1/* $OpenBSD: in.h,v 1.149 2025/03/02 21:28:32 bluhm Exp $ */
2/* $NetBSD: in.h,v 1.20 1996/02/13 23:41:47 christos Exp $ */
3
4/*
5 * Copyright (c) 1982, 1986, 1990, 1993
6 * The Regents of the University of California. All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 * 3. Neither the name of the University nor the names of its contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
19 *
20 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * SUCH DAMAGE.
31 */
32
33/*
34 * Constants and structures defined by the internet system,
35 * Per RFC 790, September 1981, and numerous additions.
36 */
37
38#ifndef _NETINET_IN_H_
39#define _NETINET_IN_H_
40
41#include <sys/cdefs.h>
42
43#ifndef _KERNEL
44#include <sys/types.h>
45
46/* <sys/_endian.h> is pulled in by <sys/types.h> */
47#ifndef htons
48#define htons(x) __htobe16(x)
49#define htonl(x) __htobe32(x)
50#define ntohs(x) __htobe16(x)
51#define ntohl(x) __htobe32(x)
52#endif
53
54#endif /* _KERNEL */
55
56#ifndef _SA_FAMILY_T_DEFINED_
57#define _SA_FAMILY_T_DEFINED_
58typedef __sa_family_t sa_family_t; /* sockaddr address family type */
59#endif /* _SA_FAMILY_T_DEFINED_ */
60
61#ifndef _IN_TYPES_DEFINED_
62#define _IN_TYPES_DEFINED_
63typedef __in_addr_t in_addr_t; /* base type for internet address */
64typedef __in_port_t in_port_t; /* IP port type */
65#endif
66
67/*
68 * Protocols
69 */
70#define IPPROTO_IP 0 /* dummy for IP */
71#define IPPROTO_HOPOPTS IPPROTO_IP /* Hop-by-hop option header */
72#define IPPROTO_ICMP 1 /* control message protocol */
73#define IPPROTO_IGMP 2 /* group mgmt protocol */
74#define IPPROTO_GGP 3 /* gateway^2 (deprecated) */
75#define IPPROTO_IPIP 4 /* IP inside IP */
76#define IPPROTO_IPV4 IPPROTO_IPIP /* IP inside IP */
77#define IPPROTO_TCP 6 /* tcp */
78#define IPPROTO_EGP 8 /* exterior gateway protocol */
79#define IPPROTO_PUP 12 /* pup */
80#define IPPROTO_UDP 17 /* user datagram protocol */
81#define IPPROTO_IDP 22 /* xns idp */
82#define IPPROTO_TP 29 /* tp-4 w/ class negotiation */
83#define IPPROTO_IPV6 41 /* IPv6 in IPv6 */
84#define IPPROTO_ROUTING 43 /* Routing header */
85#define IPPROTO_FRAGMENT 44 /* Fragmentation/reassembly header */
86#define IPPROTO_RSVP 46 /* resource reservation */
87#define IPPROTO_GRE 47 /* GRE encap, RFCs 1701/1702 */
88#define IPPROTO_ESP 50 /* Encap. Security Payload */
89#define IPPROTO_AH 51 /* Authentication header */
90#define IPPROTO_MOBILE 55 /* IP Mobility, RFC 2004 */
91#define IPPROTO_ICMPV6 58 /* ICMP for IPv6 */
92#define IPPROTO_NONE 59 /* No next header */
93#define IPPROTO_DSTOPTS 60 /* Destination options header */
94#define IPPROTO_EON 80 /* ISO cnlp */
95#define IPPROTO_ETHERIP 97 /* Ethernet in IPv4 */
96#define IPPROTO_ENCAP 98 /* encapsulation header */
97#define IPPROTO_PIM 103 /* Protocol indep. multicast */
98#define IPPROTO_IPCOMP 108 /* IP Payload Comp. Protocol */
99#define IPPROTO_CARP 112 /* CARP */
100#define IPPROTO_SCTP 132 /* SCTP, RFC 4960 */
101#define IPPROTO_UDPLITE 136 /* UDP-Lite, RFC 3828 */
102#define IPPROTO_MPLS 137 /* unicast MPLS packet */
103#define IPPROTO_PFSYNC 240 /* PFSYNC */
104#define IPPROTO_RAW 255 /* raw IP packet */
105
106#define IPPROTO_MAX 256
107
108/* Only used internally, so it can be outside the range of valid IP protocols */
109#define IPPROTO_DIVERT 258 /* Divert sockets */
110
111/*
112 * From FreeBSD:
113 *
114 * Local port number conventions:
115 *
116 * When a user does a bind(2) or connect(2) with a port number of zero,
117 * a non-conflicting local port address is chosen.
118 * The default range is IPPORT_RESERVED through
119 * IPPORT_USERRESERVED, although that is settable by sysctl.
120 *
121 * A user may set the IPPROTO_IP option IP_PORTRANGE to change this
122 * default assignment range.
123 *
124 * The value IP_PORTRANGE_DEFAULT causes the default behavior.
125 *
126 * The value IP_PORTRANGE_HIGH changes the range of candidate port numbers
127 * into the "high" range. These are reserved for client outbound connections
128 * which do not want to be filtered by any firewalls.
129 *
130 * The value IP_PORTRANGE_LOW changes the range to the "low" are
131 * that is (by convention) restricted to privileged processes. This
132 * convention is based on "vouchsafe" principles only. It is only secure
133 * if you trust the remote host to restrict these ports.
134 *
135 * The default range of ports and the high range can be changed by
136 * sysctl(3). (net.inet.ip.port{hi}{first,last})
137 *
138 * Changing those values has bad security implications if you are
139 * using a stateless firewall that is allowing packets outside of that
140 * range in order to allow transparent outgoing connections.
141 *
142 * Such a firewall configuration will generally depend on the use of these
143 * default values. If you change them, you may find your Security
144 * Administrator looking for you with a heavy object.
145 */
146
147/*
148 * Ports < IPPORT_RESERVED are reserved for
149 * privileged processes (e.g. root).
150 * Ports > IPPORT_USERRESERVED are reserved
151 * for servers, not necessarily privileged.
152 */
153#define IPPORT_RESERVED 1024
154#define IPPORT_USERRESERVED 49151
155
156/*
157 * Default local port range to use by setting IP_PORTRANGE_HIGH
158 */
159#define IPPORT_HIFIRSTAUTO 49152
160#define IPPORT_HILASTAUTO 65535
161
162#ifndef _IN_ADDR_DECLARED
163#define _IN_ADDR_DECLARED
164/*
165 * IP Version 4 Internet address (a structure for historical reasons)
166 */
167struct in_addr {
168 in_addr_t s_addr;
169};
170#endif /* _IN_ADDR_DECLARED */
171
172/* last return value of *_input(), meaning "all job for this pkt is done". */
173#define IPPROTO_DONE 257
174
175/*
176 * Definitions of bits in internet address integers.
177 * On subnets, the decomposition of addresses to host and net parts
178 * is done according to subnet mask, not the masks here.
179 *
180 * By byte-swapping the constants, we avoid ever having to byte-swap IP
181 * addresses inside the kernel. Unfortunately, user-level programs rely
182 * on these macros not doing byte-swapping.
183 */
184#ifdef _KERNEL
185#define __IPADDR(x) ((u_int32_t) htonl((u_int32_t)(x)))
186#else
187#define __IPADDR(x) ((u_int32_t)(x))
188#endif /* _KERNEL */
189
190#define IN_CLASSA(i) (((u_int32_t)(i) & __IPADDR(0x80000000)) == \
191 __IPADDR(0x00000000))
192#define IN_CLASSA_NET __IPADDR(0xff000000)
193#define IN_CLASSA_NSHIFT 24
194#define IN_CLASSA_HOST __IPADDR(0x00ffffff)
195#define IN_CLASSA_MAX 128
196
197#define IN_CLASSB(i) (((u_int32_t)(i) & __IPADDR(0xc0000000)) == \
198 __IPADDR(0x80000000))
199#define IN_CLASSB_NET __IPADDR(0xffff0000)
200#define IN_CLASSB_NSHIFT 16
201#define IN_CLASSB_HOST __IPADDR(0x0000ffff)
202#define IN_CLASSB_MAX 65536
203
204#define IN_CLASSC(i) (((u_int32_t)(i) & __IPADDR(0xe0000000)) == \
205 __IPADDR(0xc0000000))
206#define IN_CLASSC_NET __IPADDR(0xffffff00)
207#define IN_CLASSC_NSHIFT 8
208#define IN_CLASSC_HOST __IPADDR(0x000000ff)
209
210#define IN_CLASSD(i) (((u_int32_t)(i) & __IPADDR(0xf0000000)) == \
211 __IPADDR(0xe0000000))
212/* These ones aren't really net and host fields, but routing needn't know. */
213#define IN_CLASSD_NET __IPADDR(0xf0000000)
214#define IN_CLASSD_NSHIFT 28
215#define IN_CLASSD_HOST __IPADDR(0x0fffffff)
216#define IN_MULTICAST(i) IN_CLASSD(i)
217
218#define IN_RFC3021_NET __IPADDR(0xfffffffe)
219#define IN_RFC3021_NSHIFT 31
220#define IN_RFC3021_HOST __IPADDR(0x00000001)
221#define IN_RFC3021_SUBNET(n) (((u_int32_t)(n) & IN_RFC3021_NET) == \
222 IN_RFC3021_NET)
223
224#define IN_EXPERIMENTAL(i) (((u_int32_t)(i) & __IPADDR(0xf0000000)) == \
225 __IPADDR(0xf0000000))
226#define IN_BADCLASS(i) (((u_int32_t)(i) & __IPADDR(0xf0000000)) == \
227 __IPADDR(0xf0000000))
228
229#define IN_LOCAL_GROUP(i) (((u_int32_t)(i) & __IPADDR(0xffffff00)) == \
230 __IPADDR(0xe0000000))
231
232#ifdef _KERNEL
233#define IN_CLASSFULBROADCAST(i, b) \
234 ((IN_CLASSC(b) && (b | IN_CLASSC_HOST) == i) || \
235 (IN_CLASSB(b) && (b | IN_CLASSB_HOST) == i) || \
236 (IN_CLASSA(b) && (b | IN_CLASSA_HOST) == i))
237#endif /* _KERNEL */
238
239#define INADDR_ANY __IPADDR(0x00000000)
240#define INADDR_LOOPBACK __IPADDR(0x7f000001)
241#define INADDR_BROADCAST __IPADDR(0xffffffff) /* must be masked */
242#ifndef _KERNEL
243#define INADDR_NONE __IPADDR(0xffffffff) /* -1 return */
244#endif /* _KERNEL */
245
246#define INADDR_UNSPEC_GROUP __IPADDR(0xe0000000) /* 224.0.0.0 */
247#define INADDR_ALLHOSTS_GROUP __IPADDR(0xe0000001) /* 224.0.0.1 */
248#define INADDR_ALLROUTERS_GROUP __IPADDR(0xe0000002) /* 224.0.0.2 */
249#define INADDR_CARP_GROUP __IPADDR(0xe0000012) /* 224.0.0.18 */
250#define INADDR_PFSYNC_GROUP __IPADDR(0xe00000f0) /* 224.0.0.240 */
251#define INADDR_MAX_LOCAL_GROUP __IPADDR(0xe00000ff) /* 224.0.0.255 */
252
253#define IN_LOOPBACKNET 127 /* official! */
254
255/*
256 * IP Version 4 socket address.
257 */
258struct sockaddr_in {
259 u_int8_t sin_len;
260 sa_family_t sin_family;
261 in_port_t sin_port;
262 struct in_addr sin_addr;
263 int8_t sin_zero[8];
264};
265
266/*
267 * Structure used to describe IP options.
268 * Used to store options internally, to pass them to a process,
269 * or to restore options retrieved earlier.
270 * The ip_dst is used for the first-hop gateway when using a source route
271 * (this gets put into the header proper).
272 */
273struct ip_opts {
274 struct in_addr ip_dst; /* first hop, 0 w/o src rt */
275#if defined(__cplusplus)
276 int8_t Ip_opts[40]; /* cannot have same name as class */
277#else
278 int8_t ip_opts[40]; /* actually variable in size */
279#endif /* defined(__cplusplus) */
280};
281
282/*
283 * Options for use with [gs]etsockopt at the IP level.
284 * First word of comment is data type; bool is stored in int.
285 */
286#define IP_OPTIONS 1 /* buf/ip_opts; set/get IP options */
287#define IP_HDRINCL 2 /* int; header is included with data */
288#define IP_TOS 3 /* int; IP type of service and preced. */
289#define IP_TTL 4 /* int; IP time to live */
290#define IP_RECVOPTS 5 /* bool; receive all IP opts w/dgram */
291#define IP_RECVRETOPTS 6 /* bool; receive IP opts for response */
292#define IP_RECVDSTADDR 7 /* bool; receive IP dst addr w/dgram */
293#define IP_RETOPTS 8 /* ip_opts; set/get IP options */
294#define IP_MULTICAST_IF 9 /* in_addr; set/get IP multicast i/f */
295#define IP_MULTICAST_TTL 10 /* u_char; set/get IP multicast ttl */
296#define IP_MULTICAST_LOOP 11 /* u_char; set/get IP multicast loopback */
297#define IP_ADD_MEMBERSHIP 12 /* ip_mreq; add an IP group membership */
298#define IP_DROP_MEMBERSHIP 13 /* ip_mreq; drop an IP group membership */
299#define IP_PORTRANGE 19 /* int; range to choose for unspec port */
300#define IP_AUTH_LEVEL 20 /* int; authentication used */
301#define IP_ESP_TRANS_LEVEL 21 /* int; transport encryption */
302#define IP_ESP_NETWORK_LEVEL 22 /* int; full-packet encryption */
303#define IP_IPSEC_LOCAL_ID 23 /* buf; IPsec local ID */
304#define IP_IPSEC_REMOTE_ID 24 /* buf; IPsec remote ID */
305#define IP_IPSEC_LOCAL_CRED 25 /* buf; was: IPsec local credentials */
306#define IP_IPSEC_REMOTE_CRED 26 /* buf; was: IPsec remote credentials */
307#define IP_IPSEC_LOCAL_AUTH 27 /* buf; was: IPsec local auth material */
308#define IP_IPSEC_REMOTE_AUTH 28 /* buf; was: IPsec remote auth material */
309#define IP_IPCOMP_LEVEL 29 /* int; compression used */
310#define IP_RECVIF 30 /* bool; receive reception if w/dgram */
311#define IP_RECVTTL 31 /* bool; receive IP TTL w/dgram */
312#define IP_MINTTL 32 /* minimum TTL for packet or drop */
313#define IP_RECVDSTPORT 33 /* bool; receive IP dst port w/dgram */
314#define IP_PIPEX 34 /* bool; using PIPEX */
315#define IP_RECVRTABLE 35 /* bool; receive rdomain w/dgram */
316#define IP_IPSECFLOWINFO 36 /* bool; IPsec flow info for dgram */
317#define IP_IPDEFTTL 37 /* int; IP TTL system default */
318#define IP_SENDSRCADDR IP_RECVDSTADDR /* struct in_addr; */
319 /* source address to use */
320
321#define IP_RTABLE 0x1021 /* int; routing table, see SO_RTABLE */
322
323#if __BSD_VISIBLE
324/*
325 * Security levels - IPsec, not IPSO
326 */
327
328#define IPSEC_LEVEL_BYPASS 0x00 /* Bypass policy altogether */
329#define IPSEC_LEVEL_NONE 0x00 /* Send clear, accept any */
330#define IPSEC_LEVEL_AVAIL 0x01 /* Send secure if SA available */
331#define IPSEC_LEVEL_USE 0x02 /* Send secure, accept any */
332#define IPSEC_LEVEL_REQUIRE 0x03 /* Require secure inbound, also use */
333#define IPSEC_LEVEL_UNIQUE 0x04 /* Use outbound SA that is unique */
334#define IPSEC_LEVEL_DEFAULT IPSEC_LEVEL_AVAIL
335
336#define IPSEC_AUTH_LEVEL_DEFAULT IPSEC_LEVEL_DEFAULT
337#define IPSEC_ESP_TRANS_LEVEL_DEFAULT IPSEC_LEVEL_DEFAULT
338#define IPSEC_ESP_NETWORK_LEVEL_DEFAULT IPSEC_LEVEL_DEFAULT
339#define IPSEC_IPCOMP_LEVEL_DEFAULT IPSEC_LEVEL_DEFAULT
340
341#endif /* __BSD_VISIBLE */
342
343/*
344 * Defaults and limits for options
345 */
346#define IP_DEFAULT_MULTICAST_TTL 1 /* normally limit m'casts to 1 hop */
347#define IP_DEFAULT_MULTICAST_LOOP 1 /* normally hear sends if a member */
348/*
349 * The imo_membership vector for each socket starts at IP_MIN_MEMBERSHIPS
350 * and is dynamically allocated at run-time, bounded by IP_MAX_MEMBERSHIPS,
351 * and is reallocated when needed, sized according to a power-of-two increment.
352 */
353#define IP_MIN_MEMBERSHIPS 15
354#define IP_MAX_MEMBERSHIPS 4095
355
356/*
357 * Argument structure for IP_ADD_MEMBERSHIP and IP_DROP_MEMBERSHIP.
358 */
359struct ip_mreq {
360 struct in_addr imr_multiaddr; /* IP multicast address of group */
361 struct in_addr imr_interface; /* local IP address of interface */
362};
363
364struct ip_mreqn {
365 struct in_addr imr_multiaddr; /* IP multicast address of group */
366 struct in_addr imr_address; /* local IP address of interface */
367 int imr_ifindex; /* interface index */
368};
369
370/*
371 * Argument for IP_PORTRANGE:
372 * - which range to search when port is unspecified at bind() or connect()
373 */
374#define IP_PORTRANGE_DEFAULT 0 /* default range */
375#define IP_PORTRANGE_HIGH 1 /* "high" - request firewall bypass */
376#define IP_PORTRANGE_LOW 2 /* "low" - vouchsafe security */
377
378/*
379 * Buffer lengths for strings containing printable IP addresses
380 */
381#ifndef INET_ADDRSTRLEN
382#define INET_ADDRSTRLEN 16
383#endif /* INET_ADDRSTRLEN */
384
385
386#if __BSD_VISIBLE
387/*
388 * Definitions for inet sysctl operations.
389 *
390 * Third level is protocol number.
391 * Fourth level is desired variable within that protocol.
392 */
393#define IPPROTO_MAXID (IPPROTO_DIVERT + 1) /* don't list to IPPROTO_MAX */
394
395#define CTL_IPPROTO_NAMES { \
396 { "ip", CTLTYPE_NODE }, \
397 { "icmp", CTLTYPE_NODE }, \
398 { "igmp", CTLTYPE_NODE }, \
399 { "ggp", CTLTYPE_NODE }, \
400 { "ipip", CTLTYPE_NODE }, \
401 { 0, 0 }, \
402 { "tcp", CTLTYPE_NODE }, \
403 { 0, 0 }, \
404 { "egp", CTLTYPE_NODE }, \
405 { 0, 0 }, \
406 { 0, 0 }, \
407 { 0, 0 }, \
408 { "pup", CTLTYPE_NODE }, \
409 { 0, 0 }, \
410 { 0, 0 }, \
411 { 0, 0 }, \
412 { 0, 0 }, \
413 { "udp", CTLTYPE_NODE }, \
414 { 0, 0 }, \
415 { 0, 0 }, \
416 { 0, 0 }, \
417 { 0, 0 }, \
418 { 0, 0 }, \
419 { 0, 0 }, \
420 { 0, 0 }, \
421 { 0, 0 }, \
422 { 0, 0 }, \
423 { 0, 0 }, \
424 { 0, 0 }, \
425 { 0, 0 }, \
426 { 0, 0 }, \
427 { 0, 0 }, \
428 { 0, 0 }, \
429 { 0, 0 }, \
430 { 0, 0 }, \
431 { 0, 0 }, \
432 { 0, 0 }, \
433 { 0, 0 }, \
434 { 0, 0 }, \
435 { 0, 0 }, \
436 { 0, 0 }, \
437 { 0, 0 }, \
438 { 0, 0 }, \
439 { 0, 0 }, \
440 { 0, 0 }, \
441 { 0, 0 }, \
442 { 0, 0 }, \
443 { "gre", CTLTYPE_NODE }, \
444 { 0, 0 }, \
445 { 0, 0 }, \
446 { "esp", CTLTYPE_NODE }, \
447 { "ah", CTLTYPE_NODE }, \
448 { 0, 0 }, \
449 { 0, 0 }, \
450 { 0, 0 }, \
451 { 0, 0 }, \
452 { 0, 0 }, \
453 { 0, 0 }, \
454 { 0, 0 }, \
455 { 0, 0 }, \
456 { 0, 0 }, \
457 { 0, 0 }, \
458 { 0, 0 }, \
459 { 0, 0 }, \
460 { 0, 0 }, \
461 { 0, 0 }, \
462 { 0, 0 }, \
463 { 0, 0 }, \
464 { 0, 0 }, \
465 { 0, 0 }, \
466 { 0, 0 }, \
467 { 0, 0 }, \
468 { 0, 0 }, \
469 { 0, 0 }, \
470 { 0, 0 }, \
471 { 0, 0 }, \
472 { 0, 0 }, \
473 { 0, 0 }, \
474 { 0, 0 }, \
475 { 0, 0 }, \
476 { 0, 0 }, \
477 { 0, 0 }, \
478 { 0, 0 }, \
479 { 0, 0 }, \
480 { 0, 0 }, \
481 { 0, 0 }, \
482 { 0, 0 }, \
483 { 0, 0 }, \
484 { 0, 0 }, \
485 { 0, 0 }, \
486 { 0, 0 }, \
487 { 0, 0 }, \
488 { 0, 0 }, \
489 { 0, 0 }, \
490 { 0, 0 }, \
491 { 0, 0 }, \
492 { 0, 0 }, \
493 { "etherip", CTLTYPE_NODE }, \
494 { 0, 0 }, \
495 { 0, 0 }, \
496 { 0, 0 }, \
497 { 0, 0 }, \
498 { 0, 0 }, \
499 { 0, 0 }, \
500 { 0, 0 }, \
501 { 0, 0 }, \
502 { 0, 0 }, \
503 { 0, 0 }, \
504 { "ipcomp", CTLTYPE_NODE }, \
505 { 0, 0 }, \
506 { 0, 0 }, \
507 { 0, 0 }, \
508 { "carp", CTLTYPE_NODE }, \
509 { 0, 0 }, \
510 { 0, 0 }, \
511 { 0, 0 }, \
512 { 0, 0 }, \
513 { 0, 0 }, \
514 { 0, 0 }, \
515 { 0, 0 }, \
516 { 0, 0 }, \
517 { 0, 0 }, \
518 { 0, 0 }, \
519 { 0, 0 }, \
520 { 0, 0 }, \
521 { 0, 0 }, \
522 { 0, 0 }, \
523 { 0, 0 }, \
524 { 0, 0 }, \
525 { 0, 0 }, \
526 { 0, 0 }, \
527 { 0, 0 }, \
528 { 0, 0 }, \
529 { 0, 0 }, \
530 { 0, 0 }, \
531 { 0, 0 }, \
532 { 0, 0 }, \
533 { 0, 0 }, \
534 { 0, 0 }, \
535 { 0, 0 }, \
536 { 0, 0 }, \
537 { 0, 0 }, \
538 { 0, 0 }, \
539 { 0, 0 }, \
540 { 0, 0 }, \
541 { 0, 0 }, \
542 { 0, 0 }, \
543 { 0, 0 }, \
544 { 0, 0 }, \
545 { 0, 0 }, \
546 { 0, 0 }, \
547 { 0, 0 }, \
548 { 0, 0 }, \
549 { 0, 0 }, \
550 { 0, 0 }, \
551 { 0, 0 }, \
552 { 0, 0 }, \
553 { 0, 0 }, \
554 { 0, 0 }, \
555 { 0, 0 }, \
556 { 0, 0 }, \
557 { 0, 0 }, \
558 { 0, 0 }, \
559 { 0, 0 }, \
560 { 0, 0 }, \
561 { 0, 0 }, \
562 { 0, 0 }, \
563 { 0, 0 }, \
564 { 0, 0 }, \
565 { 0, 0 }, \
566 { 0, 0 }, \
567 { 0, 0 }, \
568 { 0, 0 }, \
569 { 0, 0 }, \
570 { 0, 0 }, \
571 { 0, 0 }, \
572 { 0, 0 }, \
573 { 0, 0 }, \
574 { 0, 0 }, \
575 { 0, 0 }, \
576 { 0, 0 }, \
577 { 0, 0 }, \
578 { 0, 0 }, \
579 { 0, 0 }, \
580 { 0, 0 }, \
581 { 0, 0 }, \
582 { 0, 0 }, \
583 { 0, 0 }, \
584 { 0, 0 }, \
585 { 0, 0 }, \
586 { 0, 0 }, \
587 { 0, 0 }, \
588 { 0, 0 }, \
589 { 0, 0 }, \
590 { 0, 0 }, \
591 { 0, 0 }, \
592 { 0, 0 }, \
593 { 0, 0 }, \
594 { 0, 0 }, \
595 { 0, 0 }, \
596 { 0, 0 }, \
597 { 0, 0 }, \
598 { 0, 0 }, \
599 { 0, 0 }, \
600 { 0, 0 }, \
601 { 0, 0 }, \
602 { 0, 0 }, \
603 { 0, 0 }, \
604 { 0, 0 }, \
605 { 0, 0 }, \
606 { 0, 0 }, \
607 { 0, 0 }, \
608 { 0, 0 }, \
609 { 0, 0 }, \
610 { 0, 0 }, \
611 { 0, 0 }, \
612 { 0, 0 }, \
613 { 0, 0 }, \
614 { 0, 0 }, \
615 { 0, 0 }, \
616 { 0, 0 }, \
617 { 0, 0 }, \
618 { 0, 0 }, \
619 { 0, 0 }, \
620 { 0, 0 }, \
621 { 0, 0 }, \
622 { 0, 0 }, \
623 { 0, 0 }, \
624 { 0, 0 }, \
625 { 0, 0 }, \
626 { 0, 0 }, \
627 { 0, 0 }, \
628 { 0, 0 }, \
629 { 0, 0 }, \
630 { 0, 0 }, \
631 { 0, 0 }, \
632 { 0, 0 }, \
633 { 0, 0 }, \
634 { 0, 0 }, \
635 { 0, 0 }, \
636 { "pfsync", CTLTYPE_NODE }, \
637 { 0, 0 }, \
638 { 0, 0 }, \
639 { 0, 0 }, \
640 { 0, 0 }, \
641 { 0, 0 }, \
642 { 0, 0 }, \
643 { 0, 0 }, \
644 { 0, 0 }, \
645 { 0, 0 }, \
646 { 0, 0 }, \
647 { 0, 0 }, \
648 { 0, 0 }, \
649 { 0, 0 }, \
650 { 0, 0 }, \
651 { 0, 0 }, \
652 { 0, 0 }, \
653 { 0, 0 }, \
654 { "divert", CTLTYPE_NODE }, \
655}
656
657/*
658 * Names for IP sysctl objects
659 */
660#define IPCTL_FORWARDING 1 /* act as router */
661#define IPCTL_SENDREDIRECTS 2 /* may send redirects when forwarding */
662#define IPCTL_DEFTTL 3 /* default TTL */
663#define IPCTL_SOURCEROUTE 5 /* may perform source routes */
664#define IPCTL_DIRECTEDBCAST 6 /* default broadcast behavior */
665#define IPCTL_IPPORT_FIRSTAUTO 7
666#define IPCTL_IPPORT_LASTAUTO 8
667#define IPCTL_IPPORT_HIFIRSTAUTO 9
668#define IPCTL_IPPORT_HILASTAUTO 10
669#define IPCTL_IPPORT_MAXQUEUE 11
670#define IPCTL_ENCDEBUG 12
671#define IPCTL_IPSEC_STATS 13
672#define IPCTL_IPSEC_EXPIRE_ACQUIRE 14 /* How long to wait for key mgmt. */
673#define IPCTL_IPSEC_EMBRYONIC_SA_TIMEOUT 15 /* new SA lifetime */
674#define IPCTL_IPSEC_REQUIRE_PFS 16
675#define IPCTL_IPSEC_SOFT_ALLOCATIONS 17
676#define IPCTL_IPSEC_ALLOCATIONS 18
677#define IPCTL_IPSEC_SOFT_BYTES 19
678#define IPCTL_IPSEC_BYTES 20
679#define IPCTL_IPSEC_TIMEOUT 21
680#define IPCTL_IPSEC_SOFT_TIMEOUT 22
681#define IPCTL_IPSEC_SOFT_FIRSTUSE 23
682#define IPCTL_IPSEC_FIRSTUSE 24
683#define IPCTL_IPSEC_ENC_ALGORITHM 25
684#define IPCTL_IPSEC_AUTH_ALGORITHM 26
685#define IPCTL_MTUDISC 27 /* allow path MTU discovery */
686#define IPCTL_MTUDISCTIMEOUT 28 /* allow path MTU discovery */
687#define IPCTL_IPSEC_IPCOMP_ALGORITHM 29
688#define IPCTL_IFQUEUE 30
689#define IPCTL_MFORWARDING 31
690#define IPCTL_MULTIPATH 32
691#define IPCTL_STATS 33 /* IP statistics */
692#define IPCTL_MRTPROTO 34 /* type of multicast */
693#define IPCTL_MRTSTATS 35
694#define IPCTL_ARPQUEUED 36
695#define IPCTL_MRTMFC 37
696#define IPCTL_MRTVIF 38
697#define IPCTL_ARPTIMEOUT 39
698#define IPCTL_ARPDOWN 40
699#define IPCTL_ARPQUEUE 41
700#define IPCTL_MAXID 42
701
702#define IPCTL_NAMES { \
703 { 0, 0 }, \
704 { "forwarding", CTLTYPE_INT }, \
705 { "redirect", CTLTYPE_INT }, \
706 { "ttl", CTLTYPE_INT }, \
707 /* { "mtu", CTLTYPE_INT }, */ { 0, 0 }, \
708 { "sourceroute", CTLTYPE_INT }, \
709 { "directed-broadcast", CTLTYPE_INT }, \
710 { "portfirst", CTLTYPE_INT }, \
711 { "portlast", CTLTYPE_INT }, \
712 { "porthifirst", CTLTYPE_INT }, \
713 { "porthilast", CTLTYPE_INT }, \
714 { "maxqueue", CTLTYPE_INT }, \
715 { "encdebug", CTLTYPE_INT }, \
716 { 0, 0 /* ipsecstat */ }, \
717 { "ipsec-expire-acquire", CTLTYPE_INT }, \
718 { "ipsec-invalid-life", CTLTYPE_INT }, \
719 { "ipsec-pfs", CTLTYPE_INT }, \
720 { "ipsec-soft-allocs", CTLTYPE_INT }, \
721 { "ipsec-allocs", CTLTYPE_INT }, \
722 { "ipsec-soft-bytes", CTLTYPE_INT }, \
723 { "ipsec-bytes", CTLTYPE_INT }, \
724 { "ipsec-timeout", CTLTYPE_INT }, \
725 { "ipsec-soft-timeout", CTLTYPE_INT }, \
726 { "ipsec-soft-firstuse", CTLTYPE_INT }, \
727 { "ipsec-firstuse", CTLTYPE_INT }, \
728 { "ipsec-enc-alg", CTLTYPE_STRING }, \
729 { "ipsec-auth-alg", CTLTYPE_STRING }, \
730 { "mtudisc", CTLTYPE_INT }, \
731 { "mtudisctimeout", CTLTYPE_INT }, \
732 { "ipsec-comp-alg", CTLTYPE_STRING }, \
733 { "ifq", CTLTYPE_NODE }, \
734 { "mforwarding", CTLTYPE_INT }, \
735 { "multipath", CTLTYPE_INT }, \
736 { "stats", CTLTYPE_STRUCT }, \
737 { "mrtproto", CTLTYPE_INT }, \
738 { "mrtstats", CTLTYPE_STRUCT }, \
739 { "arpqueued", CTLTYPE_INT }, \
740 { "mrtmfc", CTLTYPE_STRUCT }, \
741 { "mrtvif", CTLTYPE_STRUCT }, \
742 { "arptimeout", CTLTYPE_INT }, \
743 { "arpdown", CTLTYPE_INT }, \
744 { "arpq", CTLTYPE_NODE }, \
745}
746
747#endif /* __BSD_VISIBLE */
748
749/* INET6 stuff */
750#define __KAME_NETINET_IN_H_INCLUDED_
751#include <netinet6/in6.h>
752#undef __KAME_NETINET_IN_H_INCLUDED_
753
754#ifndef _KERNEL
755#if __BSD_VISIBLE
756__BEGIN_DECLS
757int bindresvport(int, struct sockaddr_in *);
758struct sockaddr;
759int bindresvport_sa(int, struct sockaddr *);
760__END_DECLS
761#endif /* __BSD_VISIBLE */
762#endif /* !_KERNEL */
763
764#ifdef _KERNEL
765extern const u_char inetctlerrmap[];
766extern const struct in_addr zeroin_addr;
767
768struct mbuf;
769struct sockaddr;
770struct sockaddr_in;
771struct ifaddr;
772struct in_ifaddr;
773struct route;
774struct netstack;
775
776void ipv4_input(struct ifnet *, struct mbuf *, struct netstack *);
777struct mbuf *
778 ipv4_check(struct ifnet *, struct mbuf *);
779
780int in_broadcast(struct in_addr, u_int);
781int in_canforward(struct in_addr);
782int in_cksum(struct mbuf *, int);
783int in4_cksum(struct mbuf *, u_int8_t, int, int);
784void in_hdr_cksum_out(struct mbuf *, struct ifnet *);
785void in_proto_cksum_out(struct mbuf *, struct ifnet *);
786int in_ifcap_cksum(struct mbuf *, struct ifnet *, int);
787void in_ifdetach(struct ifnet *);
788int in_mask2len(struct in_addr *);
789void in_len2mask(struct in_addr *, int);
790int in_nam2sin(const struct mbuf *, struct sockaddr_in **);
791int in_sa2sin(struct sockaddr *, struct sockaddr_in **);
792
793char *inet_ntoa(struct in_addr);
794int inet_nat64(int, const void *, void *, const void *, u_int8_t);
795int inet_nat46(int, const void *, void *, const void *, u_int8_t);
796
797const char *inet_ntop(int, const void *, char *, socklen_t);
798const char *sockaddr_ntop(struct sockaddr *, char *, size_t);
799
800#define in_hosteq(s,t) ((s).s_addr == (t).s_addr)
801#define in_nullhost(x) ((x).s_addr == INADDR_ANY)
802
803/*
804 * Convert between address family specific and general structs.
805 * Inline functions check the source type and are stricter than
806 * casts or defines.
807 */
808
809static inline struct sockaddr_in *
810satosin(struct sockaddr *sa)
811{
812 return ((struct sockaddr_in *)(sa));
813}
814
815static inline const struct sockaddr_in *
816satosin_const(const struct sockaddr *sa)
817{
818 return ((const struct sockaddr_in *)(sa));
819}
820
821static inline struct sockaddr *
822sintosa(struct sockaddr_in *sin)
823{
824 return ((struct sockaddr *)(sin));
825}
826
827static inline struct in_ifaddr *
828ifatoia(struct ifaddr *ifa)
829{
830 return ((struct in_ifaddr *)(ifa));
831}
832#endif /* _KERNEL */
833#endif /* _NETINET_IN_H_ */