3 * Linux ethernet bridge
6 * Lennert Buytenhek <buytenh@gnu.org>
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License
10 * as published by the Free Software Foundation; either version
11 * 2 of the License, or (at your option) any later version.
14 #include <linux/err.h>
15 #include <linux/slab.h>
16 #include <linux/kernel.h>
17 #include <linux/netdevice.h>
18 #include <linux/netpoll.h>
19 #include <linux/skbuff.h>
20 #include <linux/if_vlan.h>
21 #include <linux/netfilter_bridge.h>
22 #include "br_private.h"
24 /* Don't forward packets to originating port or forwarding disabled */
25 static inline int should_deliver(const struct net_bridge_port
*p
,
26 const struct sk_buff
*skb
)
28 struct net_bridge_vlan_group
*vg
;
30 vg
= nbp_vlan_group_rcu(p
);
31 return ((p
->flags
& BR_HAIRPIN_MODE
) || skb
->dev
!= p
->dev
) &&
32 br_allowed_egress(vg
, skb
) && p
->state
== BR_STATE_FORWARDING
;
35 int br_dev_queue_push_xmit(struct net
*net
, struct sock
*sk
, struct sk_buff
*skb
)
37 if (!is_skb_forwardable(skb
->dev
, skb
))
40 skb_push(skb
, ETH_HLEN
);
41 br_drop_fake_rtable(skb
);
43 if (skb
->ip_summed
== CHECKSUM_PARTIAL
&&
44 (skb
->protocol
== htons(ETH_P_8021Q
) ||
45 skb
->protocol
== htons(ETH_P_8021AD
))) {
48 if (!__vlan_get_protocol(skb
, skb
->protocol
, &depth
))
51 skb_set_network_header(skb
, depth
);
62 EXPORT_SYMBOL_GPL(br_dev_queue_push_xmit
);
64 int br_forward_finish(struct net
*net
, struct sock
*sk
, struct sk_buff
*skb
)
66 return NF_HOOK(NFPROTO_BRIDGE
, NF_BR_POST_ROUTING
,
67 net
, sk
, skb
, NULL
, skb
->dev
,
68 br_dev_queue_push_xmit
);
71 EXPORT_SYMBOL_GPL(br_forward_finish
);
73 static void __br_forward(const struct net_bridge_port
*to
,
74 struct sk_buff
*skb
, bool local_orig
)
76 struct net_bridge_vlan_group
*vg
;
77 struct net_device
*indev
;
81 vg
= nbp_vlan_group_rcu(to
);
82 skb
= br_handle_vlan(to
->br
, vg
, skb
);
89 if (skb_warn_if_lro(skb
)) {
93 br_hook
= NF_BR_FORWARD
;
94 skb_forward_csum(skb
);
97 if (unlikely(netpoll_tx_running(to
->br
->dev
))) {
98 if (!is_skb_forwardable(skb
->dev
, skb
)) {
101 skb_push(skb
, ETH_HLEN
);
102 br_netpoll_send_skb(to
, skb
);
106 br_hook
= NF_BR_LOCAL_OUT
;
107 net
= dev_net(skb
->dev
);
111 NF_HOOK(NFPROTO_BRIDGE
, br_hook
,
112 net
, NULL
, skb
, indev
, skb
->dev
,
116 static int deliver_clone(const struct net_bridge_port
*prev
,
117 struct sk_buff
*skb
, bool local_orig
)
119 struct net_device
*dev
= BR_INPUT_SKB_CB(skb
)->brdev
;
121 skb
= skb_clone(skb
, GFP_ATOMIC
);
123 dev
->stats
.tx_dropped
++;
127 __br_forward(prev
, skb
, local_orig
);
132 * br_forward - forward a packet to a specific port
133 * @to: destination port
134 * @skb: packet being forwarded
135 * @local_rcv: packet will be received locally after forwarding
136 * @local_orig: packet is locally originated
138 * Should be called with rcu_read_lock.
140 void br_forward(const struct net_bridge_port
*to
,
141 struct sk_buff
*skb
, bool local_rcv
, bool local_orig
)
143 if (to
&& should_deliver(to
, skb
)) {
145 deliver_clone(to
, skb
, local_orig
);
147 __br_forward(to
, skb
, local_orig
);
154 EXPORT_SYMBOL_GPL(br_forward
);
156 static struct net_bridge_port
*maybe_deliver(
157 struct net_bridge_port
*prev
, struct net_bridge_port
*p
,
158 struct sk_buff
*skb
, bool local_orig
)
162 if (!should_deliver(p
, skb
))
168 err
= deliver_clone(prev
, skb
, local_orig
);
176 /* called under rcu_read_lock */
177 void br_flood(struct net_bridge
*br
, struct sk_buff
*skb
,
178 bool unicast
, bool local_rcv
, bool local_orig
)
180 u8 igmp_type
= br_multicast_igmp_type(skb
);
181 struct net_bridge_port
*prev
= NULL
;
182 struct net_bridge_port
*p
;
184 list_for_each_entry_rcu(p
, &br
->port_list
, list
) {
185 /* Do not flood unicast traffic to ports that turn it off */
186 if (unicast
&& !(p
->flags
& BR_FLOOD
))
189 /* Do not flood to ports that enable proxy ARP */
190 if (p
->flags
& BR_PROXYARP
)
192 if ((p
->flags
& BR_PROXYARP_WIFI
) &&
193 BR_INPUT_SKB_CB(skb
)->proxyarp_replied
)
196 prev
= maybe_deliver(prev
, p
, skb
, local_orig
);
200 br_multicast_count(p
->br
, p
, skb
, igmp_type
,
208 deliver_clone(prev
, skb
, local_orig
);
210 __br_forward(prev
, skb
, local_orig
);
218 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
219 /* called with rcu_read_lock */
220 void br_multicast_flood(struct net_bridge_mdb_entry
*mdst
,
222 bool local_rcv
, bool local_orig
)
224 struct net_device
*dev
= BR_INPUT_SKB_CB(skb
)->brdev
;
225 u8 igmp_type
= br_multicast_igmp_type(skb
);
226 struct net_bridge
*br
= netdev_priv(dev
);
227 struct net_bridge_port
*prev
= NULL
;
228 struct net_bridge_port_group
*p
;
229 struct hlist_node
*rp
;
231 rp
= rcu_dereference(hlist_first_rcu(&br
->router_list
));
232 p
= mdst
? rcu_dereference(mdst
->ports
) : NULL
;
234 struct net_bridge_port
*port
, *lport
, *rport
;
236 lport
= p
? p
->port
: NULL
;
237 rport
= rp
? hlist_entry(rp
, struct net_bridge_port
, rlist
) :
240 port
= (unsigned long)lport
> (unsigned long)rport
?
243 prev
= maybe_deliver(prev
, port
, skb
, local_orig
);
247 br_multicast_count(port
->br
, port
, skb
, igmp_type
,
250 if ((unsigned long)lport
>= (unsigned long)port
)
251 p
= rcu_dereference(p
->next
);
252 if ((unsigned long)rport
>= (unsigned long)port
)
253 rp
= rcu_dereference(hlist_next_rcu(rp
));
260 deliver_clone(prev
, skb
, local_orig
);
262 __br_forward(prev
, skb
, local_orig
);
This page took 0.037931 seconds and 5 git commands to generate.