Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2019 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
Maciej Żenczykowski | 776200e | 2020-02-05 02:05:16 -0800 | [diff] [blame] | 17 | #pragma once |
Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 18 | |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 19 | #include <errno.h> |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 20 | #include <linux/if_ether.h> |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 21 | #include <linux/rtnetlink.h> |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 22 | |
Maciej Żenczykowski | 0a7dce8 | 2019-01-28 15:31:55 -0800 | [diff] [blame] | 23 | #include <string> |
| 24 | |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 25 | #include "bpf/BpfUtils.h" |
| 26 | #include "netdbpf/bpf_shared.h" |
| 27 | |
Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 28 | namespace android { |
| 29 | namespace net { |
| 30 | |
Maciej Żenczykowski | ad73089 | 2020-02-13 18:21:32 -0800 | [diff] [blame^] | 31 | // this returns an ARPHRD_* constant or a -errno |
Maciej Żenczykowski | 0a7dce8 | 2019-01-28 15:31:55 -0800 | [diff] [blame] | 32 | int hardwareAddressType(const std::string& interface); |
| 33 | |
Maciej Żenczykowski | ad73089 | 2020-02-13 18:21:32 -0800 | [diff] [blame^] | 34 | // For better code clarity - do not change values - used for booleans like |
| 35 | // with_ethernet_header or isEthernet. |
| 36 | constexpr bool RAWIP = false; |
| 37 | constexpr bool ETHER = true; |
| 38 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 39 | inline int getClatEgressMapFd(void) { |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 40 | const int fd = bpf::bpfFdGet(CLAT_EGRESS_MAP_PATH, 0); |
| 41 | return (fd == -1) ? -errno : fd; |
| 42 | } |
Maciej Żenczykowski | 4e36f13 | 2019-12-15 13:20:15 -0800 | [diff] [blame] | 43 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 44 | inline int getClatEgressProgFd(bool with_ethernet_header) { |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 45 | const int fd = bpf::bpfFdGet( |
| 46 | with_ethernet_header ? CLAT_EGRESS_PROG_ETHER_PATH : CLAT_EGRESS_PROG_RAWIP_PATH, 0); |
| 47 | return (fd == -1) ? -errno : fd; |
| 48 | } |
Maciej Żenczykowski | e870a87 | 2019-12-15 13:56:13 -0800 | [diff] [blame] | 49 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 50 | inline int getClatIngressMapFd(void) { |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 51 | const int fd = bpf::bpfFdGet(CLAT_INGRESS_MAP_PATH, 0); |
| 52 | return (fd == -1) ? -errno : fd; |
| 53 | } |
Maciej Żenczykowski | 88d28ff | 2019-03-25 11:54:32 -0700 | [diff] [blame] | 54 | |
Maciej Żenczykowski | bfcd6a5 | 2020-02-12 04:05:58 -0800 | [diff] [blame] | 55 | inline int getClatIngressProgFd(bool with_ethernet_header) { |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 56 | const int fd = bpf::bpfFdGet( |
| 57 | with_ethernet_header ? CLAT_INGRESS_PROG_ETHER_PATH : CLAT_INGRESS_PROG_RAWIP_PATH, 0); |
| 58 | return (fd == -1) ? -errno : fd; |
| 59 | } |
Maciej Żenczykowski | 949d84a | 2019-01-28 17:22:30 -0800 | [diff] [blame] | 60 | |
Maciej Żenczykowski | fdd7929 | 2020-02-12 04:28:16 -0800 | [diff] [blame] | 61 | inline int getTetherIngressMapFd(void) { |
| 62 | const int fd = bpf::bpfFdGet(TETHER_INGRESS_MAP_PATH, 0); |
| 63 | return (fd == -1) ? -errno : fd; |
| 64 | } |
| 65 | |
Maciej Żenczykowski | 4acd4e8 | 2020-02-12 04:30:14 -0800 | [diff] [blame] | 66 | inline int getTetherIngressProgFd(bool with_ethernet_header) { |
| 67 | const int fd = bpf::bpfFdGet( |
| 68 | with_ethernet_header ? TETHER_INGRESS_PROG_ETHER_PATH : TETHER_INGRESS_PROG_RAWIP_PATH, |
| 69 | 0); |
| 70 | return (fd == -1) ? -errno : fd; |
| 71 | } |
| 72 | |
Maciej Żenczykowski | 66ce72d | 2020-02-12 05:05:00 -0800 | [diff] [blame] | 73 | inline int getTetherStatsMapFd(void) { |
| 74 | const int fd = bpf::bpfFdGet(TETHER_STATS_MAP_PATH, 0); |
| 75 | return (fd == -1) ? -errno : fd; |
| 76 | } |
| 77 | |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 78 | int doTcQdiscClsact(int ifIndex, uint16_t nlMsgType, uint16_t nlMsgFlags); |
Maciej Żenczykowski | 7330b02 | 2019-01-28 17:30:24 -0800 | [diff] [blame] | 79 | |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 80 | inline int tcQdiscAddDevClsact(int ifIndex) { |
| 81 | return doTcQdiscClsact(ifIndex, RTM_NEWQDISC, NLM_F_EXCL | NLM_F_CREATE); |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 82 | } |
| 83 | |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 84 | inline int tcQdiscReplaceDevClsact(int ifIndex) { |
| 85 | return doTcQdiscClsact(ifIndex, RTM_NEWQDISC, NLM_F_CREATE | NLM_F_REPLACE); |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 86 | } |
| 87 | |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 88 | inline int tcQdiscDelDevClsact(int ifIndex) { |
| 89 | return doTcQdiscClsact(ifIndex, RTM_DELQDISC, 0); |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 90 | } |
Maciej Żenczykowski | ff3308d | 2019-02-12 19:10:55 -0800 | [diff] [blame] | 91 | |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 92 | // tc filter add dev .. in/egress prio 1 protocol ipv6/ip bpf object-pinned /sys/fs/bpf/... |
| 93 | // direct-action |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 94 | int tcFilterAddDevBpf(int ifIndex, int bpfFd, bool ethernet, bool ingress, bool ipv6); |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 95 | |
| 96 | // tc filter add dev .. ingress prio 1 protocol ipv6 bpf object-pinned /sys/fs/bpf/... direct-action |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 97 | inline int tcFilterAddDevIngressBpf(int ifIndex, int bpfFd, bool ethernet) { |
| 98 | return tcFilterAddDevBpf(ifIndex, bpfFd, ethernet, /*ingress*/ true, /*ipv6*/ true); |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 99 | } |
| 100 | |
| 101 | // tc filter add dev .. egress prio 1 protocol ip bpf object-pinned /sys/fs/bpf/... direct-action |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 102 | inline int tcFilterAddDevEgressBpf(int ifIndex, int bpfFd, bool ethernet) { |
| 103 | return tcFilterAddDevBpf(ifIndex, bpfFd, ethernet, /*ingress*/ false, /*ipv6*/ false); |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 104 | } |
Maciej Żenczykowski | 2f8ff89 | 2019-03-25 13:57:20 -0700 | [diff] [blame] | 105 | |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 106 | // tc filter del dev .. in/egress prio .. protocol .. |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 107 | int tcFilterDelDev(int ifIndex, bool ingress, uint16_t prio, uint16_t proto); |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 108 | |
| 109 | // tc filter del dev .. ingress prio 1 protocol ipv6 |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 110 | inline int tcFilterDelDevIngressClatIpv6(int ifIndex) { |
| 111 | return tcFilterDelDev(ifIndex, /*ingress*/ true, /*prio*/ 1, ETH_P_IPV6); |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 112 | } |
| 113 | |
| 114 | // tc filter del dev .. egress prio 1 protocol ip |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 115 | inline int tcFilterDelDevEgressClatIpv4(int ifIndex) { |
| 116 | return tcFilterDelDev(ifIndex, /*ingress*/ false, /*prio*/ 1, ETH_P_IP); |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 117 | } |
| 118 | |
Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 119 | } // namespace net |
| 120 | } // namespace android |