xfrmnetlink 0.3.0

Manipulate Linux IPsec tunnels via netlink
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108

// SPDX-License-Identifier: MIT

use futures::stream::StreamExt;

use crate::{try_nl, try_xfrmnl, Error, Handle};
use netlink_packet_core::{NetlinkMessage, NLM_F_ACK, NLM_F_REQUEST};
use netlink_packet_xfrm::{
    policy::{GetSpdInfoMessage, NewSpdInfoMessage, SpdHThresh, SpdInfoAttrs},
    XfrmMessage,
};

/// A request to get xfrm policy statistics. This is equivalent to the `ip xfrm policy count` command.
#[non_exhaustive]
pub struct PolicyGetSpdInfoRequest {
    handle: Handle,
    message: GetSpdInfoMessage,
}

impl PolicyGetSpdInfoRequest {
    pub(crate) fn new(handle: Handle) -> Self {
        let message = GetSpdInfoMessage { flags: u32::MAX };

        PolicyGetSpdInfoRequest { handle, message }
    }

    /// Execute the request
    pub async fn execute(self) -> Result<NewSpdInfoMessage, Error> {
        let PolicyGetSpdInfoRequest {
            mut handle,
            message,
        } = self;

        let mut req = NetlinkMessage::from(XfrmMessage::GetSpdInfo(message));

        req.header.flags = NLM_F_REQUEST | NLM_F_ACK;

        let mut response = handle.request(req)?;

        if let Some(msg) = response.next().await {
            return Ok(try_xfrmnl!(msg, XfrmMessage::NewSpdInfo));
        }
        Err(Error::RequestFailed)
    }

    /// Return a mutable reference to the request message.
    pub fn message_mut(&mut self) -> &mut GetSpdInfoMessage {
        &mut self.message
    }
}

/// A request to set xfrm policy statistics. This is equivalent to the `ip xfrm policy set` command.
#[non_exhaustive]
pub struct PolicySetSpdInfoRequest {
    handle: Handle,
    message: NewSpdInfoMessage,
}

impl PolicySetSpdInfoRequest {
    pub(crate) fn new(handle: Handle) -> Self {
        let message = NewSpdInfoMessage {
            flags: u32::MAX,
            ..Default::default()
        };

        PolicySetSpdInfoRequest { handle, message }
    }

    pub fn hthresh4(mut self, lbits: u8, rbits: u8) -> Self {
        if lbits <= 32 && rbits <= 32 {
            self.message
                .nlas
                .push(SpdInfoAttrs::SpdIpv4HThresh(SpdHThresh { lbits, rbits }));
        }
        self
    }

    pub fn hthresh6(mut self, lbits: u8, rbits: u8) -> Self {
        if lbits <= 128 && rbits <= 128 {
            self.message
                .nlas
                .push(SpdInfoAttrs::SpdIpv6HThresh(SpdHThresh { lbits, rbits }));
        }
        self
    }

    /// Execute the request
    pub async fn execute(self) -> Result<(), Error> {
        let PolicySetSpdInfoRequest {
            mut handle,
            message,
        } = self;

        let mut req = NetlinkMessage::from(XfrmMessage::NewSpdInfo(message));
        req.header.flags = NLM_F_REQUEST | NLM_F_ACK;

        let mut response = handle.request(req)?;

        while let Some(msg) = response.next().await {
            try_nl!(msg);
        }
        Ok(())
    }

    /// Return a mutable reference to the request message.
    pub fn message_mut(&mut self) -> &mut NewSpdInfoMessage {
        &mut self.message
    }
}