xref: /openbmc/linux/include/net/netns/ipv4.h (revision dfd4f649)
1 /* SPDX-License-Identifier: GPL-2.0 */
2 /*
3  * ipv4 in net namespaces
4  */
5 
6 #ifndef __NETNS_IPV4_H__
7 #define __NETNS_IPV4_H__
8 
9 #include <linux/uidgid.h>
10 #include <net/inet_frag.h>
11 #include <linux/rcupdate.h>
12 
13 struct tcpm_hash_bucket;
14 struct ctl_table_header;
15 struct ipv4_devconf;
16 struct fib_rules_ops;
17 struct hlist_head;
18 struct fib_table;
19 struct sock;
20 struct local_ports {
21 	seqlock_t	lock;
22 	int		range[2];
23 	bool		warned;
24 };
25 
26 struct ping_group_range {
27 	seqlock_t	lock;
28 	kgid_t		range[2];
29 };
30 
31 struct inet_hashinfo;
32 
33 struct inet_timewait_death_row {
34 	atomic_t		tw_count;
35 
36 	struct inet_hashinfo 	*hashinfo ____cacheline_aligned_in_smp;
37 	int			sysctl_max_tw_buckets;
38 };
39 
40 struct tcp_fastopen_context;
41 
42 struct netns_ipv4 {
43 #ifdef CONFIG_SYSCTL
44 	struct ctl_table_header	*forw_hdr;
45 	struct ctl_table_header	*frags_hdr;
46 	struct ctl_table_header	*ipv4_hdr;
47 	struct ctl_table_header *route_hdr;
48 	struct ctl_table_header *xfrm4_hdr;
49 #endif
50 	struct ipv4_devconf	*devconf_all;
51 	struct ipv4_devconf	*devconf_dflt;
52 	struct ip_ra_chain __rcu *ra_chain;
53 	struct mutex		ra_mutex;
54 #ifdef CONFIG_IP_MULTIPLE_TABLES
55 	struct fib_rules_ops	*rules_ops;
56 	bool			fib_has_custom_rules;
57 	unsigned int		fib_rules_require_fldissect;
58 	struct fib_table __rcu	*fib_main;
59 	struct fib_table __rcu	*fib_default;
60 #endif
61 	bool			fib_has_custom_local_routes;
62 #ifdef CONFIG_IP_ROUTE_CLASSID
63 	int			fib_num_tclassid_users;
64 #endif
65 	struct hlist_head	*fib_table_hash;
66 	bool			fib_offload_disabled;
67 	struct sock		*fibnl;
68 
69 	struct sock  * __percpu	*icmp_sk;
70 	struct sock		*mc_autojoin_sk;
71 
72 	struct inet_peer_base	*peers;
73 	struct sock  * __percpu	*tcp_sk;
74 	struct netns_frags	frags;
75 #ifdef CONFIG_NETFILTER
76 	struct xt_table		*iptable_filter;
77 	struct xt_table		*iptable_mangle;
78 	struct xt_table		*iptable_raw;
79 	struct xt_table		*arptable_filter;
80 #ifdef CONFIG_SECURITY
81 	struct xt_table		*iptable_security;
82 #endif
83 	struct xt_table		*nat_table;
84 #endif
85 
86 	int sysctl_icmp_echo_ignore_all;
87 	int sysctl_icmp_echo_ignore_broadcasts;
88 	int sysctl_icmp_ignore_bogus_error_responses;
89 	int sysctl_icmp_ratelimit;
90 	int sysctl_icmp_ratemask;
91 	int sysctl_icmp_errors_use_inbound_ifaddr;
92 
93 	struct local_ports ip_local_ports;
94 
95 	int sysctl_tcp_ecn;
96 	int sysctl_tcp_ecn_fallback;
97 
98 	int sysctl_ip_default_ttl;
99 	int sysctl_ip_no_pmtu_disc;
100 	int sysctl_ip_fwd_use_pmtu;
101 	int sysctl_ip_fwd_update_priority;
102 	int sysctl_ip_nonlocal_bind;
103 	/* Shall we try to damage output packets if routing dev changes? */
104 	int sysctl_ip_dynaddr;
105 	int sysctl_ip_early_demux;
106 #ifdef CONFIG_NET_L3_MASTER_DEV
107 	int sysctl_raw_l3mdev_accept;
108 #endif
109 	int sysctl_tcp_early_demux;
110 	int sysctl_udp_early_demux;
111 
112 	int sysctl_fwmark_reflect;
113 	int sysctl_tcp_fwmark_accept;
114 #ifdef CONFIG_NET_L3_MASTER_DEV
115 	int sysctl_tcp_l3mdev_accept;
116 #endif
117 	int sysctl_tcp_mtu_probing;
118 	int sysctl_tcp_base_mss;
119 	int sysctl_tcp_probe_threshold;
120 	u32 sysctl_tcp_probe_interval;
121 
122 	int sysctl_tcp_keepalive_time;
123 	int sysctl_tcp_keepalive_probes;
124 	int sysctl_tcp_keepalive_intvl;
125 
126 	int sysctl_tcp_syn_retries;
127 	int sysctl_tcp_synack_retries;
128 	int sysctl_tcp_syncookies;
129 	int sysctl_tcp_reordering;
130 	int sysctl_tcp_retries1;
131 	int sysctl_tcp_retries2;
132 	int sysctl_tcp_orphan_retries;
133 	int sysctl_tcp_fin_timeout;
134 	unsigned int sysctl_tcp_notsent_lowat;
135 	int sysctl_tcp_tw_reuse;
136 	int sysctl_tcp_sack;
137 	int sysctl_tcp_window_scaling;
138 	int sysctl_tcp_timestamps;
139 	int sysctl_tcp_early_retrans;
140 	int sysctl_tcp_recovery;
141 	int sysctl_tcp_thin_linear_timeouts;
142 	int sysctl_tcp_slow_start_after_idle;
143 	int sysctl_tcp_retrans_collapse;
144 	int sysctl_tcp_stdurg;
145 	int sysctl_tcp_rfc1337;
146 	int sysctl_tcp_abort_on_overflow;
147 	int sysctl_tcp_fack;
148 	int sysctl_tcp_max_reordering;
149 	int sysctl_tcp_dsack;
150 	int sysctl_tcp_app_win;
151 	int sysctl_tcp_adv_win_scale;
152 	int sysctl_tcp_frto;
153 	int sysctl_tcp_nometrics_save;
154 	int sysctl_tcp_moderate_rcvbuf;
155 	int sysctl_tcp_tso_win_divisor;
156 	int sysctl_tcp_workaround_signed_windows;
157 	int sysctl_tcp_limit_output_bytes;
158 	int sysctl_tcp_challenge_ack_limit;
159 	int sysctl_tcp_min_tso_segs;
160 	int sysctl_tcp_min_rtt_wlen;
161 	int sysctl_tcp_autocorking;
162 	int sysctl_tcp_invalid_ratelimit;
163 	int sysctl_tcp_pacing_ss_ratio;
164 	int sysctl_tcp_pacing_ca_ratio;
165 	int sysctl_tcp_wmem[3];
166 	int sysctl_tcp_rmem[3];
167 	int sysctl_tcp_comp_sack_nr;
168 	unsigned long sysctl_tcp_comp_sack_delay_ns;
169 	struct inet_timewait_death_row tcp_death_row;
170 	int sysctl_max_syn_backlog;
171 	int sysctl_tcp_fastopen;
172 	const struct tcp_congestion_ops __rcu  *tcp_congestion_control;
173 	struct tcp_fastopen_context __rcu *tcp_fastopen_ctx;
174 	spinlock_t tcp_fastopen_ctx_lock;
175 	unsigned int sysctl_tcp_fastopen_blackhole_timeout;
176 	atomic_t tfo_active_disable_times;
177 	unsigned long tfo_active_disable_stamp;
178 
179 	int sysctl_udp_wmem_min;
180 	int sysctl_udp_rmem_min;
181 
182 #ifdef CONFIG_NET_L3_MASTER_DEV
183 	int sysctl_udp_l3mdev_accept;
184 #endif
185 
186 	int sysctl_igmp_max_memberships;
187 	int sysctl_igmp_max_msf;
188 	int sysctl_igmp_llm_reports;
189 	int sysctl_igmp_qrv;
190 
191 	struct ping_group_range ping_group_range;
192 
193 	atomic_t dev_addr_genid;
194 
195 #ifdef CONFIG_SYSCTL
196 	unsigned long *sysctl_local_reserved_ports;
197 	int sysctl_ip_prot_sock;
198 #endif
199 
200 #ifdef CONFIG_IP_MROUTE
201 #ifndef CONFIG_IP_MROUTE_MULTIPLE_TABLES
202 	struct mr_table		*mrt;
203 #else
204 	struct list_head	mr_tables;
205 	struct fib_rules_ops	*mr_rules_ops;
206 #endif
207 #endif
208 #ifdef CONFIG_IP_ROUTE_MULTIPATH
209 	int sysctl_fib_multipath_use_neigh;
210 	int sysctl_fib_multipath_hash_policy;
211 #endif
212 
213 	struct fib_notifier_ops	*notifier_ops;
214 	unsigned int	fib_seq;	/* protected by rtnl_mutex */
215 
216 	struct fib_notifier_ops	*ipmr_notifier_ops;
217 	unsigned int	ipmr_seq;	/* protected by rtnl_mutex */
218 
219 	atomic_t	rt_genid;
220 };
221 #endif
222