xref: /openbmc/linux/include/uapi/linux/pkt_cls.h (revision b830f94f)
1 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
2 #ifndef __LINUX_PKT_CLS_H
3 #define __LINUX_PKT_CLS_H
4 
5 #include <linux/types.h>
6 #include <linux/pkt_sched.h>
7 
8 #define TC_COOKIE_MAX_SIZE 16
9 
10 /* Action attributes */
11 enum {
12 	TCA_ACT_UNSPEC,
13 	TCA_ACT_KIND,
14 	TCA_ACT_OPTIONS,
15 	TCA_ACT_INDEX,
16 	TCA_ACT_STATS,
17 	TCA_ACT_PAD,
18 	TCA_ACT_COOKIE,
19 	__TCA_ACT_MAX
20 };
21 
22 #define TCA_ACT_MAX __TCA_ACT_MAX
23 #define TCA_OLD_COMPAT (TCA_ACT_MAX+1)
24 #define TCA_ACT_MAX_PRIO 32
25 #define TCA_ACT_BIND	1
26 #define TCA_ACT_NOBIND	0
27 #define TCA_ACT_UNBIND	1
28 #define TCA_ACT_NOUNBIND	0
29 #define TCA_ACT_REPLACE		1
30 #define TCA_ACT_NOREPLACE	0
31 
32 #define TC_ACT_UNSPEC	(-1)
33 #define TC_ACT_OK		0
34 #define TC_ACT_RECLASSIFY	1
35 #define TC_ACT_SHOT		2
36 #define TC_ACT_PIPE		3
37 #define TC_ACT_STOLEN		4
38 #define TC_ACT_QUEUED		5
39 #define TC_ACT_REPEAT		6
40 #define TC_ACT_REDIRECT		7
41 #define TC_ACT_TRAP		8 /* For hw path, this means "trap to cpu"
42 				   * and don't further process the frame
43 				   * in hardware. For sw path, this is
44 				   * equivalent of TC_ACT_STOLEN - drop
45 				   * the skb and act like everything
46 				   * is alright.
47 				   */
48 #define TC_ACT_VALUE_MAX	TC_ACT_TRAP
49 
50 /* There is a special kind of actions called "extended actions",
51  * which need a value parameter. These have a local opcode located in
52  * the highest nibble, starting from 1. The rest of the bits
53  * are used to carry the value. These two parts together make
54  * a combined opcode.
55  */
56 #define __TC_ACT_EXT_SHIFT 28
57 #define __TC_ACT_EXT(local) ((local) << __TC_ACT_EXT_SHIFT)
58 #define TC_ACT_EXT_VAL_MASK ((1 << __TC_ACT_EXT_SHIFT) - 1)
59 #define TC_ACT_EXT_OPCODE(combined) ((combined) & (~TC_ACT_EXT_VAL_MASK))
60 #define TC_ACT_EXT_CMP(combined, opcode) (TC_ACT_EXT_OPCODE(combined) == opcode)
61 
62 #define TC_ACT_JUMP __TC_ACT_EXT(1)
63 #define TC_ACT_GOTO_CHAIN __TC_ACT_EXT(2)
64 #define TC_ACT_EXT_OPCODE_MAX	TC_ACT_GOTO_CHAIN
65 
66 /* These macros are put here for binary compatibility with userspace apps that
67  * make use of them. For kernel code and new userspace apps, use the TCA_ID_*
68  * versions.
69  */
70 #define TCA_ACT_GACT 5
71 #define TCA_ACT_IPT 6
72 #define TCA_ACT_PEDIT 7
73 #define TCA_ACT_MIRRED 8
74 #define TCA_ACT_NAT 9
75 #define TCA_ACT_XT 10
76 #define TCA_ACT_SKBEDIT 11
77 #define TCA_ACT_VLAN 12
78 #define TCA_ACT_BPF 13
79 #define TCA_ACT_CONNMARK 14
80 #define TCA_ACT_SKBMOD 15
81 #define TCA_ACT_CSUM 16
82 #define TCA_ACT_TUNNEL_KEY 17
83 #define TCA_ACT_SIMP 22
84 #define TCA_ACT_IFE 25
85 #define TCA_ACT_SAMPLE 26
86 
87 /* Action type identifiers*/
88 enum tca_id {
89 	TCA_ID_UNSPEC = 0,
90 	TCA_ID_POLICE = 1,
91 	TCA_ID_GACT = TCA_ACT_GACT,
92 	TCA_ID_IPT = TCA_ACT_IPT,
93 	TCA_ID_PEDIT = TCA_ACT_PEDIT,
94 	TCA_ID_MIRRED = TCA_ACT_MIRRED,
95 	TCA_ID_NAT = TCA_ACT_NAT,
96 	TCA_ID_XT = TCA_ACT_XT,
97 	TCA_ID_SKBEDIT = TCA_ACT_SKBEDIT,
98 	TCA_ID_VLAN = TCA_ACT_VLAN,
99 	TCA_ID_BPF = TCA_ACT_BPF,
100 	TCA_ID_CONNMARK = TCA_ACT_CONNMARK,
101 	TCA_ID_SKBMOD = TCA_ACT_SKBMOD,
102 	TCA_ID_CSUM = TCA_ACT_CSUM,
103 	TCA_ID_TUNNEL_KEY = TCA_ACT_TUNNEL_KEY,
104 	TCA_ID_SIMP = TCA_ACT_SIMP,
105 	TCA_ID_IFE = TCA_ACT_IFE,
106 	TCA_ID_SAMPLE = TCA_ACT_SAMPLE,
107 	TCA_ID_CTINFO,
108 	TCA_ID_MPLS,
109 	TCA_ID_CT,
110 	/* other actions go here */
111 	__TCA_ID_MAX = 255
112 };
113 
114 #define TCA_ID_MAX __TCA_ID_MAX
115 
116 struct tc_police {
117 	__u32			index;
118 	int			action;
119 #define TC_POLICE_UNSPEC	TC_ACT_UNSPEC
120 #define TC_POLICE_OK		TC_ACT_OK
121 #define TC_POLICE_RECLASSIFY	TC_ACT_RECLASSIFY
122 #define TC_POLICE_SHOT		TC_ACT_SHOT
123 #define TC_POLICE_PIPE		TC_ACT_PIPE
124 
125 	__u32			limit;
126 	__u32			burst;
127 	__u32			mtu;
128 	struct tc_ratespec	rate;
129 	struct tc_ratespec	peakrate;
130 	int			refcnt;
131 	int			bindcnt;
132 	__u32			capab;
133 };
134 
135 struct tcf_t {
136 	__u64   install;
137 	__u64   lastuse;
138 	__u64   expires;
139 	__u64   firstuse;
140 };
141 
142 struct tc_cnt {
143 	int                   refcnt;
144 	int                   bindcnt;
145 };
146 
147 #define tc_gen \
148 	__u32                 index; \
149 	__u32                 capab; \
150 	int                   action; \
151 	int                   refcnt; \
152 	int                   bindcnt
153 
154 enum {
155 	TCA_POLICE_UNSPEC,
156 	TCA_POLICE_TBF,
157 	TCA_POLICE_RATE,
158 	TCA_POLICE_PEAKRATE,
159 	TCA_POLICE_AVRATE,
160 	TCA_POLICE_RESULT,
161 	TCA_POLICE_TM,
162 	TCA_POLICE_PAD,
163 	__TCA_POLICE_MAX
164 #define TCA_POLICE_RESULT TCA_POLICE_RESULT
165 };
166 
167 #define TCA_POLICE_MAX (__TCA_POLICE_MAX - 1)
168 
169 /* tca flags definitions */
170 #define TCA_CLS_FLAGS_SKIP_HW	(1 << 0) /* don't offload filter to HW */
171 #define TCA_CLS_FLAGS_SKIP_SW	(1 << 1) /* don't use filter in SW */
172 #define TCA_CLS_FLAGS_IN_HW	(1 << 2) /* filter is offloaded to HW */
173 #define TCA_CLS_FLAGS_NOT_IN_HW (1 << 3) /* filter isn't offloaded to HW */
174 #define TCA_CLS_FLAGS_VERBOSE	(1 << 4) /* verbose logging */
175 
176 /* U32 filters */
177 
178 #define TC_U32_HTID(h) ((h)&0xFFF00000)
179 #define TC_U32_USERHTID(h) (TC_U32_HTID(h)>>20)
180 #define TC_U32_HASH(h) (((h)>>12)&0xFF)
181 #define TC_U32_NODE(h) ((h)&0xFFF)
182 #define TC_U32_KEY(h) ((h)&0xFFFFF)
183 #define TC_U32_UNSPEC	0
184 #define TC_U32_ROOT	(0xFFF00000)
185 
186 enum {
187 	TCA_U32_UNSPEC,
188 	TCA_U32_CLASSID,
189 	TCA_U32_HASH,
190 	TCA_U32_LINK,
191 	TCA_U32_DIVISOR,
192 	TCA_U32_SEL,
193 	TCA_U32_POLICE,
194 	TCA_U32_ACT,
195 	TCA_U32_INDEV,
196 	TCA_U32_PCNT,
197 	TCA_U32_MARK,
198 	TCA_U32_FLAGS,
199 	TCA_U32_PAD,
200 	__TCA_U32_MAX
201 };
202 
203 #define TCA_U32_MAX (__TCA_U32_MAX - 1)
204 
205 struct tc_u32_key {
206 	__be32		mask;
207 	__be32		val;
208 	int		off;
209 	int		offmask;
210 };
211 
212 struct tc_u32_sel {
213 	unsigned char		flags;
214 	unsigned char		offshift;
215 	unsigned char		nkeys;
216 
217 	__be16			offmask;
218 	__u16			off;
219 	short			offoff;
220 
221 	short			hoff;
222 	__be32			hmask;
223 	struct tc_u32_key	keys[0];
224 };
225 
226 struct tc_u32_mark {
227 	__u32		val;
228 	__u32		mask;
229 	__u32		success;
230 };
231 
232 struct tc_u32_pcnt {
233 	__u64 rcnt;
234 	__u64 rhit;
235 	__u64 kcnts[0];
236 };
237 
238 /* Flags */
239 
240 #define TC_U32_TERMINAL		1
241 #define TC_U32_OFFSET		2
242 #define TC_U32_VAROFFSET	4
243 #define TC_U32_EAT		8
244 
245 #define TC_U32_MAXDEPTH 8
246 
247 
248 /* RSVP filter */
249 
250 enum {
251 	TCA_RSVP_UNSPEC,
252 	TCA_RSVP_CLASSID,
253 	TCA_RSVP_DST,
254 	TCA_RSVP_SRC,
255 	TCA_RSVP_PINFO,
256 	TCA_RSVP_POLICE,
257 	TCA_RSVP_ACT,
258 	__TCA_RSVP_MAX
259 };
260 
261 #define TCA_RSVP_MAX (__TCA_RSVP_MAX - 1 )
262 
263 struct tc_rsvp_gpi {
264 	__u32	key;
265 	__u32	mask;
266 	int	offset;
267 };
268 
269 struct tc_rsvp_pinfo {
270 	struct tc_rsvp_gpi dpi;
271 	struct tc_rsvp_gpi spi;
272 	__u8	protocol;
273 	__u8	tunnelid;
274 	__u8	tunnelhdr;
275 	__u8	pad;
276 };
277 
278 /* ROUTE filter */
279 
280 enum {
281 	TCA_ROUTE4_UNSPEC,
282 	TCA_ROUTE4_CLASSID,
283 	TCA_ROUTE4_TO,
284 	TCA_ROUTE4_FROM,
285 	TCA_ROUTE4_IIF,
286 	TCA_ROUTE4_POLICE,
287 	TCA_ROUTE4_ACT,
288 	__TCA_ROUTE4_MAX
289 };
290 
291 #define TCA_ROUTE4_MAX (__TCA_ROUTE4_MAX - 1)
292 
293 
294 /* FW filter */
295 
296 enum {
297 	TCA_FW_UNSPEC,
298 	TCA_FW_CLASSID,
299 	TCA_FW_POLICE,
300 	TCA_FW_INDEV,
301 	TCA_FW_ACT, /* used by CONFIG_NET_CLS_ACT */
302 	TCA_FW_MASK,
303 	__TCA_FW_MAX
304 };
305 
306 #define TCA_FW_MAX (__TCA_FW_MAX - 1)
307 
308 /* TC index filter */
309 
310 enum {
311 	TCA_TCINDEX_UNSPEC,
312 	TCA_TCINDEX_HASH,
313 	TCA_TCINDEX_MASK,
314 	TCA_TCINDEX_SHIFT,
315 	TCA_TCINDEX_FALL_THROUGH,
316 	TCA_TCINDEX_CLASSID,
317 	TCA_TCINDEX_POLICE,
318 	TCA_TCINDEX_ACT,
319 	__TCA_TCINDEX_MAX
320 };
321 
322 #define TCA_TCINDEX_MAX     (__TCA_TCINDEX_MAX - 1)
323 
324 /* Flow filter */
325 
326 enum {
327 	FLOW_KEY_SRC,
328 	FLOW_KEY_DST,
329 	FLOW_KEY_PROTO,
330 	FLOW_KEY_PROTO_SRC,
331 	FLOW_KEY_PROTO_DST,
332 	FLOW_KEY_IIF,
333 	FLOW_KEY_PRIORITY,
334 	FLOW_KEY_MARK,
335 	FLOW_KEY_NFCT,
336 	FLOW_KEY_NFCT_SRC,
337 	FLOW_KEY_NFCT_DST,
338 	FLOW_KEY_NFCT_PROTO_SRC,
339 	FLOW_KEY_NFCT_PROTO_DST,
340 	FLOW_KEY_RTCLASSID,
341 	FLOW_KEY_SKUID,
342 	FLOW_KEY_SKGID,
343 	FLOW_KEY_VLAN_TAG,
344 	FLOW_KEY_RXHASH,
345 	__FLOW_KEY_MAX,
346 };
347 
348 #define FLOW_KEY_MAX	(__FLOW_KEY_MAX - 1)
349 
350 enum {
351 	FLOW_MODE_MAP,
352 	FLOW_MODE_HASH,
353 };
354 
355 enum {
356 	TCA_FLOW_UNSPEC,
357 	TCA_FLOW_KEYS,
358 	TCA_FLOW_MODE,
359 	TCA_FLOW_BASECLASS,
360 	TCA_FLOW_RSHIFT,
361 	TCA_FLOW_ADDEND,
362 	TCA_FLOW_MASK,
363 	TCA_FLOW_XOR,
364 	TCA_FLOW_DIVISOR,
365 	TCA_FLOW_ACT,
366 	TCA_FLOW_POLICE,
367 	TCA_FLOW_EMATCHES,
368 	TCA_FLOW_PERTURB,
369 	__TCA_FLOW_MAX
370 };
371 
372 #define TCA_FLOW_MAX	(__TCA_FLOW_MAX - 1)
373 
374 /* Basic filter */
375 
376 struct tc_basic_pcnt {
377 	__u64 rcnt;
378 	__u64 rhit;
379 };
380 
381 enum {
382 	TCA_BASIC_UNSPEC,
383 	TCA_BASIC_CLASSID,
384 	TCA_BASIC_EMATCHES,
385 	TCA_BASIC_ACT,
386 	TCA_BASIC_POLICE,
387 	TCA_BASIC_PCNT,
388 	TCA_BASIC_PAD,
389 	__TCA_BASIC_MAX
390 };
391 
392 #define TCA_BASIC_MAX (__TCA_BASIC_MAX - 1)
393 
394 
395 /* Cgroup classifier */
396 
397 enum {
398 	TCA_CGROUP_UNSPEC,
399 	TCA_CGROUP_ACT,
400 	TCA_CGROUP_POLICE,
401 	TCA_CGROUP_EMATCHES,
402 	__TCA_CGROUP_MAX,
403 };
404 
405 #define TCA_CGROUP_MAX (__TCA_CGROUP_MAX - 1)
406 
407 /* BPF classifier */
408 
409 #define TCA_BPF_FLAG_ACT_DIRECT		(1 << 0)
410 
411 enum {
412 	TCA_BPF_UNSPEC,
413 	TCA_BPF_ACT,
414 	TCA_BPF_POLICE,
415 	TCA_BPF_CLASSID,
416 	TCA_BPF_OPS_LEN,
417 	TCA_BPF_OPS,
418 	TCA_BPF_FD,
419 	TCA_BPF_NAME,
420 	TCA_BPF_FLAGS,
421 	TCA_BPF_FLAGS_GEN,
422 	TCA_BPF_TAG,
423 	TCA_BPF_ID,
424 	__TCA_BPF_MAX,
425 };
426 
427 #define TCA_BPF_MAX (__TCA_BPF_MAX - 1)
428 
429 /* Flower classifier */
430 
431 enum {
432 	TCA_FLOWER_UNSPEC,
433 	TCA_FLOWER_CLASSID,
434 	TCA_FLOWER_INDEV,
435 	TCA_FLOWER_ACT,
436 	TCA_FLOWER_KEY_ETH_DST,		/* ETH_ALEN */
437 	TCA_FLOWER_KEY_ETH_DST_MASK,	/* ETH_ALEN */
438 	TCA_FLOWER_KEY_ETH_SRC,		/* ETH_ALEN */
439 	TCA_FLOWER_KEY_ETH_SRC_MASK,	/* ETH_ALEN */
440 	TCA_FLOWER_KEY_ETH_TYPE,	/* be16 */
441 	TCA_FLOWER_KEY_IP_PROTO,	/* u8 */
442 	TCA_FLOWER_KEY_IPV4_SRC,	/* be32 */
443 	TCA_FLOWER_KEY_IPV4_SRC_MASK,	/* be32 */
444 	TCA_FLOWER_KEY_IPV4_DST,	/* be32 */
445 	TCA_FLOWER_KEY_IPV4_DST_MASK,	/* be32 */
446 	TCA_FLOWER_KEY_IPV6_SRC,	/* struct in6_addr */
447 	TCA_FLOWER_KEY_IPV6_SRC_MASK,	/* struct in6_addr */
448 	TCA_FLOWER_KEY_IPV6_DST,	/* struct in6_addr */
449 	TCA_FLOWER_KEY_IPV6_DST_MASK,	/* struct in6_addr */
450 	TCA_FLOWER_KEY_TCP_SRC,		/* be16 */
451 	TCA_FLOWER_KEY_TCP_DST,		/* be16 */
452 	TCA_FLOWER_KEY_UDP_SRC,		/* be16 */
453 	TCA_FLOWER_KEY_UDP_DST,		/* be16 */
454 
455 	TCA_FLOWER_FLAGS,
456 	TCA_FLOWER_KEY_VLAN_ID,		/* be16 */
457 	TCA_FLOWER_KEY_VLAN_PRIO,	/* u8   */
458 	TCA_FLOWER_KEY_VLAN_ETH_TYPE,	/* be16 */
459 
460 	TCA_FLOWER_KEY_ENC_KEY_ID,	/* be32 */
461 	TCA_FLOWER_KEY_ENC_IPV4_SRC,	/* be32 */
462 	TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK,/* be32 */
463 	TCA_FLOWER_KEY_ENC_IPV4_DST,	/* be32 */
464 	TCA_FLOWER_KEY_ENC_IPV4_DST_MASK,/* be32 */
465 	TCA_FLOWER_KEY_ENC_IPV6_SRC,	/* struct in6_addr */
466 	TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK,/* struct in6_addr */
467 	TCA_FLOWER_KEY_ENC_IPV6_DST,	/* struct in6_addr */
468 	TCA_FLOWER_KEY_ENC_IPV6_DST_MASK,/* struct in6_addr */
469 
470 	TCA_FLOWER_KEY_TCP_SRC_MASK,	/* be16 */
471 	TCA_FLOWER_KEY_TCP_DST_MASK,	/* be16 */
472 	TCA_FLOWER_KEY_UDP_SRC_MASK,	/* be16 */
473 	TCA_FLOWER_KEY_UDP_DST_MASK,	/* be16 */
474 	TCA_FLOWER_KEY_SCTP_SRC_MASK,	/* be16 */
475 	TCA_FLOWER_KEY_SCTP_DST_MASK,	/* be16 */
476 
477 	TCA_FLOWER_KEY_SCTP_SRC,	/* be16 */
478 	TCA_FLOWER_KEY_SCTP_DST,	/* be16 */
479 
480 	TCA_FLOWER_KEY_ENC_UDP_SRC_PORT,	/* be16 */
481 	TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK,	/* be16 */
482 	TCA_FLOWER_KEY_ENC_UDP_DST_PORT,	/* be16 */
483 	TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK,	/* be16 */
484 
485 	TCA_FLOWER_KEY_FLAGS,		/* be32 */
486 	TCA_FLOWER_KEY_FLAGS_MASK,	/* be32 */
487 
488 	TCA_FLOWER_KEY_ICMPV4_CODE,	/* u8 */
489 	TCA_FLOWER_KEY_ICMPV4_CODE_MASK,/* u8 */
490 	TCA_FLOWER_KEY_ICMPV4_TYPE,	/* u8 */
491 	TCA_FLOWER_KEY_ICMPV4_TYPE_MASK,/* u8 */
492 	TCA_FLOWER_KEY_ICMPV6_CODE,	/* u8 */
493 	TCA_FLOWER_KEY_ICMPV6_CODE_MASK,/* u8 */
494 	TCA_FLOWER_KEY_ICMPV6_TYPE,	/* u8 */
495 	TCA_FLOWER_KEY_ICMPV6_TYPE_MASK,/* u8 */
496 
497 	TCA_FLOWER_KEY_ARP_SIP,		/* be32 */
498 	TCA_FLOWER_KEY_ARP_SIP_MASK,	/* be32 */
499 	TCA_FLOWER_KEY_ARP_TIP,		/* be32 */
500 	TCA_FLOWER_KEY_ARP_TIP_MASK,	/* be32 */
501 	TCA_FLOWER_KEY_ARP_OP,		/* u8 */
502 	TCA_FLOWER_KEY_ARP_OP_MASK,	/* u8 */
503 	TCA_FLOWER_KEY_ARP_SHA,		/* ETH_ALEN */
504 	TCA_FLOWER_KEY_ARP_SHA_MASK,	/* ETH_ALEN */
505 	TCA_FLOWER_KEY_ARP_THA,		/* ETH_ALEN */
506 	TCA_FLOWER_KEY_ARP_THA_MASK,	/* ETH_ALEN */
507 
508 	TCA_FLOWER_KEY_MPLS_TTL,	/* u8 - 8 bits */
509 	TCA_FLOWER_KEY_MPLS_BOS,	/* u8 - 1 bit */
510 	TCA_FLOWER_KEY_MPLS_TC,		/* u8 - 3 bits */
511 	TCA_FLOWER_KEY_MPLS_LABEL,	/* be32 - 20 bits */
512 
513 	TCA_FLOWER_KEY_TCP_FLAGS,	/* be16 */
514 	TCA_FLOWER_KEY_TCP_FLAGS_MASK,	/* be16 */
515 
516 	TCA_FLOWER_KEY_IP_TOS,		/* u8 */
517 	TCA_FLOWER_KEY_IP_TOS_MASK,	/* u8 */
518 	TCA_FLOWER_KEY_IP_TTL,		/* u8 */
519 	TCA_FLOWER_KEY_IP_TTL_MASK,	/* u8 */
520 
521 	TCA_FLOWER_KEY_CVLAN_ID,	/* be16 */
522 	TCA_FLOWER_KEY_CVLAN_PRIO,	/* u8   */
523 	TCA_FLOWER_KEY_CVLAN_ETH_TYPE,	/* be16 */
524 
525 	TCA_FLOWER_KEY_ENC_IP_TOS,	/* u8 */
526 	TCA_FLOWER_KEY_ENC_IP_TOS_MASK,	/* u8 */
527 	TCA_FLOWER_KEY_ENC_IP_TTL,	/* u8 */
528 	TCA_FLOWER_KEY_ENC_IP_TTL_MASK,	/* u8 */
529 
530 	TCA_FLOWER_KEY_ENC_OPTS,
531 	TCA_FLOWER_KEY_ENC_OPTS_MASK,
532 
533 	TCA_FLOWER_IN_HW_COUNT,
534 
535 	TCA_FLOWER_KEY_PORT_SRC_MIN,	/* be16 */
536 	TCA_FLOWER_KEY_PORT_SRC_MAX,	/* be16 */
537 	TCA_FLOWER_KEY_PORT_DST_MIN,	/* be16 */
538 	TCA_FLOWER_KEY_PORT_DST_MAX,	/* be16 */
539 
540 	TCA_FLOWER_KEY_CT_STATE,	/* u16 */
541 	TCA_FLOWER_KEY_CT_STATE_MASK,	/* u16 */
542 	TCA_FLOWER_KEY_CT_ZONE,		/* u16 */
543 	TCA_FLOWER_KEY_CT_ZONE_MASK,	/* u16 */
544 	TCA_FLOWER_KEY_CT_MARK,		/* u32 */
545 	TCA_FLOWER_KEY_CT_MARK_MASK,	/* u32 */
546 	TCA_FLOWER_KEY_CT_LABELS,	/* u128 */
547 	TCA_FLOWER_KEY_CT_LABELS_MASK,	/* u128 */
548 
549 	__TCA_FLOWER_MAX,
550 };
551 
552 #define TCA_FLOWER_MAX (__TCA_FLOWER_MAX - 1)
553 
554 enum {
555 	TCA_FLOWER_KEY_CT_FLAGS_NEW = 1 << 0, /* Beginning of a new connection. */
556 	TCA_FLOWER_KEY_CT_FLAGS_ESTABLISHED = 1 << 1, /* Part of an existing connection. */
557 	TCA_FLOWER_KEY_CT_FLAGS_RELATED = 1 << 2, /* Related to an established connection. */
558 	TCA_FLOWER_KEY_CT_FLAGS_TRACKED = 1 << 3, /* Conntrack has occurred. */
559 };
560 
561 enum {
562 	TCA_FLOWER_KEY_ENC_OPTS_UNSPEC,
563 	TCA_FLOWER_KEY_ENC_OPTS_GENEVE, /* Nested
564 					 * TCA_FLOWER_KEY_ENC_OPT_GENEVE_
565 					 * attributes
566 					 */
567 	__TCA_FLOWER_KEY_ENC_OPTS_MAX,
568 };
569 
570 #define TCA_FLOWER_KEY_ENC_OPTS_MAX (__TCA_FLOWER_KEY_ENC_OPTS_MAX - 1)
571 
572 enum {
573 	TCA_FLOWER_KEY_ENC_OPT_GENEVE_UNSPEC,
574 	TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS,            /* u16 */
575 	TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE,             /* u8 */
576 	TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA,             /* 4 to 128 bytes */
577 
578 	__TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX,
579 };
580 
581 #define TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX \
582 		(__TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX - 1)
583 
584 enum {
585 	TCA_FLOWER_KEY_FLAGS_IS_FRAGMENT = (1 << 0),
586 	TCA_FLOWER_KEY_FLAGS_FRAG_IS_FIRST = (1 << 1),
587 };
588 
589 #define TCA_FLOWER_MASK_FLAGS_RANGE	(1 << 0) /* Range-based match */
590 
591 /* Match-all classifier */
592 
593 struct tc_matchall_pcnt {
594 	__u64 rhit;
595 };
596 
597 enum {
598 	TCA_MATCHALL_UNSPEC,
599 	TCA_MATCHALL_CLASSID,
600 	TCA_MATCHALL_ACT,
601 	TCA_MATCHALL_FLAGS,
602 	TCA_MATCHALL_PCNT,
603 	TCA_MATCHALL_PAD,
604 	__TCA_MATCHALL_MAX,
605 };
606 
607 #define TCA_MATCHALL_MAX (__TCA_MATCHALL_MAX - 1)
608 
609 /* Extended Matches */
610 
611 struct tcf_ematch_tree_hdr {
612 	__u16		nmatches;
613 	__u16		progid;
614 };
615 
616 enum {
617 	TCA_EMATCH_TREE_UNSPEC,
618 	TCA_EMATCH_TREE_HDR,
619 	TCA_EMATCH_TREE_LIST,
620 	__TCA_EMATCH_TREE_MAX
621 };
622 #define TCA_EMATCH_TREE_MAX (__TCA_EMATCH_TREE_MAX - 1)
623 
624 struct tcf_ematch_hdr {
625 	__u16		matchid;
626 	__u16		kind;
627 	__u16		flags;
628 	__u16		pad; /* currently unused */
629 };
630 
631 /*  0                   1
632  *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
633  * +-----------------------+-+-+---+
634  * |         Unused        |S|I| R |
635  * +-----------------------+-+-+---+
636  *
637  * R(2) ::= relation to next ematch
638  *          where: 0 0 END (last ematch)
639  *                 0 1 AND
640  *                 1 0 OR
641  *                 1 1 Unused (invalid)
642  * I(1) ::= invert result
643  * S(1) ::= simple payload
644  */
645 #define TCF_EM_REL_END	0
646 #define TCF_EM_REL_AND	(1<<0)
647 #define TCF_EM_REL_OR	(1<<1)
648 #define TCF_EM_INVERT	(1<<2)
649 #define TCF_EM_SIMPLE	(1<<3)
650 
651 #define TCF_EM_REL_MASK	3
652 #define TCF_EM_REL_VALID(v) (((v) & TCF_EM_REL_MASK) != TCF_EM_REL_MASK)
653 
654 enum {
655 	TCF_LAYER_LINK,
656 	TCF_LAYER_NETWORK,
657 	TCF_LAYER_TRANSPORT,
658 	__TCF_LAYER_MAX
659 };
660 #define TCF_LAYER_MAX (__TCF_LAYER_MAX - 1)
661 
662 /* Ematch type assignments
663  *   1..32767		Reserved for ematches inside kernel tree
664  *   32768..65535	Free to use, not reliable
665  */
666 #define	TCF_EM_CONTAINER	0
667 #define	TCF_EM_CMP		1
668 #define	TCF_EM_NBYTE		2
669 #define	TCF_EM_U32		3
670 #define	TCF_EM_META		4
671 #define	TCF_EM_TEXT		5
672 #define	TCF_EM_VLAN		6
673 #define	TCF_EM_CANID		7
674 #define	TCF_EM_IPSET		8
675 #define	TCF_EM_IPT		9
676 #define	TCF_EM_MAX		9
677 
678 enum {
679 	TCF_EM_PROG_TC
680 };
681 
682 enum {
683 	TCF_EM_OPND_EQ,
684 	TCF_EM_OPND_GT,
685 	TCF_EM_OPND_LT
686 };
687 
688 #endif
689