welterde/l2tpns
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add ICMPv6 support with acceleration

Browse source
This commit is contained in:
Samuel Thibault 2023-05-18 00:40:31 +02:00
parent 5dcbd68b75
commit 58d038dc0b
4 changed files with 120 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

100
icmp.c
View file

@ -6,13 +6,62 @@
#include <netinet/icmp6.h>
#include <unistd.h>
#include <netinet/ip6.h>
#include <time.h>
#include <errno.h>
#include "dhcp6.h"
#include "l2tpns.h"
#include "ipv6_u.h"
#include "util.h"
int icmpv6fd;
static uint16_t _checksum(uint8_t *addr, int count);
void icmpv6_init(void)
{
int on = 1, check = 2;
struct icmp6_filter filter;
icmpv6fd = socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6);
if (icmpv6fd < 0)
LOG(1, 0, 0, "ICMPv6: could not create socket: %s\n", strerror(errno));
#ifdef IPV6_RECVPKTINFO
if (setsockopt(icmpv6fd, SOL_IPV6, IPV6_RECVPKTINFO, &on, sizeof(on)) < 0)
LOG(1, 0, 0, "ICMPv6: could not request pktinfo: %s\n", strerror(errno));
#else
if (setsockopt(icmpv6fd, SOL_IPV6, IPV6_PKTINFO, &on, sizeof(on)) < 0)
LOG(1, 0, 0, "ICMPv6: could not request pktinfo: %s\n", strerror(errno));
#endif
#ifdef __linux__
if (setsockopt(icmpv6fd, SOL_RAW, IPV6_CHECKSUM, &check, sizeof(check)) < 0)
#else
if (setsockopt(icmpv6fd, SOL_IPV6, IPV6_CHECKSUM, &check, sizeof(check)) < 0)
#endif
LOG(1, 0, 0, "ICMPv6: could not request for checking checksums: %s\n", strerror(errno));
ICMP6_FILTER_SETBLOCKALL(&filter);
ICMP6_FILTER_SETPASS(ND_ROUTER_SOLICIT, &filter);
if (setsockopt(icmpv6fd, SOL_ICMPV6, ICMP6_FILTER, &filter, sizeof(filter)) < 0)
LOG(1, 0, 0, "ICMPv6: could not set filter for RS: %s\n", strerror(errno));
}
//
// A new ppp interface was created, watch for ICMPv6 RS on it
void icmpv6_listen(int ifidx)
{
struct ipv6_mreq mreq;
memset(&mreq, 0, sizeof(mreq));
mreq.ipv6mr_interface = ifidx;
inet_pton(AF_INET6, "ff02::2", &mreq.ipv6mr_multiaddr);
if (setsockopt(icmpv6fd, SOL_IPV6, IPV6_JOIN_GROUP, &mreq, sizeof(mreq)) < 0)
LOG(2, 0, 0, "ICMPv6: could not join all routers group: %s\n", strerror(errno));
}
void host_unreachable(in_addr_t destination, uint16_t id, in_addr_t source, uint8_t *packet, int packet_len)
{
char buf[128] = {0};
@ -203,3 +252,54 @@ void send_ipv6_ra(sessionidt s, tunnelidt t, const struct in6_addr *ip)
tunnelsend(b, l + (((uint8_t *) p_ip6_hdr)-b), t); // send it...
return;
}
//
// An ICMPv6 request was received on a ppp interface, receive it
void icmpv6_process_from_kernel(uint8_t *p, size_t size_bufp)
{
struct sockaddr_storage fromaddr;
struct sockaddr_in6 *sin6;
socklen_t fromlen = sizeof(fromaddr);
struct in6_addr toaddr;
int ifidx;
int r, s, t;
r = recvfromto6(icmpv6fd, p, size_bufp, 0, (struct sockaddr *) &fromaddr, &fromlen, &toaddr, &ifidx);
if (r < 0)
{
static time_t lastwarn;
time_t now = time(NULL);
if (now > lastwarn)
{
LOG(5, 0, 0, "ICMPV6: reception error: %s\n", strerror(errno));
lastwarn = now;
}
return;
}
LOG(5, 0, 0, "Got packet on ICMP socket on if %d\n", ifidx);
if (fromaddr.ss_family != AF_INET6)
{
LOG(5, 0, 0, "ICMPV6: got strange family %d\n", fromaddr.ss_family);
return;
}
sin6 = (struct sockaddr_in6 *) &fromaddr;
if (*p != ND_ROUTER_SOLICIT)
{
LOG(5, 0, 0, "ICMPV6: not router sollicitation??: %d\n", *p);
return;
}
for (s = 1; s < MAXSESSION; s++)
{
if (sess_local[s].ppp_if_idx != ifidx)
continue;
t = session[s].tunnel;
send_ipv6_ra(s, t, &sin6->sin6_addr);
break;
}
}