bgpd.c revision 1.138
1/*	$OpenBSD: bgpd.c,v 1.138 2006/06/17 14:06:09 henning Exp $ */
2
3/*
4 * Copyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org>
5 *
6 * Permission to use, copy, modify, and distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
9 *
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 */
18
19#include <sys/types.h>
20#include <sys/socket.h>
21#include <sys/wait.h>
22#include <netinet/in.h>
23#include <arpa/inet.h>
24#include <err.h>
25#include <errno.h>
26#include <fcntl.h>
27#include <poll.h>
28#include <pwd.h>
29#include <signal.h>
30#include <stdio.h>
31#include <stdlib.h>
32#include <string.h>
33#include <unistd.h>
34
35#include "mrt.h"
36#include "bgpd.h"
37#include "session.h"
38
39void		sighdlr(int);
40__dead void	usage(void);
41int		main(int, char *[]);
42int		check_child(pid_t, const char *);
43int		send_filterset(struct imsgbuf *, struct filter_set_head *);
44int		reconfigure(char *, struct bgpd_config *, struct mrt_head *,
45		    struct peer **, struct filter_head *);
46int		dispatch_imsg(struct imsgbuf *, int);
47
48int			 rfd = -1;
49int			 cflags = 0;
50struct filter_set_head	*connectset;
51struct filter_set_head	*connectset6;
52struct filter_set_head	*staticset;
53struct filter_set_head	*staticset6;
54volatile sig_atomic_t	 mrtdump = 0;
55volatile sig_atomic_t	 quit = 0;
56volatile sig_atomic_t	 sigchld = 0;
57volatile sig_atomic_t	 reconfig = 0;
58pid_t			 reconfpid = 0;
59struct imsgbuf		*ibuf_se;
60struct imsgbuf		*ibuf_rde;
61
62void
63sighdlr(int sig)
64{
65	switch (sig) {
66	case SIGTERM:
67	case SIGINT:
68		quit = 1;
69		break;
70	case SIGCHLD:
71		sigchld = 1;
72		break;
73	case SIGHUP:
74		reconfig = 1;
75		break;
76	case SIGALRM:
77	case SIGUSR1:
78		mrtdump = 1;
79		break;
80	}
81}
82
83__dead void
84usage(void)
85{
86	extern char *__progname;
87
88	fprintf(stderr, "usage: %s [-dnv] ", __progname);
89	fprintf(stderr, "[-D macro=value] [-f file] [-r path] [-s path]\n");
90	exit(1);
91}
92
93#define PFD_PIPE_SESSION	0
94#define PFD_PIPE_ROUTE		1
95#define PFD_SOCK_ROUTE		2
96#define POLL_MAX		3
97#define MAX_TIMEOUT		3600
98
99int
100main(int argc, char *argv[])
101{
102	struct bgpd_config	 conf;
103	struct peer		*peer_l, *p;
104	struct mrt_head		 mrt_l;
105	struct network_head	 net_l;
106	struct filter_head	*rules_l;
107	struct network		*net;
108	struct filter_rule	*r;
109	struct mrt		*m;
110	struct listen_addr	*la;
111	struct pollfd		 pfd[POLL_MAX];
112	pid_t			 io_pid = 0, rde_pid = 0, pid;
113	char			*conffile;
114	int			 debug = 0;
115	int			 ch, timeout, nfds;
116	int			 pipe_m2s[2];
117	int			 pipe_m2r[2];
118	int			 pipe_s2r[2];
119
120	conffile = CONFFILE;
121	bgpd_process = PROC_MAIN;
122
123	log_init(1);		/* log to stderr until daemonized */
124
125	if ((rules_l = calloc(1, sizeof(struct filter_head))) == NULL)
126		err(1, NULL);
127
128	bzero(&conf, sizeof(conf));
129	LIST_INIT(&mrt_l);
130	TAILQ_INIT(&net_l);
131	TAILQ_INIT(rules_l);
132	peer_l = NULL;
133	conf.csock = SOCKET_NAME;
134
135	while ((ch = getopt(argc, argv, "cdD:f:nr:s:v")) != -1) {
136		switch (ch) {
137		case 'c':
138			conf.opts |= BGPD_OPT_FORCE_DEMOTE;
139			break;
140		case 'd':
141			debug = 1;
142			break;
143		case 'D':
144			if (cmdline_symset(optarg) < 0)
145				log_warnx("could not parse macro definition %s",
146				    optarg);
147			break;
148		case 'f':
149			conffile = optarg;
150			break;
151		case 'n':
152			conf.opts |= BGPD_OPT_NOACTION;
153			break;
154		case 'v':
155			if (conf.opts & BGPD_OPT_VERBOSE)
156				conf.opts |= BGPD_OPT_VERBOSE2;
157			conf.opts |= BGPD_OPT_VERBOSE;
158			break;
159		case 'r':
160			conf.rcsock = optarg;
161			break;
162		case 's':
163			conf.csock = optarg;
164			break;
165		default:
166			usage();
167			/* NOTREACHED */
168		}
169	}
170
171	if (parse_config(conffile, &conf, &mrt_l, &peer_l, &net_l, rules_l)) {
172		free(rules_l);
173		exit(1);
174	}
175
176	if (conf.opts & BGPD_OPT_NOACTION) {
177		if (conf.opts & BGPD_OPT_VERBOSE)
178			print_config(&conf, &net_l, peer_l, rules_l, &mrt_l);
179		else
180			fprintf(stderr, "configuration OK\n");
181		exit(0);
182	}
183	cflags = conf.flags;
184	connectset = &conf.connectset;
185	staticset = &conf.staticset;
186	connectset6 = &conf.connectset6;
187	staticset6 = &conf.staticset6;
188
189	if (geteuid())
190		errx(1, "need root privileges");
191
192	if (getpwnam(BGPD_USER) == NULL)
193		errx(1, "unknown user %s", BGPD_USER);
194
195	log_init(debug);
196
197	if (!debug)
198		daemon(1, 0);
199
200	log_info("startup");
201
202	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, pipe_m2s) == -1)
203		fatal("socketpair");
204	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, pipe_m2r) == -1)
205		fatal("socketpair");
206	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, pipe_s2r) == -1)
207		fatal("socketpair");
208	session_socket_blockmode(pipe_m2s[0], BM_NONBLOCK);
209	session_socket_blockmode(pipe_m2s[1], BM_NONBLOCK);
210	session_socket_blockmode(pipe_m2r[0], BM_NONBLOCK);
211	session_socket_blockmode(pipe_m2r[1], BM_NONBLOCK);
212	session_socket_blockmode(pipe_s2r[0], BM_NONBLOCK);
213	session_socket_blockmode(pipe_s2r[1], BM_NONBLOCK);
214
215	prepare_listeners(&conf);
216
217	/* fork children */
218	rde_pid = rde_main(&conf, peer_l, &net_l, rules_l, &mrt_l,
219	    pipe_m2r, pipe_s2r, pipe_m2s);
220	io_pid = session_main(&conf, peer_l, &net_l, rules_l, &mrt_l,
221	    pipe_m2s, pipe_s2r, pipe_m2r);
222
223	setproctitle("parent");
224
225	signal(SIGTERM, sighdlr);
226	signal(SIGINT, sighdlr);
227	signal(SIGCHLD, sighdlr);
228	signal(SIGHUP, sighdlr);
229	signal(SIGALRM, sighdlr);
230	signal(SIGUSR1, sighdlr);
231
232	close(pipe_m2s[1]);
233	close(pipe_m2r[1]);
234	close(pipe_s2r[0]);
235	close(pipe_s2r[1]);
236
237	if ((ibuf_se = malloc(sizeof(struct imsgbuf))) == NULL ||
238	    (ibuf_rde = malloc(sizeof(struct imsgbuf))) == NULL)
239		fatal(NULL);
240	imsg_init(ibuf_se, pipe_m2s[0]);
241	imsg_init(ibuf_rde, pipe_m2r[0]);
242	mrt_init(ibuf_rde, ibuf_se);
243	if ((rfd = kr_init(!(conf.flags & BGPD_FLAG_NO_FIB_UPDATE))) == -1)
244		quit = 1;
245	if (pftable_clear_all() != 0)
246		quit = 1;
247
248	while ((net = TAILQ_FIRST(&net_l)) != NULL) {
249		TAILQ_REMOVE(&net_l, net, entry);
250		filterset_free(&net->net.attrset);
251		free(net);
252	}
253
254	while ((r = TAILQ_FIRST(rules_l)) != NULL) {
255		TAILQ_REMOVE(rules_l, r, entry);
256		free(r);
257	}
258	TAILQ_FOREACH(la, conf.listen_addrs, entry) {
259		close(la->fd);
260		la->fd = -1;
261	}
262
263	mrt_reconfigure(&mrt_l);
264
265	while (quit == 0) {
266		bzero(pfd, sizeof(pfd));
267		pfd[PFD_PIPE_SESSION].fd = ibuf_se->fd;
268		pfd[PFD_PIPE_SESSION].events = POLLIN;
269		if (ibuf_se->w.queued)
270			pfd[PFD_PIPE_SESSION].events |= POLLOUT;
271		pfd[PFD_PIPE_ROUTE].fd = ibuf_rde->fd;
272		pfd[PFD_PIPE_ROUTE].events = POLLIN;
273		if (ibuf_rde->w.queued)
274			pfd[PFD_PIPE_ROUTE].events |= POLLOUT;
275		pfd[PFD_SOCK_ROUTE].fd = rfd;
276		pfd[PFD_SOCK_ROUTE].events = POLLIN;
277
278		timeout = mrt_timeout(&mrt_l);
279		if (timeout > MAX_TIMEOUT)
280			timeout = MAX_TIMEOUT;
281
282		if ((nfds = poll(pfd, POLL_MAX, timeout * 1000)) == -1)
283			if (errno != EINTR) {
284				log_warn("poll error");
285				quit = 1;
286			}
287
288		if (nfds > 0 && pfd[PFD_PIPE_SESSION].revents & POLLOUT)
289			if (msgbuf_write(&ibuf_se->w) < 0) {
290				log_warn("pipe write error (to SE)");
291				quit = 1;
292			}
293
294		if (nfds > 0 && pfd[PFD_PIPE_ROUTE].revents & POLLOUT)
295			if (msgbuf_write(&ibuf_rde->w) < 0) {
296				log_warn("pipe write error (to RDE)");
297				quit = 1;
298			}
299
300		if (nfds > 0 && pfd[PFD_PIPE_SESSION].revents & POLLIN) {
301			if (dispatch_imsg(ibuf_se, PFD_PIPE_SESSION) == -1)
302				quit = 1;
303		}
304
305		if (nfds > 0 && pfd[PFD_PIPE_ROUTE].revents & POLLIN) {
306			if (dispatch_imsg(ibuf_rde, PFD_PIPE_ROUTE) == -1)
307				quit = 1;
308		}
309
310		if (nfds > 0 && pfd[PFD_SOCK_ROUTE].revents & POLLIN) {
311			if (kr_dispatch_msg() == -1)
312				quit = 1;
313		}
314
315		if (reconfig) {
316			u_int	error;
317
318			reconfig = 0;
319			log_info("rereading config");
320			switch (reconfigure(conffile, &conf, &mrt_l, &peer_l,
321			    rules_l)) {
322			case -1:	/* fatal error */
323				quit = 1;
324				break;
325			case 0:		/* all OK */
326				error = 0;
327				break;
328			default:	/* parse error */
329				error = CTL_RES_PARSE_ERROR;
330				break;
331			}
332			if (reconfpid != 0) {
333				send_imsg_session(IMSG_CTL_RESULT, reconfpid,
334				    &error, sizeof(error));
335				reconfpid = 0;
336			}
337		}
338
339		if (sigchld) {
340			sigchld = 0;
341			if (check_child(io_pid, "session engine")) {
342				quit = 1;
343				io_pid = 0;
344			}
345			if (check_child(rde_pid, "route decision engine")) {
346				quit = 1;
347				rde_pid = 0;
348			}
349		}
350
351		if (mrtdump) {
352			mrtdump = 0;
353			mrt_handler(&mrt_l);
354		}
355	}
356
357	signal(SIGCHLD, SIG_IGN);
358
359	if (io_pid)
360		kill(io_pid, SIGTERM);
361
362	if (rde_pid)
363		kill(rde_pid, SIGTERM);
364
365	while ((p = peer_l) != NULL) {
366		peer_l = p->next;
367		free(p);
368	}
369	while ((m = LIST_FIRST(&mrt_l)) != NULL) {
370		LIST_REMOVE(m, entry);
371		free(m);
372	}
373	while ((la = TAILQ_FIRST(conf.listen_addrs)) != NULL) {
374		TAILQ_REMOVE(conf.listen_addrs, la, entry);
375		close(la->fd);
376		free(la);
377	}
378
379	free(rules_l);
380	control_cleanup(conf.csock);
381	control_cleanup(conf.rcsock);
382	carp_demote_shutdown();
383	kr_shutdown();
384	pftable_clear_all();
385	free(conf.listen_addrs);
386
387	do {
388		if ((pid = wait(NULL)) == -1 &&
389		    errno != EINTR && errno != ECHILD)
390			fatal("wait");
391	} while (pid != -1 || (pid == -1 && errno == EINTR));
392
393	msgbuf_clear(&ibuf_se->w);
394	free(ibuf_se);
395	msgbuf_clear(&ibuf_rde->w);
396	free(ibuf_rde);
397
398	log_info("Terminating");
399	return (0);
400}
401
402int
403check_child(pid_t pid, const char *pname)
404{
405	int	status;
406
407	if (waitpid(pid, &status, WNOHANG) > 0) {
408		if (WIFEXITED(status)) {
409			log_warnx("Lost child: %s exited", pname);
410			return (1);
411		}
412		if (WIFSIGNALED(status)) {
413			log_warnx("Lost child: %s terminated; signal %d",
414			    pname, WTERMSIG(status));
415			return (1);
416		}
417	}
418
419	return (0);
420}
421
422int
423send_filterset(struct imsgbuf *i, struct filter_set_head *set)
424{
425	struct filter_set	*s;
426
427	TAILQ_FOREACH(s, set, entry)
428		if (imsg_compose(i, IMSG_FILTER_SET, 0, 0, -1, s,
429		    sizeof(struct filter_set)) == -1)
430			return (-1);
431	return (0);
432}
433
434int
435reconfigure(char *conffile, struct bgpd_config *conf, struct mrt_head *mrt_l,
436    struct peer **peer_l, struct filter_head *rules_l)
437{
438	struct network_head	 net_l;
439	struct network		*n;
440	struct peer		*p;
441	struct filter_rule	*r;
442	struct listen_addr	*la;
443
444	if (parse_config(conffile, conf, mrt_l, peer_l, &net_l, rules_l)) {
445		log_warnx("config file %s has errors, not reloading",
446		    conffile);
447		return (1);
448	}
449
450	cflags = conf->flags;
451	connectset = &conf->connectset;
452	staticset = &conf->staticset;
453	connectset6 = &conf->connectset6;
454	staticset6 = &conf->staticset6;
455
456	prepare_listeners(conf);
457
458	/* start reconfiguration */
459	if (imsg_compose(ibuf_se, IMSG_RECONF_CONF, 0, 0, -1,
460	    conf, sizeof(struct bgpd_config)) == -1)
461		return (-1);
462	if (imsg_compose(ibuf_rde, IMSG_RECONF_CONF, 0, 0, -1,
463	    conf, sizeof(struct bgpd_config)) == -1)
464		return (-1);
465
466	/* send peer list and listeners to the SE */
467	for (p = *peer_l; p != NULL; p = p->next)
468		if (imsg_compose(ibuf_se, IMSG_RECONF_PEER, p->conf.id, 0, -1,
469		    &p->conf, sizeof(struct peer_config)) == -1)
470			return (-1);
471
472	TAILQ_FOREACH(la, conf->listen_addrs, entry) {
473		if (imsg_compose(ibuf_se, IMSG_RECONF_LISTENER, 0, 0, la->fd,
474		    la, sizeof(struct listen_addr)) == -1)
475			return (-1);
476		la->fd = -1;
477	}
478
479	/* networks for the RDE */
480	while ((n = TAILQ_FIRST(&net_l)) != NULL) {
481		if (imsg_compose(ibuf_rde, IMSG_NETWORK_ADD, 0, 0, -1,
482		    &n->net, sizeof(struct network_config)) == -1)
483			return (-1);
484		if (send_filterset(ibuf_rde, &n->net.attrset) == -1)
485			return (-1);
486		if (imsg_compose(ibuf_rde, IMSG_NETWORK_DONE, 0, 0, -1,
487		    NULL, 0) == -1)
488			return (-1);
489		TAILQ_REMOVE(&net_l, n, entry);
490		filterset_free(&n->net.attrset);
491		free(n);
492	}
493
494	/* redistribute list needs to be reloaded too */
495	if (kr_reload() == -1)
496		return (-1);
497
498	/* filters for the RDE */
499	while ((r = TAILQ_FIRST(rules_l)) != NULL) {
500		if (imsg_compose(ibuf_rde, IMSG_RECONF_FILTER, 0, 0, -1,
501		    r, sizeof(struct filter_rule)) == -1)
502			return (-1);
503		if (send_filterset(ibuf_rde, &r->set) == -1)
504			return (-1);
505		TAILQ_REMOVE(rules_l, r, entry);
506		filterset_free(&r->set);
507		free(r);
508	}
509
510	/* singal both childs to replace their config */
511	if (imsg_compose(ibuf_se, IMSG_RECONF_DONE, 0, 0, -1, NULL, 0) == -1 ||
512	    imsg_compose(ibuf_rde, IMSG_RECONF_DONE, 0, 0, -1, NULL, 0) == -1)
513		return (-1);
514
515	/* mrt changes can be sent out of bound */
516	mrt_reconfigure(mrt_l);
517	return (0);
518}
519
520int
521dispatch_imsg(struct imsgbuf *ibuf, int idx)
522{
523	struct imsg		 imsg;
524	int			 n;
525	int			 rv;
526
527	if ((n = imsg_read(ibuf)) == -1)
528		return (-1);
529
530	if (n == 0) {	/* connection closed */
531		log_warnx("dispatch_imsg in main: pipe closed");
532		return (-1);
533	}
534
535	rv = 0;
536	for (;;) {
537		if ((n = imsg_get(ibuf, &imsg)) == -1)
538			return (-1);
539
540		if (n == 0)
541			break;
542
543		switch (imsg.hdr.type) {
544		case IMSG_KROUTE_CHANGE:
545			if (idx != PFD_PIPE_ROUTE)
546				log_warnx("route request not from RDE");
547			else if (kr_change(imsg.data))
548				rv = -1;
549			break;
550		case IMSG_KROUTE_DELETE:
551			if (idx != PFD_PIPE_ROUTE)
552				log_warnx("route request not from RDE");
553			else if (kr_delete(imsg.data))
554				rv = -1;
555			break;
556		case IMSG_KROUTE6_CHANGE:
557			if (idx != PFD_PIPE_ROUTE)
558				log_warnx("route request not from RDE");
559			else if (kr6_change(imsg.data))
560				rv = -1;
561			break;
562		case IMSG_KROUTE6_DELETE:
563			if (idx != PFD_PIPE_ROUTE)
564				log_warnx("route request not from RDE");
565			else if (kr6_delete(imsg.data))
566				rv = -1;
567			break;
568		case IMSG_NEXTHOP_ADD:
569			if (idx != PFD_PIPE_ROUTE)
570				log_warnx("nexthop request not from RDE");
571			else
572				if (imsg.hdr.len != IMSG_HEADER_SIZE +
573				    sizeof(struct bgpd_addr))
574					log_warnx("wrong imsg len");
575				else if (kr_nexthop_add(imsg.data) == -1)
576					rv = -1;
577			break;
578		case IMSG_NEXTHOP_REMOVE:
579			if (idx != PFD_PIPE_ROUTE)
580				log_warnx("nexthop request not from RDE");
581			else
582				if (imsg.hdr.len != IMSG_HEADER_SIZE +
583				    sizeof(struct bgpd_addr))
584					log_warnx("wrong imsg len");
585				else
586					kr_nexthop_delete(imsg.data);
587			break;
588		case IMSG_PFTABLE_ADD:
589			if (idx != PFD_PIPE_ROUTE)
590				log_warnx("pftable request not from RDE");
591			else
592				if (imsg.hdr.len != IMSG_HEADER_SIZE +
593				    sizeof(struct pftable_msg))
594					log_warnx("wrong imsg len");
595				else if (pftable_addr_add(imsg.data) != 0)
596					rv = -1;
597			break;
598		case IMSG_PFTABLE_REMOVE:
599			if (idx != PFD_PIPE_ROUTE)
600				log_warnx("pftable request not from RDE");
601			else
602				if (imsg.hdr.len != IMSG_HEADER_SIZE +
603				    sizeof(struct pftable_msg))
604					log_warnx("wrong imsg len");
605				else if (pftable_addr_remove(imsg.data) != 0)
606					rv = -1;
607			break;
608		case IMSG_PFTABLE_COMMIT:
609			if (idx != PFD_PIPE_ROUTE)
610				log_warnx("pftable request not from RDE");
611			else
612				if (imsg.hdr.len != IMSG_HEADER_SIZE)
613					log_warnx("wrong imsg len");
614				else if (pftable_commit() != 0)
615					rv = -1;
616			break;
617		case IMSG_CTL_RELOAD:
618			if (idx != PFD_PIPE_SESSION)
619				log_warnx("reload request not from SE");
620			else
621				reconfig = 1;
622				reconfpid = imsg.hdr.pid;
623			break;
624		case IMSG_CTL_FIB_COUPLE:
625			if (idx != PFD_PIPE_SESSION)
626				log_warnx("couple request not from SE");
627			else
628				kr_fib_couple();
629			break;
630		case IMSG_CTL_FIB_DECOUPLE:
631			if (idx != PFD_PIPE_SESSION)
632				log_warnx("decouple request not from SE");
633			else
634				kr_fib_decouple();
635			break;
636		case IMSG_CTL_KROUTE:
637		case IMSG_CTL_KROUTE_ADDR:
638		case IMSG_CTL_SHOW_NEXTHOP:
639		case IMSG_CTL_SHOW_INTERFACE:
640			if (idx != PFD_PIPE_SESSION)
641				log_warnx("kroute request not from SE");
642			else
643				kr_show_route(&imsg);
644			break;
645		case IMSG_IFINFO:
646			if (idx != PFD_PIPE_SESSION)
647				log_warnx("IFINFO request not from SE");
648			else if (imsg.hdr.len != IMSG_HEADER_SIZE + IFNAMSIZ)
649				log_warnx("IFINFO request with wrong len");
650			else
651				kr_ifinfo(imsg.data);
652			break;
653		case IMSG_DEMOTE:
654			if (idx != PFD_PIPE_SESSION)
655				log_warnx("demote request not from SE");
656			else if (imsg.hdr.len != IMSG_HEADER_SIZE +
657			    sizeof(struct demote_msg))
658				log_warnx("DEMOTE request with wrong len");
659			else {
660				struct demote_msg	*msg;
661
662				msg = imsg.data;
663				carp_demote_set(msg->demote_group, msg->level);
664			}
665			break;
666		default:
667			break;
668		}
669		imsg_free(&imsg);
670		if (rv != 0)
671			return (rv);
672	}
673	return (0);
674}
675
676void
677send_nexthop_update(struct kroute_nexthop *msg)
678{
679	char	*gw = NULL;
680
681	if (msg->gateway.af)
682		if (asprintf(&gw, ": via %s",
683		    log_addr(&msg->gateway)) == -1) {
684			log_warn("send_nexthop_update");
685			quit = 1;
686		}
687
688	log_info("nexthop %s now %s%s%s", log_addr(&msg->nexthop),
689	    msg->valid ? "valid" : "invalid",
690	    msg->connected ? ": directly connected" : "",
691	    msg->gateway.af ? gw : "");
692
693	free(gw);
694
695	if (imsg_compose(ibuf_rde, IMSG_NEXTHOP_UPDATE, 0, 0, -1,
696	    msg, sizeof(struct kroute_nexthop)) == -1)
697		quit = 1;
698}
699
700void
701send_imsg_session(int type, pid_t pid, void *data, u_int16_t datalen)
702{
703	imsg_compose(ibuf_se, type, 0, pid, -1, data, datalen);
704}
705
706int
707bgpd_redistribute(int type, struct kroute *kr, struct kroute6 *kr6)
708{
709	struct network_config	 net;
710	struct filter_set_head	*h;
711
712	if ((cflags & BGPD_FLAG_REDIST_CONNECTED) && kr &&
713	    (kr->flags & F_CONNECTED))
714		h = connectset;
715	else if ((cflags & BGPD_FLAG_REDIST_STATIC) && kr &&
716	    (kr->flags & F_STATIC))
717		h = staticset;
718	else if ((cflags & BGPD_FLAG_REDIST6_CONNECTED) && kr6 &&
719	    (kr6->flags & F_CONNECTED))
720		h = connectset6;
721	else if ((cflags & BGPD_FLAG_REDIST6_STATIC) && kr6 &&
722	    (kr6->flags & F_STATIC))
723		h = staticset6;
724	else
725		return (0);
726
727	bzero(&net, sizeof(net));
728	if (kr && kr6)
729		fatalx("bgpd_redistribute: unable to redistribute v4 and v6"
730		    "together");
731	if (kr != NULL) {
732		net.prefix.af = AF_INET;
733		net.prefix.v4.s_addr = kr->prefix.s_addr;
734		net.prefixlen = kr->prefixlen;
735	}
736	if (kr6 != NULL) {
737		net.prefix.af = AF_INET6;
738		memcpy(&net.prefix.v6, &kr6->prefix, sizeof(struct in6_addr));
739		net.prefixlen = kr6->prefixlen;
740	}
741
742
743	if (imsg_compose(ibuf_rde, type, 0, 0, -1, &net,
744	    sizeof(struct network_config)) == -1)
745		return (-1);
746
747	/* networks that get deleted don't need to send the filter set */
748	if (type == IMSG_NETWORK_REMOVE)
749		return (1);
750
751	if (send_filterset(ibuf_rde, h) == -1)
752		return (-1);
753	if (imsg_compose(ibuf_rde, IMSG_NETWORK_DONE, 0, 0, -1, NULL, 0) == -1)
754		return (-1);
755
756	return (1);
757}
758
759int
760bgpd_filternexthop(struct kroute *kr, struct kroute6 *kr6)
761{
762	/* kernel routes are never filtered */
763	if (kr && kr->flags & F_KERNEL && kr->prefixlen != 0)
764		return (0);
765	if (kr6 && kr6->flags & F_KERNEL && kr6->prefixlen != 0)
766		return (0);
767
768	if (cflags & BGPD_FLAG_NEXTHOP_BGP) {
769		if (kr && kr->flags & F_BGPD_INSERTED)
770			return (0);
771		if (kr6 && kr6->flags & F_BGPD_INSERTED)
772			return (0);
773	}
774
775	if (cflags & BGPD_FLAG_NEXTHOP_DEFAULT) {
776		if (kr && kr->prefixlen == 0)
777			return (0);
778		if (kr6 && kr6->prefixlen == 0)
779			return (0);
780	}
781
782	return (1);
783}
784