blob: 20b059574e600e64838b0bdecfaf6a76e6629d4a [file] [log] [blame]
Greg Kroah-Hartmanb2441312017-11-01 15:07:57 +01001/* SPDX-License-Identifier: GPL-2.0 */
Linus Torvalds1da177e2005-04-16 15:20:36 -07002#ifndef __NET_PKT_CLS_H
3#define __NET_PKT_CLS_H
4
5#include <linux/pkt_cls.h>
Cong Wang7aa00452017-10-26 18:24:28 -07006#include <linux/workqueue.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -07007#include <net/sch_generic.h>
8#include <net/act_api.h>
9
10/* Basic packet classifier frontend definitions. */
11
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +000012struct tcf_walker {
Linus Torvalds1da177e2005-04-16 15:20:36 -070013 int stop;
14 int skip;
15 int count;
WANG Cong8113c092017-08-04 21:31:43 -070016 int (*fn)(struct tcf_proto *, void *node, struct tcf_walker *);
Linus Torvalds1da177e2005-04-16 15:20:36 -070017};
18
Joe Perches5c152572013-07-30 22:47:13 -070019int register_tcf_proto_ops(struct tcf_proto_ops *ops);
20int unregister_tcf_proto_ops(struct tcf_proto_ops *ops);
Linus Torvalds1da177e2005-04-16 15:20:36 -070021
Jiri Pirko8c4083b2017-10-19 15:50:29 +020022enum tcf_block_binder_type {
23 TCF_BLOCK_BINDER_TYPE_UNSPEC,
Jiri Pirko6e40cf22017-10-19 15:50:30 +020024 TCF_BLOCK_BINDER_TYPE_CLSACT_INGRESS,
25 TCF_BLOCK_BINDER_TYPE_CLSACT_EGRESS,
Jiri Pirko8c4083b2017-10-19 15:50:29 +020026};
27
28struct tcf_block_ext_info {
29 enum tcf_block_binder_type binder_type;
Jiri Pirkoc7eb7d72017-11-03 11:46:24 +010030 tcf_chain_head_change_t *chain_head_change;
31 void *chain_head_change_priv;
Jiri Pirko48617382018-01-17 11:46:46 +010032 u32 block_index;
Jiri Pirko8c4083b2017-10-19 15:50:29 +020033};
34
Jiri Pirkoacb67442017-10-19 15:50:31 +020035struct tcf_block_cb;
Cong Wangaaa908f2018-05-23 15:26:53 -070036bool tcf_queue_work(struct rcu_work *rwork, work_func_t func);
Jiri Pirkoacb67442017-10-19 15:50:31 +020037
Jiri Pirko8ae70032017-02-15 11:57:50 +010038#ifdef CONFIG_NET_CLS
WANG Cong367a8ce2017-05-23 09:42:37 -070039struct tcf_chain *tcf_chain_get(struct tcf_block *block, u32 chain_index,
40 bool create);
Jiri Pirko5bc17012017-05-17 11:08:01 +020041void tcf_chain_put(struct tcf_chain *chain);
Jiri Pirkof36fe1c2018-01-17 11:46:48 +010042void tcf_block_netif_keep_dst(struct tcf_block *block);
Jiri Pirko6529eab2017-05-17 11:07:55 +020043int tcf_block_get(struct tcf_block **p_block,
Alexander Aring8d1a77f2017-12-20 12:35:19 -050044 struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
45 struct netlink_ext_ack *extack);
Jiri Pirkoc7eb7d72017-11-03 11:46:24 +010046int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
Alexander Aring8d1a77f2017-12-20 12:35:19 -050047 struct tcf_block_ext_info *ei,
48 struct netlink_ext_ack *extack);
Jiri Pirko6529eab2017-05-17 11:07:55 +020049void tcf_block_put(struct tcf_block *block);
Jiri Pirkoc7eb7d72017-11-03 11:46:24 +010050void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
Jiri Pirko8c4083b2017-10-19 15:50:29 +020051 struct tcf_block_ext_info *ei);
Jiri Pirko44186462017-10-13 14:00:59 +020052
Jiri Pirko48617382018-01-17 11:46:46 +010053static inline bool tcf_block_shared(struct tcf_block *block)
54{
55 return block->index;
56}
57
Jiri Pirko44186462017-10-13 14:00:59 +020058static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
59{
Jiri Pirko48617382018-01-17 11:46:46 +010060 WARN_ON(tcf_block_shared(block));
Jiri Pirko44186462017-10-13 14:00:59 +020061 return block->q;
62}
63
64static inline struct net_device *tcf_block_dev(struct tcf_block *block)
65{
66 return tcf_block_q(block)->dev_queue->dev;
67}
68
Jiri Pirkoacb67442017-10-19 15:50:31 +020069void *tcf_block_cb_priv(struct tcf_block_cb *block_cb);
70struct tcf_block_cb *tcf_block_cb_lookup(struct tcf_block *block,
71 tc_setup_cb_t *cb, void *cb_ident);
72void tcf_block_cb_incref(struct tcf_block_cb *block_cb);
73unsigned int tcf_block_cb_decref(struct tcf_block_cb *block_cb);
74struct tcf_block_cb *__tcf_block_cb_register(struct tcf_block *block,
75 tc_setup_cb_t *cb, void *cb_ident,
76 void *cb_priv);
77int tcf_block_cb_register(struct tcf_block *block,
78 tc_setup_cb_t *cb, void *cb_ident,
79 void *cb_priv);
80void __tcf_block_cb_unregister(struct tcf_block_cb *block_cb);
81void tcf_block_cb_unregister(struct tcf_block *block,
82 tc_setup_cb_t *cb, void *cb_ident);
83
Jiri Pirko87d83092017-05-17 11:07:54 +020084int tcf_classify(struct sk_buff *skb, const struct tcf_proto *tp,
85 struct tcf_result *res, bool compat_mode);
86
Jiri Pirko8ae70032017-02-15 11:57:50 +010087#else
Jiri Pirko6529eab2017-05-17 11:07:55 +020088static inline
89int tcf_block_get(struct tcf_block **p_block,
Sudip Mukherjee3c149092017-12-22 15:52:05 +000090 struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
91 struct netlink_ext_ack *extack)
Jiri Pirko6529eab2017-05-17 11:07:55 +020092{
93 return 0;
94}
95
Jiri Pirko8c4083b2017-10-19 15:50:29 +020096static inline
Jiri Pirkoc7eb7d72017-11-03 11:46:24 +010097int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
Quentin Monnet33c30a82018-01-03 17:30:45 -080098 struct tcf_block_ext_info *ei,
99 struct netlink_ext_ack *extack)
Jiri Pirko8c4083b2017-10-19 15:50:29 +0200100{
101 return 0;
102}
103
Jiri Pirko6529eab2017-05-17 11:07:55 +0200104static inline void tcf_block_put(struct tcf_block *block)
Jiri Pirko8ae70032017-02-15 11:57:50 +0100105{
106}
Jiri Pirko87d83092017-05-17 11:07:54 +0200107
Jiri Pirko8c4083b2017-10-19 15:50:29 +0200108static inline
Jiri Pirkoc7eb7d72017-11-03 11:46:24 +0100109void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
Jiri Pirko8c4083b2017-10-19 15:50:29 +0200110 struct tcf_block_ext_info *ei)
111{
112}
113
John Hurley951a8ee2018-06-25 20:36:28 -0700114static inline bool tcf_block_shared(struct tcf_block *block)
115{
116 return false;
117}
118
Jiri Pirko44186462017-10-13 14:00:59 +0200119static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
120{
121 return NULL;
122}
123
124static inline struct net_device *tcf_block_dev(struct tcf_block *block)
125{
126 return NULL;
127}
128
Jiri Pirkoacb67442017-10-19 15:50:31 +0200129static inline
130int tc_setup_cb_block_register(struct tcf_block *block, tc_setup_cb_t *cb,
131 void *cb_priv)
132{
133 return 0;
134}
135
136static inline
137void tc_setup_cb_block_unregister(struct tcf_block *block, tc_setup_cb_t *cb,
138 void *cb_priv)
139{
140}
141
142static inline
143void *tcf_block_cb_priv(struct tcf_block_cb *block_cb)
144{
145 return NULL;
146}
147
148static inline
149struct tcf_block_cb *tcf_block_cb_lookup(struct tcf_block *block,
150 tc_setup_cb_t *cb, void *cb_ident)
151{
152 return NULL;
153}
154
155static inline
156void tcf_block_cb_incref(struct tcf_block_cb *block_cb)
157{
158}
159
160static inline
161unsigned int tcf_block_cb_decref(struct tcf_block_cb *block_cb)
162{
163 return 0;
164}
165
166static inline
167struct tcf_block_cb *__tcf_block_cb_register(struct tcf_block *block,
168 tc_setup_cb_t *cb, void *cb_ident,
169 void *cb_priv)
170{
171 return NULL;
172}
173
174static inline
175int tcf_block_cb_register(struct tcf_block *block,
176 tc_setup_cb_t *cb, void *cb_ident,
177 void *cb_priv)
178{
179 return 0;
180}
181
182static inline
183void __tcf_block_cb_unregister(struct tcf_block_cb *block_cb)
184{
185}
186
187static inline
188void tcf_block_cb_unregister(struct tcf_block *block,
189 tc_setup_cb_t *cb, void *cb_ident)
190{
191}
192
Jiri Pirko87d83092017-05-17 11:07:54 +0200193static inline int tcf_classify(struct sk_buff *skb, const struct tcf_proto *tp,
194 struct tcf_result *res, bool compat_mode)
195{
196 return TC_ACT_UNSPEC;
197}
Jiri Pirko8ae70032017-02-15 11:57:50 +0100198#endif
Jiri Pirkocf1facd2017-02-09 14:38:56 +0100199
Linus Torvalds1da177e2005-04-16 15:20:36 -0700200static inline unsigned long
201__cls_set_class(unsigned long *clp, unsigned long cl)
202{
WANG Conga0efb802014-09-30 16:07:24 -0700203 return xchg(clp, cl);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700204}
205
206static inline unsigned long
Jiri Pirko34e37592017-10-13 14:01:00 +0200207cls_set_class(struct Qdisc *q, unsigned long *clp, unsigned long cl)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700208{
209 unsigned long old_cl;
Jiri Pirko34e37592017-10-13 14:01:00 +0200210
211 sch_tree_lock(q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700212 old_cl = __cls_set_class(clp, cl);
Jiri Pirko34e37592017-10-13 14:01:00 +0200213 sch_tree_unlock(q);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700214 return old_cl;
215}
216
217static inline void
218tcf_bind_filter(struct tcf_proto *tp, struct tcf_result *r, unsigned long base)
219{
Jiri Pirko34e37592017-10-13 14:01:00 +0200220 struct Qdisc *q = tp->chain->block->q;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700221 unsigned long cl;
222
Jiri Pirko34e37592017-10-13 14:01:00 +0200223 /* Check q as it is not set for shared blocks. In that case,
224 * setting class is not supported.
225 */
226 if (!q)
227 return;
228 cl = q->ops->cl_ops->bind_tcf(q, base, r->classid);
229 cl = cls_set_class(q, &r->class, cl);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700230 if (cl)
Jiri Pirko34e37592017-10-13 14:01:00 +0200231 q->ops->cl_ops->unbind_tcf(q, cl);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700232}
233
234static inline void
235tcf_unbind_filter(struct tcf_proto *tp, struct tcf_result *r)
236{
Jiri Pirko34e37592017-10-13 14:01:00 +0200237 struct Qdisc *q = tp->chain->block->q;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700238 unsigned long cl;
239
Jiri Pirko34e37592017-10-13 14:01:00 +0200240 if (!q)
241 return;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700242 if ((cl = __cls_set_class(&r->class, 0)) != 0)
Jiri Pirko34e37592017-10-13 14:01:00 +0200243 q->ops->cl_ops->unbind_tcf(q, cl);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700244}
245
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000246struct tcf_exts {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700247#ifdef CONFIG_NET_CLS_ACT
WANG Cong33be6272013-12-15 20:15:05 -0800248 __u32 type; /* for backward compat(TCA_OLD_COMPAT) */
WANG Cong22dc13c2016-08-13 22:35:00 -0700249 int nr_actions;
250 struct tc_action **actions;
Cong Wange4b95c42017-11-06 13:47:19 -0800251 struct net *net;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700252#endif
WANG Cong5da57f42013-12-15 20:15:07 -0800253 /* Map to export classifier specific extension TLV types to the
254 * generic extensions API. Unsupported extensions must be set to 0.
255 */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700256 int action;
257 int police;
258};
259
WANG Congb9a24bb2016-08-19 12:36:54 -0700260static inline int tcf_exts_init(struct tcf_exts *exts, int action, int police)
WANG Cong33be6272013-12-15 20:15:05 -0800261{
262#ifdef CONFIG_NET_CLS_ACT
WANG Cong5da57f42013-12-15 20:15:07 -0800263 exts->type = 0;
WANG Cong22dc13c2016-08-13 22:35:00 -0700264 exts->nr_actions = 0;
Cong Wange4b95c42017-11-06 13:47:19 -0800265 exts->net = NULL;
WANG Cong22dc13c2016-08-13 22:35:00 -0700266 exts->actions = kcalloc(TCA_ACT_MAX_PRIO, sizeof(struct tc_action *),
267 GFP_KERNEL);
WANG Congb9a24bb2016-08-19 12:36:54 -0700268 if (!exts->actions)
269 return -ENOMEM;
WANG Cong33be6272013-12-15 20:15:05 -0800270#endif
WANG Cong5da57f42013-12-15 20:15:07 -0800271 exts->action = action;
272 exts->police = police;
WANG Congb9a24bb2016-08-19 12:36:54 -0700273 return 0;
WANG Cong33be6272013-12-15 20:15:05 -0800274}
275
Cong Wange4b95c42017-11-06 13:47:19 -0800276/* Return false if the netns is being destroyed in cleanup_net(). Callers
277 * need to do cleanup synchronously in this case, otherwise may race with
278 * tc_action_net_exit(). Return true for other cases.
279 */
280static inline bool tcf_exts_get_net(struct tcf_exts *exts)
281{
282#ifdef CONFIG_NET_CLS_ACT
283 exts->net = maybe_get_net(exts->net);
284 return exts->net != NULL;
285#else
286 return true;
287#endif
288}
289
290static inline void tcf_exts_put_net(struct tcf_exts *exts)
291{
292#ifdef CONFIG_NET_CLS_ACT
293 if (exts->net)
294 put_net(exts->net);
295#endif
296}
297
WANG Cong22dc13c2016-08-13 22:35:00 -0700298static inline void tcf_exts_to_list(const struct tcf_exts *exts,
299 struct list_head *actions)
300{
301#ifdef CONFIG_NET_CLS_ACT
302 int i;
303
304 for (i = 0; i < exts->nr_actions; i++) {
305 struct tc_action *a = exts->actions[i];
306
Hadar Hen Zionfa5effe2016-09-27 11:09:51 +0300307 list_add_tail(&a->list, actions);
WANG Cong22dc13c2016-08-13 22:35:00 -0700308 }
309#endif
310}
311
Jakub Kicinskid897a632017-05-31 08:06:43 -0700312static inline void
313tcf_exts_stats_update(const struct tcf_exts *exts,
314 u64 bytes, u64 packets, u64 lastuse)
315{
316#ifdef CONFIG_NET_CLS_ACT
317 int i;
318
319 preempt_disable();
320
321 for (i = 0; i < exts->nr_actions; i++) {
322 struct tc_action *a = exts->actions[i];
323
324 tcf_action_stats_update(a, bytes, packets, lastuse);
325 }
326
327 preempt_enable();
328#endif
329}
330
Linus Torvalds1da177e2005-04-16 15:20:36 -0700331/**
Jiri Pirko3bcc0ce2017-08-04 14:28:58 +0200332 * tcf_exts_has_actions - check if at least one action is present
333 * @exts: tc filter extensions handle
334 *
335 * Returns true if at least one action is present.
336 */
337static inline bool tcf_exts_has_actions(struct tcf_exts *exts)
338{
WANG Cong2734437e2016-08-13 22:34:59 -0700339#ifdef CONFIG_NET_CLS_ACT
Jiri Pirko3bcc0ce2017-08-04 14:28:58 +0200340 return exts->nr_actions;
341#else
342 return false;
343#endif
344}
WANG Cong2734437e2016-08-13 22:34:59 -0700345
Jiri Pirko3bcc0ce2017-08-04 14:28:58 +0200346/**
347 * tcf_exts_has_one_action - check if exactly one action is present
348 * @exts: tc filter extensions handle
349 *
350 * Returns true if exactly one action is present.
351 */
352static inline bool tcf_exts_has_one_action(struct tcf_exts *exts)
353{
354#ifdef CONFIG_NET_CLS_ACT
355 return exts->nr_actions == 1;
356#else
357 return false;
358#endif
359}
WANG Cong2734437e2016-08-13 22:34:59 -0700360
Jiri Pirkoaf69afc2017-08-04 14:28:59 +0200361/**
362 * tcf_exts_exec - execute tc filter extensions
363 * @skb: socket buffer
364 * @exts: tc filter extensions handle
365 * @res: desired result
366 *
Jiri Pirkoaf089e72017-08-04 14:29:01 +0200367 * Executes all configured extensions. Returns TC_ACT_OK on a normal execution,
Jiri Pirkoaf69afc2017-08-04 14:28:59 +0200368 * a negative number if the filter must be considered unmatched or
369 * a positive action code (TC_ACT_*) which must be returned to the
370 * underlying layer.
371 */
372static inline int
373tcf_exts_exec(struct sk_buff *skb, struct tcf_exts *exts,
374 struct tcf_result *res)
375{
376#ifdef CONFIG_NET_CLS_ACT
Jiri Pirkoec1a9cc2017-08-04 14:29:02 +0200377 return tcf_action_exec(skb, exts->actions, exts->nr_actions, res);
Jiri Pirkoaf69afc2017-08-04 14:28:59 +0200378#endif
Jiri Pirkoaf089e72017-08-04 14:29:01 +0200379 return TC_ACT_OK;
Jiri Pirkoaf69afc2017-08-04 14:28:59 +0200380}
381
Joe Perches5c152572013-07-30 22:47:13 -0700382int tcf_exts_validate(struct net *net, struct tcf_proto *tp,
383 struct nlattr **tb, struct nlattr *rate_tlv,
Alexander Aring50a56192018-01-18 11:20:52 -0500384 struct tcf_exts *exts, bool ovr,
385 struct netlink_ext_ack *extack);
WANG Cong18d02642014-09-25 10:26:37 -0700386void tcf_exts_destroy(struct tcf_exts *exts);
Jiri Pirko9b0d4442017-08-04 14:29:15 +0200387void tcf_exts_change(struct tcf_exts *dst, struct tcf_exts *src);
WANG Cong5da57f42013-12-15 20:15:07 -0800388int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts);
389int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700390
391/**
392 * struct tcf_pkt_info - packet information
393 */
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000394struct tcf_pkt_info {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700395 unsigned char * ptr;
396 int nexthdr;
397};
398
399#ifdef CONFIG_NET_EMATCH
400
401struct tcf_ematch_ops;
402
403/**
404 * struct tcf_ematch - extended match (ematch)
405 *
406 * @matchid: identifier to allow userspace to reidentify a match
407 * @flags: flags specifying attributes and the relation to other matches
408 * @ops: the operations lookup table of the corresponding ematch module
409 * @datalen: length of the ematch specific configuration data
410 * @data: ematch specific data
411 */
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000412struct tcf_ematch {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700413 struct tcf_ematch_ops * ops;
414 unsigned long data;
415 unsigned int datalen;
416 u16 matchid;
417 u16 flags;
John Fastabend82a470f2014-10-05 21:27:53 -0700418 struct net *net;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700419};
420
421static inline int tcf_em_is_container(struct tcf_ematch *em)
422{
423 return !em->ops;
424}
425
426static inline int tcf_em_is_simple(struct tcf_ematch *em)
427{
428 return em->flags & TCF_EM_SIMPLE;
429}
430
431static inline int tcf_em_is_inverted(struct tcf_ematch *em)
432{
433 return em->flags & TCF_EM_INVERT;
434}
435
436static inline int tcf_em_last_match(struct tcf_ematch *em)
437{
438 return (em->flags & TCF_EM_REL_MASK) == TCF_EM_REL_END;
439}
440
441static inline int tcf_em_early_end(struct tcf_ematch *em, int result)
442{
443 if (tcf_em_last_match(em))
444 return 1;
445
446 if (result == 0 && em->flags & TCF_EM_REL_AND)
447 return 1;
448
449 if (result != 0 && em->flags & TCF_EM_REL_OR)
450 return 1;
451
452 return 0;
453}
454
455/**
456 * struct tcf_ematch_tree - ematch tree handle
457 *
458 * @hdr: ematch tree header supplied by userspace
459 * @matches: array of ematches
460 */
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000461struct tcf_ematch_tree {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700462 struct tcf_ematch_tree_hdr hdr;
463 struct tcf_ematch * matches;
464
465};
466
467/**
468 * struct tcf_ematch_ops - ematch module operations
469 *
470 * @kind: identifier (kind) of this ematch module
471 * @datalen: length of expected configuration data (optional)
472 * @change: called during validation (optional)
473 * @match: called during ematch tree evaluation, must return 1/0
474 * @destroy: called during destroyage (optional)
475 * @dump: called during dumping process (optional)
476 * @owner: owner, must be set to THIS_MODULE
477 * @link: link to previous/next ematch module (internal use)
478 */
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000479struct tcf_ematch_ops {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700480 int kind;
481 int datalen;
John Fastabend82a470f2014-10-05 21:27:53 -0700482 int (*change)(struct net *net, void *,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700483 int, struct tcf_ematch *);
484 int (*match)(struct sk_buff *, struct tcf_ematch *,
485 struct tcf_pkt_info *);
John Fastabend82a470f2014-10-05 21:27:53 -0700486 void (*destroy)(struct tcf_ematch *);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700487 int (*dump)(struct sk_buff *, struct tcf_ematch *);
488 struct module *owner;
489 struct list_head link;
490};
491
Joe Perches5c152572013-07-30 22:47:13 -0700492int tcf_em_register(struct tcf_ematch_ops *);
493void tcf_em_unregister(struct tcf_ematch_ops *);
494int tcf_em_tree_validate(struct tcf_proto *, struct nlattr *,
495 struct tcf_ematch_tree *);
John Fastabend82a470f2014-10-05 21:27:53 -0700496void tcf_em_tree_destroy(struct tcf_ematch_tree *);
Joe Perches5c152572013-07-30 22:47:13 -0700497int tcf_em_tree_dump(struct sk_buff *, struct tcf_ematch_tree *, int);
498int __tcf_em_tree_match(struct sk_buff *, struct tcf_ematch_tree *,
499 struct tcf_pkt_info *);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700500
501/**
Linus Torvalds1da177e2005-04-16 15:20:36 -0700502 * tcf_em_tree_match - evaulate an ematch tree
503 *
504 * @skb: socket buffer of the packet in question
505 * @tree: ematch tree to be used for evaluation
506 * @info: packet information examined by classifier
507 *
508 * This function matches @skb against the ematch tree in @tree by going
509 * through all ematches respecting their logic relations returning
510 * as soon as the result is obvious.
511 *
512 * Returns 1 if the ematch tree as-one matches, no ematches are configured
513 * or ematch is not enabled in the kernel, otherwise 0 is returned.
514 */
515static inline int tcf_em_tree_match(struct sk_buff *skb,
516 struct tcf_ematch_tree *tree,
517 struct tcf_pkt_info *info)
518{
519 if (tree->hdr.nmatches)
520 return __tcf_em_tree_match(skb, tree, info);
521 else
522 return 1;
523}
524
Patrick McHardydb3d99c2007-07-11 19:46:26 -0700525#define MODULE_ALIAS_TCF_EMATCH(kind) MODULE_ALIAS("ematch-kind-" __stringify(kind))
526
Linus Torvalds1da177e2005-04-16 15:20:36 -0700527#else /* CONFIG_NET_EMATCH */
528
Eric Dumazetfd2c3ef2009-11-03 03:26:03 +0000529struct tcf_ematch_tree {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700530};
531
532#define tcf_em_tree_validate(tp, tb, t) ((void)(t), 0)
John Fastabend82a470f2014-10-05 21:27:53 -0700533#define tcf_em_tree_destroy(t) do { (void)(t); } while(0)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700534#define tcf_em_tree_dump(skb, t, tlv) (0)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700535#define tcf_em_tree_match(skb, t, info) ((void)(info), 1)
536
537#endif /* CONFIG_NET_EMATCH */
538
539static inline unsigned char * tcf_get_base_ptr(struct sk_buff *skb, int layer)
540{
541 switch (layer) {
542 case TCF_LAYER_LINK:
Wolfgang Bumillerd3303a62018-01-18 11:32:36 +0100543 return skb_mac_header(skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700544 case TCF_LAYER_NETWORK:
Arnaldo Carvalho de Melod56f90a2007-04-10 20:50:43 -0700545 return skb_network_header(skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700546 case TCF_LAYER_TRANSPORT:
Arnaldo Carvalho de Melo9c702202007-04-25 18:04:18 -0700547 return skb_transport_header(skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700548 }
549
550 return NULL;
551}
552
Arnaldo Carvalho de Meloeddc9ec2007-04-20 22:47:35 -0700553static inline int tcf_valid_offset(const struct sk_buff *skb,
554 const unsigned char *ptr, const int len)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700555{
David S. Millerda521b22010-12-21 12:43:16 -0800556 return likely((ptr + len) <= skb_tail_pointer(skb) &&
557 ptr >= skb->head &&
558 (ptr <= (ptr + len)));
Linus Torvalds1da177e2005-04-16 15:20:36 -0700559}
560
561#ifdef CONFIG_NET_CLS_IND
Denis V. Lunev0eeb8ff2007-12-04 01:15:45 -0800562#include <net/net_namespace.h>
563
Linus Torvalds1da177e2005-04-16 15:20:36 -0700564static inline int
Alexander Aring1057c552018-01-18 11:20:54 -0500565tcf_change_indev(struct net *net, struct nlattr *indev_tlv,
566 struct netlink_ext_ack *extack)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700567{
WANG Cong2519a602014-01-09 16:14:02 -0800568 char indev[IFNAMSIZ];
Patrick McHardyc01003c2007-03-29 11:46:52 -0700569 struct net_device *dev;
570
Alexander Aring1057c552018-01-18 11:20:54 -0500571 if (nla_strlcpy(indev, indev_tlv, IFNAMSIZ) >= IFNAMSIZ) {
572 NL_SET_ERR_MSG(extack, "Interface name too long");
WANG Cong2519a602014-01-09 16:14:02 -0800573 return -EINVAL;
Alexander Aring1057c552018-01-18 11:20:54 -0500574 }
WANG Cong2519a602014-01-09 16:14:02 -0800575 dev = __dev_get_by_name(net, indev);
576 if (!dev)
577 return -ENODEV;
578 return dev->ifindex;
579}
Linus Torvalds1da177e2005-04-16 15:20:36 -0700580
WANG Cong2519a602014-01-09 16:14:02 -0800581static inline bool
582tcf_match_indev(struct sk_buff *skb, int ifindex)
583{
584 if (!ifindex)
585 return true;
586 if (!skb->skb_iif)
587 return false;
588 return ifindex == skb->skb_iif;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700589}
590#endif /* CONFIG_NET_CLS_IND */
591
Jiri Pirko208c0f42017-10-19 15:50:32 +0200592int tc_setup_cb_call(struct tcf_block *block, struct tcf_exts *exts,
593 enum tc_setup_type type, void *type_data, bool err_stop);
Jiri Pirko717503b2017-10-11 09:41:09 +0200594
Jiri Pirko8c4083b2017-10-19 15:50:29 +0200595enum tc_block_command {
596 TC_BLOCK_BIND,
597 TC_BLOCK_UNBIND,
598};
599
600struct tc_block_offload {
601 enum tc_block_command command;
602 enum tcf_block_binder_type binder_type;
603 struct tcf_block *block;
604};
605
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200606struct tc_cls_common_offload {
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200607 u32 chain_index;
608 __be16 protocol;
Jiri Pirkod7c1c8d2017-08-07 10:15:30 +0200609 u32 prio;
Quentin Monnet8f0b4252018-01-19 17:44:47 -0800610 struct netlink_ext_ack *extack;
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200611};
612
John Fastabenda1b7c5f2016-02-16 21:17:09 -0800613struct tc_cls_u32_knode {
614 struct tcf_exts *exts;
John Fastabende0148602016-02-17 14:59:30 -0800615 struct tc_u32_sel *sel;
John Fastabenda1b7c5f2016-02-16 21:17:09 -0800616 u32 handle;
617 u32 val;
618 u32 mask;
619 u32 link_handle;
John Fastabende0148602016-02-17 14:59:30 -0800620 u8 fshift;
John Fastabenda1b7c5f2016-02-16 21:17:09 -0800621};
622
623struct tc_cls_u32_hnode {
624 u32 handle;
625 u32 prio;
626 unsigned int divisor;
627};
628
629enum tc_clsu32_command {
630 TC_CLSU32_NEW_KNODE,
631 TC_CLSU32_REPLACE_KNODE,
632 TC_CLSU32_DELETE_KNODE,
633 TC_CLSU32_NEW_HNODE,
634 TC_CLSU32_REPLACE_HNODE,
635 TC_CLSU32_DELETE_HNODE,
636};
637
638struct tc_cls_u32_offload {
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200639 struct tc_cls_common_offload common;
John Fastabenda1b7c5f2016-02-16 21:17:09 -0800640 /* knode values */
641 enum tc_clsu32_command command;
642 union {
643 struct tc_cls_u32_knode knode;
644 struct tc_cls_u32_hnode hnode;
645 };
646};
647
Jiri Pirko7b06e8a2017-08-09 14:30:35 +0200648static inline bool tc_can_offload(const struct net_device *dev)
John Fastabend6843e7a2016-02-26 07:53:49 -0800649{
Jiri Pirko70b5aee2017-11-01 11:47:41 +0100650 return dev->features & NETIF_F_HW_TC;
John Fastabend6843e7a2016-02-26 07:53:49 -0800651}
652
Quentin Monnetf9eda142018-01-19 17:44:48 -0800653static inline bool tc_can_offload_extack(const struct net_device *dev,
654 struct netlink_ext_ack *extack)
655{
656 bool can = tc_can_offload(dev);
657
658 if (!can)
659 NL_SET_ERR_MSG(extack, "TC offload is disabled on net device");
660
661 return can;
662}
663
Jakub Kicinski878db9f2018-01-25 14:00:43 -0800664static inline bool
665tc_cls_can_offload_and_chain0(const struct net_device *dev,
666 struct tc_cls_common_offload *common)
667{
668 if (!tc_can_offload_extack(dev, common->extack))
669 return false;
670 if (common->chain_index) {
671 NL_SET_ERR_MSG(common->extack,
672 "Driver supports only offload of chain 0");
673 return false;
674 }
675 return true;
676}
677
Hadar Hen Zion55330f02016-12-01 14:06:33 +0200678static inline bool tc_skip_hw(u32 flags)
679{
680 return (flags & TCA_CLS_FLAGS_SKIP_HW) ? true : false;
681}
682
Samudrala, Sridhard34e3e12016-05-12 17:08:23 -0700683static inline bool tc_skip_sw(u32 flags)
684{
685 return (flags & TCA_CLS_FLAGS_SKIP_SW) ? true : false;
686}
687
688/* SKIP_HW and SKIP_SW are mutually exclusive flags. */
689static inline bool tc_flags_valid(u32 flags)
690{
Marcelo Ricardo Leitner81c72882018-05-13 17:44:27 -0300691 if (flags & ~(TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW |
692 TCA_CLS_FLAGS_VERBOSE))
Samudrala, Sridhard34e3e12016-05-12 17:08:23 -0700693 return false;
694
Marcelo Ricardo Leitner81c72882018-05-13 17:44:27 -0300695 flags &= TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW;
Samudrala, Sridhard34e3e12016-05-12 17:08:23 -0700696 if (!(flags ^ (TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW)))
697 return false;
698
699 return true;
700}
701
Or Gerlitze6960282017-02-16 10:31:12 +0200702static inline bool tc_in_hw(u32 flags)
703{
704 return (flags & TCA_CLS_FLAGS_IN_HW) ? true : false;
705}
706
Jakub Kicinski34832e12018-01-24 12:54:14 -0800707static inline void
708tc_cls_common_offload_init(struct tc_cls_common_offload *cls_common,
709 const struct tcf_proto *tp, u32 flags,
710 struct netlink_ext_ack *extack)
711{
712 cls_common->chain_index = tp->chain->index;
713 cls_common->protocol = tp->protocol;
714 cls_common->prio = tp->prio;
Marcelo Ricardo Leitner81c72882018-05-13 17:44:27 -0300715 if (tc_skip_sw(flags) || flags & TCA_CLS_FLAGS_VERBOSE)
Jakub Kicinski34832e12018-01-24 12:54:14 -0800716 cls_common->extack = extack;
717}
718
Amir Vadai5b33f482016-03-08 12:42:29 +0200719enum tc_fl_command {
720 TC_CLSFLOWER_REPLACE,
721 TC_CLSFLOWER_DESTROY,
Amir Vadai10cbc682016-05-13 12:55:37 +0000722 TC_CLSFLOWER_STATS,
Amir Vadai5b33f482016-03-08 12:42:29 +0200723};
724
725struct tc_cls_flower_offload {
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200726 struct tc_cls_common_offload common;
Amir Vadai5b33f482016-03-08 12:42:29 +0200727 enum tc_fl_command command;
Amir Vadai8208d212016-03-11 11:08:45 +0200728 unsigned long cookie;
Amir Vadai5b33f482016-03-08 12:42:29 +0200729 struct flow_dissector *dissector;
730 struct fl_flow_key *mask;
731 struct fl_flow_key *key;
732 struct tcf_exts *exts;
Amritha Nambiar384c1812017-10-27 02:35:34 -0700733 u32 classid;
Amir Vadai5b33f482016-03-08 12:42:29 +0200734};
735
Yotam Gigib87f7932016-07-21 12:03:12 +0200736enum tc_matchall_command {
737 TC_CLSMATCHALL_REPLACE,
738 TC_CLSMATCHALL_DESTROY,
739};
740
741struct tc_cls_matchall_offload {
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200742 struct tc_cls_common_offload common;
Yotam Gigib87f7932016-07-21 12:03:12 +0200743 enum tc_matchall_command command;
744 struct tcf_exts *exts;
745 unsigned long cookie;
746};
747
Jakub Kicinski332ae8e2016-09-21 11:43:53 +0100748enum tc_clsbpf_command {
Jakub Kicinski102740b2017-12-19 13:32:13 -0800749 TC_CLSBPF_OFFLOAD,
Jakub Kicinski68d64062016-09-21 11:44:02 +0100750 TC_CLSBPF_STATS,
Jakub Kicinski332ae8e2016-09-21 11:43:53 +0100751};
752
753struct tc_cls_bpf_offload {
Jiri Pirko5fd9fc42017-08-07 10:15:29 +0200754 struct tc_cls_common_offload common;
Jakub Kicinski332ae8e2016-09-21 11:43:53 +0100755 enum tc_clsbpf_command command;
756 struct tcf_exts *exts;
757 struct bpf_prog *prog;
Jakub Kicinski102740b2017-12-19 13:32:13 -0800758 struct bpf_prog *oldprog;
Jakub Kicinski332ae8e2016-09-21 11:43:53 +0100759 const char *name;
760 bool exts_integrated;
761};
762
Amritha Nambiar4e8b86c2017-09-07 04:00:06 -0700763struct tc_mqprio_qopt_offload {
764 /* struct tc_mqprio_qopt must always be the first element */
765 struct tc_mqprio_qopt qopt;
766 u16 mode;
767 u16 shaper;
768 u32 flags;
769 u64 min_rate[TC_QOPT_MAX_QUEUE];
770 u64 max_rate[TC_QOPT_MAX_QUEUE];
771};
Jamal Hadi Salim1045ba72017-01-24 07:02:41 -0500772
773/* This structure holds cookie structure that is passed from user
774 * to the kernel for actions and classifiers
775 */
776struct tc_cookie {
777 u8 *data;
778 u32 len;
779};
Nogah Frankel602f3ba2017-11-06 07:23:41 +0100780
Nogah Frankelf34b4aa2018-01-10 14:59:58 +0100781struct tc_qopt_offload_stats {
782 struct gnet_stats_basic_packed *bstats;
783 struct gnet_stats_queue *qstats;
784};
785
Jakub Kicinskif971b132018-05-25 21:53:35 -0700786enum tc_mq_command {
787 TC_MQ_CREATE,
788 TC_MQ_DESTROY,
Jakub Kicinski47c669a42018-05-25 21:53:37 -0700789 TC_MQ_STATS,
Jakub Kicinskif971b132018-05-25 21:53:35 -0700790};
791
792struct tc_mq_qopt_offload {
793 enum tc_mq_command command;
794 u32 handle;
Jakub Kicinski47c669a42018-05-25 21:53:37 -0700795 struct tc_qopt_offload_stats stats;
Jakub Kicinskif971b132018-05-25 21:53:35 -0700796};
797
Nogah Frankel602f3ba2017-11-06 07:23:41 +0100798enum tc_red_command {
799 TC_RED_REPLACE,
800 TC_RED_DESTROY,
801 TC_RED_STATS,
802 TC_RED_XSTATS,
803};
804
805struct tc_red_qopt_offload_params {
806 u32 min;
807 u32 max;
808 u32 probability;
809 bool is_ecn;
Jakub Kicinski416ef9b2018-01-14 20:01:26 -0800810 struct gnet_stats_queue *qstats;
Nogah Frankel602f3ba2017-11-06 07:23:41 +0100811};
Nogah Frankel602f3ba2017-11-06 07:23:41 +0100812
813struct tc_red_qopt_offload {
814 enum tc_red_command command;
815 u32 handle;
816 u32 parent;
817 union {
818 struct tc_red_qopt_offload_params set;
Nogah Frankelf34b4aa2018-01-10 14:59:58 +0100819 struct tc_qopt_offload_stats stats;
Nogah Frankel602f3ba2017-11-06 07:23:41 +0100820 struct red_stats *xstats;
821 };
822};
823
Nogah Frankel7fdb61b2018-01-14 12:33:15 +0100824enum tc_prio_command {
825 TC_PRIO_REPLACE,
826 TC_PRIO_DESTROY,
827 TC_PRIO_STATS,
Nogah Frankelb9c7a7a2018-02-28 10:45:06 +0100828 TC_PRIO_GRAFT,
Nogah Frankel7fdb61b2018-01-14 12:33:15 +0100829};
830
831struct tc_prio_qopt_offload_params {
832 int bands;
833 u8 priomap[TC_PRIO_MAX + 1];
834 /* In case that a prio qdisc is offloaded and now is changed to a
835 * non-offloadedable config, it needs to update the backlog & qlen
836 * values to negate the HW backlog & qlen values (and only them).
837 */
838 struct gnet_stats_queue *qstats;
839};
840
Nogah Frankelb9c7a7a2018-02-28 10:45:06 +0100841struct tc_prio_qopt_offload_graft_params {
842 u8 band;
843 u32 child_handle;
844};
845
Nogah Frankel7fdb61b2018-01-14 12:33:15 +0100846struct tc_prio_qopt_offload {
847 enum tc_prio_command command;
848 u32 handle;
849 u32 parent;
850 union {
851 struct tc_prio_qopt_offload_params replace_params;
852 struct tc_qopt_offload_stats stats;
Nogah Frankelb9c7a7a2018-02-28 10:45:06 +0100853 struct tc_prio_qopt_offload_graft_params graft_params;
Nogah Frankel7fdb61b2018-01-14 12:33:15 +0100854 };
855};
Nogah Frankelb9c7a7a2018-02-28 10:45:06 +0100856
Linus Torvalds1da177e2005-04-16 15:20:36 -0700857#endif