Implement minimal support for processing of SR-enabled packets as described in https://tools.ietf.org/html/draft-ietf-6man-segment-routing-header-02. This patch implements the following operations: - Intermediate segment endpoint: incrementation of active segment and rerouting. - Egress for SR-encapsulated packets: decapsulation of outer IPv6 header + SRH and routing of inner packet. - Cleanup flag support for SR-inlined packets: removal of SRH if we are the penultimate segment endpoint. A per-interface sysctl seg6_enabled is provided, to accept/deny SR-enabled packets. Default is deny. This patch does not provide support for HMAC-signed packets.
Showing the changes to include/uapi/linux (2 of 7 files). Show all
Unified · Split
| @@ -39,6 +39,7 @@ struct in6_ifreq { · 38 unmodified lines | |||
| 39 | #define IPV6_SRCRT_STRICT 0x01 /* Deprecated; will be removed */ | 39 | #define IPV6_SRCRT_STRICT 0x01 /* Deprecated; will be removed */ |
| 40 | #define IPV6_SRCRT_TYPE_0 0 /* Deprecated; will be removed */ | 40 | #define IPV6_SRCRT_TYPE_0 0 /* Deprecated; will be removed */ |
| 41 | #define IPV6_SRCRT_TYPE_2 2 /* IPv6 type 2 Routing Header */ | 41 | #define IPV6_SRCRT_TYPE_2 2 /* IPv6 type 2 Routing Header */ |
| 42 | #define IPV6_SRCRT_TYPE_4 4 /* Segment Routing with IPv6 */ | ||
| 42 | 43 | ||
| 43 | /* | 44 | /* |
| 44 | * routing header | 45 | * routing header |
| @@ -178,6 +179,7 @@ enum { · 133 unmodified lines | |||
| 178 | DEVCONF_DROP_UNSOLICITED_NA, | 179 | DEVCONF_DROP_UNSOLICITED_NA, |
| 179 | DEVCONF_KEEP_ADDR_ON_DOWN, | 180 | DEVCONF_KEEP_ADDR_ON_DOWN, |
| 180 | DEVCONF_RTR_SOLICIT_MAX_INTERVAL, | 181 | DEVCONF_RTR_SOLICIT_MAX_INTERVAL, |
| 182 | DEVCONF_SEG6_ENABLED, | ||
| 181 | DEVCONF_MAX | 183 | DEVCONF_MAX |
| 182 | }; | 184 | }; |
| 183 | 185 | ||
| @@ -0,0 +1,54 @@ | |||
| 1 | /* | ||
| 2 | * SR-IPv6 implementation | ||
| 3 | * | ||
| 4 | * Author: | ||
| 5 | * David Lebrun <david.lebrun@uclouvain.be> | ||
| 6 | * | ||
| 7 | * | ||
| 8 | * This program is free software; you can redistribute it and/or | ||
| 9 | * modify it under the terms of the GNU General Public License | ||
| 10 | * as published by the Free Software Foundation; either version | ||
| 11 | * 2 of the License, or (at your option) any later version. | ||
| 12 | */ | ||
| 13 | |||
| 14 | #ifndef _UAPI_LINUX_SEG6_H | ||
| 15 | #define _UAPI_LINUX_SEG6_H | ||
| 16 | |||
| 17 | /* | ||
| 18 | * SRH | ||
| 19 | */ | ||
| 20 | struct ipv6_sr_hdr { | ||
| 21 | __u8 nexthdr; | ||
| 22 | __u8 hdrlen; | ||
| 23 | __u8 type; | ||
| 24 | __u8 segments_left; | ||
| 25 | __u8 first_segment; | ||
| 26 | __u8 flag_1; | ||
| 27 | __u8 flag_2; | ||
| 28 | __u8 reserved; | ||
| 29 | |||
| 30 | struct in6_addr segments[0]; | ||
| 31 | }; | ||
| 32 | |||
| 33 | #define SR6_FLAG1_CLEANUP (1 << 7) | ||
| 34 | #define SR6_FLAG1_PROTECTED (1 << 6) | ||
| 35 | #define SR6_FLAG1_OAM (1 << 5) | ||
| 36 | #define SR6_FLAG1_ALERT (1 << 4) | ||
| 37 | #define SR6_FLAG1_HMAC (1 << 3) | ||
| 38 | |||
| 39 | #define SR6_TLV_INGRESS 1 | ||
| 40 | #define SR6_TLV_EGRESS 2 | ||
| 41 | #define SR6_TLV_OPAQUE 3 | ||
| 42 | #define SR6_TLV_PADDING 4 | ||
| 43 | #define SR6_TLV_HMAC 5 | ||
| 44 | |||
| 45 | #define sr_has_cleanup(srh) ((srh)->flag_1 & SR6_FLAG1_CLEANUP) | ||
| 46 | #define sr_has_hmac(srh) ((srh)->flag_1 & SR6_FLAG1_HMAC) | ||
| 47 | |||
| 48 | struct sr6_tlv { | ||
| 49 | __u8 type; | ||
| 50 | __u8 len; | ||
| 51 | __u8 data[0]; | ||
| 52 | }; | ||
| 53 | |||
| 54 | #endif | ||