1*1a8bc229SAditi Ghag // SPDX-License-Identifier: GPL-2.0
2*1a8bc229SAditi Ghag
3*1a8bc229SAditi Ghag #include "vmlinux.h"
4*1a8bc229SAditi Ghag #include <bpf/bpf_helpers.h>
5*1a8bc229SAditi Ghag #include <bpf/bpf_endian.h>
6*1a8bc229SAditi Ghag
7*1a8bc229SAditi Ghag #include "bpf_tracing_net.h"
8*1a8bc229SAditi Ghag
9*1a8bc229SAditi Ghag __be16 serv_port = 0;
10*1a8bc229SAditi Ghag
11*1a8bc229SAditi Ghag int bpf_sock_destroy(struct sock_common *sk) __ksym;
12*1a8bc229SAditi Ghag
13*1a8bc229SAditi Ghag struct {
14*1a8bc229SAditi Ghag __uint(type, BPF_MAP_TYPE_ARRAY);
15*1a8bc229SAditi Ghag __uint(max_entries, 1);
16*1a8bc229SAditi Ghag __type(key, __u32);
17*1a8bc229SAditi Ghag __type(value, __u64);
18*1a8bc229SAditi Ghag } tcp_conn_sockets SEC(".maps");
19*1a8bc229SAditi Ghag
20*1a8bc229SAditi Ghag struct {
21*1a8bc229SAditi Ghag __uint(type, BPF_MAP_TYPE_ARRAY);
22*1a8bc229SAditi Ghag __uint(max_entries, 1);
23*1a8bc229SAditi Ghag __type(key, __u32);
24*1a8bc229SAditi Ghag __type(value, __u64);
25*1a8bc229SAditi Ghag } udp_conn_sockets SEC(".maps");
26*1a8bc229SAditi Ghag
27*1a8bc229SAditi Ghag SEC("cgroup/connect6")
sock_connect(struct bpf_sock_addr * ctx)28*1a8bc229SAditi Ghag int sock_connect(struct bpf_sock_addr *ctx)
29*1a8bc229SAditi Ghag {
30*1a8bc229SAditi Ghag __u64 sock_cookie = 0;
31*1a8bc229SAditi Ghag int key = 0;
32*1a8bc229SAditi Ghag __u32 keyc = 0;
33*1a8bc229SAditi Ghag
34*1a8bc229SAditi Ghag if (ctx->family != AF_INET6 || ctx->user_family != AF_INET6)
35*1a8bc229SAditi Ghag return 1;
36*1a8bc229SAditi Ghag
37*1a8bc229SAditi Ghag sock_cookie = bpf_get_socket_cookie(ctx);
38*1a8bc229SAditi Ghag if (ctx->protocol == IPPROTO_TCP)
39*1a8bc229SAditi Ghag bpf_map_update_elem(&tcp_conn_sockets, &key, &sock_cookie, 0);
40*1a8bc229SAditi Ghag else if (ctx->protocol == IPPROTO_UDP)
41*1a8bc229SAditi Ghag bpf_map_update_elem(&udp_conn_sockets, &keyc, &sock_cookie, 0);
42*1a8bc229SAditi Ghag else
43*1a8bc229SAditi Ghag return 1;
44*1a8bc229SAditi Ghag
45*1a8bc229SAditi Ghag return 1;
46*1a8bc229SAditi Ghag }
47*1a8bc229SAditi Ghag
48*1a8bc229SAditi Ghag SEC("iter/tcp")
iter_tcp6_client(struct bpf_iter__tcp * ctx)49*1a8bc229SAditi Ghag int iter_tcp6_client(struct bpf_iter__tcp *ctx)
50*1a8bc229SAditi Ghag {
51*1a8bc229SAditi Ghag struct sock_common *sk_common = ctx->sk_common;
52*1a8bc229SAditi Ghag __u64 sock_cookie = 0;
53*1a8bc229SAditi Ghag __u64 *val;
54*1a8bc229SAditi Ghag int key = 0;
55*1a8bc229SAditi Ghag
56*1a8bc229SAditi Ghag if (!sk_common)
57*1a8bc229SAditi Ghag return 0;
58*1a8bc229SAditi Ghag
59*1a8bc229SAditi Ghag if (sk_common->skc_family != AF_INET6)
60*1a8bc229SAditi Ghag return 0;
61*1a8bc229SAditi Ghag
62*1a8bc229SAditi Ghag sock_cookie = bpf_get_socket_cookie(sk_common);
63*1a8bc229SAditi Ghag val = bpf_map_lookup_elem(&tcp_conn_sockets, &key);
64*1a8bc229SAditi Ghag if (!val)
65*1a8bc229SAditi Ghag return 0;
66*1a8bc229SAditi Ghag /* Destroy connected client sockets. */
67*1a8bc229SAditi Ghag if (sock_cookie == *val)
68*1a8bc229SAditi Ghag bpf_sock_destroy(sk_common);
69*1a8bc229SAditi Ghag
70*1a8bc229SAditi Ghag return 0;
71*1a8bc229SAditi Ghag }
72*1a8bc229SAditi Ghag
73*1a8bc229SAditi Ghag SEC("iter/tcp")
iter_tcp6_server(struct bpf_iter__tcp * ctx)74*1a8bc229SAditi Ghag int iter_tcp6_server(struct bpf_iter__tcp *ctx)
75*1a8bc229SAditi Ghag {
76*1a8bc229SAditi Ghag struct sock_common *sk_common = ctx->sk_common;
77*1a8bc229SAditi Ghag const struct inet_connection_sock *icsk;
78*1a8bc229SAditi Ghag const struct inet_sock *inet;
79*1a8bc229SAditi Ghag struct tcp6_sock *tcp_sk;
80*1a8bc229SAditi Ghag __be16 srcp;
81*1a8bc229SAditi Ghag
82*1a8bc229SAditi Ghag if (!sk_common)
83*1a8bc229SAditi Ghag return 0;
84*1a8bc229SAditi Ghag
85*1a8bc229SAditi Ghag if (sk_common->skc_family != AF_INET6)
86*1a8bc229SAditi Ghag return 0;
87*1a8bc229SAditi Ghag
88*1a8bc229SAditi Ghag tcp_sk = bpf_skc_to_tcp6_sock(sk_common);
89*1a8bc229SAditi Ghag if (!tcp_sk)
90*1a8bc229SAditi Ghag return 0;
91*1a8bc229SAditi Ghag
92*1a8bc229SAditi Ghag icsk = &tcp_sk->tcp.inet_conn;
93*1a8bc229SAditi Ghag inet = &icsk->icsk_inet;
94*1a8bc229SAditi Ghag srcp = inet->inet_sport;
95*1a8bc229SAditi Ghag
96*1a8bc229SAditi Ghag /* Destroy server sockets. */
97*1a8bc229SAditi Ghag if (srcp == serv_port)
98*1a8bc229SAditi Ghag bpf_sock_destroy(sk_common);
99*1a8bc229SAditi Ghag
100*1a8bc229SAditi Ghag return 0;
101*1a8bc229SAditi Ghag }
102*1a8bc229SAditi Ghag
103*1a8bc229SAditi Ghag
104*1a8bc229SAditi Ghag SEC("iter/udp")
iter_udp6_client(struct bpf_iter__udp * ctx)105*1a8bc229SAditi Ghag int iter_udp6_client(struct bpf_iter__udp *ctx)
106*1a8bc229SAditi Ghag {
107*1a8bc229SAditi Ghag struct udp_sock *udp_sk = ctx->udp_sk;
108*1a8bc229SAditi Ghag struct sock *sk = (struct sock *) udp_sk;
109*1a8bc229SAditi Ghag __u64 sock_cookie = 0, *val;
110*1a8bc229SAditi Ghag int key = 0;
111*1a8bc229SAditi Ghag
112*1a8bc229SAditi Ghag if (!sk)
113*1a8bc229SAditi Ghag return 0;
114*1a8bc229SAditi Ghag
115*1a8bc229SAditi Ghag sock_cookie = bpf_get_socket_cookie(sk);
116*1a8bc229SAditi Ghag val = bpf_map_lookup_elem(&udp_conn_sockets, &key);
117*1a8bc229SAditi Ghag if (!val)
118*1a8bc229SAditi Ghag return 0;
119*1a8bc229SAditi Ghag /* Destroy connected client sockets. */
120*1a8bc229SAditi Ghag if (sock_cookie == *val)
121*1a8bc229SAditi Ghag bpf_sock_destroy((struct sock_common *)sk);
122*1a8bc229SAditi Ghag
123*1a8bc229SAditi Ghag return 0;
124*1a8bc229SAditi Ghag }
125*1a8bc229SAditi Ghag
126*1a8bc229SAditi Ghag SEC("iter/udp")
iter_udp6_server(struct bpf_iter__udp * ctx)127*1a8bc229SAditi Ghag int iter_udp6_server(struct bpf_iter__udp *ctx)
128*1a8bc229SAditi Ghag {
129*1a8bc229SAditi Ghag struct udp_sock *udp_sk = ctx->udp_sk;
130*1a8bc229SAditi Ghag struct sock *sk = (struct sock *) udp_sk;
131*1a8bc229SAditi Ghag struct inet_sock *inet;
132*1a8bc229SAditi Ghag __be16 srcp;
133*1a8bc229SAditi Ghag
134*1a8bc229SAditi Ghag if (!sk)
135*1a8bc229SAditi Ghag return 0;
136*1a8bc229SAditi Ghag
137*1a8bc229SAditi Ghag inet = &udp_sk->inet;
138*1a8bc229SAditi Ghag srcp = inet->inet_sport;
139*1a8bc229SAditi Ghag if (srcp == serv_port)
140*1a8bc229SAditi Ghag bpf_sock_destroy((struct sock_common *)sk);
141*1a8bc229SAditi Ghag
142*1a8bc229SAditi Ghag return 0;
143*1a8bc229SAditi Ghag }
144*1a8bc229SAditi Ghag
145*1a8bc229SAditi Ghag char _license[] SEC("license") = "GPL";
146