Linux Audio

Check our new training course

Loading...
v6.13.7
   1/* SPDX-License-Identifier: GPL-2.0 */
   2#ifndef __NET_PKT_CLS_H
   3#define __NET_PKT_CLS_H
   4
   5#include <linux/pkt_cls.h>
   6#include <linux/workqueue.h>
   7#include <net/sch_generic.h>
   8#include <net/act_api.h>
   9#include <net/net_namespace.h>
  10
  11/* TC action not accessible from user space */
  12#define TC_ACT_CONSUMED		(TC_ACT_VALUE_MAX + 1)
  13
  14/* Basic packet classifier frontend definitions. */
  15
  16struct tcf_walker {
  17	int	stop;
  18	int	skip;
  19	int	count;
  20	bool	nonempty;
  21	unsigned long cookie;
  22	int	(*fn)(struct tcf_proto *, void *node, struct tcf_walker *);
  23};
  24
  25int register_tcf_proto_ops(struct tcf_proto_ops *ops);
  26void unregister_tcf_proto_ops(struct tcf_proto_ops *ops);
  27#define NET_CLS_ALIAS_PREFIX "net-cls-"
  28#define MODULE_ALIAS_NET_CLS(kind)	MODULE_ALIAS(NET_CLS_ALIAS_PREFIX kind)
 
 
 
 
  29
  30struct tcf_block_ext_info {
  31	enum flow_block_binder_type binder_type;
  32	tcf_chain_head_change_t *chain_head_change;
  33	void *chain_head_change_priv;
  34	u32 block_index;
  35};
  36
  37struct tcf_qevent {
  38	struct tcf_block	*block;
  39	struct tcf_block_ext_info info;
  40	struct tcf_proto __rcu *filter_chain;
  41};
  42
  43struct tcf_block_cb;
  44bool tcf_queue_work(struct rcu_work *rwork, work_func_t func);
  45
  46#ifdef CONFIG_NET_CLS
  47struct tcf_chain *tcf_chain_get_by_act(struct tcf_block *block,
  48				       u32 chain_index);
  49void tcf_chain_put_by_act(struct tcf_chain *chain);
  50struct tcf_chain *tcf_get_next_chain(struct tcf_block *block,
  51				     struct tcf_chain *chain);
  52struct tcf_proto *tcf_get_next_proto(struct tcf_chain *chain,
  53				     struct tcf_proto *tp);
  54void tcf_block_netif_keep_dst(struct tcf_block *block);
  55int tcf_block_get(struct tcf_block **p_block,
  56		  struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
  57		  struct netlink_ext_ack *extack);
  58int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
  59		      struct tcf_block_ext_info *ei,
  60		      struct netlink_ext_ack *extack);
  61void tcf_block_put(struct tcf_block *block);
  62void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
  63		       struct tcf_block_ext_info *ei);
  64int tcf_exts_init_ex(struct tcf_exts *exts, struct net *net, int action,
  65		     int police, struct tcf_proto *tp, u32 handle, bool used_action_miss);
  66
  67static inline bool tcf_block_shared(struct tcf_block *block)
  68{
  69	return block->index;
  70}
  71
  72static inline bool tcf_block_non_null_shared(struct tcf_block *block)
  73{
  74	return block && block->index;
  75}
  76
  77#ifdef CONFIG_NET_CLS_ACT
  78DECLARE_STATIC_KEY_FALSE(tcf_sw_enabled_key);
  79
  80static inline bool tcf_block_bypass_sw(struct tcf_block *block)
  81{
  82	return block && !atomic_read(&block->useswcnt);
  83}
  84#endif
  85
  86static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
  87{
  88	WARN_ON(tcf_block_shared(block));
  89	return block->q;
  90}
  91
  92int tcf_classify(struct sk_buff *skb,
  93		 const struct tcf_block *block,
  94		 const struct tcf_proto *tp, struct tcf_result *res,
  95		 bool compat_mode);
  96
  97static inline bool tc_cls_stats_dump(struct tcf_proto *tp,
  98				     struct tcf_walker *arg,
  99				     void *filter)
 100{
 101	if (arg->count >= arg->skip && arg->fn(tp, filter, arg) < 0) {
 102		arg->stop = 1;
 103		return false;
 104	}
 105
 106	arg->count++;
 107	return true;
 108}
 109
 110#else
 111static inline bool tcf_block_shared(struct tcf_block *block)
 112{
 113	return false;
 114}
 
 
 
 
 
 
 
 
 
 115
 116static inline bool tcf_block_non_null_shared(struct tcf_block *block)
 117{
 118	return false;
 119}
 120
 
 121static inline
 122int tcf_block_get(struct tcf_block **p_block,
 123		  struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
 124		  struct netlink_ext_ack *extack)
 125{
 126	return 0;
 127}
 128
 129static inline
 130int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
 131		      struct tcf_block_ext_info *ei,
 132		      struct netlink_ext_ack *extack)
 133{
 134	return 0;
 135}
 136
 137static inline void tcf_block_put(struct tcf_block *block)
 138{
 139}
 140
 141static inline
 142void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
 143		       struct tcf_block_ext_info *ei)
 144{
 145}
 146
 147static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
 148{
 149	return NULL;
 150}
 151
 152static inline int tcf_classify(struct sk_buff *skb,
 153			       const struct tcf_block *block,
 154			       const struct tcf_proto *tp,
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 155			       struct tcf_result *res, bool compat_mode)
 156{
 157	return TC_ACT_UNSPEC;
 158}
 159
 160#endif
 161
 162static inline unsigned long
 163__cls_set_class(unsigned long *clp, unsigned long cl)
 164{
 165	return xchg(clp, cl);
 166}
 167
 168static inline void
 169__tcf_bind_filter(struct Qdisc *q, struct tcf_result *r, unsigned long base)
 170{
 171	unsigned long cl;
 172
 173	cl = q->ops->cl_ops->bind_tcf(q, base, r->classid);
 174	cl = __cls_set_class(&r->class, cl);
 175	if (cl)
 176		q->ops->cl_ops->unbind_tcf(q, cl);
 177}
 178
 179static inline void
 180tcf_bind_filter(struct tcf_proto *tp, struct tcf_result *r, unsigned long base)
 181{
 182	struct Qdisc *q = tp->chain->block->q;
 
 183
 184	/* Check q as it is not set for shared blocks. In that case,
 185	 * setting class is not supported.
 186	 */
 187	if (!q)
 188		return;
 189	sch_tree_lock(q);
 190	__tcf_bind_filter(q, r, base);
 191	sch_tree_unlock(q);
 192}
 193
 194static inline void
 195__tcf_unbind_filter(struct Qdisc *q, struct tcf_result *r)
 196{
 197	unsigned long cl;
 198
 199	if ((cl = __cls_set_class(&r->class, 0)) != 0)
 200		q->ops->cl_ops->unbind_tcf(q, cl);
 201}
 202
 203static inline void
 204tcf_unbind_filter(struct tcf_proto *tp, struct tcf_result *r)
 205{
 206	struct Qdisc *q = tp->chain->block->q;
 
 207
 208	if (!q)
 209		return;
 210	__tcf_unbind_filter(q, r);
 211}
 212
 213static inline void tc_cls_bind_class(u32 classid, unsigned long cl,
 214				     void *q, struct tcf_result *res,
 215				     unsigned long base)
 216{
 217	if (res->classid == classid) {
 218		if (cl)
 219			__tcf_bind_filter(q, res, base);
 220		else
 221			__tcf_unbind_filter(q, res);
 222	}
 223}
 224
 225struct tcf_exts {
 226#ifdef CONFIG_NET_CLS_ACT
 227	__u32	type; /* for backward compat(TCA_OLD_COMPAT) */
 228	int nr_actions;
 229	struct tc_action **actions;
 230	struct net	*net;
 231	netns_tracker	ns_tracker;
 232	struct tcf_exts_miss_cookie_node *miss_cookie_node;
 233#endif
 234	/* Map to export classifier specific extension TLV types to the
 235	 * generic extensions API. Unsupported extensions must be set to 0.
 236	 */
 237	int action;
 238	int police;
 239};
 240
 241static inline int tcf_exts_init(struct tcf_exts *exts, struct net *net,
 242				int action, int police)
 243{
 244#ifdef CONFIG_NET_CLS
 245	return tcf_exts_init_ex(exts, net, action, police, NULL, 0, false);
 246#else
 247	return -EOPNOTSUPP;
 
 
 
 
 248#endif
 
 
 
 249}
 250
 251/* Return false if the netns is being destroyed in cleanup_net(). Callers
 252 * need to do cleanup synchronously in this case, otherwise may race with
 253 * tc_action_net_exit(). Return true for other cases.
 254 */
 255static inline bool tcf_exts_get_net(struct tcf_exts *exts)
 256{
 257#ifdef CONFIG_NET_CLS_ACT
 258	exts->net = maybe_get_net(exts->net);
 259	if (exts->net)
 260		netns_tracker_alloc(exts->net, &exts->ns_tracker, GFP_KERNEL);
 261	return exts->net != NULL;
 262#else
 263	return true;
 264#endif
 265}
 266
 267static inline void tcf_exts_put_net(struct tcf_exts *exts)
 268{
 269#ifdef CONFIG_NET_CLS_ACT
 270	if (exts->net)
 271		put_net_track(exts->net, &exts->ns_tracker);
 272#endif
 273}
 274
 
 
 
 275#ifdef CONFIG_NET_CLS_ACT
 276#define tcf_exts_for_each_action(i, a, exts) \
 277	for (i = 0; i < TCA_ACT_MAX_PRIO && ((a) = (exts)->actions[i]); i++)
 278#else
 279#define tcf_exts_for_each_action(i, a, exts) \
 280	for (; 0; (void)(i), (void)(a), (void)(exts))
 281#endif
 282
 283#define tcf_act_for_each_action(i, a, actions) \
 284	for (i = 0; i < TCA_ACT_MAX_PRIO && ((a) = actions[i]); i++)
 285
 286static inline bool tc_act_in_hw(struct tc_action *act)
 287{
 288	return !!act->in_hw_count;
 289}
 290
 291static inline void
 292tcf_exts_hw_stats_update(const struct tcf_exts *exts,
 293			 struct flow_stats *stats,
 294			 bool use_act_stats)
 295{
 296#ifdef CONFIG_NET_CLS_ACT
 297	int i;
 298
 
 
 299	for (i = 0; i < exts->nr_actions; i++) {
 300		struct tc_action *a = exts->actions[i];
 301
 302		if (use_act_stats || tc_act_in_hw(a)) {
 303			if (!tcf_action_update_hw_stats(a))
 304				continue;
 305		}
 306
 307		preempt_disable();
 308		tcf_action_stats_update(a, stats->bytes, stats->pkts, stats->drops,
 309					stats->lastused, true);
 310		preempt_enable();
 311
 312		a->used_hw_stats = stats->used_hw_stats;
 313		a->used_hw_stats_valid = stats->used_hw_stats_valid;
 314	}
 
 
 315#endif
 316}
 317
 318/**
 319 * tcf_exts_has_actions - check if at least one action is present
 320 * @exts: tc filter extensions handle
 321 *
 322 * Returns true if at least one action is present.
 323 */
 324static inline bool tcf_exts_has_actions(struct tcf_exts *exts)
 325{
 326#ifdef CONFIG_NET_CLS_ACT
 327	return exts->nr_actions;
 328#else
 329	return false;
 330#endif
 331}
 332
 333/**
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 334 * tcf_exts_exec - execute tc filter extensions
 335 * @skb: socket buffer
 336 * @exts: tc filter extensions handle
 337 * @res: desired result
 338 *
 339 * Executes all configured extensions. Returns TC_ACT_OK on a normal execution,
 340 * a negative number if the filter must be considered unmatched or
 341 * a positive action code (TC_ACT_*) which must be returned to the
 342 * underlying layer.
 343 */
 344static inline int
 345tcf_exts_exec(struct sk_buff *skb, struct tcf_exts *exts,
 346	      struct tcf_result *res)
 347{
 348#ifdef CONFIG_NET_CLS_ACT
 349	return tcf_action_exec(skb, exts->actions, exts->nr_actions, res);
 350#endif
 351	return TC_ACT_OK;
 352}
 353
 354static inline int
 355tcf_exts_exec_ex(struct sk_buff *skb, struct tcf_exts *exts, int act_index,
 356		 struct tcf_result *res)
 357{
 358#ifdef CONFIG_NET_CLS_ACT
 359	return tcf_action_exec(skb, exts->actions + act_index,
 360			       exts->nr_actions - act_index, res);
 361#else
 362	return TC_ACT_OK;
 363#endif
 364}
 365
 366int tcf_exts_validate(struct net *net, struct tcf_proto *tp,
 367		      struct nlattr **tb, struct nlattr *rate_tlv,
 368		      struct tcf_exts *exts, u32 flags,
 369		      struct netlink_ext_ack *extack);
 370int tcf_exts_validate_ex(struct net *net, struct tcf_proto *tp, struct nlattr **tb,
 371			 struct nlattr *rate_tlv, struct tcf_exts *exts,
 372			 u32 flags, u32 fl_flags, struct netlink_ext_ack *extack);
 373void tcf_exts_destroy(struct tcf_exts *exts);
 374void tcf_exts_change(struct tcf_exts *dst, struct tcf_exts *src);
 375int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts);
 376int tcf_exts_terse_dump(struct sk_buff *skb, struct tcf_exts *exts);
 377int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts);
 378
 379/**
 380 * struct tcf_pkt_info - packet information
 381 *
 382 * @ptr: start of the pkt data
 383 * @nexthdr: offset of the next header
 384 */
 385struct tcf_pkt_info {
 386	unsigned char *		ptr;
 387	int			nexthdr;
 388};
 389
 390#ifdef CONFIG_NET_EMATCH
 391
 392struct tcf_ematch_ops;
 393
 394/**
 395 * struct tcf_ematch - extended match (ematch)
 396 * 
 397 * @matchid: identifier to allow userspace to reidentify a match
 398 * @flags: flags specifying attributes and the relation to other matches
 399 * @ops: the operations lookup table of the corresponding ematch module
 400 * @datalen: length of the ematch specific configuration data
 401 * @data: ematch specific data
 402 * @net: the network namespace
 403 */
 404struct tcf_ematch {
 405	struct tcf_ematch_ops * ops;
 406	unsigned long		data;
 407	unsigned int		datalen;
 408	u16			matchid;
 409	u16			flags;
 410	struct net		*net;
 411};
 412
 413static inline int tcf_em_is_container(struct tcf_ematch *em)
 414{
 415	return !em->ops;
 416}
 417
 418static inline int tcf_em_is_simple(struct tcf_ematch *em)
 419{
 420	return em->flags & TCF_EM_SIMPLE;
 421}
 422
 423static inline int tcf_em_is_inverted(struct tcf_ematch *em)
 424{
 425	return em->flags & TCF_EM_INVERT;
 426}
 427
 428static inline int tcf_em_last_match(struct tcf_ematch *em)
 429{
 430	return (em->flags & TCF_EM_REL_MASK) == TCF_EM_REL_END;
 431}
 432
 433static inline int tcf_em_early_end(struct tcf_ematch *em, int result)
 434{
 435	if (tcf_em_last_match(em))
 436		return 1;
 437
 438	if (result == 0 && em->flags & TCF_EM_REL_AND)
 439		return 1;
 440
 441	if (result != 0 && em->flags & TCF_EM_REL_OR)
 442		return 1;
 443
 444	return 0;
 445}
 446	
 447/**
 448 * struct tcf_ematch_tree - ematch tree handle
 449 *
 450 * @hdr: ematch tree header supplied by userspace
 451 * @matches: array of ematches
 452 */
 453struct tcf_ematch_tree {
 454	struct tcf_ematch_tree_hdr hdr;
 455	struct tcf_ematch *	matches;
 456	
 457};
 458
 459/**
 460 * struct tcf_ematch_ops - ematch module operations
 461 * 
 462 * @kind: identifier (kind) of this ematch module
 463 * @datalen: length of expected configuration data (optional)
 464 * @change: called during validation (optional)
 465 * @match: called during ematch tree evaluation, must return 1/0
 466 * @destroy: called during destroyage (optional)
 467 * @dump: called during dumping process (optional)
 468 * @owner: owner, must be set to THIS_MODULE
 469 * @link: link to previous/next ematch module (internal use)
 470 */
 471struct tcf_ematch_ops {
 472	int			kind;
 473	int			datalen;
 474	int			(*change)(struct net *net, void *,
 475					  int, struct tcf_ematch *);
 476	int			(*match)(struct sk_buff *, struct tcf_ematch *,
 477					 struct tcf_pkt_info *);
 478	void			(*destroy)(struct tcf_ematch *);
 479	int			(*dump)(struct sk_buff *, struct tcf_ematch *);
 480	struct module		*owner;
 481	struct list_head	link;
 482};
 483
 484int tcf_em_register(struct tcf_ematch_ops *);
 485void tcf_em_unregister(struct tcf_ematch_ops *);
 486int tcf_em_tree_validate(struct tcf_proto *, struct nlattr *,
 487			 struct tcf_ematch_tree *);
 488void tcf_em_tree_destroy(struct tcf_ematch_tree *);
 489int tcf_em_tree_dump(struct sk_buff *, struct tcf_ematch_tree *, int);
 490int __tcf_em_tree_match(struct sk_buff *, struct tcf_ematch_tree *,
 491			struct tcf_pkt_info *);
 492
 493/**
 494 * tcf_em_tree_match - evaluate an ematch tree
 495 *
 496 * @skb: socket buffer of the packet in question
 497 * @tree: ematch tree to be used for evaluation
 498 * @info: packet information examined by classifier
 499 *
 500 * This function matches @skb against the ematch tree in @tree by going
 501 * through all ematches respecting their logic relations returning
 502 * as soon as the result is obvious.
 503 *
 504 * Returns 1 if the ematch tree as-one matches, no ematches are configured
 505 * or ematch is not enabled in the kernel, otherwise 0 is returned.
 506 */
 507static inline int tcf_em_tree_match(struct sk_buff *skb,
 508				    struct tcf_ematch_tree *tree,
 509				    struct tcf_pkt_info *info)
 510{
 511	if (tree->hdr.nmatches)
 512		return __tcf_em_tree_match(skb, tree, info);
 513	else
 514		return 1;
 515}
 516
 517#define MODULE_ALIAS_TCF_EMATCH(kind)	MODULE_ALIAS("ematch-kind-" __stringify(kind))
 518
 519#else /* CONFIG_NET_EMATCH */
 520
 521struct tcf_ematch_tree {
 522};
 523
 524#define tcf_em_tree_validate(tp, tb, t) ((void)(t), 0)
 525#define tcf_em_tree_destroy(t) do { (void)(t); } while(0)
 526#define tcf_em_tree_dump(skb, t, tlv) (0)
 527#define tcf_em_tree_match(skb, t, info) ((void)(info), 1)
 528
 529#endif /* CONFIG_NET_EMATCH */
 530
 531static inline unsigned char * tcf_get_base_ptr(struct sk_buff *skb, int layer)
 532{
 533	switch (layer) {
 534		case TCF_LAYER_LINK:
 535			return skb_mac_header(skb);
 536		case TCF_LAYER_NETWORK:
 537			return skb_network_header(skb);
 538		case TCF_LAYER_TRANSPORT:
 539			return skb_transport_header(skb);
 540	}
 541
 542	return NULL;
 543}
 544
 545static inline int tcf_valid_offset(const struct sk_buff *skb,
 546				   const unsigned char *ptr, const int len)
 547{
 548	return likely((ptr + len) <= skb_tail_pointer(skb) &&
 549		      ptr >= skb->head &&
 550		      (ptr <= (ptr + len)));
 551}
 552
 
 
 
 553static inline int
 554tcf_change_indev(struct net *net, struct nlattr *indev_tlv,
 555		 struct netlink_ext_ack *extack)
 556{
 557	char indev[IFNAMSIZ];
 558	struct net_device *dev;
 559
 560	if (nla_strscpy(indev, indev_tlv, IFNAMSIZ) < 0) {
 561		NL_SET_ERR_MSG_ATTR(extack, indev_tlv,
 562				    "Interface name too long");
 563		return -EINVAL;
 564	}
 565	dev = __dev_get_by_name(net, indev);
 566	if (!dev) {
 567		NL_SET_ERR_MSG_ATTR(extack, indev_tlv,
 568				    "Network device not found");
 569		return -ENODEV;
 570	}
 571	return dev->ifindex;
 572}
 573
 574static inline bool
 575tcf_match_indev(struct sk_buff *skb, int ifindex)
 576{
 577	if (!ifindex)
 578		return true;
 579	if  (!skb->skb_iif)
 580		return false;
 581	return ifindex == skb->skb_iif;
 582}
 
 583
 584int tc_setup_offload_action(struct flow_action *flow_action,
 585			    const struct tcf_exts *exts,
 586			    struct netlink_ext_ack *extack);
 587void tc_cleanup_offload_action(struct flow_action *flow_action);
 588int tc_setup_action(struct flow_action *flow_action,
 589		    struct tc_action *actions[],
 590		    u32 miss_cookie_base,
 591		    struct netlink_ext_ack *extack);
 592
 593int tc_setup_cb_call(struct tcf_block *block, enum tc_setup_type type,
 594		     void *type_data, bool err_stop, bool rtnl_held);
 595int tc_setup_cb_add(struct tcf_block *block, struct tcf_proto *tp,
 596		    enum tc_setup_type type, void *type_data, bool err_stop,
 597		    u32 *flags, unsigned int *in_hw_count, bool rtnl_held);
 598int tc_setup_cb_replace(struct tcf_block *block, struct tcf_proto *tp,
 599			enum tc_setup_type type, void *type_data, bool err_stop,
 600			u32 *old_flags, unsigned int *old_in_hw_count,
 601			u32 *new_flags, unsigned int *new_in_hw_count,
 602			bool rtnl_held);
 603int tc_setup_cb_destroy(struct tcf_block *block, struct tcf_proto *tp,
 604			enum tc_setup_type type, void *type_data, bool err_stop,
 605			u32 *flags, unsigned int *in_hw_count, bool rtnl_held);
 606int tc_setup_cb_reoffload(struct tcf_block *block, struct tcf_proto *tp,
 607			  bool add, flow_setup_cb_t *cb,
 608			  enum tc_setup_type type, void *type_data,
 609			  void *cb_priv, u32 *flags, unsigned int *in_hw_count);
 610unsigned int tcf_exts_num_actions(struct tcf_exts *exts);
 611
 612#ifdef CONFIG_NET_CLS_ACT
 613int tcf_qevent_init(struct tcf_qevent *qe, struct Qdisc *sch,
 614		    enum flow_block_binder_type binder_type,
 615		    struct nlattr *block_index_attr,
 616		    struct netlink_ext_ack *extack);
 617void tcf_qevent_destroy(struct tcf_qevent *qe, struct Qdisc *sch);
 618int tcf_qevent_validate_change(struct tcf_qevent *qe, struct nlattr *block_index_attr,
 619			       struct netlink_ext_ack *extack);
 620struct sk_buff *tcf_qevent_handle(struct tcf_qevent *qe, struct Qdisc *sch, struct sk_buff *skb,
 621				  struct sk_buff **to_free, int *ret);
 622int tcf_qevent_dump(struct sk_buff *skb, int attr_name, struct tcf_qevent *qe);
 623#else
 624static inline int tcf_qevent_init(struct tcf_qevent *qe, struct Qdisc *sch,
 625				  enum flow_block_binder_type binder_type,
 626				  struct nlattr *block_index_attr,
 627				  struct netlink_ext_ack *extack)
 628{
 629	return 0;
 630}
 631
 632static inline void tcf_qevent_destroy(struct tcf_qevent *qe, struct Qdisc *sch)
 633{
 634}
 635
 636static inline int tcf_qevent_validate_change(struct tcf_qevent *qe, struct nlattr *block_index_attr,
 637					     struct netlink_ext_ack *extack)
 638{
 639	return 0;
 640}
 641
 642static inline struct sk_buff *
 643tcf_qevent_handle(struct tcf_qevent *qe, struct Qdisc *sch, struct sk_buff *skb,
 644		  struct sk_buff **to_free, int *ret)
 645{
 646	return skb;
 647}
 648
 649static inline int tcf_qevent_dump(struct sk_buff *skb, int attr_name, struct tcf_qevent *qe)
 650{
 651	return 0;
 652}
 653#endif
 
 654
 655struct tc_cls_u32_knode {
 656	struct tcf_exts *exts;
 657	struct tcf_result *res;
 658	struct tc_u32_sel *sel;
 659	u32 handle;
 660	u32 val;
 661	u32 mask;
 662	u32 link_handle;
 663	u8 fshift;
 664};
 665
 666struct tc_cls_u32_hnode {
 667	u32 handle;
 668	u32 prio;
 669	unsigned int divisor;
 670};
 671
 672enum tc_clsu32_command {
 673	TC_CLSU32_NEW_KNODE,
 674	TC_CLSU32_REPLACE_KNODE,
 675	TC_CLSU32_DELETE_KNODE,
 676	TC_CLSU32_NEW_HNODE,
 677	TC_CLSU32_REPLACE_HNODE,
 678	TC_CLSU32_DELETE_HNODE,
 679};
 680
 681struct tc_cls_u32_offload {
 682	struct flow_cls_common_offload common;
 683	/* knode values */
 684	enum tc_clsu32_command command;
 685	union {
 686		struct tc_cls_u32_knode knode;
 687		struct tc_cls_u32_hnode hnode;
 688	};
 689};
 690
 691static inline bool tc_can_offload(const struct net_device *dev)
 692{
 693	return dev->features & NETIF_F_HW_TC;
 694}
 695
 696static inline bool tc_can_offload_extack(const struct net_device *dev,
 697					 struct netlink_ext_ack *extack)
 698{
 699	bool can = tc_can_offload(dev);
 700
 701	if (!can)
 702		NL_SET_ERR_MSG(extack, "TC offload is disabled on net device");
 703
 704	return can;
 705}
 706
 707static inline bool
 708tc_cls_can_offload_and_chain0(const struct net_device *dev,
 709			      struct flow_cls_common_offload *common)
 710{
 711	if (!tc_can_offload_extack(dev, common->extack))
 712		return false;
 713	if (common->chain_index) {
 714		NL_SET_ERR_MSG(common->extack,
 715			       "Driver supports only offload of chain 0");
 716		return false;
 717	}
 718	return true;
 719}
 720
 721static inline bool tc_skip_hw(u32 flags)
 722{
 723	return (flags & TCA_CLS_FLAGS_SKIP_HW) ? true : false;
 724}
 725
 726static inline bool tc_skip_sw(u32 flags)
 727{
 728	return (flags & TCA_CLS_FLAGS_SKIP_SW) ? true : false;
 729}
 730
 731/* SKIP_HW and SKIP_SW are mutually exclusive flags. */
 732static inline bool tc_flags_valid(u32 flags)
 733{
 734	if (flags & ~(TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW |
 735		      TCA_CLS_FLAGS_VERBOSE))
 736		return false;
 737
 738	flags &= TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW;
 739	if (!(flags ^ (TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW)))
 740		return false;
 741
 742	return true;
 743}
 744
 745static inline bool tc_in_hw(u32 flags)
 746{
 747	return (flags & TCA_CLS_FLAGS_IN_HW) ? true : false;
 748}
 749
 750static inline void
 751tc_cls_common_offload_init(struct flow_cls_common_offload *cls_common,
 752			   const struct tcf_proto *tp, u32 flags,
 753			   struct netlink_ext_ack *extack)
 754{
 755	cls_common->chain_index = tp->chain->index;
 756	cls_common->protocol = tp->protocol;
 757	cls_common->prio = tp->prio >> 16;
 758	cls_common->skip_sw = tc_skip_sw(flags);
 759	if (tc_skip_sw(flags) || flags & TCA_CLS_FLAGS_VERBOSE)
 760		cls_common->extack = extack;
 761}
 762
 763static inline void tcf_proto_update_usesw(struct tcf_proto *tp, u32 flags)
 764{
 765	if (tp->usesw)
 766		return;
 767	if (tc_skip_sw(flags) && tc_in_hw(flags))
 768		return;
 769	tp->usesw = true;
 770}
 771
 772#if IS_ENABLED(CONFIG_NET_TC_SKB_EXT)
 773static inline struct tc_skb_ext *tc_skb_ext_alloc(struct sk_buff *skb)
 774{
 775	struct tc_skb_ext *tc_skb_ext = skb_ext_add(skb, TC_SKB_EXT);
 776
 777	if (tc_skb_ext)
 778		memset(tc_skb_ext, 0, sizeof(*tc_skb_ext));
 779	return tc_skb_ext;
 780}
 781#endif
 
 
 
 
 
 782
 783enum tc_matchall_command {
 784	TC_CLSMATCHALL_REPLACE,
 785	TC_CLSMATCHALL_DESTROY,
 786	TC_CLSMATCHALL_STATS,
 787};
 788
 789struct tc_cls_matchall_offload {
 790	struct flow_cls_common_offload common;
 791	enum tc_matchall_command command;
 792	struct flow_rule *rule;
 793	struct flow_stats stats;
 794	bool use_act_stats;
 795	unsigned long cookie;
 796};
 797
 798enum tc_clsbpf_command {
 799	TC_CLSBPF_OFFLOAD,
 800	TC_CLSBPF_STATS,
 801};
 802
 803struct tc_cls_bpf_offload {
 804	struct flow_cls_common_offload common;
 805	enum tc_clsbpf_command command;
 806	struct tcf_exts *exts;
 807	struct bpf_prog *prog;
 808	struct bpf_prog *oldprog;
 809	const char *name;
 810	bool exts_integrated;
 811};
 812
 
 
 
 
 
 
 
 
 
 
 813/* This structure holds cookie structure that is passed from user
 814 * to the kernel for actions and classifiers
 815 */
 816struct tc_cookie {
 817	u8  *data;
 818	u32 len;
 819	struct rcu_head rcu;
 820};
 821
 822struct tc_qopt_offload_stats {
 823	struct gnet_stats_basic_sync *bstats;
 824	struct gnet_stats_queue *qstats;
 825};
 826
 827enum tc_mq_command {
 828	TC_MQ_CREATE,
 829	TC_MQ_DESTROY,
 830	TC_MQ_STATS,
 831	TC_MQ_GRAFT,
 832};
 833
 834struct tc_mq_opt_offload_graft_params {
 835	unsigned long queue;
 836	u32 child_handle;
 837};
 838
 839struct tc_mq_qopt_offload {
 840	enum tc_mq_command command;
 841	u32 handle;
 842	union {
 843		struct tc_qopt_offload_stats stats;
 844		struct tc_mq_opt_offload_graft_params graft_params;
 845	};
 846};
 847
 848enum tc_htb_command {
 849	/* Root */
 850	TC_HTB_CREATE, /* Initialize HTB offload. */
 851	TC_HTB_DESTROY, /* Destroy HTB offload. */
 852
 853	/* Classes */
 854	/* Allocate qid and create leaf. */
 855	TC_HTB_LEAF_ALLOC_QUEUE,
 856	/* Convert leaf to inner, preserve and return qid, create new leaf. */
 857	TC_HTB_LEAF_TO_INNER,
 858	/* Delete leaf, while siblings remain. */
 859	TC_HTB_LEAF_DEL,
 860	/* Delete leaf, convert parent to leaf, preserving qid. */
 861	TC_HTB_LEAF_DEL_LAST,
 862	/* TC_HTB_LEAF_DEL_LAST, but delete driver data on hardware errors. */
 863	TC_HTB_LEAF_DEL_LAST_FORCE,
 864	/* Modify parameters of a node. */
 865	TC_HTB_NODE_MODIFY,
 866
 867	/* Class qdisc */
 868	TC_HTB_LEAF_QUERY_QUEUE, /* Query qid by classid. */
 869};
 870
 871struct tc_htb_qopt_offload {
 872	struct netlink_ext_ack *extack;
 873	enum tc_htb_command command;
 874	u32 parent_classid;
 875	u16 classid;
 876	u16 qid;
 877	u32 quantum;
 878	u64 rate;
 879	u64 ceil;
 880	u8 prio;
 881};
 882
 883#define TC_HTB_CLASSID_ROOT U32_MAX
 884
 885enum tc_red_command {
 886	TC_RED_REPLACE,
 887	TC_RED_DESTROY,
 888	TC_RED_STATS,
 889	TC_RED_XSTATS,
 890	TC_RED_GRAFT,
 891};
 892
 893struct tc_red_qopt_offload_params {
 894	u32 min;
 895	u32 max;
 896	u32 probability;
 897	u32 limit;
 898	bool is_ecn;
 899	bool is_harddrop;
 900	bool is_nodrop;
 901	struct gnet_stats_queue *qstats;
 902};
 903
 904struct tc_red_qopt_offload {
 905	enum tc_red_command command;
 906	u32 handle;
 907	u32 parent;
 908	union {
 909		struct tc_red_qopt_offload_params set;
 910		struct tc_qopt_offload_stats stats;
 911		struct red_stats *xstats;
 912		u32 child_handle;
 913	};
 914};
 915
 916enum tc_gred_command {
 917	TC_GRED_REPLACE,
 918	TC_GRED_DESTROY,
 919	TC_GRED_STATS,
 920};
 921
 922struct tc_gred_vq_qopt_offload_params {
 923	bool present;
 924	u32 limit;
 925	u32 prio;
 926	u32 min;
 927	u32 max;
 928	bool is_ecn;
 929	bool is_harddrop;
 930	u32 probability;
 931	/* Only need backlog, see struct tc_prio_qopt_offload_params */
 932	u32 *backlog;
 933};
 934
 935struct tc_gred_qopt_offload_params {
 936	bool grio_on;
 937	bool wred_on;
 938	unsigned int dp_cnt;
 939	unsigned int dp_def;
 940	struct gnet_stats_queue *qstats;
 941	struct tc_gred_vq_qopt_offload_params tab[MAX_DPs];
 942};
 943
 944struct tc_gred_qopt_offload_stats {
 945	struct gnet_stats_basic_sync bstats[MAX_DPs];
 946	struct gnet_stats_queue qstats[MAX_DPs];
 947	struct red_stats *xstats[MAX_DPs];
 948};
 949
 950struct tc_gred_qopt_offload {
 951	enum tc_gred_command command;
 952	u32 handle;
 953	u32 parent;
 954	union {
 955		struct tc_gred_qopt_offload_params set;
 956		struct tc_gred_qopt_offload_stats stats;
 957	};
 958};
 959
 960enum tc_prio_command {
 961	TC_PRIO_REPLACE,
 962	TC_PRIO_DESTROY,
 963	TC_PRIO_STATS,
 964	TC_PRIO_GRAFT,
 965};
 966
 967struct tc_prio_qopt_offload_params {
 968	int bands;
 969	u8 priomap[TC_PRIO_MAX + 1];
 970	/* At the point of un-offloading the Qdisc, the reported backlog and
 971	 * qlen need to be reduced by the portion that is in HW.
 
 972	 */
 973	struct gnet_stats_queue *qstats;
 974};
 975
 976struct tc_prio_qopt_offload_graft_params {
 977	u8 band;
 978	u32 child_handle;
 979};
 980
 981struct tc_prio_qopt_offload {
 982	enum tc_prio_command command;
 983	u32 handle;
 984	u32 parent;
 985	union {
 986		struct tc_prio_qopt_offload_params replace_params;
 987		struct tc_qopt_offload_stats stats;
 988		struct tc_prio_qopt_offload_graft_params graft_params;
 989	};
 990};
 991
 992enum tc_root_command {
 993	TC_ROOT_GRAFT,
 994};
 995
 996struct tc_root_qopt_offload {
 997	enum tc_root_command command;
 998	u32 handle;
 999	bool ingress;
1000};
1001
1002enum tc_ets_command {
1003	TC_ETS_REPLACE,
1004	TC_ETS_DESTROY,
1005	TC_ETS_STATS,
1006	TC_ETS_GRAFT,
1007};
1008
1009struct tc_ets_qopt_offload_replace_params {
1010	unsigned int bands;
1011	u8 priomap[TC_PRIO_MAX + 1];
1012	unsigned int quanta[TCQ_ETS_MAX_BANDS];	/* 0 for strict bands. */
1013	unsigned int weights[TCQ_ETS_MAX_BANDS];
1014	struct gnet_stats_queue *qstats;
1015};
1016
1017struct tc_ets_qopt_offload_graft_params {
1018	u8 band;
1019	u32 child_handle;
1020};
1021
1022struct tc_ets_qopt_offload {
1023	enum tc_ets_command command;
1024	u32 handle;
1025	u32 parent;
1026	union {
1027		struct tc_ets_qopt_offload_replace_params replace_params;
1028		struct tc_qopt_offload_stats stats;
1029		struct tc_ets_qopt_offload_graft_params graft_params;
1030	};
1031};
1032
1033enum tc_tbf_command {
1034	TC_TBF_REPLACE,
1035	TC_TBF_DESTROY,
1036	TC_TBF_STATS,
1037	TC_TBF_GRAFT,
1038};
1039
1040struct tc_tbf_qopt_offload_replace_params {
1041	struct psched_ratecfg rate;
1042	u32 max_size;
1043	struct gnet_stats_queue *qstats;
1044};
1045
1046struct tc_tbf_qopt_offload {
1047	enum tc_tbf_command command;
1048	u32 handle;
1049	u32 parent;
1050	union {
1051		struct tc_tbf_qopt_offload_replace_params replace_params;
1052		struct tc_qopt_offload_stats stats;
1053		u32 child_handle;
1054	};
1055};
1056
1057enum tc_fifo_command {
1058	TC_FIFO_REPLACE,
1059	TC_FIFO_DESTROY,
1060	TC_FIFO_STATS,
1061};
1062
1063struct tc_fifo_qopt_offload {
1064	enum tc_fifo_command command;
1065	u32 handle;
1066	u32 parent;
1067	union {
1068		struct tc_qopt_offload_stats stats;
1069	};
1070};
1071
1072#ifdef CONFIG_NET_CLS_ACT
1073DECLARE_STATIC_KEY_FALSE(tc_skb_ext_tc);
1074void tc_skb_ext_tc_enable(void);
1075void tc_skb_ext_tc_disable(void);
1076#define tc_skb_ext_tc_enabled() static_branch_unlikely(&tc_skb_ext_tc)
1077#else /* CONFIG_NET_CLS_ACT */
1078static inline void tc_skb_ext_tc_enable(void) { }
1079static inline void tc_skb_ext_tc_disable(void) { }
1080#define tc_skb_ext_tc_enabled() false
1081#endif
1082
1083#endif
v4.17
  1/* SPDX-License-Identifier: GPL-2.0 */
  2#ifndef __NET_PKT_CLS_H
  3#define __NET_PKT_CLS_H
  4
  5#include <linux/pkt_cls.h>
  6#include <linux/workqueue.h>
  7#include <net/sch_generic.h>
  8#include <net/act_api.h>
 
 
 
 
  9
 10/* Basic packet classifier frontend definitions. */
 11
 12struct tcf_walker {
 13	int	stop;
 14	int	skip;
 15	int	count;
 
 
 16	int	(*fn)(struct tcf_proto *, void *node, struct tcf_walker *);
 17};
 18
 19int register_tcf_proto_ops(struct tcf_proto_ops *ops);
 20int unregister_tcf_proto_ops(struct tcf_proto_ops *ops);
 21
 22enum tcf_block_binder_type {
 23	TCF_BLOCK_BINDER_TYPE_UNSPEC,
 24	TCF_BLOCK_BINDER_TYPE_CLSACT_INGRESS,
 25	TCF_BLOCK_BINDER_TYPE_CLSACT_EGRESS,
 26};
 27
 28struct tcf_block_ext_info {
 29	enum tcf_block_binder_type binder_type;
 30	tcf_chain_head_change_t *chain_head_change;
 31	void *chain_head_change_priv;
 32	u32 block_index;
 33};
 34
 
 
 
 
 
 
 35struct tcf_block_cb;
 36bool tcf_queue_work(struct work_struct *work);
 37
 38#ifdef CONFIG_NET_CLS
 39struct tcf_chain *tcf_chain_get(struct tcf_block *block, u32 chain_index,
 40				bool create);
 41void tcf_chain_put(struct tcf_chain *chain);
 
 
 
 
 42void tcf_block_netif_keep_dst(struct tcf_block *block);
 43int tcf_block_get(struct tcf_block **p_block,
 44		  struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
 45		  struct netlink_ext_ack *extack);
 46int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
 47		      struct tcf_block_ext_info *ei,
 48		      struct netlink_ext_ack *extack);
 49void tcf_block_put(struct tcf_block *block);
 50void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
 51		       struct tcf_block_ext_info *ei);
 
 
 52
 53static inline bool tcf_block_shared(struct tcf_block *block)
 54{
 55	return block->index;
 56}
 57
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 58static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
 59{
 60	WARN_ON(tcf_block_shared(block));
 61	return block->q;
 62}
 63
 64static inline struct net_device *tcf_block_dev(struct tcf_block *block)
 
 
 
 
 
 
 
 65{
 66	return tcf_block_q(block)->dev_queue->dev;
 
 
 
 
 
 
 67}
 68
 69void *tcf_block_cb_priv(struct tcf_block_cb *block_cb);
 70struct tcf_block_cb *tcf_block_cb_lookup(struct tcf_block *block,
 71					 tc_setup_cb_t *cb, void *cb_ident);
 72void tcf_block_cb_incref(struct tcf_block_cb *block_cb);
 73unsigned int tcf_block_cb_decref(struct tcf_block_cb *block_cb);
 74struct tcf_block_cb *__tcf_block_cb_register(struct tcf_block *block,
 75					     tc_setup_cb_t *cb, void *cb_ident,
 76					     void *cb_priv);
 77int tcf_block_cb_register(struct tcf_block *block,
 78			  tc_setup_cb_t *cb, void *cb_ident,
 79			  void *cb_priv);
 80void __tcf_block_cb_unregister(struct tcf_block_cb *block_cb);
 81void tcf_block_cb_unregister(struct tcf_block *block,
 82			     tc_setup_cb_t *cb, void *cb_ident);
 83
 84int tcf_classify(struct sk_buff *skb, const struct tcf_proto *tp,
 85		 struct tcf_result *res, bool compat_mode);
 
 
 86
 87#else
 88static inline
 89int tcf_block_get(struct tcf_block **p_block,
 90		  struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
 91		  struct netlink_ext_ack *extack)
 92{
 93	return 0;
 94}
 95
 96static inline
 97int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
 98		      struct tcf_block_ext_info *ei,
 99		      struct netlink_ext_ack *extack)
100{
101	return 0;
102}
103
104static inline void tcf_block_put(struct tcf_block *block)
105{
106}
107
108static inline
109void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
110		       struct tcf_block_ext_info *ei)
111{
112}
113
114static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
115{
116	return NULL;
117}
118
119static inline struct net_device *tcf_block_dev(struct tcf_block *block)
120{
121	return NULL;
122}
123
124static inline
125int tc_setup_cb_block_register(struct tcf_block *block, tc_setup_cb_t *cb,
126			       void *cb_priv)
127{
128	return 0;
129}
130
131static inline
132void tc_setup_cb_block_unregister(struct tcf_block *block, tc_setup_cb_t *cb,
133				  void *cb_priv)
134{
135}
136
137static inline
138void *tcf_block_cb_priv(struct tcf_block_cb *block_cb)
139{
140	return NULL;
141}
142
143static inline
144struct tcf_block_cb *tcf_block_cb_lookup(struct tcf_block *block,
145					 tc_setup_cb_t *cb, void *cb_ident)
146{
147	return NULL;
148}
149
150static inline
151void tcf_block_cb_incref(struct tcf_block_cb *block_cb)
152{
153}
154
155static inline
156unsigned int tcf_block_cb_decref(struct tcf_block_cb *block_cb)
157{
158	return 0;
159}
160
161static inline
162struct tcf_block_cb *__tcf_block_cb_register(struct tcf_block *block,
163					     tc_setup_cb_t *cb, void *cb_ident,
164					     void *cb_priv)
165{
166	return NULL;
167}
168
169static inline
170int tcf_block_cb_register(struct tcf_block *block,
171			  tc_setup_cb_t *cb, void *cb_ident,
172			  void *cb_priv)
173{
174	return 0;
175}
176
177static inline
178void __tcf_block_cb_unregister(struct tcf_block_cb *block_cb)
179{
180}
181
182static inline
183void tcf_block_cb_unregister(struct tcf_block *block,
184			     tc_setup_cb_t *cb, void *cb_ident)
185{
186}
187
188static inline int tcf_classify(struct sk_buff *skb, const struct tcf_proto *tp,
189			       struct tcf_result *res, bool compat_mode)
190{
191	return TC_ACT_UNSPEC;
192}
 
193#endif
194
195static inline unsigned long
196__cls_set_class(unsigned long *clp, unsigned long cl)
197{
198	return xchg(clp, cl);
199}
200
201static inline unsigned long
202cls_set_class(struct Qdisc *q, unsigned long *clp, unsigned long cl)
203{
204	unsigned long old_cl;
205
206	sch_tree_lock(q);
207	old_cl = __cls_set_class(clp, cl);
208	sch_tree_unlock(q);
209	return old_cl;
210}
211
212static inline void
213tcf_bind_filter(struct tcf_proto *tp, struct tcf_result *r, unsigned long base)
214{
215	struct Qdisc *q = tp->chain->block->q;
216	unsigned long cl;
217
218	/* Check q as it is not set for shared blocks. In that case,
219	 * setting class is not supported.
220	 */
221	if (!q)
222		return;
223	cl = q->ops->cl_ops->bind_tcf(q, base, r->classid);
224	cl = cls_set_class(q, &r->class, cl);
225	if (cl)
 
 
 
 
 
 
 
 
226		q->ops->cl_ops->unbind_tcf(q, cl);
227}
228
229static inline void
230tcf_unbind_filter(struct tcf_proto *tp, struct tcf_result *r)
231{
232	struct Qdisc *q = tp->chain->block->q;
233	unsigned long cl;
234
235	if (!q)
236		return;
237	if ((cl = __cls_set_class(&r->class, 0)) != 0)
238		q->ops->cl_ops->unbind_tcf(q, cl);
 
 
 
 
 
 
 
 
 
 
 
239}
240
241struct tcf_exts {
242#ifdef CONFIG_NET_CLS_ACT
243	__u32	type; /* for backward compat(TCA_OLD_COMPAT) */
244	int nr_actions;
245	struct tc_action **actions;
246	struct net *net;
 
 
247#endif
248	/* Map to export classifier specific extension TLV types to the
249	 * generic extensions API. Unsupported extensions must be set to 0.
250	 */
251	int action;
252	int police;
253};
254
255static inline int tcf_exts_init(struct tcf_exts *exts, int action, int police)
 
256{
257#ifdef CONFIG_NET_CLS_ACT
258	exts->type = 0;
259	exts->nr_actions = 0;
260	exts->net = NULL;
261	exts->actions = kcalloc(TCA_ACT_MAX_PRIO, sizeof(struct tc_action *),
262				GFP_KERNEL);
263	if (!exts->actions)
264		return -ENOMEM;
265#endif
266	exts->action = action;
267	exts->police = police;
268	return 0;
269}
270
271/* Return false if the netns is being destroyed in cleanup_net(). Callers
272 * need to do cleanup synchronously in this case, otherwise may race with
273 * tc_action_net_exit(). Return true for other cases.
274 */
275static inline bool tcf_exts_get_net(struct tcf_exts *exts)
276{
277#ifdef CONFIG_NET_CLS_ACT
278	exts->net = maybe_get_net(exts->net);
 
 
279	return exts->net != NULL;
280#else
281	return true;
282#endif
283}
284
285static inline void tcf_exts_put_net(struct tcf_exts *exts)
286{
287#ifdef CONFIG_NET_CLS_ACT
288	if (exts->net)
289		put_net(exts->net);
290#endif
291}
292
293static inline void tcf_exts_to_list(const struct tcf_exts *exts,
294				    struct list_head *actions)
295{
296#ifdef CONFIG_NET_CLS_ACT
297	int i;
 
 
 
 
 
298
299	for (i = 0; i < exts->nr_actions; i++) {
300		struct tc_action *a = exts->actions[i];
301
302		list_add_tail(&a->list, actions);
303	}
304#endif
305}
306
307static inline void
308tcf_exts_stats_update(const struct tcf_exts *exts,
309		      u64 bytes, u64 packets, u64 lastuse)
 
310{
311#ifdef CONFIG_NET_CLS_ACT
312	int i;
313
314	preempt_disable();
315
316	for (i = 0; i < exts->nr_actions; i++) {
317		struct tc_action *a = exts->actions[i];
318
319		tcf_action_stats_update(a, bytes, packets, lastuse);
 
 
 
 
 
 
 
 
 
 
 
320	}
321
322	preempt_enable();
323#endif
324}
325
326/**
327 * tcf_exts_has_actions - check if at least one action is present
328 * @exts: tc filter extensions handle
329 *
330 * Returns true if at least one action is present.
331 */
332static inline bool tcf_exts_has_actions(struct tcf_exts *exts)
333{
334#ifdef CONFIG_NET_CLS_ACT
335	return exts->nr_actions;
336#else
337	return false;
338#endif
339}
340
341/**
342 * tcf_exts_has_one_action - check if exactly one action is present
343 * @exts: tc filter extensions handle
344 *
345 * Returns true if exactly one action is present.
346 */
347static inline bool tcf_exts_has_one_action(struct tcf_exts *exts)
348{
349#ifdef CONFIG_NET_CLS_ACT
350	return exts->nr_actions == 1;
351#else
352	return false;
353#endif
354}
355
356/**
357 * tcf_exts_exec - execute tc filter extensions
358 * @skb: socket buffer
359 * @exts: tc filter extensions handle
360 * @res: desired result
361 *
362 * Executes all configured extensions. Returns TC_ACT_OK on a normal execution,
363 * a negative number if the filter must be considered unmatched or
364 * a positive action code (TC_ACT_*) which must be returned to the
365 * underlying layer.
366 */
367static inline int
368tcf_exts_exec(struct sk_buff *skb, struct tcf_exts *exts,
369	      struct tcf_result *res)
370{
371#ifdef CONFIG_NET_CLS_ACT
372	return tcf_action_exec(skb, exts->actions, exts->nr_actions, res);
373#endif
374	return TC_ACT_OK;
375}
376
 
 
 
 
 
 
 
 
 
 
 
 
377int tcf_exts_validate(struct net *net, struct tcf_proto *tp,
378		      struct nlattr **tb, struct nlattr *rate_tlv,
379		      struct tcf_exts *exts, bool ovr,
380		      struct netlink_ext_ack *extack);
 
 
 
381void tcf_exts_destroy(struct tcf_exts *exts);
382void tcf_exts_change(struct tcf_exts *dst, struct tcf_exts *src);
383int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts);
 
384int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts);
385
386/**
387 * struct tcf_pkt_info - packet information
 
 
 
388 */
389struct tcf_pkt_info {
390	unsigned char *		ptr;
391	int			nexthdr;
392};
393
394#ifdef CONFIG_NET_EMATCH
395
396struct tcf_ematch_ops;
397
398/**
399 * struct tcf_ematch - extended match (ematch)
400 * 
401 * @matchid: identifier to allow userspace to reidentify a match
402 * @flags: flags specifying attributes and the relation to other matches
403 * @ops: the operations lookup table of the corresponding ematch module
404 * @datalen: length of the ematch specific configuration data
405 * @data: ematch specific data
 
406 */
407struct tcf_ematch {
408	struct tcf_ematch_ops * ops;
409	unsigned long		data;
410	unsigned int		datalen;
411	u16			matchid;
412	u16			flags;
413	struct net		*net;
414};
415
416static inline int tcf_em_is_container(struct tcf_ematch *em)
417{
418	return !em->ops;
419}
420
421static inline int tcf_em_is_simple(struct tcf_ematch *em)
422{
423	return em->flags & TCF_EM_SIMPLE;
424}
425
426static inline int tcf_em_is_inverted(struct tcf_ematch *em)
427{
428	return em->flags & TCF_EM_INVERT;
429}
430
431static inline int tcf_em_last_match(struct tcf_ematch *em)
432{
433	return (em->flags & TCF_EM_REL_MASK) == TCF_EM_REL_END;
434}
435
436static inline int tcf_em_early_end(struct tcf_ematch *em, int result)
437{
438	if (tcf_em_last_match(em))
439		return 1;
440
441	if (result == 0 && em->flags & TCF_EM_REL_AND)
442		return 1;
443
444	if (result != 0 && em->flags & TCF_EM_REL_OR)
445		return 1;
446
447	return 0;
448}
449	
450/**
451 * struct tcf_ematch_tree - ematch tree handle
452 *
453 * @hdr: ematch tree header supplied by userspace
454 * @matches: array of ematches
455 */
456struct tcf_ematch_tree {
457	struct tcf_ematch_tree_hdr hdr;
458	struct tcf_ematch *	matches;
459	
460};
461
462/**
463 * struct tcf_ematch_ops - ematch module operations
464 * 
465 * @kind: identifier (kind) of this ematch module
466 * @datalen: length of expected configuration data (optional)
467 * @change: called during validation (optional)
468 * @match: called during ematch tree evaluation, must return 1/0
469 * @destroy: called during destroyage (optional)
470 * @dump: called during dumping process (optional)
471 * @owner: owner, must be set to THIS_MODULE
472 * @link: link to previous/next ematch module (internal use)
473 */
474struct tcf_ematch_ops {
475	int			kind;
476	int			datalen;
477	int			(*change)(struct net *net, void *,
478					  int, struct tcf_ematch *);
479	int			(*match)(struct sk_buff *, struct tcf_ematch *,
480					 struct tcf_pkt_info *);
481	void			(*destroy)(struct tcf_ematch *);
482	int			(*dump)(struct sk_buff *, struct tcf_ematch *);
483	struct module		*owner;
484	struct list_head	link;
485};
486
487int tcf_em_register(struct tcf_ematch_ops *);
488void tcf_em_unregister(struct tcf_ematch_ops *);
489int tcf_em_tree_validate(struct tcf_proto *, struct nlattr *,
490			 struct tcf_ematch_tree *);
491void tcf_em_tree_destroy(struct tcf_ematch_tree *);
492int tcf_em_tree_dump(struct sk_buff *, struct tcf_ematch_tree *, int);
493int __tcf_em_tree_match(struct sk_buff *, struct tcf_ematch_tree *,
494			struct tcf_pkt_info *);
495
496/**
497 * tcf_em_tree_match - evaulate an ematch tree
498 *
499 * @skb: socket buffer of the packet in question
500 * @tree: ematch tree to be used for evaluation
501 * @info: packet information examined by classifier
502 *
503 * This function matches @skb against the ematch tree in @tree by going
504 * through all ematches respecting their logic relations returning
505 * as soon as the result is obvious.
506 *
507 * Returns 1 if the ematch tree as-one matches, no ematches are configured
508 * or ematch is not enabled in the kernel, otherwise 0 is returned.
509 */
510static inline int tcf_em_tree_match(struct sk_buff *skb,
511				    struct tcf_ematch_tree *tree,
512				    struct tcf_pkt_info *info)
513{
514	if (tree->hdr.nmatches)
515		return __tcf_em_tree_match(skb, tree, info);
516	else
517		return 1;
518}
519
520#define MODULE_ALIAS_TCF_EMATCH(kind)	MODULE_ALIAS("ematch-kind-" __stringify(kind))
521
522#else /* CONFIG_NET_EMATCH */
523
524struct tcf_ematch_tree {
525};
526
527#define tcf_em_tree_validate(tp, tb, t) ((void)(t), 0)
528#define tcf_em_tree_destroy(t) do { (void)(t); } while(0)
529#define tcf_em_tree_dump(skb, t, tlv) (0)
530#define tcf_em_tree_match(skb, t, info) ((void)(info), 1)
531
532#endif /* CONFIG_NET_EMATCH */
533
534static inline unsigned char * tcf_get_base_ptr(struct sk_buff *skb, int layer)
535{
536	switch (layer) {
537		case TCF_LAYER_LINK:
538			return skb_mac_header(skb);
539		case TCF_LAYER_NETWORK:
540			return skb_network_header(skb);
541		case TCF_LAYER_TRANSPORT:
542			return skb_transport_header(skb);
543	}
544
545	return NULL;
546}
547
548static inline int tcf_valid_offset(const struct sk_buff *skb,
549				   const unsigned char *ptr, const int len)
550{
551	return likely((ptr + len) <= skb_tail_pointer(skb) &&
552		      ptr >= skb->head &&
553		      (ptr <= (ptr + len)));
554}
555
556#ifdef CONFIG_NET_CLS_IND
557#include <net/net_namespace.h>
558
559static inline int
560tcf_change_indev(struct net *net, struct nlattr *indev_tlv,
561		 struct netlink_ext_ack *extack)
562{
563	char indev[IFNAMSIZ];
564	struct net_device *dev;
565
566	if (nla_strlcpy(indev, indev_tlv, IFNAMSIZ) >= IFNAMSIZ) {
567		NL_SET_ERR_MSG(extack, "Interface name too long");
 
568		return -EINVAL;
569	}
570	dev = __dev_get_by_name(net, indev);
571	if (!dev)
 
 
572		return -ENODEV;
 
573	return dev->ifindex;
574}
575
576static inline bool
577tcf_match_indev(struct sk_buff *skb, int ifindex)
578{
579	if (!ifindex)
580		return true;
581	if  (!skb->skb_iif)
582		return false;
583	return ifindex == skb->skb_iif;
584}
585#endif /* CONFIG_NET_CLS_IND */
586
587int tc_setup_cb_call(struct tcf_block *block, struct tcf_exts *exts,
588		     enum tc_setup_type type, void *type_data, bool err_stop);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
589
590enum tc_block_command {
591	TC_BLOCK_BIND,
592	TC_BLOCK_UNBIND,
593};
 
594
595struct tc_block_offload {
596	enum tc_block_command command;
597	enum tcf_block_binder_type binder_type;
598	struct tcf_block *block;
599};
 
600
601struct tc_cls_common_offload {
602	u32 chain_index;
603	__be16 protocol;
604	u32 prio;
605	struct netlink_ext_ack *extack;
606};
607
608struct tc_cls_u32_knode {
609	struct tcf_exts *exts;
 
610	struct tc_u32_sel *sel;
611	u32 handle;
612	u32 val;
613	u32 mask;
614	u32 link_handle;
615	u8 fshift;
616};
617
618struct tc_cls_u32_hnode {
619	u32 handle;
620	u32 prio;
621	unsigned int divisor;
622};
623
624enum tc_clsu32_command {
625	TC_CLSU32_NEW_KNODE,
626	TC_CLSU32_REPLACE_KNODE,
627	TC_CLSU32_DELETE_KNODE,
628	TC_CLSU32_NEW_HNODE,
629	TC_CLSU32_REPLACE_HNODE,
630	TC_CLSU32_DELETE_HNODE,
631};
632
633struct tc_cls_u32_offload {
634	struct tc_cls_common_offload common;
635	/* knode values */
636	enum tc_clsu32_command command;
637	union {
638		struct tc_cls_u32_knode knode;
639		struct tc_cls_u32_hnode hnode;
640	};
641};
642
643static inline bool tc_can_offload(const struct net_device *dev)
644{
645	return dev->features & NETIF_F_HW_TC;
646}
647
648static inline bool tc_can_offload_extack(const struct net_device *dev,
649					 struct netlink_ext_ack *extack)
650{
651	bool can = tc_can_offload(dev);
652
653	if (!can)
654		NL_SET_ERR_MSG(extack, "TC offload is disabled on net device");
655
656	return can;
657}
658
659static inline bool
660tc_cls_can_offload_and_chain0(const struct net_device *dev,
661			      struct tc_cls_common_offload *common)
662{
663	if (!tc_can_offload_extack(dev, common->extack))
664		return false;
665	if (common->chain_index) {
666		NL_SET_ERR_MSG(common->extack,
667			       "Driver supports only offload of chain 0");
668		return false;
669	}
670	return true;
671}
672
673static inline bool tc_skip_hw(u32 flags)
674{
675	return (flags & TCA_CLS_FLAGS_SKIP_HW) ? true : false;
676}
677
678static inline bool tc_skip_sw(u32 flags)
679{
680	return (flags & TCA_CLS_FLAGS_SKIP_SW) ? true : false;
681}
682
683/* SKIP_HW and SKIP_SW are mutually exclusive flags. */
684static inline bool tc_flags_valid(u32 flags)
685{
686	if (flags & ~(TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW))
 
687		return false;
688
 
689	if (!(flags ^ (TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW)))
690		return false;
691
692	return true;
693}
694
695static inline bool tc_in_hw(u32 flags)
696{
697	return (flags & TCA_CLS_FLAGS_IN_HW) ? true : false;
698}
699
700static inline void
701tc_cls_common_offload_init(struct tc_cls_common_offload *cls_common,
702			   const struct tcf_proto *tp, u32 flags,
703			   struct netlink_ext_ack *extack)
704{
705	cls_common->chain_index = tp->chain->index;
706	cls_common->protocol = tp->protocol;
707	cls_common->prio = tp->prio;
708	if (tc_skip_sw(flags))
 
709		cls_common->extack = extack;
710}
711
712enum tc_fl_command {
713	TC_CLSFLOWER_REPLACE,
714	TC_CLSFLOWER_DESTROY,
715	TC_CLSFLOWER_STATS,
716};
 
 
 
 
 
 
 
 
717
718struct tc_cls_flower_offload {
719	struct tc_cls_common_offload common;
720	enum tc_fl_command command;
721	unsigned long cookie;
722	struct flow_dissector *dissector;
723	struct fl_flow_key *mask;
724	struct fl_flow_key *key;
725	struct tcf_exts *exts;
726	u32 classid;
727};
728
729enum tc_matchall_command {
730	TC_CLSMATCHALL_REPLACE,
731	TC_CLSMATCHALL_DESTROY,
 
732};
733
734struct tc_cls_matchall_offload {
735	struct tc_cls_common_offload common;
736	enum tc_matchall_command command;
737	struct tcf_exts *exts;
 
 
738	unsigned long cookie;
739};
740
741enum tc_clsbpf_command {
742	TC_CLSBPF_OFFLOAD,
743	TC_CLSBPF_STATS,
744};
745
746struct tc_cls_bpf_offload {
747	struct tc_cls_common_offload common;
748	enum tc_clsbpf_command command;
749	struct tcf_exts *exts;
750	struct bpf_prog *prog;
751	struct bpf_prog *oldprog;
752	const char *name;
753	bool exts_integrated;
754};
755
756struct tc_mqprio_qopt_offload {
757	/* struct tc_mqprio_qopt must always be the first element */
758	struct tc_mqprio_qopt qopt;
759	u16 mode;
760	u16 shaper;
761	u32 flags;
762	u64 min_rate[TC_QOPT_MAX_QUEUE];
763	u64 max_rate[TC_QOPT_MAX_QUEUE];
764};
765
766/* This structure holds cookie structure that is passed from user
767 * to the kernel for actions and classifiers
768 */
769struct tc_cookie {
770	u8  *data;
771	u32 len;
 
772};
773
774struct tc_qopt_offload_stats {
775	struct gnet_stats_basic_packed *bstats;
776	struct gnet_stats_queue *qstats;
777};
778
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
779enum tc_red_command {
780	TC_RED_REPLACE,
781	TC_RED_DESTROY,
782	TC_RED_STATS,
783	TC_RED_XSTATS,
 
784};
785
786struct tc_red_qopt_offload_params {
787	u32 min;
788	u32 max;
789	u32 probability;
 
790	bool is_ecn;
 
 
791	struct gnet_stats_queue *qstats;
792};
793
794struct tc_red_qopt_offload {
795	enum tc_red_command command;
796	u32 handle;
797	u32 parent;
798	union {
799		struct tc_red_qopt_offload_params set;
800		struct tc_qopt_offload_stats stats;
801		struct red_stats *xstats;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
802	};
803};
804
805enum tc_prio_command {
806	TC_PRIO_REPLACE,
807	TC_PRIO_DESTROY,
808	TC_PRIO_STATS,
809	TC_PRIO_GRAFT,
810};
811
812struct tc_prio_qopt_offload_params {
813	int bands;
814	u8 priomap[TC_PRIO_MAX + 1];
815	/* In case that a prio qdisc is offloaded and now is changed to a
816	 * non-offloadedable config, it needs to update the backlog & qlen
817	 * values to negate the HW backlog & qlen values (and only them).
818	 */
819	struct gnet_stats_queue *qstats;
820};
821
822struct tc_prio_qopt_offload_graft_params {
823	u8 band;
824	u32 child_handle;
825};
826
827struct tc_prio_qopt_offload {
828	enum tc_prio_command command;
829	u32 handle;
830	u32 parent;
831	union {
832		struct tc_prio_qopt_offload_params replace_params;
833		struct tc_qopt_offload_stats stats;
834		struct tc_prio_qopt_offload_graft_params graft_params;
835	};
836};
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
837
838#endif