bsd/netinet6/ip6_var.h

   1 /*
   2  * Copyright (c) 2000-2020 Apple Inc. All rights reserved.
   3  *
   4  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. The rights granted to you under the License
  10  * may not be used to create, or enable the creation or redistribution of,
  11  * unlawful or unlicensed copies of an Apple operating system, or to
  12  * circumvent, violate, or enable the circumvention or violation of, any
  13  * terms of an Apple operating system software license agreement.
  14  *
  15  * Please obtain a copy of the License at
  16  * http://www.opensource.apple.com/apsl/ and read it before using this file.
  17  *
  18  * The Original Code and all software distributed under the License are
  19  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  20  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  21  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  22  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  23  * Please see the License for the specific language governing rights and
  24  * limitations under the License.
  25  *
  26  * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
  27  */
  28
  29 /*
  30  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
  31  * All rights reserved.
  32  *
  33  * Redistribution and use in source and binary forms, with or without
  34  * modification, are permitted provided that the following conditions
  35  * are met:
  36  * 1. Redistributions of source code must retain the above copyright
  37  *    notice, this list of conditions and the following disclaimer.
  38  * 2. Redistributions in binary form must reproduce the above copyright
  39  *    notice, this list of conditions and the following disclaimer in the
  40  *    documentation and/or other materials provided with the distribution.
  41  * 3. Neither the name of the project nor the names of its contributors
  42  *    may be used to endorse or promote products derived from this software
  43  *    without specific prior written permission.
  44  *
  45  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
  46  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  47  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  48  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
  49  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  50  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  51  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  52  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  53  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  54  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  55  * SUCH DAMAGE.
  56  */
  57
  58 /*
  59  * Copyright (c) 1982, 1986, 1993
  60  *      The Regents of the University of California.  All rights reserved.
  61  *
  62  * Redistribution and use in source and binary forms, with or without
  63  * modification, are permitted provided that the following conditions
  64  * are met:
  65  * 1. Redistributions of source code must retain the above copyright
  66  *    notice, this list of conditions and the following disclaimer.
  67  * 2. Redistributions in binary form must reproduce the above copyright
  68  *    notice, this list of conditions and the following disclaimer in the
  69  *    documentation and/or other materials provided with the distribution.
  70  * 3. All advertising materials mentioning features or use of this software
  71  *    must display the following acknowledgement:
  72  *      This product includes software developed by the University of
  73  *      California, Berkeley and its contributors.
  74  * 4. Neither the name of the University nor the names of its contributors
  75  *    may be used to endorse or promote products derived from this software
  76  *    without specific prior written permission.
  77  *
  78  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
  79  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  80  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  81  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  82  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  83  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  84  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  85  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  86  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  87  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  88  * SUCH DAMAGE.
  89  *
  90  *      @(#)ip_var.h    8.1 (Berkeley) 6/10/93
  91  */
  92
  93 #ifndef _NETINET6_IP6_VAR_H_
  94 #define _NETINET6_IP6_VAR_H_
  95 #include <sys/appleapiopts.h>
  96
  97 #ifdef BSD_KERNEL_PRIVATE
  98 #include <kern/zalloc.h>
  99 #include <net/ethernet.h>
 100
 101 struct ip6asfrag;
 102 /*
 103  * IP6 reassembly queue structure.  Each fragment
 104  * being reassembled is attached to one of these structures.
 105  */
 106 struct  ip6q {
 107         struct ip6asfrag *ip6q_down;
 108         struct ip6asfrag *ip6q_up;
 109         u_int32_t       ip6q_ident;
 110         u_int8_t        ip6q_nxt;
 111         u_int8_t        ip6q_ecn;
 112         u_int8_t        ip6q_ttl;
 113         struct in6_addr ip6q_src, ip6q_dst;
 114         struct ip6q     *ip6q_next;
 115         struct ip6q     *ip6q_prev;
 116         int             ip6q_unfrglen;  /* len of unfragmentable part */
 117         int             ip6q_nfrag;     /* # of fragments */
 118         uint32_t        ip6q_csum_flags; /* checksum flags */
 119         uint32_t        ip6q_csum;      /* partial checksum value */
 120         uint32_t        ip6q_flags;
 121 #define IP6QF_DIRTY    0x00000001
 122 };
 123
 124 struct  ip6_moptions {
 125         decl_lck_mtx_data(, im6o_lock);
 126         uint32_t im6o_refcnt;           /* ref count */
 127         uint32_t im6o_debug;            /* see ifa_debug flags */
 128         struct  ifnet *im6o_multicast_ifp; /* ifp for outgoing multicasts */
 129         u_char  im6o_multicast_hlim;    /* hoplimit for outgoing multicasts */
 130         u_char  im6o_multicast_loop;    /* 1 >= hear sends if a member */
 131         u_short im6o_num_memberships;   /* no. memberships this socket */
 132         u_short im6o_max_memberships;   /* max memberships this socket */
 133         struct  in6_multi **im6o_membership;    /* group memberships */
 134         struct  in6_mfilter *im6o_mfilters;     /* source filters */
 135         void (*im6o_trace)              /* callback fn for tracing refs */
 136         (struct ip6_moptions *, int);
 137 };
 138
 139 #define IM6O_LOCK_ASSERT_HELD(_im6o)                                    \
 140         LCK_MTX_ASSERT(&(_im6o)->im6o_lock, LCK_MTX_ASSERT_OWNED)
 141
 142 #define IM6O_LOCK_ASSERT_NOTHELD(_im6o)                                 \
 143         LCK_MTX_ASSERT(&(_im6o)->im6o_lock, LCK_MTX_ASSERT_NOTOWNED)
 144
 145 #define IM6O_LOCK(_im6o)                                                \
 146         lck_mtx_lock(&(_im6o)->im6o_lock)
 147
 148 #define IM6O_LOCK_SPIN(_im6o)                                           \
 149         lck_mtx_lock_spin(&(_im6o)->im6o_lock)
 150
 151 #define IM6O_CONVERT_LOCK(_im6o) do {                                   \
 152         IM6O_LOCK_ASSERT_HELD(_im6o);                                   \
 153         lck_mtx_convert_spin(&(_im6o)->im6o_lock);                      \
 154 } while (0)
 155
 156 #define IM6O_UNLOCK(_im6o)                                              \
 157         lck_mtx_unlock(&(_im6o)->im6o_lock)
 158
 159 #define IM6O_ADDREF(_im6o)                                              \
 160         im6o_addref(_im6o, 0)
 161
 162 #define IM6O_ADDREF_LOCKED(_im6o)                                       \
 163         im6o_addref(_im6o, 1)
 164
 165 #define IM6O_REMREF(_im6o)                                              \
 166         im6o_remref(_im6o)
 167
 168 struct ip6_exthdrs {
 169         struct mbuf *ip6e_ip6;
 170         struct mbuf *ip6e_hbh;
 171         struct mbuf *ip6e_dest1;
 172         struct mbuf *ip6e_rthdr;
 173         struct mbuf *ip6e_dest2;
 174         boolean_t merged;
 175 };
 176
 177 /*
 178  * Control options for outgoing packets
 179  */
 180
 181 /* Routing header related info */
 182 struct  ip6po_rhinfo {
 183         struct  ip6_rthdr *ip6po_rhi_rthdr; /* Routing header */
 184         struct  route_in6 ip6po_rhi_route; /* Route to the 1st hop */
 185 };
 186 #define ip6po_rthdr     ip6po_rhinfo.ip6po_rhi_rthdr
 187 #define ip6po_route     ip6po_rhinfo.ip6po_rhi_route
 188
 189 /* Nexthop related info */
 190 struct  ip6po_nhinfo {
 191         struct  sockaddr *ip6po_nhi_nexthop;
 192         struct  route_in6 ip6po_nhi_route; /* Route to the nexthop */
 193 };
 194 #define ip6po_nexthop   ip6po_nhinfo.ip6po_nhi_nexthop
 195 #define ip6po_nextroute ip6po_nhinfo.ip6po_nhi_route
 196
 197 struct  ip6_pktopts {
 198         struct  mbuf *ip6po_m;  /* Pointer to mbuf storing the data */
 199         int     ip6po_hlim;     /* Hoplimit for outgoing packets */
 200
 201         /* Outgoing IF/address information */
 202         struct  in6_pktinfo *ip6po_pktinfo;
 203
 204         /* Next-hop address information */
 205         struct  ip6po_nhinfo ip6po_nhinfo;
 206
 207         struct  ip6_hbh *ip6po_hbh; /* Hop-by-Hop options header */
 208
 209         /* Destination options header (before a routing header) */
 210         struct  ip6_dest *ip6po_dest1;
 211
 212         /* Routing header related info. */
 213         struct  ip6po_rhinfo ip6po_rhinfo;
 214
 215         /* Destination options header (after a routing header) */
 216         struct  ip6_dest *ip6po_dest2;
 217
 218         int     ip6po_tclass;   /* traffic class */
 219
 220         int     ip6po_minmtu;  /* fragment vs PMTU discovery policy */
 221 #define IP6PO_MINMTU_MCASTONLY  -1 /* default; send at min MTU for multicast */
 222 #define IP6PO_MINMTU_DISABLE     0 /* always perform pmtu disc */
 223 #define IP6PO_MINMTU_ALL         1 /* always send at min MTU */
 224
 225         /* whether temporary addresses are preferred as source address */
 226         int     ip6po_prefer_tempaddr;
 227
 228 #define IP6PO_TEMPADDR_SYSTEM   -1 /* follow the system default */
 229 #define IP6PO_TEMPADDR_NOTPREFER 0 /* not prefer temporary address */
 230 #define IP6PO_TEMPADDR_PREFER    1 /* prefer temporary address */
 231
 232         int ip6po_flags;
 233 #if 0   /* parameters in this block is obsolete. do not reuse the values. */
 234 #define IP6PO_REACHCONF 0x01    /* upper-layer reachability confirmation. */
 235 #define IP6PO_MINMTU    0x02    /* use minimum MTU (IPV6_USE_MIN_MTU) */
 236 #endif
 237 #define IP6PO_DONTFRAG          0x04    /* no fragmentation (IPV6_DONTFRAG) */
 238 #define IP6PO_USECOA            0x08    /* use care of address */
 239 };
 240
 241 /*
 242  * Control options for incoming packets
 243  */
 244 #endif /* BSD_KERNEL_PRIVATE */
 245
 246 #define IP6S_SRCRULE_COUNT 16
 247 #include <netinet6/scope6_var.h>
 248
 249 struct  ip6stat {
 250         u_quad_t ip6s_total;            /* total packets received */
 251         u_quad_t ip6s_tooshort;         /* packet too short */
 252         u_quad_t ip6s_toosmall;         /* not enough data */
 253         u_quad_t ip6s_fragments;        /* fragments received */
 254         u_quad_t ip6s_fragdropped;      /* frags dropped(dups, out of space) */
 255         u_quad_t ip6s_fragtimeout;      /* fragments timed out */
 256         u_quad_t ip6s_fragoverflow;     /* fragments that exceeded limit */
 257         u_quad_t ip6s_forward;          /* packets forwarded */
 258         u_quad_t ip6s_cantforward;      /* packets rcvd for unreachable dest */
 259         u_quad_t ip6s_redirectsent;     /* packets forwarded on same net */
 260         u_quad_t ip6s_delivered;        /* datagrams delivered to upper level */
 261         u_quad_t ip6s_localout;         /* total ip packets generated here */
 262         u_quad_t ip6s_odropped;         /* lost packets due to nobufs, etc. */
 263         u_quad_t ip6s_reassembled;      /* total packets reassembled ok */
 264         u_quad_t ip6s_atmfrag_rcvd;     /* atomic fragments received */
 265         u_quad_t ip6s_fragmented;       /* datagrams successfully fragmented */
 266         u_quad_t ip6s_ofragments;       /* output fragments created */
 267         u_quad_t ip6s_cantfrag;         /* don't fragment flag was set, etc. */
 268         u_quad_t ip6s_badoptions;       /* error in option processing */
 269         u_quad_t ip6s_noroute;          /* packets discarded due to no route */
 270         u_quad_t ip6s_badvers;          /* ip6 version != 6 */
 271         u_quad_t ip6s_rawout;           /* total raw ip packets generated */
 272         u_quad_t ip6s_badscope;         /* scope error */
 273         u_quad_t ip6s_notmember;        /* don't join this multicast group */
 274         u_quad_t ip6s_nxthist[256];     /* next header history */
 275         u_quad_t ip6s_m1;               /* one mbuf */
 276         u_quad_t ip6s_m2m[32];          /* two or more mbuf */
 277         u_quad_t ip6s_mext1;            /* one ext mbuf */
 278         u_quad_t ip6s_mext2m;           /* two or more ext mbuf */
 279         u_quad_t ip6s_exthdrtoolong;    /* ext hdr are not continuous */
 280         u_quad_t ip6s_nogif;            /* no match gif found */
 281         u_quad_t ip6s_toomanyhdr;       /* discarded due to too many headers */
 282
 283         /*
 284          * statistics for improvement of the source address selection
 285          * algorithm:
 286          */
 287         /* number of times that address selection fails */
 288         u_quad_t ip6s_sources_none;
 289         /* number of times that an address on the outgoing I/F is chosen */
 290         u_quad_t ip6s_sources_sameif[SCOPE6_ID_MAX];
 291         /* number of times that an address on a non-outgoing I/F is chosen */
 292         u_quad_t ip6s_sources_otherif[SCOPE6_ID_MAX];
 293         /*
 294          * number of times that an address that has the same scope
 295          * from the destination is chosen.
 296          */
 297         u_quad_t ip6s_sources_samescope[SCOPE6_ID_MAX];
 298         /*
 299          * number of times that an address that has a different scope
 300          * from the destination is chosen.
 301          */
 302         u_quad_t ip6s_sources_otherscope[SCOPE6_ID_MAX];
 303         /* number of times that a deprecated address is chosen */
 304         u_quad_t ip6s_sources_deprecated[SCOPE6_ID_MAX];
 305
 306         u_quad_t ip6s_forward_cachehit;
 307         u_quad_t ip6s_forward_cachemiss;
 308
 309         /* number of times that each rule of source selection is applied. */
 310         u_quad_t ip6s_sources_rule[IP6S_SRCRULE_COUNT];
 311
 312         /* number of times we ignored address on expensive secondary interfaces */
 313         u_quad_t ip6s_sources_skip_expensive_secondary_if;
 314
 315         /* pkt dropped, no mbufs for control data */
 316         u_quad_t ip6s_pktdropcntrl;
 317
 318         /* total packets trimmed/adjusted  */
 319         u_quad_t ip6s_adj;
 320         /* hwcksum info discarded during adjustment */
 321         u_quad_t ip6s_adj_hwcsum_clr;
 322
 323         /* duplicate address detection collisions */
 324         u_quad_t ip6s_dad_collide;
 325
 326         /* DAD NS looped back */
 327         u_quad_t ip6s_dad_loopcount;
 328
 329         /* NECP policy related drop */
 330         u_quad_t ip6s_necp_policy_drop;
 331
 332         /* CLAT46 stats */
 333         u_quad_t ip6s_clat464_in_tooshort_drop;
 334         u_quad_t ip6s_clat464_in_nov6addr_drop;
 335         u_quad_t ip6s_clat464_in_nov4addr_drop;
 336         u_quad_t ip6s_clat464_in_v4synthfail_drop;
 337         u_quad_t ip6s_clat464_in_64transfail_drop;
 338         u_quad_t ip6s_clat464_in_64proto_transfail_drop;
 339         u_quad_t ip6s_clat464_in_64frag_transfail_drop;
 340         u_quad_t ip6s_clat464_in_invalpbuf_drop;
 341         u_quad_t ip6s_clat464_in_success;
 342         u_quad_t ip6s_clat464_in_drop;
 343         u_quad_t ip6s_clat464_in_v4_drop;
 344
 345         u_quad_t ip6s_clat464_out_nov6addr_drop;
 346         u_quad_t ip6s_clat464_out_v6synthfail_drop;
 347         u_quad_t ip6s_clat464_out_46transfail_drop;
 348         u_quad_t ip6s_clat464_out_46proto_transfail_drop;
 349         u_quad_t ip6s_clat464_out_46frag_transfail_drop;
 350         u_quad_t ip6s_clat464_out_invalpbuf_drop;
 351         u_quad_t ip6s_clat464_out_success;
 352         u_quad_t ip6s_clat464_out_drop;
 353
 354         u_quad_t ip6s_clat464_v6addr_conffail;
 355         u_quad_t ip6s_clat464_plat64_pfx_setfail;
 356         u_quad_t ip6s_clat464_plat64_pfx_getfail;
 357
 358         u_quad_t ip6s_overlap_frag_drop;
 359
 360         u_quad_t ip6s_rcv_if_weak_match;
 361         u_quad_t ip6s_rcv_if_no_match;
 362 };
 363
 364 enum ip6s_sources_rule_index {
 365         IP6S_SRCRULE_0, IP6S_SRCRULE_1, IP6S_SRCRULE_2, IP6S_SRCRULE_3, IP6S_SRCRULE_4,
 366         IP6S_SRCRULE_5, IP6S_SRCRULE_6, IP6S_SRCRULE_7,
 367         IP6S_SRCRULE_7x, IP6S_SRCRULE_8
 368 };
 369
 370 #ifdef BSD_KERNEL_PRIVATE
 371 /*
 372  * IPv6 onion peeling state.
 373  *
 374  * This is currently allocated for packets destined to the all-nodes
 375  * multicast address over Ethernet.  IPv6 destination address information
 376  * is now stored in the mbuf itself.
 377  */
 378 struct ip6aux {
 379         u_int32_t ip6a_flags;
 380 #define IP6A_HASEEN     0x01            /* HA was present */
 381
 382 #ifdef notyet
 383 #define IP6A_SWAP       0x02            /* swapped home/care-of on packet */
 384 #define IP6A_BRUID      0x04            /* BR Unique Identifier was present */
 385 #define IP6A_RTALERTSEEN 0x08           /* rtalert present */
 386
 387         /* ip6.ip6_src */
 388         struct in6_addr ip6a_careof;    /* care-of address of the peer */
 389         struct in6_addr ip6a_home;      /* home address of the peer */
 390         u_int16_t       ip6a_bruid;     /* BR unique identifier */
 391
 392         /* rtalert */
 393         u_int16_t ip6a_rtalert;         /* rtalert option value */
 394 #endif /* notyet */
 395
 396         /* ether source address if all-nodes multicast destination */
 397         u_char ip6a_ehsrc[ETHER_ADDR_LEN];
 398 };
 399
 400 /* flags passed to ip6_output as last parameter */
 401 #define IPV6_UNSPECSRC          0x01    /* allow :: as the source address */
 402 #define IPV6_FORWARDING         0x02    /* most of IPv6 header exists */
 403 #define IPV6_MINMTU             0x04    /* use minimum MTU (IPV6_USE_MIN_MTU) */
 404 #define IPV6_FLAG_NOSRCIFSEL    0x80    /* bypas source address selection */
 405 #define IPV6_OUTARGS            0x100   /* has ancillary output info */
 406
 407 #ifdef BSD_KERNEL_PRIVATE
 408 #define IP6_HDR_ALIGNED_P(_ip6) ((((uintptr_t)(_ip6)) & ((uintptr_t)3)) == 0)
 409
 410 /*
 411  * On platforms which require strict alignment (currently for anything but
 412  * i386 or x86_64), this macro checks whether the pointer to the IP header
 413  * is 32-bit aligned, and assert otherwise.
 414  */
 415 #if defined(__i386__) || defined(__x86_64__)
 416 #define IP6_HDR_STRICT_ALIGNMENT_CHECK(_ip6) do { } while (0)
 417 #else /* !__i386__ && !__x86_64__ */
 418 #define IP6_HDR_STRICT_ALIGNMENT_CHECK(_ip6) do {                       \
 419         if (!IP_HDR_ALIGNED_P(_ip6)) {                                  \
 420                 panic_plain("\n%s: Unaligned IPv6 header %p\n",         \
 421                     __func__, _ip6);                                    \
 422         }                                                               \
 423 } while (0)
 424 #endif /* !__i386__ && !__x86_64__ */
 425 #endif /* BSD_KERNEL_PRIVATE */
 426
 427 #include <net/flowadv.h>
 428
 429 /*
 430  * Extra information passed to ip6_output when IPV6_OUTARGS is set.
 431  */
 432 struct ip6_out_args {
 433         unsigned int    ip6oa_boundif;  /* bound outgoing interface */
 434         struct flowadv  ip6oa_flowadv;  /* flow advisory code */
 435         u_int32_t       ip6oa_flags;    /* IP6OAF flags (see below) */
 436 #define IP6OAF_SELECT_SRCIF     0x00000001      /* src interface selection */
 437 #define IP6OAF_BOUND_IF         0x00000002      /* boundif value is valid */
 438 #define IP6OAF_BOUND_SRCADDR    0x00000004      /* bound to src address */
 439 #define IP6OAF_NO_CELLULAR      0x00000010      /* skip IFT_CELLULAR */
 440 #define IP6OAF_NO_EXPENSIVE     0x00000020      /* skip IFEF_EXPENSIVE */
 441 #define IP6OAF_AWDL_UNRESTRICTED 0x00000040     /* privileged AWDL */
 442 #define IP6OAF_QOSMARKING_ALLOWED 0x00000080    /* policy allows Fastlane DSCP marking */
 443 #define IP6OAF_INTCOPROC_ALLOWED 0x00000100     /* access to internal coproc interfaces */
 444 #define IP6OAF_NO_LOW_POWER     0x00000200      /* skip low power */
 445 #define IP6OAF_NO_CONSTRAINED   0x00000400      /* skip IFXF_CONSTRAINED */
 446 #define IP6OAF_SKIP_PF          0x00000800      /* skip PF */
 447 #define IP6OAF_DONT_FRAG        0x00001000      /* Don't fragment */
 448 #define IP6OAF_REDO_QOSMARKING_POLICY   0x00002000      /* Re-evaluate QOS marking policy */
 449         u_int32_t       ip6oa_retflags; /* IP6OARF return flags (see below) */
 450 #define IP6OARF_IFDENIED        0x00000001      /* denied access to interface */
 451         int             ip6oa_sotc;             /* traffic class for Fastlane DSCP mapping */
 452         int             ip6oa_netsvctype;
 453         int32_t         qos_marking_gencount;
 454 };
 455
 456 extern struct ip6stat ip6stat;  /* statistics */
 457 extern int ip6_defhlim;         /* default hop limit */
 458 extern int ip6_defmcasthlim;    /* default multicast hop limit */
 459 extern int ip6_forwarding;      /* act as router? */
 460 extern int ip6_gif_hlim;        /* Hop limit for gif encap packet */
 461 extern int ip6_use_deprecated;  /* allow deprecated addr as source */
 462 extern int ip6_rr_prune;        /* router renumbering prefix */
 463                                 /*   walk list every 5 sec. */
 464 extern int ip6_mcast_pmtu;      /* enable pMTU discovery for multicast? */
 465 #define ip6_mapped_addr_on      (!ip6_v6only)
 466 extern int ip6_v6only;
 467
 468 extern int ip6_neighborgcthresh; /* Threshold # of NDP entries for GC */
 469 extern int ip6_maxifprefixes;   /* Max acceptable prefixes via RA per IF */
 470 extern int ip6_maxifdefrouters; /* Max acceptable def routers via RA */
 471 extern int ip6_maxdynroutes;    /* Max # of routes created via redirect */
 472 extern int ip6_sendredirects;   /* send IP redirects when forwarding? */
 473 extern int ip6_accept_rtadv;    /* deprecated */
 474 extern int ip6_log_interval;
 475 extern uint64_t ip6_log_time;
 476 extern int ip6_hdrnestlimit;    /* upper limit of # of extension headers */
 477 extern int ip6_dad_count;       /* DupAddrDetectionTransmits */
 478
 479 /* RFC4193 Unique Local Unicast Prefixes only */
 480 extern int ip6_only_allow_rfc4193_prefix;
 481
 482 extern int ip6_auto_flowlabel;
 483 extern int ip6_auto_linklocal;
 484
 485 extern int ip6_anonportmin;             /* minimum ephemeral port */
 486 extern int ip6_anonportmax;             /* maximum ephemeral port */
 487 extern int ip6_lowportmin;              /* minimum reserved port */
 488 extern int ip6_lowportmax;              /* maximum reserved port */
 489
 490 extern int ip6_use_tempaddr; /* whether to use temporary addresses. */
 491
 492 /* whether to prefer temporary addresses in the source address selection */
 493 extern int ip6_prefer_tempaddr;
 494
 495 /* whether to use the default scope zone when unspecified */
 496 extern int ip6_use_defzone;
 497
 498 /* how many times to try allocating cga address after conflict */
 499 extern int ip6_cga_conflict_retries;
 500 #define IPV6_CGA_CONFLICT_RETRIES_DEFAULT 3
 501 #define IPV6_CGA_CONFLICT_RETRIES_MAX     10
 502
 503 extern struct pr_usrreqs rip6_usrreqs;
 504 extern struct pr_usrreqs icmp6_dgram_usrreqs;
 505
 506 struct sockopt;
 507 struct inpcb;
 508 struct ip6_hdr;
 509 struct in6_ifaddr;
 510 struct ip6protosw;
 511 struct domain;
 512
 513 extern int icmp6_ctloutput(struct socket *, struct sockopt *);
 514 extern int icmp6_dgram_ctloutput(struct socket *, struct sockopt *);
 515 extern int icmp6_dgram_send(struct socket *, int, struct mbuf *,
 516     struct sockaddr *, struct mbuf *, struct proc *);
 517 extern int icmp6_dgram_attach(struct socket *, int, struct proc *);
 518
 519 extern void ip6_init(struct ip6protosw *, struct domain *);
 520 extern void ip6_input(struct mbuf *);
 521 extern void ip6_setsrcifaddr_info(struct mbuf *, uint32_t, struct in6_ifaddr *);
 522 extern void ip6_setdstifaddr_info(struct mbuf *, uint32_t, struct in6_ifaddr *);
 523 extern int ip6_getsrcifaddr_info(struct mbuf *, uint32_t *, uint32_t *);
 524 extern int ip6_getdstifaddr_info(struct mbuf *, uint32_t *, uint32_t *);
 525 extern void ip6_freepcbopts(struct ip6_pktopts *);
 526 extern int ip6_unknown_opt(u_int8_t *, struct mbuf *, size_t);
 527 extern char *ip6_get_prevhdr(struct mbuf *, int);
 528 extern int ip6_nexthdr(struct mbuf *, int, int, int *);
 529 extern int ip6_lasthdr(struct mbuf *, int, int, int *);
 530 extern boolean_t ip6_pkt_has_ulp(struct mbuf *m);
 531
 532 extern void ip6_moptions_init(void);
 533 extern struct ip6_moptions *ip6_allocmoptions(zalloc_flags_t);
 534 extern void im6o_addref(struct ip6_moptions *, int);
 535 extern void im6o_remref(struct ip6_moptions *);
 536
 537 extern struct ip6aux *ip6_addaux(struct mbuf *);
 538 extern struct ip6aux *ip6_findaux(struct mbuf *);
 539 extern void ip6_delaux(struct mbuf *);
 540
 541 extern int ip6_process_hopopts(struct mbuf *, u_int8_t *, int, u_int32_t *,
 542     u_int32_t *);
 543 extern struct mbuf **ip6_savecontrol_v4(struct inpcb *, struct mbuf *,
 544     struct mbuf **, int *);
 545 extern int ip6_savecontrol(struct inpcb *, struct mbuf *, struct mbuf **);
 546 extern struct mbuf *ip6_forward(struct mbuf *, struct route_in6 *, int);
 547 extern void ip6_notify_pmtu(struct inpcb *, struct sockaddr_in6 *, u_int32_t *);
 548 extern void ip6_mloopback(struct ifnet *, struct ifnet *, struct mbuf *,
 549     struct sockaddr_in6 *, uint32_t, int32_t);
 550 extern int ip6_output(struct mbuf *, struct ip6_pktopts *, struct route_in6 *,
 551     int, struct ip6_moptions *, struct ifnet **, struct ip6_out_args *);
 552 extern int ip6_output_list(struct mbuf *, int, struct ip6_pktopts *,
 553     struct route_in6 *, int, struct ip6_moptions *, struct ifnet **,
 554     struct ip6_out_args *);
 555 extern int ip6_ctloutput(struct socket *, struct sockopt *);
 556 extern int ip6_raw_ctloutput(struct socket *, struct sockopt *);
 557 extern void ip6_initpktopts(struct ip6_pktopts *);
 558 extern int ip6_setpktoptions(struct mbuf *, struct ip6_pktopts *, int, int);
 559 extern void ip6_clearpktopts(struct ip6_pktopts *, int);
 560 extern struct ip6_pktopts *ip6_copypktopts(struct ip6_pktopts *, int);
 561 extern int ip6_optlen(struct inpcb *);
 562 extern void ip6_drain(void);
 563 extern int ip6_do_fragmentation(struct mbuf **, uint32_t, struct ifnet *, uint32_t,
 564     struct ip6_hdr *, uint8_t *, uint32_t, int, uint32_t);
 565
 566 extern int route6_input(struct mbuf **, int *, int);
 567
 568 extern void frag6_init(void);
 569 extern int frag6_input(struct mbuf **, int *, int);
 570 extern void frag6_drain(void);
 571
 572 extern int rip6_input(struct mbuf **, int *, int);
 573 extern void rip6_ctlinput(int, struct sockaddr *, void *, struct ifnet *);
 574 extern int rip6_ctloutput(struct socket *so, struct sockopt *sopt);
 575 extern int rip6_output(struct mbuf *, struct socket *, struct sockaddr_in6 *,
 576     struct mbuf *, int);
 577
 578 extern int dest6_input(struct mbuf **, int *, int);
 579 /*
 580  * IPv6 source address selection hints
 581  */
 582 #define IPV6_SRCSEL_HINT_PREFER_TMPADDR         0x00000001
 583
 584 extern struct ifaddr * in6_selectsrc_core_ifa(struct sockaddr_in6 *, struct ifnet *, int);
 585 extern struct in6_addr * in6_selectsrc_core(struct sockaddr_in6 *,
 586     uint32_t, struct ifnet *, int,
 587     struct in6_addr *, struct ifnet **, int *, struct ifaddr **);
 588 extern struct in6_addr *in6_selectsrc(struct sockaddr_in6 *,
 589     struct ip6_pktopts *, struct inpcb *, struct route_in6 *,
 590     struct ifnet **, struct in6_addr *, unsigned int, int *);
 591 extern struct in6_addrpolicy *in6_addrsel_lookup_policy(struct sockaddr_in6 *);
 592 extern int in6_selectroute(struct sockaddr_in6 *, struct sockaddr_in6 *,
 593     struct ip6_pktopts *, struct ip6_moptions *, struct in6_ifaddr **,
 594     struct route_in6 *, struct ifnet **, struct rtentry **, int,
 595     struct ip6_out_args *);
 596 extern int ip6_setpktopts(struct mbuf *control, struct ip6_pktopts *opt,
 597     struct ip6_pktopts *stickyopt, int uproto);
 598 extern u_int32_t ip6_randomid(void);
 599 extern u_int32_t ip6_randomflowlabel(void);
 600 #endif /* BSD_KERNEL_PRIVATE */
 601 #endif /* !_NETINET6_IP6_VAR_H_ */