denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-libipsec: Create a TUN device and use it to install virtual IPs

Browse Source
This commit is contained in:
Tobias Brunner
2013-06-21 17:03:20 +02:00
parent 279e0d42bd
commit 59be6ddd08
2 changed files with 40 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/kernel_libipsec/kernel_libipsec_ipsec.c
+7
View File
@@ -17,6 +17,7 @@
#include <library.h> #include <library.h>
#include <ipsec.h> #include <ipsec.h>
#include <hydra.h> #include <hydra.h>
#include <networking/tun_device.h>
#include <utils/debug.h> #include <utils/debug.h>
typedef struct private_kernel_libipsec_ipsec_t private_kernel_libipsec_ipsec_t; typedef struct private_kernel_libipsec_ipsec_t private_kernel_libipsec_ipsec_t;
@@ -32,6 +33,11 @@ struct private_kernel_libipsec_ipsec_t {
* Listener for lifetime expire events * Listener for lifetime expire events
*/ */
ipsec_event_listener_t ipsec_listener; ipsec_event_listener_t ipsec_listener;
/**
* TUN device
*/
tun_device_t *tun;
}; };
/** /**
@@ -181,6 +187,7 @@ kernel_libipsec_ipsec_t *kernel_libipsec_ipsec_create()
.ipsec_listener = { .ipsec_listener = {
.expire = expire, .expire = expire,
}, },
.tun = lib->get(lib, "kernel-libipsec-tun"),
); );
ipsec->events->register_listener(ipsec->events, &this->ipsec_listener); ipsec->events->register_listener(ipsec->events, &this->ipsec_listener);
src/libcharon/plugins/kernel_libipsec/kernel_libipsec_plugin.c
+33
View File
@@ -17,8 +17,11 @@
#include "kernel_libipsec_ipsec.h" #include "kernel_libipsec_ipsec.h"
#include <ipsec.h> #include <ipsec.h>
#include <networking/tun_device.h>
#include <utils/debug.h> #include <utils/debug.h>
#define TUN_DEFAULT_MTU 1400
typedef struct private_kernel_libipsec_plugin_t private_kernel_libipsec_plugin_t; typedef struct private_kernel_libipsec_plugin_t private_kernel_libipsec_plugin_t;
/** /**
@@ -30,6 +33,12 @@ struct private_kernel_libipsec_plugin_t {
* implements plugin interface * implements plugin interface
*/ */
kernel_libipsec_plugin_t public; kernel_libipsec_plugin_t public;
/**
* TUN device created by this plugin
*/
tun_device_t *tun;
}; };
METHOD(plugin_t, get_name, char*, METHOD(plugin_t, get_name, char*,
@@ -52,6 +61,11 @@ METHOD(plugin_t, get_features, int,
METHOD(plugin_t, destroy, void, METHOD(plugin_t, destroy, void,
private_kernel_libipsec_plugin_t *this) private_kernel_libipsec_plugin_t *this)
{ {
if (this->tun)
{
lib->set(lib, "kernel-libipsec-tun", NULL);
this->tun->destroy(this->tun);
}
libipsec_deinit(); libipsec_deinit();
free(this); free(this);
} }
@@ -80,5 +94,24 @@ plugin_t *kernel_libipsec_plugin_create()
return NULL; return NULL;
} }
this->tun = tun_device_create("ipsec%d");
if (!this->tun)
{
DBG1(DBG_KNL, "failed to create TUN device");
destroy(this);
return NULL;
}
if (!this->tun->set_mtu(this->tun, TUN_DEFAULT_MTU) ||
!this->tun->up(this->tun))
{
DBG1(DBG_KNL, "failed to configure TUN device");
destroy(this);
return NULL;
}
lib->set(lib, "kernel-libipsec-tun", this->tun);
/* set TUN device as default to install VIPs */
lib->settings->set_str(lib->settings, "%s.install_virtual_ip_on",
this->tun->get_name(this->tun), charon->name);
return &this->public.plugin; return &this->public.plugin;
} }