libilb/common/ilb_rules.c

dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra/*
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * CDDL HEADER START
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra *
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * The contents of this file are subject to the terms of the
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * Common Development and Distribution License (the "License").
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * You may not use this file except in compliance with the License.
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra *
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * or http://www.opensolaris.org/os/licensing.
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * See the License for the specific language governing permissions
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * and limitations under the License.
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra *
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * When distributing Covered Code, include this CDDL HEADER in each
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * If applicable, add the following below this CDDL HEADER, with the
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * fields enclosed by brackets "[]" replaced with your own identifying
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * information: Portions Copyright [yyyy] [name of copyright owner]
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra *
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * CDDL HEADER END
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra */
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra/*
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra * Use is subject to license terms.
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra */
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra#include <stdlib.h>
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra#include <strings.h>
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra#include <sys/types.h>
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra#include <sys/socket.h>
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra#include <sys/stropts.h>
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra#include <netinet/in.h>
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra#include <stddef.h>
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra#include "libilb.h"
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra#include "libilb_impl.h"
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra/* ARGSUSED */
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrastatic ilb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrai_drop_hc(ilb_handle_t h, ilb_hc_info_t *hc, void *arg)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (ilb_destroy_hc(h, hc->hci_name));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra/* ARGSUSED */
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrastatic ilb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrai_drop_rule(ilb_handle_t h, ilb_rule_data_t *rd, void *arg)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (ilb_destroy_rule(h, rd->r_name));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra/* ARGSUSED */
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrastatic ilb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrai_drop_sg_srvs(ilb_handle_t h, ilb_server_data_t *srv, const char *sgname,
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    void *arg)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (ilb_rem_server_from_group(h, sgname, srv));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra/* ARGSUSED */
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrastatic ilb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrai_drop_sg(ilb_handle_t h, ilb_sg_data_t *sg, void *arg)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_status_t    rc;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = ilb_walk_servers(h, i_drop_sg_srvs, sg->sgd_name, (void *)sg);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (rc != ILB_STATUS_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (rc);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (ilb_destroy_servergroup(h, sg->sgd_name));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_reset_config(ilb_handle_t h)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_status_t    rc;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (h == NULL)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (ILB_STATUS_EINVAL);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = ilb_walk_rules(h, i_drop_rule, NULL, NULL);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (rc != ILB_STATUS_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        goto out;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = ilb_walk_servergroups(h, i_drop_sg, NULL, NULL);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (rc != ILB_STATUS_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        goto out;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = ilb_walk_hc(h, i_drop_hc, NULL);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misraout:
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (rc);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_create_rule(ilb_handle_t h, const ilb_rule_data_t *rd)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_status_t    rc;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_comm_t  *ic;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    size_t      ic_sz;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_rule_info_t *rl;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (h == ILB_INVALID_HANDLE || rd == NULL || *rd->r_name == '\0')
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (ILB_STATUS_EINVAL);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if ((ic = i_ilb_alloc_req(ILBD_CREATE_RULE, &ic_sz)) == NULL)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (ILB_STATUS_ENOMEM);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl = (ilb_rule_info_t *)&ic->ic_data;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    /*
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra     * Since the IP address representation in ilb_rule_data_t and
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra     * ilb_rule_info_t is different, we need to convert between
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra     * them.
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra     */
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    (void) strlcpy(rl->rl_name, rd->r_name, sizeof (rl->rl_name));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    (void) strlcpy(rl->rl_sgname, rd->r_sgname, sizeof (rl->rl_sgname));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    (void) strlcpy(rl->rl_hcname, rd->r_hcname, sizeof (rl->rl_hcname));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_flags = rd->r_flags;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_proto = rd->r_proto;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_ipversion = rd->r_vip.ia_af;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_minport = rd->r_minport;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (ntohs(rd->r_maxport) < ntohs(rd->r_minport))
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        rl->rl_maxport = rd->r_minport;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    else
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        rl->rl_maxport = rd->r_maxport;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_algo = rd->r_algo;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_topo = rd->r_topo;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_conndrain = rd->r_conndrain;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_nat_timeout = rd->r_nat_timeout;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_sticky_timeout = rd->r_sticky_timeout;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_hcport = rd->r_hcport;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl->rl_hcpflag = rd->r_hcpflag;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    IP_COPY_CLI_2_IMPL(&rd->r_vip, &rl->rl_vip);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    IP_COPY_CLI_2_IMPL(&rd->r_stickymask, &rl->rl_stickymask);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    IP_COPY_CLI_2_IMPL(&rd->r_nat_src_start, &rl->rl_nat_src_start);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    IP_COPY_CLI_2_IMPL(&rd->r_nat_src_end, &rl->rl_nat_src_end);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = i_ilb_do_comm(h, ic, ic_sz, ic, &ic_sz);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (rc != ILB_STATUS_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        goto out;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (ic->ic_cmd != ILBD_CMD_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        rc = *(ilb_status_t *)&ic->ic_data;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misraout:
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    free(ic);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (rc);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrastatic ilb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrai_ilb_rule_action(ilb_handle_t h, const char *name, ilbd_cmd_t cmd)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_status_t    rc;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_comm_t  *ic;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    size_t      ic_sz;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (h == ILB_INVALID_HANDLE)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (ILB_STATUS_EINVAL);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if ((ic = i_ilb_alloc_req(cmd, &ic_sz)) == NULL)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (ILB_STATUS_ENOMEM);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (name == NULL) {
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        bzero(&ic->ic_data, sizeof (ilbd_name_t));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    } else {
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        (void) strlcpy((char *)&ic->ic_data, name,
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra            sizeof (ilbd_name_t));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    }
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = i_ilb_do_comm(h, ic, ic_sz, ic, &ic_sz);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (rc != ILB_STATUS_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        goto out;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (ic->ic_cmd != ILBD_CMD_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        rc = *(ilb_status_t *)&ic->ic_data;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misraout:
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    free(ic);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (rc);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_destroy_rule(ilb_handle_t h, const char *name)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (i_ilb_rule_action(h, name, ILBD_DESTROY_RULE));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_enable_rule(ilb_handle_t h, const char *name)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (i_ilb_rule_action(h, name, ILBD_ENABLE_RULE));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_disable_rule(ilb_handle_t h, const char *name)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (i_ilb_rule_action(h, name, ILBD_DISABLE_RULE));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrai_ilb_retrieve_rule_names(ilb_handle_t h, ilb_comm_t **rbuf, size_t *rbufsz)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_status_t    rc;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_comm_t  ic, *tmp_rbuf;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    *rbufsz = ILBD_MSG_SIZE;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if ((tmp_rbuf = malloc(*rbufsz)) == NULL)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (ILB_STATUS_ENOMEM);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ic.ic_cmd = ILBD_RETRIEVE_RULE_NAMES;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = i_ilb_do_comm(h, &ic, sizeof (ic), tmp_rbuf, rbufsz);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (rc != ILB_STATUS_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        goto out;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (tmp_rbuf->ic_cmd == ILBD_CMD_OK) {
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        *rbuf = tmp_rbuf;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (rc);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    }
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = *(ilb_status_t *)&tmp_rbuf->ic_data;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misraout:
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    free(tmp_rbuf);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    *rbuf = NULL;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (rc);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrastatic ilb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrai_ilb_walk_one_rule(ilb_handle_t h, rule_walkerfunc_t f, const char *name,
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    void *arg)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_status_t        rc = ILB_STATUS_OK;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_rule_info_t     *rl = NULL;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_rule_data_t     rd;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_comm_t      *ic, *rbuf;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    size_t          ic_sz, rbufsz;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if ((ic = i_ilb_alloc_req(ILBD_RETRIEVE_RULE, &ic_sz)) == NULL)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (ILB_STATUS_ENOMEM);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rbufsz = sizeof (ilb_comm_t) + sizeof (ilb_rule_info_t);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if ((rbuf = malloc(rbufsz)) == NULL) {
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        free(ic);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (ILB_STATUS_ENOMEM);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    }
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    (void) strlcpy((char *)&ic->ic_data,  name, sizeof (ilbd_name_t));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = i_ilb_do_comm(h, ic, ic_sz, rbuf, &rbufsz);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (rc != ILB_STATUS_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        goto out;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (rbuf->ic_cmd != ILBD_CMD_OK) {
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        rc = *(ilb_status_t *)&rbuf->ic_data;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        goto out;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    }
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rl = (ilb_rule_info_t *)&rbuf->ic_data;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    /*
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra     * Since the IP address representation in ilb_rule_data_t and
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra     * ilb_rule_info_t is different, we need to convert between
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra     * them.
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra     */
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    (void) strlcpy(rd.r_name, rl->rl_name, sizeof (rd.r_name));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    (void) strlcpy(rd.r_hcname, rl->rl_hcname, sizeof (rd.r_hcname));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    (void) strlcpy(rd.r_sgname, rl->rl_sgname, sizeof (rd.r_sgname));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_flags = rl->rl_flags;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_proto = rl->rl_proto;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_minport = rl->rl_minport;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_maxport = rl->rl_maxport;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_algo = rl->rl_algo;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_topo = rl->rl_topo;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_conndrain = rl->rl_conndrain;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_nat_timeout = rl->rl_nat_timeout;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_sticky_timeout = rl->rl_sticky_timeout;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_hcport = rl->rl_hcport;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rd.r_hcpflag = rl->rl_hcpflag;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    IP_COPY_IMPL_2_CLI(&rl->rl_vip, &rd.r_vip);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    IP_COPY_IMPL_2_CLI(&rl->rl_nat_src_start, &rd.r_nat_src_start);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    IP_COPY_IMPL_2_CLI(&rl->rl_nat_src_end, &rd.r_nat_src_end);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    IP_COPY_IMPL_2_CLI(&rl->rl_stickymask, &rd.r_stickymask);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = f(h, &rd, arg);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misraout:
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    free(ic);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    free(rbuf);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (rc);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_status_t
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misrailb_walk_rules(ilb_handle_t h, rule_walkerfunc_t f, const char *name,
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    void *arg)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra{
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_status_t    rc;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilbd_namelist_t *names;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    ilb_comm_t  *rbuf;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    size_t      rbufsz;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    int     i;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (h == NULL)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (ILB_STATUS_EINVAL);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (name != NULL)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (i_ilb_walk_one_rule(h, f, name, arg));
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    rc = i_ilb_retrieve_rule_names(h, &rbuf, &rbufsz);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    if (rc != ILB_STATUS_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        return (rc);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    names = (ilbd_namelist_t *)&rbuf->ic_data;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    for (i = 0; i < names->ilbl_count; i++) {
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        rc = i_ilb_walk_one_rule(h, f, names->ilbl_name[i], arg);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        /*
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra         * The rule may have been removed by another process since
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra         * we retrieve all the rule names, just continue.
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra         */
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        if (rc == ILB_STATUS_ENOENT) {
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra            rc = ILB_STATUS_OK;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra            continue;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        }
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra        if (rc != ILB_STATUS_OK)
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra            break;
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    }
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    free(rbuf);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra    return (rc);
dbed73cbda2229fd1aa6dc5743993cae7f0a7ee9Sangeeta Misra}