Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Handle incoming frames |
| 3 | * Linux ethernet bridge |
| 4 | * |
| 5 | * Authors: |
| 6 | * Lennert Buytenhek <buytenh@gnu.org> |
| 7 | * |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 8 | * This program is free software; you can redistribute it and/or |
| 9 | * modify it under the terms of the GNU General Public License |
| 10 | * as published by the Free Software Foundation; either version |
| 11 | * 2 of the License, or (at your option) any later version. |
| 12 | */ |
| 13 | |
Tejun Heo | 5a0e3ad | 2010-03-24 17:04:11 +0900 | [diff] [blame] | 14 | #include <linux/slab.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 15 | #include <linux/kernel.h> |
| 16 | #include <linux/netdevice.h> |
| 17 | #include <linux/etherdevice.h> |
| 18 | #include <linux/netfilter_bridge.h> |
Paul Gortmaker | bc3b2d7 | 2011-07-15 11:47:34 -0400 | [diff] [blame] | 19 | #include <linux/export.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 20 | #include "br_private.h" |
| 21 | |
Eric Dumazet | a386f99 | 2010-11-15 06:38:11 +0000 | [diff] [blame] | 22 | /* Hook for brouter */ |
| 23 | br_should_route_hook_t __rcu *br_should_route_hook __read_mostly; |
| 24 | EXPORT_SYMBOL(br_should_route_hook); |
| 25 | |
Herbert Xu | 68b7c89 | 2010-02-27 19:41:40 +0000 | [diff] [blame] | 26 | static int br_pass_frame_up(struct sk_buff *skb) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 27 | { |
Herbert Xu | 68b7c89 | 2010-02-27 19:41:40 +0000 | [diff] [blame] | 28 | struct net_device *indev, *brdev = BR_INPUT_SKB_CB(skb)->brdev; |
stephen hemminger | 14bb478 | 2010-03-02 13:32:09 +0000 | [diff] [blame] | 29 | struct net_bridge *br = netdev_priv(brdev); |
| 30 | struct br_cpu_netstats *brstats = this_cpu_ptr(br->stats); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 31 | |
Eric Dumazet | 406818f | 2010-06-23 13:00:48 -0700 | [diff] [blame] | 32 | u64_stats_update_begin(&brstats->syncp); |
stephen hemminger | 14bb478 | 2010-03-02 13:32:09 +0000 | [diff] [blame] | 33 | brstats->rx_packets++; |
| 34 | brstats->rx_bytes += skb->len; |
Eric Dumazet | 406818f | 2010-06-23 13:00:48 -0700 | [diff] [blame] | 35 | u64_stats_update_end(&brstats->syncp); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 36 | |
| 37 | indev = skb->dev; |
Pavel Emelyanov | a339f1c | 2008-05-21 14:13:47 -0700 | [diff] [blame] | 38 | skb->dev = brdev; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 39 | |
Jan Engelhardt | 713aefa | 2010-03-23 04:07:21 +0100 | [diff] [blame] | 40 | return NF_HOOK(NFPROTO_BRIDGE, NF_BR_LOCAL_IN, skb, indev, NULL, |
Herbert Xu | 68b7c89 | 2010-02-27 19:41:40 +0000 | [diff] [blame] | 41 | netif_receive_skb); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 42 | } |
| 43 | |
stephen hemminger | eeaf61d | 2010-07-27 08:26:30 +0000 | [diff] [blame] | 44 | /* note: already called with rcu_read_lock */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 45 | int br_handle_frame_finish(struct sk_buff *skb) |
| 46 | { |
| 47 | const unsigned char *dest = eth_hdr(skb)->h_dest; |
Jiri Pirko | f350a0a8 | 2010-06-15 06:50:45 +0000 | [diff] [blame] | 48 | struct net_bridge_port *p = br_port_get_rcu(skb->dev); |
Stephen Hemminger | b3f1be4 | 2006-02-09 17:08:52 -0800 | [diff] [blame] | 49 | struct net_bridge *br; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 50 | struct net_bridge_fdb_entry *dst; |
Herbert Xu | c4fcb78 | 2010-02-27 19:41:48 +0000 | [diff] [blame] | 51 | struct net_bridge_mdb_entry *mdst; |
Herbert Xu | e081e1e | 2007-09-16 16:20:48 -0700 | [diff] [blame] | 52 | struct sk_buff *skb2; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 53 | |
Stephen Hemminger | b3f1be4 | 2006-02-09 17:08:52 -0800 | [diff] [blame] | 54 | if (!p || p->state == BR_STATE_DISABLED) |
| 55 | goto drop; |
Stephen Hemminger | 85967bb | 2005-05-29 14:15:55 -0700 | [diff] [blame] | 56 | |
Stephen Hemminger | b3f1be4 | 2006-02-09 17:08:52 -0800 | [diff] [blame] | 57 | /* insert into forwarding database after filtering to avoid spoofing */ |
| 58 | br = p->br; |
| 59 | br_fdb_update(br, p, eth_hdr(skb)->h_source); |
| 60 | |
Herbert Xu | 4466146 | 2011-07-05 13:58:33 +0000 | [diff] [blame] | 61 | if (!is_broadcast_ether_addr(dest) && is_multicast_ether_addr(dest) && |
Herbert Xu | c4fcb78 | 2010-02-27 19:41:48 +0000 | [diff] [blame] | 62 | br_multicast_rcv(br, p, skb)) |
| 63 | goto drop; |
| 64 | |
Stephen Hemminger | b3f1be4 | 2006-02-09 17:08:52 -0800 | [diff] [blame] | 65 | if (p->state == BR_STATE_LEARNING) |
| 66 | goto drop; |
Stephen Hemminger | 0e5eaba | 2005-12-21 19:00:18 -0800 | [diff] [blame] | 67 | |
Herbert Xu | 68b7c89 | 2010-02-27 19:41:40 +0000 | [diff] [blame] | 68 | BR_INPUT_SKB_CB(skb)->brdev = br->dev; |
| 69 | |
Herbert Xu | e081e1e | 2007-09-16 16:20:48 -0700 | [diff] [blame] | 70 | /* The packet skb2 goes to the local host (NULL to skip). */ |
| 71 | skb2 = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 72 | |
Herbert Xu | e081e1e | 2007-09-16 16:20:48 -0700 | [diff] [blame] | 73 | if (br->dev->flags & IFF_PROMISC) |
| 74 | skb2 = skb; |
| 75 | |
| 76 | dst = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 77 | |
Herbert Xu | 4466146 | 2011-07-05 13:58:33 +0000 | [diff] [blame] | 78 | if (is_broadcast_ether_addr(dest)) |
| 79 | skb2 = skb; |
| 80 | else if (is_multicast_ether_addr(dest)) { |
Herbert Xu | c4fcb78 | 2010-02-27 19:41:48 +0000 | [diff] [blame] | 81 | mdst = br_mdb_get(br, skb); |
YOSHIFUJI Hideaki / 吉藤英明 | 32dec5d | 2010-03-15 21:51:18 +0000 | [diff] [blame] | 82 | if (mdst || BR_INPUT_SKB_CB_MROUTERS_ONLY(skb)) { |
Herbert Xu | 8a87017 | 2011-02-12 01:05:42 -0800 | [diff] [blame] | 83 | if ((mdst && mdst->mglist) || |
Herbert Xu | c4fcb78 | 2010-02-27 19:41:48 +0000 | [diff] [blame] | 84 | br_multicast_is_router(br)) |
| 85 | skb2 = skb; |
| 86 | br_multicast_forward(mdst, skb, skb2); |
| 87 | skb = NULL; |
| 88 | if (!skb2) |
| 89 | goto out; |
| 90 | } else |
| 91 | skb2 = skb; |
| 92 | |
Pavel Emelyanov | a339f1c | 2008-05-21 14:13:47 -0700 | [diff] [blame] | 93 | br->dev->stats.multicast++; |
Herbert Xu | e081e1e | 2007-09-16 16:20:48 -0700 | [diff] [blame] | 94 | } else if ((dst = __br_fdb_get(br, dest)) && dst->is_local) { |
| 95 | skb2 = skb; |
| 96 | /* Do not forward the packet since it's local. */ |
| 97 | skb = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 98 | } |
| 99 | |
Herbert Xu | e081e1e | 2007-09-16 16:20:48 -0700 | [diff] [blame] | 100 | if (skb) { |
stephen hemminger | 7cd8861 | 2011-04-04 14:03:28 +0000 | [diff] [blame] | 101 | if (dst) { |
| 102 | dst->used = jiffies; |
Michael Braun | 7f7708f | 2010-03-16 00:26:22 -0700 | [diff] [blame] | 103 | br_forward(dst->dst, skb, skb2); |
stephen hemminger | 7cd8861 | 2011-04-04 14:03:28 +0000 | [diff] [blame] | 104 | } else |
Herbert Xu | b33084b | 2010-02-27 19:41:41 +0000 | [diff] [blame] | 105 | br_flood_forward(br, skb, skb2); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 106 | } |
| 107 | |
Herbert Xu | 87557c1 | 2010-02-27 19:41:39 +0000 | [diff] [blame] | 108 | if (skb2) |
Herbert Xu | 68b7c89 | 2010-02-27 19:41:40 +0000 | [diff] [blame] | 109 | return br_pass_frame_up(skb2); |
Herbert Xu | 87557c1 | 2010-02-27 19:41:39 +0000 | [diff] [blame] | 110 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 111 | out: |
| 112 | return 0; |
Stephen Hemminger | b3f1be4 | 2006-02-09 17:08:52 -0800 | [diff] [blame] | 113 | drop: |
| 114 | kfree_skb(skb); |
| 115 | goto out; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 116 | } |
| 117 | |
stephen hemminger | eeaf61d | 2010-07-27 08:26:30 +0000 | [diff] [blame] | 118 | /* note: already called with rcu_read_lock */ |
Stephen Hemminger | cf0f02d | 2006-03-20 22:59:06 -0800 | [diff] [blame] | 119 | static int br_handle_local_finish(struct sk_buff *skb) |
| 120 | { |
Jiri Pirko | f350a0a8 | 2010-06-15 06:50:45 +0000 | [diff] [blame] | 121 | struct net_bridge_port *p = br_port_get_rcu(skb->dev); |
Stephen Hemminger | cf0f02d | 2006-03-20 22:59:06 -0800 | [diff] [blame] | 122 | |
Jiri Pirko | f350a0a8 | 2010-06-15 06:50:45 +0000 | [diff] [blame] | 123 | br_fdb_update(p->br, p, eth_hdr(skb)->h_source); |
Stephen Hemminger | cf0f02d | 2006-03-20 22:59:06 -0800 | [diff] [blame] | 124 | return 0; /* process further */ |
| 125 | } |
| 126 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 127 | /* |
Stephen Hemminger | 6229e36 | 2007-03-21 13:38:47 -0700 | [diff] [blame] | 128 | * Return NULL if skb is handled |
stephen hemminger | eeaf61d | 2010-07-27 08:26:30 +0000 | [diff] [blame] | 129 | * note: already called with rcu_read_lock |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 130 | */ |
Jiri Pirko | 8a4eb57 | 2011-03-12 03:14:39 +0000 | [diff] [blame] | 131 | rx_handler_result_t br_handle_frame(struct sk_buff **pskb) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 132 | { |
Jiri Pirko | ab95bfe | 2010-06-01 21:52:08 +0000 | [diff] [blame] | 133 | struct net_bridge_port *p; |
Jiri Pirko | 8a4eb57 | 2011-03-12 03:14:39 +0000 | [diff] [blame] | 134 | struct sk_buff *skb = *pskb; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 135 | const unsigned char *dest = eth_hdr(skb)->h_dest; |
Eric Dumazet | a386f99 | 2010-11-15 06:38:11 +0000 | [diff] [blame] | 136 | br_should_route_hook_t *rhook; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 137 | |
Simon Horman | c2368e7 | 2010-08-22 17:35:32 +0000 | [diff] [blame] | 138 | if (unlikely(skb->pkt_type == PACKET_LOOPBACK)) |
Jiri Pirko | 8a4eb57 | 2011-03-12 03:14:39 +0000 | [diff] [blame] | 139 | return RX_HANDLER_PASS; |
Jiri Pirko | ab95bfe | 2010-06-01 21:52:08 +0000 | [diff] [blame] | 140 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 141 | if (!is_valid_ether_addr(eth_hdr(skb)->h_source)) |
Stephen Hemminger | 467aea0 | 2007-03-21 13:42:06 -0700 | [diff] [blame] | 142 | goto drop; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 143 | |
Herbert Xu | 7b99565 | 2007-10-14 00:39:01 -0700 | [diff] [blame] | 144 | skb = skb_share_check(skb, GFP_ATOMIC); |
| 145 | if (!skb) |
Jiri Pirko | 8a4eb57 | 2011-03-12 03:14:39 +0000 | [diff] [blame] | 146 | return RX_HANDLER_CONSUMED; |
Herbert Xu | 7b99565 | 2007-10-14 00:39:01 -0700 | [diff] [blame] | 147 | |
Jiri Pirko | f350a0a8 | 2010-06-15 06:50:45 +0000 | [diff] [blame] | 148 | p = br_port_get_rcu(skb->dev); |
Jiri Pirko | ab95bfe | 2010-06-01 21:52:08 +0000 | [diff] [blame] | 149 | |
Ben Hutchings | 46acc46 | 2012-11-01 09:11:11 +0000 | [diff] [blame] | 150 | if (unlikely(is_link_local_ether_addr(dest))) { |
stephen hemminger | 515853c | 2011-10-03 18:14:46 +0000 | [diff] [blame] | 151 | /* |
| 152 | * See IEEE 802.1D Table 7-10 Reserved addresses |
| 153 | * |
| 154 | * Assignment Value |
| 155 | * Bridge Group Address 01-80-C2-00-00-00 |
| 156 | * (MAC Control) 802.3 01-80-C2-00-00-01 |
| 157 | * (Link Aggregation) 802.3 01-80-C2-00-00-02 |
| 158 | * 802.1X PAE address 01-80-C2-00-00-03 |
| 159 | * |
| 160 | * 802.1AB LLDP 01-80-C2-00-00-0E |
| 161 | * |
| 162 | * Others reserved for future standardization |
| 163 | */ |
| 164 | switch (dest[5]) { |
| 165 | case 0x00: /* Bridge Group Address */ |
| 166 | /* If STP is turned off, |
| 167 | then must forward to keep loop detection */ |
| 168 | if (p->br->stp_enabled == BR_NO_STP) |
| 169 | goto forward; |
| 170 | break; |
| 171 | |
| 172 | case 0x01: /* IEEE MAC (Pause) */ |
Stephen Hemminger | 2111f8b | 2007-04-25 22:05:55 -0700 | [diff] [blame] | 173 | goto drop; |
| 174 | |
stephen hemminger | 515853c | 2011-10-03 18:14:46 +0000 | [diff] [blame] | 175 | default: |
| 176 | /* Allow selective forwarding for most other protocols */ |
| 177 | if (p->br->group_fwd_mask & (1u << dest[5])) |
| 178 | goto forward; |
| 179 | } |
Stephen Hemminger | a598f6a | 2009-05-15 06:10:13 +0000 | [diff] [blame] | 180 | |
stephen hemminger | 515853c | 2011-10-03 18:14:46 +0000 | [diff] [blame] | 181 | /* Deliver packet to local host only */ |
Jan Engelhardt | 713aefa | 2010-03-23 04:07:21 +0100 | [diff] [blame] | 182 | if (NF_HOOK(NFPROTO_BRIDGE, NF_BR_LOCAL_IN, skb, skb->dev, |
Jiri Pirko | 8a4eb57 | 2011-03-12 03:14:39 +0000 | [diff] [blame] | 183 | NULL, br_handle_local_finish)) { |
| 184 | return RX_HANDLER_CONSUMED; /* consumed by filter */ |
| 185 | } else { |
| 186 | *pskb = skb; |
| 187 | return RX_HANDLER_PASS; /* continue processing */ |
| 188 | } |
Stephen Hemminger | 2111f8b | 2007-04-25 22:05:55 -0700 | [diff] [blame] | 189 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 190 | |
Stephen Hemminger | a598f6a | 2009-05-15 06:10:13 +0000 | [diff] [blame] | 191 | forward: |
Stephen Hemminger | 467aea0 | 2007-03-21 13:42:06 -0700 | [diff] [blame] | 192 | switch (p->state) { |
| 193 | case BR_STATE_FORWARDING: |
Pavel Emelyanov | 82de382 | 2007-11-29 23:58:58 +1100 | [diff] [blame] | 194 | rhook = rcu_dereference(br_should_route_hook); |
Eric Dumazet | a386f99 | 2010-11-15 06:38:11 +0000 | [diff] [blame] | 195 | if (rhook) { |
Jiri Pirko | 8a4eb57 | 2011-03-12 03:14:39 +0000 | [diff] [blame] | 196 | if ((*rhook)(skb)) { |
| 197 | *pskb = skb; |
| 198 | return RX_HANDLER_PASS; |
| 199 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 200 | dest = eth_hdr(skb)->h_dest; |
| 201 | } |
Stephen Hemminger | 467aea0 | 2007-03-21 13:42:06 -0700 | [diff] [blame] | 202 | /* fall through */ |
| 203 | case BR_STATE_LEARNING: |
Joe Perches | 9a7b6ef9 | 2012-05-08 18:56:49 +0000 | [diff] [blame] | 204 | if (ether_addr_equal(p->br->dev->dev_addr, dest)) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 205 | skb->pkt_type = PACKET_HOST; |
| 206 | |
Jan Engelhardt | 713aefa | 2010-03-23 04:07:21 +0100 | [diff] [blame] | 207 | NF_HOOK(NFPROTO_BRIDGE, NF_BR_PRE_ROUTING, skb, skb->dev, NULL, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 208 | br_handle_frame_finish); |
Stephen Hemminger | 467aea0 | 2007-03-21 13:42:06 -0700 | [diff] [blame] | 209 | break; |
| 210 | default: |
| 211 | drop: |
| 212 | kfree_skb(skb); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 213 | } |
Jiri Pirko | 8a4eb57 | 2011-03-12 03:14:39 +0000 | [diff] [blame] | 214 | return RX_HANDLER_CONSUMED; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 215 | } |