349 lines
8.5 KiB
C
349 lines
8.5 KiB
C
/*
|
|
* RFC3927 ZeroConf IPv4 Link-Local addressing
|
|
* (see <http://www.zeroconf.org/>)
|
|
*
|
|
* Copied from BusyBox - networking/zcip.c
|
|
*
|
|
* Copyright (C) 2003 by Arthur van Hoff (avh@strangeberry.com)
|
|
* Copyright (C) 2004 by David Brownell
|
|
* Copyright (C) 2010 by Joe Hershberger
|
|
*
|
|
* Licensed under the GPL v2 or later
|
|
*/
|
|
|
|
#include <common.h>
|
|
#include <env.h>
|
|
#include <net.h>
|
|
#include <rand.h>
|
|
#include "arp.h"
|
|
#include "net_rand.h"
|
|
|
|
/* We don't need more than 32 bits of the counter */
|
|
#define MONOTONIC_MS() ((unsigned)get_timer(0) * (1000 / CONFIG_SYS_HZ))
|
|
|
|
enum {
|
|
/* 169.254.0.0 */
|
|
LINKLOCAL_ADDR = 0xa9fe0000,
|
|
|
|
IN_CLASSB_NET = 0xffff0000,
|
|
IN_CLASSB_HOST = 0x0000ffff,
|
|
|
|
/* protocol timeout parameters, specified in seconds */
|
|
PROBE_WAIT = 1,
|
|
PROBE_MIN = 1,
|
|
PROBE_MAX = 2,
|
|
PROBE_NUM = 3,
|
|
MAX_CONFLICTS = 10,
|
|
RATE_LIMIT_INTERVAL = 60,
|
|
ANNOUNCE_WAIT = 2,
|
|
ANNOUNCE_NUM = 2,
|
|
ANNOUNCE_INTERVAL = 2,
|
|
DEFEND_INTERVAL = 10
|
|
};
|
|
|
|
/* States during the configuration process. */
|
|
static enum ll_state_t {
|
|
PROBE = 0,
|
|
RATE_LIMIT_PROBE,
|
|
ANNOUNCE,
|
|
MONITOR,
|
|
DEFEND,
|
|
DISABLED
|
|
} state = DISABLED;
|
|
|
|
static struct in_addr ip;
|
|
static int timeout_ms = -1;
|
|
static unsigned deadline_ms;
|
|
static unsigned conflicts;
|
|
static unsigned nprobes;
|
|
static unsigned nclaims;
|
|
static int ready;
|
|
static unsigned int seed;
|
|
|
|
static void link_local_timeout(void);
|
|
|
|
/**
|
|
* Pick a random link local IP address on 169.254/16, except that
|
|
* the first and last 256 addresses are reserved.
|
|
*/
|
|
static struct in_addr pick(void)
|
|
{
|
|
unsigned tmp;
|
|
struct in_addr ip;
|
|
|
|
do {
|
|
tmp = rand_r(&seed) & IN_CLASSB_HOST;
|
|
} while (tmp > (IN_CLASSB_HOST - 0x0200));
|
|
ip.s_addr = htonl((LINKLOCAL_ADDR + 0x0100) + tmp);
|
|
return ip;
|
|
}
|
|
|
|
/**
|
|
* Return milliseconds of random delay, up to "secs" seconds.
|
|
*/
|
|
static inline unsigned random_delay_ms(unsigned secs)
|
|
{
|
|
return rand_r(&seed) % (secs * 1000);
|
|
}
|
|
|
|
static void configure_wait(void)
|
|
{
|
|
if (timeout_ms == -1)
|
|
return;
|
|
|
|
/* poll, being ready to adjust current timeout */
|
|
if (!timeout_ms)
|
|
timeout_ms = random_delay_ms(PROBE_WAIT);
|
|
|
|
/* set deadline_ms to the point in time when we timeout */
|
|
deadline_ms = MONOTONIC_MS() + timeout_ms;
|
|
|
|
debug_cond(DEBUG_DEV_PKT, "...wait %d %s nprobes=%u, nclaims=%u\n",
|
|
timeout_ms, eth_get_name(), nprobes, nclaims);
|
|
|
|
net_set_timeout_handler(timeout_ms, link_local_timeout);
|
|
}
|
|
|
|
void link_local_start(void)
|
|
{
|
|
ip = env_get_ip("llipaddr");
|
|
if (ip.s_addr != 0 &&
|
|
(ntohl(ip.s_addr) & IN_CLASSB_NET) != LINKLOCAL_ADDR) {
|
|
puts("invalid link address");
|
|
net_set_state(NETLOOP_FAIL);
|
|
return;
|
|
}
|
|
net_netmask.s_addr = htonl(IN_CLASSB_NET);
|
|
|
|
seed = seed_mac();
|
|
if (ip.s_addr == 0)
|
|
ip = pick();
|
|
|
|
state = PROBE;
|
|
timeout_ms = 0;
|
|
conflicts = 0;
|
|
nprobes = 0;
|
|
nclaims = 0;
|
|
ready = 0;
|
|
|
|
configure_wait();
|
|
}
|
|
|
|
static void link_local_timeout(void)
|
|
{
|
|
switch (state) {
|
|
case PROBE:
|
|
/* timeouts in the PROBE state mean no conflicting ARP packets
|
|
have been received, so we can progress through the states */
|
|
if (nprobes < PROBE_NUM) {
|
|
struct in_addr zero_ip = {.s_addr = 0};
|
|
|
|
nprobes++;
|
|
debug_cond(DEBUG_LL_STATE, "probe/%u %s@%pI4\n",
|
|
nprobes, eth_get_name(), &ip);
|
|
arp_raw_request(zero_ip, net_null_ethaddr, ip);
|
|
timeout_ms = PROBE_MIN * 1000;
|
|
timeout_ms += random_delay_ms(PROBE_MAX - PROBE_MIN);
|
|
} else {
|
|
/* Switch to announce state */
|
|
state = ANNOUNCE;
|
|
nclaims = 0;
|
|
debug_cond(DEBUG_LL_STATE, "announce/%u %s@%pI4\n",
|
|
nclaims, eth_get_name(), &ip);
|
|
arp_raw_request(ip, net_ethaddr, ip);
|
|
timeout_ms = ANNOUNCE_INTERVAL * 1000;
|
|
}
|
|
break;
|
|
case RATE_LIMIT_PROBE:
|
|
/* timeouts in the RATE_LIMIT_PROBE state mean no conflicting
|
|
ARP packets have been received, so we can move immediately
|
|
to the announce state */
|
|
state = ANNOUNCE;
|
|
nclaims = 0;
|
|
debug_cond(DEBUG_LL_STATE, "announce/%u %s@%pI4\n",
|
|
nclaims, eth_get_name(), &ip);
|
|
arp_raw_request(ip, net_ethaddr, ip);
|
|
timeout_ms = ANNOUNCE_INTERVAL * 1000;
|
|
break;
|
|
case ANNOUNCE:
|
|
/* timeouts in the ANNOUNCE state mean no conflicting ARP
|
|
packets have been received, so we can progress through
|
|
the states */
|
|
if (nclaims < ANNOUNCE_NUM) {
|
|
nclaims++;
|
|
debug_cond(DEBUG_LL_STATE, "announce/%u %s@%pI4\n",
|
|
nclaims, eth_get_name(), &ip);
|
|
arp_raw_request(ip, net_ethaddr, ip);
|
|
timeout_ms = ANNOUNCE_INTERVAL * 1000;
|
|
} else {
|
|
/* Switch to monitor state */
|
|
state = MONITOR;
|
|
printf("Successfully assigned %pI4\n", &ip);
|
|
net_copy_ip(&net_ip, &ip);
|
|
ready = 1;
|
|
conflicts = 0;
|
|
timeout_ms = -1;
|
|
/* Never timeout in the monitor state */
|
|
net_set_timeout_handler(0, NULL);
|
|
|
|
/* NOTE: all other exit paths should deconfig ... */
|
|
net_set_state(NETLOOP_SUCCESS);
|
|
return;
|
|
}
|
|
break;
|
|
case DEFEND:
|
|
/* We won! No ARP replies, so just go back to monitor */
|
|
state = MONITOR;
|
|
timeout_ms = -1;
|
|
conflicts = 0;
|
|
break;
|
|
default:
|
|
/* Invalid, should never happen. Restart the whole protocol */
|
|
state = PROBE;
|
|
ip = pick();
|
|
timeout_ms = 0;
|
|
nprobes = 0;
|
|
nclaims = 0;
|
|
break;
|
|
}
|
|
configure_wait();
|
|
}
|
|
|
|
void link_local_receive_arp(struct arp_hdr *arp, int len)
|
|
{
|
|
int source_ip_conflict;
|
|
int target_ip_conflict;
|
|
struct in_addr null_ip = {.s_addr = 0};
|
|
|
|
if (state == DISABLED)
|
|
return;
|
|
|
|
/* We need to adjust the timeout in case we didn't receive a
|
|
conflicting packet. */
|
|
if (timeout_ms > 0) {
|
|
unsigned diff = deadline_ms - MONOTONIC_MS();
|
|
if ((int)(diff) < 0) {
|
|
/* Current time is greater than the expected timeout
|
|
time. This should never happen */
|
|
debug_cond(DEBUG_LL_STATE,
|
|
"missed an expected timeout\n");
|
|
timeout_ms = 0;
|
|
} else {
|
|
debug_cond(DEBUG_INT_STATE, "adjusting timeout\n");
|
|
timeout_ms = diff | 1; /* never 0 */
|
|
}
|
|
}
|
|
#if 0
|
|
/* XXX Don't bother with ethernet link just yet */
|
|
if ((fds[0].revents & POLLIN) == 0) {
|
|
if (fds[0].revents & POLLERR) {
|
|
/*
|
|
* FIXME: links routinely go down;
|
|
*/
|
|
bb_error_msg("iface %s is down", eth_get_name());
|
|
if (ready)
|
|
run(argv, "deconfig", &ip);
|
|
return EXIT_FAILURE;
|
|
}
|
|
continue;
|
|
}
|
|
#endif
|
|
|
|
debug_cond(DEBUG_INT_STATE, "%s recv arp type=%d, op=%d,\n",
|
|
eth_get_name(), ntohs(arp->ar_pro),
|
|
ntohs(arp->ar_op));
|
|
debug_cond(DEBUG_INT_STATE, "\tsource=%pM %pI4\n",
|
|
&arp->ar_sha,
|
|
&arp->ar_spa);
|
|
debug_cond(DEBUG_INT_STATE, "\ttarget=%pM %pI4\n",
|
|
&arp->ar_tha,
|
|
&arp->ar_tpa);
|
|
|
|
if (arp->ar_op != htons(ARPOP_REQUEST) &&
|
|
arp->ar_op != htons(ARPOP_REPLY)) {
|
|
configure_wait();
|
|
return;
|
|
}
|
|
|
|
source_ip_conflict = 0;
|
|
target_ip_conflict = 0;
|
|
|
|
if (memcmp(&arp->ar_spa, &ip, ARP_PLEN) == 0 &&
|
|
memcmp(&arp->ar_sha, net_ethaddr, ARP_HLEN) != 0)
|
|
source_ip_conflict = 1;
|
|
|
|
/*
|
|
* According to RFC 3927, section 2.2.1:
|
|
* Check if packet is an ARP probe by checking for a null source IP
|
|
* then check that target IP is equal to ours and source hw addr
|
|
* is not equal to ours. This condition should cause a conflict only
|
|
* during probe.
|
|
*/
|
|
if (arp->ar_op == htons(ARPOP_REQUEST) &&
|
|
memcmp(&arp->ar_spa, &null_ip, ARP_PLEN) == 0 &&
|
|
memcmp(&arp->ar_tpa, &ip, ARP_PLEN) == 0 &&
|
|
memcmp(&arp->ar_sha, net_ethaddr, ARP_HLEN) != 0) {
|
|
target_ip_conflict = 1;
|
|
}
|
|
|
|
debug_cond(DEBUG_NET_PKT,
|
|
"state = %d, source ip conflict = %d, target ip conflict = "
|
|
"%d\n", state, source_ip_conflict, target_ip_conflict);
|
|
switch (state) {
|
|
case PROBE:
|
|
case ANNOUNCE:
|
|
/* When probing or announcing, check for source IP conflicts
|
|
and other hosts doing ARP probes (target IP conflicts). */
|
|
if (source_ip_conflict || target_ip_conflict) {
|
|
conflicts++;
|
|
state = PROBE;
|
|
if (conflicts >= MAX_CONFLICTS) {
|
|
debug("%s ratelimit\n", eth_get_name());
|
|
timeout_ms = RATE_LIMIT_INTERVAL * 1000;
|
|
state = RATE_LIMIT_PROBE;
|
|
}
|
|
|
|
/* restart the whole protocol */
|
|
ip = pick();
|
|
timeout_ms = 0;
|
|
nprobes = 0;
|
|
nclaims = 0;
|
|
}
|
|
break;
|
|
case MONITOR:
|
|
/* If a conflict, we try to defend with a single ARP probe */
|
|
if (source_ip_conflict) {
|
|
debug("monitor conflict -- defending\n");
|
|
state = DEFEND;
|
|
timeout_ms = DEFEND_INTERVAL * 1000;
|
|
arp_raw_request(ip, net_ethaddr, ip);
|
|
}
|
|
break;
|
|
case DEFEND:
|
|
/* Well, we tried. Start over (on conflict) */
|
|
if (source_ip_conflict) {
|
|
state = PROBE;
|
|
debug("defend conflict -- starting over\n");
|
|
ready = 0;
|
|
net_ip.s_addr = 0;
|
|
|
|
/* restart the whole protocol */
|
|
ip = pick();
|
|
timeout_ms = 0;
|
|
nprobes = 0;
|
|
nclaims = 0;
|
|
}
|
|
break;
|
|
default:
|
|
/* Invalid, should never happen. Restart the whole protocol */
|
|
debug("invalid state -- starting over\n");
|
|
state = PROBE;
|
|
ip = pick();
|
|
timeout_ms = 0;
|
|
nprobes = 0;
|
|
nclaims = 0;
|
|
break;
|
|
}
|
|
configure_wait();
|
|
}
|