1 /* 2 * net/sched/cls_route.c ROUTE4 classifier. 3 * 4 * This program is free software; you can redistribute it and/or 5 * modify it under the terms of the GNU General Public License 6 * as published by the Free Software Foundation; either version 7 * 2 of the License, or (at your option) any later version. 8 * 9 * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru> 10 */ 11 12 #include <linux/module.h> 13 #include <linux/slab.h> 14 #include <linux/types.h> 15 #include <linux/kernel.h> 16 #include <linux/string.h> 17 #include <linux/errno.h> 18 #include <linux/skbuff.h> 19 #include <net/dst.h> 20 #include <net/route.h> 21 #include <net/netlink.h> 22 #include <net/act_api.h> 23 #include <net/pkt_cls.h> 24 25 /* 26 * 1. For now we assume that route tags < 256. 27 * It allows to use direct table lookups, instead of hash tables. 28 * 2. For now we assume that "from TAG" and "fromdev DEV" statements 29 * are mutually exclusive. 30 * 3. "to TAG from ANY" has higher priority, than "to ANY from XXX" 31 */ 32 struct route4_fastmap { 33 struct route4_filter *filter; 34 u32 id; 35 int iif; 36 }; 37 38 struct route4_head { 39 struct route4_fastmap fastmap[16]; 40 struct route4_bucket __rcu *table[256 + 1]; 41 struct rcu_head rcu; 42 }; 43 44 struct route4_bucket { 45 /* 16 FROM buckets + 16 IIF buckets + 1 wildcard bucket */ 46 struct route4_filter __rcu *ht[16 + 16 + 1]; 47 struct rcu_head rcu; 48 }; 49 50 struct route4_filter { 51 struct route4_filter __rcu *next; 52 u32 id; 53 int iif; 54 55 struct tcf_result res; 56 struct tcf_exts exts; 57 u32 handle; 58 struct route4_bucket *bkt; 59 struct tcf_proto *tp; 60 struct rcu_work rwork; 61 }; 62 63 #define ROUTE4_FAILURE ((struct route4_filter *)(-1L)) 64 65 static inline int route4_fastmap_hash(u32 id, int iif) 66 { 67 return id & 0xF; 68 } 69 70 static DEFINE_SPINLOCK(fastmap_lock); 71 static void 72 route4_reset_fastmap(struct route4_head *head) 73 { 74 spin_lock_bh(&fastmap_lock); 75 memset(head->fastmap, 0, sizeof(head->fastmap)); 76 spin_unlock_bh(&fastmap_lock); 77 } 78 79 static void 80 route4_set_fastmap(struct route4_head *head, u32 id, int iif, 81 struct route4_filter *f) 82 { 83 int h = route4_fastmap_hash(id, iif); 84 85 /* fastmap updates must look atomic to aling id, iff, filter */ 86 spin_lock_bh(&fastmap_lock); 87 head->fastmap[h].id = id; 88 head->fastmap[h].iif = iif; 89 head->fastmap[h].filter = f; 90 spin_unlock_bh(&fastmap_lock); 91 } 92 93 static inline int route4_hash_to(u32 id) 94 { 95 return id & 0xFF; 96 } 97 98 static inline int route4_hash_from(u32 id) 99 { 100 return (id >> 16) & 0xF; 101 } 102 103 static inline int route4_hash_iif(int iif) 104 { 105 return 16 + ((iif >> 16) & 0xF); 106 } 107 108 static inline int route4_hash_wild(void) 109 { 110 return 32; 111 } 112 113 #define ROUTE4_APPLY_RESULT() \ 114 { \ 115 *res = f->res; \ 116 if (tcf_exts_has_actions(&f->exts)) { \ 117 int r = tcf_exts_exec(skb, &f->exts, res); \ 118 if (r < 0) { \ 119 dont_cache = 1; \ 120 continue; \ 121 } \ 122 return r; \ 123 } else if (!dont_cache) \ 124 route4_set_fastmap(head, id, iif, f); \ 125 return 0; \ 126 } 127 128 static int route4_classify(struct sk_buff *skb, const struct tcf_proto *tp, 129 struct tcf_result *res) 130 { 131 struct route4_head *head = rcu_dereference_bh(tp->root); 132 struct dst_entry *dst; 133 struct route4_bucket *b; 134 struct route4_filter *f; 135 u32 id, h; 136 int iif, dont_cache = 0; 137 138 dst = skb_dst(skb); 139 if (!dst) 140 goto failure; 141 142 id = dst->tclassid; 143 144 iif = inet_iif(skb); 145 146 h = route4_fastmap_hash(id, iif); 147 148 spin_lock(&fastmap_lock); 149 if (id == head->fastmap[h].id && 150 iif == head->fastmap[h].iif && 151 (f = head->fastmap[h].filter) != NULL) { 152 if (f == ROUTE4_FAILURE) { 153 spin_unlock(&fastmap_lock); 154 goto failure; 155 } 156 157 *res = f->res; 158 spin_unlock(&fastmap_lock); 159 return 0; 160 } 161 spin_unlock(&fastmap_lock); 162 163 h = route4_hash_to(id); 164 165 restart: 166 b = rcu_dereference_bh(head->table[h]); 167 if (b) { 168 for (f = rcu_dereference_bh(b->ht[route4_hash_from(id)]); 169 f; 170 f = rcu_dereference_bh(f->next)) 171 if (f->id == id) 172 ROUTE4_APPLY_RESULT(); 173 174 for (f = rcu_dereference_bh(b->ht[route4_hash_iif(iif)]); 175 f; 176 f = rcu_dereference_bh(f->next)) 177 if (f->iif == iif) 178 ROUTE4_APPLY_RESULT(); 179 180 for (f = rcu_dereference_bh(b->ht[route4_hash_wild()]); 181 f; 182 f = rcu_dereference_bh(f->next)) 183 ROUTE4_APPLY_RESULT(); 184 } 185 if (h < 256) { 186 h = 256; 187 id &= ~0xFFFF; 188 goto restart; 189 } 190 191 if (!dont_cache) 192 route4_set_fastmap(head, id, iif, ROUTE4_FAILURE); 193 failure: 194 return -1; 195 } 196 197 static inline u32 to_hash(u32 id) 198 { 199 u32 h = id & 0xFF; 200 201 if (id & 0x8000) 202 h += 256; 203 return h; 204 } 205 206 static inline u32 from_hash(u32 id) 207 { 208 id &= 0xFFFF; 209 if (id == 0xFFFF) 210 return 32; 211 if (!(id & 0x8000)) { 212 if (id > 255) 213 return 256; 214 return id & 0xF; 215 } 216 return 16 + (id & 0xF); 217 } 218 219 static void *route4_get(struct tcf_proto *tp, u32 handle) 220 { 221 struct route4_head *head = rtnl_dereference(tp->root); 222 struct route4_bucket *b; 223 struct route4_filter *f; 224 unsigned int h1, h2; 225 226 h1 = to_hash(handle); 227 if (h1 > 256) 228 return NULL; 229 230 h2 = from_hash(handle >> 16); 231 if (h2 > 32) 232 return NULL; 233 234 b = rtnl_dereference(head->table[h1]); 235 if (b) { 236 for (f = rtnl_dereference(b->ht[h2]); 237 f; 238 f = rtnl_dereference(f->next)) 239 if (f->handle == handle) 240 return f; 241 } 242 return NULL; 243 } 244 245 static int route4_init(struct tcf_proto *tp) 246 { 247 struct route4_head *head; 248 249 head = kzalloc(sizeof(struct route4_head), GFP_KERNEL); 250 if (head == NULL) 251 return -ENOBUFS; 252 253 rcu_assign_pointer(tp->root, head); 254 return 0; 255 } 256 257 static void __route4_delete_filter(struct route4_filter *f) 258 { 259 tcf_exts_destroy(&f->exts); 260 tcf_exts_put_net(&f->exts); 261 kfree(f); 262 } 263 264 static void route4_delete_filter_work(struct work_struct *work) 265 { 266 struct route4_filter *f = container_of(to_rcu_work(work), 267 struct route4_filter, 268 rwork); 269 rtnl_lock(); 270 __route4_delete_filter(f); 271 rtnl_unlock(); 272 } 273 274 static void route4_queue_work(struct route4_filter *f) 275 { 276 tcf_queue_work(&f->rwork, route4_delete_filter_work); 277 } 278 279 static void route4_destroy(struct tcf_proto *tp, bool rtnl_held, 280 struct netlink_ext_ack *extack) 281 { 282 struct route4_head *head = rtnl_dereference(tp->root); 283 int h1, h2; 284 285 if (head == NULL) 286 return; 287 288 for (h1 = 0; h1 <= 256; h1++) { 289 struct route4_bucket *b; 290 291 b = rtnl_dereference(head->table[h1]); 292 if (b) { 293 for (h2 = 0; h2 <= 32; h2++) { 294 struct route4_filter *f; 295 296 while ((f = rtnl_dereference(b->ht[h2])) != NULL) { 297 struct route4_filter *next; 298 299 next = rtnl_dereference(f->next); 300 RCU_INIT_POINTER(b->ht[h2], next); 301 tcf_unbind_filter(tp, &f->res); 302 if (tcf_exts_get_net(&f->exts)) 303 route4_queue_work(f); 304 else 305 __route4_delete_filter(f); 306 } 307 } 308 RCU_INIT_POINTER(head->table[h1], NULL); 309 kfree_rcu(b, rcu); 310 } 311 } 312 kfree_rcu(head, rcu); 313 } 314 315 static int route4_delete(struct tcf_proto *tp, void *arg, bool *last, 316 bool rtnl_held, struct netlink_ext_ack *extack) 317 { 318 struct route4_head *head = rtnl_dereference(tp->root); 319 struct route4_filter *f = arg; 320 struct route4_filter __rcu **fp; 321 struct route4_filter *nf; 322 struct route4_bucket *b; 323 unsigned int h = 0; 324 int i, h1; 325 326 if (!head || !f) 327 return -EINVAL; 328 329 h = f->handle; 330 b = f->bkt; 331 332 fp = &b->ht[from_hash(h >> 16)]; 333 for (nf = rtnl_dereference(*fp); nf; 334 fp = &nf->next, nf = rtnl_dereference(*fp)) { 335 if (nf == f) { 336 /* unlink it */ 337 RCU_INIT_POINTER(*fp, rtnl_dereference(f->next)); 338 339 /* Remove any fastmap lookups that might ref filter 340 * notice we unlink'd the filter so we can't get it 341 * back in the fastmap. 342 */ 343 route4_reset_fastmap(head); 344 345 /* Delete it */ 346 tcf_unbind_filter(tp, &f->res); 347 tcf_exts_get_net(&f->exts); 348 tcf_queue_work(&f->rwork, route4_delete_filter_work); 349 350 /* Strip RTNL protected tree */ 351 for (i = 0; i <= 32; i++) { 352 struct route4_filter *rt; 353 354 rt = rtnl_dereference(b->ht[i]); 355 if (rt) 356 goto out; 357 } 358 359 /* OK, session has no flows */ 360 RCU_INIT_POINTER(head->table[to_hash(h)], NULL); 361 kfree_rcu(b, rcu); 362 break; 363 } 364 } 365 366 out: 367 *last = true; 368 for (h1 = 0; h1 <= 256; h1++) { 369 if (rcu_access_pointer(head->table[h1])) { 370 *last = false; 371 break; 372 } 373 } 374 375 return 0; 376 } 377 378 static const struct nla_policy route4_policy[TCA_ROUTE4_MAX + 1] = { 379 [TCA_ROUTE4_CLASSID] = { .type = NLA_U32 }, 380 [TCA_ROUTE4_TO] = { .type = NLA_U32 }, 381 [TCA_ROUTE4_FROM] = { .type = NLA_U32 }, 382 [TCA_ROUTE4_IIF] = { .type = NLA_U32 }, 383 }; 384 385 static int route4_set_parms(struct net *net, struct tcf_proto *tp, 386 unsigned long base, struct route4_filter *f, 387 u32 handle, struct route4_head *head, 388 struct nlattr **tb, struct nlattr *est, int new, 389 bool ovr, struct netlink_ext_ack *extack) 390 { 391 u32 id = 0, to = 0, nhandle = 0x8000; 392 struct route4_filter *fp; 393 unsigned int h1; 394 struct route4_bucket *b; 395 int err; 396 397 err = tcf_exts_validate(net, tp, tb, est, &f->exts, ovr, true, extack); 398 if (err < 0) 399 return err; 400 401 if (tb[TCA_ROUTE4_TO]) { 402 if (new && handle & 0x8000) 403 return -EINVAL; 404 to = nla_get_u32(tb[TCA_ROUTE4_TO]); 405 if (to > 0xFF) 406 return -EINVAL; 407 nhandle = to; 408 } 409 410 if (tb[TCA_ROUTE4_FROM]) { 411 if (tb[TCA_ROUTE4_IIF]) 412 return -EINVAL; 413 id = nla_get_u32(tb[TCA_ROUTE4_FROM]); 414 if (id > 0xFF) 415 return -EINVAL; 416 nhandle |= id << 16; 417 } else if (tb[TCA_ROUTE4_IIF]) { 418 id = nla_get_u32(tb[TCA_ROUTE4_IIF]); 419 if (id > 0x7FFF) 420 return -EINVAL; 421 nhandle |= (id | 0x8000) << 16; 422 } else 423 nhandle |= 0xFFFF << 16; 424 425 if (handle && new) { 426 nhandle |= handle & 0x7F00; 427 if (nhandle != handle) 428 return -EINVAL; 429 } 430 431 h1 = to_hash(nhandle); 432 b = rtnl_dereference(head->table[h1]); 433 if (!b) { 434 b = kzalloc(sizeof(struct route4_bucket), GFP_KERNEL); 435 if (b == NULL) 436 return -ENOBUFS; 437 438 rcu_assign_pointer(head->table[h1], b); 439 } else { 440 unsigned int h2 = from_hash(nhandle >> 16); 441 442 for (fp = rtnl_dereference(b->ht[h2]); 443 fp; 444 fp = rtnl_dereference(fp->next)) 445 if (fp->handle == f->handle) 446 return -EEXIST; 447 } 448 449 if (tb[TCA_ROUTE4_TO]) 450 f->id = to; 451 452 if (tb[TCA_ROUTE4_FROM]) 453 f->id = to | id<<16; 454 else if (tb[TCA_ROUTE4_IIF]) 455 f->iif = id; 456 457 f->handle = nhandle; 458 f->bkt = b; 459 f->tp = tp; 460 461 if (tb[TCA_ROUTE4_CLASSID]) { 462 f->res.classid = nla_get_u32(tb[TCA_ROUTE4_CLASSID]); 463 tcf_bind_filter(tp, &f->res, base); 464 } 465 466 return 0; 467 } 468 469 static int route4_change(struct net *net, struct sk_buff *in_skb, 470 struct tcf_proto *tp, unsigned long base, u32 handle, 471 struct nlattr **tca, void **arg, bool ovr, 472 bool rtnl_held, struct netlink_ext_ack *extack) 473 { 474 struct route4_head *head = rtnl_dereference(tp->root); 475 struct route4_filter __rcu **fp; 476 struct route4_filter *fold, *f1, *pfp, *f = NULL; 477 struct route4_bucket *b; 478 struct nlattr *opt = tca[TCA_OPTIONS]; 479 struct nlattr *tb[TCA_ROUTE4_MAX + 1]; 480 unsigned int h, th; 481 int err; 482 bool new = true; 483 484 if (opt == NULL) 485 return handle ? -EINVAL : 0; 486 487 err = nla_parse_nested_deprecated(tb, TCA_ROUTE4_MAX, opt, 488 route4_policy, NULL); 489 if (err < 0) 490 return err; 491 492 fold = *arg; 493 if (fold && handle && fold->handle != handle) 494 return -EINVAL; 495 496 err = -ENOBUFS; 497 f = kzalloc(sizeof(struct route4_filter), GFP_KERNEL); 498 if (!f) 499 goto errout; 500 501 err = tcf_exts_init(&f->exts, net, TCA_ROUTE4_ACT, TCA_ROUTE4_POLICE); 502 if (err < 0) 503 goto errout; 504 505 if (fold) { 506 f->id = fold->id; 507 f->iif = fold->iif; 508 f->res = fold->res; 509 f->handle = fold->handle; 510 511 f->tp = fold->tp; 512 f->bkt = fold->bkt; 513 new = false; 514 } 515 516 err = route4_set_parms(net, tp, base, f, handle, head, tb, 517 tca[TCA_RATE], new, ovr, extack); 518 if (err < 0) 519 goto errout; 520 521 h = from_hash(f->handle >> 16); 522 fp = &f->bkt->ht[h]; 523 for (pfp = rtnl_dereference(*fp); 524 (f1 = rtnl_dereference(*fp)) != NULL; 525 fp = &f1->next) 526 if (f->handle < f1->handle) 527 break; 528 529 tcf_block_netif_keep_dst(tp->chain->block); 530 rcu_assign_pointer(f->next, f1); 531 rcu_assign_pointer(*fp, f); 532 533 if (fold && fold->handle && f->handle != fold->handle) { 534 th = to_hash(fold->handle); 535 h = from_hash(fold->handle >> 16); 536 b = rtnl_dereference(head->table[th]); 537 if (b) { 538 fp = &b->ht[h]; 539 for (pfp = rtnl_dereference(*fp); pfp; 540 fp = &pfp->next, pfp = rtnl_dereference(*fp)) { 541 if (pfp == f) { 542 *fp = f->next; 543 break; 544 } 545 } 546 } 547 } 548 549 route4_reset_fastmap(head); 550 *arg = f; 551 if (fold) { 552 tcf_unbind_filter(tp, &fold->res); 553 tcf_exts_get_net(&fold->exts); 554 tcf_queue_work(&fold->rwork, route4_delete_filter_work); 555 } 556 return 0; 557 558 errout: 559 if (f) 560 tcf_exts_destroy(&f->exts); 561 kfree(f); 562 return err; 563 } 564 565 static void route4_walk(struct tcf_proto *tp, struct tcf_walker *arg, 566 bool rtnl_held) 567 { 568 struct route4_head *head = rtnl_dereference(tp->root); 569 unsigned int h, h1; 570 571 if (head == NULL || arg->stop) 572 return; 573 574 for (h = 0; h <= 256; h++) { 575 struct route4_bucket *b = rtnl_dereference(head->table[h]); 576 577 if (b) { 578 for (h1 = 0; h1 <= 32; h1++) { 579 struct route4_filter *f; 580 581 for (f = rtnl_dereference(b->ht[h1]); 582 f; 583 f = rtnl_dereference(f->next)) { 584 if (arg->count < arg->skip) { 585 arg->count++; 586 continue; 587 } 588 if (arg->fn(tp, f, arg) < 0) { 589 arg->stop = 1; 590 return; 591 } 592 arg->count++; 593 } 594 } 595 } 596 } 597 } 598 599 static int route4_dump(struct net *net, struct tcf_proto *tp, void *fh, 600 struct sk_buff *skb, struct tcmsg *t, bool rtnl_held) 601 { 602 struct route4_filter *f = fh; 603 struct nlattr *nest; 604 u32 id; 605 606 if (f == NULL) 607 return skb->len; 608 609 t->tcm_handle = f->handle; 610 611 nest = nla_nest_start_noflag(skb, TCA_OPTIONS); 612 if (nest == NULL) 613 goto nla_put_failure; 614 615 if (!(f->handle & 0x8000)) { 616 id = f->id & 0xFF; 617 if (nla_put_u32(skb, TCA_ROUTE4_TO, id)) 618 goto nla_put_failure; 619 } 620 if (f->handle & 0x80000000) { 621 if ((f->handle >> 16) != 0xFFFF && 622 nla_put_u32(skb, TCA_ROUTE4_IIF, f->iif)) 623 goto nla_put_failure; 624 } else { 625 id = f->id >> 16; 626 if (nla_put_u32(skb, TCA_ROUTE4_FROM, id)) 627 goto nla_put_failure; 628 } 629 if (f->res.classid && 630 nla_put_u32(skb, TCA_ROUTE4_CLASSID, f->res.classid)) 631 goto nla_put_failure; 632 633 if (tcf_exts_dump(skb, &f->exts) < 0) 634 goto nla_put_failure; 635 636 nla_nest_end(skb, nest); 637 638 if (tcf_exts_dump_stats(skb, &f->exts) < 0) 639 goto nla_put_failure; 640 641 return skb->len; 642 643 nla_put_failure: 644 nla_nest_cancel(skb, nest); 645 return -1; 646 } 647 648 static void route4_bind_class(void *fh, u32 classid, unsigned long cl) 649 { 650 struct route4_filter *f = fh; 651 652 if (f && f->res.classid == classid) 653 f->res.class = cl; 654 } 655 656 static struct tcf_proto_ops cls_route4_ops __read_mostly = { 657 .kind = "route", 658 .classify = route4_classify, 659 .init = route4_init, 660 .destroy = route4_destroy, 661 .get = route4_get, 662 .change = route4_change, 663 .delete = route4_delete, 664 .walk = route4_walk, 665 .dump = route4_dump, 666 .bind_class = route4_bind_class, 667 .owner = THIS_MODULE, 668 }; 669 670 static int __init init_route4(void) 671 { 672 return register_tcf_proto_ops(&cls_route4_ops); 673 } 674 675 static void __exit exit_route4(void) 676 { 677 unregister_tcf_proto_ops(&cls_route4_ops); 678 } 679 680 module_init(init_route4) 681 module_exit(exit_route4) 682 MODULE_LICENSE("GPL"); 683