如何在Linux内核中为IPv6添加一种新的扩展头

发布网友 发布时间：2022-04-23 06:21

我来回答

共1个回答

热心网友 时间：2023-09-19 22:26

IPv6头部的设计是一个简洁的基本头部后面根据需要加上多种不同类型的扩展头部，这种设计可以将不常用的功能通过选择性的添加不同的扩展头部实现，从而在保证了基本头部的简洁和处理的快速性。以Linux2.6.28版本内核为例，IPv6扩展首部的定义在Linux-2.6.28/include/linux/in6.h和linux-2.6.28/include/net/ipv6.h两个目录下，我们以添加一种IPPROTO_MY类型的扩展头为例：

1、在头文件中添加新类型扩展头的定义，在linux-2.6.28/include/linux/in6.h中
/*
* NextHeader field of IPv6 header
*/
#define NEXTHDR_HOP 0 /* Hop-by-hop option header. */
#define NEXTHDR_TCP 6 /* TCP segment. */
#define NEXTHDR_UDP 17 /* UDP message. */
#define NEXTHDR_IPV6 41 /* IPv6 in IPv6 */
#define NEXTHDR_ROUTING 43 /* Routing header. */
#define NEXTHDR_FRAGMENT 44 /* Fragmentation/reassembly header. */
#define NEXTHDR_ESP 50 /* Encapsulating security payload. */
#define NEXTHDR_AUTH 51 /* Authentication header. */
#define NEXTHDR_ICMP 58 /* ICMP for IPv6. */
#define NEXTHDR_NONE 59 /* No next header */
#define NEXTHDR_DEST 60 /* Destination options header. */
#define NEXTHDR_MOBILITY 135 /* Mobility header. */

#define IPPROTO_MY 200 /*自己定义的头部类型 */

2、在linux-2.6.28/include/net/ipv6.h中定义结构体
/*
* IPV6 extension headers
*/
#define IPPROTO_HOPOPTS 0 /* IPv6 hop-by-hop options */
#define IPPROTO_ROUTING 43 /* IPv6 routing header */
#define IPPROTO_FRAGMENT 44 /* IPv6 fragmentation header */
#define IPPROTO_ICMPV6 58 /* ICMPv6 */
#define IPPROTO_NONE 59 /* IPv6 no next header */
#define IPPROTO_DSTOPTS 60 /* IPv6 destination options */
#define IPPROTO_MH 135 /* IPv6 mobility header */
自己定义新的扩展头类型如：
#define NEXTHDR_INDEX 200 /*IPv6 next header */
自己定义新的扩展头类型：
struct index_hdr{ /*index扩展头结构*/
__u8 nexthdr;
__u8 hdrlen;
__u16 reserved;
__u32 skb_index;
};

3、在需要添加头部和删除头部的源文件中添加添加和删除函数，届时直接调用这两个函数即可
static void ip6_index_add(struct sk_buff *skb,unsigned char *data,unsigned int len)
{

struct ipv6hdr *tmp_hdr;
struct ipv6hdr *old_hdr;
struct index_hdr *ih;
u8 prevhdr;
unsigned int hlen;
unsigned int ilen;
ilen=sizeof(struct index_hdr);
hlen=sizeof(struct ipv6hdr);
old_hdr=skb_network_header(skb);
prevhdr=old_hdr->nexthdr;
if(prevhdr!=200){
old_hdr->nexthdr=NEXTHDR_INDEX;
tmp_hdr = kmemp(skb_network_header(skb), hlen, GFP_ATOMIC);
__skb_pull(skb, hlen); /*使data指针下移hlen长度，将ipv6头部去掉*/
ih = (struct index_hdr*)__skb_push(skb, ilen); /*上移data指针，将index头部添加进去*/
__skb_push(skb, hlen); /*继续上移data指针，将原来的ipv6头部加进去*/
skb_reset_network_header(skb);
memcpy(skb_network_header(skb), tmp_hdr, hlen);
/*为index扩展头赋值*/
ih->nexthdr = prevhdr;
ih->hdrlen = 8;
ih->reserved = 0;
ih->skb_index = htonl(skb->xfrm_index);

skb->truesize += ilen;
ipv6_hdr(skb)->payload_len += ilen;
data = skb->data;
len = skb->len;
kfree(tmp_hdr);
}
}

static void ip6_index_del(struct sk_buff *skb,unsigned char *data,unsigned int len)
{
struct ipv6hdr *tmp_hdr;
struct ipv6hdr *old_hdr;
struct index_hdr *ih;
u8 prevhdr;
unsigned int hlen;
unsigned int ilen;
ilen=sizeof(struct index_hdr);
hlen=sizeof(struct ipv6hdr);
if(ipv6_hdr(skb)->nexthdr == 200){
tmp_hdr = kmemp(skb_network_header(skb), hlen, GFP_ATOMIC); /*保存ipv6头*/
__skb_pull(skb, hlen); /*下移data指针，去掉ipv6头*/
skb_reset_network_header(skb);
ih=(struct index_hdr *)skb_network_header(skb);
prevhdr = ih->nexthdr;
tmp_hdr->nexthdr = prevhdr;

__skb_pull(skb, ilen); /*下移data指针，去掉index扩展头*/
__skb_push(skb, hlen); /*上移data指针，将原来的ipv6头添加回去*/
skb_reset_network_header(skb);
memcpy(skb_network_header(skb), tmp_hdr, hlen);
skb_reset_network_header(skb);
skb->truesize -= ilen;
ipv6_hdr(skb)->payload_len -= ilen;
kfree(tmp_hdr);
}
}