blob: fa5887143f0d238b2dc379fb540f9f7b2b26a877 [file] [log] [blame]
Greg Kroah-Hartmanb2441312017-11-01 15:07:57 +01001/* SPDX-License-Identifier: GPL-2.0 */
Eric W. Biederman5f256be2007-09-12 11:50:50 +02002/*
3 * Operations on the network namespace
4 */
5#ifndef __NET_NET_NAMESPACE_H
6#define __NET_NET_NAMESPACE_H
7
Arun Sharma600634972011-07-26 16:09:06 -07008#include <linux/atomic.h>
Reshetova, Elenac122e142017-06-30 13:08:08 +03009#include <linux/refcount.h>
Eric W. Biederman5f256be2007-09-12 11:50:50 +020010#include <linux/workqueue.h>
11#include <linux/list.h>
David S. Millerbee95252011-05-26 16:40:37 -040012#include <linux/sysctl.h>
Tyler Hicksfbdeaed2018-07-20 21:56:53 +000013#include <linux/uidgid.h>
Eric W. Biederman5f256be2007-09-12 11:50:50 +020014
Cong Wang6a662712014-04-15 16:25:34 -070015#include <net/flow.h>
Pavel Emelyanov8efa6e92008-03-31 19:41:14 -070016#include <net/netns/core.h>
Pavel Emelyanov852566f52008-07-18 04:01:24 -070017#include <net/netns/mib.h>
Denis V. Luneva0a53c82007-12-11 04:19:17 -080018#include <net/netns/unix.h>
Denis V. Lunev2aaef4e2007-12-11 04:19:54 -080019#include <net/netns/packet.h>
Pavel Emelyanov8afd3512007-12-16 13:29:36 -080020#include <net/netns/ipv4.h>
Daniel Lezcanob0f159d2008-01-10 02:49:06 -080021#include <net/netns/ipv6.h>
David Ahernab84be72019-05-24 14:43:04 -070022#include <net/netns/nexthop.h>
Alexander Aring633fc862014-02-28 07:32:49 +010023#include <net/netns/ieee802154_6lowpan.h>
Eric W. Biederman4db67e82012-08-06 08:42:04 +000024#include <net/netns/sctp.h>
Gao fengf3c1a442013-03-24 23:50:39 +000025#include <net/netns/netfilter.h>
Alexey Dobriyan8d870052008-01-31 04:02:13 -080026#include <net/netns/x_tables.h>
Alexey Dobriyandfdb8d72008-10-08 11:35:02 +020027#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
28#include <net/netns/conntrack.h>
29#endif
Pablo Neira Ayuso99633ab2013-10-10 23:28:33 +020030#include <net/netns/nftables.h>
Alexey Dobriyand62ddc22008-11-25 17:14:31 -080031#include <net/netns/xfrm.h>
Eric W. Biederman01891972015-03-03 19:10:47 -060032#include <net/netns/mpls.h>
Mario Kicherer8e8cda62017-02-21 12:19:47 +010033#include <net/netns/can.h>
Björn Töpel1d0dc062019-01-24 19:59:37 +010034#include <net/netns/xdp.h>
Jakub Sitnickia3fd7ce2020-05-31 10:28:36 +020035#include <net/netns/bpf.h>
Al Viro435d5f42014-10-31 22:56:04 -040036#include <linux/ns_common.h>
Pablo Neira Ayuso04c52de2015-06-17 10:28:25 -050037#include <linux/idr.h>
38#include <linux/skbuff.h>
Jiri Pirkoa30c7b42019-09-30 10:15:10 +020039#include <linux/notifier.h>
Denis V. Luneva0a53c82007-12-11 04:19:17 -080040
Eric W. Biederman038e7332012-06-14 02:31:10 -070041struct user_namespace;
Eric W. Biederman457c4cb2007-09-12 12:01:34 +020042struct proc_dir_entry;
Eric W. Biederman2774c7a2007-09-26 22:10:56 -070043struct net_device;
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080044struct sock;
Pavel Emelyanov1597fbc2007-12-01 23:51:01 +110045struct ctl_table_header;
Pavel Emelyanovdec827d2008-04-15 00:36:08 -070046struct net_generic;
Christian Brauner94e5e302018-03-19 13:17:30 +010047struct uevent_sock;
Julian Anastasov2553d062011-03-04 12:18:07 +020048struct netns_ipvs;
Petar Penkovd58e4682018-09-14 07:46:18 -070049struct bpf_prog;
Pavel Emelyanov1597fbc2007-12-01 23:51:01 +110050
Eric Dumazet7c28bd02009-10-24 06:13:17 -070051
52#define NETDEV_HASHBITS 8
53#define NETDEV_HASHENTRIES (1 << NETDEV_HASHBITS)
54
Eric W. Biederman5f256be2007-09-12 11:50:50 +020055struct net {
Eric Dumazet2a06b892019-10-18 15:20:05 -070056 /* First cache line can be often dirtied.
57 * Do not place here read-mostly fields.
58 */
Mike Rapoportaad12c22019-08-21 14:29:29 +030059 refcount_t passive; /* To decide when the network
Al Viroa685e082011-06-08 21:13:01 -040060 * namespace should be freed.
61 */
Eric Dumazet8e602ce2010-10-14 05:56:18 +000062 spinlock_t rules_mod_lock;
63
Eric Dumazet2a06b892019-10-18 15:20:05 -070064 unsigned int dev_unreg_count;
65
66 unsigned int dev_base_seq; /* protected by rtnl_mutex */
67 int ifindex;
68
69 spinlock_t nsid_lock;
70 atomic_t fnhe_genid;
Eric Dumazet33cf7c92015-03-11 18:53:14 -070071
Eric W. Biederman5f256be2007-09-12 11:50:50 +020072 struct list_head list; /* list of network namespaces */
Kirill Tkhai19efbd92018-02-19 12:58:38 +030073 struct list_head exit_list; /* To linked to call pernet exit
Kirill Tkhai4420bf22018-03-27 18:02:23 +030074 * methods on dead net (
75 * pernet_ops_rwsem read locked),
76 * or to unregister pernet ops
77 * (pernet_ops_rwsem write locked).
Kirill Tkhai19efbd92018-02-19 12:58:38 +030078 */
Kirill Tkhai65b7b5b2018-02-19 12:58:45 +030079 struct llist_node cleanup_list; /* namespaces on death row */
80
David Howells9b242612019-06-26 21:02:33 +010081#ifdef CONFIG_KEYS
82 struct key_tag *key_domain; /* Key domain of operation tag */
83#endif
Eric W. Biederman038e7332012-06-14 02:31:10 -070084 struct user_namespace *user_ns; /* Owning user namespace */
Eric W. Biederman70328662016-08-08 14:33:23 -050085 struct ucounts *ucounts;
Nicolas Dichtel0c7aecd2015-01-15 15:11:15 +010086 struct idr netns_ids;
Eric W. Biederman038e7332012-06-14 02:31:10 -070087
Al Viro435d5f42014-10-31 22:56:04 -040088 struct ns_common ns;
Eric W. Biederman98f842e2011-06-15 10:21:48 -070089
Eric Dumazet2a06b892019-10-18 15:20:05 -070090 struct list_head dev_base_head;
Eric W. Biederman457c4cb2007-09-12 12:01:34 +020091 struct proc_dir_entry *proc_net;
92 struct proc_dir_entry *proc_net_stat;
Eric W. Biederman881d9662007-09-17 11:56:21 -070093
Al Viro73455092008-07-14 21:22:20 -040094#ifdef CONFIG_SYSCTL
95 struct ctl_table_set sysctls;
96#endif
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +110097
Eric Dumazet8e602ce2010-10-14 05:56:18 +000098 struct sock *rtnl; /* rtnetlink socket */
99 struct sock *genl_sock;
Eric W. Biederman2774c7a2007-09-26 22:10:56 -0700100
Christian Brauner94e5e302018-03-19 13:17:30 +0100101 struct uevent_sock *uevent_sock; /* uevent socket */
102
Eric W. Biederman881d9662007-09-17 11:56:21 -0700103 struct hlist_head *dev_name_head;
104 struct hlist_head *dev_index_head;
Jiri Pirkoa30c7b42019-09-30 10:15:10 +0200105 struct raw_notifier_head netdev_chain;
106
Eric Dumazet2a06b892019-10-18 15:20:05 -0700107 /* Note that @hash_mix can be read millions times per second,
108 * it is critical that it is on a read_mostly cache line.
109 */
110 u32 hash_mix;
111
112 struct net_device *loopback_dev; /* The loopback */
Denis V. Lunev97c53ca2007-11-19 22:26:51 -0800113
Denis V. Lunev5fd30ee2008-01-10 03:20:28 -0800114 /* core fib_rules */
115 struct list_head rules_ops;
Denis V. Lunev5fd30ee2008-01-10 03:20:28 -0800116
Pavel Emelyanov8efa6e92008-03-31 19:41:14 -0700117 struct netns_core core;
Pavel Emelyanov852566f52008-07-18 04:01:24 -0700118 struct netns_mib mib;
Denis V. Lunev2aaef4e2007-12-11 04:19:54 -0800119 struct netns_packet packet;
Denis V. Luneva0a53c82007-12-11 04:19:17 -0800120 struct netns_unix unx;
David Ahernab84be72019-05-24 14:43:04 -0700121 struct netns_nexthop nexthop;
Pavel Emelyanov8afd3512007-12-16 13:29:36 -0800122 struct netns_ipv4 ipv4;
Eric Dumazetdfd56b82011-12-10 09:48:31 +0000123#if IS_ENABLED(CONFIG_IPV6)
Daniel Lezcanob0f159d2008-01-10 02:49:06 -0800124 struct netns_ipv6 ipv6;
125#endif
Alexander Aring633fc862014-02-28 07:32:49 +0100126#if IS_ENABLED(CONFIG_IEEE802154_6LOWPAN)
127 struct netns_ieee802154_lowpan ieee802154_lowpan;
128#endif
Eric W. Biederman4db67e82012-08-06 08:42:04 +0000129#if defined(CONFIG_IP_SCTP) || defined(CONFIG_IP_SCTP_MODULE)
130 struct netns_sctp sctp;
131#endif
Alexey Dobriyan8d870052008-01-31 04:02:13 -0800132#ifdef CONFIG_NETFILTER
Gao fengf3c1a442013-03-24 23:50:39 +0000133 struct netns_nf nf;
Alexey Dobriyan8d870052008-01-31 04:02:13 -0800134 struct netns_xt xt;
Alexey Dobriyandfdb8d72008-10-08 11:35:02 +0200135#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
136 struct netns_ct ct;
137#endif
Pablo Neira Ayuso99633ab2013-10-10 23:28:33 +0200138#if defined(CONFIG_NF_TABLES) || defined(CONFIG_NF_TABLES_MODULE)
139 struct netns_nftables nft;
140#endif
Alexey Dobriyan8d870052008-01-31 04:02:13 -0800141#endif
Johannes Berg3d23e342009-09-29 23:27:28 +0200142#ifdef CONFIG_WEXT_CORE
Johannes Bergb333b3d222009-06-24 01:34:48 +0000143 struct sk_buff_head wext_nlevents;
144#endif
Eric Dumazet1c877332010-10-25 03:20:11 +0000145 struct net_generic __rcu *gen;
Eric Dumazet8e602ce2010-10-14 05:56:18 +0000146
Jakub Sitnickia3fd7ce2020-05-31 10:28:36 +0200147 /* Used to store attached BPF programs */
148 struct netns_bpf bpf;
Petar Penkovd58e4682018-09-14 07:46:18 -0700149
Eric Dumazet8e602ce2010-10-14 05:56:18 +0000150 /* Note : following structs are cache line aligned */
151#ifdef CONFIG_XFRM
152 struct netns_xfrm xfrm;
153#endif
Daniel Borkmannf3189032020-03-27 16:58:52 +0100154
Eric Dumazet3d368ab2021-02-10 06:41:44 -0800155 u64 net_cookie; /* written once */
Daniel Borkmannf3189032020-03-27 16:58:52 +0100156
JunweiZhang8b4d14d2013-06-26 16:40:06 +0800157#if IS_ENABLED(CONFIG_IP_VS)
Hans Schillstrom61b1ab42011-01-03 14:44:42 +0100158 struct netns_ipvs *ipvs;
JunweiZhang8b4d14d2013-06-26 16:40:06 +0800159#endif
Eric W. Biederman01891972015-03-03 19:10:47 -0600160#if IS_ENABLED(CONFIG_MPLS)
161 struct netns_mpls mpls;
162#endif
Mario Kicherer8e8cda62017-02-21 12:19:47 +0100163#if IS_ENABLED(CONFIG_CAN)
164 struct netns_can can;
165#endif
Björn Töpel1d0dc062019-01-24 19:59:37 +0100166#ifdef CONFIG_XDP_SOCKETS
167 struct netns_xdp xdp;
168#endif
Ondrej Mosnacek91b05a72019-07-09 13:11:24 +0200169#if IS_ENABLED(CONFIG_CRYPTO_USER)
170 struct sock *crypto_nlsk;
171#endif
Andrey Vagin51d7ccc2012-07-16 04:28:49 +0000172 struct sock *diag_nlsk;
Kees Cook3859a272016-10-28 01:22:25 -0700173} __randomize_layout;
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200174
Denis V. Lunevc0f39322008-04-02 00:10:28 -0700175#include <linux/seq_file_net.h>
176
Daniel Lezcano4fabcd72007-09-13 09:16:29 +0200177/* Init's network namespace */
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200178extern struct net init_net;
Denis V. Luneva4aa8342008-04-03 13:04:33 -0700179
Eric W. Biedermand727abc2012-06-14 02:16:42 -0700180#ifdef CONFIG_NET_NS
Joe Perchese67e16e2013-09-21 10:22:48 -0700181struct net *copy_net_ns(unsigned long flags, struct user_namespace *user_ns,
182 struct net *old_net);
Denis V. Lunev225c0a02008-04-02 00:09:29 -0700183
Tyler Hicksfbdeaed2018-07-20 21:56:53 +0000184void net_ns_get_ownership(const struct net *net, kuid_t *uid, kgid_t *gid);
185
Florian Westphal7866cc52017-05-30 11:38:12 +0200186void net_ns_barrier(void);
Eric W. Biedermand727abc2012-06-14 02:16:42 -0700187#else /* CONFIG_NET_NS */
188#include <linux/sched.h>
189#include <linux/nsproxy.h>
Eric W. Biederman038e7332012-06-14 02:31:10 -0700190static inline struct net *copy_net_ns(unsigned long flags,
191 struct user_namespace *user_ns, struct net *old_net)
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700192{
Eric W. Biedermand727abc2012-06-14 02:16:42 -0700193 if (flags & CLONE_NEWNET)
194 return ERR_PTR(-EINVAL);
195 return old_net;
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700196}
Florian Westphal7866cc52017-05-30 11:38:12 +0200197
Tyler Hicksfbdeaed2018-07-20 21:56:53 +0000198static inline void net_ns_get_ownership(const struct net *net,
199 kuid_t *uid, kgid_t *gid)
200{
201 *uid = GLOBAL_ROOT_UID;
202 *gid = GLOBAL_ROOT_GID;
203}
204
Florian Westphal7866cc52017-05-30 11:38:12 +0200205static inline void net_ns_barrier(void) {}
Eric W. Biedermand727abc2012-06-14 02:16:42 -0700206#endif /* CONFIG_NET_NS */
Denis V. Lunev225c0a02008-04-02 00:09:29 -0700207
208
209extern struct list_head net_namespace_list;
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700210
Joe Perchese67e16e2013-09-21 10:22:48 -0700211struct net *get_net_ns_by_pid(pid_t pid);
Stefan Hajnoczi0f5258c2016-11-18 09:41:46 +0000212struct net *get_net_ns_by_fd(int fd);
Johannes Berg30ffee82009-07-10 09:51:35 +0000213
Rashika Kheria535d3ae2014-02-09 22:29:14 +0530214#ifdef CONFIG_SYSCTL
215void ipx_register_sysctl(void);
216void ipx_unregister_sysctl(void);
217#else
218#define ipx_register_sysctl()
219#define ipx_unregister_sysctl()
220#endif
221
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700222#ifdef CONFIG_NET_NS
Joe Perchese67e16e2013-09-21 10:22:48 -0700223void __put_net(struct net *net);
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200224
225static inline struct net *get_net(struct net *net)
226{
Christian Brauner8b8f3e62020-08-19 14:06:36 +0200227 refcount_inc(&net->ns.count);
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200228 return net;
229}
230
Eric W. Biederman077130c2007-09-13 09:18:57 +0200231static inline struct net *maybe_get_net(struct net *net)
232{
233 /* Used when we know struct net exists but we
234 * aren't guaranteed a previous reference count
235 * exists. If the reference count is zero this
236 * function fails and returns NULL.
237 */
Christian Brauner8b8f3e62020-08-19 14:06:36 +0200238 if (!refcount_inc_not_zero(&net->ns.count))
Eric W. Biederman077130c2007-09-13 09:18:57 +0200239 net = NULL;
240 return net;
241}
242
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200243static inline void put_net(struct net *net)
244{
Christian Brauner8b8f3e62020-08-19 14:06:36 +0200245 if (refcount_dec_and_test(&net->ns.count))
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200246 __put_net(net);
247}
248
YOSHIFUJI Hideaki878628f2008-03-26 03:57:35 +0900249static inline
250int net_eq(const struct net *net1, const struct net *net2)
251{
252 return net1 == net2;
253}
Al Viroa685e082011-06-08 21:13:01 -0400254
Dan Streetman4ee806d2018-01-18 16:14:26 -0500255static inline int check_net(const struct net *net)
256{
Christian Brauner8b8f3e62020-08-19 14:06:36 +0200257 return refcount_read(&net->ns.count) != 0;
Dan Streetman4ee806d2018-01-18 16:14:26 -0500258}
259
Joe Perchese67e16e2013-09-21 10:22:48 -0700260void net_drop_ns(void *);
Al Viroa685e082011-06-08 21:13:01 -0400261
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700262#else
Eric W. Biedermanb9f75f42008-06-20 22:16:51 -0700263
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700264static inline struct net *get_net(struct net *net)
265{
266 return net;
267}
268
269static inline void put_net(struct net *net)
270{
271}
272
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700273static inline struct net *maybe_get_net(struct net *net)
274{
275 return net;
276}
YOSHIFUJI Hideaki878628f2008-03-26 03:57:35 +0900277
278static inline
279int net_eq(const struct net *net1, const struct net *net2)
280{
281 return 1;
282}
Al Viroa685e082011-06-08 21:13:01 -0400283
Dan Streetman4ee806d2018-01-18 16:14:26 -0500284static inline int check_net(const struct net *net)
285{
286 return 1;
287}
288
Al Viroa685e082011-06-08 21:13:01 -0400289#define net_drop_ns NULL
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700290#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200291
Denis V. Lunev5d1e4462008-04-16 01:58:04 -0700292
Eric W. Biederman0c5c9fb2015-03-11 23:06:44 -0500293typedef struct {
Eric Dumazet8f424b52008-11-12 00:53:30 -0800294#ifdef CONFIG_NET_NS
Eric W. Biederman0c5c9fb2015-03-11 23:06:44 -0500295 struct net *net;
Eric Dumazet8f424b52008-11-12 00:53:30 -0800296#endif
Eric W. Biederman0c5c9fb2015-03-11 23:06:44 -0500297} possible_net_t;
298
299static inline void write_pnet(possible_net_t *pnet, struct net *net)
300{
301#ifdef CONFIG_NET_NS
302 pnet->net = net;
303#endif
304}
305
306static inline struct net *read_pnet(const possible_net_t *pnet)
307{
308#ifdef CONFIG_NET_NS
309 return pnet->net;
310#else
311 return &init_net;
312#endif
313}
Denis V. Lunev5d1e4462008-04-16 01:58:04 -0700314
Kirill Tkhaif0b07bb12018-03-29 19:20:32 +0300315/* Protected by net_rwsem */
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200316#define for_each_net(VAR) \
317 list_for_each_entry(VAR, &net_namespace_list, list)
Jiri Pirkoafa0df52019-09-30 10:15:09 +0200318#define for_each_net_continue_reverse(VAR) \
319 list_for_each_entry_continue_reverse(VAR, &net_namespace_list, list)
Johannes Berg11a28d32009-07-10 09:51:33 +0000320#define for_each_net_rcu(VAR) \
321 list_for_each_entry_rcu(VAR, &net_namespace_list, list)
322
Pavel Emelyanov46650792007-10-08 20:38:39 -0700323#ifdef CONFIG_NET_NS
324#define __net_init
325#define __net_exit
Denis V. Lunev022cbae2007-11-13 03:23:50 -0800326#define __net_initdata
Andi Kleen04a6f822012-10-04 17:12:11 -0700327#define __net_initconst
Pavel Emelyanov46650792007-10-08 20:38:39 -0700328#else
329#define __net_init __init
Fabian Frederickbd721ea2016-08-02 14:03:33 -0700330#define __net_exit __ref
Denis V. Lunev022cbae2007-11-13 03:23:50 -0800331#define __net_initdata __initdata
Andi Kleen04a6f822012-10-04 17:12:11 -0700332#define __net_initconst __initconst
Pavel Emelyanov46650792007-10-08 20:38:39 -0700333#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200334
Guillaume Naultd4e4fdf2019-10-23 18:39:04 +0200335int peernet2id_alloc(struct net *net, struct net *peer, gfp_t gfp);
Guillaume Nault56f200c2020-01-16 21:16:46 +0100336int peernet2id(const struct net *net, struct net *peer);
337bool peernet_has_id(const struct net *net, struct net *peer);
338struct net *get_net_ns_by_id(const struct net *net, int id);
Nicolas Dichtel0c7aecd2015-01-15 15:11:15 +0100339
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200340struct pernet_operations {
341 struct list_head list;
Kirill Tkhai6056415d2018-03-13 13:55:55 +0300342 /*
343 * Below methods are called without any exclusive locks.
344 * More than one net may be constructed and destructed
345 * in parallel on several cpus. Every pernet_operations
346 * have to keep in mind all other pernet_operations and
347 * to introduce a locking, if they share common resources.
348 *
Kirill Tkhai8518e9b2018-03-27 18:02:32 +0300349 * The only time they are called with exclusive lock is
350 * from register_pernet_subsys(), unregister_pernet_subsys()
351 * register_pernet_device() and unregister_pernet_device().
352 *
Kirill Tkhai6056415d2018-03-13 13:55:55 +0300353 * Exit methods using blocking RCU primitives, such as
354 * synchronize_rcu(), should be implemented via exit_batch.
355 * Then, destruction of a group of net requires single
356 * synchronize_rcu() related to these pernet_operations,
357 * instead of separate synchronize_rcu() for every net.
358 * Please, avoid synchronize_rcu() at all, where it's possible.
Eric Dumazetd7d99872019-06-18 11:08:59 -0700359 *
360 * Note that a combination of pre_exit() and exit() can
361 * be used, since a synchronize_rcu() is guaranteed between
362 * the calls.
Kirill Tkhai6056415d2018-03-13 13:55:55 +0300363 */
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200364 int (*init)(struct net *net);
Eric Dumazetd7d99872019-06-18 11:08:59 -0700365 void (*pre_exit)(struct net *net);
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200366 void (*exit)(struct net *net);
Eric W. Biederman72ad9372009-12-03 02:29:03 +0000367 void (*exit_batch)(struct list_head *net_exit_list);
Alexey Dobriyanc7d03a02016-11-17 04:58:21 +0300368 unsigned int *id;
Eric W. Biedermanf875bae2009-11-29 22:25:28 +0000369 size_t size;
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200370};
371
Eric W. Biederman17edde52009-02-22 00:11:09 -0800372/*
373 * Use these carefully. If you implement a network device and it
374 * needs per network namespace operations use device pernet operations,
375 * otherwise use pernet subsys operations.
376 *
Johannes Berg4edf5472009-07-15 06:16:34 +0000377 * Network interfaces need to be removed from a dying netns _before_
378 * subsys notifiers can be called, as most of the network code cleanup
379 * (which is done from subsys notifiers) runs with the assumption that
380 * dev_remove_pack has been called so no new packets will arrive during
381 * and after the cleanup functions have been called. dev_remove_pack
382 * is not per namespace so instead the guarantee of no more packets
383 * arriving in a network namespace is provided by ensuring that all
384 * network devices and all sockets have left the network namespace
385 * before the cleanup methods are called.
Eric W. Biederman17edde52009-02-22 00:11:09 -0800386 *
387 * For the longest time the ipv4 icmp code was registered as a pernet
388 * device which caused kernel oops, and panics during network
389 * namespace cleanup. So please don't get this wrong.
390 */
Joe Perchese67e16e2013-09-21 10:22:48 -0700391int register_pernet_subsys(struct pernet_operations *);
392void unregister_pernet_subsys(struct pernet_operations *);
393int register_pernet_device(struct pernet_operations *);
394void unregister_pernet_device(struct pernet_operations *);
Eric W. Biedermanf875bae2009-11-29 22:25:28 +0000395
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100396struct ctl_table;
Pavel Emelyanovd62c6122008-05-19 13:45:33 -0700397
Eric W. Biederman2ca794e2012-04-19 13:20:32 +0000398#ifdef CONFIG_SYSCTL
Joe Perchese67e16e2013-09-21 10:22:48 -0700399int net_sysctl_init(void);
400struct ctl_table_header *register_net_sysctl(struct net *net, const char *path,
401 struct ctl_table *table);
402void unregister_net_sysctl_table(struct ctl_table_header *header);
Eric W. Biederman48c74952012-04-23 12:13:02 +0000403#else
404static inline int net_sysctl_init(void) { return 0; }
405static inline struct ctl_table_header *register_net_sysctl(struct net *net,
406 const char *path, struct ctl_table *table)
407{
408 return NULL;
409}
410static inline void unregister_net_sysctl_table(struct ctl_table_header *header)
411{
412}
413#endif
414
Guillaume Nault56f200c2020-01-16 21:16:46 +0100415static inline int rt_genid_ipv4(const struct net *net)
Nicolas Dichtelb42664f2012-09-10 22:09:44 +0000416{
fan.duca4c3fc2013-07-30 08:33:53 +0800417 return atomic_read(&net->ipv4.rt_genid);
Nicolas Dichtelb42664f2012-09-10 22:09:44 +0000418}
419
David Ahern8f34e532020-05-01 08:53:08 -0600420#if IS_ENABLED(CONFIG_IPV6)
421static inline int rt_genid_ipv6(const struct net *net)
422{
423 return atomic_read(&net->ipv6.fib6_sernum);
424}
425#endif
426
fan.duca4c3fc2013-07-30 08:33:53 +0800427static inline void rt_genid_bump_ipv4(struct net *net)
Nicolas Dichtelb42664f2012-09-10 22:09:44 +0000428{
fan.duca4c3fc2013-07-30 08:33:53 +0800429 atomic_inc(&net->ipv4.rt_genid);
430}
431
Hannes Frederic Sowa705f1c82014-09-28 00:46:06 +0200432extern void (*__fib6_flush_trees)(struct net *net);
fan.duca4c3fc2013-07-30 08:33:53 +0800433static inline void rt_genid_bump_ipv6(struct net *net)
434{
Hannes Frederic Sowa705f1c82014-09-28 00:46:06 +0200435 if (__fib6_flush_trees)
436 __fib6_flush_trees(net);
fan.duca4c3fc2013-07-30 08:33:53 +0800437}
fan.duca4c3fc2013-07-30 08:33:53 +0800438
Luis R. Rodriguez599018a2014-04-17 18:22:54 -0700439#if IS_ENABLED(CONFIG_IEEE802154_6LOWPAN)
440static inline struct netns_ieee802154_lowpan *
441net_ieee802154_lowpan(struct net *net)
442{
443 return &net->ieee802154_lowpan;
444}
Luis R. Rodriguez599018a2014-04-17 18:22:54 -0700445#endif
446
fan.duca4c3fc2013-07-30 08:33:53 +0800447/* For callers who don't really care about whether it's IPv4 or IPv6 */
448static inline void rt_genid_bump_all(struct net *net)
449{
450 rt_genid_bump_ipv4(net);
451 rt_genid_bump_ipv6(net);
Nicolas Dichtelb42664f2012-09-10 22:09:44 +0000452}
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100453
Guillaume Nault56f200c2020-01-16 21:16:46 +0100454static inline int fnhe_genid(const struct net *net)
Timo Teräs5aad1de2013-05-27 20:46:33 +0000455{
456 return atomic_read(&net->fnhe_genid);
457}
458
459static inline void fnhe_genid_bump(struct net *net)
460{
461 atomic_inc(&net->fnhe_genid);
462}
463
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200464#endif /* __NET_NET_NAMESPACE_H */