227 lines
7.5 KiB
C
227 lines
7.5 KiB
C
/* $OpenBSD: ip_carp.h,v 1.51 2021/03/07 06:02:32 dlg Exp $ */
|
|
|
|
/*
|
|
* Copyright (c) 2002 Michael Shalayeff. All rights reserved.
|
|
* Copyright (c) 2003 Ryan McBride. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
|
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
|
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
|
* IN NO EVENT SHALL THE AUTHOR OR HIS RELATIVES BE LIABLE FOR ANY DIRECT,
|
|
* INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
|
* SERVICES; LOSS OF MIND, USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
|
|
* IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
|
|
* THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
#ifndef _NETINET_IP_CARP_H_
|
|
#define _NETINET_IP_CARP_H_
|
|
|
|
/*
|
|
* The CARP header layout is as follows:
|
|
*
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* |Version| Type | VirtualHostID | AdvSkew | Auth Len |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Demotion | AdvBase | Checksum |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Counter (1) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Counter (2) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | SHA-1 HMAC (1) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | SHA-1 HMAC (2) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | SHA-1 HMAC (3) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | SHA-1 HMAC (4) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | SHA-1 HMAC (5) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*
|
|
*/
|
|
|
|
struct carp_header {
|
|
#if _BYTE_ORDER == _LITTLE_ENDIAN
|
|
u_int carp_type:4,
|
|
carp_version:4;
|
|
#endif
|
|
#if _BYTE_ORDER == _BIG_ENDIAN
|
|
u_int carp_version:4,
|
|
carp_type:4;
|
|
#endif
|
|
u_int8_t carp_vhid; /* virtual host id */
|
|
u_int8_t carp_advskew; /* advertisement skew */
|
|
u_int8_t carp_authlen; /* size of counter+md, 32bit chunks */
|
|
u_int8_t carp_demote; /* demotion indicator */
|
|
u_int8_t carp_advbase; /* advertisement interval */
|
|
u_int16_t carp_cksum;
|
|
u_int32_t carp_counter[2];
|
|
unsigned char carp_md[20]; /* SHA1 HMAC */
|
|
} __packed;
|
|
|
|
#define CARP_DFLTTL 255
|
|
|
|
/* carp_version */
|
|
#define CARP_VERSION 2
|
|
|
|
/* carp_type */
|
|
#define CARP_ADVERTISEMENT 0x01
|
|
|
|
#define CARP_KEY_LEN 20 /* a sha1 hash of a passphrase */
|
|
|
|
/* carp_advbase */
|
|
#define CARP_DFLTINTV 1
|
|
|
|
/*
|
|
* Statistics.
|
|
*/
|
|
struct carpstats {
|
|
u_int64_t carps_ipackets; /* total input packets, IPv4 */
|
|
u_int64_t carps_ipackets6; /* total input packets, IPv6 */
|
|
u_int64_t carps_badif; /* wrong interface */
|
|
u_int64_t carps_badttl; /* TTL is not CARP_DFLTTL */
|
|
u_int64_t carps_hdrops; /* packets shorter than hdr */
|
|
u_int64_t carps_badsum; /* bad checksum */
|
|
u_int64_t carps_badver; /* bad (incl unsupp) version */
|
|
u_int64_t carps_badlen; /* data length does not match */
|
|
u_int64_t carps_badauth; /* bad authentication */
|
|
u_int64_t carps_badvhid; /* bad VHID */
|
|
u_int64_t carps_badaddrs; /* bad address list */
|
|
|
|
u_int64_t carps_opackets; /* total output packets, IPv4 */
|
|
u_int64_t carps_opackets6; /* total output packets, IPv6 */
|
|
u_int64_t carps_onomem; /* no memory for an mbuf */
|
|
u_int64_t carps_ostates; /* total state updates sent */
|
|
|
|
u_int64_t carps_preempt; /* transitions to master */
|
|
};
|
|
|
|
#define CARPDEVNAMSIZ 16
|
|
#ifdef IFNAMSIZ
|
|
#if CARPDEVNAMSIZ != IFNAMSIZ
|
|
#error namsiz mismatch
|
|
#endif
|
|
#endif
|
|
|
|
/*
|
|
* Configuration structure for SIOCSVH SIOCGVH
|
|
*/
|
|
struct carpreq {
|
|
int carpr_state;
|
|
#define CARP_STATES "INIT", "BACKUP", "MASTER"
|
|
#define CARP_MAXSTATE 2
|
|
#define CARP_MAXNODES 32
|
|
|
|
char carpr_carpdev[CARPDEVNAMSIZ];
|
|
u_int8_t carpr_vhids[CARP_MAXNODES];
|
|
u_int8_t carpr_advskews[CARP_MAXNODES];
|
|
u_int8_t carpr_states[CARP_MAXNODES];
|
|
#define CARP_BAL_MODES "none", "ip", "ip-stealth", "ip-unicast"
|
|
#define CARP_BAL_NONE 0
|
|
#define CARP_BAL_IP 1
|
|
#define CARP_BAL_IPSTEALTH 2
|
|
#define CARP_BAL_IPUNICAST 3
|
|
#define CARP_BAL_MAXID 3
|
|
u_int8_t carpr_balancing;
|
|
int carpr_advbase;
|
|
unsigned char carpr_key[CARP_KEY_LEN];
|
|
struct in_addr carpr_peer;
|
|
};
|
|
|
|
/*
|
|
* Names for CARP sysctl objects
|
|
*/
|
|
#define CARPCTL_ALLOW 1 /* accept incoming CARP packets */
|
|
#define CARPCTL_PREEMPT 2 /* high-pri backup preemption mode */
|
|
#define CARPCTL_LOG 3 /* log bad packets */
|
|
#define CARPCTL_STATS 4 /* CARP stats */
|
|
#define CARPCTL_MAXID 5
|
|
|
|
#define CARPCTL_NAMES { \
|
|
{ 0, 0 }, \
|
|
{ "allow", CTLTYPE_INT }, \
|
|
{ "preempt", CTLTYPE_INT }, \
|
|
{ "log", CTLTYPE_INT }, \
|
|
{ "stats", CTLTYPE_STRUCT }, \
|
|
}
|
|
|
|
#ifdef _KERNEL
|
|
|
|
#include <net/if_types.h>
|
|
#include <sys/percpu.h>
|
|
|
|
enum carpstat_counters {
|
|
carps_ipackets,
|
|
carps_ipackets6,
|
|
carps_badif,
|
|
carps_badttl,
|
|
carps_hdrops,
|
|
carps_badsum,
|
|
carps_badver,
|
|
carps_badlen,
|
|
carps_badauth,
|
|
carps_badvhid,
|
|
carps_badaddrs,
|
|
carps_opackets,
|
|
carps_opackets6,
|
|
carps_onomem,
|
|
carps_ostates,
|
|
carps_preempt,
|
|
carps_ncounters,
|
|
};
|
|
|
|
extern struct cpumem *carpcounters;
|
|
|
|
static inline void
|
|
carpstat_inc(enum carpstat_counters c)
|
|
{
|
|
counters_inc(carpcounters, c);
|
|
}
|
|
|
|
/*
|
|
* If two carp interfaces share same physical interface, then we pretend all IP
|
|
* addresses belong to single interface.
|
|
*/
|
|
static inline int
|
|
carp_strict_addr_chk(struct ifnet *ifp_a, struct ifnet *ifp_b)
|
|
{
|
|
return ((ifp_a->if_type == IFT_CARP &&
|
|
ifp_b->if_index == ifp_a->if_carpdevidx) ||
|
|
(ifp_b->if_type == IFT_CARP &&
|
|
ifp_a->if_index == ifp_b->if_carpdevidx) ||
|
|
(ifp_a->if_type == IFT_CARP && ifp_b->if_type == IFT_CARP &&
|
|
ifp_a->if_carpdevidx == ifp_b->if_carpdevidx));
|
|
}
|
|
|
|
struct mbuf *carp_input(struct ifnet *, struct mbuf *, uint64_t);
|
|
|
|
int carp_proto_input(struct mbuf **, int *, int, int);
|
|
void carp_carpdev_state(void *);
|
|
void carp_group_demote_adj(struct ifnet *, int, char *);
|
|
int carp6_proto_input(struct mbuf **, int *, int, int);
|
|
int carp_iamatch(struct ifnet *);
|
|
int carp_ourether(struct ifnet *, u_int8_t *);
|
|
int carp_output(struct ifnet *, struct mbuf *, struct sockaddr *,
|
|
struct rtentry *);
|
|
int carp_sysctl(int *, u_int, void *, size_t *, void *, size_t);
|
|
int carp_lsdrop(struct ifnet *, struct mbuf *, sa_family_t,
|
|
u_int32_t *, u_int32_t *, int);
|
|
#endif /* _KERNEL */
|
|
#endif /* _NETINET_IP_CARP_H_ */
|