Linux Audio

Check our new training course

Loading...
v6.13.7
   1/* SPDX-License-Identifier: GPL-2.0 */
   2#ifndef __NET_PKT_CLS_H
   3#define __NET_PKT_CLS_H
   4
   5#include <linux/pkt_cls.h>
   6#include <linux/workqueue.h>
   7#include <net/sch_generic.h>
   8#include <net/act_api.h>
   9#include <net/net_namespace.h>
  10
  11/* TC action not accessible from user space */
  12#define TC_ACT_CONSUMED		(TC_ACT_VALUE_MAX + 1)
  13
  14/* Basic packet classifier frontend definitions. */
  15
  16struct tcf_walker {
  17	int	stop;
  18	int	skip;
  19	int	count;
  20	bool	nonempty;
  21	unsigned long cookie;
  22	int	(*fn)(struct tcf_proto *, void *node, struct tcf_walker *);
  23};
  24
  25int register_tcf_proto_ops(struct tcf_proto_ops *ops);
  26void unregister_tcf_proto_ops(struct tcf_proto_ops *ops);
  27#define NET_CLS_ALIAS_PREFIX "net-cls-"
  28#define MODULE_ALIAS_NET_CLS(kind)	MODULE_ALIAS(NET_CLS_ALIAS_PREFIX kind)
  29
  30struct tcf_block_ext_info {
  31	enum flow_block_binder_type binder_type;
  32	tcf_chain_head_change_t *chain_head_change;
  33	void *chain_head_change_priv;
  34	u32 block_index;
  35};
  36
  37struct tcf_qevent {
  38	struct tcf_block	*block;
  39	struct tcf_block_ext_info info;
  40	struct tcf_proto __rcu *filter_chain;
  41};
  42
  43struct tcf_block_cb;
  44bool tcf_queue_work(struct rcu_work *rwork, work_func_t func);
  45
  46#ifdef CONFIG_NET_CLS
  47struct tcf_chain *tcf_chain_get_by_act(struct tcf_block *block,
  48				       u32 chain_index);
  49void tcf_chain_put_by_act(struct tcf_chain *chain);
  50struct tcf_chain *tcf_get_next_chain(struct tcf_block *block,
  51				     struct tcf_chain *chain);
  52struct tcf_proto *tcf_get_next_proto(struct tcf_chain *chain,
  53				     struct tcf_proto *tp);
  54void tcf_block_netif_keep_dst(struct tcf_block *block);
  55int tcf_block_get(struct tcf_block **p_block,
  56		  struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
  57		  struct netlink_ext_ack *extack);
  58int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
  59		      struct tcf_block_ext_info *ei,
  60		      struct netlink_ext_ack *extack);
  61void tcf_block_put(struct tcf_block *block);
  62void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
  63		       struct tcf_block_ext_info *ei);
  64int tcf_exts_init_ex(struct tcf_exts *exts, struct net *net, int action,
  65		     int police, struct tcf_proto *tp, u32 handle, bool used_action_miss);
  66
  67static inline bool tcf_block_shared(struct tcf_block *block)
  68{
  69	return block->index;
  70}
  71
  72static inline bool tcf_block_non_null_shared(struct tcf_block *block)
  73{
  74	return block && block->index;
  75}
  76
  77#ifdef CONFIG_NET_CLS_ACT
  78DECLARE_STATIC_KEY_FALSE(tcf_sw_enabled_key);
  79
  80static inline bool tcf_block_bypass_sw(struct tcf_block *block)
  81{
  82	return block && !atomic_read(&block->useswcnt);
  83}
  84#endif
  85
  86static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
  87{
  88	WARN_ON(tcf_block_shared(block));
  89	return block->q;
  90}
  91
  92int tcf_classify(struct sk_buff *skb,
  93		 const struct tcf_block *block,
  94		 const struct tcf_proto *tp, struct tcf_result *res,
  95		 bool compat_mode);
  96
  97static inline bool tc_cls_stats_dump(struct tcf_proto *tp,
  98				     struct tcf_walker *arg,
  99				     void *filter)
 100{
 101	if (arg->count >= arg->skip && arg->fn(tp, filter, arg) < 0) {
 102		arg->stop = 1;
 103		return false;
 104	}
 105
 106	arg->count++;
 107	return true;
 108}
 109
 110#else
 111static inline bool tcf_block_shared(struct tcf_block *block)
 112{
 113	return false;
 114}
 115
 116static inline bool tcf_block_non_null_shared(struct tcf_block *block)
 117{
 118	return false;
 119}
 120
 121static inline
 122int tcf_block_get(struct tcf_block **p_block,
 123		  struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
 124		  struct netlink_ext_ack *extack)
 125{
 126	return 0;
 127}
 128
 129static inline
 130int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
 131		      struct tcf_block_ext_info *ei,
 132		      struct netlink_ext_ack *extack)
 133{
 134	return 0;
 135}
 136
 137static inline void tcf_block_put(struct tcf_block *block)
 138{
 139}
 140
 141static inline
 142void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
 143		       struct tcf_block_ext_info *ei)
 144{
 145}
 146
 147static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
 148{
 149	return NULL;
 150}
 151
 152static inline int tcf_classify(struct sk_buff *skb,
 153			       const struct tcf_block *block,
 154			       const struct tcf_proto *tp,
 
 
 
 
 
 
 
 
 
 
 
 155			       struct tcf_result *res, bool compat_mode)
 156{
 157	return TC_ACT_UNSPEC;
 158}
 159
 160#endif
 161
 162static inline unsigned long
 163__cls_set_class(unsigned long *clp, unsigned long cl)
 164{
 165	return xchg(clp, cl);
 166}
 167
 168static inline void
 169__tcf_bind_filter(struct Qdisc *q, struct tcf_result *r, unsigned long base)
 170{
 171	unsigned long cl;
 172
 173	cl = q->ops->cl_ops->bind_tcf(q, base, r->classid);
 174	cl = __cls_set_class(&r->class, cl);
 175	if (cl)
 176		q->ops->cl_ops->unbind_tcf(q, cl);
 177}
 178
 179static inline void
 180tcf_bind_filter(struct tcf_proto *tp, struct tcf_result *r, unsigned long base)
 181{
 182	struct Qdisc *q = tp->chain->block->q;
 
 183
 184	/* Check q as it is not set for shared blocks. In that case,
 185	 * setting class is not supported.
 186	 */
 187	if (!q)
 188		return;
 189	sch_tree_lock(q);
 190	__tcf_bind_filter(q, r, base);
 191	sch_tree_unlock(q);
 192}
 193
 194static inline void
 195__tcf_unbind_filter(struct Qdisc *q, struct tcf_result *r)
 196{
 197	unsigned long cl;
 198
 199	if ((cl = __cls_set_class(&r->class, 0)) != 0)
 200		q->ops->cl_ops->unbind_tcf(q, cl);
 201}
 202
 203static inline void
 204tcf_unbind_filter(struct tcf_proto *tp, struct tcf_result *r)
 205{
 206	struct Qdisc *q = tp->chain->block->q;
 
 207
 208	if (!q)
 209		return;
 210	__tcf_unbind_filter(q, r);
 211}
 212
 213static inline void tc_cls_bind_class(u32 classid, unsigned long cl,
 214				     void *q, struct tcf_result *res,
 215				     unsigned long base)
 216{
 217	if (res->classid == classid) {
 218		if (cl)
 219			__tcf_bind_filter(q, res, base);
 220		else
 221			__tcf_unbind_filter(q, res);
 222	}
 223}
 224
 225struct tcf_exts {
 226#ifdef CONFIG_NET_CLS_ACT
 227	__u32	type; /* for backward compat(TCA_OLD_COMPAT) */
 228	int nr_actions;
 229	struct tc_action **actions;
 230	struct net	*net;
 231	netns_tracker	ns_tracker;
 232	struct tcf_exts_miss_cookie_node *miss_cookie_node;
 233#endif
 234	/* Map to export classifier specific extension TLV types to the
 235	 * generic extensions API. Unsupported extensions must be set to 0.
 236	 */
 237	int action;
 238	int police;
 239};
 240
 241static inline int tcf_exts_init(struct tcf_exts *exts, struct net *net,
 242				int action, int police)
 243{
 244#ifdef CONFIG_NET_CLS
 245	return tcf_exts_init_ex(exts, net, action, police, NULL, 0, false);
 246#else
 247	return -EOPNOTSUPP;
 
 
 
 
 248#endif
 
 
 
 249}
 250
 251/* Return false if the netns is being destroyed in cleanup_net(). Callers
 252 * need to do cleanup synchronously in this case, otherwise may race with
 253 * tc_action_net_exit(). Return true for other cases.
 254 */
 255static inline bool tcf_exts_get_net(struct tcf_exts *exts)
 256{
 257#ifdef CONFIG_NET_CLS_ACT
 258	exts->net = maybe_get_net(exts->net);
 259	if (exts->net)
 260		netns_tracker_alloc(exts->net, &exts->ns_tracker, GFP_KERNEL);
 261	return exts->net != NULL;
 262#else
 263	return true;
 264#endif
 265}
 266
 267static inline void tcf_exts_put_net(struct tcf_exts *exts)
 268{
 269#ifdef CONFIG_NET_CLS_ACT
 270	if (exts->net)
 271		put_net_track(exts->net, &exts->ns_tracker);
 272#endif
 273}
 274
 275#ifdef CONFIG_NET_CLS_ACT
 276#define tcf_exts_for_each_action(i, a, exts) \
 277	for (i = 0; i < TCA_ACT_MAX_PRIO && ((a) = (exts)->actions[i]); i++)
 278#else
 279#define tcf_exts_for_each_action(i, a, exts) \
 280	for (; 0; (void)(i), (void)(a), (void)(exts))
 281#endif
 282
 283#define tcf_act_for_each_action(i, a, actions) \
 284	for (i = 0; i < TCA_ACT_MAX_PRIO && ((a) = actions[i]); i++)
 285
 286static inline bool tc_act_in_hw(struct tc_action *act)
 287{
 288	return !!act->in_hw_count;
 289}
 290
 291static inline void
 292tcf_exts_hw_stats_update(const struct tcf_exts *exts,
 293			 struct flow_stats *stats,
 294			 bool use_act_stats)
 295{
 296#ifdef CONFIG_NET_CLS_ACT
 297	int i;
 298
 
 
 299	for (i = 0; i < exts->nr_actions; i++) {
 300		struct tc_action *a = exts->actions[i];
 301
 302		if (use_act_stats || tc_act_in_hw(a)) {
 303			if (!tcf_action_update_hw_stats(a))
 304				continue;
 305		}
 306
 307		preempt_disable();
 308		tcf_action_stats_update(a, stats->bytes, stats->pkts, stats->drops,
 309					stats->lastused, true);
 310		preempt_enable();
 311
 312		a->used_hw_stats = stats->used_hw_stats;
 313		a->used_hw_stats_valid = stats->used_hw_stats_valid;
 314	}
 
 
 315#endif
 316}
 317
 318/**
 319 * tcf_exts_has_actions - check if at least one action is present
 320 * @exts: tc filter extensions handle
 321 *
 322 * Returns true if at least one action is present.
 323 */
 324static inline bool tcf_exts_has_actions(struct tcf_exts *exts)
 325{
 326#ifdef CONFIG_NET_CLS_ACT
 327	return exts->nr_actions;
 328#else
 329	return false;
 330#endif
 331}
 332
 333/**
 334 * tcf_exts_exec - execute tc filter extensions
 335 * @skb: socket buffer
 336 * @exts: tc filter extensions handle
 337 * @res: desired result
 338 *
 339 * Executes all configured extensions. Returns TC_ACT_OK on a normal execution,
 340 * a negative number if the filter must be considered unmatched or
 341 * a positive action code (TC_ACT_*) which must be returned to the
 342 * underlying layer.
 343 */
 344static inline int
 345tcf_exts_exec(struct sk_buff *skb, struct tcf_exts *exts,
 346	      struct tcf_result *res)
 347{
 348#ifdef CONFIG_NET_CLS_ACT
 349	return tcf_action_exec(skb, exts->actions, exts->nr_actions, res);
 350#endif
 351	return TC_ACT_OK;
 352}
 353
 354static inline int
 355tcf_exts_exec_ex(struct sk_buff *skb, struct tcf_exts *exts, int act_index,
 356		 struct tcf_result *res)
 357{
 358#ifdef CONFIG_NET_CLS_ACT
 359	return tcf_action_exec(skb, exts->actions + act_index,
 360			       exts->nr_actions - act_index, res);
 361#else
 362	return TC_ACT_OK;
 363#endif
 364}
 365
 366int tcf_exts_validate(struct net *net, struct tcf_proto *tp,
 367		      struct nlattr **tb, struct nlattr *rate_tlv,
 368		      struct tcf_exts *exts, u32 flags,
 369		      struct netlink_ext_ack *extack);
 370int tcf_exts_validate_ex(struct net *net, struct tcf_proto *tp, struct nlattr **tb,
 371			 struct nlattr *rate_tlv, struct tcf_exts *exts,
 372			 u32 flags, u32 fl_flags, struct netlink_ext_ack *extack);
 373void tcf_exts_destroy(struct tcf_exts *exts);
 374void tcf_exts_change(struct tcf_exts *dst, struct tcf_exts *src);
 375int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts);
 376int tcf_exts_terse_dump(struct sk_buff *skb, struct tcf_exts *exts);
 377int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts);
 378
 379/**
 380 * struct tcf_pkt_info - packet information
 381 *
 382 * @ptr: start of the pkt data
 383 * @nexthdr: offset of the next header
 384 */
 385struct tcf_pkt_info {
 386	unsigned char *		ptr;
 387	int			nexthdr;
 388};
 389
 390#ifdef CONFIG_NET_EMATCH
 391
 392struct tcf_ematch_ops;
 393
 394/**
 395 * struct tcf_ematch - extended match (ematch)
 396 * 
 397 * @matchid: identifier to allow userspace to reidentify a match
 398 * @flags: flags specifying attributes and the relation to other matches
 399 * @ops: the operations lookup table of the corresponding ematch module
 400 * @datalen: length of the ematch specific configuration data
 401 * @data: ematch specific data
 402 * @net: the network namespace
 403 */
 404struct tcf_ematch {
 405	struct tcf_ematch_ops * ops;
 406	unsigned long		data;
 407	unsigned int		datalen;
 408	u16			matchid;
 409	u16			flags;
 410	struct net		*net;
 411};
 412
 413static inline int tcf_em_is_container(struct tcf_ematch *em)
 414{
 415	return !em->ops;
 416}
 417
 418static inline int tcf_em_is_simple(struct tcf_ematch *em)
 419{
 420	return em->flags & TCF_EM_SIMPLE;
 421}
 422
 423static inline int tcf_em_is_inverted(struct tcf_ematch *em)
 424{
 425	return em->flags & TCF_EM_INVERT;
 426}
 427
 428static inline int tcf_em_last_match(struct tcf_ematch *em)
 429{
 430	return (em->flags & TCF_EM_REL_MASK) == TCF_EM_REL_END;
 431}
 432
 433static inline int tcf_em_early_end(struct tcf_ematch *em, int result)
 434{
 435	if (tcf_em_last_match(em))
 436		return 1;
 437
 438	if (result == 0 && em->flags & TCF_EM_REL_AND)
 439		return 1;
 440
 441	if (result != 0 && em->flags & TCF_EM_REL_OR)
 442		return 1;
 443
 444	return 0;
 445}
 446	
 447/**
 448 * struct tcf_ematch_tree - ematch tree handle
 449 *
 450 * @hdr: ematch tree header supplied by userspace
 451 * @matches: array of ematches
 452 */
 453struct tcf_ematch_tree {
 454	struct tcf_ematch_tree_hdr hdr;
 455	struct tcf_ematch *	matches;
 456	
 457};
 458
 459/**
 460 * struct tcf_ematch_ops - ematch module operations
 461 * 
 462 * @kind: identifier (kind) of this ematch module
 463 * @datalen: length of expected configuration data (optional)
 464 * @change: called during validation (optional)
 465 * @match: called during ematch tree evaluation, must return 1/0
 466 * @destroy: called during destroyage (optional)
 467 * @dump: called during dumping process (optional)
 468 * @owner: owner, must be set to THIS_MODULE
 469 * @link: link to previous/next ematch module (internal use)
 470 */
 471struct tcf_ematch_ops {
 472	int			kind;
 473	int			datalen;
 474	int			(*change)(struct net *net, void *,
 475					  int, struct tcf_ematch *);
 476	int			(*match)(struct sk_buff *, struct tcf_ematch *,
 477					 struct tcf_pkt_info *);
 478	void			(*destroy)(struct tcf_ematch *);
 479	int			(*dump)(struct sk_buff *, struct tcf_ematch *);
 480	struct module		*owner;
 481	struct list_head	link;
 482};
 483
 484int tcf_em_register(struct tcf_ematch_ops *);
 485void tcf_em_unregister(struct tcf_ematch_ops *);
 486int tcf_em_tree_validate(struct tcf_proto *, struct nlattr *,
 487			 struct tcf_ematch_tree *);
 488void tcf_em_tree_destroy(struct tcf_ematch_tree *);
 489int tcf_em_tree_dump(struct sk_buff *, struct tcf_ematch_tree *, int);
 490int __tcf_em_tree_match(struct sk_buff *, struct tcf_ematch_tree *,
 491			struct tcf_pkt_info *);
 492
 493/**
 494 * tcf_em_tree_match - evaluate an ematch tree
 495 *
 496 * @skb: socket buffer of the packet in question
 497 * @tree: ematch tree to be used for evaluation
 498 * @info: packet information examined by classifier
 499 *
 500 * This function matches @skb against the ematch tree in @tree by going
 501 * through all ematches respecting their logic relations returning
 502 * as soon as the result is obvious.
 503 *
 504 * Returns 1 if the ematch tree as-one matches, no ematches are configured
 505 * or ematch is not enabled in the kernel, otherwise 0 is returned.
 506 */
 507static inline int tcf_em_tree_match(struct sk_buff *skb,
 508				    struct tcf_ematch_tree *tree,
 509				    struct tcf_pkt_info *info)
 510{
 511	if (tree->hdr.nmatches)
 512		return __tcf_em_tree_match(skb, tree, info);
 513	else
 514		return 1;
 515}
 516
 517#define MODULE_ALIAS_TCF_EMATCH(kind)	MODULE_ALIAS("ematch-kind-" __stringify(kind))
 518
 519#else /* CONFIG_NET_EMATCH */
 520
 521struct tcf_ematch_tree {
 522};
 523
 524#define tcf_em_tree_validate(tp, tb, t) ((void)(t), 0)
 525#define tcf_em_tree_destroy(t) do { (void)(t); } while(0)
 526#define tcf_em_tree_dump(skb, t, tlv) (0)
 527#define tcf_em_tree_match(skb, t, info) ((void)(info), 1)
 528
 529#endif /* CONFIG_NET_EMATCH */
 530
 531static inline unsigned char * tcf_get_base_ptr(struct sk_buff *skb, int layer)
 532{
 533	switch (layer) {
 534		case TCF_LAYER_LINK:
 535			return skb_mac_header(skb);
 536		case TCF_LAYER_NETWORK:
 537			return skb_network_header(skb);
 538		case TCF_LAYER_TRANSPORT:
 539			return skb_transport_header(skb);
 540	}
 541
 542	return NULL;
 543}
 544
 545static inline int tcf_valid_offset(const struct sk_buff *skb,
 546				   const unsigned char *ptr, const int len)
 547{
 548	return likely((ptr + len) <= skb_tail_pointer(skb) &&
 549		      ptr >= skb->head &&
 550		      (ptr <= (ptr + len)));
 551}
 552
 553static inline int
 554tcf_change_indev(struct net *net, struct nlattr *indev_tlv,
 555		 struct netlink_ext_ack *extack)
 556{
 557	char indev[IFNAMSIZ];
 558	struct net_device *dev;
 559
 560	if (nla_strscpy(indev, indev_tlv, IFNAMSIZ) < 0) {
 561		NL_SET_ERR_MSG_ATTR(extack, indev_tlv,
 562				    "Interface name too long");
 563		return -EINVAL;
 564	}
 565	dev = __dev_get_by_name(net, indev);
 566	if (!dev) {
 567		NL_SET_ERR_MSG_ATTR(extack, indev_tlv,
 568				    "Network device not found");
 569		return -ENODEV;
 570	}
 571	return dev->ifindex;
 572}
 573
 574static inline bool
 575tcf_match_indev(struct sk_buff *skb, int ifindex)
 576{
 577	if (!ifindex)
 578		return true;
 579	if  (!skb->skb_iif)
 580		return false;
 581	return ifindex == skb->skb_iif;
 582}
 583
 584int tc_setup_offload_action(struct flow_action *flow_action,
 585			    const struct tcf_exts *exts,
 586			    struct netlink_ext_ack *extack);
 587void tc_cleanup_offload_action(struct flow_action *flow_action);
 588int tc_setup_action(struct flow_action *flow_action,
 589		    struct tc_action *actions[],
 590		    u32 miss_cookie_base,
 591		    struct netlink_ext_ack *extack);
 592
 593int tc_setup_cb_call(struct tcf_block *block, enum tc_setup_type type,
 594		     void *type_data, bool err_stop, bool rtnl_held);
 595int tc_setup_cb_add(struct tcf_block *block, struct tcf_proto *tp,
 596		    enum tc_setup_type type, void *type_data, bool err_stop,
 597		    u32 *flags, unsigned int *in_hw_count, bool rtnl_held);
 598int tc_setup_cb_replace(struct tcf_block *block, struct tcf_proto *tp,
 599			enum tc_setup_type type, void *type_data, bool err_stop,
 600			u32 *old_flags, unsigned int *old_in_hw_count,
 601			u32 *new_flags, unsigned int *new_in_hw_count,
 602			bool rtnl_held);
 603int tc_setup_cb_destroy(struct tcf_block *block, struct tcf_proto *tp,
 604			enum tc_setup_type type, void *type_data, bool err_stop,
 605			u32 *flags, unsigned int *in_hw_count, bool rtnl_held);
 606int tc_setup_cb_reoffload(struct tcf_block *block, struct tcf_proto *tp,
 607			  bool add, flow_setup_cb_t *cb,
 608			  enum tc_setup_type type, void *type_data,
 609			  void *cb_priv, u32 *flags, unsigned int *in_hw_count);
 610unsigned int tcf_exts_num_actions(struct tcf_exts *exts);
 611
 612#ifdef CONFIG_NET_CLS_ACT
 613int tcf_qevent_init(struct tcf_qevent *qe, struct Qdisc *sch,
 614		    enum flow_block_binder_type binder_type,
 615		    struct nlattr *block_index_attr,
 616		    struct netlink_ext_ack *extack);
 617void tcf_qevent_destroy(struct tcf_qevent *qe, struct Qdisc *sch);
 618int tcf_qevent_validate_change(struct tcf_qevent *qe, struct nlattr *block_index_attr,
 619			       struct netlink_ext_ack *extack);
 620struct sk_buff *tcf_qevent_handle(struct tcf_qevent *qe, struct Qdisc *sch, struct sk_buff *skb,
 621				  struct sk_buff **to_free, int *ret);
 622int tcf_qevent_dump(struct sk_buff *skb, int attr_name, struct tcf_qevent *qe);
 623#else
 624static inline int tcf_qevent_init(struct tcf_qevent *qe, struct Qdisc *sch,
 625				  enum flow_block_binder_type binder_type,
 626				  struct nlattr *block_index_attr,
 627				  struct netlink_ext_ack *extack)
 628{
 629	return 0;
 630}
 631
 632static inline void tcf_qevent_destroy(struct tcf_qevent *qe, struct Qdisc *sch)
 633{
 634}
 635
 636static inline int tcf_qevent_validate_change(struct tcf_qevent *qe, struct nlattr *block_index_attr,
 637					     struct netlink_ext_ack *extack)
 638{
 639	return 0;
 640}
 641
 642static inline struct sk_buff *
 643tcf_qevent_handle(struct tcf_qevent *qe, struct Qdisc *sch, struct sk_buff *skb,
 644		  struct sk_buff **to_free, int *ret)
 645{
 646	return skb;
 647}
 648
 649static inline int tcf_qevent_dump(struct sk_buff *skb, int attr_name, struct tcf_qevent *qe)
 650{
 651	return 0;
 652}
 653#endif
 654
 655struct tc_cls_u32_knode {
 656	struct tcf_exts *exts;
 657	struct tcf_result *res;
 658	struct tc_u32_sel *sel;
 659	u32 handle;
 660	u32 val;
 661	u32 mask;
 662	u32 link_handle;
 663	u8 fshift;
 664};
 665
 666struct tc_cls_u32_hnode {
 667	u32 handle;
 668	u32 prio;
 669	unsigned int divisor;
 670};
 671
 672enum tc_clsu32_command {
 673	TC_CLSU32_NEW_KNODE,
 674	TC_CLSU32_REPLACE_KNODE,
 675	TC_CLSU32_DELETE_KNODE,
 676	TC_CLSU32_NEW_HNODE,
 677	TC_CLSU32_REPLACE_HNODE,
 678	TC_CLSU32_DELETE_HNODE,
 679};
 680
 681struct tc_cls_u32_offload {
 682	struct flow_cls_common_offload common;
 683	/* knode values */
 684	enum tc_clsu32_command command;
 685	union {
 686		struct tc_cls_u32_knode knode;
 687		struct tc_cls_u32_hnode hnode;
 688	};
 689};
 690
 691static inline bool tc_can_offload(const struct net_device *dev)
 692{
 693	return dev->features & NETIF_F_HW_TC;
 694}
 695
 696static inline bool tc_can_offload_extack(const struct net_device *dev,
 697					 struct netlink_ext_ack *extack)
 698{
 699	bool can = tc_can_offload(dev);
 700
 701	if (!can)
 702		NL_SET_ERR_MSG(extack, "TC offload is disabled on net device");
 703
 704	return can;
 705}
 706
 707static inline bool
 708tc_cls_can_offload_and_chain0(const struct net_device *dev,
 709			      struct flow_cls_common_offload *common)
 710{
 711	if (!tc_can_offload_extack(dev, common->extack))
 712		return false;
 713	if (common->chain_index) {
 714		NL_SET_ERR_MSG(common->extack,
 715			       "Driver supports only offload of chain 0");
 716		return false;
 717	}
 718	return true;
 719}
 720
 721static inline bool tc_skip_hw(u32 flags)
 722{
 723	return (flags & TCA_CLS_FLAGS_SKIP_HW) ? true : false;
 724}
 725
 726static inline bool tc_skip_sw(u32 flags)
 727{
 728	return (flags & TCA_CLS_FLAGS_SKIP_SW) ? true : false;
 729}
 730
 731/* SKIP_HW and SKIP_SW are mutually exclusive flags. */
 732static inline bool tc_flags_valid(u32 flags)
 733{
 734	if (flags & ~(TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW |
 735		      TCA_CLS_FLAGS_VERBOSE))
 736		return false;
 737
 738	flags &= TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW;
 739	if (!(flags ^ (TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW)))
 740		return false;
 741
 742	return true;
 743}
 744
 745static inline bool tc_in_hw(u32 flags)
 746{
 747	return (flags & TCA_CLS_FLAGS_IN_HW) ? true : false;
 748}
 749
 750static inline void
 751tc_cls_common_offload_init(struct flow_cls_common_offload *cls_common,
 752			   const struct tcf_proto *tp, u32 flags,
 753			   struct netlink_ext_ack *extack)
 754{
 755	cls_common->chain_index = tp->chain->index;
 756	cls_common->protocol = tp->protocol;
 757	cls_common->prio = tp->prio >> 16;
 758	cls_common->skip_sw = tc_skip_sw(flags);
 759	if (tc_skip_sw(flags) || flags & TCA_CLS_FLAGS_VERBOSE)
 760		cls_common->extack = extack;
 761}
 762
 763static inline void tcf_proto_update_usesw(struct tcf_proto *tp, u32 flags)
 764{
 765	if (tp->usesw)
 766		return;
 767	if (tc_skip_sw(flags) && tc_in_hw(flags))
 768		return;
 769	tp->usesw = true;
 770}
 771
 772#if IS_ENABLED(CONFIG_NET_TC_SKB_EXT)
 773static inline struct tc_skb_ext *tc_skb_ext_alloc(struct sk_buff *skb)
 774{
 775	struct tc_skb_ext *tc_skb_ext = skb_ext_add(skb, TC_SKB_EXT);
 776
 777	if (tc_skb_ext)
 778		memset(tc_skb_ext, 0, sizeof(*tc_skb_ext));
 779	return tc_skb_ext;
 780}
 781#endif
 782
 783enum tc_matchall_command {
 784	TC_CLSMATCHALL_REPLACE,
 785	TC_CLSMATCHALL_DESTROY,
 786	TC_CLSMATCHALL_STATS,
 787};
 788
 789struct tc_cls_matchall_offload {
 790	struct flow_cls_common_offload common;
 791	enum tc_matchall_command command;
 792	struct flow_rule *rule;
 793	struct flow_stats stats;
 794	bool use_act_stats;
 795	unsigned long cookie;
 796};
 797
 798enum tc_clsbpf_command {
 799	TC_CLSBPF_OFFLOAD,
 800	TC_CLSBPF_STATS,
 801};
 802
 803struct tc_cls_bpf_offload {
 804	struct flow_cls_common_offload common;
 805	enum tc_clsbpf_command command;
 806	struct tcf_exts *exts;
 807	struct bpf_prog *prog;
 808	struct bpf_prog *oldprog;
 809	const char *name;
 810	bool exts_integrated;
 811};
 812
 
 
 
 
 
 
 
 
 
 
 813/* This structure holds cookie structure that is passed from user
 814 * to the kernel for actions and classifiers
 815 */
 816struct tc_cookie {
 817	u8  *data;
 818	u32 len;
 819	struct rcu_head rcu;
 820};
 821
 822struct tc_qopt_offload_stats {
 823	struct gnet_stats_basic_sync *bstats;
 824	struct gnet_stats_queue *qstats;
 825};
 826
 827enum tc_mq_command {
 828	TC_MQ_CREATE,
 829	TC_MQ_DESTROY,
 830	TC_MQ_STATS,
 831	TC_MQ_GRAFT,
 832};
 833
 834struct tc_mq_opt_offload_graft_params {
 835	unsigned long queue;
 836	u32 child_handle;
 837};
 838
 839struct tc_mq_qopt_offload {
 840	enum tc_mq_command command;
 841	u32 handle;
 842	union {
 843		struct tc_qopt_offload_stats stats;
 844		struct tc_mq_opt_offload_graft_params graft_params;
 845	};
 846};
 847
 848enum tc_htb_command {
 849	/* Root */
 850	TC_HTB_CREATE, /* Initialize HTB offload. */
 851	TC_HTB_DESTROY, /* Destroy HTB offload. */
 852
 853	/* Classes */
 854	/* Allocate qid and create leaf. */
 855	TC_HTB_LEAF_ALLOC_QUEUE,
 856	/* Convert leaf to inner, preserve and return qid, create new leaf. */
 857	TC_HTB_LEAF_TO_INNER,
 858	/* Delete leaf, while siblings remain. */
 859	TC_HTB_LEAF_DEL,
 860	/* Delete leaf, convert parent to leaf, preserving qid. */
 861	TC_HTB_LEAF_DEL_LAST,
 862	/* TC_HTB_LEAF_DEL_LAST, but delete driver data on hardware errors. */
 863	TC_HTB_LEAF_DEL_LAST_FORCE,
 864	/* Modify parameters of a node. */
 865	TC_HTB_NODE_MODIFY,
 866
 867	/* Class qdisc */
 868	TC_HTB_LEAF_QUERY_QUEUE, /* Query qid by classid. */
 869};
 870
 871struct tc_htb_qopt_offload {
 872	struct netlink_ext_ack *extack;
 873	enum tc_htb_command command;
 874	u32 parent_classid;
 875	u16 classid;
 876	u16 qid;
 877	u32 quantum;
 878	u64 rate;
 879	u64 ceil;
 880	u8 prio;
 881};
 882
 883#define TC_HTB_CLASSID_ROOT U32_MAX
 884
 885enum tc_red_command {
 886	TC_RED_REPLACE,
 887	TC_RED_DESTROY,
 888	TC_RED_STATS,
 889	TC_RED_XSTATS,
 890	TC_RED_GRAFT,
 891};
 892
 893struct tc_red_qopt_offload_params {
 894	u32 min;
 895	u32 max;
 896	u32 probability;
 897	u32 limit;
 898	bool is_ecn;
 899	bool is_harddrop;
 900	bool is_nodrop;
 901	struct gnet_stats_queue *qstats;
 902};
 903
 904struct tc_red_qopt_offload {
 905	enum tc_red_command command;
 906	u32 handle;
 907	u32 parent;
 908	union {
 909		struct tc_red_qopt_offload_params set;
 910		struct tc_qopt_offload_stats stats;
 911		struct red_stats *xstats;
 912		u32 child_handle;
 913	};
 914};
 915
 916enum tc_gred_command {
 917	TC_GRED_REPLACE,
 918	TC_GRED_DESTROY,
 919	TC_GRED_STATS,
 920};
 921
 922struct tc_gred_vq_qopt_offload_params {
 923	bool present;
 924	u32 limit;
 925	u32 prio;
 926	u32 min;
 927	u32 max;
 928	bool is_ecn;
 929	bool is_harddrop;
 930	u32 probability;
 931	/* Only need backlog, see struct tc_prio_qopt_offload_params */
 932	u32 *backlog;
 933};
 934
 935struct tc_gred_qopt_offload_params {
 936	bool grio_on;
 937	bool wred_on;
 938	unsigned int dp_cnt;
 939	unsigned int dp_def;
 940	struct gnet_stats_queue *qstats;
 941	struct tc_gred_vq_qopt_offload_params tab[MAX_DPs];
 942};
 943
 944struct tc_gred_qopt_offload_stats {
 945	struct gnet_stats_basic_sync bstats[MAX_DPs];
 946	struct gnet_stats_queue qstats[MAX_DPs];
 947	struct red_stats *xstats[MAX_DPs];
 948};
 949
 950struct tc_gred_qopt_offload {
 951	enum tc_gred_command command;
 952	u32 handle;
 953	u32 parent;
 954	union {
 955		struct tc_gred_qopt_offload_params set;
 956		struct tc_gred_qopt_offload_stats stats;
 957	};
 958};
 959
 960enum tc_prio_command {
 961	TC_PRIO_REPLACE,
 962	TC_PRIO_DESTROY,
 963	TC_PRIO_STATS,
 964	TC_PRIO_GRAFT,
 965};
 966
 967struct tc_prio_qopt_offload_params {
 968	int bands;
 969	u8 priomap[TC_PRIO_MAX + 1];
 970	/* At the point of un-offloading the Qdisc, the reported backlog and
 971	 * qlen need to be reduced by the portion that is in HW.
 
 972	 */
 973	struct gnet_stats_queue *qstats;
 974};
 975
 976struct tc_prio_qopt_offload_graft_params {
 977	u8 band;
 978	u32 child_handle;
 979};
 980
 981struct tc_prio_qopt_offload {
 982	enum tc_prio_command command;
 983	u32 handle;
 984	u32 parent;
 985	union {
 986		struct tc_prio_qopt_offload_params replace_params;
 987		struct tc_qopt_offload_stats stats;
 988		struct tc_prio_qopt_offload_graft_params graft_params;
 989	};
 990};
 991
 992enum tc_root_command {
 993	TC_ROOT_GRAFT,
 994};
 995
 996struct tc_root_qopt_offload {
 997	enum tc_root_command command;
 998	u32 handle;
 999	bool ingress;
1000};
1001
1002enum tc_ets_command {
1003	TC_ETS_REPLACE,
1004	TC_ETS_DESTROY,
1005	TC_ETS_STATS,
1006	TC_ETS_GRAFT,
1007};
1008
1009struct tc_ets_qopt_offload_replace_params {
1010	unsigned int bands;
1011	u8 priomap[TC_PRIO_MAX + 1];
1012	unsigned int quanta[TCQ_ETS_MAX_BANDS];	/* 0 for strict bands. */
1013	unsigned int weights[TCQ_ETS_MAX_BANDS];
1014	struct gnet_stats_queue *qstats;
1015};
1016
1017struct tc_ets_qopt_offload_graft_params {
1018	u8 band;
1019	u32 child_handle;
1020};
1021
1022struct tc_ets_qopt_offload {
1023	enum tc_ets_command command;
1024	u32 handle;
1025	u32 parent;
1026	union {
1027		struct tc_ets_qopt_offload_replace_params replace_params;
1028		struct tc_qopt_offload_stats stats;
1029		struct tc_ets_qopt_offload_graft_params graft_params;
1030	};
1031};
1032
1033enum tc_tbf_command {
1034	TC_TBF_REPLACE,
1035	TC_TBF_DESTROY,
1036	TC_TBF_STATS,
1037	TC_TBF_GRAFT,
1038};
1039
1040struct tc_tbf_qopt_offload_replace_params {
1041	struct psched_ratecfg rate;
1042	u32 max_size;
1043	struct gnet_stats_queue *qstats;
1044};
1045
1046struct tc_tbf_qopt_offload {
1047	enum tc_tbf_command command;
1048	u32 handle;
1049	u32 parent;
1050	union {
1051		struct tc_tbf_qopt_offload_replace_params replace_params;
1052		struct tc_qopt_offload_stats stats;
1053		u32 child_handle;
1054	};
1055};
1056
1057enum tc_fifo_command {
1058	TC_FIFO_REPLACE,
1059	TC_FIFO_DESTROY,
1060	TC_FIFO_STATS,
1061};
1062
1063struct tc_fifo_qopt_offload {
1064	enum tc_fifo_command command;
1065	u32 handle;
1066	u32 parent;
1067	union {
1068		struct tc_qopt_offload_stats stats;
1069	};
1070};
1071
1072#ifdef CONFIG_NET_CLS_ACT
1073DECLARE_STATIC_KEY_FALSE(tc_skb_ext_tc);
1074void tc_skb_ext_tc_enable(void);
1075void tc_skb_ext_tc_disable(void);
1076#define tc_skb_ext_tc_enabled() static_branch_unlikely(&tc_skb_ext_tc)
1077#else /* CONFIG_NET_CLS_ACT */
1078static inline void tc_skb_ext_tc_enable(void) { }
1079static inline void tc_skb_ext_tc_disable(void) { }
1080#define tc_skb_ext_tc_enabled() false
1081#endif
1082
1083#endif
v5.4
  1/* SPDX-License-Identifier: GPL-2.0 */
  2#ifndef __NET_PKT_CLS_H
  3#define __NET_PKT_CLS_H
  4
  5#include <linux/pkt_cls.h>
  6#include <linux/workqueue.h>
  7#include <net/sch_generic.h>
  8#include <net/act_api.h>
  9#include <net/net_namespace.h>
 10
 11/* TC action not accessible from user space */
 12#define TC_ACT_CONSUMED		(TC_ACT_VALUE_MAX + 1)
 13
 14/* Basic packet classifier frontend definitions. */
 15
 16struct tcf_walker {
 17	int	stop;
 18	int	skip;
 19	int	count;
 20	bool	nonempty;
 21	unsigned long cookie;
 22	int	(*fn)(struct tcf_proto *, void *node, struct tcf_walker *);
 23};
 24
 25int register_tcf_proto_ops(struct tcf_proto_ops *ops);
 26int unregister_tcf_proto_ops(struct tcf_proto_ops *ops);
 
 
 27
 28struct tcf_block_ext_info {
 29	enum flow_block_binder_type binder_type;
 30	tcf_chain_head_change_t *chain_head_change;
 31	void *chain_head_change_priv;
 32	u32 block_index;
 33};
 34
 
 
 
 
 
 
 35struct tcf_block_cb;
 36bool tcf_queue_work(struct rcu_work *rwork, work_func_t func);
 37
 38#ifdef CONFIG_NET_CLS
 39struct tcf_chain *tcf_chain_get_by_act(struct tcf_block *block,
 40				       u32 chain_index);
 41void tcf_chain_put_by_act(struct tcf_chain *chain);
 42struct tcf_chain *tcf_get_next_chain(struct tcf_block *block,
 43				     struct tcf_chain *chain);
 44struct tcf_proto *tcf_get_next_proto(struct tcf_chain *chain,
 45				     struct tcf_proto *tp, bool rtnl_held);
 46void tcf_block_netif_keep_dst(struct tcf_block *block);
 47int tcf_block_get(struct tcf_block **p_block,
 48		  struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
 49		  struct netlink_ext_ack *extack);
 50int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
 51		      struct tcf_block_ext_info *ei,
 52		      struct netlink_ext_ack *extack);
 53void tcf_block_put(struct tcf_block *block);
 54void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
 55		       struct tcf_block_ext_info *ei);
 
 
 56
 57static inline bool tcf_block_shared(struct tcf_block *block)
 58{
 59	return block->index;
 60}
 61
 62static inline bool tcf_block_non_null_shared(struct tcf_block *block)
 63{
 64	return block && block->index;
 65}
 66
 
 
 
 
 
 
 
 
 
 67static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
 68{
 69	WARN_ON(tcf_block_shared(block));
 70	return block->q;
 71}
 72
 73int tcf_classify(struct sk_buff *skb, const struct tcf_proto *tp,
 74		 struct tcf_result *res, bool compat_mode);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 75
 76#else
 77static inline bool tcf_block_shared(struct tcf_block *block)
 78{
 79	return false;
 80}
 81
 82static inline bool tcf_block_non_null_shared(struct tcf_block *block)
 83{
 84	return false;
 85}
 86
 87static inline
 88int tcf_block_get(struct tcf_block **p_block,
 89		  struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
 90		  struct netlink_ext_ack *extack)
 91{
 92	return 0;
 93}
 94
 95static inline
 96int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
 97		      struct tcf_block_ext_info *ei,
 98		      struct netlink_ext_ack *extack)
 99{
100	return 0;
101}
102
103static inline void tcf_block_put(struct tcf_block *block)
104{
105}
106
107static inline
108void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
109		       struct tcf_block_ext_info *ei)
110{
111}
112
113static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
114{
115	return NULL;
116}
117
118static inline
119int tc_setup_cb_block_register(struct tcf_block *block, flow_setup_cb_t *cb,
120			       void *cb_priv)
121{
122	return 0;
123}
124
125static inline
126void tc_setup_cb_block_unregister(struct tcf_block *block, flow_setup_cb_t *cb,
127				  void *cb_priv)
128{
129}
130
131static inline int tcf_classify(struct sk_buff *skb, const struct tcf_proto *tp,
132			       struct tcf_result *res, bool compat_mode)
133{
134	return TC_ACT_UNSPEC;
135}
 
136#endif
137
138static inline unsigned long
139__cls_set_class(unsigned long *clp, unsigned long cl)
140{
141	return xchg(clp, cl);
142}
143
144static inline unsigned long
145cls_set_class(struct Qdisc *q, unsigned long *clp, unsigned long cl)
146{
147	unsigned long old_cl;
148
149	sch_tree_lock(q);
150	old_cl = __cls_set_class(clp, cl);
151	sch_tree_unlock(q);
152	return old_cl;
153}
154
155static inline void
156tcf_bind_filter(struct tcf_proto *tp, struct tcf_result *r, unsigned long base)
157{
158	struct Qdisc *q = tp->chain->block->q;
159	unsigned long cl;
160
161	/* Check q as it is not set for shared blocks. In that case,
162	 * setting class is not supported.
163	 */
164	if (!q)
165		return;
166	cl = q->ops->cl_ops->bind_tcf(q, base, r->classid);
167	cl = cls_set_class(q, &r->class, cl);
168	if (cl)
 
 
 
 
 
 
 
 
169		q->ops->cl_ops->unbind_tcf(q, cl);
170}
171
172static inline void
173tcf_unbind_filter(struct tcf_proto *tp, struct tcf_result *r)
174{
175	struct Qdisc *q = tp->chain->block->q;
176	unsigned long cl;
177
178	if (!q)
179		return;
180	if ((cl = __cls_set_class(&r->class, 0)) != 0)
181		q->ops->cl_ops->unbind_tcf(q, cl);
 
 
 
 
 
 
 
 
 
 
 
182}
183
184struct tcf_exts {
185#ifdef CONFIG_NET_CLS_ACT
186	__u32	type; /* for backward compat(TCA_OLD_COMPAT) */
187	int nr_actions;
188	struct tc_action **actions;
189	struct net *net;
 
 
190#endif
191	/* Map to export classifier specific extension TLV types to the
192	 * generic extensions API. Unsupported extensions must be set to 0.
193	 */
194	int action;
195	int police;
196};
197
198static inline int tcf_exts_init(struct tcf_exts *exts, struct net *net,
199				int action, int police)
200{
201#ifdef CONFIG_NET_CLS_ACT
202	exts->type = 0;
203	exts->nr_actions = 0;
204	exts->net = net;
205	exts->actions = kcalloc(TCA_ACT_MAX_PRIO, sizeof(struct tc_action *),
206				GFP_KERNEL);
207	if (!exts->actions)
208		return -ENOMEM;
209#endif
210	exts->action = action;
211	exts->police = police;
212	return 0;
213}
214
215/* Return false if the netns is being destroyed in cleanup_net(). Callers
216 * need to do cleanup synchronously in this case, otherwise may race with
217 * tc_action_net_exit(). Return true for other cases.
218 */
219static inline bool tcf_exts_get_net(struct tcf_exts *exts)
220{
221#ifdef CONFIG_NET_CLS_ACT
222	exts->net = maybe_get_net(exts->net);
 
 
223	return exts->net != NULL;
224#else
225	return true;
226#endif
227}
228
229static inline void tcf_exts_put_net(struct tcf_exts *exts)
230{
231#ifdef CONFIG_NET_CLS_ACT
232	if (exts->net)
233		put_net(exts->net);
234#endif
235}
236
237#ifdef CONFIG_NET_CLS_ACT
238#define tcf_exts_for_each_action(i, a, exts) \
239	for (i = 0; i < TCA_ACT_MAX_PRIO && ((a) = (exts)->actions[i]); i++)
240#else
241#define tcf_exts_for_each_action(i, a, exts) \
242	for (; 0; (void)(i), (void)(a), (void)(exts))
243#endif
244
 
 
 
 
 
 
 
 
245static inline void
246tcf_exts_stats_update(const struct tcf_exts *exts,
247		      u64 bytes, u64 packets, u64 lastuse)
 
248{
249#ifdef CONFIG_NET_CLS_ACT
250	int i;
251
252	preempt_disable();
253
254	for (i = 0; i < exts->nr_actions; i++) {
255		struct tc_action *a = exts->actions[i];
256
257		tcf_action_stats_update(a, bytes, packets, lastuse, true);
 
 
 
 
 
 
 
 
 
 
 
258	}
259
260	preempt_enable();
261#endif
262}
263
264/**
265 * tcf_exts_has_actions - check if at least one action is present
266 * @exts: tc filter extensions handle
267 *
268 * Returns true if at least one action is present.
269 */
270static inline bool tcf_exts_has_actions(struct tcf_exts *exts)
271{
272#ifdef CONFIG_NET_CLS_ACT
273	return exts->nr_actions;
274#else
275	return false;
276#endif
277}
278
279/**
280 * tcf_exts_exec - execute tc filter extensions
281 * @skb: socket buffer
282 * @exts: tc filter extensions handle
283 * @res: desired result
284 *
285 * Executes all configured extensions. Returns TC_ACT_OK on a normal execution,
286 * a negative number if the filter must be considered unmatched or
287 * a positive action code (TC_ACT_*) which must be returned to the
288 * underlying layer.
289 */
290static inline int
291tcf_exts_exec(struct sk_buff *skb, struct tcf_exts *exts,
292	      struct tcf_result *res)
293{
294#ifdef CONFIG_NET_CLS_ACT
295	return tcf_action_exec(skb, exts->actions, exts->nr_actions, res);
296#endif
297	return TC_ACT_OK;
298}
299
 
 
 
 
 
 
 
 
 
 
 
 
300int tcf_exts_validate(struct net *net, struct tcf_proto *tp,
301		      struct nlattr **tb, struct nlattr *rate_tlv,
302		      struct tcf_exts *exts, bool ovr, bool rtnl_held,
303		      struct netlink_ext_ack *extack);
 
 
 
304void tcf_exts_destroy(struct tcf_exts *exts);
305void tcf_exts_change(struct tcf_exts *dst, struct tcf_exts *src);
306int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts);
 
307int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts);
308
309/**
310 * struct tcf_pkt_info - packet information
 
 
 
311 */
312struct tcf_pkt_info {
313	unsigned char *		ptr;
314	int			nexthdr;
315};
316
317#ifdef CONFIG_NET_EMATCH
318
319struct tcf_ematch_ops;
320
321/**
322 * struct tcf_ematch - extended match (ematch)
323 * 
324 * @matchid: identifier to allow userspace to reidentify a match
325 * @flags: flags specifying attributes and the relation to other matches
326 * @ops: the operations lookup table of the corresponding ematch module
327 * @datalen: length of the ematch specific configuration data
328 * @data: ematch specific data
 
329 */
330struct tcf_ematch {
331	struct tcf_ematch_ops * ops;
332	unsigned long		data;
333	unsigned int		datalen;
334	u16			matchid;
335	u16			flags;
336	struct net		*net;
337};
338
339static inline int tcf_em_is_container(struct tcf_ematch *em)
340{
341	return !em->ops;
342}
343
344static inline int tcf_em_is_simple(struct tcf_ematch *em)
345{
346	return em->flags & TCF_EM_SIMPLE;
347}
348
349static inline int tcf_em_is_inverted(struct tcf_ematch *em)
350{
351	return em->flags & TCF_EM_INVERT;
352}
353
354static inline int tcf_em_last_match(struct tcf_ematch *em)
355{
356	return (em->flags & TCF_EM_REL_MASK) == TCF_EM_REL_END;
357}
358
359static inline int tcf_em_early_end(struct tcf_ematch *em, int result)
360{
361	if (tcf_em_last_match(em))
362		return 1;
363
364	if (result == 0 && em->flags & TCF_EM_REL_AND)
365		return 1;
366
367	if (result != 0 && em->flags & TCF_EM_REL_OR)
368		return 1;
369
370	return 0;
371}
372	
373/**
374 * struct tcf_ematch_tree - ematch tree handle
375 *
376 * @hdr: ematch tree header supplied by userspace
377 * @matches: array of ematches
378 */
379struct tcf_ematch_tree {
380	struct tcf_ematch_tree_hdr hdr;
381	struct tcf_ematch *	matches;
382	
383};
384
385/**
386 * struct tcf_ematch_ops - ematch module operations
387 * 
388 * @kind: identifier (kind) of this ematch module
389 * @datalen: length of expected configuration data (optional)
390 * @change: called during validation (optional)
391 * @match: called during ematch tree evaluation, must return 1/0
392 * @destroy: called during destroyage (optional)
393 * @dump: called during dumping process (optional)
394 * @owner: owner, must be set to THIS_MODULE
395 * @link: link to previous/next ematch module (internal use)
396 */
397struct tcf_ematch_ops {
398	int			kind;
399	int			datalen;
400	int			(*change)(struct net *net, void *,
401					  int, struct tcf_ematch *);
402	int			(*match)(struct sk_buff *, struct tcf_ematch *,
403					 struct tcf_pkt_info *);
404	void			(*destroy)(struct tcf_ematch *);
405	int			(*dump)(struct sk_buff *, struct tcf_ematch *);
406	struct module		*owner;
407	struct list_head	link;
408};
409
410int tcf_em_register(struct tcf_ematch_ops *);
411void tcf_em_unregister(struct tcf_ematch_ops *);
412int tcf_em_tree_validate(struct tcf_proto *, struct nlattr *,
413			 struct tcf_ematch_tree *);
414void tcf_em_tree_destroy(struct tcf_ematch_tree *);
415int tcf_em_tree_dump(struct sk_buff *, struct tcf_ematch_tree *, int);
416int __tcf_em_tree_match(struct sk_buff *, struct tcf_ematch_tree *,
417			struct tcf_pkt_info *);
418
419/**
420 * tcf_em_tree_match - evaulate an ematch tree
421 *
422 * @skb: socket buffer of the packet in question
423 * @tree: ematch tree to be used for evaluation
424 * @info: packet information examined by classifier
425 *
426 * This function matches @skb against the ematch tree in @tree by going
427 * through all ematches respecting their logic relations returning
428 * as soon as the result is obvious.
429 *
430 * Returns 1 if the ematch tree as-one matches, no ematches are configured
431 * or ematch is not enabled in the kernel, otherwise 0 is returned.
432 */
433static inline int tcf_em_tree_match(struct sk_buff *skb,
434				    struct tcf_ematch_tree *tree,
435				    struct tcf_pkt_info *info)
436{
437	if (tree->hdr.nmatches)
438		return __tcf_em_tree_match(skb, tree, info);
439	else
440		return 1;
441}
442
443#define MODULE_ALIAS_TCF_EMATCH(kind)	MODULE_ALIAS("ematch-kind-" __stringify(kind))
444
445#else /* CONFIG_NET_EMATCH */
446
447struct tcf_ematch_tree {
448};
449
450#define tcf_em_tree_validate(tp, tb, t) ((void)(t), 0)
451#define tcf_em_tree_destroy(t) do { (void)(t); } while(0)
452#define tcf_em_tree_dump(skb, t, tlv) (0)
453#define tcf_em_tree_match(skb, t, info) ((void)(info), 1)
454
455#endif /* CONFIG_NET_EMATCH */
456
457static inline unsigned char * tcf_get_base_ptr(struct sk_buff *skb, int layer)
458{
459	switch (layer) {
460		case TCF_LAYER_LINK:
461			return skb_mac_header(skb);
462		case TCF_LAYER_NETWORK:
463			return skb_network_header(skb);
464		case TCF_LAYER_TRANSPORT:
465			return skb_transport_header(skb);
466	}
467
468	return NULL;
469}
470
471static inline int tcf_valid_offset(const struct sk_buff *skb,
472				   const unsigned char *ptr, const int len)
473{
474	return likely((ptr + len) <= skb_tail_pointer(skb) &&
475		      ptr >= skb->head &&
476		      (ptr <= (ptr + len)));
477}
478
479static inline int
480tcf_change_indev(struct net *net, struct nlattr *indev_tlv,
481		 struct netlink_ext_ack *extack)
482{
483	char indev[IFNAMSIZ];
484	struct net_device *dev;
485
486	if (nla_strlcpy(indev, indev_tlv, IFNAMSIZ) >= IFNAMSIZ) {
487		NL_SET_ERR_MSG(extack, "Interface name too long");
 
488		return -EINVAL;
489	}
490	dev = __dev_get_by_name(net, indev);
491	if (!dev)
 
 
492		return -ENODEV;
 
493	return dev->ifindex;
494}
495
496static inline bool
497tcf_match_indev(struct sk_buff *skb, int ifindex)
498{
499	if (!ifindex)
500		return true;
501	if  (!skb->skb_iif)
502		return false;
503	return ifindex == skb->skb_iif;
504}
505
506int tc_setup_flow_action(struct flow_action *flow_action,
507			 const struct tcf_exts *exts, bool rtnl_held);
508void tc_cleanup_flow_action(struct flow_action *flow_action);
 
 
 
 
 
509
510int tc_setup_cb_call(struct tcf_block *block, enum tc_setup_type type,
511		     void *type_data, bool err_stop, bool rtnl_held);
512int tc_setup_cb_add(struct tcf_block *block, struct tcf_proto *tp,
513		    enum tc_setup_type type, void *type_data, bool err_stop,
514		    u32 *flags, unsigned int *in_hw_count, bool rtnl_held);
515int tc_setup_cb_replace(struct tcf_block *block, struct tcf_proto *tp,
516			enum tc_setup_type type, void *type_data, bool err_stop,
517			u32 *old_flags, unsigned int *old_in_hw_count,
518			u32 *new_flags, unsigned int *new_in_hw_count,
519			bool rtnl_held);
520int tc_setup_cb_destroy(struct tcf_block *block, struct tcf_proto *tp,
521			enum tc_setup_type type, void *type_data, bool err_stop,
522			u32 *flags, unsigned int *in_hw_count, bool rtnl_held);
523int tc_setup_cb_reoffload(struct tcf_block *block, struct tcf_proto *tp,
524			  bool add, flow_setup_cb_t *cb,
525			  enum tc_setup_type type, void *type_data,
526			  void *cb_priv, u32 *flags, unsigned int *in_hw_count);
527unsigned int tcf_exts_num_actions(struct tcf_exts *exts);
528
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
529struct tc_cls_u32_knode {
530	struct tcf_exts *exts;
531	struct tcf_result *res;
532	struct tc_u32_sel *sel;
533	u32 handle;
534	u32 val;
535	u32 mask;
536	u32 link_handle;
537	u8 fshift;
538};
539
540struct tc_cls_u32_hnode {
541	u32 handle;
542	u32 prio;
543	unsigned int divisor;
544};
545
546enum tc_clsu32_command {
547	TC_CLSU32_NEW_KNODE,
548	TC_CLSU32_REPLACE_KNODE,
549	TC_CLSU32_DELETE_KNODE,
550	TC_CLSU32_NEW_HNODE,
551	TC_CLSU32_REPLACE_HNODE,
552	TC_CLSU32_DELETE_HNODE,
553};
554
555struct tc_cls_u32_offload {
556	struct flow_cls_common_offload common;
557	/* knode values */
558	enum tc_clsu32_command command;
559	union {
560		struct tc_cls_u32_knode knode;
561		struct tc_cls_u32_hnode hnode;
562	};
563};
564
565static inline bool tc_can_offload(const struct net_device *dev)
566{
567	return dev->features & NETIF_F_HW_TC;
568}
569
570static inline bool tc_can_offload_extack(const struct net_device *dev,
571					 struct netlink_ext_ack *extack)
572{
573	bool can = tc_can_offload(dev);
574
575	if (!can)
576		NL_SET_ERR_MSG(extack, "TC offload is disabled on net device");
577
578	return can;
579}
580
581static inline bool
582tc_cls_can_offload_and_chain0(const struct net_device *dev,
583			      struct flow_cls_common_offload *common)
584{
585	if (!tc_can_offload_extack(dev, common->extack))
586		return false;
587	if (common->chain_index) {
588		NL_SET_ERR_MSG(common->extack,
589			       "Driver supports only offload of chain 0");
590		return false;
591	}
592	return true;
593}
594
595static inline bool tc_skip_hw(u32 flags)
596{
597	return (flags & TCA_CLS_FLAGS_SKIP_HW) ? true : false;
598}
599
600static inline bool tc_skip_sw(u32 flags)
601{
602	return (flags & TCA_CLS_FLAGS_SKIP_SW) ? true : false;
603}
604
605/* SKIP_HW and SKIP_SW are mutually exclusive flags. */
606static inline bool tc_flags_valid(u32 flags)
607{
608	if (flags & ~(TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW |
609		      TCA_CLS_FLAGS_VERBOSE))
610		return false;
611
612	flags &= TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW;
613	if (!(flags ^ (TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW)))
614		return false;
615
616	return true;
617}
618
619static inline bool tc_in_hw(u32 flags)
620{
621	return (flags & TCA_CLS_FLAGS_IN_HW) ? true : false;
622}
623
624static inline void
625tc_cls_common_offload_init(struct flow_cls_common_offload *cls_common,
626			   const struct tcf_proto *tp, u32 flags,
627			   struct netlink_ext_ack *extack)
628{
629	cls_common->chain_index = tp->chain->index;
630	cls_common->protocol = tp->protocol;
631	cls_common->prio = tp->prio >> 16;
 
632	if (tc_skip_sw(flags) || flags & TCA_CLS_FLAGS_VERBOSE)
633		cls_common->extack = extack;
634}
635
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
636enum tc_matchall_command {
637	TC_CLSMATCHALL_REPLACE,
638	TC_CLSMATCHALL_DESTROY,
639	TC_CLSMATCHALL_STATS,
640};
641
642struct tc_cls_matchall_offload {
643	struct flow_cls_common_offload common;
644	enum tc_matchall_command command;
645	struct flow_rule *rule;
646	struct flow_stats stats;
 
647	unsigned long cookie;
648};
649
650enum tc_clsbpf_command {
651	TC_CLSBPF_OFFLOAD,
652	TC_CLSBPF_STATS,
653};
654
655struct tc_cls_bpf_offload {
656	struct flow_cls_common_offload common;
657	enum tc_clsbpf_command command;
658	struct tcf_exts *exts;
659	struct bpf_prog *prog;
660	struct bpf_prog *oldprog;
661	const char *name;
662	bool exts_integrated;
663};
664
665struct tc_mqprio_qopt_offload {
666	/* struct tc_mqprio_qopt must always be the first element */
667	struct tc_mqprio_qopt qopt;
668	u16 mode;
669	u16 shaper;
670	u32 flags;
671	u64 min_rate[TC_QOPT_MAX_QUEUE];
672	u64 max_rate[TC_QOPT_MAX_QUEUE];
673};
674
675/* This structure holds cookie structure that is passed from user
676 * to the kernel for actions and classifiers
677 */
678struct tc_cookie {
679	u8  *data;
680	u32 len;
681	struct rcu_head rcu;
682};
683
684struct tc_qopt_offload_stats {
685	struct gnet_stats_basic_packed *bstats;
686	struct gnet_stats_queue *qstats;
687};
688
689enum tc_mq_command {
690	TC_MQ_CREATE,
691	TC_MQ_DESTROY,
692	TC_MQ_STATS,
693	TC_MQ_GRAFT,
694};
695
696struct tc_mq_opt_offload_graft_params {
697	unsigned long queue;
698	u32 child_handle;
699};
700
701struct tc_mq_qopt_offload {
702	enum tc_mq_command command;
703	u32 handle;
704	union {
705		struct tc_qopt_offload_stats stats;
706		struct tc_mq_opt_offload_graft_params graft_params;
707	};
708};
709
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
710enum tc_red_command {
711	TC_RED_REPLACE,
712	TC_RED_DESTROY,
713	TC_RED_STATS,
714	TC_RED_XSTATS,
715	TC_RED_GRAFT,
716};
717
718struct tc_red_qopt_offload_params {
719	u32 min;
720	u32 max;
721	u32 probability;
722	u32 limit;
723	bool is_ecn;
724	bool is_harddrop;
 
725	struct gnet_stats_queue *qstats;
726};
727
728struct tc_red_qopt_offload {
729	enum tc_red_command command;
730	u32 handle;
731	u32 parent;
732	union {
733		struct tc_red_qopt_offload_params set;
734		struct tc_qopt_offload_stats stats;
735		struct red_stats *xstats;
736		u32 child_handle;
737	};
738};
739
740enum tc_gred_command {
741	TC_GRED_REPLACE,
742	TC_GRED_DESTROY,
743	TC_GRED_STATS,
744};
745
746struct tc_gred_vq_qopt_offload_params {
747	bool present;
748	u32 limit;
749	u32 prio;
750	u32 min;
751	u32 max;
752	bool is_ecn;
753	bool is_harddrop;
754	u32 probability;
755	/* Only need backlog, see struct tc_prio_qopt_offload_params */
756	u32 *backlog;
757};
758
759struct tc_gred_qopt_offload_params {
760	bool grio_on;
761	bool wred_on;
762	unsigned int dp_cnt;
763	unsigned int dp_def;
764	struct gnet_stats_queue *qstats;
765	struct tc_gred_vq_qopt_offload_params tab[MAX_DPs];
766};
767
768struct tc_gred_qopt_offload_stats {
769	struct gnet_stats_basic_packed bstats[MAX_DPs];
770	struct gnet_stats_queue qstats[MAX_DPs];
771	struct red_stats *xstats[MAX_DPs];
772};
773
774struct tc_gred_qopt_offload {
775	enum tc_gred_command command;
776	u32 handle;
777	u32 parent;
778	union {
779		struct tc_gred_qopt_offload_params set;
780		struct tc_gred_qopt_offload_stats stats;
781	};
782};
783
784enum tc_prio_command {
785	TC_PRIO_REPLACE,
786	TC_PRIO_DESTROY,
787	TC_PRIO_STATS,
788	TC_PRIO_GRAFT,
789};
790
791struct tc_prio_qopt_offload_params {
792	int bands;
793	u8 priomap[TC_PRIO_MAX + 1];
794	/* In case that a prio qdisc is offloaded and now is changed to a
795	 * non-offloadedable config, it needs to update the backlog & qlen
796	 * values to negate the HW backlog & qlen values (and only them).
797	 */
798	struct gnet_stats_queue *qstats;
799};
800
801struct tc_prio_qopt_offload_graft_params {
802	u8 band;
803	u32 child_handle;
804};
805
806struct tc_prio_qopt_offload {
807	enum tc_prio_command command;
808	u32 handle;
809	u32 parent;
810	union {
811		struct tc_prio_qopt_offload_params replace_params;
812		struct tc_qopt_offload_stats stats;
813		struct tc_prio_qopt_offload_graft_params graft_params;
814	};
815};
816
817enum tc_root_command {
818	TC_ROOT_GRAFT,
819};
820
821struct tc_root_qopt_offload {
822	enum tc_root_command command;
823	u32 handle;
824	bool ingress;
825};
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
826
827#endif