Loading...
1/*
2 * Userspace interface
3 * Linux ethernet bridge
4 *
5 * Authors:
6 * Lennert Buytenhek <buytenh@gnu.org>
7 *
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License
10 * as published by the Free Software Foundation; either version
11 * 2 of the License, or (at your option) any later version.
12 */
13
14#include <linux/kernel.h>
15#include <linux/netdevice.h>
16#include <linux/etherdevice.h>
17#include <linux/netpoll.h>
18#include <linux/ethtool.h>
19#include <linux/if_arp.h>
20#include <linux/module.h>
21#include <linux/init.h>
22#include <linux/rtnetlink.h>
23#include <linux/if_ether.h>
24#include <linux/slab.h>
25#include <net/dsa.h>
26#include <net/sock.h>
27#include <linux/if_vlan.h>
28#include <net/switchdev.h>
29
30#include "br_private.h"
31
32/*
33 * Determine initial path cost based on speed.
34 * using recommendations from 802.1d standard
35 *
36 * Since driver might sleep need to not be holding any locks.
37 */
38static int port_cost(struct net_device *dev)
39{
40 struct ethtool_link_ksettings ecmd;
41
42 if (!__ethtool_get_link_ksettings(dev, &ecmd)) {
43 switch (ecmd.base.speed) {
44 case SPEED_10000:
45 return 2;
46 case SPEED_1000:
47 return 4;
48 case SPEED_100:
49 return 19;
50 case SPEED_10:
51 return 100;
52 }
53 }
54
55 /* Old silly heuristics based on name */
56 if (!strncmp(dev->name, "lec", 3))
57 return 7;
58
59 if (!strncmp(dev->name, "plip", 4))
60 return 2500;
61
62 return 100; /* assume old 10Mbps */
63}
64
65
66/* Check for port carrier transitions. */
67void br_port_carrier_check(struct net_bridge_port *p)
68{
69 struct net_device *dev = p->dev;
70 struct net_bridge *br = p->br;
71
72 if (!(p->flags & BR_ADMIN_COST) &&
73 netif_running(dev) && netif_oper_up(dev))
74 p->path_cost = port_cost(dev);
75
76 if (!netif_running(br->dev))
77 return;
78
79 spin_lock_bh(&br->lock);
80 if (netif_running(dev) && netif_oper_up(dev)) {
81 if (p->state == BR_STATE_DISABLED)
82 br_stp_enable_port(p);
83 } else {
84 if (p->state != BR_STATE_DISABLED)
85 br_stp_disable_port(p);
86 }
87 spin_unlock_bh(&br->lock);
88}
89
90static void br_port_set_promisc(struct net_bridge_port *p)
91{
92 int err = 0;
93
94 if (br_promisc_port(p))
95 return;
96
97 err = dev_set_promiscuity(p->dev, 1);
98 if (err)
99 return;
100
101 br_fdb_unsync_static(p->br, p);
102 p->flags |= BR_PROMISC;
103}
104
105static void br_port_clear_promisc(struct net_bridge_port *p)
106{
107 int err;
108
109 /* Check if the port is already non-promisc or if it doesn't
110 * support UNICAST filtering. Without unicast filtering support
111 * we'll end up re-enabling promisc mode anyway, so just check for
112 * it here.
113 */
114 if (!br_promisc_port(p) || !(p->dev->priv_flags & IFF_UNICAST_FLT))
115 return;
116
117 /* Since we'll be clearing the promisc mode, program the port
118 * first so that we don't have interruption in traffic.
119 */
120 err = br_fdb_sync_static(p->br, p);
121 if (err)
122 return;
123
124 dev_set_promiscuity(p->dev, -1);
125 p->flags &= ~BR_PROMISC;
126}
127
128/* When a port is added or removed or when certain port flags
129 * change, this function is called to automatically manage
130 * promiscuity setting of all the bridge ports. We are always called
131 * under RTNL so can skip using rcu primitives.
132 */
133void br_manage_promisc(struct net_bridge *br)
134{
135 struct net_bridge_port *p;
136 bool set_all = false;
137
138 /* If vlan filtering is disabled or bridge interface is placed
139 * into promiscuous mode, place all ports in promiscuous mode.
140 */
141 if ((br->dev->flags & IFF_PROMISC) || !br_vlan_enabled(br->dev))
142 set_all = true;
143
144 list_for_each_entry(p, &br->port_list, list) {
145 if (set_all) {
146 br_port_set_promisc(p);
147 } else {
148 /* If the number of auto-ports is <= 1, then all other
149 * ports will have their output configuration
150 * statically specified through fdbs. Since ingress
151 * on the auto-port becomes forwarding/egress to other
152 * ports and egress configuration is statically known,
153 * we can say that ingress configuration of the
154 * auto-port is also statically known.
155 * This lets us disable promiscuous mode and write
156 * this config to hw.
157 */
158 if (br->auto_cnt == 0 ||
159 (br->auto_cnt == 1 && br_auto_port(p)))
160 br_port_clear_promisc(p);
161 else
162 br_port_set_promisc(p);
163 }
164 }
165}
166
167static void nbp_update_port_count(struct net_bridge *br)
168{
169 struct net_bridge_port *p;
170 u32 cnt = 0;
171
172 list_for_each_entry(p, &br->port_list, list) {
173 if (br_auto_port(p))
174 cnt++;
175 }
176 if (br->auto_cnt != cnt) {
177 br->auto_cnt = cnt;
178 br_manage_promisc(br);
179 }
180}
181
182static void nbp_delete_promisc(struct net_bridge_port *p)
183{
184 /* If port is currently promiscuous, unset promiscuity.
185 * Otherwise, it is a static port so remove all addresses
186 * from it.
187 */
188 dev_set_allmulti(p->dev, -1);
189 if (br_promisc_port(p))
190 dev_set_promiscuity(p->dev, -1);
191 else
192 br_fdb_unsync_static(p->br, p);
193}
194
195static void release_nbp(struct kobject *kobj)
196{
197 struct net_bridge_port *p
198 = container_of(kobj, struct net_bridge_port, kobj);
199 kfree(p);
200}
201
202static struct kobj_type brport_ktype = {
203#ifdef CONFIG_SYSFS
204 .sysfs_ops = &brport_sysfs_ops,
205#endif
206 .release = release_nbp,
207};
208
209static void destroy_nbp(struct net_bridge_port *p)
210{
211 struct net_device *dev = p->dev;
212
213 p->br = NULL;
214 p->dev = NULL;
215 dev_put(dev);
216
217 kobject_put(&p->kobj);
218}
219
220static void destroy_nbp_rcu(struct rcu_head *head)
221{
222 struct net_bridge_port *p =
223 container_of(head, struct net_bridge_port, rcu);
224 destroy_nbp(p);
225}
226
227static unsigned get_max_headroom(struct net_bridge *br)
228{
229 unsigned max_headroom = 0;
230 struct net_bridge_port *p;
231
232 list_for_each_entry(p, &br->port_list, list) {
233 unsigned dev_headroom = netdev_get_fwd_headroom(p->dev);
234
235 if (dev_headroom > max_headroom)
236 max_headroom = dev_headroom;
237 }
238
239 return max_headroom;
240}
241
242static void update_headroom(struct net_bridge *br, int new_hr)
243{
244 struct net_bridge_port *p;
245
246 list_for_each_entry(p, &br->port_list, list)
247 netdev_set_rx_headroom(p->dev, new_hr);
248
249 br->dev->needed_headroom = new_hr;
250}
251
252/* Delete port(interface) from bridge is done in two steps.
253 * via RCU. First step, marks device as down. That deletes
254 * all the timers and stops new packets from flowing through.
255 *
256 * Final cleanup doesn't occur until after all CPU's finished
257 * processing packets.
258 *
259 * Protected from multiple admin operations by RTNL mutex
260 */
261static void del_nbp(struct net_bridge_port *p)
262{
263 struct net_bridge *br = p->br;
264 struct net_device *dev = p->dev;
265
266 sysfs_remove_link(br->ifobj, p->dev->name);
267
268 nbp_delete_promisc(p);
269
270 spin_lock_bh(&br->lock);
271 br_stp_disable_port(p);
272 spin_unlock_bh(&br->lock);
273
274 br_ifinfo_notify(RTM_DELLINK, NULL, p);
275
276 list_del_rcu(&p->list);
277 if (netdev_get_fwd_headroom(dev) == br->dev->needed_headroom)
278 update_headroom(br, get_max_headroom(br));
279 netdev_reset_rx_headroom(dev);
280
281 nbp_vlan_flush(p);
282 br_fdb_delete_by_port(br, p, 0, 1);
283 switchdev_deferred_process();
284
285 nbp_update_port_count(br);
286
287 netdev_upper_dev_unlink(dev, br->dev);
288
289 dev->priv_flags &= ~IFF_BRIDGE_PORT;
290
291 netdev_rx_handler_unregister(dev);
292
293 br_multicast_del_port(p);
294
295 kobject_uevent(&p->kobj, KOBJ_REMOVE);
296 kobject_del(&p->kobj);
297
298 br_netpoll_disable(p);
299
300 call_rcu(&p->rcu, destroy_nbp_rcu);
301}
302
303/* Delete bridge device */
304void br_dev_delete(struct net_device *dev, struct list_head *head)
305{
306 struct net_bridge *br = netdev_priv(dev);
307 struct net_bridge_port *p, *n;
308
309 list_for_each_entry_safe(p, n, &br->port_list, list) {
310 del_nbp(p);
311 }
312
313 br_recalculate_neigh_suppress_enabled(br);
314
315 br_fdb_delete_by_port(br, NULL, 0, 1);
316
317 cancel_delayed_work_sync(&br->gc_work);
318
319 br_sysfs_delbr(br->dev);
320 unregister_netdevice_queue(br->dev, head);
321}
322
323/* find an available port number */
324static int find_portno(struct net_bridge *br)
325{
326 int index;
327 struct net_bridge_port *p;
328 unsigned long *inuse;
329
330 inuse = kcalloc(BITS_TO_LONGS(BR_MAX_PORTS), sizeof(unsigned long),
331 GFP_KERNEL);
332 if (!inuse)
333 return -ENOMEM;
334
335 set_bit(0, inuse); /* zero is reserved */
336 list_for_each_entry(p, &br->port_list, list) {
337 set_bit(p->port_no, inuse);
338 }
339 index = find_first_zero_bit(inuse, BR_MAX_PORTS);
340 kfree(inuse);
341
342 return (index >= BR_MAX_PORTS) ? -EXFULL : index;
343}
344
345/* called with RTNL but without bridge lock */
346static struct net_bridge_port *new_nbp(struct net_bridge *br,
347 struct net_device *dev)
348{
349 struct net_bridge_port *p;
350 int index, err;
351
352 index = find_portno(br);
353 if (index < 0)
354 return ERR_PTR(index);
355
356 p = kzalloc(sizeof(*p), GFP_KERNEL);
357 if (p == NULL)
358 return ERR_PTR(-ENOMEM);
359
360 p->br = br;
361 dev_hold(dev);
362 p->dev = dev;
363 p->path_cost = port_cost(dev);
364 p->priority = 0x8000 >> BR_PORT_BITS;
365 p->port_no = index;
366 p->flags = BR_LEARNING | BR_FLOOD | BR_MCAST_FLOOD | BR_BCAST_FLOOD;
367 br_init_port(p);
368 br_set_state(p, BR_STATE_DISABLED);
369 br_stp_port_timer_init(p);
370 err = br_multicast_add_port(p);
371 if (err) {
372 dev_put(dev);
373 kfree(p);
374 p = ERR_PTR(err);
375 }
376
377 return p;
378}
379
380int br_add_bridge(struct net *net, const char *name)
381{
382 struct net_device *dev;
383 int res;
384
385 dev = alloc_netdev(sizeof(struct net_bridge), name, NET_NAME_UNKNOWN,
386 br_dev_setup);
387
388 if (!dev)
389 return -ENOMEM;
390
391 dev_net_set(dev, net);
392 dev->rtnl_link_ops = &br_link_ops;
393
394 res = register_netdev(dev);
395 if (res)
396 free_netdev(dev);
397 return res;
398}
399
400int br_del_bridge(struct net *net, const char *name)
401{
402 struct net_device *dev;
403 int ret = 0;
404
405 rtnl_lock();
406 dev = __dev_get_by_name(net, name);
407 if (dev == NULL)
408 ret = -ENXIO; /* Could not find device */
409
410 else if (!(dev->priv_flags & IFF_EBRIDGE)) {
411 /* Attempt to delete non bridge device! */
412 ret = -EPERM;
413 }
414
415 else if (dev->flags & IFF_UP) {
416 /* Not shutdown yet. */
417 ret = -EBUSY;
418 }
419
420 else
421 br_dev_delete(dev, NULL);
422
423 rtnl_unlock();
424 return ret;
425}
426
427/* MTU of the bridge pseudo-device: ETH_DATA_LEN or the minimum of the ports */
428static int br_mtu_min(const struct net_bridge *br)
429{
430 const struct net_bridge_port *p;
431 int ret_mtu = 0;
432
433 list_for_each_entry(p, &br->port_list, list)
434 if (!ret_mtu || ret_mtu > p->dev->mtu)
435 ret_mtu = p->dev->mtu;
436
437 return ret_mtu ? ret_mtu : ETH_DATA_LEN;
438}
439
440void br_mtu_auto_adjust(struct net_bridge *br)
441{
442 ASSERT_RTNL();
443
444 /* if the bridge MTU was manually configured don't mess with it */
445 if (br->mtu_set_by_user)
446 return;
447
448 /* change to the minimum MTU and clear the flag which was set by
449 * the bridge ndo_change_mtu callback
450 */
451 dev_set_mtu(br->dev, br_mtu_min(br));
452 br->mtu_set_by_user = false;
453}
454
455static void br_set_gso_limits(struct net_bridge *br)
456{
457 unsigned int gso_max_size = GSO_MAX_SIZE;
458 u16 gso_max_segs = GSO_MAX_SEGS;
459 const struct net_bridge_port *p;
460
461 list_for_each_entry(p, &br->port_list, list) {
462 gso_max_size = min(gso_max_size, p->dev->gso_max_size);
463 gso_max_segs = min(gso_max_segs, p->dev->gso_max_segs);
464 }
465 br->dev->gso_max_size = gso_max_size;
466 br->dev->gso_max_segs = gso_max_segs;
467}
468
469/*
470 * Recomputes features using slave's features
471 */
472netdev_features_t br_features_recompute(struct net_bridge *br,
473 netdev_features_t features)
474{
475 struct net_bridge_port *p;
476 netdev_features_t mask;
477
478 if (list_empty(&br->port_list))
479 return features;
480
481 mask = features;
482 features &= ~NETIF_F_ONE_FOR_ALL;
483
484 list_for_each_entry(p, &br->port_list, list) {
485 features = netdev_increment_features(features,
486 p->dev->features, mask);
487 }
488 features = netdev_add_tso_features(features, mask);
489
490 return features;
491}
492
493/* called with RTNL */
494int br_add_if(struct net_bridge *br, struct net_device *dev,
495 struct netlink_ext_ack *extack)
496{
497 struct net_bridge_port *p;
498 int err = 0;
499 unsigned br_hr, dev_hr;
500 bool changed_addr;
501
502 /* Don't allow bridging non-ethernet like devices, or DSA-enabled
503 * master network devices since the bridge layer rx_handler prevents
504 * the DSA fake ethertype handler to be invoked, so we do not strip off
505 * the DSA switch tag protocol header and the bridge layer just return
506 * RX_HANDLER_CONSUMED, stopping RX processing for these frames.
507 */
508 if ((dev->flags & IFF_LOOPBACK) ||
509 dev->type != ARPHRD_ETHER || dev->addr_len != ETH_ALEN ||
510 !is_valid_ether_addr(dev->dev_addr) ||
511 netdev_uses_dsa(dev))
512 return -EINVAL;
513
514 /* No bridging of bridges */
515 if (dev->netdev_ops->ndo_start_xmit == br_dev_xmit) {
516 NL_SET_ERR_MSG(extack,
517 "Can not enslave a bridge to a bridge");
518 return -ELOOP;
519 }
520
521 /* Device has master upper dev */
522 if (netdev_master_upper_dev_get(dev))
523 return -EBUSY;
524
525 /* No bridging devices that dislike that (e.g. wireless) */
526 if (dev->priv_flags & IFF_DONT_BRIDGE) {
527 NL_SET_ERR_MSG(extack,
528 "Device does not allow enslaving to a bridge");
529 return -EOPNOTSUPP;
530 }
531
532 p = new_nbp(br, dev);
533 if (IS_ERR(p))
534 return PTR_ERR(p);
535
536 call_netdevice_notifiers(NETDEV_JOIN, dev);
537
538 err = dev_set_allmulti(dev, 1);
539 if (err)
540 goto put_back;
541
542 err = kobject_init_and_add(&p->kobj, &brport_ktype, &(dev->dev.kobj),
543 SYSFS_BRIDGE_PORT_ATTR);
544 if (err)
545 goto err1;
546
547 err = br_sysfs_addif(p);
548 if (err)
549 goto err2;
550
551 err = br_netpoll_enable(p);
552 if (err)
553 goto err3;
554
555 err = netdev_rx_handler_register(dev, br_handle_frame, p);
556 if (err)
557 goto err4;
558
559 dev->priv_flags |= IFF_BRIDGE_PORT;
560
561 err = netdev_master_upper_dev_link(dev, br->dev, NULL, NULL, extack);
562 if (err)
563 goto err5;
564
565 err = nbp_switchdev_mark_set(p);
566 if (err)
567 goto err6;
568
569 dev_disable_lro(dev);
570
571 list_add_rcu(&p->list, &br->port_list);
572
573 nbp_update_port_count(br);
574
575 netdev_update_features(br->dev);
576
577 br_hr = br->dev->needed_headroom;
578 dev_hr = netdev_get_fwd_headroom(dev);
579 if (br_hr < dev_hr)
580 update_headroom(br, dev_hr);
581 else
582 netdev_set_rx_headroom(dev, br_hr);
583
584 if (br_fdb_insert(br, p, dev->dev_addr, 0))
585 netdev_err(dev, "failed insert local address bridge forwarding table\n");
586
587 err = nbp_vlan_init(p);
588 if (err) {
589 netdev_err(dev, "failed to initialize vlan filtering on this port\n");
590 goto err7;
591 }
592
593 spin_lock_bh(&br->lock);
594 changed_addr = br_stp_recalculate_bridge_id(br);
595
596 if (netif_running(dev) && netif_oper_up(dev) &&
597 (br->dev->flags & IFF_UP))
598 br_stp_enable_port(p);
599 spin_unlock_bh(&br->lock);
600
601 br_ifinfo_notify(RTM_NEWLINK, NULL, p);
602
603 if (changed_addr)
604 call_netdevice_notifiers(NETDEV_CHANGEADDR, br->dev);
605
606 br_mtu_auto_adjust(br);
607 br_set_gso_limits(br);
608
609 kobject_uevent(&p->kobj, KOBJ_ADD);
610
611 return 0;
612
613err7:
614 list_del_rcu(&p->list);
615 br_fdb_delete_by_port(br, p, 0, 1);
616 nbp_update_port_count(br);
617err6:
618 netdev_upper_dev_unlink(dev, br->dev);
619err5:
620 dev->priv_flags &= ~IFF_BRIDGE_PORT;
621 netdev_rx_handler_unregister(dev);
622err4:
623 br_netpoll_disable(p);
624err3:
625 sysfs_remove_link(br->ifobj, p->dev->name);
626err2:
627 kobject_put(&p->kobj);
628 p = NULL; /* kobject_put frees */
629err1:
630 dev_set_allmulti(dev, -1);
631put_back:
632 dev_put(dev);
633 kfree(p);
634 return err;
635}
636
637/* called with RTNL */
638int br_del_if(struct net_bridge *br, struct net_device *dev)
639{
640 struct net_bridge_port *p;
641 bool changed_addr;
642
643 p = br_port_get_rtnl(dev);
644 if (!p || p->br != br)
645 return -EINVAL;
646
647 /* Since more than one interface can be attached to a bridge,
648 * there still maybe an alternate path for netconsole to use;
649 * therefore there is no reason for a NETDEV_RELEASE event.
650 */
651 del_nbp(p);
652
653 br_mtu_auto_adjust(br);
654 br_set_gso_limits(br);
655
656 spin_lock_bh(&br->lock);
657 changed_addr = br_stp_recalculate_bridge_id(br);
658 spin_unlock_bh(&br->lock);
659
660 if (changed_addr)
661 call_netdevice_notifiers(NETDEV_CHANGEADDR, br->dev);
662
663 netdev_update_features(br->dev);
664
665 return 0;
666}
667
668void br_port_flags_change(struct net_bridge_port *p, unsigned long mask)
669{
670 struct net_bridge *br = p->br;
671
672 if (mask & BR_AUTO_MASK)
673 nbp_update_port_count(br);
674
675 if (mask & BR_NEIGH_SUPPRESS)
676 br_recalculate_neigh_suppress_enabled(br);
677}
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * Userspace interface
4 * Linux ethernet bridge
5 *
6 * Authors:
7 * Lennert Buytenhek <buytenh@gnu.org>
8 */
9
10#include <linux/kernel.h>
11#include <linux/netdevice.h>
12#include <linux/etherdevice.h>
13#include <linux/netpoll.h>
14#include <linux/ethtool.h>
15#include <linux/if_arp.h>
16#include <linux/module.h>
17#include <linux/init.h>
18#include <linux/rtnetlink.h>
19#include <linux/if_ether.h>
20#include <linux/slab.h>
21#include <net/dsa.h>
22#include <net/sock.h>
23#include <linux/if_vlan.h>
24#include <net/switchdev.h>
25#include <net/net_namespace.h>
26
27#include "br_private.h"
28
29/*
30 * Determine initial path cost based on speed.
31 * using recommendations from 802.1d standard
32 *
33 * Since driver might sleep need to not be holding any locks.
34 */
35static int port_cost(struct net_device *dev)
36{
37 struct ethtool_link_ksettings ecmd;
38
39 if (!__ethtool_get_link_ksettings(dev, &ecmd)) {
40 switch (ecmd.base.speed) {
41 case SPEED_10000:
42 return 2;
43 case SPEED_1000:
44 return 4;
45 case SPEED_100:
46 return 19;
47 case SPEED_10:
48 return 100;
49 }
50 }
51
52 /* Old silly heuristics based on name */
53 if (!strncmp(dev->name, "lec", 3))
54 return 7;
55
56 if (!strncmp(dev->name, "plip", 4))
57 return 2500;
58
59 return 100; /* assume old 10Mbps */
60}
61
62
63/* Check for port carrier transitions. */
64void br_port_carrier_check(struct net_bridge_port *p, bool *notified)
65{
66 struct net_device *dev = p->dev;
67 struct net_bridge *br = p->br;
68
69 if (!(p->flags & BR_ADMIN_COST) &&
70 netif_running(dev) && netif_oper_up(dev))
71 p->path_cost = port_cost(dev);
72
73 *notified = false;
74 if (!netif_running(br->dev))
75 return;
76
77 spin_lock_bh(&br->lock);
78 if (netif_running(dev) && netif_oper_up(dev)) {
79 if (p->state == BR_STATE_DISABLED) {
80 br_stp_enable_port(p);
81 *notified = true;
82 }
83 } else {
84 if (p->state != BR_STATE_DISABLED) {
85 br_stp_disable_port(p);
86 *notified = true;
87 }
88 }
89 spin_unlock_bh(&br->lock);
90}
91
92static void br_port_set_promisc(struct net_bridge_port *p)
93{
94 int err = 0;
95
96 if (br_promisc_port(p))
97 return;
98
99 err = dev_set_promiscuity(p->dev, 1);
100 if (err)
101 return;
102
103 br_fdb_unsync_static(p->br, p);
104 p->flags |= BR_PROMISC;
105}
106
107static void br_port_clear_promisc(struct net_bridge_port *p)
108{
109 int err;
110
111 /* Check if the port is already non-promisc or if it doesn't
112 * support UNICAST filtering. Without unicast filtering support
113 * we'll end up re-enabling promisc mode anyway, so just check for
114 * it here.
115 */
116 if (!br_promisc_port(p) || !(p->dev->priv_flags & IFF_UNICAST_FLT))
117 return;
118
119 /* Since we'll be clearing the promisc mode, program the port
120 * first so that we don't have interruption in traffic.
121 */
122 err = br_fdb_sync_static(p->br, p);
123 if (err)
124 return;
125
126 dev_set_promiscuity(p->dev, -1);
127 p->flags &= ~BR_PROMISC;
128}
129
130/* When a port is added or removed or when certain port flags
131 * change, this function is called to automatically manage
132 * promiscuity setting of all the bridge ports. We are always called
133 * under RTNL so can skip using rcu primitives.
134 */
135void br_manage_promisc(struct net_bridge *br)
136{
137 struct net_bridge_port *p;
138 bool set_all = false;
139
140 /* If vlan filtering is disabled or bridge interface is placed
141 * into promiscuous mode, place all ports in promiscuous mode.
142 */
143 if ((br->dev->flags & IFF_PROMISC) || !br_vlan_enabled(br->dev))
144 set_all = true;
145
146 list_for_each_entry(p, &br->port_list, list) {
147 if (set_all) {
148 br_port_set_promisc(p);
149 } else {
150 /* If the number of auto-ports is <= 1, then all other
151 * ports will have their output configuration
152 * statically specified through fdbs. Since ingress
153 * on the auto-port becomes forwarding/egress to other
154 * ports and egress configuration is statically known,
155 * we can say that ingress configuration of the
156 * auto-port is also statically known.
157 * This lets us disable promiscuous mode and write
158 * this config to hw.
159 */
160 if (br->auto_cnt == 0 ||
161 (br->auto_cnt == 1 && br_auto_port(p)))
162 br_port_clear_promisc(p);
163 else
164 br_port_set_promisc(p);
165 }
166 }
167}
168
169int nbp_backup_change(struct net_bridge_port *p,
170 struct net_device *backup_dev)
171{
172 struct net_bridge_port *old_backup = rtnl_dereference(p->backup_port);
173 struct net_bridge_port *backup_p = NULL;
174
175 ASSERT_RTNL();
176
177 if (backup_dev) {
178 if (!netif_is_bridge_port(backup_dev))
179 return -ENOENT;
180
181 backup_p = br_port_get_rtnl(backup_dev);
182 if (backup_p->br != p->br)
183 return -EINVAL;
184 }
185
186 if (p == backup_p)
187 return -EINVAL;
188
189 if (old_backup == backup_p)
190 return 0;
191
192 /* if the backup link is already set, clear it */
193 if (old_backup)
194 old_backup->backup_redirected_cnt--;
195
196 if (backup_p)
197 backup_p->backup_redirected_cnt++;
198 rcu_assign_pointer(p->backup_port, backup_p);
199
200 return 0;
201}
202
203static void nbp_backup_clear(struct net_bridge_port *p)
204{
205 nbp_backup_change(p, NULL);
206 if (p->backup_redirected_cnt) {
207 struct net_bridge_port *cur_p;
208
209 list_for_each_entry(cur_p, &p->br->port_list, list) {
210 struct net_bridge_port *backup_p;
211
212 backup_p = rtnl_dereference(cur_p->backup_port);
213 if (backup_p == p)
214 nbp_backup_change(cur_p, NULL);
215 }
216 }
217
218 WARN_ON(rcu_access_pointer(p->backup_port) || p->backup_redirected_cnt);
219}
220
221static void nbp_update_port_count(struct net_bridge *br)
222{
223 struct net_bridge_port *p;
224 u32 cnt = 0;
225
226 list_for_each_entry(p, &br->port_list, list) {
227 if (br_auto_port(p))
228 cnt++;
229 }
230 if (br->auto_cnt != cnt) {
231 br->auto_cnt = cnt;
232 br_manage_promisc(br);
233 }
234}
235
236static void nbp_delete_promisc(struct net_bridge_port *p)
237{
238 /* If port is currently promiscuous, unset promiscuity.
239 * Otherwise, it is a static port so remove all addresses
240 * from it.
241 */
242 dev_set_allmulti(p->dev, -1);
243 if (br_promisc_port(p))
244 dev_set_promiscuity(p->dev, -1);
245 else
246 br_fdb_unsync_static(p->br, p);
247}
248
249static void release_nbp(struct kobject *kobj)
250{
251 struct net_bridge_port *p
252 = container_of(kobj, struct net_bridge_port, kobj);
253 kfree(p);
254}
255
256static void brport_get_ownership(struct kobject *kobj, kuid_t *uid, kgid_t *gid)
257{
258 struct net_bridge_port *p = kobj_to_brport(kobj);
259
260 net_ns_get_ownership(dev_net(p->dev), uid, gid);
261}
262
263static struct kobj_type brport_ktype = {
264#ifdef CONFIG_SYSFS
265 .sysfs_ops = &brport_sysfs_ops,
266#endif
267 .release = release_nbp,
268 .get_ownership = brport_get_ownership,
269};
270
271static void destroy_nbp(struct net_bridge_port *p)
272{
273 struct net_device *dev = p->dev;
274
275 p->br = NULL;
276 p->dev = NULL;
277 dev_put(dev);
278
279 kobject_put(&p->kobj);
280}
281
282static void destroy_nbp_rcu(struct rcu_head *head)
283{
284 struct net_bridge_port *p =
285 container_of(head, struct net_bridge_port, rcu);
286 destroy_nbp(p);
287}
288
289static unsigned get_max_headroom(struct net_bridge *br)
290{
291 unsigned max_headroom = 0;
292 struct net_bridge_port *p;
293
294 list_for_each_entry(p, &br->port_list, list) {
295 unsigned dev_headroom = netdev_get_fwd_headroom(p->dev);
296
297 if (dev_headroom > max_headroom)
298 max_headroom = dev_headroom;
299 }
300
301 return max_headroom;
302}
303
304static void update_headroom(struct net_bridge *br, int new_hr)
305{
306 struct net_bridge_port *p;
307
308 list_for_each_entry(p, &br->port_list, list)
309 netdev_set_rx_headroom(p->dev, new_hr);
310
311 br->dev->needed_headroom = new_hr;
312}
313
314/* Delete port(interface) from bridge is done in two steps.
315 * via RCU. First step, marks device as down. That deletes
316 * all the timers and stops new packets from flowing through.
317 *
318 * Final cleanup doesn't occur until after all CPU's finished
319 * processing packets.
320 *
321 * Protected from multiple admin operations by RTNL mutex
322 */
323static void del_nbp(struct net_bridge_port *p)
324{
325 struct net_bridge *br = p->br;
326 struct net_device *dev = p->dev;
327
328 sysfs_remove_link(br->ifobj, p->dev->name);
329
330 nbp_delete_promisc(p);
331
332 spin_lock_bh(&br->lock);
333 br_stp_disable_port(p);
334 spin_unlock_bh(&br->lock);
335
336 br_mrp_port_del(br, p);
337
338 br_ifinfo_notify(RTM_DELLINK, NULL, p);
339
340 list_del_rcu(&p->list);
341 if (netdev_get_fwd_headroom(dev) == br->dev->needed_headroom)
342 update_headroom(br, get_max_headroom(br));
343 netdev_reset_rx_headroom(dev);
344
345 nbp_vlan_flush(p);
346 br_fdb_delete_by_port(br, p, 0, 1);
347 switchdev_deferred_process();
348 nbp_backup_clear(p);
349
350 nbp_update_port_count(br);
351
352 netdev_upper_dev_unlink(dev, br->dev);
353
354 dev->priv_flags &= ~IFF_BRIDGE_PORT;
355
356 netdev_rx_handler_unregister(dev);
357
358 br_multicast_del_port(p);
359
360 kobject_uevent(&p->kobj, KOBJ_REMOVE);
361 kobject_del(&p->kobj);
362
363 br_netpoll_disable(p);
364
365 call_rcu(&p->rcu, destroy_nbp_rcu);
366}
367
368/* Delete bridge device */
369void br_dev_delete(struct net_device *dev, struct list_head *head)
370{
371 struct net_bridge *br = netdev_priv(dev);
372 struct net_bridge_port *p, *n;
373
374 list_for_each_entry_safe(p, n, &br->port_list, list) {
375 del_nbp(p);
376 }
377
378 br_recalculate_neigh_suppress_enabled(br);
379
380 br_fdb_delete_by_port(br, NULL, 0, 1);
381
382 cancel_delayed_work_sync(&br->gc_work);
383
384 br_sysfs_delbr(br->dev);
385 unregister_netdevice_queue(br->dev, head);
386}
387
388/* find an available port number */
389static int find_portno(struct net_bridge *br)
390{
391 int index;
392 struct net_bridge_port *p;
393 unsigned long *inuse;
394
395 inuse = bitmap_zalloc(BR_MAX_PORTS, GFP_KERNEL);
396 if (!inuse)
397 return -ENOMEM;
398
399 set_bit(0, inuse); /* zero is reserved */
400 list_for_each_entry(p, &br->port_list, list) {
401 set_bit(p->port_no, inuse);
402 }
403 index = find_first_zero_bit(inuse, BR_MAX_PORTS);
404 bitmap_free(inuse);
405
406 return (index >= BR_MAX_PORTS) ? -EXFULL : index;
407}
408
409/* called with RTNL but without bridge lock */
410static struct net_bridge_port *new_nbp(struct net_bridge *br,
411 struct net_device *dev)
412{
413 struct net_bridge_port *p;
414 int index, err;
415
416 index = find_portno(br);
417 if (index < 0)
418 return ERR_PTR(index);
419
420 p = kzalloc(sizeof(*p), GFP_KERNEL);
421 if (p == NULL)
422 return ERR_PTR(-ENOMEM);
423
424 p->br = br;
425 dev_hold(dev);
426 p->dev = dev;
427 p->path_cost = port_cost(dev);
428 p->priority = 0x8000 >> BR_PORT_BITS;
429 p->port_no = index;
430 p->flags = BR_LEARNING | BR_FLOOD | BR_MCAST_FLOOD | BR_BCAST_FLOOD;
431 br_init_port(p);
432 br_set_state(p, BR_STATE_DISABLED);
433 br_stp_port_timer_init(p);
434 err = br_multicast_add_port(p);
435 if (err) {
436 dev_put(dev);
437 kfree(p);
438 p = ERR_PTR(err);
439 }
440
441 return p;
442}
443
444int br_add_bridge(struct net *net, const char *name)
445{
446 struct net_device *dev;
447 int res;
448
449 dev = alloc_netdev(sizeof(struct net_bridge), name, NET_NAME_UNKNOWN,
450 br_dev_setup);
451
452 if (!dev)
453 return -ENOMEM;
454
455 dev_net_set(dev, net);
456 dev->rtnl_link_ops = &br_link_ops;
457
458 res = register_netdev(dev);
459 if (res)
460 free_netdev(dev);
461 return res;
462}
463
464int br_del_bridge(struct net *net, const char *name)
465{
466 struct net_device *dev;
467 int ret = 0;
468
469 rtnl_lock();
470 dev = __dev_get_by_name(net, name);
471 if (dev == NULL)
472 ret = -ENXIO; /* Could not find device */
473
474 else if (!(dev->priv_flags & IFF_EBRIDGE)) {
475 /* Attempt to delete non bridge device! */
476 ret = -EPERM;
477 }
478
479 else if (dev->flags & IFF_UP) {
480 /* Not shutdown yet. */
481 ret = -EBUSY;
482 }
483
484 else
485 br_dev_delete(dev, NULL);
486
487 rtnl_unlock();
488 return ret;
489}
490
491/* MTU of the bridge pseudo-device: ETH_DATA_LEN or the minimum of the ports */
492static int br_mtu_min(const struct net_bridge *br)
493{
494 const struct net_bridge_port *p;
495 int ret_mtu = 0;
496
497 list_for_each_entry(p, &br->port_list, list)
498 if (!ret_mtu || ret_mtu > p->dev->mtu)
499 ret_mtu = p->dev->mtu;
500
501 return ret_mtu ? ret_mtu : ETH_DATA_LEN;
502}
503
504void br_mtu_auto_adjust(struct net_bridge *br)
505{
506 ASSERT_RTNL();
507
508 /* if the bridge MTU was manually configured don't mess with it */
509 if (br_opt_get(br, BROPT_MTU_SET_BY_USER))
510 return;
511
512 /* change to the minimum MTU and clear the flag which was set by
513 * the bridge ndo_change_mtu callback
514 */
515 dev_set_mtu(br->dev, br_mtu_min(br));
516 br_opt_toggle(br, BROPT_MTU_SET_BY_USER, false);
517}
518
519static void br_set_gso_limits(struct net_bridge *br)
520{
521 unsigned int gso_max_size = GSO_MAX_SIZE;
522 u16 gso_max_segs = GSO_MAX_SEGS;
523 const struct net_bridge_port *p;
524
525 list_for_each_entry(p, &br->port_list, list) {
526 gso_max_size = min(gso_max_size, p->dev->gso_max_size);
527 gso_max_segs = min(gso_max_segs, p->dev->gso_max_segs);
528 }
529 br->dev->gso_max_size = gso_max_size;
530 br->dev->gso_max_segs = gso_max_segs;
531}
532
533/*
534 * Recomputes features using slave's features
535 */
536netdev_features_t br_features_recompute(struct net_bridge *br,
537 netdev_features_t features)
538{
539 struct net_bridge_port *p;
540 netdev_features_t mask;
541
542 if (list_empty(&br->port_list))
543 return features;
544
545 mask = features;
546 features &= ~NETIF_F_ONE_FOR_ALL;
547
548 list_for_each_entry(p, &br->port_list, list) {
549 features = netdev_increment_features(features,
550 p->dev->features, mask);
551 }
552 features = netdev_add_tso_features(features, mask);
553
554 return features;
555}
556
557/* called with RTNL */
558int br_add_if(struct net_bridge *br, struct net_device *dev,
559 struct netlink_ext_ack *extack)
560{
561 struct net_bridge_port *p;
562 int err = 0;
563 unsigned br_hr, dev_hr;
564 bool changed_addr;
565
566 /* Don't allow bridging non-ethernet like devices. */
567 if ((dev->flags & IFF_LOOPBACK) ||
568 dev->type != ARPHRD_ETHER || dev->addr_len != ETH_ALEN ||
569 !is_valid_ether_addr(dev->dev_addr))
570 return -EINVAL;
571
572 /* Also don't allow bridging of net devices that are DSA masters, since
573 * the bridge layer rx_handler prevents the DSA fake ethertype handler
574 * to be invoked, so we don't get the chance to strip off and parse the
575 * DSA switch tag protocol header (the bridge layer just returns
576 * RX_HANDLER_CONSUMED, stopping RX processing for these frames).
577 * The only case where that would not be an issue is when bridging can
578 * already be offloaded, such as when the DSA master is itself a DSA
579 * or plain switchdev port, and is bridged only with other ports from
580 * the same hardware device.
581 */
582 if (netdev_uses_dsa(dev)) {
583 list_for_each_entry(p, &br->port_list, list) {
584 if (!netdev_port_same_parent_id(dev, p->dev)) {
585 NL_SET_ERR_MSG(extack,
586 "Cannot do software bridging with a DSA master");
587 return -EINVAL;
588 }
589 }
590 }
591
592 /* No bridging of bridges */
593 if (dev->netdev_ops->ndo_start_xmit == br_dev_xmit) {
594 NL_SET_ERR_MSG(extack,
595 "Can not enslave a bridge to a bridge");
596 return -ELOOP;
597 }
598
599 /* Device has master upper dev */
600 if (netdev_master_upper_dev_get(dev))
601 return -EBUSY;
602
603 /* No bridging devices that dislike that (e.g. wireless) */
604 if (dev->priv_flags & IFF_DONT_BRIDGE) {
605 NL_SET_ERR_MSG(extack,
606 "Device does not allow enslaving to a bridge");
607 return -EOPNOTSUPP;
608 }
609
610 p = new_nbp(br, dev);
611 if (IS_ERR(p))
612 return PTR_ERR(p);
613
614 call_netdevice_notifiers(NETDEV_JOIN, dev);
615
616 err = dev_set_allmulti(dev, 1);
617 if (err) {
618 kfree(p); /* kobject not yet init'd, manually free */
619 goto err1;
620 }
621
622 err = kobject_init_and_add(&p->kobj, &brport_ktype, &(dev->dev.kobj),
623 SYSFS_BRIDGE_PORT_ATTR);
624 if (err)
625 goto err2;
626
627 err = br_sysfs_addif(p);
628 if (err)
629 goto err2;
630
631 err = br_netpoll_enable(p);
632 if (err)
633 goto err3;
634
635 err = netdev_rx_handler_register(dev, br_get_rx_handler(dev), p);
636 if (err)
637 goto err4;
638
639 dev->priv_flags |= IFF_BRIDGE_PORT;
640
641 err = netdev_master_upper_dev_link(dev, br->dev, NULL, NULL, extack);
642 if (err)
643 goto err5;
644
645 err = nbp_switchdev_mark_set(p);
646 if (err)
647 goto err6;
648
649 dev_disable_lro(dev);
650
651 list_add_rcu(&p->list, &br->port_list);
652
653 nbp_update_port_count(br);
654
655 netdev_update_features(br->dev);
656
657 br_hr = br->dev->needed_headroom;
658 dev_hr = netdev_get_fwd_headroom(dev);
659 if (br_hr < dev_hr)
660 update_headroom(br, dev_hr);
661 else
662 netdev_set_rx_headroom(dev, br_hr);
663
664 if (br_fdb_insert(br, p, dev->dev_addr, 0))
665 netdev_err(dev, "failed insert local address bridge forwarding table\n");
666
667 if (br->dev->addr_assign_type != NET_ADDR_SET) {
668 /* Ask for permission to use this MAC address now, even if we
669 * don't end up choosing it below.
670 */
671 err = dev_pre_changeaddr_notify(br->dev, dev->dev_addr, extack);
672 if (err)
673 goto err7;
674 }
675
676 err = nbp_vlan_init(p, extack);
677 if (err) {
678 netdev_err(dev, "failed to initialize vlan filtering on this port\n");
679 goto err7;
680 }
681
682 spin_lock_bh(&br->lock);
683 changed_addr = br_stp_recalculate_bridge_id(br);
684
685 if (netif_running(dev) && netif_oper_up(dev) &&
686 (br->dev->flags & IFF_UP))
687 br_stp_enable_port(p);
688 spin_unlock_bh(&br->lock);
689
690 br_ifinfo_notify(RTM_NEWLINK, NULL, p);
691
692 if (changed_addr)
693 call_netdevice_notifiers(NETDEV_CHANGEADDR, br->dev);
694
695 br_mtu_auto_adjust(br);
696 br_set_gso_limits(br);
697
698 kobject_uevent(&p->kobj, KOBJ_ADD);
699
700 return 0;
701
702err7:
703 list_del_rcu(&p->list);
704 br_fdb_delete_by_port(br, p, 0, 1);
705 nbp_update_port_count(br);
706err6:
707 netdev_upper_dev_unlink(dev, br->dev);
708err5:
709 dev->priv_flags &= ~IFF_BRIDGE_PORT;
710 netdev_rx_handler_unregister(dev);
711err4:
712 br_netpoll_disable(p);
713err3:
714 sysfs_remove_link(br->ifobj, p->dev->name);
715err2:
716 kobject_put(&p->kobj);
717 dev_set_allmulti(dev, -1);
718err1:
719 dev_put(dev);
720 return err;
721}
722
723/* called with RTNL */
724int br_del_if(struct net_bridge *br, struct net_device *dev)
725{
726 struct net_bridge_port *p;
727 bool changed_addr;
728
729 p = br_port_get_rtnl(dev);
730 if (!p || p->br != br)
731 return -EINVAL;
732
733 /* Since more than one interface can be attached to a bridge,
734 * there still maybe an alternate path for netconsole to use;
735 * therefore there is no reason for a NETDEV_RELEASE event.
736 */
737 del_nbp(p);
738
739 br_mtu_auto_adjust(br);
740 br_set_gso_limits(br);
741
742 spin_lock_bh(&br->lock);
743 changed_addr = br_stp_recalculate_bridge_id(br);
744 spin_unlock_bh(&br->lock);
745
746 if (changed_addr)
747 call_netdevice_notifiers(NETDEV_CHANGEADDR, br->dev);
748
749 netdev_update_features(br->dev);
750
751 return 0;
752}
753
754void br_port_flags_change(struct net_bridge_port *p, unsigned long mask)
755{
756 struct net_bridge *br = p->br;
757
758 if (mask & BR_AUTO_MASK)
759 nbp_update_port_count(br);
760
761 if (mask & BR_NEIGH_SUPPRESS)
762 br_recalculate_neigh_suppress_enabled(br);
763}
764
765bool br_port_flag_is_set(const struct net_device *dev, unsigned long flag)
766{
767 struct net_bridge_port *p;
768
769 p = br_port_get_rtnl_rcu(dev);
770 if (!p)
771 return false;
772
773 return p->flags & flag;
774}
775EXPORT_SYMBOL_GPL(br_port_flag_is_set);