[deliverable/linux.git] / include / net / netfilter / nf_conntrack_ecache.h

/*
 * connection tracking event cache.
 */

#ifndef _NF_CONNTRACK_ECACHE_H
#define _NF_CONNTRACK_ECACHE_H
#include <net/netfilter/nf_conntrack.h>

#include <linux/notifier.h>
#include <linux/interrupt.h>
#include <net/net_namespace.h>
#include <net/netfilter/nf_conntrack_expect.h>

/* Connection tracking event bits */
enum ip_conntrack_events
{
	/* New conntrack */
	IPCT_NEW_BIT = 0,
	IPCT_NEW = (1 << IPCT_NEW_BIT),

	/* Expected connection */
	IPCT_RELATED_BIT = 1,
	IPCT_RELATED = (1 << IPCT_RELATED_BIT),

	/* Destroyed conntrack */
	IPCT_DESTROY_BIT = 2,
	IPCT_DESTROY = (1 << IPCT_DESTROY_BIT),

	/* Status has changed */
	IPCT_STATUS_BIT = 3,
	IPCT_STATUS = (1 << IPCT_STATUS_BIT),

	/* Update of protocol info */
	IPCT_PROTOINFO_BIT = 4,
	IPCT_PROTOINFO = (1 << IPCT_PROTOINFO_BIT),

	/* New helper for conntrack */
	IPCT_HELPER_BIT = 5,
	IPCT_HELPER = (1 << IPCT_HELPER_BIT),

	/* Mark is set */
	IPCT_MARK_BIT = 6,
	IPCT_MARK = (1 << IPCT_MARK_BIT),

	/* NAT sequence adjustment */
	IPCT_NATSEQADJ_BIT = 7,
	IPCT_NATSEQADJ = (1 << IPCT_NATSEQADJ_BIT),

	/* Secmark is set */
	IPCT_SECMARK_BIT = 8,
	IPCT_SECMARK = (1 << IPCT_SECMARK_BIT),
};

enum ip_conntrack_expect_events {
	IPEXP_NEW_BIT = 0,
	IPEXP_NEW = (1 << IPEXP_NEW_BIT),
};

#ifdef CONFIG_NF_CONNTRACK_EVENTS
struct nf_conntrack_ecache {
	struct nf_conn *ct;
	unsigned int events;
};

/* This structure is passed to event handler */
struct nf_ct_event {
	struct nf_conn *ct;
	u32 pid;
	int report;
};

extern struct atomic_notifier_head nf_conntrack_chain;
extern int nf_conntrack_register_notifier(struct notifier_block *nb);
extern int nf_conntrack_unregister_notifier(struct notifier_block *nb);

extern void nf_ct_deliver_cached_events(const struct nf_conn *ct);
extern void __nf_ct_event_cache_init(struct nf_conn *ct);
extern void nf_ct_event_cache_flush(struct net *net);

static inline void
nf_conntrack_event_cache(enum ip_conntrack_events event, struct nf_conn *ct)
{
	struct net *net = nf_ct_net(ct);
	struct nf_conntrack_ecache *ecache;

	local_bh_disable();
	ecache = per_cpu_ptr(net->ct.ecache, raw_smp_processor_id());
	if (ct != ecache->ct)
		__nf_ct_event_cache_init(ct);
	ecache->events |= event;
	local_bh_enable();
}

static inline void
nf_conntrack_event_report(enum ip_conntrack_events event,
			  struct nf_conn *ct,
			  u32 pid,
			  int report)
{
	struct nf_ct_event item = {
		.ct 	= ct,
		.pid	= pid,
		.report = report
	};
	if (nf_ct_is_confirmed(ct) && !nf_ct_is_dying(ct))
		atomic_notifier_call_chain(&nf_conntrack_chain, event, &item);
}

static inline void
nf_conntrack_event(enum ip_conntrack_events event, struct nf_conn *ct)
{
	nf_conntrack_event_report(event, ct, 0, 0);
}

struct nf_exp_event {
	struct nf_conntrack_expect *exp;
	u32 pid;
	int report;
};

extern struct atomic_notifier_head nf_ct_expect_chain;
extern int nf_ct_expect_register_notifier(struct notifier_block *nb);
extern int nf_ct_expect_unregister_notifier(struct notifier_block *nb);

static inline void
nf_ct_expect_event_report(enum ip_conntrack_expect_events event,
			  struct nf_conntrack_expect *exp,
			  u32 pid,
			  int report)
{
	struct nf_exp_event item = {
		.exp	= exp,
		.pid	= pid,
		.report = report
	};
	atomic_notifier_call_chain(&nf_ct_expect_chain, event, &item);
}

static inline void
nf_ct_expect_event(enum ip_conntrack_expect_events event,
		   struct nf_conntrack_expect *exp)
{
	nf_ct_expect_event_report(event, exp, 0, 0);
}

extern int nf_conntrack_ecache_init(struct net *net);
extern void nf_conntrack_ecache_fini(struct net *net);

#else /* CONFIG_NF_CONNTRACK_EVENTS */

static inline void nf_conntrack_event_cache(enum ip_conntrack_events event,
					    struct nf_conn *ct) {}
static inline void nf_conntrack_event(enum ip_conntrack_events event,
				      struct nf_conn *ct) {}
static inline void nf_conntrack_event_report(enum ip_conntrack_events event,
					     struct nf_conn *ct,
					     u32 pid,
					     int report) {}
static inline void nf_ct_deliver_cached_events(const struct nf_conn *ct) {}
static inline void nf_ct_expect_event(enum ip_conntrack_expect_events event,
				      struct nf_conntrack_expect *exp) {}
static inline void nf_ct_expect_event_report(enum ip_conntrack_expect_events e,
					     struct nf_conntrack_expect *exp,
 					     u32 pid,
 					     int report) {}
static inline void nf_ct_event_cache_flush(struct net *net) {}

static inline int nf_conntrack_ecache_init(struct net *net)
{
	return 0;
}

static inline void nf_conntrack_ecache_fini(struct net *net)
{
}
#endif /* CONFIG_NF_CONNTRACK_EVENTS */

#endif /*_NF_CONNTRACK_ECACHE_H*/
Commit	Line	Data
f6180121 MJ	1	/*
	2	* connection tracking event cache.
	3	*/
	4
	5	#ifndef _NF_CONNTRACK_ECACHE_H
	6	#define _NF_CONNTRACK_ECACHE_H
	7	#include <net/netfilter/nf_conntrack.h>
	8
	9	#include <linux/notifier.h>
	10	#include <linux/interrupt.h>
6058fa6b	11	#include <net/net_namespace.h>
f6180121 MJ	12	#include <net/netfilter/nf_conntrack_expect.h>
f6180121 MJ	13
6bfea198 PNA	14	/* Connection tracking event bits */
	15	enum ip_conntrack_events
	16	{
	17	/* New conntrack */
	18	IPCT_NEW_BIT = 0,
	19	IPCT_NEW = (1 << IPCT_NEW_BIT),
	20
	21	/* Expected connection */
	22	IPCT_RELATED_BIT = 1,
	23	IPCT_RELATED = (1 << IPCT_RELATED_BIT),
	24
	25	/* Destroyed conntrack */
	26	IPCT_DESTROY_BIT = 2,
	27	IPCT_DESTROY = (1 << IPCT_DESTROY_BIT),
	28
6bfea198	29	/* Status has changed */
17e6e4ea	30	IPCT_STATUS_BIT = 3,
6bfea198 PNA	31	IPCT_STATUS = (1 << IPCT_STATUS_BIT),
	32
	33	/* Update of protocol info */
17e6e4ea	34	IPCT_PROTOINFO_BIT = 4,
6bfea198 PNA	35	IPCT_PROTOINFO = (1 << IPCT_PROTOINFO_BIT),
6bfea198 PNA	36
6bfea198	37	/* New helper for conntrack */
17e6e4ea	38	IPCT_HELPER_BIT = 5,
6bfea198 PNA	39	IPCT_HELPER = (1 << IPCT_HELPER_BIT),
6bfea198 PNA	40
6bfea198	41	/* Mark is set */
17e6e4ea	42	IPCT_MARK_BIT = 6,
6bfea198 PNA	43	IPCT_MARK = (1 << IPCT_MARK_BIT),
	44
	45	/* NAT sequence adjustment */
17e6e4ea	46	IPCT_NATSEQADJ_BIT = 7,
6bfea198 PNA	47	IPCT_NATSEQADJ = (1 << IPCT_NATSEQADJ_BIT),
	48
	49	/* Secmark is set */
17e6e4ea	50	IPCT_SECMARK_BIT = 8,
6bfea198 PNA	51	IPCT_SECMARK = (1 << IPCT_SECMARK_BIT),
	52	};
	53
	54	enum ip_conntrack_expect_events {
	55	IPEXP_NEW_BIT = 0,
	56	IPEXP_NEW = (1 << IPEXP_NEW_BIT),
	57	};
	58
f6180121 MJ	59	#ifdef CONFIG_NF_CONNTRACK_EVENTS
	60	struct nf_conntrack_ecache {
	61	struct nf_conn *ct;
	62	unsigned int events;
	63	};
f6180121	64
19abb7b0 PNA	65	/* This structure is passed to event handler */
	66	struct nf_ct_event {
	67	struct nf_conn *ct;
	68	u32 pid;
	69	int report;
	70	};
	71
f6180121	72	extern struct atomic_notifier_head nf_conntrack_chain;
010c7d6f PM	73	extern int nf_conntrack_register_notifier(struct notifier_block *nb);
010c7d6f PM	74	extern int nf_conntrack_unregister_notifier(struct notifier_block *nb);
f6180121 MJ	75
	76	extern void nf_ct_deliver_cached_events(const struct nf_conn *ct);
	77	extern void __nf_ct_event_cache_init(struct nf_conn *ct);
6058fa6b	78	extern void nf_ct_event_cache_flush(struct net *net);
f6180121 MJ	79
f6180121 MJ	80	static inline void
a71996fc	81	nf_conntrack_event_cache(enum ip_conntrack_events event, struct nf_conn *ct)
f6180121	82	{
6058fa6b	83	struct net *net = nf_ct_net(ct);
f6180121 MJ	84	struct nf_conntrack_ecache *ecache;
	85
	86	local_bh_disable();
6058fa6b	87	ecache = per_cpu_ptr(net->ct.ecache, raw_smp_processor_id());
f6180121 MJ	88	if (ct != ecache->ct)
	89	__nf_ct_event_cache_init(ct);
	90	ecache->events \|= event;
	91	local_bh_enable();
	92	}
	93
19abb7b0 PNA	94	static inline void
	95	nf_conntrack_event_report(enum ip_conntrack_events event,
	96	struct nf_conn *ct,
	97	u32 pid,
	98	int report)
f6180121	99	{
19abb7b0 PNA	100	struct nf_ct_event item = {
	101	.ct = ct,
	102	.pid = pid,
	103	.report = report
	104	};
f6180121	105	if (nf_ct_is_confirmed(ct) && !nf_ct_is_dying(ct))
19abb7b0	106	atomic_notifier_call_chain(&nf_conntrack_chain, event, &item);
f6180121 MJ	107	}
f6180121 MJ	108
19abb7b0 PNA	109	static inline void
	110	nf_conntrack_event(enum ip_conntrack_events event, struct nf_conn *ct)
	111	{
	112	nf_conntrack_event_report(event, ct, 0, 0);
	113	}
	114
	115	struct nf_exp_event {
	116	struct nf_conntrack_expect *exp;
	117	u32 pid;
	118	int report;
	119	};
	120
6823645d PM	121	extern struct atomic_notifier_head nf_ct_expect_chain;
	122	extern int nf_ct_expect_register_notifier(struct notifier_block *nb);
	123	extern int nf_ct_expect_unregister_notifier(struct notifier_block *nb);
010c7d6f	124
19abb7b0 PNA	125	static inline void
	126	nf_ct_expect_event_report(enum ip_conntrack_expect_events event,
	127	struct nf_conntrack_expect *exp,
	128	u32 pid,
	129	int report)
	130	{
	131	struct nf_exp_event item = {
	132	.exp = exp,
	133	.pid = pid,
	134	.report = report
	135	};
	136	atomic_notifier_call_chain(&nf_ct_expect_chain, event, &item);
	137	}
	138
f6180121	139	static inline void
6823645d PM	140	nf_ct_expect_event(enum ip_conntrack_expect_events event,
6823645d PM	141	struct nf_conntrack_expect *exp)
f6180121	142	{
19abb7b0	143	nf_ct_expect_event_report(event, exp, 0, 0);
f6180121 MJ	144	}
f6180121 MJ	145
6058fa6b AD	146	extern int nf_conntrack_ecache_init(struct net *net);
	147	extern void nf_conntrack_ecache_fini(struct net *net);
	148
f6180121 MJ	149	#else /* CONFIG_NF_CONNTRACK_EVENTS */
	150
	151	static inline void nf_conntrack_event_cache(enum ip_conntrack_events event,
64f1b653	152	struct nf_conn *ct) {}
f6180121 MJ	153	static inline void nf_conntrack_event(enum ip_conntrack_events event,
f6180121 MJ	154	struct nf_conn *ct) {}
19abb7b0 PNA	155	static inline void nf_conntrack_event_report(enum ip_conntrack_events event,
	156	struct nf_conn *ct,
	157	u32 pid,
	158	int report) {}
f6180121	159	static inline void nf_ct_deliver_cached_events(const struct nf_conn *ct) {}
6823645d PM	160	static inline void nf_ct_expect_event(enum ip_conntrack_expect_events event,
6823645d PM	161	struct nf_conntrack_expect *exp) {}
19abb7b0 PNA	162	static inline void nf_ct_expect_event_report(enum ip_conntrack_expect_events e,
	163	struct nf_conntrack_expect *exp,
	164	u32 pid,
	165	int report) {}
6058fa6b AD	166	static inline void nf_ct_event_cache_flush(struct net *net) {}
	167
	168	static inline int nf_conntrack_ecache_init(struct net *net)
	169	{
	170	return 0;
bb21c95e	171	}
6058fa6b AD	172
	173	static inline void nf_conntrack_ecache_fini(struct net *net)
	174	{
	175	}
f6180121 MJ	176	#endif /* CONFIG_NF_CONNTRACK_EVENTS */
	177
	178	#endif /_NF_CONNTRACK_ECACHE_H/
	179