Loading...
1/*
2 * Copyright (c) 2007 Patrick McHardy <kaber@trash.net>
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License as
6 * published by the Free Software Foundation; either version 2 of
7 * the License, or (at your option) any later version.
8 *
9 * The code this is based on carried the following copyright notice:
10 * ---
11 * (C) Copyright 2001-2006
12 * Alex Zeffertt, Cambridge Broadband Ltd, ajz@cambridgebroadband.com
13 * Re-worked by Ben Greear <greearb@candelatech.com>
14 * ---
15 */
16#include <linux/kernel.h>
17#include <linux/types.h>
18#include <linux/module.h>
19#include <linux/init.h>
20#include <linux/errno.h>
21#include <linux/slab.h>
22#include <linux/string.h>
23#include <linux/rculist.h>
24#include <linux/notifier.h>
25#include <linux/netdevice.h>
26#include <linux/etherdevice.h>
27#include <linux/ethtool.h>
28#include <linux/if_arp.h>
29#include <linux/if_vlan.h>
30#include <linux/if_link.h>
31#include <linux/if_macvlan.h>
32#include <linux/hash.h>
33#include <net/rtnetlink.h>
34#include <net/xfrm.h>
35
36#define MACVLAN_HASH_SIZE (1 << BITS_PER_BYTE)
37
38struct macvlan_port {
39 struct net_device *dev;
40 struct hlist_head vlan_hash[MACVLAN_HASH_SIZE];
41 struct list_head vlans;
42 struct rcu_head rcu;
43 bool passthru;
44 int count;
45};
46
47static void macvlan_port_destroy(struct net_device *dev);
48
49static struct macvlan_port *macvlan_port_get_rcu(const struct net_device *dev)
50{
51 return rcu_dereference(dev->rx_handler_data);
52}
53
54static struct macvlan_port *macvlan_port_get_rtnl(const struct net_device *dev)
55{
56 return rtnl_dereference(dev->rx_handler_data);
57}
58
59#define macvlan_port_exists(dev) (dev->priv_flags & IFF_MACVLAN_PORT)
60
61static struct macvlan_dev *macvlan_hash_lookup(const struct macvlan_port *port,
62 const unsigned char *addr)
63{
64 struct macvlan_dev *vlan;
65
66 hlist_for_each_entry_rcu(vlan, &port->vlan_hash[addr[5]], hlist) {
67 if (ether_addr_equal_64bits(vlan->dev->dev_addr, addr))
68 return vlan;
69 }
70 return NULL;
71}
72
73static void macvlan_hash_add(struct macvlan_dev *vlan)
74{
75 struct macvlan_port *port = vlan->port;
76 const unsigned char *addr = vlan->dev->dev_addr;
77
78 hlist_add_head_rcu(&vlan->hlist, &port->vlan_hash[addr[5]]);
79}
80
81static void macvlan_hash_del(struct macvlan_dev *vlan, bool sync)
82{
83 hlist_del_rcu(&vlan->hlist);
84 if (sync)
85 synchronize_rcu();
86}
87
88static void macvlan_hash_change_addr(struct macvlan_dev *vlan,
89 const unsigned char *addr)
90{
91 macvlan_hash_del(vlan, true);
92 /* Now that we are unhashed it is safe to change the device
93 * address without confusing packet delivery.
94 */
95 memcpy(vlan->dev->dev_addr, addr, ETH_ALEN);
96 macvlan_hash_add(vlan);
97}
98
99static int macvlan_addr_busy(const struct macvlan_port *port,
100 const unsigned char *addr)
101{
102 /* Test to see if the specified multicast address is
103 * currently in use by the underlying device or
104 * another macvlan.
105 */
106 if (ether_addr_equal_64bits(port->dev->dev_addr, addr))
107 return 1;
108
109 if (macvlan_hash_lookup(port, addr))
110 return 1;
111
112 return 0;
113}
114
115
116static int macvlan_broadcast_one(struct sk_buff *skb,
117 const struct macvlan_dev *vlan,
118 const struct ethhdr *eth, bool local)
119{
120 struct net_device *dev = vlan->dev;
121
122 if (local)
123 return dev_forward_skb(dev, skb);
124
125 skb->dev = dev;
126 if (ether_addr_equal_64bits(eth->h_dest, dev->broadcast))
127 skb->pkt_type = PACKET_BROADCAST;
128 else
129 skb->pkt_type = PACKET_MULTICAST;
130
131 return netif_rx(skb);
132}
133
134static u32 macvlan_hash_mix(const struct macvlan_dev *vlan)
135{
136 return (u32)(((unsigned long)vlan) >> L1_CACHE_SHIFT);
137}
138
139
140static unsigned int mc_hash(const struct macvlan_dev *vlan,
141 const unsigned char *addr)
142{
143 u32 val = __get_unaligned_cpu32(addr + 2);
144
145 val ^= macvlan_hash_mix(vlan);
146 return hash_32(val, MACVLAN_MC_FILTER_BITS);
147}
148
149static void macvlan_broadcast(struct sk_buff *skb,
150 const struct macvlan_port *port,
151 struct net_device *src,
152 enum macvlan_mode mode)
153{
154 const struct ethhdr *eth = eth_hdr(skb);
155 const struct macvlan_dev *vlan;
156 struct sk_buff *nskb;
157 unsigned int i;
158 int err;
159 unsigned int hash;
160
161 if (skb->protocol == htons(ETH_P_PAUSE))
162 return;
163
164 for (i = 0; i < MACVLAN_HASH_SIZE; i++) {
165 hlist_for_each_entry_rcu(vlan, &port->vlan_hash[i], hlist) {
166 if (vlan->dev == src || !(vlan->mode & mode))
167 continue;
168
169 hash = mc_hash(vlan, eth->h_dest);
170 if (!test_bit(hash, vlan->mc_filter))
171 continue;
172
173 err = NET_RX_DROP;
174 nskb = skb_clone(skb, GFP_ATOMIC);
175 if (likely(nskb))
176 err = macvlan_broadcast_one(
177 nskb, vlan, eth,
178 mode == MACVLAN_MODE_BRIDGE);
179 macvlan_count_rx(vlan, skb->len + ETH_HLEN,
180 err == NET_RX_SUCCESS, 1);
181 }
182 }
183}
184
185/* called under rcu_read_lock() from netif_receive_skb */
186static rx_handler_result_t macvlan_handle_frame(struct sk_buff **pskb)
187{
188 struct macvlan_port *port;
189 struct sk_buff *skb = *pskb;
190 const struct ethhdr *eth = eth_hdr(skb);
191 const struct macvlan_dev *vlan;
192 const struct macvlan_dev *src;
193 struct net_device *dev;
194 unsigned int len = 0;
195 int ret = NET_RX_DROP;
196
197 port = macvlan_port_get_rcu(skb->dev);
198 if (is_multicast_ether_addr(eth->h_dest)) {
199 skb = ip_check_defrag(skb, IP_DEFRAG_MACVLAN);
200 if (!skb)
201 return RX_HANDLER_CONSUMED;
202 eth = eth_hdr(skb);
203 src = macvlan_hash_lookup(port, eth->h_source);
204 if (!src)
205 /* frame comes from an external address */
206 macvlan_broadcast(skb, port, NULL,
207 MACVLAN_MODE_PRIVATE |
208 MACVLAN_MODE_VEPA |
209 MACVLAN_MODE_PASSTHRU|
210 MACVLAN_MODE_BRIDGE);
211 else if (src->mode == MACVLAN_MODE_VEPA)
212 /* flood to everyone except source */
213 macvlan_broadcast(skb, port, src->dev,
214 MACVLAN_MODE_VEPA |
215 MACVLAN_MODE_BRIDGE);
216 else if (src->mode == MACVLAN_MODE_BRIDGE)
217 /*
218 * flood only to VEPA ports, bridge ports
219 * already saw the frame on the way out.
220 */
221 macvlan_broadcast(skb, port, src->dev,
222 MACVLAN_MODE_VEPA);
223 else {
224 /* forward to original port. */
225 vlan = src;
226 ret = macvlan_broadcast_one(skb, vlan, eth, 0);
227 goto out;
228 }
229
230 return RX_HANDLER_PASS;
231 }
232
233 if (port->passthru)
234 vlan = list_first_or_null_rcu(&port->vlans,
235 struct macvlan_dev, list);
236 else
237 vlan = macvlan_hash_lookup(port, eth->h_dest);
238 if (vlan == NULL)
239 return RX_HANDLER_PASS;
240
241 dev = vlan->dev;
242 if (unlikely(!(dev->flags & IFF_UP))) {
243 kfree_skb(skb);
244 return RX_HANDLER_CONSUMED;
245 }
246 len = skb->len + ETH_HLEN;
247 skb = skb_share_check(skb, GFP_ATOMIC);
248 if (!skb)
249 goto out;
250
251 skb->dev = dev;
252 skb->pkt_type = PACKET_HOST;
253
254 ret = netif_rx(skb);
255
256out:
257 macvlan_count_rx(vlan, len, ret == NET_RX_SUCCESS, 0);
258 return RX_HANDLER_CONSUMED;
259}
260
261static int macvlan_queue_xmit(struct sk_buff *skb, struct net_device *dev)
262{
263 const struct macvlan_dev *vlan = netdev_priv(dev);
264 const struct macvlan_port *port = vlan->port;
265 const struct macvlan_dev *dest;
266
267 if (vlan->mode == MACVLAN_MODE_BRIDGE) {
268 const struct ethhdr *eth = (void *)skb->data;
269
270 /* send to other bridge ports directly */
271 if (is_multicast_ether_addr(eth->h_dest)) {
272 macvlan_broadcast(skb, port, dev, MACVLAN_MODE_BRIDGE);
273 goto xmit_world;
274 }
275
276 dest = macvlan_hash_lookup(port, eth->h_dest);
277 if (dest && dest->mode == MACVLAN_MODE_BRIDGE) {
278 /* send to lowerdev first for its network taps */
279 dev_forward_skb(vlan->lowerdev, skb);
280
281 return NET_XMIT_SUCCESS;
282 }
283 }
284
285xmit_world:
286 skb->dev = vlan->lowerdev;
287 return dev_queue_xmit(skb);
288}
289
290static netdev_tx_t macvlan_start_xmit(struct sk_buff *skb,
291 struct net_device *dev)
292{
293 unsigned int len = skb->len;
294 int ret;
295 const struct macvlan_dev *vlan = netdev_priv(dev);
296
297 if (vlan->fwd_priv) {
298 skb->dev = vlan->lowerdev;
299 ret = dev_queue_xmit_accel(skb, vlan->fwd_priv);
300 } else {
301 ret = macvlan_queue_xmit(skb, dev);
302 }
303
304 if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN)) {
305 struct vlan_pcpu_stats *pcpu_stats;
306
307 pcpu_stats = this_cpu_ptr(vlan->pcpu_stats);
308 u64_stats_update_begin(&pcpu_stats->syncp);
309 pcpu_stats->tx_packets++;
310 pcpu_stats->tx_bytes += len;
311 u64_stats_update_end(&pcpu_stats->syncp);
312 } else {
313 this_cpu_inc(vlan->pcpu_stats->tx_dropped);
314 }
315 return ret;
316}
317
318static int macvlan_hard_header(struct sk_buff *skb, struct net_device *dev,
319 unsigned short type, const void *daddr,
320 const void *saddr, unsigned len)
321{
322 const struct macvlan_dev *vlan = netdev_priv(dev);
323 struct net_device *lowerdev = vlan->lowerdev;
324
325 return dev_hard_header(skb, lowerdev, type, daddr,
326 saddr ? : dev->dev_addr, len);
327}
328
329static const struct header_ops macvlan_hard_header_ops = {
330 .create = macvlan_hard_header,
331 .rebuild = eth_rebuild_header,
332 .parse = eth_header_parse,
333 .cache = eth_header_cache,
334 .cache_update = eth_header_cache_update,
335};
336
337static struct rtnl_link_ops macvlan_link_ops;
338
339static int macvlan_open(struct net_device *dev)
340{
341 struct macvlan_dev *vlan = netdev_priv(dev);
342 struct net_device *lowerdev = vlan->lowerdev;
343 int err;
344
345 if (vlan->port->passthru) {
346 if (!(vlan->flags & MACVLAN_FLAG_NOPROMISC)) {
347 err = dev_set_promiscuity(lowerdev, 1);
348 if (err < 0)
349 goto out;
350 }
351 goto hash_add;
352 }
353
354 if (lowerdev->features & NETIF_F_HW_L2FW_DOFFLOAD &&
355 dev->rtnl_link_ops == &macvlan_link_ops) {
356 vlan->fwd_priv =
357 lowerdev->netdev_ops->ndo_dfwd_add_station(lowerdev, dev);
358
359 /* If we get a NULL pointer back, or if we get an error
360 * then we should just fall through to the non accelerated path
361 */
362 if (IS_ERR_OR_NULL(vlan->fwd_priv)) {
363 vlan->fwd_priv = NULL;
364 } else
365 return 0;
366 }
367
368 err = -EBUSY;
369 if (macvlan_addr_busy(vlan->port, dev->dev_addr))
370 goto out;
371
372 err = dev_uc_add(lowerdev, dev->dev_addr);
373 if (err < 0)
374 goto out;
375 if (dev->flags & IFF_ALLMULTI) {
376 err = dev_set_allmulti(lowerdev, 1);
377 if (err < 0)
378 goto del_unicast;
379 }
380
381hash_add:
382 macvlan_hash_add(vlan);
383 return 0;
384
385del_unicast:
386 dev_uc_del(lowerdev, dev->dev_addr);
387out:
388 if (vlan->fwd_priv) {
389 lowerdev->netdev_ops->ndo_dfwd_del_station(lowerdev,
390 vlan->fwd_priv);
391 vlan->fwd_priv = NULL;
392 }
393 return err;
394}
395
396static int macvlan_stop(struct net_device *dev)
397{
398 struct macvlan_dev *vlan = netdev_priv(dev);
399 struct net_device *lowerdev = vlan->lowerdev;
400
401 if (vlan->fwd_priv) {
402 lowerdev->netdev_ops->ndo_dfwd_del_station(lowerdev,
403 vlan->fwd_priv);
404 vlan->fwd_priv = NULL;
405 return 0;
406 }
407
408 dev_uc_unsync(lowerdev, dev);
409 dev_mc_unsync(lowerdev, dev);
410
411 if (vlan->port->passthru) {
412 if (!(vlan->flags & MACVLAN_FLAG_NOPROMISC))
413 dev_set_promiscuity(lowerdev, -1);
414 goto hash_del;
415 }
416
417 if (dev->flags & IFF_ALLMULTI)
418 dev_set_allmulti(lowerdev, -1);
419
420 dev_uc_del(lowerdev, dev->dev_addr);
421
422hash_del:
423 macvlan_hash_del(vlan, !dev->dismantle);
424 return 0;
425}
426
427static int macvlan_set_mac_address(struct net_device *dev, void *p)
428{
429 struct macvlan_dev *vlan = netdev_priv(dev);
430 struct net_device *lowerdev = vlan->lowerdev;
431 struct sockaddr *addr = p;
432 int err;
433
434 if (!is_valid_ether_addr(addr->sa_data))
435 return -EADDRNOTAVAIL;
436
437 if (!(dev->flags & IFF_UP)) {
438 /* Just copy in the new address */
439 memcpy(dev->dev_addr, addr->sa_data, ETH_ALEN);
440 } else {
441 /* Rehash and update the device filters */
442 if (macvlan_addr_busy(vlan->port, addr->sa_data))
443 return -EBUSY;
444
445 err = dev_uc_add(lowerdev, addr->sa_data);
446 if (err)
447 return err;
448
449 dev_uc_del(lowerdev, dev->dev_addr);
450
451 macvlan_hash_change_addr(vlan, addr->sa_data);
452 }
453 return 0;
454}
455
456static void macvlan_change_rx_flags(struct net_device *dev, int change)
457{
458 struct macvlan_dev *vlan = netdev_priv(dev);
459 struct net_device *lowerdev = vlan->lowerdev;
460
461 if (dev->flags & IFF_UP) {
462 if (change & IFF_ALLMULTI)
463 dev_set_allmulti(lowerdev, dev->flags & IFF_ALLMULTI ? 1 : -1);
464 }
465}
466
467static void macvlan_set_mac_lists(struct net_device *dev)
468{
469 struct macvlan_dev *vlan = netdev_priv(dev);
470
471 if (dev->flags & (IFF_PROMISC | IFF_ALLMULTI)) {
472 bitmap_fill(vlan->mc_filter, MACVLAN_MC_FILTER_SZ);
473 } else {
474 struct netdev_hw_addr *ha;
475 DECLARE_BITMAP(filter, MACVLAN_MC_FILTER_SZ);
476
477 bitmap_zero(filter, MACVLAN_MC_FILTER_SZ);
478 netdev_for_each_mc_addr(ha, dev) {
479 __set_bit(mc_hash(vlan, ha->addr), filter);
480 }
481
482 __set_bit(mc_hash(vlan, dev->broadcast), filter);
483
484 bitmap_copy(vlan->mc_filter, filter, MACVLAN_MC_FILTER_SZ);
485 }
486 dev_uc_sync(vlan->lowerdev, dev);
487 dev_mc_sync(vlan->lowerdev, dev);
488}
489
490static int macvlan_change_mtu(struct net_device *dev, int new_mtu)
491{
492 struct macvlan_dev *vlan = netdev_priv(dev);
493
494 if (new_mtu < 68 || vlan->lowerdev->mtu < new_mtu)
495 return -EINVAL;
496 dev->mtu = new_mtu;
497 return 0;
498}
499
500/*
501 * macvlan network devices have devices nesting below it and are a special
502 * "super class" of normal network devices; split their locks off into a
503 * separate class since they always nest.
504 */
505static struct lock_class_key macvlan_netdev_xmit_lock_key;
506static struct lock_class_key macvlan_netdev_addr_lock_key;
507
508#define ALWAYS_ON_FEATURES \
509 (NETIF_F_SG | NETIF_F_GEN_CSUM | NETIF_F_GSO_SOFTWARE | NETIF_F_LLTX)
510
511#define MACVLAN_FEATURES \
512 (NETIF_F_SG | NETIF_F_ALL_CSUM | NETIF_F_HIGHDMA | NETIF_F_FRAGLIST | \
513 NETIF_F_GSO | NETIF_F_TSO | NETIF_F_UFO | NETIF_F_GSO_ROBUST | \
514 NETIF_F_TSO_ECN | NETIF_F_TSO6 | NETIF_F_GRO | NETIF_F_RXCSUM | \
515 NETIF_F_HW_VLAN_CTAG_FILTER | NETIF_F_HW_VLAN_STAG_FILTER)
516
517#define MACVLAN_STATE_MASK \
518 ((1<<__LINK_STATE_NOCARRIER) | (1<<__LINK_STATE_DORMANT))
519
520static int macvlan_get_nest_level(struct net_device *dev)
521{
522 return ((struct macvlan_dev *)netdev_priv(dev))->nest_level;
523}
524
525static void macvlan_set_lockdep_class_one(struct net_device *dev,
526 struct netdev_queue *txq,
527 void *_unused)
528{
529 lockdep_set_class(&txq->_xmit_lock,
530 &macvlan_netdev_xmit_lock_key);
531}
532
533static void macvlan_set_lockdep_class(struct net_device *dev)
534{
535 lockdep_set_class_and_subclass(&dev->addr_list_lock,
536 &macvlan_netdev_addr_lock_key,
537 macvlan_get_nest_level(dev));
538 netdev_for_each_tx_queue(dev, macvlan_set_lockdep_class_one, NULL);
539}
540
541static int macvlan_init(struct net_device *dev)
542{
543 struct macvlan_dev *vlan = netdev_priv(dev);
544 const struct net_device *lowerdev = vlan->lowerdev;
545
546 dev->state = (dev->state & ~MACVLAN_STATE_MASK) |
547 (lowerdev->state & MACVLAN_STATE_MASK);
548 dev->features = lowerdev->features & MACVLAN_FEATURES;
549 dev->features |= ALWAYS_ON_FEATURES;
550 dev->gso_max_size = lowerdev->gso_max_size;
551 dev->iflink = lowerdev->ifindex;
552 dev->hard_header_len = lowerdev->hard_header_len;
553
554 macvlan_set_lockdep_class(dev);
555
556 vlan->pcpu_stats = netdev_alloc_pcpu_stats(struct vlan_pcpu_stats);
557 if (!vlan->pcpu_stats)
558 return -ENOMEM;
559
560 return 0;
561}
562
563static void macvlan_uninit(struct net_device *dev)
564{
565 struct macvlan_dev *vlan = netdev_priv(dev);
566 struct macvlan_port *port = vlan->port;
567
568 free_percpu(vlan->pcpu_stats);
569
570 port->count -= 1;
571 if (!port->count)
572 macvlan_port_destroy(port->dev);
573}
574
575static struct rtnl_link_stats64 *macvlan_dev_get_stats64(struct net_device *dev,
576 struct rtnl_link_stats64 *stats)
577{
578 struct macvlan_dev *vlan = netdev_priv(dev);
579
580 if (vlan->pcpu_stats) {
581 struct vlan_pcpu_stats *p;
582 u64 rx_packets, rx_bytes, rx_multicast, tx_packets, tx_bytes;
583 u32 rx_errors = 0, tx_dropped = 0;
584 unsigned int start;
585 int i;
586
587 for_each_possible_cpu(i) {
588 p = per_cpu_ptr(vlan->pcpu_stats, i);
589 do {
590 start = u64_stats_fetch_begin_irq(&p->syncp);
591 rx_packets = p->rx_packets;
592 rx_bytes = p->rx_bytes;
593 rx_multicast = p->rx_multicast;
594 tx_packets = p->tx_packets;
595 tx_bytes = p->tx_bytes;
596 } while (u64_stats_fetch_retry_irq(&p->syncp, start));
597
598 stats->rx_packets += rx_packets;
599 stats->rx_bytes += rx_bytes;
600 stats->multicast += rx_multicast;
601 stats->tx_packets += tx_packets;
602 stats->tx_bytes += tx_bytes;
603 /* rx_errors & tx_dropped are u32, updated
604 * without syncp protection.
605 */
606 rx_errors += p->rx_errors;
607 tx_dropped += p->tx_dropped;
608 }
609 stats->rx_errors = rx_errors;
610 stats->rx_dropped = rx_errors;
611 stats->tx_dropped = tx_dropped;
612 }
613 return stats;
614}
615
616static int macvlan_vlan_rx_add_vid(struct net_device *dev,
617 __be16 proto, u16 vid)
618{
619 struct macvlan_dev *vlan = netdev_priv(dev);
620 struct net_device *lowerdev = vlan->lowerdev;
621
622 return vlan_vid_add(lowerdev, proto, vid);
623}
624
625static int macvlan_vlan_rx_kill_vid(struct net_device *dev,
626 __be16 proto, u16 vid)
627{
628 struct macvlan_dev *vlan = netdev_priv(dev);
629 struct net_device *lowerdev = vlan->lowerdev;
630
631 vlan_vid_del(lowerdev, proto, vid);
632 return 0;
633}
634
635static int macvlan_fdb_add(struct ndmsg *ndm, struct nlattr *tb[],
636 struct net_device *dev,
637 const unsigned char *addr,
638 u16 flags)
639{
640 struct macvlan_dev *vlan = netdev_priv(dev);
641 int err = -EINVAL;
642
643 if (!vlan->port->passthru)
644 return -EOPNOTSUPP;
645
646 if (flags & NLM_F_REPLACE)
647 return -EOPNOTSUPP;
648
649 if (is_unicast_ether_addr(addr))
650 err = dev_uc_add_excl(dev, addr);
651 else if (is_multicast_ether_addr(addr))
652 err = dev_mc_add_excl(dev, addr);
653
654 return err;
655}
656
657static int macvlan_fdb_del(struct ndmsg *ndm, struct nlattr *tb[],
658 struct net_device *dev,
659 const unsigned char *addr)
660{
661 struct macvlan_dev *vlan = netdev_priv(dev);
662 int err = -EINVAL;
663
664 if (!vlan->port->passthru)
665 return -EOPNOTSUPP;
666
667 if (is_unicast_ether_addr(addr))
668 err = dev_uc_del(dev, addr);
669 else if (is_multicast_ether_addr(addr))
670 err = dev_mc_del(dev, addr);
671
672 return err;
673}
674
675static void macvlan_ethtool_get_drvinfo(struct net_device *dev,
676 struct ethtool_drvinfo *drvinfo)
677{
678 strlcpy(drvinfo->driver, "macvlan", sizeof(drvinfo->driver));
679 strlcpy(drvinfo->version, "0.1", sizeof(drvinfo->version));
680}
681
682static int macvlan_ethtool_get_settings(struct net_device *dev,
683 struct ethtool_cmd *cmd)
684{
685 const struct macvlan_dev *vlan = netdev_priv(dev);
686
687 return __ethtool_get_settings(vlan->lowerdev, cmd);
688}
689
690static netdev_features_t macvlan_fix_features(struct net_device *dev,
691 netdev_features_t features)
692{
693 struct macvlan_dev *vlan = netdev_priv(dev);
694 netdev_features_t mask;
695
696 features |= NETIF_F_ALL_FOR_ALL;
697 features &= (vlan->set_features | ~MACVLAN_FEATURES);
698 mask = features;
699
700 features = netdev_increment_features(vlan->lowerdev->features,
701 features,
702 mask);
703 features |= ALWAYS_ON_FEATURES;
704
705 return features;
706}
707
708static const struct ethtool_ops macvlan_ethtool_ops = {
709 .get_link = ethtool_op_get_link,
710 .get_settings = macvlan_ethtool_get_settings,
711 .get_drvinfo = macvlan_ethtool_get_drvinfo,
712};
713
714static const struct net_device_ops macvlan_netdev_ops = {
715 .ndo_init = macvlan_init,
716 .ndo_uninit = macvlan_uninit,
717 .ndo_open = macvlan_open,
718 .ndo_stop = macvlan_stop,
719 .ndo_start_xmit = macvlan_start_xmit,
720 .ndo_change_mtu = macvlan_change_mtu,
721 .ndo_fix_features = macvlan_fix_features,
722 .ndo_change_rx_flags = macvlan_change_rx_flags,
723 .ndo_set_mac_address = macvlan_set_mac_address,
724 .ndo_set_rx_mode = macvlan_set_mac_lists,
725 .ndo_get_stats64 = macvlan_dev_get_stats64,
726 .ndo_validate_addr = eth_validate_addr,
727 .ndo_vlan_rx_add_vid = macvlan_vlan_rx_add_vid,
728 .ndo_vlan_rx_kill_vid = macvlan_vlan_rx_kill_vid,
729 .ndo_fdb_add = macvlan_fdb_add,
730 .ndo_fdb_del = macvlan_fdb_del,
731 .ndo_fdb_dump = ndo_dflt_fdb_dump,
732 .ndo_get_lock_subclass = macvlan_get_nest_level,
733};
734
735void macvlan_common_setup(struct net_device *dev)
736{
737 ether_setup(dev);
738
739 dev->priv_flags &= ~(IFF_XMIT_DST_RELEASE | IFF_TX_SKB_SHARING);
740 dev->priv_flags |= IFF_UNICAST_FLT;
741 dev->netdev_ops = &macvlan_netdev_ops;
742 dev->destructor = free_netdev;
743 dev->header_ops = &macvlan_hard_header_ops;
744 dev->ethtool_ops = &macvlan_ethtool_ops;
745}
746EXPORT_SYMBOL_GPL(macvlan_common_setup);
747
748static void macvlan_setup(struct net_device *dev)
749{
750 macvlan_common_setup(dev);
751 dev->tx_queue_len = 0;
752}
753
754static int macvlan_port_create(struct net_device *dev)
755{
756 struct macvlan_port *port;
757 unsigned int i;
758 int err;
759
760 if (dev->type != ARPHRD_ETHER || dev->flags & IFF_LOOPBACK)
761 return -EINVAL;
762
763 port = kzalloc(sizeof(*port), GFP_KERNEL);
764 if (port == NULL)
765 return -ENOMEM;
766
767 port->passthru = false;
768 port->dev = dev;
769 INIT_LIST_HEAD(&port->vlans);
770 for (i = 0; i < MACVLAN_HASH_SIZE; i++)
771 INIT_HLIST_HEAD(&port->vlan_hash[i]);
772
773 err = netdev_rx_handler_register(dev, macvlan_handle_frame, port);
774 if (err)
775 kfree(port);
776 else
777 dev->priv_flags |= IFF_MACVLAN_PORT;
778 return err;
779}
780
781static void macvlan_port_destroy(struct net_device *dev)
782{
783 struct macvlan_port *port = macvlan_port_get_rtnl(dev);
784
785 dev->priv_flags &= ~IFF_MACVLAN_PORT;
786 netdev_rx_handler_unregister(dev);
787 kfree_rcu(port, rcu);
788}
789
790static int macvlan_validate(struct nlattr *tb[], struct nlattr *data[])
791{
792 if (tb[IFLA_ADDRESS]) {
793 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
794 return -EINVAL;
795 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
796 return -EADDRNOTAVAIL;
797 }
798
799 if (data && data[IFLA_MACVLAN_FLAGS] &&
800 nla_get_u16(data[IFLA_MACVLAN_FLAGS]) & ~MACVLAN_FLAG_NOPROMISC)
801 return -EINVAL;
802
803 if (data && data[IFLA_MACVLAN_MODE]) {
804 switch (nla_get_u32(data[IFLA_MACVLAN_MODE])) {
805 case MACVLAN_MODE_PRIVATE:
806 case MACVLAN_MODE_VEPA:
807 case MACVLAN_MODE_BRIDGE:
808 case MACVLAN_MODE_PASSTHRU:
809 break;
810 default:
811 return -EINVAL;
812 }
813 }
814 return 0;
815}
816
817int macvlan_common_newlink(struct net *src_net, struct net_device *dev,
818 struct nlattr *tb[], struct nlattr *data[])
819{
820 struct macvlan_dev *vlan = netdev_priv(dev);
821 struct macvlan_port *port;
822 struct net_device *lowerdev;
823 int err;
824
825 if (!tb[IFLA_LINK])
826 return -EINVAL;
827
828 lowerdev = __dev_get_by_index(src_net, nla_get_u32(tb[IFLA_LINK]));
829 if (lowerdev == NULL)
830 return -ENODEV;
831
832 /* When creating macvlans or macvtaps on top of other macvlans - use
833 * the real device as the lowerdev.
834 */
835 if (netif_is_macvlan(lowerdev))
836 lowerdev = macvlan_dev_real_dev(lowerdev);
837
838 if (!tb[IFLA_MTU])
839 dev->mtu = lowerdev->mtu;
840 else if (dev->mtu > lowerdev->mtu)
841 return -EINVAL;
842
843 if (!tb[IFLA_ADDRESS])
844 eth_hw_addr_random(dev);
845
846 if (!macvlan_port_exists(lowerdev)) {
847 err = macvlan_port_create(lowerdev);
848 if (err < 0)
849 return err;
850 }
851 port = macvlan_port_get_rtnl(lowerdev);
852
853 /* Only 1 macvlan device can be created in passthru mode */
854 if (port->passthru)
855 return -EINVAL;
856
857 vlan->lowerdev = lowerdev;
858 vlan->dev = dev;
859 vlan->port = port;
860 vlan->set_features = MACVLAN_FEATURES;
861 vlan->nest_level = dev_get_nest_level(lowerdev, netif_is_macvlan) + 1;
862
863 vlan->mode = MACVLAN_MODE_VEPA;
864 if (data && data[IFLA_MACVLAN_MODE])
865 vlan->mode = nla_get_u32(data[IFLA_MACVLAN_MODE]);
866
867 if (data && data[IFLA_MACVLAN_FLAGS])
868 vlan->flags = nla_get_u16(data[IFLA_MACVLAN_FLAGS]);
869
870 if (vlan->mode == MACVLAN_MODE_PASSTHRU) {
871 if (port->count)
872 return -EINVAL;
873 port->passthru = true;
874 eth_hw_addr_inherit(dev, lowerdev);
875 }
876
877 port->count += 1;
878 err = register_netdevice(dev);
879 if (err < 0)
880 goto destroy_port;
881
882 dev->priv_flags |= IFF_MACVLAN;
883 err = netdev_upper_dev_link(lowerdev, dev);
884 if (err)
885 goto unregister_netdev;
886
887 list_add_tail_rcu(&vlan->list, &port->vlans);
888 netif_stacked_transfer_operstate(lowerdev, dev);
889
890 return 0;
891
892unregister_netdev:
893 unregister_netdevice(dev);
894destroy_port:
895 port->count -= 1;
896 if (!port->count)
897 macvlan_port_destroy(lowerdev);
898
899 return err;
900}
901EXPORT_SYMBOL_GPL(macvlan_common_newlink);
902
903static int macvlan_newlink(struct net *src_net, struct net_device *dev,
904 struct nlattr *tb[], struct nlattr *data[])
905{
906 return macvlan_common_newlink(src_net, dev, tb, data);
907}
908
909void macvlan_dellink(struct net_device *dev, struct list_head *head)
910{
911 struct macvlan_dev *vlan = netdev_priv(dev);
912
913 list_del_rcu(&vlan->list);
914 unregister_netdevice_queue(dev, head);
915 netdev_upper_dev_unlink(vlan->lowerdev, dev);
916}
917EXPORT_SYMBOL_GPL(macvlan_dellink);
918
919static int macvlan_changelink(struct net_device *dev,
920 struct nlattr *tb[], struct nlattr *data[])
921{
922 struct macvlan_dev *vlan = netdev_priv(dev);
923 enum macvlan_mode mode;
924 bool set_mode = false;
925
926 /* Validate mode, but don't set yet: setting flags may fail. */
927 if (data && data[IFLA_MACVLAN_MODE]) {
928 set_mode = true;
929 mode = nla_get_u32(data[IFLA_MACVLAN_MODE]);
930 /* Passthrough mode can't be set or cleared dynamically */
931 if ((mode == MACVLAN_MODE_PASSTHRU) !=
932 (vlan->mode == MACVLAN_MODE_PASSTHRU))
933 return -EINVAL;
934 }
935
936 if (data && data[IFLA_MACVLAN_FLAGS]) {
937 __u16 flags = nla_get_u16(data[IFLA_MACVLAN_FLAGS]);
938 bool promisc = (flags ^ vlan->flags) & MACVLAN_FLAG_NOPROMISC;
939 if (vlan->port->passthru && promisc) {
940 int err;
941
942 if (flags & MACVLAN_FLAG_NOPROMISC)
943 err = dev_set_promiscuity(vlan->lowerdev, -1);
944 else
945 err = dev_set_promiscuity(vlan->lowerdev, 1);
946 if (err < 0)
947 return err;
948 }
949 vlan->flags = flags;
950 }
951 if (set_mode)
952 vlan->mode = mode;
953 return 0;
954}
955
956static size_t macvlan_get_size(const struct net_device *dev)
957{
958 return (0
959 + nla_total_size(4) /* IFLA_MACVLAN_MODE */
960 + nla_total_size(2) /* IFLA_MACVLAN_FLAGS */
961 );
962}
963
964static int macvlan_fill_info(struct sk_buff *skb,
965 const struct net_device *dev)
966{
967 struct macvlan_dev *vlan = netdev_priv(dev);
968
969 if (nla_put_u32(skb, IFLA_MACVLAN_MODE, vlan->mode))
970 goto nla_put_failure;
971 if (nla_put_u16(skb, IFLA_MACVLAN_FLAGS, vlan->flags))
972 goto nla_put_failure;
973 return 0;
974
975nla_put_failure:
976 return -EMSGSIZE;
977}
978
979static const struct nla_policy macvlan_policy[IFLA_MACVLAN_MAX + 1] = {
980 [IFLA_MACVLAN_MODE] = { .type = NLA_U32 },
981 [IFLA_MACVLAN_FLAGS] = { .type = NLA_U16 },
982};
983
984int macvlan_link_register(struct rtnl_link_ops *ops)
985{
986 /* common fields */
987 ops->priv_size = sizeof(struct macvlan_dev);
988 ops->validate = macvlan_validate;
989 ops->maxtype = IFLA_MACVLAN_MAX;
990 ops->policy = macvlan_policy;
991 ops->changelink = macvlan_changelink;
992 ops->get_size = macvlan_get_size;
993 ops->fill_info = macvlan_fill_info;
994
995 return rtnl_link_register(ops);
996};
997EXPORT_SYMBOL_GPL(macvlan_link_register);
998
999static struct rtnl_link_ops macvlan_link_ops = {
1000 .kind = "macvlan",
1001 .setup = macvlan_setup,
1002 .newlink = macvlan_newlink,
1003 .dellink = macvlan_dellink,
1004};
1005
1006static int macvlan_device_event(struct notifier_block *unused,
1007 unsigned long event, void *ptr)
1008{
1009 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
1010 struct macvlan_dev *vlan, *next;
1011 struct macvlan_port *port;
1012 LIST_HEAD(list_kill);
1013
1014 if (!macvlan_port_exists(dev))
1015 return NOTIFY_DONE;
1016
1017 port = macvlan_port_get_rtnl(dev);
1018
1019 switch (event) {
1020 case NETDEV_CHANGE:
1021 list_for_each_entry(vlan, &port->vlans, list)
1022 netif_stacked_transfer_operstate(vlan->lowerdev,
1023 vlan->dev);
1024 break;
1025 case NETDEV_FEAT_CHANGE:
1026 list_for_each_entry(vlan, &port->vlans, list) {
1027 vlan->dev->gso_max_size = dev->gso_max_size;
1028 netdev_update_features(vlan->dev);
1029 }
1030 break;
1031 case NETDEV_UNREGISTER:
1032 /* twiddle thumbs on netns device moves */
1033 if (dev->reg_state != NETREG_UNREGISTERING)
1034 break;
1035
1036 list_for_each_entry_safe(vlan, next, &port->vlans, list)
1037 vlan->dev->rtnl_link_ops->dellink(vlan->dev, &list_kill);
1038 unregister_netdevice_many(&list_kill);
1039 list_del(&list_kill);
1040 break;
1041 case NETDEV_PRE_TYPE_CHANGE:
1042 /* Forbid underlaying device to change its type. */
1043 return NOTIFY_BAD;
1044 }
1045 return NOTIFY_DONE;
1046}
1047
1048static struct notifier_block macvlan_notifier_block __read_mostly = {
1049 .notifier_call = macvlan_device_event,
1050};
1051
1052static int __init macvlan_init_module(void)
1053{
1054 int err;
1055
1056 register_netdevice_notifier(&macvlan_notifier_block);
1057
1058 err = macvlan_link_register(&macvlan_link_ops);
1059 if (err < 0)
1060 goto err1;
1061 return 0;
1062err1:
1063 unregister_netdevice_notifier(&macvlan_notifier_block);
1064 return err;
1065}
1066
1067static void __exit macvlan_cleanup_module(void)
1068{
1069 rtnl_link_unregister(&macvlan_link_ops);
1070 unregister_netdevice_notifier(&macvlan_notifier_block);
1071}
1072
1073module_init(macvlan_init_module);
1074module_exit(macvlan_cleanup_module);
1075
1076MODULE_LICENSE("GPL");
1077MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>");
1078MODULE_DESCRIPTION("Driver for MAC address based VLANs");
1079MODULE_ALIAS_RTNL_LINK("macvlan");
1/*
2 * Copyright (c) 2007 Patrick McHardy <kaber@trash.net>
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License as
6 * published by the Free Software Foundation; either version 2 of
7 * the License, or (at your option) any later version.
8 *
9 * The code this is based on carried the following copyright notice:
10 * ---
11 * (C) Copyright 2001-2006
12 * Alex Zeffertt, Cambridge Broadband Ltd, ajz@cambridgebroadband.com
13 * Re-worked by Ben Greear <greearb@candelatech.com>
14 * ---
15 */
16#include <linux/kernel.h>
17#include <linux/types.h>
18#include <linux/module.h>
19#include <linux/init.h>
20#include <linux/errno.h>
21#include <linux/slab.h>
22#include <linux/string.h>
23#include <linux/rculist.h>
24#include <linux/notifier.h>
25#include <linux/netdevice.h>
26#include <linux/etherdevice.h>
27#include <linux/ethtool.h>
28#include <linux/if_arp.h>
29#include <linux/if_vlan.h>
30#include <linux/if_link.h>
31#include <linux/if_macvlan.h>
32#include <net/rtnetlink.h>
33#include <net/xfrm.h>
34
35#define MACVLAN_HASH_SIZE (1 << BITS_PER_BYTE)
36
37struct macvlan_port {
38 struct net_device *dev;
39 struct hlist_head vlan_hash[MACVLAN_HASH_SIZE];
40 struct list_head vlans;
41 struct rcu_head rcu;
42 bool passthru;
43 int count;
44};
45
46static void macvlan_port_destroy(struct net_device *dev);
47
48#define macvlan_port_get_rcu(dev) \
49 ((struct macvlan_port *) rcu_dereference(dev->rx_handler_data))
50#define macvlan_port_get(dev) ((struct macvlan_port *) dev->rx_handler_data)
51#define macvlan_port_exists(dev) (dev->priv_flags & IFF_MACVLAN_PORT)
52
53static struct macvlan_dev *macvlan_hash_lookup(const struct macvlan_port *port,
54 const unsigned char *addr)
55{
56 struct macvlan_dev *vlan;
57 struct hlist_node *n;
58
59 hlist_for_each_entry_rcu(vlan, n, &port->vlan_hash[addr[5]], hlist) {
60 if (ether_addr_equal_64bits(vlan->dev->dev_addr, addr))
61 return vlan;
62 }
63 return NULL;
64}
65
66static void macvlan_hash_add(struct macvlan_dev *vlan)
67{
68 struct macvlan_port *port = vlan->port;
69 const unsigned char *addr = vlan->dev->dev_addr;
70
71 hlist_add_head_rcu(&vlan->hlist, &port->vlan_hash[addr[5]]);
72}
73
74static void macvlan_hash_del(struct macvlan_dev *vlan, bool sync)
75{
76 hlist_del_rcu(&vlan->hlist);
77 if (sync)
78 synchronize_rcu();
79}
80
81static void macvlan_hash_change_addr(struct macvlan_dev *vlan,
82 const unsigned char *addr)
83{
84 macvlan_hash_del(vlan, true);
85 /* Now that we are unhashed it is safe to change the device
86 * address without confusing packet delivery.
87 */
88 memcpy(vlan->dev->dev_addr, addr, ETH_ALEN);
89 macvlan_hash_add(vlan);
90}
91
92static int macvlan_addr_busy(const struct macvlan_port *port,
93 const unsigned char *addr)
94{
95 /* Test to see if the specified multicast address is
96 * currently in use by the underlying device or
97 * another macvlan.
98 */
99 if (ether_addr_equal_64bits(port->dev->dev_addr, addr))
100 return 1;
101
102 if (macvlan_hash_lookup(port, addr))
103 return 1;
104
105 return 0;
106}
107
108
109static int macvlan_broadcast_one(struct sk_buff *skb,
110 const struct macvlan_dev *vlan,
111 const struct ethhdr *eth, bool local)
112{
113 struct net_device *dev = vlan->dev;
114 if (!skb)
115 return NET_RX_DROP;
116
117 if (local)
118 return vlan->forward(dev, skb);
119
120 skb->dev = dev;
121 if (ether_addr_equal_64bits(eth->h_dest, dev->broadcast))
122 skb->pkt_type = PACKET_BROADCAST;
123 else
124 skb->pkt_type = PACKET_MULTICAST;
125
126 return vlan->receive(skb);
127}
128
129static void macvlan_broadcast(struct sk_buff *skb,
130 const struct macvlan_port *port,
131 struct net_device *src,
132 enum macvlan_mode mode)
133{
134 const struct ethhdr *eth = eth_hdr(skb);
135 const struct macvlan_dev *vlan;
136 struct hlist_node *n;
137 struct sk_buff *nskb;
138 unsigned int i;
139 int err;
140
141 if (skb->protocol == htons(ETH_P_PAUSE))
142 return;
143
144 for (i = 0; i < MACVLAN_HASH_SIZE; i++) {
145 hlist_for_each_entry_rcu(vlan, n, &port->vlan_hash[i], hlist) {
146 if (vlan->dev == src || !(vlan->mode & mode))
147 continue;
148
149 nskb = skb_clone(skb, GFP_ATOMIC);
150 err = macvlan_broadcast_one(nskb, vlan, eth,
151 mode == MACVLAN_MODE_BRIDGE);
152 macvlan_count_rx(vlan, skb->len + ETH_HLEN,
153 err == NET_RX_SUCCESS, 1);
154 }
155 }
156}
157
158/* called under rcu_read_lock() from netif_receive_skb */
159static rx_handler_result_t macvlan_handle_frame(struct sk_buff **pskb)
160{
161 struct macvlan_port *port;
162 struct sk_buff *skb = *pskb;
163 const struct ethhdr *eth = eth_hdr(skb);
164 const struct macvlan_dev *vlan;
165 const struct macvlan_dev *src;
166 struct net_device *dev;
167 unsigned int len = 0;
168 int ret = NET_RX_DROP;
169
170 port = macvlan_port_get_rcu(skb->dev);
171 if (is_multicast_ether_addr(eth->h_dest)) {
172 skb = ip_check_defrag(skb, IP_DEFRAG_MACVLAN);
173 if (!skb)
174 return RX_HANDLER_CONSUMED;
175 eth = eth_hdr(skb);
176 src = macvlan_hash_lookup(port, eth->h_source);
177 if (!src)
178 /* frame comes from an external address */
179 macvlan_broadcast(skb, port, NULL,
180 MACVLAN_MODE_PRIVATE |
181 MACVLAN_MODE_VEPA |
182 MACVLAN_MODE_PASSTHRU|
183 MACVLAN_MODE_BRIDGE);
184 else if (src->mode == MACVLAN_MODE_VEPA)
185 /* flood to everyone except source */
186 macvlan_broadcast(skb, port, src->dev,
187 MACVLAN_MODE_VEPA |
188 MACVLAN_MODE_BRIDGE);
189 else if (src->mode == MACVLAN_MODE_BRIDGE)
190 /*
191 * flood only to VEPA ports, bridge ports
192 * already saw the frame on the way out.
193 */
194 macvlan_broadcast(skb, port, src->dev,
195 MACVLAN_MODE_VEPA);
196 else {
197 /* forward to original port. */
198 vlan = src;
199 ret = macvlan_broadcast_one(skb, vlan, eth, 0);
200 goto out;
201 }
202
203 return RX_HANDLER_PASS;
204 }
205
206 if (port->passthru)
207 vlan = list_first_entry(&port->vlans, struct macvlan_dev, list);
208 else
209 vlan = macvlan_hash_lookup(port, eth->h_dest);
210 if (vlan == NULL)
211 return RX_HANDLER_PASS;
212
213 dev = vlan->dev;
214 if (unlikely(!(dev->flags & IFF_UP))) {
215 kfree_skb(skb);
216 return RX_HANDLER_CONSUMED;
217 }
218 len = skb->len + ETH_HLEN;
219 skb = skb_share_check(skb, GFP_ATOMIC);
220 if (!skb)
221 goto out;
222
223 skb->dev = dev;
224 skb->pkt_type = PACKET_HOST;
225
226 ret = vlan->receive(skb);
227
228out:
229 macvlan_count_rx(vlan, len, ret == NET_RX_SUCCESS, 0);
230 return RX_HANDLER_CONSUMED;
231}
232
233static int macvlan_queue_xmit(struct sk_buff *skb, struct net_device *dev)
234{
235 const struct macvlan_dev *vlan = netdev_priv(dev);
236 const struct macvlan_port *port = vlan->port;
237 const struct macvlan_dev *dest;
238 __u8 ip_summed = skb->ip_summed;
239
240 if (vlan->mode == MACVLAN_MODE_BRIDGE) {
241 const struct ethhdr *eth = (void *)skb->data;
242 skb->ip_summed = CHECKSUM_UNNECESSARY;
243
244 /* send to other bridge ports directly */
245 if (is_multicast_ether_addr(eth->h_dest)) {
246 macvlan_broadcast(skb, port, dev, MACVLAN_MODE_BRIDGE);
247 goto xmit_world;
248 }
249
250 dest = macvlan_hash_lookup(port, eth->h_dest);
251 if (dest && dest->mode == MACVLAN_MODE_BRIDGE) {
252 /* send to lowerdev first for its network taps */
253 dev_forward_skb(vlan->lowerdev, skb);
254
255 return NET_XMIT_SUCCESS;
256 }
257 }
258
259xmit_world:
260 skb->ip_summed = ip_summed;
261 skb->dev = vlan->lowerdev;
262 return dev_queue_xmit(skb);
263}
264
265netdev_tx_t macvlan_start_xmit(struct sk_buff *skb,
266 struct net_device *dev)
267{
268 unsigned int len = skb->len;
269 int ret;
270 const struct macvlan_dev *vlan = netdev_priv(dev);
271
272 ret = macvlan_queue_xmit(skb, dev);
273 if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN)) {
274 struct macvlan_pcpu_stats *pcpu_stats;
275
276 pcpu_stats = this_cpu_ptr(vlan->pcpu_stats);
277 u64_stats_update_begin(&pcpu_stats->syncp);
278 pcpu_stats->tx_packets++;
279 pcpu_stats->tx_bytes += len;
280 u64_stats_update_end(&pcpu_stats->syncp);
281 } else {
282 this_cpu_inc(vlan->pcpu_stats->tx_dropped);
283 }
284 return ret;
285}
286EXPORT_SYMBOL_GPL(macvlan_start_xmit);
287
288static int macvlan_hard_header(struct sk_buff *skb, struct net_device *dev,
289 unsigned short type, const void *daddr,
290 const void *saddr, unsigned len)
291{
292 const struct macvlan_dev *vlan = netdev_priv(dev);
293 struct net_device *lowerdev = vlan->lowerdev;
294
295 return dev_hard_header(skb, lowerdev, type, daddr,
296 saddr ? : dev->dev_addr, len);
297}
298
299static const struct header_ops macvlan_hard_header_ops = {
300 .create = macvlan_hard_header,
301 .rebuild = eth_rebuild_header,
302 .parse = eth_header_parse,
303 .cache = eth_header_cache,
304 .cache_update = eth_header_cache_update,
305};
306
307static int macvlan_open(struct net_device *dev)
308{
309 struct macvlan_dev *vlan = netdev_priv(dev);
310 struct net_device *lowerdev = vlan->lowerdev;
311 int err;
312
313 if (vlan->port->passthru) {
314 if (!(vlan->flags & MACVLAN_FLAG_NOPROMISC))
315 dev_set_promiscuity(lowerdev, 1);
316 goto hash_add;
317 }
318
319 err = -EBUSY;
320 if (macvlan_addr_busy(vlan->port, dev->dev_addr))
321 goto out;
322
323 err = dev_uc_add(lowerdev, dev->dev_addr);
324 if (err < 0)
325 goto out;
326 if (dev->flags & IFF_ALLMULTI) {
327 err = dev_set_allmulti(lowerdev, 1);
328 if (err < 0)
329 goto del_unicast;
330 }
331
332hash_add:
333 macvlan_hash_add(vlan);
334 return 0;
335
336del_unicast:
337 dev_uc_del(lowerdev, dev->dev_addr);
338out:
339 return err;
340}
341
342static int macvlan_stop(struct net_device *dev)
343{
344 struct macvlan_dev *vlan = netdev_priv(dev);
345 struct net_device *lowerdev = vlan->lowerdev;
346
347 dev_uc_unsync(lowerdev, dev);
348 dev_mc_unsync(lowerdev, dev);
349
350 if (vlan->port->passthru) {
351 if (!(vlan->flags & MACVLAN_FLAG_NOPROMISC))
352 dev_set_promiscuity(lowerdev, -1);
353 goto hash_del;
354 }
355
356 if (dev->flags & IFF_ALLMULTI)
357 dev_set_allmulti(lowerdev, -1);
358
359 dev_uc_del(lowerdev, dev->dev_addr);
360
361hash_del:
362 macvlan_hash_del(vlan, !dev->dismantle);
363 return 0;
364}
365
366static int macvlan_set_mac_address(struct net_device *dev, void *p)
367{
368 struct macvlan_dev *vlan = netdev_priv(dev);
369 struct net_device *lowerdev = vlan->lowerdev;
370 struct sockaddr *addr = p;
371 int err;
372
373 if (!is_valid_ether_addr(addr->sa_data))
374 return -EADDRNOTAVAIL;
375
376 if (!(dev->flags & IFF_UP)) {
377 /* Just copy in the new address */
378 dev->addr_assign_type &= ~NET_ADDR_RANDOM;
379 memcpy(dev->dev_addr, addr->sa_data, ETH_ALEN);
380 } else {
381 /* Rehash and update the device filters */
382 if (macvlan_addr_busy(vlan->port, addr->sa_data))
383 return -EBUSY;
384
385 err = dev_uc_add(lowerdev, addr->sa_data);
386 if (err)
387 return err;
388
389 dev_uc_del(lowerdev, dev->dev_addr);
390
391 macvlan_hash_change_addr(vlan, addr->sa_data);
392 }
393 return 0;
394}
395
396static void macvlan_change_rx_flags(struct net_device *dev, int change)
397{
398 struct macvlan_dev *vlan = netdev_priv(dev);
399 struct net_device *lowerdev = vlan->lowerdev;
400
401 if (change & IFF_ALLMULTI)
402 dev_set_allmulti(lowerdev, dev->flags & IFF_ALLMULTI ? 1 : -1);
403}
404
405static void macvlan_set_mac_lists(struct net_device *dev)
406{
407 struct macvlan_dev *vlan = netdev_priv(dev);
408
409 dev_uc_sync(vlan->lowerdev, dev);
410 dev_mc_sync(vlan->lowerdev, dev);
411}
412
413static int macvlan_change_mtu(struct net_device *dev, int new_mtu)
414{
415 struct macvlan_dev *vlan = netdev_priv(dev);
416
417 if (new_mtu < 68 || vlan->lowerdev->mtu < new_mtu)
418 return -EINVAL;
419 dev->mtu = new_mtu;
420 return 0;
421}
422
423/*
424 * macvlan network devices have devices nesting below it and are a special
425 * "super class" of normal network devices; split their locks off into a
426 * separate class since they always nest.
427 */
428static struct lock_class_key macvlan_netdev_xmit_lock_key;
429static struct lock_class_key macvlan_netdev_addr_lock_key;
430
431#define MACVLAN_FEATURES \
432 (NETIF_F_SG | NETIF_F_ALL_CSUM | NETIF_F_HIGHDMA | NETIF_F_FRAGLIST | \
433 NETIF_F_GSO | NETIF_F_TSO | NETIF_F_UFO | NETIF_F_GSO_ROBUST | \
434 NETIF_F_TSO_ECN | NETIF_F_TSO6 | NETIF_F_GRO | NETIF_F_RXCSUM | \
435 NETIF_F_HW_VLAN_FILTER)
436
437#define MACVLAN_STATE_MASK \
438 ((1<<__LINK_STATE_NOCARRIER) | (1<<__LINK_STATE_DORMANT))
439
440static void macvlan_set_lockdep_class_one(struct net_device *dev,
441 struct netdev_queue *txq,
442 void *_unused)
443{
444 lockdep_set_class(&txq->_xmit_lock,
445 &macvlan_netdev_xmit_lock_key);
446}
447
448static void macvlan_set_lockdep_class(struct net_device *dev)
449{
450 lockdep_set_class(&dev->addr_list_lock,
451 &macvlan_netdev_addr_lock_key);
452 netdev_for_each_tx_queue(dev, macvlan_set_lockdep_class_one, NULL);
453}
454
455static int macvlan_init(struct net_device *dev)
456{
457 struct macvlan_dev *vlan = netdev_priv(dev);
458 const struct net_device *lowerdev = vlan->lowerdev;
459
460 dev->state = (dev->state & ~MACVLAN_STATE_MASK) |
461 (lowerdev->state & MACVLAN_STATE_MASK);
462 dev->features = lowerdev->features & MACVLAN_FEATURES;
463 dev->features |= NETIF_F_LLTX;
464 dev->gso_max_size = lowerdev->gso_max_size;
465 dev->iflink = lowerdev->ifindex;
466 dev->hard_header_len = lowerdev->hard_header_len;
467
468 macvlan_set_lockdep_class(dev);
469
470 vlan->pcpu_stats = alloc_percpu(struct macvlan_pcpu_stats);
471 if (!vlan->pcpu_stats)
472 return -ENOMEM;
473
474 return 0;
475}
476
477static void macvlan_uninit(struct net_device *dev)
478{
479 struct macvlan_dev *vlan = netdev_priv(dev);
480 struct macvlan_port *port = vlan->port;
481
482 free_percpu(vlan->pcpu_stats);
483
484 port->count -= 1;
485 if (!port->count)
486 macvlan_port_destroy(port->dev);
487}
488
489static struct rtnl_link_stats64 *macvlan_dev_get_stats64(struct net_device *dev,
490 struct rtnl_link_stats64 *stats)
491{
492 struct macvlan_dev *vlan = netdev_priv(dev);
493
494 if (vlan->pcpu_stats) {
495 struct macvlan_pcpu_stats *p;
496 u64 rx_packets, rx_bytes, rx_multicast, tx_packets, tx_bytes;
497 u32 rx_errors = 0, tx_dropped = 0;
498 unsigned int start;
499 int i;
500
501 for_each_possible_cpu(i) {
502 p = per_cpu_ptr(vlan->pcpu_stats, i);
503 do {
504 start = u64_stats_fetch_begin_bh(&p->syncp);
505 rx_packets = p->rx_packets;
506 rx_bytes = p->rx_bytes;
507 rx_multicast = p->rx_multicast;
508 tx_packets = p->tx_packets;
509 tx_bytes = p->tx_bytes;
510 } while (u64_stats_fetch_retry_bh(&p->syncp, start));
511
512 stats->rx_packets += rx_packets;
513 stats->rx_bytes += rx_bytes;
514 stats->multicast += rx_multicast;
515 stats->tx_packets += tx_packets;
516 stats->tx_bytes += tx_bytes;
517 /* rx_errors & tx_dropped are u32, updated
518 * without syncp protection.
519 */
520 rx_errors += p->rx_errors;
521 tx_dropped += p->tx_dropped;
522 }
523 stats->rx_errors = rx_errors;
524 stats->rx_dropped = rx_errors;
525 stats->tx_dropped = tx_dropped;
526 }
527 return stats;
528}
529
530static int macvlan_vlan_rx_add_vid(struct net_device *dev,
531 unsigned short vid)
532{
533 struct macvlan_dev *vlan = netdev_priv(dev);
534 struct net_device *lowerdev = vlan->lowerdev;
535
536 return vlan_vid_add(lowerdev, vid);
537}
538
539static int macvlan_vlan_rx_kill_vid(struct net_device *dev,
540 unsigned short vid)
541{
542 struct macvlan_dev *vlan = netdev_priv(dev);
543 struct net_device *lowerdev = vlan->lowerdev;
544
545 vlan_vid_del(lowerdev, vid);
546 return 0;
547}
548
549static int macvlan_fdb_add(struct ndmsg *ndm,
550 struct net_device *dev,
551 unsigned char *addr,
552 u16 flags)
553{
554 struct macvlan_dev *vlan = netdev_priv(dev);
555 int err = -EINVAL;
556
557 if (!vlan->port->passthru)
558 return -EOPNOTSUPP;
559
560 if (is_unicast_ether_addr(addr))
561 err = dev_uc_add_excl(dev, addr);
562 else if (is_multicast_ether_addr(addr))
563 err = dev_mc_add_excl(dev, addr);
564
565 return err;
566}
567
568static int macvlan_fdb_del(struct ndmsg *ndm,
569 struct net_device *dev,
570 unsigned char *addr)
571{
572 struct macvlan_dev *vlan = netdev_priv(dev);
573 int err = -EINVAL;
574
575 if (!vlan->port->passthru)
576 return -EOPNOTSUPP;
577
578 if (is_unicast_ether_addr(addr))
579 err = dev_uc_del(dev, addr);
580 else if (is_multicast_ether_addr(addr))
581 err = dev_mc_del(dev, addr);
582
583 return err;
584}
585
586static void macvlan_ethtool_get_drvinfo(struct net_device *dev,
587 struct ethtool_drvinfo *drvinfo)
588{
589 snprintf(drvinfo->driver, 32, "macvlan");
590 snprintf(drvinfo->version, 32, "0.1");
591}
592
593static int macvlan_ethtool_get_settings(struct net_device *dev,
594 struct ethtool_cmd *cmd)
595{
596 const struct macvlan_dev *vlan = netdev_priv(dev);
597
598 return __ethtool_get_settings(vlan->lowerdev, cmd);
599}
600
601static const struct ethtool_ops macvlan_ethtool_ops = {
602 .get_link = ethtool_op_get_link,
603 .get_settings = macvlan_ethtool_get_settings,
604 .get_drvinfo = macvlan_ethtool_get_drvinfo,
605};
606
607static const struct net_device_ops macvlan_netdev_ops = {
608 .ndo_init = macvlan_init,
609 .ndo_uninit = macvlan_uninit,
610 .ndo_open = macvlan_open,
611 .ndo_stop = macvlan_stop,
612 .ndo_start_xmit = macvlan_start_xmit,
613 .ndo_change_mtu = macvlan_change_mtu,
614 .ndo_change_rx_flags = macvlan_change_rx_flags,
615 .ndo_set_mac_address = macvlan_set_mac_address,
616 .ndo_set_rx_mode = macvlan_set_mac_lists,
617 .ndo_get_stats64 = macvlan_dev_get_stats64,
618 .ndo_validate_addr = eth_validate_addr,
619 .ndo_vlan_rx_add_vid = macvlan_vlan_rx_add_vid,
620 .ndo_vlan_rx_kill_vid = macvlan_vlan_rx_kill_vid,
621 .ndo_fdb_add = macvlan_fdb_add,
622 .ndo_fdb_del = macvlan_fdb_del,
623 .ndo_fdb_dump = ndo_dflt_fdb_dump,
624};
625
626void macvlan_common_setup(struct net_device *dev)
627{
628 ether_setup(dev);
629
630 dev->priv_flags &= ~(IFF_XMIT_DST_RELEASE | IFF_TX_SKB_SHARING);
631 dev->netdev_ops = &macvlan_netdev_ops;
632 dev->destructor = free_netdev;
633 dev->header_ops = &macvlan_hard_header_ops,
634 dev->ethtool_ops = &macvlan_ethtool_ops;
635}
636EXPORT_SYMBOL_GPL(macvlan_common_setup);
637
638static void macvlan_setup(struct net_device *dev)
639{
640 macvlan_common_setup(dev);
641 dev->tx_queue_len = 0;
642}
643
644static int macvlan_port_create(struct net_device *dev)
645{
646 struct macvlan_port *port;
647 unsigned int i;
648 int err;
649
650 if (dev->type != ARPHRD_ETHER || dev->flags & IFF_LOOPBACK)
651 return -EINVAL;
652
653 port = kzalloc(sizeof(*port), GFP_KERNEL);
654 if (port == NULL)
655 return -ENOMEM;
656
657 port->passthru = false;
658 port->dev = dev;
659 INIT_LIST_HEAD(&port->vlans);
660 for (i = 0; i < MACVLAN_HASH_SIZE; i++)
661 INIT_HLIST_HEAD(&port->vlan_hash[i]);
662
663 err = netdev_rx_handler_register(dev, macvlan_handle_frame, port);
664 if (err)
665 kfree(port);
666 else
667 dev->priv_flags |= IFF_MACVLAN_PORT;
668 return err;
669}
670
671static void macvlan_port_destroy(struct net_device *dev)
672{
673 struct macvlan_port *port = macvlan_port_get(dev);
674
675 dev->priv_flags &= ~IFF_MACVLAN_PORT;
676 netdev_rx_handler_unregister(dev);
677 kfree_rcu(port, rcu);
678}
679
680static int macvlan_validate(struct nlattr *tb[], struct nlattr *data[])
681{
682 if (tb[IFLA_ADDRESS]) {
683 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
684 return -EINVAL;
685 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
686 return -EADDRNOTAVAIL;
687 }
688
689 if (data && data[IFLA_MACVLAN_MODE]) {
690 switch (nla_get_u32(data[IFLA_MACVLAN_MODE])) {
691 case MACVLAN_MODE_PRIVATE:
692 case MACVLAN_MODE_VEPA:
693 case MACVLAN_MODE_BRIDGE:
694 case MACVLAN_MODE_PASSTHRU:
695 break;
696 default:
697 return -EINVAL;
698 }
699 }
700 return 0;
701}
702
703int macvlan_common_newlink(struct net *src_net, struct net_device *dev,
704 struct nlattr *tb[], struct nlattr *data[],
705 int (*receive)(struct sk_buff *skb),
706 int (*forward)(struct net_device *dev,
707 struct sk_buff *skb))
708{
709 struct macvlan_dev *vlan = netdev_priv(dev);
710 struct macvlan_port *port;
711 struct net_device *lowerdev;
712 int err;
713
714 if (!tb[IFLA_LINK])
715 return -EINVAL;
716
717 lowerdev = __dev_get_by_index(src_net, nla_get_u32(tb[IFLA_LINK]));
718 if (lowerdev == NULL)
719 return -ENODEV;
720
721 /* When creating macvlans on top of other macvlans - use
722 * the real device as the lowerdev.
723 */
724 if (lowerdev->rtnl_link_ops == dev->rtnl_link_ops) {
725 struct macvlan_dev *lowervlan = netdev_priv(lowerdev);
726 lowerdev = lowervlan->lowerdev;
727 }
728
729 if (!tb[IFLA_MTU])
730 dev->mtu = lowerdev->mtu;
731 else if (dev->mtu > lowerdev->mtu)
732 return -EINVAL;
733
734 if (!tb[IFLA_ADDRESS])
735 eth_hw_addr_random(dev);
736
737 if (!macvlan_port_exists(lowerdev)) {
738 err = macvlan_port_create(lowerdev);
739 if (err < 0)
740 return err;
741 }
742 port = macvlan_port_get(lowerdev);
743
744 /* Only 1 macvlan device can be created in passthru mode */
745 if (port->passthru)
746 return -EINVAL;
747
748 vlan->lowerdev = lowerdev;
749 vlan->dev = dev;
750 vlan->port = port;
751 vlan->receive = receive;
752 vlan->forward = forward;
753
754 vlan->mode = MACVLAN_MODE_VEPA;
755 if (data && data[IFLA_MACVLAN_MODE])
756 vlan->mode = nla_get_u32(data[IFLA_MACVLAN_MODE]);
757
758 if (data && data[IFLA_MACVLAN_FLAGS])
759 vlan->flags = nla_get_u16(data[IFLA_MACVLAN_FLAGS]);
760
761 if (vlan->mode == MACVLAN_MODE_PASSTHRU) {
762 if (port->count)
763 return -EINVAL;
764 port->passthru = true;
765 memcpy(dev->dev_addr, lowerdev->dev_addr, ETH_ALEN);
766 }
767
768 port->count += 1;
769 err = register_netdevice(dev);
770 if (err < 0)
771 goto destroy_port;
772
773 list_add_tail(&vlan->list, &port->vlans);
774 netif_stacked_transfer_operstate(lowerdev, dev);
775
776 return 0;
777
778destroy_port:
779 port->count -= 1;
780 if (!port->count)
781 macvlan_port_destroy(lowerdev);
782
783 return err;
784}
785EXPORT_SYMBOL_GPL(macvlan_common_newlink);
786
787static int macvlan_newlink(struct net *src_net, struct net_device *dev,
788 struct nlattr *tb[], struct nlattr *data[])
789{
790 return macvlan_common_newlink(src_net, dev, tb, data,
791 netif_rx,
792 dev_forward_skb);
793}
794
795void macvlan_dellink(struct net_device *dev, struct list_head *head)
796{
797 struct macvlan_dev *vlan = netdev_priv(dev);
798
799 list_del(&vlan->list);
800 unregister_netdevice_queue(dev, head);
801}
802EXPORT_SYMBOL_GPL(macvlan_dellink);
803
804static int macvlan_changelink(struct net_device *dev,
805 struct nlattr *tb[], struct nlattr *data[])
806{
807 struct macvlan_dev *vlan = netdev_priv(dev);
808 if (data && data[IFLA_MACVLAN_MODE])
809 vlan->mode = nla_get_u32(data[IFLA_MACVLAN_MODE]);
810 if (data && data[IFLA_MACVLAN_FLAGS]) {
811 __u16 flags = nla_get_u16(data[IFLA_MACVLAN_FLAGS]);
812 bool promisc = (flags ^ vlan->flags) & MACVLAN_FLAG_NOPROMISC;
813
814 if (promisc && (flags & MACVLAN_FLAG_NOPROMISC))
815 dev_set_promiscuity(vlan->lowerdev, -1);
816 else if (promisc && !(flags & MACVLAN_FLAG_NOPROMISC))
817 dev_set_promiscuity(vlan->lowerdev, 1);
818 vlan->flags = flags;
819 }
820 return 0;
821}
822
823static size_t macvlan_get_size(const struct net_device *dev)
824{
825 return nla_total_size(4);
826}
827
828static int macvlan_fill_info(struct sk_buff *skb,
829 const struct net_device *dev)
830{
831 struct macvlan_dev *vlan = netdev_priv(dev);
832
833 if (nla_put_u32(skb, IFLA_MACVLAN_MODE, vlan->mode))
834 goto nla_put_failure;
835 if (nla_put_u16(skb, IFLA_MACVLAN_FLAGS, vlan->flags))
836 goto nla_put_failure;
837 return 0;
838
839nla_put_failure:
840 return -EMSGSIZE;
841}
842
843static const struct nla_policy macvlan_policy[IFLA_MACVLAN_MAX + 1] = {
844 [IFLA_MACVLAN_MODE] = { .type = NLA_U32 },
845 [IFLA_MACVLAN_FLAGS] = { .type = NLA_U16 },
846};
847
848int macvlan_link_register(struct rtnl_link_ops *ops)
849{
850 /* common fields */
851 ops->priv_size = sizeof(struct macvlan_dev);
852 ops->validate = macvlan_validate;
853 ops->maxtype = IFLA_MACVLAN_MAX;
854 ops->policy = macvlan_policy;
855 ops->changelink = macvlan_changelink;
856 ops->get_size = macvlan_get_size;
857 ops->fill_info = macvlan_fill_info;
858
859 return rtnl_link_register(ops);
860};
861EXPORT_SYMBOL_GPL(macvlan_link_register);
862
863static struct rtnl_link_ops macvlan_link_ops = {
864 .kind = "macvlan",
865 .setup = macvlan_setup,
866 .newlink = macvlan_newlink,
867 .dellink = macvlan_dellink,
868};
869
870static int macvlan_device_event(struct notifier_block *unused,
871 unsigned long event, void *ptr)
872{
873 struct net_device *dev = ptr;
874 struct macvlan_dev *vlan, *next;
875 struct macvlan_port *port;
876 LIST_HEAD(list_kill);
877
878 if (!macvlan_port_exists(dev))
879 return NOTIFY_DONE;
880
881 port = macvlan_port_get(dev);
882
883 switch (event) {
884 case NETDEV_CHANGE:
885 list_for_each_entry(vlan, &port->vlans, list)
886 netif_stacked_transfer_operstate(vlan->lowerdev,
887 vlan->dev);
888 break;
889 case NETDEV_FEAT_CHANGE:
890 list_for_each_entry(vlan, &port->vlans, list) {
891 vlan->dev->features = dev->features & MACVLAN_FEATURES;
892 vlan->dev->gso_max_size = dev->gso_max_size;
893 netdev_features_change(vlan->dev);
894 }
895 break;
896 case NETDEV_UNREGISTER:
897 /* twiddle thumbs on netns device moves */
898 if (dev->reg_state != NETREG_UNREGISTERING)
899 break;
900
901 list_for_each_entry_safe(vlan, next, &port->vlans, list)
902 vlan->dev->rtnl_link_ops->dellink(vlan->dev, &list_kill);
903 unregister_netdevice_many(&list_kill);
904 list_del(&list_kill);
905 break;
906 case NETDEV_PRE_TYPE_CHANGE:
907 /* Forbid underlaying device to change its type. */
908 return NOTIFY_BAD;
909 }
910 return NOTIFY_DONE;
911}
912
913static struct notifier_block macvlan_notifier_block __read_mostly = {
914 .notifier_call = macvlan_device_event,
915};
916
917static int __init macvlan_init_module(void)
918{
919 int err;
920
921 register_netdevice_notifier(&macvlan_notifier_block);
922
923 err = macvlan_link_register(&macvlan_link_ops);
924 if (err < 0)
925 goto err1;
926 return 0;
927err1:
928 unregister_netdevice_notifier(&macvlan_notifier_block);
929 return err;
930}
931
932static void __exit macvlan_cleanup_module(void)
933{
934 rtnl_link_unregister(&macvlan_link_ops);
935 unregister_netdevice_notifier(&macvlan_notifier_block);
936}
937
938module_init(macvlan_init_module);
939module_exit(macvlan_cleanup_module);
940
941MODULE_LICENSE("GPL");
942MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>");
943MODULE_DESCRIPTION("Driver for MAC address based VLANs");
944MODULE_ALIAS_RTNL_LINK("macvlan");