YOSHIFUJI Hideaki | 10297b9 | 2007-02-09 23:25:16 +0900 | [diff] [blame] | 1 | /* net/sched/sch_ingress.c - Ingress qdisc |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 2 | * This program is free software; you can redistribute it and/or |
| 3 | * modify it under the terms of the GNU General Public License |
| 4 | * as published by the Free Software Foundation; either version |
| 5 | * 2 of the License, or (at your option) any later version. |
| 6 | * |
| 7 | * Authors: Jamal Hadi Salim 1999 |
| 8 | */ |
| 9 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 10 | #include <linux/module.h> |
| 11 | #include <linux/types.h> |
Patrick McHardy | 0ba4805 | 2007-07-02 22:49:07 -0700 | [diff] [blame] | 12 | #include <linux/list.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 13 | #include <linux/skbuff.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 14 | #include <linux/rtnetlink.h> |
| 15 | #include <linux/netfilter_ipv4.h> |
| 16 | #include <linux/netfilter_ipv6.h> |
| 17 | #include <linux/netfilter.h> |
Arnaldo Carvalho de Melo | dc5fc57 | 2007-03-25 23:06:12 -0700 | [diff] [blame] | 18 | #include <net/netlink.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 19 | #include <net/pkt_sched.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 20 | |
| 21 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 22 | #define PRIV(sch) qdisc_priv(sch) |
| 23 | |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 24 | /* Thanks to Doron Oz for this hack */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 25 | #ifndef CONFIG_NET_CLS_ACT |
| 26 | #ifdef CONFIG_NETFILTER |
YOSHIFUJI Hideaki | 10297b9 | 2007-02-09 23:25:16 +0900 | [diff] [blame] | 27 | static int nf_registered; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 28 | #endif |
| 29 | #endif |
| 30 | |
| 31 | struct ingress_qdisc_data { |
| 32 | struct Qdisc *q; |
| 33 | struct tcf_proto *filter_list; |
| 34 | }; |
| 35 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 36 | /* ------------------------- Class/flow operations ------------------------- */ |
| 37 | |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 38 | static int ingress_graft(struct Qdisc *sch, unsigned long arg, |
| 39 | struct Qdisc *new, struct Qdisc **old) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 40 | { |
YOSHIFUJI Hideaki | 10297b9 | 2007-02-09 23:25:16 +0900 | [diff] [blame] | 41 | return 1; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 42 | } |
| 43 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 44 | static struct Qdisc *ingress_leaf(struct Qdisc *sch, unsigned long arg) |
| 45 | { |
| 46 | return NULL; |
| 47 | } |
| 48 | |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 49 | static unsigned long ingress_get(struct Qdisc *sch, u32 classid) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 50 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 51 | return TC_H_MIN(classid) + 1; |
| 52 | } |
| 53 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 54 | static unsigned long ingress_bind_filter(struct Qdisc *sch, |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 55 | unsigned long parent, u32 classid) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 56 | { |
| 57 | return ingress_get(sch, classid); |
| 58 | } |
| 59 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 60 | static void ingress_put(struct Qdisc *sch, unsigned long cl) |
| 61 | { |
| 62 | } |
| 63 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 64 | static int ingress_change(struct Qdisc *sch, u32 classid, u32 parent, |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 65 | struct rtattr **tca, unsigned long *arg) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 66 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 67 | return 0; |
| 68 | } |
| 69 | |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 70 | static void ingress_walk(struct Qdisc *sch, struct qdisc_walker *walker) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 71 | { |
Patrick McHardy | a478122 | 2008-01-21 00:11:21 -0800 | [diff] [blame^] | 72 | return; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 73 | } |
| 74 | |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 75 | static struct tcf_proto **ingress_find_tcf(struct Qdisc *sch, unsigned long cl) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 76 | { |
| 77 | struct ingress_qdisc_data *p = PRIV(sch); |
| 78 | |
| 79 | return &p->filter_list; |
| 80 | } |
| 81 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 82 | /* --------------------------- Qdisc operations ---------------------------- */ |
| 83 | |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 84 | static int ingress_enqueue(struct sk_buff *skb, struct Qdisc *sch) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 85 | { |
| 86 | struct ingress_qdisc_data *p = PRIV(sch); |
| 87 | struct tcf_result res; |
| 88 | int result; |
| 89 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 90 | result = tc_classify(skb, p->filter_list, &res); |
Patrick McHardy | a478122 | 2008-01-21 00:11:21 -0800 | [diff] [blame^] | 91 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 92 | /* |
| 93 | * Unlike normal "enqueue" functions, ingress_enqueue returns a |
| 94 | * firewall FW_* code. |
| 95 | */ |
| 96 | #ifdef CONFIG_NET_CLS_ACT |
| 97 | sch->bstats.packets++; |
| 98 | sch->bstats.bytes += skb->len; |
| 99 | switch (result) { |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 100 | case TC_ACT_SHOT: |
| 101 | result = TC_ACT_SHOT; |
| 102 | sch->qstats.drops++; |
| 103 | break; |
| 104 | case TC_ACT_STOLEN: |
| 105 | case TC_ACT_QUEUED: |
| 106 | result = TC_ACT_STOLEN; |
| 107 | break; |
| 108 | case TC_ACT_RECLASSIFY: |
| 109 | case TC_ACT_OK: |
| 110 | skb->tc_index = TC_H_MIN(res.classid); |
| 111 | default: |
| 112 | result = TC_ACT_OK; |
| 113 | break; |
Stephen Hemminger | 3ff50b7 | 2007-04-20 17:09:22 -0700 | [diff] [blame] | 114 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 115 | #else |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 116 | result = NF_ACCEPT; |
| 117 | sch->bstats.packets++; |
| 118 | sch->bstats.bytes += skb->len; |
| 119 | #endif |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 120 | |
| 121 | return result; |
| 122 | } |
| 123 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 124 | static struct sk_buff *ingress_dequeue(struct Qdisc *sch) |
| 125 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 126 | return NULL; |
| 127 | } |
| 128 | |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 129 | static int ingress_requeue(struct sk_buff *skb, struct Qdisc *sch) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 130 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 131 | return 0; |
| 132 | } |
| 133 | |
| 134 | static unsigned int ingress_drop(struct Qdisc *sch) |
| 135 | { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 136 | return 0; |
| 137 | } |
| 138 | |
| 139 | #ifndef CONFIG_NET_CLS_ACT |
| 140 | #ifdef CONFIG_NETFILTER |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 141 | static unsigned int ing_hook(unsigned int hook, struct sk_buff *skb, |
YOSHIFUJI Hideaki | 10297b9 | 2007-02-09 23:25:16 +0900 | [diff] [blame] | 142 | const struct net_device *indev, |
| 143 | const struct net_device *outdev, |
| 144 | int (*okfn)(struct sk_buff *)) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 145 | { |
YOSHIFUJI Hideaki | 10297b9 | 2007-02-09 23:25:16 +0900 | [diff] [blame] | 146 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 147 | struct Qdisc *q; |
YOSHIFUJI Hideaki | 10297b9 | 2007-02-09 23:25:16 +0900 | [diff] [blame] | 148 | struct net_device *dev = skb->dev; |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 149 | int fwres = NF_ACCEPT; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 150 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 151 | if (dev->qdisc_ingress) { |
Patrick McHardy | fd44de7 | 2007-04-16 17:07:08 -0700 | [diff] [blame] | 152 | spin_lock(&dev->ingress_lock); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 153 | if ((q = dev->qdisc_ingress) != NULL) |
| 154 | fwres = q->enqueue(skb, q); |
Patrick McHardy | fd44de7 | 2007-04-16 17:07:08 -0700 | [diff] [blame] | 155 | spin_unlock(&dev->ingress_lock); |
YOSHIFUJI Hideaki | 10297b9 | 2007-02-09 23:25:16 +0900 | [diff] [blame] | 156 | } |
| 157 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 158 | return fwres; |
| 159 | } |
| 160 | |
| 161 | /* after ipt_filter */ |
Patrick McHardy | 1999414 | 2007-12-05 01:23:00 -0800 | [diff] [blame] | 162 | static struct nf_hook_ops ing_ops[] __read_mostly = { |
Patrick McHardy | 41c5b31 | 2007-12-05 01:22:43 -0800 | [diff] [blame] | 163 | { |
| 164 | .hook = ing_hook, |
| 165 | .owner = THIS_MODULE, |
| 166 | .pf = PF_INET, |
| 167 | .hooknum = NF_INET_PRE_ROUTING, |
| 168 | .priority = NF_IP_PRI_FILTER + 1, |
| 169 | }, |
| 170 | { |
| 171 | .hook = ing_hook, |
| 172 | .owner = THIS_MODULE, |
| 173 | .pf = PF_INET6, |
| 174 | .hooknum = NF_INET_PRE_ROUTING, |
| 175 | .priority = NF_IP6_PRI_FILTER + 1, |
| 176 | }, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 177 | }; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 178 | #endif |
| 179 | #endif |
| 180 | |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 181 | static int ingress_init(struct Qdisc *sch, struct rtattr *opt) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 182 | { |
| 183 | struct ingress_qdisc_data *p = PRIV(sch); |
| 184 | |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 185 | /* Make sure either netfilter or preferably CLS_ACT is |
| 186 | * compiled in */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 187 | #ifndef CONFIG_NET_CLS_ACT |
| 188 | #ifndef CONFIG_NETFILTER |
| 189 | printk("You MUST compile classifier actions into the kernel\n"); |
| 190 | return -EINVAL; |
| 191 | #else |
| 192 | printk("Ingress scheduler: Classifier actions prefered over netfilter\n"); |
| 193 | #endif |
| 194 | #endif |
YOSHIFUJI Hideaki | 10297b9 | 2007-02-09 23:25:16 +0900 | [diff] [blame] | 195 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 196 | #ifndef CONFIG_NET_CLS_ACT |
| 197 | #ifdef CONFIG_NETFILTER |
| 198 | if (!nf_registered) { |
Patrick McHardy | 41c5b31 | 2007-12-05 01:22:43 -0800 | [diff] [blame] | 199 | if (nf_register_hooks(ing_ops, ARRAY_SIZE(ing_ops)) < 0) { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 200 | printk("ingress qdisc registration error \n"); |
| 201 | return -EINVAL; |
| 202 | } |
| 203 | nf_registered++; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 204 | } |
| 205 | #endif |
| 206 | #endif |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 207 | p->q = &noop_qdisc; |
| 208 | return 0; |
| 209 | } |
| 210 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 211 | static void ingress_reset(struct Qdisc *sch) |
| 212 | { |
Patrick McHardy | a478122 | 2008-01-21 00:11:21 -0800 | [diff] [blame^] | 213 | return; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 214 | } |
| 215 | |
| 216 | /* ------------------------------------------------------------- */ |
| 217 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 218 | static void ingress_destroy(struct Qdisc *sch) |
| 219 | { |
| 220 | struct ingress_qdisc_data *p = PRIV(sch); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 221 | |
Patrick McHardy | a48b5a6 | 2007-03-23 11:29:43 -0700 | [diff] [blame] | 222 | tcf_destroy_chain(p->filter_list); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 223 | } |
| 224 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 225 | static int ingress_dump(struct Qdisc *sch, struct sk_buff *skb) |
| 226 | { |
Arnaldo Carvalho de Melo | 27a884d | 2007-04-19 20:29:13 -0700 | [diff] [blame] | 227 | unsigned char *b = skb_tail_pointer(skb); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 228 | struct rtattr *rta; |
| 229 | |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 230 | rta = (struct rtattr *)b; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 231 | RTA_PUT(skb, TCA_OPTIONS, 0, NULL); |
Arnaldo Carvalho de Melo | 27a884d | 2007-04-19 20:29:13 -0700 | [diff] [blame] | 232 | rta->rta_len = skb_tail_pointer(skb) - b; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 233 | return skb->len; |
| 234 | |
| 235 | rtattr_failure: |
Arnaldo Carvalho de Melo | dc5fc57 | 2007-03-25 23:06:12 -0700 | [diff] [blame] | 236 | nlmsg_trim(skb, b); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 237 | return -1; |
| 238 | } |
| 239 | |
Eric Dumazet | 20fea08 | 2007-11-14 01:44:41 -0800 | [diff] [blame] | 240 | static const struct Qdisc_class_ops ingress_class_ops = { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 241 | .graft = ingress_graft, |
| 242 | .leaf = ingress_leaf, |
| 243 | .get = ingress_get, |
| 244 | .put = ingress_put, |
| 245 | .change = ingress_change, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 246 | .walk = ingress_walk, |
| 247 | .tcf_chain = ingress_find_tcf, |
| 248 | .bind_tcf = ingress_bind_filter, |
| 249 | .unbind_tcf = ingress_put, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 250 | }; |
| 251 | |
Eric Dumazet | 20fea08 | 2007-11-14 01:44:41 -0800 | [diff] [blame] | 252 | static struct Qdisc_ops ingress_qdisc_ops __read_mostly = { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 253 | .cl_ops = &ingress_class_ops, |
| 254 | .id = "ingress", |
| 255 | .priv_size = sizeof(struct ingress_qdisc_data), |
| 256 | .enqueue = ingress_enqueue, |
| 257 | .dequeue = ingress_dequeue, |
| 258 | .requeue = ingress_requeue, |
| 259 | .drop = ingress_drop, |
| 260 | .init = ingress_init, |
| 261 | .reset = ingress_reset, |
| 262 | .destroy = ingress_destroy, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 263 | .dump = ingress_dump, |
| 264 | .owner = THIS_MODULE, |
| 265 | }; |
| 266 | |
| 267 | static int __init ingress_module_init(void) |
| 268 | { |
| 269 | int ret = 0; |
| 270 | |
| 271 | if ((ret = register_qdisc(&ingress_qdisc_ops)) < 0) { |
| 272 | printk("Unable to register Ingress qdisc\n"); |
| 273 | return ret; |
| 274 | } |
| 275 | |
| 276 | return ret; |
| 277 | } |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 278 | |
YOSHIFUJI Hideaki | 10297b9 | 2007-02-09 23:25:16 +0900 | [diff] [blame] | 279 | static void __exit ingress_module_exit(void) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 280 | { |
| 281 | unregister_qdisc(&ingress_qdisc_ops); |
| 282 | #ifndef CONFIG_NET_CLS_ACT |
| 283 | #ifdef CONFIG_NETFILTER |
Patrick McHardy | 41c5b31 | 2007-12-05 01:22:43 -0800 | [diff] [blame] | 284 | if (nf_registered) |
| 285 | nf_unregister_hooks(ing_ops, ARRAY_SIZE(ing_ops)); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 286 | #endif |
| 287 | #endif |
| 288 | } |
Patrick McHardy | 58f4df4 | 2008-01-21 00:11:01 -0800 | [diff] [blame] | 289 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 290 | module_init(ingress_module_init) |
| 291 | module_exit(ingress_module_exit) |
| 292 | MODULE_LICENSE("GPL"); |