11da177e4SLinus Torvalds #ifndef __NET_PKT_CLS_H 21da177e4SLinus Torvalds #define __NET_PKT_CLS_H 31da177e4SLinus Torvalds 41da177e4SLinus Torvalds #include <linux/pkt_cls.h> 51da177e4SLinus Torvalds #include <net/sch_generic.h> 61da177e4SLinus Torvalds #include <net/act_api.h> 71da177e4SLinus Torvalds 81da177e4SLinus Torvalds /* Basic packet classifier frontend definitions. */ 91da177e4SLinus Torvalds 10fd2c3ef7SEric Dumazet struct tcf_walker { 111da177e4SLinus Torvalds int stop; 121da177e4SLinus Torvalds int skip; 131da177e4SLinus Torvalds int count; 141da177e4SLinus Torvalds int (*fn)(struct tcf_proto *, unsigned long node, struct tcf_walker *); 151da177e4SLinus Torvalds }; 161da177e4SLinus Torvalds 175c15257fSJoe Perches int register_tcf_proto_ops(struct tcf_proto_ops *ops); 185c15257fSJoe Perches int unregister_tcf_proto_ops(struct tcf_proto_ops *ops); 191da177e4SLinus Torvalds 201da177e4SLinus Torvalds static inline unsigned long 211da177e4SLinus Torvalds __cls_set_class(unsigned long *clp, unsigned long cl) 221da177e4SLinus Torvalds { 231da177e4SLinus Torvalds unsigned long old_cl; 241da177e4SLinus Torvalds 251da177e4SLinus Torvalds old_cl = *clp; 261da177e4SLinus Torvalds *clp = cl; 271da177e4SLinus Torvalds return old_cl; 281da177e4SLinus Torvalds } 291da177e4SLinus Torvalds 301da177e4SLinus Torvalds static inline unsigned long 311da177e4SLinus Torvalds cls_set_class(struct tcf_proto *tp, unsigned long *clp, 321da177e4SLinus Torvalds unsigned long cl) 331da177e4SLinus Torvalds { 341da177e4SLinus Torvalds unsigned long old_cl; 351da177e4SLinus Torvalds 361da177e4SLinus Torvalds tcf_tree_lock(tp); 371da177e4SLinus Torvalds old_cl = __cls_set_class(clp, cl); 381da177e4SLinus Torvalds tcf_tree_unlock(tp); 391da177e4SLinus Torvalds 401da177e4SLinus Torvalds return old_cl; 411da177e4SLinus Torvalds } 421da177e4SLinus Torvalds 431da177e4SLinus Torvalds static inline void 441da177e4SLinus Torvalds tcf_bind_filter(struct tcf_proto *tp, struct tcf_result *r, unsigned long base) 451da177e4SLinus Torvalds { 461da177e4SLinus Torvalds unsigned long cl; 471da177e4SLinus Torvalds 481da177e4SLinus Torvalds cl = tp->q->ops->cl_ops->bind_tcf(tp->q, base, r->classid); 491da177e4SLinus Torvalds cl = cls_set_class(tp, &r->class, cl); 501da177e4SLinus Torvalds if (cl) 511da177e4SLinus Torvalds tp->q->ops->cl_ops->unbind_tcf(tp->q, cl); 521da177e4SLinus Torvalds } 531da177e4SLinus Torvalds 541da177e4SLinus Torvalds static inline void 551da177e4SLinus Torvalds tcf_unbind_filter(struct tcf_proto *tp, struct tcf_result *r) 561da177e4SLinus Torvalds { 571da177e4SLinus Torvalds unsigned long cl; 581da177e4SLinus Torvalds 591da177e4SLinus Torvalds if ((cl = __cls_set_class(&r->class, 0)) != 0) 601da177e4SLinus Torvalds tp->q->ops->cl_ops->unbind_tcf(tp->q, cl); 611da177e4SLinus Torvalds } 621da177e4SLinus Torvalds 63fd2c3ef7SEric Dumazet struct tcf_exts { 641da177e4SLinus Torvalds #ifdef CONFIG_NET_CLS_ACT 6533be6271SWANG Cong __u32 type; /* for backward compat(TCA_OLD_COMPAT) */ 6633be6271SWANG Cong struct list_head actions; 671da177e4SLinus Torvalds #endif 681da177e4SLinus Torvalds }; 691da177e4SLinus Torvalds 701da177e4SLinus Torvalds /* Map to export classifier specific extension TLV types to the 711da177e4SLinus Torvalds * generic extensions API. Unsupported extensions must be set to 0. 721da177e4SLinus Torvalds */ 73fd2c3ef7SEric Dumazet struct tcf_ext_map { 741da177e4SLinus Torvalds int action; 751da177e4SLinus Torvalds int police; 761da177e4SLinus Torvalds }; 771da177e4SLinus Torvalds 7833be6271SWANG Cong static inline void tcf_exts_init(struct tcf_exts *exts) 7933be6271SWANG Cong { 8033be6271SWANG Cong #ifdef CONFIG_NET_CLS_ACT 8133be6271SWANG Cong INIT_LIST_HEAD(&exts->actions); 8233be6271SWANG Cong #endif 8333be6271SWANG Cong } 8433be6271SWANG Cong 851da177e4SLinus Torvalds /** 861da177e4SLinus Torvalds * tcf_exts_is_predicative - check if a predicative extension is present 871da177e4SLinus Torvalds * @exts: tc filter extensions handle 881da177e4SLinus Torvalds * 891da177e4SLinus Torvalds * Returns 1 if a predicative extension is present, i.e. an extension which 901da177e4SLinus Torvalds * might cause further actions and thus overrule the regular tcf_result. 911da177e4SLinus Torvalds */ 921da177e4SLinus Torvalds static inline int 931da177e4SLinus Torvalds tcf_exts_is_predicative(struct tcf_exts *exts) 941da177e4SLinus Torvalds { 951da177e4SLinus Torvalds #ifdef CONFIG_NET_CLS_ACT 9633be6271SWANG Cong return !list_empty(&exts->actions); 971da177e4SLinus Torvalds #else 981da177e4SLinus Torvalds return 0; 991da177e4SLinus Torvalds #endif 1001da177e4SLinus Torvalds } 1011da177e4SLinus Torvalds 1021da177e4SLinus Torvalds /** 1031da177e4SLinus Torvalds * tcf_exts_is_available - check if at least one extension is present 1041da177e4SLinus Torvalds * @exts: tc filter extensions handle 1051da177e4SLinus Torvalds * 1061da177e4SLinus Torvalds * Returns 1 if at least one extension is present. 1071da177e4SLinus Torvalds */ 1081da177e4SLinus Torvalds static inline int 1091da177e4SLinus Torvalds tcf_exts_is_available(struct tcf_exts *exts) 1101da177e4SLinus Torvalds { 1111da177e4SLinus Torvalds /* All non-predicative extensions must be added here. */ 1121da177e4SLinus Torvalds return tcf_exts_is_predicative(exts); 1131da177e4SLinus Torvalds } 1141da177e4SLinus Torvalds 1151da177e4SLinus Torvalds /** 1161da177e4SLinus Torvalds * tcf_exts_exec - execute tc filter extensions 1171da177e4SLinus Torvalds * @skb: socket buffer 1181da177e4SLinus Torvalds * @exts: tc filter extensions handle 1191da177e4SLinus Torvalds * @res: desired result 1201da177e4SLinus Torvalds * 1211da177e4SLinus Torvalds * Executes all configured extensions. Returns 0 on a normal execution, 1221da177e4SLinus Torvalds * a negative number if the filter must be considered unmatched or 1231da177e4SLinus Torvalds * a positive action code (TC_ACT_*) which must be returned to the 1241da177e4SLinus Torvalds * underlying layer. 1251da177e4SLinus Torvalds */ 1261da177e4SLinus Torvalds static inline int 1271da177e4SLinus Torvalds tcf_exts_exec(struct sk_buff *skb, struct tcf_exts *exts, 1281da177e4SLinus Torvalds struct tcf_result *res) 1291da177e4SLinus Torvalds { 1301da177e4SLinus Torvalds #ifdef CONFIG_NET_CLS_ACT 13133be6271SWANG Cong if (!list_empty(&exts->actions)) 13233be6271SWANG Cong return tcf_action_exec(skb, &exts->actions, res); 1331da177e4SLinus Torvalds #endif 1341da177e4SLinus Torvalds return 0; 1351da177e4SLinus Torvalds } 1361da177e4SLinus Torvalds 1375c15257fSJoe Perches int tcf_exts_validate(struct net *net, struct tcf_proto *tp, 138c1b52739SBenjamin LaHaise struct nlattr **tb, struct nlattr *rate_tlv, 139c1b52739SBenjamin LaHaise struct tcf_exts *exts, 1405239008bSPatrick McHardy const struct tcf_ext_map *map); 1415c15257fSJoe Perches void tcf_exts_destroy(struct tcf_proto *tp, struct tcf_exts *exts); 1425c15257fSJoe Perches void tcf_exts_change(struct tcf_proto *tp, struct tcf_exts *dst, 1431da177e4SLinus Torvalds struct tcf_exts *src); 1445c15257fSJoe Perches int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts, 1455239008bSPatrick McHardy const struct tcf_ext_map *map); 1465c15257fSJoe Perches int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts, 1475239008bSPatrick McHardy const struct tcf_ext_map *map); 1481da177e4SLinus Torvalds 1491da177e4SLinus Torvalds /** 1501da177e4SLinus Torvalds * struct tcf_pkt_info - packet information 1511da177e4SLinus Torvalds */ 152fd2c3ef7SEric Dumazet struct tcf_pkt_info { 1531da177e4SLinus Torvalds unsigned char * ptr; 1541da177e4SLinus Torvalds int nexthdr; 1551da177e4SLinus Torvalds }; 1561da177e4SLinus Torvalds 1571da177e4SLinus Torvalds #ifdef CONFIG_NET_EMATCH 1581da177e4SLinus Torvalds 1591da177e4SLinus Torvalds struct tcf_ematch_ops; 1601da177e4SLinus Torvalds 1611da177e4SLinus Torvalds /** 1621da177e4SLinus Torvalds * struct tcf_ematch - extended match (ematch) 1631da177e4SLinus Torvalds * 1641da177e4SLinus Torvalds * @matchid: identifier to allow userspace to reidentify a match 1651da177e4SLinus Torvalds * @flags: flags specifying attributes and the relation to other matches 1661da177e4SLinus Torvalds * @ops: the operations lookup table of the corresponding ematch module 1671da177e4SLinus Torvalds * @datalen: length of the ematch specific configuration data 1681da177e4SLinus Torvalds * @data: ematch specific data 1691da177e4SLinus Torvalds */ 170fd2c3ef7SEric Dumazet struct tcf_ematch { 1711da177e4SLinus Torvalds struct tcf_ematch_ops * ops; 1721da177e4SLinus Torvalds unsigned long data; 1731da177e4SLinus Torvalds unsigned int datalen; 1741da177e4SLinus Torvalds u16 matchid; 1751da177e4SLinus Torvalds u16 flags; 1761da177e4SLinus Torvalds }; 1771da177e4SLinus Torvalds 1781da177e4SLinus Torvalds static inline int tcf_em_is_container(struct tcf_ematch *em) 1791da177e4SLinus Torvalds { 1801da177e4SLinus Torvalds return !em->ops; 1811da177e4SLinus Torvalds } 1821da177e4SLinus Torvalds 1831da177e4SLinus Torvalds static inline int tcf_em_is_simple(struct tcf_ematch *em) 1841da177e4SLinus Torvalds { 1851da177e4SLinus Torvalds return em->flags & TCF_EM_SIMPLE; 1861da177e4SLinus Torvalds } 1871da177e4SLinus Torvalds 1881da177e4SLinus Torvalds static inline int tcf_em_is_inverted(struct tcf_ematch *em) 1891da177e4SLinus Torvalds { 1901da177e4SLinus Torvalds return em->flags & TCF_EM_INVERT; 1911da177e4SLinus Torvalds } 1921da177e4SLinus Torvalds 1931da177e4SLinus Torvalds static inline int tcf_em_last_match(struct tcf_ematch *em) 1941da177e4SLinus Torvalds { 1951da177e4SLinus Torvalds return (em->flags & TCF_EM_REL_MASK) == TCF_EM_REL_END; 1961da177e4SLinus Torvalds } 1971da177e4SLinus Torvalds 1981da177e4SLinus Torvalds static inline int tcf_em_early_end(struct tcf_ematch *em, int result) 1991da177e4SLinus Torvalds { 2001da177e4SLinus Torvalds if (tcf_em_last_match(em)) 2011da177e4SLinus Torvalds return 1; 2021da177e4SLinus Torvalds 2031da177e4SLinus Torvalds if (result == 0 && em->flags & TCF_EM_REL_AND) 2041da177e4SLinus Torvalds return 1; 2051da177e4SLinus Torvalds 2061da177e4SLinus Torvalds if (result != 0 && em->flags & TCF_EM_REL_OR) 2071da177e4SLinus Torvalds return 1; 2081da177e4SLinus Torvalds 2091da177e4SLinus Torvalds return 0; 2101da177e4SLinus Torvalds } 2111da177e4SLinus Torvalds 2121da177e4SLinus Torvalds /** 2131da177e4SLinus Torvalds * struct tcf_ematch_tree - ematch tree handle 2141da177e4SLinus Torvalds * 2151da177e4SLinus Torvalds * @hdr: ematch tree header supplied by userspace 2161da177e4SLinus Torvalds * @matches: array of ematches 2171da177e4SLinus Torvalds */ 218fd2c3ef7SEric Dumazet struct tcf_ematch_tree { 2191da177e4SLinus Torvalds struct tcf_ematch_tree_hdr hdr; 2201da177e4SLinus Torvalds struct tcf_ematch * matches; 2211da177e4SLinus Torvalds 2221da177e4SLinus Torvalds }; 2231da177e4SLinus Torvalds 2241da177e4SLinus Torvalds /** 2251da177e4SLinus Torvalds * struct tcf_ematch_ops - ematch module operations 2261da177e4SLinus Torvalds * 2271da177e4SLinus Torvalds * @kind: identifier (kind) of this ematch module 2281da177e4SLinus Torvalds * @datalen: length of expected configuration data (optional) 2291da177e4SLinus Torvalds * @change: called during validation (optional) 2301da177e4SLinus Torvalds * @match: called during ematch tree evaluation, must return 1/0 2311da177e4SLinus Torvalds * @destroy: called during destroyage (optional) 2321da177e4SLinus Torvalds * @dump: called during dumping process (optional) 2331da177e4SLinus Torvalds * @owner: owner, must be set to THIS_MODULE 2341da177e4SLinus Torvalds * @link: link to previous/next ematch module (internal use) 2351da177e4SLinus Torvalds */ 236fd2c3ef7SEric Dumazet struct tcf_ematch_ops { 2371da177e4SLinus Torvalds int kind; 2381da177e4SLinus Torvalds int datalen; 2391da177e4SLinus Torvalds int (*change)(struct tcf_proto *, void *, 2401da177e4SLinus Torvalds int, struct tcf_ematch *); 2411da177e4SLinus Torvalds int (*match)(struct sk_buff *, struct tcf_ematch *, 2421da177e4SLinus Torvalds struct tcf_pkt_info *); 2431da177e4SLinus Torvalds void (*destroy)(struct tcf_proto *, 2441da177e4SLinus Torvalds struct tcf_ematch *); 2451da177e4SLinus Torvalds int (*dump)(struct sk_buff *, struct tcf_ematch *); 2461da177e4SLinus Torvalds struct module *owner; 2471da177e4SLinus Torvalds struct list_head link; 2481da177e4SLinus Torvalds }; 2491da177e4SLinus Torvalds 2505c15257fSJoe Perches int tcf_em_register(struct tcf_ematch_ops *); 2515c15257fSJoe Perches void tcf_em_unregister(struct tcf_ematch_ops *); 2525c15257fSJoe Perches int tcf_em_tree_validate(struct tcf_proto *, struct nlattr *, 2531da177e4SLinus Torvalds struct tcf_ematch_tree *); 2545c15257fSJoe Perches void tcf_em_tree_destroy(struct tcf_proto *, struct tcf_ematch_tree *); 2555c15257fSJoe Perches int tcf_em_tree_dump(struct sk_buff *, struct tcf_ematch_tree *, int); 2565c15257fSJoe Perches int __tcf_em_tree_match(struct sk_buff *, struct tcf_ematch_tree *, 2571da177e4SLinus Torvalds struct tcf_pkt_info *); 2581da177e4SLinus Torvalds 2591da177e4SLinus Torvalds /** 2601da177e4SLinus Torvalds * tcf_em_tree_change - replace ematch tree of a running classifier 2611da177e4SLinus Torvalds * 2621da177e4SLinus Torvalds * @tp: classifier kind handle 2631da177e4SLinus Torvalds * @dst: destination ematch tree variable 2641da177e4SLinus Torvalds * @src: source ematch tree (temporary tree from tcf_em_tree_validate) 2651da177e4SLinus Torvalds * 2661da177e4SLinus Torvalds * This functions replaces the ematch tree in @dst with the ematch 2671da177e4SLinus Torvalds * tree in @src. The classifier in charge of the ematch tree may be 2681da177e4SLinus Torvalds * running. 2691da177e4SLinus Torvalds */ 2701da177e4SLinus Torvalds static inline void tcf_em_tree_change(struct tcf_proto *tp, 2711da177e4SLinus Torvalds struct tcf_ematch_tree *dst, 2721da177e4SLinus Torvalds struct tcf_ematch_tree *src) 2731da177e4SLinus Torvalds { 2741da177e4SLinus Torvalds tcf_tree_lock(tp); 2751da177e4SLinus Torvalds memcpy(dst, src, sizeof(*dst)); 2761da177e4SLinus Torvalds tcf_tree_unlock(tp); 2771da177e4SLinus Torvalds } 2781da177e4SLinus Torvalds 2791da177e4SLinus Torvalds /** 2801da177e4SLinus Torvalds * tcf_em_tree_match - evaulate an ematch tree 2811da177e4SLinus Torvalds * 2821da177e4SLinus Torvalds * @skb: socket buffer of the packet in question 2831da177e4SLinus Torvalds * @tree: ematch tree to be used for evaluation 2841da177e4SLinus Torvalds * @info: packet information examined by classifier 2851da177e4SLinus Torvalds * 2861da177e4SLinus Torvalds * This function matches @skb against the ematch tree in @tree by going 2871da177e4SLinus Torvalds * through all ematches respecting their logic relations returning 2881da177e4SLinus Torvalds * as soon as the result is obvious. 2891da177e4SLinus Torvalds * 2901da177e4SLinus Torvalds * Returns 1 if the ematch tree as-one matches, no ematches are configured 2911da177e4SLinus Torvalds * or ematch is not enabled in the kernel, otherwise 0 is returned. 2921da177e4SLinus Torvalds */ 2931da177e4SLinus Torvalds static inline int tcf_em_tree_match(struct sk_buff *skb, 2941da177e4SLinus Torvalds struct tcf_ematch_tree *tree, 2951da177e4SLinus Torvalds struct tcf_pkt_info *info) 2961da177e4SLinus Torvalds { 2971da177e4SLinus Torvalds if (tree->hdr.nmatches) 2981da177e4SLinus Torvalds return __tcf_em_tree_match(skb, tree, info); 2991da177e4SLinus Torvalds else 3001da177e4SLinus Torvalds return 1; 3011da177e4SLinus Torvalds } 3021da177e4SLinus Torvalds 303db3d99c0SPatrick McHardy #define MODULE_ALIAS_TCF_EMATCH(kind) MODULE_ALIAS("ematch-kind-" __stringify(kind)) 304db3d99c0SPatrick McHardy 3051da177e4SLinus Torvalds #else /* CONFIG_NET_EMATCH */ 3061da177e4SLinus Torvalds 307fd2c3ef7SEric Dumazet struct tcf_ematch_tree { 3081da177e4SLinus Torvalds }; 3091da177e4SLinus Torvalds 3101da177e4SLinus Torvalds #define tcf_em_tree_validate(tp, tb, t) ((void)(t), 0) 3111da177e4SLinus Torvalds #define tcf_em_tree_destroy(tp, t) do { (void)(t); } while(0) 3121da177e4SLinus Torvalds #define tcf_em_tree_dump(skb, t, tlv) (0) 3131da177e4SLinus Torvalds #define tcf_em_tree_change(tp, dst, src) do { } while(0) 3141da177e4SLinus Torvalds #define tcf_em_tree_match(skb, t, info) ((void)(info), 1) 3151da177e4SLinus Torvalds 3161da177e4SLinus Torvalds #endif /* CONFIG_NET_EMATCH */ 3171da177e4SLinus Torvalds 3181da177e4SLinus Torvalds static inline unsigned char * tcf_get_base_ptr(struct sk_buff *skb, int layer) 3191da177e4SLinus Torvalds { 3201da177e4SLinus Torvalds switch (layer) { 3211da177e4SLinus Torvalds case TCF_LAYER_LINK: 3221da177e4SLinus Torvalds return skb->data; 3231da177e4SLinus Torvalds case TCF_LAYER_NETWORK: 324d56f90a7SArnaldo Carvalho de Melo return skb_network_header(skb); 3251da177e4SLinus Torvalds case TCF_LAYER_TRANSPORT: 3269c70220bSArnaldo Carvalho de Melo return skb_transport_header(skb); 3271da177e4SLinus Torvalds } 3281da177e4SLinus Torvalds 3291da177e4SLinus Torvalds return NULL; 3301da177e4SLinus Torvalds } 3311da177e4SLinus Torvalds 332eddc9ec5SArnaldo Carvalho de Melo static inline int tcf_valid_offset(const struct sk_buff *skb, 333eddc9ec5SArnaldo Carvalho de Melo const unsigned char *ptr, const int len) 3341da177e4SLinus Torvalds { 335da521b2cSDavid S. Miller return likely((ptr + len) <= skb_tail_pointer(skb) && 336da521b2cSDavid S. Miller ptr >= skb->head && 337da521b2cSDavid S. Miller (ptr <= (ptr + len))); 3381da177e4SLinus Torvalds } 3391da177e4SLinus Torvalds 3401da177e4SLinus Torvalds #ifdef CONFIG_NET_CLS_IND 3410eeb8ffcSDenis V. Lunev #include <net/net_namespace.h> 3420eeb8ffcSDenis V. Lunev 3431da177e4SLinus Torvalds static inline int 344add93b61SPatrick McHardy tcf_change_indev(struct tcf_proto *tp, char *indev, struct nlattr *indev_tlv) 3451da177e4SLinus Torvalds { 346add93b61SPatrick McHardy if (nla_strlcpy(indev, indev_tlv, IFNAMSIZ) >= IFNAMSIZ) 3471da177e4SLinus Torvalds return -EINVAL; 3481da177e4SLinus Torvalds return 0; 3491da177e4SLinus Torvalds } 3501da177e4SLinus Torvalds 3511da177e4SLinus Torvalds static inline int 3521da177e4SLinus Torvalds tcf_match_indev(struct sk_buff *skb, char *indev) 3531da177e4SLinus Torvalds { 354c01003c2SPatrick McHardy struct net_device *dev; 355c01003c2SPatrick McHardy 35686e65da9SDavid S. Miller if (indev[0]) { 3578964be4aSEric Dumazet if (!skb->skb_iif) 3581da177e4SLinus Torvalds return 0; 3598964be4aSEric Dumazet dev = __dev_get_by_index(dev_net(skb->dev), skb->skb_iif); 360c01003c2SPatrick McHardy if (!dev || strcmp(indev, dev->name)) 3611da177e4SLinus Torvalds return 0; 3621da177e4SLinus Torvalds } 3631da177e4SLinus Torvalds 3641da177e4SLinus Torvalds return 1; 3651da177e4SLinus Torvalds } 3661da177e4SLinus Torvalds #endif /* CONFIG_NET_CLS_IND */ 3671da177e4SLinus Torvalds 3681da177e4SLinus Torvalds #endif 369