X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=src%2Fresolve%2Fresolved-link.c;h=f94e4bb6f058252fbbbef8489bdc5e12871d7861;hp=1b175c8121a7adc9f4bb339c211cc1adec5ce3c9;hb=56f64d95763a799ba4475daf44d8e9f72a1bd474;hpb=c5ed93163e6ef51a7462aa558a7e0912b17c4951 diff --git a/src/resolve/resolved-link.c b/src/resolve/resolved-link.c index 1b175c812..f94e4bb6f 100644 --- a/src/resolve/resolved-link.c +++ b/src/resolve/resolved-link.c @@ -22,8 +22,8 @@ #include #include "sd-network.h" -#include "dhcp-lease-internal.h" #include "strv.h" +#include "missing.h" #include "resolved-link.h" int link_new(Manager *m, Link **ret, int ifindex) { @@ -33,7 +33,7 @@ int link_new(Manager *m, Link **ret, int ifindex) { assert(m); assert(ifindex > 0); - r = hashmap_ensure_allocated(&m->links, NULL, NULL); + r = hashmap_ensure_allocated(&m->links, NULL); if (r < 0) return r; @@ -42,6 +42,7 @@ int link_new(Manager *m, Link **ret, int ifindex) { return -ENOMEM; l->ifindex = ifindex; + l->llmnr_support = SUPPORT_YES; r = hashmap_put(m->links, INT_TO_PTR(ifindex), l); if (r < 0) @@ -68,20 +69,63 @@ Link *link_free(Link *l) { hashmap_remove(l->manager->links, INT_TO_PTR(l->ifindex)); dns_scope_free(l->unicast_scope); - dns_scope_free(l->mdns_ipv4_scope); - dns_scope_free(l->mdns_ipv6_scope); + dns_scope_free(l->llmnr_ipv4_scope); + dns_scope_free(l->llmnr_ipv6_scope); - while (l->dhcp_dns_servers) - dns_server_free(l->dhcp_dns_servers); - - while (l->link_dns_servers) - dns_server_free(l->link_dns_servers); + while (l->dns_servers) + dns_server_free(l->dns_servers); free(l); return NULL; - } +} + +static void link_allocate_scopes(Link *l) { + int r; + + assert(l); + + if (l->dns_servers) { + if (!l->unicast_scope) { + r = dns_scope_new(l->manager, &l->unicast_scope, l, DNS_PROTOCOL_DNS, AF_UNSPEC); + if (r < 0) + log_warning_errno(r, "Failed to allocate DNS scope: %m"); + } + } else + l->unicast_scope = dns_scope_free(l->unicast_scope); + + if (link_relevant(l, AF_INET) && + l->llmnr_support != SUPPORT_NO && + l->manager->llmnr_support != SUPPORT_NO) { + if (!l->llmnr_ipv4_scope) { + r = dns_scope_new(l->manager, &l->llmnr_ipv4_scope, l, DNS_PROTOCOL_LLMNR, AF_INET); + if (r < 0) + log_warning_errno(r, "Failed to allocate LLMNR IPv4 scope: %m"); + } + } else + l->llmnr_ipv4_scope = dns_scope_free(l->llmnr_ipv4_scope); + + if (link_relevant(l, AF_INET6) && + l->llmnr_support != SUPPORT_NO && + l->manager->llmnr_support != SUPPORT_NO && + socket_ipv6_is_supported()) { + if (!l->llmnr_ipv6_scope) { + r = dns_scope_new(l->manager, &l->llmnr_ipv6_scope, l, DNS_PROTOCOL_LLMNR, AF_INET6); + if (r < 0) + log_warning_errno(r, "Failed to allocate LLMNR IPv6 scope: %m"); + } + } else + l->llmnr_ipv6_scope = dns_scope_free(l->llmnr_ipv6_scope); +} + +void link_add_rrs(Link *l, bool force_remove) { + LinkAddress *a; + + LIST_FOREACH(addresses, a, l->addresses) + link_address_add_rrs(a, force_remove); +} int link_update_rtnl(Link *l, sd_rtnl_message *m) { + const char *n = NULL; int r; assert(l); @@ -92,196 +136,198 @@ int link_update_rtnl(Link *l, sd_rtnl_message *m) { return r; sd_rtnl_message_read_u32(m, IFLA_MTU, &l->mtu); + + if (sd_rtnl_message_read_string(m, IFLA_IFNAME, &n) >= 0) { + strncpy(l->name, n, sizeof(l->name)-1); + char_array_0(l->name); + } + + link_allocate_scopes(l); + link_add_rrs(l, false); + return 0; } -static int update_dhcp_dns_servers(Link *l) { - _cleanup_dhcp_lease_unref_ sd_dhcp_lease *lease = NULL; - const struct in_addr *nameservers = NULL; +static int link_update_dns_servers(Link *l) { + _cleanup_strv_free_ char **nameservers = NULL; + char **nameserver; DnsServer *s, *nx; - int r, n, i; + int r; assert(l); - r = sd_network_dhcp_use_dns(l->ifindex); - if (r <= 0) - goto clear; - - r = sd_network_get_dhcp_lease(l->ifindex, &lease); + r = sd_network_link_get_dns(l->ifindex, &nameservers); if (r < 0) goto clear; - LIST_FOREACH(servers, s, l->dhcp_dns_servers) + LIST_FOREACH(servers, s, l->dns_servers) s->marked = true; - n = sd_dhcp_lease_get_dns(lease, &nameservers); - if (n < 0) { - r = n; - goto clear; - } + STRV_FOREACH(nameserver, nameservers) { + union in_addr_union a; + int family; - for (i = 0; i < n; i++) { - union in_addr_union a = { .in = nameservers[i] }; + r = in_addr_from_string_auto(*nameserver, &family, &a); + if (r < 0) + goto clear; - s = link_find_dns_server(l, DNS_SERVER_DHCP, AF_INET, &a); + s = link_find_dns_server(l, family, &a); if (s) s->marked = false; else { - r = dns_server_new(l->manager, NULL, DNS_SERVER_DHCP, l, AF_INET, &a); + r = dns_server_new(l->manager, NULL, DNS_SERVER_LINK, l, family, &a); if (r < 0) goto clear; } } - LIST_FOREACH_SAFE(servers, s, nx, l->dhcp_dns_servers) + LIST_FOREACH_SAFE(servers, s, nx, l->dns_servers) if (s->marked) dns_server_free(s); return 0; clear: - while (l->dhcp_dns_servers) - dns_server_free(l->dhcp_dns_servers); + while (l->dns_servers) + dns_server_free(l->dns_servers); return r; } -static int update_link_dns_servers(Link *l) { - _cleanup_free_ struct in_addr *nameservers = NULL; - _cleanup_free_ struct in6_addr *nameservers6 = NULL; - DnsServer *s, *nx; - int r, n, i; +static int link_update_llmnr_support(Link *l) { + _cleanup_free_ char *b = NULL; + int r; assert(l); - LIST_FOREACH(servers, s, l->link_dns_servers) - s->marked = true; - - n = sd_network_get_dns(l->ifindex, &nameservers); - if (n < 0) { - r = n; + r = sd_network_link_get_llmnr(l->ifindex, &b); + if (r < 0) goto clear; - } - for (i = 0; i < n; i++) { - union in_addr_union a = { .in = nameservers[i] }; + r = parse_boolean(b); + if (r < 0) { + if (streq(b, "resolve")) + l->llmnr_support = SUPPORT_RESOLVE; + else + goto clear; - s = link_find_dns_server(l, DNS_SERVER_LINK, AF_INET, &a); - if (s) - s->marked = false; - else { - r = dns_server_new(l->manager, NULL, DNS_SERVER_LINK, l, AF_INET, &a); - if (r < 0) - goto clear; - } - } + } else if (r > 0) + l->llmnr_support = SUPPORT_YES; + else + l->llmnr_support = SUPPORT_NO; - n = sd_network_get_dns6(l->ifindex, &nameservers6); - if (n < 0) { - r = n; - goto clear; - } + return 0; - for (i = 0; i < n; i++) { - union in_addr_union a = { .in6 = nameservers6[i] }; +clear: + l->llmnr_support = SUPPORT_YES; + return r; +} - s = link_find_dns_server(l, DNS_SERVER_LINK, AF_INET6, &a); - if (s) - s->marked = false; - else { - r = dns_server_new(l->manager, NULL, DNS_SERVER_LINK, l, AF_INET6, &a); - if (r < 0) - goto clear; - } - } +static int link_update_domains(Link *l) { + int r; - LIST_FOREACH_SAFE(servers, s, nx, l->link_dns_servers) - if (s->marked) - dns_server_free(s); + if (!l->unicast_scope) + return 0; - return 0; + strv_free(l->unicast_scope->domains); + l->unicast_scope->domains = NULL; -clear: - while (l->link_dns_servers) - dns_server_free(l->link_dns_servers); + r = sd_network_link_get_domains(l->ifindex, + &l->unicast_scope->domains); + if (r < 0) + return r; - return r; + return 0; } int link_update_monitor(Link *l) { assert(l); - free(l->operational_state); - l->operational_state = NULL; - - sd_network_get_link_operational_state(l->ifindex, &l->operational_state); - - update_dhcp_dns_servers(l); - update_link_dns_servers(l); + link_update_dns_servers(l); + link_update_llmnr_support(l); + link_allocate_scopes(l); + link_update_domains(l); + link_add_rrs(l, false); return 0; } -bool link_relevant(Link *l) { +bool link_relevant(Link *l, int family) { + _cleanup_free_ char *state = NULL; LinkAddress *a; assert(l); - /* A link is relevant if it isn't a loopback device and has at - * least one relevant IP address */ + /* A link is relevant if it isn't a loopback or pointopoint + * device, has a link beat, can do multicast and has at least + * one relevant IP address */ - if (l->flags & IFF_LOOPBACK) + if (l->flags & (IFF_LOOPBACK|IFF_POINTOPOINT|IFF_DORMANT)) return false; - if (l->operational_state && !STR_IN_SET(l->operational_state, "unknown", "degraded", "routable")) + if ((l->flags & (IFF_UP|IFF_LOWER_UP|IFF_MULTICAST)) != (IFF_UP|IFF_LOWER_UP|IFF_MULTICAST)) + return false; + + sd_network_link_get_operational_state(l->ifindex, &state); + if (state && !STR_IN_SET(state, "unknown", "degraded", "routable")) return false; LIST_FOREACH(addresses, a, l->addresses) - if (link_address_relevant(a)) + if (a->family == family && link_address_relevant(a)) return true; return false; } -LinkAddress *link_find_address(Link *l, unsigned char family, union in_addr_union *in_addr) { +LinkAddress *link_find_address(Link *l, int family, const union in_addr_union *in_addr) { LinkAddress *a; assert(l); - LIST_FOREACH(addresses, a, l->addresses) { - - if (a->family == family && - in_addr_equal(family, &a->in_addr, in_addr)) + LIST_FOREACH(addresses, a, l->addresses) + if (a->family == family && in_addr_equal(family, &a->in_addr, in_addr)) return a; - } return NULL; } -DnsServer* link_find_dns_server(Link *l, DnsServerSource source, unsigned char family, union in_addr_union *in_addr) { - DnsServer *first, *s; +DnsServer* link_find_dns_server(Link *l, int family, const union in_addr_union *in_addr) { + DnsServer *s; assert(l); - first = source == DNS_SERVER_DHCP ? l->dhcp_dns_servers : l->link_dns_servers; + LIST_FOREACH(servers, s, l->dns_servers) + if (s->family == family && in_addr_equal(family, &s->address, in_addr)) + return s; + return NULL; +} - LIST_FOREACH(servers, s, first) { +DnsServer* link_set_dns_server(Link *l, DnsServer *s) { + assert(l); - if (s->family == family && - in_addr_equal(family, &s->address, in_addr)) - return s; + if (l->current_dns_server == s) + return s; + + if (s) { + _cleanup_free_ char *ip = NULL; + + in_addr_to_string(s->family, &s->address, &ip); + log_info("Switching to DNS server %s for interface %s.", strna(ip), l->name); } - return NULL; + l->current_dns_server = s; + + if (l->unicast_scope) + dns_cache_flush(&l->unicast_scope->cache); + + return s; } DnsServer *link_get_dns_server(Link *l) { assert(l); if (!l->current_dns_server) - l->current_dns_server = l->link_dns_servers; - if (!l->current_dns_server) - l->current_dns_server = l->dhcp_dns_servers; + link_set_dns_server(l, l->dns_servers); return l->current_dns_server; } @@ -289,37 +335,18 @@ DnsServer *link_get_dns_server(Link *l) { void link_next_dns_server(Link *l) { assert(l); - /* Switch to the next DNS server */ - - if (!l->current_dns_server) { - l->current_dns_server = l->link_dns_servers; - if (l->current_dns_server) - return; - } - - if (!l->current_dns_server) { - l->current_dns_server = l->dhcp_dns_servers; - if (l->current_dns_server) - return; - } - if (!l->current_dns_server) return; if (l->current_dns_server->servers_next) { - l->current_dns_server = l->current_dns_server->servers_next; + link_set_dns_server(l, l->current_dns_server->servers_next); return; } - if (l->current_dns_server->source == DNS_SERVER_LINK) - l->current_dns_server = l->dhcp_dns_servers; - else { - assert(l->current_dns_server->source == DNS_SERVER_DHCP); - l->current_dns_server = l->link_dns_servers; - } + link_set_dns_server(l, l->dns_servers); } -int link_address_new(Link *l, LinkAddress **ret, unsigned char family, union in_addr_union *in_addr) { +int link_address_new(Link *l, LinkAddress **ret, int family, const union in_addr_union *in_addr) { LinkAddress *a; assert(l); @@ -345,13 +372,156 @@ LinkAddress *link_address_free(LinkAddress *a) { if (!a) return NULL; - if (a->link) + if (a->link) { LIST_REMOVE(addresses, a->link->addresses, a); + if (a->llmnr_address_rr) { + if (a->family == AF_INET && a->link->llmnr_ipv4_scope) + dns_zone_remove_rr(&a->link->llmnr_ipv4_scope->zone, a->llmnr_address_rr); + else if (a->family == AF_INET6 && a->link->llmnr_ipv6_scope) + dns_zone_remove_rr(&a->link->llmnr_ipv6_scope->zone, a->llmnr_address_rr); + } + + if (a->llmnr_ptr_rr) { + if (a->family == AF_INET && a->link->llmnr_ipv4_scope) + dns_zone_remove_rr(&a->link->llmnr_ipv4_scope->zone, a->llmnr_ptr_rr); + else if (a->family == AF_INET6 && a->link->llmnr_ipv6_scope) + dns_zone_remove_rr(&a->link->llmnr_ipv6_scope->zone, a->llmnr_ptr_rr); + } + } + + dns_resource_record_unref(a->llmnr_address_rr); + dns_resource_record_unref(a->llmnr_ptr_rr); + free(a); return NULL; } +void link_address_add_rrs(LinkAddress *a, bool force_remove) { + int r; + + assert(a); + + if (a->family == AF_INET) { + + if (!force_remove && + link_address_relevant(a) && + a->link->llmnr_ipv4_scope && + a->link->llmnr_support == SUPPORT_YES && + a->link->manager->llmnr_support == SUPPORT_YES) { + + if (!a->link->manager->host_ipv4_key) { + a->link->manager->host_ipv4_key = dns_resource_key_new(DNS_CLASS_IN, DNS_TYPE_A, a->link->manager->hostname); + if (!a->link->manager->host_ipv4_key) { + r = -ENOMEM; + goto fail; + } + } + + if (!a->llmnr_address_rr) { + a->llmnr_address_rr = dns_resource_record_new(a->link->manager->host_ipv4_key); + if (!a->llmnr_address_rr) { + r = -ENOMEM; + goto fail; + } + + a->llmnr_address_rr->a.in_addr = a->in_addr.in; + a->llmnr_address_rr->ttl = LLMNR_DEFAULT_TTL; + } + + if (!a->llmnr_ptr_rr) { + r = dns_resource_record_new_reverse(&a->llmnr_ptr_rr, a->family, &a->in_addr, a->link->manager->hostname); + if (r < 0) + goto fail; + + a->llmnr_ptr_rr->ttl = LLMNR_DEFAULT_TTL; + } + + r = dns_zone_put(&a->link->llmnr_ipv4_scope->zone, a->link->llmnr_ipv4_scope, a->llmnr_address_rr, true); + if (r < 0) + log_warning_errno(r, "Failed to add A record to LLMNR zone: %m"); + + r = dns_zone_put(&a->link->llmnr_ipv4_scope->zone, a->link->llmnr_ipv4_scope, a->llmnr_ptr_rr, false); + if (r < 0) + log_warning_errno(r, "Failed to add IPv6 PTR record to LLMNR zone: %m"); + } else { + if (a->llmnr_address_rr) { + if (a->link->llmnr_ipv4_scope) + dns_zone_remove_rr(&a->link->llmnr_ipv4_scope->zone, a->llmnr_address_rr); + a->llmnr_address_rr = dns_resource_record_unref(a->llmnr_address_rr); + } + + if (a->llmnr_ptr_rr) { + if (a->link->llmnr_ipv4_scope) + dns_zone_remove_rr(&a->link->llmnr_ipv4_scope->zone, a->llmnr_ptr_rr); + a->llmnr_ptr_rr = dns_resource_record_unref(a->llmnr_ptr_rr); + } + } + } + + if (a->family == AF_INET6) { + + if (!force_remove && + link_address_relevant(a) && + a->link->llmnr_ipv6_scope && + a->link->llmnr_support == SUPPORT_YES && + a->link->manager->llmnr_support == SUPPORT_YES) { + + if (!a->link->manager->host_ipv6_key) { + a->link->manager->host_ipv6_key = dns_resource_key_new(DNS_CLASS_IN, DNS_TYPE_AAAA, a->link->manager->hostname); + if (!a->link->manager->host_ipv6_key) { + r = -ENOMEM; + goto fail; + } + } + + if (!a->llmnr_address_rr) { + a->llmnr_address_rr = dns_resource_record_new(a->link->manager->host_ipv6_key); + if (!a->llmnr_address_rr) { + r = -ENOMEM; + goto fail; + } + + a->llmnr_address_rr->aaaa.in6_addr = a->in_addr.in6; + a->llmnr_address_rr->ttl = LLMNR_DEFAULT_TTL; + } + + if (!a->llmnr_ptr_rr) { + r = dns_resource_record_new_reverse(&a->llmnr_ptr_rr, a->family, &a->in_addr, a->link->manager->hostname); + if (r < 0) + goto fail; + + a->llmnr_ptr_rr->ttl = LLMNR_DEFAULT_TTL; + } + + r = dns_zone_put(&a->link->llmnr_ipv6_scope->zone, a->link->llmnr_ipv6_scope, a->llmnr_address_rr, true); + if (r < 0) + log_warning_errno(r, "Failed to add AAAA record to LLMNR zone: %m"); + + r = dns_zone_put(&a->link->llmnr_ipv6_scope->zone, a->link->llmnr_ipv6_scope, a->llmnr_ptr_rr, false); + if (r < 0) + log_warning_errno(r, "Failed to add IPv6 PTR record to LLMNR zone: %m"); + } else { + if (a->llmnr_address_rr) { + if (a->link->llmnr_ipv6_scope) + dns_zone_remove_rr(&a->link->llmnr_ipv6_scope->zone, a->llmnr_address_rr); + a->llmnr_address_rr = dns_resource_record_unref(a->llmnr_address_rr); + } + + if (a->llmnr_ptr_rr) { + if (a->link->llmnr_ipv6_scope) + dns_zone_remove_rr(&a->link->llmnr_ipv6_scope->zone, a->llmnr_ptr_rr); + a->llmnr_ptr_rr = dns_resource_record_unref(a->llmnr_ptr_rr); + } + } + } + + return; + +fail: + log_debug_errno(r, "Failed to update address RRs: %m"); +} + int link_address_update_rtnl(LinkAddress *a, sd_rtnl_message *m) { int r; assert(a); @@ -361,9 +531,10 @@ int link_address_update_rtnl(LinkAddress *a, sd_rtnl_message *m) { if (r < 0) return r; - r = sd_rtnl_message_addr_get_scope(m, &a->scope); - if (r < 0) - return r; + sd_rtnl_message_addr_get_scope(m, &a->scope); + + link_allocate_scopes(a->link); + link_add_rrs(a->link, false); return 0; } @@ -371,7 +542,7 @@ int link_address_update_rtnl(LinkAddress *a, sd_rtnl_message *m) { bool link_address_relevant(LinkAddress *a) { assert(a); - if (a->flags & IFA_F_DEPRECATED) + if (a->flags & (IFA_F_DEPRECATED|IFA_F_TENTATIVE)) return false; if (IN_SET(a->scope, RT_SCOPE_HOST, RT_SCOPE_NOWHERE))