blob: 26e7bc4ffb79fc32e18a6bf678f3ee80824fcf2c [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * net/sched/cls_fw.c Classifier mapping ipchains' fwmark to traffic class.
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version
7 * 2 of the License, or (at your option) any later version.
8 *
9 * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
10 *
11 * Changes:
12 * Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_walk off by one
13 * Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_delete killed all the filter (and kernel).
14 * Alex <alex@pilotsoft.com> : 2004xxyy: Added Action extension
15 *
16 * JHS: We should remove the CONFIG_NET_CLS_IND from here
17 * eventually when the meta match extension is made available
18 *
19 */
20
Linus Torvalds1da177e2005-04-16 15:20:36 -070021#include <linux/module.h>
Tejun Heo5a0e3ad2010-03-24 17:04:11 +090022#include <linux/slab.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070023#include <linux/types.h>
24#include <linux/kernel.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070025#include <linux/string.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070026#include <linux/errno.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070027#include <linux/skbuff.h>
Patrick McHardy0ba48052007-07-02 22:49:07 -070028#include <net/netlink.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070029#include <net/act_api.h>
30#include <net/pkt_cls.h>
31
Thomas Grafc5c13fa2005-04-24 20:19:54 -070032#define HTSIZE (PAGE_SIZE/sizeof(struct fw_filter *))
33
Eric Dumazetcc7ec452011-01-19 19:26:56 +000034struct fw_head {
Thomas Grafc5c13fa2005-04-24 20:19:54 -070035 struct fw_filter *ht[HTSIZE];
Patrick McHardyb4e9b522006-08-25 16:11:42 -070036 u32 mask;
Linus Torvalds1da177e2005-04-16 15:20:36 -070037};
38
Eric Dumazetcc7ec452011-01-19 19:26:56 +000039struct fw_filter {
Linus Torvalds1da177e2005-04-16 15:20:36 -070040 struct fw_filter *next;
41 u32 id;
42 struct tcf_result res;
43#ifdef CONFIG_NET_CLS_IND
44 char indev[IFNAMSIZ];
45#endif /* CONFIG_NET_CLS_IND */
46 struct tcf_exts exts;
47};
48
Patrick McHardy52390082008-01-31 18:36:18 -080049static const struct tcf_ext_map fw_ext_map = {
Linus Torvalds1da177e2005-04-16 15:20:36 -070050 .action = TCA_FW_ACT,
51 .police = TCA_FW_POLICE
52};
53
Eric Dumazetcc7ec452011-01-19 19:26:56 +000054static inline int fw_hash(u32 handle)
Linus Torvalds1da177e2005-04-16 15:20:36 -070055{
Thomas Grafc5c13fa2005-04-24 20:19:54 -070056 if (HTSIZE == 4096)
57 return ((handle >> 24) & 0xFFF) ^
58 ((handle >> 12) & 0xFFF) ^
59 (handle & 0xFFF);
60 else if (HTSIZE == 2048)
61 return ((handle >> 22) & 0x7FF) ^
62 ((handle >> 11) & 0x7FF) ^
63 (handle & 0x7FF);
64 else if (HTSIZE == 1024)
65 return ((handle >> 20) & 0x3FF) ^
66 ((handle >> 10) & 0x3FF) ^
67 (handle & 0x3FF);
68 else if (HTSIZE == 512)
69 return (handle >> 27) ^
70 ((handle >> 18) & 0x1FF) ^
71 ((handle >> 9) & 0x1FF) ^
72 (handle & 0x1FF);
73 else if (HTSIZE == 256) {
74 u8 *t = (u8 *) &handle;
75 return t[0] ^ t[1] ^ t[2] ^ t[3];
YOSHIFUJI Hideaki10297b92007-02-09 23:25:16 +090076 } else
Thomas Grafc5c13fa2005-04-24 20:19:54 -070077 return handle & (HTSIZE - 1);
Linus Torvalds1da177e2005-04-16 15:20:36 -070078}
79
80static int fw_classify(struct sk_buff *skb, struct tcf_proto *tp,
81 struct tcf_result *res)
82{
Eric Dumazetcc7ec452011-01-19 19:26:56 +000083 struct fw_head *head = (struct fw_head *)tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -070084 struct fw_filter *f;
85 int r;
Patrick McHardy5c804bf2006-12-05 13:46:13 -080086 u32 id = skb->mark;
Linus Torvalds1da177e2005-04-16 15:20:36 -070087
88 if (head != NULL) {
Patrick McHardy5c804bf2006-12-05 13:46:13 -080089 id &= head->mask;
Eric Dumazetcc7ec452011-01-19 19:26:56 +000090 for (f = head->ht[fw_hash(id)]; f; f = f->next) {
Linus Torvalds1da177e2005-04-16 15:20:36 -070091 if (f->id == id) {
92 *res = f->res;
93#ifdef CONFIG_NET_CLS_IND
94 if (!tcf_match_indev(skb, f->indev))
95 continue;
96#endif /* CONFIG_NET_CLS_IND */
97 r = tcf_exts_exec(skb, &f->exts, res);
98 if (r < 0)
99 continue;
100
101 return r;
102 }
103 }
104 } else {
105 /* old method */
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000106 if (id && (TC_H_MAJ(id) == 0 ||
107 !(TC_H_MAJ(id ^ tp->q->handle)))) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700108 res->classid = id;
109 res->class = 0;
110 return 0;
111 }
112 }
113
114 return -1;
115}
116
117static unsigned long fw_get(struct tcf_proto *tp, u32 handle)
118{
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000119 struct fw_head *head = (struct fw_head *)tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700120 struct fw_filter *f;
121
122 if (head == NULL)
123 return 0;
124
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000125 for (f = head->ht[fw_hash(handle)]; f; f = f->next) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700126 if (f->id == handle)
127 return (unsigned long)f;
128 }
129 return 0;
130}
131
132static void fw_put(struct tcf_proto *tp, unsigned long f)
133{
134}
135
136static int fw_init(struct tcf_proto *tp)
137{
138 return 0;
139}
140
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000141static void fw_delete_filter(struct tcf_proto *tp, struct fw_filter *f)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700142{
143 tcf_unbind_filter(tp, &f->res);
144 tcf_exts_destroy(tp, &f->exts);
145 kfree(f);
146}
147
148static void fw_destroy(struct tcf_proto *tp)
149{
Patrick McHardy47a1a1d2008-11-19 08:03:09 +0000150 struct fw_head *head = tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700151 struct fw_filter *f;
152 int h;
153
154 if (head == NULL)
155 return;
156
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000157 for (h = 0; h < HTSIZE; h++) {
158 while ((f = head->ht[h]) != NULL) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700159 head->ht[h] = f->next;
160 fw_delete_filter(tp, f);
161 }
162 }
163 kfree(head);
164}
165
166static int fw_delete(struct tcf_proto *tp, unsigned long arg)
167{
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000168 struct fw_head *head = (struct fw_head *)tp->root;
169 struct fw_filter *f = (struct fw_filter *)arg;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700170 struct fw_filter **fp;
171
172 if (head == NULL || f == NULL)
173 goto out;
174
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000175 for (fp = &head->ht[fw_hash(f->id)]; *fp; fp = &(*fp)->next) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700176 if (*fp == f) {
177 tcf_tree_lock(tp);
178 *fp = f->next;
179 tcf_tree_unlock(tp);
180 fw_delete_filter(tp, f);
181 return 0;
182 }
183 }
184out:
185 return -EINVAL;
186}
187
Patrick McHardy6fa8c012008-01-23 20:36:12 -0800188static const struct nla_policy fw_policy[TCA_FW_MAX + 1] = {
189 [TCA_FW_CLASSID] = { .type = NLA_U32 },
190 [TCA_FW_INDEV] = { .type = NLA_STRING, .len = IFNAMSIZ },
191 [TCA_FW_MASK] = { .type = NLA_U32 },
192};
193
Linus Torvalds1da177e2005-04-16 15:20:36 -0700194static int
195fw_change_attrs(struct tcf_proto *tp, struct fw_filter *f,
Patrick McHardyadd93b62008-01-22 22:11:33 -0800196 struct nlattr **tb, struct nlattr **tca, unsigned long base)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700197{
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700198 struct fw_head *head = (struct fw_head *)tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700199 struct tcf_exts e;
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700200 u32 mask;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700201 int err;
202
Patrick McHardyadd93b62008-01-22 22:11:33 -0800203 err = tcf_exts_validate(tp, tb, tca[TCA_RATE], &e, &fw_ext_map);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700204 if (err < 0)
205 return err;
206
207 err = -EINVAL;
Patrick McHardyadd93b62008-01-22 22:11:33 -0800208 if (tb[TCA_FW_CLASSID]) {
Patrick McHardy1587bac2008-01-23 20:35:03 -0800209 f->res.classid = nla_get_u32(tb[TCA_FW_CLASSID]);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700210 tcf_bind_filter(tp, &f->res, base);
211 }
212
213#ifdef CONFIG_NET_CLS_IND
Patrick McHardyadd93b62008-01-22 22:11:33 -0800214 if (tb[TCA_FW_INDEV]) {
215 err = tcf_change_indev(tp, f->indev, tb[TCA_FW_INDEV]);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700216 if (err < 0)
217 goto errout;
218 }
219#endif /* CONFIG_NET_CLS_IND */
220
Patrick McHardyadd93b62008-01-22 22:11:33 -0800221 if (tb[TCA_FW_MASK]) {
Patrick McHardy1587bac2008-01-23 20:35:03 -0800222 mask = nla_get_u32(tb[TCA_FW_MASK]);
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700223 if (mask != head->mask)
224 goto errout;
225 } else if (head->mask != 0xFFFFFFFF)
226 goto errout;
227
Linus Torvalds1da177e2005-04-16 15:20:36 -0700228 tcf_exts_change(tp, &f->exts, &e);
229
230 return 0;
231errout:
232 tcf_exts_destroy(tp, &e);
233 return err;
234}
235
236static int fw_change(struct tcf_proto *tp, unsigned long base,
237 u32 handle,
Patrick McHardyadd93b62008-01-22 22:11:33 -0800238 struct nlattr **tca,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700239 unsigned long *arg)
240{
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000241 struct fw_head *head = (struct fw_head *)tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700242 struct fw_filter *f = (struct fw_filter *) *arg;
Patrick McHardyadd93b62008-01-22 22:11:33 -0800243 struct nlattr *opt = tca[TCA_OPTIONS];
244 struct nlattr *tb[TCA_FW_MAX + 1];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700245 int err;
246
247 if (!opt)
248 return handle ? -EINVAL : 0;
249
Patrick McHardy6fa8c012008-01-23 20:36:12 -0800250 err = nla_parse_nested(tb, TCA_FW_MAX, opt, fw_policy);
Patrick McHardycee63722008-01-23 20:33:32 -0800251 if (err < 0)
252 return err;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700253
254 if (f != NULL) {
255 if (f->id != handle && handle)
256 return -EINVAL;
257 return fw_change_attrs(tp, f, tb, tca, base);
258 }
259
260 if (!handle)
261 return -EINVAL;
262
263 if (head == NULL) {
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700264 u32 mask = 0xFFFFFFFF;
Patrick McHardy6fa8c012008-01-23 20:36:12 -0800265 if (tb[TCA_FW_MASK])
Patrick McHardy1587bac2008-01-23 20:35:03 -0800266 mask = nla_get_u32(tb[TCA_FW_MASK]);
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700267
Panagiotis Issaris0da974f2006-07-21 14:51:30 -0700268 head = kzalloc(sizeof(struct fw_head), GFP_KERNEL);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700269 if (head == NULL)
270 return -ENOBUFS;
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700271 head->mask = mask;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700272
273 tcf_tree_lock(tp);
274 tp->root = head;
275 tcf_tree_unlock(tp);
276 }
277
Panagiotis Issaris0da974f2006-07-21 14:51:30 -0700278 f = kzalloc(sizeof(struct fw_filter), GFP_KERNEL);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700279 if (f == NULL)
280 return -ENOBUFS;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700281
282 f->id = handle;
283
284 err = fw_change_attrs(tp, f, tb, tca, base);
285 if (err < 0)
286 goto errout;
287
288 f->next = head->ht[fw_hash(handle)];
289 tcf_tree_lock(tp);
290 head->ht[fw_hash(handle)] = f;
291 tcf_tree_unlock(tp);
292
293 *arg = (unsigned long)f;
294 return 0;
295
296errout:
Jesper Juhla51482b2005-11-08 09:41:34 -0800297 kfree(f);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700298 return err;
299}
300
301static void fw_walk(struct tcf_proto *tp, struct tcf_walker *arg)
302{
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000303 struct fw_head *head = (struct fw_head *)tp->root;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700304 int h;
305
306 if (head == NULL)
307 arg->stop = 1;
308
309 if (arg->stop)
310 return;
311
Thomas Grafc5c13fa2005-04-24 20:19:54 -0700312 for (h = 0; h < HTSIZE; h++) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700313 struct fw_filter *f;
314
315 for (f = head->ht[h]; f; f = f->next) {
316 if (arg->count < arg->skip) {
317 arg->count++;
318 continue;
319 }
320 if (arg->fn(tp, (unsigned long)f, arg) < 0) {
321 arg->stop = 1;
322 return;
323 }
324 arg->count++;
325 }
326 }
327}
328
329static int fw_dump(struct tcf_proto *tp, unsigned long fh,
330 struct sk_buff *skb, struct tcmsg *t)
331{
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700332 struct fw_head *head = (struct fw_head *)tp->root;
Eric Dumazetcc7ec452011-01-19 19:26:56 +0000333 struct fw_filter *f = (struct fw_filter *)fh;
Arnaldo Carvalho de Melo27a884d2007-04-19 20:29:13 -0700334 unsigned char *b = skb_tail_pointer(skb);
Patrick McHardy4b3550ef2008-01-23 20:34:11 -0800335 struct nlattr *nest;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700336
337 if (f == NULL)
338 return skb->len;
339
340 t->tcm_handle = f->id;
341
342 if (!f->res.classid && !tcf_exts_is_available(&f->exts))
343 return skb->len;
344
Patrick McHardy4b3550ef2008-01-23 20:34:11 -0800345 nest = nla_nest_start(skb, TCA_OPTIONS);
346 if (nest == NULL)
347 goto nla_put_failure;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700348
349 if (f->res.classid)
Patrick McHardy24beeab2008-01-23 20:34:48 -0800350 NLA_PUT_U32(skb, TCA_FW_CLASSID, f->res.classid);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700351#ifdef CONFIG_NET_CLS_IND
352 if (strlen(f->indev))
Patrick McHardy57e1c482008-01-23 20:34:28 -0800353 NLA_PUT_STRING(skb, TCA_FW_INDEV, f->indev);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700354#endif /* CONFIG_NET_CLS_IND */
Patrick McHardyb4e9b522006-08-25 16:11:42 -0700355 if (head->mask != 0xFFFFFFFF)
Patrick McHardy24beeab2008-01-23 20:34:48 -0800356 NLA_PUT_U32(skb, TCA_FW_MASK, head->mask);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700357
358 if (tcf_exts_dump(skb, &f->exts, &fw_ext_map) < 0)
Patrick McHardyadd93b62008-01-22 22:11:33 -0800359 goto nla_put_failure;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700360
Patrick McHardy4b3550ef2008-01-23 20:34:11 -0800361 nla_nest_end(skb, nest);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700362
363 if (tcf_exts_dump_stats(skb, &f->exts, &fw_ext_map) < 0)
Patrick McHardyadd93b62008-01-22 22:11:33 -0800364 goto nla_put_failure;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700365
366 return skb->len;
367
Patrick McHardyadd93b62008-01-22 22:11:33 -0800368nla_put_failure:
Arnaldo Carvalho de Melodc5fc572007-03-25 23:06:12 -0700369 nlmsg_trim(skb, b);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700370 return -1;
371}
372
Patrick McHardy2eb9d752008-01-22 22:10:42 -0800373static struct tcf_proto_ops cls_fw_ops __read_mostly = {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700374 .kind = "fw",
375 .classify = fw_classify,
376 .init = fw_init,
377 .destroy = fw_destroy,
378 .get = fw_get,
379 .put = fw_put,
380 .change = fw_change,
381 .delete = fw_delete,
382 .walk = fw_walk,
383 .dump = fw_dump,
384 .owner = THIS_MODULE,
385};
386
387static int __init init_fw(void)
388{
389 return register_tcf_proto_ops(&cls_fw_ops);
390}
391
YOSHIFUJI Hideaki10297b92007-02-09 23:25:16 +0900392static void __exit exit_fw(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700393{
394 unregister_tcf_proto_ops(&cls_fw_ops);
395}
396
397module_init(init_fw)
398module_exit(exit_fw)
399MODULE_LICENSE("GPL");