Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* flow.c: Generic flow cache. |
| 2 | * |
| 3 | * Copyright (C) 2003 Alexey N. Kuznetsov (kuznet@ms2.inr.ac.ru) |
| 4 | * Copyright (C) 2003 David S. Miller (davem@redhat.com) |
| 5 | */ |
| 6 | |
| 7 | #include <linux/kernel.h> |
| 8 | #include <linux/module.h> |
| 9 | #include <linux/list.h> |
| 10 | #include <linux/jhash.h> |
| 11 | #include <linux/interrupt.h> |
| 12 | #include <linux/mm.h> |
| 13 | #include <linux/random.h> |
| 14 | #include <linux/init.h> |
| 15 | #include <linux/slab.h> |
| 16 | #include <linux/smp.h> |
| 17 | #include <linux/completion.h> |
| 18 | #include <linux/percpu.h> |
| 19 | #include <linux/bitops.h> |
| 20 | #include <linux/notifier.h> |
| 21 | #include <linux/cpu.h> |
| 22 | #include <linux/cpumask.h> |
Arjan van de Ven | 4a3e2f7 | 2006-03-20 22:33:17 -0800 | [diff] [blame] | 23 | #include <linux/mutex.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 24 | #include <net/flow.h> |
Arun Sharma | 60063497 | 2011-07-26 16:09:06 -0700 | [diff] [blame] | 25 | #include <linux/atomic.h> |
Trent Jaeger | df71837 | 2005-12-13 23:12:27 -0800 | [diff] [blame] | 26 | #include <linux/security.h> |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 27 | #include <net/net_namespace.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 28 | |
| 29 | struct flow_cache_entry { |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 30 | union { |
| 31 | struct hlist_node hlist; |
| 32 | struct list_head gc_list; |
| 33 | } u; |
dpward | 0542b69 | 2011-08-31 06:05:27 +0000 | [diff] [blame] | 34 | struct net *net; |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 35 | u16 family; |
| 36 | u8 dir; |
| 37 | u32 genid; |
| 38 | struct flowi key; |
| 39 | struct flow_cache_object *object; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 40 | }; |
| 41 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 42 | struct flow_flush_info { |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 43 | struct flow_cache *cache; |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 44 | atomic_t cpuleft; |
| 45 | struct completion completion; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 46 | }; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 47 | |
Eric Dumazet | d32d9bb | 2014-03-10 07:09:07 -0700 | [diff] [blame^] | 48 | static struct kmem_cache *flow_cachep __read_mostly; |
| 49 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 50 | #define flow_cache_hash_size(cache) (1 << (cache)->hash_shift) |
| 51 | #define FLOW_HASH_RND_PERIOD (10 * 60 * HZ) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 52 | |
| 53 | static void flow_cache_new_hashrnd(unsigned long arg) |
| 54 | { |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 55 | struct flow_cache *fc = (void *) arg; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 56 | int i; |
| 57 | |
KAMEZAWA Hiroyuki | 6f91204 | 2006-04-10 22:52:50 -0700 | [diff] [blame] | 58 | for_each_possible_cpu(i) |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 59 | per_cpu_ptr(fc->percpu, i)->hash_rnd_recalc = 1; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 60 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 61 | fc->rnd_timer.expires = jiffies + FLOW_HASH_RND_PERIOD; |
| 62 | add_timer(&fc->rnd_timer); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 63 | } |
| 64 | |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 65 | static int flow_entry_valid(struct flow_cache_entry *fle, |
| 66 | struct netns_xfrm *xfrm) |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 67 | { |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 68 | if (atomic_read(&xfrm->flow_cache_genid) != fle->genid) |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 69 | return 0; |
| 70 | if (fle->object && !fle->object->ops->check(fle->object)) |
| 71 | return 0; |
| 72 | return 1; |
| 73 | } |
| 74 | |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 75 | static void flow_entry_kill(struct flow_cache_entry *fle, |
| 76 | struct netns_xfrm *xfrm) |
James Morris | 134b0fc | 2006-10-05 15:42:27 -0500 | [diff] [blame] | 77 | { |
| 78 | if (fle->object) |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 79 | fle->object->ops->delete(fle->object); |
Eric Dumazet | d32d9bb | 2014-03-10 07:09:07 -0700 | [diff] [blame^] | 80 | kmem_cache_free(flow_cachep, fle); |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 81 | } |
| 82 | |
| 83 | static void flow_cache_gc_task(struct work_struct *work) |
| 84 | { |
| 85 | struct list_head gc_list; |
| 86 | struct flow_cache_entry *fce, *n; |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 87 | struct netns_xfrm *xfrm = container_of(work, struct netns_xfrm, |
| 88 | flow_cache_gc_work); |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 89 | |
| 90 | INIT_LIST_HEAD(&gc_list); |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 91 | spin_lock_bh(&xfrm->flow_cache_gc_lock); |
| 92 | list_splice_tail_init(&xfrm->flow_cache_gc_list, &gc_list); |
| 93 | spin_unlock_bh(&xfrm->flow_cache_gc_lock); |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 94 | |
| 95 | list_for_each_entry_safe(fce, n, &gc_list, u.gc_list) |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 96 | flow_entry_kill(fce, xfrm); |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 97 | } |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 98 | |
| 99 | static void flow_cache_queue_garbage(struct flow_cache_percpu *fcp, |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 100 | int deleted, struct list_head *gc_list, |
| 101 | struct netns_xfrm *xfrm) |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 102 | { |
| 103 | if (deleted) { |
| 104 | fcp->hash_count -= deleted; |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 105 | spin_lock_bh(&xfrm->flow_cache_gc_lock); |
| 106 | list_splice_tail(gc_list, &xfrm->flow_cache_gc_list); |
| 107 | spin_unlock_bh(&xfrm->flow_cache_gc_lock); |
| 108 | schedule_work(&xfrm->flow_cache_gc_work); |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 109 | } |
James Morris | 134b0fc | 2006-10-05 15:42:27 -0500 | [diff] [blame] | 110 | } |
| 111 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 112 | static void __flow_cache_shrink(struct flow_cache *fc, |
| 113 | struct flow_cache_percpu *fcp, |
| 114 | int shrink_to) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 115 | { |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 116 | struct flow_cache_entry *fle; |
Sasha Levin | b67bfe0 | 2013-02-27 17:06:00 -0800 | [diff] [blame] | 117 | struct hlist_node *tmp; |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 118 | LIST_HEAD(gc_list); |
| 119 | int i, deleted = 0; |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 120 | struct netns_xfrm *xfrm = container_of(fc, struct netns_xfrm, |
| 121 | flow_cache_global); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 122 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 123 | for (i = 0; i < flow_cache_hash_size(fc); i++) { |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 124 | int saved = 0; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 125 | |
Sasha Levin | b67bfe0 | 2013-02-27 17:06:00 -0800 | [diff] [blame] | 126 | hlist_for_each_entry_safe(fle, tmp, |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 127 | &fcp->hash_table[i], u.hlist) { |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 128 | if (saved < shrink_to && |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 129 | flow_entry_valid(fle, xfrm)) { |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 130 | saved++; |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 131 | } else { |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 132 | deleted++; |
| 133 | hlist_del(&fle->u.hlist); |
| 134 | list_add_tail(&fle->u.gc_list, &gc_list); |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 135 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 136 | } |
| 137 | } |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 138 | |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 139 | flow_cache_queue_garbage(fcp, deleted, &gc_list, xfrm); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 140 | } |
| 141 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 142 | static void flow_cache_shrink(struct flow_cache *fc, |
| 143 | struct flow_cache_percpu *fcp) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 144 | { |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 145 | int shrink_to = fc->low_watermark / flow_cache_hash_size(fc); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 146 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 147 | __flow_cache_shrink(fc, fcp, shrink_to); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 148 | } |
| 149 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 150 | static void flow_new_hash_rnd(struct flow_cache *fc, |
| 151 | struct flow_cache_percpu *fcp) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 152 | { |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 153 | get_random_bytes(&fcp->hash_rnd, sizeof(u32)); |
| 154 | fcp->hash_rnd_recalc = 0; |
| 155 | __flow_cache_shrink(fc, fcp, 0); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 156 | } |
| 157 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 158 | static u32 flow_hash_code(struct flow_cache *fc, |
| 159 | struct flow_cache_percpu *fcp, |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 160 | const struct flowi *key, |
| 161 | size_t keysize) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 162 | { |
David S. Miller | dee9f4b | 2011-02-22 18:44:31 -0800 | [diff] [blame] | 163 | const u32 *k = (const u32 *) key; |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 164 | const u32 length = keysize * sizeof(flow_compare_t) / sizeof(u32); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 165 | |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 166 | return jhash2(k, length, fcp->hash_rnd) |
Eric Dumazet | a02cec2 | 2010-09-22 20:43:57 +0000 | [diff] [blame] | 167 | & (flow_cache_hash_size(fc) - 1); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 168 | } |
| 169 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 170 | /* I hear what you're saying, use memcmp. But memcmp cannot make |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 171 | * important assumptions that we can here, such as alignment. |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 172 | */ |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 173 | static int flow_key_compare(const struct flowi *key1, const struct flowi *key2, |
| 174 | size_t keysize) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 175 | { |
David S. Miller | dee9f4b | 2011-02-22 18:44:31 -0800 | [diff] [blame] | 176 | const flow_compare_t *k1, *k1_lim, *k2; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 177 | |
David S. Miller | dee9f4b | 2011-02-22 18:44:31 -0800 | [diff] [blame] | 178 | k1 = (const flow_compare_t *) key1; |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 179 | k1_lim = k1 + keysize; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 180 | |
David S. Miller | dee9f4b | 2011-02-22 18:44:31 -0800 | [diff] [blame] | 181 | k2 = (const flow_compare_t *) key2; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 182 | |
| 183 | do { |
| 184 | if (*k1++ != *k2++) |
| 185 | return 1; |
| 186 | } while (k1 < k1_lim); |
| 187 | |
| 188 | return 0; |
| 189 | } |
| 190 | |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 191 | struct flow_cache_object * |
David S. Miller | dee9f4b | 2011-02-22 18:44:31 -0800 | [diff] [blame] | 192 | flow_cache_lookup(struct net *net, const struct flowi *key, u16 family, u8 dir, |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 193 | flow_resolve_t resolver, void *ctx) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 194 | { |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 195 | struct flow_cache *fc = &net->xfrm.flow_cache_global; |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 196 | struct flow_cache_percpu *fcp; |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 197 | struct flow_cache_entry *fle, *tfle; |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 198 | struct flow_cache_object *flo; |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 199 | size_t keysize; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 200 | unsigned int hash; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 201 | |
| 202 | local_bh_disable(); |
Eric Dumazet | 7a9b2d5 | 2010-06-24 00:52:37 +0000 | [diff] [blame] | 203 | fcp = this_cpu_ptr(fc->percpu); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 204 | |
| 205 | fle = NULL; |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 206 | flo = NULL; |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 207 | |
| 208 | keysize = flow_key_size(family); |
| 209 | if (!keysize) |
| 210 | goto nocache; |
| 211 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 212 | /* Packet really early in init? Making flow_cache_init a |
| 213 | * pre-smp initcall would solve this. --RR */ |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 214 | if (!fcp->hash_table) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 215 | goto nocache; |
| 216 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 217 | if (fcp->hash_rnd_recalc) |
| 218 | flow_new_hash_rnd(fc, fcp); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 219 | |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 220 | hash = flow_hash_code(fc, fcp, key, keysize); |
Sasha Levin | b67bfe0 | 2013-02-27 17:06:00 -0800 | [diff] [blame] | 221 | hlist_for_each_entry(tfle, &fcp->hash_table[hash], u.hlist) { |
dpward | 0542b69 | 2011-08-31 06:05:27 +0000 | [diff] [blame] | 222 | if (tfle->net == net && |
| 223 | tfle->family == family && |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 224 | tfle->dir == dir && |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 225 | flow_key_compare(key, &tfle->key, keysize) == 0) { |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 226 | fle = tfle; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 227 | break; |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 228 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 229 | } |
| 230 | |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 231 | if (unlikely(!fle)) { |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 232 | if (fcp->hash_count > fc->high_watermark) |
| 233 | flow_cache_shrink(fc, fcp); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 234 | |
Eric Dumazet | d32d9bb | 2014-03-10 07:09:07 -0700 | [diff] [blame^] | 235 | fle = kmem_cache_alloc(flow_cachep, GFP_ATOMIC); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 236 | if (fle) { |
dpward | 0542b69 | 2011-08-31 06:05:27 +0000 | [diff] [blame] | 237 | fle->net = net; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 238 | fle->family = family; |
| 239 | fle->dir = dir; |
dpward | aa1c366 | 2011-09-05 16:47:24 +0000 | [diff] [blame] | 240 | memcpy(&fle->key, key, keysize * sizeof(flow_compare_t)); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 241 | fle->object = NULL; |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 242 | hlist_add_head(&fle->u.hlist, &fcp->hash_table[hash]); |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 243 | fcp->hash_count++; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 244 | } |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 245 | } else if (likely(fle->genid == atomic_read(&net->xfrm.flow_cache_genid))) { |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 246 | flo = fle->object; |
| 247 | if (!flo) |
| 248 | goto ret_object; |
| 249 | flo = flo->ops->get(flo); |
| 250 | if (flo) |
| 251 | goto ret_object; |
| 252 | } else if (fle->object) { |
| 253 | flo = fle->object; |
| 254 | flo->ops->delete(flo); |
| 255 | fle->object = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 256 | } |
| 257 | |
| 258 | nocache: |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 259 | flo = NULL; |
| 260 | if (fle) { |
| 261 | flo = fle->object; |
| 262 | fle->object = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 263 | } |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 264 | flo = resolver(net, key, family, dir, flo, ctx); |
| 265 | if (fle) { |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 266 | fle->genid = atomic_read(&net->xfrm.flow_cache_genid); |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 267 | if (!IS_ERR(flo)) |
| 268 | fle->object = flo; |
| 269 | else |
| 270 | fle->genid--; |
| 271 | } else { |
YOSHIFUJI Hideaki / 吉藤英明 | 8fbcec2 | 2013-01-22 06:32:44 +0000 | [diff] [blame] | 272 | if (!IS_ERR_OR_NULL(flo)) |
Timo Teräs | fe1a5f0 | 2010-04-07 00:30:04 +0000 | [diff] [blame] | 273 | flo->ops->delete(flo); |
| 274 | } |
| 275 | ret_object: |
| 276 | local_bh_enable(); |
| 277 | return flo; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 278 | } |
Eric Dumazet | 9e34a5b | 2010-07-09 21:22:04 +0000 | [diff] [blame] | 279 | EXPORT_SYMBOL(flow_cache_lookup); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 280 | |
| 281 | static void flow_cache_flush_tasklet(unsigned long data) |
| 282 | { |
| 283 | struct flow_flush_info *info = (void *)data; |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 284 | struct flow_cache *fc = info->cache; |
| 285 | struct flow_cache_percpu *fcp; |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 286 | struct flow_cache_entry *fle; |
Sasha Levin | b67bfe0 | 2013-02-27 17:06:00 -0800 | [diff] [blame] | 287 | struct hlist_node *tmp; |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 288 | LIST_HEAD(gc_list); |
| 289 | int i, deleted = 0; |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 290 | struct netns_xfrm *xfrm = container_of(fc, struct netns_xfrm, |
| 291 | flow_cache_global); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 292 | |
Eric Dumazet | 7a9b2d5 | 2010-06-24 00:52:37 +0000 | [diff] [blame] | 293 | fcp = this_cpu_ptr(fc->percpu); |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 294 | for (i = 0; i < flow_cache_hash_size(fc); i++) { |
Sasha Levin | b67bfe0 | 2013-02-27 17:06:00 -0800 | [diff] [blame] | 295 | hlist_for_each_entry_safe(fle, tmp, |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 296 | &fcp->hash_table[i], u.hlist) { |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 297 | if (flow_entry_valid(fle, xfrm)) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 298 | continue; |
| 299 | |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 300 | deleted++; |
| 301 | hlist_del(&fle->u.hlist); |
| 302 | list_add_tail(&fle->u.gc_list, &gc_list); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 303 | } |
| 304 | } |
| 305 | |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 306 | flow_cache_queue_garbage(fcp, deleted, &gc_list, xfrm); |
Timo Teräs | 8e479560 | 2010-04-07 00:30:07 +0000 | [diff] [blame] | 307 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 308 | if (atomic_dec_and_test(&info->cpuleft)) |
| 309 | complete(&info->completion); |
| 310 | } |
| 311 | |
Chris Metcalf | 8fdc929 | 2013-03-19 11:35:58 +0000 | [diff] [blame] | 312 | /* |
| 313 | * Return whether a cpu needs flushing. Conservatively, we assume |
| 314 | * the presence of any entries means the core may require flushing, |
| 315 | * since the flow_cache_ops.check() function may assume it's running |
| 316 | * on the same core as the per-cpu cache component. |
| 317 | */ |
| 318 | static int flow_cache_percpu_empty(struct flow_cache *fc, int cpu) |
| 319 | { |
| 320 | struct flow_cache_percpu *fcp; |
| 321 | int i; |
| 322 | |
Li RongQing | 2781503 | 2013-03-28 02:24:11 +0000 | [diff] [blame] | 323 | fcp = per_cpu_ptr(fc->percpu, cpu); |
Chris Metcalf | 8fdc929 | 2013-03-19 11:35:58 +0000 | [diff] [blame] | 324 | for (i = 0; i < flow_cache_hash_size(fc); i++) |
| 325 | if (!hlist_empty(&fcp->hash_table[i])) |
| 326 | return 0; |
| 327 | return 1; |
| 328 | } |
| 329 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 330 | static void flow_cache_flush_per_cpu(void *data) |
| 331 | { |
| 332 | struct flow_flush_info *info = data; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 333 | struct tasklet_struct *tasklet; |
| 334 | |
Li RongQing | 50eab05 | 2013-03-27 23:42:41 +0000 | [diff] [blame] | 335 | tasklet = &this_cpu_ptr(info->cache->percpu)->flush_tasklet; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 336 | tasklet->data = (unsigned long)info; |
| 337 | tasklet_schedule(tasklet); |
| 338 | } |
| 339 | |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 340 | void flow_cache_flush(struct net *net) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 341 | { |
| 342 | struct flow_flush_info info; |
Chris Metcalf | 8fdc929 | 2013-03-19 11:35:58 +0000 | [diff] [blame] | 343 | cpumask_var_t mask; |
| 344 | int i, self; |
| 345 | |
| 346 | /* Track which cpus need flushing to avoid disturbing all cores. */ |
| 347 | if (!alloc_cpumask_var(&mask, GFP_KERNEL)) |
| 348 | return; |
| 349 | cpumask_clear(mask); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 350 | |
| 351 | /* Don't want cpus going down or up during this. */ |
Gautham R Shenoy | 86ef5c9 | 2008-01-25 21:08:02 +0100 | [diff] [blame] | 352 | get_online_cpus(); |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 353 | mutex_lock(&net->xfrm.flow_flush_sem); |
| 354 | info.cache = &net->xfrm.flow_cache_global; |
Chris Metcalf | 8fdc929 | 2013-03-19 11:35:58 +0000 | [diff] [blame] | 355 | for_each_online_cpu(i) |
| 356 | if (!flow_cache_percpu_empty(info.cache, i)) |
| 357 | cpumask_set_cpu(i, mask); |
| 358 | atomic_set(&info.cpuleft, cpumask_weight(mask)); |
| 359 | if (atomic_read(&info.cpuleft) == 0) |
| 360 | goto done; |
| 361 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 362 | init_completion(&info.completion); |
| 363 | |
| 364 | local_bh_disable(); |
Chris Metcalf | 8fdc929 | 2013-03-19 11:35:58 +0000 | [diff] [blame] | 365 | self = cpumask_test_and_clear_cpu(smp_processor_id(), mask); |
| 366 | on_each_cpu_mask(mask, flow_cache_flush_per_cpu, &info, 0); |
| 367 | if (self) |
| 368 | flow_cache_flush_tasklet((unsigned long)&info); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 369 | local_bh_enable(); |
| 370 | |
| 371 | wait_for_completion(&info.completion); |
Chris Metcalf | 8fdc929 | 2013-03-19 11:35:58 +0000 | [diff] [blame] | 372 | |
| 373 | done: |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 374 | mutex_unlock(&net->xfrm.flow_flush_sem); |
Gautham R Shenoy | 86ef5c9 | 2008-01-25 21:08:02 +0100 | [diff] [blame] | 375 | put_online_cpus(); |
Chris Metcalf | 8fdc929 | 2013-03-19 11:35:58 +0000 | [diff] [blame] | 376 | free_cpumask_var(mask); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 377 | } |
| 378 | |
Steffen Klassert | c0ed1c1 | 2011-12-21 16:48:08 -0500 | [diff] [blame] | 379 | static void flow_cache_flush_task(struct work_struct *work) |
| 380 | { |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 381 | struct netns_xfrm *xfrm = container_of(work, struct netns_xfrm, |
| 382 | flow_cache_gc_work); |
| 383 | struct net *net = container_of(xfrm, struct net, xfrm); |
| 384 | |
| 385 | flow_cache_flush(net); |
Steffen Klassert | c0ed1c1 | 2011-12-21 16:48:08 -0500 | [diff] [blame] | 386 | } |
| 387 | |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 388 | void flow_cache_flush_deferred(struct net *net) |
Steffen Klassert | c0ed1c1 | 2011-12-21 16:48:08 -0500 | [diff] [blame] | 389 | { |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 390 | schedule_work(&net->xfrm.flow_cache_flush_work); |
Steffen Klassert | c0ed1c1 | 2011-12-21 16:48:08 -0500 | [diff] [blame] | 391 | } |
| 392 | |
Paul Gortmaker | 013dbb3 | 2013-06-19 14:32:33 -0400 | [diff] [blame] | 393 | static int flow_cache_cpu_prepare(struct flow_cache *fc, int cpu) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 394 | { |
Eric Dumazet | 83b6b1f | 2010-09-10 07:00:25 +0000 | [diff] [blame] | 395 | struct flow_cache_percpu *fcp = per_cpu_ptr(fc->percpu, cpu); |
| 396 | size_t sz = sizeof(struct hlist_head) * flow_cache_hash_size(fc); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 397 | |
Eric Dumazet | 83b6b1f | 2010-09-10 07:00:25 +0000 | [diff] [blame] | 398 | if (!fcp->hash_table) { |
| 399 | fcp->hash_table = kzalloc_node(sz, GFP_KERNEL, cpu_to_node(cpu)); |
| 400 | if (!fcp->hash_table) { |
| 401 | pr_err("NET: failed to allocate flow cache sz %zu\n", sz); |
| 402 | return -ENOMEM; |
| 403 | } |
| 404 | fcp->hash_rnd_recalc = 1; |
| 405 | fcp->hash_count = 0; |
| 406 | tasklet_init(&fcp->flush_tasklet, flow_cache_flush_tasklet, 0); |
| 407 | } |
| 408 | return 0; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 409 | } |
| 410 | |
Paul Gortmaker | 013dbb3 | 2013-06-19 14:32:33 -0400 | [diff] [blame] | 411 | static int flow_cache_cpu(struct notifier_block *nfb, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 412 | unsigned long action, |
| 413 | void *hcpu) |
| 414 | { |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 415 | struct flow_cache *fc = container_of(nfb, struct flow_cache, |
| 416 | hotcpu_notifier); |
Eric Dumazet | 83b6b1f | 2010-09-10 07:00:25 +0000 | [diff] [blame] | 417 | int res, cpu = (unsigned long) hcpu; |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 418 | struct flow_cache_percpu *fcp = per_cpu_ptr(fc->percpu, cpu); |
| 419 | |
Eric Dumazet | 83b6b1f | 2010-09-10 07:00:25 +0000 | [diff] [blame] | 420 | switch (action) { |
| 421 | case CPU_UP_PREPARE: |
| 422 | case CPU_UP_PREPARE_FROZEN: |
| 423 | res = flow_cache_cpu_prepare(fc, cpu); |
| 424 | if (res) |
| 425 | return notifier_from_errno(res); |
| 426 | break; |
| 427 | case CPU_DEAD: |
| 428 | case CPU_DEAD_FROZEN: |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 429 | __flow_cache_shrink(fc, fcp, 0); |
Eric Dumazet | 83b6b1f | 2010-09-10 07:00:25 +0000 | [diff] [blame] | 430 | break; |
| 431 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 432 | return NOTIFY_OK; |
| 433 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 434 | |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 435 | int flow_cache_init(struct net *net) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 436 | { |
| 437 | int i; |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 438 | struct flow_cache *fc = &net->xfrm.flow_cache_global; |
| 439 | |
Eric Dumazet | d32d9bb | 2014-03-10 07:09:07 -0700 | [diff] [blame^] | 440 | if (!flow_cachep) |
| 441 | flow_cachep = kmem_cache_create("flow_cache", |
| 442 | sizeof(struct flow_cache_entry), |
| 443 | 0, SLAB_PANIC, NULL); |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 444 | spin_lock_init(&net->xfrm.flow_cache_gc_lock); |
| 445 | INIT_LIST_HEAD(&net->xfrm.flow_cache_gc_list); |
| 446 | INIT_WORK(&net->xfrm.flow_cache_gc_work, flow_cache_gc_task); |
| 447 | INIT_WORK(&net->xfrm.flow_cache_flush_work, flow_cache_flush_task); |
| 448 | mutex_init(&net->xfrm.flow_flush_sem); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 449 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 450 | fc->hash_shift = 10; |
| 451 | fc->low_watermark = 2 * flow_cache_hash_size(fc); |
| 452 | fc->high_watermark = 4 * flow_cache_hash_size(fc); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 453 | |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 454 | fc->percpu = alloc_percpu(struct flow_cache_percpu); |
Eric Dumazet | 83b6b1f | 2010-09-10 07:00:25 +0000 | [diff] [blame] | 455 | if (!fc->percpu) |
| 456 | return -ENOMEM; |
| 457 | |
| 458 | for_each_online_cpu(i) { |
| 459 | if (flow_cache_cpu_prepare(fc, i)) |
huajun li | 6ccc3ab | 2011-09-27 22:51:39 +0000 | [diff] [blame] | 460 | goto err; |
Eric Dumazet | 83b6b1f | 2010-09-10 07:00:25 +0000 | [diff] [blame] | 461 | } |
| 462 | fc->hotcpu_notifier = (struct notifier_block){ |
| 463 | .notifier_call = flow_cache_cpu, |
| 464 | }; |
| 465 | register_hotcpu_notifier(&fc->hotcpu_notifier); |
Timo Teräs | d7997fe | 2010-03-31 00:17:06 +0000 | [diff] [blame] | 466 | |
| 467 | setup_timer(&fc->rnd_timer, flow_cache_new_hashrnd, |
| 468 | (unsigned long) fc); |
| 469 | fc->rnd_timer.expires = jiffies + FLOW_HASH_RND_PERIOD; |
| 470 | add_timer(&fc->rnd_timer); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 471 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 472 | return 0; |
huajun li | 6ccc3ab | 2011-09-27 22:51:39 +0000 | [diff] [blame] | 473 | |
| 474 | err: |
| 475 | for_each_possible_cpu(i) { |
| 476 | struct flow_cache_percpu *fcp = per_cpu_ptr(fc->percpu, i); |
| 477 | kfree(fcp->hash_table); |
| 478 | fcp->hash_table = NULL; |
| 479 | } |
| 480 | |
| 481 | free_percpu(fc->percpu); |
| 482 | fc->percpu = NULL; |
| 483 | |
| 484 | return -ENOMEM; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 485 | } |
Fan Du | ca925cf | 2014-01-18 09:55:27 +0800 | [diff] [blame] | 486 | EXPORT_SYMBOL(flow_cache_init); |