xen-netfront.c 57.4 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
/*
 * Virtual network driver for conversing with remote driver backends.
 *
 * Copyright (c) 2002-2005, K A Fraser
 * Copyright (c) 2005, XenSource Ltd
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License version 2
 * as published by the Free Software Foundation; or, when distributed
 * separately from the Linux kernel or incorporated into other
 * software packages, subject to the following license:
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this source file (the "Software"), to deal in the Software without
 * restriction, including without limitation the rights to use, copy, modify,
 * merge, publish, distribute, sublicense, and/or sell copies of the Software,
 * and to permit persons to whom the Software is furnished to do so, subject to
 * the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
 * IN THE SOFTWARE.
 */

32 33
#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

34 35 36 37 38 39 40
#include <linux/module.h>
#include <linux/kernel.h>
#include <linux/netdevice.h>
#include <linux/etherdevice.h>
#include <linux/skbuff.h>
#include <linux/ethtool.h>
#include <linux/if_ether.h>
41
#include <net/tcp.h>
42 43 44
#include <linux/udp.h>
#include <linux/moduleparam.h>
#include <linux/mm.h>
45
#include <linux/slab.h>
46 47
#include <net/ip.h>

S
Stefano Stabellini 已提交
48
#include <asm/xen/page.h>
49
#include <xen/xen.h>
50 51 52
#include <xen/xenbus.h>
#include <xen/events.h>
#include <xen/page.h>
53
#include <xen/platform_pci.h>
54 55 56 57 58 59
#include <xen/grant_table.h>

#include <xen/interface/io/netif.h>
#include <xen/interface/memory.h>
#include <xen/interface/grant_table.h>

60
static const struct ethtool_ops xennet_ethtool_ops;
61 62

struct netfront_cb {
63
	int pull_to;
64 65 66 67 68 69 70 71
};

#define NETFRONT_SKB_CB(skb)	((struct netfront_cb *)((skb)->cb))

#define RX_COPY_THRESHOLD 256

#define GRANT_INVALID_REF	0

72 73
#define NET_TX_RING_SIZE __CONST_RING_SIZE(xen_netif_tx, PAGE_SIZE)
#define NET_RX_RING_SIZE __CONST_RING_SIZE(xen_netif_rx, PAGE_SIZE)
74
#define TX_MAX_TARGET min_t(int, NET_TX_RING_SIZE, 256)
75

76 77 78 79 80 81
/* Queue name is interface name with "-qNNN" appended */
#define QUEUE_NAME_SIZE (IFNAMSIZ + 6)

/* IRQ name is queue name with "-tx" or "-rx" appended */
#define IRQ_NAME_SIZE (QUEUE_NAME_SIZE + 3)

82 83 84 85 86 87 88 89
struct netfront_stats {
	u64			rx_packets;
	u64			tx_packets;
	u64			rx_bytes;
	u64			tx_bytes;
	struct u64_stats_sync	syncp;
};

90 91 92 93 94 95
struct netfront_info;

struct netfront_queue {
	unsigned int id; /* Queue ID, 0-based */
	char name[QUEUE_NAME_SIZE]; /* DEVNAME-qN */
	struct netfront_info *info;
96

97
	struct napi_struct napi;
98

99 100 101 102 103 104
	/* Split event channels support, tx_* == rx_* when using
	 * single event channel.
	 */
	unsigned int tx_evtchn, rx_evtchn;
	unsigned int tx_irq, rx_irq;
	/* Only used when split event channels support is enabled */
105 106
	char tx_irq_name[IRQ_NAME_SIZE]; /* DEVNAME-qN-tx */
	char rx_irq_name[IRQ_NAME_SIZE]; /* DEVNAME-qN-rx */
107

108 109 110
	spinlock_t   tx_lock;
	struct xen_netif_tx_front_ring tx;
	int tx_ring_ref;
111 112 113 114 115 116 117 118 119 120 121 122

	/*
	 * {tx,rx}_skbs store outstanding skbuffs. Free tx_skb entries
	 * are linked from tx_skb_freelist through skb_entry.link.
	 *
	 *  NB. Freelist index entries are always going to be less than
	 *  PAGE_OFFSET, whereas pointers to skbs will always be equal or
	 *  greater than PAGE_OFFSET: we use this property to distinguish
	 *  them.
	 */
	union skb_entry {
		struct sk_buff *skb;
123
		unsigned long link;
124 125 126
	} tx_skbs[NET_TX_RING_SIZE];
	grant_ref_t gref_tx_head;
	grant_ref_t grant_tx_ref[NET_TX_RING_SIZE];
127
	struct page *grant_tx_page[NET_TX_RING_SIZE];
128 129
	unsigned tx_skb_freelist;

130 131 132 133 134 135 136 137 138 139 140 141 142
	spinlock_t   rx_lock ____cacheline_aligned_in_smp;
	struct xen_netif_rx_front_ring rx;
	int rx_ring_ref;

	/* Receive-ring batched refills. */
#define RX_MIN_TARGET 8
#define RX_DFL_MIN_TARGET 64
#define RX_MAX_TARGET min_t(int, NET_RX_RING_SIZE, 256)
	unsigned rx_min_target, rx_max_target, rx_target;
	struct sk_buff_head rx_batch;

	struct timer_list rx_refill_timer;

143 144 145 146 147 148 149
	struct sk_buff *rx_skbs[NET_RX_RING_SIZE];
	grant_ref_t gref_rx_head;
	grant_ref_t grant_rx_ref[NET_RX_RING_SIZE];

	unsigned long rx_pfn_array[NET_RX_RING_SIZE];
	struct multicall_entry rx_mcl[NET_RX_RING_SIZE+1];
	struct mmu_update rx_mmu[NET_RX_RING_SIZE];
150 151 152 153 154 155 156 157 158 159
};

struct netfront_info {
	struct list_head list;
	struct net_device *netdev;

	struct xenbus_device *xbdev;

	/* Multi-queue support */
	struct netfront_queue *queues;
160 161

	/* Statistics */
162 163
	struct netfront_stats __percpu *stats;

164
	atomic_t rx_gso_checksum_fixup;
165 166 167 168 169 170 171
};

struct netfront_rx_info {
	struct xen_netif_rx_response rx;
	struct xen_netif_extra_info extras[XEN_NETIF_EXTRA_TYPE_MAX - 1];
};

172 173 174 175 176 177 178 179
static void skb_entry_set_link(union skb_entry *list, unsigned short id)
{
	list->link = id;
}

static int skb_entry_is_link(const union skb_entry *list)
{
	BUILD_BUG_ON(sizeof(list->skb) != sizeof(list->link));
180
	return (unsigned long)list->skb < PAGE_OFFSET;
181 182
}

183 184 185 186 187 188 189
/*
 * Access macros for acquiring freeing slots in tx_skbs[].
 */

static void add_id_to_freelist(unsigned *head, union skb_entry *list,
			       unsigned short id)
{
190
	skb_entry_set_link(&list[id], *head);
191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206
	*head = id;
}

static unsigned short get_id_from_freelist(unsigned *head,
					   union skb_entry *list)
{
	unsigned int id = *head;
	*head = list[id].link;
	return id;
}

static int xennet_rxidx(RING_IDX idx)
{
	return idx & (NET_RX_RING_SIZE - 1);
}

207
static struct sk_buff *xennet_get_rx_skb(struct netfront_queue *queue,
208 209 210
					 RING_IDX ri)
{
	int i = xennet_rxidx(ri);
211 212
	struct sk_buff *skb = queue->rx_skbs[i];
	queue->rx_skbs[i] = NULL;
213 214 215
	return skb;
}

216
static grant_ref_t xennet_get_rx_ref(struct netfront_queue *queue,
217 218 219
					    RING_IDX ri)
{
	int i = xennet_rxidx(ri);
220 221
	grant_ref_t ref = queue->grant_rx_ref[i];
	queue->grant_rx_ref[i] = GRANT_INVALID_REF;
222 223 224 225 226 227 228 229 230 231 232
	return ref;
}

#ifdef CONFIG_SYSFS
static int xennet_sysfs_addif(struct net_device *netdev);
static void xennet_sysfs_delif(struct net_device *netdev);
#else /* !CONFIG_SYSFS */
#define xennet_sysfs_addif(dev) (0)
#define xennet_sysfs_delif(dev) do { } while (0)
#endif

233
static bool xennet_can_sg(struct net_device *dev)
234
{
235
	return dev->features & NETIF_F_SG;
236 237 238 239 240
}


static void rx_refill_timeout(unsigned long data)
{
241 242
	struct netfront_queue *queue = (struct netfront_queue *)data;
	napi_schedule(&queue->napi);
243 244
}

245
static int netfront_tx_slot_available(struct netfront_queue *queue)
246
{
247
	return (queue->tx.req_prod_pvt - queue->tx.rsp_cons) <
248
		(TX_MAX_TARGET - MAX_SKB_FRAGS - 2);
249 250
}

251
static void xennet_maybe_wake_tx(struct netfront_queue *queue)
252
{
253 254
	struct net_device *dev = queue->info->netdev;
	struct netdev_queue *dev_queue = netdev_get_tx_queue(dev, queue->id);
255

256 257
	if (unlikely(netif_tx_queue_stopped(dev_queue)) &&
	    netfront_tx_slot_available(queue) &&
258
	    likely(netif_running(dev)))
259
		netif_tx_wake_queue(netdev_get_tx_queue(dev, queue->id));
260 261
}

262
static void xennet_alloc_rx_buffers(struct netfront_queue *queue)
263 264 265 266 267
{
	unsigned short id;
	struct sk_buff *skb;
	struct page *page;
	int i, batch_target, notify;
268
	RING_IDX req_prod = queue->rx.req_prod_pvt;
269 270 271 272 273
	grant_ref_t ref;
	unsigned long pfn;
	void *vaddr;
	struct xen_netif_rx_request *req;

274
	if (unlikely(!netif_carrier_ok(queue->info->netdev)))
275 276 277 278 279 280 281 282
		return;

	/*
	 * Allocate skbuffs greedily, even though we batch updates to the
	 * receive ring. This creates a less bursty demand on the memory
	 * allocator, so should reduce the chance of failed allocation requests
	 * both for ourself and for other kernel subsystems.
	 */
283 284 285 286
	batch_target = queue->rx_target - (req_prod - queue->rx.rsp_cons);
	for (i = skb_queue_len(&queue->rx_batch); i < batch_target; i++) {
		skb = __netdev_alloc_skb(queue->info->netdev,
					 RX_COPY_THRESHOLD + NET_IP_ALIGN,
287 288 289 290
					 GFP_ATOMIC | __GFP_NOWARN);
		if (unlikely(!skb))
			goto no_skb;

291 292 293
		/* Align ip header to a 16 bytes boundary */
		skb_reserve(skb, NET_IP_ALIGN);

294 295 296 297 298
		page = alloc_page(GFP_ATOMIC | __GFP_NOWARN);
		if (!page) {
			kfree_skb(skb);
no_skb:
			/* Could not allocate any skbuffs. Try again later. */
299
			mod_timer(&queue->rx_refill_timer,
300
				  jiffies + (HZ/10));
301 302 303 304

			/* Any skbuffs queued for refill? Force them out. */
			if (i != 0)
				goto refill;
305 306 307
			break;
		}

308
		skb_add_rx_frag(skb, 0, page, 0, 0, PAGE_SIZE);
309
		__skb_queue_tail(&queue->rx_batch, skb);
310 311 312
	}

	/* Is the batch large enough to be worthwhile? */
313 314
	if (i < (queue->rx_target/2)) {
		if (req_prod > queue->rx.sring->req_prod)
315 316 317 318 319
			goto push;
		return;
	}

	/* Adjust our fill target if we risked running out of buffers. */
320 321 322
	if (((req_prod - queue->rx.sring->rsp_prod) < (queue->rx_target / 4)) &&
	    ((queue->rx_target *= 2) > queue->rx_max_target))
		queue->rx_target = queue->rx_max_target;
323 324

 refill:
325
	for (i = 0; ; i++) {
326
		skb = __skb_dequeue(&queue->rx_batch);
327 328 329
		if (skb == NULL)
			break;

330
		skb->dev = queue->info->netdev;
331 332 333

		id = xennet_rxidx(req_prod + i);

334 335
		BUG_ON(queue->rx_skbs[id]);
		queue->rx_skbs[id] = skb;
336

337
		ref = gnttab_claim_grant_reference(&queue->gref_rx_head);
338
		BUG_ON((signed short)ref < 0);
339
		queue->grant_rx_ref[id] = ref;
340

341 342
		pfn = page_to_pfn(skb_frag_page(&skb_shinfo(skb)->frags[0]));
		vaddr = page_address(skb_frag_page(&skb_shinfo(skb)->frags[0]));
343

344
		req = RING_GET_REQUEST(&queue->rx, req_prod + i);
345
		gnttab_grant_foreign_access_ref(ref,
346
						queue->info->xbdev->otherend_id,
347 348 349 350 351 352 353
						pfn_to_mfn(pfn),
						0);

		req->id = id;
		req->gref = ref;
	}

354
	wmb();		/* barrier so backend seens requests */
355 356

	/* Above is a suitable barrier to ensure backend will see requests. */
357
	queue->rx.req_prod_pvt = req_prod + i;
358
 push:
359
	RING_PUSH_REQUESTS_AND_CHECK_NOTIFY(&queue->rx, notify);
360
	if (notify)
361
		notify_remote_via_irq(queue->rx_irq);
362 363 364 365 366
}

static int xennet_open(struct net_device *dev)
{
	struct netfront_info *np = netdev_priv(dev);
367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382
	unsigned int num_queues = dev->real_num_tx_queues;
	unsigned int i = 0;
	struct netfront_queue *queue = NULL;

	for (i = 0; i < num_queues; ++i) {
		queue = &np->queues[i];
		napi_enable(&queue->napi);

		spin_lock_bh(&queue->rx_lock);
		if (netif_carrier_ok(dev)) {
			xennet_alloc_rx_buffers(queue);
			queue->rx.sring->rsp_event = queue->rx.rsp_cons + 1;
			if (RING_HAS_UNCONSUMED_RESPONSES(&queue->rx))
				napi_schedule(&queue->napi);
		}
		spin_unlock_bh(&queue->rx_lock);
383 384
	}

385
	netif_tx_start_all_queues(dev);
386 387 388 389

	return 0;
}

390
static void xennet_tx_buf_gc(struct netfront_queue *queue)
391 392 393 394 395
{
	RING_IDX cons, prod;
	unsigned short id;
	struct sk_buff *skb;

396
	BUG_ON(!netif_carrier_ok(queue->info->netdev));
397 398

	do {
399
		prod = queue->tx.sring->rsp_prod;
400 401
		rmb(); /* Ensure we see responses up to 'rp'. */

402
		for (cons = queue->tx.rsp_cons; cons != prod; cons++) {
403 404
			struct xen_netif_tx_response *txrsp;

405
			txrsp = RING_GET_RESPONSE(&queue->tx, cons);
I
Ian Campbell 已提交
406
			if (txrsp->status == XEN_NETIF_RSP_NULL)
407 408 409
				continue;

			id  = txrsp->id;
410
			skb = queue->tx_skbs[id].skb;
411
			if (unlikely(gnttab_query_foreign_access(
412
				queue->grant_tx_ref[id]) != 0)) {
413 414
				pr_alert("%s: warning -- grant still in use by backend domain\n",
					 __func__);
415 416 417
				BUG();
			}
			gnttab_end_foreign_access_ref(
418
				queue->grant_tx_ref[id], GNTMAP_readonly);
419
			gnttab_release_grant_reference(
420 421 422 423
				&queue->gref_tx_head, queue->grant_tx_ref[id]);
			queue->grant_tx_ref[id] = GRANT_INVALID_REF;
			queue->grant_tx_page[id] = NULL;
			add_id_to_freelist(&queue->tx_skb_freelist, queue->tx_skbs, id);
424 425 426
			dev_kfree_skb_irq(skb);
		}

427
		queue->tx.rsp_cons = prod;
428 429 430 431 432 433 434 435 436

		/*
		 * Set a new event, then check for race with update of tx_cons.
		 * Note that it is essential to schedule a callback, no matter
		 * how few buffers are pending. Even if there is space in the
		 * transmit ring, higher layers may be blocked because too much
		 * data is outstanding: in such cases notification from Xen is
		 * likely to be the only kick that we'll get.
		 */
437 438
		queue->tx.sring->rsp_event =
			prod + ((queue->tx.sring->req_prod - prod) >> 1) + 1;
439
		mb();		/* update shared area */
440
	} while ((cons == prod) && (prod != queue->tx.sring->rsp_prod));
441

442
	xennet_maybe_wake_tx(queue);
443 444
}

445
static void xennet_make_frags(struct sk_buff *skb, struct netfront_queue *queue,
446 447 448 449
			      struct xen_netif_tx_request *tx)
{
	char *data = skb->data;
	unsigned long mfn;
450
	RING_IDX prod = queue->tx.req_prod_pvt;
451 452 453 454 455 456 457 458 459 460 461
	int frags = skb_shinfo(skb)->nr_frags;
	unsigned int offset = offset_in_page(data);
	unsigned int len = skb_headlen(skb);
	unsigned int id;
	grant_ref_t ref;
	int i;

	/* While the header overlaps a page boundary (including being
	   larger than a page), split it it into page-sized chunks. */
	while (len > PAGE_SIZE - offset) {
		tx->size = PAGE_SIZE - offset;
I
Ian Campbell 已提交
462
		tx->flags |= XEN_NETTXF_more_data;
463 464 465 466
		len -= tx->size;
		data += tx->size;
		offset = 0;

467 468 469
		id = get_id_from_freelist(&queue->tx_skb_freelist, queue->tx_skbs);
		queue->tx_skbs[id].skb = skb_get(skb);
		tx = RING_GET_REQUEST(&queue->tx, prod++);
470
		tx->id = id;
471
		ref = gnttab_claim_grant_reference(&queue->gref_tx_head);
472 473 474
		BUG_ON((signed short)ref < 0);

		mfn = virt_to_mfn(data);
475
		gnttab_grant_foreign_access_ref(ref, queue->info->xbdev->otherend_id,
476 477
						mfn, GNTMAP_readonly);

478 479
		queue->grant_tx_page[id] = virt_to_page(data);
		tx->gref = queue->grant_tx_ref[id] = ref;
480 481 482 483 484 485 486 487
		tx->offset = offset;
		tx->size = len;
		tx->flags = 0;
	}

	/* Grant backend access to each skb fragment page. */
	for (i = 0; i < frags; i++) {
		skb_frag_t *frag = skb_shinfo(skb)->frags + i;
488
		struct page *page = skb_frag_page(frag);
489

490 491
		len = skb_frag_size(frag);
		offset = frag->page_offset;
492

493 494
		/* Data must not cross a page boundary. */
		BUG_ON(len + offset > PAGE_SIZE<<compound_order(page));
495

496 497 498
		/* Skip unused frames from start of page */
		page += offset >> PAGE_SHIFT;
		offset &= ~PAGE_MASK;
499

500 501 502 503 504 505 506 507 508 509 510
		while (len > 0) {
			unsigned long bytes;

			BUG_ON(offset >= PAGE_SIZE);

			bytes = PAGE_SIZE - offset;
			if (bytes > len)
				bytes = len;

			tx->flags |= XEN_NETTXF_more_data;

511 512 513 514
			id = get_id_from_freelist(&queue->tx_skb_freelist,
						  queue->tx_skbs);
			queue->tx_skbs[id].skb = skb_get(skb);
			tx = RING_GET_REQUEST(&queue->tx, prod++);
515
			tx->id = id;
516
			ref = gnttab_claim_grant_reference(&queue->gref_tx_head);
517 518 519 520
			BUG_ON((signed short)ref < 0);

			mfn = pfn_to_mfn(page_to_pfn(page));
			gnttab_grant_foreign_access_ref(ref,
521
							queue->info->xbdev->otherend_id,
522 523
							mfn, GNTMAP_readonly);

524 525
			queue->grant_tx_page[id] = page;
			tx->gref = queue->grant_tx_ref[id] = ref;
526 527 528 529 530 531 532 533 534 535 536 537 538 539
			tx->offset = offset;
			tx->size = bytes;
			tx->flags = 0;

			offset += bytes;
			len -= bytes;

			/* Next frame */
			if (offset == PAGE_SIZE && len) {
				BUG_ON(!PageCompound(page));
				page++;
				offset = 0;
			}
		}
540 541
	}

542
	queue->tx.req_prod_pvt = prod;
543 544
}

545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567
/*
 * Count how many ring slots are required to send the frags of this
 * skb. Each frag might be a compound page.
 */
static int xennet_count_skb_frag_slots(struct sk_buff *skb)
{
	int i, frags = skb_shinfo(skb)->nr_frags;
	int pages = 0;

	for (i = 0; i < frags; i++) {
		skb_frag_t *frag = skb_shinfo(skb)->frags + i;
		unsigned long size = skb_frag_size(frag);
		unsigned long offset = frag->page_offset;

		/* Skip unused frames from start of page */
		offset &= ~PAGE_MASK;

		pages += PFN_UP(offset + size);
	}

	return pages;
}

568 569 570 571 572 573
static u16 xennet_select_queue(struct net_device *dev, struct sk_buff *skb)
{
	/* Stub for later implementation of queue selection */
	return 0;
}

574 575 576 577
static int xennet_start_xmit(struct sk_buff *skb, struct net_device *dev)
{
	unsigned short id;
	struct netfront_info *np = netdev_priv(dev);
578
	struct netfront_stats *stats = this_cpu_ptr(np->stats);
579 580 581 582 583 584
	struct xen_netif_tx_request *tx;
	char *data = skb->data;
	RING_IDX i;
	grant_ref_t ref;
	unsigned long mfn;
	int notify;
585
	int slots;
586 587
	unsigned int offset = offset_in_page(data);
	unsigned int len = skb_headlen(skb);
588
	unsigned long flags;
589 590 591 592 593 594 595 596 597 598
	struct netfront_queue *queue = NULL;
	unsigned int num_queues = dev->real_num_tx_queues;
	u16 queue_index;

	/* Drop the packet if no queues are set up */
	if (num_queues < 1)
		goto drop;
	/* Determine which queue to transmit this SKB on */
	queue_index = skb_get_queue_mapping(skb);
	queue = &np->queues[queue_index];
599

600 601 602 603 604 605 606 607 608 609
	/* If skb->len is too big for wire format, drop skb and alert
	 * user about misconfiguration.
	 */
	if (unlikely(skb->len > XEN_NETIF_MAX_TX_SIZE)) {
		net_alert_ratelimited(
			"xennet: skb->len = %u, too big for wire format\n",
			skb->len);
		goto drop;
	}

610 611 612 613 614
	slots = DIV_ROUND_UP(offset + len, PAGE_SIZE) +
		xennet_count_skb_frag_slots(skb);
	if (unlikely(slots > MAX_SKB_FRAGS + 1)) {
		net_alert_ratelimited(
			"xennet: skb rides the rocket: %d slots\n", slots);
615 616 617
		goto drop;
	}

618
	spin_lock_irqsave(&queue->tx_lock, flags);
619 620

	if (unlikely(!netif_carrier_ok(dev) ||
621
		     (slots > 1 && !xennet_can_sg(dev)) ||
622
		     netif_needs_gso(skb, netif_skb_features(skb)))) {
623
		spin_unlock_irqrestore(&queue->tx_lock, flags);
624 625 626
		goto drop;
	}

627
	i = queue->tx.req_prod_pvt;
628

629 630
	id = get_id_from_freelist(&queue->tx_skb_freelist, queue->tx_skbs);
	queue->tx_skbs[id].skb = skb;
631

632
	tx = RING_GET_REQUEST(&queue->tx, i);
633 634

	tx->id   = id;
635
	ref = gnttab_claim_grant_reference(&queue->gref_tx_head);
636 637 638
	BUG_ON((signed short)ref < 0);
	mfn = virt_to_mfn(data);
	gnttab_grant_foreign_access_ref(
639 640 641
		ref, queue->info->xbdev->otherend_id, mfn, GNTMAP_readonly);
	queue->grant_tx_page[id] = virt_to_page(data);
	tx->gref = queue->grant_tx_ref[id] = ref;
642 643 644 645 646 647
	tx->offset = offset;
	tx->size = len;

	tx->flags = 0;
	if (skb->ip_summed == CHECKSUM_PARTIAL)
		/* local packet? */
I
Ian Campbell 已提交
648
		tx->flags |= XEN_NETTXF_csum_blank | XEN_NETTXF_data_validated;
649 650
	else if (skb->ip_summed == CHECKSUM_UNNECESSARY)
		/* remote but checksummed. */
I
Ian Campbell 已提交
651
		tx->flags |= XEN_NETTXF_data_validated;
652 653 654 655 656

	if (skb_shinfo(skb)->gso_size) {
		struct xen_netif_extra_info *gso;

		gso = (struct xen_netif_extra_info *)
657
			RING_GET_REQUEST(&queue->tx, ++i);
658

659
		tx->flags |= XEN_NETTXF_extra_info;
660 661

		gso->u.gso.size = skb_shinfo(skb)->gso_size;
662 663 664
		gso->u.gso.type = (skb_shinfo(skb)->gso_type & SKB_GSO_TCPV6) ?
			XEN_NETIF_GSO_TYPE_TCPV6 :
			XEN_NETIF_GSO_TYPE_TCPV4;
665 666 667 668 669 670 671
		gso->u.gso.pad = 0;
		gso->u.gso.features = 0;

		gso->type = XEN_NETIF_EXTRA_TYPE_GSO;
		gso->flags = 0;
	}

672
	queue->tx.req_prod_pvt = i + 1;
673

674
	xennet_make_frags(skb, queue, tx);
675 676
	tx->size = skb->len;

677
	RING_PUSH_REQUESTS_AND_CHECK_NOTIFY(&queue->tx, notify);
678
	if (notify)
679
		notify_remote_via_irq(queue->tx_irq);
680

681 682 683 684
	u64_stats_update_begin(&stats->syncp);
	stats->tx_bytes += skb->len;
	stats->tx_packets++;
	u64_stats_update_end(&stats->syncp);
685 686

	/* Note: It is not safe to access skb after xennet_tx_buf_gc()! */
687
	xennet_tx_buf_gc(queue);
688

689 690
	if (!netfront_tx_slot_available(queue))
		netif_tx_stop_queue(netdev_get_tx_queue(dev, queue->id));
691

692
	spin_unlock_irqrestore(&queue->tx_lock, flags);
693

694
	return NETDEV_TX_OK;
695 696

 drop:
697
	dev->stats.tx_dropped++;
698
	dev_kfree_skb_any(skb);
699
	return NETDEV_TX_OK;
700 701 702 703 704
}

static int xennet_close(struct net_device *dev)
{
	struct netfront_info *np = netdev_priv(dev);
705 706 707 708 709 710 711 712
	unsigned int num_queues = dev->real_num_tx_queues;
	unsigned int i;
	struct netfront_queue *queue;
	netif_tx_stop_all_queues(np->netdev);
	for (i = 0; i < num_queues; ++i) {
		queue = &np->queues[i];
		napi_disable(&queue->napi);
	}
713 714 715
	return 0;
}

716
static void xennet_move_rx_slot(struct netfront_queue *queue, struct sk_buff *skb,
717 718
				grant_ref_t ref)
{
719 720 721 722 723 724 725 726
	int new = xennet_rxidx(queue->rx.req_prod_pvt);

	BUG_ON(queue->rx_skbs[new]);
	queue->rx_skbs[new] = skb;
	queue->grant_rx_ref[new] = ref;
	RING_GET_REQUEST(&queue->rx, queue->rx.req_prod_pvt)->id = new;
	RING_GET_REQUEST(&queue->rx, queue->rx.req_prod_pvt)->gref = ref;
	queue->rx.req_prod_pvt++;
727 728
}

729
static int xennet_get_extras(struct netfront_queue *queue,
730 731 732 733 734
			     struct xen_netif_extra_info *extras,
			     RING_IDX rp)

{
	struct xen_netif_extra_info *extra;
735 736
	struct device *dev = &queue->info->netdev->dev;
	RING_IDX cons = queue->rx.rsp_cons;
737 738 739 740 741 742 743 744 745 746 747 748 749 750
	int err = 0;

	do {
		struct sk_buff *skb;
		grant_ref_t ref;

		if (unlikely(cons + 1 == rp)) {
			if (net_ratelimit())
				dev_warn(dev, "Missing extra info\n");
			err = -EBADR;
			break;
		}

		extra = (struct xen_netif_extra_info *)
751
			RING_GET_RESPONSE(&queue->rx, ++cons);
752 753 754 755 756 757 758 759 760 761 762 763

		if (unlikely(!extra->type ||
			     extra->type >= XEN_NETIF_EXTRA_TYPE_MAX)) {
			if (net_ratelimit())
				dev_warn(dev, "Invalid extra type: %d\n",
					extra->type);
			err = -EINVAL;
		} else {
			memcpy(&extras[extra->type - 1], extra,
			       sizeof(*extra));
		}

764 765 766
		skb = xennet_get_rx_skb(queue, cons);
		ref = xennet_get_rx_ref(queue, cons);
		xennet_move_rx_slot(queue, skb, ref);
767 768
	} while (extra->flags & XEN_NETIF_EXTRA_FLAG_MORE);

769
	queue->rx.rsp_cons = cons;
770 771 772
	return err;
}

773
static int xennet_get_responses(struct netfront_queue *queue,
774 775 776 777 778
				struct netfront_rx_info *rinfo, RING_IDX rp,
				struct sk_buff_head *list)
{
	struct xen_netif_rx_response *rx = &rinfo->rx;
	struct xen_netif_extra_info *extras = rinfo->extras;
779 780 781 782
	struct device *dev = &queue->info->netdev->dev;
	RING_IDX cons = queue->rx.rsp_cons;
	struct sk_buff *skb = xennet_get_rx_skb(queue, cons);
	grant_ref_t ref = xennet_get_rx_ref(queue, cons);
783
	int max = MAX_SKB_FRAGS + (rx->status <= RX_COPY_THRESHOLD);
784
	int slots = 1;
785 786 787
	int err = 0;
	unsigned long ret;

I
Ian Campbell 已提交
788
	if (rx->flags & XEN_NETRXF_extra_info) {
789 790
		err = xennet_get_extras(queue, extras, rp);
		cons = queue->rx.rsp_cons;
791 792 793 794 795 796 797 798
	}

	for (;;) {
		if (unlikely(rx->status < 0 ||
			     rx->offset + rx->status > PAGE_SIZE)) {
			if (net_ratelimit())
				dev_warn(dev, "rx->offset: %x, size: %u\n",
					 rx->offset, rx->status);
799
			xennet_move_rx_slot(queue, skb, ref);
800 801 802 803 804 805 806
			err = -EINVAL;
			goto next;
		}

		/*
		 * This definitely indicates a bug, either in this driver or in
		 * the backend driver. In future this should flag the bad
807
		 * situation to the system controller to reboot the backend.
808 809 810 811 812 813 814 815 816 817 818 819
		 */
		if (ref == GRANT_INVALID_REF) {
			if (net_ratelimit())
				dev_warn(dev, "Bad rx response id %d.\n",
					 rx->id);
			err = -EINVAL;
			goto next;
		}

		ret = gnttab_end_foreign_access_ref(ref, 0);
		BUG_ON(!ret);

820
		gnttab_release_grant_reference(&queue->gref_rx_head, ref);
821 822 823 824

		__skb_queue_tail(list, skb);

next:
I
Ian Campbell 已提交
825
		if (!(rx->flags & XEN_NETRXF_more_data))
826 827
			break;

828
		if (cons + slots == rp) {
829
			if (net_ratelimit())
830
				dev_warn(dev, "Need more slots\n");
831 832 833 834
			err = -ENOENT;
			break;
		}

835 836 837
		rx = RING_GET_RESPONSE(&queue->rx, cons + slots);
		skb = xennet_get_rx_skb(queue, cons + slots);
		ref = xennet_get_rx_ref(queue, cons + slots);
838
		slots++;
839 840
	}

841
	if (unlikely(slots > max)) {
842
		if (net_ratelimit())
843
			dev_warn(dev, "Too many slots\n");
844 845 846 847
		err = -E2BIG;
	}

	if (unlikely(err))
848
		queue->rx.rsp_cons = cons + slots;
849 850 851 852 853 854 855 856 857

	return err;
}

static int xennet_set_skb_gso(struct sk_buff *skb,
			      struct xen_netif_extra_info *gso)
{
	if (!gso->u.gso.size) {
		if (net_ratelimit())
858
			pr_warn("GSO size must not be zero\n");
859 860 861
		return -EINVAL;
	}

862 863
	if (gso->u.gso.type != XEN_NETIF_GSO_TYPE_TCPV4 &&
	    gso->u.gso.type != XEN_NETIF_GSO_TYPE_TCPV6) {
864
		if (net_ratelimit())
865
			pr_warn("Bad GSO type %d\n", gso->u.gso.type);
866 867 868 869
		return -EINVAL;
	}

	skb_shinfo(skb)->gso_size = gso->u.gso.size;
870 871 872 873
	skb_shinfo(skb)->gso_type =
		(gso->u.gso.type == XEN_NETIF_GSO_TYPE_TCPV4) ?
		SKB_GSO_TCPV4 :
		SKB_GSO_TCPV6;
874 875 876 877 878 879 880 881

	/* Header must be checked, and gso_segs computed. */
	skb_shinfo(skb)->gso_type |= SKB_GSO_DODGY;
	skb_shinfo(skb)->gso_segs = 0;

	return 0;
}

882
static RING_IDX xennet_fill_frags(struct netfront_queue *queue,
883 884 885 886
				  struct sk_buff *skb,
				  struct sk_buff_head *list)
{
	struct skb_shared_info *shinfo = skb_shinfo(skb);
887
	RING_IDX cons = queue->rx.rsp_cons;
888 889 890 891
	struct sk_buff *nskb;

	while ((nskb = __skb_dequeue(list))) {
		struct xen_netif_rx_response *rx =
892
			RING_GET_RESPONSE(&queue->rx, ++cons);
893
		skb_frag_t *nfrag = &skb_shinfo(nskb)->frags[0];
894

895 896
		if (shinfo->nr_frags == MAX_SKB_FRAGS) {
			unsigned int pull_to = NETFRONT_SKB_CB(skb)->pull_to;
897

898 899 900 901 902 903 904
			BUG_ON(pull_to <= skb_headlen(skb));
			__pskb_pull_tail(skb, pull_to - skb_headlen(skb));
		}
		BUG_ON(shinfo->nr_frags >= MAX_SKB_FRAGS);

		skb_add_rx_frag(skb, shinfo->nr_frags, skb_frag_page(nfrag),
				rx->offset, rx->status, PAGE_SIZE);
905 906 907 908 909 910 911 912

		skb_shinfo(nskb)->nr_frags = 0;
		kfree_skb(nskb);
	}

	return cons;
}

913
static int checksum_setup(struct net_device *dev, struct sk_buff *skb)
914
{
915
	bool recalculate_partial_csum = false;
916 917 918 919 920 921 922 923 924

	/*
	 * A GSO SKB must be CHECKSUM_PARTIAL. However some buggy
	 * peers can fail to set NETRXF_csum_blank when sending a GSO
	 * frame. In this case force the SKB to CHECKSUM_PARTIAL and
	 * recalculate the partial checksum.
	 */
	if (skb->ip_summed != CHECKSUM_PARTIAL && skb_is_gso(skb)) {
		struct netfront_info *np = netdev_priv(dev);
925
		atomic_inc(&np->rx_gso_checksum_fixup);
926
		skb->ip_summed = CHECKSUM_PARTIAL;
927
		recalculate_partial_csum = true;
928 929 930 931 932
	}

	/* A non-CHECKSUM_PARTIAL SKB does not require setup. */
	if (skb->ip_summed != CHECKSUM_PARTIAL)
		return 0;
933

934
	return skb_checksum_setup(skb, recalculate_partial_csum);
935 936
}

937
static int handle_incoming_queue(struct netfront_queue *queue,
938
				 struct sk_buff_head *rxq)
939
{
940
	struct netfront_stats *stats = this_cpu_ptr(queue->info->stats);
941 942 943 944
	int packets_dropped = 0;
	struct sk_buff *skb;

	while ((skb = __skb_dequeue(rxq)) != NULL) {
945
		int pull_to = NETFRONT_SKB_CB(skb)->pull_to;
946

947 948
		if (pull_to > skb_headlen(skb))
			__pskb_pull_tail(skb, pull_to - skb_headlen(skb));
949 950

		/* Ethernet work: Delayed to here as it peeks the header. */
951
		skb->protocol = eth_type_trans(skb, queue->info->netdev);
952
		skb_reset_network_header(skb);
953

954
		if (checksum_setup(queue->info->netdev, skb)) {
955 956
			kfree_skb(skb);
			packets_dropped++;
957
			queue->info->netdev->stats.rx_errors++;
958
			continue;
959 960
		}

961 962 963 964
		u64_stats_update_begin(&stats->syncp);
		stats->rx_packets++;
		stats->rx_bytes += skb->len;
		u64_stats_update_end(&stats->syncp);
965 966

		/* Pass it up. */
967
		napi_gro_receive(&queue->napi, skb);
968 969 970 971 972
	}

	return packets_dropped;
}

973
static int xennet_poll(struct napi_struct *napi, int budget)
974
{
975 976
	struct netfront_queue *queue = container_of(napi, struct netfront_queue, napi);
	struct net_device *dev = queue->info->netdev;
977 978 979 980 981
	struct sk_buff *skb;
	struct netfront_rx_info rinfo;
	struct xen_netif_rx_response *rx = &rinfo.rx;
	struct xen_netif_extra_info *extras = rinfo.extras;
	RING_IDX i, rp;
982
	int work_done;
983 984 985 986 987 988
	struct sk_buff_head rxq;
	struct sk_buff_head errq;
	struct sk_buff_head tmpq;
	unsigned long flags;
	int err;

989
	spin_lock(&queue->rx_lock);
990 991 992 993 994

	skb_queue_head_init(&rxq);
	skb_queue_head_init(&errq);
	skb_queue_head_init(&tmpq);

995
	rp = queue->rx.sring->rsp_prod;
996 997
	rmb(); /* Ensure we see queued responses up to 'rp'. */

998
	i = queue->rx.rsp_cons;
999 1000
	work_done = 0;
	while ((i != rp) && (work_done < budget)) {
1001
		memcpy(rx, RING_GET_RESPONSE(&queue->rx, i), sizeof(*rx));
1002 1003
		memset(extras, 0, sizeof(rinfo.extras));

1004
		err = xennet_get_responses(queue, &rinfo, rp, &tmpq);
1005 1006 1007 1008 1009

		if (unlikely(err)) {
err:
			while ((skb = __skb_dequeue(&tmpq)))
				__skb_queue_tail(&errq, skb);
1010
			dev->stats.rx_errors++;
1011
			i = queue->rx.rsp_cons;
1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022
			continue;
		}

		skb = __skb_dequeue(&tmpq);

		if (extras[XEN_NETIF_EXTRA_TYPE_GSO - 1].type) {
			struct xen_netif_extra_info *gso;
			gso = &extras[XEN_NETIF_EXTRA_TYPE_GSO - 1];

			if (unlikely(xennet_set_skb_gso(skb, gso))) {
				__skb_queue_head(&tmpq, skb);
1023
				queue->rx.rsp_cons += skb_queue_len(&tmpq);
1024 1025 1026 1027
				goto err;
			}
		}

1028 1029 1030
		NETFRONT_SKB_CB(skb)->pull_to = rx->status;
		if (NETFRONT_SKB_CB(skb)->pull_to > RX_COPY_THRESHOLD)
			NETFRONT_SKB_CB(skb)->pull_to = RX_COPY_THRESHOLD;
1031

1032 1033 1034
		skb_shinfo(skb)->frags[0].page_offset = rx->offset;
		skb_frag_size_set(&skb_shinfo(skb)->frags[0], rx->status);
		skb->data_len = rx->status;
1035
		skb->len += rx->status;
1036

1037
		i = xennet_fill_frags(queue, skb, &tmpq);
1038

I
Ian Campbell 已提交
1039
		if (rx->flags & XEN_NETRXF_csum_blank)
1040
			skb->ip_summed = CHECKSUM_PARTIAL;
I
Ian Campbell 已提交
1041
		else if (rx->flags & XEN_NETRXF_data_validated)
1042 1043 1044 1045
			skb->ip_summed = CHECKSUM_UNNECESSARY;

		__skb_queue_tail(&rxq, skb);

1046
		queue->rx.rsp_cons = ++i;
1047 1048 1049
		work_done++;
	}

W
Wang Chen 已提交
1050
	__skb_queue_purge(&errq);
1051

1052
	work_done -= handle_incoming_queue(queue, &rxq);
1053 1054 1055

	/* If we get a callback with very few responses, reduce fill target. */
	/* NB. Note exponential increase, linear decrease. */
1056 1057 1058 1059
	if (((queue->rx.req_prod_pvt - queue->rx.sring->rsp_prod) >
	     ((3*queue->rx_target) / 4)) &&
	    (--queue->rx_target < queue->rx_min_target))
		queue->rx_target = queue->rx_min_target;
1060

1061
	xennet_alloc_rx_buffers(queue);
1062 1063

	if (work_done < budget) {
1064 1065
		int more_to_do = 0;

W
Wei Liu 已提交
1066 1067
		napi_gro_flush(napi, false);

1068 1069
		local_irq_save(flags);

1070
		RING_FINAL_CHECK_FOR_RESPONSES(&queue->rx, more_to_do);
1071
		if (!more_to_do)
1072
			__napi_complete(napi);
1073 1074 1075 1076

		local_irq_restore(flags);
	}

1077
	spin_unlock(&queue->rx_lock);
1078

1079
	return work_done;
1080 1081 1082 1083
}

static int xennet_change_mtu(struct net_device *dev, int mtu)
{
1084 1085
	int max = xennet_can_sg(dev) ?
		XEN_NETIF_MAX_TX_SIZE - MAX_TCP_HEADER : ETH_DATA_LEN;
1086 1087 1088 1089 1090 1091 1092

	if (mtu > max)
		return -EINVAL;
	dev->mtu = mtu;
	return 0;
}

1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104
static struct rtnl_link_stats64 *xennet_get_stats64(struct net_device *dev,
						    struct rtnl_link_stats64 *tot)
{
	struct netfront_info *np = netdev_priv(dev);
	int cpu;

	for_each_possible_cpu(cpu) {
		struct netfront_stats *stats = per_cpu_ptr(np->stats, cpu);
		u64 rx_packets, rx_bytes, tx_packets, tx_bytes;
		unsigned int start;

		do {
1105
			start = u64_stats_fetch_begin_irq(&stats->syncp);
1106 1107 1108 1109 1110

			rx_packets = stats->rx_packets;
			tx_packets = stats->tx_packets;
			rx_bytes = stats->rx_bytes;
			tx_bytes = stats->tx_bytes;
1111
		} while (u64_stats_fetch_retry_irq(&stats->syncp, start));
1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124

		tot->rx_packets += rx_packets;
		tot->tx_packets += tx_packets;
		tot->rx_bytes   += rx_bytes;
		tot->tx_bytes   += tx_bytes;
	}

	tot->rx_errors  = dev->stats.rx_errors;
	tot->tx_dropped = dev->stats.tx_dropped;

	return tot;
}

1125
static void xennet_release_tx_bufs(struct netfront_queue *queue)
1126 1127 1128 1129 1130 1131
{
	struct sk_buff *skb;
	int i;

	for (i = 0; i < NET_TX_RING_SIZE; i++) {
		/* Skip over entries which are actually freelist references */
1132
		if (skb_entry_is_link(&queue->tx_skbs[i]))
1133 1134
			continue;

1135 1136 1137
		skb = queue->tx_skbs[i].skb;
		get_page(queue->grant_tx_page[i]);
		gnttab_end_foreign_access(queue->grant_tx_ref[i],
1138
					  GNTMAP_readonly,
1139 1140 1141 1142
					  (unsigned long)page_address(queue->grant_tx_page[i]));
		queue->grant_tx_page[i] = NULL;
		queue->grant_tx_ref[i] = GRANT_INVALID_REF;
		add_id_to_freelist(&queue->tx_skb_freelist, queue->tx_skbs, i);
1143 1144 1145 1146
		dev_kfree_skb_irq(skb);
	}
}

1147
static void xennet_release_rx_bufs(struct netfront_queue *queue)
1148 1149 1150
{
	int id, ref;

1151
	spin_lock_bh(&queue->rx_lock);
1152 1153

	for (id = 0; id < NET_RX_RING_SIZE; id++) {
1154 1155
		struct sk_buff *skb;
		struct page *page;
1156

1157
		skb = queue->rx_skbs[id];
1158
		if (!skb)
1159 1160
			continue;

1161
		ref = queue->grant_rx_ref[id];
1162 1163
		if (ref == GRANT_INVALID_REF)
			continue;
1164

1165
		page = skb_frag_page(&skb_shinfo(skb)->frags[0]);
1166

1167 1168 1169 1170 1171 1172
		/* gnttab_end_foreign_access() needs a page ref until
		 * foreign access is ended (which may be deferred).
		 */
		get_page(page);
		gnttab_end_foreign_access(ref, 0,
					  (unsigned long)page_address(page));
1173
		queue->grant_rx_ref[id] = GRANT_INVALID_REF;
1174

1175
		kfree_skb(skb);
1176 1177
	}

1178
	spin_unlock_bh(&queue->rx_lock);
1179 1180 1181 1182 1183
}

static void xennet_uninit(struct net_device *dev)
{
	struct netfront_info *np = netdev_priv(dev);
1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194
	unsigned int num_queues = dev->real_num_tx_queues;
	struct netfront_queue *queue;
	unsigned int i;

	for (i = 0; i < num_queues; ++i) {
		queue = &np->queues[i];
		xennet_release_tx_bufs(queue);
		xennet_release_rx_bufs(queue);
		gnttab_free_grant_references(queue->gref_tx_head);
		gnttab_free_grant_references(queue->gref_rx_head);
	}
1195 1196
}

1197 1198
static netdev_features_t xennet_fix_features(struct net_device *dev,
	netdev_features_t features)
1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211
{
	struct netfront_info *np = netdev_priv(dev);
	int val;

	if (features & NETIF_F_SG) {
		if (xenbus_scanf(XBT_NIL, np->xbdev->otherend, "feature-sg",
				 "%d", &val) < 0)
			val = 0;

		if (!val)
			features &= ~NETIF_F_SG;
	}

1212 1213 1214 1215 1216 1217 1218 1219 1220
	if (features & NETIF_F_IPV6_CSUM) {
		if (xenbus_scanf(XBT_NIL, np->xbdev->otherend,
				 "feature-ipv6-csum-offload", "%d", &val) < 0)
			val = 0;

		if (!val)
			features &= ~NETIF_F_IPV6_CSUM;
	}

1221 1222 1223 1224 1225 1226 1227 1228 1229
	if (features & NETIF_F_TSO) {
		if (xenbus_scanf(XBT_NIL, np->xbdev->otherend,
				 "feature-gso-tcpv4", "%d", &val) < 0)
			val = 0;

		if (!val)
			features &= ~NETIF_F_TSO;
	}

1230 1231 1232 1233 1234 1235 1236 1237 1238
	if (features & NETIF_F_TSO6) {
		if (xenbus_scanf(XBT_NIL, np->xbdev->otherend,
				 "feature-gso-tcpv6", "%d", &val) < 0)
			val = 0;

		if (!val)
			features &= ~NETIF_F_TSO6;
	}

1239 1240 1241
	return features;
}

1242 1243
static int xennet_set_features(struct net_device *dev,
	netdev_features_t features)
1244 1245 1246 1247 1248 1249 1250 1251 1252
{
	if (!(features & NETIF_F_SG) && dev->mtu > ETH_DATA_LEN) {
		netdev_info(dev, "Reducing MTU because no SG offload");
		dev->mtu = ETH_DATA_LEN;
	}

	return 0;
}

1253
static irqreturn_t xennet_tx_interrupt(int irq, void *dev_id)
1254
{
1255
	struct netfront_queue *queue = dev_id;
1256 1257
	unsigned long flags;

1258 1259 1260
	spin_lock_irqsave(&queue->tx_lock, flags);
	xennet_tx_buf_gc(queue);
	spin_unlock_irqrestore(&queue->tx_lock, flags);
1261

1262 1263 1264 1265 1266
	return IRQ_HANDLED;
}

static irqreturn_t xennet_rx_interrupt(int irq, void *dev_id)
{
1267 1268
	struct netfront_queue *queue = dev_id;
	struct net_device *dev = queue->info->netdev;
1269 1270

	if (likely(netif_carrier_ok(dev) &&
1271 1272
		   RING_HAS_UNCONSUMED_RESPONSES(&queue->rx)))
			napi_schedule(&queue->napi);
1273

1274 1275
	return IRQ_HANDLED;
}
1276

1277 1278 1279 1280
static irqreturn_t xennet_interrupt(int irq, void *dev_id)
{
	xennet_tx_interrupt(irq, dev_id);
	xennet_rx_interrupt(irq, dev_id);
1281 1282 1283 1284 1285 1286
	return IRQ_HANDLED;
}

#ifdef CONFIG_NET_POLL_CONTROLLER
static void xennet_poll_controller(struct net_device *dev)
{
1287 1288 1289 1290 1291 1292
	/* Poll each queue */
	struct netfront_info *info = netdev_priv(dev);
	unsigned int num_queues = dev->real_num_tx_queues;
	unsigned int i;
	for (i = 0; i < num_queues; ++i)
		xennet_interrupt(0, &info->queues[i]);
1293 1294 1295
}
#endif

1296 1297 1298 1299 1300 1301
static const struct net_device_ops xennet_netdev_ops = {
	.ndo_open            = xennet_open,
	.ndo_uninit          = xennet_uninit,
	.ndo_stop            = xennet_close,
	.ndo_start_xmit      = xennet_start_xmit,
	.ndo_change_mtu	     = xennet_change_mtu,
1302
	.ndo_get_stats64     = xennet_get_stats64,
1303 1304
	.ndo_set_mac_address = eth_mac_addr,
	.ndo_validate_addr   = eth_validate_addr,
1305 1306
	.ndo_fix_features    = xennet_fix_features,
	.ndo_set_features    = xennet_set_features,
1307
	.ndo_select_queue    = xennet_select_queue,
1308 1309 1310
#ifdef CONFIG_NET_POLL_CONTROLLER
	.ndo_poll_controller = xennet_poll_controller,
#endif
1311 1312
};

1313
static struct net_device *xennet_create_dev(struct xenbus_device *dev)
1314
{
1315
	int err;
1316 1317 1318
	struct net_device *netdev;
	struct netfront_info *np;

1319
	netdev = alloc_etherdev_mq(sizeof(struct netfront_info), 1);
1320
	if (!netdev)
1321 1322 1323 1324 1325
		return ERR_PTR(-ENOMEM);

	np                   = netdev_priv(netdev);
	np->xbdev            = dev;

1326 1327 1328 1329 1330
	/* No need to use rtnl_lock() before the call below as it
	 * happens before register_netdev().
	 */
	netif_set_real_num_tx_queues(netdev, 0);
	np->queues = NULL;
1331

1332
	err = -ENOMEM;
1333
	np->stats = netdev_alloc_pcpu_stats(struct netfront_stats);
1334 1335 1336
	if (np->stats == NULL)
		goto exit;

1337 1338
	netdev->netdev_ops	= &xennet_netdev_ops;

1339 1340
	netdev->features        = NETIF_F_IP_CSUM | NETIF_F_RXCSUM |
				  NETIF_F_GSO_ROBUST;
1341 1342 1343
	netdev->hw_features	= NETIF_F_SG |
				  NETIF_F_IPV6_CSUM |
				  NETIF_F_TSO | NETIF_F_TSO6;
1344

1345 1346 1347 1348 1349 1350 1351 1352
	/*
         * Assume that all hw features are available for now. This set
         * will be adjusted by the call to netdev_update_features() in
         * xennet_connect() which is the earliest point where we can
         * negotiate with the backend regarding supported features.
         */
	netdev->features |= netdev->hw_features;

1353
	netdev->ethtool_ops = &xennet_ethtool_ops;
1354 1355
	SET_NETDEV_DEV(netdev, &dev->dev);

1356 1357
	netif_set_gso_max_size(netdev, XEN_NETIF_MAX_TX_SIZE - MAX_TCP_HEADER);

1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373
	np->netdev = netdev;

	netif_carrier_off(netdev);

	return netdev;

 exit:
	free_netdev(netdev);
	return ERR_PTR(err);
}

/**
 * Entry point to this code when a new device is created.  Allocate the basic
 * structures and the ring buffers for communication with the backend, and
 * inform the backend of the appropriate details for those.
 */
1374
static int netfront_probe(struct xenbus_device *dev,
1375
			  const struct xenbus_device_id *id)
1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388
{
	int err;
	struct net_device *netdev;
	struct netfront_info *info;

	netdev = xennet_create_dev(dev);
	if (IS_ERR(netdev)) {
		err = PTR_ERR(netdev);
		xenbus_dev_fatal(dev, err, "creating netdev");
		return err;
	}

	info = netdev_priv(netdev);
1389
	dev_set_drvdata(&dev->dev, info);
1390 1391 1392

	err = register_netdev(info->netdev);
	if (err) {
1393
		pr_warn("%s: register_netdev err=%d\n", __func__, err);
1394 1395 1396 1397 1398 1399
		goto fail;
	}

	err = xennet_sysfs_addif(info->netdev);
	if (err) {
		unregister_netdev(info->netdev);
1400
		pr_warn("%s: add sysfs failed err=%d\n", __func__, err);
1401 1402 1403 1404 1405 1406 1407
		goto fail;
	}

	return 0;

 fail:
	free_netdev(netdev);
1408
	dev_set_drvdata(&dev->dev, NULL);
1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420
	return err;
}

static void xennet_end_access(int ref, void *page)
{
	/* This frees the page as a side-effect */
	if (ref != GRANT_INVALID_REF)
		gnttab_end_foreign_access(ref, 0, (unsigned long)page);
}

static void xennet_disconnect_backend(struct netfront_info *info)
{
1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440
	unsigned int i = 0;
	struct netfront_queue *queue = NULL;
	unsigned int num_queues = info->netdev->real_num_tx_queues;

	for (i = 0; i < num_queues; ++i) {
		/* Stop old i/f to prevent errors whilst we rebuild the state. */
		spin_lock_bh(&queue->rx_lock);
		spin_lock_irq(&queue->tx_lock);
		netif_carrier_off(queue->info->netdev);
		spin_unlock_irq(&queue->tx_lock);
		spin_unlock_bh(&queue->rx_lock);

		if (queue->tx_irq && (queue->tx_irq == queue->rx_irq))
			unbind_from_irqhandler(queue->tx_irq, queue);
		if (queue->tx_irq && (queue->tx_irq != queue->rx_irq)) {
			unbind_from_irqhandler(queue->tx_irq, queue);
			unbind_from_irqhandler(queue->rx_irq, queue);
		}
		queue->tx_evtchn = queue->rx_evtchn = 0;
		queue->tx_irq = queue->rx_irq = 0;
1441

1442 1443 1444
		/* End access and free the pages */
		xennet_end_access(queue->tx_ring_ref, queue->tx.sring);
		xennet_end_access(queue->rx_ring_ref, queue->rx.sring);
1445

1446 1447 1448 1449 1450
		queue->tx_ring_ref = GRANT_INVALID_REF;
		queue->rx_ring_ref = GRANT_INVALID_REF;
		queue->tx.sring = NULL;
		queue->rx.sring = NULL;
	}
1451 1452 1453 1454 1455 1456 1457 1458 1459 1460
}

/**
 * We are reconnecting to the backend, due to a suspend/resume, or a backend
 * driver restart.  We tear down our netif structure and recreate it, but
 * leave the device-layer structures intact so that this is transparent to the
 * rest of the kernel.
 */
static int netfront_resume(struct xenbus_device *dev)
{
1461
	struct netfront_info *info = dev_get_drvdata(&dev->dev);
1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490

	dev_dbg(&dev->dev, "%s\n", dev->nodename);

	xennet_disconnect_backend(info);
	return 0;
}

static int xen_net_read_mac(struct xenbus_device *dev, u8 mac[])
{
	char *s, *e, *macstr;
	int i;

	macstr = s = xenbus_read(XBT_NIL, dev->nodename, "mac", NULL);
	if (IS_ERR(macstr))
		return PTR_ERR(macstr);

	for (i = 0; i < ETH_ALEN; i++) {
		mac[i] = simple_strtoul(s, &e, 16);
		if ((s == e) || (*e != ((i == ETH_ALEN-1) ? '\0' : ':'))) {
			kfree(macstr);
			return -ENOENT;
		}
		s = e+1;
	}

	kfree(macstr);
	return 0;
}

1491
static int setup_netfront_single(struct netfront_queue *queue)
1492 1493 1494
{
	int err;

1495
	err = xenbus_alloc_evtchn(queue->info->xbdev, &queue->tx_evtchn);
1496 1497 1498
	if (err < 0)
		goto fail;

1499
	err = bind_evtchn_to_irqhandler(queue->tx_evtchn,
1500
					xennet_interrupt,
1501
					0, queue->info->netdev->name, queue);
1502 1503
	if (err < 0)
		goto bind_fail;
1504 1505
	queue->rx_evtchn = queue->tx_evtchn;
	queue->rx_irq = queue->tx_irq = err;
1506 1507 1508 1509

	return 0;

bind_fail:
1510 1511
	xenbus_free_evtchn(queue->info->xbdev, queue->tx_evtchn);
	queue->tx_evtchn = 0;
1512 1513 1514 1515
fail:
	return err;
}

1516
static int setup_netfront_split(struct netfront_queue *queue)
1517 1518 1519
{
	int err;

1520
	err = xenbus_alloc_evtchn(queue->info->xbdev, &queue->tx_evtchn);
1521 1522
	if (err < 0)
		goto fail;
1523
	err = xenbus_alloc_evtchn(queue->info->xbdev, &queue->rx_evtchn);
1524 1525 1526
	if (err < 0)
		goto alloc_rx_evtchn_fail;

1527 1528 1529
	snprintf(queue->tx_irq_name, sizeof(queue->tx_irq_name),
		 "%s-tx", queue->name);
	err = bind_evtchn_to_irqhandler(queue->tx_evtchn,
1530
					xennet_tx_interrupt,
1531
					0, queue->tx_irq_name, queue);
1532 1533
	if (err < 0)
		goto bind_tx_fail;
1534
	queue->tx_irq = err;
1535

1536 1537 1538
	snprintf(queue->rx_irq_name, sizeof(queue->rx_irq_name),
		 "%s-rx", queue->name);
	err = bind_evtchn_to_irqhandler(queue->rx_evtchn,
1539
					xennet_rx_interrupt,
1540
					0, queue->rx_irq_name, queue);
1541 1542
	if (err < 0)
		goto bind_rx_fail;
1543
	queue->rx_irq = err;
1544 1545 1546 1547

	return 0;

bind_rx_fail:
1548 1549
	unbind_from_irqhandler(queue->tx_irq, queue);
	queue->tx_irq = 0;
1550
bind_tx_fail:
1551 1552
	xenbus_free_evtchn(queue->info->xbdev, queue->rx_evtchn);
	queue->rx_evtchn = 0;
1553
alloc_rx_evtchn_fail:
1554 1555
	xenbus_free_evtchn(queue->info->xbdev, queue->tx_evtchn);
	queue->tx_evtchn = 0;
1556 1557 1558 1559
fail:
	return err;
}

1560 1561
static int setup_netfront(struct xenbus_device *dev,
			struct netfront_queue *queue, unsigned int feature_split_evtchn)
1562 1563 1564 1565 1566
{
	struct xen_netif_tx_sring *txs;
	struct xen_netif_rx_sring *rxs;
	int err;

1567 1568 1569 1570
	queue->tx_ring_ref = GRANT_INVALID_REF;
	queue->rx_ring_ref = GRANT_INVALID_REF;
	queue->rx.sring = NULL;
	queue->tx.sring = NULL;
1571

1572
	txs = (struct xen_netif_tx_sring *)get_zeroed_page(GFP_NOIO | __GFP_HIGH);
1573 1574 1575 1576 1577 1578
	if (!txs) {
		err = -ENOMEM;
		xenbus_dev_fatal(dev, err, "allocating tx ring page");
		goto fail;
	}
	SHARED_RING_INIT(txs);
1579
	FRONT_RING_INIT(&queue->tx, txs, PAGE_SIZE);
1580 1581

	err = xenbus_grant_ring(dev, virt_to_mfn(txs));
1582 1583
	if (err < 0)
		goto grant_tx_ring_fail;
1584
	queue->tx_ring_ref = err;
1585

1586
	rxs = (struct xen_netif_rx_sring *)get_zeroed_page(GFP_NOIO | __GFP_HIGH);
1587 1588 1589
	if (!rxs) {
		err = -ENOMEM;
		xenbus_dev_fatal(dev, err, "allocating rx ring page");
1590
		goto alloc_rx_ring_fail;
1591 1592
	}
	SHARED_RING_INIT(rxs);
1593
	FRONT_RING_INIT(&queue->rx, rxs, PAGE_SIZE);
1594 1595

	err = xenbus_grant_ring(dev, virt_to_mfn(rxs));
1596 1597
	if (err < 0)
		goto grant_rx_ring_fail;
1598
	queue->rx_ring_ref = err;
1599

1600
	if (feature_split_evtchn)
1601
		err = setup_netfront_split(queue);
1602 1603 1604 1605 1606
	/* setup single event channel if
	 *  a) feature-split-event-channels == 0
	 *  b) feature-split-event-channels == 1 but failed to setup
	 */
	if (!feature_split_evtchn || (feature_split_evtchn && err))
1607
		err = setup_netfront_single(queue);
1608

1609
	if (err)
1610
		goto alloc_evtchn_fail;
1611 1612 1613

	return 0;

1614 1615 1616 1617
	/* If we fail to setup netfront, it is safe to just revoke access to
	 * granted pages because backend is not accessing it at this point.
	 */
alloc_evtchn_fail:
1618
	gnttab_end_foreign_access_ref(queue->rx_ring_ref, 0);
1619 1620 1621
grant_rx_ring_fail:
	free_page((unsigned long)rxs);
alloc_rx_ring_fail:
1622
	gnttab_end_foreign_access_ref(queue->tx_ring_ref, 0);
1623 1624 1625
grant_tx_ring_fail:
	free_page((unsigned long)txs);
fail:
1626 1627 1628
	return err;
}

1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689
/* Queue-specific initialisation
 * This used to be done in xennet_create_dev() but must now
 * be run per-queue.
 */
static int xennet_init_queue(struct netfront_queue *queue)
{
	unsigned short i;
	int err = 0;

	spin_lock_init(&queue->tx_lock);
	spin_lock_init(&queue->rx_lock);

	skb_queue_head_init(&queue->rx_batch);
	queue->rx_target     = RX_DFL_MIN_TARGET;
	queue->rx_min_target = RX_DFL_MIN_TARGET;
	queue->rx_max_target = RX_MAX_TARGET;

	init_timer(&queue->rx_refill_timer);
	queue->rx_refill_timer.data = (unsigned long)queue;
	queue->rx_refill_timer.function = rx_refill_timeout;

	/* Initialise tx_skbs as a free chain containing every entry. */
	queue->tx_skb_freelist = 0;
	for (i = 0; i < NET_TX_RING_SIZE; i++) {
		skb_entry_set_link(&queue->tx_skbs[i], i+1);
		queue->grant_tx_ref[i] = GRANT_INVALID_REF;
		queue->grant_tx_page[i] = NULL;
	}

	/* Clear out rx_skbs */
	for (i = 0; i < NET_RX_RING_SIZE; i++) {
		queue->rx_skbs[i] = NULL;
		queue->grant_rx_ref[i] = GRANT_INVALID_REF;
	}

	/* A grant for every tx ring slot */
	if (gnttab_alloc_grant_references(TX_MAX_TARGET,
					  &queue->gref_tx_head) < 0) {
		pr_alert("can't alloc tx grant refs\n");
		err = -ENOMEM;
		goto exit;
	}

	/* A grant for every rx ring slot */
	if (gnttab_alloc_grant_references(RX_MAX_TARGET,
					  &queue->gref_rx_head) < 0) {
		pr_alert("can't alloc rx grant refs\n");
		err = -ENOMEM;
		goto exit_free_tx;
	}

	netif_napi_add(queue->info->netdev, &queue->napi, xennet_poll, 64);

	return 0;

 exit_free_tx:
	gnttab_free_grant_references(queue->gref_tx_head);
 exit:
	return err;
}

1690
/* Common code used when first setting up, and when resuming. */
1691
static int talk_to_netback(struct xenbus_device *dev,
1692 1693 1694 1695 1696
			   struct netfront_info *info)
{
	const char *message;
	struct xenbus_transaction xbt;
	int err;
1697 1698 1699 1700
	unsigned int feature_split_evtchn;
	unsigned int i = 0;
	struct netfront_queue *queue = NULL;
	unsigned int num_queues = 1;
1701

1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721
	info->netdev->irq = 0;

	/* Check feature-split-event-channels */
	err = xenbus_scanf(XBT_NIL, info->xbdev->otherend,
			   "feature-split-event-channels", "%u",
			   &feature_split_evtchn);
	if (err < 0)
		feature_split_evtchn = 0;

	/* Read mac addr. */
	err = xen_net_read_mac(dev, info->netdev->dev_addr);
	if (err) {
		xenbus_dev_fatal(dev, err, "parsing %s/mac", dev->nodename);
		goto out;
	}

	/* Allocate array of queues */
	info->queues = kcalloc(num_queues, sizeof(struct netfront_queue), GFP_KERNEL);
	if (!info->queues) {
		err = -ENOMEM;
1722
		goto out;
1723 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765
	}
	rtnl_lock();
	netif_set_real_num_tx_queues(info->netdev, num_queues);
	rtnl_unlock();

	/* Create shared ring, alloc event channel -- for each queue */
	for (i = 0; i < num_queues; ++i) {
		queue = &info->queues[i];
		queue->id = i;
		queue->info = info;
		err = xennet_init_queue(queue);
		if (err) {
			/* xennet_init_queue() cleans up after itself on failure,
			 * but we still have to clean up any previously initialised
			 * queues. If i > 0, set num_queues to i, then goto
			 * destroy_ring, which calls xennet_disconnect_backend()
			 * to tidy up.
			 */
			if (i > 0) {
				rtnl_lock();
				netif_set_real_num_tx_queues(info->netdev, i);
				rtnl_unlock();
				goto destroy_ring;
			} else {
				goto out;
			}
		}
		err = setup_netfront(dev, queue, feature_split_evtchn);
		if (err) {
			/* As for xennet_init_queue(), setup_netfront() will tidy
			 * up the current queue on error, but we need to clean up
			 * those already allocated.
			 */
			if (i > 0) {
				rtnl_lock();
				netif_set_real_num_tx_queues(info->netdev, i);
				rtnl_unlock();
				goto destroy_ring;
			} else {
				goto out;
			}
		}
	}
1766 1767

again:
1768 1769
	queue = &info->queues[0]; /* Use first queue only */

1770 1771 1772 1773 1774 1775 1776
	err = xenbus_transaction_start(&xbt);
	if (err) {
		xenbus_dev_fatal(dev, err, "starting transaction");
		goto destroy_ring;
	}

	err = xenbus_printf(xbt, dev->nodename, "tx-ring-ref", "%u",
1777
			    queue->tx_ring_ref);
1778 1779 1780 1781 1782
	if (err) {
		message = "writing tx ring-ref";
		goto abort_transaction;
	}
	err = xenbus_printf(xbt, dev->nodename, "rx-ring-ref", "%u",
1783
			    queue->rx_ring_ref);
1784 1785 1786 1787
	if (err) {
		message = "writing rx ring-ref";
		goto abort_transaction;
	}
1788

1789
	if (queue->tx_evtchn == queue->rx_evtchn) {
1790
		err = xenbus_printf(xbt, dev->nodename,
1791
				    "event-channel", "%u", queue->tx_evtchn);
1792 1793 1794 1795 1796 1797
		if (err) {
			message = "writing event-channel";
			goto abort_transaction;
		}
	} else {
		err = xenbus_printf(xbt, dev->nodename,
1798
				    "event-channel-tx", "%u", queue->tx_evtchn);
1799 1800 1801 1802 1803
		if (err) {
			message = "writing event-channel-tx";
			goto abort_transaction;
		}
		err = xenbus_printf(xbt, dev->nodename,
1804
				    "event-channel-rx", "%u", queue->rx_evtchn);
1805 1806 1807 1808
		if (err) {
			message = "writing event-channel-rx";
			goto abort_transaction;
		}
1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835
	}

	err = xenbus_printf(xbt, dev->nodename, "request-rx-copy", "%u",
			    1);
	if (err) {
		message = "writing request-rx-copy";
		goto abort_transaction;
	}

	err = xenbus_printf(xbt, dev->nodename, "feature-rx-notify", "%d", 1);
	if (err) {
		message = "writing feature-rx-notify";
		goto abort_transaction;
	}

	err = xenbus_printf(xbt, dev->nodename, "feature-sg", "%d", 1);
	if (err) {
		message = "writing feature-sg";
		goto abort_transaction;
	}

	err = xenbus_printf(xbt, dev->nodename, "feature-gso-tcpv4", "%d", 1);
	if (err) {
		message = "writing feature-gso-tcpv4";
		goto abort_transaction;
	}

1836 1837 1838 1839 1840 1841 1842 1843 1844 1845 1846 1847 1848
	err = xenbus_write(xbt, dev->nodename, "feature-gso-tcpv6", "1");
	if (err) {
		message = "writing feature-gso-tcpv6";
		goto abort_transaction;
	}

	err = xenbus_write(xbt, dev->nodename, "feature-ipv6-csum-offload",
			   "1");
	if (err) {
		message = "writing feature-ipv6-csum-offload";
		goto abort_transaction;
	}

1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862 1863
	err = xenbus_transaction_end(xbt, 0);
	if (err) {
		if (err == -EAGAIN)
			goto again;
		xenbus_dev_fatal(dev, err, "completing transaction");
		goto destroy_ring;
	}

	return 0;

 abort_transaction:
	xenbus_transaction_end(xbt, 1);
	xenbus_dev_fatal(dev, err, "%s", message);
 destroy_ring:
	xennet_disconnect_backend(info);
1864 1865 1866 1867 1868
	kfree(info->queues);
	info->queues = NULL;
	rtnl_lock();
	netif_set_real_num_tx_queues(info->netdev, 0);
	rtnl_lock();
1869 1870 1871 1872 1873 1874 1875
 out:
	return err;
}

static int xennet_connect(struct net_device *dev)
{
	struct netfront_info *np = netdev_priv(dev);
1876
	unsigned int num_queues = 0;
1877 1878 1879 1880 1881
	int i, requeue_idx, err;
	struct sk_buff *skb;
	grant_ref_t ref;
	struct xen_netif_rx_request *req;
	unsigned int feature_rx_copy;
1882 1883
	unsigned int j = 0;
	struct netfront_queue *queue = NULL;
1884 1885 1886 1887 1888 1889 1890 1891

	err = xenbus_scanf(XBT_NIL, np->xbdev->otherend,
			   "feature-rx-copy", "%u", &feature_rx_copy);
	if (err != 1)
		feature_rx_copy = 0;

	if (!feature_rx_copy) {
		dev_info(&dev->dev,
1892
			 "backend does not support copying receive path\n");
1893 1894 1895
		return -ENODEV;
	}

1896
	err = talk_to_netback(np->xbdev, np);
1897 1898 1899
	if (err)
		return err;

1900 1901 1902
	/* talk_to_netback() sets the correct number of queues */
	num_queues = dev->real_num_tx_queues;

1903
	rtnl_lock();
1904
	netdev_update_features(dev);
1905
	rtnl_unlock();
1906

1907 1908 1909 1910 1911
	/* By now, the queue structures have been set up */
	for (j = 0; j < num_queues; ++j) {
		queue = &np->queues[j];
		spin_lock_bh(&queue->rx_lock);
		spin_lock_irq(&queue->tx_lock);
1912

1913 1914
		/* Step 1: Discard all pending TX packet fragments. */
		xennet_release_tx_bufs(queue);
1915

1916 1917 1918 1919 1920 1921
		/* Step 2: Rebuild the RX buffer freelist and the RX ring itself. */
		for (requeue_idx = 0, i = 0; i < NET_RX_RING_SIZE; i++) {
			skb_frag_t *frag;
			const struct page *page;
			if (!queue->rx_skbs[i])
				continue;
1922

1923 1924 1925
			skb = queue->rx_skbs[requeue_idx] = xennet_get_rx_skb(queue, i);
			ref = queue->grant_rx_ref[requeue_idx] = xennet_get_rx_ref(queue, i);
			req = RING_GET_REQUEST(&queue->rx, requeue_idx);
1926

1927 1928 1929 1930 1931 1932 1933 1934
			frag = &skb_shinfo(skb)->frags[0];
			page = skb_frag_page(frag);
			gnttab_grant_foreign_access_ref(
				ref, queue->info->xbdev->otherend_id,
				pfn_to_mfn(page_to_pfn(page)),
				0);
			req->gref = ref;
			req->id   = requeue_idx;
1935

1936 1937
			requeue_idx++;
		}
1938

1939 1940
		queue->rx.req_prod_pvt = requeue_idx;
	}
1941 1942 1943 1944 1945 1946 1947 1948

	/*
	 * Step 3: All public and private state should now be sane.  Get
	 * ready to start sending and receiving packets and give the driver
	 * domain a kick because we've probably just requeued some
	 * packets.
	 */
	netif_carrier_on(np->netdev);
1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959
	for (j = 0; j < num_queues; ++j) {
		queue = &np->queues[j];
		notify_remote_via_irq(queue->tx_irq);
		if (queue->tx_irq != queue->rx_irq)
			notify_remote_via_irq(queue->rx_irq);
		xennet_tx_buf_gc(queue);
		xennet_alloc_rx_buffers(queue);

		spin_unlock_irq(&queue->tx_lock);
		spin_unlock_bh(&queue->rx_lock);
	}
1960 1961 1962 1963 1964 1965 1966

	return 0;
}

/**
 * Callback received when the backend's state changes.
 */
1967
static void netback_changed(struct xenbus_device *dev,
1968 1969
			    enum xenbus_state backend_state)
{
1970
	struct netfront_info *np = dev_get_drvdata(&dev->dev);
1971 1972 1973 1974 1975 1976 1977
	struct net_device *netdev = np->netdev;

	dev_dbg(&dev->dev, "%s\n", xenbus_strstate(backend_state));

	switch (backend_state) {
	case XenbusStateInitialising:
	case XenbusStateInitialised:
1978 1979
	case XenbusStateReconfiguring:
	case XenbusStateReconfigured:
1980 1981 1982 1983 1984 1985 1986 1987 1988
	case XenbusStateUnknown:
		break;

	case XenbusStateInitWait:
		if (dev->state != XenbusStateInitialising)
			break;
		if (xennet_connect(netdev) != 0)
			break;
		xenbus_switch_state(dev, XenbusStateConnected);
1989 1990 1991
		break;

	case XenbusStateConnected:
1992
		netdev_notify_peers(netdev);
1993 1994
		break;

1995 1996 1997 1998
	case XenbusStateClosed:
		if (dev->state == XenbusStateClosed)
			break;
		/* Missed the backend's CLOSING state -- fallthrough */
1999 2000 2001 2002 2003 2004
	case XenbusStateClosing:
		xenbus_frontend_closed(dev);
		break;
	}
}

2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031
static const struct xennet_stat {
	char name[ETH_GSTRING_LEN];
	u16 offset;
} xennet_stats[] = {
	{
		"rx_gso_checksum_fixup",
		offsetof(struct netfront_info, rx_gso_checksum_fixup)
	},
};

static int xennet_get_sset_count(struct net_device *dev, int string_set)
{
	switch (string_set) {
	case ETH_SS_STATS:
		return ARRAY_SIZE(xennet_stats);
	default:
		return -EINVAL;
	}
}

static void xennet_get_ethtool_stats(struct net_device *dev,
				     struct ethtool_stats *stats, u64 * data)
{
	void *np = netdev_priv(dev);
	int i;

	for (i = 0; i < ARRAY_SIZE(xennet_stats); i++)
2032
		data[i] = atomic_read((atomic_t *)(np + xennet_stats[i].offset));
2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044 2045 2046 2047
}

static void xennet_get_strings(struct net_device *dev, u32 stringset, u8 * data)
{
	int i;

	switch (stringset) {
	case ETH_SS_STATS:
		for (i = 0; i < ARRAY_SIZE(xennet_stats); i++)
			memcpy(data + i * ETH_GSTRING_LEN,
			       xennet_stats[i].name, ETH_GSTRING_LEN);
		break;
	}
}

2048
static const struct ethtool_ops xennet_ethtool_ops =
2049 2050
{
	.get_link = ethtool_op_get_link,
2051 2052 2053 2054

	.get_sset_count = xennet_get_sset_count,
	.get_ethtool_stats = xennet_get_ethtool_stats,
	.get_strings = xennet_get_strings,
2055 2056 2057 2058 2059 2060 2061 2062
};

#ifdef CONFIG_SYSFS
static ssize_t show_rxbuf_min(struct device *dev,
			      struct device_attribute *attr, char *buf)
{
	struct net_device *netdev = to_net_dev(dev);
	struct netfront_info *info = netdev_priv(netdev);
2063
	unsigned int num_queues = netdev->real_num_tx_queues;
2064

2065 2066 2067 2068
	if (num_queues)
		return sprintf(buf, "%u\n", info->queues[0].rx_min_target);
	else
		return sprintf(buf, "%u\n", RX_MIN_TARGET);
2069 2070 2071 2072 2073 2074 2075 2076
}

static ssize_t store_rxbuf_min(struct device *dev,
			       struct device_attribute *attr,
			       const char *buf, size_t len)
{
	struct net_device *netdev = to_net_dev(dev);
	struct netfront_info *np = netdev_priv(netdev);
2077
	unsigned int num_queues = netdev->real_num_tx_queues;
2078 2079
	char *endp;
	unsigned long target;
2080 2081
	unsigned int i;
	struct netfront_queue *queue;
2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094

	if (!capable(CAP_NET_ADMIN))
		return -EPERM;

	target = simple_strtoul(buf, &endp, 0);
	if (endp == buf)
		return -EBADMSG;

	if (target < RX_MIN_TARGET)
		target = RX_MIN_TARGET;
	if (target > RX_MAX_TARGET)
		target = RX_MAX_TARGET;

2095 2096 2097 2098 2099 2100 2101 2102
	for (i = 0; i < num_queues; ++i) {
		queue = &np->queues[i];
		spin_lock_bh(&queue->rx_lock);
		if (target > queue->rx_max_target)
			queue->rx_max_target = target;
		queue->rx_min_target = target;
		if (target > queue->rx_target)
			queue->rx_target = target;
2103

2104
		xennet_alloc_rx_buffers(queue);
2105

2106 2107
		spin_unlock_bh(&queue->rx_lock);
	}
2108 2109 2110 2111 2112 2113 2114 2115
	return len;
}

static ssize_t show_rxbuf_max(struct device *dev,
			      struct device_attribute *attr, char *buf)
{
	struct net_device *netdev = to_net_dev(dev);
	struct netfront_info *info = netdev_priv(netdev);
2116
	unsigned int num_queues = netdev->real_num_tx_queues;
2117

2118 2119 2120 2121
	if (num_queues)
		return sprintf(buf, "%u\n", info->queues[0].rx_max_target);
	else
		return sprintf(buf, "%u\n", RX_MAX_TARGET);
2122 2123 2124 2125 2126 2127 2128 2129
}

static ssize_t store_rxbuf_max(struct device *dev,
			       struct device_attribute *attr,
			       const char *buf, size_t len)
{
	struct net_device *netdev = to_net_dev(dev);
	struct netfront_info *np = netdev_priv(netdev);
2130
	unsigned int num_queues = netdev->real_num_tx_queues;
2131 2132
	char *endp;
	unsigned long target;
2133 2134
	unsigned int i = 0;
	struct netfront_queue *queue = NULL;
2135 2136 2137 2138 2139 2140 2141 2142 2143 2144 2145 2146 2147

	if (!capable(CAP_NET_ADMIN))
		return -EPERM;

	target = simple_strtoul(buf, &endp, 0);
	if (endp == buf)
		return -EBADMSG;

	if (target < RX_MIN_TARGET)
		target = RX_MIN_TARGET;
	if (target > RX_MAX_TARGET)
		target = RX_MAX_TARGET;

2148 2149 2150 2151 2152 2153 2154 2155
	for (i = 0; i < num_queues; ++i) {
		queue = &np->queues[i];
		spin_lock_bh(&queue->rx_lock);
		if (target < queue->rx_min_target)
			queue->rx_min_target = target;
		queue->rx_max_target = target;
		if (target < queue->rx_target)
			queue->rx_target = target;
2156

2157
		xennet_alloc_rx_buffers(queue);
2158

2159 2160
		spin_unlock_bh(&queue->rx_lock);
	}
2161 2162 2163 2164 2165 2166 2167 2168
	return len;
}

static ssize_t show_rxbuf_cur(struct device *dev,
			      struct device_attribute *attr, char *buf)
{
	struct net_device *netdev = to_net_dev(dev);
	struct netfront_info *info = netdev_priv(netdev);
2169
	unsigned int num_queues = netdev->real_num_tx_queues;
2170

2171 2172 2173 2174
	if (num_queues)
		return sprintf(buf, "%u\n", info->queues[0].rx_target);
	else
		return sprintf(buf, "0\n");
2175 2176 2177 2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193 2194 2195 2196 2197 2198 2199 2200 2201 2202 2203 2204 2205 2206 2207 2208 2209 2210 2211
}

static struct device_attribute xennet_attrs[] = {
	__ATTR(rxbuf_min, S_IRUGO|S_IWUSR, show_rxbuf_min, store_rxbuf_min),
	__ATTR(rxbuf_max, S_IRUGO|S_IWUSR, show_rxbuf_max, store_rxbuf_max),
	__ATTR(rxbuf_cur, S_IRUGO, show_rxbuf_cur, NULL),
};

static int xennet_sysfs_addif(struct net_device *netdev)
{
	int i;
	int err;

	for (i = 0; i < ARRAY_SIZE(xennet_attrs); i++) {
		err = device_create_file(&netdev->dev,
					   &xennet_attrs[i]);
		if (err)
			goto fail;
	}
	return 0;

 fail:
	while (--i >= 0)
		device_remove_file(&netdev->dev, &xennet_attrs[i]);
	return err;
}

static void xennet_sysfs_delif(struct net_device *netdev)
{
	int i;

	for (i = 0; i < ARRAY_SIZE(xennet_attrs); i++)
		device_remove_file(&netdev->dev, &xennet_attrs[i]);
}

#endif /* CONFIG_SYSFS */

2212
static const struct xenbus_device_id netfront_ids[] = {
2213 2214 2215 2216 2217
	{ "vif" },
	{ "" }
};


2218
static int xennet_remove(struct xenbus_device *dev)
2219
{
2220
	struct netfront_info *info = dev_get_drvdata(&dev->dev);
2221 2222 2223
	unsigned int num_queues = info->netdev->real_num_tx_queues;
	struct netfront_queue *queue = NULL;
	unsigned int i = 0;
2224 2225 2226 2227 2228 2229 2230

	dev_dbg(&dev->dev, "%s\n", dev->nodename);

	xennet_disconnect_backend(info);

	xennet_sysfs_delif(info->netdev);

2231 2232
	unregister_netdev(info->netdev);

2233 2234 2235 2236 2237 2238 2239 2240 2241
	for (i = 0; i < num_queues; ++i) {
		queue = &info->queues[i];
		del_timer_sync(&queue->rx_refill_timer);
	}

	if (num_queues) {
		kfree(info->queues);
		info->queues = NULL;
	}
2242

2243 2244
	free_percpu(info->stats);

2245 2246 2247 2248 2249
	free_netdev(info->netdev);

	return 0;
}

2250
static DEFINE_XENBUS_DRIVER(netfront, ,
2251
	.probe = netfront_probe,
2252
	.remove = xennet_remove,
2253
	.resume = netfront_resume,
2254
	.otherend_changed = netback_changed,
2255
);
2256 2257 2258

static int __init netif_init(void)
{
2259
	if (!xen_domain())
2260 2261
		return -ENODEV;

2262
	if (!xen_has_pv_nic_devices())
2263 2264
		return -ENODEV;

2265
	pr_info("Initialising Xen virtual ethernet driver\n");
2266

2267
	return xenbus_register_frontend(&netfront_driver);
2268 2269 2270 2271 2272 2273
}
module_init(netif_init);


static void __exit netif_exit(void)
{
2274
	xenbus_unregister_driver(&netfront_driver);
2275 2276 2277 2278 2279
}
module_exit(netif_exit);

MODULE_DESCRIPTION("Xen virtual network device frontend");
MODULE_LICENSE("GPL");
2280
MODULE_ALIAS("xen:vif");
2281
MODULE_ALIAS("xennet");