Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* -*- linux-c -*- |
| 2 | * sysctl_net_core.c: sysctl interface to net core subsystem. |
| 3 | * |
| 4 | * Begun April 1, 1996, Mike Shaver. |
| 5 | * Added /proc/sys/net/core directory entry (empty =) ). [MS] |
| 6 | */ |
| 7 | |
| 8 | #include <linux/mm.h> |
| 9 | #include <linux/sysctl.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 10 | #include <linux/module.h> |
Arnaldo Carvalho de Melo | 2038073 | 2005-08-16 02:18:02 -0300 | [diff] [blame] | 11 | #include <linux/socket.h> |
Pavel Emelyanov | a37ae40 | 2007-10-23 21:13:53 -0700 | [diff] [blame] | 12 | #include <linux/netdevice.h> |
Ingo Molnar | 3fff4c4 | 2009-09-22 16:18:09 +0200 | [diff] [blame] | 13 | #include <linux/ratelimit.h> |
Tom Herbert | fec5e65 | 2010-04-16 16:01:27 -0700 | [diff] [blame] | 14 | #include <linux/vmalloc.h> |
Pavel Emelyanov | 33eb9cf | 2007-12-05 01:37:34 -0800 | [diff] [blame] | 15 | #include <linux/init.h> |
Tejun Heo | 5a0e3ad | 2010-03-24 17:04:11 +0900 | [diff] [blame] | 16 | #include <linux/slab.h> |
Shan Wei | 7426a56 | 2012-04-18 18:05:46 +0000 | [diff] [blame] | 17 | #include <linux/kmemleak.h> |
Ingo Molnar | 3fff4c4 | 2009-09-22 16:18:09 +0200 | [diff] [blame] | 18 | |
Hannes Eder | 63d819c | 2009-02-25 10:32:14 +0000 | [diff] [blame] | 19 | #include <net/ip.h> |
Arnaldo Carvalho de Melo | 2038073 | 2005-08-16 02:18:02 -0300 | [diff] [blame] | 20 | #include <net/sock.h> |
David S. Miller | c5c177b | 2011-05-27 13:41:33 -0400 | [diff] [blame] | 21 | #include <net/net_ratelimit.h> |
Eliezer Tamir | 076bb0c | 2013-07-10 17:13:17 +0300 | [diff] [blame] | 22 | #include <net/busy_poll.h> |
stephen hemminger | 6da7c8f | 2013-08-27 16:19:08 -0700 | [diff] [blame] | 23 | #include <net/pkt_sched.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 24 | |
Roman Gushchin | 5f671d6 | 2013-08-02 18:36:40 +0400 | [diff] [blame] | 25 | static int zero = 0; |
bingtian.ly@taobao.com | cdda889 | 2013-01-23 20:35:28 +0000 | [diff] [blame] | 26 | static int one = 1; |
Alexey Kodanev | b1cb59c | 2015-03-11 14:29:17 +0300 | [diff] [blame] | 27 | static int min_sndbuf = SOCK_MIN_SNDBUF; |
| 28 | static int min_rcvbuf = SOCK_MIN_RCVBUF; |
Hans Westgaard Ry | 5f74f82 | 2016-02-03 09:26:57 +0100 | [diff] [blame] | 29 | static int max_skb_frags = MAX_SKB_FRAGS; |
bingtian.ly@taobao.com | cdda889 | 2013-01-23 20:35:28 +0000 | [diff] [blame] | 30 | |
Joe Perches | ba7a46f | 2014-11-11 10:59:17 -0800 | [diff] [blame] | 31 | static int net_msg_warn; /* Unused, but still a sysctl */ |
| 32 | |
Tom Herbert | fec5e65 | 2010-04-16 16:01:27 -0700 | [diff] [blame] | 33 | #ifdef CONFIG_RPS |
Joe Perches | fe2c633 | 2013-06-11 23:04:25 -0700 | [diff] [blame] | 34 | static int rps_sock_flow_sysctl(struct ctl_table *table, int write, |
Tom Herbert | fec5e65 | 2010-04-16 16:01:27 -0700 | [diff] [blame] | 35 | void __user *buffer, size_t *lenp, loff_t *ppos) |
| 36 | { |
| 37 | unsigned int orig_size, size; |
| 38 | int ret, i; |
Joe Perches | fe2c633 | 2013-06-11 23:04:25 -0700 | [diff] [blame] | 39 | struct ctl_table tmp = { |
Tom Herbert | fec5e65 | 2010-04-16 16:01:27 -0700 | [diff] [blame] | 40 | .data = &size, |
| 41 | .maxlen = sizeof(size), |
| 42 | .mode = table->mode |
| 43 | }; |
| 44 | struct rps_sock_flow_table *orig_sock_table, *sock_table; |
| 45 | static DEFINE_MUTEX(sock_flow_mutex); |
| 46 | |
| 47 | mutex_lock(&sock_flow_mutex); |
| 48 | |
Eric Dumazet | 6e3f7fa | 2010-10-25 03:02:02 +0000 | [diff] [blame] | 49 | orig_sock_table = rcu_dereference_protected(rps_sock_flow_table, |
| 50 | lockdep_is_held(&sock_flow_mutex)); |
Tom Herbert | fec5e65 | 2010-04-16 16:01:27 -0700 | [diff] [blame] | 51 | size = orig_size = orig_sock_table ? orig_sock_table->mask + 1 : 0; |
| 52 | |
| 53 | ret = proc_dointvec(&tmp, write, buffer, lenp, ppos); |
| 54 | |
| 55 | if (write) { |
| 56 | if (size) { |
Eric Dumazet | 93c1af6 | 2015-02-08 20:39:13 -0800 | [diff] [blame] | 57 | if (size > 1<<29) { |
Tom Herbert | fec5e65 | 2010-04-16 16:01:27 -0700 | [diff] [blame] | 58 | /* Enforce limit to prevent overflow */ |
| 59 | mutex_unlock(&sock_flow_mutex); |
| 60 | return -EINVAL; |
| 61 | } |
| 62 | size = roundup_pow_of_two(size); |
| 63 | if (size != orig_size) { |
| 64 | sock_table = |
| 65 | vmalloc(RPS_SOCK_FLOW_TABLE_SIZE(size)); |
| 66 | if (!sock_table) { |
| 67 | mutex_unlock(&sock_flow_mutex); |
| 68 | return -ENOMEM; |
| 69 | } |
Eric Dumazet | 567e4b7 | 2015-02-06 12:59:01 -0800 | [diff] [blame] | 70 | rps_cpu_mask = roundup_pow_of_two(nr_cpu_ids) - 1; |
Tom Herbert | fec5e65 | 2010-04-16 16:01:27 -0700 | [diff] [blame] | 71 | sock_table->mask = size - 1; |
| 72 | } else |
| 73 | sock_table = orig_sock_table; |
| 74 | |
| 75 | for (i = 0; i < size; i++) |
| 76 | sock_table->ents[i] = RPS_NO_CPU; |
| 77 | } else |
| 78 | sock_table = NULL; |
| 79 | |
| 80 | if (sock_table != orig_sock_table) { |
| 81 | rcu_assign_pointer(rps_sock_flow_table, sock_table); |
Eric Dumazet | adc9300 | 2011-11-17 03:13:26 +0000 | [diff] [blame] | 82 | if (sock_table) |
Ingo Molnar | c5905af | 2012-02-24 08:31:31 +0100 | [diff] [blame] | 83 | static_key_slow_inc(&rps_needed); |
Eric Dumazet | adc9300 | 2011-11-17 03:13:26 +0000 | [diff] [blame] | 84 | if (orig_sock_table) { |
Ingo Molnar | c5905af | 2012-02-24 08:31:31 +0100 | [diff] [blame] | 85 | static_key_slow_dec(&rps_needed); |
Eric Dumazet | adc9300 | 2011-11-17 03:13:26 +0000 | [diff] [blame] | 86 | synchronize_rcu(); |
| 87 | vfree(orig_sock_table); |
| 88 | } |
Tom Herbert | fec5e65 | 2010-04-16 16:01:27 -0700 | [diff] [blame] | 89 | } |
| 90 | } |
| 91 | |
| 92 | mutex_unlock(&sock_flow_mutex); |
| 93 | |
| 94 | return ret; |
| 95 | } |
| 96 | #endif /* CONFIG_RPS */ |
| 97 | |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 98 | #ifdef CONFIG_NET_FLOW_LIMIT |
| 99 | static DEFINE_MUTEX(flow_limit_update_mutex); |
| 100 | |
Joe Perches | fe2c633 | 2013-06-11 23:04:25 -0700 | [diff] [blame] | 101 | static int flow_limit_cpu_sysctl(struct ctl_table *table, int write, |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 102 | void __user *buffer, size_t *lenp, |
| 103 | loff_t *ppos) |
| 104 | { |
| 105 | struct sd_flow_limit *cur; |
| 106 | struct softnet_data *sd; |
| 107 | cpumask_var_t mask; |
| 108 | int i, len, ret = 0; |
| 109 | |
| 110 | if (!alloc_cpumask_var(&mask, GFP_KERNEL)) |
| 111 | return -ENOMEM; |
| 112 | |
| 113 | if (write) { |
| 114 | ret = cpumask_parse_user(buffer, *lenp, mask); |
| 115 | if (ret) |
| 116 | goto done; |
| 117 | |
| 118 | mutex_lock(&flow_limit_update_mutex); |
| 119 | len = sizeof(*cur) + netdev_flow_limit_table_len; |
| 120 | for_each_possible_cpu(i) { |
| 121 | sd = &per_cpu(softnet_data, i); |
| 122 | cur = rcu_dereference_protected(sd->flow_limit, |
| 123 | lockdep_is_held(&flow_limit_update_mutex)); |
| 124 | if (cur && !cpumask_test_cpu(i, mask)) { |
| 125 | RCU_INIT_POINTER(sd->flow_limit, NULL); |
| 126 | synchronize_rcu(); |
| 127 | kfree(cur); |
| 128 | } else if (!cur && cpumask_test_cpu(i, mask)) { |
Eric Dumazet | 5b59d46 | 2013-12-18 06:46:23 -0800 | [diff] [blame] | 129 | cur = kzalloc_node(len, GFP_KERNEL, |
| 130 | cpu_to_node(i)); |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 131 | if (!cur) { |
| 132 | /* not unwinding previous changes */ |
| 133 | ret = -ENOMEM; |
| 134 | goto write_unlock; |
| 135 | } |
| 136 | cur->num_buckets = netdev_flow_limit_table_len; |
| 137 | rcu_assign_pointer(sd->flow_limit, cur); |
| 138 | } |
| 139 | } |
| 140 | write_unlock: |
| 141 | mutex_unlock(&flow_limit_update_mutex); |
| 142 | } else { |
Willem de Bruijn | 5f121b9 | 2013-06-13 15:29:38 -0400 | [diff] [blame] | 143 | char kbuf[128]; |
| 144 | |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 145 | if (*ppos || !*lenp) { |
| 146 | *lenp = 0; |
| 147 | goto done; |
| 148 | } |
| 149 | |
| 150 | cpumask_clear(mask); |
| 151 | rcu_read_lock(); |
| 152 | for_each_possible_cpu(i) { |
| 153 | sd = &per_cpu(softnet_data, i); |
| 154 | if (rcu_dereference(sd->flow_limit)) |
| 155 | cpumask_set_cpu(i, mask); |
| 156 | } |
| 157 | rcu_read_unlock(); |
| 158 | |
Willem de Bruijn | 5f121b9 | 2013-06-13 15:29:38 -0400 | [diff] [blame] | 159 | len = min(sizeof(kbuf) - 1, *lenp); |
Tejun Heo | f090682 | 2015-02-13 14:37:42 -0800 | [diff] [blame] | 160 | len = scnprintf(kbuf, len, "%*pb", cpumask_pr_args(mask)); |
Willem de Bruijn | 5f121b9 | 2013-06-13 15:29:38 -0400 | [diff] [blame] | 161 | if (!len) { |
| 162 | *lenp = 0; |
| 163 | goto done; |
| 164 | } |
| 165 | if (len < *lenp) |
| 166 | kbuf[len++] = '\n'; |
| 167 | if (copy_to_user(buffer, kbuf, len)) { |
| 168 | ret = -EFAULT; |
| 169 | goto done; |
| 170 | } |
| 171 | *lenp = len; |
| 172 | *ppos += len; |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 173 | } |
| 174 | |
| 175 | done: |
| 176 | free_cpumask_var(mask); |
| 177 | return ret; |
| 178 | } |
| 179 | |
Joe Perches | fe2c633 | 2013-06-11 23:04:25 -0700 | [diff] [blame] | 180 | static int flow_limit_table_len_sysctl(struct ctl_table *table, int write, |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 181 | void __user *buffer, size_t *lenp, |
| 182 | loff_t *ppos) |
| 183 | { |
| 184 | unsigned int old, *ptr; |
| 185 | int ret; |
| 186 | |
| 187 | mutex_lock(&flow_limit_update_mutex); |
| 188 | |
| 189 | ptr = table->data; |
| 190 | old = *ptr; |
| 191 | ret = proc_dointvec(table, write, buffer, lenp, ppos); |
| 192 | if (!ret && write && !is_power_of_2(*ptr)) { |
| 193 | *ptr = old; |
| 194 | ret = -EINVAL; |
| 195 | } |
| 196 | |
| 197 | mutex_unlock(&flow_limit_update_mutex); |
| 198 | return ret; |
| 199 | } |
| 200 | #endif /* CONFIG_NET_FLOW_LIMIT */ |
| 201 | |
stephen hemminger | 6da7c8f | 2013-08-27 16:19:08 -0700 | [diff] [blame] | 202 | #ifdef CONFIG_NET_SCHED |
| 203 | static int set_default_qdisc(struct ctl_table *table, int write, |
| 204 | void __user *buffer, size_t *lenp, loff_t *ppos) |
| 205 | { |
| 206 | char id[IFNAMSIZ]; |
| 207 | struct ctl_table tbl = { |
| 208 | .data = id, |
| 209 | .maxlen = IFNAMSIZ, |
| 210 | }; |
| 211 | int ret; |
| 212 | |
| 213 | qdisc_get_default(id, IFNAMSIZ); |
| 214 | |
| 215 | ret = proc_dostring(&tbl, write, buffer, lenp, ppos); |
| 216 | if (write && ret == 0) |
| 217 | ret = qdisc_set_default(id); |
| 218 | return ret; |
| 219 | } |
| 220 | #endif |
| 221 | |
Eric Dumazet | 960fb62 | 2014-11-16 06:23:05 -0800 | [diff] [blame] | 222 | static int proc_do_rss_key(struct ctl_table *table, int write, |
| 223 | void __user *buffer, size_t *lenp, loff_t *ppos) |
| 224 | { |
| 225 | struct ctl_table fake_table; |
| 226 | char buf[NETDEV_RSS_KEY_LEN * 3]; |
| 227 | |
| 228 | snprintf(buf, sizeof(buf), "%*phC", NETDEV_RSS_KEY_LEN, netdev_rss_key); |
| 229 | fake_table.data = buf; |
| 230 | fake_table.maxlen = sizeof(buf); |
| 231 | return proc_dostring(&fake_table, write, buffer, lenp, ppos); |
| 232 | } |
| 233 | |
Pavel Emelyanov | 33eb9cf | 2007-12-05 01:37:34 -0800 | [diff] [blame] | 234 | static struct ctl_table net_core_table[] = { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 235 | #ifdef CONFIG_NET |
| 236 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 237 | .procname = "wmem_max", |
| 238 | .data = &sysctl_wmem_max, |
| 239 | .maxlen = sizeof(int), |
| 240 | .mode = 0644, |
bingtian.ly@taobao.com | cdda889 | 2013-01-23 20:35:28 +0000 | [diff] [blame] | 241 | .proc_handler = proc_dointvec_minmax, |
Alexey Kodanev | b1cb59c | 2015-03-11 14:29:17 +0300 | [diff] [blame] | 242 | .extra1 = &min_sndbuf, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 243 | }, |
| 244 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 245 | .procname = "rmem_max", |
| 246 | .data = &sysctl_rmem_max, |
| 247 | .maxlen = sizeof(int), |
| 248 | .mode = 0644, |
bingtian.ly@taobao.com | cdda889 | 2013-01-23 20:35:28 +0000 | [diff] [blame] | 249 | .proc_handler = proc_dointvec_minmax, |
Alexey Kodanev | b1cb59c | 2015-03-11 14:29:17 +0300 | [diff] [blame] | 250 | .extra1 = &min_rcvbuf, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 251 | }, |
| 252 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 253 | .procname = "wmem_default", |
| 254 | .data = &sysctl_wmem_default, |
| 255 | .maxlen = sizeof(int), |
| 256 | .mode = 0644, |
bingtian.ly@taobao.com | cdda889 | 2013-01-23 20:35:28 +0000 | [diff] [blame] | 257 | .proc_handler = proc_dointvec_minmax, |
Alexey Kodanev | b1cb59c | 2015-03-11 14:29:17 +0300 | [diff] [blame] | 258 | .extra1 = &min_sndbuf, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 259 | }, |
| 260 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 261 | .procname = "rmem_default", |
| 262 | .data = &sysctl_rmem_default, |
| 263 | .maxlen = sizeof(int), |
| 264 | .mode = 0644, |
bingtian.ly@taobao.com | cdda889 | 2013-01-23 20:35:28 +0000 | [diff] [blame] | 265 | .proc_handler = proc_dointvec_minmax, |
Alexey Kodanev | b1cb59c | 2015-03-11 14:29:17 +0300 | [diff] [blame] | 266 | .extra1 = &min_rcvbuf, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 267 | }, |
| 268 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 269 | .procname = "dev_weight", |
| 270 | .data = &weight_p, |
| 271 | .maxlen = sizeof(int), |
| 272 | .mode = 0644, |
Alexey Dobriyan | 6d9f239 | 2008-11-03 18:21:05 -0800 | [diff] [blame] | 273 | .proc_handler = proc_dointvec |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 274 | }, |
| 275 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 276 | .procname = "netdev_max_backlog", |
| 277 | .data = &netdev_max_backlog, |
| 278 | .maxlen = sizeof(int), |
| 279 | .mode = 0644, |
Alexey Dobriyan | 6d9f239 | 2008-11-03 18:21:05 -0800 | [diff] [blame] | 280 | .proc_handler = proc_dointvec |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 281 | }, |
Eric Dumazet | 960fb62 | 2014-11-16 06:23:05 -0800 | [diff] [blame] | 282 | { |
| 283 | .procname = "netdev_rss_key", |
| 284 | .data = &netdev_rss_key, |
| 285 | .maxlen = sizeof(int), |
| 286 | .mode = 0444, |
| 287 | .proc_handler = proc_do_rss_key, |
| 288 | }, |
Eric Dumazet | 0a14842 | 2011-04-20 09:27:32 +0000 | [diff] [blame] | 289 | #ifdef CONFIG_BPF_JIT |
| 290 | { |
| 291 | .procname = "bpf_jit_enable", |
| 292 | .data = &bpf_jit_enable, |
| 293 | .maxlen = sizeof(int), |
| 294 | .mode = 0644, |
Alexei Starovoitov | a3d6dd6 | 2018-01-29 02:48:56 +0100 | [diff] [blame] | 295 | #ifndef CONFIG_BPF_JIT_ALWAYS_ON |
Eric Dumazet | 0a14842 | 2011-04-20 09:27:32 +0000 | [diff] [blame] | 296 | .proc_handler = proc_dointvec |
Alexei Starovoitov | a3d6dd6 | 2018-01-29 02:48:56 +0100 | [diff] [blame] | 297 | #else |
| 298 | .proc_handler = proc_dointvec_minmax, |
| 299 | .extra1 = &one, |
| 300 | .extra2 = &one, |
| 301 | #endif |
Eric Dumazet | 0a14842 | 2011-04-20 09:27:32 +0000 | [diff] [blame] | 302 | }, |
Daniel Borkmann | 4f3446b | 2016-05-13 19:08:32 +0200 | [diff] [blame] | 303 | # ifdef CONFIG_HAVE_EBPF_JIT |
| 304 | { |
| 305 | .procname = "bpf_jit_harden", |
| 306 | .data = &bpf_jit_harden, |
| 307 | .maxlen = sizeof(int), |
| 308 | .mode = 0600, |
| 309 | .proc_handler = proc_dointvec, |
| 310 | }, |
| 311 | # endif |
Eric Dumazet | 0a14842 | 2011-04-20 09:27:32 +0000 | [diff] [blame] | 312 | #endif |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 313 | { |
Eric Dumazet | 3b098e2 | 2010-05-15 23:57:10 -0700 | [diff] [blame] | 314 | .procname = "netdev_tstamp_prequeue", |
| 315 | .data = &netdev_tstamp_prequeue, |
| 316 | .maxlen = sizeof(int), |
| 317 | .mode = 0644, |
| 318 | .proc_handler = proc_dointvec |
| 319 | }, |
| 320 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 321 | .procname = "message_cost", |
Dave Young | 717115e | 2008-07-25 01:45:58 -0700 | [diff] [blame] | 322 | .data = &net_ratelimit_state.interval, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 323 | .maxlen = sizeof(int), |
| 324 | .mode = 0644, |
Alexey Dobriyan | 6d9f239 | 2008-11-03 18:21:05 -0800 | [diff] [blame] | 325 | .proc_handler = proc_dointvec_jiffies, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 326 | }, |
| 327 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 328 | .procname = "message_burst", |
Dave Young | 717115e | 2008-07-25 01:45:58 -0700 | [diff] [blame] | 329 | .data = &net_ratelimit_state.burst, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 330 | .maxlen = sizeof(int), |
| 331 | .mode = 0644, |
Alexey Dobriyan | 6d9f239 | 2008-11-03 18:21:05 -0800 | [diff] [blame] | 332 | .proc_handler = proc_dointvec, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 333 | }, |
| 334 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 335 | .procname = "optmem_max", |
| 336 | .data = &sysctl_optmem_max, |
| 337 | .maxlen = sizeof(int), |
| 338 | .mode = 0644, |
Alexey Dobriyan | 6d9f239 | 2008-11-03 18:21:05 -0800 | [diff] [blame] | 339 | .proc_handler = proc_dointvec |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 340 | }, |
Willem de Bruijn | b245be1 | 2015-01-30 13:29:32 -0500 | [diff] [blame] | 341 | { |
| 342 | .procname = "tstamp_allow_data", |
| 343 | .data = &sysctl_tstamp_allow_data, |
| 344 | .maxlen = sizeof(int), |
| 345 | .mode = 0644, |
| 346 | .proc_handler = proc_dointvec_minmax, |
| 347 | .extra1 = &zero, |
| 348 | .extra2 = &one |
| 349 | }, |
Tom Herbert | fec5e65 | 2010-04-16 16:01:27 -0700 | [diff] [blame] | 350 | #ifdef CONFIG_RPS |
| 351 | { |
| 352 | .procname = "rps_sock_flow_entries", |
| 353 | .maxlen = sizeof(int), |
| 354 | .mode = 0644, |
| 355 | .proc_handler = rps_sock_flow_sysctl |
| 356 | }, |
| 357 | #endif |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 358 | #ifdef CONFIG_NET_FLOW_LIMIT |
| 359 | { |
| 360 | .procname = "flow_limit_cpu_bitmap", |
| 361 | .mode = 0644, |
| 362 | .proc_handler = flow_limit_cpu_sysctl |
| 363 | }, |
| 364 | { |
| 365 | .procname = "flow_limit_table_len", |
| 366 | .data = &netdev_flow_limit_table_len, |
| 367 | .maxlen = sizeof(int), |
| 368 | .mode = 0644, |
| 369 | .proc_handler = flow_limit_table_len_sysctl |
| 370 | }, |
| 371 | #endif /* CONFIG_NET_FLOW_LIMIT */ |
Cong Wang | e0d1095 | 2013-08-01 11:10:25 +0800 | [diff] [blame] | 372 | #ifdef CONFIG_NET_RX_BUSY_POLL |
Eliezer Tamir | 0602129 | 2013-06-10 11:39:50 +0300 | [diff] [blame] | 373 | { |
Eliezer Tamir | 64b0dc5 | 2013-07-10 17:13:36 +0300 | [diff] [blame] | 374 | .procname = "busy_poll", |
| 375 | .data = &sysctl_net_busy_poll, |
Eliezer Tamir | eb6db62 | 2013-06-14 16:33:25 +0300 | [diff] [blame] | 376 | .maxlen = sizeof(unsigned int), |
Eliezer Tamir | 0602129 | 2013-06-10 11:39:50 +0300 | [diff] [blame] | 377 | .mode = 0644, |
Alexander Duyck | 7f077af | 2017-03-24 09:38:03 -0700 | [diff] [blame] | 378 | .proc_handler = proc_dointvec_minmax, |
| 379 | .extra1 = &zero, |
Eliezer Tamir | 0602129 | 2013-06-10 11:39:50 +0300 | [diff] [blame] | 380 | }, |
Eliezer Tamir | 2d48d67 | 2013-06-24 10:28:03 +0300 | [diff] [blame] | 381 | { |
Eliezer Tamir | 64b0dc5 | 2013-07-10 17:13:36 +0300 | [diff] [blame] | 382 | .procname = "busy_read", |
| 383 | .data = &sysctl_net_busy_read, |
Eliezer Tamir | 2d48d67 | 2013-06-24 10:28:03 +0300 | [diff] [blame] | 384 | .maxlen = sizeof(unsigned int), |
| 385 | .mode = 0644, |
Alexander Duyck | 7f077af | 2017-03-24 09:38:03 -0700 | [diff] [blame] | 386 | .proc_handler = proc_dointvec_minmax, |
| 387 | .extra1 = &zero, |
Eliezer Tamir | 2d48d67 | 2013-06-24 10:28:03 +0300 | [diff] [blame] | 388 | }, |
stephen hemminger | 6da7c8f | 2013-08-27 16:19:08 -0700 | [diff] [blame] | 389 | #endif |
| 390 | #ifdef CONFIG_NET_SCHED |
| 391 | { |
| 392 | .procname = "default_qdisc", |
| 393 | .mode = 0644, |
| 394 | .maxlen = IFNAMSIZ, |
| 395 | .proc_handler = set_default_qdisc |
| 396 | }, |
Eliezer Tamir | 0602129 | 2013-06-10 11:39:50 +0300 | [diff] [blame] | 397 | #endif |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 398 | #endif /* CONFIG_NET */ |
| 399 | { |
Stephen Hemminger | 51b0bde | 2005-06-23 20:14:40 -0700 | [diff] [blame] | 400 | .procname = "netdev_budget", |
| 401 | .data = &netdev_budget, |
| 402 | .maxlen = sizeof(int), |
| 403 | .mode = 0644, |
Alexey Dobriyan | 6d9f239 | 2008-11-03 18:21:05 -0800 | [diff] [blame] | 404 | .proc_handler = proc_dointvec |
Stephen Hemminger | 51b0bde | 2005-06-23 20:14:40 -0700 | [diff] [blame] | 405 | }, |
Stephen Hemminger | a2a316f | 2007-03-08 20:41:08 -0800 | [diff] [blame] | 406 | { |
Stephen Hemminger | a2a316f | 2007-03-08 20:41:08 -0800 | [diff] [blame] | 407 | .procname = "warnings", |
| 408 | .data = &net_msg_warn, |
| 409 | .maxlen = sizeof(int), |
| 410 | .mode = 0644, |
Alexey Dobriyan | 6d9f239 | 2008-11-03 18:21:05 -0800 | [diff] [blame] | 411 | .proc_handler = proc_dointvec |
Stephen Hemminger | a2a316f | 2007-03-08 20:41:08 -0800 | [diff] [blame] | 412 | }, |
Hans Westgaard Ry | 5f74f82 | 2016-02-03 09:26:57 +0100 | [diff] [blame] | 413 | { |
| 414 | .procname = "max_skb_frags", |
| 415 | .data = &sysctl_max_skb_frags, |
| 416 | .maxlen = sizeof(int), |
| 417 | .mode = 0644, |
| 418 | .proc_handler = proc_dointvec_minmax, |
| 419 | .extra1 = &one, |
| 420 | .extra2 = &max_skb_frags, |
| 421 | }, |
Eric W. Biederman | f8572d8 | 2009-11-05 13:32:03 -0800 | [diff] [blame] | 422 | { } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 423 | }; |
Pavel Emelyanov | 33eb9cf | 2007-12-05 01:37:34 -0800 | [diff] [blame] | 424 | |
Pavel Emelyanov | d5a4502 | 2008-05-19 13:49:52 -0700 | [diff] [blame] | 425 | static struct ctl_table netns_core_table[] = { |
| 426 | { |
Pavel Emelyanov | d5a4502 | 2008-05-19 13:49:52 -0700 | [diff] [blame] | 427 | .procname = "somaxconn", |
| 428 | .data = &init_net.core.sysctl_somaxconn, |
| 429 | .maxlen = sizeof(int), |
| 430 | .mode = 0644, |
Roman Gushchin | 5f671d6 | 2013-08-02 18:36:40 +0400 | [diff] [blame] | 431 | .extra1 = &zero, |
Roman Gushchin | 5f671d6 | 2013-08-02 18:36:40 +0400 | [diff] [blame] | 432 | .proc_handler = proc_dointvec_minmax |
Pavel Emelyanov | d5a4502 | 2008-05-19 13:49:52 -0700 | [diff] [blame] | 433 | }, |
Eric W. Biederman | f8572d8 | 2009-11-05 13:32:03 -0800 | [diff] [blame] | 434 | { } |
Pavel Emelyanov | d5a4502 | 2008-05-19 13:49:52 -0700 | [diff] [blame] | 435 | }; |
| 436 | |
Pavel Emelyanov | 024626e | 2007-12-08 00:09:24 -0800 | [diff] [blame] | 437 | static __net_init int sysctl_core_net_init(struct net *net) |
| 438 | { |
Pavel Emelyanov | d5a4502 | 2008-05-19 13:49:52 -0700 | [diff] [blame] | 439 | struct ctl_table *tbl; |
Pavel Emelyanov | 024626e | 2007-12-08 00:09:24 -0800 | [diff] [blame] | 440 | |
Pavel Emelyanov | 8efa6e9 | 2008-03-31 19:41:14 -0700 | [diff] [blame] | 441 | net->core.sysctl_somaxconn = SOMAXCONN; |
Pavel Emelyanov | b8e1f9b | 2007-12-08 00:12:33 -0800 | [diff] [blame] | 442 | |
Pavel Emelyanov | d5a4502 | 2008-05-19 13:49:52 -0700 | [diff] [blame] | 443 | tbl = netns_core_table; |
Octavian Purdila | 09ad9bc | 2009-11-25 15:14:13 -0800 | [diff] [blame] | 444 | if (!net_eq(net, &init_net)) { |
Pavel Emelyanov | d5a4502 | 2008-05-19 13:49:52 -0700 | [diff] [blame] | 445 | tbl = kmemdup(tbl, sizeof(netns_core_table), GFP_KERNEL); |
Pavel Emelyanov | 024626e | 2007-12-08 00:09:24 -0800 | [diff] [blame] | 446 | if (tbl == NULL) |
| 447 | goto err_dup; |
| 448 | |
Pavel Emelyanov | d5a4502 | 2008-05-19 13:49:52 -0700 | [diff] [blame] | 449 | tbl[0].data = &net->core.sysctl_somaxconn; |
Eric W. Biederman | 464dc80 | 2012-11-16 03:02:59 +0000 | [diff] [blame] | 450 | |
| 451 | /* Don't export any sysctls to unprivileged users */ |
| 452 | if (net->user_ns != &init_user_ns) { |
| 453 | tbl[0].procname = NULL; |
| 454 | } |
Pavel Emelyanov | 024626e | 2007-12-08 00:09:24 -0800 | [diff] [blame] | 455 | } |
| 456 | |
Eric W. Biederman | ec8f23c | 2012-04-19 13:44:49 +0000 | [diff] [blame] | 457 | net->core.sysctl_hdr = register_net_sysctl(net, "net/core", tbl); |
Pavel Emelyanov | 8efa6e9 | 2008-03-31 19:41:14 -0700 | [diff] [blame] | 458 | if (net->core.sysctl_hdr == NULL) |
Pavel Emelyanov | 024626e | 2007-12-08 00:09:24 -0800 | [diff] [blame] | 459 | goto err_reg; |
| 460 | |
| 461 | return 0; |
| 462 | |
| 463 | err_reg: |
Pavel Emelyanov | d5a4502 | 2008-05-19 13:49:52 -0700 | [diff] [blame] | 464 | if (tbl != netns_core_table) |
Pavel Emelyanov | 024626e | 2007-12-08 00:09:24 -0800 | [diff] [blame] | 465 | kfree(tbl); |
| 466 | err_dup: |
| 467 | return -ENOMEM; |
| 468 | } |
| 469 | |
| 470 | static __net_exit void sysctl_core_net_exit(struct net *net) |
| 471 | { |
| 472 | struct ctl_table *tbl; |
| 473 | |
Pavel Emelyanov | 8efa6e9 | 2008-03-31 19:41:14 -0700 | [diff] [blame] | 474 | tbl = net->core.sysctl_hdr->ctl_table_arg; |
| 475 | unregister_net_sysctl_table(net->core.sysctl_hdr); |
Pavel Emelyanov | d5a4502 | 2008-05-19 13:49:52 -0700 | [diff] [blame] | 476 | BUG_ON(tbl == netns_core_table); |
Pavel Emelyanov | 024626e | 2007-12-08 00:09:24 -0800 | [diff] [blame] | 477 | kfree(tbl); |
| 478 | } |
| 479 | |
| 480 | static __net_initdata struct pernet_operations sysctl_core_ops = { |
| 481 | .init = sysctl_core_net_init, |
| 482 | .exit = sysctl_core_net_exit, |
| 483 | }; |
| 484 | |
Pavel Emelyanov | 33eb9cf | 2007-12-05 01:37:34 -0800 | [diff] [blame] | 485 | static __init int sysctl_core_init(void) |
| 486 | { |
Eric W. Biederman | 4344475 | 2012-04-19 13:22:55 +0000 | [diff] [blame] | 487 | register_net_sysctl(&init_net, "net/core", net_core_table); |
Pavel Emelyanov | 024626e | 2007-12-08 00:09:24 -0800 | [diff] [blame] | 488 | return register_pernet_subsys(&sysctl_core_ops); |
Pavel Emelyanov | 33eb9cf | 2007-12-05 01:37:34 -0800 | [diff] [blame] | 489 | } |
| 490 | |
Alexey Dobriyan | b27aead | 2008-11-25 18:00:48 -0800 | [diff] [blame] | 491 | fs_initcall(sysctl_core_init); |