cls_fw.c 9.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434
  1. /*
  2. * net/sched/cls_fw.c Classifier mapping ipchains' fwmark to traffic class.
  3. *
  4. * This program is free software; you can redistribute it and/or
  5. * modify it under the terms of the GNU General Public License
  6. * as published by the Free Software Foundation; either version
  7. * 2 of the License, or (at your option) any later version.
  8. *
  9. * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
  10. *
  11. * Changes:
  12. * Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_walk off by one
  13. * Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_delete killed all the filter (and kernel).
  14. * Alex <alex@pilotsoft.com> : 2004xxyy: Added Action extension
  15. *
  16. * JHS: We should remove the CONFIG_NET_CLS_IND from here
  17. * eventually when the meta match extension is made available
  18. *
  19. */
  20. #include <linux/module.h>
  21. #include <linux/slab.h>
  22. #include <linux/types.h>
  23. #include <linux/kernel.h>
  24. #include <linux/string.h>
  25. #include <linux/errno.h>
  26. #include <linux/skbuff.h>
  27. #include <net/netlink.h>
  28. #include <net/act_api.h>
  29. #include <net/pkt_cls.h>
  30. #define HTSIZE 256
  31. struct fw_head {
  32. u32 mask;
  33. struct fw_filter __rcu *ht[HTSIZE];
  34. struct rcu_head rcu;
  35. };
  36. struct fw_filter {
  37. struct fw_filter __rcu *next;
  38. u32 id;
  39. struct tcf_result res;
  40. #ifdef CONFIG_NET_CLS_IND
  41. int ifindex;
  42. #endif /* CONFIG_NET_CLS_IND */
  43. struct tcf_exts exts;
  44. struct tcf_proto *tp;
  45. struct rcu_head rcu;
  46. };
  47. static u32 fw_hash(u32 handle)
  48. {
  49. handle ^= (handle >> 16);
  50. handle ^= (handle >> 8);
  51. return handle % HTSIZE;
  52. }
  53. static int fw_classify(struct sk_buff *skb, const struct tcf_proto *tp,
  54. struct tcf_result *res)
  55. {
  56. struct fw_head *head = rcu_dereference_bh(tp->root);
  57. struct fw_filter *f;
  58. int r;
  59. u32 id = skb->mark;
  60. if (head != NULL) {
  61. id &= head->mask;
  62. for (f = rcu_dereference_bh(head->ht[fw_hash(id)]); f;
  63. f = rcu_dereference_bh(f->next)) {
  64. if (f->id == id) {
  65. *res = f->res;
  66. #ifdef CONFIG_NET_CLS_IND
  67. if (!tcf_match_indev(skb, f->ifindex))
  68. continue;
  69. #endif /* CONFIG_NET_CLS_IND */
  70. r = tcf_exts_exec(skb, &f->exts, res);
  71. if (r < 0)
  72. continue;
  73. return r;
  74. }
  75. }
  76. } else {
  77. /* old method */
  78. if (id && (TC_H_MAJ(id) == 0 ||
  79. !(TC_H_MAJ(id ^ tp->q->handle)))) {
  80. res->classid = id;
  81. res->class = 0;
  82. return 0;
  83. }
  84. }
  85. return -1;
  86. }
  87. static unsigned long fw_get(struct tcf_proto *tp, u32 handle)
  88. {
  89. struct fw_head *head = rtnl_dereference(tp->root);
  90. struct fw_filter *f;
  91. if (head == NULL)
  92. return 0;
  93. f = rtnl_dereference(head->ht[fw_hash(handle)]);
  94. for (; f; f = rtnl_dereference(f->next)) {
  95. if (f->id == handle)
  96. return (unsigned long)f;
  97. }
  98. return 0;
  99. }
  100. static void fw_put(struct tcf_proto *tp, unsigned long f)
  101. {
  102. }
  103. static int fw_init(struct tcf_proto *tp)
  104. {
  105. return 0;
  106. }
  107. static void fw_delete_filter(struct rcu_head *head)
  108. {
  109. struct fw_filter *f = container_of(head, struct fw_filter, rcu);
  110. tcf_exts_destroy(&f->exts);
  111. kfree(f);
  112. }
  113. static void fw_destroy(struct tcf_proto *tp)
  114. {
  115. struct fw_head *head = rtnl_dereference(tp->root);
  116. struct fw_filter *f;
  117. int h;
  118. if (head == NULL)
  119. return;
  120. for (h = 0; h < HTSIZE; h++) {
  121. while ((f = rtnl_dereference(head->ht[h])) != NULL) {
  122. RCU_INIT_POINTER(head->ht[h],
  123. rtnl_dereference(f->next));
  124. tcf_unbind_filter(tp, &f->res);
  125. call_rcu(&f->rcu, fw_delete_filter);
  126. }
  127. }
  128. RCU_INIT_POINTER(tp->root, NULL);
  129. kfree_rcu(head, rcu);
  130. }
  131. static int fw_delete(struct tcf_proto *tp, unsigned long arg)
  132. {
  133. struct fw_head *head = rtnl_dereference(tp->root);
  134. struct fw_filter *f = (struct fw_filter *)arg;
  135. struct fw_filter __rcu **fp;
  136. struct fw_filter *pfp;
  137. if (head == NULL || f == NULL)
  138. goto out;
  139. fp = &head->ht[fw_hash(f->id)];
  140. for (pfp = rtnl_dereference(*fp); pfp;
  141. fp = &pfp->next, pfp = rtnl_dereference(*fp)) {
  142. if (pfp == f) {
  143. RCU_INIT_POINTER(*fp, rtnl_dereference(f->next));
  144. tcf_unbind_filter(tp, &f->res);
  145. call_rcu(&f->rcu, fw_delete_filter);
  146. return 0;
  147. }
  148. }
  149. out:
  150. return -EINVAL;
  151. }
  152. static const struct nla_policy fw_policy[TCA_FW_MAX + 1] = {
  153. [TCA_FW_CLASSID] = { .type = NLA_U32 },
  154. [TCA_FW_INDEV] = { .type = NLA_STRING, .len = IFNAMSIZ },
  155. [TCA_FW_MASK] = { .type = NLA_U32 },
  156. };
  157. static int
  158. fw_change_attrs(struct net *net, struct tcf_proto *tp, struct fw_filter *f,
  159. struct nlattr **tb, struct nlattr **tca, unsigned long base, bool ovr)
  160. {
  161. struct fw_head *head = rtnl_dereference(tp->root);
  162. struct tcf_exts e;
  163. u32 mask;
  164. int err;
  165. tcf_exts_init(&e, TCA_FW_ACT, TCA_FW_POLICE);
  166. err = tcf_exts_validate(net, tp, tb, tca[TCA_RATE], &e, ovr);
  167. if (err < 0)
  168. return err;
  169. if (tb[TCA_FW_CLASSID]) {
  170. f->res.classid = nla_get_u32(tb[TCA_FW_CLASSID]);
  171. tcf_bind_filter(tp, &f->res, base);
  172. }
  173. #ifdef CONFIG_NET_CLS_IND
  174. if (tb[TCA_FW_INDEV]) {
  175. int ret;
  176. ret = tcf_change_indev(net, tb[TCA_FW_INDEV]);
  177. if (ret < 0) {
  178. err = ret;
  179. goto errout;
  180. }
  181. f->ifindex = ret;
  182. }
  183. #endif /* CONFIG_NET_CLS_IND */
  184. err = -EINVAL;
  185. if (tb[TCA_FW_MASK]) {
  186. mask = nla_get_u32(tb[TCA_FW_MASK]);
  187. if (mask != head->mask)
  188. goto errout;
  189. } else if (head->mask != 0xFFFFFFFF)
  190. goto errout;
  191. tcf_exts_change(tp, &f->exts, &e);
  192. return 0;
  193. errout:
  194. tcf_exts_destroy(&e);
  195. return err;
  196. }
  197. static int fw_change(struct net *net, struct sk_buff *in_skb,
  198. struct tcf_proto *tp, unsigned long base,
  199. u32 handle,
  200. struct nlattr **tca,
  201. unsigned long *arg, bool ovr)
  202. {
  203. struct fw_head *head = rtnl_dereference(tp->root);
  204. struct fw_filter *f = (struct fw_filter *) *arg;
  205. struct nlattr *opt = tca[TCA_OPTIONS];
  206. struct nlattr *tb[TCA_FW_MAX + 1];
  207. int err;
  208. if (!opt)
  209. return handle ? -EINVAL : 0;
  210. err = nla_parse_nested(tb, TCA_FW_MAX, opt, fw_policy);
  211. if (err < 0)
  212. return err;
  213. if (f) {
  214. struct fw_filter *pfp, *fnew;
  215. struct fw_filter __rcu **fp;
  216. if (f->id != handle && handle)
  217. return -EINVAL;
  218. fnew = kzalloc(sizeof(struct fw_filter), GFP_KERNEL);
  219. if (!fnew)
  220. return -ENOBUFS;
  221. fnew->id = f->id;
  222. fnew->res = f->res;
  223. #ifdef CONFIG_NET_CLS_IND
  224. fnew->ifindex = f->ifindex;
  225. #endif /* CONFIG_NET_CLS_IND */
  226. fnew->tp = f->tp;
  227. tcf_exts_init(&fnew->exts, TCA_FW_ACT, TCA_FW_POLICE);
  228. err = fw_change_attrs(net, tp, fnew, tb, tca, base, ovr);
  229. if (err < 0) {
  230. kfree(fnew);
  231. return err;
  232. }
  233. fp = &head->ht[fw_hash(fnew->id)];
  234. for (pfp = rtnl_dereference(*fp); pfp;
  235. fp = &pfp->next, pfp = rtnl_dereference(*fp))
  236. if (pfp == f)
  237. break;
  238. RCU_INIT_POINTER(fnew->next, rtnl_dereference(pfp->next));
  239. rcu_assign_pointer(*fp, fnew);
  240. tcf_unbind_filter(tp, &f->res);
  241. call_rcu(&f->rcu, fw_delete_filter);
  242. *arg = (unsigned long)fnew;
  243. return err;
  244. }
  245. if (!handle)
  246. return -EINVAL;
  247. if (head == NULL) {
  248. u32 mask = 0xFFFFFFFF;
  249. if (tb[TCA_FW_MASK])
  250. mask = nla_get_u32(tb[TCA_FW_MASK]);
  251. head = kzalloc(sizeof(struct fw_head), GFP_KERNEL);
  252. if (head == NULL)
  253. return -ENOBUFS;
  254. head->mask = mask;
  255. rcu_assign_pointer(tp->root, head);
  256. }
  257. f = kzalloc(sizeof(struct fw_filter), GFP_KERNEL);
  258. if (f == NULL)
  259. return -ENOBUFS;
  260. tcf_exts_init(&f->exts, TCA_FW_ACT, TCA_FW_POLICE);
  261. f->id = handle;
  262. f->tp = tp;
  263. err = fw_change_attrs(net, tp, f, tb, tca, base, ovr);
  264. if (err < 0)
  265. goto errout;
  266. RCU_INIT_POINTER(f->next, head->ht[fw_hash(handle)]);
  267. rcu_assign_pointer(head->ht[fw_hash(handle)], f);
  268. *arg = (unsigned long)f;
  269. return 0;
  270. errout:
  271. kfree(f);
  272. return err;
  273. }
  274. static void fw_walk(struct tcf_proto *tp, struct tcf_walker *arg)
  275. {
  276. struct fw_head *head = rtnl_dereference(tp->root);
  277. int h;
  278. if (head == NULL)
  279. arg->stop = 1;
  280. if (arg->stop)
  281. return;
  282. for (h = 0; h < HTSIZE; h++) {
  283. struct fw_filter *f;
  284. for (f = rtnl_dereference(head->ht[h]); f;
  285. f = rtnl_dereference(f->next)) {
  286. if (arg->count < arg->skip) {
  287. arg->count++;
  288. continue;
  289. }
  290. if (arg->fn(tp, (unsigned long)f, arg) < 0) {
  291. arg->stop = 1;
  292. return;
  293. }
  294. arg->count++;
  295. }
  296. }
  297. }
  298. static int fw_dump(struct net *net, struct tcf_proto *tp, unsigned long fh,
  299. struct sk_buff *skb, struct tcmsg *t)
  300. {
  301. struct fw_head *head = rtnl_dereference(tp->root);
  302. struct fw_filter *f = (struct fw_filter *)fh;
  303. unsigned char *b = skb_tail_pointer(skb);
  304. struct nlattr *nest;
  305. if (f == NULL)
  306. return skb->len;
  307. t->tcm_handle = f->id;
  308. if (!f->res.classid && !tcf_exts_is_available(&f->exts))
  309. return skb->len;
  310. nest = nla_nest_start(skb, TCA_OPTIONS);
  311. if (nest == NULL)
  312. goto nla_put_failure;
  313. if (f->res.classid &&
  314. nla_put_u32(skb, TCA_FW_CLASSID, f->res.classid))
  315. goto nla_put_failure;
  316. #ifdef CONFIG_NET_CLS_IND
  317. if (f->ifindex) {
  318. struct net_device *dev;
  319. dev = __dev_get_by_index(net, f->ifindex);
  320. if (dev && nla_put_string(skb, TCA_FW_INDEV, dev->name))
  321. goto nla_put_failure;
  322. }
  323. #endif /* CONFIG_NET_CLS_IND */
  324. if (head->mask != 0xFFFFFFFF &&
  325. nla_put_u32(skb, TCA_FW_MASK, head->mask))
  326. goto nla_put_failure;
  327. if (tcf_exts_dump(skb, &f->exts) < 0)
  328. goto nla_put_failure;
  329. nla_nest_end(skb, nest);
  330. if (tcf_exts_dump_stats(skb, &f->exts) < 0)
  331. goto nla_put_failure;
  332. return skb->len;
  333. nla_put_failure:
  334. nlmsg_trim(skb, b);
  335. return -1;
  336. }
  337. static struct tcf_proto_ops cls_fw_ops __read_mostly = {
  338. .kind = "fw",
  339. .classify = fw_classify,
  340. .init = fw_init,
  341. .destroy = fw_destroy,
  342. .get = fw_get,
  343. .put = fw_put,
  344. .change = fw_change,
  345. .delete = fw_delete,
  346. .walk = fw_walk,
  347. .dump = fw_dump,
  348. .owner = THIS_MODULE,
  349. };
  350. static int __init init_fw(void)
  351. {
  352. return register_tcf_proto_ops(&cls_fw_ops);
  353. }
  354. static void __exit exit_fw(void)
  355. {
  356. unregister_tcf_proto_ops(&cls_fw_ops);
  357. }
  358. module_init(init_fw)
  359. module_exit(exit_fw)
  360. MODULE_LICENSE("GPL");