13b49e2e9SPablo Neira Ayuso #ifndef _NF_FLOW_TABLE_H 23b49e2e9SPablo Neira Ayuso #define _NF_FLOW_TABLE_H 33b49e2e9SPablo Neira Ayuso 4ac2a6666SPablo Neira Ayuso #include <linux/in.h> 5ac2a6666SPablo Neira Ayuso #include <linux/in6.h> 6ac2a6666SPablo Neira Ayuso #include <linux/netdevice.h> 70eb71a9dSNeilBrown #include <linux/rhashtable-types.h> 8ac2a6666SPablo Neira Ayuso #include <linux/rcupdate.h> 9a1b2f04eSJeremy Sowden #include <linux/netfilter.h> 10af81f9e7SFelix Fietkau #include <linux/netfilter/nf_conntrack_tuple_common.h> 118bb69f3bSPablo Neira Ayuso #include <net/flow_offload.h> 12ac2a6666SPablo Neira Ayuso #include <net/dst.h> 130492d857SPablo Neira Ayuso #include <linux/if_pppox.h> 140492d857SPablo Neira Ayuso #include <linux/ppp_defs.h> 153b49e2e9SPablo Neira Ayuso 163b49e2e9SPablo Neira Ayuso struct nf_flowtable; 17c29f74e0SPablo Neira Ayuso struct nf_flow_rule; 18c29f74e0SPablo Neira Ayuso struct flow_offload; 19c29f74e0SPablo Neira Ayuso enum flow_offload_tuple_dir; 203b49e2e9SPablo Neira Ayuso 219c26ba9bSPaul Blakey struct nf_flow_key { 229c26ba9bSPaul Blakey struct flow_dissector_key_meta meta; 239c26ba9bSPaul Blakey struct flow_dissector_key_control control; 24cfab6dbdSwenxu struct flow_dissector_key_control enc_control; 259c26ba9bSPaul Blakey struct flow_dissector_key_basic basic; 263e1b0c16Swenxu struct flow_dissector_key_vlan vlan; 273e1b0c16Swenxu struct flow_dissector_key_vlan cvlan; 289c26ba9bSPaul Blakey union { 299c26ba9bSPaul Blakey struct flow_dissector_key_ipv4_addrs ipv4; 309c26ba9bSPaul Blakey struct flow_dissector_key_ipv6_addrs ipv6; 319c26ba9bSPaul Blakey }; 32cfab6dbdSwenxu struct flow_dissector_key_keyid enc_key_id; 33cfab6dbdSwenxu union { 34cfab6dbdSwenxu struct flow_dissector_key_ipv4_addrs enc_ipv4; 35cfab6dbdSwenxu struct flow_dissector_key_ipv6_addrs enc_ipv6; 36cfab6dbdSwenxu }; 379c26ba9bSPaul Blakey struct flow_dissector_key_tcp tcp; 389c26ba9bSPaul Blakey struct flow_dissector_key_ports tp; 399c26ba9bSPaul Blakey } __aligned(BITS_PER_LONG / 8); /* Ensure that we can do comparisons as longs. */ 409c26ba9bSPaul Blakey 419c26ba9bSPaul Blakey struct nf_flow_match { 429c26ba9bSPaul Blakey struct flow_dissector dissector; 439c26ba9bSPaul Blakey struct nf_flow_key key; 449c26ba9bSPaul Blakey struct nf_flow_key mask; 459c26ba9bSPaul Blakey }; 469c26ba9bSPaul Blakey 479c26ba9bSPaul Blakey struct nf_flow_rule { 489c26ba9bSPaul Blakey struct nf_flow_match match; 499c26ba9bSPaul Blakey struct flow_rule *rule; 509c26ba9bSPaul Blakey }; 519c26ba9bSPaul Blakey 523b49e2e9SPablo Neira Ayuso struct nf_flowtable_type { 533b49e2e9SPablo Neira Ayuso struct list_head list; 543b49e2e9SPablo Neira Ayuso int family; 55a268de77SFelix Fietkau int (*init)(struct nf_flowtable *ft); 568bb69f3bSPablo Neira Ayuso int (*setup)(struct nf_flowtable *ft, 578bb69f3bSPablo Neira Ayuso struct net_device *dev, 588bb69f3bSPablo Neira Ayuso enum flow_block_command cmd); 59c29f74e0SPablo Neira Ayuso int (*action)(struct net *net, 60*1a441a9bSVlad Buslov struct flow_offload *flow, 61c29f74e0SPablo Neira Ayuso enum flow_offload_tuple_dir dir, 62c29f74e0SPablo Neira Ayuso struct nf_flow_rule *flow_rule); 63b408c5b0SPablo Neira Ayuso void (*free)(struct nf_flowtable *ft); 643b49e2e9SPablo Neira Ayuso nf_hookfn *hook; 653b49e2e9SPablo Neira Ayuso struct module *owner; 663b49e2e9SPablo Neira Ayuso }; 673b49e2e9SPablo Neira Ayuso 688bb69f3bSPablo Neira Ayuso enum nf_flowtable_flags { 69cfbd1125SPablo Neira Ayuso NF_FLOWTABLE_HW_OFFLOAD = 0x1, /* NFT_FLOWTABLE_HW_OFFLOAD */ 7053c2b289SPablo Neira Ayuso NF_FLOWTABLE_COUNTER = 0x2, /* NFT_FLOWTABLE_COUNTER */ 718bb69f3bSPablo Neira Ayuso }; 728bb69f3bSPablo Neira Ayuso 733b49e2e9SPablo Neira Ayuso struct nf_flowtable { 7484453a90SFelix Fietkau struct list_head list; 753b49e2e9SPablo Neira Ayuso struct rhashtable rhashtable; 7671a8a63bSPablo Neira Ayuso int priority; 773b49e2e9SPablo Neira Ayuso const struct nf_flowtable_type *type; 783b49e2e9SPablo Neira Ayuso struct delayed_work gc_work; 798bb69f3bSPablo Neira Ayuso unsigned int flags; 808bb69f3bSPablo Neira Ayuso struct flow_block flow_block; 81422c032aSPaul Blakey struct rw_semaphore flow_block_lock; /* Guards flow_block */ 828bb69f3bSPablo Neira Ayuso possible_net_t net; 833b49e2e9SPablo Neira Ayuso }; 843b49e2e9SPablo Neira Ayuso 85a5449cdcSPablo Neira Ayuso static inline bool nf_flowtable_hw_offload(struct nf_flowtable *flowtable) 86a5449cdcSPablo Neira Ayuso { 87a5449cdcSPablo Neira Ayuso return flowtable->flags & NF_FLOWTABLE_HW_OFFLOAD; 88a5449cdcSPablo Neira Ayuso } 89a5449cdcSPablo Neira Ayuso 90ac2a6666SPablo Neira Ayuso enum flow_offload_tuple_dir { 91af81f9e7SFelix Fietkau FLOW_OFFLOAD_DIR_ORIGINAL = IP_CT_DIR_ORIGINAL, 92af81f9e7SFelix Fietkau FLOW_OFFLOAD_DIR_REPLY = IP_CT_DIR_REPLY, 93ac2a6666SPablo Neira Ayuso }; 944f08f173SPablo Neira Ayuso #define FLOW_OFFLOAD_DIR_MAX IP_CT_DIR_MAX 95ac2a6666SPablo Neira Ayuso 965139c0c0SPablo Neira Ayuso enum flow_offload_xmit_type { 9778ed0a9bSRoi Dayan FLOW_OFFLOAD_XMIT_UNSPEC = 0, 9878ed0a9bSRoi Dayan FLOW_OFFLOAD_XMIT_NEIGH, 995139c0c0SPablo Neira Ayuso FLOW_OFFLOAD_XMIT_XFRM, 1007a27f6abSPablo Neira Ayuso FLOW_OFFLOAD_XMIT_DIRECT, 101db6140e5SPaul Blakey FLOW_OFFLOAD_XMIT_TC, 1025139c0c0SPablo Neira Ayuso }; 1035139c0c0SPablo Neira Ayuso 1044cd91f7cSPablo Neira Ayuso #define NF_FLOW_TABLE_ENCAP_MAX 2 1054cd91f7cSPablo Neira Ayuso 106ac2a6666SPablo Neira Ayuso struct flow_offload_tuple { 107ac2a6666SPablo Neira Ayuso union { 108ac2a6666SPablo Neira Ayuso struct in_addr src_v4; 109ac2a6666SPablo Neira Ayuso struct in6_addr src_v6; 110ac2a6666SPablo Neira Ayuso }; 111ac2a6666SPablo Neira Ayuso union { 112ac2a6666SPablo Neira Ayuso struct in_addr dst_v4; 113ac2a6666SPablo Neira Ayuso struct in6_addr dst_v6; 114ac2a6666SPablo Neira Ayuso }; 115ac2a6666SPablo Neira Ayuso struct { 116ac2a6666SPablo Neira Ayuso __be16 src_port; 117ac2a6666SPablo Neira Ayuso __be16 dst_port; 118ac2a6666SPablo Neira Ayuso }; 119ac2a6666SPablo Neira Ayuso 120ac2a6666SPablo Neira Ayuso int iifidx; 121ac2a6666SPablo Neira Ayuso 122ac2a6666SPablo Neira Ayuso u8 l3proto; 123ac2a6666SPablo Neira Ayuso u8 l4proto; 1244cd91f7cSPablo Neira Ayuso struct { 1254cd91f7cSPablo Neira Ayuso u16 id; 1264cd91f7cSPablo Neira Ayuso __be16 proto; 1274cd91f7cSPablo Neira Ayuso } encap[NF_FLOW_TABLE_ENCAP_MAX]; 128dbc859d9SPablo Neira Ayuso 129dbc859d9SPablo Neira Ayuso /* All members above are keys for lookups, see flow_offload_hash(). */ 130dbc859d9SPablo Neira Ayuso struct { } __hash; 131dbc859d9SPablo Neira Ayuso 13226267bf9SFelix Fietkau u8 dir:2, 133db6140e5SPaul Blakey xmit_type:3, 13426267bf9SFelix Fietkau encap_num:2, 13526267bf9SFelix Fietkau in_vlan_ingress:2; 1364f3780c0SFelix Fietkau u16 mtu; 1377a27f6abSPablo Neira Ayuso union { 1388b9229d1SPablo Neira Ayuso struct { 139ac2a6666SPablo Neira Ayuso struct dst_entry *dst_cache; 1408b9229d1SPablo Neira Ayuso u32 dst_cookie; 1418b9229d1SPablo Neira Ayuso }; 1427a27f6abSPablo Neira Ayuso struct { 1437a27f6abSPablo Neira Ayuso u32 ifidx; 14473f97025SPablo Neira Ayuso u32 hw_ifidx; 1457a27f6abSPablo Neira Ayuso u8 h_source[ETH_ALEN]; 1467a27f6abSPablo Neira Ayuso u8 h_dest[ETH_ALEN]; 1477a27f6abSPablo Neira Ayuso } out; 148db6140e5SPaul Blakey struct { 149db6140e5SPaul Blakey u32 iifidx; 150db6140e5SPaul Blakey } tc; 1517a27f6abSPablo Neira Ayuso }; 152ac2a6666SPablo Neira Ayuso }; 153ac2a6666SPablo Neira Ayuso 154ac2a6666SPablo Neira Ayuso struct flow_offload_tuple_rhash { 155ac2a6666SPablo Neira Ayuso struct rhash_head node; 156ac2a6666SPablo Neira Ayuso struct flow_offload_tuple tuple; 157ac2a6666SPablo Neira Ayuso }; 158ac2a6666SPablo Neira Ayuso 159355a8b13SPablo Neira Ayuso enum nf_flow_flags { 160355a8b13SPablo Neira Ayuso NF_FLOW_SNAT, 161355a8b13SPablo Neira Ayuso NF_FLOW_DNAT, 162355a8b13SPablo Neira Ayuso NF_FLOW_TEARDOWN, 163355a8b13SPablo Neira Ayuso NF_FLOW_HW, 164355a8b13SPablo Neira Ayuso NF_FLOW_HW_DYING, 165355a8b13SPablo Neira Ayuso NF_FLOW_HW_DEAD, 1662c889795SPaul Blakey NF_FLOW_HW_PENDING, 1678f84780bSVlad Buslov NF_FLOW_HW_BIDIRECTIONAL, 168*1a441a9bSVlad Buslov NF_FLOW_HW_ESTABLISHED, 169355a8b13SPablo Neira Ayuso }; 170ac2a6666SPablo Neira Ayuso 171f1363e05SPablo Neira Ayuso enum flow_offload_type { 172f1363e05SPablo Neira Ayuso NF_FLOW_OFFLOAD_UNSPEC = 0, 173f1363e05SPablo Neira Ayuso NF_FLOW_OFFLOAD_ROUTE, 174f1363e05SPablo Neira Ayuso }; 175f1363e05SPablo Neira Ayuso 176ac2a6666SPablo Neira Ayuso struct flow_offload { 177ac2a6666SPablo Neira Ayuso struct flow_offload_tuple_rhash tuplehash[FLOW_OFFLOAD_DIR_MAX]; 178b32d2f34SPablo Neira Ayuso struct nf_conn *ct; 179355a8b13SPablo Neira Ayuso unsigned long flags; 180f1363e05SPablo Neira Ayuso u16 type; 181ac2a6666SPablo Neira Ayuso u32 timeout; 18262248df8SPablo Neira Ayuso struct rcu_head rcu_head; 183ac2a6666SPablo Neira Ayuso }; 184ac2a6666SPablo Neira Ayuso 185ac2a6666SPablo Neira Ayuso #define NF_FLOW_TIMEOUT (30 * HZ) 186fb46f1b7SPablo Neira Ayuso #define nf_flowtable_time_stamp (u32)jiffies 187fb46f1b7SPablo Neira Ayuso 1881d91d2e1SOz Shlomo unsigned long flow_offload_get_timeout(struct flow_offload *flow); 1891d91d2e1SOz Shlomo 190fb46f1b7SPablo Neira Ayuso static inline __s32 nf_flow_timeout_delta(unsigned int timeout) 191fb46f1b7SPablo Neira Ayuso { 192fb46f1b7SPablo Neira Ayuso return (__s32)(timeout - nf_flowtable_time_stamp); 193fb46f1b7SPablo Neira Ayuso } 194ac2a6666SPablo Neira Ayuso 195ac2a6666SPablo Neira Ayuso struct nf_flow_route { 196ac2a6666SPablo Neira Ayuso struct { 197ac2a6666SPablo Neira Ayuso struct dst_entry *dst; 198c63a7cc4SPablo Neira Ayuso struct { 199c63a7cc4SPablo Neira Ayuso u32 ifindex; 2004cd91f7cSPablo Neira Ayuso struct { 2014cd91f7cSPablo Neira Ayuso u16 id; 2024cd91f7cSPablo Neira Ayuso __be16 proto; 2034cd91f7cSPablo Neira Ayuso } encap[NF_FLOW_TABLE_ENCAP_MAX]; 20426267bf9SFelix Fietkau u8 num_encaps:2, 20526267bf9SFelix Fietkau ingress_vlans:2; 206c63a7cc4SPablo Neira Ayuso } in; 2077a27f6abSPablo Neira Ayuso struct { 2087a27f6abSPablo Neira Ayuso u32 ifindex; 20973f97025SPablo Neira Ayuso u32 hw_ifindex; 2107a27f6abSPablo Neira Ayuso u8 h_source[ETH_ALEN]; 2117a27f6abSPablo Neira Ayuso u8 h_dest[ETH_ALEN]; 2127a27f6abSPablo Neira Ayuso } out; 2135139c0c0SPablo Neira Ayuso enum flow_offload_xmit_type xmit_type; 214ac2a6666SPablo Neira Ayuso } tuple[FLOW_OFFLOAD_DIR_MAX]; 215ac2a6666SPablo Neira Ayuso }; 216ac2a6666SPablo Neira Ayuso 217f1363e05SPablo Neira Ayuso struct flow_offload *flow_offload_alloc(struct nf_conn *ct); 218ac2a6666SPablo Neira Ayuso void flow_offload_free(struct flow_offload *flow); 219ac2a6666SPablo Neira Ayuso 220505ee3a1SAlaa Hleihel static inline int 221505ee3a1SAlaa Hleihel nf_flow_table_offload_add_cb(struct nf_flowtable *flow_table, 222505ee3a1SAlaa Hleihel flow_setup_cb_t *cb, void *cb_priv) 223505ee3a1SAlaa Hleihel { 224505ee3a1SAlaa Hleihel struct flow_block *block = &flow_table->flow_block; 225505ee3a1SAlaa Hleihel struct flow_block_cb *block_cb; 226505ee3a1SAlaa Hleihel int err = 0; 227505ee3a1SAlaa Hleihel 228505ee3a1SAlaa Hleihel down_write(&flow_table->flow_block_lock); 229505ee3a1SAlaa Hleihel block_cb = flow_block_cb_lookup(block, cb, cb_priv); 230505ee3a1SAlaa Hleihel if (block_cb) { 231505ee3a1SAlaa Hleihel err = -EEXIST; 232505ee3a1SAlaa Hleihel goto unlock; 233505ee3a1SAlaa Hleihel } 234505ee3a1SAlaa Hleihel 235505ee3a1SAlaa Hleihel block_cb = flow_block_cb_alloc(cb, cb_priv, cb_priv, NULL); 236505ee3a1SAlaa Hleihel if (IS_ERR(block_cb)) { 237505ee3a1SAlaa Hleihel err = PTR_ERR(block_cb); 238505ee3a1SAlaa Hleihel goto unlock; 239505ee3a1SAlaa Hleihel } 240505ee3a1SAlaa Hleihel 241505ee3a1SAlaa Hleihel list_add_tail(&block_cb->list, &block->cb_list); 242505ee3a1SAlaa Hleihel 243505ee3a1SAlaa Hleihel unlock: 244505ee3a1SAlaa Hleihel up_write(&flow_table->flow_block_lock); 245505ee3a1SAlaa Hleihel return err; 246505ee3a1SAlaa Hleihel } 247505ee3a1SAlaa Hleihel 248505ee3a1SAlaa Hleihel static inline void 249505ee3a1SAlaa Hleihel nf_flow_table_offload_del_cb(struct nf_flowtable *flow_table, 250505ee3a1SAlaa Hleihel flow_setup_cb_t *cb, void *cb_priv) 251505ee3a1SAlaa Hleihel { 252505ee3a1SAlaa Hleihel struct flow_block *block = &flow_table->flow_block; 253505ee3a1SAlaa Hleihel struct flow_block_cb *block_cb; 254505ee3a1SAlaa Hleihel 255505ee3a1SAlaa Hleihel down_write(&flow_table->flow_block_lock); 256505ee3a1SAlaa Hleihel block_cb = flow_block_cb_lookup(block, cb, cb_priv); 257505ee3a1SAlaa Hleihel if (block_cb) { 258505ee3a1SAlaa Hleihel list_del(&block_cb->list); 259505ee3a1SAlaa Hleihel flow_block_cb_free(block_cb); 260505ee3a1SAlaa Hleihel } else { 261505ee3a1SAlaa Hleihel WARN_ON(true); 262505ee3a1SAlaa Hleihel } 263505ee3a1SAlaa Hleihel up_write(&flow_table->flow_block_lock); 264505ee3a1SAlaa Hleihel } 265978703f4SPaul Blakey 266f1363e05SPablo Neira Ayuso int flow_offload_route_init(struct flow_offload *flow, 267f1363e05SPablo Neira Ayuso const struct nf_flow_route *route); 268f1363e05SPablo Neira Ayuso 269ac2a6666SPablo Neira Ayuso int flow_offload_add(struct nf_flowtable *flow_table, struct flow_offload *flow); 2708b3646d6SPaul Blakey void flow_offload_refresh(struct nf_flowtable *flow_table, 2718b3646d6SPaul Blakey struct flow_offload *flow); 2728b3646d6SPaul Blakey 273ac2a6666SPablo Neira Ayuso struct flow_offload_tuple_rhash *flow_offload_lookup(struct nf_flowtable *flow_table, 274ac2a6666SPablo Neira Ayuso struct flow_offload_tuple *tuple); 275759eebbcSPablo Neira Ayuso void nf_flow_table_gc_run(struct nf_flowtable *flow_table); 276a8284c68SPablo Neira Ayuso void nf_flow_table_gc_cleanup(struct nf_flowtable *flowtable, 277a8284c68SPablo Neira Ayuso struct net_device *dev); 2785f1be84aSTaehee Yoo void nf_flow_table_cleanup(struct net_device *dev); 279c0ea1bcbSPablo Neira Ayuso 280a268de77SFelix Fietkau int nf_flow_table_init(struct nf_flowtable *flow_table); 281b408c5b0SPablo Neira Ayuso void nf_flow_table_free(struct nf_flowtable *flow_table); 282ac2a6666SPablo Neira Ayuso 28359c466ddSFelix Fietkau void flow_offload_teardown(struct flow_offload *flow); 284ac2a6666SPablo Neira Ayuso 285f4401262SPablo Neira Ayuso void nf_flow_snat_port(const struct flow_offload *flow, 286ac2a6666SPablo Neira Ayuso struct sk_buff *skb, unsigned int thoff, 287ac2a6666SPablo Neira Ayuso u8 protocol, enum flow_offload_tuple_dir dir); 288f4401262SPablo Neira Ayuso void nf_flow_dnat_port(const struct flow_offload *flow, 289ac2a6666SPablo Neira Ayuso struct sk_buff *skb, unsigned int thoff, 290ac2a6666SPablo Neira Ayuso u8 protocol, enum flow_offload_tuple_dir dir); 291ac2a6666SPablo Neira Ayuso 292ac2a6666SPablo Neira Ayuso struct flow_ports { 293ac2a6666SPablo Neira Ayuso __be16 source, dest; 294ac2a6666SPablo Neira Ayuso }; 295ac2a6666SPablo Neira Ayuso 2967c23b629SPablo Neira Ayuso unsigned int nf_flow_offload_ip_hook(void *priv, struct sk_buff *skb, 2977c23b629SPablo Neira Ayuso const struct nf_hook_state *state); 2987c23b629SPablo Neira Ayuso unsigned int nf_flow_offload_ipv6_hook(void *priv, struct sk_buff *skb, 2997c23b629SPablo Neira Ayuso const struct nf_hook_state *state); 3007c23b629SPablo Neira Ayuso 301ac2a6666SPablo Neira Ayuso #define MODULE_ALIAS_NF_FLOWTABLE(family) \ 302ac2a6666SPablo Neira Ayuso MODULE_ALIAS("nf-flowtable-" __stringify(family)) 303ac2a6666SPablo Neira Ayuso 304c29f74e0SPablo Neira Ayuso void nf_flow_offload_add(struct nf_flowtable *flowtable, 305c29f74e0SPablo Neira Ayuso struct flow_offload *flow); 306c29f74e0SPablo Neira Ayuso void nf_flow_offload_del(struct nf_flowtable *flowtable, 307c29f74e0SPablo Neira Ayuso struct flow_offload *flow); 308c29f74e0SPablo Neira Ayuso void nf_flow_offload_stats(struct nf_flowtable *flowtable, 309c29f74e0SPablo Neira Ayuso struct flow_offload *flow); 310c29f74e0SPablo Neira Ayuso 311c29f74e0SPablo Neira Ayuso void nf_flow_table_offload_flush(struct nf_flowtable *flowtable); 3129afb4b27SPablo Neira Ayuso void nf_flow_table_offload_flush_cleanup(struct nf_flowtable *flowtable); 3139afb4b27SPablo Neira Ayuso 314c29f74e0SPablo Neira Ayuso int nf_flow_table_offload_setup(struct nf_flowtable *flowtable, 3158bb69f3bSPablo Neira Ayuso struct net_device *dev, 316c29f74e0SPablo Neira Ayuso enum flow_block_command cmd); 317*1a441a9bSVlad Buslov int nf_flow_rule_route_ipv4(struct net *net, struct flow_offload *flow, 3185c27d8d7SPablo Neira Ayuso enum flow_offload_tuple_dir dir, 3195c27d8d7SPablo Neira Ayuso struct nf_flow_rule *flow_rule); 320*1a441a9bSVlad Buslov int nf_flow_rule_route_ipv6(struct net *net, struct flow_offload *flow, 321c29f74e0SPablo Neira Ayuso enum flow_offload_tuple_dir dir, 322c29f74e0SPablo Neira Ayuso struct nf_flow_rule *flow_rule); 323c29f74e0SPablo Neira Ayuso 324c29f74e0SPablo Neira Ayuso int nf_flow_table_offload_init(void); 325c29f74e0SPablo Neira Ayuso void nf_flow_table_offload_exit(void); 3268bb69f3bSPablo Neira Ayuso 3270492d857SPablo Neira Ayuso static inline __be16 nf_flow_pppoe_proto(const struct sk_buff *skb) 3280492d857SPablo Neira Ayuso { 3290492d857SPablo Neira Ayuso __be16 proto; 3300492d857SPablo Neira Ayuso 3310492d857SPablo Neira Ayuso proto = *((__be16 *)(skb_mac_header(skb) + ETH_HLEN + 3320492d857SPablo Neira Ayuso sizeof(struct pppoe_hdr))); 3330492d857SPablo Neira Ayuso switch (proto) { 3340492d857SPablo Neira Ayuso case htons(PPP_IP): 3350492d857SPablo Neira Ayuso return htons(ETH_P_IP); 3360492d857SPablo Neira Ayuso case htons(PPP_IPV6): 3370492d857SPablo Neira Ayuso return htons(ETH_P_IPV6); 3380492d857SPablo Neira Ayuso } 3390492d857SPablo Neira Ayuso 3400492d857SPablo Neira Ayuso return 0; 3410492d857SPablo Neira Ayuso } 3420492d857SPablo Neira Ayuso 343b0381776SVlad Buslov #define NF_FLOW_TABLE_STAT_INC(net, count) __this_cpu_inc((net)->ft.stat->count) 344b0381776SVlad Buslov #define NF_FLOW_TABLE_STAT_DEC(net, count) __this_cpu_dec((net)->ft.stat->count) 345b0381776SVlad Buslov #define NF_FLOW_TABLE_STAT_INC_ATOMIC(net, count) \ 346b0381776SVlad Buslov this_cpu_inc((net)->ft.stat->count) 347b0381776SVlad Buslov #define NF_FLOW_TABLE_STAT_DEC_ATOMIC(net, count) \ 348b0381776SVlad Buslov this_cpu_dec((net)->ft.stat->count) 349b0381776SVlad Buslov 350b0381776SVlad Buslov #ifdef CONFIG_NF_FLOW_TABLE_PROCFS 351b0381776SVlad Buslov int nf_flow_table_init_proc(struct net *net); 352b0381776SVlad Buslov void nf_flow_table_fini_proc(struct net *net); 353b0381776SVlad Buslov #else 354b0381776SVlad Buslov static inline int nf_flow_table_init_proc(struct net *net) 355b0381776SVlad Buslov { 356b0381776SVlad Buslov return 0; 357b0381776SVlad Buslov } 358b0381776SVlad Buslov 359b0381776SVlad Buslov static inline void nf_flow_table_fini_proc(struct net *net) 360b0381776SVlad Buslov { 361b0381776SVlad Buslov } 362b0381776SVlad Buslov #endif /* CONFIG_NF_FLOW_TABLE_PROCFS */ 363b0381776SVlad Buslov 3640286fbc6SJeremy Sowden #endif /* _NF_FLOW_TABLE_H */ 365