1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * Copyright (c) 2017 Nicira, Inc. 4 */ 5 6 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt 7 8 #include <linux/if.h> 9 #include <linux/skbuff.h> 10 #include <linux/ip.h> 11 #include <linux/kernel.h> 12 #include <linux/openvswitch.h> 13 #include <linux/netlink.h> 14 #include <linux/rculist.h> 15 16 #include <net/netlink.h> 17 #include <net/genetlink.h> 18 19 #include "datapath.h" 20 #include "meter.h" 21 22 static const struct nla_policy meter_policy[OVS_METER_ATTR_MAX + 1] = { 23 [OVS_METER_ATTR_ID] = { .type = NLA_U32, }, 24 [OVS_METER_ATTR_KBPS] = { .type = NLA_FLAG }, 25 [OVS_METER_ATTR_STATS] = { .len = sizeof(struct ovs_flow_stats) }, 26 [OVS_METER_ATTR_BANDS] = { .type = NLA_NESTED }, 27 [OVS_METER_ATTR_USED] = { .type = NLA_U64 }, 28 [OVS_METER_ATTR_CLEAR] = { .type = NLA_FLAG }, 29 [OVS_METER_ATTR_MAX_METERS] = { .type = NLA_U32 }, 30 [OVS_METER_ATTR_MAX_BANDS] = { .type = NLA_U32 }, 31 }; 32 33 static const struct nla_policy band_policy[OVS_BAND_ATTR_MAX + 1] = { 34 [OVS_BAND_ATTR_TYPE] = { .type = NLA_U32, }, 35 [OVS_BAND_ATTR_RATE] = { .type = NLA_U32, }, 36 [OVS_BAND_ATTR_BURST] = { .type = NLA_U32, }, 37 [OVS_BAND_ATTR_STATS] = { .len = sizeof(struct ovs_flow_stats) }, 38 }; 39 40 static u32 meter_hash(struct dp_meter_instance *ti, u32 id) 41 { 42 return id % ti->n_meters; 43 } 44 45 static void ovs_meter_free(struct dp_meter *meter) 46 { 47 if (!meter) 48 return; 49 50 kfree_rcu(meter, rcu); 51 } 52 53 /* Call with ovs_mutex or RCU read lock. */ 54 static struct dp_meter *lookup_meter(const struct dp_meter_table *tbl, 55 u32 meter_id) 56 { 57 struct dp_meter_instance *ti = rcu_dereference_ovsl(tbl->ti); 58 u32 hash = meter_hash(ti, meter_id); 59 struct dp_meter *meter; 60 61 meter = rcu_dereference_ovsl(ti->dp_meters[hash]); 62 if (meter && likely(meter->id == meter_id)) 63 return meter; 64 65 return NULL; 66 } 67 68 static struct dp_meter_instance *dp_meter_instance_alloc(const u32 size) 69 { 70 struct dp_meter_instance *ti; 71 72 ti = kvzalloc(sizeof(*ti) + 73 sizeof(struct dp_meter *) * size, 74 GFP_KERNEL); 75 if (!ti) 76 return NULL; 77 78 ti->n_meters = size; 79 80 return ti; 81 } 82 83 static void dp_meter_instance_free(struct dp_meter_instance *ti) 84 { 85 kvfree(ti); 86 } 87 88 static void dp_meter_instance_free_rcu(struct rcu_head *rcu) 89 { 90 struct dp_meter_instance *ti; 91 92 ti = container_of(rcu, struct dp_meter_instance, rcu); 93 kvfree(ti); 94 } 95 96 static int 97 dp_meter_instance_realloc(struct dp_meter_table *tbl, u32 size) 98 { 99 struct dp_meter_instance *ti = rcu_dereference_ovsl(tbl->ti); 100 int n_meters = min(size, ti->n_meters); 101 struct dp_meter_instance *new_ti; 102 int i; 103 104 new_ti = dp_meter_instance_alloc(size); 105 if (!new_ti) 106 return -ENOMEM; 107 108 for (i = 0; i < n_meters; i++) 109 if (rcu_dereference_ovsl(ti->dp_meters[i])) 110 new_ti->dp_meters[i] = ti->dp_meters[i]; 111 112 rcu_assign_pointer(tbl->ti, new_ti); 113 call_rcu(&ti->rcu, dp_meter_instance_free_rcu); 114 115 return 0; 116 } 117 118 static void dp_meter_instance_insert(struct dp_meter_instance *ti, 119 struct dp_meter *meter) 120 { 121 u32 hash; 122 123 hash = meter_hash(ti, meter->id); 124 rcu_assign_pointer(ti->dp_meters[hash], meter); 125 } 126 127 static void dp_meter_instance_remove(struct dp_meter_instance *ti, 128 struct dp_meter *meter) 129 { 130 u32 hash; 131 132 hash = meter_hash(ti, meter->id); 133 RCU_INIT_POINTER(ti->dp_meters[hash], NULL); 134 } 135 136 static int attach_meter(struct dp_meter_table *tbl, struct dp_meter *meter) 137 { 138 struct dp_meter_instance *ti = rcu_dereference_ovsl(tbl->ti); 139 u32 hash = meter_hash(ti, meter->id); 140 int err; 141 142 /* In generally, slots selected should be empty, because 143 * OvS uses id-pool to fetch a available id. 144 */ 145 if (unlikely(rcu_dereference_ovsl(ti->dp_meters[hash]))) 146 return -EBUSY; 147 148 dp_meter_instance_insert(ti, meter); 149 150 /* That function is thread-safe. */ 151 tbl->count++; 152 if (tbl->count >= tbl->max_meters_allowed) { 153 err = -EFBIG; 154 goto attach_err; 155 } 156 157 if (tbl->count >= ti->n_meters && 158 dp_meter_instance_realloc(tbl, ti->n_meters * 2)) { 159 err = -ENOMEM; 160 goto attach_err; 161 } 162 163 return 0; 164 165 attach_err: 166 dp_meter_instance_remove(ti, meter); 167 tbl->count--; 168 return err; 169 } 170 171 static int detach_meter(struct dp_meter_table *tbl, struct dp_meter *meter) 172 { 173 struct dp_meter_instance *ti; 174 175 ASSERT_OVSL(); 176 if (!meter) 177 return 0; 178 179 ti = rcu_dereference_ovsl(tbl->ti); 180 dp_meter_instance_remove(ti, meter); 181 182 tbl->count--; 183 184 /* Shrink the meter array if necessary. */ 185 if (ti->n_meters > DP_METER_ARRAY_SIZE_MIN && 186 tbl->count <= (ti->n_meters / 4)) { 187 int half_size = ti->n_meters / 2; 188 int i; 189 190 /* Avoid hash collision, don't move slots to other place. 191 * Make sure there are no references of meters in array 192 * which will be released. 193 */ 194 for (i = half_size; i < ti->n_meters; i++) 195 if (rcu_dereference_ovsl(ti->dp_meters[i])) 196 goto out; 197 198 if (dp_meter_instance_realloc(tbl, half_size)) 199 goto shrink_err; 200 } 201 202 out: 203 return 0; 204 205 shrink_err: 206 dp_meter_instance_insert(ti, meter); 207 tbl->count++; 208 return -ENOMEM; 209 } 210 211 static struct sk_buff * 212 ovs_meter_cmd_reply_start(struct genl_info *info, u8 cmd, 213 struct ovs_header **ovs_reply_header) 214 { 215 struct sk_buff *skb; 216 struct ovs_header *ovs_header = info->userhdr; 217 218 skb = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC); 219 if (!skb) 220 return ERR_PTR(-ENOMEM); 221 222 *ovs_reply_header = genlmsg_put(skb, info->snd_portid, 223 info->snd_seq, 224 &dp_meter_genl_family, 0, cmd); 225 if (!*ovs_reply_header) { 226 nlmsg_free(skb); 227 return ERR_PTR(-EMSGSIZE); 228 } 229 (*ovs_reply_header)->dp_ifindex = ovs_header->dp_ifindex; 230 231 return skb; 232 } 233 234 static int ovs_meter_cmd_reply_stats(struct sk_buff *reply, u32 meter_id, 235 struct dp_meter *meter) 236 { 237 struct nlattr *nla; 238 struct dp_meter_band *band; 239 u16 i; 240 241 if (nla_put_u32(reply, OVS_METER_ATTR_ID, meter_id)) 242 goto error; 243 244 if (nla_put(reply, OVS_METER_ATTR_STATS, 245 sizeof(struct ovs_flow_stats), &meter->stats)) 246 goto error; 247 248 if (nla_put_u64_64bit(reply, OVS_METER_ATTR_USED, meter->used, 249 OVS_METER_ATTR_PAD)) 250 goto error; 251 252 nla = nla_nest_start_noflag(reply, OVS_METER_ATTR_BANDS); 253 if (!nla) 254 goto error; 255 256 band = meter->bands; 257 258 for (i = 0; i < meter->n_bands; ++i, ++band) { 259 struct nlattr *band_nla; 260 261 band_nla = nla_nest_start_noflag(reply, OVS_BAND_ATTR_UNSPEC); 262 if (!band_nla || nla_put(reply, OVS_BAND_ATTR_STATS, 263 sizeof(struct ovs_flow_stats), 264 &band->stats)) 265 goto error; 266 nla_nest_end(reply, band_nla); 267 } 268 nla_nest_end(reply, nla); 269 270 return 0; 271 error: 272 return -EMSGSIZE; 273 } 274 275 static int ovs_meter_cmd_features(struct sk_buff *skb, struct genl_info *info) 276 { 277 struct ovs_header *ovs_header = info->userhdr; 278 struct ovs_header *ovs_reply_header; 279 struct nlattr *nla, *band_nla; 280 struct sk_buff *reply; 281 struct datapath *dp; 282 int err = -EMSGSIZE; 283 284 reply = ovs_meter_cmd_reply_start(info, OVS_METER_CMD_FEATURES, 285 &ovs_reply_header); 286 if (IS_ERR(reply)) 287 return PTR_ERR(reply); 288 289 ovs_lock(); 290 dp = get_dp(sock_net(skb->sk), ovs_header->dp_ifindex); 291 if (!dp) { 292 err = -ENODEV; 293 goto exit_unlock; 294 } 295 296 if (nla_put_u32(reply, OVS_METER_ATTR_MAX_METERS, 297 dp->meter_tbl.max_meters_allowed)) 298 goto exit_unlock; 299 300 ovs_unlock(); 301 302 if (nla_put_u32(reply, OVS_METER_ATTR_MAX_BANDS, DP_MAX_BANDS)) 303 goto nla_put_failure; 304 305 nla = nla_nest_start_noflag(reply, OVS_METER_ATTR_BANDS); 306 if (!nla) 307 goto nla_put_failure; 308 309 band_nla = nla_nest_start_noflag(reply, OVS_BAND_ATTR_UNSPEC); 310 if (!band_nla) 311 goto nla_put_failure; 312 /* Currently only DROP band type is supported. */ 313 if (nla_put_u32(reply, OVS_BAND_ATTR_TYPE, OVS_METER_BAND_TYPE_DROP)) 314 goto nla_put_failure; 315 nla_nest_end(reply, band_nla); 316 nla_nest_end(reply, nla); 317 318 genlmsg_end(reply, ovs_reply_header); 319 return genlmsg_reply(reply, info); 320 321 exit_unlock: 322 ovs_unlock(); 323 nla_put_failure: 324 nlmsg_free(reply); 325 return err; 326 } 327 328 static struct dp_meter *dp_meter_create(struct nlattr **a) 329 { 330 struct nlattr *nla; 331 int rem; 332 u16 n_bands = 0; 333 struct dp_meter *meter; 334 struct dp_meter_band *band; 335 int err; 336 337 /* Validate attributes, count the bands. */ 338 if (!a[OVS_METER_ATTR_BANDS]) 339 return ERR_PTR(-EINVAL); 340 341 nla_for_each_nested(nla, a[OVS_METER_ATTR_BANDS], rem) 342 if (++n_bands > DP_MAX_BANDS) 343 return ERR_PTR(-EINVAL); 344 345 /* Allocate and set up the meter before locking anything. */ 346 meter = kzalloc(struct_size(meter, bands, n_bands), GFP_KERNEL_ACCOUNT); 347 if (!meter) 348 return ERR_PTR(-ENOMEM); 349 350 meter->id = nla_get_u32(a[OVS_METER_ATTR_ID]); 351 meter->used = div_u64(ktime_get_ns(), 1000 * 1000); 352 meter->kbps = a[OVS_METER_ATTR_KBPS] ? 1 : 0; 353 meter->keep_stats = !a[OVS_METER_ATTR_CLEAR]; 354 spin_lock_init(&meter->lock); 355 if (meter->keep_stats && a[OVS_METER_ATTR_STATS]) { 356 meter->stats = *(struct ovs_flow_stats *) 357 nla_data(a[OVS_METER_ATTR_STATS]); 358 } 359 meter->n_bands = n_bands; 360 361 /* Set up meter bands. */ 362 band = meter->bands; 363 nla_for_each_nested(nla, a[OVS_METER_ATTR_BANDS], rem) { 364 struct nlattr *attr[OVS_BAND_ATTR_MAX + 1]; 365 u32 band_max_delta_t; 366 367 err = nla_parse_deprecated((struct nlattr **)&attr, 368 OVS_BAND_ATTR_MAX, nla_data(nla), 369 nla_len(nla), band_policy, NULL); 370 if (err) 371 goto exit_free_meter; 372 373 if (!attr[OVS_BAND_ATTR_TYPE] || 374 !attr[OVS_BAND_ATTR_RATE] || 375 !attr[OVS_BAND_ATTR_BURST]) { 376 err = -EINVAL; 377 goto exit_free_meter; 378 } 379 380 band->type = nla_get_u32(attr[OVS_BAND_ATTR_TYPE]); 381 band->rate = nla_get_u32(attr[OVS_BAND_ATTR_RATE]); 382 if (band->rate == 0) { 383 err = -EINVAL; 384 goto exit_free_meter; 385 } 386 387 band->burst_size = nla_get_u32(attr[OVS_BAND_ATTR_BURST]); 388 /* Figure out max delta_t that is enough to fill any bucket. 389 * Keep max_delta_t size to the bucket units: 390 * pkts => 1/1000 packets, kilobits => bits. 391 * 392 * Start with a full bucket. 393 */ 394 band->bucket = band->burst_size * 1000ULL; 395 band_max_delta_t = div_u64(band->bucket, band->rate); 396 if (band_max_delta_t > meter->max_delta_t) 397 meter->max_delta_t = band_max_delta_t; 398 band++; 399 } 400 401 return meter; 402 403 exit_free_meter: 404 kfree(meter); 405 return ERR_PTR(err); 406 } 407 408 static int ovs_meter_cmd_set(struct sk_buff *skb, struct genl_info *info) 409 { 410 struct nlattr **a = info->attrs; 411 struct dp_meter *meter, *old_meter; 412 struct sk_buff *reply; 413 struct ovs_header *ovs_reply_header; 414 struct ovs_header *ovs_header = info->userhdr; 415 struct dp_meter_table *meter_tbl; 416 struct datapath *dp; 417 int err; 418 u32 meter_id; 419 bool failed; 420 421 if (!a[OVS_METER_ATTR_ID]) 422 return -EINVAL; 423 424 meter = dp_meter_create(a); 425 if (IS_ERR(meter)) 426 return PTR_ERR(meter); 427 428 reply = ovs_meter_cmd_reply_start(info, OVS_METER_CMD_SET, 429 &ovs_reply_header); 430 if (IS_ERR(reply)) { 431 err = PTR_ERR(reply); 432 goto exit_free_meter; 433 } 434 435 ovs_lock(); 436 dp = get_dp(sock_net(skb->sk), ovs_header->dp_ifindex); 437 if (!dp) { 438 err = -ENODEV; 439 goto exit_unlock; 440 } 441 442 meter_tbl = &dp->meter_tbl; 443 meter_id = nla_get_u32(a[OVS_METER_ATTR_ID]); 444 445 old_meter = lookup_meter(meter_tbl, meter_id); 446 err = detach_meter(meter_tbl, old_meter); 447 if (err) 448 goto exit_unlock; 449 450 err = attach_meter(meter_tbl, meter); 451 if (err) 452 goto exit_unlock; 453 454 ovs_unlock(); 455 456 /* Build response with the meter_id and stats from 457 * the old meter, if any. 458 */ 459 failed = nla_put_u32(reply, OVS_METER_ATTR_ID, meter_id); 460 WARN_ON(failed); 461 if (old_meter) { 462 spin_lock_bh(&old_meter->lock); 463 if (old_meter->keep_stats) { 464 err = ovs_meter_cmd_reply_stats(reply, meter_id, 465 old_meter); 466 WARN_ON(err); 467 } 468 spin_unlock_bh(&old_meter->lock); 469 ovs_meter_free(old_meter); 470 } 471 472 genlmsg_end(reply, ovs_reply_header); 473 return genlmsg_reply(reply, info); 474 475 exit_unlock: 476 ovs_unlock(); 477 nlmsg_free(reply); 478 exit_free_meter: 479 kfree(meter); 480 return err; 481 } 482 483 static int ovs_meter_cmd_get(struct sk_buff *skb, struct genl_info *info) 484 { 485 struct ovs_header *ovs_header = info->userhdr; 486 struct ovs_header *ovs_reply_header; 487 struct nlattr **a = info->attrs; 488 struct dp_meter *meter; 489 struct sk_buff *reply; 490 struct datapath *dp; 491 u32 meter_id; 492 int err; 493 494 if (!a[OVS_METER_ATTR_ID]) 495 return -EINVAL; 496 497 meter_id = nla_get_u32(a[OVS_METER_ATTR_ID]); 498 499 reply = ovs_meter_cmd_reply_start(info, OVS_METER_CMD_GET, 500 &ovs_reply_header); 501 if (IS_ERR(reply)) 502 return PTR_ERR(reply); 503 504 ovs_lock(); 505 506 dp = get_dp(sock_net(skb->sk), ovs_header->dp_ifindex); 507 if (!dp) { 508 err = -ENODEV; 509 goto exit_unlock; 510 } 511 512 /* Locate meter, copy stats. */ 513 meter = lookup_meter(&dp->meter_tbl, meter_id); 514 if (!meter) { 515 err = -ENOENT; 516 goto exit_unlock; 517 } 518 519 spin_lock_bh(&meter->lock); 520 err = ovs_meter_cmd_reply_stats(reply, meter_id, meter); 521 spin_unlock_bh(&meter->lock); 522 if (err) 523 goto exit_unlock; 524 525 ovs_unlock(); 526 527 genlmsg_end(reply, ovs_reply_header); 528 return genlmsg_reply(reply, info); 529 530 exit_unlock: 531 ovs_unlock(); 532 nlmsg_free(reply); 533 return err; 534 } 535 536 static int ovs_meter_cmd_del(struct sk_buff *skb, struct genl_info *info) 537 { 538 struct ovs_header *ovs_header = info->userhdr; 539 struct ovs_header *ovs_reply_header; 540 struct nlattr **a = info->attrs; 541 struct dp_meter *old_meter; 542 struct sk_buff *reply; 543 struct datapath *dp; 544 u32 meter_id; 545 int err; 546 547 if (!a[OVS_METER_ATTR_ID]) 548 return -EINVAL; 549 550 reply = ovs_meter_cmd_reply_start(info, OVS_METER_CMD_DEL, 551 &ovs_reply_header); 552 if (IS_ERR(reply)) 553 return PTR_ERR(reply); 554 555 ovs_lock(); 556 557 dp = get_dp(sock_net(skb->sk), ovs_header->dp_ifindex); 558 if (!dp) { 559 err = -ENODEV; 560 goto exit_unlock; 561 } 562 563 meter_id = nla_get_u32(a[OVS_METER_ATTR_ID]); 564 old_meter = lookup_meter(&dp->meter_tbl, meter_id); 565 if (old_meter) { 566 spin_lock_bh(&old_meter->lock); 567 err = ovs_meter_cmd_reply_stats(reply, meter_id, old_meter); 568 WARN_ON(err); 569 spin_unlock_bh(&old_meter->lock); 570 571 err = detach_meter(&dp->meter_tbl, old_meter); 572 if (err) 573 goto exit_unlock; 574 } 575 576 ovs_unlock(); 577 ovs_meter_free(old_meter); 578 genlmsg_end(reply, ovs_reply_header); 579 return genlmsg_reply(reply, info); 580 581 exit_unlock: 582 ovs_unlock(); 583 nlmsg_free(reply); 584 return err; 585 } 586 587 /* Meter action execution. 588 * 589 * Return true 'meter_id' drop band is triggered. The 'skb' should be 590 * dropped by the caller'. 591 */ 592 bool ovs_meter_execute(struct datapath *dp, struct sk_buff *skb, 593 struct sw_flow_key *key, u32 meter_id) 594 { 595 long long int now_ms = div_u64(ktime_get_ns(), 1000 * 1000); 596 long long int long_delta_ms; 597 struct dp_meter_band *band; 598 struct dp_meter *meter; 599 int i, band_exceeded_max = -1; 600 u32 band_exceeded_rate = 0; 601 u32 delta_ms; 602 u32 cost; 603 604 meter = lookup_meter(&dp->meter_tbl, meter_id); 605 /* Do not drop the packet when there is no meter. */ 606 if (!meter) 607 return false; 608 609 /* Lock the meter while using it. */ 610 spin_lock(&meter->lock); 611 612 long_delta_ms = (now_ms - meter->used); /* ms */ 613 if (long_delta_ms < 0) { 614 /* This condition means that we have several threads fighting 615 * for a meter lock, and the one who received the packets a 616 * bit later wins. Assuming that all racing threads received 617 * packets at the same time to avoid overflow. 618 */ 619 long_delta_ms = 0; 620 } 621 622 /* Make sure delta_ms will not be too large, so that bucket will not 623 * wrap around below. 624 */ 625 delta_ms = (long_delta_ms > (long long int)meter->max_delta_t) 626 ? meter->max_delta_t : (u32)long_delta_ms; 627 628 /* Update meter statistics. 629 */ 630 meter->used = now_ms; 631 meter->stats.n_packets += 1; 632 meter->stats.n_bytes += skb->len; 633 634 /* Bucket rate is either in kilobits per second, or in packets per 635 * second. We maintain the bucket in the units of either bits or 636 * 1/1000th of a packet, correspondingly. 637 * Then, when rate is multiplied with milliseconds, we get the 638 * bucket units: 639 * msec * kbps = bits, and 640 * msec * packets/sec = 1/1000 packets. 641 * 642 * 'cost' is the number of bucket units in this packet. 643 */ 644 cost = (meter->kbps) ? skb->len * 8 : 1000; 645 646 /* Update all bands and find the one hit with the highest rate. */ 647 for (i = 0; i < meter->n_bands; ++i) { 648 long long int max_bucket_size; 649 650 band = &meter->bands[i]; 651 max_bucket_size = band->burst_size * 1000LL; 652 653 band->bucket += delta_ms * band->rate; 654 if (band->bucket > max_bucket_size) 655 band->bucket = max_bucket_size; 656 657 if (band->bucket >= cost) { 658 band->bucket -= cost; 659 } else if (band->rate > band_exceeded_rate) { 660 band_exceeded_rate = band->rate; 661 band_exceeded_max = i; 662 } 663 } 664 665 if (band_exceeded_max >= 0) { 666 /* Update band statistics. */ 667 band = &meter->bands[band_exceeded_max]; 668 band->stats.n_packets += 1; 669 band->stats.n_bytes += skb->len; 670 671 /* Drop band triggered, let the caller drop the 'skb'. */ 672 if (band->type == OVS_METER_BAND_TYPE_DROP) { 673 spin_unlock(&meter->lock); 674 return true; 675 } 676 } 677 678 spin_unlock(&meter->lock); 679 return false; 680 } 681 682 static const struct genl_small_ops dp_meter_genl_ops[] = { 683 { .cmd = OVS_METER_CMD_FEATURES, 684 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 685 .flags = 0, /* OK for unprivileged users. */ 686 .doit = ovs_meter_cmd_features 687 }, 688 { .cmd = OVS_METER_CMD_SET, 689 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 690 .flags = GENL_UNS_ADMIN_PERM, /* Requires CAP_NET_ADMIN 691 * privilege. 692 */ 693 .doit = ovs_meter_cmd_set, 694 }, 695 { .cmd = OVS_METER_CMD_GET, 696 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 697 .flags = 0, /* OK for unprivileged users. */ 698 .doit = ovs_meter_cmd_get, 699 }, 700 { .cmd = OVS_METER_CMD_DEL, 701 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 702 .flags = GENL_UNS_ADMIN_PERM, /* Requires CAP_NET_ADMIN 703 * privilege. 704 */ 705 .doit = ovs_meter_cmd_del 706 }, 707 }; 708 709 static const struct genl_multicast_group ovs_meter_multicast_group = { 710 .name = OVS_METER_MCGROUP, 711 }; 712 713 struct genl_family dp_meter_genl_family __ro_after_init = { 714 .hdrsize = sizeof(struct ovs_header), 715 .name = OVS_METER_FAMILY, 716 .version = OVS_METER_VERSION, 717 .maxattr = OVS_METER_ATTR_MAX, 718 .policy = meter_policy, 719 .netnsok = true, 720 .parallel_ops = true, 721 .small_ops = dp_meter_genl_ops, 722 .n_small_ops = ARRAY_SIZE(dp_meter_genl_ops), 723 .resv_start_op = OVS_METER_CMD_GET + 1, 724 .mcgrps = &ovs_meter_multicast_group, 725 .n_mcgrps = 1, 726 .module = THIS_MODULE, 727 }; 728 729 int ovs_meters_init(struct datapath *dp) 730 { 731 struct dp_meter_table *tbl = &dp->meter_tbl; 732 struct dp_meter_instance *ti; 733 unsigned long free_mem_bytes; 734 735 ti = dp_meter_instance_alloc(DP_METER_ARRAY_SIZE_MIN); 736 if (!ti) 737 return -ENOMEM; 738 739 /* Allow meters in a datapath to use ~3.12% of physical memory. */ 740 free_mem_bytes = nr_free_buffer_pages() * (PAGE_SIZE >> 5); 741 tbl->max_meters_allowed = min(free_mem_bytes / sizeof(struct dp_meter), 742 DP_METER_NUM_MAX); 743 if (!tbl->max_meters_allowed) 744 goto out_err; 745 746 rcu_assign_pointer(tbl->ti, ti); 747 tbl->count = 0; 748 749 return 0; 750 751 out_err: 752 dp_meter_instance_free(ti); 753 return -ENOMEM; 754 } 755 756 void ovs_meters_exit(struct datapath *dp) 757 { 758 struct dp_meter_table *tbl = &dp->meter_tbl; 759 struct dp_meter_instance *ti = rcu_dereference_raw(tbl->ti); 760 int i; 761 762 for (i = 0; i < ti->n_meters; i++) 763 ovs_meter_free(rcu_dereference_raw(ti->dp_meters[i])); 764 765 dp_meter_instance_free(ti); 766 } 767