ChorusOS man pages section 7P: Protocols

ip6(7P)

NAME

ip6- Internet Protocol version 6 (IPv6)

SYNOPSIS

#include <sys/socket.h>
#include <.netinet/in.h>

AF_INET6

SOCK_RAW

proto

DESCRIPTION

IPv6 is the network layer protocol used by the Internet protocol version 6 family (AF_INET6). Options may be set at the IPv6 level when using higher-level protocols that are based on IPv6 (such as TCP and UDP). It may also be accessed through a raw socket when developing new protocols, or special-purpose applications.

There are several IPv6-level setsockopt(2POSIX) and getsockopt(2POSIX) options. They are separated into the basic IPv6 sockets API (defined in RFC2553), and the advanced API (defined in RFC2292). The basic API looks very similar to the API presented in ip(7P). Advanced API uses ancillary data and can handle more complex cases.

To specify socket options, certain privileges (such as root privilege) is required.

Basic IPv6 sockets API

IPV6_UNICAST_HOPS may be used to set the hoplimit field in the IPv6 header. As the symbol name suggests, this option controls the hoplimit field on unicast packets. If -1 is specified, the microkernel will use a default value. If a value of 0 to 255 is specified, the packet will have hoplimit as the specified value. Other values are considered invalid, and EINVAL will be returned. For example:

int hlim = 60;                   /* max = 255 */
           setsockopt(s, IPPROTO_IPV6, IPV6_UNICAST_HOPS, &hlim, sizeof(hlim));

IPv6 multicasting is supported only on AF_INET6 sockets of type SOCK_DGRAM and SOCK_RAW, and only on networks where the interface driver supports multicasting.

The IPV6_MULTICAST_HOPS option changes the hoplimit for outgoing multicast datagrams in order to control the scope of the multicasts:

unsigned int hlim;      /* range: 0 to 255, default = 1 */
           setsockopt(s, IPPROTO_IPV6, IPV6_MULTICAST_HOPS, &hlim, sizeof(hlim))

Datagrams with a hoplimit of 1 are not forwarded beyond the local network. Multicast datagrams with a hoplimit of 0 will not be transmitted on any network, but may be delivered locally if the sending host belongs to the destination group and if multicast loopback has not been disabled on the sending socket (see below). Multicast datagrams with a hoplimit greater than 1 may be forwarded to other networks if a multicast router is attached to the local network.

For hosts with multiple interfaces, each multicast transmission is sent from the primary network interface. The IPV6_MULTICAST_IF option overrides the default for subsequent transmissions from a given socket:

unsigned int outif;
           outif = if_nametoindex("ne0");
           setsockopt(s, IPPROTO_IPV6, IPV6_MULTICAST_IF, &outif, sizeof(outif));

where "outif" is an interface index of the desired interface, or 0 specifies the default interface.

If a multicast datagram is sent to a group to which the sending host itself belongs (on the outgoing interface), a copy of the datagram is, by default, looped back by the IPv6 layer for local delivery. The IPV6_MULTICAST_LOOP option gives the sender explicit control over whether or not subsequent datagrams are looped back:

u_char loop;    /* 0 = disable, 1 = enable (default) */
           setsockopt(s, IPPROTO_IPV6, IPV6_MULTICAST_LOOP, &loop, sizeof(loop))

This option improves performance for applications that may have no more than one instance on a single host (such as a router demon), by eliminating the overhead of receiving their own transmissions. It should generally not be used by applications for which there may be more than one instance on a single host (such as a conferencing program) or applications for which the sender does not belong to the destination group (such as a time querying program).

A multicast datagram sent with an initial hoplimit greater than 1 may be delivered to the sending host on a different interface from that on which it was sent, if the host belongs to the destination group on the other interface. The loopback control option has no effect on such a delivery.

A host must become a member of a multicast group before it can receive datagrams. To join a multicast group, use the IPV6_JOIN_GROUP option:

struct ipv6_mreq mreq6;
           setsockopt(s, IPPROTO_IPV6, IPV6_JOIN_GROUP, &mreq, sizeof(mreq6));

where mreq6 is the following structure:

struct ipv6_mreq {
               struct in6_addr ipv6mr_multiaddr;
               u_int ipv6mr_interface;
           };

The ipv6mr_interface should be 0 to choose the default multicast interface, or the interface index of a particular multicast-capable interface if the host is multihomed. Membership is associated with a single interface; programs running on multihomed hosts may need to join the same group on more than one interface.

To drop a membership, use:

struct ipv6_mreq mreq6;
           setsockopt(s, IPPROTO_IPV6, IPV6_LEAVE_GROUP, &mreq, sizeof(mreq6));

where mreq6 contains the same values as used to add the membership. Memberships are dropped when the socket is closed or the process exits.

IPV6_PORTRANGE controls how ephemeral ports are allocated for SOCK_STREAM and SOCK_DGRAM sockets. For example,

int range = IPV6_PORTRANGE_LOW;       /* see <netinet/in.h> */
           setsockopt(s, IPPROTO_IPV6, IPV6_PORTRANGE, &range, sizeof(range));

IPV6_BINDV6ONLY controls the behavior of the AF_INET6 wildcard listening socket. The following example sets the option to 1:

int on = 1;
           setsockopt(s, IPPROTO_IPV6, IPV6_BINDV6ONLY, &on, sizeof(on));

If set to 1, the AF_INET6 wildcard listening socket will only accept IPv6 traffic. If set to 0, it will accept IPv4 traffic as well, as if it were from an IPv4 mapped address such as ::ffff:10.1.1.1. Note that if you set this to 0, you need to care IPv4 access control also on the AF_INET6 socket. For example, even if you have no listening AF_INET listening socket on port X, you will be accepting IPv4 traffic by the AF_INET6 listening socket on the same port. This option affects TCP and UDP sockets only.

Advanced IPv6 sockets API

The advanced IPv6 sockets API let userland programs specify or obtain details about the IPv6 header and the IPv6 extension headers on packets. The advanced API uses ancillary data for passing data to and from the microkernel.

There are setsockopt(2POSIX) and getsockopt(2POSIX) options to get optional information on incoming packets. They are IPV6_PKTINFO, IPV6_HOPLIMIT, IPV6_HOPOPTS, IPV6_DSTOPTS, and IPV6_RTHDR.

int  on = 1;

           setsockopt(fd, IPPROTO_IPV6, IPV6_PKTINFO,  &on, sizeof(on));
           setsockopt(fd, IPPROTO_IPV6, IPV6_HOPLIMIT, &on, sizeof(on));
           setsockopt(fd, IPPROTO_IPV6, IPV6_HOPOPTS,  &on, sizeof(on));
           setsockopt(fd, IPPROTO_IPV6, IPV6_DSTOPTS,  &on, sizeof(on));
           setsockopt(fd, IPPROTO_IPV6, IPV6_RTHDR,    &on, sizeof(on));

When any of these options are enabled, the corresponding data is returned as control information by recvmsg(2POSIX), as one or more ancillary data objects.

If IPV6_PKTINFO is enabled, the destination IPv6 address and the arriving interface index will be available via struct in6_pktinfo on ancillary data stream. You can pick the structure by checking for an ancillary data item with cmsg_level equal to IPPROTO_IPV6, and cmsg_type equal to IPV6_PKTINFO.

If IPV6_HOPLIMIT is enabled, the hoplimit value on the packet will be made available to the userland program. Ancillary data stream will contain an integer data item with cmsg_level equal to IPPROTO_IPV6, and cmsg_type equal to IPV6_HOPLIMIT.

The inet6_option_space(3STDC) and friends let you parse ancillary data items for IPV6_HOPOPTS and IPV6_DSTOPTS. Similarly, inet6_rthdr_space(3STDC) and friends will help you parse ancillary data items for IPV6_RTHDR.

IPV6_HOPOPTS and IPV6_DSTOPTS may appear more than once on an ancillary data stream (note that the behavior is slightly different than the specification). Other ancillary data item will appear no more than once.

For outgoing direction, you can pass ancillary data items with normal payload data, using sendmsg(2POSIX). Ancillary data items will be parsed by the microkernel, and used to construct the IPv6 header and extension headers. For the 5 cmsg_level values listed above, the ancillary data format is the same as the inbound case. Additionally, you can specify the IPV6_NEXTHOP data object. The IPV6_NEXTHOP ancillary data object specifies the next hop for the datagram as a socket address structure. In the cmsghdr structure containing this ancillary data, the cmsg_level member will be IPPROTO_IPV6, the cmsg_type member will be IPV6_NEXTHOP, and the first byte of cmsg_data[] will be the first byte of the socket address structure.

If the socket address structure contains an IPv6 address (e.g., the sin6_family member is AF_INET6 ), then the node identified by that address must be a neighbor of the sending host. If that address is the same as the destination IPv6 address of the datagram, this is equivalent to the existing SO_DONTROUTE socket option.

For applications that do not, or are unable to use sendmsg(2POSIX) or recvmsg(2POSIX) the IPV6_PKTOPTIONS socket option is defined. Setting this socket option specifies any of the optional output fields:

  setsockopt(fd, IPPROTO_IPV6, IPV6_PKTOPTIONS, &buf, len);

The fourth argument points to a buffer containing one or more ancillary data objects, and the fifth argument is the total length of all these objects. The application fills in this buffer exactly as if the buffer were being passed to sendmsg(2POSIX) as control information.

The options set by calling setsockopt(2POSIX) for IPV6_PKTOPTIONS are called "sticky" options because once set they apply to all packets sent on that socket. The application can call setsockopt(2POSIX) again to change all the sticky options, or it can call setsockopt(2POSIX) with a length of 0 to remove all the sticky options for the socket.

The corresponding receive option

getsockopt(fd, IPPROTO_IPV6, IPV6_PKTOPTIONS, &buf, &len);

returns a buffer with one or more ancillary data objects for all the optional receive information that the application has previously specified that it wants to receive. The fourth argument points to the buffer that is filled in by the call. The fifth argument is a pointer to a value-result integer: when the function is called, the integer specifies the size of the buffer pointed to by the fourth argument, and on return this integer contains the actual number of bytes that were returned. The application processes this buffer exactly as if the buffer were returned by recvmsg(2POSIX) as control information.

Advanced API and TCP sockets

When using getsockopt(2POSIX) with the IPV6_PKTOPTIONS option and a TCP socket, only the options from the most recently received segment are retained and returned to the caller, and only after the socket option has been set. The application is not allowed to specify ancillary data in a call to sendmsg(2POSIX) on a TCP socket, and none of the ancillary data that we described above is ever returned as control information by recvmsg(2POSIX) on a TCP socket.

Conflict resolution

In some cases, there are multiple APIs defined for manipulating a IPv6 header field. A good example is the outgoing interface for multicast datagrams: it can be manipulated by IPV6_MULTICAST_IF in basic API, IPV6_PKTINFO in advanced API, and the sin6_scope_id field of the socket address passed to sendto(2POSIX).

When conflicting options are given to the microkernel, the microkernel will receive the value in the following preference:

Options specified by using ancillary data
Options specified by a sticky option of the advanced API
Options specified by using the basic API
Options specified by a socket address

Raw IPv6 Sockets

Raw IPv6 sockets are connectionless, and are normally used with the sendto(2POSIX) and recvfrom(2POSIX) calls, though the connect(2POSIX) call may also be used to fix the destination for future packets (in which case the read(2POSIX) or recv(2POSIX) and write(2POSIX) or send(2POSIX) system calls may be used).

If proto is 0, the default protocol IPPROTO_RAW is used for outgoing packets, and only incoming packets destined for that protocol are received. If proto is non-zero, that protocol number will be used on outgoing packets and to filter incoming packets.

Outgoing packets automatically have an IPv6 header prepended to them (based on the destination address and the protocol number with which the socket is created). Incoming packets are received without the IPv6 header or extension headers.

All data sent via raw sockets MUST be in network byte order and all data received via raw sockets will be in network byte order. This differs from the IPv4 raw sockets, which did not specify a byte order and typically used the host's byte order.

Another difference from IPv4 raw sockets is that complete packets (that is, IPv6 packets with extension headers) cannot be read or written to using the IPv6 raw sockets API. Instead, ancillary data objects are used to transfer the extension headers, as described above. If an application needs access to the complete IPv6 packet, a different technique, such as the datalink interfaces, such as bpf(7S), must be used.

All fields in the IPv6 header that an application might want to change (that is to say, everything other than the version number) can be modified by the application for output using ancillary data and/or socket options. All fields in a received IPv6 header (other than the version number and Next Header fields) and all extension headers are also made available to the application as ancillary data on input. Hence there is no need for a socket option similar to the IPv4 IP_HDRINCL socket option.

When writing to a raw socket, the microkernel will automatically fragment the packet if its size exceeds the path MTU, inserting the required fragmentation headers. On input the microkernel reassembles received fragments, so the reader of a raw socket never sees any fragment headers.

Most IPv4 implementations give special treatment to a raw socket created with a third argument to socket(2POSIX) of IPPROTO_RAW, whose value is normally 255. Note that this value has no special meaning to an IPv6 raw socket (and the IANA currently reserves the value of 255 when used as a next-header field).

For ICMPv6 raw sockets, the microkernel will calculate and insert the ICMPv6 checksum as this checksum is mandatory.

For other raw IPv6 sockets (that is, for raw IPv6 sockets created with a third argument other than IPPROTO_ICMPV6), the application must set the new IPV6_CHECKSUM socket option to make the microkernel compute and store a pseudo header checksum for output, as well as verify the received pseudo header checksum on input, discarding the packet if the checksum is in error. This option prevents applications from having to perform source address selection on the packets they send. The checksum will incorporate the IPv6 pseudo-header, defined in Section 8.1 of RFC2460. This new socket option also specifies an integer of where the checksum is located, offset into the user data .

int offset = 2;
           setsockopt(fd, IPPROTO_IPV6, IPV6_CHECKSUM, &offset, sizeof(offset));

By default, this socket option is disabled. Setting the offset to -1 also disables the option. When disabled, the microkernel will not calculate or store a checksum for outgoing packets, and neither will it verify a checksum for received packets.

Note: Since the checksum is always calculated by the microkernel for an ICMPv6 socket, applications are not able to generate ICMPv6 packets with incorrect checksums (presumably for testing purposes) using this API.

DIAGNOSTICS

A socket operation may fail and return one of the following errors:

[EISCONN]: When trying to establish a connection on a socket which already has one, or when trying to send a datagram with the destination address specified and the socket already connected
[ENOTCONN]: When trying to send a datagram, but no destination address is specified, and the socket has not been connected
[ENOBUFS]: When the system runs out of memory for an internal data structure
[EADDRNOTAVAIL]: When an attempt is made to create a socket with a network address for which no network interface exists
[EACCES]: When an attempt is made to create a raw IPv6 socket by a non-privileged process

The following errors specific to IPv6 may occur:

[EINVAL]: An unknown socket option name was given
[EINVAL]: The ancillary data items were improperly formed, or option name was unknown

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Interface Stability	Evolving

STANDARDS

Most of the socket options are defined in RFC2292 and/or RFC2553. IPV6_PORTRANGE, IPV6_BINDV6ONLY and the conflict resolution rule are not defined in the RFCs and should be considered implementation dependent. However, KAME/NetBSD also supports them.

BUGS

The IPV6_NEXTHOP object/option is not fully implemented at the time of writing.

ChorusOS 5.0 Last Revised December 2001