Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2019 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
Maciej Żenczykowski | 776200e | 2020-02-05 02:05:16 -0800 | [diff] [blame] | 17 | #pragma once |
Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 18 | |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 19 | #include <errno.h> |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 20 | #include <linux/if_ether.h> |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 21 | #include <linux/rtnetlink.h> |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 22 | |
Maciej Żenczykowski | 0a7dce8 | 2019-01-28 15:31:55 -0800 | [diff] [blame] | 23 | #include <string> |
| 24 | |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 25 | #include "bpf/BpfUtils.h" |
| 26 | #include "netdbpf/bpf_shared.h" |
| 27 | |
Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 28 | namespace android { |
| 29 | namespace net { |
| 30 | |
Maciej Żenczykowski | 0a7dce8 | 2019-01-28 15:31:55 -0800 | [diff] [blame] | 31 | int hardwareAddressType(const std::string& interface); |
| 32 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 33 | inline int getClatEgressMapFd(void) { |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 34 | const int fd = bpf::bpfFdGet(CLAT_EGRESS_MAP_PATH, 0); |
| 35 | return (fd == -1) ? -errno : fd; |
| 36 | } |
Maciej Żenczykowski | 4e36f13 | 2019-12-15 13:20:15 -0800 | [diff] [blame] | 37 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 38 | inline int getClatEgressProgFd(bool with_ethernet_header) { |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 39 | const int fd = bpf::bpfFdGet( |
| 40 | with_ethernet_header ? CLAT_EGRESS_PROG_ETHER_PATH : CLAT_EGRESS_PROG_RAWIP_PATH, 0); |
| 41 | return (fd == -1) ? -errno : fd; |
| 42 | } |
Maciej Żenczykowski | e870a87 | 2019-12-15 13:56:13 -0800 | [diff] [blame] | 43 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 44 | inline int getClatIngressMapFd(void) { |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 45 | const int fd = bpf::bpfFdGet(CLAT_INGRESS_MAP_PATH, 0); |
| 46 | return (fd == -1) ? -errno : fd; |
| 47 | } |
Maciej Żenczykowski | 88d28ff | 2019-03-25 11:54:32 -0700 | [diff] [blame] | 48 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 49 | inline int getClatIngressProgFd(bool with_ethernet_header) { |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 50 | const int fd = bpf::bpfFdGet( |
| 51 | with_ethernet_header ? CLAT_INGRESS_PROG_ETHER_PATH : CLAT_INGRESS_PROG_RAWIP_PATH, 0); |
| 52 | return (fd == -1) ? -errno : fd; |
| 53 | } |
Maciej Żenczykowski | 949d84a | 2019-01-28 17:22:30 -0800 | [diff] [blame] | 54 | |
Maciej Żenczykowski | fdd7929 | 2020-02-12 04:28:16 -0800 | [diff] [blame] | 55 | inline int getTetherIngressMapFd(void) { |
| 56 | const int fd = bpf::bpfFdGet(TETHER_INGRESS_MAP_PATH, 0); |
| 57 | return (fd == -1) ? -errno : fd; |
| 58 | } |
| 59 | |
Maciej Żenczykowski | 4acd4e8 | 2020-02-12 04:30:14 -0800 | [diff] [blame^] | 60 | inline int getTetherIngressProgFd(bool with_ethernet_header) { |
| 61 | const int fd = bpf::bpfFdGet( |
| 62 | with_ethernet_header ? TETHER_INGRESS_PROG_ETHER_PATH : TETHER_INGRESS_PROG_RAWIP_PATH, |
| 63 | 0); |
| 64 | return (fd == -1) ? -errno : fd; |
| 65 | } |
| 66 | |
Maciej Żenczykowski | 7330b02 | 2019-01-28 17:30:24 -0800 | [diff] [blame] | 67 | int openNetlinkSocket(void); |
| 68 | |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 69 | int doTcQdiscClsact(int fd, int ifIndex, uint16_t nlMsgType, uint16_t nlMsgFlags); |
| 70 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 71 | inline int tcQdiscAddDevClsact(int fd, int ifIndex) { |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 72 | return doTcQdiscClsact(fd, ifIndex, RTM_NEWQDISC, NLM_F_EXCL | NLM_F_CREATE); |
| 73 | } |
| 74 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 75 | inline int tcQdiscReplaceDevClsact(int fd, int ifIndex) { |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 76 | return doTcQdiscClsact(fd, ifIndex, RTM_NEWQDISC, NLM_F_CREATE | NLM_F_REPLACE); |
| 77 | } |
| 78 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 79 | inline int tcQdiscDelDevClsact(int fd, int ifIndex) { |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 80 | return doTcQdiscClsact(fd, ifIndex, RTM_DELQDISC, 0); |
| 81 | } |
Maciej Żenczykowski | ff3308d | 2019-02-12 19:10:55 -0800 | [diff] [blame] | 82 | |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 83 | // tc filter add dev .. in/egress prio 1 protocol ipv6/ip bpf object-pinned /sys/fs/bpf/... |
| 84 | // direct-action |
| 85 | int tcFilterAddDevBpf(int fd, int ifIndex, int bpfFd, bool ethernet, bool ingress, bool ipv6); |
| 86 | |
| 87 | // tc filter add dev .. ingress prio 1 protocol ipv6 bpf object-pinned /sys/fs/bpf/... direct-action |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 88 | inline int tcFilterAddDevIngressBpf(int fd, int ifIndex, int bpfFd, bool ethernet) { |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 89 | return tcFilterAddDevBpf(fd, ifIndex, bpfFd, ethernet, /*ingress*/ true, /*ipv6*/ true); |
| 90 | } |
| 91 | |
| 92 | // tc filter add dev .. egress prio 1 protocol ip bpf object-pinned /sys/fs/bpf/... direct-action |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 93 | inline int tcFilterAddDevEgressBpf(int fd, int ifIndex, int bpfFd, bool ethernet) { |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 94 | return tcFilterAddDevBpf(fd, ifIndex, bpfFd, ethernet, /*ingress*/ false, /*ipv6*/ false); |
| 95 | } |
Maciej Żenczykowski | 2f8ff89 | 2019-03-25 13:57:20 -0700 | [diff] [blame] | 96 | |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 97 | // tc filter del dev .. in/egress prio .. protocol .. |
| 98 | int tcFilterDelDev(int fd, int ifIndex, bool ingress, uint16_t prio, uint16_t proto); |
| 99 | |
| 100 | // tc filter del dev .. ingress prio 1 protocol ipv6 |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 101 | inline int tcFilterDelDevIngressClatIpv6(int fd, int ifIndex) { |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 102 | return tcFilterDelDev(fd, ifIndex, /*ingress*/ true, /*prio*/ 1, ETH_P_IPV6); |
| 103 | } |
| 104 | |
| 105 | // tc filter del dev .. egress prio 1 protocol ip |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 106 | inline int tcFilterDelDevEgressClatIpv4(int fd, int ifIndex) { |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 107 | return tcFilterDelDev(fd, ifIndex, /*ingress*/ false, /*prio*/ 1, ETH_P_IP); |
| 108 | } |
| 109 | |
Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 110 | } // namespace net |
| 111 | } // namespace android |