korg/iproute2
0
0
Fork 0
mirror of https://git.kernel.org/pub/scm/network/iproute2/iproute2.git synced 2024-11-17 06:53:26 +08:00
Code Issues Packages Projects Releases Wiki Activity
e2a4536a43
iproute2/ip/Makefile

50 lines
1.2 KiB
Makefile
Raw Normal View History

iproute2: Add processless network namespace support The goal of this code change is to implement a mechanism such that it is simple to work with a kernel that is using multiple network namespaces at once. This comes in handy for interacting with vpns where there may be rfc1918 address overlaps, and different policies default routes, name servers and the like. Configuration specific to a network namespace that would ordinarily be stored under /etc/ is stored under /etc/netns/<name>. For example if the dns server configuration is different for your vpn you would create a file /etc/netns/myvpn/resolv.conf. File descriptors that can be used to manipulate a network namespace can be created by opening /var/run/netns/<NAME>. This adds the following commands to iproute. ip netns add NAME ip netns delete NAME ip netns monitor ip netns list ip netns exec NAME cmd .... ip link set DEV netns NAME ip netns exec exists to cater the vast majority of programs that only know how to operate in a single network namespace. ip netns exec changes the default network namespace, creates a new mount namespace, remounts /sys and bind mounts netns specific configuration files to their standard locations. Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2011-07-14 00:48:26 +08:00
IPOBJ=ip.o ipaddress.o ipaddrlabel.o iproute.o iprule.o ipnetns.o \
TUNNEL: IPv6-over-IPv6 tunnel support. Fix ip6tunnel.c to be fit with current ip command style. Unlike other modules currently iptunnel (and ip6tunnel) is not designed as protocol-independent because of unarranged structure between IPv4 and IPv6. Usage: ip -f inet6 tunnel { add | change | del | show } [ NAME ] [ remote ADDR local ADDR ] [ dev PHYS_DEV ] [ encaplimit ELIM ] [ hoplimit HLIM ] [ tc TC ] [ fl FL ] [ dscp inherit ] Where: NAME := STRING ADDR := IPV6_ADDRESS ELIM := { none | 0..255 }(default=4) HLIM := 0..255 (default=64) TC := { 0x0..0xff | inherit } FL := { 0x0..0xfffff | inherit } Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org> Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
2006-11-24 11:27:09 +08:00
rtm_map.o iptunnel.o ip6tunnel.o tunnel.o ipneigh.o ipntable.o iplink.o \
Add 'ip tuntap' support. This patch provides support for 'ip tuntap', allowing creation and deletion of persistent tun/tap devices.
2009-09-20 00:48:43 +08:00
ipmaddr.o ipmonitor.o ipmroute.o ipprefix.o iptuntap.o \
don't make veth a shared library Making veth a shared library for ip caused build problems (not PIC) and is unneeded. Signed-off-by: Stephen Hemminger <shemminger@linux-foundation.org>
2007-10-12 04:01:42 +08:00
ipxfrm.o xfrm_state.o xfrm_policy.o xfrm_monitor.o \
iproute2/iplink: add macvlan options for bridge mode Macvlan can now optionally support forwarding between its ports, if they are in "bridge" mode. This adds support for this option to "ip link add", "ip link set" and "ip -d link show". The default mode in the kernel is now "vepa" mode, meaning "virtual ethernet port aggregator". This mode is used together with the "hairpin" mode of an ethernet bridge that the parent of the macvlan device is connected to. All frames still get sent out to the external interface, but the adjacent bridge is able to send them back on the same wire in hairpin mode, so the macvlan ports are able to see each other, which the bridge can be configured to monitor and control traffic between all macvlan instances. Multicast traffic coming in from the external interface is checked for the source MAC address and only delivered to ports that have not yet seen it. In bridge mode, macvlan will send all multicast traffic to other interfaces that are also in bridge mode but not to those in vepa mode, which get them on the way back from the hairpin. The third supported mode is "private", which prevents communication between macvlans even if the adjacent bridge is in hairpin mode. This behavior is closer to the original implementation of macvlan but stricly maintains isolation. Signed-off-by: Arnd Bergmann <arnd@arndb.de>
2009-12-27 03:22:57 +08:00
iplink_vlan.o link_veth.o link_gre.o iplink_can.o \
l2tp: Add l2tp support Based on earlier implementation by James Chapman. But instead of dragging in all of libnl, use existing libnetlink infrastructure.
2011-12-24 12:52:10 +08:00
iplink_macvlan.o iplink_macvtap.o ipl2tp.o
vlan support This is a resend of the iproute VLAN patch with the if_link.h changes edited out since the headers are already synced. [IPROUTE]: VLAN support Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Stephen Hemminger <shemminger@linux-foundation.org>
2007-09-02 00:47:19 +08:00
(Logical change 1.3)
2004-04-16 04:56:59 +08:00
RTMONOBJ=rtmon.o
iproute2: Auto-detect the presence of setns in libc If libc has setns present use that version instead of rolling the syscall wrapper by hand. Dan McGee found the following compile error: gcc -D_GNU_SOURCE -O2 -Wstrict-prototypes -Wall -I../include -DRESOLVE_HOSTNAMES -DLIBDIR=\"/usr/lib/\" -c -o ipnetns.o ipnetns.c ipnetns.c:31:12: error: static declaration of ‘setns’ follows non-static declaration /usr/include/bits/sched.h:93:12: note: previous declaration of ‘setns’ was here make[1]: *** [ipnetns.o] Error 1 Reported-by: Dan McGee <dan@archlinux.org> Tested-by: Dan McGee <dan@archlinux.org> Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2011-07-15 22:26:59 +08:00
include ../Config
ifeq ($(IP_CONFIG_SETNS),y)
CFLAGS += -DHAVE_SETNS
endif
(Logical change 1.3)
2004-04-16 04:56:59 +08:00
ALLOBJ=$(IPOBJ) $(RTMONOBJ)
don't strip shell scripts (Logical change 1.141)
2005-02-10 06:05:41 +08:00
SCRIPTS=ifcfg rtpr routel routef
TARGETS=ip rtmon
(Logical change 1.3)
2004-04-16 04:56:59 +08:00
Module for ip utility to support veth device (v.2.1) The usage is # ip link add [name] type veth [peer <name>] [mac <mac>] [peer_mac <mac>] This version doesn't include the fix for ip/iplink.c as Patrick said that he had included it into his patches already. Signed-off-by: Pavel Emelianov <xemul@openvz.org> Signed-off-by: Stephen Hemminger <shemminger@linux-foundation.org>
2007-07-11 17:33:55 +08:00
all: $(TARGETS) $(SCRIPTS) $(LIBS)
(Logical change 1.3)
2004-04-16 04:56:59 +08:00
ip: $(IPOBJ) $(LIBNETLINK) $(LIBUTIL)
rtmon: $(RTMONOBJ) $(LIBNETLINK)
install: all
Do not strip binaries with `install` Signed-off-by: Mike Frysinger <vapier@gentoo.org> Signed-off-by: Stephen Hemminger <stephen.hemminger@vyatta.com>
2008-03-16 16:27:01 +08:00
install -m 0755 $(TARGETS) $(DESTDIR)$(SBINDIR)
don't strip shell scripts (Logical change 1.141)
2005-02-10 06:05:41 +08:00
install -m 0755 $(SCRIPTS) $(DESTDIR)$(SBINDIR)
(Logical change 1.3)
2004-04-16 04:56:59 +08:00
clean:
rm -f $(ALLOBJ) $(TARGETS)
support static-only systems The iptables code supports a "no shared libs" mode where it can be used without requiring dlfcn related functionality. This adds similar support to iproute2 so that it can easily be used on systems like nommu Linux (but obviously with a few limitations -- no dynamic plugins). Rather than modify every location that uses dlfcn.h, I hooked the dlfcn.h header with stub functions when shared library support is disabled. Then symbol lookup is done via a local static lookup table (which is generated automatically at build time) so that internal symbols can be found. Signed-off-by: Mike Frysinger <vapier@gentoo.org>
2009-11-06 19:09:22 +08:00
SHARED_LIBS ?= y
ifeq ($(SHARED_LIBS),y)
Fix lost export-dynamic get_link_kind() fails for statically linked modules (vlan, veth, etc.) if "ip" was linked without "export-dynamic". Signed-off-by: Vitaliy Gusev <vgusev@openvz.org> -- Thank, Vitaliy Gusev Signed-off-by: Stephen Hemminger <shemminger@linux-foundation.org>
2007-12-17 21:06:38 +08:00
support static-only systems The iptables code supports a "no shared libs" mode where it can be used without requiring dlfcn related functionality. This adds similar support to iproute2 so that it can easily be used on systems like nommu Linux (but obviously with a few limitations -- no dynamic plugins). Rather than modify every location that uses dlfcn.h, I hooked the dlfcn.h header with stub functions when shared library support is disabled. Then symbol lookup is done via a local static lookup table (which is generated automatically at build time) so that internal symbols can be found. Signed-off-by: Mike Frysinger <vapier@gentoo.org>
2009-11-06 19:09:22 +08:00
LDLIBS += -ldl
Fix lost export-dynamic get_link_kind() fails for statically linked modules (vlan, veth, etc.) if "ip" was linked without "export-dynamic". Signed-off-by: Vitaliy Gusev <vgusev@openvz.org> -- Thank, Vitaliy Gusev Signed-off-by: Stephen Hemminger <shemminger@linux-foundation.org>
2007-12-17 21:06:38 +08:00
LDFLAGS += -Wl,-export-dynamic
support static-only systems The iptables code supports a "no shared libs" mode where it can be used without requiring dlfcn related functionality. This adds similar support to iproute2 so that it can easily be used on systems like nommu Linux (but obviously with a few limitations -- no dynamic plugins). Rather than modify every location that uses dlfcn.h, I hooked the dlfcn.h header with stub functions when shared library support is disabled. Then symbol lookup is done via a local static lookup table (which is generated automatically at build time) so that internal symbols can be found. Signed-off-by: Mike Frysinger <vapier@gentoo.org>
2009-11-06 19:09:22 +08:00
else
ip: static-syms.o
static-syms.o: static-syms.h
static-syms.h: $(wildcard *.c)
files="$^" ; \
for s in `grep -B 3 '\<dlsym' $$files | sed -n '/snprintf/{s:.*"\([^"]*\)".*:\1:;s:%s::;p}'` ; do \
sed -n '/'$$s'[^ ]* =/{s:.* \([^ ]*'$$s'[^ ]*\) .*:extern char \1[] __attribute__((weak)); if (!strcmp(sym, "\1")) return \1;:;p}' $$files ; \
done > $@
endif
Reference in New Issue Copy Permalink