X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?p=secnet.git;a=blobdiff_plain;f=netlink.h;h=7c427161eae531e5d26238dd97f5544a0b4c8b0f;hp=3f735f2558db0e5b091bb7b0503a812ba4244af7;hb=cfd794827e3243c681590845063309fa628cfef4;hpb=7138d0c54cd2212439434d27cb2d6ea775c3039b

diff --git a/netlink.h b/netlink.h
index 3f735f2..7c42716 100644
--- a/netlink.h
+++ b/netlink.h
@@ -7,26 +7,35 @@
 #define DEFAULT_MTU 1000
 #define ICMP_BUFSIZE 1024
 
+struct netlink;
+
 struct netlink_client {
-    struct subnet_list *networks;
+    closure_t cl;
+    struct netlink_if ops;
+    struct netlink *nst;
+    struct ipset *networks;
+    struct subnet_list *subnets; /* Same information as 'networks' */
+    uint32_t priority; /* Higher priority clients have their networks
+			  checked first during routing.  This allows
+			  things like laptops to supersede whole
+			  networks. */
     netlink_deliver_fn *deliver;
     void *dst;
     string_t name;
     uint32_t link_quality;
+    int32_t mtu;
     uint32_t options;
+    uint32_t outcount;
+    bool_t up; /* Should these routes exist in the kernel? */
+    bool_t kup; /* Do these routes exist in the kernel? */
     struct netlink_client *next;
 };
 
-struct netlink_route {
-    struct subnet net;
-    bool_t hard;
-    bool_t allow_route;
-    bool_t up;
-    bool_t kup;
-    struct netlink_client *c;
-};
+/* options field in 'struct netlink_client' */
+#define OPT_SOFTROUTE   1
+#define OPT_ALLOWROUTE  2
 
-typedef bool_t netlink_route_fn(void *cst, struct netlink_route *route);
+typedef bool_t netlink_route_fn(void *cst, struct netlink_client *routes);
 
 /* Netlink provides one function to the device driver, to call to deliver
    a packet from the device. The device driver provides one function to
@@ -34,27 +43,29 @@ typedef bool_t netlink_route_fn(void *cst, struct netlink_route *route);
 
 struct netlink {
     closure_t cl;
-    struct netlink_if ops;
     void *dst; /* Pointer to host interface state */
-    string_t name;
-    uint32_t max_start_pad;
-    uint32_t max_end_pad;
-    struct subnet_list networks;
-    struct subnet_list exclude_remote_networks;
-    uint32_t secnet_address; /* our own address */
-    uint32_t mtu;
-    struct netlink_client *clients;
+    cstring_t name;
+    struct ipset *networks; /* Local networks */
+    struct subnet_list *subnets; /* Same as networks, for display */
+    struct ipset *remote_networks; /* Allowable remote networks */
+    uint32_t secnet_address; /* our own address, or the address of the
+				other end of a point-to-point link */
+    bool_t ptp;
+    int32_t mtu;
+    struct netlink_client *clients; /* Linked list of clients */
+    struct netlink_client **routes; /* Array of clients, sorted by priority */
+    int32_t n_clients;
     netlink_deliver_fn *deliver_to_host; /* Provided by driver */
-    netlink_route_fn *set_route; /* Provided by driver */
+    netlink_route_fn *set_routes; /* Provided by driver */
     struct buffer_if icmp; /* Buffer for assembly of outgoing ICMP */
-    uint32_t n_routes; /* How many routes do we know about? */
-    struct netlink_route *routes;
+    uint32_t outcount; /* Packets sent to host */
+    uint32_t localcount; /* Packets sent to secnet */
 };
 
 extern netlink_deliver_fn *netlink_init(struct netlink *st,
 					void *dst, struct cloc loc,
-					dict_t *dict, string_t description,
-					netlink_route_fn *set_route,
+					dict_t *dict, cstring_t description,
+					netlink_route_fn *set_routes,
 					netlink_deliver_fn *to_host);
 
 #endif /* netlink_h */