1 /* 2 * net/sched/cls_route.c ROUTE4 classifier. 3 * 4 * This program is free software; you can redistribute it and/or 5 * modify it under the terms of the GNU General Public License 6 * as published by the Free Software Foundation; either version 7 * 2 of the License, or (at your option) any later version. 8 * 9 * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru> 10 */ 11 12 #include <linux/module.h> 13 #include <linux/slab.h> 14 #include <linux/types.h> 15 #include <linux/kernel.h> 16 #include <linux/string.h> 17 #include <linux/errno.h> 18 #include <linux/skbuff.h> 19 #include <net/dst.h> 20 #include <net/route.h> 21 #include <net/netlink.h> 22 #include <net/act_api.h> 23 #include <net/pkt_cls.h> 24 25 /* 26 * 1. For now we assume that route tags < 256. 27 * It allows to use direct table lookups, instead of hash tables. 28 * 2. For now we assume that "from TAG" and "fromdev DEV" statements 29 * are mutually exclusive. 30 * 3. "to TAG from ANY" has higher priority, than "to ANY from XXX" 31 */ 32 struct route4_fastmap { 33 struct route4_filter *filter; 34 u32 id; 35 int iif; 36 }; 37 38 struct route4_head { 39 struct route4_fastmap fastmap[16]; 40 struct route4_bucket __rcu *table[256 + 1]; 41 struct rcu_head rcu; 42 }; 43 44 struct route4_bucket { 45 /* 16 FROM buckets + 16 IIF buckets + 1 wildcard bucket */ 46 struct route4_filter __rcu *ht[16 + 16 + 1]; 47 struct rcu_head rcu; 48 }; 49 50 struct route4_filter { 51 struct route4_filter __rcu *next; 52 u32 id; 53 int iif; 54 55 struct tcf_result res; 56 struct tcf_exts exts; 57 u32 handle; 58 struct route4_bucket *bkt; 59 struct tcf_proto *tp; 60 union { 61 struct work_struct work; 62 struct rcu_head rcu; 63 }; 64 }; 65 66 #define ROUTE4_FAILURE ((struct route4_filter *)(-1L)) 67 68 static inline int route4_fastmap_hash(u32 id, int iif) 69 { 70 return id & 0xF; 71 } 72 73 static DEFINE_SPINLOCK(fastmap_lock); 74 static void 75 route4_reset_fastmap(struct route4_head *head) 76 { 77 spin_lock_bh(&fastmap_lock); 78 memset(head->fastmap, 0, sizeof(head->fastmap)); 79 spin_unlock_bh(&fastmap_lock); 80 } 81 82 static void 83 route4_set_fastmap(struct route4_head *head, u32 id, int iif, 84 struct route4_filter *f) 85 { 86 int h = route4_fastmap_hash(id, iif); 87 88 /* fastmap updates must look atomic to aling id, iff, filter */ 89 spin_lock_bh(&fastmap_lock); 90 head->fastmap[h].id = id; 91 head->fastmap[h].iif = iif; 92 head->fastmap[h].filter = f; 93 spin_unlock_bh(&fastmap_lock); 94 } 95 96 static inline int route4_hash_to(u32 id) 97 { 98 return id & 0xFF; 99 } 100 101 static inline int route4_hash_from(u32 id) 102 { 103 return (id >> 16) & 0xF; 104 } 105 106 static inline int route4_hash_iif(int iif) 107 { 108 return 16 + ((iif >> 16) & 0xF); 109 } 110 111 static inline int route4_hash_wild(void) 112 { 113 return 32; 114 } 115 116 #define ROUTE4_APPLY_RESULT() \ 117 { \ 118 *res = f->res; \ 119 if (tcf_exts_has_actions(&f->exts)) { \ 120 int r = tcf_exts_exec(skb, &f->exts, res); \ 121 if (r < 0) { \ 122 dont_cache = 1; \ 123 continue; \ 124 } \ 125 return r; \ 126 } else if (!dont_cache) \ 127 route4_set_fastmap(head, id, iif, f); \ 128 return 0; \ 129 } 130 131 static int route4_classify(struct sk_buff *skb, const struct tcf_proto *tp, 132 struct tcf_result *res) 133 { 134 struct route4_head *head = rcu_dereference_bh(tp->root); 135 struct dst_entry *dst; 136 struct route4_bucket *b; 137 struct route4_filter *f; 138 u32 id, h; 139 int iif, dont_cache = 0; 140 141 dst = skb_dst(skb); 142 if (!dst) 143 goto failure; 144 145 id = dst->tclassid; 146 147 iif = inet_iif(skb); 148 149 h = route4_fastmap_hash(id, iif); 150 151 spin_lock(&fastmap_lock); 152 if (id == head->fastmap[h].id && 153 iif == head->fastmap[h].iif && 154 (f = head->fastmap[h].filter) != NULL) { 155 if (f == ROUTE4_FAILURE) { 156 spin_unlock(&fastmap_lock); 157 goto failure; 158 } 159 160 *res = f->res; 161 spin_unlock(&fastmap_lock); 162 return 0; 163 } 164 spin_unlock(&fastmap_lock); 165 166 h = route4_hash_to(id); 167 168 restart: 169 b = rcu_dereference_bh(head->table[h]); 170 if (b) { 171 for (f = rcu_dereference_bh(b->ht[route4_hash_from(id)]); 172 f; 173 f = rcu_dereference_bh(f->next)) 174 if (f->id == id) 175 ROUTE4_APPLY_RESULT(); 176 177 for (f = rcu_dereference_bh(b->ht[route4_hash_iif(iif)]); 178 f; 179 f = rcu_dereference_bh(f->next)) 180 if (f->iif == iif) 181 ROUTE4_APPLY_RESULT(); 182 183 for (f = rcu_dereference_bh(b->ht[route4_hash_wild()]); 184 f; 185 f = rcu_dereference_bh(f->next)) 186 ROUTE4_APPLY_RESULT(); 187 } 188 if (h < 256) { 189 h = 256; 190 id &= ~0xFFFF; 191 goto restart; 192 } 193 194 if (!dont_cache) 195 route4_set_fastmap(head, id, iif, ROUTE4_FAILURE); 196 failure: 197 return -1; 198 } 199 200 static inline u32 to_hash(u32 id) 201 { 202 u32 h = id & 0xFF; 203 204 if (id & 0x8000) 205 h += 256; 206 return h; 207 } 208 209 static inline u32 from_hash(u32 id) 210 { 211 id &= 0xFFFF; 212 if (id == 0xFFFF) 213 return 32; 214 if (!(id & 0x8000)) { 215 if (id > 255) 216 return 256; 217 return id & 0xF; 218 } 219 return 16 + (id & 0xF); 220 } 221 222 static void *route4_get(struct tcf_proto *tp, u32 handle) 223 { 224 struct route4_head *head = rtnl_dereference(tp->root); 225 struct route4_bucket *b; 226 struct route4_filter *f; 227 unsigned int h1, h2; 228 229 h1 = to_hash(handle); 230 if (h1 > 256) 231 return NULL; 232 233 h2 = from_hash(handle >> 16); 234 if (h2 > 32) 235 return NULL; 236 237 b = rtnl_dereference(head->table[h1]); 238 if (b) { 239 for (f = rtnl_dereference(b->ht[h2]); 240 f; 241 f = rtnl_dereference(f->next)) 242 if (f->handle == handle) 243 return f; 244 } 245 return NULL; 246 } 247 248 static int route4_init(struct tcf_proto *tp) 249 { 250 struct route4_head *head; 251 252 head = kzalloc(sizeof(struct route4_head), GFP_KERNEL); 253 if (head == NULL) 254 return -ENOBUFS; 255 256 rcu_assign_pointer(tp->root, head); 257 return 0; 258 } 259 260 static void __route4_delete_filter(struct route4_filter *f) 261 { 262 tcf_exts_destroy(&f->exts); 263 tcf_exts_put_net(&f->exts); 264 kfree(f); 265 } 266 267 static void route4_delete_filter_work(struct work_struct *work) 268 { 269 struct route4_filter *f = container_of(work, struct route4_filter, work); 270 271 rtnl_lock(); 272 __route4_delete_filter(f); 273 rtnl_unlock(); 274 } 275 276 static void route4_delete_filter(struct rcu_head *head) 277 { 278 struct route4_filter *f = container_of(head, struct route4_filter, rcu); 279 280 INIT_WORK(&f->work, route4_delete_filter_work); 281 tcf_queue_work(&f->work); 282 } 283 284 static void route4_destroy(struct tcf_proto *tp, struct netlink_ext_ack *extack) 285 { 286 struct route4_head *head = rtnl_dereference(tp->root); 287 int h1, h2; 288 289 if (head == NULL) 290 return; 291 292 for (h1 = 0; h1 <= 256; h1++) { 293 struct route4_bucket *b; 294 295 b = rtnl_dereference(head->table[h1]); 296 if (b) { 297 for (h2 = 0; h2 <= 32; h2++) { 298 struct route4_filter *f; 299 300 while ((f = rtnl_dereference(b->ht[h2])) != NULL) { 301 struct route4_filter *next; 302 303 next = rtnl_dereference(f->next); 304 RCU_INIT_POINTER(b->ht[h2], next); 305 tcf_unbind_filter(tp, &f->res); 306 if (tcf_exts_get_net(&f->exts)) 307 call_rcu(&f->rcu, route4_delete_filter); 308 else 309 __route4_delete_filter(f); 310 } 311 } 312 RCU_INIT_POINTER(head->table[h1], NULL); 313 kfree_rcu(b, rcu); 314 } 315 } 316 kfree_rcu(head, rcu); 317 } 318 319 static int route4_delete(struct tcf_proto *tp, void *arg, bool *last, 320 struct netlink_ext_ack *extack) 321 { 322 struct route4_head *head = rtnl_dereference(tp->root); 323 struct route4_filter *f = arg; 324 struct route4_filter __rcu **fp; 325 struct route4_filter *nf; 326 struct route4_bucket *b; 327 unsigned int h = 0; 328 int i, h1; 329 330 if (!head || !f) 331 return -EINVAL; 332 333 h = f->handle; 334 b = f->bkt; 335 336 fp = &b->ht[from_hash(h >> 16)]; 337 for (nf = rtnl_dereference(*fp); nf; 338 fp = &nf->next, nf = rtnl_dereference(*fp)) { 339 if (nf == f) { 340 /* unlink it */ 341 RCU_INIT_POINTER(*fp, rtnl_dereference(f->next)); 342 343 /* Remove any fastmap lookups that might ref filter 344 * notice we unlink'd the filter so we can't get it 345 * back in the fastmap. 346 */ 347 route4_reset_fastmap(head); 348 349 /* Delete it */ 350 tcf_unbind_filter(tp, &f->res); 351 tcf_exts_get_net(&f->exts); 352 call_rcu(&f->rcu, route4_delete_filter); 353 354 /* Strip RTNL protected tree */ 355 for (i = 0; i <= 32; i++) { 356 struct route4_filter *rt; 357 358 rt = rtnl_dereference(b->ht[i]); 359 if (rt) 360 goto out; 361 } 362 363 /* OK, session has no flows */ 364 RCU_INIT_POINTER(head->table[to_hash(h)], NULL); 365 kfree_rcu(b, rcu); 366 break; 367 } 368 } 369 370 out: 371 *last = true; 372 for (h1 = 0; h1 <= 256; h1++) { 373 if (rcu_access_pointer(head->table[h1])) { 374 *last = false; 375 break; 376 } 377 } 378 379 return 0; 380 } 381 382 static const struct nla_policy route4_policy[TCA_ROUTE4_MAX + 1] = { 383 [TCA_ROUTE4_CLASSID] = { .type = NLA_U32 }, 384 [TCA_ROUTE4_TO] = { .type = NLA_U32 }, 385 [TCA_ROUTE4_FROM] = { .type = NLA_U32 }, 386 [TCA_ROUTE4_IIF] = { .type = NLA_U32 }, 387 }; 388 389 static int route4_set_parms(struct net *net, struct tcf_proto *tp, 390 unsigned long base, struct route4_filter *f, 391 u32 handle, struct route4_head *head, 392 struct nlattr **tb, struct nlattr *est, int new, 393 bool ovr, struct netlink_ext_ack *extack) 394 { 395 u32 id = 0, to = 0, nhandle = 0x8000; 396 struct route4_filter *fp; 397 unsigned int h1; 398 struct route4_bucket *b; 399 int err; 400 401 err = tcf_exts_validate(net, tp, tb, est, &f->exts, ovr, extack); 402 if (err < 0) 403 return err; 404 405 if (tb[TCA_ROUTE4_TO]) { 406 if (new && handle & 0x8000) 407 return -EINVAL; 408 to = nla_get_u32(tb[TCA_ROUTE4_TO]); 409 if (to > 0xFF) 410 return -EINVAL; 411 nhandle = to; 412 } 413 414 if (tb[TCA_ROUTE4_FROM]) { 415 if (tb[TCA_ROUTE4_IIF]) 416 return -EINVAL; 417 id = nla_get_u32(tb[TCA_ROUTE4_FROM]); 418 if (id > 0xFF) 419 return -EINVAL; 420 nhandle |= id << 16; 421 } else if (tb[TCA_ROUTE4_IIF]) { 422 id = nla_get_u32(tb[TCA_ROUTE4_IIF]); 423 if (id > 0x7FFF) 424 return -EINVAL; 425 nhandle |= (id | 0x8000) << 16; 426 } else 427 nhandle |= 0xFFFF << 16; 428 429 if (handle && new) { 430 nhandle |= handle & 0x7F00; 431 if (nhandle != handle) 432 return -EINVAL; 433 } 434 435 h1 = to_hash(nhandle); 436 b = rtnl_dereference(head->table[h1]); 437 if (!b) { 438 b = kzalloc(sizeof(struct route4_bucket), GFP_KERNEL); 439 if (b == NULL) 440 return -ENOBUFS; 441 442 rcu_assign_pointer(head->table[h1], b); 443 } else { 444 unsigned int h2 = from_hash(nhandle >> 16); 445 446 for (fp = rtnl_dereference(b->ht[h2]); 447 fp; 448 fp = rtnl_dereference(fp->next)) 449 if (fp->handle == f->handle) 450 return -EEXIST; 451 } 452 453 if (tb[TCA_ROUTE4_TO]) 454 f->id = to; 455 456 if (tb[TCA_ROUTE4_FROM]) 457 f->id = to | id<<16; 458 else if (tb[TCA_ROUTE4_IIF]) 459 f->iif = id; 460 461 f->handle = nhandle; 462 f->bkt = b; 463 f->tp = tp; 464 465 if (tb[TCA_ROUTE4_CLASSID]) { 466 f->res.classid = nla_get_u32(tb[TCA_ROUTE4_CLASSID]); 467 tcf_bind_filter(tp, &f->res, base); 468 } 469 470 return 0; 471 } 472 473 static int route4_change(struct net *net, struct sk_buff *in_skb, 474 struct tcf_proto *tp, unsigned long base, u32 handle, 475 struct nlattr **tca, void **arg, bool ovr, 476 struct netlink_ext_ack *extack) 477 { 478 struct route4_head *head = rtnl_dereference(tp->root); 479 struct route4_filter __rcu **fp; 480 struct route4_filter *fold, *f1, *pfp, *f = NULL; 481 struct route4_bucket *b; 482 struct nlattr *opt = tca[TCA_OPTIONS]; 483 struct nlattr *tb[TCA_ROUTE4_MAX + 1]; 484 unsigned int h, th; 485 int err; 486 bool new = true; 487 488 if (opt == NULL) 489 return handle ? -EINVAL : 0; 490 491 err = nla_parse_nested(tb, TCA_ROUTE4_MAX, opt, route4_policy, NULL); 492 if (err < 0) 493 return err; 494 495 fold = *arg; 496 if (fold && handle && fold->handle != handle) 497 return -EINVAL; 498 499 err = -ENOBUFS; 500 f = kzalloc(sizeof(struct route4_filter), GFP_KERNEL); 501 if (!f) 502 goto errout; 503 504 err = tcf_exts_init(&f->exts, TCA_ROUTE4_ACT, TCA_ROUTE4_POLICE); 505 if (err < 0) 506 goto errout; 507 508 if (fold) { 509 f->id = fold->id; 510 f->iif = fold->iif; 511 f->res = fold->res; 512 f->handle = fold->handle; 513 514 f->tp = fold->tp; 515 f->bkt = fold->bkt; 516 new = false; 517 } 518 519 err = route4_set_parms(net, tp, base, f, handle, head, tb, 520 tca[TCA_RATE], new, ovr, extack); 521 if (err < 0) 522 goto errout; 523 524 h = from_hash(f->handle >> 16); 525 fp = &f->bkt->ht[h]; 526 for (pfp = rtnl_dereference(*fp); 527 (f1 = rtnl_dereference(*fp)) != NULL; 528 fp = &f1->next) 529 if (f->handle < f1->handle) 530 break; 531 532 tcf_block_netif_keep_dst(tp->chain->block); 533 rcu_assign_pointer(f->next, f1); 534 rcu_assign_pointer(*fp, f); 535 536 if (fold && fold->handle && f->handle != fold->handle) { 537 th = to_hash(fold->handle); 538 h = from_hash(fold->handle >> 16); 539 b = rtnl_dereference(head->table[th]); 540 if (b) { 541 fp = &b->ht[h]; 542 for (pfp = rtnl_dereference(*fp); pfp; 543 fp = &pfp->next, pfp = rtnl_dereference(*fp)) { 544 if (pfp == f) { 545 *fp = f->next; 546 break; 547 } 548 } 549 } 550 } 551 552 route4_reset_fastmap(head); 553 *arg = f; 554 if (fold) { 555 tcf_unbind_filter(tp, &fold->res); 556 tcf_exts_get_net(&fold->exts); 557 call_rcu(&fold->rcu, route4_delete_filter); 558 } 559 return 0; 560 561 errout: 562 if (f) 563 tcf_exts_destroy(&f->exts); 564 kfree(f); 565 return err; 566 } 567 568 static void route4_walk(struct tcf_proto *tp, struct tcf_walker *arg) 569 { 570 struct route4_head *head = rtnl_dereference(tp->root); 571 unsigned int h, h1; 572 573 if (head == NULL) 574 arg->stop = 1; 575 576 if (arg->stop) 577 return; 578 579 for (h = 0; h <= 256; h++) { 580 struct route4_bucket *b = rtnl_dereference(head->table[h]); 581 582 if (b) { 583 for (h1 = 0; h1 <= 32; h1++) { 584 struct route4_filter *f; 585 586 for (f = rtnl_dereference(b->ht[h1]); 587 f; 588 f = rtnl_dereference(f->next)) { 589 if (arg->count < arg->skip) { 590 arg->count++; 591 continue; 592 } 593 if (arg->fn(tp, f, arg) < 0) { 594 arg->stop = 1; 595 return; 596 } 597 arg->count++; 598 } 599 } 600 } 601 } 602 } 603 604 static int route4_dump(struct net *net, struct tcf_proto *tp, void *fh, 605 struct sk_buff *skb, struct tcmsg *t) 606 { 607 struct route4_filter *f = fh; 608 struct nlattr *nest; 609 u32 id; 610 611 if (f == NULL) 612 return skb->len; 613 614 t->tcm_handle = f->handle; 615 616 nest = nla_nest_start(skb, TCA_OPTIONS); 617 if (nest == NULL) 618 goto nla_put_failure; 619 620 if (!(f->handle & 0x8000)) { 621 id = f->id & 0xFF; 622 if (nla_put_u32(skb, TCA_ROUTE4_TO, id)) 623 goto nla_put_failure; 624 } 625 if (f->handle & 0x80000000) { 626 if ((f->handle >> 16) != 0xFFFF && 627 nla_put_u32(skb, TCA_ROUTE4_IIF, f->iif)) 628 goto nla_put_failure; 629 } else { 630 id = f->id >> 16; 631 if (nla_put_u32(skb, TCA_ROUTE4_FROM, id)) 632 goto nla_put_failure; 633 } 634 if (f->res.classid && 635 nla_put_u32(skb, TCA_ROUTE4_CLASSID, f->res.classid)) 636 goto nla_put_failure; 637 638 if (tcf_exts_dump(skb, &f->exts) < 0) 639 goto nla_put_failure; 640 641 nla_nest_end(skb, nest); 642 643 if (tcf_exts_dump_stats(skb, &f->exts) < 0) 644 goto nla_put_failure; 645 646 return skb->len; 647 648 nla_put_failure: 649 nla_nest_cancel(skb, nest); 650 return -1; 651 } 652 653 static void route4_bind_class(void *fh, u32 classid, unsigned long cl) 654 { 655 struct route4_filter *f = fh; 656 657 if (f && f->res.classid == classid) 658 f->res.class = cl; 659 } 660 661 static struct tcf_proto_ops cls_route4_ops __read_mostly = { 662 .kind = "route", 663 .classify = route4_classify, 664 .init = route4_init, 665 .destroy = route4_destroy, 666 .get = route4_get, 667 .change = route4_change, 668 .delete = route4_delete, 669 .walk = route4_walk, 670 .dump = route4_dump, 671 .bind_class = route4_bind_class, 672 .owner = THIS_MODULE, 673 }; 674 675 static int __init init_route4(void) 676 { 677 return register_tcf_proto_ops(&cls_route4_ops); 678 } 679 680 static void __exit exit_route4(void) 681 { 682 unregister_tcf_proto_ops(&cls_route4_ops); 683 } 684 685 module_init(init_route4) 686 module_exit(exit_route4) 687 MODULE_LICENSE("GPL"); 688