blob: 2bf9ed9ef26b266a583550238e8433861d218c80 [file] [log] [blame]
Eric W. Biederman5f256be2007-09-12 11:50:50 +02001/*
2 * Operations on the network namespace
3 */
4#ifndef __NET_NET_NAMESPACE_H
5#define __NET_NET_NAMESPACE_H
6
7#include <asm/atomic.h>
8#include <linux/workqueue.h>
9#include <linux/list.h>
David S. Millerbee95252011-05-26 16:40:37 -040010#include <linux/sysctl.h>
Eric W. Biederman5f256be2007-09-12 11:50:50 +020011
Pavel Emelyanov8efa6e92008-03-31 19:41:14 -070012#include <net/netns/core.h>
Pavel Emelyanov852566f2008-07-18 04:01:24 -070013#include <net/netns/mib.h>
Denis V. Luneva0a53c82007-12-11 04:19:17 -080014#include <net/netns/unix.h>
Denis V. Lunev2aaef4e2007-12-11 04:19:54 -080015#include <net/netns/packet.h>
Pavel Emelyanov8afd3512007-12-16 13:29:36 -080016#include <net/netns/ipv4.h>
Daniel Lezcanob0f159d2008-01-10 02:49:06 -080017#include <net/netns/ipv6.h>
Pavel Emelyanov67019cc2008-04-13 22:28:42 -070018#include <net/netns/dccp.h>
Alexey Dobriyan8d870052008-01-31 04:02:13 -080019#include <net/netns/x_tables.h>
Alexey Dobriyandfdb8d72008-10-08 11:35:02 +020020#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
21#include <net/netns/conntrack.h>
22#endif
Alexey Dobriyand62ddc22008-11-25 17:14:31 -080023#include <net/netns/xfrm.h>
Denis V. Luneva0a53c82007-12-11 04:19:17 -080024
Eric W. Biederman457c4cb2007-09-12 12:01:34 +020025struct proc_dir_entry;
Eric W. Biederman2774c7a2007-09-26 22:10:56 -070026struct net_device;
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080027struct sock;
Pavel Emelyanov1597fbc2007-12-01 23:51:01 +110028struct ctl_table_header;
Pavel Emelyanovdec827d2008-04-15 00:36:08 -070029struct net_generic;
Johannes Berg134e6372009-07-10 09:51:34 +000030struct sock;
Julian Anastasov2553d062011-03-04 12:18:07 +020031struct netns_ipvs;
Pavel Emelyanov1597fbc2007-12-01 23:51:01 +110032
Eric Dumazet7c28bd02009-10-24 06:13:17 -070033
34#define NETDEV_HASHBITS 8
35#define NETDEV_HASHENTRIES (1 << NETDEV_HASHBITS)
36
Eric W. Biederman5f256be2007-09-12 11:50:50 +020037struct net {
38 atomic_t count; /* To decided when the network
39 * namespace should be freed.
40 */
Denis V. Lunev5d1e4462008-04-16 01:58:04 -070041#ifdef NETNS_REFCNT_DEBUG
Eric W. Biederman5f256be2007-09-12 11:50:50 +020042 atomic_t use_count; /* To track references we
43 * destroy on demand
44 */
Denis V. Lunev5d1e4462008-04-16 01:58:04 -070045#endif
Eric Dumazet8e602ce2010-10-14 05:56:18 +000046 spinlock_t rules_mod_lock;
47
Eric W. Biederman5f256be2007-09-12 11:50:50 +020048 struct list_head list; /* list of network namespaces */
Eric W. Biederman2b035b32009-11-29 22:25:27 +000049 struct list_head cleanup_list; /* namespaces on death row */
Eric W. Biederman72ad9372009-12-03 02:29:03 +000050 struct list_head exit_list; /* Use only net_mutex */
Eric W. Biederman457c4cb2007-09-12 12:01:34 +020051
52 struct proc_dir_entry *proc_net;
53 struct proc_dir_entry *proc_net_stat;
Eric W. Biederman881d9662007-09-17 11:56:21 -070054
Al Viro73455092008-07-14 21:22:20 -040055#ifdef CONFIG_SYSCTL
56 struct ctl_table_set sysctls;
57#endif
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +110058
Eric Dumazet8e602ce2010-10-14 05:56:18 +000059 struct sock *rtnl; /* rtnetlink socket */
60 struct sock *genl_sock;
Eric W. Biederman2774c7a2007-09-26 22:10:56 -070061
Eric W. Biederman881d9662007-09-17 11:56:21 -070062 struct list_head dev_base_head;
63 struct hlist_head *dev_name_head;
64 struct hlist_head *dev_index_head;
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080065
Denis V. Lunev5fd30ee2008-01-10 03:20:28 -080066 /* core fib_rules */
67 struct list_head rules_ops;
Denis V. Lunev5fd30ee2008-01-10 03:20:28 -080068
Denis V. Lunevd12d01d2007-11-19 22:28:35 -080069
Eric Dumazet8e602ce2010-10-14 05:56:18 +000070 struct net_device *loopback_dev; /* The loopback */
Pavel Emelyanov8efa6e92008-03-31 19:41:14 -070071 struct netns_core core;
Pavel Emelyanov852566f2008-07-18 04:01:24 -070072 struct netns_mib mib;
Denis V. Lunev2aaef4e2007-12-11 04:19:54 -080073 struct netns_packet packet;
Denis V. Luneva0a53c82007-12-11 04:19:17 -080074 struct netns_unix unx;
Pavel Emelyanov8afd3512007-12-16 13:29:36 -080075 struct netns_ipv4 ipv4;
Daniel Lezcanob0f159d2008-01-10 02:49:06 -080076#if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
77 struct netns_ipv6 ipv6;
78#endif
Pavel Emelyanov67019cc2008-04-13 22:28:42 -070079#if defined(CONFIG_IP_DCCP) || defined(CONFIG_IP_DCCP_MODULE)
80 struct netns_dccp dccp;
81#endif
Alexey Dobriyan8d870052008-01-31 04:02:13 -080082#ifdef CONFIG_NETFILTER
83 struct netns_xt xt;
Alexey Dobriyandfdb8d72008-10-08 11:35:02 +020084#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
85 struct netns_ct ct;
86#endif
Alexey Dobriyancd8c20b2010-01-13 16:02:14 +010087 struct sock *nfnl;
88 struct sock *nfnl_stash;
Alexey Dobriyan8d870052008-01-31 04:02:13 -080089#endif
Johannes Berg3d23e342009-09-29 23:27:28 +020090#ifdef CONFIG_WEXT_CORE
Johannes Bergb333b3d222009-06-24 01:34:48 +000091 struct sk_buff_head wext_nlevents;
92#endif
Eric Dumazet1c877332010-10-25 03:20:11 +000093 struct net_generic __rcu *gen;
Eric Dumazet8e602ce2010-10-14 05:56:18 +000094
95 /* Note : following structs are cache line aligned */
96#ifdef CONFIG_XFRM
97 struct netns_xfrm xfrm;
98#endif
Hans Schillstrom61b1ab42011-01-03 14:44:42 +010099 struct netns_ipvs *ipvs;
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200100};
101
Denis V. Lunev225c0a02008-04-02 00:09:29 -0700102
Denis V. Lunevc0f39322008-04-02 00:10:28 -0700103#include <linux/seq_file_net.h>
104
Daniel Lezcano4fabcd72007-09-13 09:16:29 +0200105/* Init's network namespace */
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200106extern struct net init_net;
Denis V. Luneva4aa8342008-04-03 13:04:33 -0700107
108#ifdef CONFIG_NET
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700109extern struct net *copy_net_ns(unsigned long flags, struct net *net_ns);
Denis V. Lunev225c0a02008-04-02 00:09:29 -0700110
111#else /* CONFIG_NET */
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700112static inline struct net *copy_net_ns(unsigned long flags, struct net *net_ns)
113{
114 /* There is nothing to copy so this is a noop */
115 return net_ns;
116}
Denis V. Lunev225c0a02008-04-02 00:09:29 -0700117#endif /* CONFIG_NET */
118
119
120extern struct list_head net_namespace_list;
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700121
Johannes Berg30ffee82009-07-10 09:51:35 +0000122extern struct net *get_net_ns_by_pid(pid_t pid);
Eric W. Biedermanf0630522011-05-04 17:51:50 -0700123extern struct net *get_net_ns_by_fd(int pid);
Johannes Berg30ffee82009-07-10 09:51:35 +0000124
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700125#ifdef CONFIG_NET_NS
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200126extern void __put_net(struct net *net);
127
128static inline struct net *get_net(struct net *net)
129{
130 atomic_inc(&net->count);
131 return net;
132}
133
Eric W. Biederman077130c2007-09-13 09:18:57 +0200134static inline struct net *maybe_get_net(struct net *net)
135{
136 /* Used when we know struct net exists but we
137 * aren't guaranteed a previous reference count
138 * exists. If the reference count is zero this
139 * function fails and returns NULL.
140 */
141 if (!atomic_inc_not_zero(&net->count))
142 net = NULL;
143 return net;
144}
145
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200146static inline void put_net(struct net *net)
147{
148 if (atomic_dec_and_test(&net->count))
149 __put_net(net);
150}
151
YOSHIFUJI Hideaki878628f2008-03-26 03:57:35 +0900152static inline
153int net_eq(const struct net *net1, const struct net *net2)
154{
155 return net1 == net2;
156}
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700157#else
Eric W. Biedermanb9f75f42008-06-20 22:16:51 -0700158
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700159static inline struct net *get_net(struct net *net)
160{
161 return net;
162}
163
164static inline void put_net(struct net *net)
165{
166}
167
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700168static inline struct net *maybe_get_net(struct net *net)
169{
170 return net;
171}
YOSHIFUJI Hideaki878628f2008-03-26 03:57:35 +0900172
173static inline
174int net_eq(const struct net *net1, const struct net *net2)
175{
176 return 1;
177}
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700178#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200179
Denis V. Lunev5d1e4462008-04-16 01:58:04 -0700180
181#ifdef NETNS_REFCNT_DEBUG
182static inline struct net *hold_net(struct net *net)
183{
184 if (net)
185 atomic_inc(&net->use_count);
186 return net;
187}
188
189static inline void release_net(struct net *net)
190{
191 if (net)
192 atomic_dec(&net->use_count);
193}
194#else
195static inline struct net *hold_net(struct net *net)
196{
197 return net;
198}
199
200static inline void release_net(struct net *net)
201{
202}
203#endif
204
Eric Dumazet8f424b52008-11-12 00:53:30 -0800205#ifdef CONFIG_NET_NS
206
207static inline void write_pnet(struct net **pnet, struct net *net)
208{
209 *pnet = net;
210}
211
212static inline struct net *read_pnet(struct net * const *pnet)
213{
214 return *pnet;
215}
216
217#else
218
219#define write_pnet(pnet, net) do { (void)(net);} while (0)
220#define read_pnet(pnet) (&init_net)
221
222#endif
Denis V. Lunev5d1e4462008-04-16 01:58:04 -0700223
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200224#define for_each_net(VAR) \
225 list_for_each_entry(VAR, &net_namespace_list, list)
226
Johannes Berg11a28d32009-07-10 09:51:33 +0000227#define for_each_net_rcu(VAR) \
228 list_for_each_entry_rcu(VAR, &net_namespace_list, list)
229
Pavel Emelyanov46650792007-10-08 20:38:39 -0700230#ifdef CONFIG_NET_NS
231#define __net_init
232#define __net_exit
Denis V. Lunev022cbae2007-11-13 03:23:50 -0800233#define __net_initdata
Pavel Emelyanov46650792007-10-08 20:38:39 -0700234#else
235#define __net_init __init
236#define __net_exit __exit_refok
Denis V. Lunev022cbae2007-11-13 03:23:50 -0800237#define __net_initdata __initdata
Pavel Emelyanov46650792007-10-08 20:38:39 -0700238#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200239
240struct pernet_operations {
241 struct list_head list;
242 int (*init)(struct net *net);
243 void (*exit)(struct net *net);
Eric W. Biederman72ad9372009-12-03 02:29:03 +0000244 void (*exit_batch)(struct list_head *net_exit_list);
Eric W. Biedermanf875bae2009-11-29 22:25:28 +0000245 int *id;
246 size_t size;
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200247};
248
Eric W. Biederman17edde52009-02-22 00:11:09 -0800249/*
250 * Use these carefully. If you implement a network device and it
251 * needs per network namespace operations use device pernet operations,
252 * otherwise use pernet subsys operations.
253 *
Johannes Berg4edf5472009-07-15 06:16:34 +0000254 * Network interfaces need to be removed from a dying netns _before_
255 * subsys notifiers can be called, as most of the network code cleanup
256 * (which is done from subsys notifiers) runs with the assumption that
257 * dev_remove_pack has been called so no new packets will arrive during
258 * and after the cleanup functions have been called. dev_remove_pack
259 * is not per namespace so instead the guarantee of no more packets
260 * arriving in a network namespace is provided by ensuring that all
261 * network devices and all sockets have left the network namespace
262 * before the cleanup methods are called.
Eric W. Biederman17edde52009-02-22 00:11:09 -0800263 *
264 * For the longest time the ipv4 icmp code was registered as a pernet
265 * device which caused kernel oops, and panics during network
266 * namespace cleanup. So please don't get this wrong.
267 */
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200268extern int register_pernet_subsys(struct pernet_operations *);
269extern void unregister_pernet_subsys(struct pernet_operations *);
270extern int register_pernet_device(struct pernet_operations *);
271extern void unregister_pernet_device(struct pernet_operations *);
Eric W. Biedermanf875bae2009-11-29 22:25:28 +0000272
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100273struct ctl_path;
274struct ctl_table;
275struct ctl_table_header;
Pavel Emelyanovd62c6122008-05-19 13:45:33 -0700276
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100277extern struct ctl_table_header *register_net_sysctl_table(struct net *net,
278 const struct ctl_path *path, struct ctl_table *table);
Pavel Emelyanovd62c6122008-05-19 13:45:33 -0700279extern struct ctl_table_header *register_net_sysctl_rotable(
280 const struct ctl_path *path, struct ctl_table *table);
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100281extern void unregister_net_sysctl_table(struct ctl_table_header *header);
282
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200283#endif /* __NET_NET_NAMESPACE_H */