Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec...
[deliverable/linux.git] / net / sched / cls_fw.c
CommitLineData
1da177e4
LT
1/*
2 * net/sched/cls_fw.c Classifier mapping ipchains' fwmark to traffic class.
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version
7 * 2 of the License, or (at your option) any later version.
8 *
9 * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
10 *
11 * Changes:
12 * Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_walk off by one
13 * Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_delete killed all the filter (and kernel).
14 * Alex <alex@pilotsoft.com> : 2004xxyy: Added Action extension
15 *
16 * JHS: We should remove the CONFIG_NET_CLS_IND from here
17 * eventually when the meta match extension is made available
18 *
19 */
20
1da177e4 21#include <linux/module.h>
5a0e3ad6 22#include <linux/slab.h>
1da177e4
LT
23#include <linux/types.h>
24#include <linux/kernel.h>
1da177e4 25#include <linux/string.h>
1da177e4 26#include <linux/errno.h>
1da177e4 27#include <linux/skbuff.h>
0ba48053 28#include <net/netlink.h>
1da177e4
LT
29#include <net/act_api.h>
30#include <net/pkt_cls.h>
31
c5c13faf
TG
32#define HTSIZE (PAGE_SIZE/sizeof(struct fw_filter *))
33
cc7ec456 34struct fw_head {
c5c13faf 35 struct fw_filter *ht[HTSIZE];
b4e9b520 36 u32 mask;
1da177e4
LT
37};
38
cc7ec456 39struct fw_filter {
1da177e4
LT
40 struct fw_filter *next;
41 u32 id;
42 struct tcf_result res;
43#ifdef CONFIG_NET_CLS_IND
2519a602 44 int ifindex;
1da177e4
LT
45#endif /* CONFIG_NET_CLS_IND */
46 struct tcf_exts exts;
47};
48
cc7ec456 49static inline int fw_hash(u32 handle)
1da177e4 50{
c5c13faf
TG
51 if (HTSIZE == 4096)
52 return ((handle >> 24) & 0xFFF) ^
53 ((handle >> 12) & 0xFFF) ^
54 (handle & 0xFFF);
55 else if (HTSIZE == 2048)
56 return ((handle >> 22) & 0x7FF) ^
57 ((handle >> 11) & 0x7FF) ^
58 (handle & 0x7FF);
59 else if (HTSIZE == 1024)
60 return ((handle >> 20) & 0x3FF) ^
61 ((handle >> 10) & 0x3FF) ^
62 (handle & 0x3FF);
63 else if (HTSIZE == 512)
64 return (handle >> 27) ^
65 ((handle >> 18) & 0x1FF) ^
66 ((handle >> 9) & 0x1FF) ^
67 (handle & 0x1FF);
68 else if (HTSIZE == 256) {
69 u8 *t = (u8 *) &handle;
70 return t[0] ^ t[1] ^ t[2] ^ t[3];
10297b99 71 } else
c5c13faf 72 return handle & (HTSIZE - 1);
1da177e4
LT
73}
74
dc7f9f6e 75static int fw_classify(struct sk_buff *skb, const struct tcf_proto *tp,
1da177e4
LT
76 struct tcf_result *res)
77{
a8701a6c 78 struct fw_head *head = tp->root;
1da177e4
LT
79 struct fw_filter *f;
80 int r;
5c804bfd 81 u32 id = skb->mark;
1da177e4
LT
82
83 if (head != NULL) {
5c804bfd 84 id &= head->mask;
cc7ec456 85 for (f = head->ht[fw_hash(id)]; f; f = f->next) {
1da177e4
LT
86 if (f->id == id) {
87 *res = f->res;
88#ifdef CONFIG_NET_CLS_IND
2519a602 89 if (!tcf_match_indev(skb, f->ifindex))
1da177e4
LT
90 continue;
91#endif /* CONFIG_NET_CLS_IND */
92 r = tcf_exts_exec(skb, &f->exts, res);
93 if (r < 0)
94 continue;
95
96 return r;
97 }
98 }
99 } else {
100 /* old method */
cc7ec456
ED
101 if (id && (TC_H_MAJ(id) == 0 ||
102 !(TC_H_MAJ(id ^ tp->q->handle)))) {
1da177e4
LT
103 res->classid = id;
104 res->class = 0;
105 return 0;
106 }
107 }
108
109 return -1;
110}
111
112static unsigned long fw_get(struct tcf_proto *tp, u32 handle)
113{
a8701a6c 114 struct fw_head *head = tp->root;
1da177e4
LT
115 struct fw_filter *f;
116
117 if (head == NULL)
118 return 0;
119
cc7ec456 120 for (f = head->ht[fw_hash(handle)]; f; f = f->next) {
1da177e4
LT
121 if (f->id == handle)
122 return (unsigned long)f;
123 }
124 return 0;
125}
126
127static void fw_put(struct tcf_proto *tp, unsigned long f)
128{
129}
130
131static int fw_init(struct tcf_proto *tp)
132{
133 return 0;
134}
135
cc7ec456 136static void fw_delete_filter(struct tcf_proto *tp, struct fw_filter *f)
1da177e4
LT
137{
138 tcf_unbind_filter(tp, &f->res);
139 tcf_exts_destroy(tp, &f->exts);
140 kfree(f);
141}
142
143static void fw_destroy(struct tcf_proto *tp)
144{
47a1a1d4 145 struct fw_head *head = tp->root;
1da177e4
LT
146 struct fw_filter *f;
147 int h;
148
149 if (head == NULL)
150 return;
151
cc7ec456
ED
152 for (h = 0; h < HTSIZE; h++) {
153 while ((f = head->ht[h]) != NULL) {
1da177e4
LT
154 head->ht[h] = f->next;
155 fw_delete_filter(tp, f);
156 }
157 }
158 kfree(head);
159}
160
161static int fw_delete(struct tcf_proto *tp, unsigned long arg)
162{
a8701a6c 163 struct fw_head *head = tp->root;
cc7ec456 164 struct fw_filter *f = (struct fw_filter *)arg;
1da177e4
LT
165 struct fw_filter **fp;
166
167 if (head == NULL || f == NULL)
168 goto out;
169
cc7ec456 170 for (fp = &head->ht[fw_hash(f->id)]; *fp; fp = &(*fp)->next) {
1da177e4
LT
171 if (*fp == f) {
172 tcf_tree_lock(tp);
173 *fp = f->next;
174 tcf_tree_unlock(tp);
175 fw_delete_filter(tp, f);
176 return 0;
177 }
178 }
179out:
180 return -EINVAL;
181}
182
6fa8c014
PM
183static const struct nla_policy fw_policy[TCA_FW_MAX + 1] = {
184 [TCA_FW_CLASSID] = { .type = NLA_U32 },
185 [TCA_FW_INDEV] = { .type = NLA_STRING, .len = IFNAMSIZ },
186 [TCA_FW_MASK] = { .type = NLA_U32 },
187};
188
1da177e4 189static int
c1b52739 190fw_change_attrs(struct net *net, struct tcf_proto *tp, struct fw_filter *f,
add93b61 191 struct nlattr **tb, struct nlattr **tca, unsigned long base)
1da177e4 192{
a8701a6c 193 struct fw_head *head = tp->root;
1da177e4 194 struct tcf_exts e;
b4e9b520 195 u32 mask;
1da177e4
LT
196 int err;
197
5da57f42
WC
198 tcf_exts_init(&e, TCA_FW_ACT, TCA_FW_POLICE);
199 err = tcf_exts_validate(net, tp, tb, tca[TCA_RATE], &e);
1da177e4
LT
200 if (err < 0)
201 return err;
202
add93b61 203 if (tb[TCA_FW_CLASSID]) {
1587bac4 204 f->res.classid = nla_get_u32(tb[TCA_FW_CLASSID]);
1da177e4
LT
205 tcf_bind_filter(tp, &f->res, base);
206 }
207
208#ifdef CONFIG_NET_CLS_IND
add93b61 209 if (tb[TCA_FW_INDEV]) {
2519a602
WC
210 int ret;
211 ret = tcf_change_indev(net, tb[TCA_FW_INDEV]);
722e47d7
WY
212 if (ret < 0) {
213 err = ret;
1da177e4 214 goto errout;
722e47d7 215 }
2519a602 216 f->ifindex = ret;
1da177e4
LT
217 }
218#endif /* CONFIG_NET_CLS_IND */
219
cb95ec62 220 err = -EINVAL;
add93b61 221 if (tb[TCA_FW_MASK]) {
1587bac4 222 mask = nla_get_u32(tb[TCA_FW_MASK]);
b4e9b520
PM
223 if (mask != head->mask)
224 goto errout;
225 } else if (head->mask != 0xFFFFFFFF)
226 goto errout;
227
1da177e4
LT
228 tcf_exts_change(tp, &f->exts, &e);
229
230 return 0;
231errout:
232 tcf_exts_destroy(tp, &e);
233 return err;
234}
235
c1b52739 236static int fw_change(struct net *net, struct sk_buff *in_skb,
af4c6641 237 struct tcf_proto *tp, unsigned long base,
1da177e4 238 u32 handle,
add93b61 239 struct nlattr **tca,
1da177e4
LT
240 unsigned long *arg)
241{
a8701a6c 242 struct fw_head *head = tp->root;
1da177e4 243 struct fw_filter *f = (struct fw_filter *) *arg;
add93b61
PM
244 struct nlattr *opt = tca[TCA_OPTIONS];
245 struct nlattr *tb[TCA_FW_MAX + 1];
1da177e4
LT
246 int err;
247
248 if (!opt)
249 return handle ? -EINVAL : 0;
250
6fa8c014 251 err = nla_parse_nested(tb, TCA_FW_MAX, opt, fw_policy);
cee63723
PM
252 if (err < 0)
253 return err;
1da177e4
LT
254
255 if (f != NULL) {
256 if (f->id != handle && handle)
257 return -EINVAL;
c1b52739 258 return fw_change_attrs(net, tp, f, tb, tca, base);
1da177e4
LT
259 }
260
261 if (!handle)
262 return -EINVAL;
263
264 if (head == NULL) {
b4e9b520 265 u32 mask = 0xFFFFFFFF;
6fa8c014 266 if (tb[TCA_FW_MASK])
1587bac4 267 mask = nla_get_u32(tb[TCA_FW_MASK]);
b4e9b520 268
0da974f4 269 head = kzalloc(sizeof(struct fw_head), GFP_KERNEL);
1da177e4
LT
270 if (head == NULL)
271 return -ENOBUFS;
b4e9b520 272 head->mask = mask;
1da177e4
LT
273
274 tcf_tree_lock(tp);
275 tp->root = head;
276 tcf_tree_unlock(tp);
277 }
278
0da974f4 279 f = kzalloc(sizeof(struct fw_filter), GFP_KERNEL);
1da177e4
LT
280 if (f == NULL)
281 return -ENOBUFS;
1da177e4 282
5da57f42 283 tcf_exts_init(&f->exts, TCA_FW_ACT, TCA_FW_POLICE);
1da177e4
LT
284 f->id = handle;
285
c1b52739 286 err = fw_change_attrs(net, tp, f, tb, tca, base);
1da177e4
LT
287 if (err < 0)
288 goto errout;
289
290 f->next = head->ht[fw_hash(handle)];
291 tcf_tree_lock(tp);
292 head->ht[fw_hash(handle)] = f;
293 tcf_tree_unlock(tp);
294
295 *arg = (unsigned long)f;
296 return 0;
297
298errout:
a51482bd 299 kfree(f);
1da177e4
LT
300 return err;
301}
302
303static void fw_walk(struct tcf_proto *tp, struct tcf_walker *arg)
304{
a8701a6c 305 struct fw_head *head = tp->root;
1da177e4
LT
306 int h;
307
308 if (head == NULL)
309 arg->stop = 1;
310
311 if (arg->stop)
312 return;
313
c5c13faf 314 for (h = 0; h < HTSIZE; h++) {
1da177e4
LT
315 struct fw_filter *f;
316
317 for (f = head->ht[h]; f; f = f->next) {
318 if (arg->count < arg->skip) {
319 arg->count++;
320 continue;
321 }
322 if (arg->fn(tp, (unsigned long)f, arg) < 0) {
323 arg->stop = 1;
324 return;
325 }
326 arg->count++;
327 }
328 }
329}
330
832d1d5b 331static int fw_dump(struct net *net, struct tcf_proto *tp, unsigned long fh,
1da177e4
LT
332 struct sk_buff *skb, struct tcmsg *t)
333{
a8701a6c 334 struct fw_head *head = tp->root;
cc7ec456 335 struct fw_filter *f = (struct fw_filter *)fh;
27a884dc 336 unsigned char *b = skb_tail_pointer(skb);
4b3550ef 337 struct nlattr *nest;
1da177e4
LT
338
339 if (f == NULL)
340 return skb->len;
341
342 t->tcm_handle = f->id;
343
344 if (!f->res.classid && !tcf_exts_is_available(&f->exts))
345 return skb->len;
346
4b3550ef
PM
347 nest = nla_nest_start(skb, TCA_OPTIONS);
348 if (nest == NULL)
349 goto nla_put_failure;
1da177e4 350
1b34ec43
DM
351 if (f->res.classid &&
352 nla_put_u32(skb, TCA_FW_CLASSID, f->res.classid))
353 goto nla_put_failure;
1da177e4 354#ifdef CONFIG_NET_CLS_IND
2519a602
WC
355 if (f->ifindex) {
356 struct net_device *dev;
357 dev = __dev_get_by_index(net, f->ifindex);
358 if (dev && nla_put_string(skb, TCA_FW_INDEV, dev->name))
359 goto nla_put_failure;
360 }
1da177e4 361#endif /* CONFIG_NET_CLS_IND */
1b34ec43
DM
362 if (head->mask != 0xFFFFFFFF &&
363 nla_put_u32(skb, TCA_FW_MASK, head->mask))
364 goto nla_put_failure;
1da177e4 365
5da57f42 366 if (tcf_exts_dump(skb, &f->exts) < 0)
add93b61 367 goto nla_put_failure;
1da177e4 368
4b3550ef 369 nla_nest_end(skb, nest);
1da177e4 370
5da57f42 371 if (tcf_exts_dump_stats(skb, &f->exts) < 0)
add93b61 372 goto nla_put_failure;
1da177e4
LT
373
374 return skb->len;
375
add93b61 376nla_put_failure:
dc5fc579 377 nlmsg_trim(skb, b);
1da177e4
LT
378 return -1;
379}
380
2eb9d75c 381static struct tcf_proto_ops cls_fw_ops __read_mostly = {
1da177e4
LT
382 .kind = "fw",
383 .classify = fw_classify,
384 .init = fw_init,
385 .destroy = fw_destroy,
386 .get = fw_get,
387 .put = fw_put,
388 .change = fw_change,
389 .delete = fw_delete,
390 .walk = fw_walk,
391 .dump = fw_dump,
392 .owner = THIS_MODULE,
393};
394
395static int __init init_fw(void)
396{
397 return register_tcf_proto_ops(&cls_fw_ops);
398}
399
10297b99 400static void __exit exit_fw(void)
1da177e4
LT
401{
402 unregister_tcf_proto_ops(&cls_fw_ops);
403}
404
405module_init(init_fw)
406module_exit(exit_fw)
407MODULE_LICENSE("GPL");
This page took 0.84676 seconds and 5 git commands to generate.