr;
10858 10859
10859 10860 ip1dbg(("ip_sioctl_get_mtu(%s:%u %p)\n",
10860 10861 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
10861 10862
10862 10863 /*
10863 10864 * We allow a get on any logical interface even though the set
10864 10865 * can only be done on logical unit 0.
10865 10866 */
10866 10867 if (ipip->ipi_cmd_type == IF_CMD) {
10867 10868 ifr = (struct ifreq *)if_req;
10868 10869 ifr->ifr_metric = ipif->ipif_ill->ill_mtu;
10869 10870 } else {
10870 10871 lifr = (struct lifreq *)if_req;
10871 10872 lifr->lifr_mtu = ipif->ipif_ill->ill_mtu;
10872 10873 }
10873 10874 return (0);
10874 10875 }
10875 10876
10876 10877 /* Set interface broadcast address. */
10877 10878 /* ARGSUSED2 */
10878 10879 int
10879 10880 ip_sioctl_brdaddr(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10880 10881 ip_ioctl_cmd_t *ipip, void *if_req)
10881 10882 {
10882 10883 ipaddr_t addr;
10883 10884 ire_t *ire;
10884 10885 ill_t *ill = ipif->ipif_ill;
10885 10886 ip_stack_t *ipst = ill->ill_ipst;
10886 10887
10887 10888 ip1dbg(("ip_sioctl_brdaddr(%s:%u)\n", ill->ill_name,
10888 10889 ipif->ipif_id));
10889 10890
10890 10891 ASSERT(IAM_WRITER_IPIF(ipif));
10891 10892 if (!(ipif->ipif_flags & IPIF_BROADCAST))
10892 10893 return (EADDRNOTAVAIL);
10893 10894
10894 10895 ASSERT(!(ipif->ipif_isv6)); /* No IPv6 broadcast */
10895 10896
10896 10897 if (sin->sin_family != AF_INET)
10897 10898 return (EAFNOSUPPORT);
10898 10899
10899 10900 addr = sin->sin_addr.s_addr;
10900 10901
10901 10902 if (ipif->ipif_flags & IPIF_UP) {
10902 10903 /*
10903 10904 * If we are already up, make sure the new
10904 10905 * broadcast address makes sense. If it does,
10905 10906 * there should be an IRE for it already.
10906 10907 */
10907 10908 ire = ire_ftable_lookup_v4(addr, 0, 0, IRE_BROADCAST,
10908 10909 ill, ipif->ipif_zoneid, NULL,
10909 10910 (MATCH_IRE_ILL | MATCH_IRE_TYPE), 0, ipst, NULL);
10910 10911 if (ire == NULL) {
10911 10912 return (EINVAL);
10912 10913 } else {
10913 10914 ire_refrele(ire);
10914 10915 }
10915 10916 }
10916 10917 /*
10917 10918 * Changing the broadcast addr for this ipif. Since the IRE_BROADCAST
10918 10919 * needs to already exist we never need to change the set of
10919 10920 * IRE_BROADCASTs when we are UP.
10920 10921 */
10921 10922 if (addr != ipif->ipif_brd_addr)
10922 10923 IN6_IPADDR_TO_V4MAPPED(addr, &ipif->ipif_v6brd_addr);
10923 10924
10924 10925 return (0);
10925 10926 }
10926 10927
10927 10928 /* Get interface broadcast address. */
10928 10929 /* ARGSUSED */
10929 10930 int
10930 10931 ip_sioctl_get_brdaddr(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10931 10932 ip_ioctl_cmd_t *ipip, void *if_req)
10932 10933 {
10933 10934 ip1dbg(("ip_sioctl_get_brdaddr(%s:%u %p)\n",
10934 10935 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
10935 10936 if (!(ipif->ipif_flags & IPIF_BROADCAST))
10936 10937 return (EADDRNOTAVAIL);
10937 10938
10938 10939 /* IPIF_BROADCAST not possible with IPv6 */
10939 10940 ASSERT(!ipif->ipif_isv6);
10940 10941 *sin = sin_null;
10941 10942 sin->sin_family = AF_INET;
10942 10943 sin->sin_addr.s_addr = ipif->ipif_brd_addr;
10943 10944 return (0);
10944 10945 }
10945 10946
10946 10947 /*
10947 10948 * This routine is called to handle the SIOCS*IFNETMASK IOCTL.
10948 10949 */
10949 10950 /* ARGSUSED */
10950 10951 int
10951 10952 ip_sioctl_netmask(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
10952 10953 ip_ioctl_cmd_t *ipip, void *if_req)
10953 10954 {
10954 10955 int err = 0;
10955 10956 in6_addr_t v6mask;
10956 10957
10957 10958 ip1dbg(("ip_sioctl_netmask(%s:%u %p)\n",
10958 10959 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
10959 10960
10960 10961 ASSERT(IAM_WRITER_IPIF(ipif));
10961 10962
10962 10963 if (ipif->ipif_isv6) {
10963 10964 sin6_t *sin6;
10964 10965
10965 10966 if (sin->sin_family != AF_INET6)
10966 10967 return (EAFNOSUPPORT);
10967 10968
10968 10969 sin6 = (sin6_t *)sin;
10969 10970 v6mask = sin6->sin6_addr;
10970 10971 } else {
10971 10972 ipaddr_t mask;
10972 10973
10973 10974 if (sin->sin_family != AF_INET)
10974 10975 return (EAFNOSUPPORT);
10975 10976
10976 10977 mask = sin->sin_addr.s_addr;
10977 10978 if (!ip_contiguous_mask(ntohl(mask)))
10978 10979 return (ENOTSUP);
10979 10980 V4MASK_TO_V6(mask, v6mask);
10980 10981 }
10981 10982
10982 10983 /*
10983 10984 * No big deal if the interface isn't already up, or the mask
10984 10985 * isn't really changing, or this is pt-pt.
10985 10986 */
10986 10987 if (!(ipif->ipif_flags & IPIF_UP) ||
10987 10988 IN6_ARE_ADDR_EQUAL(&v6mask, &ipif->ipif_v6net_mask) ||
10988 10989 (ipif->ipif_flags & IPIF_POINTOPOINT)) {
10989 10990 ipif->ipif_v6net_mask = v6mask;
10990 10991 if ((ipif->ipif_flags & IPIF_POINTOPOINT) == 0) {
10991 10992 V6_MASK_COPY(ipif->ipif_v6lcl_addr,
10992 10993 ipif->ipif_v6net_mask,
10993 10994 ipif->ipif_v6subnet);
10994 10995 }
10995 10996 return (0);
10996 10997 }
10997 10998 /*
10998 10999 * Make sure we have valid net and subnet broadcast ire's
10999 11000 * for the old netmask, if needed by other logical interfaces.
11000 11001 */
11001 11002 err = ipif_logical_down(ipif, q, mp);
11002 11003 if (err == EINPROGRESS)
11003 11004 return (err);
11004 11005 (void) ipif_down_tail(ipif);
11005 11006 err = ip_sioctl_netmask_tail(ipif, sin, q, mp);
11006 11007 return (err);
11007 11008 }
11008 11009
11009 11010 static int
11010 11011 ip_sioctl_netmask_tail(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp)
11011 11012 {
11012 11013 in6_addr_t v6mask;
11013 11014 int err = 0;
11014 11015
11015 11016 ip1dbg(("ip_sioctl_netmask_tail(%s:%u %p)\n",
11016 11017 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11017 11018
11018 11019 if (ipif->ipif_isv6) {
11019 11020 sin6_t *sin6;
11020 11021
11021 11022 sin6 = (sin6_t *)sin;
11022 11023 v6mask = sin6->sin6_addr;
11023 11024 } else {
11024 11025 ipaddr_t mask;
11025 11026
11026 11027 mask = sin->sin_addr.s_addr;
11027 11028 V4MASK_TO_V6(mask, v6mask);
11028 11029 }
11029 11030
11030 11031 ipif->ipif_v6net_mask = v6mask;
11031 11032 if ((ipif->ipif_flags & IPIF_POINTOPOINT) == 0) {
11032 11033 V6_MASK_COPY(ipif->ipif_v6lcl_addr, ipif->ipif_v6net_mask,
11033 11034 ipif->ipif_v6subnet);
11034 11035 }
11035 11036 err = ipif_up(ipif, q, mp);
11036 11037
11037 11038 if (err == 0 || err == EINPROGRESS) {
11038 11039 /*
11039 11040 * The interface must be DL_BOUND if this packet has to
11040 11041 * go out on the wire. Since we only go through a logical
11041 11042 * down and are bound with the driver during an internal
11042 11043 * down/up that is satisfied.
11043 11044 */
11044 11045 if (!ipif->ipif_isv6 && ipif->ipif_ill->ill_wq != NULL) {
11045 11046 /* Potentially broadcast an address mask reply. */
11046 11047 ipif_mask_reply(ipif);
11047 11048 }
11048 11049 }
11049 11050 return (err);
11050 11051 }
11051 11052
11052 11053 /* ARGSUSED */
11053 11054 int
11054 11055 ip_sioctl_netmask_restart(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11055 11056 ip_ioctl_cmd_t *ipip, void *if_req)
11056 11057 {
11057 11058 ip1dbg(("ip_sioctl_netmask_restart(%s:%u %p)\n",
11058 11059 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11059 11060 (void) ipif_down_tail(ipif);
11060 11061 return (ip_sioctl_netmask_tail(ipif, sin, q, mp));
11061 11062 }
11062 11063
11063 11064 /* Get interface net mask. */
11064 11065 /* ARGSUSED */
11065 11066 int
11066 11067 ip_sioctl_get_netmask(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11067 11068 ip_ioctl_cmd_t *ipip, void *if_req)
11068 11069 {
11069 11070 struct lifreq *lifr = (struct lifreq *)if_req;
11070 11071 struct sockaddr_in6 *sin6 = (sin6_t *)sin;
11071 11072
11072 11073 ip1dbg(("ip_sioctl_get_netmask(%s:%u %p)\n",
11073 11074 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11074 11075
11075 11076 /*
11076 11077 * net mask can't change since we have a reference to the ipif.
11077 11078 */
11078 11079 if (ipif->ipif_isv6) {
11079 11080 ASSERT(ipip->ipi_cmd_type == LIF_CMD);
11080 11081 *sin6 = sin6_null;
11081 11082 sin6->sin6_family = AF_INET6;
11082 11083 sin6->sin6_addr = ipif->ipif_v6net_mask;
11083 11084 lifr->lifr_addrlen =
11084 11085 ip_mask_to_plen_v6(&ipif->ipif_v6net_mask);
11085 11086 } else {
11086 11087 *sin = sin_null;
11087 11088 sin->sin_family = AF_INET;
11088 11089 sin->sin_addr.s_addr = ipif->ipif_net_mask;
11089 11090 if (ipip->ipi_cmd_type == LIF_CMD) {
11090 11091 lifr->lifr_addrlen =
11091 11092 ip_mask_to_plen(ipif->ipif_net_mask);
11092 11093 }
11093 11094 }
11094 11095 return (0);
11095 11096 }
11096 11097
11097 11098 /* ARGSUSED */
11098 11099 int
11099 11100 ip_sioctl_metric(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11100 11101 ip_ioctl_cmd_t *ipip, void *if_req)
11101 11102 {
11102 11103 ip1dbg(("ip_sioctl_metric(%s:%u %p)\n",
11103 11104 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11104 11105
11105 11106 /*
11106 11107 * Since no applications should ever be setting metrics on underlying
11107 11108 * interfaces, we explicitly fail to smoke 'em out.
11108 11109 */
11109 11110 if (IS_UNDER_IPMP(ipif->ipif_ill))
11110 11111 return (EINVAL);
11111 11112
11112 11113 /*
11113 11114 * Set interface metric. We don't use this for
11114 11115 * anything but we keep track of it in case it is
11115 11116 * important to routing applications or such.
11116 11117 */
11117 11118 if (ipip->ipi_cmd_type == IF_CMD) {
11118 11119 struct ifreq *ifr;
11119 11120
11120 11121 ifr = (struct ifreq *)if_req;
11121 11122 ipif->ipif_ill->ill_metric = ifr->ifr_metric;
11122 11123 } else {
11123 11124 struct lifreq *lifr;
11124 11125
11125 11126 lifr = (struct lifreq *)if_req;
11126 11127 ipif->ipif_ill->ill_metric = lifr->lifr_metric;
11127 11128 }
11128 11129 return (0);
11129 11130 }
11130 11131
11131 11132 /* ARGSUSED */
11132 11133 int
11133 11134 ip_sioctl_get_metric(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11134 11135 ip_ioctl_cmd_t *ipip, void *if_req)
11135 11136 {
11136 11137 /* Get interface metric. */
11137 11138 ip1dbg(("ip_sioctl_get_metric(%s:%u %p)\n",
11138 11139 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11139 11140
11140 11141 if (ipip->ipi_cmd_type == IF_CMD) {
11141 11142 struct ifreq *ifr;
11142 11143
11143 11144 ifr = (struct ifreq *)if_req;
11144 11145 ifr->ifr_metric = ipif->ipif_ill->ill_metric;
11145 11146 } else {
11146 11147 struct lifreq *lifr;
11147 11148
11148 11149 lifr = (struct lifreq *)if_req;
11149 11150 lifr->lifr_metric = ipif->ipif_ill->ill_metric;
11150 11151 }
11151 11152
11152 11153 return (0);
11153 11154 }
11154 11155
11155 11156 /* ARGSUSED */
11156 11157 int
11157 11158 ip_sioctl_muxid(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11158 11159 ip_ioctl_cmd_t *ipip, void *if_req)
11159 11160 {
11160 11161 int arp_muxid;
11161 11162
11162 11163 ip1dbg(("ip_sioctl_muxid(%s:%u %p)\n",
11163 11164 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11164 11165 /*
11165 11166 * Set the muxid returned from I_PLINK.
11166 11167 */
11167 11168 if (ipip->ipi_cmd_type == IF_CMD) {
11168 11169 struct ifreq *ifr = (struct ifreq *)if_req;
11169 11170
11170 11171 ipif->ipif_ill->ill_muxid = ifr->ifr_ip_muxid;
11171 11172 arp_muxid = ifr->ifr_arp_muxid;
11172 11173 } else {
11173 11174 struct lifreq *lifr = (struct lifreq *)if_req;
11174 11175
11175 11176 ipif->ipif_ill->ill_muxid = lifr->lifr_ip_muxid;
11176 11177 arp_muxid = lifr->lifr_arp_muxid;
11177 11178 }
11178 11179 arl_set_muxid(ipif->ipif_ill, arp_muxid);
11179 11180 return (0);
11180 11181 }
11181 11182
11182 11183 /* ARGSUSED */
11183 11184 int
11184 11185 ip_sioctl_get_muxid(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11185 11186 ip_ioctl_cmd_t *ipip, void *if_req)
11186 11187 {
11187 11188 int arp_muxid = 0;
11188 11189
11189 11190 ip1dbg(("ip_sioctl_get_muxid(%s:%u %p)\n",
11190 11191 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11191 11192 /*
11192 11193 * Get the muxid saved in ill for I_PUNLINK.
11193 11194 */
11194 11195 arp_muxid = arl_get_muxid(ipif->ipif_ill);
11195 11196 if (ipip->ipi_cmd_type == IF_CMD) {
11196 11197 struct ifreq *ifr = (struct ifreq *)if_req;
11197 11198
11198 11199 ifr->ifr_ip_muxid = ipif->ipif_ill->ill_muxid;
11199 11200 ifr->ifr_arp_muxid = arp_muxid;
11200 11201 } else {
11201 11202 struct lifreq *lifr = (struct lifreq *)if_req;
11202 11203
11203 11204 lifr->lifr_ip_muxid = ipif->ipif_ill->ill_muxid;
11204 11205 lifr->lifr_arp_muxid = arp_muxid;
11205 11206 }
11206 11207 return (0);
11207 11208 }
11208 11209
11209 11210 /*
11210 11211 * Set the subnet prefix. Does not modify the broadcast address.
11211 11212 */
11212 11213 /* ARGSUSED */
11213 11214 int
11214 11215 ip_sioctl_subnet(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11215 11216 ip_ioctl_cmd_t *ipip, void *if_req)
11216 11217 {
11217 11218 int err = 0;
11218 11219 in6_addr_t v6addr;
11219 11220 in6_addr_t v6mask;
11220 11221 boolean_t need_up = B_FALSE;
11221 11222 int addrlen;
11222 11223
11223 11224 ip1dbg(("ip_sioctl_subnet(%s:%u %p)\n",
11224 11225 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11225 11226
11226 11227 ASSERT(IAM_WRITER_IPIF(ipif));
11227 11228 addrlen = ((struct lifreq *)if_req)->lifr_addrlen;
11228 11229
11229 11230 if (ipif->ipif_isv6) {
11230 11231 sin6_t *sin6;
11231 11232
11232 11233 if (sin->sin_family != AF_INET6)
11233 11234 return (EAFNOSUPPORT);
11234 11235
11235 11236 sin6 = (sin6_t *)sin;
11236 11237 v6addr = sin6->sin6_addr;
11237 11238 if (!ip_remote_addr_ok_v6(&v6addr, &ipv6_all_ones))
11238 11239 return (EADDRNOTAVAIL);
11239 11240 } else {
11240 11241 ipaddr_t addr;
11241 11242
11242 11243 if (sin->sin_family != AF_INET)
11243 11244 return (EAFNOSUPPORT);
11244 11245
11245 11246 addr = sin->sin_addr.s_addr;
11246 11247 if (!ip_addr_ok_v4(addr, 0xFFFFFFFF))
11247 11248 return (EADDRNOTAVAIL);
11248 11249 IN6_IPADDR_TO_V4MAPPED(addr, &v6addr);
11249 11250 /* Add 96 bits */
11250 11251 addrlen += IPV6_ABITS - IP_ABITS;
11251 11252 }
11252 11253
11253 11254 if (ip_plen_to_mask_v6(addrlen, &v6mask) == NULL)
11254 11255 return (EINVAL);
11255 11256
11256 11257 /* Check if bits in the address is set past the mask */
11257 11258 if (!V6_MASK_EQ(v6addr, v6mask, v6addr))
11258 11259 return (EINVAL);
11259 11260
11260 11261 if (IN6_ARE_ADDR_EQUAL(&ipif->ipif_v6subnet, &v6addr) &&
11261 11262 IN6_ARE_ADDR_EQUAL(&ipif->ipif_v6net_mask, &v6mask))
11262 11263 return (0); /* No change */
11263 11264
11264 11265 if (ipif->ipif_flags & IPIF_UP) {
11265 11266 /*
11266 11267 * If the interface is already marked up,
11267 11268 * we call ipif_down which will take care
11268 11269 * of ditching any IREs that have been set
11269 11270 * up based on the old interface address.
11270 11271 */
11271 11272 err = ipif_logical_down(ipif, q, mp);
11272 11273 if (err == EINPROGRESS)
11273 11274 return (err);
11274 11275 (void) ipif_down_tail(ipif);
11275 11276 need_up = B_TRUE;
11276 11277 }
11277 11278
11278 11279 err = ip_sioctl_subnet_tail(ipif, v6addr, v6mask, q, mp, need_up);
11279 11280 return (err);
11280 11281 }
11281 11282
11282 11283 static int
11283 11284 ip_sioctl_subnet_tail(ipif_t *ipif, in6_addr_t v6addr, in6_addr_t v6mask,
11284 11285 queue_t *q, mblk_t *mp, boolean_t need_up)
11285 11286 {
11286 11287 ill_t *ill = ipif->ipif_ill;
11287 11288 int err = 0;
11288 11289
11289 11290 ip1dbg(("ip_sioctl_subnet_tail(%s:%u %p)\n",
11290 11291 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11291 11292
11292 11293 /* Set the new address. */
11293 11294 mutex_enter(&ill->ill_lock);
11294 11295 ipif->ipif_v6net_mask = v6mask;
11295 11296 if ((ipif->ipif_flags & IPIF_POINTOPOINT) == 0) {
11296 11297 V6_MASK_COPY(v6addr, ipif->ipif_v6net_mask,
11297 11298 ipif->ipif_v6subnet);
11298 11299 }
11299 11300 mutex_exit(&ill->ill_lock);
11300 11301
11301 11302 if (need_up) {
11302 11303 /*
11303 11304 * Now bring the interface back up. If this
11304 11305 * is the only IPIF for the ILL, ipif_up
11305 11306 * will have to re-bind to the device, so
11306 11307 * we may get back EINPROGRESS, in which
11307 11308 * case, this IOCTL will get completed in
11308 11309 * ip_rput_dlpi when we see the DL_BIND_ACK.
11309 11310 */
11310 11311 err = ipif_up(ipif, q, mp);
11311 11312 if (err == EINPROGRESS)
11312 11313 return (err);
11313 11314 }
11314 11315 return (err);
11315 11316 }
11316 11317
11317 11318 /* ARGSUSED */
11318 11319 int
11319 11320 ip_sioctl_subnet_restart(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11320 11321 ip_ioctl_cmd_t *ipip, void *if_req)
11321 11322 {
11322 11323 int addrlen;
11323 11324 in6_addr_t v6addr;
11324 11325 in6_addr_t v6mask;
11325 11326 struct lifreq *lifr = (struct lifreq *)if_req;
11326 11327
11327 11328 ip1dbg(("ip_sioctl_subnet_restart(%s:%u %p)\n",
11328 11329 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11329 11330 (void) ipif_down_tail(ipif);
11330 11331
11331 11332 addrlen = lifr->lifr_addrlen;
11332 11333 if (ipif->ipif_isv6) {
11333 11334 sin6_t *sin6;
11334 11335
11335 11336 sin6 = (sin6_t *)sin;
11336 11337 v6addr = sin6->sin6_addr;
11337 11338 } else {
11338 11339 ipaddr_t addr;
11339 11340
11340 11341 addr = sin->sin_addr.s_addr;
11341 11342 IN6_IPADDR_TO_V4MAPPED(addr, &v6addr);
11342 11343 addrlen += IPV6_ABITS - IP_ABITS;
11343 11344 }
11344 11345 (void) ip_plen_to_mask_v6(addrlen, &v6mask);
11345 11346
11346 11347 return (ip_sioctl_subnet_tail(ipif, v6addr, v6mask, q, mp, B_TRUE));
11347 11348 }
11348 11349
11349 11350 /* ARGSUSED */
11350 11351 int
11351 11352 ip_sioctl_get_subnet(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11352 11353 ip_ioctl_cmd_t *ipip, void *if_req)
11353 11354 {
11354 11355 struct lifreq *lifr = (struct lifreq *)if_req;
11355 11356 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sin;
11356 11357
11357 11358 ip1dbg(("ip_sioctl_get_subnet(%s:%u %p)\n",
11358 11359 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11359 11360 ASSERT(ipip->ipi_cmd_type == LIF_CMD);
11360 11361
11361 11362 if (ipif->ipif_isv6) {
11362 11363 *sin6 = sin6_null;
11363 11364 sin6->sin6_family = AF_INET6;
11364 11365 sin6->sin6_addr = ipif->ipif_v6subnet;
11365 11366 lifr->lifr_addrlen =
11366 11367 ip_mask_to_plen_v6(&ipif->ipif_v6net_mask);
11367 11368 } else {
11368 11369 *sin = sin_null;
11369 11370 sin->sin_family = AF_INET;
11370 11371 sin->sin_addr.s_addr = ipif->ipif_subnet;
11371 11372 lifr->lifr_addrlen = ip_mask_to_plen(ipif->ipif_net_mask);
11372 11373 }
11373 11374 return (0);
11374 11375 }
11375 11376
11376 11377 /*
11377 11378 * Set the IPv6 address token.
11378 11379 */
11379 11380 /* ARGSUSED */
11380 11381 int
11381 11382 ip_sioctl_token(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11382 11383 ip_ioctl_cmd_t *ipi, void *if_req)
11383 11384 {
11384 11385 ill_t *ill = ipif->ipif_ill;
11385 11386 int err;
11386 11387 in6_addr_t v6addr;
11387 11388 in6_addr_t v6mask;
11388 11389 boolean_t need_up = B_FALSE;
11389 11390 int i;
11390 11391 sin6_t *sin6 = (sin6_t *)sin;
11391 11392 struct lifreq *lifr = (struct lifreq *)if_req;
11392 11393 int addrlen;
11393 11394
11394 11395 ip1dbg(("ip_sioctl_token(%s:%u %p)\n",
11395 11396 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11396 11397 ASSERT(IAM_WRITER_IPIF(ipif));
11397 11398
11398 11399 addrlen = lifr->lifr_addrlen;
11399 11400 /* Only allow for logical unit zero i.e. not on "le0:17" */
11400 11401 if (ipif->ipif_id != 0)
11401 11402 return (EINVAL);
11402 11403
11403 11404 if (!ipif->ipif_isv6)
11404 11405 return (EINVAL);
11405 11406
11406 11407 if (addrlen > IPV6_ABITS)
11407 11408 return (EINVAL);
11408 11409
11409 11410 v6addr = sin6->sin6_addr;
11410 11411
11411 11412 /*
11412 11413 * The length of the token is the length from the end. To get
11413 11414 * the proper mask for this, compute the mask of the bits not
11414 11415 * in the token; ie. the prefix, and then xor to get the mask.
11415 11416 */
11416 11417 if (ip_plen_to_mask_v6(IPV6_ABITS - addrlen, &v6mask) == NULL)
11417 11418 return (EINVAL);
11418 11419 for (i = 0; i < 4; i++) {
11419 11420 v6mask.s6_addr32[i] ^= (uint32_t)0xffffffff;
11420 11421 }
11421 11422
11422 11423 if (V6_MASK_EQ(v6addr, v6mask, ill->ill_token) &&
11423 11424 ill->ill_token_length == addrlen)
11424 11425 return (0); /* No change */
11425 11426
11426 11427 if (ipif->ipif_flags & IPIF_UP) {
11427 11428 err = ipif_logical_down(ipif, q, mp);
11428 11429 if (err == EINPROGRESS)
11429 11430 return (err);
11430 11431 (void) ipif_down_tail(ipif);
11431 11432 need_up = B_TRUE;
11432 11433 }
11433 11434 err = ip_sioctl_token_tail(ipif, sin6, addrlen, q, mp, need_up);
11434 11435 return (err);
11435 11436 }
11436 11437
11437 11438 static int
11438 11439 ip_sioctl_token_tail(ipif_t *ipif, sin6_t *sin6, int addrlen, queue_t *q,
11439 11440 mblk_t *mp, boolean_t need_up)
11440 11441 {
11441 11442 in6_addr_t v6addr;
11442 11443 in6_addr_t v6mask;
11443 11444 ill_t *ill = ipif->ipif_ill;
11444 11445 int i;
11445 11446 int err = 0;
11446 11447
11447 11448 ip1dbg(("ip_sioctl_token_tail(%s:%u %p)\n",
11448 11449 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11449 11450 v6addr = sin6->sin6_addr;
11450 11451 /*
11451 11452 * The length of the token is the length from the end. To get
11452 11453 * the proper mask for this, compute the mask of the bits not
11453 11454 * in the token; ie. the prefix, and then xor to get the mask.
11454 11455 */
11455 11456 (void) ip_plen_to_mask_v6(IPV6_ABITS - addrlen, &v6mask);
11456 11457 for (i = 0; i < 4; i++)
11457 11458 v6mask.s6_addr32[i] ^= (uint32_t)0xffffffff;
11458 11459
11459 11460 mutex_enter(&ill->ill_lock);
11460 11461 V6_MASK_COPY(v6addr, v6mask, ill->ill_token);
11461 11462 ill->ill_token_length = addrlen;
11462 11463 ill->ill_manual_token = 1;
11463 11464
11464 11465 /* Reconfigure the link-local address based on this new token */
11465 11466 ipif_setlinklocal(ill->ill_ipif);
11466 11467
11467 11468 mutex_exit(&ill->ill_lock);
11468 11469
11469 11470 if (need_up) {
11470 11471 /*
11471 11472 * Now bring the interface back up. If this
11472 11473 * is the only IPIF for the ILL, ipif_up
11473 11474 * will have to re-bind to the device, so
11474 11475 * we may get back EINPROGRESS, in which
11475 11476 * case, this IOCTL will get completed in
11476 11477 * ip_rput_dlpi when we see the DL_BIND_ACK.
11477 11478 */
11478 11479 err = ipif_up(ipif, q, mp);
11479 11480 if (err == EINPROGRESS)
11480 11481 return (err);
11481 11482 }
11482 11483 return (err);
11483 11484 }
11484 11485
11485 11486 /* ARGSUSED */
11486 11487 int
11487 11488 ip_sioctl_get_token(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11488 11489 ip_ioctl_cmd_t *ipi, void *if_req)
11489 11490 {
11490 11491 ill_t *ill;
11491 11492 sin6_t *sin6 = (sin6_t *)sin;
11492 11493 struct lifreq *lifr = (struct lifreq *)if_req;
11493 11494
11494 11495 ip1dbg(("ip_sioctl_get_token(%s:%u %p)\n",
11495 11496 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11496 11497 if (ipif->ipif_id != 0)
11497 11498 return (EINVAL);
11498 11499
11499 11500 ill = ipif->ipif_ill;
11500 11501 if (!ill->ill_isv6)
11501 11502 return (ENXIO);
11502 11503
11503 11504 *sin6 = sin6_null;
11504 11505 sin6->sin6_family = AF_INET6;
11505 11506 ASSERT(!IN6_IS_ADDR_V4MAPPED(&ill->ill_token));
11506 11507 sin6->sin6_addr = ill->ill_token;
11507 11508 lifr->lifr_addrlen = ill->ill_token_length;
11508 11509 return (0);
11509 11510 }
11510 11511
11511 11512 /*
11512 11513 * Set (hardware) link specific information that might override
11513 11514 * what was acquired through the DL_INFO_ACK.
11514 11515 */
11515 11516 /* ARGSUSED */
11516 11517 int
11517 11518 ip_sioctl_lnkinfo(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11518 11519 ip_ioctl_cmd_t *ipi, void *if_req)
11519 11520 {
11520 11521 ill_t *ill = ipif->ipif_ill;
11521 11522 int ip_min_mtu;
11522 11523 struct lifreq *lifr = (struct lifreq *)if_req;
11523 11524 lif_ifinfo_req_t *lir;
11524 11525
11525 11526 ip1dbg(("ip_sioctl_lnkinfo(%s:%u %p)\n",
11526 11527 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11527 11528 lir = &lifr->lifr_ifinfo;
11528 11529 ASSERT(IAM_WRITER_IPIF(ipif));
11529 11530
11530 11531 /* Only allow for logical unit zero i.e. not on "bge0:17" */
11531 11532 if (ipif->ipif_id != 0)
11532 11533 return (EINVAL);
11533 11534
11534 11535 /* Set interface MTU. */
11535 11536 if (ipif->ipif_isv6)
11536 11537 ip_min_mtu = IPV6_MIN_MTU;
11537 11538 else
11538 11539 ip_min_mtu = IP_MIN_MTU;
11539 11540
11540 11541 /*
11541 11542 * Verify values before we set anything. Allow zero to
11542 11543 * mean unspecified.
11543 11544 *
11544 11545 * XXX We should be able to set the user-defined lir_mtu to some value
11545 11546 * that is greater than ill_current_frag but less than ill_max_frag- the
11546 11547 * ill_max_frag value tells us the max MTU that can be handled by the
11547 11548 * datalink, whereas the ill_current_frag is dynamically computed for
11548 11549 * some link-types like tunnels, based on the tunnel PMTU. However,
11549 11550 * since there is currently no way of distinguishing between
11550 11551 * administratively fixed link mtu values (e.g., those set via
11551 11552 * /sbin/dladm) and dynamically discovered MTUs (e.g., those discovered
11552 11553 * for tunnels) we conservatively choose the ill_current_frag as the
11553 11554 * upper-bound.
11554 11555 */
11555 11556 if (lir->lir_maxmtu != 0 &&
11556 11557 (lir->lir_maxmtu > ill->ill_current_frag ||
11557 11558 lir->lir_maxmtu < ip_min_mtu))
11558 11559 return (EINVAL);
11559 11560 if (lir->lir_reachtime != 0 &&
11560 11561 lir->lir_reachtime > ND_MAX_REACHTIME)
11561 11562 return (EINVAL);
11562 11563 if (lir->lir_reachretrans != 0 &&
11563 11564 lir->lir_reachretrans > ND_MAX_REACHRETRANSTIME)
11564 11565 return (EINVAL);
11565 11566
11566 11567 mutex_enter(&ill->ill_lock);
11567 11568 /*
11568 11569 * The dce and fragmentation code can handle changes to ill_mtu
11569 11570 * concurrent with sending/fragmenting packets.
11570 11571 */
11571 11572 if (lir->lir_maxmtu != 0)
11572 11573 ill->ill_user_mtu = lir->lir_maxmtu;
11573 11574
11574 11575 if (lir->lir_reachtime != 0)
11575 11576 ill->ill_reachable_time = lir->lir_reachtime;
11576 11577
11577 11578 if (lir->lir_reachretrans != 0)
11578 11579 ill->ill_reachable_retrans_time = lir->lir_reachretrans;
11579 11580
11580 11581 ill->ill_max_hops = lir->lir_maxhops;
11581 11582 ill->ill_max_buf = ND_MAX_Q;
11582 11583 if (!(ill->ill_flags & ILLF_FIXEDMTU) && ill->ill_user_mtu != 0) {
11583 11584 /*
11584 11585 * ill_mtu is the actual interface MTU, obtained as the min
11585 11586 * of user-configured mtu and the value announced by the
11586 11587 * driver (via DL_NOTE_SDU_SIZE/DL_INFO_ACK). Note that since
11587 11588 * we have already made the choice of requiring
11588 11589 * ill_user_mtu < ill_current_frag by the time we get here,
11589 11590 * the ill_mtu effectively gets assigned to the ill_user_mtu
11590 11591 * here.
11591 11592 */
11592 11593 ill->ill_mtu = MIN(ill->ill_current_frag, ill->ill_user_mtu);
11593 11594 ill->ill_mc_mtu = MIN(ill->ill_mc_mtu, ill->ill_user_mtu);
11594 11595 }
11595 11596 mutex_exit(&ill->ill_lock);
11596 11597
11597 11598 /*
11598 11599 * Make sure all dce_generation checks find out
11599 11600 * that ill_mtu/ill_mc_mtu has changed.
11600 11601 */
11601 11602 if (!(ill->ill_flags & ILLF_FIXEDMTU) && (lir->lir_maxmtu != 0))
11602 11603 dce_increment_all_generations(ill->ill_isv6, ill->ill_ipst);
11603 11604
11604 11605 /*
11605 11606 * Refresh IPMP meta-interface MTU if necessary.
11606 11607 */
11607 11608 if (IS_UNDER_IPMP(ill))
11608 11609 ipmp_illgrp_refresh_mtu(ill->ill_grp);
11609 11610
11610 11611 return (0);
11611 11612 }
11612 11613
11613 11614 /* ARGSUSED */
11614 11615 int
11615 11616 ip_sioctl_get_lnkinfo(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
11616 11617 ip_ioctl_cmd_t *ipi, void *if_req)
11617 11618 {
11618 11619 struct lif_ifinfo_req *lir;
11619 11620 ill_t *ill = ipif->ipif_ill;
11620 11621
11621 11622 ip1dbg(("ip_sioctl_get_lnkinfo(%s:%u %p)\n",
11622 11623 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
11623 11624 if (ipif->ipif_id != 0)
11624 11625 return (EINVAL);
11625 11626
11626 11627 lir = &((struct lifreq *)if_req)->lifr_ifinfo;
11627 11628 lir->lir_maxhops = ill->ill_max_hops;
11628 11629 lir->lir_reachtime = ill->ill_reachable_time;
11629 11630 lir->lir_reachretrans = ill->ill_reachable_retrans_time;
11630 11631 lir->lir_maxmtu = ill->ill_mtu;
11631 11632
11632 11633 return (0);
11633 11634 }
11634 11635
11635 11636 /*
11636 11637 * Return best guess as to the subnet mask for the specified address.
11637 11638 * Based on the subnet masks for all the configured interfaces.
11638 11639 *
11639 11640 * We end up returning a zero mask in the case of default, multicast or
11640 11641 * experimental.
11641 11642 */
11642 11643 static ipaddr_t
11643 11644 ip_subnet_mask(ipaddr_t addr, ipif_t **ipifp, ip_stack_t *ipst)
11644 11645 {
11645 11646 ipaddr_t net_mask;
11646 11647 ill_t *ill;
11647 11648 ipif_t *ipif;
11648 11649 ill_walk_context_t ctx;
11649 11650 ipif_t *fallback_ipif = NULL;
11650 11651
11651 11652 net_mask = ip_net_mask(addr);
11652 11653 if (net_mask == 0) {
11653 11654 *ipifp = NULL;
11654 11655 return (0);
11655 11656 }
11656 11657
11657 11658 /* Let's check to see if this is maybe a local subnet route. */
11658 11659 /* this function only applies to IPv4 interfaces */
11659 11660 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
11660 11661 ill = ILL_START_WALK_V4(&ctx, ipst);
11661 11662 for (; ill != NULL; ill = ill_next(&ctx, ill)) {
11662 11663 mutex_enter(&ill->ill_lock);
11663 11664 for (ipif = ill->ill_ipif; ipif != NULL;
11664 11665 ipif = ipif->ipif_next) {
11665 11666 if (IPIF_IS_CONDEMNED(ipif))
11666 11667 continue;
11667 11668 if (!(ipif->ipif_flags & IPIF_UP))
11668 11669 continue;
11669 11670 if ((ipif->ipif_subnet & net_mask) ==
11670 11671 (addr & net_mask)) {
11671 11672 /*
11672 11673 * Don't trust pt-pt interfaces if there are
11673 11674 * other interfaces.
11674 11675 */
11675 11676 if (ipif->ipif_flags & IPIF_POINTOPOINT) {
11676 11677 if (fallback_ipif == NULL) {
11677 11678 ipif_refhold_locked(ipif);
11678 11679 fallback_ipif = ipif;
11679 11680 }
11680 11681 continue;
11681 11682 }
11682 11683
11683 11684 /*
11684 11685 * Fine. Just assume the same net mask as the
11685 11686 * directly attached subnet interface is using.
11686 11687 */
11687 11688 ipif_refhold_locked(ipif);
11688 11689 mutex_exit(&ill->ill_lock);
11689 11690 rw_exit(&ipst->ips_ill_g_lock);
11690 11691 if (fallback_ipif != NULL)
11691 11692 ipif_refrele(fallback_ipif);
11692 11693 *ipifp = ipif;
11693 11694 return (ipif->ipif_net_mask);
11694 11695 }
11695 11696 }
11696 11697 mutex_exit(&ill->ill_lock);
11697 11698 }
11698 11699 rw_exit(&ipst->ips_ill_g_lock);
11699 11700
11700 11701 *ipifp = fallback_ipif;
11701 11702 return ((fallback_ipif != NULL) ?
11702 11703 fallback_ipif->ipif_net_mask : net_mask);
11703 11704 }
11704 11705
11705 11706 /*
11706 11707 * ip_sioctl_copyin_setup calls ip_wput_ioctl to process the IP_IOCTL ioctl.
11707 11708 */
11708 11709 static void
11709 11710 ip_wput_ioctl(queue_t *q, mblk_t *mp)
11710 11711 {
11711 11712 IOCP iocp;
11712 11713 ipft_t *ipft;
11713 11714 ipllc_t *ipllc;
11714 11715 mblk_t *mp1;
11715 11716 cred_t *cr;
11716 11717 int error = 0;
11717 11718 conn_t *connp;
11718 11719
11719 11720 ip1dbg(("ip_wput_ioctl"));
11720 11721 iocp = (IOCP)mp->b_rptr;
11721 11722 mp1 = mp->b_cont;
11722 11723 if (mp1 == NULL) {
11723 11724 iocp->ioc_error = EINVAL;
11724 11725 mp->b_datap->db_type = M_IOCNAK;
11725 11726 iocp->ioc_count = 0;
11726 11727 qreply(q, mp);
11727 11728 return;
11728 11729 }
11729 11730
11730 11731 /*
11731 11732 * These IOCTLs provide various control capabilities to
11732 11733 * upstream agents such as ULPs and processes. There
11733 11734 * are currently two such IOCTLs implemented. They
11734 11735 * are used by TCP to provide update information for
11735 11736 * existing IREs and to forcibly delete an IRE for a
11736 11737 * host that is not responding, thereby forcing an
11737 11738 * attempt at a new route.
11738 11739 */
11739 11740 iocp->ioc_error = EINVAL;
11740 11741 if (!pullupmsg(mp1, sizeof (ipllc->ipllc_cmd)))
11741 11742 goto done;
11742 11743
11743 11744 ipllc = (ipllc_t *)mp1->b_rptr;
11744 11745 for (ipft = ip_ioctl_ftbl; ipft->ipft_pfi; ipft++) {
11745 11746 if (ipllc->ipllc_cmd == ipft->ipft_cmd)
11746 11747 break;
11747 11748 }
11748 11749 /*
11749 11750 * prefer credential from mblk over ioctl;
11750 11751 * see ip_sioctl_copyin_setup
11751 11752 */
11752 11753 cr = msg_getcred(mp, NULL);
11753 11754 if (cr == NULL)
11754 11755 cr = iocp->ioc_cr;
11755 11756
11756 11757 /*
11757 11758 * Refhold the conn in case the request gets queued up in some lookup
11758 11759 */
11759 11760 ASSERT(CONN_Q(q));
11760 11761 connp = Q_TO_CONN(q);
11761 11762 CONN_INC_REF(connp);
11762 11763 CONN_INC_IOCTLREF(connp);
11763 11764 if (ipft->ipft_pfi &&
11764 11765 ((mp1->b_wptr - mp1->b_rptr) >= ipft->ipft_min_size ||
11765 11766 pullupmsg(mp1, ipft->ipft_min_size))) {
11766 11767 error = (*ipft->ipft_pfi)(q,
11767 11768 (ipft->ipft_flags & IPFT_F_SELF_REPLY) ? mp : mp1, cr);
11768 11769 }
11769 11770 if (ipft->ipft_flags & IPFT_F_SELF_REPLY) {
11770 11771 /*
11771 11772 * CONN_OPER_PENDING_DONE happens in the function called
11772 11773 * through ipft_pfi above.
11773 11774 */
11774 11775 return;
11775 11776 }
11776 11777
11777 11778 CONN_DEC_IOCTLREF(connp);
11778 11779 CONN_OPER_PENDING_DONE(connp);
11779 11780 if (ipft->ipft_flags & IPFT_F_NO_REPLY) {
11780 11781 freemsg(mp);
11781 11782 return;
11782 11783 }
11783 11784 iocp->ioc_error = error;
11784 11785
11785 11786 done:
11786 11787 mp->b_datap->db_type = M_IOCACK;
11787 11788 if (iocp->ioc_error)
11788 11789 iocp->ioc_count = 0;
11789 11790 qreply(q, mp);
11790 11791 }
11791 11792
11792 11793 /*
11793 11794 * Assign a unique id for the ipif. This is used by sctp_addr.c
11794 11795 * Note: remove if sctp_addr.c is redone to not shadow ill/ipif data structures.
11795 11796 */
11796 11797 static void
11797 11798 ipif_assign_seqid(ipif_t *ipif)
11798 11799 {
11799 11800 ip_stack_t *ipst = ipif->ipif_ill->ill_ipst;
11800 11801
11801 11802 ipif->ipif_seqid = atomic_add_64_nv(&ipst->ips_ipif_g_seqid, 1);
11802 11803 }
11803 11804
11804 11805 /*
11805 11806 * Clone the contents of `sipif' to `dipif'. Requires that both ipifs are
11806 11807 * administratively down (i.e., no DAD), of the same type, and locked. Note
11807 11808 * that the clone is complete -- including the seqid -- and the expectation is
11808 11809 * that the caller will either free or overwrite `sipif' before it's unlocked.
11809 11810 */
11810 11811 static void
11811 11812 ipif_clone(const ipif_t *sipif, ipif_t *dipif)
11812 11813 {
11813 11814 ASSERT(MUTEX_HELD(&sipif->ipif_ill->ill_lock));
11814 11815 ASSERT(MUTEX_HELD(&dipif->ipif_ill->ill_lock));
11815 11816 ASSERT(!(sipif->ipif_flags & (IPIF_UP|IPIF_DUPLICATE)));
11816 11817 ASSERT(!(dipif->ipif_flags & (IPIF_UP|IPIF_DUPLICATE)));
11817 11818 ASSERT(sipif->ipif_ire_type == dipif->ipif_ire_type);
11818 11819
11819 11820 dipif->ipif_flags = sipif->ipif_flags;
11820 11821 dipif->ipif_zoneid = sipif->ipif_zoneid;
11821 11822 dipif->ipif_v6subnet = sipif->ipif_v6subnet;
11822 11823 dipif->ipif_v6lcl_addr = sipif->ipif_v6lcl_addr;
11823 11824 dipif->ipif_v6net_mask = sipif->ipif_v6net_mask;
11824 11825 dipif->ipif_v6brd_addr = sipif->ipif_v6brd_addr;
11825 11826 dipif->ipif_v6pp_dst_addr = sipif->ipif_v6pp_dst_addr;
11826 11827
11827 11828 /*
11828 11829 * As per the comment atop the function, we assume that these sipif
11829 11830 * fields will be changed before sipif is unlocked.
11830 11831 */
11831 11832 dipif->ipif_seqid = sipif->ipif_seqid;
11832 11833 dipif->ipif_state_flags = sipif->ipif_state_flags;
11833 11834 }
11834 11835
11835 11836 /*
11836 11837 * Transfer the contents of `sipif' to `dipif', and then free (if `virgipif'
11837 11838 * is NULL) or overwrite `sipif' with `virgipif', which must be a virgin
11838 11839 * (unreferenced) ipif. Also, if `sipif' is used by the current xop, then
11839 11840 * transfer the xop to `dipif'. Requires that all ipifs are administratively
11840 11841 * down (i.e., no DAD), of the same type, and unlocked.
11841 11842 */
11842 11843 static void
11843 11844 ipif_transfer(ipif_t *sipif, ipif_t *dipif, ipif_t *virgipif)
11844 11845 {
11845 11846 ipsq_t *ipsq = sipif->ipif_ill->ill_phyint->phyint_ipsq;
11846 11847 ipxop_t *ipx = ipsq->ipsq_xop;
11847 11848
11848 11849 ASSERT(sipif != dipif);
11849 11850 ASSERT(sipif != virgipif);
11850 11851
11851 11852 /*
11852 11853 * Grab all of the locks that protect the ipif in a defined order.
11853 11854 */
11854 11855 GRAB_ILL_LOCKS(sipif->ipif_ill, dipif->ipif_ill);
11855 11856
11856 11857 ipif_clone(sipif, dipif);
11857 11858 if (virgipif != NULL) {
11858 11859 ipif_clone(virgipif, sipif);
11859 11860 mi_free(virgipif);
11860 11861 }
11861 11862
11862 11863 RELEASE_ILL_LOCKS(sipif->ipif_ill, dipif->ipif_ill);
11863 11864
11864 11865 /*
11865 11866 * Transfer ownership of the current xop, if necessary.
11866 11867 */
11867 11868 if (ipx->ipx_current_ipif == sipif) {
11868 11869 ASSERT(ipx->ipx_pending_ipif == NULL);
11869 11870 mutex_enter(&ipx->ipx_lock);
11870 11871 ipx->ipx_current_ipif = dipif;
11871 11872 mutex_exit(&ipx->ipx_lock);
11872 11873 }
11873 11874
11874 11875 if (virgipif == NULL)
11875 11876 mi_free(sipif);
11876 11877 }
11877 11878
11878 11879 /*
11879 11880 * checks if:
11880 11881 * - <ill_name>:<ipif_id> is at most LIFNAMSIZ - 1 and
11881 11882 * - logical interface is within the allowed range
11882 11883 */
11883 11884 static int
11884 11885 is_lifname_valid(ill_t *ill, unsigned int ipif_id)
11885 11886 {
11886 11887 if (snprintf(NULL, 0, "%s:%d", ill->ill_name, ipif_id) >= LIFNAMSIZ)
11887 11888 return (ENAMETOOLONG);
11888 11889
11889 11890 if (ipif_id >= ill->ill_ipst->ips_ip_addrs_per_if)
11890 11891 return (ERANGE);
11891 11892 return (0);
11892 11893 }
11893 11894
11894 11895 /*
11895 11896 * Insert the ipif, so that the list of ipifs on the ill will be sorted
11896 11897 * with respect to ipif_id. Note that an ipif with an ipif_id of -1 will
11897 11898 * be inserted into the first space available in the list. The value of
11898 11899 * ipif_id will then be set to the appropriate value for its position.
11899 11900 */
11900 11901 static int
11901 11902 ipif_insert(ipif_t *ipif, boolean_t acquire_g_lock)
11902 11903 {
11903 11904 ill_t *ill;
11904 11905 ipif_t *tipif;
11905 11906 ipif_t **tipifp;
11906 11907 int id, err;
11907 11908 ip_stack_t *ipst;
11908 11909
11909 11910 ASSERT(ipif->ipif_ill->ill_net_type == IRE_LOOPBACK ||
11910 11911 IAM_WRITER_IPIF(ipif));
11911 11912
11912 11913 ill = ipif->ipif_ill;
11913 11914 ASSERT(ill != NULL);
11914 11915 ipst = ill->ill_ipst;
11915 11916
11916 11917 /*
11917 11918 * In the case of lo0:0 we already hold the ill_g_lock.
11918 11919 * ill_lookup_on_name (acquires ill_g_lock) -> ipif_allocate ->
11919 11920 * ipif_insert.
11920 11921 */
11921 11922 if (acquire_g_lock)
11922 11923 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
11923 11924 mutex_enter(&ill->ill_lock);
11924 11925 id = ipif->ipif_id;
11925 11926 tipifp = &(ill->ill_ipif);
11926 11927 if (id == -1) { /* need to find a real id */
11927 11928 id = 0;
11928 11929 while ((tipif = *tipifp) != NULL) {
11929 11930 ASSERT(tipif->ipif_id >= id);
11930 11931 if (tipif->ipif_id != id)
11931 11932 break; /* non-consecutive id */
11932 11933 id++;
11933 11934 tipifp = &(tipif->ipif_next);
11934 11935 }
11935 11936 if ((err = is_lifname_valid(ill, id)) != 0) {
11936 11937 mutex_exit(&ill->ill_lock);
11937 11938 if (acquire_g_lock)
11938 11939 rw_exit(&ipst->ips_ill_g_lock);
11939 11940 return (err);
11940 11941 }
11941 11942 ipif->ipif_id = id; /* assign new id */
11942 11943 } else if ((err = is_lifname_valid(ill, id)) == 0) {
11943 11944 /* we have a real id; insert ipif in the right place */
11944 11945 while ((tipif = *tipifp) != NULL) {
11945 11946 ASSERT(tipif->ipif_id != id);
11946 11947 if (tipif->ipif_id > id)
11947 11948 break; /* found correct location */
11948 11949 tipifp = &(tipif->ipif_next);
11949 11950 }
11950 11951 } else {
11951 11952 mutex_exit(&ill->ill_lock);
11952 11953 if (acquire_g_lock)
11953 11954 rw_exit(&ipst->ips_ill_g_lock);
11954 11955 return (err);
11955 11956 }
11956 11957
11957 11958 ASSERT(tipifp != &(ill->ill_ipif) || id == 0);
11958 11959
11959 11960 ipif->ipif_next = tipif;
11960 11961 *tipifp = ipif;
11961 11962 mutex_exit(&ill->ill_lock);
11962 11963 if (acquire_g_lock)
11963 11964 rw_exit(&ipst->ips_ill_g_lock);
11964 11965
11965 11966 return (0);
11966 11967 }
11967 11968
11968 11969 static void
11969 11970 ipif_remove(ipif_t *ipif)
11970 11971 {
11971 11972 ipif_t **ipifp;
11972 11973 ill_t *ill = ipif->ipif_ill;
11973 11974
11974 11975 ASSERT(RW_WRITE_HELD(&ill->ill_ipst->ips_ill_g_lock));
11975 11976
11976 11977 mutex_enter(&ill->ill_lock);
11977 11978 ipifp = &ill->ill_ipif;
11978 11979 for (; *ipifp != NULL; ipifp = &ipifp[0]->ipif_next) {
11979 11980 if (*ipifp == ipif) {
11980 11981 *ipifp = ipif->ipif_next;
11981 11982 break;
11982 11983 }
11983 11984 }
11984 11985 mutex_exit(&ill->ill_lock);
11985 11986 }
11986 11987
11987 11988 /*
11988 11989 * Allocate and initialize a new interface control structure. (Always
11989 11990 * called as writer.)
11990 11991 * When ipif_allocate() is called from ip_ll_subnet_defaults, the ill
11991 11992 * is not part of the global linked list of ills. ipif_seqid is unique
11992 11993 * in the system and to preserve the uniqueness, it is assigned only
11993 11994 * when ill becomes part of the global list. At that point ill will
11994 11995 * have a name. If it doesn't get assigned here, it will get assigned
11995 11996 * in ipif_set_values() as part of SIOCSLIFNAME processing.
11996 11997 * Aditionally, if we come here from ip_ll_subnet_defaults, we don't set
11997 11998 * the interface flags or any other information from the DL_INFO_ACK for
11998 11999 * DL_STYLE2 drivers (initialize == B_FALSE), since we won't have them at
11999 12000 * this point. The flags etc. will be set in ip_ll_subnet_defaults when the
12000 12001 * second DL_INFO_ACK comes in from the driver.
12001 12002 */
12002 12003 static ipif_t *
12003 12004 ipif_allocate(ill_t *ill, int id, uint_t ire_type, boolean_t initialize,
12004 12005 boolean_t insert, int *errorp)
12005 12006 {
12006 12007 int err;
12007 12008 ipif_t *ipif;
12008 12009 ip_stack_t *ipst = ill->ill_ipst;
12009 12010
12010 12011 ip1dbg(("ipif_allocate(%s:%d ill %p)\n",
12011 12012 ill->ill_name, id, (void *)ill));
12012 12013 ASSERT(ire_type == IRE_LOOPBACK || IAM_WRITER_ILL(ill));
12013 12014
12014 12015 if (errorp != NULL)
12015 12016 *errorp = 0;
12016 12017
12017 12018 if ((ipif = mi_alloc(sizeof (ipif_t), BPRI_MED)) == NULL) {
12018 12019 if (errorp != NULL)
12019 12020 *errorp = ENOMEM;
12020 12021 return (NULL);
12021 12022 }
12022 12023 *ipif = ipif_zero; /* start clean */
12023 12024
12024 12025 ipif->ipif_ill = ill;
12025 12026 ipif->ipif_id = id; /* could be -1 */
12026 12027 /*
12027 12028 * Inherit the zoneid from the ill; for the shared stack instance
12028 12029 * this is always the global zone
12029 12030 */
12030 12031 ipif->ipif_zoneid = ill->ill_zoneid;
12031 12032
12032 12033 ipif->ipif_refcnt = 0;
12033 12034
12034 12035 if (insert) {
12035 12036 if ((err = ipif_insert(ipif, ire_type != IRE_LOOPBACK)) != 0) {
12036 12037 mi_free(ipif);
12037 12038 if (errorp != NULL)
12038 12039 *errorp = err;
12039 12040 return (NULL);
12040 12041 }
12041 12042 /* -1 id should have been replaced by real id */
12042 12043 id = ipif->ipif_id;
12043 12044 ASSERT(id >= 0);
12044 12045 }
12045 12046
12046 12047 if (ill->ill_name[0] != '\0')
12047 12048 ipif_assign_seqid(ipif);
12048 12049
12049 12050 /*
12050 12051 * If this is the zeroth ipif on the IPMP ill, create the illgrp
12051 12052 * (which must not exist yet because the zeroth ipif is created once
12052 12053 * per ill). However, do not not link it to the ipmp_grp_t until
12053 12054 * I_PLINK is called; see ip_sioctl_plink_ipmp() for details.
12054 12055 */
12055 12056 if (id == 0 && IS_IPMP(ill)) {
12056 12057 if (ipmp_illgrp_create(ill) == NULL) {
12057 12058 if (insert) {
12058 12059 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
12059 12060 ipif_remove(ipif);
12060 12061 rw_exit(&ipst->ips_ill_g_lock);
12061 12062 }
12062 12063 mi_free(ipif);
12063 12064 if (errorp != NULL)
12064 12065 *errorp = ENOMEM;
12065 12066 return (NULL);
12066 12067 }
12067 12068 }
12068 12069
12069 12070 /*
12070 12071 * We grab ill_lock to protect the flag changes. The ipif is still
12071 12072 * not up and can't be looked up until the ioctl completes and the
12072 12073 * IPIF_CHANGING flag is cleared.
12073 12074 */
12074 12075 mutex_enter(&ill->ill_lock);
12075 12076
12076 12077 ipif->ipif_ire_type = ire_type;
12077 12078
12078 12079 if (ipif->ipif_isv6) {
12079 12080 ill->ill_flags |= ILLF_IPV6;
12080 12081 } else {
12081 12082 ipaddr_t inaddr_any = INADDR_ANY;
12082 12083
12083 12084 ill->ill_flags |= ILLF_IPV4;
12084 12085
12085 12086 /* Keep the IN6_IS_ADDR_V4MAPPED assertions happy */
12086 12087 IN6_IPADDR_TO_V4MAPPED(inaddr_any,
12087 12088 &ipif->ipif_v6lcl_addr);
12088 12089 IN6_IPADDR_TO_V4MAPPED(inaddr_any,
12089 12090 &ipif->ipif_v6subnet);
12090 12091 IN6_IPADDR_TO_V4MAPPED(inaddr_any,
12091 12092 &ipif->ipif_v6net_mask);
12092 12093 IN6_IPADDR_TO_V4MAPPED(inaddr_any,
12093 12094 &ipif->ipif_v6brd_addr);
12094 12095 IN6_IPADDR_TO_V4MAPPED(inaddr_any,
12095 12096 &ipif->ipif_v6pp_dst_addr);
12096 12097 }
12097 12098
12098 12099 /*
12099 12100 * Don't set the interface flags etc. now, will do it in
12100 12101 * ip_ll_subnet_defaults.
12101 12102 */
12102 12103 if (!initialize)
12103 12104 goto out;
12104 12105
12105 12106 /*
12106 12107 * NOTE: The IPMP meta-interface is special-cased because it starts
12107 12108 * with no underlying interfaces (and thus an unknown broadcast
12108 12109 * address length), but all interfaces that can be placed into an IPMP
12109 12110 * group are required to be broadcast-capable.
12110 12111 */
12111 12112 if (ill->ill_bcast_addr_length != 0 || IS_IPMP(ill)) {
12112 12113 /*
12113 12114 * Later detect lack of DLPI driver multicast capability by
12114 12115 * catching DL_ENABMULTI_REQ errors in ip_rput_dlpi().
12115 12116 */
12116 12117 ill->ill_flags |= ILLF_MULTICAST;
12117 12118 if (!ipif->ipif_isv6)
12118 12119 ipif->ipif_flags |= IPIF_BROADCAST;
12119 12120 } else {
12120 12121 if (ill->ill_net_type != IRE_LOOPBACK) {
12121 12122 if (ipif->ipif_isv6)
12122 12123 /*
12123 12124 * Note: xresolv interfaces will eventually need
12124 12125 * NOARP set here as well, but that will require
12125 12126 * those external resolvers to have some
12126 12127 * knowledge of that flag and act appropriately.
12127 12128 * Not to be changed at present.
12128 12129 */
12129 12130 ill->ill_flags |= ILLF_NONUD;
12130 12131 else
12131 12132 ill->ill_flags |= ILLF_NOARP;
12132 12133 }
12133 12134 if (ill->ill_phys_addr_length == 0) {
12134 12135 if (IS_VNI(ill)) {
12135 12136 ipif->ipif_flags |= IPIF_NOXMIT;
12136 12137 } else {
12137 12138 /* pt-pt supports multicast. */
12138 12139 ill->ill_flags |= ILLF_MULTICAST;
12139 12140 if (ill->ill_net_type != IRE_LOOPBACK)
12140 12141 ipif->ipif_flags |= IPIF_POINTOPOINT;
12141 12142 }
12142 12143 }
12143 12144 }
12144 12145 out:
12145 12146 mutex_exit(&ill->ill_lock);
12146 12147 return (ipif);
12147 12148 }
12148 12149
12149 12150 /*
12150 12151 * Remove the neighbor cache entries associated with this logical
12151 12152 * interface.
12152 12153 */
12153 12154 int
12154 12155 ipif_arp_down(ipif_t *ipif)
12155 12156 {
12156 12157 ill_t *ill = ipif->ipif_ill;
12157 12158 int err = 0;
12158 12159
12159 12160 ip1dbg(("ipif_arp_down(%s:%u)\n", ill->ill_name, ipif->ipif_id));
12160 12161 ASSERT(IAM_WRITER_IPIF(ipif));
12161 12162
12162 12163 DTRACE_PROBE3(ipif__downup, char *, "ipif_arp_down",
12163 12164 ill_t *, ill, ipif_t *, ipif);
12164 12165 ipif_nce_down(ipif);
12165 12166
12166 12167 /*
12167 12168 * If this is the last ipif that is going down and there are no
12168 12169 * duplicate addresses we may yet attempt to re-probe, then we need to
12169 12170 * clean up ARP completely.
12170 12171 */
12171 12172 if (ill->ill_ipif_up_count == 0 && ill->ill_ipif_dup_count == 0 &&
12172 12173 !ill->ill_logical_down && ill->ill_net_type == IRE_IF_RESOLVER) {
12173 12174 /*
12174 12175 * If this was the last ipif on an IPMP interface, purge any
12175 12176 * static ARP entries associated with it.
12176 12177 */
12177 12178 if (IS_IPMP(ill))
12178 12179 ipmp_illgrp_refresh_arpent(ill->ill_grp);
12179 12180
12180 12181 /* UNBIND, DETACH */
12181 12182 err = arp_ll_down(ill);
12182 12183 }
12183 12184
12184 12185 return (err);
12185 12186 }
12186 12187
12187 12188 /*
12188 12189 * Get the resolver set up for a new IP address. (Always called as writer.)
12189 12190 * Called both for IPv4 and IPv6 interfaces, though it only does some
12190 12191 * basic DAD related initialization for IPv6. Honors ILLF_NOARP.
12191 12192 *
12192 12193 * The enumerated value res_act tunes the behavior:
12193 12194 * * Res_act_initial: set up all the resolver structures for a new
12194 12195 * IP address.
12195 12196 * * Res_act_defend: tell ARP that it needs to send a single gratuitous
12196 12197 * ARP message in defense of the address.
12197 12198 * * Res_act_rebind: tell ARP to change the hardware address for an IP
12198 12199 * address (and issue gratuitous ARPs). Used by ipmp_ill_bind_ipif().
12199 12200 *
12200 12201 * Returns zero on success, or an errno upon failure.
12201 12202 */
12202 12203 int
12203 12204 ipif_resolver_up(ipif_t *ipif, enum ip_resolver_action res_act)
12204 12205 {
12205 12206 ill_t *ill = ipif->ipif_ill;
12206 12207 int err;
12207 12208 boolean_t was_dup;
12208 12209
12209 12210 ip1dbg(("ipif_resolver_up(%s:%u) flags 0x%x\n",
12210 12211 ill->ill_name, ipif->ipif_id, (uint_t)ipif->ipif_flags));
12211 12212 ASSERT(IAM_WRITER_IPIF(ipif));
12212 12213
12213 12214 was_dup = B_FALSE;
12214 12215 if (res_act == Res_act_initial) {
12215 12216 ipif->ipif_addr_ready = 0;
12216 12217 /*
12217 12218 * We're bringing an interface up here. There's no way that we
12218 12219 * should need to shut down ARP now.
12219 12220 */
12220 12221 mutex_enter(&ill->ill_lock);
12221 12222 if (ipif->ipif_flags & IPIF_DUPLICATE) {
12222 12223 ipif->ipif_flags &= ~IPIF_DUPLICATE;
12223 12224 ill->ill_ipif_dup_count--;
12224 12225 was_dup = B_TRUE;
12225 12226 }
12226 12227 mutex_exit(&ill->ill_lock);
12227 12228 }
12228 12229 if (ipif->ipif_recovery_id != 0)
12229 12230 (void) untimeout(ipif->ipif_recovery_id);
12230 12231 ipif->ipif_recovery_id = 0;
12231 12232 if (ill->ill_net_type != IRE_IF_RESOLVER) {
12232 12233 ipif->ipif_addr_ready = 1;
12233 12234 return (0);
12234 12235 }
12235 12236 /* NDP will set the ipif_addr_ready flag when it's ready */
12236 12237 if (ill->ill_isv6)
12237 12238 return (0);
12238 12239
12239 12240 err = ipif_arp_up(ipif, res_act, was_dup);
12240 12241 return (err);
12241 12242 }
12242 12243
12243 12244 /*
12244 12245 * This routine restarts IPv4/IPv6 duplicate address detection (DAD)
12245 12246 * when a link has just gone back up.
12246 12247 */
12247 12248 static void
12248 12249 ipif_nce_start_dad(ipif_t *ipif)
12249 12250 {
12250 12251 ncec_t *ncec;
12251 12252 ill_t *ill = ipif->ipif_ill;
12252 12253 boolean_t isv6 = ill->ill_isv6;
12253 12254
12254 12255 if (isv6) {
12255 12256 ncec = ncec_lookup_illgrp_v6(ipif->ipif_ill,
12256 12257 &ipif->ipif_v6lcl_addr);
12257 12258 } else {
12258 12259 ipaddr_t v4addr;
12259 12260
12260 12261 if (ill->ill_net_type != IRE_IF_RESOLVER ||
12261 12262 (ipif->ipif_flags & IPIF_UNNUMBERED) ||
12262 12263 ipif->ipif_lcl_addr == INADDR_ANY) {
12263 12264 /*
12264 12265 * If we can't contact ARP for some reason,
12265 12266 * that's not really a problem. Just send
12266 12267 * out the routing socket notification that
12267 12268 * DAD completion would have done, and continue.
12268 12269 */
12269 12270 ipif_mask_reply(ipif);
12270 12271 ipif_up_notify(ipif);
12271 12272 ipif->ipif_addr_ready = 1;
12272 12273 return;
12273 12274 }
12274 12275
12275 12276 IN6_V4MAPPED_TO_IPADDR(&ipif->ipif_v6lcl_addr, v4addr);
12276 12277 ncec = ncec_lookup_illgrp_v4(ipif->ipif_ill, &v4addr);
12277 12278 }
12278 12279
12279 12280 if (ncec == NULL) {
12280 12281 ip1dbg(("couldn't find ncec for ipif %p leaving !ready\n",
12281 12282 (void *)ipif));
12282 12283 return;
12283 12284 }
12284 12285 if (!nce_restart_dad(ncec)) {
12285 12286 /*
12286 12287 * If we can't restart DAD for some reason, that's not really a
12287 12288 * problem. Just send out the routing socket notification that
12288 12289 * DAD completion would have done, and continue.
12289 12290 */
12290 12291 ipif_up_notify(ipif);
12291 12292 ipif->ipif_addr_ready = 1;
12292 12293 }
12293 12294 ncec_refrele(ncec);
12294 12295 }
12295 12296
12296 12297 /*
12297 12298 * Restart duplicate address detection on all interfaces on the given ill.
12298 12299 *
12299 12300 * This is called when an interface transitions from down to up
12300 12301 * (DL_NOTE_LINK_UP) or up to down (DL_NOTE_LINK_DOWN).
12301 12302 *
12302 12303 * Note that since the underlying physical link has transitioned, we must cause
12303 12304 * at least one routing socket message to be sent here, either via DAD
12304 12305 * completion or just by default on the first ipif. (If we don't do this, then
12305 12306 * in.mpathd will see long delays when doing link-based failure recovery.)
12306 12307 */
12307 12308 void
12308 12309 ill_restart_dad(ill_t *ill, boolean_t went_up)
12309 12310 {
12310 12311 ipif_t *ipif;
12311 12312
12312 12313 if (ill == NULL)
12313 12314 return;
12314 12315
12315 12316 /*
12316 12317 * If layer two doesn't support duplicate address detection, then just
12317 12318 * send the routing socket message now and be done with it.
12318 12319 */
12319 12320 if (!ill->ill_isv6 && arp_no_defense) {
12320 12321 ip_rts_ifmsg(ill->ill_ipif, RTSQ_DEFAULT);
12321 12322 return;
12322 12323 }
12323 12324
12324 12325 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
12325 12326 if (went_up) {
12326 12327
12327 12328 if (ipif->ipif_flags & IPIF_UP) {
12328 12329 ipif_nce_start_dad(ipif);
12329 12330 } else if (ipif->ipif_flags & IPIF_DUPLICATE) {
12330 12331 /*
12331 12332 * kick off the bring-up process now.
12332 12333 */
12333 12334 ipif_do_recovery(ipif);
12334 12335 } else {
12335 12336 /*
12336 12337 * Unfortunately, the first ipif is "special"
12337 12338 * and represents the underlying ill in the
12338 12339 * routing socket messages. Thus, when this
12339 12340 * one ipif is down, we must still notify so
12340 12341 * that the user knows the IFF_RUNNING status
12341 12342 * change. (If the first ipif is up, then
12342 12343 * we'll handle eventual routing socket
12343 12344 * notification via DAD completion.)
12344 12345 */
12345 12346 if (ipif == ill->ill_ipif) {
12346 12347 ip_rts_ifmsg(ill->ill_ipif,
12347 12348 RTSQ_DEFAULT);
12348 12349 }
12349 12350 }
12350 12351 } else {
12351 12352 /*
12352 12353 * After link down, we'll need to send a new routing
12353 12354 * message when the link comes back, so clear
12354 12355 * ipif_addr_ready.
12355 12356 */
12356 12357 ipif->ipif_addr_ready = 0;
12357 12358 }
12358 12359 }
12359 12360
12360 12361 /*
12361 12362 * If we've torn down links, then notify the user right away.
12362 12363 */
12363 12364 if (!went_up)
12364 12365 ip_rts_ifmsg(ill->ill_ipif, RTSQ_DEFAULT);
12365 12366 }
12366 12367
12367 12368 static void
12368 12369 ipsq_delete(ipsq_t *ipsq)
12369 12370 {
12370 12371 ipxop_t *ipx = ipsq->ipsq_xop;
12371 12372
12372 12373 ipsq->ipsq_ipst = NULL;
12373 12374 ASSERT(ipsq->ipsq_phyint == NULL);
12374 12375 ASSERT(ipsq->ipsq_xop != NULL);
12375 12376 ASSERT(ipsq->ipsq_xopq_mphead == NULL && ipx->ipx_mphead == NULL);
12376 12377 ASSERT(ipx->ipx_pending_mp == NULL);
12377 12378 kmem_free(ipsq, sizeof (ipsq_t));
12378 12379 }
12379 12380
12380 12381 static int
12381 12382 ill_up_ipifs_on_ill(ill_t *ill, queue_t *q, mblk_t *mp)
12382 12383 {
12383 12384 int err = 0;
12384 12385 ipif_t *ipif;
12385 12386
12386 12387 if (ill == NULL)
12387 12388 return (0);
12388 12389
12389 12390 ASSERT(IAM_WRITER_ILL(ill));
12390 12391 ill->ill_up_ipifs = B_TRUE;
12391 12392 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
12392 12393 if (ipif->ipif_was_up) {
12393 12394 if (!(ipif->ipif_flags & IPIF_UP))
12394 12395 err = ipif_up(ipif, q, mp);
12395 12396 ipif->ipif_was_up = B_FALSE;
12396 12397 if (err != 0) {
12397 12398 ASSERT(err == EINPROGRESS);
12398 12399 return (err);
12399 12400 }
12400 12401 }
12401 12402 }
12402 12403 ill->ill_up_ipifs = B_FALSE;
12403 12404 return (0);
12404 12405 }
12405 12406
12406 12407 /*
12407 12408 * This function is called to bring up all the ipifs that were up before
12408 12409 * bringing the ill down via ill_down_ipifs().
12409 12410 */
12410 12411 int
12411 12412 ill_up_ipifs(ill_t *ill, queue_t *q, mblk_t *mp)
12412 12413 {
12413 12414 int err;
12414 12415
12415 12416 ASSERT(IAM_WRITER_ILL(ill));
12416 12417
12417 12418 if (ill->ill_replumbing) {
12418 12419 ill->ill_replumbing = 0;
12419 12420 /*
12420 12421 * Send down REPLUMB_DONE notification followed by the
12421 12422 * BIND_REQ on the arp stream.
12422 12423 */
12423 12424 if (!ill->ill_isv6)
12424 12425 arp_send_replumb_conf(ill);
12425 12426 }
12426 12427 err = ill_up_ipifs_on_ill(ill->ill_phyint->phyint_illv4, q, mp);
12427 12428 if (err != 0)
12428 12429 return (err);
12429 12430
12430 12431 return (ill_up_ipifs_on_ill(ill->ill_phyint->phyint_illv6, q, mp));
12431 12432 }
12432 12433
12433 12434 /*
12434 12435 * Bring down any IPIF_UP ipifs on ill. If "logical" is B_TRUE, we bring
12435 12436 * down the ipifs without sending DL_UNBIND_REQ to the driver.
12436 12437 */
12437 12438 static void
12438 12439 ill_down_ipifs(ill_t *ill, boolean_t logical)
12439 12440 {
12440 12441 ipif_t *ipif;
12441 12442
12442 12443 ASSERT(IAM_WRITER_ILL(ill));
12443 12444
12444 12445 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
12445 12446 /*
12446 12447 * We go through the ipif_down logic even if the ipif
12447 12448 * is already down, since routes can be added based
12448 12449 * on down ipifs. Going through ipif_down once again
12449 12450 * will delete any IREs created based on these routes.
12450 12451 */
12451 12452 if (ipif->ipif_flags & IPIF_UP)
12452 12453 ipif->ipif_was_up = B_TRUE;
12453 12454
12454 12455 if (logical) {
12455 12456 (void) ipif_logical_down(ipif, NULL, NULL);
12456 12457 ipif_non_duplicate(ipif);
12457 12458 (void) ipif_down_tail(ipif);
12458 12459 } else {
12459 12460 (void) ipif_down(ipif, NULL, NULL);
12460 12461 }
12461 12462 }
12462 12463 }
12463 12464
12464 12465 /*
12465 12466 * Redo source address selection. This makes IXAF_VERIFY_SOURCE take
12466 12467 * a look again at valid source addresses.
12467 12468 * This should be called each time after the set of source addresses has been
12468 12469 * changed.
12469 12470 */
12470 12471 void
12471 12472 ip_update_source_selection(ip_stack_t *ipst)
12472 12473 {
12473 12474 /* We skip past SRC_GENERATION_VERIFY */
12474 12475 if (atomic_add_32_nv(&ipst->ips_src_generation, 1) ==
12475 12476 SRC_GENERATION_VERIFY)
12476 12477 atomic_add_32(&ipst->ips_src_generation, 1);
12477 12478 }
12478 12479
12479 12480 /*
12480 12481 * Finish the group join started in ip_sioctl_groupname().
12481 12482 */
12482 12483 /* ARGSUSED */
12483 12484 static void
12484 12485 ip_join_illgrps(ipsq_t *ipsq, queue_t *q, mblk_t *mp, void *dummy)
12485 12486 {
12486 12487 ill_t *ill = q->q_ptr;
12487 12488 phyint_t *phyi = ill->ill_phyint;
12488 12489 ipmp_grp_t *grp = phyi->phyint_grp;
12489 12490 ip_stack_t *ipst = ill->ill_ipst;
12490 12491
12491 12492 /* IS_UNDER_IPMP() won't work until ipmp_ill_join_illgrp() is called */
12492 12493 ASSERT(!IS_IPMP(ill) && grp != NULL);
12493 12494 ASSERT(IAM_WRITER_IPSQ(ipsq));
12494 12495
12495 12496 if (phyi->phyint_illv4 != NULL) {
12496 12497 rw_enter(&ipst->ips_ipmp_lock, RW_WRITER);
12497 12498 VERIFY(grp->gr_pendv4-- > 0);
12498 12499 rw_exit(&ipst->ips_ipmp_lock);
12499 12500 ipmp_ill_join_illgrp(phyi->phyint_illv4, grp->gr_v4);
12500 12501 }
12501 12502 if (phyi->phyint_illv6 != NULL) {
12502 12503 rw_enter(&ipst->ips_ipmp_lock, RW_WRITER);
12503 12504 VERIFY(grp->gr_pendv6-- > 0);
12504 12505 rw_exit(&ipst->ips_ipmp_lock);
12505 12506 ipmp_ill_join_illgrp(phyi->phyint_illv6, grp->gr_v6);
12506 12507 }
12507 12508 freemsg(mp);
12508 12509 }
12509 12510
12510 12511 /*
12511 12512 * Process an SIOCSLIFGROUPNAME request.
12512 12513 */
12513 12514 /* ARGSUSED */
12514 12515 int
12515 12516 ip_sioctl_groupname(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
12516 12517 ip_ioctl_cmd_t *ipip, void *ifreq)
12517 12518 {
12518 12519 struct lifreq *lifr = ifreq;
12519 12520 ill_t *ill = ipif->ipif_ill;
12520 12521 ip_stack_t *ipst = ill->ill_ipst;
12521 12522 phyint_t *phyi = ill->ill_phyint;
12522 12523 ipmp_grp_t *grp = phyi->phyint_grp;
12523 12524 mblk_t *ipsq_mp;
12524 12525 int err = 0;
12525 12526
12526 12527 /*
12527 12528 * Note that phyint_grp can only change here, where we're exclusive.
12528 12529 */
12529 12530 ASSERT(IAM_WRITER_ILL(ill));
12530 12531
12531 12532 if (ipif->ipif_id != 0 || ill->ill_usesrc_grp_next != NULL ||
12532 12533 (phyi->phyint_flags & PHYI_VIRTUAL))
12533 12534 return (EINVAL);
12534 12535
12535 12536 lifr->lifr_groupname[LIFGRNAMSIZ - 1] = '\0';
12536 12537
12537 12538 rw_enter(&ipst->ips_ipmp_lock, RW_WRITER);
12538 12539
12539 12540 /*
12540 12541 * If the name hasn't changed, there's nothing to do.
12541 12542 */
12542 12543 if (grp != NULL && strcmp(grp->gr_name, lifr->lifr_groupname) == 0)
12543 12544 goto unlock;
12544 12545
12545 12546 /*
12546 12547 * Handle requests to rename an IPMP meta-interface.
12547 12548 *
12548 12549 * Note that creation of the IPMP meta-interface is handled in
12549 12550 * userland through the standard plumbing sequence. As part of the
12550 12551 * plumbing the IPMP meta-interface, its initial groupname is set to
12551 12552 * the name of the interface (see ipif_set_values_tail()).
12552 12553 */
12553 12554 if (IS_IPMP(ill)) {
12554 12555 err = ipmp_grp_rename(grp, lifr->lifr_groupname);
12555 12556 goto unlock;
12556 12557 }
12557 12558
12558 12559 /*
12559 12560 * Handle requests to add or remove an IP interface from a group.
12560 12561 */
12561 12562 if (lifr->lifr_groupname[0] != '\0') { /* add */
12562 12563 /*
12563 12564 * Moves are handled by first removing the interface from
12564 12565 * its existing group, and then adding it to another group.
12565 12566 * So, fail if it's already in a group.
12566 12567 */
12567 12568 if (IS_UNDER_IPMP(ill)) {
12568 12569 err = EALREADY;
12569 12570 goto unlock;
12570 12571 }
12571 12572
12572 12573 grp = ipmp_grp_lookup(lifr->lifr_groupname, ipst);
12573 12574 if (grp == NULL) {
12574 12575 err = ENOENT;
12575 12576 goto unlock;
12576 12577 }
12577 12578
12578 12579 /*
12579 12580 * Check if the phyint and its ills are suitable for
12580 12581 * inclusion into the group.
12581 12582 */
12582 12583 if ((err = ipmp_grp_vet_phyint(grp, phyi)) != 0)
12583 12584 goto unlock;
12584 12585
12585 12586 /*
12586 12587 * Checks pass; join the group, and enqueue the remaining
12587 12588 * illgrp joins for when we've become part of the group xop
12588 12589 * and are exclusive across its IPSQs. Since qwriter_ip()
12589 12590 * requires an mblk_t to scribble on, and since `mp' will be
12590 12591 * freed as part of completing the ioctl, allocate another.
12591 12592 */
12592 12593 if ((ipsq_mp = allocb(0, BPRI_MED)) == NULL) {
12593 12594 err = ENOMEM;
12594 12595 goto unlock;
12595 12596 }
12596 12597
12597 12598 /*
12598 12599 * Before we drop ipmp_lock, bump gr_pend* to ensure that the
12599 12600 * IPMP meta-interface ills needed by `phyi' cannot go away
12600 12601 * before ip_join_illgrps() is called back. See the comments
12601 12602 * in ip_sioctl_plink_ipmp() for more.
12602 12603 */
12603 12604 if (phyi->phyint_illv4 != NULL)
12604 12605 grp->gr_pendv4++;
12605 12606 if (phyi->phyint_illv6 != NULL)
12606 12607 grp->gr_pendv6++;
12607 12608
12608 12609 rw_exit(&ipst->ips_ipmp_lock);
12609 12610
12610 12611 ipmp_phyint_join_grp(phyi, grp);
12611 12612 ill_refhold(ill);
12612 12613 qwriter_ip(ill, ill->ill_rq, ipsq_mp, ip_join_illgrps,
12613 12614 SWITCH_OP, B_FALSE);
12614 12615 return (0);
12615 12616 } else {
12616 12617 /*
12617 12618 * Request to remove the interface from a group. If the
12618 12619 * interface is not in a group, this trivially succeeds.
12619 12620 */
12620 12621 rw_exit(&ipst->ips_ipmp_lock);
12621 12622 if (IS_UNDER_IPMP(ill))
12622 12623 ipmp_phyint_leave_grp(phyi);
12623 12624 return (0);
12624 12625 }
12625 12626 unlock:
12626 12627 rw_exit(&ipst->ips_ipmp_lock);
12627 12628 return (err);
12628 12629 }
12629 12630
12630 12631 /*
12631 12632 * Process an SIOCGLIFBINDING request.
12632 12633 */
12633 12634 /* ARGSUSED */
12634 12635 int
12635 12636 ip_sioctl_get_binding(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
12636 12637 ip_ioctl_cmd_t *ipip, void *ifreq)
12637 12638 {
12638 12639 ill_t *ill;
12639 12640 struct lifreq *lifr = ifreq;
12640 12641 ip_stack_t *ipst = ipif->ipif_ill->ill_ipst;
12641 12642
12642 12643 if (!IS_IPMP(ipif->ipif_ill))
12643 12644 return (EINVAL);
12644 12645
12645 12646 rw_enter(&ipst->ips_ipmp_lock, RW_READER);
12646 12647 if ((ill = ipif->ipif_bound_ill) == NULL)
12647 12648 lifr->lifr_binding[0] = '\0';
12648 12649 else
12649 12650 (void) strlcpy(lifr->lifr_binding, ill->ill_name, LIFNAMSIZ);
12650 12651 rw_exit(&ipst->ips_ipmp_lock);
12651 12652 return (0);
12652 12653 }
12653 12654
12654 12655 /*
12655 12656 * Process an SIOCGLIFGROUPNAME request.
12656 12657 */
12657 12658 /* ARGSUSED */
12658 12659 int
12659 12660 ip_sioctl_get_groupname(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
12660 12661 ip_ioctl_cmd_t *ipip, void *ifreq)
12661 12662 {
12662 12663 ipmp_grp_t *grp;
12663 12664 struct lifreq *lifr = ifreq;
12664 12665 ip_stack_t *ipst = ipif->ipif_ill->ill_ipst;
12665 12666
12666 12667 rw_enter(&ipst->ips_ipmp_lock, RW_READER);
12667 12668 if ((grp = ipif->ipif_ill->ill_phyint->phyint_grp) == NULL)
12668 12669 lifr->lifr_groupname[0] = '\0';
12669 12670 else
12670 12671 (void) strlcpy(lifr->lifr_groupname, grp->gr_name, LIFGRNAMSIZ);
12671 12672 rw_exit(&ipst->ips_ipmp_lock);
12672 12673 return (0);
12673 12674 }
12674 12675
12675 12676 /*
12676 12677 * Process an SIOCGLIFGROUPINFO request.
12677 12678 */
12678 12679 /* ARGSUSED */
12679 12680 int
12680 12681 ip_sioctl_groupinfo(ipif_t *dummy_ipif, sin_t *sin, queue_t *q, mblk_t *mp,
12681 12682 ip_ioctl_cmd_t *ipip, void *dummy)
12682 12683 {
12683 12684 ipmp_grp_t *grp;
12684 12685 lifgroupinfo_t *lifgr;
12685 12686 ip_stack_t *ipst = CONNQ_TO_IPST(q);
12686 12687
12687 12688 /* ip_wput_nondata() verified mp->b_cont->b_cont */
12688 12689 lifgr = (lifgroupinfo_t *)mp->b_cont->b_cont->b_rptr;
12689 12690 lifgr->gi_grname[LIFGRNAMSIZ - 1] = '\0';
12690 12691
12691 12692 rw_enter(&ipst->ips_ipmp_lock, RW_READER);
12692 12693 if ((grp = ipmp_grp_lookup(lifgr->gi_grname, ipst)) == NULL) {
12693 12694 rw_exit(&ipst->ips_ipmp_lock);
12694 12695 return (ENOENT);
12695 12696 }
12696 12697 ipmp_grp_info(grp, lifgr);
12697 12698 rw_exit(&ipst->ips_ipmp_lock);
12698 12699 return (0);
12699 12700 }
12700 12701
12701 12702 static void
12702 12703 ill_dl_down(ill_t *ill)
12703 12704 {
12704 12705 DTRACE_PROBE2(ill__downup, char *, "ill_dl_down", ill_t *, ill);
12705 12706
12706 12707 /*
12707 12708 * The ill is down; unbind but stay attached since we're still
12708 12709 * associated with a PPA. If we have negotiated DLPI capabilites
12709 12710 * with the data link service provider (IDS_OK) then reset them.
12710 12711 * The interval between unbinding and rebinding is potentially
12711 12712 * unbounded hence we cannot assume things will be the same.
12712 12713 * The DLPI capabilities will be probed again when the data link
12713 12714 * is brought up.
12714 12715 */
12715 12716 mblk_t *mp = ill->ill_unbind_mp;
12716 12717
12717 12718 ip1dbg(("ill_dl_down(%s)\n", ill->ill_name));
12718 12719
12719 12720 if (!ill->ill_replumbing) {
12720 12721 /* Free all ilms for this ill */
12721 12722 update_conn_ill(ill, ill->ill_ipst);
12722 12723 } else {
12723 12724 ill_leave_multicast(ill);
12724 12725 }
12725 12726
12726 12727 ill->ill_unbind_mp = NULL;
12727 12728 if (mp != NULL) {
12728 12729 ip1dbg(("ill_dl_down: %s (%u) for %s\n",
12729 12730 dl_primstr(*(int *)mp->b_rptr), *(int *)mp->b_rptr,
12730 12731 ill->ill_name));
12731 12732 mutex_enter(&ill->ill_lock);
12732 12733 ill->ill_state_flags |= ILL_DL_UNBIND_IN_PROGRESS;
12733 12734 mutex_exit(&ill->ill_lock);
12734 12735 /*
12735 12736 * ip_rput does not pass up normal (M_PROTO) DLPI messages
12736 12737 * after ILL_CONDEMNED is set. So in the unplumb case, we call
12737 12738 * ill_capability_dld_disable disable rightaway. If this is not
12738 12739 * an unplumb operation then the disable happens on receipt of
12739 12740 * the capab ack via ip_rput_dlpi_writer ->
12740 12741 * ill_capability_ack_thr. In both cases the order of
12741 12742 * the operations seen by DLD is capability disable followed
12742 12743 * by DL_UNBIND. Also the DLD capability disable needs a
12743 12744 * cv_wait'able context.
12744 12745 */
12745 12746 if (ill->ill_state_flags & ILL_CONDEMNED)
12746 12747 ill_capability_dld_disable(ill);
12747 12748 ill_capability_reset(ill, B_FALSE);
12748 12749 ill_dlpi_send(ill, mp);
12749 12750 }
12750 12751 mutex_enter(&ill->ill_lock);
12751 12752 ill->ill_dl_up = 0;
12752 12753 ill_nic_event_dispatch(ill, 0, NE_DOWN, NULL, 0);
12753 12754 mutex_exit(&ill->ill_lock);
12754 12755 }
12755 12756
12756 12757 void
12757 12758 ill_dlpi_dispatch(ill_t *ill, mblk_t *mp)
12758 12759 {
12759 12760 union DL_primitives *dlp;
12760 12761 t_uscalar_t prim;
12761 12762 boolean_t waitack = B_FALSE;
12762 12763
12763 12764 ASSERT(DB_TYPE(mp) == M_PROTO || DB_TYPE(mp) == M_PCPROTO);
12764 12765
12765 12766 dlp = (union DL_primitives *)mp->b_rptr;
12766 12767 prim = dlp->dl_primitive;
12767 12768
12768 12769 ip1dbg(("ill_dlpi_dispatch: sending %s (%u) to %s\n",
12769 12770 dl_primstr(prim), prim, ill->ill_name));
12770 12771
12771 12772 switch (prim) {
12772 12773 case DL_PHYS_ADDR_REQ:
12773 12774 {
12774 12775 dl_phys_addr_req_t *dlpap = (dl_phys_addr_req_t *)mp->b_rptr;
12775 12776 ill->ill_phys_addr_pend = dlpap->dl_addr_type;
12776 12777 break;
12777 12778 }
12778 12779 case DL_BIND_REQ:
12779 12780 mutex_enter(&ill->ill_lock);
12780 12781 ill->ill_state_flags &= ~ILL_DL_UNBIND_IN_PROGRESS;
12781 12782 mutex_exit(&ill->ill_lock);
12782 12783 break;
12783 12784 }
12784 12785
12785 12786 /*
12786 12787 * Except for the ACKs for the M_PCPROTO messages, all other ACKs
12787 12788 * are dropped by ip_rput() if ILL_CONDEMNED is set. Therefore
12788 12789 * we only wait for the ACK of the DL_UNBIND_REQ.
12789 12790 */
12790 12791 mutex_enter(&ill->ill_lock);
12791 12792 if (!(ill->ill_state_flags & ILL_CONDEMNED) ||
12792 12793 (prim == DL_UNBIND_REQ)) {
12793 12794 ill->ill_dlpi_pending = prim;
12794 12795 waitack = B_TRUE;
12795 12796 }
12796 12797
12797 12798 mutex_exit(&ill->ill_lock);
12798 12799 DTRACE_PROBE3(ill__dlpi, char *, "ill_dlpi_dispatch",
12799 12800 char *, dl_primstr(prim), ill_t *, ill);
12800 12801 putnext(ill->ill_wq, mp);
12801 12802
12802 12803 /*
12803 12804 * There is no ack for DL_NOTIFY_CONF messages
12804 12805 */
12805 12806 if (waitack && prim == DL_NOTIFY_CONF)
12806 12807 ill_dlpi_done(ill, prim);
12807 12808 }
12808 12809
12809 12810 /*
12810 12811 * Helper function for ill_dlpi_send().
12811 12812 */
12812 12813 /* ARGSUSED */
12813 12814 static void
12814 12815 ill_dlpi_send_writer(ipsq_t *ipsq, queue_t *q, mblk_t *mp, void *arg)
12815 12816 {
12816 12817 ill_dlpi_send(q->q_ptr, mp);
12817 12818 }
12818 12819
12819 12820 /*
12820 12821 * Send a DLPI control message to the driver but make sure there
12821 12822 * is only one outstanding message. Uses ill_dlpi_pending to tell
12822 12823 * when it must queue. ip_rput_dlpi_writer calls ill_dlpi_done()
12823 12824 * when an ACK or a NAK is received to process the next queued message.
12824 12825 */
12825 12826 void
12826 12827 ill_dlpi_send(ill_t *ill, mblk_t *mp)
12827 12828 {
12828 12829 mblk_t **mpp;
12829 12830
12830 12831 ASSERT(DB_TYPE(mp) == M_PROTO || DB_TYPE(mp) == M_PCPROTO);
12831 12832
12832 12833 /*
12833 12834 * To ensure that any DLPI requests for current exclusive operation
12834 12835 * are always completely sent before any DLPI messages for other
12835 12836 * operations, require writer access before enqueuing.
12836 12837 */
12837 12838 if (!IAM_WRITER_ILL(ill)) {
12838 12839 ill_refhold(ill);
12839 12840 /* qwriter_ip() does the ill_refrele() */
12840 12841 qwriter_ip(ill, ill->ill_wq, mp, ill_dlpi_send_writer,
12841 12842 NEW_OP, B_TRUE);
12842 12843 return;
12843 12844 }
12844 12845
12845 12846 mutex_enter(&ill->ill_lock);
12846 12847 if (ill->ill_dlpi_pending != DL_PRIM_INVAL) {
12847 12848 /* Must queue message. Tail insertion */
12848 12849 mpp = &ill->ill_dlpi_deferred;
12849 12850 while (*mpp != NULL)
12850 12851 mpp = &((*mpp)->b_next);
12851 12852
12852 12853 ip1dbg(("ill_dlpi_send: deferring request for %s "
12853 12854 "while %s pending\n", ill->ill_name,
12854 12855 dl_primstr(ill->ill_dlpi_pending)));
12855 12856
12856 12857 *mpp = mp;
12857 12858 mutex_exit(&ill->ill_lock);
12858 12859 return;
12859 12860 }
12860 12861 mutex_exit(&ill->ill_lock);
12861 12862 ill_dlpi_dispatch(ill, mp);
12862 12863 }
12863 12864
12864 12865 void
12865 12866 ill_capability_send(ill_t *ill, mblk_t *mp)
12866 12867 {
12867 12868 ill->ill_capab_pending_cnt++;
12868 12869 ill_dlpi_send(ill, mp);
12869 12870 }
12870 12871
12871 12872 void
12872 12873 ill_capability_done(ill_t *ill)
12873 12874 {
12874 12875 ASSERT(ill->ill_capab_pending_cnt != 0);
12875 12876
12876 12877 ill_dlpi_done(ill, DL_CAPABILITY_REQ);
12877 12878
12878 12879 ill->ill_capab_pending_cnt--;
12879 12880 if (ill->ill_capab_pending_cnt == 0 &&
12880 12881 ill->ill_dlpi_capab_state == IDCS_OK)
12881 12882 ill_capability_reset_alloc(ill);
12882 12883 }
12883 12884
12884 12885 /*
12885 12886 * Send all deferred DLPI messages without waiting for their ACKs.
12886 12887 */
12887 12888 void
12888 12889 ill_dlpi_send_deferred(ill_t *ill)
12889 12890 {
12890 12891 mblk_t *mp, *nextmp;
12891 12892
12892 12893 /*
12893 12894 * Clear ill_dlpi_pending so that the message is not queued in
12894 12895 * ill_dlpi_send().
12895 12896 */
12896 12897 mutex_enter(&ill->ill_lock);
12897 12898 ill->ill_dlpi_pending = DL_PRIM_INVAL;
12898 12899 mp = ill->ill_dlpi_deferred;
12899 12900 ill->ill_dlpi_deferred = NULL;
12900 12901 mutex_exit(&ill->ill_lock);
12901 12902
12902 12903 for (; mp != NULL; mp = nextmp) {
12903 12904 nextmp = mp->b_next;
12904 12905 mp->b_next = NULL;
12905 12906 ill_dlpi_send(ill, mp);
12906 12907 }
12907 12908 }
12908 12909
12909 12910 /*
12910 12911 * Clear all the deferred DLPI messages. Called on receiving an M_ERROR
12911 12912 * or M_HANGUP
12912 12913 */
12913 12914 static void
12914 12915 ill_dlpi_clear_deferred(ill_t *ill)
12915 12916 {
12916 12917 mblk_t *mp, *nextmp;
12917 12918
12918 12919 mutex_enter(&ill->ill_lock);
12919 12920 ill->ill_dlpi_pending = DL_PRIM_INVAL;
12920 12921 mp = ill->ill_dlpi_deferred;
12921 12922 ill->ill_dlpi_deferred = NULL;
12922 12923 mutex_exit(&ill->ill_lock);
12923 12924
12924 12925 for (; mp != NULL; mp = nextmp) {
12925 12926 nextmp = mp->b_next;
12926 12927 inet_freemsg(mp);
12927 12928 }
12928 12929 }
12929 12930
12930 12931 /*
12931 12932 * Check if the DLPI primitive `prim' is pending; print a warning if not.
12932 12933 */
12933 12934 boolean_t
12934 12935 ill_dlpi_pending(ill_t *ill, t_uscalar_t prim)
12935 12936 {
12936 12937 t_uscalar_t pending;
12937 12938
12938 12939 mutex_enter(&ill->ill_lock);
12939 12940 if (ill->ill_dlpi_pending == prim) {
12940 12941 mutex_exit(&ill->ill_lock);
12941 12942 return (B_TRUE);
12942 12943 }
12943 12944
12944 12945 /*
12945 12946 * During teardown, ill_dlpi_dispatch() will send DLPI requests
12946 12947 * without waiting, so don't print any warnings in that case.
12947 12948 */
12948 12949 if (ill->ill_state_flags & ILL_CONDEMNED) {
12949 12950 mutex_exit(&ill->ill_lock);
12950 12951 return (B_FALSE);
12951 12952 }
12952 12953 pending = ill->ill_dlpi_pending;
12953 12954 mutex_exit(&ill->ill_lock);
12954 12955
12955 12956 if (pending == DL_PRIM_INVAL) {
12956 12957 (void) mi_strlog(ill->ill_rq, 1, SL_CONSOLE|SL_ERROR|SL_TRACE,
12957 12958 "received unsolicited ack for %s on %s\n",
12958 12959 dl_primstr(prim), ill->ill_name);
12959 12960 } else {
12960 12961 (void) mi_strlog(ill->ill_rq, 1, SL_CONSOLE|SL_ERROR|SL_TRACE,
12961 12962 "received unexpected ack for %s on %s (expecting %s)\n",
12962 12963 dl_primstr(prim), ill->ill_name, dl_primstr(pending));
12963 12964 }
12964 12965 return (B_FALSE);
12965 12966 }
12966 12967
12967 12968 /*
12968 12969 * Complete the current DLPI operation associated with `prim' on `ill' and
12969 12970 * start the next queued DLPI operation (if any). If there are no queued DLPI
12970 12971 * operations and the ill's current exclusive IPSQ operation has finished
12971 12972 * (i.e., ipsq_current_finish() was called), then clear ipsq_current_ipif to
12972 12973 * allow the next exclusive IPSQ operation to begin upon ipsq_exit(). See
12973 12974 * the comments above ipsq_current_finish() for details.
12974 12975 */
12975 12976 void
12976 12977 ill_dlpi_done(ill_t *ill, t_uscalar_t prim)
12977 12978 {
12978 12979 mblk_t *mp;
12979 12980 ipsq_t *ipsq = ill->ill_phyint->phyint_ipsq;
12980 12981 ipxop_t *ipx = ipsq->ipsq_xop;
12981 12982
12982 12983 ASSERT(IAM_WRITER_IPSQ(ipsq));
12983 12984 mutex_enter(&ill->ill_lock);
12984 12985
12985 12986 ASSERT(prim != DL_PRIM_INVAL);
12986 12987 ASSERT(ill->ill_dlpi_pending == prim);
12987 12988
12988 12989 ip1dbg(("ill_dlpi_done: %s has completed %s (%u)\n", ill->ill_name,
12989 12990 dl_primstr(ill->ill_dlpi_pending), ill->ill_dlpi_pending));
12990 12991
12991 12992 if ((mp = ill->ill_dlpi_deferred) == NULL) {
12992 12993 ill->ill_dlpi_pending = DL_PRIM_INVAL;
12993 12994 if (ipx->ipx_current_done) {
12994 12995 mutex_enter(&ipx->ipx_lock);
12995 12996 ipx->ipx_current_ipif = NULL;
12996 12997 mutex_exit(&ipx->ipx_lock);
12997 12998 }
12998 12999 cv_signal(&ill->ill_cv);
12999 13000 mutex_exit(&ill->ill_lock);
13000 13001 return;
13001 13002 }
13002 13003
13003 13004 ill->ill_dlpi_deferred = mp->b_next;
13004 13005 mp->b_next = NULL;
13005 13006 mutex_exit(&ill->ill_lock);
13006 13007
13007 13008 ill_dlpi_dispatch(ill, mp);
13008 13009 }
13009 13010
13010 13011 /*
13011 13012 * Queue a (multicast) DLPI control message to be sent to the driver by
13012 13013 * later calling ill_dlpi_send_queued.
13013 13014 * We queue them while holding a lock (ill_mcast_lock) to ensure that they
13014 13015 * are sent in order i.e., prevent a DL_DISABMULTI_REQ and DL_ENABMULTI_REQ
13015 13016 * for the same group to race.
13016 13017 * We send DLPI control messages in order using ill_lock.
13017 13018 * For IPMP we should be called on the cast_ill.
13018 13019 */
13019 13020 void
13020 13021 ill_dlpi_queue(ill_t *ill, mblk_t *mp)
13021 13022 {
13022 13023 mblk_t **mpp;
13023 13024
13024 13025 ASSERT(DB_TYPE(mp) == M_PROTO || DB_TYPE(mp) == M_PCPROTO);
13025 13026
13026 13027 mutex_enter(&ill->ill_lock);
13027 13028 /* Must queue message. Tail insertion */
13028 13029 mpp = &ill->ill_dlpi_deferred;
13029 13030 while (*mpp != NULL)
13030 13031 mpp = &((*mpp)->b_next);
13031 13032
13032 13033 *mpp = mp;
13033 13034 mutex_exit(&ill->ill_lock);
13034 13035 }
13035 13036
13036 13037 /*
13037 13038 * Send the messages that were queued. Make sure there is only
13038 13039 * one outstanding message. ip_rput_dlpi_writer calls ill_dlpi_done()
13039 13040 * when an ACK or a NAK is received to process the next queued message.
13040 13041 * For IPMP we are called on the upper ill, but when send what is queued
13041 13042 * on the cast_ill.
13042 13043 */
13043 13044 void
13044 13045 ill_dlpi_send_queued(ill_t *ill)
13045 13046 {
13046 13047 mblk_t *mp;
13047 13048 union DL_primitives *dlp;
13048 13049 t_uscalar_t prim;
13049 13050 ill_t *release_ill = NULL;
13050 13051
13051 13052 if (IS_IPMP(ill)) {
13052 13053 /* On the upper IPMP ill. */
13053 13054 release_ill = ipmp_illgrp_hold_cast_ill(ill->ill_grp);
13054 13055 if (release_ill == NULL) {
13055 13056 /* Avoid ever sending anything down to the ipmpstub */
13056 13057 return;
13057 13058 }
13058 13059 ill = release_ill;
13059 13060 }
13060 13061 mutex_enter(&ill->ill_lock);
13061 13062 while ((mp = ill->ill_dlpi_deferred) != NULL) {
13062 13063 if (ill->ill_dlpi_pending != DL_PRIM_INVAL) {
13063 13064 /* Can't send. Somebody else will send it */
13064 13065 mutex_exit(&ill->ill_lock);
13065 13066 goto done;
13066 13067 }
13067 13068 ill->ill_dlpi_deferred = mp->b_next;
13068 13069 mp->b_next = NULL;
13069 13070 if (!ill->ill_dl_up) {
13070 13071 /*
13071 13072 * Nobody there. All multicast addresses will be
13072 13073 * re-joined when we get the DL_BIND_ACK bringing the
13073 13074 * interface up.
13074 13075 */
13075 13076 freemsg(mp);
13076 13077 continue;
13077 13078 }
13078 13079 dlp = (union DL_primitives *)mp->b_rptr;
13079 13080 prim = dlp->dl_primitive;
13080 13081
13081 13082 if (!(ill->ill_state_flags & ILL_CONDEMNED) ||
13082 13083 (prim == DL_UNBIND_REQ)) {
13083 13084 ill->ill_dlpi_pending = prim;
13084 13085 }
13085 13086 mutex_exit(&ill->ill_lock);
13086 13087
13087 13088 DTRACE_PROBE3(ill__dlpi, char *, "ill_dlpi_send_queued",
13088 13089 char *, dl_primstr(prim), ill_t *, ill);
13089 13090 putnext(ill->ill_wq, mp);
13090 13091 mutex_enter(&ill->ill_lock);
13091 13092 }
13092 13093 mutex_exit(&ill->ill_lock);
13093 13094 done:
13094 13095 if (release_ill != NULL)
13095 13096 ill_refrele(release_ill);
13096 13097 }
13097 13098
13098 13099 /*
13099 13100 * Queue an IP (IGMP/MLD) message to be sent by IP from
13100 13101 * ill_mcast_send_queued
13101 13102 * We queue them while holding a lock (ill_mcast_lock) to ensure that they
13102 13103 * are sent in order i.e., prevent a IGMP leave and IGMP join for the same
13103 13104 * group to race.
13104 13105 * We send them in order using ill_lock.
13105 13106 * For IPMP we are called on the upper ill, but we queue on the cast_ill.
13106 13107 */
13107 13108 void
13108 13109 ill_mcast_queue(ill_t *ill, mblk_t *mp)
13109 13110 {
13110 13111 mblk_t **mpp;
13111 13112 ill_t *release_ill = NULL;
13112 13113
13113 13114 ASSERT(RW_LOCK_HELD(&ill->ill_mcast_lock));
13114 13115
13115 13116 if (IS_IPMP(ill)) {
13116 13117 /* On the upper IPMP ill. */
13117 13118 release_ill = ipmp_illgrp_hold_cast_ill(ill->ill_grp);
13118 13119 if (release_ill == NULL) {
13119 13120 /* Discard instead of queuing for the ipmp interface */
13120 13121 BUMP_MIB(ill->ill_ip_mib, ipIfStatsOutDiscards);
13121 13122 ip_drop_output("ipIfStatsOutDiscards - no cast_ill",
13122 13123 mp, ill);
13123 13124 freemsg(mp);
13124 13125 return;
13125 13126 }
13126 13127 ill = release_ill;
13127 13128 }
13128 13129
13129 13130 mutex_enter(&ill->ill_lock);
13130 13131 /* Must queue message. Tail insertion */
13131 13132 mpp = &ill->ill_mcast_deferred;
13132 13133 while (*mpp != NULL)
13133 13134 mpp = &((*mpp)->b_next);
13134 13135
13135 13136 *mpp = mp;
13136 13137 mutex_exit(&ill->ill_lock);
13137 13138 if (release_ill != NULL)
13138 13139 ill_refrele(release_ill);
13139 13140 }
13140 13141
13141 13142 /*
13142 13143 * Send the IP packets that were queued by ill_mcast_queue.
13143 13144 * These are IGMP/MLD packets.
13144 13145 *
13145 13146 * For IPMP we are called on the upper ill, but when send what is queued
13146 13147 * on the cast_ill.
13147 13148 *
13148 13149 * Request loopback of the report if we are acting as a multicast
13149 13150 * router, so that the process-level routing demon can hear it.
13150 13151 * This will run multiple times for the same group if there are members
13151 13152 * on the same group for multiple ipif's on the same ill. The
13152 13153 * igmp_input/mld_input code will suppress this due to the loopback thus we
13153 13154 * always loopback membership report.
13154 13155 *
13155 13156 * We also need to make sure that this does not get load balanced
13156 13157 * by IPMP. We do this by passing an ill to ip_output_simple.
13157 13158 */
13158 13159 void
13159 13160 ill_mcast_send_queued(ill_t *ill)
13160 13161 {
13161 13162 mblk_t *mp;
13162 13163 ip_xmit_attr_t ixas;
13163 13164 ill_t *release_ill = NULL;
13164 13165
13165 13166 if (IS_IPMP(ill)) {
13166 13167 /* On the upper IPMP ill. */
13167 13168 release_ill = ipmp_illgrp_hold_cast_ill(ill->ill_grp);
13168 13169 if (release_ill == NULL) {
13169 13170 /*
13170 13171 * We should have no messages on the ipmp interface
13171 13172 * but no point in trying to send them.
13172 13173 */
13173 13174 return;
13174 13175 }
13175 13176 ill = release_ill;
13176 13177 }
13177 13178 bzero(&ixas, sizeof (ixas));
13178 13179 ixas.ixa_zoneid = ALL_ZONES;
13179 13180 ixas.ixa_cred = kcred;
13180 13181 ixas.ixa_cpid = NOPID;
13181 13182 ixas.ixa_tsl = NULL;
13182 13183 /*
13183 13184 * Here we set ixa_ifindex. If IPMP it will be the lower ill which
13184 13185 * makes ip_select_route pick the IRE_MULTICAST for the cast_ill.
13185 13186 * That is necessary to handle IGMP/MLD snooping switches.
13186 13187 */
13187 13188 ixas.ixa_ifindex = ill->ill_phyint->phyint_ifindex;
13188 13189 ixas.ixa_ipst = ill->ill_ipst;
13189 13190
13190 13191 mutex_enter(&ill->ill_lock);
13191 13192 while ((mp = ill->ill_mcast_deferred) != NULL) {
13192 13193 ill->ill_mcast_deferred = mp->b_next;
13193 13194 mp->b_next = NULL;
13194 13195 if (!ill->ill_dl_up) {
13195 13196 /*
13196 13197 * Nobody there. Just drop the ip packets.
13197 13198 * IGMP/MLD will resend later, if this is a replumb.
13198 13199 */
13199 13200 freemsg(mp);
13200 13201 continue;
13201 13202 }
13202 13203 mutex_enter(&ill->ill_phyint->phyint_lock);
13203 13204 if (IS_UNDER_IPMP(ill) && !ipmp_ill_is_active(ill)) {
13204 13205 /*
13205 13206 * When the ill is getting deactivated, we only want to
13206 13207 * send the DLPI messages, so drop IGMP/MLD packets.
13207 13208 * DLPI messages are handled by ill_dlpi_send_queued()
13208 13209 */
13209 13210 mutex_exit(&ill->ill_phyint->phyint_lock);
13210 13211 freemsg(mp);
13211 13212 continue;
13212 13213 }
13213 13214 mutex_exit(&ill->ill_phyint->phyint_lock);
13214 13215 mutex_exit(&ill->ill_lock);
13215 13216
13216 13217 /* Check whether we are sending IPv4 or IPv6. */
13217 13218 if (ill->ill_isv6) {
13218 13219 ip6_t *ip6h = (ip6_t *)mp->b_rptr;
13219 13220
13220 13221 ixas.ixa_multicast_ttl = ip6h->ip6_hops;
13221 13222 ixas.ixa_flags = IXAF_BASIC_SIMPLE_V6;
13222 13223 } else {
13223 13224 ipha_t *ipha = (ipha_t *)mp->b_rptr;
13224 13225
13225 13226 ixas.ixa_multicast_ttl = ipha->ipha_ttl;
13226 13227 ixas.ixa_flags = IXAF_BASIC_SIMPLE_V4;
13227 13228 ixas.ixa_flags &= ~IXAF_SET_ULP_CKSUM;
13228 13229 }
13229 13230 ixas.ixa_flags &= ~IXAF_VERIFY_SOURCE;
13230 13231 ixas.ixa_flags |= IXAF_MULTICAST_LOOP | IXAF_SET_SOURCE;
13231 13232 (void) ip_output_simple(mp, &ixas);
13232 13233 ixa_cleanup(&ixas);
13233 13234
13234 13235 mutex_enter(&ill->ill_lock);
13235 13236 }
13236 13237 mutex_exit(&ill->ill_lock);
13237 13238
13238 13239 done:
13239 13240 if (release_ill != NULL)
13240 13241 ill_refrele(release_ill);
13241 13242 }
13242 13243
13243 13244 /*
13244 13245 * Take down a specific interface, but don't lose any information about it.
13245 13246 * (Always called as writer.)
13246 13247 * This function goes through the down sequence even if the interface is
13247 13248 * already down. There are 2 reasons.
13248 13249 * a. Currently we permit interface routes that depend on down interfaces
13249 13250 * to be added. This behaviour itself is questionable. However it appears
13250 13251 * that both Solaris and 4.3 BSD have exhibited this behaviour for a long
13251 13252 * time. We go thru the cleanup in order to remove these routes.
13252 13253 * b. The bringup of the interface could fail in ill_dl_up i.e. we get
13253 13254 * DL_ERROR_ACK in response to the DL_BIND request. The interface is
13254 13255 * down, but we need to cleanup i.e. do ill_dl_down and
13255 13256 * ip_rput_dlpi_writer (DL_ERROR_ACK) -> ipif_down.
13256 13257 *
13257 13258 * IP-MT notes:
13258 13259 *
13259 13260 * Model of reference to interfaces.
13260 13261 *
13261 13262 * The following members in ipif_t track references to the ipif.
13262 13263 * int ipif_refcnt; Active reference count
13263 13264 *
13264 13265 * The following members in ill_t track references to the ill.
13265 13266 * int ill_refcnt; active refcnt
13266 13267 * uint_t ill_ire_cnt; Number of ires referencing ill
13267 13268 * uint_t ill_ncec_cnt; Number of ncecs referencing ill
13268 13269 * uint_t ill_nce_cnt; Number of nces referencing ill
13269 13270 * uint_t ill_ilm_cnt; Number of ilms referencing ill
13270 13271 *
13271 13272 * Reference to an ipif or ill can be obtained in any of the following ways.
13272 13273 *
13273 13274 * Through the lookup functions ipif_lookup_* / ill_lookup_* functions
13274 13275 * Pointers to ipif / ill from other data structures viz ire and conn.
13275 13276 * Implicit reference to the ipif / ill by holding a reference to the ire.
13276 13277 *
13277 13278 * The ipif/ill lookup functions return a reference held ipif / ill.
13278 13279 * ipif_refcnt and ill_refcnt track the reference counts respectively.
13279 13280 * This is a purely dynamic reference count associated with threads holding
13280 13281 * references to the ipif / ill. Pointers from other structures do not
13281 13282 * count towards this reference count.
13282 13283 *
13283 13284 * ill_ire_cnt is the number of ire's associated with the
13284 13285 * ill. This is incremented whenever a new ire is created referencing the
13285 13286 * ill. This is done atomically inside ire_add_v[46] where the ire is
13286 13287 * actually added to the ire hash table. The count is decremented in
13287 13288 * ire_inactive where the ire is destroyed.
13288 13289 *
13289 13290 * ill_ncec_cnt is the number of ncec's referencing the ill thru ncec_ill.
13290 13291 * This is incremented atomically in
13291 13292 * ndp_add_v4()/ndp_add_v6() where the nce is actually added to the
13292 13293 * table. Similarly it is decremented in ncec_inactive() where the ncec
13293 13294 * is destroyed.
13294 13295 *
13295 13296 * ill_nce_cnt is the number of nce's referencing the ill thru nce_ill. This is
13296 13297 * incremented atomically in nce_add() where the nce is actually added to the
13297 13298 * ill_nce. Similarly it is decremented in nce_inactive() where the nce
13298 13299 * is destroyed.
13299 13300 *
13300 13301 * ill_ilm_cnt is the ilm's reference to the ill. It is incremented in
13301 13302 * ilm_add() and decremented before the ilm is freed in ilm_delete().
13302 13303 *
13303 13304 * Flow of ioctls involving interface down/up
13304 13305 *
13305 13306 * The following is the sequence of an attempt to set some critical flags on an
13306 13307 * up interface.
13307 13308 * ip_sioctl_flags
13308 13309 * ipif_down
13309 13310 * wait for ipif to be quiescent
13310 13311 * ipif_down_tail
13311 13312 * ip_sioctl_flags_tail
13312 13313 *
13313 13314 * All set ioctls that involve down/up sequence would have a skeleton similar
13314 13315 * to the above. All the *tail functions are called after the refcounts have
13315 13316 * dropped to the appropriate values.
13316 13317 *
13317 13318 * SIOC ioctls during the IPIF_CHANGING interval.
13318 13319 *
13319 13320 * Threads handling SIOC set ioctls serialize on the squeue, but this
13320 13321 * is not done for SIOC get ioctls. Since a set ioctl can cause several
13321 13322 * steps of internal changes to the state, some of which are visible in
13322 13323 * ipif_flags (such as IFF_UP being cleared and later set), and we want
13323 13324 * the set ioctl to be atomic related to the get ioctls, the SIOC get code
13324 13325 * will wait and restart ioctls if IPIF_CHANGING is set. The mblk is then
13325 13326 * enqueued in the ipsq and the operation is restarted by ipsq_exit() when
13326 13327 * the current exclusive operation completes. The IPIF_CHANGING check
13327 13328 * and enqueue is atomic using the ill_lock and ipsq_lock. The
13328 13329 * lookup is done holding the ill_lock. Hence the ill/ipif state flags can't
13329 13330 * change while the ill_lock is held. Before dropping the ill_lock we acquire
13330 13331 * the ipsq_lock and call ipsq_enq. This ensures that ipsq_exit can't finish
13331 13332 * until we release the ipsq_lock, even though the ill/ipif state flags
13332 13333 * can change after we drop the ill_lock.
13333 13334 */
13334 13335 int
13335 13336 ipif_down(ipif_t *ipif, queue_t *q, mblk_t *mp)
13336 13337 {
13337 13338 ill_t *ill = ipif->ipif_ill;
13338 13339 conn_t *connp;
13339 13340 boolean_t success;
13340 13341 boolean_t ipif_was_up = B_FALSE;
13341 13342 ip_stack_t *ipst = ill->ill_ipst;
13342 13343
13343 13344 ASSERT(IAM_WRITER_IPIF(ipif));
13344 13345
13345 13346 ip1dbg(("ipif_down(%s:%u)\n", ill->ill_name, ipif->ipif_id));
13346 13347
13347 13348 DTRACE_PROBE3(ipif__downup, char *, "ipif_down",
13348 13349 ill_t *, ill, ipif_t *, ipif);
13349 13350
13350 13351 if (ipif->ipif_flags & IPIF_UP) {
13351 13352 mutex_enter(&ill->ill_lock);
13352 13353 ipif->ipif_flags &= ~IPIF_UP;
13353 13354 ASSERT(ill->ill_ipif_up_count > 0);
13354 13355 --ill->ill_ipif_up_count;
13355 13356 mutex_exit(&ill->ill_lock);
13356 13357 ipif_was_up = B_TRUE;
13357 13358 /* Update status in SCTP's list */
13358 13359 sctp_update_ipif(ipif, SCTP_IPIF_DOWN);
13359 13360 ill_nic_event_dispatch(ipif->ipif_ill,
13360 13361 MAP_IPIF_ID(ipif->ipif_id), NE_LIF_DOWN, NULL, 0);
13361 13362 }
13362 13363
13363 13364 /*
13364 13365 * Removal of the last ipif from an ill may result in a DL_UNBIND
13365 13366 * being sent to the driver, and we must not send any data packets to
13366 13367 * the driver after the DL_UNBIND_REQ. To ensure this, all the
13367 13368 * ire and nce entries used in the data path will be cleaned
13368 13369 * up, and we also set the ILL_DOWN_IN_PROGRESS bit to make
13369 13370 * sure on new entries will be added until the ill is bound
13370 13371 * again. The ILL_DOWN_IN_PROGRESS bit is turned off upon
13371 13372 * receipt of a DL_BIND_ACK.
13372 13373 */
13373 13374 if (ill->ill_wq != NULL && !ill->ill_logical_down &&
13374 13375 ill->ill_ipif_up_count == 0 && ill->ill_ipif_dup_count == 0 &&
13375 13376 ill->ill_dl_up) {
13376 13377 ill->ill_state_flags |= ILL_DOWN_IN_PROGRESS;
13377 13378 }
13378 13379
13379 13380 /*
13380 13381 * Blow away memberships we established in ipif_multicast_up().
13381 13382 */
13382 13383 ipif_multicast_down(ipif);
13383 13384
13384 13385 /*
13385 13386 * Remove from the mapping for __sin6_src_id. We insert only
13386 13387 * when the address is not INADDR_ANY. As IPv4 addresses are
13387 13388 * stored as mapped addresses, we need to check for mapped
13388 13389 * INADDR_ANY also.
13389 13390 */
13390 13391 if (ipif_was_up && !IN6_IS_ADDR_UNSPECIFIED(&ipif->ipif_v6lcl_addr) &&
13391 13392 !IN6_IS_ADDR_V4MAPPED_ANY(&ipif->ipif_v6lcl_addr) &&
13392 13393 !(ipif->ipif_flags & IPIF_NOLOCAL)) {
13393 13394 int err;
13394 13395
13395 13396 err = ip_srcid_remove(&ipif->ipif_v6lcl_addr,
13396 13397 ipif->ipif_zoneid, ipst);
13397 13398 if (err != 0) {
13398 13399 ip0dbg(("ipif_down: srcid_remove %d\n", err));
13399 13400 }
13400 13401 }
13401 13402
13402 13403 if (ipif_was_up) {
13403 13404 /* only delete if we'd added ire's before */
13404 13405 if (ipif->ipif_isv6)
13405 13406 ipif_delete_ires_v6(ipif);
13406 13407 else
13407 13408 ipif_delete_ires_v4(ipif);
13408 13409 }
13409 13410
13410 13411 if (ipif_was_up && ill->ill_ipif_up_count == 0) {
13411 13412 /*
13412 13413 * Since the interface is now down, it may have just become
13413 13414 * inactive. Note that this needs to be done even for a
13414 13415 * lll_logical_down(), or ARP entries will not get correctly
13415 13416 * restored when the interface comes back up.
13416 13417 */
13417 13418 if (IS_UNDER_IPMP(ill))
13418 13419 ipmp_ill_refresh_active(ill);
13419 13420 }
13420 13421
13421 13422 /*
13422 13423 * neighbor-discovery or arp entries for this interface. The ipif
13423 13424 * has to be quiesced, so we walk all the nce's and delete those
13424 13425 * that point at the ipif->ipif_ill. At the same time, we also
13425 13426 * update IPMP so that ipifs for data addresses are unbound. We dont
13426 13427 * call ipif_arp_down to DL_UNBIND the arp stream itself here, but defer
13427 13428 * that for ipif_down_tail()
13428 13429 */
13429 13430 ipif_nce_down(ipif);
13430 13431
13431 13432 /*
13432 13433 * If this is the last ipif on the ill, we also need to remove
13433 13434 * any IREs with ire_ill set. Otherwise ipif_is_quiescent() will
13434 13435 * never succeed.
13435 13436 */
13436 13437 if (ill->ill_ipif_up_count == 0 && ill->ill_ipif_dup_count == 0)
13437 13438 ire_walk_ill(0, 0, ill_downi, ill, ill);
13438 13439
13439 13440 /*
13440 13441 * Walk all CONNs that can have a reference on an ire for this
13441 13442 * ipif (we actually walk all that now have stale references).
13442 13443 */
13443 13444 ipcl_walk(conn_ixa_cleanup, (void *)B_TRUE, ipst);
13444 13445
13445 13446 /*
13446 13447 * If mp is NULL the caller will wait for the appropriate refcnt.
13447 13448 * Eg. ip_sioctl_removeif -> ipif_free -> ipif_down
13448 13449 * and ill_delete -> ipif_free -> ipif_down
13449 13450 */
13450 13451 if (mp == NULL) {
13451 13452 ASSERT(q == NULL);
13452 13453 return (0);
13453 13454 }
13454 13455
13455 13456 if (CONN_Q(q)) {
13456 13457 connp = Q_TO_CONN(q);
13457 13458 mutex_enter(&connp->conn_lock);
13458 13459 } else {
13459 13460 connp = NULL;
13460 13461 }
13461 13462 mutex_enter(&ill->ill_lock);
13462 13463 /*
13463 13464 * Are there any ire's pointing to this ipif that are still active ?
13464 13465 * If this is the last ipif going down, are there any ire's pointing
13465 13466 * to this ill that are still active ?
13466 13467 */
13467 13468 if (ipif_is_quiescent(ipif)) {
13468 13469 mutex_exit(&ill->ill_lock);
13469 13470 if (connp != NULL)
13470 13471 mutex_exit(&connp->conn_lock);
13471 13472 return (0);
13472 13473 }
13473 13474
13474 13475 ip1dbg(("ipif_down: need to wait, adding pending mp %s ill %p",
13475 13476 ill->ill_name, (void *)ill));
13476 13477 /*
13477 13478 * Enqueue the mp atomically in ipsq_pending_mp. When the refcount
13478 13479 * drops down, the operation will be restarted by ipif_ill_refrele_tail
13479 13480 * which in turn is called by the last refrele on the ipif/ill/ire.
13480 13481 */
13481 13482 success = ipsq_pending_mp_add(connp, ipif, q, mp, IPIF_DOWN);
13482 13483 if (!success) {
13483 13484 /* The conn is closing. So just return */
13484 13485 ASSERT(connp != NULL);
13485 13486 mutex_exit(&ill->ill_lock);
13486 13487 mutex_exit(&connp->conn_lock);
13487 13488 return (EINTR);
13488 13489 }
13489 13490
13490 13491 mutex_exit(&ill->ill_lock);
13491 13492 if (connp != NULL)
13492 13493 mutex_exit(&connp->conn_lock);
13493 13494 return (EINPROGRESS);
13494 13495 }
13495 13496
13496 13497 int
13497 13498 ipif_down_tail(ipif_t *ipif)
13498 13499 {
13499 13500 ill_t *ill = ipif->ipif_ill;
13500 13501 int err = 0;
13501 13502
13502 13503 DTRACE_PROBE3(ipif__downup, char *, "ipif_down_tail",
13503 13504 ill_t *, ill, ipif_t *, ipif);
13504 13505
13505 13506 /*
13506 13507 * Skip any loopback interface (null wq).
13507 13508 * If this is the last logical interface on the ill
13508 13509 * have ill_dl_down tell the driver we are gone (unbind)
13509 13510 * Note that lun 0 can ipif_down even though
13510 13511 * there are other logical units that are up.
13511 13512 * This occurs e.g. when we change a "significant" IFF_ flag.
13512 13513 */
13513 13514 if (ill->ill_wq != NULL && !ill->ill_logical_down &&
13514 13515 ill->ill_ipif_up_count == 0 && ill->ill_ipif_dup_count == 0 &&
13515 13516 ill->ill_dl_up) {
13516 13517 ill_dl_down(ill);
13517 13518 }
13518 13519 if (!ipif->ipif_isv6)
13519 13520 err = ipif_arp_down(ipif);
13520 13521
13521 13522 ill->ill_logical_down = 0;
13522 13523
13523 13524 ip_rts_ifmsg(ipif, RTSQ_DEFAULT);
13524 13525 ip_rts_newaddrmsg(RTM_DELETE, 0, ipif, RTSQ_DEFAULT);
13525 13526 return (err);
13526 13527 }
13527 13528
13528 13529 /*
13529 13530 * Bring interface logically down without bringing the physical interface
13530 13531 * down e.g. when the netmask is changed. This avoids long lasting link
13531 13532 * negotiations between an ethernet interface and a certain switches.
13532 13533 */
13533 13534 static int
13534 13535 ipif_logical_down(ipif_t *ipif, queue_t *q, mblk_t *mp)
13535 13536 {
13536 13537 DTRACE_PROBE3(ipif__downup, char *, "ipif_logical_down",
13537 13538 ill_t *, ipif->ipif_ill, ipif_t *, ipif);
13538 13539
13539 13540 /*
13540 13541 * The ill_logical_down flag is a transient flag. It is set here
13541 13542 * and is cleared once the down has completed in ipif_down_tail.
13542 13543 * This flag does not indicate whether the ill stream is in the
13543 13544 * DL_BOUND state with the driver. Instead this flag is used by
13544 13545 * ipif_down_tail to determine whether to DL_UNBIND the stream with
13545 13546 * the driver. The state of the ill stream i.e. whether it is
13546 13547 * DL_BOUND with the driver or not is indicated by the ill_dl_up flag.
13547 13548 */
13548 13549 ipif->ipif_ill->ill_logical_down = 1;
13549 13550 return (ipif_down(ipif, q, mp));
13550 13551 }
13551 13552
13552 13553 /*
13553 13554 * Initiate deallocate of an IPIF. Always called as writer. Called by
13554 13555 * ill_delete or ip_sioctl_removeif.
13555 13556 */
13556 13557 static void
13557 13558 ipif_free(ipif_t *ipif)
13558 13559 {
13559 13560 ip_stack_t *ipst = ipif->ipif_ill->ill_ipst;
13560 13561
13561 13562 ASSERT(IAM_WRITER_IPIF(ipif));
13562 13563
13563 13564 if (ipif->ipif_recovery_id != 0)
13564 13565 (void) untimeout(ipif->ipif_recovery_id);
13565 13566 ipif->ipif_recovery_id = 0;
13566 13567
13567 13568 /*
13568 13569 * Take down the interface. We can be called either from ill_delete
13569 13570 * or from ip_sioctl_removeif.
13570 13571 */
13571 13572 (void) ipif_down(ipif, NULL, NULL);
13572 13573
13573 13574 /*
13574 13575 * Now that the interface is down, there's no chance it can still
13575 13576 * become a duplicate. Cancel any timer that may have been set while
13576 13577 * tearing down.
13577 13578 */
13578 13579 if (ipif->ipif_recovery_id != 0)
13579 13580 (void) untimeout(ipif->ipif_recovery_id);
13580 13581 ipif->ipif_recovery_id = 0;
13581 13582
13582 13583 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
13583 13584 /* Remove pointers to this ill in the multicast routing tables */
13584 13585 reset_mrt_vif_ipif(ipif);
13585 13586 /* If necessary, clear the cached source ipif rotor. */
13586 13587 if (ipif->ipif_ill->ill_src_ipif == ipif)
13587 13588 ipif->ipif_ill->ill_src_ipif = NULL;
13588 13589 rw_exit(&ipst->ips_ill_g_lock);
13589 13590 }
13590 13591
13591 13592 static void
13592 13593 ipif_free_tail(ipif_t *ipif)
13593 13594 {
13594 13595 ip_stack_t *ipst = ipif->ipif_ill->ill_ipst;
13595 13596
13596 13597 /*
13597 13598 * Need to hold both ill_g_lock and ill_lock while
13598 13599 * inserting or removing an ipif from the linked list
13599 13600 * of ipifs hanging off the ill.
13600 13601 */
13601 13602 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
13602 13603
13603 13604 #ifdef DEBUG
13604 13605 ipif_trace_cleanup(ipif);
13605 13606 #endif
13606 13607
13607 13608 /* Ask SCTP to take it out of it list */
13608 13609 sctp_update_ipif(ipif, SCTP_IPIF_REMOVE);
13609 13610 ip_rts_newaddrmsg(RTM_FREEADDR, 0, ipif, RTSQ_DEFAULT);
13610 13611
13611 13612 /* Get it out of the ILL interface list. */
13612 13613 ipif_remove(ipif);
13613 13614 rw_exit(&ipst->ips_ill_g_lock);
13614 13615
13615 13616 ASSERT(!(ipif->ipif_flags & (IPIF_UP | IPIF_DUPLICATE)));
13616 13617 ASSERT(ipif->ipif_recovery_id == 0);
13617 13618 ASSERT(ipif->ipif_ire_local == NULL);
13618 13619 ASSERT(ipif->ipif_ire_if == NULL);
13619 13620
13620 13621 /* Free the memory. */
13621 13622 mi_free(ipif);
13622 13623 }
13623 13624
13624 13625 /*
13625 13626 * Sets `buf' to an ipif name of the form "ill_name:id", or "ill_name" if "id"
13626 13627 * is zero.
13627 13628 */
13628 13629 void
13629 13630 ipif_get_name(const ipif_t *ipif, char *buf, int len)
13630 13631 {
13631 13632 char lbuf[LIFNAMSIZ];
13632 13633 char *name;
13633 13634 size_t name_len;
13634 13635
13635 13636 buf[0] = '\0';
13636 13637 name = ipif->ipif_ill->ill_name;
13637 13638 name_len = ipif->ipif_ill->ill_name_length;
13638 13639 if (ipif->ipif_id != 0) {
13639 13640 (void) sprintf(lbuf, "%s%c%d", name, IPIF_SEPARATOR_CHAR,
13640 13641 ipif->ipif_id);
13641 13642 name = lbuf;
13642 13643 name_len = mi_strlen(name) + 1;
13643 13644 }
13644 13645 len -= 1;
13645 13646 buf[len] = '\0';
13646 13647 len = MIN(len, name_len);
13647 13648 bcopy(name, buf, len);
13648 13649 }
13649 13650
13650 13651 /*
13651 13652 * Sets `buf' to an ill name.
13652 13653 */
13653 13654 void
13654 13655 ill_get_name(const ill_t *ill, char *buf, int len)
13655 13656 {
13656 13657 char *name;
13657 13658 size_t name_len;
13658 13659
13659 13660 name = ill->ill_name;
13660 13661 name_len = ill->ill_name_length;
13661 13662 len -= 1;
13662 13663 buf[len] = '\0';
13663 13664 len = MIN(len, name_len);
13664 13665 bcopy(name, buf, len);
13665 13666 }
13666 13667
13667 13668 /*
13668 13669 * Find an IPIF based on the name passed in. Names can be of the form <phys>
13669 13670 * (e.g., le0) or <phys>:<#> (e.g., le0:1). When there is no colon, the
13670 13671 * implied unit id is zero. <phys> must correspond to the name of an ILL.
13671 13672 * (May be called as writer.)
13672 13673 */
13673 13674 static ipif_t *
13674 13675 ipif_lookup_on_name(char *name, size_t namelen, boolean_t do_alloc,
13675 13676 boolean_t *exists, boolean_t isv6, zoneid_t zoneid, ip_stack_t *ipst)
13676 13677 {
13677 13678 char *cp;
13678 13679 char *endp;
13679 13680 long id;
13680 13681 ill_t *ill;
13681 13682 ipif_t *ipif;
13682 13683 uint_t ire_type;
13683 13684 boolean_t did_alloc = B_FALSE;
13684 13685 char last;
13685 13686
13686 13687 /*
13687 13688 * If the caller wants to us to create the ipif, make sure we have a
13688 13689 * valid zoneid
13689 13690 */
13690 13691 ASSERT(!do_alloc || zoneid != ALL_ZONES);
13691 13692
13692 13693 if (namelen == 0) {
13693 13694 return (NULL);
13694 13695 }
13695 13696
13696 13697 *exists = B_FALSE;
13697 13698 /* Look for a colon in the name. */
13698 13699 endp = &name[namelen];
13699 13700 for (cp = endp; --cp > name; ) {
13700 13701 if (*cp == IPIF_SEPARATOR_CHAR)
13701 13702 break;
13702 13703 }
13703 13704
13704 13705 if (*cp == IPIF_SEPARATOR_CHAR) {
13705 13706 /*
13706 13707 * Reject any non-decimal aliases for logical
13707 13708 * interfaces. Aliases with leading zeroes
13708 13709 * are also rejected as they introduce ambiguity
13709 13710 * in the naming of the interfaces.
13710 13711 * In order to confirm with existing semantics,
13711 13712 * and to not break any programs/script relying
13712 13713 * on that behaviour, if<0>:0 is considered to be
13713 13714 * a valid interface.
13714 13715 *
13715 13716 * If alias has two or more digits and the first
13716 13717 * is zero, fail.
13717 13718 */
13718 13719 if (&cp[2] < endp && cp[1] == '0') {
13719 13720 return (NULL);
13720 13721 }
13721 13722 }
13722 13723
13723 13724 if (cp <= name) {
13724 13725 cp = endp;
13725 13726 }
13726 13727 last = *cp;
13727 13728 *cp = '\0';
13728 13729
13729 13730 /*
13730 13731 * Look up the ILL, based on the portion of the name
13731 13732 * before the slash. ill_lookup_on_name returns a held ill.
13732 13733 * Temporary to check whether ill exists already. If so
13733 13734 * ill_lookup_on_name will clear it.
13734 13735 */
13735 13736 ill = ill_lookup_on_name(name, do_alloc, isv6,
13736 13737 &did_alloc, ipst);
13737 13738 *cp = last;
13738 13739 if (ill == NULL)
13739 13740 return (NULL);
13740 13741
13741 13742 /* Establish the unit number in the name. */
13742 13743 id = 0;
13743 13744 if (cp < endp && *endp == '\0') {
13744 13745 /* If there was a colon, the unit number follows. */
13745 13746 cp++;
13746 13747 if (ddi_strtol(cp, NULL, 0, &id) != 0) {
13747 13748 ill_refrele(ill);
13748 13749 return (NULL);
13749 13750 }
13750 13751 }
13751 13752
13752 13753 mutex_enter(&ill->ill_lock);
13753 13754 /* Now see if there is an IPIF with this unit number. */
13754 13755 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
13755 13756 if (ipif->ipif_id == id) {
13756 13757 if (zoneid != ALL_ZONES &&
13757 13758 zoneid != ipif->ipif_zoneid &&
13758 13759 ipif->ipif_zoneid != ALL_ZONES) {
13759 13760 mutex_exit(&ill->ill_lock);
13760 13761 ill_refrele(ill);
13761 13762 return (NULL);
13762 13763 }
13763 13764 if (IPIF_CAN_LOOKUP(ipif)) {
13764 13765 ipif_refhold_locked(ipif);
13765 13766 mutex_exit(&ill->ill_lock);
13766 13767 if (!did_alloc)
13767 13768 *exists = B_TRUE;
13768 13769 /*
13769 13770 * Drop locks before calling ill_refrele
13770 13771 * since it can potentially call into
13771 13772 * ipif_ill_refrele_tail which can end up
13772 13773 * in trying to acquire any lock.
13773 13774 */
13774 13775 ill_refrele(ill);
13775 13776 return (ipif);
13776 13777 }
13777 13778 }
13778 13779 }
13779 13780
13780 13781 if (!do_alloc) {
13781 13782 mutex_exit(&ill->ill_lock);
13782 13783 ill_refrele(ill);
13783 13784 return (NULL);
13784 13785 }
13785 13786
13786 13787 /*
13787 13788 * If none found, atomically allocate and return a new one.
13788 13789 * Historically, we used IRE_LOOPBACK only for lun 0, and IRE_LOCAL
13789 13790 * to support "receive only" use of lo0:1 etc. as is still done
13790 13791 * below as an initial guess.
13791 13792 * However, this is now likely to be overriden later in ipif_up_done()
13792 13793 * when we know for sure what address has been configured on the
13793 13794 * interface, since we might have more than one loopback interface
13794 13795 * with a loopback address, e.g. in the case of zones, and all the
13795 13796 * interfaces with loopback addresses need to be marked IRE_LOOPBACK.
13796 13797 */
13797 13798 if (ill->ill_net_type == IRE_LOOPBACK && id == 0)
13798 13799 ire_type = IRE_LOOPBACK;
13799 13800 else
13800 13801 ire_type = IRE_LOCAL;
13801 13802 ipif = ipif_allocate(ill, id, ire_type, B_TRUE, B_TRUE, NULL);
13802 13803 if (ipif != NULL)
13803 13804 ipif_refhold_locked(ipif);
13804 13805 mutex_exit(&ill->ill_lock);
13805 13806 ill_refrele(ill);
13806 13807 return (ipif);
13807 13808 }
13808 13809
13809 13810 /*
13810 13811 * Variant of the above that queues the request on the ipsq when
13811 13812 * IPIF_CHANGING is set.
13812 13813 */
13813 13814 static ipif_t *
13814 13815 ipif_lookup_on_name_async(char *name, size_t namelen, boolean_t isv6,
13815 13816 zoneid_t zoneid, queue_t *q, mblk_t *mp, ipsq_func_t func, int *error,
13816 13817 ip_stack_t *ipst)
13817 13818 {
13818 13819 char *cp;
13819 13820 char *endp;
13820 13821 long id;
13821 13822 ill_t *ill;
13822 13823 ipif_t *ipif;
13823 13824 boolean_t did_alloc = B_FALSE;
13824 13825 ipsq_t *ipsq;
13825 13826
13826 13827 if (error != NULL)
13827 13828 *error = 0;
13828 13829
13829 13830 if (namelen == 0) {
13830 13831 if (error != NULL)
13831 13832 *error = ENXIO;
13832 13833 return (NULL);
13833 13834 }
13834 13835
13835 13836 /* Look for a colon in the name. */
13836 13837 endp = &name[namelen];
13837 13838 for (cp = endp; --cp > name; ) {
13838 13839 if (*cp == IPIF_SEPARATOR_CHAR)
13839 13840 break;
13840 13841 }
13841 13842
13842 13843 if (*cp == IPIF_SEPARATOR_CHAR) {
13843 13844 /*
13844 13845 * Reject any non-decimal aliases for logical
13845 13846 * interfaces. Aliases with leading zeroes
13846 13847 * are also rejected as they introduce ambiguity
13847 13848 * in the naming of the interfaces.
13848 13849 * In order to confirm with existing semantics,
13849 13850 * and to not break any programs/script relying
13850 13851 * on that behaviour, if<0>:0 is considered to be
13851 13852 * a valid interface.
13852 13853 *
13853 13854 * If alias has two or more digits and the first
13854 13855 * is zero, fail.
13855 13856 */
13856 13857 if (&cp[2] < endp && cp[1] == '0') {
13857 13858 if (error != NULL)
13858 13859 *error = EINVAL;
13859 13860 return (NULL);
13860 13861 }
13861 13862 }
13862 13863
13863 13864 if (cp <= name) {
13864 13865 cp = endp;
13865 13866 } else {
13866 13867 *cp = '\0';
13867 13868 }
13868 13869
13869 13870 /*
13870 13871 * Look up the ILL, based on the portion of the name
13871 13872 * before the slash. ill_lookup_on_name returns a held ill.
13872 13873 * Temporary to check whether ill exists already. If so
13873 13874 * ill_lookup_on_name will clear it.
13874 13875 */
13875 13876 ill = ill_lookup_on_name(name, B_FALSE, isv6, &did_alloc, ipst);
13876 13877 if (cp != endp)
13877 13878 *cp = IPIF_SEPARATOR_CHAR;
13878 13879 if (ill == NULL)
13879 13880 return (NULL);
13880 13881
13881 13882 /* Establish the unit number in the name. */
13882 13883 id = 0;
13883 13884 if (cp < endp && *endp == '\0') {
13884 13885 /* If there was a colon, the unit number follows. */
13885 13886 cp++;
13886 13887 if (ddi_strtol(cp, NULL, 0, &id) != 0) {
13887 13888 ill_refrele(ill);
13888 13889 if (error != NULL)
13889 13890 *error = ENXIO;
13890 13891 return (NULL);
13891 13892 }
13892 13893 }
13893 13894
13894 13895 GRAB_CONN_LOCK(q);
13895 13896 mutex_enter(&ill->ill_lock);
13896 13897 /* Now see if there is an IPIF with this unit number. */
13897 13898 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
13898 13899 if (ipif->ipif_id == id) {
13899 13900 if (zoneid != ALL_ZONES &&
13900 13901 zoneid != ipif->ipif_zoneid &&
13901 13902 ipif->ipif_zoneid != ALL_ZONES) {
13902 13903 mutex_exit(&ill->ill_lock);
13903 13904 RELEASE_CONN_LOCK(q);
13904 13905 ill_refrele(ill);
13905 13906 if (error != NULL)
13906 13907 *error = ENXIO;
13907 13908 return (NULL);
13908 13909 }
13909 13910
13910 13911 if (!(IPIF_IS_CHANGING(ipif) ||
13911 13912 IPIF_IS_CONDEMNED(ipif)) ||
13912 13913 IAM_WRITER_IPIF(ipif)) {
13913 13914 ipif_refhold_locked(ipif);
13914 13915 mutex_exit(&ill->ill_lock);
13915 13916 /*
13916 13917 * Drop locks before calling ill_refrele
13917 13918 * since it can potentially call into
13918 13919 * ipif_ill_refrele_tail which can end up
13919 13920 * in trying to acquire any lock.
13920 13921 */
13921 13922 RELEASE_CONN_LOCK(q);
13922 13923 ill_refrele(ill);
13923 13924 return (ipif);
13924 13925 } else if (q != NULL && !IPIF_IS_CONDEMNED(ipif)) {
13925 13926 ipsq = ill->ill_phyint->phyint_ipsq;
13926 13927 mutex_enter(&ipsq->ipsq_lock);
13927 13928 mutex_enter(&ipsq->ipsq_xop->ipx_lock);
13928 13929 mutex_exit(&ill->ill_lock);
13929 13930 ipsq_enq(ipsq, q, mp, func, NEW_OP, ill);
13930 13931 mutex_exit(&ipsq->ipsq_xop->ipx_lock);
13931 13932 mutex_exit(&ipsq->ipsq_lock);
13932 13933 RELEASE_CONN_LOCK(q);
13933 13934 ill_refrele(ill);
13934 13935 if (error != NULL)
13935 13936 *error = EINPROGRESS;
13936 13937 return (NULL);
13937 13938 }
13938 13939 }
13939 13940 }
13940 13941 RELEASE_CONN_LOCK(q);
13941 13942 mutex_exit(&ill->ill_lock);
13942 13943 ill_refrele(ill);
13943 13944 if (error != NULL)
13944 13945 *error = ENXIO;
13945 13946 return (NULL);
13946 13947 }
13947 13948
13948 13949 /*
13949 13950 * This routine is called whenever a new address comes up on an ipif. If
13950 13951 * we are configured to respond to address mask requests, then we are supposed
13951 13952 * to broadcast an address mask reply at this time. This routine is also
13952 13953 * called if we are already up, but a netmask change is made. This is legal
13953 13954 * but might not make the system manager very popular. (May be called
13954 13955 * as writer.)
13955 13956 */
13956 13957 void
13957 13958 ipif_mask_reply(ipif_t *ipif)
13958 13959 {
13959 13960 icmph_t *icmph;
13960 13961 ipha_t *ipha;
13961 13962 mblk_t *mp;
13962 13963 ip_stack_t *ipst = ipif->ipif_ill->ill_ipst;
13963 13964 ip_xmit_attr_t ixas;
13964 13965
13965 13966 #define REPLY_LEN (sizeof (icmp_ipha) + sizeof (icmph_t) + IP_ADDR_LEN)
13966 13967
13967 13968 if (!ipst->ips_ip_respond_to_address_mask_broadcast)
13968 13969 return;
13969 13970
13970 13971 /* ICMP mask reply is IPv4 only */
13971 13972 ASSERT(!ipif->ipif_isv6);
13972 13973 /* ICMP mask reply is not for a loopback interface */
13973 13974 ASSERT(ipif->ipif_ill->ill_wq != NULL);
13974 13975
13975 13976 if (ipif->ipif_lcl_addr == INADDR_ANY)
13976 13977 return;
13977 13978
13978 13979 mp = allocb(REPLY_LEN, BPRI_HI);
13979 13980 if (mp == NULL)
13980 13981 return;
13981 13982 mp->b_wptr = mp->b_rptr + REPLY_LEN;
13982 13983
13983 13984 ipha = (ipha_t *)mp->b_rptr;
13984 13985 bzero(ipha, REPLY_LEN);
13985 13986 *ipha = icmp_ipha;
13986 13987 ipha->ipha_ttl = ipst->ips_ip_broadcast_ttl;
13987 13988 ipha->ipha_src = ipif->ipif_lcl_addr;
13988 13989 ipha->ipha_dst = ipif->ipif_brd_addr;
13989 13990 ipha->ipha_length = htons(REPLY_LEN);
13990 13991 ipha->ipha_ident = 0;
13991 13992
13992 13993 icmph = (icmph_t *)&ipha[1];
13993 13994 icmph->icmph_type = ICMP_ADDRESS_MASK_REPLY;
13994 13995 bcopy(&ipif->ipif_net_mask, &icmph[1], IP_ADDR_LEN);
13995 13996 icmph->icmph_checksum = IP_CSUM(mp, sizeof (ipha_t), 0);
13996 13997
13997 13998 bzero(&ixas, sizeof (ixas));
13998 13999 ixas.ixa_flags = IXAF_BASIC_SIMPLE_V4;
13999 14000 ixas.ixa_zoneid = ALL_ZONES;
14000 14001 ixas.ixa_ifindex = 0;
14001 14002 ixas.ixa_ipst = ipst;
14002 14003 ixas.ixa_multicast_ttl = IP_DEFAULT_MULTICAST_TTL;
14003 14004 (void) ip_output_simple(mp, &ixas);
14004 14005 ixa_cleanup(&ixas);
14005 14006 #undef REPLY_LEN
14006 14007 }
14007 14008
14008 14009 /*
14009 14010 * Join the ipif specific multicast groups.
14010 14011 * Must be called after a mapping has been set up in the resolver. (Always
14011 14012 * called as writer.)
14012 14013 */
14013 14014 void
14014 14015 ipif_multicast_up(ipif_t *ipif)
14015 14016 {
14016 14017 int err;
14017 14018 ill_t *ill;
14018 14019 ilm_t *ilm;
14019 14020
14020 14021 ASSERT(IAM_WRITER_IPIF(ipif));
14021 14022
14022 14023 ill = ipif->ipif_ill;
14023 14024
14024 14025 ip1dbg(("ipif_multicast_up\n"));
14025 14026 if (!(ill->ill_flags & ILLF_MULTICAST) ||
14026 14027 ipif->ipif_allhosts_ilm != NULL)
14027 14028 return;
14028 14029
14029 14030 if (ipif->ipif_isv6) {
14030 14031 in6_addr_t v6allmc = ipv6_all_hosts_mcast;
14031 14032 in6_addr_t v6solmc = ipv6_solicited_node_mcast;
14032 14033
14033 14034 v6solmc.s6_addr32[3] |= ipif->ipif_v6lcl_addr.s6_addr32[3];
14034 14035
14035 14036 if (IN6_IS_ADDR_UNSPECIFIED(&ipif->ipif_v6lcl_addr))
14036 14037 return;
14037 14038
14038 14039 ip1dbg(("ipif_multicast_up - addmulti\n"));
14039 14040
14040 14041 /*
14041 14042 * Join the all hosts multicast address. We skip this for
14042 14043 * underlying IPMP interfaces since they should be invisible.
14043 14044 */
14044 14045 if (!IS_UNDER_IPMP(ill)) {
14045 14046 ilm = ip_addmulti(&v6allmc, ill, ipif->ipif_zoneid,
14046 14047 &err);
14047 14048 if (ilm == NULL) {
14048 14049 ASSERT(err != 0);
14049 14050 ip0dbg(("ipif_multicast_up: "
14050 14051 "all_hosts_mcast failed %d\n", err));
14051 14052 return;
14052 14053 }
14053 14054 ipif->ipif_allhosts_ilm = ilm;
14054 14055 }
14055 14056
14056 14057 /*
14057 14058 * Enable multicast for the solicited node multicast address.
14058 14059 * If IPMP we need to put the membership on the upper ill.
14059 14060 */
14060 14061 if (!(ipif->ipif_flags & IPIF_NOLOCAL)) {
14061 14062 ill_t *mcast_ill = NULL;
14062 14063 boolean_t need_refrele;
14063 14064
14064 14065 if (IS_UNDER_IPMP(ill) &&
14065 14066 (mcast_ill = ipmp_ill_hold_ipmp_ill(ill)) != NULL) {
14066 14067 need_refrele = B_TRUE;
14067 14068 } else {
14068 14069 mcast_ill = ill;
14069 14070 need_refrele = B_FALSE;
14070 14071 }
14071 14072
14072 14073 ilm = ip_addmulti(&v6solmc, mcast_ill,
14073 14074 ipif->ipif_zoneid, &err);
14074 14075 if (need_refrele)
14075 14076 ill_refrele(mcast_ill);
14076 14077
14077 14078 if (ilm == NULL) {
14078 14079 ASSERT(err != 0);
14079 14080 ip0dbg(("ipif_multicast_up: solicited MC"
14080 14081 " failed %d\n", err));
14081 14082 if ((ilm = ipif->ipif_allhosts_ilm) != NULL) {
14082 14083 ipif->ipif_allhosts_ilm = NULL;
14083 14084 (void) ip_delmulti(ilm);
14084 14085 }
14085 14086 return;
14086 14087 }
14087 14088 ipif->ipif_solmulti_ilm = ilm;
14088 14089 }
14089 14090 } else {
14090 14091 in6_addr_t v6group;
14091 14092
14092 14093 if (ipif->ipif_lcl_addr == INADDR_ANY || IS_UNDER_IPMP(ill))
14093 14094 return;
14094 14095
14095 14096 /* Join the all hosts multicast address */
14096 14097 ip1dbg(("ipif_multicast_up - addmulti\n"));
14097 14098 IN6_IPADDR_TO_V4MAPPED(htonl(INADDR_ALLHOSTS_GROUP), &v6group);
14098 14099
14099 14100 ilm = ip_addmulti(&v6group, ill, ipif->ipif_zoneid, &err);
14100 14101 if (ilm == NULL) {
14101 14102 ASSERT(err != 0);
14102 14103 ip0dbg(("ipif_multicast_up: failed %d\n", err));
14103 14104 return;
14104 14105 }
14105 14106 ipif->ipif_allhosts_ilm = ilm;
14106 14107 }
14107 14108 }
14108 14109
14109 14110 /*
14110 14111 * Blow away any multicast groups that we joined in ipif_multicast_up().
14111 14112 * (ilms from explicit memberships are handled in conn_update_ill.)
14112 14113 */
14113 14114 void
14114 14115 ipif_multicast_down(ipif_t *ipif)
14115 14116 {
14116 14117 ASSERT(IAM_WRITER_IPIF(ipif));
14117 14118
14118 14119 ip1dbg(("ipif_multicast_down\n"));
14119 14120
14120 14121 if (ipif->ipif_allhosts_ilm != NULL) {
14121 14122 (void) ip_delmulti(ipif->ipif_allhosts_ilm);
14122 14123 ipif->ipif_allhosts_ilm = NULL;
14123 14124 }
14124 14125 if (ipif->ipif_solmulti_ilm != NULL) {
14125 14126 (void) ip_delmulti(ipif->ipif_solmulti_ilm);
14126 14127 ipif->ipif_solmulti_ilm = NULL;
14127 14128 }
14128 14129 }
14129 14130
14130 14131 /*
14131 14132 * Used when an interface comes up to recreate any extra routes on this
14132 14133 * interface.
14133 14134 */
14134 14135 int
14135 14136 ill_recover_saved_ire(ill_t *ill)
14136 14137 {
14137 14138 mblk_t *mp;
14138 14139 ip_stack_t *ipst = ill->ill_ipst;
14139 14140
14140 14141 ip1dbg(("ill_recover_saved_ire(%s)", ill->ill_name));
14141 14142
14142 14143 mutex_enter(&ill->ill_saved_ire_lock);
14143 14144 for (mp = ill->ill_saved_ire_mp; mp != NULL; mp = mp->b_cont) {
14144 14145 ire_t *ire, *nire;
14145 14146 ifrt_t *ifrt;
14146 14147
14147 14148 ifrt = (ifrt_t *)mp->b_rptr;
14148 14149 /*
14149 14150 * Create a copy of the IRE with the saved address and netmask.
14150 14151 */
14151 14152 if (ill->ill_isv6) {
14152 14153 ire = ire_create_v6(
14153 14154 &ifrt->ifrt_v6addr,
14154 14155 &ifrt->ifrt_v6mask,
14155 14156 &ifrt->ifrt_v6gateway_addr,
14156 14157 ifrt->ifrt_type,
14157 14158 ill,
14158 14159 ifrt->ifrt_zoneid,
14159 14160 ifrt->ifrt_flags,
14160 14161 NULL,
14161 14162 ipst);
14162 14163 } else {
14163 14164 ire = ire_create(
14164 14165 (uint8_t *)&ifrt->ifrt_addr,
14165 14166 (uint8_t *)&ifrt->ifrt_mask,
14166 14167 (uint8_t *)&ifrt->ifrt_gateway_addr,
14167 14168 ifrt->ifrt_type,
14168 14169 ill,
14169 14170 ifrt->ifrt_zoneid,
14170 14171 ifrt->ifrt_flags,
14171 14172 NULL,
14172 14173 ipst);
14173 14174 }
14174 14175 if (ire == NULL) {
14175 14176 mutex_exit(&ill->ill_saved_ire_lock);
14176 14177 return (ENOMEM);
14177 14178 }
14178 14179
14179 14180 if (ifrt->ifrt_flags & RTF_SETSRC) {
14180 14181 if (ill->ill_isv6) {
14181 14182 ire->ire_setsrc_addr_v6 =
14182 14183 ifrt->ifrt_v6setsrc_addr;
14183 14184 } else {
14184 14185 ire->ire_setsrc_addr = ifrt->ifrt_setsrc_addr;
14185 14186 }
14186 14187 }
14187 14188
14188 14189 /*
14189 14190 * Some software (for example, GateD and Sun Cluster) attempts
14190 14191 * to create (what amount to) IRE_PREFIX routes with the
14191 14192 * loopback address as the gateway. This is primarily done to
14192 14193 * set up prefixes with the RTF_REJECT flag set (for example,
14193 14194 * when generating aggregate routes.)
14194 14195 *
14195 14196 * If the IRE type (as defined by ill->ill_net_type) is
14196 14197 * IRE_LOOPBACK, then we map the request into a
14197 14198 * IRE_IF_NORESOLVER.
14198 14199 */
14199 14200 if (ill->ill_net_type == IRE_LOOPBACK)
14200 14201 ire->ire_type = IRE_IF_NORESOLVER;
14201 14202
14202 14203 /*
14203 14204 * ire held by ire_add, will be refreled' towards the
14204 14205 * the end of ipif_up_done
14205 14206 */
14206 14207 nire = ire_add(ire);
14207 14208 /*
14208 14209 * Check if it was a duplicate entry. This handles
14209 14210 * the case of two racing route adds for the same route
14210 14211 */
14211 14212 if (nire == NULL) {
14212 14213 ip1dbg(("ill_recover_saved_ire: FAILED\n"));
14213 14214 } else if (nire != ire) {
14214 14215 ip1dbg(("ill_recover_saved_ire: duplicate ire %p\n",
14215 14216 (void *)nire));
14216 14217 ire_delete(nire);
14217 14218 } else {
14218 14219 ip1dbg(("ill_recover_saved_ire: added ire %p\n",
14219 14220 (void *)nire));
14220 14221 }
14221 14222 if (nire != NULL)
14222 14223 ire_refrele(nire);
14223 14224 }
14224 14225 mutex_exit(&ill->ill_saved_ire_lock);
14225 14226 return (0);
14226 14227 }
14227 14228
14228 14229 /*
14229 14230 * Used to set the netmask and broadcast address to default values when the
14230 14231 * interface is brought up. (Always called as writer.)
14231 14232 */
14232 14233 static void
14233 14234 ipif_set_default(ipif_t *ipif)
14234 14235 {
14235 14236 ASSERT(MUTEX_HELD(&ipif->ipif_ill->ill_lock));
14236 14237
14237 14238 if (!ipif->ipif_isv6) {
14238 14239 /*
14239 14240 * Interface holds an IPv4 address. Default
14240 14241 * mask is the natural netmask.
14241 14242 */
14242 14243 if (!ipif->ipif_net_mask) {
14243 14244 ipaddr_t v4mask;
14244 14245
14245 14246 v4mask = ip_net_mask(ipif->ipif_lcl_addr);
14246 14247 V4MASK_TO_V6(v4mask, ipif->ipif_v6net_mask);
14247 14248 }
14248 14249 if (ipif->ipif_flags & IPIF_POINTOPOINT) {
14249 14250 /* ipif_subnet is ipif_pp_dst_addr for pt-pt */
14250 14251 ipif->ipif_v6subnet = ipif->ipif_v6pp_dst_addr;
14251 14252 } else {
14252 14253 V6_MASK_COPY(ipif->ipif_v6lcl_addr,
14253 14254 ipif->ipif_v6net_mask, ipif->ipif_v6subnet);
14254 14255 }
14255 14256 /*
14256 14257 * NOTE: SunOS 4.X does this even if the broadcast address
14257 14258 * has been already set thus we do the same here.
14258 14259 */
14259 14260 if (ipif->ipif_flags & IPIF_BROADCAST) {
14260 14261 ipaddr_t v4addr;
14261 14262
14262 14263 v4addr = ipif->ipif_subnet | ~ipif->ipif_net_mask;
14263 14264 IN6_IPADDR_TO_V4MAPPED(v4addr, &ipif->ipif_v6brd_addr);
14264 14265 }
14265 14266 } else {
14266 14267 /*
14267 14268 * Interface holds an IPv6-only address. Default
14268 14269 * mask is all-ones.
14269 14270 */
14270 14271 if (IN6_IS_ADDR_UNSPECIFIED(&ipif->ipif_v6net_mask))
14271 14272 ipif->ipif_v6net_mask = ipv6_all_ones;
14272 14273 if (ipif->ipif_flags & IPIF_POINTOPOINT) {
14273 14274 /* ipif_subnet is ipif_pp_dst_addr for pt-pt */
14274 14275 ipif->ipif_v6subnet = ipif->ipif_v6pp_dst_addr;
14275 14276 } else {
14276 14277 V6_MASK_COPY(ipif->ipif_v6lcl_addr,
14277 14278 ipif->ipif_v6net_mask, ipif->ipif_v6subnet);
14278 14279 }
14279 14280 }
14280 14281 }
14281 14282
14282 14283 /*
14283 14284 * Return 0 if this address can be used as local address without causing
14284 14285 * duplicate address problems. Otherwise, return EADDRNOTAVAIL if the address
14285 14286 * is already up on a different ill, and EADDRINUSE if it's up on the same ill.
14286 14287 * Note that the same IPv6 link-local address is allowed as long as the ills
14287 14288 * are not on the same link.
14288 14289 */
14289 14290 int
14290 14291 ip_addr_availability_check(ipif_t *new_ipif)
14291 14292 {
14292 14293 in6_addr_t our_v6addr;
14293 14294 ill_t *ill;
14294 14295 ipif_t *ipif;
14295 14296 ill_walk_context_t ctx;
14296 14297 ip_stack_t *ipst = new_ipif->ipif_ill->ill_ipst;
14297 14298
14298 14299 ASSERT(IAM_WRITER_IPIF(new_ipif));
14299 14300 ASSERT(MUTEX_HELD(&ipst->ips_ip_addr_avail_lock));
14300 14301 ASSERT(RW_READ_HELD(&ipst->ips_ill_g_lock));
14301 14302
14302 14303 new_ipif->ipif_flags &= ~IPIF_UNNUMBERED;
14303 14304 if (IN6_IS_ADDR_UNSPECIFIED(&new_ipif->ipif_v6lcl_addr) ||
14304 14305 IN6_IS_ADDR_V4MAPPED_ANY(&new_ipif->ipif_v6lcl_addr))
14305 14306 return (0);
14306 14307
14307 14308 our_v6addr = new_ipif->ipif_v6lcl_addr;
14308 14309
14309 14310 if (new_ipif->ipif_isv6)
14310 14311 ill = ILL_START_WALK_V6(&ctx, ipst);
14311 14312 else
14312 14313 ill = ILL_START_WALK_V4(&ctx, ipst);
14313 14314
14314 14315 for (; ill != NULL; ill = ill_next(&ctx, ill)) {
14315 14316 for (ipif = ill->ill_ipif; ipif != NULL;
14316 14317 ipif = ipif->ipif_next) {
14317 14318 if ((ipif == new_ipif) ||
14318 14319 !(ipif->ipif_flags & IPIF_UP) ||
14319 14320 (ipif->ipif_flags & IPIF_UNNUMBERED) ||
14320 14321 !IN6_ARE_ADDR_EQUAL(&ipif->ipif_v6lcl_addr,
14321 14322 &our_v6addr))
14322 14323 continue;
14323 14324
14324 14325 if (new_ipif->ipif_flags & IPIF_POINTOPOINT)
14325 14326 new_ipif->ipif_flags |= IPIF_UNNUMBERED;
14326 14327 else if (ipif->ipif_flags & IPIF_POINTOPOINT)
14327 14328 ipif->ipif_flags |= IPIF_UNNUMBERED;
14328 14329 else if ((IN6_IS_ADDR_LINKLOCAL(&our_v6addr) ||
14329 14330 IN6_IS_ADDR_SITELOCAL(&our_v6addr)) &&
14330 14331 !IS_ON_SAME_LAN(ill, new_ipif->ipif_ill))
14331 14332 continue;
14332 14333 else if (new_ipif->ipif_zoneid != ipif->ipif_zoneid &&
14333 14334 ipif->ipif_zoneid != ALL_ZONES && IS_LOOPBACK(ill))
14334 14335 continue;
14335 14336 else if (new_ipif->ipif_ill == ill)
14336 14337 return (EADDRINUSE);
14337 14338 else
14338 14339 return (EADDRNOTAVAIL);
14339 14340 }
14340 14341 }
14341 14342
14342 14343 return (0);
14343 14344 }
14344 14345
14345 14346 /*
14346 14347 * Bring up an ipif: bring up arp/ndp, bring up the DLPI stream, and add
14347 14348 * IREs for the ipif.
14348 14349 * When the routine returns EINPROGRESS then mp has been consumed and
14349 14350 * the ioctl will be acked from ip_rput_dlpi.
14350 14351 */
14351 14352 int
14352 14353 ipif_up(ipif_t *ipif, queue_t *q, mblk_t *mp)
14353 14354 {
14354 14355 ill_t *ill = ipif->ipif_ill;
14355 14356 boolean_t isv6 = ipif->ipif_isv6;
14356 14357 int err = 0;
14357 14358 boolean_t success;
14358 14359 uint_t ipif_orig_id;
14359 14360 ip_stack_t *ipst = ill->ill_ipst;
14360 14361
14361 14362 ASSERT(IAM_WRITER_IPIF(ipif));
14362 14363
14363 14364 ip1dbg(("ipif_up(%s:%u)\n", ill->ill_name, ipif->ipif_id));
14364 14365 DTRACE_PROBE3(ipif__downup, char *, "ipif_up",
14365 14366 ill_t *, ill, ipif_t *, ipif);
14366 14367
14367 14368 /* Shouldn't get here if it is already up. */
14368 14369 if (ipif->ipif_flags & IPIF_UP)
14369 14370 return (EALREADY);
14370 14371
14371 14372 /*
14372 14373 * If this is a request to bring up a data address on an interface
14373 14374 * under IPMP, then move the address to its IPMP meta-interface and
14374 14375 * try to bring it up. One complication is that the zeroth ipif for
14375 14376 * an ill is special, in that every ill always has one, and that code
14376 14377 * throughout IP deferences ill->ill_ipif without holding any locks.
14377 14378 */
14378 14379 if (IS_UNDER_IPMP(ill) && ipmp_ipif_is_dataaddr(ipif) &&
14379 14380 (!ipif->ipif_isv6 || !V6_IPIF_LINKLOCAL(ipif))) {
14380 14381 ipif_t *stubipif = NULL, *moveipif = NULL;
14381 14382 ill_t *ipmp_ill = ipmp_illgrp_ipmp_ill(ill->ill_grp);
14382 14383
14383 14384 /*
14384 14385 * The ipif being brought up should be quiesced. If it's not,
14385 14386 * something has gone amiss and we need to bail out. (If it's
14386 14387 * quiesced, we know it will remain so via IPIF_CONDEMNED.)
14387 14388 */
14388 14389 mutex_enter(&ill->ill_lock);
14389 14390 if (!ipif_is_quiescent(ipif)) {
14390 14391 mutex_exit(&ill->ill_lock);
14391 14392 return (EINVAL);
14392 14393 }
14393 14394 mutex_exit(&ill->ill_lock);
14394 14395
14395 14396 /*
14396 14397 * If we're going to need to allocate ipifs, do it prior
14397 14398 * to starting the move (and grabbing locks).
14398 14399 */
14399 14400 if (ipif->ipif_id == 0) {
14400 14401 if ((moveipif = ipif_allocate(ill, 0, IRE_LOCAL, B_TRUE,
14401 14402 B_FALSE, &err)) == NULL) {
14402 14403 return (err);
14403 14404 }
14404 14405 if ((stubipif = ipif_allocate(ill, 0, IRE_LOCAL, B_TRUE,
14405 14406 B_FALSE, &err)) == NULL) {
14406 14407 mi_free(moveipif);
14407 14408 return (err);
14408 14409 }
14409 14410 }
14410 14411
14411 14412 /*
14412 14413 * Grab or transfer the ipif to move. During the move, keep
14413 14414 * ill_g_lock held to prevent any ill walker threads from
14414 14415 * seeing things in an inconsistent state.
14415 14416 */
14416 14417 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
14417 14418 if (ipif->ipif_id != 0) {
14418 14419 ipif_remove(ipif);
14419 14420 } else {
14420 14421 ipif_transfer(ipif, moveipif, stubipif);
14421 14422 ipif = moveipif;
14422 14423 }
14423 14424
14424 14425 /*
14425 14426 * Place the ipif on the IPMP ill. If the zeroth ipif on
14426 14427 * the IPMP ill is a stub (0.0.0.0 down address) then we
14427 14428 * replace that one. Otherwise, pick the next available slot.
14428 14429 */
14429 14430 ipif->ipif_ill = ipmp_ill;
14430 14431 ipif_orig_id = ipif->ipif_id;
14431 14432
14432 14433 if (ipmp_ipif_is_stubaddr(ipmp_ill->ill_ipif)) {
14433 14434 ipif_transfer(ipif, ipmp_ill->ill_ipif, NULL);
14434 14435 ipif = ipmp_ill->ill_ipif;
14435 14436 } else {
14436 14437 ipif->ipif_id = -1;
14437 14438 if ((err = ipif_insert(ipif, B_FALSE)) != 0) {
14438 14439 /*
14439 14440 * No more available ipif_id's -- put it back
14440 14441 * on the original ill and fail the operation.
14441 14442 * Since we're writer on the ill, we can be
14442 14443 * sure our old slot is still available.
14443 14444 */
14444 14445 ipif->ipif_id = ipif_orig_id;
14445 14446 ipif->ipif_ill = ill;
14446 14447 if (ipif_orig_id == 0) {
14447 14448 ipif_transfer(ipif, ill->ill_ipif,
14448 14449 NULL);
14449 14450 } else {
14450 14451 VERIFY(ipif_insert(ipif, B_FALSE) == 0);
14451 14452 }
14452 14453 rw_exit(&ipst->ips_ill_g_lock);
14453 14454 return (err);
14454 14455 }
14455 14456 }
14456 14457 rw_exit(&ipst->ips_ill_g_lock);
14457 14458
14458 14459 /*
14459 14460 * Tell SCTP that the ipif has moved. Note that even if we
14460 14461 * had to allocate a new ipif, the original sequence id was
14461 14462 * preserved and therefore SCTP won't know.
14462 14463 */
14463 14464 sctp_move_ipif(ipif, ill, ipmp_ill);
14464 14465
14465 14466 /*
14466 14467 * If the ipif being brought up was on slot zero, then we
14467 14468 * first need to bring up the placeholder we stuck there. In
14468 14469 * ip_rput_dlpi_writer(), arp_bringup_done(), or the recursive
14469 14470 * call to ipif_up() itself, if we successfully bring up the
14470 14471 * placeholder, we'll check ill_move_ipif and bring it up too.
14471 14472 */
14472 14473 if (ipif_orig_id == 0) {
14473 14474 ASSERT(ill->ill_move_ipif == NULL);
14474 14475 ill->ill_move_ipif = ipif;
14475 14476 if ((err = ipif_up(ill->ill_ipif, q, mp)) == 0)
14476 14477 ASSERT(ill->ill_move_ipif == NULL);
14477 14478 if (err != EINPROGRESS)
14478 14479 ill->ill_move_ipif = NULL;
14479 14480 return (err);
14480 14481 }
14481 14482
14482 14483 /*
14483 14484 * Bring it up on the IPMP ill.
14484 14485 */
14485 14486 return (ipif_up(ipif, q, mp));
14486 14487 }
14487 14488
14488 14489 /* Skip arp/ndp for any loopback interface. */
14489 14490 if (ill->ill_wq != NULL) {
14490 14491 conn_t *connp = CONN_Q(q) ? Q_TO_CONN(q) : NULL;
14491 14492 ipsq_t *ipsq = ill->ill_phyint->phyint_ipsq;
14492 14493
14493 14494 if (!ill->ill_dl_up) {
14494 14495 /*
14495 14496 * ill_dl_up is not yet set. i.e. we are yet to
14496 14497 * DL_BIND with the driver and this is the first
14497 14498 * logical interface on the ill to become "up".
14498 14499 * Tell the driver to get going (via DL_BIND_REQ).
14499 14500 * Note that changing "significant" IFF_ flags
14500 14501 * address/netmask etc cause a down/up dance, but
14501 14502 * does not cause an unbind (DL_UNBIND) with the driver
14502 14503 */
14503 14504 return (ill_dl_up(ill, ipif, mp, q));
14504 14505 }
14505 14506
14506 14507 /*
14507 14508 * ipif_resolver_up may end up needeing to bind/attach
14508 14509 * the ARP stream, which in turn necessitates a
14509 14510 * DLPI message exchange with the driver. ioctls are
14510 14511 * serialized and so we cannot send more than one
14511 14512 * interface up message at a time. If ipif_resolver_up
14512 14513 * does need to wait for the DLPI handshake for the ARP stream,
14513 14514 * we get EINPROGRESS and we will complete in arp_bringup_done.
14514 14515 */
14515 14516
14516 14517 ASSERT(connp != NULL || !CONN_Q(q));
14517 14518 if (connp != NULL)
14518 14519 mutex_enter(&connp->conn_lock);
14519 14520 mutex_enter(&ill->ill_lock);
14520 14521 success = ipsq_pending_mp_add(connp, ipif, q, mp, 0);
14521 14522 mutex_exit(&ill->ill_lock);
14522 14523 if (connp != NULL)
14523 14524 mutex_exit(&connp->conn_lock);
14524 14525 if (!success)
14525 14526 return (EINTR);
14526 14527
14527 14528 /*
14528 14529 * Crank up IPv6 neighbor discovery. Unlike ARP, this should
14529 14530 * complete when ipif_ndp_up returns.
14530 14531 */
14531 14532 err = ipif_resolver_up(ipif, Res_act_initial);
14532 14533 if (err == EINPROGRESS) {
14533 14534 /* We will complete it in arp_bringup_done() */
14534 14535 return (err);
14535 14536 }
14536 14537
14537 14538 if (isv6 && err == 0)
14538 14539 err = ipif_ndp_up(ipif, B_TRUE);
14539 14540
14540 14541 ASSERT(err != EINPROGRESS);
14541 14542 mp = ipsq_pending_mp_get(ipsq, &connp);
14542 14543 ASSERT(mp != NULL);
14543 14544 if (err != 0)
14544 14545 return (err);
14545 14546 } else {
14546 14547 /*
14547 14548 * Interfaces without underlying hardware don't do duplicate
14548 14549 * address detection.
14549 14550 */
14550 14551 ASSERT(!(ipif->ipif_flags & IPIF_DUPLICATE));
14551 14552 ipif->ipif_addr_ready = 1;
14552 14553 err = ill_add_ires(ill);
14553 14554 /* allocation failure? */
14554 14555 if (err != 0)
14555 14556 return (err);
14556 14557 }
14557 14558
14558 14559 err = (isv6 ? ipif_up_done_v6(ipif) : ipif_up_done(ipif));
14559 14560 if (err == 0 && ill->ill_move_ipif != NULL) {
14560 14561 ipif = ill->ill_move_ipif;
14561 14562 ill->ill_move_ipif = NULL;
14562 14563 return (ipif_up(ipif, q, mp));
14563 14564 }
14564 14565 return (err);
14565 14566 }
14566 14567
14567 14568 /*
14568 14569 * Add any IREs tied to the ill. For now this is just an IRE_MULTICAST.
14569 14570 * The identical set of IREs need to be removed in ill_delete_ires().
14570 14571 */
14571 14572 int
14572 14573 ill_add_ires(ill_t *ill)
14573 14574 {
14574 14575 ire_t *ire;
14575 14576 in6_addr_t dummy6 = {(uint32_t)V6_MCAST, 0, 0, 1};
14576 14577 in_addr_t dummy4 = htonl(INADDR_ALLHOSTS_GROUP);
14577 14578
14578 14579 if (ill->ill_ire_multicast != NULL)
14579 14580 return (0);
14580 14581
14581 14582 /*
14582 14583 * provide some dummy ire_addr for creating the ire.
14583 14584 */
14584 14585 if (ill->ill_isv6) {
14585 14586 ire = ire_create_v6(&dummy6, 0, 0, IRE_MULTICAST, ill,
14586 14587 ALL_ZONES, RTF_UP, NULL, ill->ill_ipst);
14587 14588 } else {
14588 14589 ire = ire_create((uchar_t *)&dummy4, 0, 0, IRE_MULTICAST, ill,
14589 14590 ALL_ZONES, RTF_UP, NULL, ill->ill_ipst);
14590 14591 }
14591 14592 if (ire == NULL)
14592 14593 return (ENOMEM);
14593 14594
14594 14595 ill->ill_ire_multicast = ire;
14595 14596 return (0);
14596 14597 }
14597 14598
14598 14599 void
14599 14600 ill_delete_ires(ill_t *ill)
14600 14601 {
14601 14602 if (ill->ill_ire_multicast != NULL) {
14602 14603 /*
14603 14604 * BIND/ATTACH completed; Release the ref for ill_ire_multicast
14604 14605 * which was taken without any th_tracing enabled.
14605 14606 * We also mark it as condemned (note that it was never added)
14606 14607 * so that caching conn's can move off of it.
14607 14608 */
14608 14609 ire_make_condemned(ill->ill_ire_multicast);
14609 14610 ire_refrele_notr(ill->ill_ire_multicast);
14610 14611 ill->ill_ire_multicast = NULL;
14611 14612 }
14612 14613 }
14613 14614
14614 14615 /*
14615 14616 * Perform a bind for the physical device.
14616 14617 * When the routine returns EINPROGRESS then mp has been consumed and
14617 14618 * the ioctl will be acked from ip_rput_dlpi.
14618 14619 * Allocate an unbind message and save it until ipif_down.
14619 14620 */
14620 14621 static int
14621 14622 ill_dl_up(ill_t *ill, ipif_t *ipif, mblk_t *mp, queue_t *q)
14622 14623 {
14623 14624 mblk_t *bind_mp = NULL;
14624 14625 mblk_t *unbind_mp = NULL;
14625 14626 conn_t *connp;
14626 14627 boolean_t success;
14627 14628 int err;
14628 14629
14629 14630 DTRACE_PROBE2(ill__downup, char *, "ill_dl_up", ill_t *, ill);
14630 14631
14631 14632 ip1dbg(("ill_dl_up(%s)\n", ill->ill_name));
14632 14633 ASSERT(IAM_WRITER_ILL(ill));
14633 14634 ASSERT(mp != NULL);
14634 14635
14635 14636 /*
14636 14637 * Make sure we have an IRE_MULTICAST in case we immediately
14637 14638 * start receiving packets.
14638 14639 */
14639 14640 err = ill_add_ires(ill);
14640 14641 if (err != 0)
14641 14642 goto bad;
14642 14643
14643 14644 bind_mp = ip_dlpi_alloc(sizeof (dl_bind_req_t) + sizeof (long),
14644 14645 DL_BIND_REQ);
14645 14646 if (bind_mp == NULL)
14646 14647 goto bad;
14647 14648 ((dl_bind_req_t *)bind_mp->b_rptr)->dl_sap = ill->ill_sap;
14648 14649 ((dl_bind_req_t *)bind_mp->b_rptr)->dl_service_mode = DL_CLDLS;
14649 14650
14650 14651 /*
14651 14652 * ill_unbind_mp would be non-null if the following sequence had
14652 14653 * happened:
14653 14654 * - send DL_BIND_REQ to driver, wait for response
14654 14655 * - multiple ioctls that need to bring the ipif up are encountered,
14655 14656 * but they cannot enter the ipsq due to the outstanding DL_BIND_REQ.
14656 14657 * These ioctls will then be enqueued on the ipsq
14657 14658 * - a DL_ERROR_ACK is returned for the DL_BIND_REQ
14658 14659 * At this point, the pending ioctls in the ipsq will be drained, and
14659 14660 * since ill->ill_dl_up was not set, ill_dl_up would be invoked with
14660 14661 * a non-null ill->ill_unbind_mp
14661 14662 */
14662 14663 if (ill->ill_unbind_mp == NULL) {
14663 14664 unbind_mp = ip_dlpi_alloc(sizeof (dl_unbind_req_t),
14664 14665 DL_UNBIND_REQ);
14665 14666 if (unbind_mp == NULL)
14666 14667 goto bad;
14667 14668 }
14668 14669 /*
14669 14670 * Record state needed to complete this operation when the
14670 14671 * DL_BIND_ACK shows up. Also remember the pre-allocated mblks.
14671 14672 */
14672 14673 connp = CONN_Q(q) ? Q_TO_CONN(q) : NULL;
14673 14674 ASSERT(connp != NULL || !CONN_Q(q));
14674 14675 GRAB_CONN_LOCK(q);
14675 14676 mutex_enter(&ipif->ipif_ill->ill_lock);
14676 14677 success = ipsq_pending_mp_add(connp, ipif, q, mp, 0);
14677 14678 mutex_exit(&ipif->ipif_ill->ill_lock);
14678 14679 RELEASE_CONN_LOCK(q);
14679 14680 if (!success)
14680 14681 goto bad;
14681 14682
14682 14683 /*
14683 14684 * Save the unbind message for ill_dl_down(); it will be consumed when
14684 14685 * the interface goes down.
14685 14686 */
14686 14687 if (ill->ill_unbind_mp == NULL)
14687 14688 ill->ill_unbind_mp = unbind_mp;
14688 14689
14689 14690 ill_dlpi_send(ill, bind_mp);
14690 14691 /* Send down link-layer capabilities probe if not already done. */
14691 14692 ill_capability_probe(ill);
14692 14693
14693 14694 /*
14694 14695 * Sysid used to rely on the fact that netboots set domainname
14695 14696 * and the like. Now that miniroot boots aren't strictly netboots
14696 14697 * and miniroot network configuration is driven from userland
14697 14698 * these things still need to be set. This situation can be detected
14698 14699 * by comparing the interface being configured here to the one
14699 14700 * dhcifname was set to reference by the boot loader. Once sysid is
14700 14701 * converted to use dhcp_ipc_getinfo() this call can go away.
14701 14702 */
14702 14703 if ((ipif->ipif_flags & IPIF_DHCPRUNNING) &&
14703 14704 (strcmp(ill->ill_name, dhcifname) == 0) &&
14704 14705 (strlen(srpc_domain) == 0)) {
14705 14706 if (dhcpinit() != 0)
14706 14707 cmn_err(CE_WARN, "no cached dhcp response");
14707 14708 }
14708 14709
14709 14710 /*
14710 14711 * This operation will complete in ip_rput_dlpi with either
14711 14712 * a DL_BIND_ACK or DL_ERROR_ACK.
14712 14713 */
14713 14714 return (EINPROGRESS);
14714 14715 bad:
14715 14716 ip1dbg(("ill_dl_up(%s) FAILED\n", ill->ill_name));
14716 14717
14717 14718 freemsg(bind_mp);
14718 14719 freemsg(unbind_mp);
14719 14720 return (ENOMEM);
14720 14721 }
14721 14722
14722 14723 /* Add room for tcp+ip headers */
14723 14724 uint_t ip_loopback_mtuplus = IP_LOOPBACK_MTU + IP_SIMPLE_HDR_LENGTH + 20;
14724 14725
14725 14726 /*
14726 14727 * DLPI and ARP is up.
14727 14728 * Create all the IREs associated with an interface. Bring up multicast.
14728 14729 * Set the interface flag and finish other initialization
14729 14730 * that potentially had to be deferred to after DL_BIND_ACK.
14730 14731 */
14731 14732 int
14732 14733 ipif_up_done(ipif_t *ipif)
14733 14734 {
14734 14735 ill_t *ill = ipif->ipif_ill;
14735 14736 int err = 0;
14736 14737 boolean_t loopback = B_FALSE;
14737 14738 boolean_t update_src_selection = B_TRUE;
14738 14739 ipif_t *tmp_ipif;
14739 14740
14740 14741 ip1dbg(("ipif_up_done(%s:%u)\n",
14741 14742 ipif->ipif_ill->ill_name, ipif->ipif_id));
14742 14743 DTRACE_PROBE3(ipif__downup, char *, "ipif_up_done",
14743 14744 ill_t *, ill, ipif_t *, ipif);
14744 14745
14745 14746 /* Check if this is a loopback interface */
14746 14747 if (ipif->ipif_ill->ill_wq == NULL)
14747 14748 loopback = B_TRUE;
14748 14749
14749 14750 ASSERT(!MUTEX_HELD(&ipif->ipif_ill->ill_lock));
14750 14751
14751 14752 /*
14752 14753 * If all other interfaces for this ill are down or DEPRECATED,
14753 14754 * or otherwise unsuitable for source address selection,
14754 14755 * reset the src generation numbers to make sure source
14755 14756 * address selection gets to take this new ipif into account.
14756 14757 * No need to hold ill_lock while traversing the ipif list since
14757 14758 * we are writer
14758 14759 */
14759 14760 for (tmp_ipif = ill->ill_ipif; tmp_ipif;
14760 14761 tmp_ipif = tmp_ipif->ipif_next) {
14761 14762 if (((tmp_ipif->ipif_flags &
14762 14763 (IPIF_NOXMIT|IPIF_ANYCAST|IPIF_NOLOCAL|IPIF_DEPRECATED)) ||
14763 14764 !(tmp_ipif->ipif_flags & IPIF_UP)) ||
14764 14765 (tmp_ipif == ipif))
14765 14766 continue;
14766 14767 /* first useable pre-existing interface */
14767 14768 update_src_selection = B_FALSE;
14768 14769 break;
14769 14770 }
14770 14771 if (update_src_selection)
14771 14772 ip_update_source_selection(ill->ill_ipst);
14772 14773
14773 14774 if (IS_LOOPBACK(ill) || ill->ill_net_type == IRE_IF_NORESOLVER) {
14774 14775 nce_t *loop_nce = NULL;
14775 14776 uint16_t flags = (NCE_F_MYADDR | NCE_F_AUTHORITY | NCE_F_NONUD);
14776 14777
14777 14778 /*
14778 14779 * lo0:1 and subsequent ipifs were marked IRE_LOCAL in
14779 14780 * ipif_lookup_on_name(), but in the case of zones we can have
14780 14781 * several loopback addresses on lo0. So all the interfaces with
14781 14782 * loopback addresses need to be marked IRE_LOOPBACK.
14782 14783 */
14783 14784 if (V4_PART_OF_V6(ipif->ipif_v6lcl_addr) ==
14784 14785 htonl(INADDR_LOOPBACK))
14785 14786 ipif->ipif_ire_type = IRE_LOOPBACK;
14786 14787 else
14787 14788 ipif->ipif_ire_type = IRE_LOCAL;
14788 14789 if (ill->ill_net_type != IRE_LOOPBACK)
14789 14790 flags |= NCE_F_PUBLISH;
14790 14791
14791 14792 /* add unicast nce for the local addr */
14792 14793 err = nce_lookup_then_add_v4(ill, NULL,
14793 14794 ill->ill_phys_addr_length, &ipif->ipif_lcl_addr, flags,
14794 14795 ND_REACHABLE, &loop_nce);
14795 14796 /* A shared-IP zone sees EEXIST for lo0:N */
14796 14797 if (err == 0 || err == EEXIST) {
14797 14798 ipif->ipif_added_nce = 1;
14798 14799 loop_nce->nce_ipif_cnt++;
14799 14800 nce_refrele(loop_nce);
14800 14801 err = 0;
14801 14802 } else {
14802 14803 ASSERT(loop_nce == NULL);
14803 14804 return (err);
14804 14805 }
14805 14806 }
14806 14807
14807 14808 /* Create all the IREs associated with this interface */
14808 14809 err = ipif_add_ires_v4(ipif, loopback);
14809 14810 if (err != 0) {
14810 14811 /*
14811 14812 * see comments about return value from
14812 14813 * ip_addr_availability_check() in ipif_add_ires_v4().
14813 14814 */
14814 14815 if (err != EADDRINUSE) {
14815 14816 (void) ipif_arp_down(ipif);
14816 14817 } else {
14817 14818 /*
14818 14819 * Make IPMP aware of the deleted ipif so that
14819 14820 * the needed ipmp cleanup (e.g., of ipif_bound_ill)
14820 14821 * can be completed. Note that we do not want to
14821 14822 * destroy the nce that was created on the ipmp_ill
14822 14823 * for the active copy of the duplicate address in
14823 14824 * use.
14824 14825 */
14825 14826 if (IS_IPMP(ill))
14826 14827 ipmp_illgrp_del_ipif(ill->ill_grp, ipif);
14827 14828 err = EADDRNOTAVAIL;
14828 14829 }
14829 14830 return (err);
14830 14831 }
14831 14832
14832 14833 if (ill->ill_ipif_up_count == 1 && !loopback) {
14833 14834 /* Recover any additional IREs entries for this ill */
14834 14835 (void) ill_recover_saved_ire(ill);
14835 14836 }
14836 14837
14837 14838 if (ill->ill_need_recover_multicast) {
14838 14839 /*
14839 14840 * Need to recover all multicast memberships in the driver.
14840 14841 * This had to be deferred until we had attached. The same
14841 14842 * code exists in ipif_up_done_v6() to recover IPv6
14842 14843 * memberships.
14843 14844 *
14844 14845 * Note that it would be preferable to unconditionally do the
14845 14846 * ill_recover_multicast() in ill_dl_up(), but we cannot do
14846 14847 * that since ill_join_allmulti() depends on ill_dl_up being
14847 14848 * set, and it is not set until we receive a DL_BIND_ACK after
14848 14849 * having called ill_dl_up().
14849 14850 */
14850 14851 ill_recover_multicast(ill);
14851 14852 }
14852 14853
14853 14854 if (ill->ill_ipif_up_count == 1) {
14854 14855 /*
14855 14856 * Since the interface is now up, it may now be active.
14856 14857 */
14857 14858 if (IS_UNDER_IPMP(ill))
14858 14859 ipmp_ill_refresh_active(ill);
14859 14860
14860 14861 /*
14861 14862 * If this is an IPMP interface, we may now be able to
14862 14863 * establish ARP entries.
14863 14864 */
14864 14865 if (IS_IPMP(ill))
14865 14866 ipmp_illgrp_refresh_arpent(ill->ill_grp);
14866 14867 }
14867 14868
14868 14869 /* Join the allhosts multicast address */
14869 14870 ipif_multicast_up(ipif);
14870 14871
14871 14872 if (!loopback && !update_src_selection &&
14872 14873 !(ipif->ipif_flags & (IPIF_NOLOCAL|IPIF_ANYCAST|IPIF_DEPRECATED)))
14873 14874 ip_update_source_selection(ill->ill_ipst);
14874 14875
14875 14876 if (!loopback && ipif->ipif_addr_ready) {
14876 14877 /* Broadcast an address mask reply. */
14877 14878 ipif_mask_reply(ipif);
14878 14879 }
14879 14880 /* Perhaps ilgs should use this ill */
14880 14881 update_conn_ill(NULL, ill->ill_ipst);
14881 14882
14882 14883 /*
14883 14884 * This had to be deferred until we had bound. Tell routing sockets and
14884 14885 * others that this interface is up if it looks like the address has
14885 14886 * been validated. Otherwise, if it isn't ready yet, wait for
14886 14887 * duplicate address detection to do its thing.
14887 14888 */
14888 14889 if (ipif->ipif_addr_ready)
14889 14890 ipif_up_notify(ipif);
14890 14891 return (0);
14891 14892 }
14892 14893
14893 14894 /*
14894 14895 * Add the IREs associated with the ipif.
14895 14896 * Those MUST be explicitly removed in ipif_delete_ires_v4.
14896 14897 */
14897 14898 static int
14898 14899 ipif_add_ires_v4(ipif_t *ipif, boolean_t loopback)
14899 14900 {
14900 14901 ill_t *ill = ipif->ipif_ill;
14901 14902 ip_stack_t *ipst = ill->ill_ipst;
14902 14903 ire_t *ire_array[20];
14903 14904 ire_t **irep = ire_array;
14904 14905 ire_t **irep1;
14905 14906 ipaddr_t net_mask = 0;
14906 14907 ipaddr_t subnet_mask, route_mask;
14907 14908 int err;
14908 14909 ire_t *ire_local = NULL; /* LOCAL or LOOPBACK */
14909 14910 ire_t *ire_if = NULL;
14910 14911 uchar_t *gw;
14911 14912
14912 14913 if ((ipif->ipif_lcl_addr != INADDR_ANY) &&
14913 14914 !(ipif->ipif_flags & IPIF_NOLOCAL)) {
14914 14915 /*
14915 14916 * If we're on a labeled system then make sure that zone-
14916 14917 * private addresses have proper remote host database entries.
14917 14918 */
14918 14919 if (is_system_labeled() &&
14919 14920 ipif->ipif_ire_type != IRE_LOOPBACK &&
14920 14921 !tsol_check_interface_address(ipif))
14921 14922 return (EINVAL);
14922 14923
14923 14924 /* Register the source address for __sin6_src_id */
14924 14925 err = ip_srcid_insert(&ipif->ipif_v6lcl_addr,
14925 14926 ipif->ipif_zoneid, ipst);
14926 14927 if (err != 0) {
14927 14928 ip0dbg(("ipif_add_ires: srcid_insert %d\n", err));
14928 14929 return (err);
14929 14930 }
14930 14931
14931 14932 if (loopback)
14932 14933 gw = (uchar_t *)&ipif->ipif_lcl_addr;
14933 14934 else
14934 14935 gw = NULL;
14935 14936
14936 14937 /* If the interface address is set, create the local IRE. */
14937 14938 ire_local = ire_create(
14938 14939 (uchar_t *)&ipif->ipif_lcl_addr, /* dest address */
14939 14940 (uchar_t *)&ip_g_all_ones, /* mask */
14940 14941 gw, /* gateway */
14941 14942 ipif->ipif_ire_type, /* LOCAL or LOOPBACK */
14942 14943 ipif->ipif_ill,
14943 14944 ipif->ipif_zoneid,
14944 14945 ((ipif->ipif_flags & IPIF_PRIVATE) ?
14945 14946 RTF_PRIVATE : 0) | RTF_KERNEL,
14946 14947 NULL,
14947 14948 ipst);
14948 14949 ip1dbg(("ipif_add_ires: 0x%p creating IRE %p type 0x%x"
14949 14950 " for 0x%x\n", (void *)ipif, (void *)ire_local,
14950 14951 ipif->ipif_ire_type,
14951 14952 ntohl(ipif->ipif_lcl_addr)));
14952 14953 if (ire_local == NULL) {
14953 14954 ip1dbg(("ipif_up_done: NULL ire_local\n"));
14954 14955 err = ENOMEM;
14955 14956 goto bad;
14956 14957 }
14957 14958 } else {
14958 14959 ip1dbg((
14959 14960 "ipif_add_ires: not creating IRE %d for 0x%x: flags 0x%x\n",
14960 14961 ipif->ipif_ire_type,
14961 14962 ntohl(ipif->ipif_lcl_addr),
14962 14963 (uint_t)ipif->ipif_flags));
14963 14964 }
14964 14965 if ((ipif->ipif_lcl_addr != INADDR_ANY) &&
14965 14966 !(ipif->ipif_flags & IPIF_NOLOCAL)) {
14966 14967 net_mask = ip_net_mask(ipif->ipif_lcl_addr);
14967 14968 } else {
14968 14969 net_mask = htonl(IN_CLASSA_NET); /* fallback */
14969 14970 }
14970 14971
14971 14972 subnet_mask = ipif->ipif_net_mask;
14972 14973
14973 14974 /*
14974 14975 * If mask was not specified, use natural netmask of
14975 14976 * interface address. Also, store this mask back into the
14976 14977 * ipif struct.
14977 14978 */
14978 14979 if (subnet_mask == 0) {
14979 14980 subnet_mask = net_mask;
14980 14981 V4MASK_TO_V6(subnet_mask, ipif->ipif_v6net_mask);
14981 14982 V6_MASK_COPY(ipif->ipif_v6lcl_addr, ipif->ipif_v6net_mask,
14982 14983 ipif->ipif_v6subnet);
14983 14984 }
14984 14985
14985 14986 /* Set up the IRE_IF_RESOLVER or IRE_IF_NORESOLVER, as appropriate. */
14986 14987 if (!loopback && !(ipif->ipif_flags & IPIF_NOXMIT) &&
14987 14988 ipif->ipif_subnet != INADDR_ANY) {
14988 14989 /* ipif_subnet is ipif_pp_dst_addr for pt-pt */
14989 14990
14990 14991 if (ipif->ipif_flags & IPIF_POINTOPOINT) {
14991 14992 route_mask = IP_HOST_MASK;
14992 14993 } else {
14993 14994 route_mask = subnet_mask;
14994 14995 }
14995 14996
14996 14997 ip1dbg(("ipif_add_ires: ipif 0x%p ill 0x%p "
14997 14998 "creating if IRE ill_net_type 0x%x for 0x%x\n",
14998 14999 (void *)ipif, (void *)ill, ill->ill_net_type,
14999 15000 ntohl(ipif->ipif_subnet)));
15000 15001 ire_if = ire_create(
15001 15002 (uchar_t *)&ipif->ipif_subnet,
15002 15003 (uchar_t *)&route_mask,
15003 15004 (uchar_t *)&ipif->ipif_lcl_addr,
15004 15005 ill->ill_net_type,
15005 15006 ill,
15006 15007 ipif->ipif_zoneid,
15007 15008 ((ipif->ipif_flags & IPIF_PRIVATE) ?
15008 15009 RTF_PRIVATE: 0) | RTF_KERNEL,
15009 15010 NULL,
15010 15011 ipst);
15011 15012 if (ire_if == NULL) {
15012 15013 ip1dbg(("ipif_up_done: NULL ire_if\n"));
15013 15014 err = ENOMEM;
15014 15015 goto bad;
15015 15016 }
15016 15017 }
15017 15018
15018 15019 /*
15019 15020 * Create any necessary broadcast IREs.
15020 15021 */
15021 15022 if ((ipif->ipif_flags & IPIF_BROADCAST) &&
15022 15023 !(ipif->ipif_flags & IPIF_NOXMIT))
15023 15024 irep = ipif_create_bcast_ires(ipif, irep);
15024 15025
15025 15026 /* If an earlier ire_create failed, get out now */
15026 15027 for (irep1 = irep; irep1 > ire_array; ) {
15027 15028 irep1--;
15028 15029 if (*irep1 == NULL) {
15029 15030 ip1dbg(("ipif_up_done: NULL ire found in ire_array\n"));
15030 15031 err = ENOMEM;
15031 15032 goto bad;
15032 15033 }
15033 15034 }
15034 15035
15035 15036 /*
15036 15037 * Need to atomically check for IP address availability under
15037 15038 * ip_addr_avail_lock. ill_g_lock is held as reader to ensure no new
15038 15039 * ills or new ipifs can be added while we are checking availability.
15039 15040 */
15040 15041 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
15041 15042 mutex_enter(&ipst->ips_ip_addr_avail_lock);
15042 15043 /* Mark it up, and increment counters. */
15043 15044 ipif->ipif_flags |= IPIF_UP;
15044 15045 ill->ill_ipif_up_count++;
15045 15046 err = ip_addr_availability_check(ipif);
15046 15047 mutex_exit(&ipst->ips_ip_addr_avail_lock);
15047 15048 rw_exit(&ipst->ips_ill_g_lock);
15048 15049
15049 15050 if (err != 0) {
15050 15051 /*
15051 15052 * Our address may already be up on the same ill. In this case,
15052 15053 * the ARP entry for our ipif replaced the one for the other
15053 15054 * ipif. So we don't want to delete it (otherwise the other ipif
15054 15055 * would be unable to send packets).
15055 15056 * ip_addr_availability_check() identifies this case for us and
15056 15057 * returns EADDRINUSE; Caller should turn it into EADDRNOTAVAIL
15057 15058 * which is the expected error code.
15058 15059 */
15059 15060 ill->ill_ipif_up_count--;
15060 15061 ipif->ipif_flags &= ~IPIF_UP;
15061 15062 goto bad;
15062 15063 }
15063 15064
15064 15065 /*
15065 15066 * Add in all newly created IREs. ire_create_bcast() has
15066 15067 * already checked for duplicates of the IRE_BROADCAST type.
15067 15068 * We add the IRE_INTERFACE before the IRE_LOCAL to ensure
15068 15069 * that lookups find the IRE_LOCAL even if the IRE_INTERFACE is
15069 15070 * a /32 route.
15070 15071 */
15071 15072 if (ire_if != NULL) {
15072 15073 ire_if = ire_add(ire_if);
15073 15074 if (ire_if == NULL) {
15074 15075 err = ENOMEM;
15075 15076 goto bad2;
15076 15077 }
15077 15078 #ifdef DEBUG
15078 15079 ire_refhold_notr(ire_if);
15079 15080 ire_refrele(ire_if);
15080 15081 #endif
15081 15082 }
15082 15083 if (ire_local != NULL) {
15083 15084 ire_local = ire_add(ire_local);
15084 15085 if (ire_local == NULL) {
15085 15086 err = ENOMEM;
15086 15087 goto bad2;
15087 15088 }
15088 15089 #ifdef DEBUG
15089 15090 ire_refhold_notr(ire_local);
15090 15091 ire_refrele(ire_local);
15091 15092 #endif
15092 15093 }
15093 15094 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
15094 15095 if (ire_local != NULL)
15095 15096 ipif->ipif_ire_local = ire_local;
15096 15097 if (ire_if != NULL)
15097 15098 ipif->ipif_ire_if = ire_if;
15098 15099 rw_exit(&ipst->ips_ill_g_lock);
15099 15100 ire_local = NULL;
15100 15101 ire_if = NULL;
15101 15102
15102 15103 /*
15103 15104 * We first add all of them, and if that succeeds we refrele the
15104 15105 * bunch. That enables us to delete all of them should any of the
15105 15106 * ire_adds fail.
15106 15107 */
15107 15108 for (irep1 = irep; irep1 > ire_array; ) {
15108 15109 irep1--;
15109 15110 ASSERT(!MUTEX_HELD(&((*irep1)->ire_ill->ill_lock)));
15110 15111 *irep1 = ire_add(*irep1);
15111 15112 if (*irep1 == NULL) {
15112 15113 err = ENOMEM;
15113 15114 goto bad2;
15114 15115 }
15115 15116 }
15116 15117
15117 15118 for (irep1 = irep; irep1 > ire_array; ) {
15118 15119 irep1--;
15119 15120 /* refheld by ire_add. */
15120 15121 if (*irep1 != NULL) {
15121 15122 ire_refrele(*irep1);
15122 15123 *irep1 = NULL;
15123 15124 }
15124 15125 }
15125 15126
15126 15127 if (!loopback) {
15127 15128 /*
15128 15129 * If the broadcast address has been set, make sure it makes
15129 15130 * sense based on the interface address.
15130 15131 * Only match on ill since we are sharing broadcast addresses.
15131 15132 */
15132 15133 if ((ipif->ipif_brd_addr != INADDR_ANY) &&
15133 15134 (ipif->ipif_flags & IPIF_BROADCAST)) {
15134 15135 ire_t *ire;
15135 15136
15136 15137 ire = ire_ftable_lookup_v4(ipif->ipif_brd_addr, 0, 0,
15137 15138 IRE_BROADCAST, ipif->ipif_ill, ALL_ZONES, NULL,
15138 15139 (MATCH_IRE_TYPE | MATCH_IRE_ILL), 0, ipst, NULL);
15139 15140
15140 15141 if (ire == NULL) {
15141 15142 /*
15142 15143 * If there isn't a matching broadcast IRE,
15143 15144 * revert to the default for this netmask.
15144 15145 */
15145 15146 ipif->ipif_v6brd_addr = ipv6_all_zeros;
15146 15147 mutex_enter(&ipif->ipif_ill->ill_lock);
15147 15148 ipif_set_default(ipif);
15148 15149 mutex_exit(&ipif->ipif_ill->ill_lock);
15149 15150 } else {
15150 15151 ire_refrele(ire);
15151 15152 }
15152 15153 }
15153 15154
15154 15155 }
15155 15156 return (0);
15156 15157
15157 15158 bad2:
15158 15159 ill->ill_ipif_up_count--;
15159 15160 ipif->ipif_flags &= ~IPIF_UP;
15160 15161
15161 15162 bad:
15162 15163 ip1dbg(("ipif_add_ires: FAILED \n"));
15163 15164 if (ire_local != NULL)
15164 15165 ire_delete(ire_local);
15165 15166 if (ire_if != NULL)
15166 15167 ire_delete(ire_if);
15167 15168
15168 15169 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
15169 15170 ire_local = ipif->ipif_ire_local;
15170 15171 ipif->ipif_ire_local = NULL;
15171 15172 ire_if = ipif->ipif_ire_if;
15172 15173 ipif->ipif_ire_if = NULL;
15173 15174 rw_exit(&ipst->ips_ill_g_lock);
15174 15175 if (ire_local != NULL) {
15175 15176 ire_delete(ire_local);
15176 15177 ire_refrele_notr(ire_local);
15177 15178 }
15178 15179 if (ire_if != NULL) {
15179 15180 ire_delete(ire_if);
15180 15181 ire_refrele_notr(ire_if);
15181 15182 }
15182 15183
15183 15184 while (irep > ire_array) {
15184 15185 irep--;
15185 15186 if (*irep != NULL) {
15186 15187 ire_delete(*irep);
15187 15188 }
15188 15189 }
15189 15190 (void) ip_srcid_remove(&ipif->ipif_v6lcl_addr, ipif->ipif_zoneid, ipst);
15190 15191
15191 15192 return (err);
15192 15193 }
15193 15194
15194 15195 /* Remove all the IREs created by ipif_add_ires_v4 */
15195 15196 void
15196 15197 ipif_delete_ires_v4(ipif_t *ipif)
15197 15198 {
15198 15199 ill_t *ill = ipif->ipif_ill;
15199 15200 ip_stack_t *ipst = ill->ill_ipst;
15200 15201 ire_t *ire;
15201 15202
15202 15203 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
15203 15204 ire = ipif->ipif_ire_local;
15204 15205 ipif->ipif_ire_local = NULL;
15205 15206 rw_exit(&ipst->ips_ill_g_lock);
15206 15207 if (ire != NULL) {
15207 15208 /*
15208 15209 * Move count to ipif so we don't loose the count due to
15209 15210 * a down/up dance.
15210 15211 */
15211 15212 atomic_add_32(&ipif->ipif_ib_pkt_count, ire->ire_ib_pkt_count);
15212 15213
15213 15214 ire_delete(ire);
15214 15215 ire_refrele_notr(ire);
15215 15216 }
15216 15217 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
15217 15218 ire = ipif->ipif_ire_if;
15218 15219 ipif->ipif_ire_if = NULL;
15219 15220 rw_exit(&ipst->ips_ill_g_lock);
15220 15221 if (ire != NULL) {
15221 15222 ire_delete(ire);
15222 15223 ire_refrele_notr(ire);
15223 15224 }
15224 15225
15225 15226 /*
15226 15227 * Delete the broadcast IREs.
15227 15228 */
15228 15229 if ((ipif->ipif_flags & IPIF_BROADCAST) &&
15229 15230 !(ipif->ipif_flags & IPIF_NOXMIT))
15230 15231 ipif_delete_bcast_ires(ipif);
15231 15232 }
15232 15233
15233 15234 /*
15234 15235 * Checks for availbility of a usable source address (if there is one) when the
15235 15236 * destination ILL has the ill_usesrc_ifindex pointing to another ILL. Note
15236 15237 * this selection is done regardless of the destination.
15237 15238 */
15238 15239 boolean_t
15239 15240 ipif_zone_avail(uint_t ifindex, boolean_t isv6, zoneid_t zoneid,
15240 15241 ip_stack_t *ipst)
15241 15242 {
15242 15243 ipif_t *ipif = NULL;
15243 15244 ill_t *uill;
15244 15245
15245 15246 ASSERT(ifindex != 0);
15246 15247
15247 15248 uill = ill_lookup_on_ifindex(ifindex, isv6, ipst);
15248 15249 if (uill == NULL)
15249 15250 return (B_FALSE);
15250 15251
15251 15252 mutex_enter(&uill->ill_lock);
15252 15253 for (ipif = uill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
15253 15254 if (IPIF_IS_CONDEMNED(ipif))
15254 15255 continue;
15255 15256 if (ipif->ipif_flags & (IPIF_NOLOCAL|IPIF_ANYCAST))
15256 15257 continue;
15257 15258 if (!(ipif->ipif_flags & IPIF_UP))
15258 15259 continue;
15259 15260 if (ipif->ipif_zoneid != zoneid)
15260 15261 continue;
15261 15262 if (isv6 ? IN6_IS_ADDR_UNSPECIFIED(&ipif->ipif_v6lcl_addr) :
15262 15263 ipif->ipif_lcl_addr == INADDR_ANY)
15263 15264 continue;
15264 15265 mutex_exit(&uill->ill_lock);
15265 15266 ill_refrele(uill);
15266 15267 return (B_TRUE);
15267 15268 }
15268 15269 mutex_exit(&uill->ill_lock);
15269 15270 ill_refrele(uill);
15270 15271 return (B_FALSE);
15271 15272 }
15272 15273
15273 15274 /*
15274 15275 * Find an ipif with a good local address on the ill+zoneid.
15275 15276 */
15276 15277 ipif_t *
15277 15278 ipif_good_addr(ill_t *ill, zoneid_t zoneid)
15278 15279 {
15279 15280 ipif_t *ipif;
15280 15281
15281 15282 mutex_enter(&ill->ill_lock);
15282 15283 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
15283 15284 if (IPIF_IS_CONDEMNED(ipif))
15284 15285 continue;
15285 15286 if (ipif->ipif_flags & (IPIF_NOLOCAL|IPIF_ANYCAST))
15286 15287 continue;
15287 15288 if (!(ipif->ipif_flags & IPIF_UP))
15288 15289 continue;
15289 15290 if (ipif->ipif_zoneid != zoneid &&
15290 15291 ipif->ipif_zoneid != ALL_ZONES && zoneid != ALL_ZONES)
15291 15292 continue;
15292 15293 if (ill->ill_isv6 ?
15293 15294 IN6_IS_ADDR_UNSPECIFIED(&ipif->ipif_v6lcl_addr) :
15294 15295 ipif->ipif_lcl_addr == INADDR_ANY)
15295 15296 continue;
15296 15297 ipif_refhold_locked(ipif);
15297 15298 mutex_exit(&ill->ill_lock);
15298 15299 return (ipif);
15299 15300 }
15300 15301 mutex_exit(&ill->ill_lock);
15301 15302 return (NULL);
15302 15303 }
15303 15304
15304 15305 /*
15305 15306 * IP source address type, sorted from worst to best. For a given type,
15306 15307 * always prefer IP addresses on the same subnet. All-zones addresses are
15307 15308 * suboptimal because they pose problems with unlabeled destinations.
15308 15309 */
15309 15310 typedef enum {
15310 15311 IPIF_NONE,
15311 15312 IPIF_DIFFNET_DEPRECATED, /* deprecated and different subnet */
15312 15313 IPIF_SAMENET_DEPRECATED, /* deprecated and same subnet */
15313 15314 IPIF_DIFFNET_ALLZONES, /* allzones and different subnet */
15314 15315 IPIF_SAMENET_ALLZONES, /* allzones and same subnet */
15315 15316 IPIF_DIFFNET, /* normal and different subnet */
15316 15317 IPIF_SAMENET, /* normal and same subnet */
15317 15318 IPIF_LOCALADDR /* local loopback */
15318 15319 } ipif_type_t;
15319 15320
15320 15321 /*
15321 15322 * Pick the optimal ipif on `ill' for sending to destination `dst' from zone
15322 15323 * `zoneid'. We rate usable ipifs from low -> high as per the ipif_type_t
15323 15324 * enumeration, and return the highest-rated ipif. If there's a tie, we pick
15324 15325 * the first one, unless IPMP is used in which case we round-robin among them;
15325 15326 * see below for more.
15326 15327 *
15327 15328 * Returns NULL if there is no suitable source address for the ill.
15328 15329 * This only occurs when there is no valid source address for the ill.
15329 15330 */
15330 15331 ipif_t *
15331 15332 ipif_select_source_v4(ill_t *ill, ipaddr_t dst, zoneid_t zoneid,
15332 15333 boolean_t allow_usesrc, boolean_t *notreadyp)
15333 15334 {
15334 15335 ill_t *usill = NULL;
15335 15336 ill_t *ipmp_ill = NULL;
15336 15337 ipif_t *start_ipif, *next_ipif, *ipif, *best_ipif;
15337 15338 ipif_type_t type, best_type;
15338 15339 tsol_tpc_t *src_rhtp, *dst_rhtp;
15339 15340 ip_stack_t *ipst = ill->ill_ipst;
15340 15341 boolean_t samenet;
15341 15342
15342 15343 if (ill->ill_usesrc_ifindex != 0 && allow_usesrc) {
15343 15344 usill = ill_lookup_on_ifindex(ill->ill_usesrc_ifindex,
15344 15345 B_FALSE, ipst);
15345 15346 if (usill != NULL)
15346 15347 ill = usill; /* Select source from usesrc ILL */
15347 15348 else
15348 15349 return (NULL);
15349 15350 }
15350 15351
15351 15352 /*
15352 15353 * Test addresses should never be used for source address selection,
15353 15354 * so if we were passed one, switch to the IPMP meta-interface.
15354 15355 */
15355 15356 if (IS_UNDER_IPMP(ill)) {
15356 15357 if ((ipmp_ill = ipmp_ill_hold_ipmp_ill(ill)) != NULL)
15357 15358 ill = ipmp_ill; /* Select source from IPMP ill */
15358 15359 else
15359 15360 return (NULL);
15360 15361 }
15361 15362
15362 15363 /*
15363 15364 * If we're dealing with an unlabeled destination on a labeled system,
15364 15365 * make sure that we ignore source addresses that are incompatible with
15365 15366 * the destination's default label. That destination's default label
15366 15367 * must dominate the minimum label on the source address.
15367 15368 */
15368 15369 dst_rhtp = NULL;
15369 15370 if (is_system_labeled()) {
15370 15371 dst_rhtp = find_tpc(&dst, IPV4_VERSION, B_FALSE);
15371 15372 if (dst_rhtp == NULL)
15372 15373 return (NULL);
15373 15374 if (dst_rhtp->tpc_tp.host_type != UNLABELED) {
15374 15375 TPC_RELE(dst_rhtp);
15375 15376 dst_rhtp = NULL;
15376 15377 }
15377 15378 }
15378 15379
15379 15380 /*
15380 15381 * Hold the ill_g_lock as reader. This makes sure that no ipif/ill
15381 15382 * can be deleted. But an ipif/ill can get CONDEMNED any time.
15382 15383 * After selecting the right ipif, under ill_lock make sure ipif is
15383 15384 * not condemned, and increment refcnt. If ipif is CONDEMNED,
15384 15385 * we retry. Inside the loop we still need to check for CONDEMNED,
15385 15386 * but not under a lock.
15386 15387 */
15387 15388 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
15388 15389 retry:
15389 15390 /*
15390 15391 * For source address selection, we treat the ipif list as circular
15391 15392 * and continue until we get back to where we started. This allows
15392 15393 * IPMP to vary source address selection (which improves inbound load
15393 15394 * spreading) by caching its last ending point and starting from
15394 15395 * there. NOTE: we don't have to worry about ill_src_ipif changing
15395 15396 * ills since that can't happen on the IPMP ill.
15396 15397 */
15397 15398 start_ipif = ill->ill_ipif;
15398 15399 if (IS_IPMP(ill) && ill->ill_src_ipif != NULL)
15399 15400 start_ipif = ill->ill_src_ipif;
15400 15401
15401 15402 ipif = start_ipif;
15402 15403 best_ipif = NULL;
15403 15404 best_type = IPIF_NONE;
15404 15405 do {
15405 15406 if ((next_ipif = ipif->ipif_next) == NULL)
15406 15407 next_ipif = ill->ill_ipif;
15407 15408
15408 15409 if (IPIF_IS_CONDEMNED(ipif))
15409 15410 continue;
15410 15411 /* Always skip NOLOCAL and ANYCAST interfaces */
15411 15412 if (ipif->ipif_flags & (IPIF_NOLOCAL|IPIF_ANYCAST))
15412 15413 continue;
15413 15414 /* Always skip NOACCEPT interfaces */
15414 15415 if (ipif->ipif_ill->ill_flags & ILLF_NOACCEPT)
15415 15416 continue;
15416 15417 if (!(ipif->ipif_flags & IPIF_UP))
15417 15418 continue;
15418 15419
15419 15420 if (!ipif->ipif_addr_ready) {
15420 15421 if (notreadyp != NULL)
15421 15422 *notreadyp = B_TRUE;
15422 15423 continue;
15423 15424 }
15424 15425
15425 15426 if (zoneid != ALL_ZONES &&
15426 15427 ipif->ipif_zoneid != zoneid &&
15427 15428 ipif->ipif_zoneid != ALL_ZONES)
15428 15429 continue;
15429 15430
15430 15431 /*
15431 15432 * Interfaces with 0.0.0.0 address are allowed to be UP, but
15432 15433 * are not valid as source addresses.
15433 15434 */
15434 15435 if (ipif->ipif_lcl_addr == INADDR_ANY)
15435 15436 continue;
15436 15437
15437 15438 /*
15438 15439 * Check compatibility of local address for destination's
15439 15440 * default label if we're on a labeled system. Incompatible
15440 15441 * addresses can't be used at all.
15441 15442 */
15442 15443 if (dst_rhtp != NULL) {
15443 15444 boolean_t incompat;
15444 15445
15445 15446 src_rhtp = find_tpc(&ipif->ipif_lcl_addr,
15446 15447 IPV4_VERSION, B_FALSE);
15447 15448 if (src_rhtp == NULL)
15448 15449 continue;
15449 15450 incompat = src_rhtp->tpc_tp.host_type != SUN_CIPSO ||
15450 15451 src_rhtp->tpc_tp.tp_doi !=
15451 15452 dst_rhtp->tpc_tp.tp_doi ||
15452 15453 (!_blinrange(&dst_rhtp->tpc_tp.tp_def_label,
15453 15454 &src_rhtp->tpc_tp.tp_sl_range_cipso) &&
15454 15455 !blinlset(&dst_rhtp->tpc_tp.tp_def_label,
15455 15456 src_rhtp->tpc_tp.tp_sl_set_cipso));
15456 15457 TPC_RELE(src_rhtp);
15457 15458 if (incompat)
15458 15459 continue;
15459 15460 }
15460 15461
15461 15462 samenet = ((ipif->ipif_net_mask & dst) == ipif->ipif_subnet);
15462 15463
15463 15464 if (ipif->ipif_lcl_addr == dst) {
15464 15465 type = IPIF_LOCALADDR;
15465 15466 } else if (ipif->ipif_flags & IPIF_DEPRECATED) {
15466 15467 type = samenet ? IPIF_SAMENET_DEPRECATED :
15467 15468 IPIF_DIFFNET_DEPRECATED;
15468 15469 } else if (ipif->ipif_zoneid == ALL_ZONES) {
15469 15470 type = samenet ? IPIF_SAMENET_ALLZONES :
15470 15471 IPIF_DIFFNET_ALLZONES;
15471 15472 } else {
15472 15473 type = samenet ? IPIF_SAMENET : IPIF_DIFFNET;
15473 15474 }
15474 15475
15475 15476 if (type > best_type) {
15476 15477 best_type = type;
15477 15478 best_ipif = ipif;
15478 15479 if (best_type == IPIF_LOCALADDR)
15479 15480 break; /* can't get better */
15480 15481 }
15481 15482 } while ((ipif = next_ipif) != start_ipif);
15482 15483
15483 15484 if ((ipif = best_ipif) != NULL) {
15484 15485 mutex_enter(&ipif->ipif_ill->ill_lock);
15485 15486 if (IPIF_IS_CONDEMNED(ipif)) {
15486 15487 mutex_exit(&ipif->ipif_ill->ill_lock);
15487 15488 goto retry;
15488 15489 }
15489 15490 ipif_refhold_locked(ipif);
15490 15491
15491 15492 /*
15492 15493 * For IPMP, update the source ipif rotor to the next ipif,
15493 15494 * provided we can look it up. (We must not use it if it's
15494 15495 * IPIF_CONDEMNED since we may have grabbed ill_g_lock after
15495 15496 * ipif_free() checked ill_src_ipif.)
15496 15497 */
15497 15498 if (IS_IPMP(ill) && ipif != NULL) {
15498 15499 next_ipif = ipif->ipif_next;
15499 15500 if (next_ipif != NULL && !IPIF_IS_CONDEMNED(next_ipif))
15500 15501 ill->ill_src_ipif = next_ipif;
15501 15502 else
15502 15503 ill->ill_src_ipif = NULL;
15503 15504 }
15504 15505 mutex_exit(&ipif->ipif_ill->ill_lock);
15505 15506 }
15506 15507
15507 15508 rw_exit(&ipst->ips_ill_g_lock);
15508 15509 if (usill != NULL)
15509 15510 ill_refrele(usill);
15510 15511 if (ipmp_ill != NULL)
15511 15512 ill_refrele(ipmp_ill);
15512 15513 if (dst_rhtp != NULL)
15513 15514 TPC_RELE(dst_rhtp);
15514 15515
15515 15516 #ifdef DEBUG
15516 15517 if (ipif == NULL) {
15517 15518 char buf1[INET6_ADDRSTRLEN];
15518 15519
15519 15520 ip1dbg(("ipif_select_source_v4(%s, %s) -> NULL\n",
15520 15521 ill->ill_name,
15521 15522 inet_ntop(AF_INET, &dst, buf1, sizeof (buf1))));
15522 15523 } else {
15523 15524 char buf1[INET6_ADDRSTRLEN];
15524 15525 char buf2[INET6_ADDRSTRLEN];
15525 15526
15526 15527 ip1dbg(("ipif_select_source_v4(%s, %s) -> %s\n",
15527 15528 ipif->ipif_ill->ill_name,
15528 15529 inet_ntop(AF_INET, &dst, buf1, sizeof (buf1)),
15529 15530 inet_ntop(AF_INET, &ipif->ipif_lcl_addr,
15530 15531 buf2, sizeof (buf2))));
15531 15532 }
15532 15533 #endif /* DEBUG */
15533 15534 return (ipif);
15534 15535 }
15535 15536
15536 15537 /*
15537 15538 * Pick a source address based on the destination ill and an optional setsrc
15538 15539 * address.
15539 15540 * The result is stored in srcp. If generation is set, then put the source
15540 15541 * generation number there before we look for the source address (to avoid
15541 15542 * missing changes in the set of source addresses.
15542 15543 * If flagsp is set, then us it to pass back ipif_flags.
15543 15544 *
15544 15545 * If the caller wants to cache the returned source address and detect when
15545 15546 * that might be stale, the caller should pass in a generation argument,
15546 15547 * which the caller can later compare against ips_src_generation
15547 15548 *
15548 15549 * The precedence order for selecting an IPv4 source address is:
15549 15550 * - RTF_SETSRC on the offlink ire always wins.
15550 15551 * - If usrsrc is set, swap the ill to be the usesrc one.
15551 15552 * - If IPMP is used on the ill, select a random address from the most
15552 15553 * preferred ones below:
15553 15554 * 1. If onlink destination, same subnet and not deprecated, not ALL_ZONES
15554 15555 * 2. Not deprecated, not ALL_ZONES
15555 15556 * 3. If onlink destination, same subnet and not deprecated, ALL_ZONES
15556 15557 * 4. Not deprecated, ALL_ZONES
15557 15558 * 5. If onlink destination, same subnet and deprecated
15558 15559 * 6. Deprecated.
15559 15560 *
15560 15561 * We have lower preference for ALL_ZONES IP addresses,
15561 15562 * as they pose problems with unlabeled destinations.
15562 15563 *
15563 15564 * Note that when multiple IP addresses match e.g., #1 we pick
15564 15565 * the first one if IPMP is not in use. With IPMP we randomize.
15565 15566 */
15566 15567 int
15567 15568 ip_select_source_v4(ill_t *ill, ipaddr_t setsrc, ipaddr_t dst,
15568 15569 ipaddr_t multicast_ifaddr,
15569 15570 zoneid_t zoneid, ip_stack_t *ipst, ipaddr_t *srcp,
15570 15571 uint32_t *generation, uint64_t *flagsp)
15571 15572 {
15572 15573 ipif_t *ipif;
15573 15574 boolean_t notready = B_FALSE; /* Set if !ipif_addr_ready found */
15574 15575
15575 15576 if (flagsp != NULL)
15576 15577 *flagsp = 0;
15577 15578
15578 15579 /*
15579 15580 * Need to grab the generation number before we check to
15580 15581 * avoid a race with a change to the set of local addresses.
15581 15582 * No lock needed since the thread which updates the set of local
15582 15583 * addresses use ipif/ill locks and exit those (hence a store memory
15583 15584 * barrier) before doing the atomic increase of ips_src_generation.
15584 15585 */
15585 15586 if (generation != NULL) {
15586 15587 *generation = ipst->ips_src_generation;
15587 15588 }
15588 15589
15589 15590 if (CLASSD(dst) && multicast_ifaddr != INADDR_ANY) {
15590 15591 *srcp = multicast_ifaddr;
15591 15592 return (0);
15592 15593 }
15593 15594
15594 15595 /* Was RTF_SETSRC set on the first IRE in the recursive lookup? */
15595 15596 if (setsrc != INADDR_ANY) {
15596 15597 *srcp = setsrc;
15597 15598 return (0);
15598 15599 }
15599 15600 ipif = ipif_select_source_v4(ill, dst, zoneid, B_TRUE, ¬ready);
15600 15601 if (ipif == NULL) {
15601 15602 if (notready)
15602 15603 return (ENETDOWN);
15603 15604 else
15604 15605 return (EADDRNOTAVAIL);
15605 15606 }
15606 15607 *srcp = ipif->ipif_lcl_addr;
15607 15608 if (flagsp != NULL)
15608 15609 *flagsp = ipif->ipif_flags;
15609 15610 ipif_refrele(ipif);
15610 15611 return (0);
15611 15612 }
15612 15613
15613 15614 /* ARGSUSED */
15614 15615 int
15615 15616 if_unitsel_restart(ipif_t *ipif, sin_t *dummy_sin, queue_t *q, mblk_t *mp,
15616 15617 ip_ioctl_cmd_t *ipip, void *dummy_ifreq)
15617 15618 {
15618 15619 /*
15619 15620 * ill_phyint_reinit merged the v4 and v6 into a single
15620 15621 * ipsq. We might not have been able to complete the
15621 15622 * operation in ipif_set_values, if we could not become
15622 15623 * exclusive. If so restart it here.
15623 15624 */
15624 15625 return (ipif_set_values_tail(ipif->ipif_ill, ipif, mp, q));
15625 15626 }
15626 15627
15627 15628 /*
15628 15629 * Can operate on either a module or a driver queue.
15629 15630 * Returns an error if not a module queue.
15630 15631 */
15631 15632 /* ARGSUSED */
15632 15633 int
15633 15634 if_unitsel(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q, mblk_t *mp,
15634 15635 ip_ioctl_cmd_t *ipip, void *dummy_ifreq)
15635 15636 {
15636 15637 queue_t *q1 = q;
15637 15638 char *cp;
15638 15639 char interf_name[LIFNAMSIZ];
15639 15640 uint_t ppa = *(uint_t *)mp->b_cont->b_cont->b_rptr;
15640 15641
15641 15642 if (q->q_next == NULL) {
15642 15643 ip1dbg((
15643 15644 "if_unitsel: IF_UNITSEL: no q_next\n"));
15644 15645 return (EINVAL);
15645 15646 }
15646 15647
15647 15648 if (((ill_t *)(q->q_ptr))->ill_name[0] != '\0')
15648 15649 return (EALREADY);
15649 15650
15650 15651 do {
15651 15652 q1 = q1->q_next;
15652 15653 } while (q1->q_next);
15653 15654 cp = q1->q_qinfo->qi_minfo->mi_idname;
15654 15655 (void) sprintf(interf_name, "%s%d", cp, ppa);
15655 15656
15656 15657 /*
15657 15658 * Here we are not going to delay the ioack until after
15658 15659 * ACKs from DL_ATTACH_REQ/DL_BIND_REQ. So no need to save the
15659 15660 * original ioctl message before sending the requests.
15660 15661 */
15661 15662 return (ipif_set_values(q, mp, interf_name, &ppa));
15662 15663 }
15663 15664
15664 15665 /* ARGSUSED */
15665 15666 int
15666 15667 ip_sioctl_sifname(ipif_t *dummy_ipif, sin_t *dummy_sin, queue_t *q, mblk_t *mp,
15667 15668 ip_ioctl_cmd_t *ipip, void *dummy_ifreq)
15668 15669 {
15669 15670 return (ENXIO);
15670 15671 }
15671 15672
15672 15673 /*
15673 15674 * Create any IRE_BROADCAST entries for `ipif', and store those entries in
15674 15675 * `irep'. Returns a pointer to the next free `irep' entry
15675 15676 * A mirror exists in ipif_delete_bcast_ires().
15676 15677 *
15677 15678 * The management of any "extra" or seemingly duplicate IRE_BROADCASTs is
15678 15679 * done in ire_add.
15679 15680 */
15680 15681 static ire_t **
15681 15682 ipif_create_bcast_ires(ipif_t *ipif, ire_t **irep)
15682 15683 {
15683 15684 ipaddr_t addr;
15684 15685 ipaddr_t netmask = ip_net_mask(ipif->ipif_lcl_addr);
15685 15686 ipaddr_t subnetmask = ipif->ipif_net_mask;
15686 15687 ill_t *ill = ipif->ipif_ill;
15687 15688 zoneid_t zoneid = ipif->ipif_zoneid;
15688 15689
15689 15690 ip1dbg(("ipif_create_bcast_ires: creating broadcast IREs\n"));
15690 15691
15691 15692 ASSERT(ipif->ipif_flags & IPIF_BROADCAST);
15692 15693 ASSERT(!(ipif->ipif_flags & IPIF_NOXMIT));
15693 15694
15694 15695 if (ipif->ipif_lcl_addr == INADDR_ANY ||
15695 15696 (ipif->ipif_flags & IPIF_NOLOCAL))
15696 15697 netmask = htonl(IN_CLASSA_NET); /* fallback */
15697 15698
15698 15699 irep = ire_create_bcast(ill, 0, zoneid, irep);
15699 15700 irep = ire_create_bcast(ill, INADDR_BROADCAST, zoneid, irep);
15700 15701
15701 15702 /*
15702 15703 * For backward compatibility, we create net broadcast IREs based on
15703 15704 * the old "IP address class system", since some old machines only
15704 15705 * respond to these class derived net broadcast. However, we must not
15705 15706 * create these net broadcast IREs if the subnetmask is shorter than
15706 15707 * the IP address class based derived netmask. Otherwise, we may
15707 15708 * create a net broadcast address which is the same as an IP address
15708 15709 * on the subnet -- and then TCP will refuse to talk to that address.
15709 15710 */
15710 15711 if (netmask < subnetmask) {
15711 15712 addr = netmask & ipif->ipif_subnet;
15712 15713 irep = ire_create_bcast(ill, addr, zoneid, irep);
15713 15714 irep = ire_create_bcast(ill, ~netmask | addr, zoneid, irep);
15714 15715 }
15715 15716
15716 15717 /*
15717 15718 * Don't create IRE_BROADCAST IREs for the interface if the subnetmask
15718 15719 * is 0xFFFFFFFF, as an IRE_LOCAL for that interface is already
15719 15720 * created. Creating these broadcast IREs will only create confusion
15720 15721 * as `addr' will be the same as the IP address.
15721 15722 */
15722 15723 if (subnetmask != 0xFFFFFFFF) {
15723 15724 addr = ipif->ipif_subnet;
15724 15725 irep = ire_create_bcast(ill, addr, zoneid, irep);
15725 15726 irep = ire_create_bcast(ill, ~subnetmask | addr, zoneid, irep);
15726 15727 }
15727 15728
15728 15729 return (irep);
15729 15730 }
15730 15731
15731 15732 /*
15732 15733 * Mirror of ipif_create_bcast_ires()
15733 15734 */
15734 15735 static void
15735 15736 ipif_delete_bcast_ires(ipif_t *ipif)
15736 15737 {
15737 15738 ipaddr_t addr;
15738 15739 ipaddr_t netmask = ip_net_mask(ipif->ipif_lcl_addr);
15739 15740 ipaddr_t subnetmask = ipif->ipif_net_mask;
15740 15741 ill_t *ill = ipif->ipif_ill;
15741 15742 zoneid_t zoneid = ipif->ipif_zoneid;
15742 15743 ire_t *ire;
15743 15744
15744 15745 ASSERT(ipif->ipif_flags & IPIF_BROADCAST);
15745 15746 ASSERT(!(ipif->ipif_flags & IPIF_NOXMIT));
15746 15747
15747 15748 if (ipif->ipif_lcl_addr == INADDR_ANY ||
15748 15749 (ipif->ipif_flags & IPIF_NOLOCAL))
15749 15750 netmask = htonl(IN_CLASSA_NET); /* fallback */
15750 15751
15751 15752 ire = ire_lookup_bcast(ill, 0, zoneid);
15752 15753 ASSERT(ire != NULL);
15753 15754 ire_delete(ire); ire_refrele(ire);
15754 15755 ire = ire_lookup_bcast(ill, INADDR_BROADCAST, zoneid);
15755 15756 ASSERT(ire != NULL);
15756 15757 ire_delete(ire); ire_refrele(ire);
15757 15758
15758 15759 /*
15759 15760 * For backward compatibility, we create net broadcast IREs based on
15760 15761 * the old "IP address class system", since some old machines only
15761 15762 * respond to these class derived net broadcast. However, we must not
15762 15763 * create these net broadcast IREs if the subnetmask is shorter than
15763 15764 * the IP address class based derived netmask. Otherwise, we may
15764 15765 * create a net broadcast address which is the same as an IP address
15765 15766 * on the subnet -- and then TCP will refuse to talk to that address.
15766 15767 */
15767 15768 if (netmask < subnetmask) {
15768 15769 addr = netmask & ipif->ipif_subnet;
15769 15770 ire = ire_lookup_bcast(ill, addr, zoneid);
15770 15771 ASSERT(ire != NULL);
15771 15772 ire_delete(ire); ire_refrele(ire);
15772 15773 ire = ire_lookup_bcast(ill, ~netmask | addr, zoneid);
15773 15774 ASSERT(ire != NULL);
15774 15775 ire_delete(ire); ire_refrele(ire);
15775 15776 }
15776 15777
15777 15778 /*
15778 15779 * Don't create IRE_BROADCAST IREs for the interface if the subnetmask
15779 15780 * is 0xFFFFFFFF, as an IRE_LOCAL for that interface is already
15780 15781 * created. Creating these broadcast IREs will only create confusion
15781 15782 * as `addr' will be the same as the IP address.
15782 15783 */
15783 15784 if (subnetmask != 0xFFFFFFFF) {
15784 15785 addr = ipif->ipif_subnet;
15785 15786 ire = ire_lookup_bcast(ill, addr, zoneid);
15786 15787 ASSERT(ire != NULL);
15787 15788 ire_delete(ire); ire_refrele(ire);
15788 15789 ire = ire_lookup_bcast(ill, ~subnetmask | addr, zoneid);
15789 15790 ASSERT(ire != NULL);
15790 15791 ire_delete(ire); ire_refrele(ire);
15791 15792 }
15792 15793 }
15793 15794
15794 15795 /*
15795 15796 * Extract both the flags (including IFF_CANTCHANGE) such as IFF_IPV*
15796 15797 * from lifr_flags and the name from lifr_name.
15797 15798 * Set IFF_IPV* and ill_isv6 prior to doing the lookup
15798 15799 * since ipif_lookup_on_name uses the _isv6 flags when matching.
15799 15800 * Returns EINPROGRESS when mp has been consumed by queueing it on
15800 15801 * ipx_pending_mp and the ioctl will complete in ip_rput.
15801 15802 *
15802 15803 * Can operate on either a module or a driver queue.
15803 15804 * Returns an error if not a module queue.
15804 15805 */
15805 15806 /* ARGSUSED */
15806 15807 int
15807 15808 ip_sioctl_slifname(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
15808 15809 ip_ioctl_cmd_t *ipip, void *if_req)
15809 15810 {
15810 15811 ill_t *ill = q->q_ptr;
15811 15812 phyint_t *phyi;
15812 15813 ip_stack_t *ipst;
15813 15814 struct lifreq *lifr = if_req;
15814 15815 uint64_t new_flags;
15815 15816
15816 15817 ASSERT(ipif != NULL);
15817 15818 ip1dbg(("ip_sioctl_slifname %s\n", lifr->lifr_name));
15818 15819
15819 15820 if (q->q_next == NULL) {
15820 15821 ip1dbg(("if_sioctl_slifname: SIOCSLIFNAME: no q_next\n"));
15821 15822 return (EINVAL);
15822 15823 }
15823 15824
15824 15825 /*
15825 15826 * If we are not writer on 'q' then this interface exists already
15826 15827 * and previous lookups (ip_extract_lifreq()) found this ipif --
15827 15828 * so return EALREADY.
15828 15829 */
15829 15830 if (ill != ipif->ipif_ill)
15830 15831 return (EALREADY);
15831 15832
15832 15833 if (ill->ill_name[0] != '\0')
15833 15834 return (EALREADY);
15834 15835
15835 15836 /*
15836 15837 * If there's another ill already with the requested name, ensure
15837 15838 * that it's of the same type. Otherwise, ill_phyint_reinit() will
15838 15839 * fuse together two unrelated ills, which will cause chaos.
15839 15840 */
15840 15841 ipst = ill->ill_ipst;
15841 15842 phyi = avl_find(&ipst->ips_phyint_g_list->phyint_list_avl_by_name,
15842 15843 lifr->lifr_name, NULL);
15843 15844 if (phyi != NULL) {
15844 15845 ill_t *ill_mate = phyi->phyint_illv4;
15845 15846
15846 15847 if (ill_mate == NULL)
15847 15848 ill_mate = phyi->phyint_illv6;
15848 15849 ASSERT(ill_mate != NULL);
15849 15850
15850 15851 if (ill_mate->ill_media->ip_m_mac_type !=
15851 15852 ill->ill_media->ip_m_mac_type) {
15852 15853 ip1dbg(("if_sioctl_slifname: SIOCSLIFNAME: attempt to "
15853 15854 "use the same ill name on differing media\n"));
15854 15855 return (EINVAL);
15855 15856 }
15856 15857 }
15857 15858
15858 15859 /*
15859 15860 * We start off as IFF_IPV4 in ipif_allocate and become
15860 15861 * IFF_IPV4 or IFF_IPV6 here depending on lifr_flags value.
15861 15862 * The only flags that we read from user space are IFF_IPV4,
15862 15863 * IFF_IPV6, and IFF_BROADCAST.
15863 15864 *
15864 15865 * This ill has not been inserted into the global list.
15865 15866 * So we are still single threaded and don't need any lock
15866 15867 *
15867 15868 * Saniy check the flags.
15868 15869 */
15869 15870
15870 15871 if ((lifr->lifr_flags & IFF_BROADCAST) &&
15871 15872 ((lifr->lifr_flags & IFF_IPV6) ||
15872 15873 (!ill->ill_needs_attach && ill->ill_bcast_addr_length == 0))) {
15873 15874 ip1dbg(("ip_sioctl_slifname: link not broadcast capable "
15874 15875 "or IPv6 i.e., no broadcast \n"));
15875 15876 return (EINVAL);
15876 15877 }
15877 15878
15878 15879 new_flags =
15879 15880 lifr->lifr_flags & (IFF_IPV6|IFF_IPV4|IFF_BROADCAST);
15880 15881
15881 15882 if ((new_flags ^ (IFF_IPV6|IFF_IPV4)) == 0) {
15882 15883 ip1dbg(("ip_sioctl_slifname: flags must be exactly one of "
15883 15884 "IFF_IPV4 or IFF_IPV6\n"));
15884 15885 return (EINVAL);
15885 15886 }
15886 15887
15887 15888 /*
15888 15889 * We always start off as IPv4, so only need to check for IPv6.
15889 15890 */
15890 15891 if ((new_flags & IFF_IPV6) != 0) {
15891 15892 ill->ill_flags |= ILLF_IPV6;
15892 15893 ill->ill_flags &= ~ILLF_IPV4;
15893 15894
15894 15895 if (lifr->lifr_flags & IFF_NOLINKLOCAL)
15895 15896 ill->ill_flags |= ILLF_NOLINKLOCAL;
15896 15897 }
15897 15898
15898 15899 if ((new_flags & IFF_BROADCAST) != 0)
15899 15900 ipif->ipif_flags |= IPIF_BROADCAST;
15900 15901 else
15901 15902 ipif->ipif_flags &= ~IPIF_BROADCAST;
15902 15903
15903 15904 /* We started off as V4. */
15904 15905 if (ill->ill_flags & ILLF_IPV6) {
15905 15906 ill->ill_phyint->phyint_illv6 = ill;
15906 15907 ill->ill_phyint->phyint_illv4 = NULL;
15907 15908 }
15908 15909
15909 15910 return (ipif_set_values(q, mp, lifr->lifr_name, &lifr->lifr_ppa));
15910 15911 }
15911 15912
15912 15913 /* ARGSUSED */
15913 15914 int
15914 15915 ip_sioctl_slifname_restart(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
15915 15916 ip_ioctl_cmd_t *ipip, void *if_req)
15916 15917 {
15917 15918 /*
15918 15919 * ill_phyint_reinit merged the v4 and v6 into a single
15919 15920 * ipsq. We might not have been able to complete the
15920 15921 * slifname in ipif_set_values, if we could not become
15921 15922 * exclusive. If so restart it here
15922 15923 */
15923 15924 return (ipif_set_values_tail(ipif->ipif_ill, ipif, mp, q));
15924 15925 }
15925 15926
15926 15927 /*
15927 15928 * Return a pointer to the ipif which matches the index, IP version type and
15928 15929 * zoneid.
15929 15930 */
15930 15931 ipif_t *
15931 15932 ipif_lookup_on_ifindex(uint_t index, boolean_t isv6, zoneid_t zoneid,
15932 15933 ip_stack_t *ipst)
15933 15934 {
15934 15935 ill_t *ill;
15935 15936 ipif_t *ipif = NULL;
15936 15937
15937 15938 ill = ill_lookup_on_ifindex(index, isv6, ipst);
15938 15939 if (ill != NULL) {
15939 15940 mutex_enter(&ill->ill_lock);
15940 15941 for (ipif = ill->ill_ipif; ipif != NULL;
15941 15942 ipif = ipif->ipif_next) {
15942 15943 if (!IPIF_IS_CONDEMNED(ipif) && (zoneid == ALL_ZONES ||
15943 15944 zoneid == ipif->ipif_zoneid ||
15944 15945 ipif->ipif_zoneid == ALL_ZONES)) {
15945 15946 ipif_refhold_locked(ipif);
15946 15947 break;
15947 15948 }
15948 15949 }
15949 15950 mutex_exit(&ill->ill_lock);
15950 15951 ill_refrele(ill);
15951 15952 }
15952 15953 return (ipif);
15953 15954 }
15954 15955
15955 15956 /*
15956 15957 * Change an existing physical interface's index. If the new index
15957 15958 * is acceptable we update the index and the phyint_list_avl_by_index tree.
15958 15959 * Finally, we update other systems which may have a dependence on the
15959 15960 * index value.
15960 15961 */
15961 15962 /* ARGSUSED */
15962 15963 int
15963 15964 ip_sioctl_slifindex(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
15964 15965 ip_ioctl_cmd_t *ipip, void *ifreq)
15965 15966 {
15966 15967 ill_t *ill;
15967 15968 phyint_t *phyi;
15968 15969 struct ifreq *ifr = (struct ifreq *)ifreq;
15969 15970 struct lifreq *lifr = (struct lifreq *)ifreq;
15970 15971 uint_t old_index, index;
15971 15972 ip_stack_t *ipst = ipif->ipif_ill->ill_ipst;
15972 15973 avl_index_t where;
15973 15974
15974 15975 if (ipip->ipi_cmd_type == IF_CMD)
15975 15976 index = ifr->ifr_index;
15976 15977 else
15977 15978 index = lifr->lifr_index;
15978 15979
15979 15980 /*
15980 15981 * Only allow on physical interface. Also, index zero is illegal.
15981 15982 */
15982 15983 ill = ipif->ipif_ill;
15983 15984 phyi = ill->ill_phyint;
15984 15985 if (ipif->ipif_id != 0 || index == 0 || index > IF_INDEX_MAX) {
15985 15986 return (EINVAL);
15986 15987 }
15987 15988
15988 15989 /* If the index is not changing, no work to do */
15989 15990 if (phyi->phyint_ifindex == index)
15990 15991 return (0);
15991 15992
15992 15993 /*
15993 15994 * Use phyint_exists() to determine if the new interface index
15994 15995 * is already in use. If the index is unused then we need to
15995 15996 * change the phyint's position in the phyint_list_avl_by_index
15996 15997 * tree. If we do not do this, subsequent lookups (using the new
15997 15998 * index value) will not find the phyint.
15998 15999 */
15999 16000 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
16000 16001 if (phyint_exists(index, ipst)) {
16001 16002 rw_exit(&ipst->ips_ill_g_lock);
16002 16003 return (EEXIST);
16003 16004 }
16004 16005
16005 16006 /*
16006 16007 * The new index is unused. Set it in the phyint. However we must not
16007 16008 * forget to trigger NE_IFINDEX_CHANGE event before the ifindex
16008 16009 * changes. The event must be bound to old ifindex value.
16009 16010 */
16010 16011 ill_nic_event_dispatch(ill, 0, NE_IFINDEX_CHANGE,
16011 16012 &index, sizeof (index));
16012 16013
16013 16014 old_index = phyi->phyint_ifindex;
16014 16015 phyi->phyint_ifindex = index;
16015 16016
16016 16017 avl_remove(&ipst->ips_phyint_g_list->phyint_list_avl_by_index, phyi);
16017 16018 (void) avl_find(&ipst->ips_phyint_g_list->phyint_list_avl_by_index,
16018 16019 &index, &where);
16019 16020 avl_insert(&ipst->ips_phyint_g_list->phyint_list_avl_by_index,
16020 16021 phyi, where);
16021 16022 rw_exit(&ipst->ips_ill_g_lock);
16022 16023
16023 16024 /* Update SCTP's ILL list */
16024 16025 sctp_ill_reindex(ill, old_index);
16025 16026
16026 16027 /* Send the routing sockets message */
16027 16028 ip_rts_ifmsg(ipif, RTSQ_DEFAULT);
16028 16029 if (ILL_OTHER(ill))
16029 16030 ip_rts_ifmsg(ILL_OTHER(ill)->ill_ipif, RTSQ_DEFAULT);
16030 16031
16031 16032 /* Perhaps ilgs should use this ill */
16032 16033 update_conn_ill(NULL, ill->ill_ipst);
16033 16034 return (0);
16034 16035 }
16035 16036
16036 16037 /* ARGSUSED */
16037 16038 int
16038 16039 ip_sioctl_get_lifindex(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
16039 16040 ip_ioctl_cmd_t *ipip, void *ifreq)
16040 16041 {
16041 16042 struct ifreq *ifr = (struct ifreq *)ifreq;
16042 16043 struct lifreq *lifr = (struct lifreq *)ifreq;
16043 16044
16044 16045 ip1dbg(("ip_sioctl_get_lifindex(%s:%u %p)\n",
16045 16046 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
16046 16047 /* Get the interface index */
16047 16048 if (ipip->ipi_cmd_type == IF_CMD) {
16048 16049 ifr->ifr_index = ipif->ipif_ill->ill_phyint->phyint_ifindex;
16049 16050 } else {
16050 16051 lifr->lifr_index = ipif->ipif_ill->ill_phyint->phyint_ifindex;
16051 16052 }
16052 16053 return (0);
16053 16054 }
16054 16055
16055 16056 /* ARGSUSED */
16056 16057 int
16057 16058 ip_sioctl_get_lifzone(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
16058 16059 ip_ioctl_cmd_t *ipip, void *ifreq)
16059 16060 {
16060 16061 struct lifreq *lifr = (struct lifreq *)ifreq;
16061 16062
16062 16063 ip1dbg(("ip_sioctl_get_lifzone(%s:%u %p)\n",
16063 16064 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
16064 16065 /* Get the interface zone */
16065 16066 ASSERT(ipip->ipi_cmd_type == LIF_CMD);
16066 16067 lifr->lifr_zoneid = ipif->ipif_zoneid;
16067 16068 return (0);
16068 16069 }
16069 16070
16070 16071 /*
16071 16072 * Set the zoneid of an interface.
16072 16073 */
16073 16074 /* ARGSUSED */
16074 16075 int
16075 16076 ip_sioctl_slifzone(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
16076 16077 ip_ioctl_cmd_t *ipip, void *ifreq)
16077 16078 {
16078 16079 struct lifreq *lifr = (struct lifreq *)ifreq;
16079 16080 int err = 0;
16080 16081 boolean_t need_up = B_FALSE;
16081 16082 zone_t *zptr;
16082 16083 zone_status_t status;
16083 16084 zoneid_t zoneid;
16084 16085
16085 16086 ASSERT(ipip->ipi_cmd_type == LIF_CMD);
16086 16087 if ((zoneid = lifr->lifr_zoneid) == ALL_ZONES) {
16087 16088 if (!is_system_labeled())
16088 16089 return (ENOTSUP);
16089 16090 zoneid = GLOBAL_ZONEID;
16090 16091 }
16091 16092
16092 16093 /* cannot assign instance zero to a non-global zone */
16093 16094 if (ipif->ipif_id == 0 && zoneid != GLOBAL_ZONEID)
16094 16095 return (ENOTSUP);
16095 16096
16096 16097 /*
16097 16098 * Cannot assign to a zone that doesn't exist or is shutting down. In
16098 16099 * the event of a race with the zone shutdown processing, since IP
16099 16100 * serializes this ioctl and SIOCGLIFCONF/SIOCLIFREMOVEIF, we know the
16100 16101 * interface will be cleaned up even if the zone is shut down
16101 16102 * immediately after the status check. If the interface can't be brought
16102 16103 * down right away, and the zone is shut down before the restart
16103 16104 * function is called, we resolve the possible races by rechecking the
16104 16105 * zone status in the restart function.
16105 16106 */
16106 16107 if ((zptr = zone_find_by_id(zoneid)) == NULL)
16107 16108 return (EINVAL);
16108 16109 status = zone_status_get(zptr);
16109 16110 zone_rele(zptr);
16110 16111
16111 16112 if (status != ZONE_IS_READY && status != ZONE_IS_RUNNING)
16112 16113 return (EINVAL);
16113 16114
16114 16115 if (ipif->ipif_flags & IPIF_UP) {
16115 16116 /*
16116 16117 * If the interface is already marked up,
16117 16118 * we call ipif_down which will take care
16118 16119 * of ditching any IREs that have been set
16119 16120 * up based on the old interface address.
16120 16121 */
16121 16122 err = ipif_logical_down(ipif, q, mp);
16122 16123 if (err == EINPROGRESS)
16123 16124 return (err);
16124 16125 (void) ipif_down_tail(ipif);
16125 16126 need_up = B_TRUE;
16126 16127 }
16127 16128
16128 16129 err = ip_sioctl_slifzone_tail(ipif, lifr->lifr_zoneid, q, mp, need_up);
16129 16130 return (err);
16130 16131 }
16131 16132
16132 16133 static int
16133 16134 ip_sioctl_slifzone_tail(ipif_t *ipif, zoneid_t zoneid,
16134 16135 queue_t *q, mblk_t *mp, boolean_t need_up)
16135 16136 {
16136 16137 int err = 0;
16137 16138 ip_stack_t *ipst;
16138 16139
16139 16140 ip1dbg(("ip_sioctl_zoneid_tail(%s:%u %p)\n",
16140 16141 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
16141 16142
16142 16143 if (CONN_Q(q))
16143 16144 ipst = CONNQ_TO_IPST(q);
16144 16145 else
16145 16146 ipst = ILLQ_TO_IPST(q);
16146 16147
16147 16148 /*
16148 16149 * For exclusive stacks we don't allow a different zoneid than
16149 16150 * global.
16150 16151 */
16151 16152 if (ipst->ips_netstack->netstack_stackid != GLOBAL_NETSTACKID &&
16152 16153 zoneid != GLOBAL_ZONEID)
16153 16154 return (EINVAL);
16154 16155
16155 16156 /* Set the new zone id. */
16156 16157 ipif->ipif_zoneid = zoneid;
16157 16158
16158 16159 /* Update sctp list */
16159 16160 sctp_update_ipif(ipif, SCTP_IPIF_UPDATE);
16160 16161
16161 16162 /* The default multicast interface might have changed */
16162 16163 ire_increment_multicast_generation(ipst, ipif->ipif_ill->ill_isv6);
16163 16164
16164 16165 if (need_up) {
16165 16166 /*
16166 16167 * Now bring the interface back up. If this
16167 16168 * is the only IPIF for the ILL, ipif_up
16168 16169 * will have to re-bind to the device, so
16169 16170 * we may get back EINPROGRESS, in which
16170 16171 * case, this IOCTL will get completed in
16171 16172 * ip_rput_dlpi when we see the DL_BIND_ACK.
16172 16173 */
16173 16174 err = ipif_up(ipif, q, mp);
16174 16175 }
16175 16176 return (err);
16176 16177 }
16177 16178
16178 16179 /* ARGSUSED */
16179 16180 int
16180 16181 ip_sioctl_slifzone_restart(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
16181 16182 ip_ioctl_cmd_t *ipip, void *if_req)
16182 16183 {
16183 16184 struct lifreq *lifr = (struct lifreq *)if_req;
16184 16185 zoneid_t zoneid;
16185 16186 zone_t *zptr;
16186 16187 zone_status_t status;
16187 16188
16188 16189 ASSERT(ipip->ipi_cmd_type == LIF_CMD);
16189 16190 if ((zoneid = lifr->lifr_zoneid) == ALL_ZONES)
16190 16191 zoneid = GLOBAL_ZONEID;
16191 16192
16192 16193 ip1dbg(("ip_sioctl_slifzone_restart(%s:%u %p)\n",
16193 16194 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
16194 16195
16195 16196 /*
16196 16197 * We recheck the zone status to resolve the following race condition:
16197 16198 * 1) process sends SIOCSLIFZONE to put hme0:1 in zone "myzone";
16198 16199 * 2) hme0:1 is up and can't be brought down right away;
16199 16200 * ip_sioctl_slifzone() returns EINPROGRESS and the request is queued;
16200 16201 * 3) zone "myzone" is halted; the zone status switches to
16201 16202 * 'shutting_down' and the zones framework sends SIOCGLIFCONF to list
16202 16203 * the interfaces to remove - hme0:1 is not returned because it's not
16203 16204 * yet in "myzone", so it won't be removed;
16204 16205 * 4) the restart function for SIOCSLIFZONE is called; without the
16205 16206 * status check here, we would have hme0:1 in "myzone" after it's been
16206 16207 * destroyed.
16207 16208 * Note that if the status check fails, we need to bring the interface
16208 16209 * back to its state prior to ip_sioctl_slifzone(), hence the call to
16209 16210 * ipif_up_done[_v6]().
16210 16211 */
16211 16212 status = ZONE_IS_UNINITIALIZED;
16212 16213 if ((zptr = zone_find_by_id(zoneid)) != NULL) {
16213 16214 status = zone_status_get(zptr);
16214 16215 zone_rele(zptr);
16215 16216 }
16216 16217 if (status != ZONE_IS_READY && status != ZONE_IS_RUNNING) {
16217 16218 if (ipif->ipif_isv6) {
16218 16219 (void) ipif_up_done_v6(ipif);
16219 16220 } else {
16220 16221 (void) ipif_up_done(ipif);
16221 16222 }
16222 16223 return (EINVAL);
16223 16224 }
16224 16225
16225 16226 (void) ipif_down_tail(ipif);
16226 16227
16227 16228 return (ip_sioctl_slifzone_tail(ipif, lifr->lifr_zoneid, q, mp,
16228 16229 B_TRUE));
16229 16230 }
16230 16231
16231 16232 /*
16232 16233 * Return the number of addresses on `ill' with one or more of the values
16233 16234 * in `set' set and all of the values in `clear' clear.
16234 16235 */
16235 16236 static uint_t
16236 16237 ill_flagaddr_cnt(const ill_t *ill, uint64_t set, uint64_t clear)
16237 16238 {
16238 16239 ipif_t *ipif;
16239 16240 uint_t cnt = 0;
16240 16241
16241 16242 ASSERT(IAM_WRITER_ILL(ill));
16242 16243
16243 16244 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next)
16244 16245 if ((ipif->ipif_flags & set) && !(ipif->ipif_flags & clear))
16245 16246 cnt++;
16246 16247
16247 16248 return (cnt);
16248 16249 }
16249 16250
16250 16251 /*
16251 16252 * Return the number of migratable addresses on `ill' that are under
16252 16253 * application control.
16253 16254 */
16254 16255 uint_t
16255 16256 ill_appaddr_cnt(const ill_t *ill)
16256 16257 {
16257 16258 return (ill_flagaddr_cnt(ill, IPIF_DHCPRUNNING | IPIF_ADDRCONF,
16258 16259 IPIF_NOFAILOVER));
16259 16260 }
16260 16261
16261 16262 /*
16262 16263 * Return the number of point-to-point addresses on `ill'.
16263 16264 */
16264 16265 uint_t
16265 16266 ill_ptpaddr_cnt(const ill_t *ill)
16266 16267 {
16267 16268 return (ill_flagaddr_cnt(ill, IPIF_POINTOPOINT, 0));
16268 16269 }
16269 16270
16270 16271 /* ARGSUSED */
16271 16272 int
16272 16273 ip_sioctl_get_lifusesrc(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
16273 16274 ip_ioctl_cmd_t *ipip, void *ifreq)
16274 16275 {
16275 16276 struct lifreq *lifr = ifreq;
16276 16277
16277 16278 ASSERT(q->q_next == NULL);
16278 16279 ASSERT(CONN_Q(q));
16279 16280
16280 16281 ip1dbg(("ip_sioctl_get_lifusesrc(%s:%u %p)\n",
16281 16282 ipif->ipif_ill->ill_name, ipif->ipif_id, (void *)ipif));
16282 16283 lifr->lifr_index = ipif->ipif_ill->ill_usesrc_ifindex;
16283 16284 ip1dbg(("ip_sioctl_get_lifusesrc:lifr_index = %d\n", lifr->lifr_index));
16284 16285
16285 16286 return (0);
16286 16287 }
16287 16288
16288 16289 /* Find the previous ILL in this usesrc group */
16289 16290 static ill_t *
16290 16291 ill_prev_usesrc(ill_t *uill)
16291 16292 {
16292 16293 ill_t *ill;
16293 16294
16294 16295 for (ill = uill->ill_usesrc_grp_next;
16295 16296 ASSERT(ill), ill->ill_usesrc_grp_next != uill;
16296 16297 ill = ill->ill_usesrc_grp_next)
16297 16298 /* do nothing */;
16298 16299 return (ill);
16299 16300 }
16300 16301
16301 16302 /*
16302 16303 * Release all members of the usesrc group. This routine is called
16303 16304 * from ill_delete when the interface being unplumbed is the
16304 16305 * group head.
16305 16306 *
16306 16307 * This silently clears the usesrc that ifconfig setup.
16307 16308 * An alternative would be to keep that ifindex, and drop packets on the floor
16308 16309 * since no source address can be selected.
16309 16310 * Even if we keep the current semantics, don't need a lock and a linked list.
16310 16311 * Can walk all the ills checking if they have a ill_usesrc_ifindex matching
16311 16312 * the one that is being removed. Issue is how we return the usesrc users
16312 16313 * (SIOCGLIFSRCOF). We want to be able to find the ills which have an
16313 16314 * ill_usesrc_ifindex matching a target ill. We could also do that with an
16314 16315 * ill walk, but the walker would need to insert in the ioctl response.
16315 16316 */
16316 16317 static void
16317 16318 ill_disband_usesrc_group(ill_t *uill)
16318 16319 {
16319 16320 ill_t *next_ill, *tmp_ill;
16320 16321 ip_stack_t *ipst = uill->ill_ipst;
16321 16322
16322 16323 ASSERT(RW_WRITE_HELD(&ipst->ips_ill_g_usesrc_lock));
16323 16324 next_ill = uill->ill_usesrc_grp_next;
16324 16325
16325 16326 do {
16326 16327 ASSERT(next_ill != NULL);
16327 16328 tmp_ill = next_ill->ill_usesrc_grp_next;
16328 16329 ASSERT(tmp_ill != NULL);
16329 16330 next_ill->ill_usesrc_grp_next = NULL;
16330 16331 next_ill->ill_usesrc_ifindex = 0;
16331 16332 next_ill = tmp_ill;
16332 16333 } while (next_ill->ill_usesrc_ifindex != 0);
16333 16334 uill->ill_usesrc_grp_next = NULL;
16334 16335 }
16335 16336
16336 16337 /*
16337 16338 * Remove the client usesrc ILL from the list and relink to a new list
16338 16339 */
16339 16340 int
16340 16341 ill_relink_usesrc_ills(ill_t *ucill, ill_t *uill, uint_t ifindex)
16341 16342 {
16342 16343 ill_t *ill, *tmp_ill;
16343 16344 ip_stack_t *ipst = ucill->ill_ipst;
16344 16345
16345 16346 ASSERT((ucill != NULL) && (ucill->ill_usesrc_grp_next != NULL) &&
16346 16347 (uill != NULL) && RW_WRITE_HELD(&ipst->ips_ill_g_usesrc_lock));
16347 16348
16348 16349 /*
16349 16350 * Check if the usesrc client ILL passed in is not already
16350 16351 * in use as a usesrc ILL i.e one whose source address is
16351 16352 * in use OR a usesrc ILL is not already in use as a usesrc
16352 16353 * client ILL
16353 16354 */
16354 16355 if ((ucill->ill_usesrc_ifindex == 0) ||
16355 16356 (uill->ill_usesrc_ifindex != 0)) {
16356 16357 return (-1);
16357 16358 }
16358 16359
16359 16360 ill = ill_prev_usesrc(ucill);
16360 16361 ASSERT(ill->ill_usesrc_grp_next != NULL);
16361 16362
16362 16363 /* Remove from the current list */
16363 16364 if (ill->ill_usesrc_grp_next->ill_usesrc_grp_next == ill) {
16364 16365 /* Only two elements in the list */
16365 16366 ASSERT(ill->ill_usesrc_ifindex == 0);
16366 16367 ill->ill_usesrc_grp_next = NULL;
16367 16368 } else {
16368 16369 ill->ill_usesrc_grp_next = ucill->ill_usesrc_grp_next;
16369 16370 }
16370 16371
16371 16372 if (ifindex == 0) {
16372 16373 ucill->ill_usesrc_ifindex = 0;
16373 16374 ucill->ill_usesrc_grp_next = NULL;
16374 16375 return (0);
16375 16376 }
16376 16377
16377 16378 ucill->ill_usesrc_ifindex = ifindex;
16378 16379 tmp_ill = uill->ill_usesrc_grp_next;
16379 16380 uill->ill_usesrc_grp_next = ucill;
16380 16381 ucill->ill_usesrc_grp_next =
16381 16382 (tmp_ill != NULL) ? tmp_ill : uill;
16382 16383 return (0);
16383 16384 }
16384 16385
16385 16386 /*
16386 16387 * Set the ill_usesrc and ill_usesrc_head fields. See synchronization notes in
16387 16388 * ip.c for locking details.
16388 16389 */
16389 16390 /* ARGSUSED */
16390 16391 int
16391 16392 ip_sioctl_slifusesrc(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
16392 16393 ip_ioctl_cmd_t *ipip, void *ifreq)
16393 16394 {
16394 16395 struct lifreq *lifr = (struct lifreq *)ifreq;
16395 16396 boolean_t isv6 = B_FALSE, reset_flg = B_FALSE;
16396 16397 ill_t *usesrc_ill, *usesrc_cli_ill = ipif->ipif_ill;
16397 16398 int err = 0, ret;
16398 16399 uint_t ifindex;
16399 16400 ipsq_t *ipsq = NULL;
16400 16401 ip_stack_t *ipst = ipif->ipif_ill->ill_ipst;
16401 16402
16402 16403 ASSERT(IAM_WRITER_IPIF(ipif));
16403 16404 ASSERT(q->q_next == NULL);
16404 16405 ASSERT(CONN_Q(q));
16405 16406
16406 16407 isv6 = (Q_TO_CONN(q))->conn_family == AF_INET6;
16407 16408
16408 16409 ifindex = lifr->lifr_index;
16409 16410 if (ifindex == 0) {
16410 16411 if (usesrc_cli_ill->ill_usesrc_grp_next == NULL) {
16411 16412 /* non usesrc group interface, nothing to reset */
16412 16413 return (0);
16413 16414 }
16414 16415 ifindex = usesrc_cli_ill->ill_usesrc_ifindex;
16415 16416 /* valid reset request */
16416 16417 reset_flg = B_TRUE;
16417 16418 }
16418 16419
16419 16420 usesrc_ill = ill_lookup_on_ifindex(ifindex, isv6, ipst);
16420 16421 if (usesrc_ill == NULL)
16421 16422 return (ENXIO);
16422 16423 if (usesrc_ill == ipif->ipif_ill) {
16423 16424 ill_refrele(usesrc_ill);
16424 16425 return (EINVAL);
16425 16426 }
16426 16427
16427 16428 ipsq = ipsq_try_enter(NULL, usesrc_ill, q, mp, ip_process_ioctl,
16428 16429 NEW_OP, B_TRUE);
16429 16430 if (ipsq == NULL) {
16430 16431 err = EINPROGRESS;
16431 16432 /* Operation enqueued on the ipsq of the usesrc ILL */
16432 16433 goto done;
16433 16434 }
16434 16435
16435 16436 /* USESRC isn't currently supported with IPMP */
16436 16437 if (IS_IPMP(usesrc_ill) || IS_UNDER_IPMP(usesrc_ill)) {
16437 16438 err = ENOTSUP;
16438 16439 goto done;
16439 16440 }
16440 16441
16441 16442 /*
16442 16443 * USESRC isn't compatible with the STANDBY flag. (STANDBY is only
16443 16444 * used by IPMP underlying interfaces, but someone might think it's
16444 16445 * more general and try to use it independently with VNI.)
16445 16446 */
16446 16447 if (usesrc_ill->ill_phyint->phyint_flags & PHYI_STANDBY) {
16447 16448 err = ENOTSUP;
16448 16449 goto done;
16449 16450 }
16450 16451
16451 16452 /*
16452 16453 * If the client is already in use as a usesrc_ill or a usesrc_ill is
16453 16454 * already a client then return EINVAL
16454 16455 */
16455 16456 if (IS_USESRC_ILL(usesrc_cli_ill) || IS_USESRC_CLI_ILL(usesrc_ill)) {
16456 16457 err = EINVAL;
16457 16458 goto done;
16458 16459 }
16459 16460
16460 16461 /*
16461 16462 * If the ill_usesrc_ifindex field is already set to what it needs to
16462 16463 * be then this is a duplicate operation.
16463 16464 */
16464 16465 if (!reset_flg && usesrc_cli_ill->ill_usesrc_ifindex == ifindex) {
16465 16466 err = 0;
16466 16467 goto done;
16467 16468 }
16468 16469
16469 16470 ip1dbg(("ip_sioctl_slifusesrc: usesrc_cli_ill %s, usesrc_ill %s,"
16470 16471 " v6 = %d", usesrc_cli_ill->ill_name, usesrc_ill->ill_name,
16471 16472 usesrc_ill->ill_isv6));
16472 16473
16473 16474 /*
16474 16475 * ill_g_usesrc_lock global lock protects the ill_usesrc_grp_next
16475 16476 * and the ill_usesrc_ifindex fields
16476 16477 */
16477 16478 rw_enter(&ipst->ips_ill_g_usesrc_lock, RW_WRITER);
16478 16479
16479 16480 if (reset_flg) {
16480 16481 ret = ill_relink_usesrc_ills(usesrc_cli_ill, usesrc_ill, 0);
16481 16482 if (ret != 0) {
16482 16483 err = EINVAL;
16483 16484 }
16484 16485 rw_exit(&ipst->ips_ill_g_usesrc_lock);
16485 16486 goto done;
16486 16487 }
16487 16488
16488 16489 /*
16489 16490 * Four possibilities to consider:
16490 16491 * 1. Both usesrc_ill and usesrc_cli_ill are not part of any usesrc grp
16491 16492 * 2. usesrc_ill is part of a group but usesrc_cli_ill isn't
16492 16493 * 3. usesrc_cli_ill is part of a group but usesrc_ill isn't
16493 16494 * 4. Both are part of their respective usesrc groups
16494 16495 */
16495 16496 if ((usesrc_ill->ill_usesrc_grp_next == NULL) &&
16496 16497 (usesrc_cli_ill->ill_usesrc_grp_next == NULL)) {
16497 16498 ASSERT(usesrc_ill->ill_usesrc_ifindex == 0);
16498 16499 usesrc_cli_ill->ill_usesrc_ifindex = ifindex;
16499 16500 usesrc_ill->ill_usesrc_grp_next = usesrc_cli_ill;
16500 16501 usesrc_cli_ill->ill_usesrc_grp_next = usesrc_ill;
16501 16502 } else if ((usesrc_ill->ill_usesrc_grp_next != NULL) &&
16502 16503 (usesrc_cli_ill->ill_usesrc_grp_next == NULL)) {
16503 16504 usesrc_cli_ill->ill_usesrc_ifindex = ifindex;
16504 16505 /* Insert at head of list */
16505 16506 usesrc_cli_ill->ill_usesrc_grp_next =
16506 16507 usesrc_ill->ill_usesrc_grp_next;
16507 16508 usesrc_ill->ill_usesrc_grp_next = usesrc_cli_ill;
16508 16509 } else {
16509 16510 ret = ill_relink_usesrc_ills(usesrc_cli_ill, usesrc_ill,
16510 16511 ifindex);
16511 16512 if (ret != 0)
16512 16513 err = EINVAL;
16513 16514 }
16514 16515 rw_exit(&ipst->ips_ill_g_usesrc_lock);
16515 16516
16516 16517 done:
16517 16518 if (ipsq != NULL)
16518 16519 ipsq_exit(ipsq);
16519 16520 /* The refrele on the lifr_name ipif is done by ip_process_ioctl */
16520 16521 ill_refrele(usesrc_ill);
16521 16522
16522 16523 /* Let conn_ixa caching know that source address selection changed */
16523 16524 ip_update_source_selection(ipst);
16524 16525
16525 16526 return (err);
16526 16527 }
16527 16528
16528 16529 /* ARGSUSED */
16529 16530 int
16530 16531 ip_sioctl_get_dadstate(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
16531 16532 ip_ioctl_cmd_t *ipip, void *if_req)
16532 16533 {
16533 16534 struct lifreq *lifr = (struct lifreq *)if_req;
16534 16535 ill_t *ill = ipif->ipif_ill;
16535 16536
16536 16537 /*
16537 16538 * Need a lock since IFF_UP can be set even when there are
16538 16539 * references to the ipif.
16539 16540 */
16540 16541 mutex_enter(&ill->ill_lock);
16541 16542 if ((ipif->ipif_flags & IPIF_UP) && ipif->ipif_addr_ready == 0)
16542 16543 lifr->lifr_dadstate = DAD_IN_PROGRESS;
16543 16544 else
16544 16545 lifr->lifr_dadstate = DAD_DONE;
16545 16546 mutex_exit(&ill->ill_lock);
16546 16547 return (0);
16547 16548 }
16548 16549
16549 16550 /*
16550 16551 * comparison function used by avl.
16551 16552 */
16552 16553 static int
16553 16554 ill_phyint_compare_index(const void *index_ptr, const void *phyip)
16554 16555 {
16555 16556
16556 16557 uint_t index;
16557 16558
16558 16559 ASSERT(phyip != NULL && index_ptr != NULL);
16559 16560
16560 16561 index = *((uint_t *)index_ptr);
16561 16562 /*
16562 16563 * let the phyint with the lowest index be on top.
16563 16564 */
16564 16565 if (((phyint_t *)phyip)->phyint_ifindex < index)
16565 16566 return (1);
16566 16567 if (((phyint_t *)phyip)->phyint_ifindex > index)
16567 16568 return (-1);
16568 16569 return (0);
16569 16570 }
16570 16571
16571 16572 /*
16572 16573 * comparison function used by avl.
16573 16574 */
16574 16575 static int
16575 16576 ill_phyint_compare_name(const void *name_ptr, const void *phyip)
16576 16577 {
16577 16578 ill_t *ill;
16578 16579 int res = 0;
16579 16580
16580 16581 ASSERT(phyip != NULL && name_ptr != NULL);
16581 16582
16582 16583 if (((phyint_t *)phyip)->phyint_illv4)
16583 16584 ill = ((phyint_t *)phyip)->phyint_illv4;
16584 16585 else
16585 16586 ill = ((phyint_t *)phyip)->phyint_illv6;
16586 16587 ASSERT(ill != NULL);
16587 16588
16588 16589 res = strcmp(ill->ill_name, (char *)name_ptr);
16589 16590 if (res > 0)
16590 16591 return (1);
16591 16592 else if (res < 0)
16592 16593 return (-1);
16593 16594 return (0);
16594 16595 }
16595 16596
16596 16597 /*
16597 16598 * This function is called on the unplumb path via ill_glist_delete() when
16598 16599 * there are no ills left on the phyint and thus the phyint can be freed.
16599 16600 */
16600 16601 static void
16601 16602 phyint_free(phyint_t *phyi)
16602 16603 {
16603 16604 ip_stack_t *ipst = PHYINT_TO_IPST(phyi);
16604 16605
16605 16606 ASSERT(phyi->phyint_illv4 == NULL && phyi->phyint_illv6 == NULL);
16606 16607
16607 16608 /*
16608 16609 * If this phyint was an IPMP meta-interface, blow away the group.
16609 16610 * This is safe to do because all of the illgrps have already been
16610 16611 * removed by I_PUNLINK, and thus SIOCSLIFGROUPNAME cannot find us.
16611 16612 * If we're cleaning up as a result of failed initialization,
16612 16613 * phyint_grp may be NULL.
16613 16614 */
16614 16615 if ((phyi->phyint_flags & PHYI_IPMP) && (phyi->phyint_grp != NULL)) {
16615 16616 rw_enter(&ipst->ips_ipmp_lock, RW_WRITER);
16616 16617 ipmp_grp_destroy(phyi->phyint_grp);
16617 16618 phyi->phyint_grp = NULL;
16618 16619 rw_exit(&ipst->ips_ipmp_lock);
16619 16620 }
16620 16621
16621 16622 /*
16622 16623 * If this interface was under IPMP, take it out of the group.
16623 16624 */
16624 16625 if (phyi->phyint_grp != NULL)
16625 16626 ipmp_phyint_leave_grp(phyi);
16626 16627
16627 16628 /*
16628 16629 * Delete the phyint and disassociate its ipsq. The ipsq itself
16629 16630 * will be freed in ipsq_exit().
16630 16631 */
16631 16632 phyi->phyint_ipsq->ipsq_phyint = NULL;
16632 16633 phyi->phyint_name[0] = '\0';
16633 16634
16634 16635 mi_free(phyi);
16635 16636 }
16636 16637
16637 16638 /*
16638 16639 * Attach the ill to the phyint structure which can be shared by both
16639 16640 * IPv4 and IPv6 ill. ill_init allocates a phyint to just hold flags. This
16640 16641 * function is called from ipif_set_values and ill_lookup_on_name (for
16641 16642 * loopback) where we know the name of the ill. We lookup the ill and if
16642 16643 * there is one present already with the name use that phyint. Otherwise
16643 16644 * reuse the one allocated by ill_init.
16644 16645 */
16645 16646 static void
16646 16647 ill_phyint_reinit(ill_t *ill)
16647 16648 {
16648 16649 boolean_t isv6 = ill->ill_isv6;
16649 16650 phyint_t *phyi_old;
16650 16651 phyint_t *phyi;
16651 16652 avl_index_t where = 0;
16652 16653 ill_t *ill_other = NULL;
16653 16654 ip_stack_t *ipst = ill->ill_ipst;
16654 16655
16655 16656 ASSERT(RW_WRITE_HELD(&ipst->ips_ill_g_lock));
16656 16657
16657 16658 phyi_old = ill->ill_phyint;
16658 16659 ASSERT(isv6 || (phyi_old->phyint_illv4 == ill &&
16659 16660 phyi_old->phyint_illv6 == NULL));
16660 16661 ASSERT(!isv6 || (phyi_old->phyint_illv6 == ill &&
16661 16662 phyi_old->phyint_illv4 == NULL));
16662 16663 ASSERT(phyi_old->phyint_ifindex == 0);
16663 16664
16664 16665 /*
16665 16666 * Now that our ill has a name, set it in the phyint.
16666 16667 */
16667 16668 (void) strlcpy(ill->ill_phyint->phyint_name, ill->ill_name, LIFNAMSIZ);
16668 16669
16669 16670 phyi = avl_find(&ipst->ips_phyint_g_list->phyint_list_avl_by_name,
16670 16671 ill->ill_name, &where);
16671 16672
16672 16673 /*
16673 16674 * 1. We grabbed the ill_g_lock before inserting this ill into
16674 16675 * the global list of ills. So no other thread could have located
16675 16676 * this ill and hence the ipsq of this ill is guaranteed to be empty.
16676 16677 * 2. Now locate the other protocol instance of this ill.
16677 16678 * 3. Now grab both ill locks in the right order, and the phyint lock of
16678 16679 * the new ipsq. Holding ill locks + ill_g_lock ensures that the ipsq
16679 16680 * of neither ill can change.
16680 16681 * 4. Merge the phyint and thus the ipsq as well of this ill onto the
16681 16682 * other ill.
16682 16683 * 5. Release all locks.
16683 16684 */
16684 16685
16685 16686 /*
16686 16687 * Look for IPv4 if we are initializing IPv6 or look for IPv6 if
16687 16688 * we are initializing IPv4.
16688 16689 */
16689 16690 if (phyi != NULL) {
16690 16691 ill_other = (isv6) ? phyi->phyint_illv4 : phyi->phyint_illv6;
16691 16692 ASSERT(ill_other->ill_phyint != NULL);
16692 16693 ASSERT((isv6 && !ill_other->ill_isv6) ||
16693 16694 (!isv6 && ill_other->ill_isv6));
16694 16695 GRAB_ILL_LOCKS(ill, ill_other);
16695 16696 /*
16696 16697 * We are potentially throwing away phyint_flags which
16697 16698 * could be different from the one that we obtain from
16698 16699 * ill_other->ill_phyint. But it is okay as we are assuming
16699 16700 * that the state maintained within IP is correct.
16700 16701 */
16701 16702 mutex_enter(&phyi->phyint_lock);
16702 16703 if (isv6) {
16703 16704 ASSERT(phyi->phyint_illv6 == NULL);
16704 16705 phyi->phyint_illv6 = ill;
16705 16706 } else {
16706 16707 ASSERT(phyi->phyint_illv4 == NULL);
16707 16708 phyi->phyint_illv4 = ill;
16708 16709 }
16709 16710
16710 16711 /*
16711 16712 * Delete the old phyint and make its ipsq eligible
16712 16713 * to be freed in ipsq_exit().
16713 16714 */
16714 16715 phyi_old->phyint_illv4 = NULL;
16715 16716 phyi_old->phyint_illv6 = NULL;
16716 16717 phyi_old->phyint_ipsq->ipsq_phyint = NULL;
16717 16718 phyi_old->phyint_name[0] = '\0';
16718 16719 mi_free(phyi_old);
16719 16720 } else {
16720 16721 mutex_enter(&ill->ill_lock);
16721 16722 /*
16722 16723 * We don't need to acquire any lock, since
16723 16724 * the ill is not yet visible globally and we
16724 16725 * have not yet released the ill_g_lock.
16725 16726 */
16726 16727 phyi = phyi_old;
16727 16728 mutex_enter(&phyi->phyint_lock);
16728 16729 /* XXX We need a recovery strategy here. */
16729 16730 if (!phyint_assign_ifindex(phyi, ipst))
16730 16731 cmn_err(CE_PANIC, "phyint_assign_ifindex() failed");
16731 16732
16732 16733 avl_insert(&ipst->ips_phyint_g_list->phyint_list_avl_by_name,
16733 16734 (void *)phyi, where);
16734 16735
16735 16736 (void) avl_find(&ipst->ips_phyint_g_list->
16736 16737 phyint_list_avl_by_index,
16737 16738 &phyi->phyint_ifindex, &where);
16738 16739 avl_insert(&ipst->ips_phyint_g_list->phyint_list_avl_by_index,
16739 16740 (void *)phyi, where);
16740 16741 }
16741 16742
16742 16743 /*
16743 16744 * Reassigning ill_phyint automatically reassigns the ipsq also.
16744 16745 * pending mp is not affected because that is per ill basis.
16745 16746 */
16746 16747 ill->ill_phyint = phyi;
16747 16748
16748 16749 /*
16749 16750 * Now that the phyint's ifindex has been assigned, complete the
16750 16751 * remaining
16751 16752 */
16752 16753 ill->ill_ip_mib->ipIfStatsIfIndex = ill->ill_phyint->phyint_ifindex;
16753 16754 if (ill->ill_isv6) {
16754 16755 ill->ill_icmp6_mib->ipv6IfIcmpIfIndex =
16755 16756 ill->ill_phyint->phyint_ifindex;
16756 16757 ill->ill_mcast_type = ipst->ips_mld_max_version;
16757 16758 } else {
16758 16759 ill->ill_mcast_type = ipst->ips_igmp_max_version;
16759 16760 }
16760 16761
16761 16762 /*
16762 16763 * Generate an event within the hooks framework to indicate that
16763 16764 * a new interface has just been added to IP. For this event to
16764 16765 * be generated, the network interface must, at least, have an
16765 16766 * ifindex assigned to it. (We don't generate the event for
16766 16767 * loopback since ill_lookup_on_name() has its own NE_PLUMB event.)
16767 16768 *
16768 16769 * This needs to be run inside the ill_g_lock perimeter to ensure
16769 16770 * that the ordering of delivered events to listeners matches the
16770 16771 * order of them in the kernel.
16771 16772 */
16772 16773 if (!IS_LOOPBACK(ill)) {
16773 16774 ill_nic_event_dispatch(ill, 0, NE_PLUMB, ill->ill_name,
16774 16775 ill->ill_name_length);
16775 16776 }
16776 16777 RELEASE_ILL_LOCKS(ill, ill_other);
16777 16778 mutex_exit(&phyi->phyint_lock);
16778 16779 }
16779 16780
16780 16781 /*
16781 16782 * Notify any downstream modules of the name of this interface.
16782 16783 * An M_IOCTL is used even though we don't expect a successful reply.
16783 16784 * Any reply message from the driver (presumably an M_IOCNAK) will
16784 16785 * eventually get discarded somewhere upstream. The message format is
16785 16786 * simply an SIOCSLIFNAME ioctl just as might be sent from ifconfig
16786 16787 * to IP.
16787 16788 */
16788 16789 static void
16789 16790 ip_ifname_notify(ill_t *ill, queue_t *q)
16790 16791 {
16791 16792 mblk_t *mp1, *mp2;
16792 16793 struct iocblk *iocp;
16793 16794 struct lifreq *lifr;
16794 16795
16795 16796 mp1 = mkiocb(SIOCSLIFNAME);
16796 16797 if (mp1 == NULL)
16797 16798 return;
16798 16799 mp2 = allocb(sizeof (struct lifreq), BPRI_HI);
16799 16800 if (mp2 == NULL) {
16800 16801 freeb(mp1);
16801 16802 return;
16802 16803 }
16803 16804
16804 16805 mp1->b_cont = mp2;
16805 16806 iocp = (struct iocblk *)mp1->b_rptr;
16806 16807 iocp->ioc_count = sizeof (struct lifreq);
16807 16808
16808 16809 lifr = (struct lifreq *)mp2->b_rptr;
16809 16810 mp2->b_wptr += sizeof (struct lifreq);
16810 16811 bzero(lifr, sizeof (struct lifreq));
16811 16812
16812 16813 (void) strncpy(lifr->lifr_name, ill->ill_name, LIFNAMSIZ);
16813 16814 lifr->lifr_ppa = ill->ill_ppa;
16814 16815 lifr->lifr_flags = (ill->ill_flags & (ILLF_IPV4|ILLF_IPV6));
16815 16816
16816 16817 DTRACE_PROBE3(ill__dlpi, char *, "ip_ifname_notify",
16817 16818 char *, "SIOCSLIFNAME", ill_t *, ill);
16818 16819 putnext(q, mp1);
16819 16820 }
16820 16821
16821 16822 static int
16822 16823 ipif_set_values_tail(ill_t *ill, ipif_t *ipif, mblk_t *mp, queue_t *q)
16823 16824 {
16824 16825 int err;
16825 16826 ip_stack_t *ipst = ill->ill_ipst;
16826 16827 phyint_t *phyi = ill->ill_phyint;
16827 16828
16828 16829 /*
16829 16830 * Now that ill_name is set, the configuration for the IPMP
16830 16831 * meta-interface can be performed.
16831 16832 */
16832 16833 if (IS_IPMP(ill)) {
16833 16834 rw_enter(&ipst->ips_ipmp_lock, RW_WRITER);
16834 16835 /*
16835 16836 * If phyi->phyint_grp is NULL, then this is the first IPMP
16836 16837 * meta-interface and we need to create the IPMP group.
16837 16838 */
16838 16839 if (phyi->phyint_grp == NULL) {
16839 16840 /*
16840 16841 * If someone has renamed another IPMP group to have
16841 16842 * the same name as our interface, bail.
16842 16843 */
16843 16844 if (ipmp_grp_lookup(ill->ill_name, ipst) != NULL) {
16844 16845 rw_exit(&ipst->ips_ipmp_lock);
16845 16846 return (EEXIST);
16846 16847 }
16847 16848 phyi->phyint_grp = ipmp_grp_create(ill->ill_name, phyi);
16848 16849 if (phyi->phyint_grp == NULL) {
16849 16850 rw_exit(&ipst->ips_ipmp_lock);
16850 16851 return (ENOMEM);
16851 16852 }
16852 16853 }
16853 16854 rw_exit(&ipst->ips_ipmp_lock);
16854 16855 }
16855 16856
16856 16857 /* Tell downstream modules where they are. */
16857 16858 ip_ifname_notify(ill, q);
16858 16859
16859 16860 /*
16860 16861 * ill_dl_phys returns EINPROGRESS in the usual case.
16861 16862 * Error cases are ENOMEM ...
16862 16863 */
16863 16864 err = ill_dl_phys(ill, ipif, mp, q);
16864 16865
16865 16866 if (ill->ill_isv6) {
16866 16867 mutex_enter(&ipst->ips_mld_slowtimeout_lock);
16867 16868 if (ipst->ips_mld_slowtimeout_id == 0) {
16868 16869 ipst->ips_mld_slowtimeout_id = timeout(mld_slowtimo,
16869 16870 (void *)ipst,
16870 16871 MSEC_TO_TICK(MCAST_SLOWTIMO_INTERVAL));
16871 16872 }
16872 16873 mutex_exit(&ipst->ips_mld_slowtimeout_lock);
16873 16874 } else {
16874 16875 mutex_enter(&ipst->ips_igmp_slowtimeout_lock);
16875 16876 if (ipst->ips_igmp_slowtimeout_id == 0) {
16876 16877 ipst->ips_igmp_slowtimeout_id = timeout(igmp_slowtimo,
16877 16878 (void *)ipst,
16878 16879 MSEC_TO_TICK(MCAST_SLOWTIMO_INTERVAL));
16879 16880 }
16880 16881 mutex_exit(&ipst->ips_igmp_slowtimeout_lock);
16881 16882 }
16882 16883
16883 16884 return (err);
16884 16885 }
16885 16886
16886 16887 /*
16887 16888 * Common routine for ppa and ifname setting. Should be called exclusive.
16888 16889 *
16889 16890 * Returns EINPROGRESS when mp has been consumed by queueing it on
16890 16891 * ipx_pending_mp and the ioctl will complete in ip_rput.
16891 16892 *
16892 16893 * NOTE : If ppa is UNIT_MAX, we assign the next valid ppa and return
16893 16894 * the new name and new ppa in lifr_name and lifr_ppa respectively.
16894 16895 * For SLIFNAME, we pass these values back to the userland.
16895 16896 */
16896 16897 static int
16897 16898 ipif_set_values(queue_t *q, mblk_t *mp, char *interf_name, uint_t *new_ppa_ptr)
16898 16899 {
16899 16900 ill_t *ill;
16900 16901 ipif_t *ipif;
16901 16902 ipsq_t *ipsq;
16902 16903 char *ppa_ptr;
16903 16904 char *old_ptr;
16904 16905 char old_char;
16905 16906 int error;
16906 16907 ip_stack_t *ipst;
16907 16908
16908 16909 ip1dbg(("ipif_set_values: interface %s\n", interf_name));
16909 16910 ASSERT(q->q_next != NULL);
16910 16911 ASSERT(interf_name != NULL);
16911 16912
16912 16913 ill = (ill_t *)q->q_ptr;
16913 16914 ipst = ill->ill_ipst;
16914 16915
16915 16916 ASSERT(ill->ill_ipst != NULL);
16916 16917 ASSERT(ill->ill_name[0] == '\0');
16917 16918 ASSERT(IAM_WRITER_ILL(ill));
16918 16919 ASSERT((mi_strlen(interf_name) + 1) <= LIFNAMSIZ);
16919 16920 ASSERT(ill->ill_ppa == UINT_MAX);
16920 16921
16921 16922 ill->ill_defend_start = ill->ill_defend_count = 0;
16922 16923 /* The ppa is sent down by ifconfig or is chosen */
16923 16924 if ((ppa_ptr = ill_get_ppa_ptr(interf_name)) == NULL) {
16924 16925 return (EINVAL);
16925 16926 }
16926 16927
16927 16928 /*
16928 16929 * make sure ppa passed in is same as ppa in the name.
16929 16930 * This check is not made when ppa == UINT_MAX in that case ppa
16930 16931 * in the name could be anything. System will choose a ppa and
16931 16932 * update new_ppa_ptr and inter_name to contain the choosen ppa.
16932 16933 */
16933 16934 if (*new_ppa_ptr != UINT_MAX) {
16934 16935 /* stoi changes the pointer */
16935 16936 old_ptr = ppa_ptr;
16936 16937 /*
16937 16938 * ifconfig passed in 0 for the ppa for DLPI 1 style devices
16938 16939 * (they don't have an externally visible ppa). We assign one
16939 16940 * here so that we can manage the interface. Note that in
16940 16941 * the past this value was always 0 for DLPI 1 drivers.
16941 16942 */
16942 16943 if (*new_ppa_ptr == 0)
16943 16944 *new_ppa_ptr = stoi(&old_ptr);
16944 16945 else if (*new_ppa_ptr != (uint_t)stoi(&old_ptr))
16945 16946 return (EINVAL);
16946 16947 }
16947 16948 /*
16948 16949 * terminate string before ppa
16949 16950 * save char at that location.
16950 16951 */
16951 16952 old_char = ppa_ptr[0];
16952 16953 ppa_ptr[0] = '\0';
16953 16954
16954 16955 ill->ill_ppa = *new_ppa_ptr;
16955 16956 /*
16956 16957 * Finish as much work now as possible before calling ill_glist_insert
16957 16958 * which makes the ill globally visible and also merges it with the
16958 16959 * other protocol instance of this phyint. The remaining work is
16959 16960 * done after entering the ipsq which may happen sometime later.
16960 16961 */
16961 16962 ipif = ill->ill_ipif;
16962 16963
16963 16964 /* We didn't do this when we allocated ipif in ip_ll_subnet_defaults */
16964 16965 ipif_assign_seqid(ipif);
16965 16966
16966 16967 if (!(ill->ill_flags & (ILLF_IPV4|ILLF_IPV6)))
16967 16968 ill->ill_flags |= ILLF_IPV4;
16968 16969
16969 16970 ASSERT(ipif->ipif_next == NULL); /* Only one ipif on ill */
16970 16971 ASSERT((ipif->ipif_flags & IPIF_UP) == 0);
16971 16972
16972 16973 if (ill->ill_flags & ILLF_IPV6) {
16973 16974
16974 16975 ill->ill_isv6 = B_TRUE;
16975 16976 ill_set_inputfn(ill);
16976 16977 if (ill->ill_rq != NULL) {
16977 16978 ill->ill_rq->q_qinfo = &iprinitv6;
16978 16979 }
16979 16980
16980 16981 /* Keep the !IN6_IS_ADDR_V4MAPPED assertions happy */
16981 16982 ipif->ipif_v6lcl_addr = ipv6_all_zeros;
16982 16983 ipif->ipif_v6subnet = ipv6_all_zeros;
16983 16984 ipif->ipif_v6net_mask = ipv6_all_zeros;
16984 16985 ipif->ipif_v6brd_addr = ipv6_all_zeros;
16985 16986 ipif->ipif_v6pp_dst_addr = ipv6_all_zeros;
16986 16987 ill->ill_reachable_retrans_time = ND_RETRANS_TIMER;
16987 16988 /*
16988 16989 * point-to-point or Non-mulicast capable
16989 16990 * interfaces won't do NUD unless explicitly
16990 16991 * configured to do so.
16991 16992 */
16992 16993 if (ipif->ipif_flags & IPIF_POINTOPOINT ||
16993 16994 !(ill->ill_flags & ILLF_MULTICAST)) {
16994 16995 ill->ill_flags |= ILLF_NONUD;
16995 16996 }
16996 16997 /* Make sure IPv4 specific flag is not set on IPv6 if */
16997 16998 if (ill->ill_flags & ILLF_NOARP) {
16998 16999 /*
16999 17000 * Note: xresolv interfaces will eventually need
17000 17001 * NOARP set here as well, but that will require
17001 17002 * those external resolvers to have some
17002 17003 * knowledge of that flag and act appropriately.
17003 17004 * Not to be changed at present.
17004 17005 */
17005 17006 ill->ill_flags &= ~ILLF_NOARP;
17006 17007 }
17007 17008 /*
17008 17009 * Set the ILLF_ROUTER flag according to the global
17009 17010 * IPv6 forwarding policy.
17010 17011 */
17011 17012 if (ipst->ips_ipv6_forwarding != 0)
17012 17013 ill->ill_flags |= ILLF_ROUTER;
17013 17014 } else if (ill->ill_flags & ILLF_IPV4) {
17014 17015 ill->ill_isv6 = B_FALSE;
17015 17016 ill_set_inputfn(ill);
17016 17017 ill->ill_reachable_retrans_time = ARP_RETRANS_TIMER;
17017 17018 IN6_IPADDR_TO_V4MAPPED(INADDR_ANY, &ipif->ipif_v6lcl_addr);
17018 17019 IN6_IPADDR_TO_V4MAPPED(INADDR_ANY, &ipif->ipif_v6subnet);
17019 17020 IN6_IPADDR_TO_V4MAPPED(INADDR_ANY, &ipif->ipif_v6net_mask);
17020 17021 IN6_IPADDR_TO_V4MAPPED(INADDR_ANY, &ipif->ipif_v6brd_addr);
17021 17022 IN6_IPADDR_TO_V4MAPPED(INADDR_ANY, &ipif->ipif_v6pp_dst_addr);
17022 17023 /*
17023 17024 * Set the ILLF_ROUTER flag according to the global
17024 17025 * IPv4 forwarding policy.
17025 17026 */
17026 17027 if (ipst->ips_ip_forwarding != 0)
17027 17028 ill->ill_flags |= ILLF_ROUTER;
17028 17029 }
17029 17030
17030 17031 ASSERT(ill->ill_phyint != NULL);
17031 17032
17032 17033 /*
17033 17034 * The ipIfStatsIfindex and ipv6IfIcmpIfIndex assignments will
17034 17035 * be completed in ill_glist_insert -> ill_phyint_reinit
17035 17036 */
17036 17037 if (!ill_allocate_mibs(ill))
17037 17038 return (ENOMEM);
17038 17039
17039 17040 /*
17040 17041 * Pick a default sap until we get the DL_INFO_ACK back from
17041 17042 * the driver.
17042 17043 */
17043 17044 ill->ill_sap = (ill->ill_isv6) ? ill->ill_media->ip_m_ipv6sap :
17044 17045 ill->ill_media->ip_m_ipv4sap;
17045 17046
17046 17047 ill->ill_ifname_pending = 1;
17047 17048 ill->ill_ifname_pending_err = 0;
17048 17049
17049 17050 /*
17050 17051 * When the first ipif comes up in ipif_up_done(), multicast groups
17051 17052 * that were joined while this ill was not bound to the DLPI link need
17052 17053 * to be recovered by ill_recover_multicast().
17053 17054 */
17054 17055 ill->ill_need_recover_multicast = 1;
17055 17056
17056 17057 ill_refhold(ill);
17057 17058 rw_enter(&ipst->ips_ill_g_lock, RW_WRITER);
17058 17059 if ((error = ill_glist_insert(ill, interf_name,
17059 17060 (ill->ill_flags & ILLF_IPV6) == ILLF_IPV6)) > 0) {
17060 17061 ill->ill_ppa = UINT_MAX;
17061 17062 ill->ill_name[0] = '\0';
17062 17063 /*
17063 17064 * undo null termination done above.
17064 17065 */
17065 17066 ppa_ptr[0] = old_char;
17066 17067 rw_exit(&ipst->ips_ill_g_lock);
17067 17068 ill_refrele(ill);
17068 17069 return (error);
17069 17070 }
17070 17071
17071 17072 ASSERT(ill->ill_name_length <= LIFNAMSIZ);
17072 17073
17073 17074 /*
17074 17075 * When we return the buffer pointed to by interf_name should contain
17075 17076 * the same name as in ill_name.
17076 17077 * If a ppa was choosen by the system (ppa passed in was UINT_MAX)
17077 17078 * the buffer pointed to by new_ppa_ptr would not contain the right ppa
17078 17079 * so copy full name and update the ppa ptr.
17079 17080 * When ppa passed in != UINT_MAX all values are correct just undo
17080 17081 * null termination, this saves a bcopy.
17081 17082 */
17082 17083 if (*new_ppa_ptr == UINT_MAX) {
17083 17084 bcopy(ill->ill_name, interf_name, ill->ill_name_length);
17084 17085 *new_ppa_ptr = ill->ill_ppa;
17085 17086 } else {
17086 17087 /*
17087 17088 * undo null termination done above.
17088 17089 */
17089 17090 ppa_ptr[0] = old_char;
17090 17091 }
17091 17092
17092 17093 /* Let SCTP know about this ILL */
17093 17094 sctp_update_ill(ill, SCTP_ILL_INSERT);
17094 17095
17095 17096 /*
17096 17097 * ill_glist_insert has made the ill visible globally, and
17097 17098 * ill_phyint_reinit could have changed the ipsq. At this point,
17098 17099 * we need to hold the ips_ill_g_lock across the call to enter the
17099 17100 * ipsq to enforce atomicity and prevent reordering. In the event
17100 17101 * the ipsq has changed, and if the new ipsq is currently busy,
17101 17102 * we need to make sure that this half-completed ioctl is ahead of
17102 17103 * any subsequent ioctl. We achieve this by not dropping the
17103 17104 * ips_ill_g_lock which prevents any ill lookup itself thereby
17104 17105 * ensuring that new ioctls can't start.
17105 17106 */
17106 17107 ipsq = ipsq_try_enter_internal(ill, q, mp, ip_reprocess_ioctl, NEW_OP,
17107 17108 B_TRUE);
17108 17109
17109 17110 rw_exit(&ipst->ips_ill_g_lock);
17110 17111 ill_refrele(ill);
17111 17112 if (ipsq == NULL)
17112 17113 return (EINPROGRESS);
17113 17114
17114 17115 /*
17115 17116 * If ill_phyint_reinit() changed our ipsq, then start on the new ipsq.
17116 17117 */
17117 17118 if (ipsq->ipsq_xop->ipx_current_ipif == NULL)
17118 17119 ipsq_current_start(ipsq, ipif, SIOCSLIFNAME);
17119 17120 else
17120 17121 ASSERT(ipsq->ipsq_xop->ipx_current_ipif == ipif);
17121 17122
17122 17123 error = ipif_set_values_tail(ill, ipif, mp, q);
17123 17124 ipsq_exit(ipsq);
17124 17125 if (error != 0 && error != EINPROGRESS) {
17125 17126 /*
17126 17127 * restore previous values
17127 17128 */
17128 17129 ill->ill_isv6 = B_FALSE;
17129 17130 ill_set_inputfn(ill);
17130 17131 }
17131 17132 return (error);
17132 17133 }
17133 17134
17134 17135 void
17135 17136 ipif_init(ip_stack_t *ipst)
17136 17137 {
17137 17138 int i;
17138 17139
17139 17140 for (i = 0; i < MAX_G_HEADS; i++) {
17140 17141 ipst->ips_ill_g_heads[i].ill_g_list_head =
17141 17142 (ill_if_t *)&ipst->ips_ill_g_heads[i];
17142 17143 ipst->ips_ill_g_heads[i].ill_g_list_tail =
17143 17144 (ill_if_t *)&ipst->ips_ill_g_heads[i];
17144 17145 }
17145 17146
17146 17147 avl_create(&ipst->ips_phyint_g_list->phyint_list_avl_by_index,
17147 17148 ill_phyint_compare_index,
17148 17149 sizeof (phyint_t),
17149 17150 offsetof(struct phyint, phyint_avl_by_index));
17150 17151 avl_create(&ipst->ips_phyint_g_list->phyint_list_avl_by_name,
17151 17152 ill_phyint_compare_name,
17152 17153 sizeof (phyint_t),
17153 17154 offsetof(struct phyint, phyint_avl_by_name));
17154 17155 }
17155 17156
17156 17157 /*
17157 17158 * Save enough information so that we can recreate the IRE if
17158 17159 * the interface goes down and then up.
17159 17160 */
17160 17161 void
17161 17162 ill_save_ire(ill_t *ill, ire_t *ire)
17162 17163 {
17163 17164 mblk_t *save_mp;
17164 17165
17165 17166 save_mp = allocb(sizeof (ifrt_t), BPRI_MED);
17166 17167 if (save_mp != NULL) {
17167 17168 ifrt_t *ifrt;
17168 17169
17169 17170 save_mp->b_wptr += sizeof (ifrt_t);
17170 17171 ifrt = (ifrt_t *)save_mp->b_rptr;
17171 17172 bzero(ifrt, sizeof (ifrt_t));
17172 17173 ifrt->ifrt_type = ire->ire_type;
17173 17174 if (ire->ire_ipversion == IPV4_VERSION) {
17174 17175 ASSERT(!ill->ill_isv6);
17175 17176 ifrt->ifrt_addr = ire->ire_addr;
17176 17177 ifrt->ifrt_gateway_addr = ire->ire_gateway_addr;
17177 17178 ifrt->ifrt_setsrc_addr = ire->ire_setsrc_addr;
17178 17179 ifrt->ifrt_mask = ire->ire_mask;
17179 17180 } else {
17180 17181 ASSERT(ill->ill_isv6);
17181 17182 ifrt->ifrt_v6addr = ire->ire_addr_v6;
17182 17183 /* ire_gateway_addr_v6 can change due to RTM_CHANGE */
17183 17184 mutex_enter(&ire->ire_lock);
17184 17185 ifrt->ifrt_v6gateway_addr = ire->ire_gateway_addr_v6;
17185 17186 mutex_exit(&ire->ire_lock);
17186 17187 ifrt->ifrt_v6setsrc_addr = ire->ire_setsrc_addr_v6;
17187 17188 ifrt->ifrt_v6mask = ire->ire_mask_v6;
17188 17189 }
17189 17190 ifrt->ifrt_flags = ire->ire_flags;
17190 17191 ifrt->ifrt_zoneid = ire->ire_zoneid;
17191 17192 mutex_enter(&ill->ill_saved_ire_lock);
17192 17193 save_mp->b_cont = ill->ill_saved_ire_mp;
17193 17194 ill->ill_saved_ire_mp = save_mp;
17194 17195 ill->ill_saved_ire_cnt++;
17195 17196 mutex_exit(&ill->ill_saved_ire_lock);
17196 17197 }
17197 17198 }
17198 17199
17199 17200 /*
17200 17201 * Remove one entry from ill_saved_ire_mp.
17201 17202 */
17202 17203 void
17203 17204 ill_remove_saved_ire(ill_t *ill, ire_t *ire)
17204 17205 {
17205 17206 mblk_t **mpp;
17206 17207 mblk_t *mp;
17207 17208 ifrt_t *ifrt;
17208 17209
17209 17210 /* Remove from ill_saved_ire_mp list if it is there */
17210 17211 mutex_enter(&ill->ill_saved_ire_lock);
17211 17212 for (mpp = &ill->ill_saved_ire_mp; *mpp != NULL;
17212 17213 mpp = &(*mpp)->b_cont) {
17213 17214 in6_addr_t gw_addr_v6;
17214 17215
17215 17216 /*
17216 17217 * On a given ill, the tuple of address, gateway, mask,
17217 17218 * ire_type, and zoneid is unique for each saved IRE.
17218 17219 */
17219 17220 mp = *mpp;
17220 17221 ifrt = (ifrt_t *)mp->b_rptr;
17221 17222 /* ire_gateway_addr_v6 can change - need lock */
17222 17223 mutex_enter(&ire->ire_lock);
17223 17224 gw_addr_v6 = ire->ire_gateway_addr_v6;
17224 17225 mutex_exit(&ire->ire_lock);
17225 17226
17226 17227 if (ifrt->ifrt_zoneid != ire->ire_zoneid ||
17227 17228 ifrt->ifrt_type != ire->ire_type)
17228 17229 continue;
17229 17230
17230 17231 if (ill->ill_isv6 ?
17231 17232 (IN6_ARE_ADDR_EQUAL(&ifrt->ifrt_v6addr,
17232 17233 &ire->ire_addr_v6) &&
17233 17234 IN6_ARE_ADDR_EQUAL(&ifrt->ifrt_v6gateway_addr,
17234 17235 &gw_addr_v6) &&
17235 17236 IN6_ARE_ADDR_EQUAL(&ifrt->ifrt_v6mask,
17236 17237 &ire->ire_mask_v6)) :
17237 17238 (ifrt->ifrt_addr == ire->ire_addr &&
17238 17239 ifrt->ifrt_gateway_addr == ire->ire_gateway_addr &&
17239 17240 ifrt->ifrt_mask == ire->ire_mask)) {
17240 17241 *mpp = mp->b_cont;
17241 17242 ill->ill_saved_ire_cnt--;
17242 17243 freeb(mp);
17243 17244 break;
17244 17245 }
17245 17246 }
17246 17247 mutex_exit(&ill->ill_saved_ire_lock);
17247 17248 }
17248 17249
17249 17250 /*
17250 17251 * IP multirouting broadcast routes handling
17251 17252 * Append CGTP broadcast IREs to regular ones created
17252 17253 * at ifconfig time.
17253 17254 * The usage is a route add <cgtp_bc> <nic_bc> -multirt i.e., both
17254 17255 * the destination and the gateway are broadcast addresses.
17255 17256 * The caller has verified that the destination is an IRE_BROADCAST and that
17256 17257 * RTF_MULTIRT was set. Here if the gateway is a broadcast address, then
17257 17258 * we create a MULTIRT IRE_BROADCAST.
17258 17259 * Note that the IRE_HOST created by ire_rt_add doesn't get found by anything
17259 17260 * since the IRE_BROADCAST takes precedence; ire_add_v4 does head insertion.
17260 17261 */
17261 17262 static void
17262 17263 ip_cgtp_bcast_add(ire_t *ire, ip_stack_t *ipst)
17263 17264 {
17264 17265 ire_t *ire_prim;
17265 17266
17266 17267 ASSERT(ire != NULL);
17267 17268
17268 17269 ire_prim = ire_ftable_lookup_v4(ire->ire_gateway_addr, 0, 0,
17269 17270 IRE_BROADCAST, NULL, ALL_ZONES, NULL, MATCH_IRE_TYPE, 0, ipst,
17270 17271 NULL);
17271 17272 if (ire_prim != NULL) {
17272 17273 /*
17273 17274 * We are in the special case of broadcasts for
17274 17275 * CGTP. We add an IRE_BROADCAST that holds
17275 17276 * the RTF_MULTIRT flag, the destination
17276 17277 * address and the low level
17277 17278 * info of ire_prim. In other words, CGTP
17278 17279 * broadcast is added to the redundant ipif.
17279 17280 */
17280 17281 ill_t *ill_prim;
17281 17282 ire_t *bcast_ire;
17282 17283
17283 17284 ill_prim = ire_prim->ire_ill;
17284 17285
17285 17286 ip2dbg(("ip_cgtp_filter_bcast_add: ire_prim %p, ill_prim %p\n",
17286 17287 (void *)ire_prim, (void *)ill_prim));
17287 17288
17288 17289 bcast_ire = ire_create(
17289 17290 (uchar_t *)&ire->ire_addr,
17290 17291 (uchar_t *)&ip_g_all_ones,
17291 17292 (uchar_t *)&ire->ire_gateway_addr,
17292 17293 IRE_BROADCAST,
17293 17294 ill_prim,
17294 17295 GLOBAL_ZONEID, /* CGTP is only for the global zone */
17295 17296 ire->ire_flags | RTF_KERNEL,
17296 17297 NULL,
17297 17298 ipst);
17298 17299
17299 17300 /*
17300 17301 * Here we assume that ire_add does head insertion so that
17301 17302 * the added IRE_BROADCAST comes before the existing IRE_HOST.
17302 17303 */
17303 17304 if (bcast_ire != NULL) {
17304 17305 if (ire->ire_flags & RTF_SETSRC) {
17305 17306 bcast_ire->ire_setsrc_addr =
17306 17307 ire->ire_setsrc_addr;
17307 17308 }
17308 17309 bcast_ire = ire_add(bcast_ire);
17309 17310 if (bcast_ire != NULL) {
17310 17311 ip2dbg(("ip_cgtp_filter_bcast_add: "
17311 17312 "added bcast_ire %p\n",
17312 17313 (void *)bcast_ire));
17313 17314
17314 17315 ill_save_ire(ill_prim, bcast_ire);
17315 17316 ire_refrele(bcast_ire);
17316 17317 }
17317 17318 }
17318 17319 ire_refrele(ire_prim);
17319 17320 }
17320 17321 }
17321 17322
17322 17323 /*
17323 17324 * IP multirouting broadcast routes handling
17324 17325 * Remove the broadcast ire.
17325 17326 * The usage is a route delete <cgtp_bc> <nic_bc> -multirt i.e., both
17326 17327 * the destination and the gateway are broadcast addresses.
17327 17328 * The caller has only verified that RTF_MULTIRT was set. We check
17328 17329 * that the destination is broadcast and that the gateway is a broadcast
17329 17330 * address, and if so delete the IRE added by ip_cgtp_bcast_add().
17330 17331 */
17331 17332 static void
17332 17333 ip_cgtp_bcast_delete(ire_t *ire, ip_stack_t *ipst)
17333 17334 {
17334 17335 ASSERT(ire != NULL);
17335 17336
17336 17337 if (ip_type_v4(ire->ire_addr, ipst) == IRE_BROADCAST) {
17337 17338 ire_t *ire_prim;
17338 17339
17339 17340 ire_prim = ire_ftable_lookup_v4(ire->ire_gateway_addr, 0, 0,
17340 17341 IRE_BROADCAST, NULL, ALL_ZONES, NULL, MATCH_IRE_TYPE, 0,
17341 17342 ipst, NULL);
17342 17343 if (ire_prim != NULL) {
17343 17344 ill_t *ill_prim;
17344 17345 ire_t *bcast_ire;
17345 17346
17346 17347 ill_prim = ire_prim->ire_ill;
17347 17348
17348 17349 ip2dbg(("ip_cgtp_filter_bcast_delete: "
17349 17350 "ire_prim %p, ill_prim %p\n",
17350 17351 (void *)ire_prim, (void *)ill_prim));
17351 17352
17352 17353 bcast_ire = ire_ftable_lookup_v4(ire->ire_addr, 0,
17353 17354 ire->ire_gateway_addr, IRE_BROADCAST,
17354 17355 ill_prim, ALL_ZONES, NULL,
17355 17356 MATCH_IRE_TYPE | MATCH_IRE_GW | MATCH_IRE_ILL |
17356 17357 MATCH_IRE_MASK, 0, ipst, NULL);
17357 17358
17358 17359 if (bcast_ire != NULL) {
17359 17360 ip2dbg(("ip_cgtp_filter_bcast_delete: "
17360 17361 "looked up bcast_ire %p\n",
17361 17362 (void *)bcast_ire));
17362 17363 ill_remove_saved_ire(bcast_ire->ire_ill,
17363 17364 bcast_ire);
17364 17365 ire_delete(bcast_ire);
17365 17366 ire_refrele(bcast_ire);
17366 17367 }
17367 17368 ire_refrele(ire_prim);
17368 17369 }
17369 17370 }
17370 17371 }
17371 17372
17372 17373 /*
17373 17374 * Derive an interface id from the link layer address.
17374 17375 * Knows about IEEE 802 and IEEE EUI-64 mappings.
17375 17376 */
17376 17377 static void
17377 17378 ip_ether_v6intfid(ill_t *ill, in6_addr_t *v6addr)
17378 17379 {
17379 17380 char *addr;
17380 17381
17381 17382 /*
17382 17383 * Note that some IPv6 interfaces get plumbed over links that claim to
17383 17384 * be DL_ETHER, but don't actually have Ethernet MAC addresses (e.g.
17384 17385 * PPP links). The ETHERADDRL check here ensures that we only set the
17385 17386 * interface ID on IPv6 interfaces above links that actually have real
17386 17387 * Ethernet addresses.
17387 17388 */
17388 17389 if (ill->ill_phys_addr_length == ETHERADDRL) {
17389 17390 /* Form EUI-64 like address */
17390 17391 addr = (char *)&v6addr->s6_addr32[2];
17391 17392 bcopy(ill->ill_phys_addr, addr, 3);
17392 17393 addr[0] ^= 0x2; /* Toggle Universal/Local bit */
17393 17394 addr[3] = (char)0xff;
17394 17395 addr[4] = (char)0xfe;
17395 17396 bcopy(ill->ill_phys_addr + 3, addr + 5, 3);
17396 17397 }
17397 17398 }
17398 17399
17399 17400 /* ARGSUSED */
17400 17401 static void
17401 17402 ip_nodef_v6intfid(ill_t *ill, in6_addr_t *v6addr)
17402 17403 {
17403 17404 }
17404 17405
17405 17406 typedef struct ipmp_ifcookie {
17406 17407 uint32_t ic_hostid;
17407 17408 char ic_ifname[LIFNAMSIZ];
17408 17409 char ic_zonename[ZONENAME_MAX];
17409 17410 } ipmp_ifcookie_t;
17410 17411
17411 17412 /*
17412 17413 * Construct a pseudo-random interface ID for the IPMP interface that's both
17413 17414 * predictable and (almost) guaranteed to be unique.
17414 17415 */
17415 17416 static void
17416 17417 ip_ipmp_v6intfid(ill_t *ill, in6_addr_t *v6addr)
17417 17418 {
17418 17419 zone_t *zp;
17419 17420 uint8_t *addr;
17420 17421 uchar_t hash[16];
17421 17422 ulong_t hostid;
17422 17423 MD5_CTX ctx;
17423 17424 ipmp_ifcookie_t ic = { 0 };
17424 17425
17425 17426 ASSERT(IS_IPMP(ill));
17426 17427
17427 17428 (void) ddi_strtoul(hw_serial, NULL, 10, &hostid);
17428 17429 ic.ic_hostid = htonl((uint32_t)hostid);
17429 17430
17430 17431 (void) strlcpy(ic.ic_ifname, ill->ill_name, LIFNAMSIZ);
17431 17432
17432 17433 if ((zp = zone_find_by_id(ill->ill_zoneid)) != NULL) {
17433 17434 (void) strlcpy(ic.ic_zonename, zp->zone_name, ZONENAME_MAX);
17434 17435 zone_rele(zp);
17435 17436 }
17436 17437
17437 17438 MD5Init(&ctx);
17438 17439 MD5Update(&ctx, &ic, sizeof (ic));
17439 17440 MD5Final(hash, &ctx);
17440 17441
17441 17442 /*
17442 17443 * Map the hash to an interface ID per the basic approach in RFC3041.
17443 17444 */
17444 17445 addr = &v6addr->s6_addr8[8];
17445 17446 bcopy(hash + 8, addr, sizeof (uint64_t));
17446 17447 addr[0] &= ~0x2; /* set local bit */
17447 17448 }
17448 17449
17449 17450 /*
17450 17451 * Map the multicast in6_addr_t in m_ip6addr to the physaddr for ethernet.
17451 17452 */
17452 17453 static void
17453 17454 ip_ether_v6_mapping(ill_t *ill, uchar_t *m_ip6addr, uchar_t *m_physaddr)
17454 17455 {
17455 17456 phyint_t *phyi = ill->ill_phyint;
17456 17457
17457 17458 /*
17458 17459 * Check PHYI_MULTI_BCAST and length of physical
17459 17460 * address to determine if we use the mapping or the
17460 17461 * broadcast address.
17461 17462 */
17462 17463 if ((phyi->phyint_flags & PHYI_MULTI_BCAST) != 0 ||
17463 17464 ill->ill_phys_addr_length != ETHERADDRL) {
17464 17465 ip_mbcast_mapping(ill, m_ip6addr, m_physaddr);
17465 17466 return;
17466 17467 }
17467 17468 m_physaddr[0] = 0x33;
17468 17469 m_physaddr[1] = 0x33;
17469 17470 m_physaddr[2] = m_ip6addr[12];
17470 17471 m_physaddr[3] = m_ip6addr[13];
17471 17472 m_physaddr[4] = m_ip6addr[14];
17472 17473 m_physaddr[5] = m_ip6addr[15];
17473 17474 }
17474 17475
17475 17476 /*
17476 17477 * Map the multicast ipaddr_t in m_ipaddr to the physaddr for ethernet.
17477 17478 */
17478 17479 static void
17479 17480 ip_ether_v4_mapping(ill_t *ill, uchar_t *m_ipaddr, uchar_t *m_physaddr)
17480 17481 {
17481 17482 phyint_t *phyi = ill->ill_phyint;
17482 17483
17483 17484 /*
17484 17485 * Check PHYI_MULTI_BCAST and length of physical
17485 17486 * address to determine if we use the mapping or the
17486 17487 * broadcast address.
17487 17488 */
17488 17489 if ((phyi->phyint_flags & PHYI_MULTI_BCAST) != 0 ||
17489 17490 ill->ill_phys_addr_length != ETHERADDRL) {
17490 17491 ip_mbcast_mapping(ill, m_ipaddr, m_physaddr);
17491 17492 return;
17492 17493 }
17493 17494 m_physaddr[0] = 0x01;
17494 17495 m_physaddr[1] = 0x00;
17495 17496 m_physaddr[2] = 0x5e;
17496 17497 m_physaddr[3] = m_ipaddr[1] & 0x7f;
17497 17498 m_physaddr[4] = m_ipaddr[2];
17498 17499 m_physaddr[5] = m_ipaddr[3];
17499 17500 }
17500 17501
17501 17502 /* ARGSUSED */
17502 17503 static void
17503 17504 ip_mbcast_mapping(ill_t *ill, uchar_t *m_ipaddr, uchar_t *m_physaddr)
17504 17505 {
17505 17506 /*
17506 17507 * for the MULTI_BCAST case and other cases when we want to
17507 17508 * use the link-layer broadcast address for multicast.
17508 17509 */
17509 17510 uint8_t *bphys_addr;
17510 17511 dl_unitdata_req_t *dlur;
17511 17512
17512 17513 dlur = (dl_unitdata_req_t *)ill->ill_bcast_mp->b_rptr;
17513 17514 if (ill->ill_sap_length < 0) {
17514 17515 bphys_addr = (uchar_t *)dlur +
17515 17516 dlur->dl_dest_addr_offset;
17516 17517 } else {
17517 17518 bphys_addr = (uchar_t *)dlur +
17518 17519 dlur->dl_dest_addr_offset + ill->ill_sap_length;
17519 17520 }
17520 17521
17521 17522 bcopy(bphys_addr, m_physaddr, ill->ill_phys_addr_length);
17522 17523 }
17523 17524
17524 17525 /*
17525 17526 * Derive IPoIB interface id from the link layer address.
17526 17527 */
17527 17528 static void
17528 17529 ip_ib_v6intfid(ill_t *ill, in6_addr_t *v6addr)
17529 17530 {
17530 17531 char *addr;
17531 17532
17532 17533 ASSERT(ill->ill_phys_addr_length == 20);
17533 17534 addr = (char *)&v6addr->s6_addr32[2];
17534 17535 bcopy(ill->ill_phys_addr + 12, addr, 8);
17535 17536 /*
17536 17537 * In IBA 1.1 timeframe, some vendors erroneously set the u/l bit
17537 17538 * in the globally assigned EUI-64 GUID to 1, in violation of IEEE
17538 17539 * rules. In these cases, the IBA considers these GUIDs to be in
17539 17540 * "Modified EUI-64" format, and thus toggling the u/l bit is not
17540 17541 * required; vendors are required not to assign global EUI-64's
17541 17542 * that differ only in u/l bit values, thus guaranteeing uniqueness
17542 17543 * of the interface identifier. Whether the GUID is in modified
17543 17544 * or proper EUI-64 format, the ipv6 identifier must have the u/l
17544 17545 * bit set to 1.
17545 17546 */
17546 17547 addr[0] |= 2; /* Set Universal/Local bit to 1 */
17547 17548 }
17548 17549
17549 17550 /*
17550 17551 * Map the multicast ipaddr_t in m_ipaddr to the physaddr for InfiniBand.
17551 17552 * Note on mapping from multicast IP addresses to IPoIB multicast link
17552 17553 * addresses. IPoIB multicast link addresses are based on IBA link addresses.
17553 17554 * The format of an IPoIB multicast address is:
17554 17555 *
17555 17556 * 4 byte QPN Scope Sign. Pkey
17556 17557 * +--------------------------------------------+
17557 17558 * | 00FFFFFF | FF | 1X | X01B | Pkey | GroupID |
17558 17559 * +--------------------------------------------+
17559 17560 *
17560 17561 * The Scope and Pkey components are properties of the IBA port and
17561 17562 * network interface. They can be ascertained from the broadcast address.
17562 17563 * The Sign. part is the signature, and is 401B for IPv4 and 601B for IPv6.
17563 17564 */
17564 17565 static void
17565 17566 ip_ib_v4_mapping(ill_t *ill, uchar_t *m_ipaddr, uchar_t *m_physaddr)
17566 17567 {
17567 17568 static uint8_t ipv4_g_phys_ibmulti_addr[] = { 0x00, 0xff, 0xff, 0xff,
17568 17569 0xff, 0x10, 0x40, 0x1b, 0x00, 0x00, 0x00, 0x00,
17569 17570 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
17570 17571 uint8_t *bphys_addr;
17571 17572 dl_unitdata_req_t *dlur;
17572 17573
17573 17574 bcopy(ipv4_g_phys_ibmulti_addr, m_physaddr, ill->ill_phys_addr_length);
17574 17575
17575 17576 /*
17576 17577 * RFC 4391: IPv4 MGID is 28-bit long.
17577 17578 */
17578 17579 m_physaddr[16] = m_ipaddr[0] & 0x0f;
17579 17580 m_physaddr[17] = m_ipaddr[1];
17580 17581 m_physaddr[18] = m_ipaddr[2];
17581 17582 m_physaddr[19] = m_ipaddr[3];
17582 17583
17583 17584
17584 17585 dlur = (dl_unitdata_req_t *)ill->ill_bcast_mp->b_rptr;
17585 17586 if (ill->ill_sap_length < 0) {
17586 17587 bphys_addr = (uchar_t *)dlur + dlur->dl_dest_addr_offset;
17587 17588 } else {
17588 17589 bphys_addr = (uchar_t *)dlur + dlur->dl_dest_addr_offset +
17589 17590 ill->ill_sap_length;
17590 17591 }
17591 17592 /*
17592 17593 * Now fill in the IBA scope/Pkey values from the broadcast address.
17593 17594 */
17594 17595 m_physaddr[5] = bphys_addr[5];
17595 17596 m_physaddr[8] = bphys_addr[8];
17596 17597 m_physaddr[9] = bphys_addr[9];
17597 17598 }
17598 17599
17599 17600 static void
17600 17601 ip_ib_v6_mapping(ill_t *ill, uchar_t *m_ipaddr, uchar_t *m_physaddr)
17601 17602 {
17602 17603 static uint8_t ipv4_g_phys_ibmulti_addr[] = { 0x00, 0xff, 0xff, 0xff,
17603 17604 0xff, 0x10, 0x60, 0x1b, 0x00, 0x00, 0x00, 0x00,
17604 17605 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
17605 17606 uint8_t *bphys_addr;
17606 17607 dl_unitdata_req_t *dlur;
17607 17608
17608 17609 bcopy(ipv4_g_phys_ibmulti_addr, m_physaddr, ill->ill_phys_addr_length);
17609 17610
17610 17611 /*
17611 17612 * RFC 4391: IPv4 MGID is 80-bit long.
17612 17613 */
17613 17614 bcopy(&m_ipaddr[6], &m_physaddr[10], 10);
17614 17615
17615 17616 dlur = (dl_unitdata_req_t *)ill->ill_bcast_mp->b_rptr;
17616 17617 if (ill->ill_sap_length < 0) {
17617 17618 bphys_addr = (uchar_t *)dlur + dlur->dl_dest_addr_offset;
17618 17619 } else {
17619 17620 bphys_addr = (uchar_t *)dlur + dlur->dl_dest_addr_offset +
17620 17621 ill->ill_sap_length;
17621 17622 }
17622 17623 /*
17623 17624 * Now fill in the IBA scope/Pkey values from the broadcast address.
17624 17625 */
17625 17626 m_physaddr[5] = bphys_addr[5];
17626 17627 m_physaddr[8] = bphys_addr[8];
17627 17628 m_physaddr[9] = bphys_addr[9];
17628 17629 }
17629 17630
17630 17631 /*
17631 17632 * Derive IPv6 interface id from an IPv4 link-layer address (e.g. from an IPv4
17632 17633 * tunnel). The IPv4 address simply get placed in the lower 4 bytes of the
17633 17634 * IPv6 interface id. This is a suggested mechanism described in section 3.7
17634 17635 * of RFC4213.
17635 17636 */
17636 17637 static void
17637 17638 ip_ipv4_genv6intfid(ill_t *ill, uint8_t *physaddr, in6_addr_t *v6addr)
17638 17639 {
17639 17640 ASSERT(ill->ill_phys_addr_length == sizeof (ipaddr_t));
17640 17641 v6addr->s6_addr32[2] = 0;
17641 17642 bcopy(physaddr, &v6addr->s6_addr32[3], sizeof (ipaddr_t));
17642 17643 }
17643 17644
17644 17645 /*
17645 17646 * Derive IPv6 interface id from an IPv6 link-layer address (e.g. from an IPv6
17646 17647 * tunnel). The lower 8 bytes of the IPv6 address simply become the interface
17647 17648 * id.
17648 17649 */
17649 17650 static void
17650 17651 ip_ipv6_genv6intfid(ill_t *ill, uint8_t *physaddr, in6_addr_t *v6addr)
17651 17652 {
17652 17653 in6_addr_t *v6lladdr = (in6_addr_t *)physaddr;
17653 17654
17654 17655 ASSERT(ill->ill_phys_addr_length == sizeof (in6_addr_t));
17655 17656 bcopy(&v6lladdr->s6_addr32[2], &v6addr->s6_addr32[2], 8);
17656 17657 }
17657 17658
17658 17659 static void
17659 17660 ip_ipv6_v6intfid(ill_t *ill, in6_addr_t *v6addr)
17660 17661 {
17661 17662 ip_ipv6_genv6intfid(ill, ill->ill_phys_addr, v6addr);
17662 17663 }
17663 17664
17664 17665 static void
17665 17666 ip_ipv6_v6destintfid(ill_t *ill, in6_addr_t *v6addr)
17666 17667 {
17667 17668 ip_ipv6_genv6intfid(ill, ill->ill_dest_addr, v6addr);
17668 17669 }
17669 17670
17670 17671 static void
17671 17672 ip_ipv4_v6intfid(ill_t *ill, in6_addr_t *v6addr)
17672 17673 {
17673 17674 ip_ipv4_genv6intfid(ill, ill->ill_phys_addr, v6addr);
17674 17675 }
17675 17676
17676 17677 static void
17677 17678 ip_ipv4_v6destintfid(ill_t *ill, in6_addr_t *v6addr)
17678 17679 {
17679 17680 ip_ipv4_genv6intfid(ill, ill->ill_dest_addr, v6addr);
17680 17681 }
17681 17682
17682 17683 /*
17683 17684 * Lookup an ill and verify that the zoneid has an ipif on that ill.
17684 17685 * Returns an held ill, or NULL.
17685 17686 */
17686 17687 ill_t *
17687 17688 ill_lookup_on_ifindex_zoneid(uint_t index, zoneid_t zoneid, boolean_t isv6,
17688 17689 ip_stack_t *ipst)
17689 17690 {
17690 17691 ill_t *ill;
17691 17692 ipif_t *ipif;
17692 17693
17693 17694 ill = ill_lookup_on_ifindex(index, isv6, ipst);
17694 17695 if (ill == NULL)
17695 17696 return (NULL);
17696 17697
17697 17698 mutex_enter(&ill->ill_lock);
17698 17699 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
17699 17700 if (IPIF_IS_CONDEMNED(ipif))
17700 17701 continue;
17701 17702 if (zoneid != ALL_ZONES && ipif->ipif_zoneid != zoneid &&
17702 17703 ipif->ipif_zoneid != ALL_ZONES)
17703 17704 continue;
17704 17705
17705 17706 mutex_exit(&ill->ill_lock);
17706 17707 return (ill);
17707 17708 }
17708 17709 mutex_exit(&ill->ill_lock);
17709 17710 ill_refrele(ill);
17710 17711 return (NULL);
17711 17712 }
17712 17713
17713 17714 /*
17714 17715 * Return a pointer to an ipif_t given a combination of (ill_idx,ipif_id)
17715 17716 * If a pointer to an ipif_t is returned then the caller will need to do
17716 17717 * an ill_refrele().
17717 17718 */
17718 17719 ipif_t *
17719 17720 ipif_getby_indexes(uint_t ifindex, uint_t lifidx, boolean_t isv6,
17720 17721 ip_stack_t *ipst)
17721 17722 {
17722 17723 ipif_t *ipif;
17723 17724 ill_t *ill;
17724 17725
17725 17726 ill = ill_lookup_on_ifindex(ifindex, isv6, ipst);
17726 17727 if (ill == NULL)
17727 17728 return (NULL);
17728 17729
17729 17730 mutex_enter(&ill->ill_lock);
17730 17731 if (ill->ill_state_flags & ILL_CONDEMNED) {
17731 17732 mutex_exit(&ill->ill_lock);
17732 17733 ill_refrele(ill);
17733 17734 return (NULL);
17734 17735 }
17735 17736
17736 17737 for (ipif = ill->ill_ipif; ipif != NULL; ipif = ipif->ipif_next) {
17737 17738 if (!IPIF_CAN_LOOKUP(ipif))
17738 17739 continue;
17739 17740 if (lifidx == ipif->ipif_id) {
17740 17741 ipif_refhold_locked(ipif);
17741 17742 break;
17742 17743 }
17743 17744 }
17744 17745
17745 17746 mutex_exit(&ill->ill_lock);
17746 17747 ill_refrele(ill);
17747 17748 return (ipif);
17748 17749 }
17749 17750
17750 17751 /*
17751 17752 * Set ill_inputfn based on the current know state.
17752 17753 * This needs to be called when any of the factors taken into
17753 17754 * account changes.
17754 17755 */
17755 17756 void
17756 17757 ill_set_inputfn(ill_t *ill)
17757 17758 {
17758 17759 ip_stack_t *ipst = ill->ill_ipst;
17759 17760
17760 17761 if (ill->ill_isv6) {
17761 17762 if (is_system_labeled())
17762 17763 ill->ill_inputfn = ill_input_full_v6;
17763 17764 else
17764 17765 ill->ill_inputfn = ill_input_short_v6;
17765 17766 } else {
17766 17767 if (is_system_labeled())
17767 17768 ill->ill_inputfn = ill_input_full_v4;
17768 17769 else if (ill->ill_dhcpinit != 0)
17769 17770 ill->ill_inputfn = ill_input_full_v4;
17770 17771 else if (ipst->ips_ipcl_proto_fanout_v4[IPPROTO_RSVP].connf_head
17771 17772 != NULL)
17772 17773 ill->ill_inputfn = ill_input_full_v4;
17773 17774 else if (ipst->ips_ip_cgtp_filter &&
17774 17775 ipst->ips_ip_cgtp_filter_ops != NULL)
17775 17776 ill->ill_inputfn = ill_input_full_v4;
17776 17777 else
17777 17778 ill->ill_inputfn = ill_input_short_v4;
17778 17779 }
17779 17780 }
17780 17781
17781 17782 /*
17782 17783 * Re-evaluate ill_inputfn for all the IPv4 ills.
17783 17784 * Used when RSVP and CGTP comes and goes.
17784 17785 */
17785 17786 void
17786 17787 ill_set_inputfn_all(ip_stack_t *ipst)
17787 17788 {
17788 17789 ill_walk_context_t ctx;
17789 17790 ill_t *ill;
17790 17791
17791 17792 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
17792 17793 ill = ILL_START_WALK_V4(&ctx, ipst);
17793 17794 for (; ill != NULL; ill = ill_next(&ctx, ill))
17794 17795 ill_set_inputfn(ill);
17795 17796
17796 17797 rw_exit(&ipst->ips_ill_g_lock);
17797 17798 }
17798 17799
17799 17800 /*
17800 17801 * Set the physical address information for `ill' to the contents of the
17801 17802 * dl_notify_ind_t pointed to by `mp'. Must be called as writer, and will be
17802 17803 * asynchronous if `ill' cannot immediately be quiesced -- in which case
17803 17804 * EINPROGRESS will be returned.
17804 17805 */
17805 17806 int
17806 17807 ill_set_phys_addr(ill_t *ill, mblk_t *mp)
17807 17808 {
17808 17809 ipsq_t *ipsq = ill->ill_phyint->phyint_ipsq;
17809 17810 dl_notify_ind_t *dlindp = (dl_notify_ind_t *)mp->b_rptr;
17810 17811
17811 17812 ASSERT(IAM_WRITER_IPSQ(ipsq));
17812 17813
17813 17814 if (dlindp->dl_data != DL_IPV6_LINK_LAYER_ADDR &&
17814 17815 dlindp->dl_data != DL_CURR_DEST_ADDR &&
17815 17816 dlindp->dl_data != DL_CURR_PHYS_ADDR) {
17816 17817 /* Changing DL_IPV6_TOKEN is not yet supported */
17817 17818 return (0);
17818 17819 }
17819 17820
17820 17821 /*
17821 17822 * We need to store up to two copies of `mp' in `ill'. Due to the
17822 17823 * design of ipsq_pending_mp_add(), we can't pass them as separate
17823 17824 * arguments to ill_set_phys_addr_tail(). Instead, chain them
17824 17825 * together here, then pull 'em apart in ill_set_phys_addr_tail().
17825 17826 */
17826 17827 if ((mp = copyb(mp)) == NULL || (mp->b_cont = copyb(mp)) == NULL) {
17827 17828 freemsg(mp);
17828 17829 return (ENOMEM);
17829 17830 }
17830 17831
17831 17832 ipsq_current_start(ipsq, ill->ill_ipif, 0);
17832 17833
17833 17834 /*
17834 17835 * Since we'll only do a logical down, we can't rely on ipif_down
17835 17836 * to turn on ILL_DOWN_IN_PROGRESS, or for the DL_BIND_ACK to reset
17836 17837 * ILL_DOWN_IN_PROGRESS. We instead manage this separately for this
17837 17838 * case, to quiesce ire's and nce's for ill_is_quiescent.
17838 17839 */
17839 17840 mutex_enter(&ill->ill_lock);
17840 17841 ill->ill_state_flags |= ILL_DOWN_IN_PROGRESS;
17841 17842 /* no more ire/nce addition allowed */
17842 17843 mutex_exit(&ill->ill_lock);
17843 17844
17844 17845 /*
17845 17846 * If we can quiesce the ill, then set the address. If not, then
17846 17847 * ill_set_phys_addr_tail() will be called from ipif_ill_refrele_tail().
17847 17848 */
17848 17849 ill_down_ipifs(ill, B_TRUE);
17849 17850 mutex_enter(&ill->ill_lock);
17850 17851 if (!ill_is_quiescent(ill)) {
17851 17852 /* call cannot fail since `conn_t *' argument is NULL */
17852 17853 (void) ipsq_pending_mp_add(NULL, ill->ill_ipif, ill->ill_rq,
17853 17854 mp, ILL_DOWN);
17854 17855 mutex_exit(&ill->ill_lock);
17855 17856 return (EINPROGRESS);
17856 17857 }
17857 17858 mutex_exit(&ill->ill_lock);
17858 17859
17859 17860 ill_set_phys_addr_tail(ipsq, ill->ill_rq, mp, NULL);
17860 17861 return (0);
17861 17862 }
17862 17863
17863 17864 /*
17864 17865 * When the allowed-ips link property is set on the datalink, IP receives a
17865 17866 * DL_NOTE_ALLOWED_IPS notification that is processed in ill_set_allowed_ips()
17866 17867 * to initialize the ill_allowed_ips[] array in the ill_t. This array is then
17867 17868 * used to vet addresses passed to ip_sioctl_addr() and to ensure that the
17868 17869 * only IP addresses configured on the ill_t are those in the ill_allowed_ips[]
17869 17870 * array.
17870 17871 */
17871 17872 void
17872 17873 ill_set_allowed_ips(ill_t *ill, mblk_t *mp)
17873 17874 {
17874 17875 ipsq_t *ipsq = ill->ill_phyint->phyint_ipsq;
17875 17876 dl_notify_ind_t *dlip = (dl_notify_ind_t *)mp->b_rptr;
17876 17877 mac_protect_t *mrp;
17877 17878 int i;
17878 17879
17879 17880 ASSERT(IAM_WRITER_IPSQ(ipsq));
17880 17881 mrp = (mac_protect_t *)&dlip[1];
17881 17882
17882 17883 if (mrp->mp_ipaddrcnt == 0) { /* reset allowed-ips */
17883 17884 kmem_free(ill->ill_allowed_ips,
17884 17885 ill->ill_allowed_ips_cnt * sizeof (in6_addr_t));
17885 17886 ill->ill_allowed_ips_cnt = 0;
17886 17887 ill->ill_allowed_ips = NULL;
17887 17888 mutex_enter(&ill->ill_phyint->phyint_lock);
17888 17889 ill->ill_phyint->phyint_flags &= ~PHYI_L3PROTECT;
17889 17890 mutex_exit(&ill->ill_phyint->phyint_lock);
17890 17891 return;
17891 17892 }
17892 17893
17893 17894 if (ill->ill_allowed_ips != NULL) {
17894 17895 kmem_free(ill->ill_allowed_ips,
17895 17896 ill->ill_allowed_ips_cnt * sizeof (in6_addr_t));
17896 17897 }
17897 17898 ill->ill_allowed_ips_cnt = mrp->mp_ipaddrcnt;
17898 17899 ill->ill_allowed_ips = kmem_alloc(
17899 17900 ill->ill_allowed_ips_cnt * sizeof (in6_addr_t), KM_SLEEP);
17900 17901 for (i = 0; i < mrp->mp_ipaddrcnt; i++)
17901 17902 ill->ill_allowed_ips[i] = mrp->mp_ipaddrs[i].ip_addr;
17902 17903
17903 17904 mutex_enter(&ill->ill_phyint->phyint_lock);
17904 17905 ill->ill_phyint->phyint_flags |= PHYI_L3PROTECT;
17905 17906 mutex_exit(&ill->ill_phyint->phyint_lock);
17906 17907 }
17907 17908
17908 17909 /*
17909 17910 * Once the ill associated with `q' has quiesced, set its physical address
17910 17911 * information to the values in `addrmp'. Note that two copies of `addrmp'
17911 17912 * are passed (linked by b_cont), since we sometimes need to save two distinct
17912 17913 * copies in the ill_t, and our context doesn't permit sleeping or allocation
17913 17914 * failure (we'll free the other copy if it's not needed). Since the ill_t
17914 17915 * is quiesced, we know any stale nce's with the old address information have
17915 17916 * already been removed, so we don't need to call nce_flush().
17916 17917 */
17917 17918 /* ARGSUSED */
17918 17919 static void
17919 17920 ill_set_phys_addr_tail(ipsq_t *ipsq, queue_t *q, mblk_t *addrmp, void *dummy)
17920 17921 {
17921 17922 ill_t *ill = q->q_ptr;
17922 17923 mblk_t *addrmp2 = unlinkb(addrmp);
17923 17924 dl_notify_ind_t *dlindp = (dl_notify_ind_t *)addrmp->b_rptr;
17924 17925 uint_t addrlen, addroff;
17925 17926 int status;
17926 17927
17927 17928 ASSERT(IAM_WRITER_IPSQ(ipsq));
17928 17929
17929 17930 addroff = dlindp->dl_addr_offset;
17930 17931 addrlen = dlindp->dl_addr_length - ABS(ill->ill_sap_length);
17931 17932
17932 17933 switch (dlindp->dl_data) {
17933 17934 case DL_IPV6_LINK_LAYER_ADDR:
17934 17935 ill_set_ndmp(ill, addrmp, addroff, addrlen);
17935 17936 freemsg(addrmp2);
17936 17937 break;
17937 17938
17938 17939 case DL_CURR_DEST_ADDR:
17939 17940 freemsg(ill->ill_dest_addr_mp);
17940 17941 ill->ill_dest_addr = addrmp->b_rptr + addroff;
17941 17942 ill->ill_dest_addr_mp = addrmp;
17942 17943 if (ill->ill_isv6) {
17943 17944 ill_setdesttoken(ill);
17944 17945 ipif_setdestlinklocal(ill->ill_ipif);
17945 17946 }
17946 17947 freemsg(addrmp2);
17947 17948 break;
17948 17949
17949 17950 case DL_CURR_PHYS_ADDR:
17950 17951 freemsg(ill->ill_phys_addr_mp);
17951 17952 ill->ill_phys_addr = addrmp->b_rptr + addroff;
17952 17953 ill->ill_phys_addr_mp = addrmp;
17953 17954 ill->ill_phys_addr_length = addrlen;
17954 17955 if (ill->ill_isv6)
17955 17956 ill_set_ndmp(ill, addrmp2, addroff, addrlen);
17956 17957 else
17957 17958 freemsg(addrmp2);
17958 17959 if (ill->ill_isv6) {
17959 17960 ill_setdefaulttoken(ill);
17960 17961 ipif_setlinklocal(ill->ill_ipif);
17961 17962 }
17962 17963 break;
17963 17964 default:
17964 17965 ASSERT(0);
17965 17966 }
17966 17967
17967 17968 /*
17968 17969 * reset ILL_DOWN_IN_PROGRESS so that we can successfully add ires
17969 17970 * as we bring the ipifs up again.
17970 17971 */
17971 17972 mutex_enter(&ill->ill_lock);
17972 17973 ill->ill_state_flags &= ~ILL_DOWN_IN_PROGRESS;
17973 17974 mutex_exit(&ill->ill_lock);
17974 17975 /*
17975 17976 * If there are ipifs to bring up, ill_up_ipifs() will return
17976 17977 * EINPROGRESS, and ipsq_current_finish() will be called by
17977 17978 * ip_rput_dlpi_writer() or arp_bringup_done() when the last ipif is
17978 17979 * brought up.
17979 17980 */
17980 17981 status = ill_up_ipifs(ill, q, addrmp);
17981 17982 if (status != EINPROGRESS)
17982 17983 ipsq_current_finish(ipsq);
17983 17984 }
17984 17985
17985 17986 /*
17986 17987 * Helper routine for setting the ill_nd_lla fields.
17987 17988 */
17988 17989 void
17989 17990 ill_set_ndmp(ill_t *ill, mblk_t *ndmp, uint_t addroff, uint_t addrlen)
17990 17991 {
17991 17992 freemsg(ill->ill_nd_lla_mp);
17992 17993 ill->ill_nd_lla = ndmp->b_rptr + addroff;
17993 17994 ill->ill_nd_lla_mp = ndmp;
17994 17995 ill->ill_nd_lla_len = addrlen;
17995 17996 }
17996 17997
17997 17998 /*
17998 17999 * Replumb the ill.
17999 18000 */
18000 18001 int
18001 18002 ill_replumb(ill_t *ill, mblk_t *mp)
18002 18003 {
18003 18004 ipsq_t *ipsq = ill->ill_phyint->phyint_ipsq;
18004 18005
18005 18006 ASSERT(IAM_WRITER_IPSQ(ipsq));
18006 18007
18007 18008 ipsq_current_start(ipsq, ill->ill_ipif, 0);
18008 18009
18009 18010 /*
18010 18011 * If we can quiesce the ill, then continue. If not, then
18011 18012 * ill_replumb_tail() will be called from ipif_ill_refrele_tail().
18012 18013 */
18013 18014 ill_down_ipifs(ill, B_FALSE);
18014 18015
18015 18016 mutex_enter(&ill->ill_lock);
18016 18017 if (!ill_is_quiescent(ill)) {
18017 18018 /* call cannot fail since `conn_t *' argument is NULL */
18018 18019 (void) ipsq_pending_mp_add(NULL, ill->ill_ipif, ill->ill_rq,
18019 18020 mp, ILL_DOWN);
18020 18021 mutex_exit(&ill->ill_lock);
18021 18022 return (EINPROGRESS);
18022 18023 }
18023 18024 mutex_exit(&ill->ill_lock);
18024 18025
18025 18026 ill_replumb_tail(ipsq, ill->ill_rq, mp, NULL);
18026 18027 return (0);
18027 18028 }
18028 18029
18029 18030 /* ARGSUSED */
18030 18031 static void
18031 18032 ill_replumb_tail(ipsq_t *ipsq, queue_t *q, mblk_t *mp, void *dummy)
18032 18033 {
18033 18034 ill_t *ill = q->q_ptr;
18034 18035 int err;
18035 18036 conn_t *connp = NULL;
18036 18037
18037 18038 ASSERT(IAM_WRITER_IPSQ(ipsq));
18038 18039 freemsg(ill->ill_replumb_mp);
18039 18040 ill->ill_replumb_mp = copyb(mp);
18040 18041
18041 18042 if (ill->ill_replumb_mp == NULL) {
18042 18043 /* out of memory */
18043 18044 ipsq_current_finish(ipsq);
18044 18045 return;
18045 18046 }
18046 18047
18047 18048 mutex_enter(&ill->ill_lock);
18048 18049 ill->ill_up_ipifs = ipsq_pending_mp_add(NULL, ill->ill_ipif,
18049 18050 ill->ill_rq, ill->ill_replumb_mp, 0);
18050 18051 mutex_exit(&ill->ill_lock);
18051 18052
18052 18053 if (!ill->ill_up_ipifs) {
18053 18054 /* already closing */
18054 18055 ipsq_current_finish(ipsq);
18055 18056 return;
18056 18057 }
18057 18058 ill->ill_replumbing = 1;
18058 18059 err = ill_down_ipifs_tail(ill);
18059 18060
18060 18061 /*
18061 18062 * Successfully quiesced and brought down the interface, now we send
18062 18063 * the DL_NOTE_REPLUMB_DONE message down to the driver. Reuse the
18063 18064 * DL_NOTE_REPLUMB message.
18064 18065 */
18065 18066 mp = mexchange(NULL, mp, sizeof (dl_notify_conf_t), M_PROTO,
18066 18067 DL_NOTIFY_CONF);
18067 18068 ASSERT(mp != NULL);
18068 18069 ((dl_notify_conf_t *)mp->b_rptr)->dl_notification =
18069 18070 DL_NOTE_REPLUMB_DONE;
18070 18071 ill_dlpi_send(ill, mp);
18071 18072
18072 18073 /*
18073 18074 * For IPv4, we would usually get EINPROGRESS because the ETHERTYPE_ARP
18074 18075 * streams have to be unbound. When all the DLPI exchanges are done,
18075 18076 * ipsq_current_finish() will be called by arp_bringup_done(). The
18076 18077 * remainder of ipif bringup via ill_up_ipifs() will also be done in
18077 18078 * arp_bringup_done().
18078 18079 */
18079 18080 ASSERT(ill->ill_replumb_mp != NULL);
18080 18081 if (err == EINPROGRESS)
18081 18082 return;
18082 18083 else
18083 18084 ill->ill_replumb_mp = ipsq_pending_mp_get(ipsq, &connp);
18084 18085 ASSERT(connp == NULL);
18085 18086 if (err == 0 && ill->ill_replumb_mp != NULL &&
18086 18087 ill_up_ipifs(ill, q, ill->ill_replumb_mp) == EINPROGRESS) {
18087 18088 return;
18088 18089 }
18089 18090 ipsq_current_finish(ipsq);
18090 18091 }
18091 18092
18092 18093 /*
18093 18094 * Issue ioctl `cmd' on `lh'; caller provides the initial payload in `buf'
18094 18095 * which is `bufsize' bytes. On success, zero is returned and `buf' updated
18095 18096 * as per the ioctl. On failure, an errno is returned.
18096 18097 */
18097 18098 static int
18098 18099 ip_ioctl(ldi_handle_t lh, int cmd, void *buf, uint_t bufsize, cred_t *cr)
18099 18100 {
18100 18101 int rval;
18101 18102 struct strioctl iocb;
18102 18103
18103 18104 iocb.ic_cmd = cmd;
18104 18105 iocb.ic_timout = 15;
18105 18106 iocb.ic_len = bufsize;
18106 18107 iocb.ic_dp = buf;
18107 18108
18108 18109 return (ldi_ioctl(lh, I_STR, (intptr_t)&iocb, FKIOCTL, cr, &rval));
18109 18110 }
18110 18111
18111 18112 /*
18112 18113 * Issue an SIOCGLIFCONF for address family `af' and store the result into a
18113 18114 * dynamically-allocated `lifcp' that will be `bufsizep' bytes on success.
18114 18115 */
18115 18116 static int
18116 18117 ip_lifconf_ioctl(ldi_handle_t lh, int af, struct lifconf *lifcp,
18117 18118 uint_t *bufsizep, cred_t *cr)
18118 18119 {
18119 18120 int err;
18120 18121 struct lifnum lifn;
18121 18122
18122 18123 bzero(&lifn, sizeof (lifn));
18123 18124 lifn.lifn_family = af;
18124 18125 lifn.lifn_flags = LIFC_UNDER_IPMP;
18125 18126
18126 18127 if ((err = ip_ioctl(lh, SIOCGLIFNUM, &lifn, sizeof (lifn), cr)) != 0)
18127 18128 return (err);
18128 18129
18129 18130 /*
18130 18131 * Pad the interface count to account for additional interfaces that
18131 18132 * may have been configured between the SIOCGLIFNUM and SIOCGLIFCONF.
18132 18133 */
18133 18134 lifn.lifn_count += 4;
18134 18135 bzero(lifcp, sizeof (*lifcp));
18135 18136 lifcp->lifc_flags = LIFC_UNDER_IPMP;
18136 18137 lifcp->lifc_family = af;
18137 18138 lifcp->lifc_len = *bufsizep = lifn.lifn_count * sizeof (struct lifreq);
18138 18139 lifcp->lifc_buf = kmem_zalloc(*bufsizep, KM_SLEEP);
18139 18140
18140 18141 err = ip_ioctl(lh, SIOCGLIFCONF, lifcp, sizeof (*lifcp), cr);
18141 18142 if (err != 0) {
18142 18143 kmem_free(lifcp->lifc_buf, *bufsizep);
18143 18144 return (err);
18144 18145 }
18145 18146
18146 18147 return (0);
18147 18148 }
18148 18149
18149 18150 /*
18150 18151 * Helper for ip_interface_cleanup() that removes the loopback interface.
18151 18152 */
18152 18153 static void
18153 18154 ip_loopback_removeif(ldi_handle_t lh, boolean_t isv6, cred_t *cr)
18154 18155 {
18155 18156 int err;
18156 18157 struct lifreq lifr;
18157 18158
18158 18159 bzero(&lifr, sizeof (lifr));
18159 18160 (void) strcpy(lifr.lifr_name, ipif_loopback_name);
18160 18161
18161 18162 /*
18162 18163 * Attempt to remove the interface. It may legitimately not exist
18163 18164 * (e.g. the zone administrator unplumbed it), so ignore ENXIO.
18164 18165 */
18165 18166 err = ip_ioctl(lh, SIOCLIFREMOVEIF, &lifr, sizeof (lifr), cr);
18166 18167 if (err != 0 && err != ENXIO) {
18167 18168 ip0dbg(("ip_loopback_removeif: IP%s SIOCLIFREMOVEIF failed: "
18168 18169 "error %d\n", isv6 ? "v6" : "v4", err));
18169 18170 }
18170 18171 }
18171 18172
18172 18173 /*
18173 18174 * Helper for ip_interface_cleanup() that ensures no IP interfaces are in IPMP
18174 18175 * groups and that IPMP data addresses are down. These conditions must be met
18175 18176 * so that IPMP interfaces can be I_PUNLINK'd, as per ip_sioctl_plink_ipmp().
18176 18177 */
18177 18178 static void
18178 18179 ip_ipmp_cleanup(ldi_handle_t lh, boolean_t isv6, cred_t *cr)
18179 18180 {
18180 18181 int af = isv6 ? AF_INET6 : AF_INET;
18181 18182 int i, nifs;
18182 18183 int err;
18183 18184 uint_t bufsize;
18184 18185 uint_t lifrsize = sizeof (struct lifreq);
18185 18186 struct lifconf lifc;
18186 18187 struct lifreq *lifrp;
18187 18188
18188 18189 if ((err = ip_lifconf_ioctl(lh, af, &lifc, &bufsize, cr)) != 0) {
18189 18190 cmn_err(CE_WARN, "ip_ipmp_cleanup: cannot get interface list "
18190 18191 "(error %d); any IPMP interfaces cannot be shutdown", err);
18191 18192 return;
18192 18193 }
18193 18194
18194 18195 nifs = lifc.lifc_len / lifrsize;
18195 18196 for (lifrp = lifc.lifc_req, i = 0; i < nifs; i++, lifrp++) {
18196 18197 err = ip_ioctl(lh, SIOCGLIFFLAGS, lifrp, lifrsize, cr);
18197 18198 if (err != 0) {
18198 18199 cmn_err(CE_WARN, "ip_ipmp_cleanup: %s: cannot get "
18199 18200 "flags: error %d", lifrp->lifr_name, err);
18200 18201 continue;
18201 18202 }
18202 18203
18203 18204 if (lifrp->lifr_flags & IFF_IPMP) {
18204 18205 if ((lifrp->lifr_flags & (IFF_UP|IFF_DUPLICATE)) == 0)
18205 18206 continue;
18206 18207
18207 18208 lifrp->lifr_flags &= ~IFF_UP;
18208 18209 err = ip_ioctl(lh, SIOCSLIFFLAGS, lifrp, lifrsize, cr);
18209 18210 if (err != 0) {
18210 18211 cmn_err(CE_WARN, "ip_ipmp_cleanup: %s: cannot "
18211 18212 "bring down (error %d); IPMP interface may "
18212 18213 "not be shutdown", lifrp->lifr_name, err);
18213 18214 }
18214 18215
18215 18216 /*
18216 18217 * Check if IFF_DUPLICATE is still set -- and if so,
18217 18218 * reset the address to clear it.
18218 18219 */
18219 18220 err = ip_ioctl(lh, SIOCGLIFFLAGS, lifrp, lifrsize, cr);
18220 18221 if (err != 0 || !(lifrp->lifr_flags & IFF_DUPLICATE))
18221 18222 continue;
18222 18223
18223 18224 err = ip_ioctl(lh, SIOCGLIFADDR, lifrp, lifrsize, cr);
18224 18225 if (err != 0 || (err = ip_ioctl(lh, SIOCGLIFADDR,
18225 18226 lifrp, lifrsize, cr)) != 0) {
18226 18227 cmn_err(CE_WARN, "ip_ipmp_cleanup: %s: cannot "
18227 18228 "reset DAD (error %d); IPMP interface may "
18228 18229 "not be shutdown", lifrp->lifr_name, err);
18229 18230 }
18230 18231 continue;
18231 18232 }
18232 18233
18233 18234 if (strchr(lifrp->lifr_name, IPIF_SEPARATOR_CHAR) == 0) {
18234 18235 lifrp->lifr_groupname[0] = '\0';
18235 18236 if ((err = ip_ioctl(lh, SIOCSLIFGROUPNAME, lifrp,
18236 18237 lifrsize, cr)) != 0) {
18237 18238 cmn_err(CE_WARN, "ip_ipmp_cleanup: %s: cannot "
18238 18239 "leave IPMP group (error %d); associated "
18239 18240 "IPMP interface may not be shutdown",
18240 18241 lifrp->lifr_name, err);
18241 18242 continue;
18242 18243 }
18243 18244 }
18244 18245 }
18245 18246
18246 18247 kmem_free(lifc.lifc_buf, bufsize);
18247 18248 }
18248 18249
18249 18250 #define UDPDEV "/devices/pseudo/udp@0:udp"
18250 18251 #define UDP6DEV "/devices/pseudo/udp6@0:udp6"
18251 18252
18252 18253 /*
18253 18254 * Remove the loopback interfaces and prep the IPMP interfaces to be torn down.
18254 18255 * Non-loopback interfaces are either I_LINK'd or I_PLINK'd; the former go away
18255 18256 * when the user-level processes in the zone are killed and the latter are
18256 18257 * cleaned up by str_stack_shutdown().
18257 18258 */
18258 18259 void
18259 18260 ip_interface_cleanup(ip_stack_t *ipst)
18260 18261 {
18261 18262 ldi_handle_t lh;
18262 18263 ldi_ident_t li;
18263 18264 cred_t *cr;
18264 18265 int err;
18265 18266 int i;
18266 18267 char *devs[] = { UDP6DEV, UDPDEV };
18267 18268 netstackid_t stackid = ipst->ips_netstack->netstack_stackid;
18268 18269
18269 18270 if ((err = ldi_ident_from_major(ddi_name_to_major("ip"), &li)) != 0) {
18270 18271 cmn_err(CE_WARN, "ip_interface_cleanup: cannot get ldi ident:"
18271 18272 " error %d", err);
18272 18273 return;
18273 18274 }
18274 18275
18275 18276 cr = zone_get_kcred(netstackid_to_zoneid(stackid));
18276 18277 ASSERT(cr != NULL);
18277 18278
18278 18279 /*
18279 18280 * NOTE: loop executes exactly twice and is hardcoded to know that the
18280 18281 * first iteration is IPv6. (Unrolling yields repetitious code, hence
18281 18282 * the loop.)
18282 18283 */
18283 18284 for (i = 0; i < 2; i++) {
18284 18285 err = ldi_open_by_name(devs[i], FREAD|FWRITE, cr, &lh, li);
18285 18286 if (err != 0) {
18286 18287 cmn_err(CE_WARN, "ip_interface_cleanup: cannot open %s:"
18287 18288 " error %d", devs[i], err);
18288 18289 continue;
18289 18290 }
18290 18291
18291 18292 ip_loopback_removeif(lh, i == 0, cr);
18292 18293 ip_ipmp_cleanup(lh, i == 0, cr);
18293 18294
18294 18295 (void) ldi_close(lh, FREAD|FWRITE, cr);
18295 18296 }
18296 18297
18297 18298 ldi_ident_release(li);
18298 18299 crfree(cr);
18299 18300 }
18300 18301
18301 18302 /*
18302 18303 * This needs to be in-sync with nic_event_t definition
18303 18304 */
18304 18305 static const char *
18305 18306 ill_hook_event2str(nic_event_t event)
18306 18307 {
18307 18308 switch (event) {
18308 18309 case NE_PLUMB:
18309 18310 return ("PLUMB");
18310 18311 case NE_UNPLUMB:
18311 18312 return ("UNPLUMB");
18312 18313 case NE_UP:
18313 18314 return ("UP");
18314 18315 case NE_DOWN:
18315 18316 return ("DOWN");
18316 18317 case NE_ADDRESS_CHANGE:
18317 18318 return ("ADDRESS_CHANGE");
18318 18319 case NE_LIF_UP:
18319 18320 return ("LIF_UP");
18320 18321 case NE_LIF_DOWN:
18321 18322 return ("LIF_DOWN");
18322 18323 case NE_IFINDEX_CHANGE:
18323 18324 return ("IFINDEX_CHANGE");
18324 18325 default:
18325 18326 return ("UNKNOWN");
18326 18327 }
18327 18328 }
18328 18329
18329 18330 void
18330 18331 ill_nic_event_dispatch(ill_t *ill, lif_if_t lif, nic_event_t event,
18331 18332 nic_event_data_t data, size_t datalen)
18332 18333 {
18333 18334 ip_stack_t *ipst = ill->ill_ipst;
18334 18335 hook_nic_event_int_t *info;
18335 18336 const char *str = NULL;
18336 18337
18337 18338 /* create a new nic event info */
18338 18339 if ((info = kmem_alloc(sizeof (*info), KM_NOSLEEP)) == NULL)
18339 18340 goto fail;
18340 18341
18341 18342 info->hnei_event.hne_nic = ill->ill_phyint->phyint_ifindex;
18342 18343 info->hnei_event.hne_lif = lif;
18343 18344 info->hnei_event.hne_event = event;
18344 18345 info->hnei_event.hne_protocol = ill->ill_isv6 ?
18345 18346 ipst->ips_ipv6_net_data : ipst->ips_ipv4_net_data;
18346 18347 info->hnei_event.hne_data = NULL;
18347 18348 info->hnei_event.hne_datalen = 0;
18348 18349 info->hnei_stackid = ipst->ips_netstack->netstack_stackid;
18349 18350
18350 18351 if (data != NULL && datalen != 0) {
18351 18352 info->hnei_event.hne_data = kmem_alloc(datalen, KM_NOSLEEP);
18352 18353 if (info->hnei_event.hne_data == NULL)
18353 18354 goto fail;
18354 18355 bcopy(data, info->hnei_event.hne_data, datalen);
18355 18356 info->hnei_event.hne_datalen = datalen;
18356 18357 }
18357 18358
18358 18359 if (ddi_taskq_dispatch(eventq_queue_nic, ip_ne_queue_func, info,
18359 18360 DDI_NOSLEEP) == DDI_SUCCESS)
18360 18361 return;
18361 18362
18362 18363 fail:
18363 18364 if (info != NULL) {
18364 18365 if (info->hnei_event.hne_data != NULL) {
18365 18366 kmem_free(info->hnei_event.hne_data,
18366 18367 info->hnei_event.hne_datalen);
18367 18368 }
18368 18369 kmem_free(info, sizeof (hook_nic_event_t));
18369 18370 }
18370 18371 str = ill_hook_event2str(event);
18371 18372 ip2dbg(("ill_nic_event_dispatch: could not dispatch %s nic event "
18372 18373 "information for %s (ENOMEM)\n", str, ill->ill_name));
18373 18374 }
18374 18375
18375 18376 static int
18376 18377 ipif_arp_up_done_tail(ipif_t *ipif, enum ip_resolver_action res_act)
18377 18378 {
18378 18379 int err = 0;
18379 18380 const in_addr_t *addr = NULL;
18380 18381 nce_t *nce = NULL;
18381 18382 ill_t *ill = ipif->ipif_ill;
18382 18383 ill_t *bound_ill;
18383 18384 boolean_t added_ipif = B_FALSE;
18384 18385 uint16_t state;
18385 18386 uint16_t flags;
18386 18387
18387 18388 DTRACE_PROBE3(ipif__downup, char *, "ipif_arp_up_done_tail",
18388 18389 ill_t *, ill, ipif_t *, ipif);
18389 18390 if (ipif->ipif_lcl_addr != INADDR_ANY) {
18390 18391 addr = &ipif->ipif_lcl_addr;
18391 18392 }
18392 18393
18393 18394 if ((ipif->ipif_flags & IPIF_UNNUMBERED) || addr == NULL) {
18394 18395 if (res_act != Res_act_initial)
18395 18396 return (EINVAL);
18396 18397 }
18397 18398
18398 18399 if (addr != NULL) {
18399 18400 ipmp_illgrp_t *illg = ill->ill_grp;
18400 18401
18401 18402 /* add unicast nce for the local addr */
18402 18403
18403 18404 if (IS_IPMP(ill)) {
18404 18405 /*
18405 18406 * If we're here via ipif_up(), then the ipif
18406 18407 * won't be bound yet -- add it to the group,
18407 18408 * which will bind it if possible. (We would
18408 18409 * add it in ipif_up(), but deleting on failure
18409 18410 * there is gruesome.) If we're here via
18410 18411 * ipmp_ill_bind_ipif(), then the ipif has
18411 18412 * already been added to the group and we
18412 18413 * just need to use the binding.
18413 18414 */
18414 18415 if ((bound_ill = ipmp_ipif_bound_ill(ipif)) == NULL) {
18415 18416 bound_ill = ipmp_illgrp_add_ipif(illg, ipif);
18416 18417 if (bound_ill == NULL) {
18417 18418 /*
18418 18419 * We couldn't bind the ipif to an ill
18419 18420 * yet, so we have nothing to publish.
18420 18421 * Mark the address as ready and return.
18421 18422 */
18422 18423 ipif->ipif_addr_ready = 1;
18423 18424 return (0);
18424 18425 }
18425 18426 added_ipif = B_TRUE;
18426 18427 }
18427 18428 } else {
18428 18429 bound_ill = ill;
18429 18430 }
18430 18431
18431 18432 flags = (NCE_F_MYADDR | NCE_F_PUBLISH | NCE_F_AUTHORITY |
18432 18433 NCE_F_NONUD);
18433 18434 /*
18434 18435 * If this is an initial bring-up (or the ipif was never
18435 18436 * completely brought up), do DAD. Otherwise, we're here
18436 18437 * because IPMP has rebound an address to this ill: send
18437 18438 * unsolicited advertisements (ARP announcements) to
18438 18439 * inform others.
18439 18440 */
18440 18441 if (res_act == Res_act_initial || !ipif->ipif_addr_ready) {
18441 18442 state = ND_UNCHANGED; /* compute in nce_add_common() */
18442 18443 } else {
18443 18444 state = ND_REACHABLE;
18444 18445 flags |= NCE_F_UNSOL_ADV;
18445 18446 }
18446 18447
18447 18448 retry:
18448 18449 err = nce_lookup_then_add_v4(ill,
18449 18450 bound_ill->ill_phys_addr, bound_ill->ill_phys_addr_length,
18450 18451 addr, flags, state, &nce);
18451 18452
18452 18453 /*
18453 18454 * note that we may encounter EEXIST if we are moving
18454 18455 * the nce as a result of a rebind operation.
18455 18456 */
18456 18457 switch (err) {
18457 18458 case 0:
18458 18459 ipif->ipif_added_nce = 1;
18459 18460 nce->nce_ipif_cnt++;
18460 18461 break;
18461 18462 case EEXIST:
18462 18463 ip1dbg(("ipif_arp_up: NCE already exists for %s\n",
18463 18464 ill->ill_name));
18464 18465 if (!NCE_MYADDR(nce->nce_common)) {
18465 18466 /*
18466 18467 * A leftover nce from before this address
18467 18468 * existed
18468 18469 */
18469 18470 ncec_delete(nce->nce_common);
18470 18471 nce_refrele(nce);
18471 18472 nce = NULL;
18472 18473 goto retry;
18473 18474 }
18474 18475 if ((ipif->ipif_flags & IPIF_POINTOPOINT) == 0) {
18475 18476 nce_refrele(nce);
18476 18477 nce = NULL;
18477 18478 ip1dbg(("ipif_arp_up: NCE already exists "
18478 18479 "for %s:%u\n", ill->ill_name,
18479 18480 ipif->ipif_id));
18480 18481 goto arp_up_done;
18481 18482 }
18482 18483 /*
18483 18484 * Duplicate local addresses are permissible for
18484 18485 * IPIF_POINTOPOINT interfaces which will get marked
18485 18486 * IPIF_UNNUMBERED later in
18486 18487 * ip_addr_availability_check().
18487 18488 *
18488 18489 * The nce_ipif_cnt field tracks the number of
18489 18490 * ipifs that have nce_addr as their local address.
18490 18491 */
18491 18492 ipif->ipif_addr_ready = 1;
18492 18493 ipif->ipif_added_nce = 1;
18493 18494 nce->nce_ipif_cnt++;
18494 18495 err = 0;
18495 18496 break;
18496 18497 default:
18497 18498 ASSERT(nce == NULL);
18498 18499 goto arp_up_done;
18499 18500 }
18500 18501 if (arp_no_defense) {
18501 18502 if ((ipif->ipif_flags & IPIF_UP) &&
18502 18503 !ipif->ipif_addr_ready)
18503 18504 ipif_up_notify(ipif);
18504 18505 ipif->ipif_addr_ready = 1;
18505 18506 }
18506 18507 } else {
18507 18508 /* zero address. nothing to publish */
18508 18509 ipif->ipif_addr_ready = 1;
18509 18510 }
18510 18511 if (nce != NULL)
18511 18512 nce_refrele(nce);
18512 18513 arp_up_done:
18513 18514 if (added_ipif && err != 0)
18514 18515 ipmp_illgrp_del_ipif(ill->ill_grp, ipif);
18515 18516 return (err);
18516 18517 }
18517 18518
18518 18519 int
18519 18520 ipif_arp_up(ipif_t *ipif, enum ip_resolver_action res_act, boolean_t was_dup)
18520 18521 {
18521 18522 int err = 0;
18522 18523 ill_t *ill = ipif->ipif_ill;
18523 18524 boolean_t first_interface, wait_for_dlpi = B_FALSE;
18524 18525
18525 18526 DTRACE_PROBE3(ipif__downup, char *, "ipif_arp_up",
18526 18527 ill_t *, ill, ipif_t *, ipif);
18527 18528
18528 18529 /*
18529 18530 * need to bring up ARP or setup mcast mapping only
18530 18531 * when the first interface is coming UP.
18531 18532 */
18532 18533 first_interface = (ill->ill_ipif_up_count == 0 &&
18533 18534 ill->ill_ipif_dup_count == 0 && !was_dup);
18534 18535
18535 18536 if (res_act == Res_act_initial && first_interface) {
18536 18537 /*
18537 18538 * Send ATTACH + BIND
18538 18539 */
18539 18540 err = arp_ll_up(ill);
18540 18541 if (err != EINPROGRESS && err != 0)
18541 18542 return (err);
18542 18543
18543 18544 /*
18544 18545 * Add NCE for local address. Start DAD.
18545 18546 * we'll wait to hear that DAD has finished
18546 18547 * before using the interface.
18547 18548 */
18548 18549 if (err == EINPROGRESS)
18549 18550 wait_for_dlpi = B_TRUE;
18550 18551 }
18551 18552
18552 18553 if (!wait_for_dlpi)
18553 18554 (void) ipif_arp_up_done_tail(ipif, res_act);
18554 18555
18555 18556 return (!wait_for_dlpi ? 0 : EINPROGRESS);
18556 18557 }
18557 18558
18558 18559 /*
18559 18560 * Finish processing of "arp_up" after all the DLPI message
18560 18561 * exchanges have completed between arp and the driver.
18561 18562 */
18562 18563 void
18563 18564 arp_bringup_done(ill_t *ill, int err)
18564 18565 {
18565 18566 mblk_t *mp1;
18566 18567 ipif_t *ipif;
18567 18568 conn_t *connp = NULL;
18568 18569 ipsq_t *ipsq;
18569 18570 queue_t *q;
18570 18571
18571 18572 ip1dbg(("arp_bringup_done(%s)\n", ill->ill_name));
18572 18573
18573 18574 ASSERT(IAM_WRITER_ILL(ill));
18574 18575
18575 18576 ipsq = ill->ill_phyint->phyint_ipsq;
18576 18577 ipif = ipsq->ipsq_xop->ipx_pending_ipif;
18577 18578 mp1 = ipsq_pending_mp_get(ipsq, &connp);
18578 18579 ASSERT(!((mp1 != NULL) ^ (ipif != NULL)));
18579 18580 if (mp1 == NULL) /* bringup was aborted by the user */
18580 18581 return;
18581 18582
18582 18583 /*
18583 18584 * If an IOCTL is waiting on this (ipsq_current_ioctl != 0), then we
18584 18585 * must have an associated conn_t. Otherwise, we're bringing this
18585 18586 * interface back up as part of handling an asynchronous event (e.g.,
18586 18587 * physical address change).
18587 18588 */
18588 18589 if (ipsq->ipsq_xop->ipx_current_ioctl != 0) {
18589 18590 ASSERT(connp != NULL);
18590 18591 q = CONNP_TO_WQ(connp);
18591 18592 } else {
18592 18593 ASSERT(connp == NULL);
18593 18594 q = ill->ill_rq;
18594 18595 }
18595 18596 if (err == 0) {
18596 18597 if (ipif->ipif_isv6) {
18597 18598 if ((err = ipif_up_done_v6(ipif)) != 0)
18598 18599 ip0dbg(("arp_bringup_done: init failed\n"));
18599 18600 } else {
18600 18601 err = ipif_arp_up_done_tail(ipif, Res_act_initial);
18601 18602 if (err != 0 ||
18602 18603 (err = ipif_up_done(ipif)) != 0) {
18603 18604 ip0dbg(("arp_bringup_done: "
18604 18605 "init failed err %x\n", err));
18605 18606 (void) ipif_arp_down(ipif);
18606 18607 }
18607 18608
18608 18609 }
18609 18610 } else {
18610 18611 ip0dbg(("arp_bringup_done: DL_BIND_REQ failed\n"));
18611 18612 }
18612 18613
18613 18614 if ((err == 0) && (ill->ill_up_ipifs)) {
18614 18615 err = ill_up_ipifs(ill, q, mp1);
18615 18616 if (err == EINPROGRESS)
18616 18617 return;
18617 18618 }
18618 18619
18619 18620 /*
18620 18621 * If we have a moved ipif to bring up, and everything has succeeded
18621 18622 * to this point, bring it up on the IPMP ill. Otherwise, leave it
18622 18623 * down -- the admin can try to bring it up by hand if need be.
18623 18624 */
18624 18625 if (ill->ill_move_ipif != NULL) {
18625 18626 ipif = ill->ill_move_ipif;
18626 18627 ip1dbg(("bringing up ipif %p on ill %s\n", (void *)ipif,
18627 18628 ipif->ipif_ill->ill_name));
18628 18629 ill->ill_move_ipif = NULL;
18629 18630 if (err == 0) {
18630 18631 err = ipif_up(ipif, q, mp1);
18631 18632 if (err == EINPROGRESS)
18632 18633 return;
18633 18634 }
18634 18635 }
18635 18636
18636 18637 /*
18637 18638 * The operation must complete without EINPROGRESS since
18638 18639 * ipsq_pending_mp_get() has removed the mblk from ipsq_pending_mp.
18639 18640 * Otherwise, the operation will be stuck forever in the ipsq.
18640 18641 */
18641 18642 ASSERT(err != EINPROGRESS);
18642 18643 if (ipsq->ipsq_xop->ipx_current_ioctl != 0) {
18643 18644 DTRACE_PROBE4(ipif__ioctl, char *, "arp_bringup_done finish",
18644 18645 int, ipsq->ipsq_xop->ipx_current_ioctl,
18645 18646 ill_t *, ill, ipif_t *, ipif);
18646 18647 ip_ioctl_finish(q, mp1, err, NO_COPYOUT, ipsq);
18647 18648 } else {
18648 18649 ipsq_current_finish(ipsq);
18649 18650 }
18650 18651 }
18651 18652
18652 18653 /*
18653 18654 * Finish processing of arp replumb after all the DLPI message
18654 18655 * exchanges have completed between arp and the driver.
18655 18656 */
18656 18657 void
18657 18658 arp_replumb_done(ill_t *ill, int err)
18658 18659 {
18659 18660 mblk_t *mp1;
18660 18661 ipif_t *ipif;
18661 18662 conn_t *connp = NULL;
18662 18663 ipsq_t *ipsq;
18663 18664 queue_t *q;
18664 18665
18665 18666 ASSERT(IAM_WRITER_ILL(ill));
18666 18667
18667 18668 ipsq = ill->ill_phyint->phyint_ipsq;
18668 18669 ipif = ipsq->ipsq_xop->ipx_pending_ipif;
18669 18670 mp1 = ipsq_pending_mp_get(ipsq, &connp);
18670 18671 ASSERT(!((mp1 != NULL) ^ (ipif != NULL)));
18671 18672 if (mp1 == NULL) {
18672 18673 ip0dbg(("arp_replumb_done: bringup aborted ioctl %x\n",
18673 18674 ipsq->ipsq_xop->ipx_current_ioctl));
18674 18675 /* bringup was aborted by the user */
18675 18676 return;
18676 18677 }
18677 18678 /*
18678 18679 * If an IOCTL is waiting on this (ipsq_current_ioctl != 0), then we
18679 18680 * must have an associated conn_t. Otherwise, we're bringing this
18680 18681 * interface back up as part of handling an asynchronous event (e.g.,
18681 18682 * physical address change).
18682 18683 */
18683 18684 if (ipsq->ipsq_xop->ipx_current_ioctl != 0) {
18684 18685 ASSERT(connp != NULL);
18685 18686 q = CONNP_TO_WQ(connp);
18686 18687 } else {
18687 18688 ASSERT(connp == NULL);
18688 18689 q = ill->ill_rq;
18689 18690 }
18690 18691 if ((err == 0) && (ill->ill_up_ipifs)) {
18691 18692 err = ill_up_ipifs(ill, q, mp1);
18692 18693 if (err == EINPROGRESS)
18693 18694 return;
18694 18695 }
18695 18696 /*
18696 18697 * The operation must complete without EINPROGRESS since
18697 18698 * ipsq_pending_mp_get() has removed the mblk from ipsq_pending_mp.
18698 18699 * Otherwise, the operation will be stuck forever in the ipsq.
18699 18700 */
18700 18701 ASSERT(err != EINPROGRESS);
18701 18702 if (ipsq->ipsq_xop->ipx_current_ioctl != 0) {
18702 18703 DTRACE_PROBE4(ipif__ioctl, char *,
18703 18704 "arp_replumb_done finish",
18704 18705 int, ipsq->ipsq_xop->ipx_current_ioctl,
18705 18706 ill_t *, ill, ipif_t *, ipif);
18706 18707 ip_ioctl_finish(q, mp1, err, NO_COPYOUT, ipsq);
18707 18708 } else {
18708 18709 ipsq_current_finish(ipsq);
18709 18710 }
18710 18711 }
18711 18712
18712 18713 void
18713 18714 ipif_up_notify(ipif_t *ipif)
18714 18715 {
18715 18716 ip_rts_ifmsg(ipif, RTSQ_DEFAULT);
18716 18717 ip_rts_newaddrmsg(RTM_ADD, 0, ipif, RTSQ_DEFAULT);
18717 18718 sctp_update_ipif(ipif, SCTP_IPIF_UP);
18718 18719 ill_nic_event_dispatch(ipif->ipif_ill, MAP_IPIF_ID(ipif->ipif_id),
18719 18720 NE_LIF_UP, NULL, 0);
18720 18721 }
18721 18722
18722 18723 /*
18723 18724 * ILB ioctl uses cv_wait (such as deleting a rule or adding a server) and
18724 18725 * this assumes the context is cv_wait'able. Hence it shouldnt' be used on
18725 18726 * TPI end points with STREAMS modules pushed above. This is assured by not
18726 18727 * having the IPI_MODOK flag for the ioctl. And IP ensures the ILB ioctl
18727 18728 * never ends up on an ipsq, otherwise we may end up processing the ioctl
18728 18729 * while unwinding from the ispq and that could be a thread from the bottom.
18729 18730 */
18730 18731 /* ARGSUSED */
18731 18732 int
18732 18733 ip_sioctl_ilb_cmd(ipif_t *ipif, sin_t *sin, queue_t *q, mblk_t *mp,
18733 18734 ip_ioctl_cmd_t *ipip, void *arg)
18734 18735 {
18735 18736 mblk_t *cmd_mp = mp->b_cont->b_cont;
18736 18737 ilb_cmd_t command = *((ilb_cmd_t *)cmd_mp->b_rptr);
18737 18738 int ret = 0;
18738 18739 int i;
18739 18740 size_t size;
18740 18741 ip_stack_t *ipst;
18741 18742 zoneid_t zoneid;
18742 18743 ilb_stack_t *ilbs;
18743 18744
18744 18745 ipst = CONNQ_TO_IPST(q);
18745 18746 ilbs = ipst->ips_netstack->netstack_ilb;
18746 18747 zoneid = Q_TO_CONN(q)->conn_zoneid;
18747 18748
18748 18749 switch (command) {
18749 18750 case ILB_CREATE_RULE: {
18750 18751 ilb_rule_cmd_t *cmd = (ilb_rule_cmd_t *)cmd_mp->b_rptr;
18751 18752
18752 18753 if (MBLKL(cmd_mp) != sizeof (ilb_rule_cmd_t)) {
18753 18754 ret = EINVAL;
18754 18755 break;
18755 18756 }
18756 18757
18757 18758 ret = ilb_rule_add(ilbs, zoneid, cmd);
18758 18759 break;
18759 18760 }
18760 18761 case ILB_DESTROY_RULE:
18761 18762 case ILB_ENABLE_RULE:
18762 18763 case ILB_DISABLE_RULE: {
18763 18764 ilb_name_cmd_t *cmd = (ilb_name_cmd_t *)cmd_mp->b_rptr;
18764 18765
18765 18766 if (MBLKL(cmd_mp) != sizeof (ilb_name_cmd_t)) {
18766 18767 ret = EINVAL;
18767 18768 break;
18768 18769 }
18769 18770
18770 18771 if (cmd->flags & ILB_RULE_ALLRULES) {
18771 18772 if (command == ILB_DESTROY_RULE) {
18772 18773 ilb_rule_del_all(ilbs, zoneid);
18773 18774 break;
18774 18775 } else if (command == ILB_ENABLE_RULE) {
18775 18776 ilb_rule_enable_all(ilbs, zoneid);
18776 18777 break;
18777 18778 } else if (command == ILB_DISABLE_RULE) {
18778 18779 ilb_rule_disable_all(ilbs, zoneid);
18779 18780 break;
18780 18781 }
18781 18782 } else {
18782 18783 if (command == ILB_DESTROY_RULE) {
18783 18784 ret = ilb_rule_del(ilbs, zoneid, cmd->name);
18784 18785 } else if (command == ILB_ENABLE_RULE) {
18785 18786 ret = ilb_rule_enable(ilbs, zoneid, cmd->name,
18786 18787 NULL);
18787 18788 } else if (command == ILB_DISABLE_RULE) {
18788 18789 ret = ilb_rule_disable(ilbs, zoneid, cmd->name,
18789 18790 NULL);
18790 18791 }
18791 18792 }
18792 18793 break;
18793 18794 }
18794 18795 case ILB_NUM_RULES: {
18795 18796 ilb_num_rules_cmd_t *cmd;
18796 18797
18797 18798 if (MBLKL(cmd_mp) != sizeof (ilb_num_rules_cmd_t)) {
18798 18799 ret = EINVAL;
18799 18800 break;
18800 18801 }
18801 18802 cmd = (ilb_num_rules_cmd_t *)cmd_mp->b_rptr;
18802 18803 ilb_get_num_rules(ilbs, zoneid, &(cmd->num));
18803 18804 break;
18804 18805 }
18805 18806 case ILB_RULE_NAMES: {
18806 18807 ilb_rule_names_cmd_t *cmd;
18807 18808
18808 18809 cmd = (ilb_rule_names_cmd_t *)cmd_mp->b_rptr;
18809 18810 if (MBLKL(cmd_mp) < sizeof (ilb_rule_names_cmd_t) ||
18810 18811 cmd->num_names == 0) {
18811 18812 ret = EINVAL;
18812 18813 break;
18813 18814 }
18814 18815 size = cmd->num_names * ILB_RULE_NAMESZ;
18815 18816 if (cmd_mp->b_rptr + offsetof(ilb_rule_names_cmd_t, buf) +
18816 18817 size != cmd_mp->b_wptr) {
18817 18818 ret = EINVAL;
18818 18819 break;
18819 18820 }
18820 18821 ilb_get_rulenames(ilbs, zoneid, &cmd->num_names, cmd->buf);
18821 18822 break;
18822 18823 }
18823 18824 case ILB_NUM_SERVERS: {
18824 18825 ilb_num_servers_cmd_t *cmd;
18825 18826
18826 18827 if (MBLKL(cmd_mp) != sizeof (ilb_num_servers_cmd_t)) {
18827 18828 ret = EINVAL;
18828 18829 break;
18829 18830 }
18830 18831 cmd = (ilb_num_servers_cmd_t *)cmd_mp->b_rptr;
18831 18832 ret = ilb_get_num_servers(ilbs, zoneid, cmd->name,
18832 18833 &(cmd->num));
18833 18834 break;
18834 18835 }
18835 18836 case ILB_LIST_RULE: {
18836 18837 ilb_rule_cmd_t *cmd = (ilb_rule_cmd_t *)cmd_mp->b_rptr;
18837 18838
18838 18839 if (MBLKL(cmd_mp) != sizeof (ilb_rule_cmd_t)) {
18839 18840 ret = EINVAL;
18840 18841 break;
18841 18842 }
18842 18843 ret = ilb_rule_list(ilbs, zoneid, cmd);
18843 18844 break;
18844 18845 }
18845 18846 case ILB_LIST_SERVERS: {
18846 18847 ilb_servers_info_cmd_t *cmd;
18847 18848
18848 18849 cmd = (ilb_servers_info_cmd_t *)cmd_mp->b_rptr;
18849 18850 if (MBLKL(cmd_mp) < sizeof (ilb_servers_info_cmd_t) ||
18850 18851 cmd->num_servers == 0) {
18851 18852 ret = EINVAL;
18852 18853 break;
18853 18854 }
18854 18855 size = cmd->num_servers * sizeof (ilb_server_info_t);
18855 18856 if (cmd_mp->b_rptr + offsetof(ilb_servers_info_cmd_t, servers) +
18856 18857 size != cmd_mp->b_wptr) {
18857 18858 ret = EINVAL;
18858 18859 break;
18859 18860 }
18860 18861
18861 18862 ret = ilb_get_servers(ilbs, zoneid, cmd->name, cmd->servers,
18862 18863 &cmd->num_servers);
18863 18864 break;
18864 18865 }
18865 18866 case ILB_ADD_SERVERS: {
18866 18867 ilb_servers_info_cmd_t *cmd;
18867 18868 ilb_rule_t *rule;
18868 18869
18869 18870 cmd = (ilb_servers_info_cmd_t *)cmd_mp->b_rptr;
18870 18871 if (MBLKL(cmd_mp) < sizeof (ilb_servers_info_cmd_t)) {
18871 18872 ret = EINVAL;
18872 18873 break;
18873 18874 }
18874 18875 size = cmd->num_servers * sizeof (ilb_server_info_t);
18875 18876 if (cmd_mp->b_rptr + offsetof(ilb_servers_info_cmd_t, servers) +
18876 18877 size != cmd_mp->b_wptr) {
18877 18878 ret = EINVAL;
18878 18879 break;
18879 18880 }
18880 18881 rule = ilb_find_rule(ilbs, zoneid, cmd->name, &ret);
18881 18882 if (rule == NULL) {
18882 18883 ASSERT(ret != 0);
18883 18884 break;
18884 18885 }
18885 18886 for (i = 0; i < cmd->num_servers; i++) {
18886 18887 ilb_server_info_t *s;
18887 18888
18888 18889 s = &cmd->servers[i];
18889 18890 s->err = ilb_server_add(ilbs, rule, s);
18890 18891 }
18891 18892 ILB_RULE_REFRELE(rule);
18892 18893 break;
18893 18894 }
18894 18895 case ILB_DEL_SERVERS:
18895 18896 case ILB_ENABLE_SERVERS:
18896 18897 case ILB_DISABLE_SERVERS: {
18897 18898 ilb_servers_cmd_t *cmd;
18898 18899 ilb_rule_t *rule;
18899 18900 int (*f)();
18900 18901
18901 18902 cmd = (ilb_servers_cmd_t *)cmd_mp->b_rptr;
18902 18903 if (MBLKL(cmd_mp) < sizeof (ilb_servers_cmd_t)) {
18903 18904 ret = EINVAL;
18904 18905 break;
18905 18906 }
18906 18907 size = cmd->num_servers * sizeof (ilb_server_arg_t);
18907 18908 if (cmd_mp->b_rptr + offsetof(ilb_servers_cmd_t, servers) +
18908 18909 size != cmd_mp->b_wptr) {
18909 18910 ret = EINVAL;
18910 18911 break;
18911 18912 }
18912 18913
18913 18914 if (command == ILB_DEL_SERVERS)
18914 18915 f = ilb_server_del;
18915 18916 else if (command == ILB_ENABLE_SERVERS)
18916 18917 f = ilb_server_enable;
18917 18918 else if (command == ILB_DISABLE_SERVERS)
18918 18919 f = ilb_server_disable;
18919 18920
18920 18921 rule = ilb_find_rule(ilbs, zoneid, cmd->name, &ret);
18921 18922 if (rule == NULL) {
18922 18923 ASSERT(ret != 0);
18923 18924 break;
18924 18925 }
18925 18926
18926 18927 for (i = 0; i < cmd->num_servers; i++) {
18927 18928 ilb_server_arg_t *s;
18928 18929
18929 18930 s = &cmd->servers[i];
18930 18931 s->err = f(ilbs, zoneid, NULL, rule, &s->addr);
18931 18932 }
18932 18933 ILB_RULE_REFRELE(rule);
18933 18934 break;
18934 18935 }
18935 18936 case ILB_LIST_NAT_TABLE: {
18936 18937 ilb_list_nat_cmd_t *cmd;
18937 18938
18938 18939 cmd = (ilb_list_nat_cmd_t *)cmd_mp->b_rptr;
18939 18940 if (MBLKL(cmd_mp) < sizeof (ilb_list_nat_cmd_t)) {
18940 18941 ret = EINVAL;
18941 18942 break;
18942 18943 }
18943 18944 size = cmd->num_nat * sizeof (ilb_nat_entry_t);
18944 18945 if (cmd_mp->b_rptr + offsetof(ilb_list_nat_cmd_t, entries) +
18945 18946 size != cmd_mp->b_wptr) {
18946 18947 ret = EINVAL;
18947 18948 break;
18948 18949 }
18949 18950
18950 18951 ret = ilb_list_nat(ilbs, zoneid, cmd->entries, &cmd->num_nat,
18951 18952 &cmd->flags);
18952 18953 break;
18953 18954 }
18954 18955 case ILB_LIST_STICKY_TABLE: {
18955 18956 ilb_list_sticky_cmd_t *cmd;
18956 18957
18957 18958 cmd = (ilb_list_sticky_cmd_t *)cmd_mp->b_rptr;
18958 18959 if (MBLKL(cmd_mp) < sizeof (ilb_list_sticky_cmd_t)) {
18959 18960 ret = EINVAL;
18960 18961 break;
18961 18962 }
18962 18963 size = cmd->num_sticky * sizeof (ilb_sticky_entry_t);
18963 18964 if (cmd_mp->b_rptr + offsetof(ilb_list_sticky_cmd_t, entries) +
18964 18965 size != cmd_mp->b_wptr) {
18965 18966 ret = EINVAL;
18966 18967 break;
18967 18968 }
18968 18969
18969 18970 ret = ilb_list_sticky(ilbs, zoneid, cmd->entries,
18970 18971 &cmd->num_sticky, &cmd->flags);
18971 18972 break;
18972 18973 }
18973 18974 default:
18974 18975 ret = EINVAL;
18975 18976 break;
18976 18977 }
18977 18978 done:
18978 18979 return (ret);
18979 18980 }
18980 18981
18981 18982 /* Remove all cache entries for this logical interface */
18982 18983 void
18983 18984 ipif_nce_down(ipif_t *ipif)
18984 18985 {
18985 18986 ill_t *ill = ipif->ipif_ill;
18986 18987 nce_t *nce;
18987 18988
18988 18989 DTRACE_PROBE3(ipif__downup, char *, "ipif_nce_down",
18989 18990 ill_t *, ill, ipif_t *, ipif);
18990 18991 if (ipif->ipif_added_nce) {
18991 18992 if (ipif->ipif_isv6)
18992 18993 nce = nce_lookup_v6(ill, &ipif->ipif_v6lcl_addr);
18993 18994 else
18994 18995 nce = nce_lookup_v4(ill, &ipif->ipif_lcl_addr);
18995 18996 if (nce != NULL) {
18996 18997 if (--nce->nce_ipif_cnt == 0)
18997 18998 ncec_delete(nce->nce_common);
18998 18999 ipif->ipif_added_nce = 0;
18999 19000 nce_refrele(nce);
19000 19001 } else {
19001 19002 /*
19002 19003 * nce may already be NULL because it was already
19003 19004 * flushed, e.g., due to a call to nce_flush
19004 19005 */
19005 19006 ipif->ipif_added_nce = 0;
19006 19007 }
19007 19008 }
19008 19009 /*
19009 19010 * Make IPMP aware of the deleted data address.
19010 19011 */
19011 19012 if (IS_IPMP(ill))
19012 19013 ipmp_illgrp_del_ipif(ill->ill_grp, ipif);
19013 19014
19014 19015 /*
19015 19016 * Remove all other nces dependent on this ill when the last ipif
19016 19017 * is going away.
19017 19018 */
19018 19019 if (ill->ill_ipif_up_count == 0) {
19019 19020 ncec_walk(ill, (pfi_t)ncec_delete_per_ill,
19020 19021 (uchar_t *)ill, ill->ill_ipst);
19021 19022 if (IS_UNDER_IPMP(ill))
19022 19023 nce_flush(ill, B_TRUE);
19023 19024 }
19024 19025 }
19025 19026
19026 19027 /*
19027 19028 * find the first interface that uses usill for its source address.
19028 19029 */
19029 19030 ill_t *
19030 19031 ill_lookup_usesrc(ill_t *usill)
19031 19032 {
19032 19033 ip_stack_t *ipst = usill->ill_ipst;
19033 19034 ill_t *ill;
19034 19035
19035 19036 ASSERT(usill != NULL);
19036 19037
19037 19038 /* ill_g_usesrc_lock protects ill_usesrc_grp_next */
19038 19039 rw_enter(&ipst->ips_ill_g_usesrc_lock, RW_WRITER);
19039 19040 rw_enter(&ipst->ips_ill_g_lock, RW_READER);
19040 19041 for (ill = usill->ill_usesrc_grp_next; ill != NULL && ill != usill;
19041 19042 ill = ill->ill_usesrc_grp_next) {
19042 19043 if (!IS_UNDER_IPMP(ill) && (ill->ill_flags & ILLF_MULTICAST) &&
19043 19044 !ILL_IS_CONDEMNED(ill)) {
19044 19045 ill_refhold(ill);
19045 19046 break;
19046 19047 }
19047 19048 }
19048 19049 rw_exit(&ipst->ips_ill_g_lock);
19049 19050 rw_exit(&ipst->ips_ill_g_usesrc_lock);
19050 19051 return (ill);
19051 19052 }
19052 19053
19053 19054 /*
19054 19055 * This comment applies to both ip_sioctl_get_ifhwaddr and
19055 19056 * ip_sioctl_get_lifhwaddr as the basic function of these two functions
19056 19057 * is the same.
19057 19058 *
19058 19059 * The goal here is to find an IP interface that corresponds to the name
19059 19060 * provided by the caller in the ifreq/lifreq structure held in the mblk_t
19060 19061 * chain and to fill out a sockaddr/sockaddr_storage structure with the
19061 19062 * mac address.
19062 19063 *
19063 19064 * The SIOCGIFHWADDR/SIOCGLIFHWADDR ioctl may return an error for a number
19064 19065 * of different reasons:
19065 19066 * ENXIO - the device name is not known to IP.
19066 19067 * EADDRNOTAVAIL - the device has no hardware address. This is indicated
19067 19068 * by ill_phys_addr not pointing to an actual address.
19068 19069 * EPFNOSUPPORT - this will indicate that a request is being made for a
19069 19070 * mac address that will not fit in the data structure supplier (struct
19070 19071 * sockaddr).
19071 19072 *
19072 19073 */
19073 19074 /* ARGSUSED */
19074 19075 int
19075 19076 ip_sioctl_get_ifhwaddr(ipif_t *ipif, sin_t *dummy_sin, queue_t *q, mblk_t *mp,
19076 19077 ip_ioctl_cmd_t *ipip, void *if_req)
19077 19078 {
19078 19079 struct sockaddr *sock;
19079 19080 struct ifreq *ifr;
19080 19081 mblk_t *mp1;
19081 19082 ill_t *ill;
19082 19083
19083 19084 ASSERT(ipif != NULL);
19084 19085 ill = ipif->ipif_ill;
19085 19086
19086 19087 if (ill->ill_phys_addr == NULL) {
19087 19088 return (EADDRNOTAVAIL);
19088 19089 }
19089 19090 if (ill->ill_phys_addr_length > sizeof (sock->sa_data)) {
19090 19091 return (EPFNOSUPPORT);
19091 19092 }
19092 19093
19093 19094 ip1dbg(("ip_sioctl_get_hwaddr(%s)\n", ill->ill_name));
19094 19095
19095 19096 /* Existence of mp1 has been checked in ip_wput_nondata */
19096 19097 mp1 = mp->b_cont->b_cont;
19097 19098 ifr = (struct ifreq *)mp1->b_rptr;
19098 19099
19099 19100 sock = &ifr->ifr_addr;
19100 19101 /*
19101 19102 * The "family" field in the returned structure is set to a value
19102 19103 * that represents the type of device to which the address belongs.
19103 19104 * The value returned may differ to that on Linux but it will still
19104 19105 * represent the correct symbol on Solaris.
19105 19106 */
19106 19107 sock->sa_family = arp_hw_type(ill->ill_mactype);
19107 19108 bcopy(ill->ill_phys_addr, &sock->sa_data, ill->ill_phys_addr_length);
19108 19109
19109 19110 return (0);
19110 19111 }
19111 19112
19112 19113 /*
19113 19114 * The expection of applications using SIOCGIFHWADDR is that data will
19114 19115 * be returned in the sa_data field of the sockaddr structure. With
19115 19116 * SIOCGLIFHWADDR, we're breaking new ground as there is no Linux
19116 19117 * equivalent. In light of this, struct sockaddr_dl is used as it
19117 19118 * offers more space for address storage in sll_data.
19118 19119 */
19119 19120 /* ARGSUSED */
19120 19121 int
19121 19122 ip_sioctl_get_lifhwaddr(ipif_t *ipif, sin_t *dummy_sin, queue_t *q, mblk_t *mp,
19122 19123 ip_ioctl_cmd_t *ipip, void *if_req)
19123 19124 {
19124 19125 struct sockaddr_dl *sock;
19125 19126 struct lifreq *lifr;
19126 19127 mblk_t *mp1;
19127 19128 ill_t *ill;
19128 19129
19129 19130 ASSERT(ipif != NULL);
19130 19131 ill = ipif->ipif_ill;
19131 19132
19132 19133 if (ill->ill_phys_addr == NULL) {
19133 19134 return (EADDRNOTAVAIL);
19134 19135 }
19135 19136 if (ill->ill_phys_addr_length > sizeof (sock->sdl_data)) {
19136 19137 return (EPFNOSUPPORT);
19137 19138 }
19138 19139
19139 19140 ip1dbg(("ip_sioctl_get_lifhwaddr(%s)\n", ill->ill_name));
19140 19141
19141 19142 /* Existence of mp1 has been checked in ip_wput_nondata */
19142 19143 mp1 = mp->b_cont->b_cont;
19143 19144 lifr = (struct lifreq *)mp1->b_rptr;
19144 19145
19145 19146 /*
19146 19147 * sockaddr_ll is used here because it is also the structure used in
19147 19148 * responding to the same ioctl in sockpfp. The only other choice is
19148 19149 * sockaddr_dl which contains fields that are not required here
19149 19150 * because its purpose is different.
19150 19151 */
19151 19152 lifr->lifr_type = ill->ill_type;
19152 19153 sock = (struct sockaddr_dl *)&lifr->lifr_addr;
19153 19154 sock->sdl_family = AF_LINK;
19154 19155 sock->sdl_index = ill->ill_phyint->phyint_ifindex;
19155 19156 sock->sdl_type = ill->ill_mactype;
19156 19157 sock->sdl_nlen = 0;
19157 19158 sock->sdl_slen = 0;
19158 19159 sock->sdl_alen = ill->ill_phys_addr_length;
19159 19160 bcopy(ill->ill_phys_addr, sock->sdl_data, ill->ill_phys_addr_length);
19160 19161
19161 19162 return (0);
19162 19163 }
↓ open down ↓ |
15366 lines elided |
↑ open up ↑ |
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX