Loading...
1/*
2 * Pluggable TCP congestion control support and newReno
3 * congestion control.
4 * Based on ideas from I/O scheduler support and Web100.
5 *
6 * Copyright (C) 2005 Stephen Hemminger <shemminger@osdl.org>
7 */
8
9#define pr_fmt(fmt) "TCP: " fmt
10
11#include <linux/module.h>
12#include <linux/mm.h>
13#include <linux/types.h>
14#include <linux/list.h>
15#include <linux/gfp.h>
16#include <linux/jhash.h>
17#include <net/tcp.h>
18
19static DEFINE_SPINLOCK(tcp_cong_list_lock);
20static LIST_HEAD(tcp_cong_list);
21
22/* Simple linear search, don't expect many entries! */
23static struct tcp_congestion_ops *tcp_ca_find(const char *name)
24{
25 struct tcp_congestion_ops *e;
26
27 list_for_each_entry_rcu(e, &tcp_cong_list, list) {
28 if (strcmp(e->name, name) == 0)
29 return e;
30 }
31
32 return NULL;
33}
34
35/* Must be called with rcu lock held */
36static const struct tcp_congestion_ops *__tcp_ca_find_autoload(const char *name)
37{
38 const struct tcp_congestion_ops *ca = tcp_ca_find(name);
39#ifdef CONFIG_MODULES
40 if (!ca && capable(CAP_NET_ADMIN)) {
41 rcu_read_unlock();
42 request_module("tcp_%s", name);
43 rcu_read_lock();
44 ca = tcp_ca_find(name);
45 }
46#endif
47 return ca;
48}
49
50/* Simple linear search, not much in here. */
51struct tcp_congestion_ops *tcp_ca_find_key(u32 key)
52{
53 struct tcp_congestion_ops *e;
54
55 list_for_each_entry_rcu(e, &tcp_cong_list, list) {
56 if (e->key == key)
57 return e;
58 }
59
60 return NULL;
61}
62
63/*
64 * Attach new congestion control algorithm to the list
65 * of available options.
66 */
67int tcp_register_congestion_control(struct tcp_congestion_ops *ca)
68{
69 int ret = 0;
70
71 /* all algorithms must implement ssthresh and cong_avoid ops */
72 if (!ca->ssthresh || !ca->cong_avoid) {
73 pr_err("%s does not implement required ops\n", ca->name);
74 return -EINVAL;
75 }
76
77 ca->key = jhash(ca->name, sizeof(ca->name), strlen(ca->name));
78
79 spin_lock(&tcp_cong_list_lock);
80 if (ca->key == TCP_CA_UNSPEC || tcp_ca_find_key(ca->key)) {
81 pr_notice("%s already registered or non-unique key\n",
82 ca->name);
83 ret = -EEXIST;
84 } else {
85 list_add_tail_rcu(&ca->list, &tcp_cong_list);
86 pr_debug("%s registered\n", ca->name);
87 }
88 spin_unlock(&tcp_cong_list_lock);
89
90 return ret;
91}
92EXPORT_SYMBOL_GPL(tcp_register_congestion_control);
93
94/*
95 * Remove congestion control algorithm, called from
96 * the module's remove function. Module ref counts are used
97 * to ensure that this can't be done till all sockets using
98 * that method are closed.
99 */
100void tcp_unregister_congestion_control(struct tcp_congestion_ops *ca)
101{
102 spin_lock(&tcp_cong_list_lock);
103 list_del_rcu(&ca->list);
104 spin_unlock(&tcp_cong_list_lock);
105
106 /* Wait for outstanding readers to complete before the
107 * module gets removed entirely.
108 *
109 * A try_module_get() should fail by now as our module is
110 * in "going" state since no refs are held anymore and
111 * module_exit() handler being called.
112 */
113 synchronize_rcu();
114}
115EXPORT_SYMBOL_GPL(tcp_unregister_congestion_control);
116
117u32 tcp_ca_get_key_by_name(const char *name, bool *ecn_ca)
118{
119 const struct tcp_congestion_ops *ca;
120 u32 key = TCP_CA_UNSPEC;
121
122 might_sleep();
123
124 rcu_read_lock();
125 ca = __tcp_ca_find_autoload(name);
126 if (ca) {
127 key = ca->key;
128 *ecn_ca = ca->flags & TCP_CONG_NEEDS_ECN;
129 }
130 rcu_read_unlock();
131
132 return key;
133}
134EXPORT_SYMBOL_GPL(tcp_ca_get_key_by_name);
135
136char *tcp_ca_get_name_by_key(u32 key, char *buffer)
137{
138 const struct tcp_congestion_ops *ca;
139 char *ret = NULL;
140
141 rcu_read_lock();
142 ca = tcp_ca_find_key(key);
143 if (ca)
144 ret = strncpy(buffer, ca->name,
145 TCP_CA_NAME_MAX);
146 rcu_read_unlock();
147
148 return ret;
149}
150EXPORT_SYMBOL_GPL(tcp_ca_get_name_by_key);
151
152/* Assign choice of congestion control. */
153void tcp_assign_congestion_control(struct sock *sk)
154{
155 struct inet_connection_sock *icsk = inet_csk(sk);
156 struct tcp_congestion_ops *ca;
157
158 rcu_read_lock();
159 list_for_each_entry_rcu(ca, &tcp_cong_list, list) {
160 if (likely(try_module_get(ca->owner))) {
161 icsk->icsk_ca_ops = ca;
162 goto out;
163 }
164 /* Fallback to next available. The last really
165 * guaranteed fallback is Reno from this list.
166 */
167 }
168out:
169 rcu_read_unlock();
170
171 /* Clear out private data before diag gets it and
172 * the ca has not been initialized.
173 */
174 if (ca->get_info)
175 memset(icsk->icsk_ca_priv, 0, sizeof(icsk->icsk_ca_priv));
176 if (ca->flags & TCP_CONG_NEEDS_ECN)
177 INET_ECN_xmit(sk);
178 else
179 INET_ECN_dontxmit(sk);
180}
181
182void tcp_init_congestion_control(struct sock *sk)
183{
184 const struct inet_connection_sock *icsk = inet_csk(sk);
185
186 if (icsk->icsk_ca_ops->init)
187 icsk->icsk_ca_ops->init(sk);
188 if (tcp_ca_needs_ecn(sk))
189 INET_ECN_xmit(sk);
190 else
191 INET_ECN_dontxmit(sk);
192}
193
194static void tcp_reinit_congestion_control(struct sock *sk,
195 const struct tcp_congestion_ops *ca)
196{
197 struct inet_connection_sock *icsk = inet_csk(sk);
198
199 tcp_cleanup_congestion_control(sk);
200 icsk->icsk_ca_ops = ca;
201 icsk->icsk_ca_setsockopt = 1;
202
203 if (sk->sk_state != TCP_CLOSE)
204 tcp_init_congestion_control(sk);
205}
206
207/* Manage refcounts on socket close. */
208void tcp_cleanup_congestion_control(struct sock *sk)
209{
210 struct inet_connection_sock *icsk = inet_csk(sk);
211
212 if (icsk->icsk_ca_ops->release)
213 icsk->icsk_ca_ops->release(sk);
214 module_put(icsk->icsk_ca_ops->owner);
215}
216
217/* Used by sysctl to change default congestion control */
218int tcp_set_default_congestion_control(const char *name)
219{
220 struct tcp_congestion_ops *ca;
221 int ret = -ENOENT;
222
223 spin_lock(&tcp_cong_list_lock);
224 ca = tcp_ca_find(name);
225#ifdef CONFIG_MODULES
226 if (!ca && capable(CAP_NET_ADMIN)) {
227 spin_unlock(&tcp_cong_list_lock);
228
229 request_module("tcp_%s", name);
230 spin_lock(&tcp_cong_list_lock);
231 ca = tcp_ca_find(name);
232 }
233#endif
234
235 if (ca) {
236 ca->flags |= TCP_CONG_NON_RESTRICTED; /* default is always allowed */
237 list_move(&ca->list, &tcp_cong_list);
238 ret = 0;
239 }
240 spin_unlock(&tcp_cong_list_lock);
241
242 return ret;
243}
244
245/* Set default value from kernel configuration at bootup */
246static int __init tcp_congestion_default(void)
247{
248 return tcp_set_default_congestion_control(CONFIG_DEFAULT_TCP_CONG);
249}
250late_initcall(tcp_congestion_default);
251
252/* Build string with list of available congestion control values */
253void tcp_get_available_congestion_control(char *buf, size_t maxlen)
254{
255 struct tcp_congestion_ops *ca;
256 size_t offs = 0;
257
258 rcu_read_lock();
259 list_for_each_entry_rcu(ca, &tcp_cong_list, list) {
260 offs += snprintf(buf + offs, maxlen - offs,
261 "%s%s",
262 offs == 0 ? "" : " ", ca->name);
263 }
264 rcu_read_unlock();
265}
266
267/* Get current default congestion control */
268void tcp_get_default_congestion_control(char *name)
269{
270 struct tcp_congestion_ops *ca;
271 /* We will always have reno... */
272 BUG_ON(list_empty(&tcp_cong_list));
273
274 rcu_read_lock();
275 ca = list_entry(tcp_cong_list.next, struct tcp_congestion_ops, list);
276 strncpy(name, ca->name, TCP_CA_NAME_MAX);
277 rcu_read_unlock();
278}
279
280/* Built list of non-restricted congestion control values */
281void tcp_get_allowed_congestion_control(char *buf, size_t maxlen)
282{
283 struct tcp_congestion_ops *ca;
284 size_t offs = 0;
285
286 *buf = '\0';
287 rcu_read_lock();
288 list_for_each_entry_rcu(ca, &tcp_cong_list, list) {
289 if (!(ca->flags & TCP_CONG_NON_RESTRICTED))
290 continue;
291 offs += snprintf(buf + offs, maxlen - offs,
292 "%s%s",
293 offs == 0 ? "" : " ", ca->name);
294 }
295 rcu_read_unlock();
296}
297
298/* Change list of non-restricted congestion control */
299int tcp_set_allowed_congestion_control(char *val)
300{
301 struct tcp_congestion_ops *ca;
302 char *saved_clone, *clone, *name;
303 int ret = 0;
304
305 saved_clone = clone = kstrdup(val, GFP_USER);
306 if (!clone)
307 return -ENOMEM;
308
309 spin_lock(&tcp_cong_list_lock);
310 /* pass 1 check for bad entries */
311 while ((name = strsep(&clone, " ")) && *name) {
312 ca = tcp_ca_find(name);
313 if (!ca) {
314 ret = -ENOENT;
315 goto out;
316 }
317 }
318
319 /* pass 2 clear old values */
320 list_for_each_entry_rcu(ca, &tcp_cong_list, list)
321 ca->flags &= ~TCP_CONG_NON_RESTRICTED;
322
323 /* pass 3 mark as allowed */
324 while ((name = strsep(&val, " ")) && *name) {
325 ca = tcp_ca_find(name);
326 WARN_ON(!ca);
327 if (ca)
328 ca->flags |= TCP_CONG_NON_RESTRICTED;
329 }
330out:
331 spin_unlock(&tcp_cong_list_lock);
332 kfree(saved_clone);
333
334 return ret;
335}
336
337/* Change congestion control for socket */
338int tcp_set_congestion_control(struct sock *sk, const char *name)
339{
340 struct inet_connection_sock *icsk = inet_csk(sk);
341 const struct tcp_congestion_ops *ca;
342 int err = 0;
343
344 if (icsk->icsk_ca_dst_locked)
345 return -EPERM;
346
347 rcu_read_lock();
348 ca = __tcp_ca_find_autoload(name);
349 /* No change asking for existing value */
350 if (ca == icsk->icsk_ca_ops) {
351 icsk->icsk_ca_setsockopt = 1;
352 goto out;
353 }
354 if (!ca)
355 err = -ENOENT;
356 else if (!((ca->flags & TCP_CONG_NON_RESTRICTED) ||
357 ns_capable(sock_net(sk)->user_ns, CAP_NET_ADMIN)))
358 err = -EPERM;
359 else if (!try_module_get(ca->owner))
360 err = -EBUSY;
361 else
362 tcp_reinit_congestion_control(sk, ca);
363 out:
364 rcu_read_unlock();
365 return err;
366}
367
368/* Slow start is used when congestion window is no greater than the slow start
369 * threshold. We base on RFC2581 and also handle stretch ACKs properly.
370 * We do not implement RFC3465 Appropriate Byte Counting (ABC) per se but
371 * something better;) a packet is only considered (s)acked in its entirety to
372 * defend the ACK attacks described in the RFC. Slow start processes a stretch
373 * ACK of degree N as if N acks of degree 1 are received back to back except
374 * ABC caps N to 2. Slow start exits when cwnd grows over ssthresh and
375 * returns the leftover acks to adjust cwnd in congestion avoidance mode.
376 */
377u32 tcp_slow_start(struct tcp_sock *tp, u32 acked)
378{
379 u32 cwnd = min(tp->snd_cwnd + acked, tp->snd_ssthresh);
380
381 acked -= cwnd - tp->snd_cwnd;
382 tp->snd_cwnd = min(cwnd, tp->snd_cwnd_clamp);
383
384 return acked;
385}
386EXPORT_SYMBOL_GPL(tcp_slow_start);
387
388/* In theory this is tp->snd_cwnd += 1 / tp->snd_cwnd (or alternative w),
389 * for every packet that was ACKed.
390 */
391void tcp_cong_avoid_ai(struct tcp_sock *tp, u32 w, u32 acked)
392{
393 /* If credits accumulated at a higher w, apply them gently now. */
394 if (tp->snd_cwnd_cnt >= w) {
395 tp->snd_cwnd_cnt = 0;
396 tp->snd_cwnd++;
397 }
398
399 tp->snd_cwnd_cnt += acked;
400 if (tp->snd_cwnd_cnt >= w) {
401 u32 delta = tp->snd_cwnd_cnt / w;
402
403 tp->snd_cwnd_cnt -= delta * w;
404 tp->snd_cwnd += delta;
405 }
406 tp->snd_cwnd = min(tp->snd_cwnd, tp->snd_cwnd_clamp);
407}
408EXPORT_SYMBOL_GPL(tcp_cong_avoid_ai);
409
410/*
411 * TCP Reno congestion control
412 * This is special case used for fallback as well.
413 */
414/* This is Jacobson's slow start and congestion avoidance.
415 * SIGCOMM '88, p. 328.
416 */
417void tcp_reno_cong_avoid(struct sock *sk, u32 ack, u32 acked)
418{
419 struct tcp_sock *tp = tcp_sk(sk);
420
421 if (!tcp_is_cwnd_limited(sk))
422 return;
423
424 /* In "safe" area, increase. */
425 if (tcp_in_slow_start(tp)) {
426 acked = tcp_slow_start(tp, acked);
427 if (!acked)
428 return;
429 }
430 /* In dangerous area, increase slowly. */
431 tcp_cong_avoid_ai(tp, tp->snd_cwnd, acked);
432}
433EXPORT_SYMBOL_GPL(tcp_reno_cong_avoid);
434
435/* Slow start threshold is half the congestion window (min 2) */
436u32 tcp_reno_ssthresh(struct sock *sk)
437{
438 const struct tcp_sock *tp = tcp_sk(sk);
439
440 return max(tp->snd_cwnd >> 1U, 2U);
441}
442EXPORT_SYMBOL_GPL(tcp_reno_ssthresh);
443
444struct tcp_congestion_ops tcp_reno = {
445 .flags = TCP_CONG_NON_RESTRICTED,
446 .name = "reno",
447 .owner = THIS_MODULE,
448 .ssthresh = tcp_reno_ssthresh,
449 .cong_avoid = tcp_reno_cong_avoid,
450};
1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * Pluggable TCP congestion control support and newReno
4 * congestion control.
5 * Based on ideas from I/O scheduler support and Web100.
6 *
7 * Copyright (C) 2005 Stephen Hemminger <shemminger@osdl.org>
8 */
9
10#define pr_fmt(fmt) "TCP: " fmt
11
12#include <linux/module.h>
13#include <linux/mm.h>
14#include <linux/types.h>
15#include <linux/list.h>
16#include <linux/gfp.h>
17#include <linux/jhash.h>
18#include <net/tcp.h>
19#include <trace/events/tcp.h>
20
21static DEFINE_SPINLOCK(tcp_cong_list_lock);
22static LIST_HEAD(tcp_cong_list);
23
24/* Simple linear search, don't expect many entries! */
25struct tcp_congestion_ops *tcp_ca_find(const char *name)
26{
27 struct tcp_congestion_ops *e;
28
29 list_for_each_entry_rcu(e, &tcp_cong_list, list) {
30 if (strcmp(e->name, name) == 0)
31 return e;
32 }
33
34 return NULL;
35}
36
37void tcp_set_ca_state(struct sock *sk, const u8 ca_state)
38{
39 struct inet_connection_sock *icsk = inet_csk(sk);
40
41 trace_tcp_cong_state_set(sk, ca_state);
42
43 if (icsk->icsk_ca_ops->set_state)
44 icsk->icsk_ca_ops->set_state(sk, ca_state);
45 icsk->icsk_ca_state = ca_state;
46}
47
48/* Must be called with rcu lock held */
49static struct tcp_congestion_ops *tcp_ca_find_autoload(struct net *net,
50 const char *name)
51{
52 struct tcp_congestion_ops *ca = tcp_ca_find(name);
53
54#ifdef CONFIG_MODULES
55 if (!ca && capable(CAP_NET_ADMIN)) {
56 rcu_read_unlock();
57 request_module("tcp_%s", name);
58 rcu_read_lock();
59 ca = tcp_ca_find(name);
60 }
61#endif
62 return ca;
63}
64
65/* Simple linear search, not much in here. */
66struct tcp_congestion_ops *tcp_ca_find_key(u32 key)
67{
68 struct tcp_congestion_ops *e;
69
70 list_for_each_entry_rcu(e, &tcp_cong_list, list) {
71 if (e->key == key)
72 return e;
73 }
74
75 return NULL;
76}
77
78int tcp_validate_congestion_control(struct tcp_congestion_ops *ca)
79{
80 /* all algorithms must implement these */
81 if (!ca->ssthresh || !ca->undo_cwnd ||
82 !(ca->cong_avoid || ca->cong_control)) {
83 pr_err("%s does not implement required ops\n", ca->name);
84 return -EINVAL;
85 }
86
87 return 0;
88}
89
90/* Attach new congestion control algorithm to the list
91 * of available options.
92 */
93int tcp_register_congestion_control(struct tcp_congestion_ops *ca)
94{
95 int ret;
96
97 ret = tcp_validate_congestion_control(ca);
98 if (ret)
99 return ret;
100
101 ca->key = jhash(ca->name, sizeof(ca->name), strlen(ca->name));
102
103 spin_lock(&tcp_cong_list_lock);
104 if (ca->key == TCP_CA_UNSPEC || tcp_ca_find_key(ca->key)) {
105 pr_notice("%s already registered or non-unique key\n",
106 ca->name);
107 ret = -EEXIST;
108 } else {
109 list_add_tail_rcu(&ca->list, &tcp_cong_list);
110 pr_debug("%s registered\n", ca->name);
111 }
112 spin_unlock(&tcp_cong_list_lock);
113
114 return ret;
115}
116EXPORT_SYMBOL_GPL(tcp_register_congestion_control);
117
118/*
119 * Remove congestion control algorithm, called from
120 * the module's remove function. Module ref counts are used
121 * to ensure that this can't be done till all sockets using
122 * that method are closed.
123 */
124void tcp_unregister_congestion_control(struct tcp_congestion_ops *ca)
125{
126 spin_lock(&tcp_cong_list_lock);
127 list_del_rcu(&ca->list);
128 spin_unlock(&tcp_cong_list_lock);
129
130 /* Wait for outstanding readers to complete before the
131 * module gets removed entirely.
132 *
133 * A try_module_get() should fail by now as our module is
134 * in "going" state since no refs are held anymore and
135 * module_exit() handler being called.
136 */
137 synchronize_rcu();
138}
139EXPORT_SYMBOL_GPL(tcp_unregister_congestion_control);
140
141/* Replace a registered old ca with a new one.
142 *
143 * The new ca must have the same name as the old one, that has been
144 * registered.
145 */
146int tcp_update_congestion_control(struct tcp_congestion_ops *ca, struct tcp_congestion_ops *old_ca)
147{
148 struct tcp_congestion_ops *existing;
149 int ret;
150
151 ret = tcp_validate_congestion_control(ca);
152 if (ret)
153 return ret;
154
155 ca->key = jhash(ca->name, sizeof(ca->name), strlen(ca->name));
156
157 spin_lock(&tcp_cong_list_lock);
158 existing = tcp_ca_find_key(old_ca->key);
159 if (ca->key == TCP_CA_UNSPEC || !existing || strcmp(existing->name, ca->name)) {
160 pr_notice("%s not registered or non-unique key\n",
161 ca->name);
162 ret = -EINVAL;
163 } else if (existing != old_ca) {
164 pr_notice("invalid old congestion control algorithm to replace\n");
165 ret = -EINVAL;
166 } else {
167 /* Add the new one before removing the old one to keep
168 * one implementation available all the time.
169 */
170 list_add_tail_rcu(&ca->list, &tcp_cong_list);
171 list_del_rcu(&existing->list);
172 pr_debug("%s updated\n", ca->name);
173 }
174 spin_unlock(&tcp_cong_list_lock);
175
176 /* Wait for outstanding readers to complete before the
177 * module or struct_ops gets removed entirely.
178 */
179 if (!ret)
180 synchronize_rcu();
181
182 return ret;
183}
184
185u32 tcp_ca_get_key_by_name(struct net *net, const char *name, bool *ecn_ca)
186{
187 const struct tcp_congestion_ops *ca;
188 u32 key = TCP_CA_UNSPEC;
189
190 might_sleep();
191
192 rcu_read_lock();
193 ca = tcp_ca_find_autoload(net, name);
194 if (ca) {
195 key = ca->key;
196 *ecn_ca = ca->flags & TCP_CONG_NEEDS_ECN;
197 }
198 rcu_read_unlock();
199
200 return key;
201}
202
203char *tcp_ca_get_name_by_key(u32 key, char *buffer)
204{
205 const struct tcp_congestion_ops *ca;
206 char *ret = NULL;
207
208 rcu_read_lock();
209 ca = tcp_ca_find_key(key);
210 if (ca)
211 ret = strncpy(buffer, ca->name,
212 TCP_CA_NAME_MAX);
213 rcu_read_unlock();
214
215 return ret;
216}
217
218/* Assign choice of congestion control. */
219void tcp_assign_congestion_control(struct sock *sk)
220{
221 struct net *net = sock_net(sk);
222 struct inet_connection_sock *icsk = inet_csk(sk);
223 const struct tcp_congestion_ops *ca;
224
225 rcu_read_lock();
226 ca = rcu_dereference(net->ipv4.tcp_congestion_control);
227 if (unlikely(!bpf_try_module_get(ca, ca->owner)))
228 ca = &tcp_reno;
229 icsk->icsk_ca_ops = ca;
230 rcu_read_unlock();
231
232 memset(icsk->icsk_ca_priv, 0, sizeof(icsk->icsk_ca_priv));
233 if (ca->flags & TCP_CONG_NEEDS_ECN)
234 INET_ECN_xmit(sk);
235 else
236 INET_ECN_dontxmit(sk);
237}
238
239void tcp_init_congestion_control(struct sock *sk)
240{
241 struct inet_connection_sock *icsk = inet_csk(sk);
242
243 tcp_sk(sk)->prior_ssthresh = 0;
244 if (icsk->icsk_ca_ops->init)
245 icsk->icsk_ca_ops->init(sk);
246 if (tcp_ca_needs_ecn(sk))
247 INET_ECN_xmit(sk);
248 else
249 INET_ECN_dontxmit(sk);
250 icsk->icsk_ca_initialized = 1;
251}
252
253static void tcp_reinit_congestion_control(struct sock *sk,
254 const struct tcp_congestion_ops *ca)
255{
256 struct inet_connection_sock *icsk = inet_csk(sk);
257
258 tcp_cleanup_congestion_control(sk);
259 icsk->icsk_ca_ops = ca;
260 icsk->icsk_ca_setsockopt = 1;
261 memset(icsk->icsk_ca_priv, 0, sizeof(icsk->icsk_ca_priv));
262
263 if (ca->flags & TCP_CONG_NEEDS_ECN)
264 INET_ECN_xmit(sk);
265 else
266 INET_ECN_dontxmit(sk);
267
268 if (!((1 << sk->sk_state) & (TCPF_CLOSE | TCPF_LISTEN)))
269 tcp_init_congestion_control(sk);
270}
271
272/* Manage refcounts on socket close. */
273void tcp_cleanup_congestion_control(struct sock *sk)
274{
275 struct inet_connection_sock *icsk = inet_csk(sk);
276
277 if (icsk->icsk_ca_ops->release)
278 icsk->icsk_ca_ops->release(sk);
279 bpf_module_put(icsk->icsk_ca_ops, icsk->icsk_ca_ops->owner);
280}
281
282/* Used by sysctl to change default congestion control */
283int tcp_set_default_congestion_control(struct net *net, const char *name)
284{
285 struct tcp_congestion_ops *ca;
286 const struct tcp_congestion_ops *prev;
287 int ret;
288
289 rcu_read_lock();
290 ca = tcp_ca_find_autoload(net, name);
291 if (!ca) {
292 ret = -ENOENT;
293 } else if (!bpf_try_module_get(ca, ca->owner)) {
294 ret = -EBUSY;
295 } else if (!net_eq(net, &init_net) &&
296 !(ca->flags & TCP_CONG_NON_RESTRICTED)) {
297 /* Only init netns can set default to a restricted algorithm */
298 ret = -EPERM;
299 } else {
300 prev = xchg(&net->ipv4.tcp_congestion_control, ca);
301 if (prev)
302 bpf_module_put(prev, prev->owner);
303
304 ca->flags |= TCP_CONG_NON_RESTRICTED;
305 ret = 0;
306 }
307 rcu_read_unlock();
308
309 return ret;
310}
311
312/* Set default value from kernel configuration at bootup */
313static int __init tcp_congestion_default(void)
314{
315 return tcp_set_default_congestion_control(&init_net,
316 CONFIG_DEFAULT_TCP_CONG);
317}
318late_initcall(tcp_congestion_default);
319
320/* Build string with list of available congestion control values */
321void tcp_get_available_congestion_control(char *buf, size_t maxlen)
322{
323 struct tcp_congestion_ops *ca;
324 size_t offs = 0;
325
326 rcu_read_lock();
327 list_for_each_entry_rcu(ca, &tcp_cong_list, list) {
328 offs += snprintf(buf + offs, maxlen - offs,
329 "%s%s",
330 offs == 0 ? "" : " ", ca->name);
331
332 if (WARN_ON_ONCE(offs >= maxlen))
333 break;
334 }
335 rcu_read_unlock();
336}
337
338/* Get current default congestion control */
339void tcp_get_default_congestion_control(struct net *net, char *name)
340{
341 const struct tcp_congestion_ops *ca;
342
343 rcu_read_lock();
344 ca = rcu_dereference(net->ipv4.tcp_congestion_control);
345 strncpy(name, ca->name, TCP_CA_NAME_MAX);
346 rcu_read_unlock();
347}
348
349/* Built list of non-restricted congestion control values */
350void tcp_get_allowed_congestion_control(char *buf, size_t maxlen)
351{
352 struct tcp_congestion_ops *ca;
353 size_t offs = 0;
354
355 *buf = '\0';
356 rcu_read_lock();
357 list_for_each_entry_rcu(ca, &tcp_cong_list, list) {
358 if (!(ca->flags & TCP_CONG_NON_RESTRICTED))
359 continue;
360 offs += snprintf(buf + offs, maxlen - offs,
361 "%s%s",
362 offs == 0 ? "" : " ", ca->name);
363
364 if (WARN_ON_ONCE(offs >= maxlen))
365 break;
366 }
367 rcu_read_unlock();
368}
369
370/* Change list of non-restricted congestion control */
371int tcp_set_allowed_congestion_control(char *val)
372{
373 struct tcp_congestion_ops *ca;
374 char *saved_clone, *clone, *name;
375 int ret = 0;
376
377 saved_clone = clone = kstrdup(val, GFP_USER);
378 if (!clone)
379 return -ENOMEM;
380
381 spin_lock(&tcp_cong_list_lock);
382 /* pass 1 check for bad entries */
383 while ((name = strsep(&clone, " ")) && *name) {
384 ca = tcp_ca_find(name);
385 if (!ca) {
386 ret = -ENOENT;
387 goto out;
388 }
389 }
390
391 /* pass 2 clear old values */
392 list_for_each_entry_rcu(ca, &tcp_cong_list, list)
393 ca->flags &= ~TCP_CONG_NON_RESTRICTED;
394
395 /* pass 3 mark as allowed */
396 while ((name = strsep(&val, " ")) && *name) {
397 ca = tcp_ca_find(name);
398 WARN_ON(!ca);
399 if (ca)
400 ca->flags |= TCP_CONG_NON_RESTRICTED;
401 }
402out:
403 spin_unlock(&tcp_cong_list_lock);
404 kfree(saved_clone);
405
406 return ret;
407}
408
409/* Change congestion control for socket. If load is false, then it is the
410 * responsibility of the caller to call tcp_init_congestion_control or
411 * tcp_reinit_congestion_control (if the current congestion control was
412 * already initialized.
413 */
414int tcp_set_congestion_control(struct sock *sk, const char *name, bool load,
415 bool cap_net_admin)
416{
417 struct inet_connection_sock *icsk = inet_csk(sk);
418 const struct tcp_congestion_ops *ca;
419 int err = 0;
420
421 if (icsk->icsk_ca_dst_locked)
422 return -EPERM;
423
424 rcu_read_lock();
425 if (!load)
426 ca = tcp_ca_find(name);
427 else
428 ca = tcp_ca_find_autoload(sock_net(sk), name);
429
430 /* No change asking for existing value */
431 if (ca == icsk->icsk_ca_ops) {
432 icsk->icsk_ca_setsockopt = 1;
433 goto out;
434 }
435
436 if (!ca)
437 err = -ENOENT;
438 else if (!((ca->flags & TCP_CONG_NON_RESTRICTED) || cap_net_admin))
439 err = -EPERM;
440 else if (!bpf_try_module_get(ca, ca->owner))
441 err = -EBUSY;
442 else
443 tcp_reinit_congestion_control(sk, ca);
444 out:
445 rcu_read_unlock();
446 return err;
447}
448
449/* Slow start is used when congestion window is no greater than the slow start
450 * threshold. We base on RFC2581 and also handle stretch ACKs properly.
451 * We do not implement RFC3465 Appropriate Byte Counting (ABC) per se but
452 * something better;) a packet is only considered (s)acked in its entirety to
453 * defend the ACK attacks described in the RFC. Slow start processes a stretch
454 * ACK of degree N as if N acks of degree 1 are received back to back except
455 * ABC caps N to 2. Slow start exits when cwnd grows over ssthresh and
456 * returns the leftover acks to adjust cwnd in congestion avoidance mode.
457 */
458__bpf_kfunc u32 tcp_slow_start(struct tcp_sock *tp, u32 acked)
459{
460 u32 cwnd = min(tcp_snd_cwnd(tp) + acked, tp->snd_ssthresh);
461
462 acked -= cwnd - tcp_snd_cwnd(tp);
463 tcp_snd_cwnd_set(tp, min(cwnd, tp->snd_cwnd_clamp));
464
465 return acked;
466}
467EXPORT_SYMBOL_GPL(tcp_slow_start);
468
469/* In theory this is tp->snd_cwnd += 1 / tp->snd_cwnd (or alternative w),
470 * for every packet that was ACKed.
471 */
472__bpf_kfunc void tcp_cong_avoid_ai(struct tcp_sock *tp, u32 w, u32 acked)
473{
474 /* If credits accumulated at a higher w, apply them gently now. */
475 if (tp->snd_cwnd_cnt >= w) {
476 tp->snd_cwnd_cnt = 0;
477 tcp_snd_cwnd_set(tp, tcp_snd_cwnd(tp) + 1);
478 }
479
480 tp->snd_cwnd_cnt += acked;
481 if (tp->snd_cwnd_cnt >= w) {
482 u32 delta = tp->snd_cwnd_cnt / w;
483
484 tp->snd_cwnd_cnt -= delta * w;
485 tcp_snd_cwnd_set(tp, tcp_snd_cwnd(tp) + delta);
486 }
487 tcp_snd_cwnd_set(tp, min(tcp_snd_cwnd(tp), tp->snd_cwnd_clamp));
488}
489EXPORT_SYMBOL_GPL(tcp_cong_avoid_ai);
490
491/*
492 * TCP Reno congestion control
493 * This is special case used for fallback as well.
494 */
495/* This is Jacobson's slow start and congestion avoidance.
496 * SIGCOMM '88, p. 328.
497 */
498__bpf_kfunc void tcp_reno_cong_avoid(struct sock *sk, u32 ack, u32 acked)
499{
500 struct tcp_sock *tp = tcp_sk(sk);
501
502 if (!tcp_is_cwnd_limited(sk))
503 return;
504
505 /* In "safe" area, increase. */
506 if (tcp_in_slow_start(tp)) {
507 acked = tcp_slow_start(tp, acked);
508 if (!acked)
509 return;
510 }
511 /* In dangerous area, increase slowly. */
512 tcp_cong_avoid_ai(tp, tcp_snd_cwnd(tp), acked);
513}
514EXPORT_SYMBOL_GPL(tcp_reno_cong_avoid);
515
516/* Slow start threshold is half the congestion window (min 2) */
517__bpf_kfunc u32 tcp_reno_ssthresh(struct sock *sk)
518{
519 const struct tcp_sock *tp = tcp_sk(sk);
520
521 return max(tcp_snd_cwnd(tp) >> 1U, 2U);
522}
523EXPORT_SYMBOL_GPL(tcp_reno_ssthresh);
524
525__bpf_kfunc u32 tcp_reno_undo_cwnd(struct sock *sk)
526{
527 const struct tcp_sock *tp = tcp_sk(sk);
528
529 return max(tcp_snd_cwnd(tp), tp->prior_cwnd);
530}
531EXPORT_SYMBOL_GPL(tcp_reno_undo_cwnd);
532
533struct tcp_congestion_ops tcp_reno = {
534 .flags = TCP_CONG_NON_RESTRICTED,
535 .name = "reno",
536 .owner = THIS_MODULE,
537 .ssthresh = tcp_reno_ssthresh,
538 .cong_avoid = tcp_reno_cong_avoid,
539 .undo_cwnd = tcp_reno_undo_cwnd,
540};