Implement minimal support for processing of SR-enabled packets as described in https://tools.ietf.org/html/draft-ietf-6man-segment-routing-header-02. This patch implements the following operations: - Intermediate segment endpoint: incrementation of active segment and rerouting. - Egress for SR-encapsulated packets: decapsulation of outer IPv6 header + SRH and routing of inner packet. - Cleanup flag support for SR-inlined packets: removal of SRH if we are the penultimate segment endpoint. A per-interface sysctl seg6_enabled is provided, to accept/deny SR-enabled packets. Default is deny. This patch does not provide support for HMAC-signed packets.
Showing the changes to include/uapi/linux (2 of 7 files). Show all
Unified · Split
| @@ -39,6 +39,7 @@ struct in6_ifreq { · 38 unmodified lines | ||
| 39 | 39 | #define IPV6_SRCRT_STRICT 0x01 /* Deprecated; will be removed */ |
| 40 | 40 | #define IPV6_SRCRT_TYPE_0 0 /* Deprecated; will be removed */ |
| 41 | 41 | #define IPV6_SRCRT_TYPE_2 2 /* IPv6 type 2 Routing Header */ |
| 42 | +#define IPV6_SRCRT_TYPE_4 4 /* Segment Routing with IPv6 */ | |
| 42 | 43 | |
| 43 | 44 | /* |
| 44 | 45 | * routing header |
| @@ -178,6 +179,7 @@ enum { · 133 unmodified lines | ||
| 178 | 179 | DEVCONF_DROP_UNSOLICITED_NA, |
| 179 | 180 | DEVCONF_KEEP_ADDR_ON_DOWN, |
| 180 | 181 | DEVCONF_RTR_SOLICIT_MAX_INTERVAL, |
| 182 | + DEVCONF_SEG6_ENABLED, | |
| 181 | 183 | DEVCONF_MAX |
| 182 | 184 | }; |
| 183 | 185 | |
| @@ -0,0 +1,54 @@ | ||
| 1 | +/* | |
| 2 | + * SR-IPv6 implementation | |
| 3 | + * | |
| 4 | + * Author: | |
| 5 | + * David Lebrun <david.lebrun@uclouvain.be> | |
| 6 | + * | |
| 7 | + * | |
| 8 | + * This program is free software; you can redistribute it and/or | |
| 9 | + * modify it under the terms of the GNU General Public License | |
| 10 | + * as published by the Free Software Foundation; either version | |
| 11 | + * 2 of the License, or (at your option) any later version. | |
| 12 | + */ | |
| 13 | + | |
| 14 | +#ifndef _UAPI_LINUX_SEG6_H | |
| 15 | +#define _UAPI_LINUX_SEG6_H | |
| 16 | + | |
| 17 | +/* | |
| 18 | + * SRH | |
| 19 | + */ | |
| 20 | +struct ipv6_sr_hdr { | |
| 21 | + __u8 nexthdr; | |
| 22 | + __u8 hdrlen; | |
| 23 | + __u8 type; | |
| 24 | + __u8 segments_left; | |
| 25 | + __u8 first_segment; | |
| 26 | + __u8 flag_1; | |
| 27 | + __u8 flag_2; | |
| 28 | + __u8 reserved; | |
| 29 | + | |
| 30 | + struct in6_addr segments[0]; | |
| 31 | +}; | |
| 32 | + | |
| 33 | +#define SR6_FLAG1_CLEANUP (1 << 7) | |
| 34 | +#define SR6_FLAG1_PROTECTED (1 << 6) | |
| 35 | +#define SR6_FLAG1_OAM (1 << 5) | |
| 36 | +#define SR6_FLAG1_ALERT (1 << 4) | |
| 37 | +#define SR6_FLAG1_HMAC (1 << 3) | |
| 38 | + | |
| 39 | +#define SR6_TLV_INGRESS 1 | |
| 40 | +#define SR6_TLV_EGRESS 2 | |
| 41 | +#define SR6_TLV_OPAQUE 3 | |
| 42 | +#define SR6_TLV_PADDING 4 | |
| 43 | +#define SR6_TLV_HMAC 5 | |
| 44 | + | |
| 45 | +#define sr_has_cleanup(srh) ((srh)->flag_1 & SR6_FLAG1_CLEANUP) | |
| 46 | +#define sr_has_hmac(srh) ((srh)->flag_1 & SR6_FLAG1_HMAC) | |
| 47 | + | |
| 48 | +struct sr6_tlv { | |
| 49 | + __u8 type; | |
| 50 | + __u8 len; | |
| 51 | + __u8 data[0]; | |
| 52 | +}; | |
| 53 | + | |
| 54 | +#endif | |