blob: 75a3f3fdb3591720d266fd33d98c608fc673b6ca [file] [log] [blame]
Greg Kroah-Hartmanb2441312017-11-01 15:07:57 +01001/* SPDX-License-Identifier: GPL-2.0 */
Linus Torvalds1da177e2005-04-16 15:20:36 -07002#ifndef __NET_PKT_CLS_H
3#define __NET_PKT_CLS_H
4
5#include <linux/pkt_cls.h>
Cong Wang7aa00452017-10-26 18:24:28 -07006#include <linux/workqueue.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -07007#include <net/sch_generic.h>
8#include <net/act_api.h>
9
Paolo Abenicd11b1642018-07-30 14:30:44 +020010/* TC action not accessible from user space */
11#define TC_ACT_REINSERT (TC_ACT_VALUE_MAX + 1)
12
Linus Torvalds1da177e2005-04-16 15:20:36 -070013/* Basic packet classifier frontend definitions. */
14
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +000015struct tcf_walker {
Linus Torvalds1da177e2005-04-16 15:20:36 -070016 int stop;
17 int skip;
18 int count;
Vlad Buslov01683a12018-07-09 13:29:11 +030019 unsigned long cookie;
WANG Cong8113c092017-08-04 21:31:43 -070020 int (*fn)(struct tcf_proto *, void *node, struct tcf_walker *);
Linus Torvalds1da177e2005-04-16 15:20:36 -070021};
22
Joe Perches5c152572013-07-30 22:47:13 -070023int register_tcf_proto_ops(struct tcf_proto_ops *ops);
24int unregister_tcf_proto_ops(struct tcf_proto_ops *ops);
Linus Torvalds1da177e2005-04-16 15:20:36 -070025
Jiri Pirko8c4083b2017-10-19 15:50:29 +020026enum tcf_block_binder_type {
27 TCF_BLOCK_BINDER_TYPE_UNSPEC,
Jiri Pirko6e40cf22017-10-19 15:50:30 +020028 TCF_BLOCK_BINDER_TYPE_CLSACT_INGRESS,
29 TCF_BLOCK_BINDER_TYPE_CLSACT_EGRESS,
Jiri Pirko8c4083b2017-10-19 15:50:29 +020030};
31
32struct tcf_block_ext_info {
33 enum tcf_block_binder_type binder_type;
Jiri Pirkoc7eb7d72017-11-03 11:46:24 +010034 tcf_chain_head_change_t *chain_head_change;
35 void *chain_head_change_priv;
Jiri Pirko48617382018-01-17 11:46:46 +010036 u32 block_index;
Jiri Pirko8c4083b2017-10-19 15:50:29 +020037};
38
Jiri Pirkoacb67442017-10-19 15:50:31 +020039struct tcf_block_cb;
Cong Wangaaa908f2018-05-23 15:26:53 -070040bool tcf_queue_work(struct rcu_work *rwork, work_func_t func);
Jiri Pirkoacb67442017-10-19 15:50:31 +020041
Jiri Pirko8ae70032017-02-15 11:57:50 +010042#ifdef CONFIG_NET_CLS
Jiri Pirko1f3ed382018-07-27 09:45:05 +020043struct tcf_chain *tcf_chain_get_by_act(struct tcf_block *block,
44 u32 chain_index);
Jiri Pirko1f3ed382018-07-27 09:45:05 +020045void tcf_chain_put_by_act(struct tcf_chain *chain);
Jiri Pirkof36fe1c2018-01-17 11:46:48 +010046void tcf_block_netif_keep_dst(struct tcf_block *block);
Jiri Pirko6529eab2017-05-17 11:07:55 +020047int tcf_block_get(struct tcf_block **p_block,
Alexander Aring8d1a77f2017-12-20 12:35:19 -050048 struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
49 struct netlink_ext_ack *extack);
Jiri Pirkoc7eb7d72017-11-03 11:46:24 +010050int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
Alexander Aring8d1a77f2017-12-20 12:35:19 -050051 struct tcf_block_ext_info *ei,
52 struct netlink_ext_ack *extack);
Jiri Pirko6529eab2017-05-17 11:07:55 +020053void tcf_block_put(struct tcf_block *block);
Jiri Pirkoc7eb7d72017-11-03 11:46:24 +010054void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
Jiri Pirko8c4083b2017-10-19 15:50:29 +020055 struct tcf_block_ext_info *ei);
Jiri Pirko44186462017-10-13 14:00:59 +020056
Jiri Pirko48617382018-01-17 11:46:46 +010057static inline bool tcf_block_shared(struct tcf_block *block)
58{
59 return block->index;
60}
61
Jiri Pirko44186462017-10-13 14:00:59 +020062static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
63{
Jiri Pirko48617382018-01-17 11:46:46 +010064 WARN_ON(tcf_block_shared(block));
Jiri Pirko44186462017-10-13 14:00:59 +020065 return block->q;
66}
67
68static inline struct net_device *tcf_block_dev(struct tcf_block *block)
69{
70 return tcf_block_q(block)->dev_queue->dev;
71}
72
Jiri Pirkoacb67442017-10-19 15:50:31 +020073void *tcf_block_cb_priv(struct tcf_block_cb *block_cb);
74struct tcf_block_cb *tcf_block_cb_lookup(struct tcf_block *block,
75 tc_setup_cb_t *cb, void *cb_ident);
76void tcf_block_cb_incref(struct tcf_block_cb *block_cb);
77unsigned int tcf_block_cb_decref(struct tcf_block_cb *block_cb);
78struct tcf_block_cb *__tcf_block_cb_register(struct tcf_block *block,
79 tc_setup_cb_t *cb, void *cb_ident,
John Hurley60513bd2018-06-25 14:30:04 -070080 void *cb_priv,
81 struct netlink_ext_ack *extack);
Jiri Pirkoacb67442017-10-19 15:50:31 +020082int tcf_block_cb_register(struct tcf_block *block,
83 tc_setup_cb_t *cb, void *cb_ident,
John Hurley60513bd2018-06-25 14:30:04 -070084 void *cb_priv, struct netlink_ext_ack *extack);
John Hurley32636742018-06-25 14:30:10 -070085void __tcf_block_cb_unregister(struct tcf_block *block,
86 struct tcf_block_cb *block_cb);
Jiri Pirkoacb67442017-10-19 15:50:31 +020087void tcf_block_cb_unregister(struct tcf_block *block,
88 tc_setup_cb_t *cb, void *cb_ident);
89
Jiri Pirko87d83092017-05-17 11:07:54 +020090int tcf_classify(struct sk_buff *skb, const struct tcf_proto *tp,
91 struct tcf_result *res, bool compat_mode);
92
Jiri Pirko8ae70032017-02-15 11:57:50 +010093#else
Jiri Pirko6529eab2017-05-17 11:07:55 +020094static inline
95int tcf_block_get(struct tcf_block **p_block,
Sudip Mukherjee3c149092017-12-22 15:52:05 +000096 struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
97 struct netlink_ext_ack *extack)
Jiri Pirko6529eab2017-05-17 11:07:55 +020098{
99 return 0;
100}
101
Jiri Pirko8c4083b2017-10-19 15:50:29 +0200102static inline
Jiri Pirkoc7eb7d72017-11-03 11:46:24 +0100103int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
Quentin Monnet33c30a82018-01-03 17:30:45 -0800104 struct tcf_block_ext_info *ei,
105 struct netlink_ext_ack *extack)
Jiri Pirko8c4083b2017-10-19 15:50:29 +0200106{
107 return 0;
108}
109
Jiri Pirko6529eab2017-05-17 11:07:55 +0200110static inline void tcf_block_put(struct tcf_block *block)
Jiri Pirko8ae70032017-02-15 11:57:50 +0100111{
112}
Jiri Pirko87d83092017-05-17 11:07:54 +0200113
Jiri Pirko8c4083b2017-10-19 15:50:29 +0200114static inline
Jiri Pirkoc7eb7d72017-11-03 11:46:24 +0100115void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
Jiri Pirko8c4083b2017-10-19 15:50:29 +0200116 struct tcf_block_ext_info *ei)
117{
118}
119
Jiri Pirko44186462017-10-13 14:00:59 +0200120static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
121{
122 return NULL;
123}
124
125static inline struct net_device *tcf_block_dev(struct tcf_block *block)
126{
127 return NULL;
128}
129
Jiri Pirkoacb67442017-10-19 15:50:31 +0200130static inline
131int tc_setup_cb_block_register(struct tcf_block *block, tc_setup_cb_t *cb,
132 void *cb_priv)
133{
134 return 0;
135}
136
137static inline
138void tc_setup_cb_block_unregister(struct tcf_block *block, tc_setup_cb_t *cb,
139 void *cb_priv)
140{
141}
142
143static inline
144void *tcf_block_cb_priv(struct tcf_block_cb *block_cb)
145{
146 return NULL;
147}
148
149static inline
150struct tcf_block_cb *tcf_block_cb_lookup(struct tcf_block *block,
151 tc_setup_cb_t *cb, void *cb_ident)
152{
153 return NULL;
154}
155
156static inline
157void tcf_block_cb_incref(struct tcf_block_cb *block_cb)
158{
159}
160
161static inline
162unsigned int tcf_block_cb_decref(struct tcf_block_cb *block_cb)
163{
164 return 0;
165}
166
167static inline
168struct tcf_block_cb *__tcf_block_cb_register(struct tcf_block *block,
169 tc_setup_cb_t *cb, void *cb_ident,
John Hurley60513bd2018-06-25 14:30:04 -0700170 void *cb_priv,
171 struct netlink_ext_ack *extack)
Jiri Pirkoacb67442017-10-19 15:50:31 +0200172{
173 return NULL;
174}
175
176static inline
177int tcf_block_cb_register(struct tcf_block *block,
178 tc_setup_cb_t *cb, void *cb_ident,
John Hurley60513bd2018-06-25 14:30:04 -0700179 void *cb_priv, struct netlink_ext_ack *extack)
Jiri Pirkoacb67442017-10-19 15:50:31 +0200180{
181 return 0;
182}
183
184static inline
John Hurley32636742018-06-25 14:30:10 -0700185void __tcf_block_cb_unregister(struct tcf_block *block,
186 struct tcf_block_cb *block_cb)
Jiri Pirkoacb67442017-10-19 15:50:31 +0200187{
188}
189
190static inline
191void tcf_block_cb_unregister(struct tcf_block *block,
192 tc_setup_cb_t *cb, void *cb_ident)
193{
194}
195
Jiri Pirko87d83092017-05-17 11:07:54 +0200196static inline int tcf_classify(struct sk_buff *skb, const struct tcf_proto *tp,
197 struct tcf_result *res, bool compat_mode)
198{
199 return TC_ACT_UNSPEC;
200}
Jiri Pirko8ae70032017-02-15 11:57:50 +0100201#endif
Jiri Pirkocf1facd2017-02-09 14:38:56 +0100202
Linus Torvalds1da177e2005-04-16 15:20:36 -0700203static inline unsigned long
204__cls_set_class(unsigned long *clp, unsigned long cl)
205{
WANG Conga0efb802014-09-30 16:07:24 -0700206 return xchg(clp, cl);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700207}
208
209static inline unsigned long
Jiri Pirko34e37592017-10-13 14:01:00 +0200210cls_set_class(struct Qdisc *q, unsigned long *clp, unsigned long cl)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700211{
212 unsigned long old_cl;
Jiri Pirko34e37592017-10-13 14:01:00 +0200213
214 sch_tree_lock(q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700215 old_cl = __cls_set_class(clp, cl);
Jiri Pirko34e37592017-10-13 14:01:00 +0200216 sch_tree_unlock(q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700217 return old_cl;
218}
219
220static inline void
221tcf_bind_filter(struct tcf_proto *tp, struct tcf_result *r, unsigned long base)
222{
Jiri Pirko34e37592017-10-13 14:01:00 +0200223 struct Qdisc *q = tp->chain->block->q;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700224 unsigned long cl;
225
Jiri Pirko34e37592017-10-13 14:01:00 +0200226 /* Check q as it is not set for shared blocks. In that case,
227 * setting class is not supported.
228 */
229 if (!q)
230 return;
231 cl = q->ops->cl_ops->bind_tcf(q, base, r->classid);
232 cl = cls_set_class(q, &r->class, cl);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700233 if (cl)
Jiri Pirko34e37592017-10-13 14:01:00 +0200234 q->ops->cl_ops->unbind_tcf(q, cl);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700235}
236
237static inline void
238tcf_unbind_filter(struct tcf_proto *tp, struct tcf_result *r)
239{
Jiri Pirko34e37592017-10-13 14:01:00 +0200240 struct Qdisc *q = tp->chain->block->q;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700241 unsigned long cl;
242
Jiri Pirko34e37592017-10-13 14:01:00 +0200243 if (!q)
244 return;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700245 if ((cl = __cls_set_class(&r->class, 0)) != 0)
Jiri Pirko34e37592017-10-13 14:01:00 +0200246 q->ops->cl_ops->unbind_tcf(q, cl);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700247}
248
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000249struct tcf_exts {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700250#ifdef CONFIG_NET_CLS_ACT
WANG Cong33be6272013-12-15 20:15:05 -0800251 __u32 type; /* for backward compat(TCA_OLD_COMPAT) */
WANG Cong22dc13c2016-08-13 22:35:00 -0700252 int nr_actions;
253 struct tc_action **actions;
Cong Wange4b95c42017-11-06 13:47:19 -0800254 struct net *net;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700255#endif
WANG Cong5da57f42013-12-15 20:15:07 -0800256 /* Map to export classifier specific extension TLV types to the
257 * generic extensions API. Unsupported extensions must be set to 0.
258 */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700259 int action;
260 int police;
261};
262
WANG Congb9a24bb2016-08-19 12:36:54 -0700263static inline int tcf_exts_init(struct tcf_exts *exts, int action, int police)
WANG Cong33be6272013-12-15 20:15:05 -0800264{
265#ifdef CONFIG_NET_CLS_ACT
WANG Cong5da57f42013-12-15 20:15:07 -0800266 exts->type = 0;
WANG Cong22dc13c2016-08-13 22:35:00 -0700267 exts->nr_actions = 0;
Cong Wange4b95c42017-11-06 13:47:19 -0800268 exts->net = NULL;
WANG Cong22dc13c2016-08-13 22:35:00 -0700269 exts->actions = kcalloc(TCA_ACT_MAX_PRIO, sizeof(struct tc_action *),
270 GFP_KERNEL);
WANG Congb9a24bb2016-08-19 12:36:54 -0700271 if (!exts->actions)
272 return -ENOMEM;
WANG Cong33be6272013-12-15 20:15:05 -0800273#endif
WANG Cong5da57f42013-12-15 20:15:07 -0800274 exts->action = action;
275 exts->police = police;
WANG Congb9a24bb2016-08-19 12:36:54 -0700276 return 0;
WANG Cong33be6272013-12-15 20:15:05 -0800277}
278
Cong Wange4b95c42017-11-06 13:47:19 -0800279/* Return false if the netns is being destroyed in cleanup_net(). Callers
280 * need to do cleanup synchronously in this case, otherwise may race with
281 * tc_action_net_exit(). Return true for other cases.
282 */
283static inline bool tcf_exts_get_net(struct tcf_exts *exts)
284{
285#ifdef CONFIG_NET_CLS_ACT
286 exts->net = maybe_get_net(exts->net);
287 return exts->net != NULL;
288#else
289 return true;
290#endif
291}
292
293static inline void tcf_exts_put_net(struct tcf_exts *exts)
294{
295#ifdef CONFIG_NET_CLS_ACT
296 if (exts->net)
297 put_net(exts->net);
298#endif
299}
300
WANG Cong22dc13c2016-08-13 22:35:00 -0700301#ifdef CONFIG_NET_CLS_ACT
Cong Wang244cd962018-08-19 12:22:09 -0700302#define tcf_exts_for_each_action(i, a, exts) \
303 for (i = 0; i < TCA_ACT_MAX_PRIO && ((a) = (exts)->actions[i]); i++)
304#else
305#define tcf_exts_for_each_action(i, a, exts) \
Arnd Bergmann191672c2018-08-22 17:25:44 +0200306 for (; 0; (void)(i), (void)(a), (void)(exts))
WANG Cong22dc13c2016-08-13 22:35:00 -0700307#endif
WANG Cong22dc13c2016-08-13 22:35:00 -0700308
Jakub Kicinskid897a632017-05-31 08:06:43 -0700309static inline void
310tcf_exts_stats_update(const struct tcf_exts *exts,
311 u64 bytes, u64 packets, u64 lastuse)
312{
313#ifdef CONFIG_NET_CLS_ACT
314 int i;
315
316 preempt_disable();
317
318 for (i = 0; i < exts->nr_actions; i++) {
319 struct tc_action *a = exts->actions[i];
320
321 tcf_action_stats_update(a, bytes, packets, lastuse);
322 }
323
324 preempt_enable();
325#endif
326}
327
Linus Torvalds1da177e2005-04-16 15:20:36 -0700328/**
Jiri Pirko3bcc0ce2017-08-04 14:28:58 +0200329 * tcf_exts_has_actions - check if at least one action is present
330 * @exts: tc filter extensions handle
331 *
332 * Returns true if at least one action is present.
333 */
334static inline bool tcf_exts_has_actions(struct tcf_exts *exts)
335{
WANG Cong2734437e2016-08-13 22:34:59 -0700336#ifdef CONFIG_NET_CLS_ACT
Jiri Pirko3bcc0ce2017-08-04 14:28:58 +0200337 return exts->nr_actions;
338#else
339 return false;
340#endif
341}
WANG Cong2734437e2016-08-13 22:34:59 -0700342
Jiri Pirko3bcc0ce2017-08-04 14:28:58 +0200343/**
344 * tcf_exts_has_one_action - check if exactly one action is present
345 * @exts: tc filter extensions handle
346 *
347 * Returns true if exactly one action is present.
348 */
349static inline bool tcf_exts_has_one_action(struct tcf_exts *exts)
350{
351#ifdef CONFIG_NET_CLS_ACT
352 return exts->nr_actions == 1;
353#else
354 return false;
355#endif
356}
WANG Cong2734437e2016-08-13 22:34:59 -0700357
Cong Wang244cd962018-08-19 12:22:09 -0700358static inline struct tc_action *tcf_exts_first_action(struct tcf_exts *exts)
359{
360#ifdef CONFIG_NET_CLS_ACT
361 return exts->actions[0];
362#else
363 return NULL;
364#endif
365}
366
Jiri Pirkoaf69afc2017-08-04 14:28:59 +0200367/**
368 * tcf_exts_exec - execute tc filter extensions
369 * @skb: socket buffer
370 * @exts: tc filter extensions handle
371 * @res: desired result
372 *
Jiri Pirkoaf089e72017-08-04 14:29:01 +0200373 * Executes all configured extensions. Returns TC_ACT_OK on a normal execution,
Jiri Pirkoaf69afc2017-08-04 14:28:59 +0200374 * a negative number if the filter must be considered unmatched or
375 * a positive action code (TC_ACT_*) which must be returned to the
376 * underlying layer.
377 */
378static inline int
379tcf_exts_exec(struct sk_buff *skb, struct tcf_exts *exts,
380 struct tcf_result *res)
381{
382#ifdef CONFIG_NET_CLS_ACT
Jiri Pirkoec1a9cc2017-08-04 14:29:02 +0200383 return tcf_action_exec(skb, exts->actions, exts->nr_actions, res);
Jiri Pirkoaf69afc2017-08-04 14:28:59 +0200384#endif
Jiri Pirkoaf089e72017-08-04 14:29:01 +0200385 return TC_ACT_OK;
Jiri Pirkoaf69afc2017-08-04 14:28:59 +0200386}
387
Joe Perches5c152572013-07-30 22:47:13 -0700388int tcf_exts_validate(struct net *net, struct tcf_proto *tp,
389 struct nlattr **tb, struct nlattr *rate_tlv,
Alexander Aring50a56192018-01-18 11:20:52 -0500390 struct tcf_exts *exts, bool ovr,
391 struct netlink_ext_ack *extack);
WANG Cong18d02642014-09-25 10:26:37 -0700392void tcf_exts_destroy(struct tcf_exts *exts);
Jiri Pirko9b0d4442017-08-04 14:29:15 +0200393void tcf_exts_change(struct tcf_exts *dst, struct tcf_exts *src);
WANG Cong5da57f42013-12-15 20:15:07 -0800394int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts);
395int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700396
397/**
398 * struct tcf_pkt_info - packet information
399 */
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000400struct tcf_pkt_info {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700401 unsigned char * ptr;
402 int nexthdr;
403};
404
405#ifdef CONFIG_NET_EMATCH
406
407struct tcf_ematch_ops;
408
409/**
410 * struct tcf_ematch - extended match (ematch)
411 *
412 * @matchid: identifier to allow userspace to reidentify a match
413 * @flags: flags specifying attributes and the relation to other matches
414 * @ops: the operations lookup table of the corresponding ematch module
415 * @datalen: length of the ematch specific configuration data
416 * @data: ematch specific data
417 */
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000418struct tcf_ematch {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700419 struct tcf_ematch_ops * ops;
420 unsigned long data;
421 unsigned int datalen;
422 u16 matchid;
423 u16 flags;
John Fastabend82a470f2014-10-05 21:27:53 -0700424 struct net *net;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700425};
426
427static inline int tcf_em_is_container(struct tcf_ematch *em)
428{
429 return !em->ops;
430}
431
432static inline int tcf_em_is_simple(struct tcf_ematch *em)
433{
434 return em->flags & TCF_EM_SIMPLE;
435}
436
437static inline int tcf_em_is_inverted(struct tcf_ematch *em)
438{
439 return em->flags & TCF_EM_INVERT;
440}
441
442static inline int tcf_em_last_match(struct tcf_ematch *em)
443{
444 return (em->flags & TCF_EM_REL_MASK) == TCF_EM_REL_END;
445}
446
447static inline int tcf_em_early_end(struct tcf_ematch *em, int result)
448{
449 if (tcf_em_last_match(em))
450 return 1;
451
452 if (result == 0 && em->flags & TCF_EM_REL_AND)
453 return 1;
454
455 if (result != 0 && em->flags & TCF_EM_REL_OR)
456 return 1;
457
458 return 0;
459}
460
461/**
462 * struct tcf_ematch_tree - ematch tree handle
463 *
464 * @hdr: ematch tree header supplied by userspace
465 * @matches: array of ematches
466 */
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000467struct tcf_ematch_tree {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700468 struct tcf_ematch_tree_hdr hdr;
469 struct tcf_ematch * matches;
470
471};
472
473/**
474 * struct tcf_ematch_ops - ematch module operations
475 *
476 * @kind: identifier (kind) of this ematch module
477 * @datalen: length of expected configuration data (optional)
478 * @change: called during validation (optional)
479 * @match: called during ematch tree evaluation, must return 1/0
480 * @destroy: called during destroyage (optional)
481 * @dump: called during dumping process (optional)
482 * @owner: owner, must be set to THIS_MODULE
483 * @link: link to previous/next ematch module (internal use)
484 */
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000485struct tcf_ematch_ops {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700486 int kind;
487 int datalen;
John Fastabend82a470f2014-10-05 21:27:53 -0700488 int (*change)(struct net *net, void *,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700489 int, struct tcf_ematch *);
490 int (*match)(struct sk_buff *, struct tcf_ematch *,
491 struct tcf_pkt_info *);
John Fastabend82a470f2014-10-05 21:27:53 -0700492 void (*destroy)(struct tcf_ematch *);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700493 int (*dump)(struct sk_buff *, struct tcf_ematch *);
494 struct module *owner;
495 struct list_head link;
496};
497
Joe Perches5c152572013-07-30 22:47:13 -0700498int tcf_em_register(struct tcf_ematch_ops *);
499void tcf_em_unregister(struct tcf_ematch_ops *);
500int tcf_em_tree_validate(struct tcf_proto *, struct nlattr *,
501 struct tcf_ematch_tree *);
John Fastabend82a470f2014-10-05 21:27:53 -0700502void tcf_em_tree_destroy(struct tcf_ematch_tree *);
Joe Perches5c152572013-07-30 22:47:13 -0700503int tcf_em_tree_dump(struct sk_buff *, struct tcf_ematch_tree *, int);
504int __tcf_em_tree_match(struct sk_buff *, struct tcf_ematch_tree *,
505 struct tcf_pkt_info *);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700506
507/**
Linus Torvalds1da177e2005-04-16 15:20:36 -0700508 * tcf_em_tree_match - evaulate an ematch tree
509 *
510 * @skb: socket buffer of the packet in question
511 * @tree: ematch tree to be used for evaluation
512 * @info: packet information examined by classifier
513 *
514 * This function matches @skb against the ematch tree in @tree by going
515 * through all ematches respecting their logic relations returning
516 * as soon as the result is obvious.
517 *
518 * Returns 1 if the ematch tree as-one matches, no ematches are configured
519 * or ematch is not enabled in the kernel, otherwise 0 is returned.
520 */
521static inline int tcf_em_tree_match(struct sk_buff *skb,
522 struct tcf_ematch_tree *tree,
523 struct tcf_pkt_info *info)
524{
525 if (tree->hdr.nmatches)
526 return __tcf_em_tree_match(skb, tree, info);
527 else
528 return 1;
529}
530
Patrick McHardydb3d99c2007-07-11 19:46:26 -0700531#define MODULE_ALIAS_TCF_EMATCH(kind) MODULE_ALIAS("ematch-kind-" __stringify(kind))
532
Linus Torvalds1da177e2005-04-16 15:20:36 -0700533#else /* CONFIG_NET_EMATCH */
534
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000535struct tcf_ematch_tree {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700536};
537
538#define tcf_em_tree_validate(tp, tb, t) ((void)(t), 0)
John Fastabend82a470f2014-10-05 21:27:53 -0700539#define tcf_em_tree_destroy(t) do { (void)(t); } while(0)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700540#define tcf_em_tree_dump(skb, t, tlv) (0)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700541#define tcf_em_tree_match(skb, t, info) ((void)(info), 1)
542
543#endif /* CONFIG_NET_EMATCH */
544
545static inline unsigned char * tcf_get_base_ptr(struct sk_buff *skb, int layer)
546{
547 switch (layer) {
548 case TCF_LAYER_LINK:
Wolfgang Bumillerd3303a62018-01-18 11:32:36 +0100549 return skb_mac_header(skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700550 case TCF_LAYER_NETWORK:
Arnaldo Carvalho de Melod56f90a2007-04-10 20:50:43 -0700551 return skb_network_header(skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700552 case TCF_LAYER_TRANSPORT:
Arnaldo Carvalho de Melo9c702202007-04-25 18:04:18 -0700553 return skb_transport_header(skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700554 }
555
556 return NULL;
557}
558
Arnaldo Carvalho de Meloeddc9ec2007-04-20 22:47:35 -0700559static inline int tcf_valid_offset(const struct sk_buff *skb,
560 const unsigned char *ptr, const int len)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700561{
David S. Millerda521b22010-12-21 12:43:16 -0800562 return likely((ptr + len) <= skb_tail_pointer(skb) &&
563 ptr >= skb->head &&
564 (ptr <= (ptr + len)));
Linus Torvalds1da177e2005-04-16 15:20:36 -0700565}
566
567#ifdef CONFIG_NET_CLS_IND
Denis V. Lunev0eeb8ff2007-12-04 01:15:45 -0800568#include <net/net_namespace.h>
569
Linus Torvalds1da177e2005-04-16 15:20:36 -0700570static inline int
Alexander Aring1057c552018-01-18 11:20:54 -0500571tcf_change_indev(struct net *net, struct nlattr *indev_tlv,
572 struct netlink_ext_ack *extack)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700573{
WANG Cong2519a602014-01-09 16:14:02 -0800574 char indev[IFNAMSIZ];
Patrick McHardyc01003c2007-03-29 11:46:52 -0700575 struct net_device *dev;
576
Alexander Aring1057c552018-01-18 11:20:54 -0500577 if (nla_strlcpy(indev, indev_tlv, IFNAMSIZ) >= IFNAMSIZ) {
578 NL_SET_ERR_MSG(extack, "Interface name too long");
WANG Cong2519a602014-01-09 16:14:02 -0800579 return -EINVAL;
Alexander Aring1057c552018-01-18 11:20:54 -0500580 }
WANG Cong2519a602014-01-09 16:14:02 -0800581 dev = __dev_get_by_name(net, indev);
582 if (!dev)
583 return -ENODEV;
584 return dev->ifindex;
585}
Linus Torvalds1da177e2005-04-16 15:20:36 -0700586
WANG Cong2519a602014-01-09 16:14:02 -0800587static inline bool
588tcf_match_indev(struct sk_buff *skb, int ifindex)
589{
590 if (!ifindex)
591 return true;
592 if (!skb->skb_iif)
593 return false;
594 return ifindex == skb->skb_iif;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700595}
596#endif /* CONFIG_NET_CLS_IND */
597
Jiri Pirko208c0f42017-10-19 15:50:32 +0200598int tc_setup_cb_call(struct tcf_block *block, struct tcf_exts *exts,
599 enum tc_setup_type type, void *type_data, bool err_stop);
Jiri Pirko717503b2017-10-11 09:41:09 +0200600
Jiri Pirko8c4083b2017-10-19 15:50:29 +0200601enum tc_block_command {
602 TC_BLOCK_BIND,
603 TC_BLOCK_UNBIND,
604};
605
606struct tc_block_offload {
607 enum tc_block_command command;
608 enum tcf_block_binder_type binder_type;
609 struct tcf_block *block;
John Hurley60513bd2018-06-25 14:30:04 -0700610 struct netlink_ext_ack *extack;
Jiri Pirko8c4083b2017-10-19 15:50:29 +0200611};
612
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200613struct tc_cls_common_offload {
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200614 u32 chain_index;
615 __be16 protocol;
Jiri Pirkod7c1c8d2017-08-07 10:15:30 +0200616 u32 prio;
Quentin Monnet8f0b4252018-01-19 17:44:47 -0800617 struct netlink_ext_ack *extack;
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200618};
619
John Fastabenda1b7c5f2016-02-16 21:17:09 -0800620struct tc_cls_u32_knode {
621 struct tcf_exts *exts;
John Fastabende0148602016-02-17 14:59:30 -0800622 struct tc_u32_sel *sel;
John Fastabenda1b7c5f2016-02-16 21:17:09 -0800623 u32 handle;
624 u32 val;
625 u32 mask;
626 u32 link_handle;
John Fastabende0148602016-02-17 14:59:30 -0800627 u8 fshift;
John Fastabenda1b7c5f2016-02-16 21:17:09 -0800628};
629
630struct tc_cls_u32_hnode {
631 u32 handle;
632 u32 prio;
633 unsigned int divisor;
634};
635
636enum tc_clsu32_command {
637 TC_CLSU32_NEW_KNODE,
638 TC_CLSU32_REPLACE_KNODE,
639 TC_CLSU32_DELETE_KNODE,
640 TC_CLSU32_NEW_HNODE,
641 TC_CLSU32_REPLACE_HNODE,
642 TC_CLSU32_DELETE_HNODE,
643};
644
645struct tc_cls_u32_offload {
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200646 struct tc_cls_common_offload common;
John Fastabenda1b7c5f2016-02-16 21:17:09 -0800647 /* knode values */
648 enum tc_clsu32_command command;
649 union {
650 struct tc_cls_u32_knode knode;
651 struct tc_cls_u32_hnode hnode;
652 };
653};
654
Jiri Pirko7b06e8a2017-08-09 14:30:35 +0200655static inline bool tc_can_offload(const struct net_device *dev)
John Fastabend6843e7a2016-02-26 07:53:49 -0800656{
Jiri Pirko70b5aee2017-11-01 11:47:41 +0100657 return dev->features & NETIF_F_HW_TC;
John Fastabend6843e7a2016-02-26 07:53:49 -0800658}
659
Quentin Monnetf9eda142018-01-19 17:44:48 -0800660static inline bool tc_can_offload_extack(const struct net_device *dev,
661 struct netlink_ext_ack *extack)
662{
663 bool can = tc_can_offload(dev);
664
665 if (!can)
666 NL_SET_ERR_MSG(extack, "TC offload is disabled on net device");
667
668 return can;
669}
670
Jakub Kicinski878db9f2018-01-25 14:00:43 -0800671static inline bool
672tc_cls_can_offload_and_chain0(const struct net_device *dev,
673 struct tc_cls_common_offload *common)
674{
675 if (!tc_can_offload_extack(dev, common->extack))
676 return false;
677 if (common->chain_index) {
678 NL_SET_ERR_MSG(common->extack,
679 "Driver supports only offload of chain 0");
680 return false;
681 }
682 return true;
683}
684
Hadar Hen Zion55330f02016-12-01 14:06:33 +0200685static inline bool tc_skip_hw(u32 flags)
686{
687 return (flags & TCA_CLS_FLAGS_SKIP_HW) ? true : false;
688}
689
Samudrala, Sridhard34e3e12016-05-12 17:08:23 -0700690static inline bool tc_skip_sw(u32 flags)
691{
692 return (flags & TCA_CLS_FLAGS_SKIP_SW) ? true : false;
693}
694
695/* SKIP_HW and SKIP_SW are mutually exclusive flags. */
696static inline bool tc_flags_valid(u32 flags)
697{
Marcelo Ricardo Leitner81c72882018-05-13 17:44:27 -0300698 if (flags & ~(TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW |
699 TCA_CLS_FLAGS_VERBOSE))
Samudrala, Sridhard34e3e12016-05-12 17:08:23 -0700700 return false;
701
Marcelo Ricardo Leitner81c72882018-05-13 17:44:27 -0300702 flags &= TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW;
Samudrala, Sridhard34e3e12016-05-12 17:08:23 -0700703 if (!(flags ^ (TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW)))
704 return false;
705
706 return true;
707}
708
Or Gerlitze6960282017-02-16 10:31:12 +0200709static inline bool tc_in_hw(u32 flags)
710{
711 return (flags & TCA_CLS_FLAGS_IN_HW) ? true : false;
712}
713
Jakub Kicinski34832e12018-01-24 12:54:14 -0800714static inline void
715tc_cls_common_offload_init(struct tc_cls_common_offload *cls_common,
716 const struct tcf_proto *tp, u32 flags,
717 struct netlink_ext_ack *extack)
718{
719 cls_common->chain_index = tp->chain->index;
720 cls_common->protocol = tp->protocol;
721 cls_common->prio = tp->prio;
Marcelo Ricardo Leitner81c72882018-05-13 17:44:27 -0300722 if (tc_skip_sw(flags) || flags & TCA_CLS_FLAGS_VERBOSE)
Jakub Kicinski34832e12018-01-24 12:54:14 -0800723 cls_common->extack = extack;
724}
725
Amir Vadai5b33f482016-03-08 12:42:29 +0200726enum tc_fl_command {
727 TC_CLSFLOWER_REPLACE,
728 TC_CLSFLOWER_DESTROY,
Amir Vadai10cbc682016-05-13 12:55:37 +0000729 TC_CLSFLOWER_STATS,
Jiri Pirko34738452018-07-23 09:23:11 +0200730 TC_CLSFLOWER_TMPLT_CREATE,
731 TC_CLSFLOWER_TMPLT_DESTROY,
Amir Vadai5b33f482016-03-08 12:42:29 +0200732};
733
734struct tc_cls_flower_offload {
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200735 struct tc_cls_common_offload common;
Amir Vadai5b33f482016-03-08 12:42:29 +0200736 enum tc_fl_command command;
Amir Vadai8208d212016-03-11 11:08:45 +0200737 unsigned long cookie;
Amir Vadai5b33f482016-03-08 12:42:29 +0200738 struct flow_dissector *dissector;
739 struct fl_flow_key *mask;
740 struct fl_flow_key *key;
741 struct tcf_exts *exts;
Amritha Nambiar384c1812017-10-27 02:35:34 -0700742 u32 classid;
Amir Vadai5b33f482016-03-08 12:42:29 +0200743};
744
Yotam Gigib87f7932016-07-21 12:03:12 +0200745enum tc_matchall_command {
746 TC_CLSMATCHALL_REPLACE,
747 TC_CLSMATCHALL_DESTROY,
748};
749
750struct tc_cls_matchall_offload {
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200751 struct tc_cls_common_offload common;
Yotam Gigib87f7932016-07-21 12:03:12 +0200752 enum tc_matchall_command command;
753 struct tcf_exts *exts;
754 unsigned long cookie;
755};
756
Jakub Kicinski332ae8e2016-09-21 11:43:53 +0100757enum tc_clsbpf_command {
Jakub Kicinski102740b2017-12-19 13:32:13 -0800758 TC_CLSBPF_OFFLOAD,
Jakub Kicinski68d64062016-09-21 11:44:02 +0100759 TC_CLSBPF_STATS,
Jakub Kicinski332ae8e2016-09-21 11:43:53 +0100760};
761
762struct tc_cls_bpf_offload {
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200763 struct tc_cls_common_offload common;
Jakub Kicinski332ae8e2016-09-21 11:43:53 +0100764 enum tc_clsbpf_command command;
765 struct tcf_exts *exts;
766 struct bpf_prog *prog;
Jakub Kicinski102740b2017-12-19 13:32:13 -0800767 struct bpf_prog *oldprog;
Jakub Kicinski332ae8e2016-09-21 11:43:53 +0100768 const char *name;
769 bool exts_integrated;
770};
771
Amritha Nambiar4e8b86c2017-09-07 04:00:06 -0700772struct tc_mqprio_qopt_offload {
773 /* struct tc_mqprio_qopt must always be the first element */
774 struct tc_mqprio_qopt qopt;
775 u16 mode;
776 u16 shaper;
777 u32 flags;
778 u64 min_rate[TC_QOPT_MAX_QUEUE];
779 u64 max_rate[TC_QOPT_MAX_QUEUE];
780};
Jamal Hadi Salim1045ba72017-01-24 07:02:41 -0500781
782/* This structure holds cookie structure that is passed from user
783 * to the kernel for actions and classifiers
784 */
785struct tc_cookie {
786 u8 *data;
787 u32 len;
Vlad Busloveec94fd2018-07-05 17:24:23 +0300788 struct rcu_head rcu;
Jamal Hadi Salim1045ba72017-01-24 07:02:41 -0500789};
Nogah Frankel602f3ba2017-11-06 07:23:41 +0100790
Nogah Frankelf34b4aa2018-01-10 14:59:58 +0100791struct tc_qopt_offload_stats {
792 struct gnet_stats_basic_packed *bstats;
793 struct gnet_stats_queue *qstats;
794};
795
Jakub Kicinskif971b132018-05-25 21:53:35 -0700796enum tc_mq_command {
797 TC_MQ_CREATE,
798 TC_MQ_DESTROY,
Jakub Kicinski47c669a42018-05-25 21:53:37 -0700799 TC_MQ_STATS,
Jakub Kicinskif971b132018-05-25 21:53:35 -0700800};
801
802struct tc_mq_qopt_offload {
803 enum tc_mq_command command;
804 u32 handle;
Jakub Kicinski47c669a42018-05-25 21:53:37 -0700805 struct tc_qopt_offload_stats stats;
Jakub Kicinskif971b132018-05-25 21:53:35 -0700806};
807
Nogah Frankel602f3ba2017-11-06 07:23:41 +0100808enum tc_red_command {
809 TC_RED_REPLACE,
810 TC_RED_DESTROY,
811 TC_RED_STATS,
812 TC_RED_XSTATS,
813};
814
815struct tc_red_qopt_offload_params {
816 u32 min;
817 u32 max;
818 u32 probability;
819 bool is_ecn;
Jakub Kicinski416ef9b2018-01-14 20:01:26 -0800820 struct gnet_stats_queue *qstats;
Nogah Frankel602f3ba2017-11-06 07:23:41 +0100821};
Nogah Frankel602f3ba2017-11-06 07:23:41 +0100822
823struct tc_red_qopt_offload {
824 enum tc_red_command command;
825 u32 handle;
826 u32 parent;
827 union {
828 struct tc_red_qopt_offload_params set;
Nogah Frankelf34b4aa2018-01-10 14:59:58 +0100829 struct tc_qopt_offload_stats stats;
Nogah Frankel602f3ba2017-11-06 07:23:41 +0100830 struct red_stats *xstats;
831 };
832};
833
Nogah Frankel7fdb61b2018-01-14 12:33:15 +0100834enum tc_prio_command {
835 TC_PRIO_REPLACE,
836 TC_PRIO_DESTROY,
837 TC_PRIO_STATS,
Nogah Frankelb9c7a7a2018-02-28 10:45:06 +0100838 TC_PRIO_GRAFT,
Nogah Frankel7fdb61b2018-01-14 12:33:15 +0100839};
840
841struct tc_prio_qopt_offload_params {
842 int bands;
843 u8 priomap[TC_PRIO_MAX + 1];
844 /* In case that a prio qdisc is offloaded and now is changed to a
845 * non-offloadedable config, it needs to update the backlog & qlen
846 * values to negate the HW backlog & qlen values (and only them).
847 */
848 struct gnet_stats_queue *qstats;
849};
850
Nogah Frankelb9c7a7a2018-02-28 10:45:06 +0100851struct tc_prio_qopt_offload_graft_params {
852 u8 band;
853 u32 child_handle;
854};
855
Nogah Frankel7fdb61b2018-01-14 12:33:15 +0100856struct tc_prio_qopt_offload {
857 enum tc_prio_command command;
858 u32 handle;
859 u32 parent;
860 union {
861 struct tc_prio_qopt_offload_params replace_params;
862 struct tc_qopt_offload_stats stats;
Nogah Frankelb9c7a7a2018-02-28 10:45:06 +0100863 struct tc_prio_qopt_offload_graft_params graft_params;
Nogah Frankel7fdb61b2018-01-14 12:33:15 +0100864 };
865};
Nogah Frankelb9c7a7a2018-02-28 10:45:06 +0100866
Linus Torvalds1da177e2005-04-16 15:20:36 -0700867#endif