xref: /openbmc/linux/include/net/net_namespace.h (revision 3d23e349)
15f256becSEric W. Biederman /*
25f256becSEric W. Biederman  * Operations on the network namespace
35f256becSEric W. Biederman  */
45f256becSEric W. Biederman #ifndef __NET_NET_NAMESPACE_H
55f256becSEric W. Biederman #define __NET_NET_NAMESPACE_H
65f256becSEric W. Biederman 
75f256becSEric W. Biederman #include <asm/atomic.h>
85f256becSEric W. Biederman #include <linux/workqueue.h>
95f256becSEric W. Biederman #include <linux/list.h>
105f256becSEric W. Biederman 
118efa6e93SPavel Emelyanov #include <net/netns/core.h>
12852566f5SPavel Emelyanov #include <net/netns/mib.h>
13a0a53c8bSDenis V. Lunev #include <net/netns/unix.h>
142aaef4e4SDenis V. Lunev #include <net/netns/packet.h>
158afd351cSPavel Emelyanov #include <net/netns/ipv4.h>
16b0f159dbSDaniel Lezcano #include <net/netns/ipv6.h>
1767019cc9SPavel Emelyanov #include <net/netns/dccp.h>
188d870052SAlexey Dobriyan #include <net/netns/x_tables.h>
19dfdb8d79SAlexey Dobriyan #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
20dfdb8d79SAlexey Dobriyan #include <net/netns/conntrack.h>
21dfdb8d79SAlexey Dobriyan #endif
22d62ddc21SAlexey Dobriyan #include <net/netns/xfrm.h>
23a0a53c8bSDenis V. Lunev 
24457c4cbcSEric W. Biederman struct proc_dir_entry;
252774c7abSEric W. Biederman struct net_device;
2697c53cacSDenis V. Lunev struct sock;
271597fbc0SPavel Emelyanov struct ctl_table_header;
28dec827d1SPavel Emelyanov struct net_generic;
29134e6375SJohannes Berg struct sock;
301597fbc0SPavel Emelyanov 
315f256becSEric W. Biederman struct net {
325f256becSEric W. Biederman 	atomic_t		count;		/* To decided when the network
335f256becSEric W. Biederman 						 *  namespace should be freed.
345f256becSEric W. Biederman 						 */
355d1e4468SDenis V. Lunev #ifdef NETNS_REFCNT_DEBUG
365f256becSEric W. Biederman 	atomic_t		use_count;	/* To track references we
375f256becSEric W. Biederman 						 * destroy on demand
385f256becSEric W. Biederman 						 */
395d1e4468SDenis V. Lunev #endif
405f256becSEric W. Biederman 	struct list_head	list;		/* list of network namespaces */
415f256becSEric W. Biederman 	struct work_struct	work;		/* work struct for freeing */
42457c4cbcSEric W. Biederman 
43457c4cbcSEric W. Biederman 	struct proc_dir_entry 	*proc_net;
44457c4cbcSEric W. Biederman 	struct proc_dir_entry 	*proc_net_stat;
45881d966bSEric W. Biederman 
4673455092SAl Viro #ifdef CONFIG_SYSCTL
4773455092SAl Viro 	struct ctl_table_set	sysctls;
4873455092SAl Viro #endif
4995bdfccbSEric W. Biederman 
502774c7abSEric W. Biederman 	struct net_device       *loopback_dev;          /* The loopback */
512774c7abSEric W. Biederman 
52881d966bSEric W. Biederman 	struct list_head 	dev_base_head;
53881d966bSEric W. Biederman 	struct hlist_head 	*dev_name_head;
54881d966bSEric W. Biederman 	struct hlist_head	*dev_index_head;
5597c53cacSDenis V. Lunev 
565fd30ee7SDenis V. Lunev 	/* core fib_rules */
575fd30ee7SDenis V. Lunev 	struct list_head	rules_ops;
585fd30ee7SDenis V. Lunev 	spinlock_t		rules_mod_lock;
595fd30ee7SDenis V. Lunev 
6097c53cacSDenis V. Lunev 	struct sock 		*rtnl;			/* rtnetlink socket */
61134e6375SJohannes Berg 	struct sock		*genl_sock;
62d12d01d6SDenis V. Lunev 
638efa6e93SPavel Emelyanov 	struct netns_core	core;
64852566f5SPavel Emelyanov 	struct netns_mib	mib;
652aaef4e4SDenis V. Lunev 	struct netns_packet	packet;
66a0a53c8bSDenis V. Lunev 	struct netns_unix	unx;
678afd351cSPavel Emelyanov 	struct netns_ipv4	ipv4;
68b0f159dbSDaniel Lezcano #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
69b0f159dbSDaniel Lezcano 	struct netns_ipv6	ipv6;
70b0f159dbSDaniel Lezcano #endif
7167019cc9SPavel Emelyanov #if defined(CONFIG_IP_DCCP) || defined(CONFIG_IP_DCCP_MODULE)
7267019cc9SPavel Emelyanov 	struct netns_dccp	dccp;
7367019cc9SPavel Emelyanov #endif
748d870052SAlexey Dobriyan #ifdef CONFIG_NETFILTER
758d870052SAlexey Dobriyan 	struct netns_xt		xt;
76dfdb8d79SAlexey Dobriyan #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
77dfdb8d79SAlexey Dobriyan 	struct netns_ct		ct;
78dfdb8d79SAlexey Dobriyan #endif
798d870052SAlexey Dobriyan #endif
80d62ddc21SAlexey Dobriyan #ifdef CONFIG_XFRM
81d62ddc21SAlexey Dobriyan 	struct netns_xfrm	xfrm;
82d62ddc21SAlexey Dobriyan #endif
833d23e349SJohannes Berg #ifdef CONFIG_WEXT_CORE
84b333b3d2SJohannes Berg 	struct sk_buff_head	wext_nlevents;
85b333b3d2SJohannes Berg #endif
86dec827d1SPavel Emelyanov 	struct net_generic	*gen;
875f256becSEric W. Biederman };
885f256becSEric W. Biederman 
89225c0a01SDenis V. Lunev 
90c0f39322SDenis V. Lunev #include <linux/seq_file_net.h>
91c0f39322SDenis V. Lunev 
924fabcd71SDaniel Lezcano /* Init's network namespace */
935f256becSEric W. Biederman extern struct net init_net;
94a4aa834aSDenis V. Lunev 
95a4aa834aSDenis V. Lunev #ifdef CONFIG_NET
964fabcd71SDaniel Lezcano #define INIT_NET_NS(net_ns) .net_ns = &init_net,
974fabcd71SDaniel Lezcano 
989dd776b6SEric W. Biederman extern struct net *copy_net_ns(unsigned long flags, struct net *net_ns);
99225c0a01SDenis V. Lunev 
100225c0a01SDenis V. Lunev #else /* CONFIG_NET */
101225c0a01SDenis V. Lunev 
102225c0a01SDenis V. Lunev #define INIT_NET_NS(net_ns)
103225c0a01SDenis V. Lunev 
1049dd776b6SEric W. Biederman static inline struct net *copy_net_ns(unsigned long flags, struct net *net_ns)
1059dd776b6SEric W. Biederman {
1069dd776b6SEric W. Biederman 	/* There is nothing to copy so this is a noop */
1079dd776b6SEric W. Biederman 	return net_ns;
1089dd776b6SEric W. Biederman }
109225c0a01SDenis V. Lunev #endif /* CONFIG_NET */
110225c0a01SDenis V. Lunev 
111225c0a01SDenis V. Lunev 
112225c0a01SDenis V. Lunev extern struct list_head net_namespace_list;
1139dd776b6SEric W. Biederman 
11430ffee84SJohannes Berg extern struct net *get_net_ns_by_pid(pid_t pid);
11530ffee84SJohannes Berg 
116d4655795SPavel Emelyanov #ifdef CONFIG_NET_NS
1175f256becSEric W. Biederman extern void __put_net(struct net *net);
1185f256becSEric W. Biederman 
1195f256becSEric W. Biederman static inline struct net *get_net(struct net *net)
1205f256becSEric W. Biederman {
1215f256becSEric W. Biederman 	atomic_inc(&net->count);
1225f256becSEric W. Biederman 	return net;
1235f256becSEric W. Biederman }
1245f256becSEric W. Biederman 
125077130c0SEric W. Biederman static inline struct net *maybe_get_net(struct net *net)
126077130c0SEric W. Biederman {
127077130c0SEric W. Biederman 	/* Used when we know struct net exists but we
128077130c0SEric W. Biederman 	 * aren't guaranteed a previous reference count
129077130c0SEric W. Biederman 	 * exists.  If the reference count is zero this
130077130c0SEric W. Biederman 	 * function fails and returns NULL.
131077130c0SEric W. Biederman 	 */
132077130c0SEric W. Biederman 	if (!atomic_inc_not_zero(&net->count))
133077130c0SEric W. Biederman 		net = NULL;
134077130c0SEric W. Biederman 	return net;
135077130c0SEric W. Biederman }
136077130c0SEric W. Biederman 
1375f256becSEric W. Biederman static inline void put_net(struct net *net)
1385f256becSEric W. Biederman {
1395f256becSEric W. Biederman 	if (atomic_dec_and_test(&net->count))
1405f256becSEric W. Biederman 		__put_net(net);
1415f256becSEric W. Biederman }
1425f256becSEric W. Biederman 
143878628fbSYOSHIFUJI Hideaki static inline
144878628fbSYOSHIFUJI Hideaki int net_eq(const struct net *net1, const struct net *net2)
145878628fbSYOSHIFUJI Hideaki {
146878628fbSYOSHIFUJI Hideaki 	return net1 == net2;
147878628fbSYOSHIFUJI Hideaki }
148d4655795SPavel Emelyanov #else
149b9f75f45SEric W. Biederman 
150d4655795SPavel Emelyanov static inline struct net *get_net(struct net *net)
151d4655795SPavel Emelyanov {
152d4655795SPavel Emelyanov 	return net;
153d4655795SPavel Emelyanov }
154d4655795SPavel Emelyanov 
155d4655795SPavel Emelyanov static inline void put_net(struct net *net)
156d4655795SPavel Emelyanov {
157d4655795SPavel Emelyanov }
158d4655795SPavel Emelyanov 
159d4655795SPavel Emelyanov static inline struct net *maybe_get_net(struct net *net)
160d4655795SPavel Emelyanov {
161d4655795SPavel Emelyanov 	return net;
162d4655795SPavel Emelyanov }
163878628fbSYOSHIFUJI Hideaki 
164878628fbSYOSHIFUJI Hideaki static inline
165878628fbSYOSHIFUJI Hideaki int net_eq(const struct net *net1, const struct net *net2)
166878628fbSYOSHIFUJI Hideaki {
167878628fbSYOSHIFUJI Hideaki 	return 1;
168878628fbSYOSHIFUJI Hideaki }
169d4655795SPavel Emelyanov #endif
1705f256becSEric W. Biederman 
1715d1e4468SDenis V. Lunev 
1725d1e4468SDenis V. Lunev #ifdef NETNS_REFCNT_DEBUG
1735d1e4468SDenis V. Lunev static inline struct net *hold_net(struct net *net)
1745d1e4468SDenis V. Lunev {
1755d1e4468SDenis V. Lunev 	if (net)
1765d1e4468SDenis V. Lunev 		atomic_inc(&net->use_count);
1775d1e4468SDenis V. Lunev 	return net;
1785d1e4468SDenis V. Lunev }
1795d1e4468SDenis V. Lunev 
1805d1e4468SDenis V. Lunev static inline void release_net(struct net *net)
1815d1e4468SDenis V. Lunev {
1825d1e4468SDenis V. Lunev 	if (net)
1835d1e4468SDenis V. Lunev 		atomic_dec(&net->use_count);
1845d1e4468SDenis V. Lunev }
1855d1e4468SDenis V. Lunev #else
1865d1e4468SDenis V. Lunev static inline struct net *hold_net(struct net *net)
1875d1e4468SDenis V. Lunev {
1885d1e4468SDenis V. Lunev 	return net;
1895d1e4468SDenis V. Lunev }
1905d1e4468SDenis V. Lunev 
1915d1e4468SDenis V. Lunev static inline void release_net(struct net *net)
1925d1e4468SDenis V. Lunev {
1935d1e4468SDenis V. Lunev }
1945d1e4468SDenis V. Lunev #endif
1955d1e4468SDenis V. Lunev 
1968f424b5fSEric Dumazet #ifdef CONFIG_NET_NS
1978f424b5fSEric Dumazet 
1988f424b5fSEric Dumazet static inline void write_pnet(struct net **pnet, struct net *net)
1998f424b5fSEric Dumazet {
2008f424b5fSEric Dumazet 	*pnet = net;
2018f424b5fSEric Dumazet }
2028f424b5fSEric Dumazet 
2038f424b5fSEric Dumazet static inline struct net *read_pnet(struct net * const *pnet)
2048f424b5fSEric Dumazet {
2058f424b5fSEric Dumazet 	return *pnet;
2068f424b5fSEric Dumazet }
2078f424b5fSEric Dumazet 
2088f424b5fSEric Dumazet #else
2098f424b5fSEric Dumazet 
2108f424b5fSEric Dumazet #define write_pnet(pnet, net)	do { (void)(net);} while (0)
2118f424b5fSEric Dumazet #define read_pnet(pnet)		(&init_net)
2128f424b5fSEric Dumazet 
2138f424b5fSEric Dumazet #endif
2145d1e4468SDenis V. Lunev 
2155f256becSEric W. Biederman #define for_each_net(VAR)				\
2165f256becSEric W. Biederman 	list_for_each_entry(VAR, &net_namespace_list, list)
2175f256becSEric W. Biederman 
21811a28d37SJohannes Berg #define for_each_net_rcu(VAR)				\
21911a28d37SJohannes Berg 	list_for_each_entry_rcu(VAR, &net_namespace_list, list)
22011a28d37SJohannes Berg 
2214665079cSPavel Emelyanov #ifdef CONFIG_NET_NS
2224665079cSPavel Emelyanov #define __net_init
2234665079cSPavel Emelyanov #define __net_exit
224022cbae6SDenis V. Lunev #define __net_initdata
2254665079cSPavel Emelyanov #else
2264665079cSPavel Emelyanov #define __net_init	__init
2274665079cSPavel Emelyanov #define __net_exit	__exit_refok
228022cbae6SDenis V. Lunev #define __net_initdata	__initdata
2294665079cSPavel Emelyanov #endif
2305f256becSEric W. Biederman 
2315f256becSEric W. Biederman struct pernet_operations {
2325f256becSEric W. Biederman 	struct list_head list;
2335f256becSEric W. Biederman 	int (*init)(struct net *net);
2345f256becSEric W. Biederman 	void (*exit)(struct net *net);
2355f256becSEric W. Biederman };
2365f256becSEric W. Biederman 
23717edde52SEric W. Biederman /*
23817edde52SEric W. Biederman  * Use these carefully.  If you implement a network device and it
23917edde52SEric W. Biederman  * needs per network namespace operations use device pernet operations,
24017edde52SEric W. Biederman  * otherwise use pernet subsys operations.
24117edde52SEric W. Biederman  *
2424edf547bSJohannes Berg  * Network interfaces need to be removed from a dying netns _before_
2434edf547bSJohannes Berg  * subsys notifiers can be called, as most of the network code cleanup
2444edf547bSJohannes Berg  * (which is done from subsys notifiers) runs with the assumption that
2454edf547bSJohannes Berg  * dev_remove_pack has been called so no new packets will arrive during
2464edf547bSJohannes Berg  * and after the cleanup functions have been called.  dev_remove_pack
2474edf547bSJohannes Berg  * is not per namespace so instead the guarantee of no more packets
2484edf547bSJohannes Berg  * arriving in a network namespace is provided by ensuring that all
2494edf547bSJohannes Berg  * network devices and all sockets have left the network namespace
2504edf547bSJohannes Berg  * before the cleanup methods are called.
25117edde52SEric W. Biederman  *
25217edde52SEric W. Biederman  * For the longest time the ipv4 icmp code was registered as a pernet
25317edde52SEric W. Biederman  * device which caused kernel oops, and panics during network
25417edde52SEric W. Biederman  * namespace cleanup.   So please don't get this wrong.
25517edde52SEric W. Biederman  */
2565f256becSEric W. Biederman extern int register_pernet_subsys(struct pernet_operations *);
2575f256becSEric W. Biederman extern void unregister_pernet_subsys(struct pernet_operations *);
258485ac57bSAlexey Dobriyan extern int register_pernet_gen_subsys(int *id, struct pernet_operations *);
259485ac57bSAlexey Dobriyan extern void unregister_pernet_gen_subsys(int id, struct pernet_operations *);
2605f256becSEric W. Biederman extern int register_pernet_device(struct pernet_operations *);
2615f256becSEric W. Biederman extern void unregister_pernet_device(struct pernet_operations *);
262c93cf61fSPavel Emelyanov extern int register_pernet_gen_device(int *id, struct pernet_operations *);
263c93cf61fSPavel Emelyanov extern void unregister_pernet_gen_device(int id, struct pernet_operations *);
2645f256becSEric W. Biederman 
26595bdfccbSEric W. Biederman struct ctl_path;
26695bdfccbSEric W. Biederman struct ctl_table;
26795bdfccbSEric W. Biederman struct ctl_table_header;
268d62c612eSPavel Emelyanov 
26995bdfccbSEric W. Biederman extern struct ctl_table_header *register_net_sysctl_table(struct net *net,
27095bdfccbSEric W. Biederman 	const struct ctl_path *path, struct ctl_table *table);
271d62c612eSPavel Emelyanov extern struct ctl_table_header *register_net_sysctl_rotable(
272d62c612eSPavel Emelyanov 	const struct ctl_path *path, struct ctl_table *table);
27395bdfccbSEric W. Biederman extern void unregister_net_sysctl_table(struct ctl_table_header *header);
27495bdfccbSEric W. Biederman 
2755f256becSEric W. Biederman #endif /* __NET_NET_NAMESPACE_H */
276