blob: 1ba912749caac2c64c5c223416dc6b9cb6be360b [file] [log] [blame]
Alexey Dobriyand62ddc22008-11-25 17:14:31 -08001#ifndef __NETNS_XFRM_H
2#define __NETNS_XFRM_H
3
Alexey Dobriyan9d4139c2008-11-25 17:16:11 -08004#include <linux/list.h>
Alexey Dobriyan50a30652008-11-25 17:21:01 -08005#include <linux/wait.h>
Alexey Dobriyan63082732008-11-25 17:19:07 -08006#include <linux/workqueue.h>
Alexey Dobriyan8b18f8e2008-11-25 17:23:26 -08007#include <linux/xfrm.h>
Alexey Dobriyan9d4139c2008-11-25 17:16:11 -08008
Alexey Dobriyanb27aead2008-11-25 18:00:48 -08009struct ctl_table_header;
10
Alexey Dobriyana35f6c52008-11-25 17:23:48 -080011struct xfrm_policy_hash {
12 struct hlist_head *table;
13 unsigned int hmask;
14};
15
Alexey Dobriyand62ddc22008-11-25 17:14:31 -080016struct netns_xfrm {
Alexey Dobriyan9d4139c2008-11-25 17:16:11 -080017 struct list_head state_all;
Alexey Dobriyan73d189d2008-11-25 17:16:58 -080018 /*
19 * Hash table to find appropriate SA towards given target (endpoint of
20 * tunnel or destination of transport mode) allowed by selector.
21 *
22 * Main use is finding SA after policy selected tunnel or transport
23 * mode. Also, it can be used by ah/esp icmp error handler to find
24 * offending SA.
25 */
26 struct hlist_head *state_bydst;
Alexey Dobriyand320bbb2008-11-25 17:17:24 -080027 struct hlist_head *state_bysrc;
Alexey Dobriyanb754a4f2008-11-25 17:17:47 -080028 struct hlist_head *state_byspi;
Alexey Dobriyan529983e2008-11-25 17:18:12 -080029 unsigned int state_hmask;
Alexey Dobriyan0bf7c5b2008-11-25 17:18:39 -080030 unsigned int state_num;
Alexey Dobriyan63082732008-11-25 17:19:07 -080031 struct work_struct state_hash_work;
Alexey Dobriyanb8a0ae22008-11-25 17:20:11 -080032 struct hlist_head state_gc_list;
Alexey Dobriyanc7837142008-11-25 17:20:36 -080033 struct work_struct state_gc_work;
Alexey Dobriyan50a30652008-11-25 17:21:01 -080034
35 wait_queue_head_t km_waitq;
Alexey Dobriyanadfcf0b2008-11-25 17:22:11 -080036
37 struct list_head policy_all;
Alexey Dobriyan93b851c2008-11-25 17:22:35 -080038 struct hlist_head *policy_byidx;
Alexey Dobriyan8100bea2008-11-25 17:22:58 -080039 unsigned int policy_idx_hmask;
Alexey Dobriyan8b18f8e2008-11-25 17:23:26 -080040 struct hlist_head policy_inexact[XFRM_POLICY_MAX * 2];
Alexey Dobriyana35f6c52008-11-25 17:23:48 -080041 struct xfrm_policy_hash policy_bydst[XFRM_POLICY_MAX * 2];
Alexey Dobriyandc2caba2008-11-25 17:24:15 -080042 unsigned int policy_count[XFRM_POLICY_MAX * 2];
Alexey Dobriyan66caf622008-11-25 17:28:57 -080043 struct work_struct policy_hash_work;
Alexey Dobriyana6483b72008-11-25 17:38:20 -080044
45 struct sock *nlsk;
Alexey Dobriyanb27aead2008-11-25 18:00:48 -080046
47 u32 sysctl_aevent_etime;
48 u32 sysctl_aevent_rseqth;
49 int sysctl_larval_drop;
50 u32 sysctl_acq_expires;
51#ifdef CONFIG_SYSCTL
52 struct ctl_table_header *sysctl_hdr;
53#endif
Alexey Dobriyand62ddc22008-11-25 17:14:31 -080054};
55
56#endif