Loading...
1/* SPDX-License-Identifier: GPL-2.0 */
2#ifndef __NETNS_CONNTRACK_H
3#define __NETNS_CONNTRACK_H
4
5#include <linux/list.h>
6#include <linux/list_nulls.h>
7#include <linux/atomic.h>
8#include <linux/workqueue.h>
9#include <linux/netfilter/nf_conntrack_tcp.h>
10#ifdef CONFIG_NF_CT_PROTO_DCCP
11#include <linux/netfilter/nf_conntrack_dccp.h>
12#endif
13#ifdef CONFIG_NF_CT_PROTO_SCTP
14#include <linux/netfilter/nf_conntrack_sctp.h>
15#endif
16#include <linux/seqlock.h>
17
18struct ctl_table_header;
19struct nf_conntrack_ecache;
20
21struct nf_generic_net {
22 unsigned int timeout;
23};
24
25struct nf_tcp_net {
26 unsigned int timeouts[TCP_CONNTRACK_TIMEOUT_MAX];
27 u8 tcp_loose;
28 u8 tcp_be_liberal;
29 u8 tcp_max_retrans;
30 u8 tcp_ignore_invalid_rst;
31#if IS_ENABLED(CONFIG_NF_FLOW_TABLE)
32 unsigned int offload_timeout;
33#endif
34};
35
36enum udp_conntrack {
37 UDP_CT_UNREPLIED,
38 UDP_CT_REPLIED,
39 UDP_CT_MAX
40};
41
42struct nf_udp_net {
43 unsigned int timeouts[UDP_CT_MAX];
44#if IS_ENABLED(CONFIG_NF_FLOW_TABLE)
45 unsigned int offload_timeout;
46#endif
47};
48
49struct nf_icmp_net {
50 unsigned int timeout;
51};
52
53#ifdef CONFIG_NF_CT_PROTO_DCCP
54struct nf_dccp_net {
55 u8 dccp_loose;
56 unsigned int dccp_timeout[CT_DCCP_MAX + 1];
57};
58#endif
59
60#ifdef CONFIG_NF_CT_PROTO_SCTP
61struct nf_sctp_net {
62 unsigned int timeouts[SCTP_CONNTRACK_MAX];
63};
64#endif
65
66#ifdef CONFIG_NF_CT_PROTO_GRE
67enum gre_conntrack {
68 GRE_CT_UNREPLIED,
69 GRE_CT_REPLIED,
70 GRE_CT_MAX
71};
72
73struct nf_gre_net {
74 struct list_head keymap_list;
75 unsigned int timeouts[GRE_CT_MAX];
76};
77#endif
78
79struct nf_ip_net {
80 struct nf_generic_net generic;
81 struct nf_tcp_net tcp;
82 struct nf_udp_net udp;
83 struct nf_icmp_net icmp;
84 struct nf_icmp_net icmpv6;
85#ifdef CONFIG_NF_CT_PROTO_DCCP
86 struct nf_dccp_net dccp;
87#endif
88#ifdef CONFIG_NF_CT_PROTO_SCTP
89 struct nf_sctp_net sctp;
90#endif
91#ifdef CONFIG_NF_CT_PROTO_GRE
92 struct nf_gre_net gre;
93#endif
94};
95
96struct netns_ct {
97#ifdef CONFIG_NF_CONNTRACK_EVENTS
98 bool ecache_dwork_pending;
99#endif
100 u8 sysctl_log_invalid; /* Log invalid packets */
101 u8 sysctl_events;
102 u8 sysctl_acct;
103 u8 sysctl_tstamp;
104 u8 sysctl_checksum;
105
106 struct ip_conntrack_stat __percpu *stat;
107 struct nf_ct_event_notifier __rcu *nf_conntrack_event_cb;
108 struct nf_ip_net nf_ct_proto;
109#if defined(CONFIG_NF_CONNTRACK_LABELS)
110 atomic_t labels_used;
111#endif
112};
113#endif
1#ifndef __NETNS_CONNTRACK_H
2#define __NETNS_CONNTRACK_H
3
4#include <linux/list.h>
5#include <linux/list_nulls.h>
6#include <linux/atomic.h>
7#include <linux/workqueue.h>
8#include <linux/netfilter/nf_conntrack_tcp.h>
9#ifdef CONFIG_NF_CT_PROTO_DCCP
10#include <linux/netfilter/nf_conntrack_dccp.h>
11#endif
12#ifdef CONFIG_NF_CT_PROTO_SCTP
13#include <linux/netfilter/nf_conntrack_sctp.h>
14#endif
15#include <linux/seqlock.h>
16
17struct ctl_table_header;
18struct nf_conntrack_ecache;
19
20struct nf_proto_net {
21#ifdef CONFIG_SYSCTL
22 struct ctl_table_header *ctl_table_header;
23 struct ctl_table *ctl_table;
24#endif
25 unsigned int users;
26};
27
28struct nf_generic_net {
29 struct nf_proto_net pn;
30 unsigned int timeout;
31};
32
33struct nf_tcp_net {
34 struct nf_proto_net pn;
35 unsigned int timeouts[TCP_CONNTRACK_TIMEOUT_MAX];
36 unsigned int tcp_loose;
37 unsigned int tcp_be_liberal;
38 unsigned int tcp_max_retrans;
39};
40
41enum udp_conntrack {
42 UDP_CT_UNREPLIED,
43 UDP_CT_REPLIED,
44 UDP_CT_MAX
45};
46
47struct nf_udp_net {
48 struct nf_proto_net pn;
49 unsigned int timeouts[UDP_CT_MAX];
50};
51
52struct nf_icmp_net {
53 struct nf_proto_net pn;
54 unsigned int timeout;
55};
56
57#ifdef CONFIG_NF_CT_PROTO_DCCP
58struct nf_dccp_net {
59 struct nf_proto_net pn;
60 int dccp_loose;
61 unsigned int dccp_timeout[CT_DCCP_MAX + 1];
62};
63#endif
64
65#ifdef CONFIG_NF_CT_PROTO_SCTP
66struct nf_sctp_net {
67 struct nf_proto_net pn;
68 unsigned int timeouts[SCTP_CONNTRACK_MAX];
69};
70#endif
71
72#ifdef CONFIG_NF_CT_PROTO_UDPLITE
73enum udplite_conntrack {
74 UDPLITE_CT_UNREPLIED,
75 UDPLITE_CT_REPLIED,
76 UDPLITE_CT_MAX
77};
78
79struct nf_udplite_net {
80 struct nf_proto_net pn;
81 unsigned int timeouts[UDPLITE_CT_MAX];
82};
83#endif
84
85struct nf_ip_net {
86 struct nf_generic_net generic;
87 struct nf_tcp_net tcp;
88 struct nf_udp_net udp;
89 struct nf_icmp_net icmp;
90 struct nf_icmp_net icmpv6;
91#ifdef CONFIG_NF_CT_PROTO_DCCP
92 struct nf_dccp_net dccp;
93#endif
94#ifdef CONFIG_NF_CT_PROTO_SCTP
95 struct nf_sctp_net sctp;
96#endif
97#ifdef CONFIG_NF_CT_PROTO_UDPLITE
98 struct nf_udplite_net udplite;
99#endif
100};
101
102struct ct_pcpu {
103 spinlock_t lock;
104 struct hlist_nulls_head unconfirmed;
105 struct hlist_nulls_head dying;
106};
107
108struct netns_ct {
109 atomic_t count;
110 unsigned int expect_count;
111#ifdef CONFIG_NF_CONNTRACK_EVENTS
112 struct delayed_work ecache_dwork;
113 bool ecache_dwork_pending;
114#endif
115#ifdef CONFIG_SYSCTL
116 struct ctl_table_header *sysctl_header;
117 struct ctl_table_header *acct_sysctl_header;
118 struct ctl_table_header *tstamp_sysctl_header;
119 struct ctl_table_header *event_sysctl_header;
120 struct ctl_table_header *helper_sysctl_header;
121#endif
122 unsigned int sysctl_log_invalid; /* Log invalid packets */
123 int sysctl_events;
124 int sysctl_acct;
125 int sysctl_auto_assign_helper;
126 bool auto_assign_helper_warned;
127 int sysctl_tstamp;
128 int sysctl_checksum;
129
130 struct ct_pcpu __percpu *pcpu_lists;
131 struct ip_conntrack_stat __percpu *stat;
132 struct nf_ct_event_notifier __rcu *nf_conntrack_event_cb;
133 struct nf_exp_event_notifier __rcu *nf_expect_event_cb;
134 struct nf_ip_net nf_ct_proto;
135#if defined(CONFIG_NF_CONNTRACK_LABELS)
136 unsigned int labels_used;
137#endif
138};
139#endif