blob: 3f9cece13807992ca2faf56252beb14d0d42bdbf [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * net/sched/cls_fw.c Classifier mapping ipchains' fwmark to traffic class.
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version
7 * 2 of the License, or (at your option) any later version.
8 *
9 * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
10 *
11 * Changes:
12 * Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_walk off by one
13 * Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_delete killed all the filter (and kernel).
14 * Alex <alex@pilotsoft.com> : 2004xxyy: Added Action extension
15 *
16 * JHS: We should remove the CONFIG_NET_CLS_IND from here
17 * eventually when the meta match extension is made available
18 *
19 */
20
Linus Torvalds1da177e2005-04-16 15:20:36 -070021#include <linux/module.h>
Tejun Heo5a0e3ad2010-03-24 17:04:11 +090022#include <linux/slab.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070023#include <linux/types.h>
24#include <linux/kernel.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070025#include <linux/string.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070026#include <linux/errno.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070027#include <linux/skbuff.h>
Patrick McHardy0ba48052007-07-02 22:49:07 -070028#include <net/netlink.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070029#include <net/act_api.h>
30#include <net/pkt_cls.h>
31
Thomas Grafc5c13fa2005-04-24 20:19:54 -070032#define HTSIZE (PAGE_SIZE/sizeof(struct fw_filter *))
33
Eric Dumazetcc7ec452011-01-19 19:26:56 +000034struct fw_head {
Thomas Grafc5c13fa2005-04-24 20:19:54 -070035 struct fw_filter *ht[HTSIZE];
Patrick McHardyb4e9b522006-08-25 16:11:42 -070036 u32 mask;
Linus Torvalds1da177e2005-04-16 15:20:36 -070037};
38
Eric Dumazetcc7ec452011-01-19 19:26:56 +000039struct fw_filter {
Linus Torvalds1da177e2005-04-16 15:20:36 -070040 struct fw_filter *next;
41 u32 id;
42 struct tcf_result res;
43#ifdef CONFIG_NET_CLS_IND
44 char indev[IFNAMSIZ];
45#endif /* CONFIG_NET_CLS_IND */
46 struct tcf_exts exts;
47};
48
Eric Dumazetcc7ec452011-01-19 19:26:56 +000049static inline int fw_hash(u32 handle)
Linus Torvalds1da177e2005-04-16 15:20:36 -070050{
Thomas Grafc5c13fa2005-04-24 20:19:54 -070051 if (HTSIZE == 4096)
52 return ((handle >> 24) & 0xFFF) ^
53 ((handle >> 12) & 0xFFF) ^
54 (handle & 0xFFF);
55 else if (HTSIZE == 2048)
56 return ((handle >> 22) & 0x7FF) ^
57 ((handle >> 11) & 0x7FF) ^
58 (handle & 0x7FF);
59 else if (HTSIZE == 1024)
60 return ((handle >> 20) & 0x3FF) ^
61 ((handle >> 10) & 0x3FF) ^
62 (handle & 0x3FF);
63 else if (HTSIZE == 512)
64 return (handle >> 27) ^
65 ((handle >> 18) & 0x1FF) ^
66 ((handle >> 9) & 0x1FF) ^
67 (handle & 0x1FF);
68 else if (HTSIZE == 256) {
69 u8 *t = (u8 *) &handle;
70 return t[0] ^ t[1] ^ t[2] ^ t[3];
YOSHIFUJI Hideaki10297b92007-02-09 23:25:16 +090071 } else
Thomas Grafc5c13fa2005-04-24 20:19:54 -070072 return handle & (HTSIZE - 1);
Linus Torvalds1da177e2005-04-16 15:20:36 -070073}
74
Eric Dumazetdc7f9f62011-07-05 23:25:42 +000075static int fw_classify(struct sk_buff *skb, const struct tcf_proto *tp,
Linus Torvalds1da177e2005-04-16 15:20:36 -070076 struct tcf_result *res)
77{
Eric Dumazetcc7ec452011-01-19 19:26:56 +000078 struct fw_head *head = (struct fw_head *)tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -070079 struct fw_filter *f;
80 int r;
Patrick McHardy5c804bf2006-12-05 13:46:13 -080081 u32 id = skb->mark;
Linus Torvalds1da177e2005-04-16 15:20:36 -070082
83 if (head != NULL) {
Patrick McHardy5c804bf2006-12-05 13:46:13 -080084 id &= head->mask;
Eric Dumazetcc7ec452011-01-19 19:26:56 +000085 for (f = head->ht[fw_hash(id)]; f; f = f->next) {
Linus Torvalds1da177e2005-04-16 15:20:36 -070086 if (f->id == id) {
87 *res = f->res;
88#ifdef CONFIG_NET_CLS_IND
89 if (!tcf_match_indev(skb, f->indev))
90 continue;
91#endif /* CONFIG_NET_CLS_IND */
92 r = tcf_exts_exec(skb, &f->exts, res);
93 if (r < 0)
94 continue;
95
96 return r;
97 }
98 }
99 } else {
100 /* old method */
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000101 if (id && (TC_H_MAJ(id) == 0 ||
102 !(TC_H_MAJ(id ^ tp->q->handle)))) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700103 res->classid = id;
104 res->class = 0;
105 return 0;
106 }
107 }
108
109 return -1;
110}
111
112static unsigned long fw_get(struct tcf_proto *tp, u32 handle)
113{
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000114 struct fw_head *head = (struct fw_head *)tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700115 struct fw_filter *f;
116
117 if (head == NULL)
118 return 0;
119
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000120 for (f = head->ht[fw_hash(handle)]; f; f = f->next) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700121 if (f->id == handle)
122 return (unsigned long)f;
123 }
124 return 0;
125}
126
127static void fw_put(struct tcf_proto *tp, unsigned long f)
128{
129}
130
131static int fw_init(struct tcf_proto *tp)
132{
133 return 0;
134}
135
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000136static void fw_delete_filter(struct tcf_proto *tp, struct fw_filter *f)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700137{
138 tcf_unbind_filter(tp, &f->res);
139 tcf_exts_destroy(tp, &f->exts);
140 kfree(f);
141}
142
143static void fw_destroy(struct tcf_proto *tp)
144{
Patrick McHardy47a1a1d2008-11-19 08:03:09 +0000145 struct fw_head *head = tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700146 struct fw_filter *f;
147 int h;
148
149 if (head == NULL)
150 return;
151
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000152 for (h = 0; h < HTSIZE; h++) {
153 while ((f = head->ht[h]) != NULL) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700154 head->ht[h] = f->next;
155 fw_delete_filter(tp, f);
156 }
157 }
158 kfree(head);
159}
160
161static int fw_delete(struct tcf_proto *tp, unsigned long arg)
162{
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000163 struct fw_head *head = (struct fw_head *)tp->root;
164 struct fw_filter *f = (struct fw_filter *)arg;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700165 struct fw_filter **fp;
166
167 if (head == NULL || f == NULL)
168 goto out;
169
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000170 for (fp = &head->ht[fw_hash(f->id)]; *fp; fp = &(*fp)->next) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700171 if (*fp == f) {
172 tcf_tree_lock(tp);
173 *fp = f->next;
174 tcf_tree_unlock(tp);
175 fw_delete_filter(tp, f);
176 return 0;
177 }
178 }
179out:
180 return -EINVAL;
181}
182
Patrick McHardy6fa8c012008-01-23 20:36:12 -0800183static const struct nla_policy fw_policy[TCA_FW_MAX + 1] = {
184 [TCA_FW_CLASSID] = { .type = NLA_U32 },
185 [TCA_FW_INDEV] = { .type = NLA_STRING, .len = IFNAMSIZ },
186 [TCA_FW_MASK] = { .type = NLA_U32 },
187};
188
Linus Torvalds1da177e2005-04-16 15:20:36 -0700189static int
Benjamin LaHaisec1b52732013-01-14 05:15:39 +0000190fw_change_attrs(struct net *net, struct tcf_proto *tp, struct fw_filter *f,
Patrick McHardyadd93b62008-01-22 22:11:33 -0800191 struct nlattr **tb, struct nlattr **tca, unsigned long base)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700192{
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700193 struct fw_head *head = (struct fw_head *)tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700194 struct tcf_exts e;
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700195 u32 mask;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700196 int err;
197
WANG Cong5da57f42013-12-15 20:15:07 -0800198 tcf_exts_init(&e, TCA_FW_ACT, TCA_FW_POLICE);
199 err = tcf_exts_validate(net, tp, tb, tca[TCA_RATE], &e);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700200 if (err < 0)
201 return err;
202
Patrick McHardyadd93b62008-01-22 22:11:33 -0800203 if (tb[TCA_FW_CLASSID]) {
Patrick McHardy1587bac2008-01-23 20:35:03 -0800204 f->res.classid = nla_get_u32(tb[TCA_FW_CLASSID]);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700205 tcf_bind_filter(tp, &f->res, base);
206 }
207
208#ifdef CONFIG_NET_CLS_IND
Patrick McHardyadd93b62008-01-22 22:11:33 -0800209 if (tb[TCA_FW_INDEV]) {
210 err = tcf_change_indev(tp, f->indev, tb[TCA_FW_INDEV]);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700211 if (err < 0)
212 goto errout;
213 }
214#endif /* CONFIG_NET_CLS_IND */
215
Wei Yongjuncb95ec62013-04-17 16:49:10 +0000216 err = -EINVAL;
Patrick McHardyadd93b62008-01-22 22:11:33 -0800217 if (tb[TCA_FW_MASK]) {
Patrick McHardy1587bac2008-01-23 20:35:03 -0800218 mask = nla_get_u32(tb[TCA_FW_MASK]);
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700219 if (mask != head->mask)
220 goto errout;
221 } else if (head->mask != 0xFFFFFFFF)
222 goto errout;
223
Linus Torvalds1da177e2005-04-16 15:20:36 -0700224 tcf_exts_change(tp, &f->exts, &e);
225
226 return 0;
227errout:
228 tcf_exts_destroy(tp, &e);
229 return err;
230}
231
Benjamin LaHaisec1b52732013-01-14 05:15:39 +0000232static int fw_change(struct net *net, struct sk_buff *in_skb,
Eric W. Biedermanaf4c6642012-05-25 13:42:45 -0600233 struct tcf_proto *tp, unsigned long base,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700234 u32 handle,
Patrick McHardyadd93b62008-01-22 22:11:33 -0800235 struct nlattr **tca,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700236 unsigned long *arg)
237{
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000238 struct fw_head *head = (struct fw_head *)tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700239 struct fw_filter *f = (struct fw_filter *) *arg;
Patrick McHardyadd93b62008-01-22 22:11:33 -0800240 struct nlattr *opt = tca[TCA_OPTIONS];
241 struct nlattr *tb[TCA_FW_MAX + 1];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700242 int err;
243
244 if (!opt)
245 return handle ? -EINVAL : 0;
246
Patrick McHardy6fa8c012008-01-23 20:36:12 -0800247 err = nla_parse_nested(tb, TCA_FW_MAX, opt, fw_policy);
Patrick McHardycee63722008-01-23 20:33:32 -0800248 if (err < 0)
249 return err;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700250
251 if (f != NULL) {
252 if (f->id != handle && handle)
253 return -EINVAL;
Benjamin LaHaisec1b52732013-01-14 05:15:39 +0000254 return fw_change_attrs(net, tp, f, tb, tca, base);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700255 }
256
257 if (!handle)
258 return -EINVAL;
259
260 if (head == NULL) {
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700261 u32 mask = 0xFFFFFFFF;
Patrick McHardy6fa8c012008-01-23 20:36:12 -0800262 if (tb[TCA_FW_MASK])
Patrick McHardy1587bac2008-01-23 20:35:03 -0800263 mask = nla_get_u32(tb[TCA_FW_MASK]);
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700264
Panagiotis Issaris0da974f2006-07-21 14:51:30 -0700265 head = kzalloc(sizeof(struct fw_head), GFP_KERNEL);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700266 if (head == NULL)
267 return -ENOBUFS;
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700268 head->mask = mask;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700269
270 tcf_tree_lock(tp);
271 tp->root = head;
272 tcf_tree_unlock(tp);
273 }
274
Panagiotis Issaris0da974f2006-07-21 14:51:30 -0700275 f = kzalloc(sizeof(struct fw_filter), GFP_KERNEL);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700276 if (f == NULL)
277 return -ENOBUFS;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700278
WANG Cong5da57f42013-12-15 20:15:07 -0800279 tcf_exts_init(&f->exts, TCA_FW_ACT, TCA_FW_POLICE);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700280 f->id = handle;
281
Benjamin LaHaisec1b52732013-01-14 05:15:39 +0000282 err = fw_change_attrs(net, tp, f, tb, tca, base);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700283 if (err < 0)
284 goto errout;
285
286 f->next = head->ht[fw_hash(handle)];
287 tcf_tree_lock(tp);
288 head->ht[fw_hash(handle)] = f;
289 tcf_tree_unlock(tp);
290
291 *arg = (unsigned long)f;
292 return 0;
293
294errout:
Jesper Juhla51482b2005-11-08 09:41:34 -0800295 kfree(f);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700296 return err;
297}
298
299static void fw_walk(struct tcf_proto *tp, struct tcf_walker *arg)
300{
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000301 struct fw_head *head = (struct fw_head *)tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700302 int h;
303
304 if (head == NULL)
305 arg->stop = 1;
306
307 if (arg->stop)
308 return;
309
Thomas Grafc5c13fa2005-04-24 20:19:54 -0700310 for (h = 0; h < HTSIZE; h++) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700311 struct fw_filter *f;
312
313 for (f = head->ht[h]; f; f = f->next) {
314 if (arg->count < arg->skip) {
315 arg->count++;
316 continue;
317 }
318 if (arg->fn(tp, (unsigned long)f, arg) < 0) {
319 arg->stop = 1;
320 return;
321 }
322 arg->count++;
323 }
324 }
325}
326
327static int fw_dump(struct tcf_proto *tp, unsigned long fh,
328 struct sk_buff *skb, struct tcmsg *t)
329{
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700330 struct fw_head *head = (struct fw_head *)tp->root;
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000331 struct fw_filter *f = (struct fw_filter *)fh;
Arnaldo Carvalho de Melo27a884d2007-04-19 20:29:13 -0700332 unsigned char *b = skb_tail_pointer(skb);
Patrick McHardy4b3550ef2008-01-23 20:34:11 -0800333 struct nlattr *nest;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700334
335 if (f == NULL)
336 return skb->len;
337
338 t->tcm_handle = f->id;
339
340 if (!f->res.classid && !tcf_exts_is_available(&f->exts))
341 return skb->len;
342
Patrick McHardy4b3550ef2008-01-23 20:34:11 -0800343 nest = nla_nest_start(skb, TCA_OPTIONS);
344 if (nest == NULL)
345 goto nla_put_failure;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700346
David S. Miller1b34ec42012-03-29 05:11:39 -0400347 if (f->res.classid &&
348 nla_put_u32(skb, TCA_FW_CLASSID, f->res.classid))
349 goto nla_put_failure;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700350#ifdef CONFIG_NET_CLS_IND
David S. Miller1b34ec42012-03-29 05:11:39 -0400351 if (strlen(f->indev) &&
352 nla_put_string(skb, TCA_FW_INDEV, f->indev))
353 goto nla_put_failure;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700354#endif /* CONFIG_NET_CLS_IND */
David S. Miller1b34ec42012-03-29 05:11:39 -0400355 if (head->mask != 0xFFFFFFFF &&
356 nla_put_u32(skb, TCA_FW_MASK, head->mask))
357 goto nla_put_failure;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700358
WANG Cong5da57f42013-12-15 20:15:07 -0800359 if (tcf_exts_dump(skb, &f->exts) < 0)
Patrick McHardyadd93b62008-01-22 22:11:33 -0800360 goto nla_put_failure;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700361
Patrick McHardy4b3550ef2008-01-23 20:34:11 -0800362 nla_nest_end(skb, nest);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700363
WANG Cong5da57f42013-12-15 20:15:07 -0800364 if (tcf_exts_dump_stats(skb, &f->exts) < 0)
Patrick McHardyadd93b62008-01-22 22:11:33 -0800365 goto nla_put_failure;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700366
367 return skb->len;
368
Patrick McHardyadd93b62008-01-22 22:11:33 -0800369nla_put_failure:
Arnaldo Carvalho de Melodc5fc572007-03-25 23:06:12 -0700370 nlmsg_trim(skb, b);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700371 return -1;
372}
373
Patrick McHardy2eb9d752008-01-22 22:10:42 -0800374static struct tcf_proto_ops cls_fw_ops __read_mostly = {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700375 .kind = "fw",
376 .classify = fw_classify,
377 .init = fw_init,
378 .destroy = fw_destroy,
379 .get = fw_get,
380 .put = fw_put,
381 .change = fw_change,
382 .delete = fw_delete,
383 .walk = fw_walk,
384 .dump = fw_dump,
385 .owner = THIS_MODULE,
386};
387
388static int __init init_fw(void)
389{
390 return register_tcf_proto_ops(&cls_fw_ops);
391}
392
YOSHIFUJI Hideaki10297b92007-02-09 23:25:16 +0900393static void __exit exit_fw(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700394{
395 unregister_tcf_proto_ops(&cls_fw_ops);
396}
397
398module_init(init_fw)
399module_exit(exit_fw)
400MODULE_LICENSE("GPL");