1bd4aed0eSJiong Wang // SPDX-License-Identifier: GPL-2.0
2bd4aed0eSJiong Wang #include <linux/bpf.h>
3bd4aed0eSJiong Wang #include <linux/version.h>
4bd4aed0eSJiong Wang
53e689141SToke Høiland-Jørgensen #include <bpf/bpf_helpers.h>
6bd4aed0eSJiong Wang #include "netcnt_common.h"
7bd4aed0eSJiong Wang
8bd4aed0eSJiong Wang #define MAX_BPS (3 * 1024 * 1024)
9bd4aed0eSJiong Wang
10bd4aed0eSJiong Wang #define REFRESH_TIME_NS 100000000
11bd4aed0eSJiong Wang #define NS_PER_SEC 1000000000
12bd4aed0eSJiong Wang
13f6544074SAndrii Nakryiko struct {
14bc7430ccSAndrii Nakryiko __uint(type, BPF_MAP_TYPE_PERCPU_CGROUP_STORAGE);
15bc7430ccSAndrii Nakryiko __type(key, struct bpf_cgroup_storage_key);
16*33b57e0cSStanislav Fomichev __type(value, union percpu_net_cnt);
17bc7430ccSAndrii Nakryiko } percpu_netcnt SEC(".maps");
18bd4aed0eSJiong Wang
19f6544074SAndrii Nakryiko struct {
20bc7430ccSAndrii Nakryiko __uint(type, BPF_MAP_TYPE_CGROUP_STORAGE);
21bc7430ccSAndrii Nakryiko __type(key, struct bpf_cgroup_storage_key);
22*33b57e0cSStanislav Fomichev __type(value, union net_cnt);
23bc7430ccSAndrii Nakryiko } netcnt SEC(".maps");
24bd4aed0eSJiong Wang
25bd4aed0eSJiong Wang SEC("cgroup/skb")
bpf_nextcnt(struct __sk_buff * skb)26bd4aed0eSJiong Wang int bpf_nextcnt(struct __sk_buff *skb)
27bd4aed0eSJiong Wang {
28*33b57e0cSStanislav Fomichev union percpu_net_cnt *percpu_cnt;
29*33b57e0cSStanislav Fomichev union net_cnt *cnt;
30bd4aed0eSJiong Wang __u64 ts, dt;
31bd4aed0eSJiong Wang int ret;
32bd4aed0eSJiong Wang
33bd4aed0eSJiong Wang cnt = bpf_get_local_storage(&netcnt, 0);
34bd4aed0eSJiong Wang percpu_cnt = bpf_get_local_storage(&percpu_netcnt, 0);
35bd4aed0eSJiong Wang
36bd4aed0eSJiong Wang percpu_cnt->packets++;
37bd4aed0eSJiong Wang percpu_cnt->bytes += skb->len;
38bd4aed0eSJiong Wang
39bd4aed0eSJiong Wang if (percpu_cnt->packets > MAX_PERCPU_PACKETS) {
40bd4aed0eSJiong Wang __sync_fetch_and_add(&cnt->packets,
41bd4aed0eSJiong Wang percpu_cnt->packets);
42bd4aed0eSJiong Wang percpu_cnt->packets = 0;
43bd4aed0eSJiong Wang
44bd4aed0eSJiong Wang __sync_fetch_and_add(&cnt->bytes,
45bd4aed0eSJiong Wang percpu_cnt->bytes);
46bd4aed0eSJiong Wang percpu_cnt->bytes = 0;
47bd4aed0eSJiong Wang }
48bd4aed0eSJiong Wang
49bd4aed0eSJiong Wang ts = bpf_ktime_get_ns();
50bd4aed0eSJiong Wang dt = ts - percpu_cnt->prev_ts;
51bd4aed0eSJiong Wang
52bd4aed0eSJiong Wang dt *= MAX_BPS;
53bd4aed0eSJiong Wang dt /= NS_PER_SEC;
54bd4aed0eSJiong Wang
55bd4aed0eSJiong Wang if (cnt->bytes + percpu_cnt->bytes - percpu_cnt->prev_bytes < dt)
56bd4aed0eSJiong Wang ret = 1;
57bd4aed0eSJiong Wang else
58bd4aed0eSJiong Wang ret = 0;
59bd4aed0eSJiong Wang
60bd4aed0eSJiong Wang if (dt > REFRESH_TIME_NS) {
61bd4aed0eSJiong Wang percpu_cnt->prev_ts = ts;
62bd4aed0eSJiong Wang percpu_cnt->prev_packets = cnt->packets;
63bd4aed0eSJiong Wang percpu_cnt->prev_bytes = cnt->bytes;
64bd4aed0eSJiong Wang }
65bd4aed0eSJiong Wang
66bd4aed0eSJiong Wang return !!ret;
67bd4aed0eSJiong Wang }
68bd4aed0eSJiong Wang
69bd4aed0eSJiong Wang char _license[] SEC("license") = "GPL";
70