diff mbox series

[1/2] kernel: Remove support for MAP-E FMRs RFC 7597

Message ID 20201121140311.22070-2-hauke@hauke-m.de
State Under Review
Delegated to: Hauke Mehrtens
Headers show
Series Remove pending network patches | expand

Commit Message

Hauke Mehrtens Nov. 21, 2020, 2:03 p.m. UTC
I am not aware that any user space code uses this feature in OpenWrt and
maintaining this patch costs some effort especially when we add a new
kernel major version.

This patch was originally introduced in commit 32246436147f ("Add kernel
support for MAP-E FMRs") in May 2014 and implements (parts?) or MAP-E
FMRs (draft-ietf-softwire-map-10) which is now RFC 7597

If you still need this feature also try to get this into mainline Linux.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
---
 ...Add-support-for-MAP-E-FMRs-mesh-mode.patch | 501 ------------------
 1 file changed, 501 deletions(-)
 delete mode 100644 target/linux/generic/pending-5.4/666-Add-support-for-MAP-E-FMRs-mesh-mode.patch

Comments

Hans Dedecker Nov. 22, 2020, 6:41 p.m. UTC | #1
Hi Hauke,

On Sun, Nov 22, 2020 at 12:33 AM Hauke Mehrtens <hauke@hauke-m.de> wrote:
>
> I am not aware that any user space code uses this feature in OpenWrt and
> maintaining this patch costs some effort especially when we add a new
> kernel major version.
The map package supports the creation of map-e interfaces
(https://git.openwrt.org/?p=openwrt/openwrt.git;a=blob;f=package/network/ipv6/map/files/map.sh;h=652c3065e3da10d917e182914b653babf09d8e3e;hb=HEAD#l76);
netifd as well has support for the creation of map-e interfaces
(https://git.openwrt.org/?p=project/netifd.git;a=blob;f=system-linux.c;h=78455aeab38d4a97161b11ec910275b050568dea;hb=HEAD#l2620)
I don't know how widely used map-e is but if the patch is removed we
should aw well clean up user space.

Hans
>
> This patch was originally introduced in commit 32246436147f ("Add kernel
> support for MAP-E FMRs") in May 2014 and implements (parts?) or MAP-E
> FMRs (draft-ietf-softwire-map-10) which is now RFC 7597
>
> If you still need this feature also try to get this into mainline Linux.
>
> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
> ---
>  ...Add-support-for-MAP-E-FMRs-mesh-mode.patch | 501 ------------------
>  1 file changed, 501 deletions(-)
>  delete mode 100644 target/linux/generic/pending-5.4/666-Add-support-for-MAP-E-FMRs-mesh-mode.patch
>
> diff --git a/target/linux/generic/pending-5.4/666-Add-support-for-MAP-E-FMRs-mesh-mode.patch b/target/linux/generic/pending-5.4/666-Add-support-for-MAP-E-FMRs-mesh-mode.patch
> deleted file mode 100644
> index 8bcca1c4d159..000000000000
> --- a/target/linux/generic/pending-5.4/666-Add-support-for-MAP-E-FMRs-mesh-mode.patch
> +++ /dev/null
> @@ -1,501 +0,0 @@
> -From: Steven Barth <steven@midlink.org>
> -Subject: Add support for MAP-E FMRs (mesh mode)
> -
> -MAP-E FMRs (draft-ietf-softwire-map-10) are rules for IPv4-communication
> -between MAP CEs (mesh mode) without the need to forward such data to a
> -border relay. This is similar to how 6rd works but for IPv4 over IPv6.
> -
> -Signed-off-by: Steven Barth <cyrus@openwrt.org>
> ----
> - include/net/ip6_tunnel.h       |  13 ++
> - include/uapi/linux/if_tunnel.h |  13 ++
> - net/ipv6/ip6_tunnel.c          | 276 +++++++++++++++++++++++++++++++++++++++--
> - 3 files changed, 291 insertions(+), 11 deletions(-)
> -
> ---- a/include/net/ip6_tunnel.h
> -+++ b/include/net/ip6_tunnel.h
> -@@ -18,6 +18,18 @@
> - /* determine capability on a per-packet basis */
> - #define IP6_TNL_F_CAP_PER_PACKET 0x40000
> -
> -+/* IPv6 tunnel FMR */
> -+struct __ip6_tnl_fmr {
> -+      struct __ip6_tnl_fmr *next; /* next fmr in list */
> -+      struct in6_addr ip6_prefix;
> -+      struct in_addr ip4_prefix;
> -+
> -+      __u8 ip6_prefix_len;
> -+      __u8 ip4_prefix_len;
> -+      __u8 ea_len;
> -+      __u8 offset;
> -+};
> -+
> - struct __ip6_tnl_parm {
> -       char name[IFNAMSIZ];    /* name of tunnel device */
> -       int link;               /* ifindex of underlying L2 interface */
> -@@ -29,6 +41,7 @@ struct __ip6_tnl_parm {
> -       __u32 flags;            /* tunnel flags */
> -       struct in6_addr laddr;  /* local tunnel end-point address */
> -       struct in6_addr raddr;  /* remote tunnel end-point address */
> -+      struct __ip6_tnl_fmr *fmrs;     /* FMRs */
> -
> -       __be16                  i_flags;
> -       __be16                  o_flags;
> ---- a/include/uapi/linux/if_tunnel.h
> -+++ b/include/uapi/linux/if_tunnel.h
> -@@ -77,10 +77,23 @@ enum {
> -       IFLA_IPTUN_ENCAP_DPORT,
> -       IFLA_IPTUN_COLLECT_METADATA,
> -       IFLA_IPTUN_FWMARK,
> -+      IFLA_IPTUN_FMRS,
> -       __IFLA_IPTUN_MAX,
> - };
> - #define IFLA_IPTUN_MAX        (__IFLA_IPTUN_MAX - 1)
> -
> -+enum {
> -+      IFLA_IPTUN_FMR_UNSPEC,
> -+      IFLA_IPTUN_FMR_IP6_PREFIX,
> -+      IFLA_IPTUN_FMR_IP4_PREFIX,
> -+      IFLA_IPTUN_FMR_IP6_PREFIX_LEN,
> -+      IFLA_IPTUN_FMR_IP4_PREFIX_LEN,
> -+      IFLA_IPTUN_FMR_EA_LEN,
> -+      IFLA_IPTUN_FMR_OFFSET,
> -+      __IFLA_IPTUN_FMR_MAX,
> -+};
> -+#define IFLA_IPTUN_FMR_MAX (__IFLA_IPTUN_FMR_MAX - 1)
> -+
> - enum tunnel_encap_types {
> -       TUNNEL_ENCAP_NONE,
> -       TUNNEL_ENCAP_FOU,
> ---- a/net/ipv6/ip6_tunnel.c
> -+++ b/net/ipv6/ip6_tunnel.c
> -@@ -11,6 +11,9 @@
> -  *      linux/net/ipv6/sit.c and linux/net/ipv4/ipip.c
> -  *
> -  *      RFC 2473
> -+ *
> -+ *      Changes:
> -+ *      Steven Barth <cyrus@openwrt.org>:           MAP-E FMR support
> -  */
> -
> - #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
> -@@ -67,9 +70,9 @@ static bool log_ecn_error = true;
> - module_param(log_ecn_error, bool, 0644);
> - MODULE_PARM_DESC(log_ecn_error, "Log packets received with corrupted ECN");
> -
> --static u32 HASH(const struct in6_addr *addr1, const struct in6_addr *addr2)
> -+static u32 HASH(const struct in6_addr *addr)
> - {
> --      u32 hash = ipv6_addr_hash(addr1) ^ ipv6_addr_hash(addr2);
> -+      u32 hash = ipv6_addr_hash(addr);
> -
> -       return hash_32(hash, IP6_TUNNEL_HASH_SIZE_SHIFT);
> - }
> -@@ -136,20 +139,29 @@ static struct net_device_stats *ip6_get_
> - static struct ip6_tnl *
> - ip6_tnl_lookup(struct net *net, const struct in6_addr *remote, const struct in6_addr *local)
> - {
> --      unsigned int hash = HASH(remote, local);
> -+      unsigned int hash = HASH(local);
> -       struct ip6_tnl *t;
> -       struct ip6_tnl_net *ip6n = net_generic(net, ip6_tnl_net_id);
> -       struct in6_addr any;
> -+      struct __ip6_tnl_fmr *fmr;
> -
> -       for_each_ip6_tunnel_rcu(ip6n->tnls_r_l[hash]) {
> --              if (ipv6_addr_equal(local, &t->parms.laddr) &&
> --                  ipv6_addr_equal(remote, &t->parms.raddr) &&
> --                  (t->dev->flags & IFF_UP))
> -+              if (!ipv6_addr_equal(local, &t->parms.laddr) ||
> -+                              !(t->dev->flags & IFF_UP))
> -+                      continue;
> -+
> -+              if (ipv6_addr_equal(remote, &t->parms.raddr))
> -                       return t;
> -+
> -+              for (fmr = t->parms.fmrs; fmr; fmr = fmr->next) {
> -+                      if (ipv6_prefix_equal(remote, &fmr->ip6_prefix,
> -+                                      fmr->ip6_prefix_len))
> -+                              return t;
> -+              }
> -       }
> -
> -       memset(&any, 0, sizeof(any));
> --      hash = HASH(&any, local);
> -+      hash = HASH(local);
> -       for_each_ip6_tunnel_rcu(ip6n->tnls_r_l[hash]) {
> -               if (ipv6_addr_equal(local, &t->parms.laddr) &&
> -                   ipv6_addr_any(&t->parms.raddr) &&
> -@@ -157,7 +169,7 @@ ip6_tnl_lookup(struct net *net, const st
> -                       return t;
> -       }
> -
> --      hash = HASH(remote, &any);
> -+      hash = HASH(&any);
> -       for_each_ip6_tunnel_rcu(ip6n->tnls_r_l[hash]) {
> -               if (ipv6_addr_equal(remote, &t->parms.raddr) &&
> -                   ipv6_addr_any(&t->parms.laddr) &&
> -@@ -197,7 +209,7 @@ ip6_tnl_bucket(struct ip6_tnl_net *ip6n,
> -
> -       if (!ipv6_addr_any(remote) || !ipv6_addr_any(local)) {
> -               prio = 1;
> --              h = HASH(remote, local);
> -+              h = HASH(local);
> -       }
> -       return &ip6n->tnls[prio][h];
> - }
> -@@ -378,6 +390,12 @@ ip6_tnl_dev_uninit(struct net_device *de
> -       struct net *net = t->net;
> -       struct ip6_tnl_net *ip6n = net_generic(net, ip6_tnl_net_id);
> -
> -+      while (t->parms.fmrs) {
> -+              struct __ip6_tnl_fmr *next = t->parms.fmrs->next;
> -+              kfree(t->parms.fmrs);
> -+              t->parms.fmrs = next;
> -+      }
> -+
> -       if (dev == ip6n->fb_tnl_dev)
> -               RCU_INIT_POINTER(ip6n->tnls_wc[0], NULL);
> -       else
> -@@ -767,6 +785,107 @@ int ip6_tnl_rcv_ctl(struct ip6_tnl *t,
> - }
> - EXPORT_SYMBOL_GPL(ip6_tnl_rcv_ctl);
> -
> -+/**
> -+ * ip4ip6_fmr_calc - calculate target / source IPv6-address based on FMR
> -+ *   @dest: destination IPv6 address buffer
> -+ *   @skb: received socket buffer
> -+ *   @fmr: MAP FMR
> -+ *   @xmit: Calculate for xmit or rcv
> -+ **/
> -+static void ip4ip6_fmr_calc(struct in6_addr *dest,
> -+              const struct iphdr *iph, const uint8_t *end,
> -+              const struct __ip6_tnl_fmr *fmr, bool xmit)
> -+{
> -+      int psidlen = fmr->ea_len - (32 - fmr->ip4_prefix_len);
> -+      u8 *portp = NULL;
> -+      bool use_dest_addr;
> -+      const struct iphdr *dsth = iph;
> -+
> -+      if ((u8*)dsth >= end)
> -+              return;
> -+
> -+      /* find significant IP header */
> -+      if (iph->protocol == IPPROTO_ICMP) {
> -+              struct icmphdr *ih = (struct icmphdr*)(((u8*)dsth) + dsth->ihl * 4);
> -+              if (ih && ((u8*)&ih[1]) <= end && (
> -+                      ih->type == ICMP_DEST_UNREACH ||
> -+                      ih->type == ICMP_SOURCE_QUENCH ||
> -+                      ih->type == ICMP_TIME_EXCEEDED ||
> -+                      ih->type == ICMP_PARAMETERPROB ||
> -+                      ih->type == ICMP_REDIRECT))
> -+                              dsth = (const struct iphdr*)&ih[1];
> -+      }
> -+
> -+      /* in xmit-path use dest port by default and source port only if
> -+              this is an ICMP reply to something else; vice versa in rcv-path */
> -+      use_dest_addr = (xmit && dsth == iph) || (!xmit && dsth != iph);
> -+
> -+      /* get dst port */
> -+      if (((u8*)&dsth[1]) <= end && (
> -+              dsth->protocol == IPPROTO_UDP ||
> -+              dsth->protocol == IPPROTO_TCP ||
> -+              dsth->protocol == IPPROTO_SCTP ||
> -+              dsth->protocol == IPPROTO_DCCP)) {
> -+                      /* for UDP, TCP, SCTP and DCCP source and dest port
> -+                      follow IPv4 header directly */
> -+                      portp = ((u8*)dsth) + dsth->ihl * 4;
> -+
> -+                      if (use_dest_addr)
> -+                              portp += sizeof(u16);
> -+      } else if (iph->protocol == IPPROTO_ICMP) {
> -+              struct icmphdr *ih = (struct icmphdr*)(((u8*)dsth) + dsth->ihl * 4);
> -+
> -+              /* use icmp identifier as port */
> -+              if (((u8*)&ih) <= end && (
> -+                  (use_dest_addr && (
> -+                  ih->type == ICMP_ECHOREPLY ||
> -+                      ih->type == ICMP_TIMESTAMPREPLY ||
> -+                      ih->type == ICMP_INFO_REPLY ||
> -+                      ih->type == ICMP_ADDRESSREPLY)) ||
> -+                      (!use_dest_addr && (
> -+                      ih->type == ICMP_ECHO ||
> -+                      ih->type == ICMP_TIMESTAMP ||
> -+                      ih->type == ICMP_INFO_REQUEST ||
> -+                      ih->type == ICMP_ADDRESS)
> -+                      )))
> -+                              portp = (u8*)&ih->un.echo.id;
> -+      }
> -+
> -+      if ((portp && &portp[2] <= end) || psidlen == 0) {
> -+              int frombyte = fmr->ip6_prefix_len / 8;
> -+              int fromrem = fmr->ip6_prefix_len % 8;
> -+              int bytes = sizeof(struct in6_addr) - frombyte;
> -+              const u32 *addr = (use_dest_addr) ? &iph->daddr : &iph->saddr;
> -+              u64 eabits = ((u64)ntohl(*addr)) << (32 + fmr->ip4_prefix_len);
> -+              u64 t = 0;
> -+
> -+              /* extract PSID from port and add it to eabits */
> -+              u16 psidbits = 0;
> -+              if (psidlen > 0) {
> -+                      psidbits = ((u16)portp[0]) << 8 | ((u16)portp[1]);
> -+                      psidbits >>= 16 - psidlen - fmr->offset;
> -+                      psidbits = (u16)(psidbits << (16 - psidlen));
> -+                      eabits |= ((u64)psidbits) << (48 - (fmr->ea_len - psidlen));
> -+              }
> -+
> -+              /* rewrite destination address */
> -+              *dest = fmr->ip6_prefix;
> -+              memcpy(&dest->s6_addr[10], addr, sizeof(*addr));
> -+              dest->s6_addr16[7] = htons(psidbits >> (16 - psidlen));
> -+
> -+              if (bytes > sizeof(u64))
> -+                      bytes = sizeof(u64);
> -+
> -+              /* insert eabits */
> -+              memcpy(&t, &dest->s6_addr[frombyte], bytes);
> -+              t = be64_to_cpu(t) & ~(((((u64)1) << fmr->ea_len) - 1)
> -+                      << (64 - fmr->ea_len - fromrem));
> -+              t = cpu_to_be64(t | (eabits >> fromrem));
> -+              memcpy(&dest->s6_addr[frombyte], &t, bytes);
> -+      }
> -+}
> -+
> -+
> - static int __ip6_tnl_rcv(struct ip6_tnl *tunnel, struct sk_buff *skb,
> -                        const struct tnl_ptk_info *tpi,
> -                        struct metadata_dst *tun_dst,
> -@@ -819,6 +938,27 @@ static int __ip6_tnl_rcv(struct ip6_tnl
> -       skb_reset_network_header(skb);
> -       memset(skb->cb, 0, sizeof(struct inet6_skb_parm));
> -
> -+      if (tpi->proto == htons(ETH_P_IP) && tunnel->parms.fmrs &&
> -+              !ipv6_addr_equal(&ipv6h->saddr, &tunnel->parms.raddr)) {
> -+                      /* Packet didn't come from BR, so lookup FMR */
> -+                      struct __ip6_tnl_fmr *fmr;
> -+                      struct in6_addr expected = tunnel->parms.raddr;
> -+                      for (fmr = tunnel->parms.fmrs; fmr; fmr = fmr->next)
> -+                              if (ipv6_prefix_equal(&ipv6h->saddr,
> -+                                      &fmr->ip6_prefix, fmr->ip6_prefix_len))
> -+                                              break;
> -+
> -+                      /* Check that IPv6 matches IPv4 source to prevent spoofing */
> -+                      if (fmr)
> -+                              ip4ip6_fmr_calc(&expected, ip_hdr(skb),
> -+                                              skb_tail_pointer(skb), fmr, false);
> -+
> -+                      if (!ipv6_addr_equal(&ipv6h->saddr, &expected)) {
> -+                              rcu_read_unlock();
> -+                              goto drop;
> -+                      }
> -+      }
> -+
> -       __skb_tunnel_rx(skb, tunnel->dev, tunnel->net);
> -
> -       err = dscp_ecn_decapsulate(tunnel, ipv6h, skb);
> -@@ -959,6 +1099,7 @@ static void init_tel_txopt(struct ipv6_t
> -       opt->ops.opt_nflen = 8;
> - }
> -
> -+
> - /**
> -  * ip6_tnl_addr_conflict - compare packet addresses to tunnel's own
> -  *   @t: the outgoing tunnel device
> -@@ -1311,6 +1452,7 @@ ip6ip6_tnl_xmit(struct sk_buff *skb, str
> - {
> -       struct ip6_tnl *t = netdev_priv(dev);
> -       struct ipv6hdr *ipv6h;
> -+      struct __ip6_tnl_fmr *fmr;
> -       int encap_limit = -1;
> -       __u16 offset;
> -       struct flowi6 fl6;
> -@@ -1376,6 +1518,18 @@ ip6ip6_tnl_xmit(struct sk_buff *skb, str
> -       fl6.flowi6_uid = sock_net_uid(dev_net(dev), NULL);
> -       dsfield = INET_ECN_encapsulate(dsfield, ipv6_get_dsfield(ipv6h));
> -
> -+      /* try to find matching FMR */
> -+      for (fmr = t->parms.fmrs; fmr; fmr = fmr->next) {
> -+              unsigned mshift = 32 - fmr->ip4_prefix_len;
> -+              if (ntohl(fmr->ip4_prefix.s_addr) >> mshift ==
> -+                              ntohl(ip_hdr(skb)->daddr) >> mshift)
> -+                      break;
> -+      }
> -+
> -+      /* change dstaddr according to FMR */
> -+      if (fmr)
> -+              ip4ip6_fmr_calc(&fl6.daddr, ip_hdr(skb), skb_tail_pointer(skb), fmr, true);
> -+
> -       if (iptunnel_handle_offloads(skb, SKB_GSO_IPXIP6))
> -               return -1;
> -
> -@@ -1505,6 +1659,14 @@ ip6_tnl_change(struct ip6_tnl *t, const
> -       t->parms.link = p->link;
> -       t->parms.proto = p->proto;
> -       t->parms.fwmark = p->fwmark;
> -+
> -+      while (t->parms.fmrs) {
> -+              struct __ip6_tnl_fmr *next = t->parms.fmrs->next;
> -+              kfree(t->parms.fmrs);
> -+              t->parms.fmrs = next;
> -+      }
> -+      t->parms.fmrs = p->fmrs;
> -+
> -       dst_cache_reset(&t->dst_cache);
> -       ip6_tnl_link_config(t);
> -       return 0;
> -@@ -1543,6 +1705,7 @@ ip6_tnl_parm_from_user(struct __ip6_tnl_
> -       p->flowinfo = u->flowinfo;
> -       p->link = u->link;
> -       p->proto = u->proto;
> -+      p->fmrs = NULL;
> -       memcpy(p->name, u->name, sizeof(u->name));
> - }
> -
> -@@ -1927,6 +2090,15 @@ static int ip6_tnl_validate(struct nlatt
> -       return 0;
> - }
> -
> -+static const struct nla_policy ip6_tnl_fmr_policy[IFLA_IPTUN_FMR_MAX + 1] = {
> -+      [IFLA_IPTUN_FMR_IP6_PREFIX] = { .len = sizeof(struct in6_addr) },
> -+      [IFLA_IPTUN_FMR_IP4_PREFIX] = { .len = sizeof(struct in_addr) },
> -+      [IFLA_IPTUN_FMR_IP6_PREFIX_LEN] = { .type = NLA_U8 },
> -+      [IFLA_IPTUN_FMR_IP4_PREFIX_LEN] = { .type = NLA_U8 },
> -+      [IFLA_IPTUN_FMR_EA_LEN] = { .type = NLA_U8 },
> -+      [IFLA_IPTUN_FMR_OFFSET] = { .type = NLA_U8 }
> -+};
> -+
> - static void ip6_tnl_netlink_parms(struct nlattr *data[],
> -                                 struct __ip6_tnl_parm *parms)
> - {
> -@@ -1964,6 +2136,46 @@ static void ip6_tnl_netlink_parms(struct
> -
> -       if (data[IFLA_IPTUN_FWMARK])
> -               parms->fwmark = nla_get_u32(data[IFLA_IPTUN_FWMARK]);
> -+
> -+      if (data[IFLA_IPTUN_FMRS]) {
> -+              unsigned rem;
> -+              struct nlattr *fmr;
> -+              nla_for_each_nested(fmr, data[IFLA_IPTUN_FMRS], rem) {
> -+                      struct nlattr *fmrd[IFLA_IPTUN_FMR_MAX + 1], *c;
> -+                      struct __ip6_tnl_fmr *nfmr;
> -+
> -+                      nla_parse_nested(fmrd, IFLA_IPTUN_FMR_MAX,
> -+                              fmr, ip6_tnl_fmr_policy, NULL);
> -+
> -+                      if (!(nfmr = kzalloc(sizeof(*nfmr), GFP_KERNEL)))
> -+                              continue;
> -+
> -+                      nfmr->offset = 6;
> -+
> -+                      if ((c = fmrd[IFLA_IPTUN_FMR_IP6_PREFIX]))
> -+                              nla_memcpy(&nfmr->ip6_prefix, fmrd[IFLA_IPTUN_FMR_IP6_PREFIX],
> -+                                      sizeof(nfmr->ip6_prefix));
> -+
> -+                      if ((c = fmrd[IFLA_IPTUN_FMR_IP4_PREFIX]))
> -+                              nla_memcpy(&nfmr->ip4_prefix, fmrd[IFLA_IPTUN_FMR_IP4_PREFIX],
> -+                                      sizeof(nfmr->ip4_prefix));
> -+
> -+                      if ((c = fmrd[IFLA_IPTUN_FMR_IP6_PREFIX_LEN]))
> -+                              nfmr->ip6_prefix_len = nla_get_u8(c);
> -+
> -+                      if ((c = fmrd[IFLA_IPTUN_FMR_IP4_PREFIX_LEN]))
> -+                              nfmr->ip4_prefix_len = nla_get_u8(c);
> -+
> -+                      if ((c = fmrd[IFLA_IPTUN_FMR_EA_LEN]))
> -+                              nfmr->ea_len = nla_get_u8(c);
> -+
> -+                      if ((c = fmrd[IFLA_IPTUN_FMR_OFFSET]))
> -+                              nfmr->offset = nla_get_u8(c);
> -+
> -+                      nfmr->next = parms->fmrs;
> -+                      parms->fmrs = nfmr;
> -+              }
> -+      }
> - }
> -
> - static bool ip6_tnl_netlink_encap_parms(struct nlattr *data[],
> -@@ -2079,6 +2291,12 @@ static void ip6_tnl_dellink(struct net_d
> -
> - static size_t ip6_tnl_get_size(const struct net_device *dev)
> - {
> -+      const struct ip6_tnl *t = netdev_priv(dev);
> -+      struct __ip6_tnl_fmr *c;
> -+      int fmrs = 0;
> -+      for (c = t->parms.fmrs; c; c = c->next)
> -+              ++fmrs;
> -+
> -       return
> -               /* IFLA_IPTUN_LINK */
> -               nla_total_size(4) +
> -@@ -2108,6 +2326,24 @@ static size_t ip6_tnl_get_size(const str
> -               nla_total_size(0) +
> -               /* IFLA_IPTUN_FWMARK */
> -               nla_total_size(4) +
> -+              /* IFLA_IPTUN_FMRS */
> -+              nla_total_size(0) +
> -+              (
> -+                      /* nest */
> -+                      nla_total_size(0) +
> -+                      /* IFLA_IPTUN_FMR_IP6_PREFIX */
> -+                      nla_total_size(sizeof(struct in6_addr)) +
> -+                      /* IFLA_IPTUN_FMR_IP4_PREFIX */
> -+                      nla_total_size(sizeof(struct in_addr)) +
> -+                      /* IFLA_IPTUN_FMR_EA_LEN */
> -+                      nla_total_size(1) +
> -+                      /* IFLA_IPTUN_FMR_IP6_PREFIX_LEN */
> -+                      nla_total_size(1) +
> -+                      /* IFLA_IPTUN_FMR_IP4_PREFIX_LEN */
> -+                      nla_total_size(1) +
> -+                      /* IFLA_IPTUN_FMR_OFFSET */
> -+                      nla_total_size(1)
> -+              ) * fmrs +
> -               0;
> - }
> -
> -@@ -2115,6 +2351,9 @@ static int ip6_tnl_fill_info(struct sk_b
> - {
> -       struct ip6_tnl *tunnel = netdev_priv(dev);
> -       struct __ip6_tnl_parm *parm = &tunnel->parms;
> -+      struct __ip6_tnl_fmr *c;
> -+      int fmrcnt = 0;
> -+      struct nlattr *fmrs;
> -
> -       if (nla_put_u32(skb, IFLA_IPTUN_LINK, parm->link) ||
> -           nla_put_in6_addr(skb, IFLA_IPTUN_LOCAL, &parm->laddr) ||
> -@@ -2124,9 +2363,27 @@ static int ip6_tnl_fill_info(struct sk_b
> -           nla_put_be32(skb, IFLA_IPTUN_FLOWINFO, parm->flowinfo) ||
> -           nla_put_u32(skb, IFLA_IPTUN_FLAGS, parm->flags) ||
> -           nla_put_u8(skb, IFLA_IPTUN_PROTO, parm->proto) ||
> --          nla_put_u32(skb, IFLA_IPTUN_FWMARK, parm->fwmark))
> -+          nla_put_u32(skb, IFLA_IPTUN_FWMARK, parm->fwmark) ||
> -+          !(fmrs = nla_nest_start(skb, IFLA_IPTUN_FMRS)))
> -               goto nla_put_failure;
> -
> -+      for (c = parm->fmrs; c; c = c->next) {
> -+              struct nlattr *fmr = nla_nest_start(skb, ++fmrcnt);
> -+              if (!fmr ||
> -+                      nla_put(skb, IFLA_IPTUN_FMR_IP6_PREFIX,
> -+                              sizeof(c->ip6_prefix), &c->ip6_prefix) ||
> -+                      nla_put(skb, IFLA_IPTUN_FMR_IP4_PREFIX,
> -+                              sizeof(c->ip4_prefix), &c->ip4_prefix) ||
> -+                      nla_put_u8(skb, IFLA_IPTUN_FMR_IP6_PREFIX_LEN, c->ip6_prefix_len) ||
> -+                      nla_put_u8(skb, IFLA_IPTUN_FMR_IP4_PREFIX_LEN, c->ip4_prefix_len) ||
> -+                      nla_put_u8(skb, IFLA_IPTUN_FMR_EA_LEN, c->ea_len) ||
> -+                      nla_put_u8(skb, IFLA_IPTUN_FMR_OFFSET, c->offset))
> -+                              goto nla_put_failure;
> -+
> -+              nla_nest_end(skb, fmr);
> -+      }
> -+      nla_nest_end(skb, fmrs);
> -+
> -       if (nla_put_u16(skb, IFLA_IPTUN_ENCAP_TYPE, tunnel->encap.type) ||
> -           nla_put_be16(skb, IFLA_IPTUN_ENCAP_SPORT, tunnel->encap.sport) ||
> -           nla_put_be16(skb, IFLA_IPTUN_ENCAP_DPORT, tunnel->encap.dport) ||
> -@@ -2166,6 +2423,7 @@ static const struct nla_policy ip6_tnl_p
> -       [IFLA_IPTUN_ENCAP_DPORT]        = { .type = NLA_U16 },
> -       [IFLA_IPTUN_COLLECT_METADATA]   = { .type = NLA_FLAG },
> -       [IFLA_IPTUN_FWMARK]             = { .type = NLA_U32 },
> -+      [IFLA_IPTUN_FMRS]               = { .type = NLA_NESTED },
> - };
> -
> - static struct rtnl_link_ops ip6_link_ops __read_mostly = {
> --
> 2.20.1
>
>
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel@lists.openwrt.org
> https://lists.openwrt.org/mailman/listinfo/openwrt-devel
diff mbox series

Patch

diff --git a/target/linux/generic/pending-5.4/666-Add-support-for-MAP-E-FMRs-mesh-mode.patch b/target/linux/generic/pending-5.4/666-Add-support-for-MAP-E-FMRs-mesh-mode.patch
deleted file mode 100644
index 8bcca1c4d159..000000000000
--- a/target/linux/generic/pending-5.4/666-Add-support-for-MAP-E-FMRs-mesh-mode.patch
+++ /dev/null
@@ -1,501 +0,0 @@ 
-From: Steven Barth <steven@midlink.org>
-Subject: Add support for MAP-E FMRs (mesh mode)
-
-MAP-E FMRs (draft-ietf-softwire-map-10) are rules for IPv4-communication
-between MAP CEs (mesh mode) without the need to forward such data to a
-border relay. This is similar to how 6rd works but for IPv4 over IPv6.
-
-Signed-off-by: Steven Barth <cyrus@openwrt.org>
----
- include/net/ip6_tunnel.h       |  13 ++
- include/uapi/linux/if_tunnel.h |  13 ++
- net/ipv6/ip6_tunnel.c          | 276 +++++++++++++++++++++++++++++++++++++++--
- 3 files changed, 291 insertions(+), 11 deletions(-)
-
---- a/include/net/ip6_tunnel.h
-+++ b/include/net/ip6_tunnel.h
-@@ -18,6 +18,18 @@
- /* determine capability on a per-packet basis */
- #define IP6_TNL_F_CAP_PER_PACKET 0x40000
- 
-+/* IPv6 tunnel FMR */
-+struct __ip6_tnl_fmr {
-+	struct __ip6_tnl_fmr *next; /* next fmr in list */
-+	struct in6_addr ip6_prefix;
-+	struct in_addr ip4_prefix;
-+
-+	__u8 ip6_prefix_len;
-+	__u8 ip4_prefix_len;
-+	__u8 ea_len;
-+	__u8 offset;
-+};
-+
- struct __ip6_tnl_parm {
- 	char name[IFNAMSIZ];	/* name of tunnel device */
- 	int link;		/* ifindex of underlying L2 interface */
-@@ -29,6 +41,7 @@ struct __ip6_tnl_parm {
- 	__u32 flags;		/* tunnel flags */
- 	struct in6_addr laddr;	/* local tunnel end-point address */
- 	struct in6_addr raddr;	/* remote tunnel end-point address */
-+	struct __ip6_tnl_fmr *fmrs;	/* FMRs */
- 
- 	__be16			i_flags;
- 	__be16			o_flags;
---- a/include/uapi/linux/if_tunnel.h
-+++ b/include/uapi/linux/if_tunnel.h
-@@ -77,10 +77,23 @@ enum {
- 	IFLA_IPTUN_ENCAP_DPORT,
- 	IFLA_IPTUN_COLLECT_METADATA,
- 	IFLA_IPTUN_FWMARK,
-+	IFLA_IPTUN_FMRS,
- 	__IFLA_IPTUN_MAX,
- };
- #define IFLA_IPTUN_MAX	(__IFLA_IPTUN_MAX - 1)
- 
-+enum {
-+	IFLA_IPTUN_FMR_UNSPEC,
-+	IFLA_IPTUN_FMR_IP6_PREFIX,
-+	IFLA_IPTUN_FMR_IP4_PREFIX,
-+	IFLA_IPTUN_FMR_IP6_PREFIX_LEN,
-+	IFLA_IPTUN_FMR_IP4_PREFIX_LEN,
-+	IFLA_IPTUN_FMR_EA_LEN,
-+	IFLA_IPTUN_FMR_OFFSET,
-+	__IFLA_IPTUN_FMR_MAX,
-+};
-+#define IFLA_IPTUN_FMR_MAX (__IFLA_IPTUN_FMR_MAX - 1)
-+
- enum tunnel_encap_types {
- 	TUNNEL_ENCAP_NONE,
- 	TUNNEL_ENCAP_FOU,
---- a/net/ipv6/ip6_tunnel.c
-+++ b/net/ipv6/ip6_tunnel.c
-@@ -11,6 +11,9 @@
-  *      linux/net/ipv6/sit.c and linux/net/ipv4/ipip.c
-  *
-  *      RFC 2473
-+ *
-+ *      Changes:
-+ *      Steven Barth <cyrus@openwrt.org>:           MAP-E FMR support
-  */
- 
- #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
-@@ -67,9 +70,9 @@ static bool log_ecn_error = true;
- module_param(log_ecn_error, bool, 0644);
- MODULE_PARM_DESC(log_ecn_error, "Log packets received with corrupted ECN");
- 
--static u32 HASH(const struct in6_addr *addr1, const struct in6_addr *addr2)
-+static u32 HASH(const struct in6_addr *addr)
- {
--	u32 hash = ipv6_addr_hash(addr1) ^ ipv6_addr_hash(addr2);
-+	u32 hash = ipv6_addr_hash(addr);
- 
- 	return hash_32(hash, IP6_TUNNEL_HASH_SIZE_SHIFT);
- }
-@@ -136,20 +139,29 @@ static struct net_device_stats *ip6_get_
- static struct ip6_tnl *
- ip6_tnl_lookup(struct net *net, const struct in6_addr *remote, const struct in6_addr *local)
- {
--	unsigned int hash = HASH(remote, local);
-+	unsigned int hash = HASH(local);
- 	struct ip6_tnl *t;
- 	struct ip6_tnl_net *ip6n = net_generic(net, ip6_tnl_net_id);
- 	struct in6_addr any;
-+	struct __ip6_tnl_fmr *fmr;
- 
- 	for_each_ip6_tunnel_rcu(ip6n->tnls_r_l[hash]) {
--		if (ipv6_addr_equal(local, &t->parms.laddr) &&
--		    ipv6_addr_equal(remote, &t->parms.raddr) &&
--		    (t->dev->flags & IFF_UP))
-+		if (!ipv6_addr_equal(local, &t->parms.laddr) ||
-+				!(t->dev->flags & IFF_UP))
-+			continue;
-+
-+		if (ipv6_addr_equal(remote, &t->parms.raddr))
- 			return t;
-+
-+		for (fmr = t->parms.fmrs; fmr; fmr = fmr->next) {
-+			if (ipv6_prefix_equal(remote, &fmr->ip6_prefix,
-+					fmr->ip6_prefix_len))
-+				return t;
-+		}
- 	}
- 
- 	memset(&any, 0, sizeof(any));
--	hash = HASH(&any, local);
-+	hash = HASH(local);
- 	for_each_ip6_tunnel_rcu(ip6n->tnls_r_l[hash]) {
- 		if (ipv6_addr_equal(local, &t->parms.laddr) &&
- 		    ipv6_addr_any(&t->parms.raddr) &&
-@@ -157,7 +169,7 @@ ip6_tnl_lookup(struct net *net, const st
- 			return t;
- 	}
- 
--	hash = HASH(remote, &any);
-+	hash = HASH(&any);
- 	for_each_ip6_tunnel_rcu(ip6n->tnls_r_l[hash]) {
- 		if (ipv6_addr_equal(remote, &t->parms.raddr) &&
- 		    ipv6_addr_any(&t->parms.laddr) &&
-@@ -197,7 +209,7 @@ ip6_tnl_bucket(struct ip6_tnl_net *ip6n,
- 
- 	if (!ipv6_addr_any(remote) || !ipv6_addr_any(local)) {
- 		prio = 1;
--		h = HASH(remote, local);
-+		h = HASH(local);
- 	}
- 	return &ip6n->tnls[prio][h];
- }
-@@ -378,6 +390,12 @@ ip6_tnl_dev_uninit(struct net_device *de
- 	struct net *net = t->net;
- 	struct ip6_tnl_net *ip6n = net_generic(net, ip6_tnl_net_id);
- 
-+	while (t->parms.fmrs) {
-+		struct __ip6_tnl_fmr *next = t->parms.fmrs->next;
-+		kfree(t->parms.fmrs);
-+		t->parms.fmrs = next;
-+	}
-+
- 	if (dev == ip6n->fb_tnl_dev)
- 		RCU_INIT_POINTER(ip6n->tnls_wc[0], NULL);
- 	else
-@@ -767,6 +785,107 @@ int ip6_tnl_rcv_ctl(struct ip6_tnl *t,
- }
- EXPORT_SYMBOL_GPL(ip6_tnl_rcv_ctl);
- 
-+/**
-+ * ip4ip6_fmr_calc - calculate target / source IPv6-address based on FMR
-+ *   @dest: destination IPv6 address buffer
-+ *   @skb: received socket buffer
-+ *   @fmr: MAP FMR
-+ *   @xmit: Calculate for xmit or rcv
-+ **/
-+static void ip4ip6_fmr_calc(struct in6_addr *dest,
-+		const struct iphdr *iph, const uint8_t *end,
-+		const struct __ip6_tnl_fmr *fmr, bool xmit)
-+{
-+	int psidlen = fmr->ea_len - (32 - fmr->ip4_prefix_len);
-+	u8 *portp = NULL;
-+	bool use_dest_addr;
-+	const struct iphdr *dsth = iph;
-+
-+	if ((u8*)dsth >= end)
-+		return;
-+
-+	/* find significant IP header */
-+	if (iph->protocol == IPPROTO_ICMP) {
-+		struct icmphdr *ih = (struct icmphdr*)(((u8*)dsth) + dsth->ihl * 4);
-+		if (ih && ((u8*)&ih[1]) <= end && (
-+			ih->type == ICMP_DEST_UNREACH ||
-+			ih->type == ICMP_SOURCE_QUENCH ||
-+			ih->type == ICMP_TIME_EXCEEDED ||
-+			ih->type == ICMP_PARAMETERPROB ||
-+			ih->type == ICMP_REDIRECT))
-+				dsth = (const struct iphdr*)&ih[1];
-+	}
-+
-+	/* in xmit-path use dest port by default and source port only if
-+		this is an ICMP reply to something else; vice versa in rcv-path */
-+	use_dest_addr = (xmit && dsth == iph) || (!xmit && dsth != iph);
-+
-+	/* get dst port */
-+	if (((u8*)&dsth[1]) <= end && (
-+		dsth->protocol == IPPROTO_UDP ||
-+		dsth->protocol == IPPROTO_TCP ||
-+		dsth->protocol == IPPROTO_SCTP ||
-+		dsth->protocol == IPPROTO_DCCP)) {
-+			/* for UDP, TCP, SCTP and DCCP source and dest port
-+			follow IPv4 header directly */
-+			portp = ((u8*)dsth) + dsth->ihl * 4;
-+
-+			if (use_dest_addr)
-+				portp += sizeof(u16);
-+	} else if (iph->protocol == IPPROTO_ICMP) {
-+		struct icmphdr *ih = (struct icmphdr*)(((u8*)dsth) + dsth->ihl * 4);
-+
-+		/* use icmp identifier as port */
-+		if (((u8*)&ih) <= end && (
-+		    (use_dest_addr && (
-+		    ih->type == ICMP_ECHOREPLY ||
-+			ih->type == ICMP_TIMESTAMPREPLY ||
-+			ih->type == ICMP_INFO_REPLY ||
-+			ih->type == ICMP_ADDRESSREPLY)) ||
-+			(!use_dest_addr && (
-+			ih->type == ICMP_ECHO ||
-+			ih->type == ICMP_TIMESTAMP ||
-+			ih->type == ICMP_INFO_REQUEST ||
-+			ih->type == ICMP_ADDRESS)
-+			)))
-+				portp = (u8*)&ih->un.echo.id;
-+	}
-+
-+	if ((portp && &portp[2] <= end) || psidlen == 0) {
-+		int frombyte = fmr->ip6_prefix_len / 8;
-+		int fromrem = fmr->ip6_prefix_len % 8;
-+		int bytes = sizeof(struct in6_addr) - frombyte;
-+		const u32 *addr = (use_dest_addr) ? &iph->daddr : &iph->saddr;
-+		u64 eabits = ((u64)ntohl(*addr)) << (32 + fmr->ip4_prefix_len);
-+		u64 t = 0;
-+
-+		/* extract PSID from port and add it to eabits */
-+		u16 psidbits = 0;
-+		if (psidlen > 0) {
-+			psidbits = ((u16)portp[0]) << 8 | ((u16)portp[1]);
-+			psidbits >>= 16 - psidlen - fmr->offset;
-+			psidbits = (u16)(psidbits << (16 - psidlen));
-+			eabits |= ((u64)psidbits) << (48 - (fmr->ea_len - psidlen));
-+		}
-+
-+		/* rewrite destination address */
-+		*dest = fmr->ip6_prefix;
-+		memcpy(&dest->s6_addr[10], addr, sizeof(*addr));
-+		dest->s6_addr16[7] = htons(psidbits >> (16 - psidlen));
-+
-+		if (bytes > sizeof(u64))
-+			bytes = sizeof(u64);
-+
-+		/* insert eabits */
-+		memcpy(&t, &dest->s6_addr[frombyte], bytes);
-+		t = be64_to_cpu(t) & ~(((((u64)1) << fmr->ea_len) - 1)
-+			<< (64 - fmr->ea_len - fromrem));
-+		t = cpu_to_be64(t | (eabits >> fromrem));
-+		memcpy(&dest->s6_addr[frombyte], &t, bytes);
-+	}
-+}
-+
-+
- static int __ip6_tnl_rcv(struct ip6_tnl *tunnel, struct sk_buff *skb,
- 			 const struct tnl_ptk_info *tpi,
- 			 struct metadata_dst *tun_dst,
-@@ -819,6 +938,27 @@ static int __ip6_tnl_rcv(struct ip6_tnl
- 	skb_reset_network_header(skb);
- 	memset(skb->cb, 0, sizeof(struct inet6_skb_parm));
- 
-+	if (tpi->proto == htons(ETH_P_IP) && tunnel->parms.fmrs &&
-+		!ipv6_addr_equal(&ipv6h->saddr, &tunnel->parms.raddr)) {
-+			/* Packet didn't come from BR, so lookup FMR */
-+			struct __ip6_tnl_fmr *fmr;
-+			struct in6_addr expected = tunnel->parms.raddr;
-+			for (fmr = tunnel->parms.fmrs; fmr; fmr = fmr->next)
-+				if (ipv6_prefix_equal(&ipv6h->saddr,
-+					&fmr->ip6_prefix, fmr->ip6_prefix_len))
-+						break;
-+
-+			/* Check that IPv6 matches IPv4 source to prevent spoofing */
-+			if (fmr)
-+				ip4ip6_fmr_calc(&expected, ip_hdr(skb),
-+						skb_tail_pointer(skb), fmr, false);
-+
-+			if (!ipv6_addr_equal(&ipv6h->saddr, &expected)) {
-+				rcu_read_unlock();
-+				goto drop;
-+			}
-+	}
-+
- 	__skb_tunnel_rx(skb, tunnel->dev, tunnel->net);
- 
- 	err = dscp_ecn_decapsulate(tunnel, ipv6h, skb);
-@@ -959,6 +1099,7 @@ static void init_tel_txopt(struct ipv6_t
- 	opt->ops.opt_nflen = 8;
- }
- 
-+
- /**
-  * ip6_tnl_addr_conflict - compare packet addresses to tunnel's own
-  *   @t: the outgoing tunnel device
-@@ -1311,6 +1452,7 @@ ip6ip6_tnl_xmit(struct sk_buff *skb, str
- {
- 	struct ip6_tnl *t = netdev_priv(dev);
- 	struct ipv6hdr *ipv6h;
-+	struct __ip6_tnl_fmr *fmr;
- 	int encap_limit = -1;
- 	__u16 offset;
- 	struct flowi6 fl6;
-@@ -1376,6 +1518,18 @@ ip6ip6_tnl_xmit(struct sk_buff *skb, str
- 	fl6.flowi6_uid = sock_net_uid(dev_net(dev), NULL);
- 	dsfield = INET_ECN_encapsulate(dsfield, ipv6_get_dsfield(ipv6h));
- 
-+	/* try to find matching FMR */
-+	for (fmr = t->parms.fmrs; fmr; fmr = fmr->next) {
-+		unsigned mshift = 32 - fmr->ip4_prefix_len;
-+		if (ntohl(fmr->ip4_prefix.s_addr) >> mshift ==
-+				ntohl(ip_hdr(skb)->daddr) >> mshift)
-+			break;
-+	}
-+
-+	/* change dstaddr according to FMR */
-+	if (fmr)
-+		ip4ip6_fmr_calc(&fl6.daddr, ip_hdr(skb), skb_tail_pointer(skb), fmr, true);
-+
- 	if (iptunnel_handle_offloads(skb, SKB_GSO_IPXIP6))
- 		return -1;
- 
-@@ -1505,6 +1659,14 @@ ip6_tnl_change(struct ip6_tnl *t, const
- 	t->parms.link = p->link;
- 	t->parms.proto = p->proto;
- 	t->parms.fwmark = p->fwmark;
-+
-+	while (t->parms.fmrs) {
-+		struct __ip6_tnl_fmr *next = t->parms.fmrs->next;
-+		kfree(t->parms.fmrs);
-+		t->parms.fmrs = next;
-+	}
-+	t->parms.fmrs = p->fmrs;
-+
- 	dst_cache_reset(&t->dst_cache);
- 	ip6_tnl_link_config(t);
- 	return 0;
-@@ -1543,6 +1705,7 @@ ip6_tnl_parm_from_user(struct __ip6_tnl_
- 	p->flowinfo = u->flowinfo;
- 	p->link = u->link;
- 	p->proto = u->proto;
-+	p->fmrs = NULL;
- 	memcpy(p->name, u->name, sizeof(u->name));
- }
- 
-@@ -1927,6 +2090,15 @@ static int ip6_tnl_validate(struct nlatt
- 	return 0;
- }
- 
-+static const struct nla_policy ip6_tnl_fmr_policy[IFLA_IPTUN_FMR_MAX + 1] = {
-+	[IFLA_IPTUN_FMR_IP6_PREFIX] = { .len = sizeof(struct in6_addr) },
-+	[IFLA_IPTUN_FMR_IP4_PREFIX] = { .len = sizeof(struct in_addr) },
-+	[IFLA_IPTUN_FMR_IP6_PREFIX_LEN] = { .type = NLA_U8 },
-+	[IFLA_IPTUN_FMR_IP4_PREFIX_LEN] = { .type = NLA_U8 },
-+	[IFLA_IPTUN_FMR_EA_LEN] = { .type = NLA_U8 },
-+	[IFLA_IPTUN_FMR_OFFSET] = { .type = NLA_U8 }
-+};
-+
- static void ip6_tnl_netlink_parms(struct nlattr *data[],
- 				  struct __ip6_tnl_parm *parms)
- {
-@@ -1964,6 +2136,46 @@ static void ip6_tnl_netlink_parms(struct
- 
- 	if (data[IFLA_IPTUN_FWMARK])
- 		parms->fwmark = nla_get_u32(data[IFLA_IPTUN_FWMARK]);
-+
-+	if (data[IFLA_IPTUN_FMRS]) {
-+		unsigned rem;
-+		struct nlattr *fmr;
-+		nla_for_each_nested(fmr, data[IFLA_IPTUN_FMRS], rem) {
-+			struct nlattr *fmrd[IFLA_IPTUN_FMR_MAX + 1], *c;
-+			struct __ip6_tnl_fmr *nfmr;
-+
-+			nla_parse_nested(fmrd, IFLA_IPTUN_FMR_MAX,
-+				fmr, ip6_tnl_fmr_policy, NULL);
-+
-+			if (!(nfmr = kzalloc(sizeof(*nfmr), GFP_KERNEL)))
-+				continue;
-+
-+			nfmr->offset = 6;
-+
-+			if ((c = fmrd[IFLA_IPTUN_FMR_IP6_PREFIX]))
-+				nla_memcpy(&nfmr->ip6_prefix, fmrd[IFLA_IPTUN_FMR_IP6_PREFIX],
-+					sizeof(nfmr->ip6_prefix));
-+
-+			if ((c = fmrd[IFLA_IPTUN_FMR_IP4_PREFIX]))
-+				nla_memcpy(&nfmr->ip4_prefix, fmrd[IFLA_IPTUN_FMR_IP4_PREFIX],
-+					sizeof(nfmr->ip4_prefix));
-+
-+			if ((c = fmrd[IFLA_IPTUN_FMR_IP6_PREFIX_LEN]))
-+				nfmr->ip6_prefix_len = nla_get_u8(c);
-+
-+			if ((c = fmrd[IFLA_IPTUN_FMR_IP4_PREFIX_LEN]))
-+				nfmr->ip4_prefix_len = nla_get_u8(c);
-+
-+			if ((c = fmrd[IFLA_IPTUN_FMR_EA_LEN]))
-+				nfmr->ea_len = nla_get_u8(c);
-+
-+			if ((c = fmrd[IFLA_IPTUN_FMR_OFFSET]))
-+				nfmr->offset = nla_get_u8(c);
-+
-+			nfmr->next = parms->fmrs;
-+			parms->fmrs = nfmr;
-+		}
-+	}
- }
- 
- static bool ip6_tnl_netlink_encap_parms(struct nlattr *data[],
-@@ -2079,6 +2291,12 @@ static void ip6_tnl_dellink(struct net_d
- 
- static size_t ip6_tnl_get_size(const struct net_device *dev)
- {
-+	const struct ip6_tnl *t = netdev_priv(dev);
-+	struct __ip6_tnl_fmr *c;
-+	int fmrs = 0;
-+	for (c = t->parms.fmrs; c; c = c->next)
-+		++fmrs;
-+
- 	return
- 		/* IFLA_IPTUN_LINK */
- 		nla_total_size(4) +
-@@ -2108,6 +2326,24 @@ static size_t ip6_tnl_get_size(const str
- 		nla_total_size(0) +
- 		/* IFLA_IPTUN_FWMARK */
- 		nla_total_size(4) +
-+		/* IFLA_IPTUN_FMRS */
-+		nla_total_size(0) +
-+		(
-+			/* nest */
-+			nla_total_size(0) +
-+			/* IFLA_IPTUN_FMR_IP6_PREFIX */
-+			nla_total_size(sizeof(struct in6_addr)) +
-+			/* IFLA_IPTUN_FMR_IP4_PREFIX */
-+			nla_total_size(sizeof(struct in_addr)) +
-+			/* IFLA_IPTUN_FMR_EA_LEN */
-+			nla_total_size(1) +
-+			/* IFLA_IPTUN_FMR_IP6_PREFIX_LEN */
-+			nla_total_size(1) +
-+			/* IFLA_IPTUN_FMR_IP4_PREFIX_LEN */
-+			nla_total_size(1) +
-+			/* IFLA_IPTUN_FMR_OFFSET */
-+			nla_total_size(1)
-+		) * fmrs +
- 		0;
- }
- 
-@@ -2115,6 +2351,9 @@ static int ip6_tnl_fill_info(struct sk_b
- {
- 	struct ip6_tnl *tunnel = netdev_priv(dev);
- 	struct __ip6_tnl_parm *parm = &tunnel->parms;
-+	struct __ip6_tnl_fmr *c;
-+	int fmrcnt = 0;
-+	struct nlattr *fmrs;
- 
- 	if (nla_put_u32(skb, IFLA_IPTUN_LINK, parm->link) ||
- 	    nla_put_in6_addr(skb, IFLA_IPTUN_LOCAL, &parm->laddr) ||
-@@ -2124,9 +2363,27 @@ static int ip6_tnl_fill_info(struct sk_b
- 	    nla_put_be32(skb, IFLA_IPTUN_FLOWINFO, parm->flowinfo) ||
- 	    nla_put_u32(skb, IFLA_IPTUN_FLAGS, parm->flags) ||
- 	    nla_put_u8(skb, IFLA_IPTUN_PROTO, parm->proto) ||
--	    nla_put_u32(skb, IFLA_IPTUN_FWMARK, parm->fwmark))
-+	    nla_put_u32(skb, IFLA_IPTUN_FWMARK, parm->fwmark) ||
-+	    !(fmrs = nla_nest_start(skb, IFLA_IPTUN_FMRS)))
- 		goto nla_put_failure;
- 
-+	for (c = parm->fmrs; c; c = c->next) {
-+		struct nlattr *fmr = nla_nest_start(skb, ++fmrcnt);
-+		if (!fmr ||
-+			nla_put(skb, IFLA_IPTUN_FMR_IP6_PREFIX,
-+				sizeof(c->ip6_prefix), &c->ip6_prefix) ||
-+			nla_put(skb, IFLA_IPTUN_FMR_IP4_PREFIX,
-+				sizeof(c->ip4_prefix), &c->ip4_prefix) ||
-+			nla_put_u8(skb, IFLA_IPTUN_FMR_IP6_PREFIX_LEN, c->ip6_prefix_len) ||
-+			nla_put_u8(skb, IFLA_IPTUN_FMR_IP4_PREFIX_LEN, c->ip4_prefix_len) ||
-+			nla_put_u8(skb, IFLA_IPTUN_FMR_EA_LEN, c->ea_len) ||
-+			nla_put_u8(skb, IFLA_IPTUN_FMR_OFFSET, c->offset))
-+				goto nla_put_failure;
-+
-+		nla_nest_end(skb, fmr);
-+	}
-+	nla_nest_end(skb, fmrs);
-+
- 	if (nla_put_u16(skb, IFLA_IPTUN_ENCAP_TYPE, tunnel->encap.type) ||
- 	    nla_put_be16(skb, IFLA_IPTUN_ENCAP_SPORT, tunnel->encap.sport) ||
- 	    nla_put_be16(skb, IFLA_IPTUN_ENCAP_DPORT, tunnel->encap.dport) ||
-@@ -2166,6 +2423,7 @@ static const struct nla_policy ip6_tnl_p
- 	[IFLA_IPTUN_ENCAP_DPORT]	= { .type = NLA_U16 },
- 	[IFLA_IPTUN_COLLECT_METADATA]	= { .type = NLA_FLAG },
- 	[IFLA_IPTUN_FWMARK]		= { .type = NLA_U32 },
-+	[IFLA_IPTUN_FMRS]		= { .type = NLA_NESTED },
- };
- 
- static struct rtnl_link_ops ip6_link_ops __read_mostly = {