Loading...
1/* SPDX-License-Identifier: GPL-2.0-or-later */
2/*
3 * Linux ethernet bridge
4 *
5 * Authors:
6 * Lennert Buytenhek <buytenh@gnu.org>
7 */
8
9#ifndef _BR_PRIVATE_H
10#define _BR_PRIVATE_H
11
12#include <linux/netdevice.h>
13#include <linux/if_bridge.h>
14#include <linux/netpoll.h>
15#include <linux/u64_stats_sync.h>
16#include <net/route.h>
17#include <net/ip6_fib.h>
18#include <linux/if_vlan.h>
19#include <linux/rhashtable.h>
20#include <linux/refcount.h>
21
22#define BR_HASH_BITS 8
23#define BR_HASH_SIZE (1 << BR_HASH_BITS)
24
25#define BR_HOLD_TIME (1*HZ)
26
27#define BR_PORT_BITS 10
28#define BR_MAX_PORTS (1<<BR_PORT_BITS)
29
30#define BR_MULTICAST_DEFAULT_HASH_MAX 4096
31
32#define BR_VERSION "2.3"
33
34/* Control of forwarding link local multicast */
35#define BR_GROUPFWD_DEFAULT 0
36/* Don't allow forwarding of control protocols like STP, MAC PAUSE and LACP */
37enum {
38 BR_GROUPFWD_STP = BIT(0),
39 BR_GROUPFWD_MACPAUSE = BIT(1),
40 BR_GROUPFWD_LACP = BIT(2),
41};
42
43#define BR_GROUPFWD_RESTRICTED (BR_GROUPFWD_STP | BR_GROUPFWD_MACPAUSE | \
44 BR_GROUPFWD_LACP)
45/* The Nearest Customer Bridge Group Address, 01-80-C2-00-00-[00,0B,0C,0D,0F] */
46#define BR_GROUPFWD_8021AD 0xB801u
47
48/* Path to usermode spanning tree program */
49#define BR_STP_PROG "/sbin/bridge-stp"
50
51#define BR_FDB_NOTIFY_SETTABLE_BITS (FDB_NOTIFY_BIT | FDB_NOTIFY_INACTIVE_BIT)
52
53typedef struct bridge_id bridge_id;
54typedef struct mac_addr mac_addr;
55typedef __u16 port_id;
56
57struct bridge_id {
58 unsigned char prio[2];
59 unsigned char addr[ETH_ALEN];
60};
61
62struct mac_addr {
63 unsigned char addr[ETH_ALEN];
64};
65
66#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
67/* our own querier */
68struct bridge_mcast_own_query {
69 struct timer_list timer;
70 u32 startup_sent;
71};
72
73/* other querier */
74struct bridge_mcast_other_query {
75 struct timer_list timer;
76 unsigned long delay_time;
77};
78
79/* selected querier */
80struct bridge_mcast_querier {
81 struct br_ip addr;
82 struct net_bridge_port __rcu *port;
83};
84
85/* IGMP/MLD statistics */
86struct bridge_mcast_stats {
87 struct br_mcast_stats mstats;
88 struct u64_stats_sync syncp;
89};
90#endif
91
92struct br_vlan_stats {
93 u64 rx_bytes;
94 u64 rx_packets;
95 u64 tx_bytes;
96 u64 tx_packets;
97 struct u64_stats_sync syncp;
98};
99
100struct br_tunnel_info {
101 __be64 tunnel_id;
102 struct metadata_dst *tunnel_dst;
103};
104
105/* private vlan flags */
106enum {
107 BR_VLFLAG_PER_PORT_STATS = BIT(0),
108 BR_VLFLAG_ADDED_BY_SWITCHDEV = BIT(1),
109};
110
111/**
112 * struct net_bridge_vlan - per-vlan entry
113 *
114 * @vnode: rhashtable member
115 * @vid: VLAN id
116 * @flags: bridge vlan flags
117 * @priv_flags: private (in-kernel) bridge vlan flags
118 * @state: STP state (e.g. blocking, learning, forwarding)
119 * @stats: per-cpu VLAN statistics
120 * @br: if MASTER flag set, this points to a bridge struct
121 * @port: if MASTER flag unset, this points to a port struct
122 * @refcnt: if MASTER flag set, this is bumped for each port referencing it
123 * @brvlan: if MASTER flag unset, this points to the global per-VLAN context
124 * for this VLAN entry
125 * @vlist: sorted list of VLAN entries
126 * @rcu: used for entry destruction
127 *
128 * This structure is shared between the global per-VLAN entries contained in
129 * the bridge rhashtable and the local per-port per-VLAN entries contained in
130 * the port's rhashtable. The union entries should be interpreted depending on
131 * the entry flags that are set.
132 */
133struct net_bridge_vlan {
134 struct rhash_head vnode;
135 struct rhash_head tnode;
136 u16 vid;
137 u16 flags;
138 u16 priv_flags;
139 u8 state;
140 struct br_vlan_stats __percpu *stats;
141 union {
142 struct net_bridge *br;
143 struct net_bridge_port *port;
144 };
145 union {
146 refcount_t refcnt;
147 struct net_bridge_vlan *brvlan;
148 };
149
150 struct br_tunnel_info tinfo;
151
152 struct list_head vlist;
153
154 struct rcu_head rcu;
155};
156
157/**
158 * struct net_bridge_vlan_group
159 *
160 * @vlan_hash: VLAN entry rhashtable
161 * @vlan_list: sorted VLAN entry list
162 * @num_vlans: number of total VLAN entries
163 * @pvid: PVID VLAN id
164 * @pvid_state: PVID's STP state (e.g. forwarding, learning, blocking)
165 *
166 * IMPORTANT: Be careful when checking if there're VLAN entries using list
167 * primitives because the bridge can have entries in its list which
168 * are just for global context but not for filtering, i.e. they have
169 * the master flag set but not the brentry flag. If you have to check
170 * if there're "real" entries in the bridge please test @num_vlans
171 */
172struct net_bridge_vlan_group {
173 struct rhashtable vlan_hash;
174 struct rhashtable tunnel_hash;
175 struct list_head vlan_list;
176 u16 num_vlans;
177 u16 pvid;
178 u8 pvid_state;
179};
180
181/* bridge fdb flags */
182enum {
183 BR_FDB_LOCAL,
184 BR_FDB_STATIC,
185 BR_FDB_STICKY,
186 BR_FDB_ADDED_BY_USER,
187 BR_FDB_ADDED_BY_EXT_LEARN,
188 BR_FDB_OFFLOADED,
189 BR_FDB_NOTIFY,
190 BR_FDB_NOTIFY_INACTIVE
191};
192
193struct net_bridge_fdb_key {
194 mac_addr addr;
195 u16 vlan_id;
196};
197
198struct net_bridge_fdb_entry {
199 struct rhash_head rhnode;
200 struct net_bridge_port *dst;
201
202 struct net_bridge_fdb_key key;
203 struct hlist_node fdb_node;
204 unsigned long flags;
205
206 /* write-heavy members should not affect lookups */
207 unsigned long updated ____cacheline_aligned_in_smp;
208 unsigned long used;
209
210 struct rcu_head rcu;
211};
212
213#define MDB_PG_FLAGS_PERMANENT BIT(0)
214#define MDB_PG_FLAGS_OFFLOAD BIT(1)
215#define MDB_PG_FLAGS_FAST_LEAVE BIT(2)
216
217struct net_bridge_port_group {
218 struct net_bridge_port *port;
219 struct net_bridge_port_group __rcu *next;
220 struct hlist_node mglist;
221 struct rcu_head rcu;
222 struct timer_list timer;
223 struct br_ip addr;
224 unsigned char eth_addr[ETH_ALEN] __aligned(2);
225 unsigned char flags;
226};
227
228struct net_bridge_mdb_entry {
229 struct rhash_head rhnode;
230 struct net_bridge *br;
231 struct net_bridge_port_group __rcu *ports;
232 struct rcu_head rcu;
233 struct timer_list timer;
234 struct br_ip addr;
235 bool host_joined;
236 struct hlist_node mdb_node;
237};
238
239struct net_bridge_port {
240 struct net_bridge *br;
241 struct net_device *dev;
242 struct list_head list;
243
244 unsigned long flags;
245#ifdef CONFIG_BRIDGE_VLAN_FILTERING
246 struct net_bridge_vlan_group __rcu *vlgrp;
247#endif
248 struct net_bridge_port __rcu *backup_port;
249
250 /* STP */
251 u8 priority;
252 u8 state;
253 u16 port_no;
254 unsigned char topology_change_ack;
255 unsigned char config_pending;
256 port_id port_id;
257 port_id designated_port;
258 bridge_id designated_root;
259 bridge_id designated_bridge;
260 u32 path_cost;
261 u32 designated_cost;
262 unsigned long designated_age;
263
264 struct timer_list forward_delay_timer;
265 struct timer_list hold_timer;
266 struct timer_list message_age_timer;
267 struct kobject kobj;
268 struct rcu_head rcu;
269
270#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
271 struct bridge_mcast_own_query ip4_own_query;
272#if IS_ENABLED(CONFIG_IPV6)
273 struct bridge_mcast_own_query ip6_own_query;
274#endif /* IS_ENABLED(CONFIG_IPV6) */
275 unsigned char multicast_router;
276 struct bridge_mcast_stats __percpu *mcast_stats;
277 struct timer_list multicast_router_timer;
278 struct hlist_head mglist;
279 struct hlist_node rlist;
280#endif
281
282#ifdef CONFIG_SYSFS
283 char sysfs_name[IFNAMSIZ];
284#endif
285
286#ifdef CONFIG_NET_POLL_CONTROLLER
287 struct netpoll *np;
288#endif
289#ifdef CONFIG_NET_SWITCHDEV
290 int offload_fwd_mark;
291#endif
292 u16 group_fwd_mask;
293 u16 backup_redirected_cnt;
294
295 struct bridge_stp_xstats stp_xstats;
296};
297
298#define kobj_to_brport(obj) container_of(obj, struct net_bridge_port, kobj)
299
300#define br_auto_port(p) ((p)->flags & BR_AUTO_MASK)
301#define br_promisc_port(p) ((p)->flags & BR_PROMISC)
302
303static inline struct net_bridge_port *br_port_get_rcu(const struct net_device *dev)
304{
305 return rcu_dereference(dev->rx_handler_data);
306}
307
308static inline struct net_bridge_port *br_port_get_rtnl(const struct net_device *dev)
309{
310 return netif_is_bridge_port(dev) ?
311 rtnl_dereference(dev->rx_handler_data) : NULL;
312}
313
314static inline struct net_bridge_port *br_port_get_rtnl_rcu(const struct net_device *dev)
315{
316 return netif_is_bridge_port(dev) ?
317 rcu_dereference_rtnl(dev->rx_handler_data) : NULL;
318}
319
320enum net_bridge_opts {
321 BROPT_VLAN_ENABLED,
322 BROPT_VLAN_STATS_ENABLED,
323 BROPT_NF_CALL_IPTABLES,
324 BROPT_NF_CALL_IP6TABLES,
325 BROPT_NF_CALL_ARPTABLES,
326 BROPT_GROUP_ADDR_SET,
327 BROPT_MULTICAST_ENABLED,
328 BROPT_MULTICAST_QUERIER,
329 BROPT_MULTICAST_QUERY_USE_IFADDR,
330 BROPT_MULTICAST_STATS_ENABLED,
331 BROPT_HAS_IPV6_ADDR,
332 BROPT_NEIGH_SUPPRESS_ENABLED,
333 BROPT_MTU_SET_BY_USER,
334 BROPT_VLAN_STATS_PER_PORT,
335 BROPT_NO_LL_LEARN,
336 BROPT_VLAN_BRIDGE_BINDING,
337};
338
339struct net_bridge {
340 spinlock_t lock;
341 spinlock_t hash_lock;
342 struct list_head port_list;
343 struct net_device *dev;
344 struct pcpu_sw_netstats __percpu *stats;
345 unsigned long options;
346 /* These fields are accessed on each packet */
347#ifdef CONFIG_BRIDGE_VLAN_FILTERING
348 __be16 vlan_proto;
349 u16 default_pvid;
350 struct net_bridge_vlan_group __rcu *vlgrp;
351#endif
352
353 struct rhashtable fdb_hash_tbl;
354#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
355 union {
356 struct rtable fake_rtable;
357 struct rt6_info fake_rt6_info;
358 };
359#endif
360 u16 group_fwd_mask;
361 u16 group_fwd_mask_required;
362
363 /* STP */
364 bridge_id designated_root;
365 bridge_id bridge_id;
366 unsigned char topology_change;
367 unsigned char topology_change_detected;
368 u16 root_port;
369 unsigned long max_age;
370 unsigned long hello_time;
371 unsigned long forward_delay;
372 unsigned long ageing_time;
373 unsigned long bridge_max_age;
374 unsigned long bridge_hello_time;
375 unsigned long bridge_forward_delay;
376 unsigned long bridge_ageing_time;
377 u32 root_path_cost;
378
379 u8 group_addr[ETH_ALEN];
380
381 enum {
382 BR_NO_STP, /* no spanning tree */
383 BR_KERNEL_STP, /* old STP in kernel */
384 BR_USER_STP, /* new RSTP in userspace */
385 } stp_enabled;
386
387#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
388
389 u32 hash_max;
390
391 u32 multicast_last_member_count;
392 u32 multicast_startup_query_count;
393
394 u8 multicast_igmp_version;
395 u8 multicast_router;
396#if IS_ENABLED(CONFIG_IPV6)
397 u8 multicast_mld_version;
398#endif
399 spinlock_t multicast_lock;
400 unsigned long multicast_last_member_interval;
401 unsigned long multicast_membership_interval;
402 unsigned long multicast_querier_interval;
403 unsigned long multicast_query_interval;
404 unsigned long multicast_query_response_interval;
405 unsigned long multicast_startup_query_interval;
406
407 struct rhashtable mdb_hash_tbl;
408
409 struct hlist_head mdb_list;
410 struct hlist_head router_list;
411
412 struct timer_list multicast_router_timer;
413 struct bridge_mcast_other_query ip4_other_query;
414 struct bridge_mcast_own_query ip4_own_query;
415 struct bridge_mcast_querier ip4_querier;
416 struct bridge_mcast_stats __percpu *mcast_stats;
417#if IS_ENABLED(CONFIG_IPV6)
418 struct bridge_mcast_other_query ip6_other_query;
419 struct bridge_mcast_own_query ip6_own_query;
420 struct bridge_mcast_querier ip6_querier;
421#endif /* IS_ENABLED(CONFIG_IPV6) */
422#endif
423
424 struct timer_list hello_timer;
425 struct timer_list tcn_timer;
426 struct timer_list topology_change_timer;
427 struct delayed_work gc_work;
428 struct kobject *ifobj;
429 u32 auto_cnt;
430
431#ifdef CONFIG_NET_SWITCHDEV
432 int offload_fwd_mark;
433#endif
434 struct hlist_head fdb_list;
435
436#if IS_ENABLED(CONFIG_BRIDGE_MRP)
437 struct list_head mrp_list;
438#endif
439};
440
441struct br_input_skb_cb {
442 struct net_device *brdev;
443
444 u16 frag_max_size;
445#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
446 u8 igmp;
447 u8 mrouters_only:1;
448#endif
449 u8 proxyarp_replied:1;
450 u8 src_port_isolated:1;
451#ifdef CONFIG_BRIDGE_VLAN_FILTERING
452 u8 vlan_filtered:1;
453#endif
454#ifdef CONFIG_NETFILTER_FAMILY_BRIDGE
455 u8 br_netfilter_broute:1;
456#endif
457
458#ifdef CONFIG_NET_SWITCHDEV
459 int offload_fwd_mark;
460#endif
461};
462
463#define BR_INPUT_SKB_CB(__skb) ((struct br_input_skb_cb *)(__skb)->cb)
464
465#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
466# define BR_INPUT_SKB_CB_MROUTERS_ONLY(__skb) (BR_INPUT_SKB_CB(__skb)->mrouters_only)
467#else
468# define BR_INPUT_SKB_CB_MROUTERS_ONLY(__skb) (0)
469#endif
470
471#define br_printk(level, br, format, args...) \
472 printk(level "%s: " format, (br)->dev->name, ##args)
473
474#define br_err(__br, format, args...) \
475 br_printk(KERN_ERR, __br, format, ##args)
476#define br_warn(__br, format, args...) \
477 br_printk(KERN_WARNING, __br, format, ##args)
478#define br_notice(__br, format, args...) \
479 br_printk(KERN_NOTICE, __br, format, ##args)
480#define br_info(__br, format, args...) \
481 br_printk(KERN_INFO, __br, format, ##args)
482
483#define br_debug(br, format, args...) \
484 pr_debug("%s: " format, (br)->dev->name, ##args)
485
486/* called under bridge lock */
487static inline int br_is_root_bridge(const struct net_bridge *br)
488{
489 return !memcmp(&br->bridge_id, &br->designated_root, 8);
490}
491
492/* check if a VLAN entry is global */
493static inline bool br_vlan_is_master(const struct net_bridge_vlan *v)
494{
495 return v->flags & BRIDGE_VLAN_INFO_MASTER;
496}
497
498/* check if a VLAN entry is used by the bridge */
499static inline bool br_vlan_is_brentry(const struct net_bridge_vlan *v)
500{
501 return v->flags & BRIDGE_VLAN_INFO_BRENTRY;
502}
503
504/* check if we should use the vlan entry, returns false if it's only context */
505static inline bool br_vlan_should_use(const struct net_bridge_vlan *v)
506{
507 if (br_vlan_is_master(v)) {
508 if (br_vlan_is_brentry(v))
509 return true;
510 else
511 return false;
512 }
513
514 return true;
515}
516
517static inline bool nbp_state_should_learn(const struct net_bridge_port *p)
518{
519 return p->state == BR_STATE_LEARNING || p->state == BR_STATE_FORWARDING;
520}
521
522static inline bool br_vlan_valid_id(u16 vid, struct netlink_ext_ack *extack)
523{
524 bool ret = vid > 0 && vid < VLAN_VID_MASK;
525
526 if (!ret)
527 NL_SET_ERR_MSG_MOD(extack, "Vlan id is invalid");
528
529 return ret;
530}
531
532static inline bool br_vlan_valid_range(const struct bridge_vlan_info *cur,
533 const struct bridge_vlan_info *last,
534 struct netlink_ext_ack *extack)
535{
536 /* pvid flag is not allowed in ranges */
537 if (cur->flags & BRIDGE_VLAN_INFO_PVID) {
538 NL_SET_ERR_MSG_MOD(extack, "Pvid isn't allowed in a range");
539 return false;
540 }
541
542 /* when cur is the range end, check if:
543 * - it has range start flag
544 * - range ids are invalid (end is equal to or before start)
545 */
546 if (last) {
547 if (cur->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
548 NL_SET_ERR_MSG_MOD(extack, "Found a new vlan range start while processing one");
549 return false;
550 } else if (!(cur->flags & BRIDGE_VLAN_INFO_RANGE_END)) {
551 NL_SET_ERR_MSG_MOD(extack, "Vlan range end flag is missing");
552 return false;
553 } else if (cur->vid <= last->vid) {
554 NL_SET_ERR_MSG_MOD(extack, "End vlan id is less than or equal to start vlan id");
555 return false;
556 }
557 }
558
559 /* check for required range flags */
560 if (!(cur->flags & (BRIDGE_VLAN_INFO_RANGE_BEGIN |
561 BRIDGE_VLAN_INFO_RANGE_END))) {
562 NL_SET_ERR_MSG_MOD(extack, "Both vlan range flags are missing");
563 return false;
564 }
565
566 return true;
567}
568
569static inline int br_afspec_cmd_to_rtm(int cmd)
570{
571 switch (cmd) {
572 case RTM_SETLINK:
573 return RTM_NEWVLAN;
574 case RTM_DELLINK:
575 return RTM_DELVLAN;
576 }
577
578 return 0;
579}
580
581static inline int br_opt_get(const struct net_bridge *br,
582 enum net_bridge_opts opt)
583{
584 return test_bit(opt, &br->options);
585}
586
587int br_boolopt_toggle(struct net_bridge *br, enum br_boolopt_id opt, bool on,
588 struct netlink_ext_ack *extack);
589int br_boolopt_get(const struct net_bridge *br, enum br_boolopt_id opt);
590int br_boolopt_multi_toggle(struct net_bridge *br,
591 struct br_boolopt_multi *bm,
592 struct netlink_ext_ack *extack);
593void br_boolopt_multi_get(const struct net_bridge *br,
594 struct br_boolopt_multi *bm);
595void br_opt_toggle(struct net_bridge *br, enum net_bridge_opts opt, bool on);
596
597/* br_device.c */
598void br_dev_setup(struct net_device *dev);
599void br_dev_delete(struct net_device *dev, struct list_head *list);
600netdev_tx_t br_dev_xmit(struct sk_buff *skb, struct net_device *dev);
601#ifdef CONFIG_NET_POLL_CONTROLLER
602static inline void br_netpoll_send_skb(const struct net_bridge_port *p,
603 struct sk_buff *skb)
604{
605 netpoll_send_skb(p->np, skb);
606}
607
608int br_netpoll_enable(struct net_bridge_port *p);
609void br_netpoll_disable(struct net_bridge_port *p);
610#else
611static inline void br_netpoll_send_skb(const struct net_bridge_port *p,
612 struct sk_buff *skb)
613{
614}
615
616static inline int br_netpoll_enable(struct net_bridge_port *p)
617{
618 return 0;
619}
620
621static inline void br_netpoll_disable(struct net_bridge_port *p)
622{
623}
624#endif
625
626/* br_fdb.c */
627int br_fdb_init(void);
628void br_fdb_fini(void);
629int br_fdb_hash_init(struct net_bridge *br);
630void br_fdb_hash_fini(struct net_bridge *br);
631void br_fdb_flush(struct net_bridge *br);
632void br_fdb_find_delete_local(struct net_bridge *br,
633 const struct net_bridge_port *p,
634 const unsigned char *addr, u16 vid);
635void br_fdb_changeaddr(struct net_bridge_port *p, const unsigned char *newaddr);
636void br_fdb_change_mac_address(struct net_bridge *br, const u8 *newaddr);
637void br_fdb_cleanup(struct work_struct *work);
638void br_fdb_delete_by_port(struct net_bridge *br,
639 const struct net_bridge_port *p, u16 vid, int do_all);
640struct net_bridge_fdb_entry *br_fdb_find_rcu(struct net_bridge *br,
641 const unsigned char *addr,
642 __u16 vid);
643int br_fdb_test_addr(struct net_device *dev, unsigned char *addr);
644int br_fdb_fillbuf(struct net_bridge *br, void *buf, unsigned long count,
645 unsigned long off);
646int br_fdb_insert(struct net_bridge *br, struct net_bridge_port *source,
647 const unsigned char *addr, u16 vid);
648void br_fdb_update(struct net_bridge *br, struct net_bridge_port *source,
649 const unsigned char *addr, u16 vid, unsigned long flags);
650
651int br_fdb_delete(struct ndmsg *ndm, struct nlattr *tb[],
652 struct net_device *dev, const unsigned char *addr, u16 vid);
653int br_fdb_add(struct ndmsg *nlh, struct nlattr *tb[], struct net_device *dev,
654 const unsigned char *addr, u16 vid, u16 nlh_flags,
655 struct netlink_ext_ack *extack);
656int br_fdb_dump(struct sk_buff *skb, struct netlink_callback *cb,
657 struct net_device *dev, struct net_device *fdev, int *idx);
658int br_fdb_get(struct sk_buff *skb, struct nlattr *tb[], struct net_device *dev,
659 const unsigned char *addr, u16 vid, u32 portid, u32 seq,
660 struct netlink_ext_ack *extack);
661int br_fdb_sync_static(struct net_bridge *br, struct net_bridge_port *p);
662void br_fdb_unsync_static(struct net_bridge *br, struct net_bridge_port *p);
663int br_fdb_external_learn_add(struct net_bridge *br, struct net_bridge_port *p,
664 const unsigned char *addr, u16 vid,
665 bool swdev_notify);
666int br_fdb_external_learn_del(struct net_bridge *br, struct net_bridge_port *p,
667 const unsigned char *addr, u16 vid,
668 bool swdev_notify);
669void br_fdb_offloaded_set(struct net_bridge *br, struct net_bridge_port *p,
670 const unsigned char *addr, u16 vid, bool offloaded);
671
672/* br_forward.c */
673enum br_pkt_type {
674 BR_PKT_UNICAST,
675 BR_PKT_MULTICAST,
676 BR_PKT_BROADCAST
677};
678int br_dev_queue_push_xmit(struct net *net, struct sock *sk, struct sk_buff *skb);
679void br_forward(const struct net_bridge_port *to, struct sk_buff *skb,
680 bool local_rcv, bool local_orig);
681int br_forward_finish(struct net *net, struct sock *sk, struct sk_buff *skb);
682void br_flood(struct net_bridge *br, struct sk_buff *skb,
683 enum br_pkt_type pkt_type, bool local_rcv, bool local_orig);
684
685/* return true if both source port and dest port are isolated */
686static inline bool br_skb_isolated(const struct net_bridge_port *to,
687 const struct sk_buff *skb)
688{
689 return BR_INPUT_SKB_CB(skb)->src_port_isolated &&
690 (to->flags & BR_ISOLATED);
691}
692
693/* br_if.c */
694void br_port_carrier_check(struct net_bridge_port *p, bool *notified);
695int br_add_bridge(struct net *net, const char *name);
696int br_del_bridge(struct net *net, const char *name);
697int br_add_if(struct net_bridge *br, struct net_device *dev,
698 struct netlink_ext_ack *extack);
699int br_del_if(struct net_bridge *br, struct net_device *dev);
700void br_mtu_auto_adjust(struct net_bridge *br);
701netdev_features_t br_features_recompute(struct net_bridge *br,
702 netdev_features_t features);
703void br_port_flags_change(struct net_bridge_port *port, unsigned long mask);
704void br_manage_promisc(struct net_bridge *br);
705int nbp_backup_change(struct net_bridge_port *p, struct net_device *backup_dev);
706
707/* br_input.c */
708int br_handle_frame_finish(struct net *net, struct sock *sk, struct sk_buff *skb);
709rx_handler_func_t *br_get_rx_handler(const struct net_device *dev);
710
711static inline bool br_rx_handler_check_rcu(const struct net_device *dev)
712{
713 return rcu_dereference(dev->rx_handler) == br_get_rx_handler(dev);
714}
715
716static inline bool br_rx_handler_check_rtnl(const struct net_device *dev)
717{
718 return rcu_dereference_rtnl(dev->rx_handler) == br_get_rx_handler(dev);
719}
720
721static inline struct net_bridge_port *br_port_get_check_rcu(const struct net_device *dev)
722{
723 return br_rx_handler_check_rcu(dev) ? br_port_get_rcu(dev) : NULL;
724}
725
726static inline struct net_bridge_port *
727br_port_get_check_rtnl(const struct net_device *dev)
728{
729 return br_rx_handler_check_rtnl(dev) ? br_port_get_rtnl_rcu(dev) : NULL;
730}
731
732/* br_ioctl.c */
733int br_dev_ioctl(struct net_device *dev, struct ifreq *rq, int cmd);
734int br_ioctl_deviceless_stub(struct net *net, unsigned int cmd,
735 void __user *arg);
736
737/* br_multicast.c */
738#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
739int br_multicast_rcv(struct net_bridge *br, struct net_bridge_port *port,
740 struct sk_buff *skb, u16 vid);
741struct net_bridge_mdb_entry *br_mdb_get(struct net_bridge *br,
742 struct sk_buff *skb, u16 vid);
743int br_multicast_add_port(struct net_bridge_port *port);
744void br_multicast_del_port(struct net_bridge_port *port);
745void br_multicast_enable_port(struct net_bridge_port *port);
746void br_multicast_disable_port(struct net_bridge_port *port);
747void br_multicast_init(struct net_bridge *br);
748void br_multicast_open(struct net_bridge *br);
749void br_multicast_stop(struct net_bridge *br);
750void br_multicast_dev_del(struct net_bridge *br);
751void br_multicast_flood(struct net_bridge_mdb_entry *mdst,
752 struct sk_buff *skb, bool local_rcv, bool local_orig);
753int br_multicast_set_router(struct net_bridge *br, unsigned long val);
754int br_multicast_set_port_router(struct net_bridge_port *p, unsigned long val);
755int br_multicast_toggle(struct net_bridge *br, unsigned long val);
756int br_multicast_set_querier(struct net_bridge *br, unsigned long val);
757int br_multicast_set_hash_max(struct net_bridge *br, unsigned long val);
758int br_multicast_set_igmp_version(struct net_bridge *br, unsigned long val);
759#if IS_ENABLED(CONFIG_IPV6)
760int br_multicast_set_mld_version(struct net_bridge *br, unsigned long val);
761#endif
762struct net_bridge_mdb_entry *
763br_mdb_ip_get(struct net_bridge *br, struct br_ip *dst);
764struct net_bridge_mdb_entry *
765br_multicast_new_group(struct net_bridge *br, struct br_ip *group);
766struct net_bridge_port_group *
767br_multicast_new_port_group(struct net_bridge_port *port, struct br_ip *group,
768 struct net_bridge_port_group __rcu *next,
769 unsigned char flags, const unsigned char *src);
770int br_mdb_hash_init(struct net_bridge *br);
771void br_mdb_hash_fini(struct net_bridge *br);
772void br_mdb_notify(struct net_device *dev, struct net_bridge_port *port,
773 struct br_ip *group, int type, u8 flags);
774void br_rtr_notify(struct net_device *dev, struct net_bridge_port *port,
775 int type);
776void br_multicast_count(struct net_bridge *br, const struct net_bridge_port *p,
777 const struct sk_buff *skb, u8 type, u8 dir);
778int br_multicast_init_stats(struct net_bridge *br);
779void br_multicast_uninit_stats(struct net_bridge *br);
780void br_multicast_get_stats(const struct net_bridge *br,
781 const struct net_bridge_port *p,
782 struct br_mcast_stats *dest);
783void br_mdb_init(void);
784void br_mdb_uninit(void);
785void br_multicast_host_join(struct net_bridge_mdb_entry *mp, bool notify);
786void br_multicast_host_leave(struct net_bridge_mdb_entry *mp, bool notify);
787
788#define mlock_dereference(X, br) \
789 rcu_dereference_protected(X, lockdep_is_held(&br->multicast_lock))
790
791static inline bool br_multicast_is_router(struct net_bridge *br)
792{
793 return br->multicast_router == 2 ||
794 (br->multicast_router == 1 &&
795 timer_pending(&br->multicast_router_timer));
796}
797
798static inline bool
799__br_multicast_querier_exists(struct net_bridge *br,
800 struct bridge_mcast_other_query *querier,
801 const bool is_ipv6)
802{
803 bool own_querier_enabled;
804
805 if (br_opt_get(br, BROPT_MULTICAST_QUERIER)) {
806 if (is_ipv6 && !br_opt_get(br, BROPT_HAS_IPV6_ADDR))
807 own_querier_enabled = false;
808 else
809 own_querier_enabled = true;
810 } else {
811 own_querier_enabled = false;
812 }
813
814 return time_is_before_jiffies(querier->delay_time) &&
815 (own_querier_enabled || timer_pending(&querier->timer));
816}
817
818static inline bool br_multicast_querier_exists(struct net_bridge *br,
819 struct ethhdr *eth)
820{
821 switch (eth->h_proto) {
822 case (htons(ETH_P_IP)):
823 return __br_multicast_querier_exists(br,
824 &br->ip4_other_query, false);
825#if IS_ENABLED(CONFIG_IPV6)
826 case (htons(ETH_P_IPV6)):
827 return __br_multicast_querier_exists(br,
828 &br->ip6_other_query, true);
829#endif
830 default:
831 return false;
832 }
833}
834
835static inline int br_multicast_igmp_type(const struct sk_buff *skb)
836{
837 return BR_INPUT_SKB_CB(skb)->igmp;
838}
839#else
840static inline int br_multicast_rcv(struct net_bridge *br,
841 struct net_bridge_port *port,
842 struct sk_buff *skb,
843 u16 vid)
844{
845 return 0;
846}
847
848static inline struct net_bridge_mdb_entry *br_mdb_get(struct net_bridge *br,
849 struct sk_buff *skb, u16 vid)
850{
851 return NULL;
852}
853
854static inline int br_multicast_add_port(struct net_bridge_port *port)
855{
856 return 0;
857}
858
859static inline void br_multicast_del_port(struct net_bridge_port *port)
860{
861}
862
863static inline void br_multicast_enable_port(struct net_bridge_port *port)
864{
865}
866
867static inline void br_multicast_disable_port(struct net_bridge_port *port)
868{
869}
870
871static inline void br_multicast_init(struct net_bridge *br)
872{
873}
874
875static inline void br_multicast_open(struct net_bridge *br)
876{
877}
878
879static inline void br_multicast_stop(struct net_bridge *br)
880{
881}
882
883static inline void br_multicast_dev_del(struct net_bridge *br)
884{
885}
886
887static inline void br_multicast_flood(struct net_bridge_mdb_entry *mdst,
888 struct sk_buff *skb,
889 bool local_rcv, bool local_orig)
890{
891}
892
893static inline bool br_multicast_is_router(struct net_bridge *br)
894{
895 return false;
896}
897
898static inline bool br_multicast_querier_exists(struct net_bridge *br,
899 struct ethhdr *eth)
900{
901 return false;
902}
903
904static inline void br_mdb_init(void)
905{
906}
907
908static inline void br_mdb_uninit(void)
909{
910}
911
912static inline int br_mdb_hash_init(struct net_bridge *br)
913{
914 return 0;
915}
916
917static inline void br_mdb_hash_fini(struct net_bridge *br)
918{
919}
920
921static inline void br_multicast_count(struct net_bridge *br,
922 const struct net_bridge_port *p,
923 const struct sk_buff *skb,
924 u8 type, u8 dir)
925{
926}
927
928static inline int br_multicast_init_stats(struct net_bridge *br)
929{
930 return 0;
931}
932
933static inline void br_multicast_uninit_stats(struct net_bridge *br)
934{
935}
936
937static inline int br_multicast_igmp_type(const struct sk_buff *skb)
938{
939 return 0;
940}
941#endif
942
943/* br_vlan.c */
944#ifdef CONFIG_BRIDGE_VLAN_FILTERING
945bool br_allowed_ingress(const struct net_bridge *br,
946 struct net_bridge_vlan_group *vg, struct sk_buff *skb,
947 u16 *vid, u8 *state);
948bool br_allowed_egress(struct net_bridge_vlan_group *vg,
949 const struct sk_buff *skb);
950bool br_should_learn(struct net_bridge_port *p, struct sk_buff *skb, u16 *vid);
951struct sk_buff *br_handle_vlan(struct net_bridge *br,
952 const struct net_bridge_port *port,
953 struct net_bridge_vlan_group *vg,
954 struct sk_buff *skb);
955int br_vlan_add(struct net_bridge *br, u16 vid, u16 flags,
956 bool *changed, struct netlink_ext_ack *extack);
957int br_vlan_delete(struct net_bridge *br, u16 vid);
958void br_vlan_flush(struct net_bridge *br);
959struct net_bridge_vlan *br_vlan_find(struct net_bridge_vlan_group *vg, u16 vid);
960void br_recalculate_fwd_mask(struct net_bridge *br);
961int __br_vlan_filter_toggle(struct net_bridge *br, unsigned long val);
962int br_vlan_filter_toggle(struct net_bridge *br, unsigned long val);
963int __br_vlan_set_proto(struct net_bridge *br, __be16 proto);
964int br_vlan_set_proto(struct net_bridge *br, unsigned long val);
965int br_vlan_set_stats(struct net_bridge *br, unsigned long val);
966int br_vlan_set_stats_per_port(struct net_bridge *br, unsigned long val);
967int br_vlan_init(struct net_bridge *br);
968int br_vlan_set_default_pvid(struct net_bridge *br, unsigned long val);
969int __br_vlan_set_default_pvid(struct net_bridge *br, u16 pvid,
970 struct netlink_ext_ack *extack);
971int nbp_vlan_add(struct net_bridge_port *port, u16 vid, u16 flags,
972 bool *changed, struct netlink_ext_ack *extack);
973int nbp_vlan_delete(struct net_bridge_port *port, u16 vid);
974void nbp_vlan_flush(struct net_bridge_port *port);
975int nbp_vlan_init(struct net_bridge_port *port, struct netlink_ext_ack *extack);
976int nbp_get_num_vlan_infos(struct net_bridge_port *p, u32 filter_mask);
977void br_vlan_get_stats(const struct net_bridge_vlan *v,
978 struct br_vlan_stats *stats);
979void br_vlan_port_event(struct net_bridge_port *p, unsigned long event);
980int br_vlan_bridge_event(struct net_device *dev, unsigned long event,
981 void *ptr);
982void br_vlan_rtnl_init(void);
983void br_vlan_rtnl_uninit(void);
984void br_vlan_notify(const struct net_bridge *br,
985 const struct net_bridge_port *p,
986 u16 vid, u16 vid_range,
987 int cmd);
988bool br_vlan_can_enter_range(const struct net_bridge_vlan *v_curr,
989 const struct net_bridge_vlan *range_end);
990
991static inline struct net_bridge_vlan_group *br_vlan_group(
992 const struct net_bridge *br)
993{
994 return rtnl_dereference(br->vlgrp);
995}
996
997static inline struct net_bridge_vlan_group *nbp_vlan_group(
998 const struct net_bridge_port *p)
999{
1000 return rtnl_dereference(p->vlgrp);
1001}
1002
1003static inline struct net_bridge_vlan_group *br_vlan_group_rcu(
1004 const struct net_bridge *br)
1005{
1006 return rcu_dereference(br->vlgrp);
1007}
1008
1009static inline struct net_bridge_vlan_group *nbp_vlan_group_rcu(
1010 const struct net_bridge_port *p)
1011{
1012 return rcu_dereference(p->vlgrp);
1013}
1014
1015/* Since bridge now depends on 8021Q module, but the time bridge sees the
1016 * skb, the vlan tag will always be present if the frame was tagged.
1017 */
1018static inline int br_vlan_get_tag(const struct sk_buff *skb, u16 *vid)
1019{
1020 int err = 0;
1021
1022 if (skb_vlan_tag_present(skb)) {
1023 *vid = skb_vlan_tag_get_id(skb);
1024 } else {
1025 *vid = 0;
1026 err = -EINVAL;
1027 }
1028
1029 return err;
1030}
1031
1032static inline u16 br_get_pvid(const struct net_bridge_vlan_group *vg)
1033{
1034 if (!vg)
1035 return 0;
1036
1037 smp_rmb();
1038 return vg->pvid;
1039}
1040
1041static inline u16 br_vlan_flags(const struct net_bridge_vlan *v, u16 pvid)
1042{
1043 return v->vid == pvid ? v->flags | BRIDGE_VLAN_INFO_PVID : v->flags;
1044}
1045#else
1046static inline bool br_allowed_ingress(const struct net_bridge *br,
1047 struct net_bridge_vlan_group *vg,
1048 struct sk_buff *skb,
1049 u16 *vid, u8 *state)
1050{
1051 return true;
1052}
1053
1054static inline bool br_allowed_egress(struct net_bridge_vlan_group *vg,
1055 const struct sk_buff *skb)
1056{
1057 return true;
1058}
1059
1060static inline bool br_should_learn(struct net_bridge_port *p,
1061 struct sk_buff *skb, u16 *vid)
1062{
1063 return true;
1064}
1065
1066static inline struct sk_buff *br_handle_vlan(struct net_bridge *br,
1067 const struct net_bridge_port *port,
1068 struct net_bridge_vlan_group *vg,
1069 struct sk_buff *skb)
1070{
1071 return skb;
1072}
1073
1074static inline int br_vlan_add(struct net_bridge *br, u16 vid, u16 flags,
1075 bool *changed, struct netlink_ext_ack *extack)
1076{
1077 *changed = false;
1078 return -EOPNOTSUPP;
1079}
1080
1081static inline int br_vlan_delete(struct net_bridge *br, u16 vid)
1082{
1083 return -EOPNOTSUPP;
1084}
1085
1086static inline void br_vlan_flush(struct net_bridge *br)
1087{
1088}
1089
1090static inline void br_recalculate_fwd_mask(struct net_bridge *br)
1091{
1092}
1093
1094static inline int br_vlan_init(struct net_bridge *br)
1095{
1096 return 0;
1097}
1098
1099static inline int nbp_vlan_add(struct net_bridge_port *port, u16 vid, u16 flags,
1100 bool *changed, struct netlink_ext_ack *extack)
1101{
1102 *changed = false;
1103 return -EOPNOTSUPP;
1104}
1105
1106static inline int nbp_vlan_delete(struct net_bridge_port *port, u16 vid)
1107{
1108 return -EOPNOTSUPP;
1109}
1110
1111static inline void nbp_vlan_flush(struct net_bridge_port *port)
1112{
1113}
1114
1115static inline struct net_bridge_vlan *br_vlan_find(struct net_bridge_vlan_group *vg,
1116 u16 vid)
1117{
1118 return NULL;
1119}
1120
1121static inline int nbp_vlan_init(struct net_bridge_port *port,
1122 struct netlink_ext_ack *extack)
1123{
1124 return 0;
1125}
1126
1127static inline u16 br_vlan_get_tag(const struct sk_buff *skb, u16 *tag)
1128{
1129 return 0;
1130}
1131
1132static inline u16 br_get_pvid(const struct net_bridge_vlan_group *vg)
1133{
1134 return 0;
1135}
1136
1137static inline int __br_vlan_filter_toggle(struct net_bridge *br,
1138 unsigned long val)
1139{
1140 return -EOPNOTSUPP;
1141}
1142
1143static inline int nbp_get_num_vlan_infos(struct net_bridge_port *p,
1144 u32 filter_mask)
1145{
1146 return 0;
1147}
1148
1149static inline struct net_bridge_vlan_group *br_vlan_group(
1150 const struct net_bridge *br)
1151{
1152 return NULL;
1153}
1154
1155static inline struct net_bridge_vlan_group *nbp_vlan_group(
1156 const struct net_bridge_port *p)
1157{
1158 return NULL;
1159}
1160
1161static inline struct net_bridge_vlan_group *br_vlan_group_rcu(
1162 const struct net_bridge *br)
1163{
1164 return NULL;
1165}
1166
1167static inline struct net_bridge_vlan_group *nbp_vlan_group_rcu(
1168 const struct net_bridge_port *p)
1169{
1170 return NULL;
1171}
1172
1173static inline void br_vlan_get_stats(const struct net_bridge_vlan *v,
1174 struct br_vlan_stats *stats)
1175{
1176}
1177
1178static inline void br_vlan_port_event(struct net_bridge_port *p,
1179 unsigned long event)
1180{
1181}
1182
1183static inline int br_vlan_bridge_event(struct net_device *dev,
1184 unsigned long event, void *ptr)
1185{
1186 return 0;
1187}
1188
1189static inline void br_vlan_rtnl_init(void)
1190{
1191}
1192
1193static inline void br_vlan_rtnl_uninit(void)
1194{
1195}
1196
1197static inline void br_vlan_notify(const struct net_bridge *br,
1198 const struct net_bridge_port *p,
1199 u16 vid, u16 vid_range,
1200 int cmd)
1201{
1202}
1203
1204static inline bool br_vlan_can_enter_range(const struct net_bridge_vlan *v_curr,
1205 const struct net_bridge_vlan *range_end)
1206{
1207 return true;
1208}
1209#endif
1210
1211/* br_vlan_options.c */
1212#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1213bool br_vlan_opts_eq_range(const struct net_bridge_vlan *v_curr,
1214 const struct net_bridge_vlan *range_end);
1215bool br_vlan_opts_fill(struct sk_buff *skb, const struct net_bridge_vlan *v);
1216size_t br_vlan_opts_nl_size(void);
1217int br_vlan_process_options(const struct net_bridge *br,
1218 const struct net_bridge_port *p,
1219 struct net_bridge_vlan *range_start,
1220 struct net_bridge_vlan *range_end,
1221 struct nlattr **tb,
1222 struct netlink_ext_ack *extack);
1223
1224/* vlan state manipulation helpers using *_ONCE to annotate lock-free access */
1225static inline u8 br_vlan_get_state(const struct net_bridge_vlan *v)
1226{
1227 return READ_ONCE(v->state);
1228}
1229
1230static inline void br_vlan_set_state(struct net_bridge_vlan *v, u8 state)
1231{
1232 WRITE_ONCE(v->state, state);
1233}
1234
1235static inline u8 br_vlan_get_pvid_state(const struct net_bridge_vlan_group *vg)
1236{
1237 return READ_ONCE(vg->pvid_state);
1238}
1239
1240static inline void br_vlan_set_pvid_state(struct net_bridge_vlan_group *vg,
1241 u8 state)
1242{
1243 WRITE_ONCE(vg->pvid_state, state);
1244}
1245
1246/* learn_allow is true at ingress and false at egress */
1247static inline bool br_vlan_state_allowed(u8 state, bool learn_allow)
1248{
1249 switch (state) {
1250 case BR_STATE_LEARNING:
1251 return learn_allow;
1252 case BR_STATE_FORWARDING:
1253 return true;
1254 default:
1255 return false;
1256 }
1257}
1258#endif
1259
1260struct nf_br_ops {
1261 int (*br_dev_xmit_hook)(struct sk_buff *skb);
1262};
1263extern const struct nf_br_ops __rcu *nf_br_ops;
1264
1265/* br_netfilter.c */
1266#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1267int br_nf_core_init(void);
1268void br_nf_core_fini(void);
1269void br_netfilter_rtable_init(struct net_bridge *);
1270#else
1271static inline int br_nf_core_init(void) { return 0; }
1272static inline void br_nf_core_fini(void) {}
1273#define br_netfilter_rtable_init(x)
1274#endif
1275
1276/* br_stp.c */
1277void br_set_state(struct net_bridge_port *p, unsigned int state);
1278struct net_bridge_port *br_get_port(struct net_bridge *br, u16 port_no);
1279void br_init_port(struct net_bridge_port *p);
1280void br_become_designated_port(struct net_bridge_port *p);
1281
1282void __br_set_forward_delay(struct net_bridge *br, unsigned long t);
1283int br_set_forward_delay(struct net_bridge *br, unsigned long x);
1284int br_set_hello_time(struct net_bridge *br, unsigned long x);
1285int br_set_max_age(struct net_bridge *br, unsigned long x);
1286int __set_ageing_time(struct net_device *dev, unsigned long t);
1287int br_set_ageing_time(struct net_bridge *br, clock_t ageing_time);
1288
1289
1290/* br_stp_if.c */
1291void br_stp_enable_bridge(struct net_bridge *br);
1292void br_stp_disable_bridge(struct net_bridge *br);
1293int br_stp_set_enabled(struct net_bridge *br, unsigned long val,
1294 struct netlink_ext_ack *extack);
1295void br_stp_enable_port(struct net_bridge_port *p);
1296void br_stp_disable_port(struct net_bridge_port *p);
1297bool br_stp_recalculate_bridge_id(struct net_bridge *br);
1298void br_stp_change_bridge_id(struct net_bridge *br, const unsigned char *a);
1299void br_stp_set_bridge_priority(struct net_bridge *br, u16 newprio);
1300int br_stp_set_port_priority(struct net_bridge_port *p, unsigned long newprio);
1301int br_stp_set_path_cost(struct net_bridge_port *p, unsigned long path_cost);
1302ssize_t br_show_bridge_id(char *buf, const struct bridge_id *id);
1303
1304/* br_stp_bpdu.c */
1305struct stp_proto;
1306void br_stp_rcv(const struct stp_proto *proto, struct sk_buff *skb,
1307 struct net_device *dev);
1308
1309/* br_stp_timer.c */
1310void br_stp_timer_init(struct net_bridge *br);
1311void br_stp_port_timer_init(struct net_bridge_port *p);
1312unsigned long br_timer_value(const struct timer_list *timer);
1313
1314/* br.c */
1315#if IS_ENABLED(CONFIG_ATM_LANE)
1316extern int (*br_fdb_test_addr_hook)(struct net_device *dev, unsigned char *addr);
1317#endif
1318
1319/* br_mrp.c */
1320#if IS_ENABLED(CONFIG_BRIDGE_MRP)
1321int br_mrp_parse(struct net_bridge *br, struct net_bridge_port *p,
1322 struct nlattr *attr, int cmd, struct netlink_ext_ack *extack);
1323int br_mrp_process(struct net_bridge_port *p, struct sk_buff *skb);
1324bool br_mrp_enabled(struct net_bridge *br);
1325void br_mrp_port_del(struct net_bridge *br, struct net_bridge_port *p);
1326int br_mrp_fill_info(struct sk_buff *skb, struct net_bridge *br);
1327#else
1328static inline int br_mrp_parse(struct net_bridge *br, struct net_bridge_port *p,
1329 struct nlattr *attr, int cmd,
1330 struct netlink_ext_ack *extack)
1331{
1332 return -EOPNOTSUPP;
1333}
1334
1335static inline int br_mrp_process(struct net_bridge_port *p, struct sk_buff *skb)
1336{
1337 return 0;
1338}
1339
1340static inline bool br_mrp_enabled(struct net_bridge *br)
1341{
1342 return false;
1343}
1344
1345static inline void br_mrp_port_del(struct net_bridge *br,
1346 struct net_bridge_port *p)
1347{
1348}
1349
1350static inline int br_mrp_fill_info(struct sk_buff *skb, struct net_bridge *br)
1351{
1352 return 0;
1353}
1354
1355#endif
1356
1357/* br_netlink.c */
1358extern struct rtnl_link_ops br_link_ops;
1359int br_netlink_init(void);
1360void br_netlink_fini(void);
1361void br_ifinfo_notify(int event, const struct net_bridge *br,
1362 const struct net_bridge_port *port);
1363int br_setlink(struct net_device *dev, struct nlmsghdr *nlmsg, u16 flags,
1364 struct netlink_ext_ack *extack);
1365int br_dellink(struct net_device *dev, struct nlmsghdr *nlmsg, u16 flags);
1366int br_getlink(struct sk_buff *skb, u32 pid, u32 seq, struct net_device *dev,
1367 u32 filter_mask, int nlflags);
1368int br_process_vlan_info(struct net_bridge *br,
1369 struct net_bridge_port *p, int cmd,
1370 struct bridge_vlan_info *vinfo_curr,
1371 struct bridge_vlan_info **vinfo_last,
1372 bool *changed,
1373 struct netlink_ext_ack *extack);
1374
1375#ifdef CONFIG_SYSFS
1376/* br_sysfs_if.c */
1377extern const struct sysfs_ops brport_sysfs_ops;
1378int br_sysfs_addif(struct net_bridge_port *p);
1379int br_sysfs_renameif(struct net_bridge_port *p);
1380
1381/* br_sysfs_br.c */
1382int br_sysfs_addbr(struct net_device *dev);
1383void br_sysfs_delbr(struct net_device *dev);
1384
1385#else
1386
1387static inline int br_sysfs_addif(struct net_bridge_port *p) { return 0; }
1388static inline int br_sysfs_renameif(struct net_bridge_port *p) { return 0; }
1389static inline int br_sysfs_addbr(struct net_device *dev) { return 0; }
1390static inline void br_sysfs_delbr(struct net_device *dev) { return; }
1391#endif /* CONFIG_SYSFS */
1392
1393/* br_switchdev.c */
1394#ifdef CONFIG_NET_SWITCHDEV
1395int nbp_switchdev_mark_set(struct net_bridge_port *p);
1396void nbp_switchdev_frame_mark(const struct net_bridge_port *p,
1397 struct sk_buff *skb);
1398bool nbp_switchdev_allowed_egress(const struct net_bridge_port *p,
1399 const struct sk_buff *skb);
1400int br_switchdev_set_port_flag(struct net_bridge_port *p,
1401 unsigned long flags,
1402 unsigned long mask);
1403void br_switchdev_fdb_notify(const struct net_bridge_fdb_entry *fdb,
1404 int type);
1405int br_switchdev_port_vlan_add(struct net_device *dev, u16 vid, u16 flags,
1406 struct netlink_ext_ack *extack);
1407int br_switchdev_port_vlan_del(struct net_device *dev, u16 vid);
1408
1409static inline void br_switchdev_frame_unmark(struct sk_buff *skb)
1410{
1411 skb->offload_fwd_mark = 0;
1412}
1413#else
1414static inline int nbp_switchdev_mark_set(struct net_bridge_port *p)
1415{
1416 return 0;
1417}
1418
1419static inline void nbp_switchdev_frame_mark(const struct net_bridge_port *p,
1420 struct sk_buff *skb)
1421{
1422}
1423
1424static inline bool nbp_switchdev_allowed_egress(const struct net_bridge_port *p,
1425 const struct sk_buff *skb)
1426{
1427 return true;
1428}
1429
1430static inline int br_switchdev_set_port_flag(struct net_bridge_port *p,
1431 unsigned long flags,
1432 unsigned long mask)
1433{
1434 return 0;
1435}
1436
1437static inline int br_switchdev_port_vlan_add(struct net_device *dev,
1438 u16 vid, u16 flags,
1439 struct netlink_ext_ack *extack)
1440{
1441 return -EOPNOTSUPP;
1442}
1443
1444static inline int br_switchdev_port_vlan_del(struct net_device *dev, u16 vid)
1445{
1446 return -EOPNOTSUPP;
1447}
1448
1449static inline void
1450br_switchdev_fdb_notify(const struct net_bridge_fdb_entry *fdb, int type)
1451{
1452}
1453
1454static inline void br_switchdev_frame_unmark(struct sk_buff *skb)
1455{
1456}
1457#endif /* CONFIG_NET_SWITCHDEV */
1458
1459/* br_arp_nd_proxy.c */
1460void br_recalculate_neigh_suppress_enabled(struct net_bridge *br);
1461void br_do_proxy_suppress_arp(struct sk_buff *skb, struct net_bridge *br,
1462 u16 vid, struct net_bridge_port *p);
1463void br_do_suppress_nd(struct sk_buff *skb, struct net_bridge *br,
1464 u16 vid, struct net_bridge_port *p, struct nd_msg *msg);
1465struct nd_msg *br_is_nd_neigh_msg(struct sk_buff *skb, struct nd_msg *m);
1466#endif
1/* SPDX-License-Identifier: GPL-2.0-or-later */
2/*
3 * Linux ethernet bridge
4 *
5 * Authors:
6 * Lennert Buytenhek <buytenh@gnu.org>
7 */
8
9#ifndef _BR_PRIVATE_H
10#define _BR_PRIVATE_H
11
12#include <linux/netdevice.h>
13#include <linux/if_bridge.h>
14#include <linux/netpoll.h>
15#include <linux/u64_stats_sync.h>
16#include <net/route.h>
17#include <net/ip6_fib.h>
18#include <linux/if_vlan.h>
19#include <linux/rhashtable.h>
20#include <linux/refcount.h>
21
22#define BR_HASH_BITS 8
23#define BR_HASH_SIZE (1 << BR_HASH_BITS)
24
25#define BR_HOLD_TIME (1*HZ)
26
27#define BR_PORT_BITS 10
28#define BR_MAX_PORTS (1<<BR_PORT_BITS)
29
30#define BR_MULTICAST_DEFAULT_HASH_MAX 4096
31
32#define BR_VERSION "2.3"
33
34/* Control of forwarding link local multicast */
35#define BR_GROUPFWD_DEFAULT 0
36/* Don't allow forwarding of control protocols like STP, MAC PAUSE and LACP */
37enum {
38 BR_GROUPFWD_STP = BIT(0),
39 BR_GROUPFWD_MACPAUSE = BIT(1),
40 BR_GROUPFWD_LACP = BIT(2),
41};
42
43#define BR_GROUPFWD_RESTRICTED (BR_GROUPFWD_STP | BR_GROUPFWD_MACPAUSE | \
44 BR_GROUPFWD_LACP)
45/* The Nearest Customer Bridge Group Address, 01-80-C2-00-00-[00,0B,0C,0D,0F] */
46#define BR_GROUPFWD_8021AD 0xB801u
47
48/* Path to usermode spanning tree program */
49#define BR_STP_PROG "/sbin/bridge-stp"
50
51#define BR_FDB_NOTIFY_SETTABLE_BITS (FDB_NOTIFY_BIT | FDB_NOTIFY_INACTIVE_BIT)
52
53typedef struct bridge_id bridge_id;
54typedef struct mac_addr mac_addr;
55typedef __u16 port_id;
56
57struct bridge_id {
58 unsigned char prio[2];
59 unsigned char addr[ETH_ALEN];
60};
61
62struct mac_addr {
63 unsigned char addr[ETH_ALEN];
64};
65
66#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
67/* our own querier */
68struct bridge_mcast_own_query {
69 struct timer_list timer;
70 u32 startup_sent;
71};
72
73/* other querier */
74struct bridge_mcast_other_query {
75 struct timer_list timer;
76 unsigned long delay_time;
77};
78
79/* selected querier */
80struct bridge_mcast_querier {
81 struct br_ip addr;
82 struct net_bridge_port __rcu *port;
83};
84
85/* IGMP/MLD statistics */
86struct bridge_mcast_stats {
87 struct br_mcast_stats mstats;
88 struct u64_stats_sync syncp;
89};
90#endif
91
92struct br_tunnel_info {
93 __be64 tunnel_id;
94 struct metadata_dst __rcu *tunnel_dst;
95};
96
97/* private vlan flags */
98enum {
99 BR_VLFLAG_PER_PORT_STATS = BIT(0),
100 BR_VLFLAG_ADDED_BY_SWITCHDEV = BIT(1),
101};
102
103/**
104 * struct net_bridge_vlan - per-vlan entry
105 *
106 * @vnode: rhashtable member
107 * @vid: VLAN id
108 * @flags: bridge vlan flags
109 * @priv_flags: private (in-kernel) bridge vlan flags
110 * @state: STP state (e.g. blocking, learning, forwarding)
111 * @stats: per-cpu VLAN statistics
112 * @br: if MASTER flag set, this points to a bridge struct
113 * @port: if MASTER flag unset, this points to a port struct
114 * @refcnt: if MASTER flag set, this is bumped for each port referencing it
115 * @brvlan: if MASTER flag unset, this points to the global per-VLAN context
116 * for this VLAN entry
117 * @vlist: sorted list of VLAN entries
118 * @rcu: used for entry destruction
119 *
120 * This structure is shared between the global per-VLAN entries contained in
121 * the bridge rhashtable and the local per-port per-VLAN entries contained in
122 * the port's rhashtable. The union entries should be interpreted depending on
123 * the entry flags that are set.
124 */
125struct net_bridge_vlan {
126 struct rhash_head vnode;
127 struct rhash_head tnode;
128 u16 vid;
129 u16 flags;
130 u16 priv_flags;
131 u8 state;
132 struct pcpu_sw_netstats __percpu *stats;
133 union {
134 struct net_bridge *br;
135 struct net_bridge_port *port;
136 };
137 union {
138 refcount_t refcnt;
139 struct net_bridge_vlan *brvlan;
140 };
141
142 struct br_tunnel_info tinfo;
143
144 struct list_head vlist;
145
146 struct rcu_head rcu;
147};
148
149/**
150 * struct net_bridge_vlan_group
151 *
152 * @vlan_hash: VLAN entry rhashtable
153 * @vlan_list: sorted VLAN entry list
154 * @num_vlans: number of total VLAN entries
155 * @pvid: PVID VLAN id
156 * @pvid_state: PVID's STP state (e.g. forwarding, learning, blocking)
157 *
158 * IMPORTANT: Be careful when checking if there're VLAN entries using list
159 * primitives because the bridge can have entries in its list which
160 * are just for global context but not for filtering, i.e. they have
161 * the master flag set but not the brentry flag. If you have to check
162 * if there're "real" entries in the bridge please test @num_vlans
163 */
164struct net_bridge_vlan_group {
165 struct rhashtable vlan_hash;
166 struct rhashtable tunnel_hash;
167 struct list_head vlan_list;
168 u16 num_vlans;
169 u16 pvid;
170 u8 pvid_state;
171};
172
173/* bridge fdb flags */
174enum {
175 BR_FDB_LOCAL,
176 BR_FDB_STATIC,
177 BR_FDB_STICKY,
178 BR_FDB_ADDED_BY_USER,
179 BR_FDB_ADDED_BY_EXT_LEARN,
180 BR_FDB_OFFLOADED,
181 BR_FDB_NOTIFY,
182 BR_FDB_NOTIFY_INACTIVE
183};
184
185struct net_bridge_fdb_key {
186 mac_addr addr;
187 u16 vlan_id;
188};
189
190struct net_bridge_fdb_entry {
191 struct rhash_head rhnode;
192 struct net_bridge_port *dst;
193
194 struct net_bridge_fdb_key key;
195 struct hlist_node fdb_node;
196 unsigned long flags;
197
198 /* write-heavy members should not affect lookups */
199 unsigned long updated ____cacheline_aligned_in_smp;
200 unsigned long used;
201
202 struct rcu_head rcu;
203};
204
205#define MDB_PG_FLAGS_PERMANENT BIT(0)
206#define MDB_PG_FLAGS_OFFLOAD BIT(1)
207#define MDB_PG_FLAGS_FAST_LEAVE BIT(2)
208#define MDB_PG_FLAGS_STAR_EXCL BIT(3)
209#define MDB_PG_FLAGS_BLOCKED BIT(4)
210
211#define PG_SRC_ENT_LIMIT 32
212
213#define BR_SGRP_F_DELETE BIT(0)
214#define BR_SGRP_F_SEND BIT(1)
215#define BR_SGRP_F_INSTALLED BIT(2)
216
217struct net_bridge_mcast_gc {
218 struct hlist_node gc_node;
219 void (*destroy)(struct net_bridge_mcast_gc *gc);
220};
221
222struct net_bridge_group_src {
223 struct hlist_node node;
224
225 struct br_ip addr;
226 struct net_bridge_port_group *pg;
227 u8 flags;
228 u8 src_query_rexmit_cnt;
229 struct timer_list timer;
230
231 struct net_bridge *br;
232 struct net_bridge_mcast_gc mcast_gc;
233 struct rcu_head rcu;
234};
235
236struct net_bridge_port_group_sg_key {
237 struct net_bridge_port *port;
238 struct br_ip addr;
239};
240
241struct net_bridge_port_group {
242 struct net_bridge_port_group __rcu *next;
243 struct net_bridge_port_group_sg_key key;
244 unsigned char eth_addr[ETH_ALEN] __aligned(2);
245 unsigned char flags;
246 unsigned char filter_mode;
247 unsigned char grp_query_rexmit_cnt;
248 unsigned char rt_protocol;
249
250 struct hlist_head src_list;
251 unsigned int src_ents;
252 struct timer_list timer;
253 struct timer_list rexmit_timer;
254 struct hlist_node mglist;
255 struct rb_root eht_set_tree;
256 struct rb_root eht_host_tree;
257
258 struct rhash_head rhnode;
259 struct net_bridge_mcast_gc mcast_gc;
260 struct rcu_head rcu;
261};
262
263struct net_bridge_mdb_entry {
264 struct rhash_head rhnode;
265 struct net_bridge *br;
266 struct net_bridge_port_group __rcu *ports;
267 struct br_ip addr;
268 bool host_joined;
269
270 struct timer_list timer;
271 struct hlist_node mdb_node;
272
273 struct net_bridge_mcast_gc mcast_gc;
274 struct rcu_head rcu;
275};
276
277struct net_bridge_port {
278 struct net_bridge *br;
279 struct net_device *dev;
280 struct list_head list;
281
282 unsigned long flags;
283#ifdef CONFIG_BRIDGE_VLAN_FILTERING
284 struct net_bridge_vlan_group __rcu *vlgrp;
285#endif
286 struct net_bridge_port __rcu *backup_port;
287
288 /* STP */
289 u8 priority;
290 u8 state;
291 u16 port_no;
292 unsigned char topology_change_ack;
293 unsigned char config_pending;
294 port_id port_id;
295 port_id designated_port;
296 bridge_id designated_root;
297 bridge_id designated_bridge;
298 u32 path_cost;
299 u32 designated_cost;
300 unsigned long designated_age;
301
302 struct timer_list forward_delay_timer;
303 struct timer_list hold_timer;
304 struct timer_list message_age_timer;
305 struct kobject kobj;
306 struct rcu_head rcu;
307
308#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
309 struct bridge_mcast_own_query ip4_own_query;
310 struct timer_list ip4_mc_router_timer;
311 struct hlist_node ip4_rlist;
312#if IS_ENABLED(CONFIG_IPV6)
313 struct bridge_mcast_own_query ip6_own_query;
314 struct timer_list ip6_mc_router_timer;
315 struct hlist_node ip6_rlist;
316#endif /* IS_ENABLED(CONFIG_IPV6) */
317 u32 multicast_eht_hosts_limit;
318 u32 multicast_eht_hosts_cnt;
319 unsigned char multicast_router;
320 struct bridge_mcast_stats __percpu *mcast_stats;
321 struct hlist_head mglist;
322#endif
323
324#ifdef CONFIG_SYSFS
325 char sysfs_name[IFNAMSIZ];
326#endif
327
328#ifdef CONFIG_NET_POLL_CONTROLLER
329 struct netpoll *np;
330#endif
331#ifdef CONFIG_NET_SWITCHDEV
332 int offload_fwd_mark;
333#endif
334 u16 group_fwd_mask;
335 u16 backup_redirected_cnt;
336
337 struct bridge_stp_xstats stp_xstats;
338};
339
340#define kobj_to_brport(obj) container_of(obj, struct net_bridge_port, kobj)
341
342#define br_auto_port(p) ((p)->flags & BR_AUTO_MASK)
343#define br_promisc_port(p) ((p)->flags & BR_PROMISC)
344
345static inline struct net_bridge_port *br_port_get_rcu(const struct net_device *dev)
346{
347 return rcu_dereference(dev->rx_handler_data);
348}
349
350static inline struct net_bridge_port *br_port_get_rtnl(const struct net_device *dev)
351{
352 return netif_is_bridge_port(dev) ?
353 rtnl_dereference(dev->rx_handler_data) : NULL;
354}
355
356static inline struct net_bridge_port *br_port_get_rtnl_rcu(const struct net_device *dev)
357{
358 return netif_is_bridge_port(dev) ?
359 rcu_dereference_rtnl(dev->rx_handler_data) : NULL;
360}
361
362enum net_bridge_opts {
363 BROPT_VLAN_ENABLED,
364 BROPT_VLAN_STATS_ENABLED,
365 BROPT_NF_CALL_IPTABLES,
366 BROPT_NF_CALL_IP6TABLES,
367 BROPT_NF_CALL_ARPTABLES,
368 BROPT_GROUP_ADDR_SET,
369 BROPT_MULTICAST_ENABLED,
370 BROPT_MULTICAST_QUERIER,
371 BROPT_MULTICAST_QUERY_USE_IFADDR,
372 BROPT_MULTICAST_STATS_ENABLED,
373 BROPT_HAS_IPV6_ADDR,
374 BROPT_NEIGH_SUPPRESS_ENABLED,
375 BROPT_MTU_SET_BY_USER,
376 BROPT_VLAN_STATS_PER_PORT,
377 BROPT_NO_LL_LEARN,
378 BROPT_VLAN_BRIDGE_BINDING,
379};
380
381struct net_bridge {
382 spinlock_t lock;
383 spinlock_t hash_lock;
384 struct hlist_head frame_type_list;
385 struct net_device *dev;
386 unsigned long options;
387 /* These fields are accessed on each packet */
388#ifdef CONFIG_BRIDGE_VLAN_FILTERING
389 __be16 vlan_proto;
390 u16 default_pvid;
391 struct net_bridge_vlan_group __rcu *vlgrp;
392#endif
393
394 struct rhashtable fdb_hash_tbl;
395 struct list_head port_list;
396#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
397 union {
398 struct rtable fake_rtable;
399 struct rt6_info fake_rt6_info;
400 };
401#endif
402 u16 group_fwd_mask;
403 u16 group_fwd_mask_required;
404
405 /* STP */
406 bridge_id designated_root;
407 bridge_id bridge_id;
408 unsigned char topology_change;
409 unsigned char topology_change_detected;
410 u16 root_port;
411 unsigned long max_age;
412 unsigned long hello_time;
413 unsigned long forward_delay;
414 unsigned long ageing_time;
415 unsigned long bridge_max_age;
416 unsigned long bridge_hello_time;
417 unsigned long bridge_forward_delay;
418 unsigned long bridge_ageing_time;
419 u32 root_path_cost;
420
421 u8 group_addr[ETH_ALEN];
422
423 enum {
424 BR_NO_STP, /* no spanning tree */
425 BR_KERNEL_STP, /* old STP in kernel */
426 BR_USER_STP, /* new RSTP in userspace */
427 } stp_enabled;
428
429#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
430
431 u32 hash_max;
432
433 u32 multicast_last_member_count;
434 u32 multicast_startup_query_count;
435
436 u8 multicast_igmp_version;
437 u8 multicast_router;
438#if IS_ENABLED(CONFIG_IPV6)
439 u8 multicast_mld_version;
440#endif
441 spinlock_t multicast_lock;
442 unsigned long multicast_last_member_interval;
443 unsigned long multicast_membership_interval;
444 unsigned long multicast_querier_interval;
445 unsigned long multicast_query_interval;
446 unsigned long multicast_query_response_interval;
447 unsigned long multicast_startup_query_interval;
448
449 struct rhashtable mdb_hash_tbl;
450 struct rhashtable sg_port_tbl;
451
452 struct hlist_head mcast_gc_list;
453 struct hlist_head mdb_list;
454
455 struct hlist_head ip4_mc_router_list;
456 struct timer_list ip4_mc_router_timer;
457 struct bridge_mcast_other_query ip4_other_query;
458 struct bridge_mcast_own_query ip4_own_query;
459 struct bridge_mcast_querier ip4_querier;
460 struct bridge_mcast_stats __percpu *mcast_stats;
461#if IS_ENABLED(CONFIG_IPV6)
462 struct hlist_head ip6_mc_router_list;
463 struct timer_list ip6_mc_router_timer;
464 struct bridge_mcast_other_query ip6_other_query;
465 struct bridge_mcast_own_query ip6_own_query;
466 struct bridge_mcast_querier ip6_querier;
467#endif /* IS_ENABLED(CONFIG_IPV6) */
468 struct work_struct mcast_gc_work;
469#endif
470
471 struct timer_list hello_timer;
472 struct timer_list tcn_timer;
473 struct timer_list topology_change_timer;
474 struct delayed_work gc_work;
475 struct kobject *ifobj;
476 u32 auto_cnt;
477
478#ifdef CONFIG_NET_SWITCHDEV
479 int offload_fwd_mark;
480#endif
481 struct hlist_head fdb_list;
482
483#if IS_ENABLED(CONFIG_BRIDGE_MRP)
484 struct hlist_head mrp_list;
485#endif
486#if IS_ENABLED(CONFIG_BRIDGE_CFM)
487 struct hlist_head mep_list;
488#endif
489};
490
491struct br_input_skb_cb {
492 struct net_device *brdev;
493
494 u16 frag_max_size;
495#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
496 u8 igmp;
497 u8 mrouters_only:1;
498#endif
499 u8 proxyarp_replied:1;
500 u8 src_port_isolated:1;
501#ifdef CONFIG_BRIDGE_VLAN_FILTERING
502 u8 vlan_filtered:1;
503#endif
504#ifdef CONFIG_NETFILTER_FAMILY_BRIDGE
505 u8 br_netfilter_broute:1;
506#endif
507
508#ifdef CONFIG_NET_SWITCHDEV
509 int offload_fwd_mark;
510#endif
511};
512
513#define BR_INPUT_SKB_CB(__skb) ((struct br_input_skb_cb *)(__skb)->cb)
514
515#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
516# define BR_INPUT_SKB_CB_MROUTERS_ONLY(__skb) (BR_INPUT_SKB_CB(__skb)->mrouters_only)
517#else
518# define BR_INPUT_SKB_CB_MROUTERS_ONLY(__skb) (0)
519#endif
520
521#define br_printk(level, br, format, args...) \
522 printk(level "%s: " format, (br)->dev->name, ##args)
523
524#define br_err(__br, format, args...) \
525 br_printk(KERN_ERR, __br, format, ##args)
526#define br_warn(__br, format, args...) \
527 br_printk(KERN_WARNING, __br, format, ##args)
528#define br_notice(__br, format, args...) \
529 br_printk(KERN_NOTICE, __br, format, ##args)
530#define br_info(__br, format, args...) \
531 br_printk(KERN_INFO, __br, format, ##args)
532
533#define br_debug(br, format, args...) \
534 pr_debug("%s: " format, (br)->dev->name, ##args)
535
536/* called under bridge lock */
537static inline int br_is_root_bridge(const struct net_bridge *br)
538{
539 return !memcmp(&br->bridge_id, &br->designated_root, 8);
540}
541
542/* check if a VLAN entry is global */
543static inline bool br_vlan_is_master(const struct net_bridge_vlan *v)
544{
545 return v->flags & BRIDGE_VLAN_INFO_MASTER;
546}
547
548/* check if a VLAN entry is used by the bridge */
549static inline bool br_vlan_is_brentry(const struct net_bridge_vlan *v)
550{
551 return v->flags & BRIDGE_VLAN_INFO_BRENTRY;
552}
553
554/* check if we should use the vlan entry, returns false if it's only context */
555static inline bool br_vlan_should_use(const struct net_bridge_vlan *v)
556{
557 if (br_vlan_is_master(v)) {
558 if (br_vlan_is_brentry(v))
559 return true;
560 else
561 return false;
562 }
563
564 return true;
565}
566
567static inline bool nbp_state_should_learn(const struct net_bridge_port *p)
568{
569 return p->state == BR_STATE_LEARNING || p->state == BR_STATE_FORWARDING;
570}
571
572static inline bool br_vlan_valid_id(u16 vid, struct netlink_ext_ack *extack)
573{
574 bool ret = vid > 0 && vid < VLAN_VID_MASK;
575
576 if (!ret)
577 NL_SET_ERR_MSG_MOD(extack, "Vlan id is invalid");
578
579 return ret;
580}
581
582static inline bool br_vlan_valid_range(const struct bridge_vlan_info *cur,
583 const struct bridge_vlan_info *last,
584 struct netlink_ext_ack *extack)
585{
586 /* pvid flag is not allowed in ranges */
587 if (cur->flags & BRIDGE_VLAN_INFO_PVID) {
588 NL_SET_ERR_MSG_MOD(extack, "Pvid isn't allowed in a range");
589 return false;
590 }
591
592 /* when cur is the range end, check if:
593 * - it has range start flag
594 * - range ids are invalid (end is equal to or before start)
595 */
596 if (last) {
597 if (cur->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
598 NL_SET_ERR_MSG_MOD(extack, "Found a new vlan range start while processing one");
599 return false;
600 } else if (!(cur->flags & BRIDGE_VLAN_INFO_RANGE_END)) {
601 NL_SET_ERR_MSG_MOD(extack, "Vlan range end flag is missing");
602 return false;
603 } else if (cur->vid <= last->vid) {
604 NL_SET_ERR_MSG_MOD(extack, "End vlan id is less than or equal to start vlan id");
605 return false;
606 }
607 }
608
609 /* check for required range flags */
610 if (!(cur->flags & (BRIDGE_VLAN_INFO_RANGE_BEGIN |
611 BRIDGE_VLAN_INFO_RANGE_END))) {
612 NL_SET_ERR_MSG_MOD(extack, "Both vlan range flags are missing");
613 return false;
614 }
615
616 return true;
617}
618
619static inline int br_afspec_cmd_to_rtm(int cmd)
620{
621 switch (cmd) {
622 case RTM_SETLINK:
623 return RTM_NEWVLAN;
624 case RTM_DELLINK:
625 return RTM_DELVLAN;
626 }
627
628 return 0;
629}
630
631static inline int br_opt_get(const struct net_bridge *br,
632 enum net_bridge_opts opt)
633{
634 return test_bit(opt, &br->options);
635}
636
637int br_boolopt_toggle(struct net_bridge *br, enum br_boolopt_id opt, bool on,
638 struct netlink_ext_ack *extack);
639int br_boolopt_get(const struct net_bridge *br, enum br_boolopt_id opt);
640int br_boolopt_multi_toggle(struct net_bridge *br,
641 struct br_boolopt_multi *bm,
642 struct netlink_ext_ack *extack);
643void br_boolopt_multi_get(const struct net_bridge *br,
644 struct br_boolopt_multi *bm);
645void br_opt_toggle(struct net_bridge *br, enum net_bridge_opts opt, bool on);
646
647/* br_device.c */
648void br_dev_setup(struct net_device *dev);
649void br_dev_delete(struct net_device *dev, struct list_head *list);
650netdev_tx_t br_dev_xmit(struct sk_buff *skb, struct net_device *dev);
651#ifdef CONFIG_NET_POLL_CONTROLLER
652static inline void br_netpoll_send_skb(const struct net_bridge_port *p,
653 struct sk_buff *skb)
654{
655 netpoll_send_skb(p->np, skb);
656}
657
658int br_netpoll_enable(struct net_bridge_port *p);
659void br_netpoll_disable(struct net_bridge_port *p);
660#else
661static inline void br_netpoll_send_skb(const struct net_bridge_port *p,
662 struct sk_buff *skb)
663{
664}
665
666static inline int br_netpoll_enable(struct net_bridge_port *p)
667{
668 return 0;
669}
670
671static inline void br_netpoll_disable(struct net_bridge_port *p)
672{
673}
674#endif
675
676/* br_fdb.c */
677int br_fdb_init(void);
678void br_fdb_fini(void);
679int br_fdb_hash_init(struct net_bridge *br);
680void br_fdb_hash_fini(struct net_bridge *br);
681void br_fdb_flush(struct net_bridge *br);
682void br_fdb_find_delete_local(struct net_bridge *br,
683 const struct net_bridge_port *p,
684 const unsigned char *addr, u16 vid);
685void br_fdb_changeaddr(struct net_bridge_port *p, const unsigned char *newaddr);
686void br_fdb_change_mac_address(struct net_bridge *br, const u8 *newaddr);
687void br_fdb_cleanup(struct work_struct *work);
688void br_fdb_delete_by_port(struct net_bridge *br,
689 const struct net_bridge_port *p, u16 vid, int do_all);
690struct net_bridge_fdb_entry *br_fdb_find_rcu(struct net_bridge *br,
691 const unsigned char *addr,
692 __u16 vid);
693int br_fdb_test_addr(struct net_device *dev, unsigned char *addr);
694int br_fdb_fillbuf(struct net_bridge *br, void *buf, unsigned long count,
695 unsigned long off);
696int br_fdb_insert(struct net_bridge *br, struct net_bridge_port *source,
697 const unsigned char *addr, u16 vid);
698void br_fdb_update(struct net_bridge *br, struct net_bridge_port *source,
699 const unsigned char *addr, u16 vid, unsigned long flags);
700
701int br_fdb_delete(struct ndmsg *ndm, struct nlattr *tb[],
702 struct net_device *dev, const unsigned char *addr, u16 vid);
703int br_fdb_add(struct ndmsg *nlh, struct nlattr *tb[], struct net_device *dev,
704 const unsigned char *addr, u16 vid, u16 nlh_flags,
705 struct netlink_ext_ack *extack);
706int br_fdb_dump(struct sk_buff *skb, struct netlink_callback *cb,
707 struct net_device *dev, struct net_device *fdev, int *idx);
708int br_fdb_get(struct sk_buff *skb, struct nlattr *tb[], struct net_device *dev,
709 const unsigned char *addr, u16 vid, u32 portid, u32 seq,
710 struct netlink_ext_ack *extack);
711int br_fdb_sync_static(struct net_bridge *br, struct net_bridge_port *p);
712void br_fdb_unsync_static(struct net_bridge *br, struct net_bridge_port *p);
713int br_fdb_external_learn_add(struct net_bridge *br, struct net_bridge_port *p,
714 const unsigned char *addr, u16 vid,
715 bool swdev_notify);
716int br_fdb_external_learn_del(struct net_bridge *br, struct net_bridge_port *p,
717 const unsigned char *addr, u16 vid,
718 bool swdev_notify);
719void br_fdb_offloaded_set(struct net_bridge *br, struct net_bridge_port *p,
720 const unsigned char *addr, u16 vid, bool offloaded);
721
722/* br_forward.c */
723enum br_pkt_type {
724 BR_PKT_UNICAST,
725 BR_PKT_MULTICAST,
726 BR_PKT_BROADCAST
727};
728int br_dev_queue_push_xmit(struct net *net, struct sock *sk, struct sk_buff *skb);
729void br_forward(const struct net_bridge_port *to, struct sk_buff *skb,
730 bool local_rcv, bool local_orig);
731int br_forward_finish(struct net *net, struct sock *sk, struct sk_buff *skb);
732void br_flood(struct net_bridge *br, struct sk_buff *skb,
733 enum br_pkt_type pkt_type, bool local_rcv, bool local_orig);
734
735/* return true if both source port and dest port are isolated */
736static inline bool br_skb_isolated(const struct net_bridge_port *to,
737 const struct sk_buff *skb)
738{
739 return BR_INPUT_SKB_CB(skb)->src_port_isolated &&
740 (to->flags & BR_ISOLATED);
741}
742
743/* br_if.c */
744void br_port_carrier_check(struct net_bridge_port *p, bool *notified);
745int br_add_bridge(struct net *net, const char *name);
746int br_del_bridge(struct net *net, const char *name);
747int br_add_if(struct net_bridge *br, struct net_device *dev,
748 struct netlink_ext_ack *extack);
749int br_del_if(struct net_bridge *br, struct net_device *dev);
750void br_mtu_auto_adjust(struct net_bridge *br);
751netdev_features_t br_features_recompute(struct net_bridge *br,
752 netdev_features_t features);
753void br_port_flags_change(struct net_bridge_port *port, unsigned long mask);
754void br_manage_promisc(struct net_bridge *br);
755int nbp_backup_change(struct net_bridge_port *p, struct net_device *backup_dev);
756
757/* br_input.c */
758int br_handle_frame_finish(struct net *net, struct sock *sk, struct sk_buff *skb);
759rx_handler_func_t *br_get_rx_handler(const struct net_device *dev);
760
761struct br_frame_type {
762 __be16 type;
763 int (*frame_handler)(struct net_bridge_port *port,
764 struct sk_buff *skb);
765 struct hlist_node list;
766};
767
768void br_add_frame(struct net_bridge *br, struct br_frame_type *ft);
769void br_del_frame(struct net_bridge *br, struct br_frame_type *ft);
770
771static inline bool br_rx_handler_check_rcu(const struct net_device *dev)
772{
773 return rcu_dereference(dev->rx_handler) == br_get_rx_handler(dev);
774}
775
776static inline bool br_rx_handler_check_rtnl(const struct net_device *dev)
777{
778 return rcu_dereference_rtnl(dev->rx_handler) == br_get_rx_handler(dev);
779}
780
781static inline struct net_bridge_port *br_port_get_check_rcu(const struct net_device *dev)
782{
783 return br_rx_handler_check_rcu(dev) ? br_port_get_rcu(dev) : NULL;
784}
785
786static inline struct net_bridge_port *
787br_port_get_check_rtnl(const struct net_device *dev)
788{
789 return br_rx_handler_check_rtnl(dev) ? br_port_get_rtnl_rcu(dev) : NULL;
790}
791
792/* br_ioctl.c */
793int br_dev_ioctl(struct net_device *dev, struct ifreq *rq, int cmd);
794int br_ioctl_deviceless_stub(struct net *net, unsigned int cmd,
795 void __user *arg);
796
797/* br_multicast.c */
798#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
799int br_multicast_rcv(struct net_bridge *br, struct net_bridge_port *port,
800 struct sk_buff *skb, u16 vid);
801struct net_bridge_mdb_entry *br_mdb_get(struct net_bridge *br,
802 struct sk_buff *skb, u16 vid);
803int br_multicast_add_port(struct net_bridge_port *port);
804void br_multicast_del_port(struct net_bridge_port *port);
805void br_multicast_enable_port(struct net_bridge_port *port);
806void br_multicast_disable_port(struct net_bridge_port *port);
807void br_multicast_init(struct net_bridge *br);
808void br_multicast_join_snoopers(struct net_bridge *br);
809void br_multicast_leave_snoopers(struct net_bridge *br);
810void br_multicast_open(struct net_bridge *br);
811void br_multicast_stop(struct net_bridge *br);
812void br_multicast_dev_del(struct net_bridge *br);
813void br_multicast_flood(struct net_bridge_mdb_entry *mdst,
814 struct sk_buff *skb, bool local_rcv, bool local_orig);
815int br_multicast_set_router(struct net_bridge *br, unsigned long val);
816int br_multicast_set_port_router(struct net_bridge_port *p, unsigned long val);
817int br_multicast_toggle(struct net_bridge *br, unsigned long val,
818 struct netlink_ext_ack *extack);
819int br_multicast_set_querier(struct net_bridge *br, unsigned long val);
820int br_multicast_set_hash_max(struct net_bridge *br, unsigned long val);
821int br_multicast_set_igmp_version(struct net_bridge *br, unsigned long val);
822#if IS_ENABLED(CONFIG_IPV6)
823int br_multicast_set_mld_version(struct net_bridge *br, unsigned long val);
824#endif
825struct net_bridge_mdb_entry *
826br_mdb_ip_get(struct net_bridge *br, struct br_ip *dst);
827struct net_bridge_mdb_entry *
828br_multicast_new_group(struct net_bridge *br, struct br_ip *group);
829struct net_bridge_port_group *
830br_multicast_new_port_group(struct net_bridge_port *port, struct br_ip *group,
831 struct net_bridge_port_group __rcu *next,
832 unsigned char flags, const unsigned char *src,
833 u8 filter_mode, u8 rt_protocol);
834int br_mdb_hash_init(struct net_bridge *br);
835void br_mdb_hash_fini(struct net_bridge *br);
836void br_mdb_notify(struct net_device *dev, struct net_bridge_mdb_entry *mp,
837 struct net_bridge_port_group *pg, int type);
838void br_rtr_notify(struct net_device *dev, struct net_bridge_port *port,
839 int type);
840void br_multicast_del_pg(struct net_bridge_mdb_entry *mp,
841 struct net_bridge_port_group *pg,
842 struct net_bridge_port_group __rcu **pp);
843void br_multicast_count(struct net_bridge *br, const struct net_bridge_port *p,
844 const struct sk_buff *skb, u8 type, u8 dir);
845int br_multicast_init_stats(struct net_bridge *br);
846void br_multicast_uninit_stats(struct net_bridge *br);
847void br_multicast_get_stats(const struct net_bridge *br,
848 const struct net_bridge_port *p,
849 struct br_mcast_stats *dest);
850void br_mdb_init(void);
851void br_mdb_uninit(void);
852void br_multicast_host_join(struct net_bridge_mdb_entry *mp, bool notify);
853void br_multicast_host_leave(struct net_bridge_mdb_entry *mp, bool notify);
854void br_multicast_star_g_handle_mode(struct net_bridge_port_group *pg,
855 u8 filter_mode);
856void br_multicast_sg_add_exclude_ports(struct net_bridge_mdb_entry *star_mp,
857 struct net_bridge_port_group *sg);
858struct net_bridge_group_src *
859br_multicast_find_group_src(struct net_bridge_port_group *pg, struct br_ip *ip);
860void br_multicast_del_group_src(struct net_bridge_group_src *src,
861 bool fastleave);
862
863static inline bool br_group_is_l2(const struct br_ip *group)
864{
865 return group->proto == 0;
866}
867
868#define mlock_dereference(X, br) \
869 rcu_dereference_protected(X, lockdep_is_held(&br->multicast_lock))
870
871static inline struct hlist_node *
872br_multicast_get_first_rport_node(struct net_bridge *b, struct sk_buff *skb) {
873#if IS_ENABLED(CONFIG_IPV6)
874 if (skb->protocol == htons(ETH_P_IPV6))
875 return rcu_dereference(hlist_first_rcu(&b->ip6_mc_router_list));
876#endif
877 return rcu_dereference(hlist_first_rcu(&b->ip4_mc_router_list));
878}
879
880static inline struct net_bridge_port *
881br_multicast_rport_from_node_skb(struct hlist_node *rp, struct sk_buff *skb) {
882#if IS_ENABLED(CONFIG_IPV6)
883 if (skb->protocol == htons(ETH_P_IPV6))
884 return hlist_entry_safe(rp, struct net_bridge_port, ip6_rlist);
885#endif
886 return hlist_entry_safe(rp, struct net_bridge_port, ip4_rlist);
887}
888
889static inline bool br_ip4_multicast_is_router(struct net_bridge *br)
890{
891 return timer_pending(&br->ip4_mc_router_timer);
892}
893
894static inline bool br_ip6_multicast_is_router(struct net_bridge *br)
895{
896#if IS_ENABLED(CONFIG_IPV6)
897 return timer_pending(&br->ip6_mc_router_timer);
898#else
899 return false;
900#endif
901}
902
903static inline bool
904br_multicast_is_router(struct net_bridge *br, struct sk_buff *skb)
905{
906 switch (br->multicast_router) {
907 case MDB_RTR_TYPE_PERM:
908 return true;
909 case MDB_RTR_TYPE_TEMP_QUERY:
910 if (skb) {
911 if (skb->protocol == htons(ETH_P_IP))
912 return br_ip4_multicast_is_router(br);
913 else if (skb->protocol == htons(ETH_P_IPV6))
914 return br_ip6_multicast_is_router(br);
915 } else {
916 return br_ip4_multicast_is_router(br) ||
917 br_ip6_multicast_is_router(br);
918 }
919 fallthrough;
920 default:
921 return false;
922 }
923}
924
925static inline bool
926__br_multicast_querier_exists(struct net_bridge *br,
927 struct bridge_mcast_other_query *querier,
928 const bool is_ipv6)
929{
930 bool own_querier_enabled;
931
932 if (br_opt_get(br, BROPT_MULTICAST_QUERIER)) {
933 if (is_ipv6 && !br_opt_get(br, BROPT_HAS_IPV6_ADDR))
934 own_querier_enabled = false;
935 else
936 own_querier_enabled = true;
937 } else {
938 own_querier_enabled = false;
939 }
940
941 return time_is_before_jiffies(querier->delay_time) &&
942 (own_querier_enabled || timer_pending(&querier->timer));
943}
944
945static inline bool br_multicast_querier_exists(struct net_bridge *br,
946 struct ethhdr *eth,
947 const struct net_bridge_mdb_entry *mdb)
948{
949 switch (eth->h_proto) {
950 case (htons(ETH_P_IP)):
951 return __br_multicast_querier_exists(br,
952 &br->ip4_other_query, false);
953#if IS_ENABLED(CONFIG_IPV6)
954 case (htons(ETH_P_IPV6)):
955 return __br_multicast_querier_exists(br,
956 &br->ip6_other_query, true);
957#endif
958 default:
959 return !!mdb && br_group_is_l2(&mdb->addr);
960 }
961}
962
963static inline bool br_multicast_is_star_g(const struct br_ip *ip)
964{
965 switch (ip->proto) {
966 case htons(ETH_P_IP):
967 return ipv4_is_zeronet(ip->src.ip4);
968#if IS_ENABLED(CONFIG_IPV6)
969 case htons(ETH_P_IPV6):
970 return ipv6_addr_any(&ip->src.ip6);
971#endif
972 default:
973 return false;
974 }
975}
976
977static inline bool br_multicast_should_handle_mode(const struct net_bridge *br,
978 __be16 proto)
979{
980 switch (proto) {
981 case htons(ETH_P_IP):
982 return !!(br->multicast_igmp_version == 3);
983#if IS_ENABLED(CONFIG_IPV6)
984 case htons(ETH_P_IPV6):
985 return !!(br->multicast_mld_version == 2);
986#endif
987 default:
988 return false;
989 }
990}
991
992static inline int br_multicast_igmp_type(const struct sk_buff *skb)
993{
994 return BR_INPUT_SKB_CB(skb)->igmp;
995}
996
997static inline unsigned long br_multicast_lmqt(const struct net_bridge *br)
998{
999 return br->multicast_last_member_interval *
1000 br->multicast_last_member_count;
1001}
1002
1003static inline unsigned long br_multicast_gmi(const struct net_bridge *br)
1004{
1005 return br->multicast_membership_interval;
1006}
1007#else
1008static inline int br_multicast_rcv(struct net_bridge *br,
1009 struct net_bridge_port *port,
1010 struct sk_buff *skb,
1011 u16 vid)
1012{
1013 return 0;
1014}
1015
1016static inline struct net_bridge_mdb_entry *br_mdb_get(struct net_bridge *br,
1017 struct sk_buff *skb, u16 vid)
1018{
1019 return NULL;
1020}
1021
1022static inline int br_multicast_add_port(struct net_bridge_port *port)
1023{
1024 return 0;
1025}
1026
1027static inline void br_multicast_del_port(struct net_bridge_port *port)
1028{
1029}
1030
1031static inline void br_multicast_enable_port(struct net_bridge_port *port)
1032{
1033}
1034
1035static inline void br_multicast_disable_port(struct net_bridge_port *port)
1036{
1037}
1038
1039static inline void br_multicast_init(struct net_bridge *br)
1040{
1041}
1042
1043static inline void br_multicast_join_snoopers(struct net_bridge *br)
1044{
1045}
1046
1047static inline void br_multicast_leave_snoopers(struct net_bridge *br)
1048{
1049}
1050
1051static inline void br_multicast_open(struct net_bridge *br)
1052{
1053}
1054
1055static inline void br_multicast_stop(struct net_bridge *br)
1056{
1057}
1058
1059static inline void br_multicast_dev_del(struct net_bridge *br)
1060{
1061}
1062
1063static inline void br_multicast_flood(struct net_bridge_mdb_entry *mdst,
1064 struct sk_buff *skb,
1065 bool local_rcv, bool local_orig)
1066{
1067}
1068
1069static inline bool br_multicast_is_router(struct net_bridge *br,
1070 struct sk_buff *skb)
1071{
1072 return false;
1073}
1074
1075static inline bool br_multicast_querier_exists(struct net_bridge *br,
1076 struct ethhdr *eth,
1077 const struct net_bridge_mdb_entry *mdb)
1078{
1079 return false;
1080}
1081
1082static inline void br_mdb_init(void)
1083{
1084}
1085
1086static inline void br_mdb_uninit(void)
1087{
1088}
1089
1090static inline int br_mdb_hash_init(struct net_bridge *br)
1091{
1092 return 0;
1093}
1094
1095static inline void br_mdb_hash_fini(struct net_bridge *br)
1096{
1097}
1098
1099static inline void br_multicast_count(struct net_bridge *br,
1100 const struct net_bridge_port *p,
1101 const struct sk_buff *skb,
1102 u8 type, u8 dir)
1103{
1104}
1105
1106static inline int br_multicast_init_stats(struct net_bridge *br)
1107{
1108 return 0;
1109}
1110
1111static inline void br_multicast_uninit_stats(struct net_bridge *br)
1112{
1113}
1114
1115static inline int br_multicast_igmp_type(const struct sk_buff *skb)
1116{
1117 return 0;
1118}
1119#endif
1120
1121/* br_vlan.c */
1122#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1123bool br_allowed_ingress(const struct net_bridge *br,
1124 struct net_bridge_vlan_group *vg, struct sk_buff *skb,
1125 u16 *vid, u8 *state);
1126bool br_allowed_egress(struct net_bridge_vlan_group *vg,
1127 const struct sk_buff *skb);
1128bool br_should_learn(struct net_bridge_port *p, struct sk_buff *skb, u16 *vid);
1129struct sk_buff *br_handle_vlan(struct net_bridge *br,
1130 const struct net_bridge_port *port,
1131 struct net_bridge_vlan_group *vg,
1132 struct sk_buff *skb);
1133int br_vlan_add(struct net_bridge *br, u16 vid, u16 flags,
1134 bool *changed, struct netlink_ext_ack *extack);
1135int br_vlan_delete(struct net_bridge *br, u16 vid);
1136void br_vlan_flush(struct net_bridge *br);
1137struct net_bridge_vlan *br_vlan_find(struct net_bridge_vlan_group *vg, u16 vid);
1138void br_recalculate_fwd_mask(struct net_bridge *br);
1139int br_vlan_filter_toggle(struct net_bridge *br, unsigned long val,
1140 struct netlink_ext_ack *extack);
1141int __br_vlan_set_proto(struct net_bridge *br, __be16 proto,
1142 struct netlink_ext_ack *extack);
1143int br_vlan_set_proto(struct net_bridge *br, unsigned long val,
1144 struct netlink_ext_ack *extack);
1145int br_vlan_set_stats(struct net_bridge *br, unsigned long val);
1146int br_vlan_set_stats_per_port(struct net_bridge *br, unsigned long val);
1147int br_vlan_init(struct net_bridge *br);
1148int br_vlan_set_default_pvid(struct net_bridge *br, unsigned long val,
1149 struct netlink_ext_ack *extack);
1150int __br_vlan_set_default_pvid(struct net_bridge *br, u16 pvid,
1151 struct netlink_ext_ack *extack);
1152int nbp_vlan_add(struct net_bridge_port *port, u16 vid, u16 flags,
1153 bool *changed, struct netlink_ext_ack *extack);
1154int nbp_vlan_delete(struct net_bridge_port *port, u16 vid);
1155void nbp_vlan_flush(struct net_bridge_port *port);
1156int nbp_vlan_init(struct net_bridge_port *port, struct netlink_ext_ack *extack);
1157int nbp_get_num_vlan_infos(struct net_bridge_port *p, u32 filter_mask);
1158void br_vlan_get_stats(const struct net_bridge_vlan *v,
1159 struct pcpu_sw_netstats *stats);
1160void br_vlan_port_event(struct net_bridge_port *p, unsigned long event);
1161int br_vlan_bridge_event(struct net_device *dev, unsigned long event,
1162 void *ptr);
1163void br_vlan_rtnl_init(void);
1164void br_vlan_rtnl_uninit(void);
1165void br_vlan_notify(const struct net_bridge *br,
1166 const struct net_bridge_port *p,
1167 u16 vid, u16 vid_range,
1168 int cmd);
1169bool br_vlan_can_enter_range(const struct net_bridge_vlan *v_curr,
1170 const struct net_bridge_vlan *range_end);
1171
1172void br_vlan_fill_forward_path_pvid(struct net_bridge *br,
1173 struct net_device_path_ctx *ctx,
1174 struct net_device_path *path);
1175int br_vlan_fill_forward_path_mode(struct net_bridge *br,
1176 struct net_bridge_port *dst,
1177 struct net_device_path *path);
1178
1179static inline struct net_bridge_vlan_group *br_vlan_group(
1180 const struct net_bridge *br)
1181{
1182 return rtnl_dereference(br->vlgrp);
1183}
1184
1185static inline struct net_bridge_vlan_group *nbp_vlan_group(
1186 const struct net_bridge_port *p)
1187{
1188 return rtnl_dereference(p->vlgrp);
1189}
1190
1191static inline struct net_bridge_vlan_group *br_vlan_group_rcu(
1192 const struct net_bridge *br)
1193{
1194 return rcu_dereference(br->vlgrp);
1195}
1196
1197static inline struct net_bridge_vlan_group *nbp_vlan_group_rcu(
1198 const struct net_bridge_port *p)
1199{
1200 return rcu_dereference(p->vlgrp);
1201}
1202
1203/* Since bridge now depends on 8021Q module, but the time bridge sees the
1204 * skb, the vlan tag will always be present if the frame was tagged.
1205 */
1206static inline int br_vlan_get_tag(const struct sk_buff *skb, u16 *vid)
1207{
1208 int err = 0;
1209
1210 if (skb_vlan_tag_present(skb)) {
1211 *vid = skb_vlan_tag_get_id(skb);
1212 } else {
1213 *vid = 0;
1214 err = -EINVAL;
1215 }
1216
1217 return err;
1218}
1219
1220static inline u16 br_get_pvid(const struct net_bridge_vlan_group *vg)
1221{
1222 if (!vg)
1223 return 0;
1224
1225 smp_rmb();
1226 return vg->pvid;
1227}
1228
1229static inline u16 br_vlan_flags(const struct net_bridge_vlan *v, u16 pvid)
1230{
1231 return v->vid == pvid ? v->flags | BRIDGE_VLAN_INFO_PVID : v->flags;
1232}
1233#else
1234static inline bool br_allowed_ingress(const struct net_bridge *br,
1235 struct net_bridge_vlan_group *vg,
1236 struct sk_buff *skb,
1237 u16 *vid, u8 *state)
1238{
1239 return true;
1240}
1241
1242static inline bool br_allowed_egress(struct net_bridge_vlan_group *vg,
1243 const struct sk_buff *skb)
1244{
1245 return true;
1246}
1247
1248static inline bool br_should_learn(struct net_bridge_port *p,
1249 struct sk_buff *skb, u16 *vid)
1250{
1251 return true;
1252}
1253
1254static inline struct sk_buff *br_handle_vlan(struct net_bridge *br,
1255 const struct net_bridge_port *port,
1256 struct net_bridge_vlan_group *vg,
1257 struct sk_buff *skb)
1258{
1259 return skb;
1260}
1261
1262static inline int br_vlan_add(struct net_bridge *br, u16 vid, u16 flags,
1263 bool *changed, struct netlink_ext_ack *extack)
1264{
1265 *changed = false;
1266 return -EOPNOTSUPP;
1267}
1268
1269static inline int br_vlan_delete(struct net_bridge *br, u16 vid)
1270{
1271 return -EOPNOTSUPP;
1272}
1273
1274static inline void br_vlan_flush(struct net_bridge *br)
1275{
1276}
1277
1278static inline void br_recalculate_fwd_mask(struct net_bridge *br)
1279{
1280}
1281
1282static inline int br_vlan_init(struct net_bridge *br)
1283{
1284 return 0;
1285}
1286
1287static inline int nbp_vlan_add(struct net_bridge_port *port, u16 vid, u16 flags,
1288 bool *changed, struct netlink_ext_ack *extack)
1289{
1290 *changed = false;
1291 return -EOPNOTSUPP;
1292}
1293
1294static inline int nbp_vlan_delete(struct net_bridge_port *port, u16 vid)
1295{
1296 return -EOPNOTSUPP;
1297}
1298
1299static inline void nbp_vlan_flush(struct net_bridge_port *port)
1300{
1301}
1302
1303static inline struct net_bridge_vlan *br_vlan_find(struct net_bridge_vlan_group *vg,
1304 u16 vid)
1305{
1306 return NULL;
1307}
1308
1309static inline int nbp_vlan_init(struct net_bridge_port *port,
1310 struct netlink_ext_ack *extack)
1311{
1312 return 0;
1313}
1314
1315static inline u16 br_vlan_get_tag(const struct sk_buff *skb, u16 *tag)
1316{
1317 return 0;
1318}
1319
1320static inline u16 br_get_pvid(const struct net_bridge_vlan_group *vg)
1321{
1322 return 0;
1323}
1324
1325static inline int br_vlan_filter_toggle(struct net_bridge *br,
1326 unsigned long val,
1327 struct netlink_ext_ack *extack)
1328{
1329 return -EOPNOTSUPP;
1330}
1331
1332static inline int nbp_get_num_vlan_infos(struct net_bridge_port *p,
1333 u32 filter_mask)
1334{
1335 return 0;
1336}
1337
1338static inline void br_vlan_fill_forward_path_pvid(struct net_bridge *br,
1339 struct net_device_path_ctx *ctx,
1340 struct net_device_path *path)
1341{
1342}
1343
1344static inline int br_vlan_fill_forward_path_mode(struct net_bridge *br,
1345 struct net_bridge_port *dst,
1346 struct net_device_path *path)
1347{
1348 return 0;
1349}
1350
1351static inline struct net_bridge_vlan_group *br_vlan_group(
1352 const struct net_bridge *br)
1353{
1354 return NULL;
1355}
1356
1357static inline struct net_bridge_vlan_group *nbp_vlan_group(
1358 const struct net_bridge_port *p)
1359{
1360 return NULL;
1361}
1362
1363static inline struct net_bridge_vlan_group *br_vlan_group_rcu(
1364 const struct net_bridge *br)
1365{
1366 return NULL;
1367}
1368
1369static inline struct net_bridge_vlan_group *nbp_vlan_group_rcu(
1370 const struct net_bridge_port *p)
1371{
1372 return NULL;
1373}
1374
1375static inline void br_vlan_get_stats(const struct net_bridge_vlan *v,
1376 struct pcpu_sw_netstats *stats)
1377{
1378}
1379
1380static inline void br_vlan_port_event(struct net_bridge_port *p,
1381 unsigned long event)
1382{
1383}
1384
1385static inline int br_vlan_bridge_event(struct net_device *dev,
1386 unsigned long event, void *ptr)
1387{
1388 return 0;
1389}
1390
1391static inline void br_vlan_rtnl_init(void)
1392{
1393}
1394
1395static inline void br_vlan_rtnl_uninit(void)
1396{
1397}
1398
1399static inline void br_vlan_notify(const struct net_bridge *br,
1400 const struct net_bridge_port *p,
1401 u16 vid, u16 vid_range,
1402 int cmd)
1403{
1404}
1405
1406static inline bool br_vlan_can_enter_range(const struct net_bridge_vlan *v_curr,
1407 const struct net_bridge_vlan *range_end)
1408{
1409 return true;
1410}
1411#endif
1412
1413/* br_vlan_options.c */
1414#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1415bool br_vlan_opts_eq_range(const struct net_bridge_vlan *v_curr,
1416 const struct net_bridge_vlan *range_end);
1417bool br_vlan_opts_fill(struct sk_buff *skb, const struct net_bridge_vlan *v);
1418size_t br_vlan_opts_nl_size(void);
1419int br_vlan_process_options(const struct net_bridge *br,
1420 const struct net_bridge_port *p,
1421 struct net_bridge_vlan *range_start,
1422 struct net_bridge_vlan *range_end,
1423 struct nlattr **tb,
1424 struct netlink_ext_ack *extack);
1425
1426/* vlan state manipulation helpers using *_ONCE to annotate lock-free access */
1427static inline u8 br_vlan_get_state(const struct net_bridge_vlan *v)
1428{
1429 return READ_ONCE(v->state);
1430}
1431
1432static inline void br_vlan_set_state(struct net_bridge_vlan *v, u8 state)
1433{
1434 WRITE_ONCE(v->state, state);
1435}
1436
1437static inline u8 br_vlan_get_pvid_state(const struct net_bridge_vlan_group *vg)
1438{
1439 return READ_ONCE(vg->pvid_state);
1440}
1441
1442static inline void br_vlan_set_pvid_state(struct net_bridge_vlan_group *vg,
1443 u8 state)
1444{
1445 WRITE_ONCE(vg->pvid_state, state);
1446}
1447
1448/* learn_allow is true at ingress and false at egress */
1449static inline bool br_vlan_state_allowed(u8 state, bool learn_allow)
1450{
1451 switch (state) {
1452 case BR_STATE_LEARNING:
1453 return learn_allow;
1454 case BR_STATE_FORWARDING:
1455 return true;
1456 default:
1457 return false;
1458 }
1459}
1460#endif
1461
1462struct nf_br_ops {
1463 int (*br_dev_xmit_hook)(struct sk_buff *skb);
1464};
1465extern const struct nf_br_ops __rcu *nf_br_ops;
1466
1467/* br_netfilter.c */
1468#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1469int br_nf_core_init(void);
1470void br_nf_core_fini(void);
1471void br_netfilter_rtable_init(struct net_bridge *);
1472#else
1473static inline int br_nf_core_init(void) { return 0; }
1474static inline void br_nf_core_fini(void) {}
1475#define br_netfilter_rtable_init(x)
1476#endif
1477
1478/* br_stp.c */
1479void br_set_state(struct net_bridge_port *p, unsigned int state);
1480struct net_bridge_port *br_get_port(struct net_bridge *br, u16 port_no);
1481void br_init_port(struct net_bridge_port *p);
1482void br_become_designated_port(struct net_bridge_port *p);
1483
1484void __br_set_forward_delay(struct net_bridge *br, unsigned long t);
1485int br_set_forward_delay(struct net_bridge *br, unsigned long x);
1486int br_set_hello_time(struct net_bridge *br, unsigned long x);
1487int br_set_max_age(struct net_bridge *br, unsigned long x);
1488int __set_ageing_time(struct net_device *dev, unsigned long t);
1489int br_set_ageing_time(struct net_bridge *br, clock_t ageing_time);
1490
1491
1492/* br_stp_if.c */
1493void br_stp_enable_bridge(struct net_bridge *br);
1494void br_stp_disable_bridge(struct net_bridge *br);
1495int br_stp_set_enabled(struct net_bridge *br, unsigned long val,
1496 struct netlink_ext_ack *extack);
1497void br_stp_enable_port(struct net_bridge_port *p);
1498void br_stp_disable_port(struct net_bridge_port *p);
1499bool br_stp_recalculate_bridge_id(struct net_bridge *br);
1500void br_stp_change_bridge_id(struct net_bridge *br, const unsigned char *a);
1501void br_stp_set_bridge_priority(struct net_bridge *br, u16 newprio);
1502int br_stp_set_port_priority(struct net_bridge_port *p, unsigned long newprio);
1503int br_stp_set_path_cost(struct net_bridge_port *p, unsigned long path_cost);
1504ssize_t br_show_bridge_id(char *buf, const struct bridge_id *id);
1505
1506/* br_stp_bpdu.c */
1507struct stp_proto;
1508void br_stp_rcv(const struct stp_proto *proto, struct sk_buff *skb,
1509 struct net_device *dev);
1510
1511/* br_stp_timer.c */
1512void br_stp_timer_init(struct net_bridge *br);
1513void br_stp_port_timer_init(struct net_bridge_port *p);
1514unsigned long br_timer_value(const struct timer_list *timer);
1515
1516/* br.c */
1517#if IS_ENABLED(CONFIG_ATM_LANE)
1518extern int (*br_fdb_test_addr_hook)(struct net_device *dev, unsigned char *addr);
1519#endif
1520
1521/* br_mrp.c */
1522#if IS_ENABLED(CONFIG_BRIDGE_MRP)
1523int br_mrp_parse(struct net_bridge *br, struct net_bridge_port *p,
1524 struct nlattr *attr, int cmd, struct netlink_ext_ack *extack);
1525bool br_mrp_enabled(struct net_bridge *br);
1526void br_mrp_port_del(struct net_bridge *br, struct net_bridge_port *p);
1527int br_mrp_fill_info(struct sk_buff *skb, struct net_bridge *br);
1528#else
1529static inline int br_mrp_parse(struct net_bridge *br, struct net_bridge_port *p,
1530 struct nlattr *attr, int cmd,
1531 struct netlink_ext_ack *extack)
1532{
1533 return -EOPNOTSUPP;
1534}
1535
1536static inline bool br_mrp_enabled(struct net_bridge *br)
1537{
1538 return false;
1539}
1540
1541static inline void br_mrp_port_del(struct net_bridge *br,
1542 struct net_bridge_port *p)
1543{
1544}
1545
1546static inline int br_mrp_fill_info(struct sk_buff *skb, struct net_bridge *br)
1547{
1548 return 0;
1549}
1550
1551#endif
1552
1553/* br_cfm.c */
1554#if IS_ENABLED(CONFIG_BRIDGE_CFM)
1555int br_cfm_parse(struct net_bridge *br, struct net_bridge_port *p,
1556 struct nlattr *attr, int cmd, struct netlink_ext_ack *extack);
1557bool br_cfm_created(struct net_bridge *br);
1558void br_cfm_port_del(struct net_bridge *br, struct net_bridge_port *p);
1559int br_cfm_config_fill_info(struct sk_buff *skb, struct net_bridge *br);
1560int br_cfm_status_fill_info(struct sk_buff *skb,
1561 struct net_bridge *br,
1562 bool getlink);
1563int br_cfm_mep_count(struct net_bridge *br, u32 *count);
1564int br_cfm_peer_mep_count(struct net_bridge *br, u32 *count);
1565#else
1566static inline int br_cfm_parse(struct net_bridge *br, struct net_bridge_port *p,
1567 struct nlattr *attr, int cmd,
1568 struct netlink_ext_ack *extack)
1569{
1570 return -EOPNOTSUPP;
1571}
1572
1573static inline bool br_cfm_created(struct net_bridge *br)
1574{
1575 return false;
1576}
1577
1578static inline void br_cfm_port_del(struct net_bridge *br,
1579 struct net_bridge_port *p)
1580{
1581}
1582
1583static inline int br_cfm_config_fill_info(struct sk_buff *skb, struct net_bridge *br)
1584{
1585 return -EOPNOTSUPP;
1586}
1587
1588static inline int br_cfm_status_fill_info(struct sk_buff *skb,
1589 struct net_bridge *br,
1590 bool getlink)
1591{
1592 return -EOPNOTSUPP;
1593}
1594
1595static inline int br_cfm_mep_count(struct net_bridge *br, u32 *count)
1596{
1597 return -EOPNOTSUPP;
1598}
1599
1600static inline int br_cfm_peer_mep_count(struct net_bridge *br, u32 *count)
1601{
1602 return -EOPNOTSUPP;
1603}
1604#endif
1605
1606/* br_netlink.c */
1607extern struct rtnl_link_ops br_link_ops;
1608int br_netlink_init(void);
1609void br_netlink_fini(void);
1610void br_ifinfo_notify(int event, const struct net_bridge *br,
1611 const struct net_bridge_port *port);
1612void br_info_notify(int event, const struct net_bridge *br,
1613 const struct net_bridge_port *port, u32 filter);
1614int br_setlink(struct net_device *dev, struct nlmsghdr *nlmsg, u16 flags,
1615 struct netlink_ext_ack *extack);
1616int br_dellink(struct net_device *dev, struct nlmsghdr *nlmsg, u16 flags);
1617int br_getlink(struct sk_buff *skb, u32 pid, u32 seq, struct net_device *dev,
1618 u32 filter_mask, int nlflags);
1619int br_process_vlan_info(struct net_bridge *br,
1620 struct net_bridge_port *p, int cmd,
1621 struct bridge_vlan_info *vinfo_curr,
1622 struct bridge_vlan_info **vinfo_last,
1623 bool *changed,
1624 struct netlink_ext_ack *extack);
1625
1626#ifdef CONFIG_SYSFS
1627/* br_sysfs_if.c */
1628extern const struct sysfs_ops brport_sysfs_ops;
1629int br_sysfs_addif(struct net_bridge_port *p);
1630int br_sysfs_renameif(struct net_bridge_port *p);
1631
1632/* br_sysfs_br.c */
1633int br_sysfs_addbr(struct net_device *dev);
1634void br_sysfs_delbr(struct net_device *dev);
1635
1636#else
1637
1638static inline int br_sysfs_addif(struct net_bridge_port *p) { return 0; }
1639static inline int br_sysfs_renameif(struct net_bridge_port *p) { return 0; }
1640static inline int br_sysfs_addbr(struct net_device *dev) { return 0; }
1641static inline void br_sysfs_delbr(struct net_device *dev) { return; }
1642#endif /* CONFIG_SYSFS */
1643
1644/* br_switchdev.c */
1645#ifdef CONFIG_NET_SWITCHDEV
1646int nbp_switchdev_mark_set(struct net_bridge_port *p);
1647void nbp_switchdev_frame_mark(const struct net_bridge_port *p,
1648 struct sk_buff *skb);
1649bool nbp_switchdev_allowed_egress(const struct net_bridge_port *p,
1650 const struct sk_buff *skb);
1651int br_switchdev_set_port_flag(struct net_bridge_port *p,
1652 unsigned long flags,
1653 unsigned long mask,
1654 struct netlink_ext_ack *extack);
1655void br_switchdev_fdb_notify(struct net_bridge *br,
1656 const struct net_bridge_fdb_entry *fdb, int type);
1657int br_switchdev_port_vlan_add(struct net_device *dev, u16 vid, u16 flags,
1658 struct netlink_ext_ack *extack);
1659int br_switchdev_port_vlan_del(struct net_device *dev, u16 vid);
1660
1661static inline void br_switchdev_frame_unmark(struct sk_buff *skb)
1662{
1663 skb->offload_fwd_mark = 0;
1664}
1665#else
1666static inline int nbp_switchdev_mark_set(struct net_bridge_port *p)
1667{
1668 return 0;
1669}
1670
1671static inline void nbp_switchdev_frame_mark(const struct net_bridge_port *p,
1672 struct sk_buff *skb)
1673{
1674}
1675
1676static inline bool nbp_switchdev_allowed_egress(const struct net_bridge_port *p,
1677 const struct sk_buff *skb)
1678{
1679 return true;
1680}
1681
1682static inline int br_switchdev_set_port_flag(struct net_bridge_port *p,
1683 unsigned long flags,
1684 unsigned long mask,
1685 struct netlink_ext_ack *extack)
1686{
1687 return 0;
1688}
1689
1690static inline int br_switchdev_port_vlan_add(struct net_device *dev,
1691 u16 vid, u16 flags,
1692 struct netlink_ext_ack *extack)
1693{
1694 return -EOPNOTSUPP;
1695}
1696
1697static inline int br_switchdev_port_vlan_del(struct net_device *dev, u16 vid)
1698{
1699 return -EOPNOTSUPP;
1700}
1701
1702static inline void
1703br_switchdev_fdb_notify(struct net_bridge *br,
1704 const struct net_bridge_fdb_entry *fdb, int type)
1705{
1706}
1707
1708static inline void br_switchdev_frame_unmark(struct sk_buff *skb)
1709{
1710}
1711#endif /* CONFIG_NET_SWITCHDEV */
1712
1713/* br_arp_nd_proxy.c */
1714void br_recalculate_neigh_suppress_enabled(struct net_bridge *br);
1715void br_do_proxy_suppress_arp(struct sk_buff *skb, struct net_bridge *br,
1716 u16 vid, struct net_bridge_port *p);
1717void br_do_suppress_nd(struct sk_buff *skb, struct net_bridge *br,
1718 u16 vid, struct net_bridge_port *p, struct nd_msg *msg);
1719struct nd_msg *br_is_nd_neigh_msg(struct sk_buff *skb, struct nd_msg *m);
1720#endif