Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 1 | /* |
| 2 | * Operations on the network namespace |
| 3 | */ |
| 4 | #ifndef __NET_NET_NAMESPACE_H |
| 5 | #define __NET_NET_NAMESPACE_H |
| 6 | |
| 7 | #include <asm/atomic.h> |
| 8 | #include <linux/workqueue.h> |
| 9 | #include <linux/list.h> |
| 10 | |
Pavel Emelyanov | 8efa6e9 | 2008-03-31 19:41:14 -0700 | [diff] [blame] | 11 | #include <net/netns/core.h> |
Pavel Emelyanov | 852566f | 2008-07-18 04:01:24 -0700 | [diff] [blame] | 12 | #include <net/netns/mib.h> |
Denis V. Lunev | a0a53c8 | 2007-12-11 04:19:17 -0800 | [diff] [blame] | 13 | #include <net/netns/unix.h> |
Denis V. Lunev | 2aaef4e | 2007-12-11 04:19:54 -0800 | [diff] [blame] | 14 | #include <net/netns/packet.h> |
Pavel Emelyanov | 8afd351 | 2007-12-16 13:29:36 -0800 | [diff] [blame] | 15 | #include <net/netns/ipv4.h> |
Daniel Lezcano | b0f159d | 2008-01-10 02:49:06 -0800 | [diff] [blame] | 16 | #include <net/netns/ipv6.h> |
Pavel Emelyanov | 67019cc | 2008-04-13 22:28:42 -0700 | [diff] [blame] | 17 | #include <net/netns/dccp.h> |
Alexey Dobriyan | 8d87005 | 2008-01-31 04:02:13 -0800 | [diff] [blame] | 18 | #include <net/netns/x_tables.h> |
Alexey Dobriyan | dfdb8d7 | 2008-10-08 11:35:02 +0200 | [diff] [blame] | 19 | #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE) |
| 20 | #include <net/netns/conntrack.h> |
| 21 | #endif |
Alexey Dobriyan | d62ddc2 | 2008-11-25 17:14:31 -0800 | [diff] [blame] | 22 | #include <net/netns/xfrm.h> |
Denis V. Lunev | a0a53c8 | 2007-12-11 04:19:17 -0800 | [diff] [blame] | 23 | |
Eric W. Biederman | 457c4cb | 2007-09-12 12:01:34 +0200 | [diff] [blame] | 24 | struct proc_dir_entry; |
Eric W. Biederman | 2774c7a | 2007-09-26 22:10:56 -0700 | [diff] [blame] | 25 | struct net_device; |
Denis V. Lunev | 97c53ca | 2007-11-19 22:26:51 -0800 | [diff] [blame] | 26 | struct sock; |
Pavel Emelyanov | 1597fbc | 2007-12-01 23:51:01 +1100 | [diff] [blame] | 27 | struct ctl_table_header; |
Pavel Emelyanov | dec827d | 2008-04-15 00:36:08 -0700 | [diff] [blame] | 28 | struct net_generic; |
Johannes Berg | 134e637 | 2009-07-10 09:51:34 +0000 | [diff] [blame] | 29 | struct sock; |
Pavel Emelyanov | 1597fbc | 2007-12-01 23:51:01 +1100 | [diff] [blame] | 30 | |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 31 | struct net { |
| 32 | atomic_t count; /* To decided when the network |
| 33 | * namespace should be freed. |
| 34 | */ |
Denis V. Lunev | 5d1e446 | 2008-04-16 01:58:04 -0700 | [diff] [blame] | 35 | #ifdef NETNS_REFCNT_DEBUG |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 36 | atomic_t use_count; /* To track references we |
| 37 | * destroy on demand |
| 38 | */ |
Denis V. Lunev | 5d1e446 | 2008-04-16 01:58:04 -0700 | [diff] [blame] | 39 | #endif |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 40 | struct list_head list; /* list of network namespaces */ |
| 41 | struct work_struct work; /* work struct for freeing */ |
Eric W. Biederman | 457c4cb | 2007-09-12 12:01:34 +0200 | [diff] [blame] | 42 | |
| 43 | struct proc_dir_entry *proc_net; |
| 44 | struct proc_dir_entry *proc_net_stat; |
Eric W. Biederman | 881d966 | 2007-09-17 11:56:21 -0700 | [diff] [blame] | 45 | |
Al Viro | 7345509 | 2008-07-14 21:22:20 -0400 | [diff] [blame] | 46 | #ifdef CONFIG_SYSCTL |
| 47 | struct ctl_table_set sysctls; |
| 48 | #endif |
Eric W. Biederman | 95bdfcc | 2007-11-30 23:55:42 +1100 | [diff] [blame] | 49 | |
Eric W. Biederman | 2774c7a | 2007-09-26 22:10:56 -0700 | [diff] [blame] | 50 | struct net_device *loopback_dev; /* The loopback */ |
| 51 | |
Eric W. Biederman | 881d966 | 2007-09-17 11:56:21 -0700 | [diff] [blame] | 52 | struct list_head dev_base_head; |
| 53 | struct hlist_head *dev_name_head; |
| 54 | struct hlist_head *dev_index_head; |
Denis V. Lunev | 97c53ca | 2007-11-19 22:26:51 -0800 | [diff] [blame] | 55 | |
Denis V. Lunev | 5fd30ee | 2008-01-10 03:20:28 -0800 | [diff] [blame] | 56 | /* core fib_rules */ |
| 57 | struct list_head rules_ops; |
| 58 | spinlock_t rules_mod_lock; |
| 59 | |
Denis V. Lunev | 97c53ca | 2007-11-19 22:26:51 -0800 | [diff] [blame] | 60 | struct sock *rtnl; /* rtnetlink socket */ |
Johannes Berg | 134e637 | 2009-07-10 09:51:34 +0000 | [diff] [blame] | 61 | struct sock *genl_sock; |
Denis V. Lunev | d12d01d | 2007-11-19 22:28:35 -0800 | [diff] [blame] | 62 | |
Pavel Emelyanov | 8efa6e9 | 2008-03-31 19:41:14 -0700 | [diff] [blame] | 63 | struct netns_core core; |
Pavel Emelyanov | 852566f | 2008-07-18 04:01:24 -0700 | [diff] [blame] | 64 | struct netns_mib mib; |
Denis V. Lunev | 2aaef4e | 2007-12-11 04:19:54 -0800 | [diff] [blame] | 65 | struct netns_packet packet; |
Denis V. Lunev | a0a53c8 | 2007-12-11 04:19:17 -0800 | [diff] [blame] | 66 | struct netns_unix unx; |
Pavel Emelyanov | 8afd351 | 2007-12-16 13:29:36 -0800 | [diff] [blame] | 67 | struct netns_ipv4 ipv4; |
Daniel Lezcano | b0f159d | 2008-01-10 02:49:06 -0800 | [diff] [blame] | 68 | #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE) |
| 69 | struct netns_ipv6 ipv6; |
| 70 | #endif |
Pavel Emelyanov | 67019cc | 2008-04-13 22:28:42 -0700 | [diff] [blame] | 71 | #if defined(CONFIG_IP_DCCP) || defined(CONFIG_IP_DCCP_MODULE) |
| 72 | struct netns_dccp dccp; |
| 73 | #endif |
Alexey Dobriyan | 8d87005 | 2008-01-31 04:02:13 -0800 | [diff] [blame] | 74 | #ifdef CONFIG_NETFILTER |
| 75 | struct netns_xt xt; |
Alexey Dobriyan | dfdb8d7 | 2008-10-08 11:35:02 +0200 | [diff] [blame] | 76 | #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE) |
| 77 | struct netns_ct ct; |
| 78 | #endif |
Alexey Dobriyan | 8d87005 | 2008-01-31 04:02:13 -0800 | [diff] [blame] | 79 | #endif |
Alexey Dobriyan | d62ddc2 | 2008-11-25 17:14:31 -0800 | [diff] [blame] | 80 | #ifdef CONFIG_XFRM |
| 81 | struct netns_xfrm xfrm; |
| 82 | #endif |
Johannes Berg | 3d23e34 | 2009-09-29 23:27:28 +0200 | [diff] [blame^] | 83 | #ifdef CONFIG_WEXT_CORE |
Johannes Berg | b333b3d22 | 2009-06-24 01:34:48 +0000 | [diff] [blame] | 84 | struct sk_buff_head wext_nlevents; |
| 85 | #endif |
Pavel Emelyanov | dec827d | 2008-04-15 00:36:08 -0700 | [diff] [blame] | 86 | struct net_generic *gen; |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 87 | }; |
| 88 | |
Denis V. Lunev | 225c0a0 | 2008-04-02 00:09:29 -0700 | [diff] [blame] | 89 | |
Denis V. Lunev | c0f3932 | 2008-04-02 00:10:28 -0700 | [diff] [blame] | 90 | #include <linux/seq_file_net.h> |
| 91 | |
Daniel Lezcano | 4fabcd7 | 2007-09-13 09:16:29 +0200 | [diff] [blame] | 92 | /* Init's network namespace */ |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 93 | extern struct net init_net; |
Denis V. Lunev | a4aa834 | 2008-04-03 13:04:33 -0700 | [diff] [blame] | 94 | |
| 95 | #ifdef CONFIG_NET |
Daniel Lezcano | 4fabcd7 | 2007-09-13 09:16:29 +0200 | [diff] [blame] | 96 | #define INIT_NET_NS(net_ns) .net_ns = &init_net, |
Daniel Lezcano | 4fabcd7 | 2007-09-13 09:16:29 +0200 | [diff] [blame] | 97 | |
Eric W. Biederman | 9dd776b | 2007-09-26 22:04:26 -0700 | [diff] [blame] | 98 | extern struct net *copy_net_ns(unsigned long flags, struct net *net_ns); |
Denis V. Lunev | 225c0a0 | 2008-04-02 00:09:29 -0700 | [diff] [blame] | 99 | |
| 100 | #else /* CONFIG_NET */ |
| 101 | |
| 102 | #define INIT_NET_NS(net_ns) |
| 103 | |
Eric W. Biederman | 9dd776b | 2007-09-26 22:04:26 -0700 | [diff] [blame] | 104 | static inline struct net *copy_net_ns(unsigned long flags, struct net *net_ns) |
| 105 | { |
| 106 | /* There is nothing to copy so this is a noop */ |
| 107 | return net_ns; |
| 108 | } |
Denis V. Lunev | 225c0a0 | 2008-04-02 00:09:29 -0700 | [diff] [blame] | 109 | #endif /* CONFIG_NET */ |
| 110 | |
| 111 | |
| 112 | extern struct list_head net_namespace_list; |
Eric W. Biederman | 9dd776b | 2007-09-26 22:04:26 -0700 | [diff] [blame] | 113 | |
Johannes Berg | 30ffee8 | 2009-07-10 09:51:35 +0000 | [diff] [blame] | 114 | extern struct net *get_net_ns_by_pid(pid_t pid); |
| 115 | |
Pavel Emelyanov | d465579 | 2007-11-01 00:43:49 -0700 | [diff] [blame] | 116 | #ifdef CONFIG_NET_NS |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 117 | extern void __put_net(struct net *net); |
| 118 | |
| 119 | static inline struct net *get_net(struct net *net) |
| 120 | { |
| 121 | atomic_inc(&net->count); |
| 122 | return net; |
| 123 | } |
| 124 | |
Eric W. Biederman | 077130c | 2007-09-13 09:18:57 +0200 | [diff] [blame] | 125 | static inline struct net *maybe_get_net(struct net *net) |
| 126 | { |
| 127 | /* Used when we know struct net exists but we |
| 128 | * aren't guaranteed a previous reference count |
| 129 | * exists. If the reference count is zero this |
| 130 | * function fails and returns NULL. |
| 131 | */ |
| 132 | if (!atomic_inc_not_zero(&net->count)) |
| 133 | net = NULL; |
| 134 | return net; |
| 135 | } |
| 136 | |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 137 | static inline void put_net(struct net *net) |
| 138 | { |
| 139 | if (atomic_dec_and_test(&net->count)) |
| 140 | __put_net(net); |
| 141 | } |
| 142 | |
YOSHIFUJI Hideaki | 878628f | 2008-03-26 03:57:35 +0900 | [diff] [blame] | 143 | static inline |
| 144 | int net_eq(const struct net *net1, const struct net *net2) |
| 145 | { |
| 146 | return net1 == net2; |
| 147 | } |
Pavel Emelyanov | d465579 | 2007-11-01 00:43:49 -0700 | [diff] [blame] | 148 | #else |
Eric W. Biederman | b9f75f4 | 2008-06-20 22:16:51 -0700 | [diff] [blame] | 149 | |
Pavel Emelyanov | d465579 | 2007-11-01 00:43:49 -0700 | [diff] [blame] | 150 | static inline struct net *get_net(struct net *net) |
| 151 | { |
| 152 | return net; |
| 153 | } |
| 154 | |
| 155 | static inline void put_net(struct net *net) |
| 156 | { |
| 157 | } |
| 158 | |
Pavel Emelyanov | d465579 | 2007-11-01 00:43:49 -0700 | [diff] [blame] | 159 | static inline struct net *maybe_get_net(struct net *net) |
| 160 | { |
| 161 | return net; |
| 162 | } |
YOSHIFUJI Hideaki | 878628f | 2008-03-26 03:57:35 +0900 | [diff] [blame] | 163 | |
| 164 | static inline |
| 165 | int net_eq(const struct net *net1, const struct net *net2) |
| 166 | { |
| 167 | return 1; |
| 168 | } |
Pavel Emelyanov | d465579 | 2007-11-01 00:43:49 -0700 | [diff] [blame] | 169 | #endif |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 170 | |
Denis V. Lunev | 5d1e446 | 2008-04-16 01:58:04 -0700 | [diff] [blame] | 171 | |
| 172 | #ifdef NETNS_REFCNT_DEBUG |
| 173 | static inline struct net *hold_net(struct net *net) |
| 174 | { |
| 175 | if (net) |
| 176 | atomic_inc(&net->use_count); |
| 177 | return net; |
| 178 | } |
| 179 | |
| 180 | static inline void release_net(struct net *net) |
| 181 | { |
| 182 | if (net) |
| 183 | atomic_dec(&net->use_count); |
| 184 | } |
| 185 | #else |
| 186 | static inline struct net *hold_net(struct net *net) |
| 187 | { |
| 188 | return net; |
| 189 | } |
| 190 | |
| 191 | static inline void release_net(struct net *net) |
| 192 | { |
| 193 | } |
| 194 | #endif |
| 195 | |
Eric Dumazet | 8f424b5 | 2008-11-12 00:53:30 -0800 | [diff] [blame] | 196 | #ifdef CONFIG_NET_NS |
| 197 | |
| 198 | static inline void write_pnet(struct net **pnet, struct net *net) |
| 199 | { |
| 200 | *pnet = net; |
| 201 | } |
| 202 | |
| 203 | static inline struct net *read_pnet(struct net * const *pnet) |
| 204 | { |
| 205 | return *pnet; |
| 206 | } |
| 207 | |
| 208 | #else |
| 209 | |
| 210 | #define write_pnet(pnet, net) do { (void)(net);} while (0) |
| 211 | #define read_pnet(pnet) (&init_net) |
| 212 | |
| 213 | #endif |
Denis V. Lunev | 5d1e446 | 2008-04-16 01:58:04 -0700 | [diff] [blame] | 214 | |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 215 | #define for_each_net(VAR) \ |
| 216 | list_for_each_entry(VAR, &net_namespace_list, list) |
| 217 | |
Johannes Berg | 11a28d3 | 2009-07-10 09:51:33 +0000 | [diff] [blame] | 218 | #define for_each_net_rcu(VAR) \ |
| 219 | list_for_each_entry_rcu(VAR, &net_namespace_list, list) |
| 220 | |
Pavel Emelyanov | 4665079 | 2007-10-08 20:38:39 -0700 | [diff] [blame] | 221 | #ifdef CONFIG_NET_NS |
| 222 | #define __net_init |
| 223 | #define __net_exit |
Denis V. Lunev | 022cbae | 2007-11-13 03:23:50 -0800 | [diff] [blame] | 224 | #define __net_initdata |
Pavel Emelyanov | 4665079 | 2007-10-08 20:38:39 -0700 | [diff] [blame] | 225 | #else |
| 226 | #define __net_init __init |
| 227 | #define __net_exit __exit_refok |
Denis V. Lunev | 022cbae | 2007-11-13 03:23:50 -0800 | [diff] [blame] | 228 | #define __net_initdata __initdata |
Pavel Emelyanov | 4665079 | 2007-10-08 20:38:39 -0700 | [diff] [blame] | 229 | #endif |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 230 | |
| 231 | struct pernet_operations { |
| 232 | struct list_head list; |
| 233 | int (*init)(struct net *net); |
| 234 | void (*exit)(struct net *net); |
| 235 | }; |
| 236 | |
Eric W. Biederman | 17edde5 | 2009-02-22 00:11:09 -0800 | [diff] [blame] | 237 | /* |
| 238 | * Use these carefully. If you implement a network device and it |
| 239 | * needs per network namespace operations use device pernet operations, |
| 240 | * otherwise use pernet subsys operations. |
| 241 | * |
Johannes Berg | 4edf547 | 2009-07-15 06:16:34 +0000 | [diff] [blame] | 242 | * Network interfaces need to be removed from a dying netns _before_ |
| 243 | * subsys notifiers can be called, as most of the network code cleanup |
| 244 | * (which is done from subsys notifiers) runs with the assumption that |
| 245 | * dev_remove_pack has been called so no new packets will arrive during |
| 246 | * and after the cleanup functions have been called. dev_remove_pack |
| 247 | * is not per namespace so instead the guarantee of no more packets |
| 248 | * arriving in a network namespace is provided by ensuring that all |
| 249 | * network devices and all sockets have left the network namespace |
| 250 | * before the cleanup methods are called. |
Eric W. Biederman | 17edde5 | 2009-02-22 00:11:09 -0800 | [diff] [blame] | 251 | * |
| 252 | * For the longest time the ipv4 icmp code was registered as a pernet |
| 253 | * device which caused kernel oops, and panics during network |
| 254 | * namespace cleanup. So please don't get this wrong. |
| 255 | */ |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 256 | extern int register_pernet_subsys(struct pernet_operations *); |
| 257 | extern void unregister_pernet_subsys(struct pernet_operations *); |
Alexey Dobriyan | 485ac57 | 2008-10-30 23:55:16 -0700 | [diff] [blame] | 258 | extern int register_pernet_gen_subsys(int *id, struct pernet_operations *); |
| 259 | extern void unregister_pernet_gen_subsys(int id, struct pernet_operations *); |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 260 | extern int register_pernet_device(struct pernet_operations *); |
| 261 | extern void unregister_pernet_device(struct pernet_operations *); |
Pavel Emelyanov | c93cf61 | 2008-04-15 00:35:23 -0700 | [diff] [blame] | 262 | extern int register_pernet_gen_device(int *id, struct pernet_operations *); |
| 263 | extern void unregister_pernet_gen_device(int id, struct pernet_operations *); |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 264 | |
Eric W. Biederman | 95bdfcc | 2007-11-30 23:55:42 +1100 | [diff] [blame] | 265 | struct ctl_path; |
| 266 | struct ctl_table; |
| 267 | struct ctl_table_header; |
Pavel Emelyanov | d62c612 | 2008-05-19 13:45:33 -0700 | [diff] [blame] | 268 | |
Eric W. Biederman | 95bdfcc | 2007-11-30 23:55:42 +1100 | [diff] [blame] | 269 | extern struct ctl_table_header *register_net_sysctl_table(struct net *net, |
| 270 | const struct ctl_path *path, struct ctl_table *table); |
Pavel Emelyanov | d62c612 | 2008-05-19 13:45:33 -0700 | [diff] [blame] | 271 | extern struct ctl_table_header *register_net_sysctl_rotable( |
| 272 | const struct ctl_path *path, struct ctl_table *table); |
Eric W. Biederman | 95bdfcc | 2007-11-30 23:55:42 +1100 | [diff] [blame] | 273 | extern void unregister_net_sysctl_table(struct ctl_table_header *header); |
| 274 | |
Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 275 | #endif /* __NET_NET_NAMESPACE_H */ |