blob: 3173d12d946b2323b0c577e9db4df32f4b4cca9d [file] [log] [blame]
Eric W. Biederman5f256be2007-09-12 11:50:50 +02001/*
2 * Operations on the network namespace
3 */
4#ifndef __NET_NET_NAMESPACE_H
5#define __NET_NET_NAMESPACE_H
6
7#include <asm/atomic.h>
8#include <linux/workqueue.h>
9#include <linux/list.h>
10
Pavel Emelyanov8efa6e92008-03-31 19:41:14 -070011#include <net/netns/core.h>
Pavel Emelyanov852566f2008-07-18 04:01:24 -070012#include <net/netns/mib.h>
Denis V. Luneva0a53c82007-12-11 04:19:17 -080013#include <net/netns/unix.h>
Denis V. Lunev2aaef4e2007-12-11 04:19:54 -080014#include <net/netns/packet.h>
Pavel Emelyanov8afd3512007-12-16 13:29:36 -080015#include <net/netns/ipv4.h>
Daniel Lezcanob0f159d2008-01-10 02:49:06 -080016#include <net/netns/ipv6.h>
Pavel Emelyanov67019cc2008-04-13 22:28:42 -070017#include <net/netns/dccp.h>
Alexey Dobriyan8d870052008-01-31 04:02:13 -080018#include <net/netns/x_tables.h>
Alexey Dobriyandfdb8d72008-10-08 11:35:02 +020019#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
20#include <net/netns/conntrack.h>
21#endif
Alexey Dobriyand62ddc22008-11-25 17:14:31 -080022#include <net/netns/xfrm.h>
Denis V. Luneva0a53c82007-12-11 04:19:17 -080023
Eric W. Biederman457c4cb2007-09-12 12:01:34 +020024struct proc_dir_entry;
Eric W. Biederman2774c7a2007-09-26 22:10:56 -070025struct net_device;
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080026struct sock;
Pavel Emelyanov1597fbc2007-12-01 23:51:01 +110027struct ctl_table_header;
Pavel Emelyanovdec827d2008-04-15 00:36:08 -070028struct net_generic;
Johannes Berg134e6372009-07-10 09:51:34 +000029struct sock;
Pavel Emelyanov1597fbc2007-12-01 23:51:01 +110030
Eric W. Biederman5f256be2007-09-12 11:50:50 +020031struct net {
32 atomic_t count; /* To decided when the network
33 * namespace should be freed.
34 */
Denis V. Lunev5d1e4462008-04-16 01:58:04 -070035#ifdef NETNS_REFCNT_DEBUG
Eric W. Biederman5f256be2007-09-12 11:50:50 +020036 atomic_t use_count; /* To track references we
37 * destroy on demand
38 */
Denis V. Lunev5d1e4462008-04-16 01:58:04 -070039#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +020040 struct list_head list; /* list of network namespaces */
41 struct work_struct work; /* work struct for freeing */
Eric W. Biederman457c4cb2007-09-12 12:01:34 +020042
43 struct proc_dir_entry *proc_net;
44 struct proc_dir_entry *proc_net_stat;
Eric W. Biederman881d9662007-09-17 11:56:21 -070045
Al Viro73455092008-07-14 21:22:20 -040046#ifdef CONFIG_SYSCTL
47 struct ctl_table_set sysctls;
48#endif
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +110049
Eric W. Biederman2774c7a2007-09-26 22:10:56 -070050 struct net_device *loopback_dev; /* The loopback */
51
Eric W. Biederman881d9662007-09-17 11:56:21 -070052 struct list_head dev_base_head;
53 struct hlist_head *dev_name_head;
54 struct hlist_head *dev_index_head;
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080055
Denis V. Lunev5fd30ee2008-01-10 03:20:28 -080056 /* core fib_rules */
57 struct list_head rules_ops;
58 spinlock_t rules_mod_lock;
59
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080060 struct sock *rtnl; /* rtnetlink socket */
Johannes Berg134e6372009-07-10 09:51:34 +000061 struct sock *genl_sock;
Denis V. Lunevd12d01d2007-11-19 22:28:35 -080062
Pavel Emelyanov8efa6e92008-03-31 19:41:14 -070063 struct netns_core core;
Pavel Emelyanov852566f2008-07-18 04:01:24 -070064 struct netns_mib mib;
Denis V. Lunev2aaef4e2007-12-11 04:19:54 -080065 struct netns_packet packet;
Denis V. Luneva0a53c82007-12-11 04:19:17 -080066 struct netns_unix unx;
Pavel Emelyanov8afd3512007-12-16 13:29:36 -080067 struct netns_ipv4 ipv4;
Daniel Lezcanob0f159d2008-01-10 02:49:06 -080068#if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
69 struct netns_ipv6 ipv6;
70#endif
Pavel Emelyanov67019cc2008-04-13 22:28:42 -070071#if defined(CONFIG_IP_DCCP) || defined(CONFIG_IP_DCCP_MODULE)
72 struct netns_dccp dccp;
73#endif
Alexey Dobriyan8d870052008-01-31 04:02:13 -080074#ifdef CONFIG_NETFILTER
75 struct netns_xt xt;
Alexey Dobriyandfdb8d72008-10-08 11:35:02 +020076#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
77 struct netns_ct ct;
78#endif
Alexey Dobriyan8d870052008-01-31 04:02:13 -080079#endif
Alexey Dobriyand62ddc22008-11-25 17:14:31 -080080#ifdef CONFIG_XFRM
81 struct netns_xfrm xfrm;
82#endif
Pavel Emelyanovdec827d2008-04-15 00:36:08 -070083 struct net_generic *gen;
Eric W. Biederman5f256be2007-09-12 11:50:50 +020084};
85
Denis V. Lunev225c0a02008-04-02 00:09:29 -070086
Denis V. Lunevc0f39322008-04-02 00:10:28 -070087#include <linux/seq_file_net.h>
88
Daniel Lezcano4fabcd72007-09-13 09:16:29 +020089/* Init's network namespace */
Eric W. Biederman5f256be2007-09-12 11:50:50 +020090extern struct net init_net;
Denis V. Luneva4aa8342008-04-03 13:04:33 -070091
92#ifdef CONFIG_NET
Daniel Lezcano4fabcd72007-09-13 09:16:29 +020093#define INIT_NET_NS(net_ns) .net_ns = &init_net,
Daniel Lezcano4fabcd72007-09-13 09:16:29 +020094
Eric W. Biederman9dd776b2007-09-26 22:04:26 -070095extern struct net *copy_net_ns(unsigned long flags, struct net *net_ns);
Denis V. Lunev225c0a02008-04-02 00:09:29 -070096
97#else /* CONFIG_NET */
98
99#define INIT_NET_NS(net_ns)
100
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700101static inline struct net *copy_net_ns(unsigned long flags, struct net *net_ns)
102{
103 /* There is nothing to copy so this is a noop */
104 return net_ns;
105}
Denis V. Lunev225c0a02008-04-02 00:09:29 -0700106#endif /* CONFIG_NET */
107
108
109extern struct list_head net_namespace_list;
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700110
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700111#ifdef CONFIG_NET_NS
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200112extern void __put_net(struct net *net);
113
114static inline struct net *get_net(struct net *net)
115{
116 atomic_inc(&net->count);
117 return net;
118}
119
Eric W. Biederman077130c2007-09-13 09:18:57 +0200120static inline struct net *maybe_get_net(struct net *net)
121{
122 /* Used when we know struct net exists but we
123 * aren't guaranteed a previous reference count
124 * exists. If the reference count is zero this
125 * function fails and returns NULL.
126 */
127 if (!atomic_inc_not_zero(&net->count))
128 net = NULL;
129 return net;
130}
131
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200132static inline void put_net(struct net *net)
133{
134 if (atomic_dec_and_test(&net->count))
135 __put_net(net);
136}
137
YOSHIFUJI Hideaki878628f2008-03-26 03:57:35 +0900138static inline
139int net_eq(const struct net *net1, const struct net *net2)
140{
141 return net1 == net2;
142}
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700143#else
Eric W. Biedermanb9f75f42008-06-20 22:16:51 -0700144
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700145static inline struct net *get_net(struct net *net)
146{
147 return net;
148}
149
150static inline void put_net(struct net *net)
151{
152}
153
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700154static inline struct net *maybe_get_net(struct net *net)
155{
156 return net;
157}
YOSHIFUJI Hideaki878628f2008-03-26 03:57:35 +0900158
159static inline
160int net_eq(const struct net *net1, const struct net *net2)
161{
162 return 1;
163}
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700164#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200165
Denis V. Lunev5d1e4462008-04-16 01:58:04 -0700166
167#ifdef NETNS_REFCNT_DEBUG
168static inline struct net *hold_net(struct net *net)
169{
170 if (net)
171 atomic_inc(&net->use_count);
172 return net;
173}
174
175static inline void release_net(struct net *net)
176{
177 if (net)
178 atomic_dec(&net->use_count);
179}
180#else
181static inline struct net *hold_net(struct net *net)
182{
183 return net;
184}
185
186static inline void release_net(struct net *net)
187{
188}
189#endif
190
Eric Dumazet8f424b52008-11-12 00:53:30 -0800191#ifdef CONFIG_NET_NS
192
193static inline void write_pnet(struct net **pnet, struct net *net)
194{
195 *pnet = net;
196}
197
198static inline struct net *read_pnet(struct net * const *pnet)
199{
200 return *pnet;
201}
202
203#else
204
205#define write_pnet(pnet, net) do { (void)(net);} while (0)
206#define read_pnet(pnet) (&init_net)
207
208#endif
Denis V. Lunev5d1e4462008-04-16 01:58:04 -0700209
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200210#define for_each_net(VAR) \
211 list_for_each_entry(VAR, &net_namespace_list, list)
212
Johannes Berg11a28d32009-07-10 09:51:33 +0000213#define for_each_net_rcu(VAR) \
214 list_for_each_entry_rcu(VAR, &net_namespace_list, list)
215
Pavel Emelyanov46650792007-10-08 20:38:39 -0700216#ifdef CONFIG_NET_NS
217#define __net_init
218#define __net_exit
Denis V. Lunev022cbae2007-11-13 03:23:50 -0800219#define __net_initdata
Pavel Emelyanov46650792007-10-08 20:38:39 -0700220#else
221#define __net_init __init
222#define __net_exit __exit_refok
Denis V. Lunev022cbae2007-11-13 03:23:50 -0800223#define __net_initdata __initdata
Pavel Emelyanov46650792007-10-08 20:38:39 -0700224#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200225
226struct pernet_operations {
227 struct list_head list;
228 int (*init)(struct net *net);
229 void (*exit)(struct net *net);
230};
231
Eric W. Biederman17edde52009-02-22 00:11:09 -0800232/*
233 * Use these carefully. If you implement a network device and it
234 * needs per network namespace operations use device pernet operations,
235 * otherwise use pernet subsys operations.
236 *
237 * This is critically important. Most of the network code cleanup
238 * runs with the assumption that dev_remove_pack has been called so no
239 * new packets will arrive during and after the cleanup functions have
240 * been called. dev_remove_pack is not per namespace so instead the
241 * guarantee of no more packets arriving in a network namespace is
242 * provided by ensuring that all network devices and all sockets have
243 * left the network namespace before the cleanup methods are called.
244 *
245 * For the longest time the ipv4 icmp code was registered as a pernet
246 * device which caused kernel oops, and panics during network
247 * namespace cleanup. So please don't get this wrong.
248 */
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200249extern int register_pernet_subsys(struct pernet_operations *);
250extern void unregister_pernet_subsys(struct pernet_operations *);
Alexey Dobriyan485ac572008-10-30 23:55:16 -0700251extern int register_pernet_gen_subsys(int *id, struct pernet_operations *);
252extern void unregister_pernet_gen_subsys(int id, struct pernet_operations *);
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200253extern int register_pernet_device(struct pernet_operations *);
254extern void unregister_pernet_device(struct pernet_operations *);
Pavel Emelyanovc93cf612008-04-15 00:35:23 -0700255extern int register_pernet_gen_device(int *id, struct pernet_operations *);
256extern void unregister_pernet_gen_device(int id, struct pernet_operations *);
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200257
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100258struct ctl_path;
259struct ctl_table;
260struct ctl_table_header;
Pavel Emelyanovd62c6122008-05-19 13:45:33 -0700261
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100262extern struct ctl_table_header *register_net_sysctl_table(struct net *net,
263 const struct ctl_path *path, struct ctl_table *table);
Pavel Emelyanovd62c6122008-05-19 13:45:33 -0700264extern struct ctl_table_header *register_net_sysctl_rotable(
265 const struct ctl_path *path, struct ctl_table *table);
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100266extern void unregister_net_sysctl_table(struct ctl_table_header *header);
267
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200268#endif /* __NET_NET_NAMESPACE_H */