xref: /openbmc/linux/include/net/net_namespace.h (revision 30ffee84)
15f256becSEric W. Biederman /*
25f256becSEric W. Biederman  * Operations on the network namespace
35f256becSEric W. Biederman  */
45f256becSEric W. Biederman #ifndef __NET_NET_NAMESPACE_H
55f256becSEric W. Biederman #define __NET_NET_NAMESPACE_H
65f256becSEric W. Biederman 
75f256becSEric W. Biederman #include <asm/atomic.h>
85f256becSEric W. Biederman #include <linux/workqueue.h>
95f256becSEric W. Biederman #include <linux/list.h>
105f256becSEric W. Biederman 
118efa6e93SPavel Emelyanov #include <net/netns/core.h>
12852566f5SPavel Emelyanov #include <net/netns/mib.h>
13a0a53c8bSDenis V. Lunev #include <net/netns/unix.h>
142aaef4e4SDenis V. Lunev #include <net/netns/packet.h>
158afd351cSPavel Emelyanov #include <net/netns/ipv4.h>
16b0f159dbSDaniel Lezcano #include <net/netns/ipv6.h>
1767019cc9SPavel Emelyanov #include <net/netns/dccp.h>
188d870052SAlexey Dobriyan #include <net/netns/x_tables.h>
19dfdb8d79SAlexey Dobriyan #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
20dfdb8d79SAlexey Dobriyan #include <net/netns/conntrack.h>
21dfdb8d79SAlexey Dobriyan #endif
22d62ddc21SAlexey Dobriyan #include <net/netns/xfrm.h>
23a0a53c8bSDenis V. Lunev 
24457c4cbcSEric W. Biederman struct proc_dir_entry;
252774c7abSEric W. Biederman struct net_device;
2697c53cacSDenis V. Lunev struct sock;
271597fbc0SPavel Emelyanov struct ctl_table_header;
28dec827d1SPavel Emelyanov struct net_generic;
29134e6375SJohannes Berg struct sock;
301597fbc0SPavel Emelyanov 
315f256becSEric W. Biederman struct net {
325f256becSEric W. Biederman 	atomic_t		count;		/* To decided when the network
335f256becSEric W. Biederman 						 *  namespace should be freed.
345f256becSEric W. Biederman 						 */
355d1e4468SDenis V. Lunev #ifdef NETNS_REFCNT_DEBUG
365f256becSEric W. Biederman 	atomic_t		use_count;	/* To track references we
375f256becSEric W. Biederman 						 * destroy on demand
385f256becSEric W. Biederman 						 */
395d1e4468SDenis V. Lunev #endif
405f256becSEric W. Biederman 	struct list_head	list;		/* list of network namespaces */
415f256becSEric W. Biederman 	struct work_struct	work;		/* work struct for freeing */
42457c4cbcSEric W. Biederman 
43457c4cbcSEric W. Biederman 	struct proc_dir_entry 	*proc_net;
44457c4cbcSEric W. Biederman 	struct proc_dir_entry 	*proc_net_stat;
45881d966bSEric W. Biederman 
4673455092SAl Viro #ifdef CONFIG_SYSCTL
4773455092SAl Viro 	struct ctl_table_set	sysctls;
4873455092SAl Viro #endif
4995bdfccbSEric W. Biederman 
502774c7abSEric W. Biederman 	struct net_device       *loopback_dev;          /* The loopback */
512774c7abSEric W. Biederman 
52881d966bSEric W. Biederman 	struct list_head 	dev_base_head;
53881d966bSEric W. Biederman 	struct hlist_head 	*dev_name_head;
54881d966bSEric W. Biederman 	struct hlist_head	*dev_index_head;
5597c53cacSDenis V. Lunev 
565fd30ee7SDenis V. Lunev 	/* core fib_rules */
575fd30ee7SDenis V. Lunev 	struct list_head	rules_ops;
585fd30ee7SDenis V. Lunev 	spinlock_t		rules_mod_lock;
595fd30ee7SDenis V. Lunev 
6097c53cacSDenis V. Lunev 	struct sock 		*rtnl;			/* rtnetlink socket */
61134e6375SJohannes Berg 	struct sock		*genl_sock;
62d12d01d6SDenis V. Lunev 
638efa6e93SPavel Emelyanov 	struct netns_core	core;
64852566f5SPavel Emelyanov 	struct netns_mib	mib;
652aaef4e4SDenis V. Lunev 	struct netns_packet	packet;
66a0a53c8bSDenis V. Lunev 	struct netns_unix	unx;
678afd351cSPavel Emelyanov 	struct netns_ipv4	ipv4;
68b0f159dbSDaniel Lezcano #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
69b0f159dbSDaniel Lezcano 	struct netns_ipv6	ipv6;
70b0f159dbSDaniel Lezcano #endif
7167019cc9SPavel Emelyanov #if defined(CONFIG_IP_DCCP) || defined(CONFIG_IP_DCCP_MODULE)
7267019cc9SPavel Emelyanov 	struct netns_dccp	dccp;
7367019cc9SPavel Emelyanov #endif
748d870052SAlexey Dobriyan #ifdef CONFIG_NETFILTER
758d870052SAlexey Dobriyan 	struct netns_xt		xt;
76dfdb8d79SAlexey Dobriyan #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
77dfdb8d79SAlexey Dobriyan 	struct netns_ct		ct;
78dfdb8d79SAlexey Dobriyan #endif
798d870052SAlexey Dobriyan #endif
80d62ddc21SAlexey Dobriyan #ifdef CONFIG_XFRM
81d62ddc21SAlexey Dobriyan 	struct netns_xfrm	xfrm;
82d62ddc21SAlexey Dobriyan #endif
83dec827d1SPavel Emelyanov 	struct net_generic	*gen;
845f256becSEric W. Biederman };
855f256becSEric W. Biederman 
86225c0a01SDenis V. Lunev 
87c0f39322SDenis V. Lunev #include <linux/seq_file_net.h>
88c0f39322SDenis V. Lunev 
894fabcd71SDaniel Lezcano /* Init's network namespace */
905f256becSEric W. Biederman extern struct net init_net;
91a4aa834aSDenis V. Lunev 
92a4aa834aSDenis V. Lunev #ifdef CONFIG_NET
934fabcd71SDaniel Lezcano #define INIT_NET_NS(net_ns) .net_ns = &init_net,
944fabcd71SDaniel Lezcano 
959dd776b6SEric W. Biederman extern struct net *copy_net_ns(unsigned long flags, struct net *net_ns);
96225c0a01SDenis V. Lunev 
97225c0a01SDenis V. Lunev #else /* CONFIG_NET */
98225c0a01SDenis V. Lunev 
99225c0a01SDenis V. Lunev #define INIT_NET_NS(net_ns)
100225c0a01SDenis V. Lunev 
1019dd776b6SEric W. Biederman static inline struct net *copy_net_ns(unsigned long flags, struct net *net_ns)
1029dd776b6SEric W. Biederman {
1039dd776b6SEric W. Biederman 	/* There is nothing to copy so this is a noop */
1049dd776b6SEric W. Biederman 	return net_ns;
1059dd776b6SEric W. Biederman }
106225c0a01SDenis V. Lunev #endif /* CONFIG_NET */
107225c0a01SDenis V. Lunev 
108225c0a01SDenis V. Lunev 
109225c0a01SDenis V. Lunev extern struct list_head net_namespace_list;
1109dd776b6SEric W. Biederman 
11130ffee84SJohannes Berg extern struct net *get_net_ns_by_pid(pid_t pid);
11230ffee84SJohannes Berg 
113d4655795SPavel Emelyanov #ifdef CONFIG_NET_NS
1145f256becSEric W. Biederman extern void __put_net(struct net *net);
1155f256becSEric W. Biederman 
1165f256becSEric W. Biederman static inline struct net *get_net(struct net *net)
1175f256becSEric W. Biederman {
1185f256becSEric W. Biederman 	atomic_inc(&net->count);
1195f256becSEric W. Biederman 	return net;
1205f256becSEric W. Biederman }
1215f256becSEric W. Biederman 
122077130c0SEric W. Biederman static inline struct net *maybe_get_net(struct net *net)
123077130c0SEric W. Biederman {
124077130c0SEric W. Biederman 	/* Used when we know struct net exists but we
125077130c0SEric W. Biederman 	 * aren't guaranteed a previous reference count
126077130c0SEric W. Biederman 	 * exists.  If the reference count is zero this
127077130c0SEric W. Biederman 	 * function fails and returns NULL.
128077130c0SEric W. Biederman 	 */
129077130c0SEric W. Biederman 	if (!atomic_inc_not_zero(&net->count))
130077130c0SEric W. Biederman 		net = NULL;
131077130c0SEric W. Biederman 	return net;
132077130c0SEric W. Biederman }
133077130c0SEric W. Biederman 
1345f256becSEric W. Biederman static inline void put_net(struct net *net)
1355f256becSEric W. Biederman {
1365f256becSEric W. Biederman 	if (atomic_dec_and_test(&net->count))
1375f256becSEric W. Biederman 		__put_net(net);
1385f256becSEric W. Biederman }
1395f256becSEric W. Biederman 
140878628fbSYOSHIFUJI Hideaki static inline
141878628fbSYOSHIFUJI Hideaki int net_eq(const struct net *net1, const struct net *net2)
142878628fbSYOSHIFUJI Hideaki {
143878628fbSYOSHIFUJI Hideaki 	return net1 == net2;
144878628fbSYOSHIFUJI Hideaki }
145d4655795SPavel Emelyanov #else
146b9f75f45SEric W. Biederman 
147d4655795SPavel Emelyanov static inline struct net *get_net(struct net *net)
148d4655795SPavel Emelyanov {
149d4655795SPavel Emelyanov 	return net;
150d4655795SPavel Emelyanov }
151d4655795SPavel Emelyanov 
152d4655795SPavel Emelyanov static inline void put_net(struct net *net)
153d4655795SPavel Emelyanov {
154d4655795SPavel Emelyanov }
155d4655795SPavel Emelyanov 
156d4655795SPavel Emelyanov static inline struct net *maybe_get_net(struct net *net)
157d4655795SPavel Emelyanov {
158d4655795SPavel Emelyanov 	return net;
159d4655795SPavel Emelyanov }
160878628fbSYOSHIFUJI Hideaki 
161878628fbSYOSHIFUJI Hideaki static inline
162878628fbSYOSHIFUJI Hideaki int net_eq(const struct net *net1, const struct net *net2)
163878628fbSYOSHIFUJI Hideaki {
164878628fbSYOSHIFUJI Hideaki 	return 1;
165878628fbSYOSHIFUJI Hideaki }
166d4655795SPavel Emelyanov #endif
1675f256becSEric W. Biederman 
1685d1e4468SDenis V. Lunev 
1695d1e4468SDenis V. Lunev #ifdef NETNS_REFCNT_DEBUG
1705d1e4468SDenis V. Lunev static inline struct net *hold_net(struct net *net)
1715d1e4468SDenis V. Lunev {
1725d1e4468SDenis V. Lunev 	if (net)
1735d1e4468SDenis V. Lunev 		atomic_inc(&net->use_count);
1745d1e4468SDenis V. Lunev 	return net;
1755d1e4468SDenis V. Lunev }
1765d1e4468SDenis V. Lunev 
1775d1e4468SDenis V. Lunev static inline void release_net(struct net *net)
1785d1e4468SDenis V. Lunev {
1795d1e4468SDenis V. Lunev 	if (net)
1805d1e4468SDenis V. Lunev 		atomic_dec(&net->use_count);
1815d1e4468SDenis V. Lunev }
1825d1e4468SDenis V. Lunev #else
1835d1e4468SDenis V. Lunev static inline struct net *hold_net(struct net *net)
1845d1e4468SDenis V. Lunev {
1855d1e4468SDenis V. Lunev 	return net;
1865d1e4468SDenis V. Lunev }
1875d1e4468SDenis V. Lunev 
1885d1e4468SDenis V. Lunev static inline void release_net(struct net *net)
1895d1e4468SDenis V. Lunev {
1905d1e4468SDenis V. Lunev }
1915d1e4468SDenis V. Lunev #endif
1925d1e4468SDenis V. Lunev 
1938f424b5fSEric Dumazet #ifdef CONFIG_NET_NS
1948f424b5fSEric Dumazet 
1958f424b5fSEric Dumazet static inline void write_pnet(struct net **pnet, struct net *net)
1968f424b5fSEric Dumazet {
1978f424b5fSEric Dumazet 	*pnet = net;
1988f424b5fSEric Dumazet }
1998f424b5fSEric Dumazet 
2008f424b5fSEric Dumazet static inline struct net *read_pnet(struct net * const *pnet)
2018f424b5fSEric Dumazet {
2028f424b5fSEric Dumazet 	return *pnet;
2038f424b5fSEric Dumazet }
2048f424b5fSEric Dumazet 
2058f424b5fSEric Dumazet #else
2068f424b5fSEric Dumazet 
2078f424b5fSEric Dumazet #define write_pnet(pnet, net)	do { (void)(net);} while (0)
2088f424b5fSEric Dumazet #define read_pnet(pnet)		(&init_net)
2098f424b5fSEric Dumazet 
2108f424b5fSEric Dumazet #endif
2115d1e4468SDenis V. Lunev 
2125f256becSEric W. Biederman #define for_each_net(VAR)				\
2135f256becSEric W. Biederman 	list_for_each_entry(VAR, &net_namespace_list, list)
2145f256becSEric W. Biederman 
21511a28d37SJohannes Berg #define for_each_net_rcu(VAR)				\
21611a28d37SJohannes Berg 	list_for_each_entry_rcu(VAR, &net_namespace_list, list)
21711a28d37SJohannes Berg 
2184665079cSPavel Emelyanov #ifdef CONFIG_NET_NS
2194665079cSPavel Emelyanov #define __net_init
2204665079cSPavel Emelyanov #define __net_exit
221022cbae6SDenis V. Lunev #define __net_initdata
2224665079cSPavel Emelyanov #else
2234665079cSPavel Emelyanov #define __net_init	__init
2244665079cSPavel Emelyanov #define __net_exit	__exit_refok
225022cbae6SDenis V. Lunev #define __net_initdata	__initdata
2264665079cSPavel Emelyanov #endif
2275f256becSEric W. Biederman 
2285f256becSEric W. Biederman struct pernet_operations {
2295f256becSEric W. Biederman 	struct list_head list;
2305f256becSEric W. Biederman 	int (*init)(struct net *net);
2315f256becSEric W. Biederman 	void (*exit)(struct net *net);
2325f256becSEric W. Biederman };
2335f256becSEric W. Biederman 
23417edde52SEric W. Biederman /*
23517edde52SEric W. Biederman  * Use these carefully.  If you implement a network device and it
23617edde52SEric W. Biederman  * needs per network namespace operations use device pernet operations,
23717edde52SEric W. Biederman  * otherwise use pernet subsys operations.
23817edde52SEric W. Biederman  *
23917edde52SEric W. Biederman  * This is critically important.  Most of the network code cleanup
24017edde52SEric W. Biederman  * runs with the assumption that dev_remove_pack has been called so no
24117edde52SEric W. Biederman  * new packets will arrive during and after the cleanup functions have
24217edde52SEric W. Biederman  * been called.  dev_remove_pack is not per namespace so instead the
24317edde52SEric W. Biederman  * guarantee of no more packets arriving in a network namespace is
24417edde52SEric W. Biederman  * provided by ensuring that all network devices and all sockets have
24517edde52SEric W. Biederman  * left the network namespace before the cleanup methods are called.
24617edde52SEric W. Biederman  *
24717edde52SEric W. Biederman  * For the longest time the ipv4 icmp code was registered as a pernet
24817edde52SEric W. Biederman  * device which caused kernel oops, and panics during network
24917edde52SEric W. Biederman  * namespace cleanup.   So please don't get this wrong.
25017edde52SEric W. Biederman  */
2515f256becSEric W. Biederman extern int register_pernet_subsys(struct pernet_operations *);
2525f256becSEric W. Biederman extern void unregister_pernet_subsys(struct pernet_operations *);
253485ac57bSAlexey Dobriyan extern int register_pernet_gen_subsys(int *id, struct pernet_operations *);
254485ac57bSAlexey Dobriyan extern void unregister_pernet_gen_subsys(int id, struct pernet_operations *);
2555f256becSEric W. Biederman extern int register_pernet_device(struct pernet_operations *);
2565f256becSEric W. Biederman extern void unregister_pernet_device(struct pernet_operations *);
257c93cf61fSPavel Emelyanov extern int register_pernet_gen_device(int *id, struct pernet_operations *);
258c93cf61fSPavel Emelyanov extern void unregister_pernet_gen_device(int id, struct pernet_operations *);
2595f256becSEric W. Biederman 
26095bdfccbSEric W. Biederman struct ctl_path;
26195bdfccbSEric W. Biederman struct ctl_table;
26295bdfccbSEric W. Biederman struct ctl_table_header;
263d62c612eSPavel Emelyanov 
26495bdfccbSEric W. Biederman extern struct ctl_table_header *register_net_sysctl_table(struct net *net,
26595bdfccbSEric W. Biederman 	const struct ctl_path *path, struct ctl_table *table);
266d62c612eSPavel Emelyanov extern struct ctl_table_header *register_net_sysctl_rotable(
267d62c612eSPavel Emelyanov 	const struct ctl_path *path, struct ctl_table *table);
26895bdfccbSEric W. Biederman extern void unregister_net_sysctl_table(struct ctl_table_header *header);
26995bdfccbSEric W. Biederman 
2705f256becSEric W. Biederman #endif /* __NET_NET_NAMESPACE_H */
271