[apple/xnu.git] / bsd / netinet6 / in6_proto.c

/*	$FreeBSD: src/sys/netinet6/in6_proto.c,v 1.6.2.7 2001/07/24 19:10:18 brooks Exp $	*/
/*	$KAME: in6_proto.c,v 1.91 2001/05/27 13:28:35 itojun Exp $	*/

/*
 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the name of the project nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

/*
 * Copyright (c) 1982, 1986, 1993
 *	The Regents of the University of California.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *	This product includes software developed by the University of
 *	California, Berkeley and its contributors.
 * 4. Neither the name of the University nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 *
 *	@(#)in_proto.c	8.1 (Berkeley) 6/10/93
 */


#include <sys/param.h>
#include <sys/socket.h>
#include <sys/socketvar.h>
#include <sys/protosw.h>
#include <sys/kernel.h>
#include <sys/domain.h>
#include <sys/mbuf.h>
#include <sys/systm.h>
#include <sys/sysctl.h>

#include <net/if.h>
#include <net/radix.h>
#include <net/route.h>

#include <netinet/in.h>
#include <netinet/in_systm.h>
#include <netinet/in_var.h>
#include <netinet/ip_encap.h>
#include <netinet/ip.h>
#include <netinet/ip_var.h>
#include <netinet/ip6.h>
#include <netinet6/ip6_var.h>
#include <netinet/icmp6.h>

#include <netinet/tcp.h>
#include <netinet/tcp_timer.h>
#include <netinet/tcp_var.h>
#include <netinet/udp.h>
#include <netinet/udp_var.h>
#include <netinet6/tcp6_var.h>
#include <netinet6/raw_ip6.h>
#include <netinet6/udp6_var.h>
#include <netinet6/pim6_var.h>
#include <netinet6/nd6.h>
#include <netinet6/in6_prefix.h>

#if IPSEC
#include <netinet6/ipsec.h>
#if INET6
#include <netinet6/ipsec6.h>
#endif
#include <netinet6/ah.h>
#if INET6
#include <netinet6/ah6.h>
#endif
#if IPSEC_ESP
#include <netinet6/esp.h>
#if INET6
#include <netinet6/esp6.h>
#endif
#endif
#include <netinet6/ipcomp.h>
#if INET6
#include <netinet6/ipcomp6.h>
#endif
#endif /*IPSEC*/

#include <netinet6/ip6protosw.h>

#include <net/net_osdep.h>

/*
 * TCP/IP protocol family: IP6, ICMP6, UDP, TCP.
 */

extern	struct domain inet6domain;
static struct pr_usrreqs nousrreqs;

#define PR_LISTEN	0
#define PR_ABRTACPTDIS	0

extern struct domain inet6domain;
extern int in6_inithead __P((void **, int));
void in6_dinit(void);

struct ip6protosw inet6sw[] = {
{ 0,		&inet6domain,	IPPROTO_IPV6,	0,
  0,		0,		0,		0,
  0,
  ip6_init,	0,		frag6_slowtimo,	frag6_drain,
  0, &nousrreqs
},
{ SOCK_DGRAM,	&inet6domain,	IPPROTO_UDP,	PR_ATOMIC|PR_ADDR,
  udp6_input,	0,		udp6_ctlinput,	ip6_ctloutput,
  0,
  0,		0,		0,		0,
  0, &udp6_usrreqs
},
{ SOCK_STREAM,	&inet6domain,	IPPROTO_TCP,	PR_CONNREQUIRED|PR_WANTRCVD|PR_LISTEN,
  tcp6_input,	0,		tcp6_ctlinput,	tcp_ctloutput,
  0,
#if INET	/* don't call initialization and timeout routines twice */
  0,		0,		0,		tcp_drain,
#else
  tcp_init,	tcp_fasttimo,	tcp_slowtimo,	tcp_drain,
#endif
  0, &tcp6_usrreqs,
},
{ SOCK_RAW,	&inet6domain,	IPPROTO_RAW,	PR_ATOMIC|PR_ADDR,
  rip6_input,	rip6_output,	rip6_ctlinput,	rip6_ctloutput,
  0,
  0,		0,		0,		0,
  0, &rip6_usrreqs
},
{ SOCK_RAW,	&inet6domain,	IPPROTO_ICMPV6,	PR_ATOMIC|PR_ADDR|PR_LASTHDR,
  icmp6_input,	rip6_output,	rip6_ctlinput,	rip6_ctloutput,
  0,
  icmp6_init,	icmp6_fasttimo,	0,		0,
  0, &rip6_usrreqs
},
{ SOCK_RAW,	&inet6domain,	IPPROTO_DSTOPTS,PR_ATOMIC|PR_ADDR,
  dest6_input,	0,	 	0,		0,
  0,	
  0,		0,		0,		0,
  0, &nousrreqs
},
{ SOCK_RAW,	&inet6domain,	IPPROTO_ROUTING,PR_ATOMIC|PR_ADDR,
  route6_input,	0,	 	0,		0,
  0,	
  0,		0,		0,		0,
  0, &nousrreqs
},
{ SOCK_RAW,	&inet6domain,	IPPROTO_FRAGMENT,PR_ATOMIC|PR_ADDR,
  frag6_input,	0,	 	0,		0,
  0,	
  0,		0,		0,		0,
  0, &nousrreqs
},
#if IPSEC
{ SOCK_RAW,	&inet6domain,	IPPROTO_AH,	PR_ATOMIC|PR_ADDR,
  ah6_input,	0,	 	0,		0,
  0,	  
  0,		0,		0,		0,
  0, &nousrreqs
},
#if IPSEC_ESP
{ SOCK_RAW,	&inet6domain,	IPPROTO_ESP,	PR_ATOMIC|PR_ADDR,
  esp6_input,	0,
  esp6_ctlinput,
  0,
  0,
  0,		0,		0,		0,
  0, &nousrreqs
},
#endif
{ SOCK_RAW,	&inet6domain,	IPPROTO_IPCOMP,	PR_ATOMIC|PR_ADDR,
  ipcomp6_input, 0,	 	0,		0,
  0,	  
  0,		0,		0,		0,
  0, &nousrreqs
},
#endif /* IPSEC */
#if INET
{ SOCK_RAW,	&inet6domain,	IPPROTO_IPV4,	PR_ATOMIC|PR_ADDR|PR_LASTHDR,
  encap6_input,	rip6_output, 	0,		rip6_ctloutput,
  0,
  encap_init,	0,		0,		0,
  0, &rip6_usrreqs
},
#endif /*INET*/
{ SOCK_RAW,	&inet6domain,	IPPROTO_IPV6,	PR_ATOMIC|PR_ADDR|PR_LASTHDR,
  encap6_input, rip6_output,	0,		rip6_ctloutput,
  0,
  encap_init,	0,		0,		0,
  0, &rip6_usrreqs
},
{ SOCK_RAW,     &inet6domain,	IPPROTO_PIM,	PR_ATOMIC|PR_ADDR|PR_LASTHDR,
  pim6_input,	rip6_output,	0,              rip6_ctloutput,
  0,
  0,            0,              0,              0,
  0, &rip6_usrreqs
},
/* raw wildcard */
{ SOCK_RAW,	&inet6domain,	0,		PR_ATOMIC|PR_ADDR,
  rip6_input,	rip6_output,	0,		rip6_ctloutput,
  0,
  0,		0,		0,		0,
  0, &rip6_usrreqs
},
};


int in6_proto_count = (sizeof (inet6sw) / sizeof (struct ip6protosw));

struct domain inet6domain =
    { AF_INET6, "internet6", in6_dinit, 0, 0, 
      inet6sw, 0,
      in6_inithead, offsetof(struct sockaddr_in6, sin6_addr) << 3, sizeof(struct sockaddr_in6) ,
      sizeof(struct sockaddr_in6), 0
    };

DOMAIN_SET(inet6);

/* Initialize the PF_INET6 domain, and add in the pre-defined protos */
void
in6_dinit()
{
	register int i; 
	register struct ip6protosw *pr;
	register struct domain *dp;
	static inet6domain_initted = 0;

	if (!inet6domain_initted) {
		dp = &inet6domain; 

		for (i=0, pr = &inet6sw[0]; i<in6_proto_count; i++, pr++)
			net_add_proto((struct protosw*)pr, dp);

		inet6domain_initted = 1;
	}
}


/*
 * Internet configuration info
 */
#ifndef	IPV6FORWARDING
#if GATEWAY6
#define	IPV6FORWARDING	1	/* forward IP6 packets not for us */
#else
#define	IPV6FORWARDING	0	/* don't forward IP6 packets not for us */
#endif /* GATEWAY6 */
#endif /* !IPV6FORWARDING */

#ifndef	IPV6_SENDREDIRECTS
#define	IPV6_SENDREDIRECTS	1
#endif

int	ip6_forwarding = IPV6FORWARDING;	/* act as router? */
int	ip6_sendredirects = IPV6_SENDREDIRECTS;
int	ip6_defhlim = IPV6_DEFHLIM;
int	ip6_defmcasthlim = IPV6_DEFAULT_MULTICAST_HOPS;
//int	ip6_accept_rtadv = 0;	/* "IPV6FORWARDING ? 0 : 1" is dangerous */
int	ip6_accept_rtadv = 1;	/* "IPV6FORWARDING ? 0 : 1" is dangerous */
int	ip6_maxfragpackets;	/* initialized in frag6.c:frag6_init() */
int	ip6_log_interval = 5;
int	ip6_hdrnestlimit = 50;	/* appropriate? */
int	ip6_dad_count = 1;	/* DupAddrDetectionTransmits */
u_int32_t ip6_flow_seq;
int	ip6_auto_flowlabel = 1;
int	ip6_gif_hlim = 0;
int	ip6_use_deprecated = 1;	/* allow deprecated addr (RFC2462 5.5.4) */
int	ip6_rr_prune = 5;	/* router renumbering prefix
				 * walk list every 5 sec.    */
int	ip6_v6only = 0;
#ifdef __APPLE__
int	ip6_auto_on = 1;	/* Start IPv6 per interface triggered by IPv4 address assignment */
#endif

u_int32_t ip6_id = 0UL;
int	ip6_keepfaith = 0;
time_t	ip6_log_time = (time_t)0L;

/* icmp6 */
/*
 * BSDI4 defines these variables in in_proto.c...
 * XXX: what if we don't define INET? Should we define pmtu6_expire
 * or so? (jinmei@kame.net 19990310)
 */
int pmtu_expire = 60*10;
int pmtu_probe = 60*2;

/* raw IP6 parameters */
/*
 * Nominal space allocated to a raw ip socket.
 */
#define	RIPV6SNDQ	8192
#define	RIPV6RCVQ	8192

u_long	rip6_sendspace = RIPV6SNDQ;
u_long	rip6_recvspace = RIPV6RCVQ;

/* ICMPV6 parameters */
int	icmp6_rediraccept = 1;		/* accept and process redirects */
int	icmp6_redirtimeout = 10 * 60;	/* 10 minutes */
int	icmp6errppslim = 100;		/* 100pps */
int	icmp6_nodeinfo = 1;		/* enable/disable NI response */

/* UDP on IP6 parameters */
int	udp6_sendspace = 9216;		/* really max datagram size */
int	udp6_recvspace = 40 * (1024 + sizeof(struct sockaddr_in6));
					/* 40 1K datagrams */

/*
 * sysctl related items.
 */
SYSCTL_NODE(_net,	PF_INET6,	inet6,	CTLFLAG_RW,	0,
	"Internet6 Family");

/* net.inet6 */
SYSCTL_NODE(_net_inet6,	IPPROTO_IPV6,	ip6,	CTLFLAG_RW, 0,	"IP6");
SYSCTL_NODE(_net_inet6,	IPPROTO_ICMPV6,	icmp6,	CTLFLAG_RW, 0,	"ICMP6");
SYSCTL_NODE(_net_inet6,	IPPROTO_UDP,	udp6,	CTLFLAG_RW, 0,	"UDP6");
SYSCTL_NODE(_net_inet6,	IPPROTO_TCP,	tcp6,	CTLFLAG_RW, 0,	"TCP6");
#if IPSEC
SYSCTL_NODE(_net_inet6,	IPPROTO_ESP,	ipsec6,	CTLFLAG_RW, 0,	"IPSEC6");
#endif /* IPSEC */

/* net.inet6.ip6 */
static int
sysctl_ip6_temppltime SYSCTL_HANDLER_ARGS
{
	int error = 0;
	int old;

	error = SYSCTL_OUT(req, arg1, sizeof(int));
	if (error || !req->newptr)
		return (error);
	old = ip6_temp_preferred_lifetime;
	error = SYSCTL_IN(req, arg1, sizeof(int));
	if (ip6_temp_preferred_lifetime <
	    ip6_desync_factor + ip6_temp_regen_advance) {
		ip6_temp_preferred_lifetime = old;
		return(EINVAL);
	}
	return(error);
}

static int
sysctl_ip6_tempvltime SYSCTL_HANDLER_ARGS
{
	int error = 0;
	int old;

	error = SYSCTL_OUT(req, arg1, sizeof(int));
	if (error || !req->newptr)
		return (error);
	old = ip6_temp_valid_lifetime;
	error = SYSCTL_IN(req, arg1, sizeof(int));
	if (ip6_temp_valid_lifetime < ip6_temp_preferred_lifetime) {
		ip6_temp_preferred_lifetime = old;
		return(EINVAL);
	}
	return(error);
}

SYSCTL_INT(_net_inet6_ip6, IPV6CTL_FORWARDING,
	forwarding, CTLFLAG_RW, 	&ip6_forwarding,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_SENDREDIRECTS,
	redirect, CTLFLAG_RW,		&ip6_sendredirects,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DEFHLIM,
	hlim, CTLFLAG_RW,		&ip6_defhlim,	0, "");
SYSCTL_STRUCT(_net_inet6_ip6, IPV6CTL_STATS, stats, CTLFLAG_RD,
	&ip6stat, ip6stat, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_MAXFRAGPACKETS,
	maxfragpackets, CTLFLAG_RW,	&ip6_maxfragpackets,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_ACCEPT_RTADV,
	accept_rtadv, CTLFLAG_RW,	&ip6_accept_rtadv,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_KEEPFAITH,
	keepfaith, CTLFLAG_RW,		&ip6_keepfaith,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_LOG_INTERVAL,
	log_interval, CTLFLAG_RW,	&ip6_log_interval,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_HDRNESTLIMIT,
	hdrnestlimit, CTLFLAG_RW,	&ip6_hdrnestlimit,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DAD_COUNT,
	dad_count, CTLFLAG_RW,	&ip6_dad_count,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_AUTO_FLOWLABEL,
	auto_flowlabel, CTLFLAG_RW,	&ip6_auto_flowlabel,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DEFMCASTHLIM,
	defmcasthlim, CTLFLAG_RW,	&ip6_defmcasthlim,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_GIF_HLIM,
	gifhlim, CTLFLAG_RW,	&ip6_gif_hlim,			0, "");
SYSCTL_STRING(_net_inet6_ip6, IPV6CTL_KAME_VERSION,
	kame_version, CTLFLAG_RD,	__KAME_VERSION,		0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_USE_DEPRECATED,
	use_deprecated, CTLFLAG_RW,	&ip6_use_deprecated,	0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_RR_PRUNE,
	rr_prune, CTLFLAG_RW,	&ip6_rr_prune,			0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_USETEMPADDR,
	use_tempaddr, CTLFLAG_RW, &ip6_use_tempaddr,		0, "");
SYSCTL_OID(_net_inet6_ip6, IPV6CTL_TEMPPLTIME, temppltime,
	   CTLTYPE_INT|CTLFLAG_RW, &ip6_temp_preferred_lifetime, 0,
	   sysctl_ip6_temppltime, "I", "");
SYSCTL_OID(_net_inet6_ip6, IPV6CTL_TEMPVLTIME, tempvltime,
	   CTLTYPE_INT|CTLFLAG_RW, &ip6_temp_valid_lifetime, 0,
	   sysctl_ip6_tempvltime, "I", "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_V6ONLY,
	v6only,	CTLFLAG_RW,	&ip6_v6only,			0, "");
SYSCTL_INT(_net_inet6_ip6, IPV6CTL_AUTO_LINKLOCAL,
	auto_linklocal, CTLFLAG_RW, &ip6_auto_linklocal,	0, "");
SYSCTL_STRUCT(_net_inet6_ip6, IPV6CTL_RIP6STATS, rip6stats, CTLFLAG_RD,
	&rip6stat, rip6stat, "");

/* net.inet6.icmp6 */
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_REDIRACCEPT,
	rediraccept, CTLFLAG_RW,	&icmp6_rediraccept,	0, "");
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_REDIRTIMEOUT,
	redirtimeout, CTLFLAG_RW,	&icmp6_redirtimeout,	0, "");
SYSCTL_STRUCT(_net_inet6_icmp6, ICMPV6CTL_STATS, stats, CTLFLAG_RD,
	&icmp6stat, icmp6stat, "");
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_PRUNE,
	nd6_prune, CTLFLAG_RW,		&nd6_prune,	0, "");
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_DELAY,
	nd6_delay, CTLFLAG_RW,		&nd6_delay,	0, "");
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_UMAXTRIES,
	nd6_umaxtries, CTLFLAG_RW,	&nd6_umaxtries,	0, "");
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_MMAXTRIES,
	nd6_mmaxtries, CTLFLAG_RW,	&nd6_mmaxtries,	0, "");
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_USELOOPBACK,
	nd6_useloopback, CTLFLAG_RW,	&nd6_useloopback, 0, "");
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_NODEINFO,
	nodeinfo, CTLFLAG_RW,	&icmp6_nodeinfo,	0, "");
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ERRPPSLIMIT,
	errppslimit, CTLFLAG_RW,	&icmp6errppslim,	0, "");
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_MAXNUDHINT,
	nd6_maxnudhint, CTLFLAG_RW,	&nd6_maxnudhint, 0, "");
SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_DEBUG,
	nd6_debug, CTLFLAG_RW,	&nd6_debug,		0, "");

#ifdef __APPLE__
SYSCTL_INT(_net_inet6_ip6, OID_AUTO, auto_on, CTLFLAG_RW, &ip6_auto_on,0, "");
#endif
Commit	Line	Data
9bccf70c A	1	/* $FreeBSD: src/sys/netinet6/in6_proto.c,v 1.6.2.7 2001/07/24 19:10:18 brooks Exp $ */
9bccf70c A	2	/* $KAME: in6_proto.c,v 1.91 2001/05/27 13:28:35 itojun Exp $ */
1c79356b A	3
	4	/*
	5	* Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
	6	* All rights reserved.
	7	*
	8	* Redistribution and use in source and binary forms, with or without
	9	* modification, are permitted provided that the following conditions
	10	* are met:
	11	* 1. Redistributions of source code must retain the above copyright
	12	* notice, this list of conditions and the following disclaimer.
	13	* 2. Redistributions in binary form must reproduce the above copyright
	14	* notice, this list of conditions and the following disclaimer in the
	15	* documentation and/or other materials provided with the distribution.
	16	* 3. Neither the name of the project nor the names of its contributors
	17	* may be used to endorse or promote products derived from this software
	18	* without specific prior written permission.
	19	*
	20	* THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
	21	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	22	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	23	* ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
	24	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	25	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	26	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	27	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	28	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	29	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	30	* SUCH DAMAGE.
	31	*/
	32
	33	/*
	34	* Copyright (c) 1982, 1986, 1993
	35	* The Regents of the University of California. All rights reserved.
	36	*
	37	* Redistribution and use in source and binary forms, with or without
	38	* modification, are permitted provided that the following conditions
	39	* are met:
	40	* 1. Redistributions of source code must retain the above copyright
	41	* notice, this list of conditions and the following disclaimer.
	42	* 2. Redistributions in binary form must reproduce the above copyright
	43	* notice, this list of conditions and the following disclaimer in the
	44	* documentation and/or other materials provided with the distribution.
	45	* 3. All advertising materials mentioning features or use of this software
	46	* must display the following acknowledgement:
	47	* This product includes software developed by the University of
	48	* California, Berkeley and its contributors.
	49	* 4. Neither the name of the University nor the names of its contributors
	50	* may be used to endorse or promote products derived from this software
	51	* without specific prior written permission.
	52	*
	53	* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
	54	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	55	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	56	* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
	57	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	58	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	59	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	60	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	61	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	62	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	63	* SUCH DAMAGE.
	64	*
	65	* @(#)in_proto.c 8.1 (Berkeley) 6/10/93
	66	*/
67
1c79356b A	68
	69	#include <sys/param.h>
	70	#include <sys/socket.h>
1c79356b	71	#include <sys/socketvar.h>
1c79356b A	72	#include <sys/protosw.h>
	73	#include <sys/kernel.h>
	74	#include <sys/domain.h>
	75	#include <sys/mbuf.h>
1c79356b A	76	#include <sys/systm.h>
1c79356b A	77	#include <sys/sysctl.h>
1c79356b A	78
	79	#include <net/if.h>
	80	#include <net/radix.h>
	81	#include <net/route.h>
	82
	83	#include <netinet/in.h>
	84	#include <netinet/in_systm.h>
	85	#include <netinet/in_var.h>
	86	#include <netinet/ip_encap.h>
1c79356b A	87	#include <netinet/ip.h>
1c79356b A	88	#include <netinet/ip_var.h>
1c79356b A	89	#include <netinet/ip6.h>
	90	#include <netinet6/ip6_var.h>
	91	#include <netinet/icmp6.h>
	92
1c79356b A	93	#include <netinet/tcp.h>
	94	#include <netinet/tcp_timer.h>
	95	#include <netinet/tcp_var.h>
	96	#include <netinet/udp.h>
	97	#include <netinet/udp_var.h>
1c79356b	98	#include <netinet6/tcp6_var.h>
9bccf70c	99	#include <netinet6/raw_ip6.h>
1c79356b	100	#include <netinet6/udp6_var.h>
1c79356b	101	#include <netinet6/pim6_var.h>
1c79356b	102	#include <netinet6/nd6.h>
1c79356b	103	#include <netinet6/in6_prefix.h>
1c79356b A	104
	105	#if IPSEC
	106	#include <netinet6/ipsec.h>
9bccf70c A	107	#if INET6
	108	#include <netinet6/ipsec6.h>
	109	#endif
1c79356b	110	#include <netinet6/ah.h>
9bccf70c A	111	#if INET6
	112	#include <netinet6/ah6.h>
	113	#endif
1c79356b A	114	#if IPSEC_ESP
1c79356b A	115	#include <netinet6/esp.h>
9bccf70c A	116	#if INET6
	117	#include <netinet6/esp6.h>
	118	#endif
1c79356b A	119	#endif
1c79356b A	120	#include <netinet6/ipcomp.h>
9bccf70c A	121	#if INET6
	122	#include <netinet6/ipcomp6.h>
	123	#endif
1c79356b A	124	#endif /IPSEC/
	125
	126	#include <netinet6/ip6protosw.h>
1c79356b A	127
	128	#include <net/net_osdep.h>
	129
1c79356b A	130	/*
	131	* TCP/IP protocol family: IP6, ICMP6, UDP, TCP.
	132	*/
	133
	134	extern struct domain inet6domain;
1c79356b	135	static struct pr_usrreqs nousrreqs;
9bccf70c A	136
	137	#define PR_LISTEN 0
	138	#define PR_ABRTACPTDIS 0
	139
	140	extern struct domain inet6domain;
	141	extern int in6_inithead __P((void **, int));
	142	void in6_dinit(void);
1c79356b A	143
	144	struct ip6protosw inet6sw[] = {
	145	{ 0, &inet6domain, IPPROTO_IPV6, 0,
	146	0, 0, 0, 0,
	147	0,
	148	ip6_init, 0, frag6_slowtimo, frag6_drain,
	149	0, &nousrreqs
	150	},
9bccf70c	151	{ SOCK_DGRAM, &inet6domain, IPPROTO_UDP, PR_ATOMIC\|PR_ADDR,
1c79356b A	152	udp6_input, 0, udp6_ctlinput, ip6_ctloutput,
	153	0,
	154	0, 0, 0, 0,
	155	0, &udp6_usrreqs
	156	},
9bccf70c	157	{ SOCK_STREAM, &inet6domain, IPPROTO_TCP, PR_CONNREQUIRED\|PR_WANTRCVD\|PR_LISTEN,
1c79356b A	158	tcp6_input, 0, tcp6_ctlinput, tcp_ctloutput,
1c79356b A	159	0,
9bccf70c A	160	#if INET /* don't call initialization and timeout routines twice */
	161	0, 0, 0, tcp_drain,
	162	#else
	163	tcp_init, tcp_fasttimo, tcp_slowtimo, tcp_drain,
	164	#endif
	165	0, &tcp6_usrreqs,
1c79356b	166	},
9bccf70c A	167	{ SOCK_RAW, &inet6domain, IPPROTO_RAW, PR_ATOMIC\|PR_ADDR,
9bccf70c A	168	rip6_input, rip6_output, rip6_ctlinput, rip6_ctloutput,
1c79356b A	169	0,
	170	0, 0, 0, 0,
	171	0, &rip6_usrreqs
	172	},
9bccf70c A	173	{ SOCK_RAW, &inet6domain, IPPROTO_ICMPV6, PR_ATOMIC\|PR_ADDR\|PR_LASTHDR,
9bccf70c A	174	icmp6_input, rip6_output, rip6_ctlinput, rip6_ctloutput,
1c79356b A	175	0,
	176	icmp6_init, icmp6_fasttimo, 0, 0,
	177	0, &rip6_usrreqs
	178	},
	179	{ SOCK_RAW, &inet6domain, IPPROTO_DSTOPTS,PR_ATOMIC\|PR_ADDR,
	180	dest6_input, 0, 0, 0,
9bccf70c	181	0,
1c79356b A	182	0, 0, 0, 0,
	183	0, &nousrreqs
	184	},
	185	{ SOCK_RAW, &inet6domain, IPPROTO_ROUTING,PR_ATOMIC\|PR_ADDR,
	186	route6_input, 0, 0, 0,
9bccf70c	187	0,
1c79356b A	188	0, 0, 0, 0,
	189	0, &nousrreqs
	190	},
	191	{ SOCK_RAW, &inet6domain, IPPROTO_FRAGMENT,PR_ATOMIC\|PR_ADDR,
	192	frag6_input, 0, 0, 0,
9bccf70c	193	0,
1c79356b A	194	0, 0, 0, 0,
	195	0, &nousrreqs
	196	},
	197	#if IPSEC
	198	{ SOCK_RAW, &inet6domain, IPPROTO_AH, PR_ATOMIC\|PR_ADDR,
	199	ah6_input, 0, 0, 0,
	200	0,
	201	0, 0, 0, 0,
	202	0, &nousrreqs
	203	},
	204	#if IPSEC_ESP
	205	{ SOCK_RAW, &inet6domain, IPPROTO_ESP, PR_ATOMIC\|PR_ADDR,
9bccf70c A	206	esp6_input, 0,
	207	esp6_ctlinput,
	208	0,
	209	0,
1c79356b A	210	0, 0, 0, 0,
	211	0, &nousrreqs
	212	},
	213	#endif
	214	{ SOCK_RAW, &inet6domain, IPPROTO_IPCOMP, PR_ATOMIC\|PR_ADDR,
	215	ipcomp6_input, 0, 0, 0,
	216	0,
	217	0, 0, 0, 0,
	218	0, &nousrreqs
	219	},
	220	#endif /* IPSEC */
9bccf70c A	221	#if INET
9bccf70c A	222	{ SOCK_RAW, &inet6domain, IPPROTO_IPV4, PR_ATOMIC\|PR_ADDR\|PR_LASTHDR,
1c79356b	223	encap6_input, rip6_output, 0, rip6_ctloutput,
9bccf70c A	224	0,
	225	encap_init, 0, 0, 0,
	226	0, &rip6_usrreqs
1c79356b	227	},
9bccf70c A	228	#endif /INET/
	229	{ SOCK_RAW, &inet6domain, IPPROTO_IPV6, PR_ATOMIC\|PR_ADDR\|PR_LASTHDR,
	230	encap6_input, rip6_output, 0, rip6_ctloutput,
	231	0,
	232	encap_init, 0, 0, 0,
1c79356b A	233	0, &rip6_usrreqs
1c79356b A	234	},
9bccf70c A	235	{ SOCK_RAW, &inet6domain, IPPROTO_PIM, PR_ATOMIC\|PR_ADDR\|PR_LASTHDR,
9bccf70c A	236	pim6_input, rip6_output, 0, rip6_ctloutput,
1c79356b A	237	0,
	238	0, 0, 0, 0,
	239	0, &rip6_usrreqs
	240	},
	241	/* raw wildcard */
9bccf70c	242	{ SOCK_RAW, &inet6domain, 0, PR_ATOMIC\|PR_ADDR,
1c79356b A	243	rip6_input, rip6_output, 0, rip6_ctloutput,
	244	0,
	245	0, 0, 0, 0,
	246	0, &rip6_usrreqs
	247	},
	248	};
	249
1c79356b	250
1c79356b	251	int in6_proto_count = (sizeof (inet6sw) / sizeof (struct ip6protosw));
1c79356b A	252
	253	struct domain inet6domain =
	254	{ AF_INET6, "internet6", in6_dinit, 0, 0,
	255	inet6sw, 0,
	256	in6_inithead, offsetof(struct sockaddr_in6, sin6_addr) << 3, sizeof(struct sockaddr_in6) ,
	257	sizeof(struct sockaddr_in6), 0
	258	};
	259
	260	DOMAIN_SET(inet6);
	261
9bccf70c A	262	/* Initialize the PF_INET6 domain, and add in the pre-defined protos */
	263	void
	264	in6_dinit()
	265	{
	266	register int i;
	267	register struct ip6protosw *pr;
	268	register struct domain *dp;
	269	static inet6domain_initted = 0;
	270
	271	if (!inet6domain_initted) {
	272	dp = &inet6domain;
	273
	274	for (i=0, pr = &inet6sw[0]; i<in6_proto_count; i++, pr++)
	275	net_add_proto((struct protosw*)pr, dp);
	276
	277	inet6domain_initted = 1;
	278	}
	279	}
	280
	281
1c79356b A	282	/*
	283	* Internet configuration info
	284	*/
	285	#ifndef IPV6FORWARDING
	286	#if GATEWAY6
	287	#define IPV6FORWARDING 1 /* forward IP6 packets not for us */
	288	#else
	289	#define IPV6FORWARDING 0 /* don't forward IP6 packets not for us */
	290	#endif /* GATEWAY6 */
	291	#endif /* !IPV6FORWARDING */
	292
	293	#ifndef IPV6_SENDREDIRECTS
	294	#define IPV6_SENDREDIRECTS 1
	295	#endif
	296
	297	int ip6_forwarding = IPV6FORWARDING; /* act as router? */
	298	int ip6_sendredirects = IPV6_SENDREDIRECTS;
	299	int ip6_defhlim = IPV6_DEFHLIM;
	300	int ip6_defmcasthlim = IPV6_DEFAULT_MULTICAST_HOPS;
9bccf70c A	301	//int ip6_accept_rtadv = 0; /* "IPV6FORWARDING ? 0 : 1" is dangerous */
	302	int ip6_accept_rtadv = 1; /* "IPV6FORWARDING ? 0 : 1" is dangerous */
	303	int ip6_maxfragpackets; /* initialized in frag6.c:frag6_init() */
1c79356b A	304	int ip6_log_interval = 5;
	305	int ip6_hdrnestlimit = 50; /* appropriate? */
	306	int ip6_dad_count = 1; /* DupAddrDetectionTransmits */
	307	u_int32_t ip6_flow_seq;
	308	int ip6_auto_flowlabel = 1;
1c79356b	309	int ip6_gif_hlim = 0;
1c79356b A	310	int ip6_use_deprecated = 1; /* allow deprecated addr (RFC2462 5.5.4) */
	311	int ip6_rr_prune = 5; /* router renumbering prefix
	312	* walk list every 5 sec. */
9bccf70c A	313	int ip6_v6only = 0;
	314	#ifdef __APPLE__
	315	int ip6_auto_on = 1; /* Start IPv6 per interface triggered by IPv4 address assignment */
	316	#endif
1c79356b A	317
	318	u_int32_t ip6_id = 0UL;
	319	int ip6_keepfaith = 0;
	320	time_t ip6_log_time = (time_t)0L;
	321
	322	/* icmp6 */
1c79356b A	323	/*
	324	* BSDI4 defines these variables in in_proto.c...
	325	* XXX: what if we don't define INET? Should we define pmtu6_expire
	326	* or so? (jinmei@kame.net 19990310)
	327	*/
	328	int pmtu_expire = 60*10;
	329	int pmtu_probe = 60*2;
1c79356b A	330
	331	/* raw IP6 parameters */
	332	/*
	333	* Nominal space allocated to a raw ip socket.
	334	*/
	335	#define RIPV6SNDQ 8192
	336	#define RIPV6RCVQ 8192
	337
	338	u_long rip6_sendspace = RIPV6SNDQ;
	339	u_long rip6_recvspace = RIPV6RCVQ;
	340
	341	/* ICMPV6 parameters */
	342	int icmp6_rediraccept = 1; /* accept and process redirects */
	343	int icmp6_redirtimeout = 10 * 60; /* 10 minutes */
9bccf70c	344	int icmp6errppslim = 100; /* 100pps */
1c79356b A	345	int icmp6_nodeinfo = 1; /* enable/disable NI response */
1c79356b A	346
1c79356b A	347	/* UDP on IP6 parameters */
	348	int udp6_sendspace = 9216; /* really max datagram size */
	349	int udp6_recvspace = 40 * (1024 + sizeof(struct sockaddr_in6));
	350	/* 40 1K datagrams */
	351
1c79356b A	352	/*
	353	* sysctl related items.
	354	*/
	355	SYSCTL_NODE(_net, PF_INET6, inet6, CTLFLAG_RW, 0,
	356	"Internet6 Family");
	357
	358	/* net.inet6 */
	359	SYSCTL_NODE(_net_inet6, IPPROTO_IPV6, ip6, CTLFLAG_RW, 0, "IP6");
	360	SYSCTL_NODE(_net_inet6, IPPROTO_ICMPV6, icmp6, CTLFLAG_RW, 0, "ICMP6");
	361	SYSCTL_NODE(_net_inet6, IPPROTO_UDP, udp6, CTLFLAG_RW, 0, "UDP6");
	362	SYSCTL_NODE(_net_inet6, IPPROTO_TCP, tcp6, CTLFLAG_RW, 0, "TCP6");
	363	#if IPSEC
	364	SYSCTL_NODE(_net_inet6, IPPROTO_ESP, ipsec6, CTLFLAG_RW, 0, "IPSEC6");
	365	#endif /* IPSEC */
	366
	367	/* net.inet6.ip6 */
	368	static int
9bccf70c	369	sysctl_ip6_temppltime SYSCTL_HANDLER_ARGS
1c79356b A	370	{
1c79356b A	371	int error = 0;
9bccf70c	372	int old;
1c79356b A	373
	374	error = SYSCTL_OUT(req, arg1, sizeof(int));
	375	if (error \|\| !req->newptr)
	376	return (error);
9bccf70c	377	old = ip6_temp_preferred_lifetime;
1c79356b	378	error = SYSCTL_IN(req, arg1, sizeof(int));
9bccf70c A	379	if (ip6_temp_preferred_lifetime <
	380	ip6_desync_factor + ip6_temp_regen_advance) {
	381	ip6_temp_preferred_lifetime = old;
	382	return(EINVAL);
1c79356b	383	}
9bccf70c A	384	return(error);
9bccf70c A	385	}
1c79356b	386
9bccf70c A	387	static int
	388	sysctl_ip6_tempvltime SYSCTL_HANDLER_ARGS
	389	{
	390	int error = 0;
	391	int old;
	392
	393	error = SYSCTL_OUT(req, arg1, sizeof(int));
	394	if (error \|\| !req->newptr)
	395	return (error);
	396	old = ip6_temp_valid_lifetime;
	397	error = SYSCTL_IN(req, arg1, sizeof(int));
	398	if (ip6_temp_valid_lifetime < ip6_temp_preferred_lifetime) {
	399	ip6_temp_preferred_lifetime = old;
	400	return(EINVAL);
	401	}
	402	return(error);
1c79356b A	403	}
1c79356b A	404
9bccf70c A	405	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_FORWARDING,
9bccf70c A	406	forwarding, CTLFLAG_RW, &ip6_forwarding, 0, "");
1c79356b A	407	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_SENDREDIRECTS,
	408	redirect, CTLFLAG_RW, &ip6_sendredirects, 0, "");
	409	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DEFHLIM,
	410	hlim, CTLFLAG_RW, &ip6_defhlim, 0, "");
9bccf70c A	411	SYSCTL_STRUCT(_net_inet6_ip6, IPV6CTL_STATS, stats, CTLFLAG_RD,
9bccf70c A	412	&ip6stat, ip6stat, "");
1c79356b A	413	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_MAXFRAGPACKETS,
	414	maxfragpackets, CTLFLAG_RW, &ip6_maxfragpackets, 0, "");
	415	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_ACCEPT_RTADV,
	416	accept_rtadv, CTLFLAG_RW, &ip6_accept_rtadv, 0, "");
	417	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_KEEPFAITH,
	418	keepfaith, CTLFLAG_RW, &ip6_keepfaith, 0, "");
	419	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_LOG_INTERVAL,
	420	log_interval, CTLFLAG_RW, &ip6_log_interval, 0, "");
	421	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_HDRNESTLIMIT,
	422	hdrnestlimit, CTLFLAG_RW, &ip6_hdrnestlimit, 0, "");
	423	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DAD_COUNT,
	424	dad_count, CTLFLAG_RW, &ip6_dad_count, 0, "");
	425	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_AUTO_FLOWLABEL,
	426	auto_flowlabel, CTLFLAG_RW, &ip6_auto_flowlabel, 0, "");
	427	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_DEFMCASTHLIM,
	428	defmcasthlim, CTLFLAG_RW, &ip6_defmcasthlim, 0, "");
	429	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_GIF_HLIM,
	430	gifhlim, CTLFLAG_RW, &ip6_gif_hlim, 0, "");
	431	SYSCTL_STRING(_net_inet6_ip6, IPV6CTL_KAME_VERSION,
	432	kame_version, CTLFLAG_RD, __KAME_VERSION, 0, "");
	433	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_USE_DEPRECATED,
	434	use_deprecated, CTLFLAG_RW, &ip6_use_deprecated, 0, "");
	435	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_RR_PRUNE,
	436	rr_prune, CTLFLAG_RW, &ip6_rr_prune, 0, "");
9bccf70c A	437	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_USETEMPADDR,
	438	use_tempaddr, CTLFLAG_RW, &ip6_use_tempaddr, 0, "");
	439	SYSCTL_OID(_net_inet6_ip6, IPV6CTL_TEMPPLTIME, temppltime,
	440	CTLTYPE_INT\|CTLFLAG_RW, &ip6_temp_preferred_lifetime, 0,
	441	sysctl_ip6_temppltime, "I", "");
	442	SYSCTL_OID(_net_inet6_ip6, IPV6CTL_TEMPVLTIME, tempvltime,
	443	CTLTYPE_INT\|CTLFLAG_RW, &ip6_temp_valid_lifetime, 0,
	444	sysctl_ip6_tempvltime, "I", "");
	445	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_V6ONLY,
	446	v6only, CTLFLAG_RW, &ip6_v6only, 0, "");
	447	SYSCTL_INT(_net_inet6_ip6, IPV6CTL_AUTO_LINKLOCAL,
	448	auto_linklocal, CTLFLAG_RW, &ip6_auto_linklocal, 0, "");
	449	SYSCTL_STRUCT(_net_inet6_ip6, IPV6CTL_RIP6STATS, rip6stats, CTLFLAG_RD,
	450	&rip6stat, rip6stat, "");
1c79356b A	451
	452	/* net.inet6.icmp6 */
	453	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_REDIRACCEPT,
	454	rediraccept, CTLFLAG_RW, &icmp6_rediraccept, 0, "");
	455	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_REDIRTIMEOUT,
	456	redirtimeout, CTLFLAG_RW, &icmp6_redirtimeout, 0, "");
	457	SYSCTL_STRUCT(_net_inet6_icmp6, ICMPV6CTL_STATS, stats, CTLFLAG_RD,
	458	&icmp6stat, icmp6stat, "");
1c79356b A	459	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_PRUNE,
	460	nd6_prune, CTLFLAG_RW, &nd6_prune, 0, "");
	461	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_DELAY,
	462	nd6_delay, CTLFLAG_RW, &nd6_delay, 0, "");
	463	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_UMAXTRIES,
	464	nd6_umaxtries, CTLFLAG_RW, &nd6_umaxtries, 0, "");
	465	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_MMAXTRIES,
	466	nd6_mmaxtries, CTLFLAG_RW, &nd6_mmaxtries, 0, "");
	467	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_USELOOPBACK,
	468	nd6_useloopback, CTLFLAG_RW, &nd6_useloopback, 0, "");
1c79356b A	469	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_NODEINFO,
1c79356b A	470	nodeinfo, CTLFLAG_RW, &icmp6_nodeinfo, 0, "");
9bccf70c A	471	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ERRPPSLIMIT,
	472	errppslimit, CTLFLAG_RW, &icmp6errppslim, 0, "");
	473	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_MAXNUDHINT,
	474	nd6_maxnudhint, CTLFLAG_RW, &nd6_maxnudhint, 0, "");
	475	SYSCTL_INT(_net_inet6_icmp6, ICMPV6CTL_ND6_DEBUG,
	476	nd6_debug, CTLFLAG_RW, &nd6_debug, 0, "");
	477
	478	#ifdef __APPLE__
	479	SYSCTL_INT(_net_inet6_ip6, OID_AUTO, auto_on, CTLFLAG_RW, &ip6_auto_on,0, "");
	480	#endif