11da177e4SLinus Torvalds #ifndef __NET_PKT_CLS_H 21da177e4SLinus Torvalds #define __NET_PKT_CLS_H 31da177e4SLinus Torvalds 41da177e4SLinus Torvalds #include <linux/pkt_cls.h> 51da177e4SLinus Torvalds #include <net/sch_generic.h> 61da177e4SLinus Torvalds #include <net/act_api.h> 71da177e4SLinus Torvalds 81da177e4SLinus Torvalds /* Basic packet classifier frontend definitions. */ 91da177e4SLinus Torvalds 10fd2c3ef7SEric Dumazet struct tcf_walker { 111da177e4SLinus Torvalds int stop; 121da177e4SLinus Torvalds int skip; 131da177e4SLinus Torvalds int count; 141da177e4SLinus Torvalds int (*fn)(struct tcf_proto *, unsigned long node, struct tcf_walker *); 151da177e4SLinus Torvalds }; 161da177e4SLinus Torvalds 175c15257fSJoe Perches int register_tcf_proto_ops(struct tcf_proto_ops *ops); 185c15257fSJoe Perches int unregister_tcf_proto_ops(struct tcf_proto_ops *ops); 191da177e4SLinus Torvalds 208ae70032SJiri Pirko #ifdef CONFIG_NET_CLS 21367a8ce8SWANG Cong struct tcf_chain *tcf_chain_get(struct tcf_block *block, u32 chain_index, 22367a8ce8SWANG Cong bool create); 235bc17018SJiri Pirko void tcf_chain_put(struct tcf_chain *chain); 246529eabaSJiri Pirko int tcf_block_get(struct tcf_block **p_block, 256529eabaSJiri Pirko struct tcf_proto __rcu **p_filter_chain); 266529eabaSJiri Pirko void tcf_block_put(struct tcf_block *block); 2787d83093SJiri Pirko int tcf_classify(struct sk_buff *skb, const struct tcf_proto *tp, 2887d83093SJiri Pirko struct tcf_result *res, bool compat_mode); 2987d83093SJiri Pirko 308ae70032SJiri Pirko #else 316529eabaSJiri Pirko static inline 326529eabaSJiri Pirko int tcf_block_get(struct tcf_block **p_block, 336529eabaSJiri Pirko struct tcf_proto __rcu **p_filter_chain) 346529eabaSJiri Pirko { 356529eabaSJiri Pirko return 0; 366529eabaSJiri Pirko } 376529eabaSJiri Pirko 386529eabaSJiri Pirko static inline void tcf_block_put(struct tcf_block *block) 398ae70032SJiri Pirko { 408ae70032SJiri Pirko } 4187d83093SJiri Pirko 4287d83093SJiri Pirko static inline int tcf_classify(struct sk_buff *skb, const struct tcf_proto *tp, 4387d83093SJiri Pirko struct tcf_result *res, bool compat_mode) 4487d83093SJiri Pirko { 4587d83093SJiri Pirko return TC_ACT_UNSPEC; 4687d83093SJiri Pirko } 478ae70032SJiri Pirko #endif 48cf1facdaSJiri Pirko 491da177e4SLinus Torvalds static inline unsigned long 501da177e4SLinus Torvalds __cls_set_class(unsigned long *clp, unsigned long cl) 511da177e4SLinus Torvalds { 52a0efb80cSWANG Cong return xchg(clp, cl); 531da177e4SLinus Torvalds } 541da177e4SLinus Torvalds 551da177e4SLinus Torvalds static inline unsigned long 561da177e4SLinus Torvalds cls_set_class(struct tcf_proto *tp, unsigned long *clp, 571da177e4SLinus Torvalds unsigned long cl) 581da177e4SLinus Torvalds { 591da177e4SLinus Torvalds unsigned long old_cl; 601da177e4SLinus Torvalds 611da177e4SLinus Torvalds tcf_tree_lock(tp); 621da177e4SLinus Torvalds old_cl = __cls_set_class(clp, cl); 631da177e4SLinus Torvalds tcf_tree_unlock(tp); 641da177e4SLinus Torvalds 651da177e4SLinus Torvalds return old_cl; 661da177e4SLinus Torvalds } 671da177e4SLinus Torvalds 681da177e4SLinus Torvalds static inline void 691da177e4SLinus Torvalds tcf_bind_filter(struct tcf_proto *tp, struct tcf_result *r, unsigned long base) 701da177e4SLinus Torvalds { 711da177e4SLinus Torvalds unsigned long cl; 721da177e4SLinus Torvalds 731da177e4SLinus Torvalds cl = tp->q->ops->cl_ops->bind_tcf(tp->q, base, r->classid); 741da177e4SLinus Torvalds cl = cls_set_class(tp, &r->class, cl); 751da177e4SLinus Torvalds if (cl) 761da177e4SLinus Torvalds tp->q->ops->cl_ops->unbind_tcf(tp->q, cl); 771da177e4SLinus Torvalds } 781da177e4SLinus Torvalds 791da177e4SLinus Torvalds static inline void 801da177e4SLinus Torvalds tcf_unbind_filter(struct tcf_proto *tp, struct tcf_result *r) 811da177e4SLinus Torvalds { 821da177e4SLinus Torvalds unsigned long cl; 831da177e4SLinus Torvalds 841da177e4SLinus Torvalds if ((cl = __cls_set_class(&r->class, 0)) != 0) 851da177e4SLinus Torvalds tp->q->ops->cl_ops->unbind_tcf(tp->q, cl); 861da177e4SLinus Torvalds } 871da177e4SLinus Torvalds 88fd2c3ef7SEric Dumazet struct tcf_exts { 891da177e4SLinus Torvalds #ifdef CONFIG_NET_CLS_ACT 9033be6271SWANG Cong __u32 type; /* for backward compat(TCA_OLD_COMPAT) */ 9122dc13c8SWANG Cong int nr_actions; 9222dc13c8SWANG Cong struct tc_action **actions; 931da177e4SLinus Torvalds #endif 941da177e4SLinus Torvalds /* Map to export classifier specific extension TLV types to the 951da177e4SLinus Torvalds * generic extensions API. Unsupported extensions must be set to 0. 961da177e4SLinus Torvalds */ 971da177e4SLinus Torvalds int action; 981da177e4SLinus Torvalds int police; 991da177e4SLinus Torvalds }; 1001da177e4SLinus Torvalds 101b9a24bb7SWANG Cong static inline int tcf_exts_init(struct tcf_exts *exts, int action, int police) 10233be6271SWANG Cong { 10333be6271SWANG Cong #ifdef CONFIG_NET_CLS_ACT 1045da57f42SWANG Cong exts->type = 0; 10522dc13c8SWANG Cong exts->nr_actions = 0; 10622dc13c8SWANG Cong exts->actions = kcalloc(TCA_ACT_MAX_PRIO, sizeof(struct tc_action *), 10722dc13c8SWANG Cong GFP_KERNEL); 108b9a24bb7SWANG Cong if (!exts->actions) 109b9a24bb7SWANG Cong return -ENOMEM; 11033be6271SWANG Cong #endif 1115da57f42SWANG Cong exts->action = action; 1125da57f42SWANG Cong exts->police = police; 113b9a24bb7SWANG Cong return 0; 11433be6271SWANG Cong } 11533be6271SWANG Cong 1161da177e4SLinus Torvalds /** 1171da177e4SLinus Torvalds * tcf_exts_is_predicative - check if a predicative extension is present 1181da177e4SLinus Torvalds * @exts: tc filter extensions handle 1191da177e4SLinus Torvalds * 1201da177e4SLinus Torvalds * Returns 1 if a predicative extension is present, i.e. an extension which 1211da177e4SLinus Torvalds * might cause further actions and thus overrule the regular tcf_result. 1221da177e4SLinus Torvalds */ 1231da177e4SLinus Torvalds static inline int 1241da177e4SLinus Torvalds tcf_exts_is_predicative(struct tcf_exts *exts) 1251da177e4SLinus Torvalds { 1261da177e4SLinus Torvalds #ifdef CONFIG_NET_CLS_ACT 12722dc13c8SWANG Cong return exts->nr_actions; 1281da177e4SLinus Torvalds #else 1291da177e4SLinus Torvalds return 0; 1301da177e4SLinus Torvalds #endif 1311da177e4SLinus Torvalds } 1321da177e4SLinus Torvalds 1331da177e4SLinus Torvalds /** 1341da177e4SLinus Torvalds * tcf_exts_is_available - check if at least one extension is present 1351da177e4SLinus Torvalds * @exts: tc filter extensions handle 1361da177e4SLinus Torvalds * 1371da177e4SLinus Torvalds * Returns 1 if at least one extension is present. 1381da177e4SLinus Torvalds */ 1391da177e4SLinus Torvalds static inline int 1401da177e4SLinus Torvalds tcf_exts_is_available(struct tcf_exts *exts) 1411da177e4SLinus Torvalds { 1421da177e4SLinus Torvalds /* All non-predicative extensions must be added here. */ 1431da177e4SLinus Torvalds return tcf_exts_is_predicative(exts); 1441da177e4SLinus Torvalds } 1451da177e4SLinus Torvalds 14622dc13c8SWANG Cong static inline void tcf_exts_to_list(const struct tcf_exts *exts, 14722dc13c8SWANG Cong struct list_head *actions) 14822dc13c8SWANG Cong { 14922dc13c8SWANG Cong #ifdef CONFIG_NET_CLS_ACT 15022dc13c8SWANG Cong int i; 15122dc13c8SWANG Cong 15222dc13c8SWANG Cong for (i = 0; i < exts->nr_actions; i++) { 15322dc13c8SWANG Cong struct tc_action *a = exts->actions[i]; 15422dc13c8SWANG Cong 155fa5effe7SHadar Hen Zion list_add_tail(&a->list, actions); 15622dc13c8SWANG Cong } 15722dc13c8SWANG Cong #endif 15822dc13c8SWANG Cong } 15922dc13c8SWANG Cong 160d897a638SJakub Kicinski static inline void 161d897a638SJakub Kicinski tcf_exts_stats_update(const struct tcf_exts *exts, 162d897a638SJakub Kicinski u64 bytes, u64 packets, u64 lastuse) 163d897a638SJakub Kicinski { 164d897a638SJakub Kicinski #ifdef CONFIG_NET_CLS_ACT 165d897a638SJakub Kicinski int i; 166d897a638SJakub Kicinski 167d897a638SJakub Kicinski preempt_disable(); 168d897a638SJakub Kicinski 169d897a638SJakub Kicinski for (i = 0; i < exts->nr_actions; i++) { 170d897a638SJakub Kicinski struct tc_action *a = exts->actions[i]; 171d897a638SJakub Kicinski 172d897a638SJakub Kicinski tcf_action_stats_update(a, bytes, packets, lastuse); 173d897a638SJakub Kicinski } 174d897a638SJakub Kicinski 175d897a638SJakub Kicinski preempt_enable(); 176d897a638SJakub Kicinski #endif 177d897a638SJakub Kicinski } 178d897a638SJakub Kicinski 1791da177e4SLinus Torvalds /** 1801da177e4SLinus Torvalds * tcf_exts_exec - execute tc filter extensions 1811da177e4SLinus Torvalds * @skb: socket buffer 1821da177e4SLinus Torvalds * @exts: tc filter extensions handle 1831da177e4SLinus Torvalds * @res: desired result 1841da177e4SLinus Torvalds * 1851da177e4SLinus Torvalds * Executes all configured extensions. Returns 0 on a normal execution, 1861da177e4SLinus Torvalds * a negative number if the filter must be considered unmatched or 1871da177e4SLinus Torvalds * a positive action code (TC_ACT_*) which must be returned to the 1881da177e4SLinus Torvalds * underlying layer. 1891da177e4SLinus Torvalds */ 1901da177e4SLinus Torvalds static inline int 1911da177e4SLinus Torvalds tcf_exts_exec(struct sk_buff *skb, struct tcf_exts *exts, 1921da177e4SLinus Torvalds struct tcf_result *res) 1931da177e4SLinus Torvalds { 1941da177e4SLinus Torvalds #ifdef CONFIG_NET_CLS_ACT 19522dc13c8SWANG Cong if (exts->nr_actions) 19622dc13c8SWANG Cong return tcf_action_exec(skb, exts->actions, exts->nr_actions, 19722dc13c8SWANG Cong res); 1981da177e4SLinus Torvalds #endif 1991da177e4SLinus Torvalds return 0; 2001da177e4SLinus Torvalds } 2011da177e4SLinus Torvalds 2022734437eSWANG Cong #ifdef CONFIG_NET_CLS_ACT 2032734437eSWANG Cong 20422dc13c8SWANG Cong #define tc_no_actions(_exts) ((_exts)->nr_actions == 0) 20522dc13c8SWANG Cong #define tc_single_action(_exts) ((_exts)->nr_actions == 1) 2062734437eSWANG Cong 2072734437eSWANG Cong #else /* CONFIG_NET_CLS_ACT */ 2082734437eSWANG Cong 2092734437eSWANG Cong #define tc_no_actions(_exts) true 2102734437eSWANG Cong #define tc_single_action(_exts) false 2112734437eSWANG Cong 2122734437eSWANG Cong #endif /* CONFIG_NET_CLS_ACT */ 2132734437eSWANG Cong 2145c15257fSJoe Perches int tcf_exts_validate(struct net *net, struct tcf_proto *tp, 215c1b52739SBenjamin LaHaise struct nlattr **tb, struct nlattr *rate_tlv, 2162f7ef2f8SCong Wang struct tcf_exts *exts, bool ovr); 21718d0264fSWANG Cong void tcf_exts_destroy(struct tcf_exts *exts); 2185c15257fSJoe Perches void tcf_exts_change(struct tcf_proto *tp, struct tcf_exts *dst, 2191da177e4SLinus Torvalds struct tcf_exts *src); 2205da57f42SWANG Cong int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts); 2215da57f42SWANG Cong int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts); 2227091d8c7SHadar Hen Zion int tcf_exts_get_dev(struct net_device *dev, struct tcf_exts *exts, 2237091d8c7SHadar Hen Zion struct net_device **hw_dev); 2241da177e4SLinus Torvalds 2251da177e4SLinus Torvalds /** 2261da177e4SLinus Torvalds * struct tcf_pkt_info - packet information 2271da177e4SLinus Torvalds */ 228fd2c3ef7SEric Dumazet struct tcf_pkt_info { 2291da177e4SLinus Torvalds unsigned char * ptr; 2301da177e4SLinus Torvalds int nexthdr; 2311da177e4SLinus Torvalds }; 2321da177e4SLinus Torvalds 2331da177e4SLinus Torvalds #ifdef CONFIG_NET_EMATCH 2341da177e4SLinus Torvalds 2351da177e4SLinus Torvalds struct tcf_ematch_ops; 2361da177e4SLinus Torvalds 2371da177e4SLinus Torvalds /** 2381da177e4SLinus Torvalds * struct tcf_ematch - extended match (ematch) 2391da177e4SLinus Torvalds * 2401da177e4SLinus Torvalds * @matchid: identifier to allow userspace to reidentify a match 2411da177e4SLinus Torvalds * @flags: flags specifying attributes and the relation to other matches 2421da177e4SLinus Torvalds * @ops: the operations lookup table of the corresponding ematch module 2431da177e4SLinus Torvalds * @datalen: length of the ematch specific configuration data 2441da177e4SLinus Torvalds * @data: ematch specific data 2451da177e4SLinus Torvalds */ 246fd2c3ef7SEric Dumazet struct tcf_ematch { 2471da177e4SLinus Torvalds struct tcf_ematch_ops * ops; 2481da177e4SLinus Torvalds unsigned long data; 2491da177e4SLinus Torvalds unsigned int datalen; 2501da177e4SLinus Torvalds u16 matchid; 2511da177e4SLinus Torvalds u16 flags; 25282a470f1SJohn Fastabend struct net *net; 2531da177e4SLinus Torvalds }; 2541da177e4SLinus Torvalds 2551da177e4SLinus Torvalds static inline int tcf_em_is_container(struct tcf_ematch *em) 2561da177e4SLinus Torvalds { 2571da177e4SLinus Torvalds return !em->ops; 2581da177e4SLinus Torvalds } 2591da177e4SLinus Torvalds 2601da177e4SLinus Torvalds static inline int tcf_em_is_simple(struct tcf_ematch *em) 2611da177e4SLinus Torvalds { 2621da177e4SLinus Torvalds return em->flags & TCF_EM_SIMPLE; 2631da177e4SLinus Torvalds } 2641da177e4SLinus Torvalds 2651da177e4SLinus Torvalds static inline int tcf_em_is_inverted(struct tcf_ematch *em) 2661da177e4SLinus Torvalds { 2671da177e4SLinus Torvalds return em->flags & TCF_EM_INVERT; 2681da177e4SLinus Torvalds } 2691da177e4SLinus Torvalds 2701da177e4SLinus Torvalds static inline int tcf_em_last_match(struct tcf_ematch *em) 2711da177e4SLinus Torvalds { 2721da177e4SLinus Torvalds return (em->flags & TCF_EM_REL_MASK) == TCF_EM_REL_END; 2731da177e4SLinus Torvalds } 2741da177e4SLinus Torvalds 2751da177e4SLinus Torvalds static inline int tcf_em_early_end(struct tcf_ematch *em, int result) 2761da177e4SLinus Torvalds { 2771da177e4SLinus Torvalds if (tcf_em_last_match(em)) 2781da177e4SLinus Torvalds return 1; 2791da177e4SLinus Torvalds 2801da177e4SLinus Torvalds if (result == 0 && em->flags & TCF_EM_REL_AND) 2811da177e4SLinus Torvalds return 1; 2821da177e4SLinus Torvalds 2831da177e4SLinus Torvalds if (result != 0 && em->flags & TCF_EM_REL_OR) 2841da177e4SLinus Torvalds return 1; 2851da177e4SLinus Torvalds 2861da177e4SLinus Torvalds return 0; 2871da177e4SLinus Torvalds } 2881da177e4SLinus Torvalds 2891da177e4SLinus Torvalds /** 2901da177e4SLinus Torvalds * struct tcf_ematch_tree - ematch tree handle 2911da177e4SLinus Torvalds * 2921da177e4SLinus Torvalds * @hdr: ematch tree header supplied by userspace 2931da177e4SLinus Torvalds * @matches: array of ematches 2941da177e4SLinus Torvalds */ 295fd2c3ef7SEric Dumazet struct tcf_ematch_tree { 2961da177e4SLinus Torvalds struct tcf_ematch_tree_hdr hdr; 2971da177e4SLinus Torvalds struct tcf_ematch * matches; 2981da177e4SLinus Torvalds 2991da177e4SLinus Torvalds }; 3001da177e4SLinus Torvalds 3011da177e4SLinus Torvalds /** 3021da177e4SLinus Torvalds * struct tcf_ematch_ops - ematch module operations 3031da177e4SLinus Torvalds * 3041da177e4SLinus Torvalds * @kind: identifier (kind) of this ematch module 3051da177e4SLinus Torvalds * @datalen: length of expected configuration data (optional) 3061da177e4SLinus Torvalds * @change: called during validation (optional) 3071da177e4SLinus Torvalds * @match: called during ematch tree evaluation, must return 1/0 3081da177e4SLinus Torvalds * @destroy: called during destroyage (optional) 3091da177e4SLinus Torvalds * @dump: called during dumping process (optional) 3101da177e4SLinus Torvalds * @owner: owner, must be set to THIS_MODULE 3111da177e4SLinus Torvalds * @link: link to previous/next ematch module (internal use) 3121da177e4SLinus Torvalds */ 313fd2c3ef7SEric Dumazet struct tcf_ematch_ops { 3141da177e4SLinus Torvalds int kind; 3151da177e4SLinus Torvalds int datalen; 31682a470f1SJohn Fastabend int (*change)(struct net *net, void *, 3171da177e4SLinus Torvalds int, struct tcf_ematch *); 3181da177e4SLinus Torvalds int (*match)(struct sk_buff *, struct tcf_ematch *, 3191da177e4SLinus Torvalds struct tcf_pkt_info *); 32082a470f1SJohn Fastabend void (*destroy)(struct tcf_ematch *); 3211da177e4SLinus Torvalds int (*dump)(struct sk_buff *, struct tcf_ematch *); 3221da177e4SLinus Torvalds struct module *owner; 3231da177e4SLinus Torvalds struct list_head link; 3241da177e4SLinus Torvalds }; 3251da177e4SLinus Torvalds 3265c15257fSJoe Perches int tcf_em_register(struct tcf_ematch_ops *); 3275c15257fSJoe Perches void tcf_em_unregister(struct tcf_ematch_ops *); 3285c15257fSJoe Perches int tcf_em_tree_validate(struct tcf_proto *, struct nlattr *, 3291da177e4SLinus Torvalds struct tcf_ematch_tree *); 33082a470f1SJohn Fastabend void tcf_em_tree_destroy(struct tcf_ematch_tree *); 3315c15257fSJoe Perches int tcf_em_tree_dump(struct sk_buff *, struct tcf_ematch_tree *, int); 3325c15257fSJoe Perches int __tcf_em_tree_match(struct sk_buff *, struct tcf_ematch_tree *, 3331da177e4SLinus Torvalds struct tcf_pkt_info *); 3341da177e4SLinus Torvalds 3351da177e4SLinus Torvalds /** 3361da177e4SLinus Torvalds * tcf_em_tree_change - replace ematch tree of a running classifier 3371da177e4SLinus Torvalds * 3381da177e4SLinus Torvalds * @tp: classifier kind handle 3391da177e4SLinus Torvalds * @dst: destination ematch tree variable 3401da177e4SLinus Torvalds * @src: source ematch tree (temporary tree from tcf_em_tree_validate) 3411da177e4SLinus Torvalds * 3421da177e4SLinus Torvalds * This functions replaces the ematch tree in @dst with the ematch 3431da177e4SLinus Torvalds * tree in @src. The classifier in charge of the ematch tree may be 3441da177e4SLinus Torvalds * running. 3451da177e4SLinus Torvalds */ 3461da177e4SLinus Torvalds static inline void tcf_em_tree_change(struct tcf_proto *tp, 3471da177e4SLinus Torvalds struct tcf_ematch_tree *dst, 3481da177e4SLinus Torvalds struct tcf_ematch_tree *src) 3491da177e4SLinus Torvalds { 3501da177e4SLinus Torvalds tcf_tree_lock(tp); 3511da177e4SLinus Torvalds memcpy(dst, src, sizeof(*dst)); 3521da177e4SLinus Torvalds tcf_tree_unlock(tp); 3531da177e4SLinus Torvalds } 3541da177e4SLinus Torvalds 3551da177e4SLinus Torvalds /** 3561da177e4SLinus Torvalds * tcf_em_tree_match - evaulate an ematch tree 3571da177e4SLinus Torvalds * 3581da177e4SLinus Torvalds * @skb: socket buffer of the packet in question 3591da177e4SLinus Torvalds * @tree: ematch tree to be used for evaluation 3601da177e4SLinus Torvalds * @info: packet information examined by classifier 3611da177e4SLinus Torvalds * 3621da177e4SLinus Torvalds * This function matches @skb against the ematch tree in @tree by going 3631da177e4SLinus Torvalds * through all ematches respecting their logic relations returning 3641da177e4SLinus Torvalds * as soon as the result is obvious. 3651da177e4SLinus Torvalds * 3661da177e4SLinus Torvalds * Returns 1 if the ematch tree as-one matches, no ematches are configured 3671da177e4SLinus Torvalds * or ematch is not enabled in the kernel, otherwise 0 is returned. 3681da177e4SLinus Torvalds */ 3691da177e4SLinus Torvalds static inline int tcf_em_tree_match(struct sk_buff *skb, 3701da177e4SLinus Torvalds struct tcf_ematch_tree *tree, 3711da177e4SLinus Torvalds struct tcf_pkt_info *info) 3721da177e4SLinus Torvalds { 3731da177e4SLinus Torvalds if (tree->hdr.nmatches) 3741da177e4SLinus Torvalds return __tcf_em_tree_match(skb, tree, info); 3751da177e4SLinus Torvalds else 3761da177e4SLinus Torvalds return 1; 3771da177e4SLinus Torvalds } 3781da177e4SLinus Torvalds 379db3d99c0SPatrick McHardy #define MODULE_ALIAS_TCF_EMATCH(kind) MODULE_ALIAS("ematch-kind-" __stringify(kind)) 380db3d99c0SPatrick McHardy 3811da177e4SLinus Torvalds #else /* CONFIG_NET_EMATCH */ 3821da177e4SLinus Torvalds 383fd2c3ef7SEric Dumazet struct tcf_ematch_tree { 3841da177e4SLinus Torvalds }; 3851da177e4SLinus Torvalds 3861da177e4SLinus Torvalds #define tcf_em_tree_validate(tp, tb, t) ((void)(t), 0) 38782a470f1SJohn Fastabend #define tcf_em_tree_destroy(t) do { (void)(t); } while(0) 3881da177e4SLinus Torvalds #define tcf_em_tree_dump(skb, t, tlv) (0) 3891da177e4SLinus Torvalds #define tcf_em_tree_change(tp, dst, src) do { } while(0) 3901da177e4SLinus Torvalds #define tcf_em_tree_match(skb, t, info) ((void)(info), 1) 3911da177e4SLinus Torvalds 3921da177e4SLinus Torvalds #endif /* CONFIG_NET_EMATCH */ 3931da177e4SLinus Torvalds 3941da177e4SLinus Torvalds static inline unsigned char * tcf_get_base_ptr(struct sk_buff *skb, int layer) 3951da177e4SLinus Torvalds { 3961da177e4SLinus Torvalds switch (layer) { 3971da177e4SLinus Torvalds case TCF_LAYER_LINK: 3981da177e4SLinus Torvalds return skb->data; 3991da177e4SLinus Torvalds case TCF_LAYER_NETWORK: 400d56f90a7SArnaldo Carvalho de Melo return skb_network_header(skb); 4011da177e4SLinus Torvalds case TCF_LAYER_TRANSPORT: 4029c70220bSArnaldo Carvalho de Melo return skb_transport_header(skb); 4031da177e4SLinus Torvalds } 4041da177e4SLinus Torvalds 4051da177e4SLinus Torvalds return NULL; 4061da177e4SLinus Torvalds } 4071da177e4SLinus Torvalds 408eddc9ec5SArnaldo Carvalho de Melo static inline int tcf_valid_offset(const struct sk_buff *skb, 409eddc9ec5SArnaldo Carvalho de Melo const unsigned char *ptr, const int len) 4101da177e4SLinus Torvalds { 411da521b2cSDavid S. Miller return likely((ptr + len) <= skb_tail_pointer(skb) && 412da521b2cSDavid S. Miller ptr >= skb->head && 413da521b2cSDavid S. Miller (ptr <= (ptr + len))); 4141da177e4SLinus Torvalds } 4151da177e4SLinus Torvalds 4161da177e4SLinus Torvalds #ifdef CONFIG_NET_CLS_IND 4170eeb8ffcSDenis V. Lunev #include <net/net_namespace.h> 4180eeb8ffcSDenis V. Lunev 4191da177e4SLinus Torvalds static inline int 4202519a602SWANG Cong tcf_change_indev(struct net *net, struct nlattr *indev_tlv) 4211da177e4SLinus Torvalds { 4222519a602SWANG Cong char indev[IFNAMSIZ]; 423c01003c2SPatrick McHardy struct net_device *dev; 424c01003c2SPatrick McHardy 4252519a602SWANG Cong if (nla_strlcpy(indev, indev_tlv, IFNAMSIZ) >= IFNAMSIZ) 4262519a602SWANG Cong return -EINVAL; 4272519a602SWANG Cong dev = __dev_get_by_name(net, indev); 4282519a602SWANG Cong if (!dev) 4292519a602SWANG Cong return -ENODEV; 4302519a602SWANG Cong return dev->ifindex; 4311da177e4SLinus Torvalds } 4321da177e4SLinus Torvalds 4332519a602SWANG Cong static inline bool 4342519a602SWANG Cong tcf_match_indev(struct sk_buff *skb, int ifindex) 4352519a602SWANG Cong { 4362519a602SWANG Cong if (!ifindex) 4372519a602SWANG Cong return true; 4382519a602SWANG Cong if (!skb->skb_iif) 4392519a602SWANG Cong return false; 4402519a602SWANG Cong return ifindex == skb->skb_iif; 4411da177e4SLinus Torvalds } 4421da177e4SLinus Torvalds #endif /* CONFIG_NET_CLS_IND */ 4431da177e4SLinus Torvalds 444a1b7c5fdSJohn Fastabend struct tc_cls_u32_knode { 445a1b7c5fdSJohn Fastabend struct tcf_exts *exts; 446e014860eSJohn Fastabend struct tc_u32_sel *sel; 447a1b7c5fdSJohn Fastabend u32 handle; 448a1b7c5fdSJohn Fastabend u32 val; 449a1b7c5fdSJohn Fastabend u32 mask; 450a1b7c5fdSJohn Fastabend u32 link_handle; 451e014860eSJohn Fastabend u8 fshift; 452a1b7c5fdSJohn Fastabend }; 453a1b7c5fdSJohn Fastabend 454a1b7c5fdSJohn Fastabend struct tc_cls_u32_hnode { 455a1b7c5fdSJohn Fastabend u32 handle; 456a1b7c5fdSJohn Fastabend u32 prio; 457a1b7c5fdSJohn Fastabend unsigned int divisor; 458a1b7c5fdSJohn Fastabend }; 459a1b7c5fdSJohn Fastabend 460a1b7c5fdSJohn Fastabend enum tc_clsu32_command { 461a1b7c5fdSJohn Fastabend TC_CLSU32_NEW_KNODE, 462a1b7c5fdSJohn Fastabend TC_CLSU32_REPLACE_KNODE, 463a1b7c5fdSJohn Fastabend TC_CLSU32_DELETE_KNODE, 464a1b7c5fdSJohn Fastabend TC_CLSU32_NEW_HNODE, 465a1b7c5fdSJohn Fastabend TC_CLSU32_REPLACE_HNODE, 466a1b7c5fdSJohn Fastabend TC_CLSU32_DELETE_HNODE, 467a1b7c5fdSJohn Fastabend }; 468a1b7c5fdSJohn Fastabend 469a1b7c5fdSJohn Fastabend struct tc_cls_u32_offload { 470a1b7c5fdSJohn Fastabend /* knode values */ 471a1b7c5fdSJohn Fastabend enum tc_clsu32_command command; 472a1b7c5fdSJohn Fastabend union { 473a1b7c5fdSJohn Fastabend struct tc_cls_u32_knode knode; 474a1b7c5fdSJohn Fastabend struct tc_cls_u32_hnode hnode; 475a1b7c5fdSJohn Fastabend }; 476a1b7c5fdSJohn Fastabend }; 477a1b7c5fdSJohn Fastabend 47855330f05SHadar Hen Zion static inline bool tc_can_offload(const struct net_device *dev, 47955330f05SHadar Hen Zion const struct tcf_proto *tp) 4806843e7a2SJohn Fastabend { 48192c075dbSDaniel Borkmann const struct Qdisc *sch = tp->q; 48292c075dbSDaniel Borkmann const struct Qdisc_class_ops *cops = sch->ops->cl_ops; 48392c075dbSDaniel Borkmann 4842b6ab0d3SJohn Fastabend if (!(dev->features & NETIF_F_HW_TC)) 4852b6ab0d3SJohn Fastabend return false; 4869e8ce79cSJohn Fastabend if (!dev->netdev_ops->ndo_setup_tc) 4879e8ce79cSJohn Fastabend return false; 48892c075dbSDaniel Borkmann if (cops && cops->tcf_cl_offload) 48992c075dbSDaniel Borkmann return cops->tcf_cl_offload(tp->classid); 4909e8ce79cSJohn Fastabend 4919e8ce79cSJohn Fastabend return true; 4926843e7a2SJohn Fastabend } 4936843e7a2SJohn Fastabend 49455330f05SHadar Hen Zion static inline bool tc_skip_hw(u32 flags) 49555330f05SHadar Hen Zion { 49655330f05SHadar Hen Zion return (flags & TCA_CLS_FLAGS_SKIP_HW) ? true : false; 49755330f05SHadar Hen Zion } 49855330f05SHadar Hen Zion 49955330f05SHadar Hen Zion static inline bool tc_should_offload(const struct net_device *dev, 50055330f05SHadar Hen Zion const struct tcf_proto *tp, u32 flags) 50155330f05SHadar Hen Zion { 50255330f05SHadar Hen Zion if (tc_skip_hw(flags)) 50355330f05SHadar Hen Zion return false; 50455330f05SHadar Hen Zion return tc_can_offload(dev, tp); 50555330f05SHadar Hen Zion } 50655330f05SHadar Hen Zion 507d34e3e18SSamudrala, Sridhar static inline bool tc_skip_sw(u32 flags) 508d34e3e18SSamudrala, Sridhar { 509d34e3e18SSamudrala, Sridhar return (flags & TCA_CLS_FLAGS_SKIP_SW) ? true : false; 510d34e3e18SSamudrala, Sridhar } 511d34e3e18SSamudrala, Sridhar 512d34e3e18SSamudrala, Sridhar /* SKIP_HW and SKIP_SW are mutually exclusive flags. */ 513d34e3e18SSamudrala, Sridhar static inline bool tc_flags_valid(u32 flags) 514d34e3e18SSamudrala, Sridhar { 515d34e3e18SSamudrala, Sridhar if (flags & ~(TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW)) 516d34e3e18SSamudrala, Sridhar return false; 517d34e3e18SSamudrala, Sridhar 518d34e3e18SSamudrala, Sridhar if (!(flags ^ (TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW))) 519d34e3e18SSamudrala, Sridhar return false; 520d34e3e18SSamudrala, Sridhar 521d34e3e18SSamudrala, Sridhar return true; 522d34e3e18SSamudrala, Sridhar } 523d34e3e18SSamudrala, Sridhar 524e696028aSOr Gerlitz static inline bool tc_in_hw(u32 flags) 525e696028aSOr Gerlitz { 526e696028aSOr Gerlitz return (flags & TCA_CLS_FLAGS_IN_HW) ? true : false; 527e696028aSOr Gerlitz } 528e696028aSOr Gerlitz 5295b33f488SAmir Vadai enum tc_fl_command { 5305b33f488SAmir Vadai TC_CLSFLOWER_REPLACE, 5315b33f488SAmir Vadai TC_CLSFLOWER_DESTROY, 53210cbc684SAmir Vadai TC_CLSFLOWER_STATS, 5335b33f488SAmir Vadai }; 5345b33f488SAmir Vadai 5355b33f488SAmir Vadai struct tc_cls_flower_offload { 5365b33f488SAmir Vadai enum tc_fl_command command; 53769ca05ceSJiri Pirko u32 prio; 5388208d21bSAmir Vadai unsigned long cookie; 5395b33f488SAmir Vadai struct flow_dissector *dissector; 5405b33f488SAmir Vadai struct fl_flow_key *mask; 5415b33f488SAmir Vadai struct fl_flow_key *key; 5425b33f488SAmir Vadai struct tcf_exts *exts; 5435b33f488SAmir Vadai }; 5445b33f488SAmir Vadai 545b87f7936SYotam Gigi enum tc_matchall_command { 546b87f7936SYotam Gigi TC_CLSMATCHALL_REPLACE, 547b87f7936SYotam Gigi TC_CLSMATCHALL_DESTROY, 548b87f7936SYotam Gigi }; 549b87f7936SYotam Gigi 550b87f7936SYotam Gigi struct tc_cls_matchall_offload { 551b87f7936SYotam Gigi enum tc_matchall_command command; 552b87f7936SYotam Gigi struct tcf_exts *exts; 553b87f7936SYotam Gigi unsigned long cookie; 554b87f7936SYotam Gigi }; 555b87f7936SYotam Gigi 556332ae8e2SJakub Kicinski enum tc_clsbpf_command { 557332ae8e2SJakub Kicinski TC_CLSBPF_ADD, 558332ae8e2SJakub Kicinski TC_CLSBPF_REPLACE, 559332ae8e2SJakub Kicinski TC_CLSBPF_DESTROY, 56068d64063SJakub Kicinski TC_CLSBPF_STATS, 561332ae8e2SJakub Kicinski }; 562332ae8e2SJakub Kicinski 563332ae8e2SJakub Kicinski struct tc_cls_bpf_offload { 564332ae8e2SJakub Kicinski enum tc_clsbpf_command command; 565332ae8e2SJakub Kicinski struct tcf_exts *exts; 566332ae8e2SJakub Kicinski struct bpf_prog *prog; 567332ae8e2SJakub Kicinski const char *name; 568332ae8e2SJakub Kicinski bool exts_integrated; 5690d01d45fSJakub Kicinski u32 gen_flags; 570332ae8e2SJakub Kicinski }; 571332ae8e2SJakub Kicinski 5721045ba77SJamal Hadi Salim 5731045ba77SJamal Hadi Salim /* This structure holds cookie structure that is passed from user 5741045ba77SJamal Hadi Salim * to the kernel for actions and classifiers 5751045ba77SJamal Hadi Salim */ 5761045ba77SJamal Hadi Salim struct tc_cookie { 5771045ba77SJamal Hadi Salim u8 *data; 5781045ba77SJamal Hadi Salim u32 len; 5791045ba77SJamal Hadi Salim }; 5801da177e4SLinus Torvalds #endif 581