1 /* SPDX-License-Identifier: GPL-2.0-only */ 2 /* 3 * Copyright (c) 2015 Nicira, Inc. 4 */ 5 6 #ifndef OVS_CONNTRACK_H 7 #define OVS_CONNTRACK_H 1 8 9 #include "flow.h" 10 11 struct ovs_conntrack_info; 12 struct ovs_ct_limit_info; 13 enum ovs_key_attr; 14 15 #if IS_ENABLED(CONFIG_NF_CONNTRACK) 16 int ovs_ct_init(struct net *); 17 void ovs_ct_exit(struct net *); 18 bool ovs_ct_verify(struct net *, enum ovs_key_attr attr); 19 int ovs_ct_copy_action(struct net *, const struct nlattr *, 20 const struct sw_flow_key *, struct sw_flow_actions **, 21 bool log); 22 int ovs_ct_action_to_attr(const struct ovs_conntrack_info *, struct sk_buff *); 23 24 int ovs_ct_execute(struct net *, struct sk_buff *, struct sw_flow_key *, 25 const struct ovs_conntrack_info *); 26 int ovs_ct_clear(struct sk_buff *skb, struct sw_flow_key *key); 27 28 void ovs_ct_fill_key(const struct sk_buff *skb, struct sw_flow_key *key, 29 bool post_ct); 30 int ovs_ct_put_key(const struct sw_flow_key *swkey, 31 const struct sw_flow_key *output, struct sk_buff *skb); 32 void ovs_ct_free_action(const struct nlattr *a); 33 34 #define CT_SUPPORTED_MASK (OVS_CS_F_NEW | OVS_CS_F_ESTABLISHED | \ 35 OVS_CS_F_RELATED | OVS_CS_F_REPLY_DIR | \ 36 OVS_CS_F_INVALID | OVS_CS_F_TRACKED | \ 37 OVS_CS_F_SRC_NAT | OVS_CS_F_DST_NAT) 38 #else 39 #include <linux/errno.h> 40 41 static inline int ovs_ct_init(struct net *net) { return 0; } 42 43 static inline void ovs_ct_exit(struct net *net) { } 44 45 static inline bool ovs_ct_verify(struct net *net, int attr) 46 { 47 return false; 48 } 49 50 static inline int ovs_ct_copy_action(struct net *net, const struct nlattr *nla, 51 const struct sw_flow_key *key, 52 struct sw_flow_actions **acts, bool log) 53 { 54 return -ENOTSUPP; 55 } 56 57 static inline int ovs_ct_action_to_attr(const struct ovs_conntrack_info *info, 58 struct sk_buff *skb) 59 { 60 return -ENOTSUPP; 61 } 62 63 static inline int ovs_ct_execute(struct net *net, struct sk_buff *skb, 64 struct sw_flow_key *key, 65 const struct ovs_conntrack_info *info) 66 { 67 kfree_skb(skb); 68 return -ENOTSUPP; 69 } 70 71 static inline int ovs_ct_clear(struct sk_buff *skb, 72 struct sw_flow_key *key) 73 { 74 return -ENOTSUPP; 75 } 76 77 static inline void ovs_ct_fill_key(const struct sk_buff *skb, 78 struct sw_flow_key *key, 79 bool post_ct) 80 { 81 key->ct_state = 0; 82 key->ct_zone = 0; 83 key->ct.mark = 0; 84 memset(&key->ct.labels, 0, sizeof(key->ct.labels)); 85 /* Clear 'ct_orig_proto' to mark the non-existence of original 86 * direction key fields. 87 */ 88 key->ct_orig_proto = 0; 89 } 90 91 static inline int ovs_ct_put_key(const struct sw_flow_key *swkey, 92 const struct sw_flow_key *output, 93 struct sk_buff *skb) 94 { 95 return 0; 96 } 97 98 static inline void ovs_ct_free_action(const struct nlattr *a) { } 99 100 #define CT_SUPPORTED_MASK 0 101 #endif /* CONFIG_NF_CONNTRACK */ 102 103 #if IS_ENABLED(CONFIG_NETFILTER_CONNCOUNT) 104 extern struct genl_family dp_ct_limit_genl_family; 105 #endif 106 #endif /* ovs_conntrack.h */ 107