Loading...
1/* SPDX-License-Identifier: GPL-2.0 */
2#ifndef __NETNS_CONNTRACK_H
3#define __NETNS_CONNTRACK_H
4
5#include <linux/list.h>
6#include <linux/list_nulls.h>
7#include <linux/atomic.h>
8#include <linux/workqueue.h>
9#include <linux/netfilter/nf_conntrack_tcp.h>
10#ifdef CONFIG_NF_CT_PROTO_DCCP
11#include <linux/netfilter/nf_conntrack_dccp.h>
12#endif
13#ifdef CONFIG_NF_CT_PROTO_SCTP
14#include <linux/netfilter/nf_conntrack_sctp.h>
15#endif
16#include <linux/seqlock.h>
17
18struct ctl_table_header;
19struct nf_conntrack_ecache;
20
21struct nf_generic_net {
22 unsigned int timeout;
23};
24
25struct nf_tcp_net {
26 unsigned int timeouts[TCP_CONNTRACK_TIMEOUT_MAX];
27 int tcp_loose;
28 int tcp_be_liberal;
29 int tcp_max_retrans;
30};
31
32enum udp_conntrack {
33 UDP_CT_UNREPLIED,
34 UDP_CT_REPLIED,
35 UDP_CT_MAX
36};
37
38struct nf_udp_net {
39 unsigned int timeouts[UDP_CT_MAX];
40};
41
42struct nf_icmp_net {
43 unsigned int timeout;
44};
45
46#ifdef CONFIG_NF_CT_PROTO_DCCP
47struct nf_dccp_net {
48 int dccp_loose;
49 unsigned int dccp_timeout[CT_DCCP_MAX + 1];
50};
51#endif
52
53#ifdef CONFIG_NF_CT_PROTO_SCTP
54struct nf_sctp_net {
55 unsigned int timeouts[SCTP_CONNTRACK_MAX];
56};
57#endif
58
59#ifdef CONFIG_NF_CT_PROTO_GRE
60enum gre_conntrack {
61 GRE_CT_UNREPLIED,
62 GRE_CT_REPLIED,
63 GRE_CT_MAX
64};
65
66struct nf_gre_net {
67 struct list_head keymap_list;
68 unsigned int timeouts[GRE_CT_MAX];
69};
70#endif
71
72struct nf_ip_net {
73 struct nf_generic_net generic;
74 struct nf_tcp_net tcp;
75 struct nf_udp_net udp;
76 struct nf_icmp_net icmp;
77 struct nf_icmp_net icmpv6;
78#ifdef CONFIG_NF_CT_PROTO_DCCP
79 struct nf_dccp_net dccp;
80#endif
81#ifdef CONFIG_NF_CT_PROTO_SCTP
82 struct nf_sctp_net sctp;
83#endif
84#ifdef CONFIG_NF_CT_PROTO_GRE
85 struct nf_gre_net gre;
86#endif
87};
88
89struct ct_pcpu {
90 spinlock_t lock;
91 struct hlist_nulls_head unconfirmed;
92 struct hlist_nulls_head dying;
93};
94
95struct netns_ct {
96 atomic_t count;
97 unsigned int expect_count;
98#ifdef CONFIG_NF_CONNTRACK_EVENTS
99 struct delayed_work ecache_dwork;
100 bool ecache_dwork_pending;
101#endif
102 bool auto_assign_helper_warned;
103#ifdef CONFIG_SYSCTL
104 struct ctl_table_header *sysctl_header;
105#endif
106 unsigned int sysctl_log_invalid; /* Log invalid packets */
107 int sysctl_events;
108 int sysctl_acct;
109 int sysctl_auto_assign_helper;
110 int sysctl_tstamp;
111 int sysctl_checksum;
112
113 struct ct_pcpu __percpu *pcpu_lists;
114 struct ip_conntrack_stat __percpu *stat;
115 struct nf_ct_event_notifier __rcu *nf_conntrack_event_cb;
116 struct nf_exp_event_notifier __rcu *nf_expect_event_cb;
117 struct nf_ip_net nf_ct_proto;
118#if defined(CONFIG_NF_CONNTRACK_LABELS)
119 unsigned int labels_used;
120#endif
121};
122#endif
1#ifndef __NETNS_CONNTRACK_H
2#define __NETNS_CONNTRACK_H
3
4#include <linux/list.h>
5#include <linux/list_nulls.h>
6#include <linux/atomic.h>
7#include <linux/netfilter/nf_conntrack_tcp.h>
8#include <linux/seqlock.h>
9
10struct ctl_table_header;
11struct nf_conntrack_ecache;
12
13struct nf_proto_net {
14#ifdef CONFIG_SYSCTL
15 struct ctl_table_header *ctl_table_header;
16 struct ctl_table *ctl_table;
17#ifdef CONFIG_NF_CONNTRACK_PROC_COMPAT
18 struct ctl_table_header *ctl_compat_header;
19 struct ctl_table *ctl_compat_table;
20#endif
21#endif
22 unsigned int users;
23};
24
25struct nf_generic_net {
26 struct nf_proto_net pn;
27 unsigned int timeout;
28};
29
30struct nf_tcp_net {
31 struct nf_proto_net pn;
32 unsigned int timeouts[TCP_CONNTRACK_TIMEOUT_MAX];
33 unsigned int tcp_loose;
34 unsigned int tcp_be_liberal;
35 unsigned int tcp_max_retrans;
36};
37
38enum udp_conntrack {
39 UDP_CT_UNREPLIED,
40 UDP_CT_REPLIED,
41 UDP_CT_MAX
42};
43
44struct nf_udp_net {
45 struct nf_proto_net pn;
46 unsigned int timeouts[UDP_CT_MAX];
47};
48
49struct nf_icmp_net {
50 struct nf_proto_net pn;
51 unsigned int timeout;
52};
53
54struct nf_ip_net {
55 struct nf_generic_net generic;
56 struct nf_tcp_net tcp;
57 struct nf_udp_net udp;
58 struct nf_icmp_net icmp;
59 struct nf_icmp_net icmpv6;
60#if defined(CONFIG_SYSCTL) && defined(CONFIG_NF_CONNTRACK_PROC_COMPAT)
61 struct ctl_table_header *ctl_table_header;
62 struct ctl_table *ctl_table;
63#endif
64};
65
66struct ct_pcpu {
67 spinlock_t lock;
68 struct hlist_nulls_head unconfirmed;
69 struct hlist_nulls_head dying;
70 struct hlist_nulls_head tmpl;
71};
72
73struct netns_ct {
74 atomic_t count;
75 unsigned int expect_count;
76#ifdef CONFIG_SYSCTL
77 struct ctl_table_header *sysctl_header;
78 struct ctl_table_header *acct_sysctl_header;
79 struct ctl_table_header *tstamp_sysctl_header;
80 struct ctl_table_header *event_sysctl_header;
81 struct ctl_table_header *helper_sysctl_header;
82#endif
83 char *slabname;
84 unsigned int sysctl_log_invalid; /* Log invalid packets */
85 unsigned int sysctl_events_retry_timeout;
86 int sysctl_events;
87 int sysctl_acct;
88 int sysctl_auto_assign_helper;
89 bool auto_assign_helper_warned;
90 int sysctl_tstamp;
91 int sysctl_checksum;
92
93 unsigned int htable_size;
94 seqcount_t generation;
95 struct kmem_cache *nf_conntrack_cachep;
96 struct hlist_nulls_head *hash;
97 struct hlist_head *expect_hash;
98 struct ct_pcpu __percpu *pcpu_lists;
99 struct ip_conntrack_stat __percpu *stat;
100 struct nf_ct_event_notifier __rcu *nf_conntrack_event_cb;
101 struct nf_exp_event_notifier __rcu *nf_expect_event_cb;
102 struct nf_ip_net nf_ct_proto;
103#if defined(CONFIG_NF_CONNTRACK_LABELS)
104 unsigned int labels_used;
105 u8 label_words;
106#endif
107#ifdef CONFIG_NF_NAT_NEEDED
108 struct hlist_head *nat_bysource;
109 unsigned int nat_htable_size;
110#endif
111};
112#endif