pkt_cls.h 9.9 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3
#ifndef __LINUX_PKT_CLS_H
#define __LINUX_PKT_CLS_H

4
#include <linux/types.h>
L
Linus Torvalds 已提交
5 6
#include <linux/pkt_sched.h>

7
#ifdef __KERNEL__
L
Linus Torvalds 已提交
8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57
/* I think i could have done better macros ; for now this is stolen from
 * some arch/mips code - jhs
*/
#define _TC_MAKE32(x) ((x))

#define _TC_MAKEMASK1(n) (_TC_MAKE32(1) << _TC_MAKE32(n))
#define _TC_MAKEMASK(v,n) (_TC_MAKE32((_TC_MAKE32(1)<<(v))-1) << _TC_MAKE32(n))
#define _TC_MAKEVALUE(v,n) (_TC_MAKE32(v) << _TC_MAKE32(n))
#define _TC_GETVALUE(v,n,m) ((_TC_MAKE32(v) & _TC_MAKE32(m)) >> _TC_MAKE32(n))

/* verdict bit breakdown 
 *
bit 0: when set -> this packet has been munged already

bit 1: when set -> It is ok to munge this packet

bit 2,3,4,5: Reclassify counter - sort of reverse TTL - if exceeded
assume loop

bit 6,7: Where this packet was last seen 
0: Above the transmit example at the socket level
1: on the Ingress
2: on the Egress

bit 8: when set --> Request not to classify on ingress. 

bits 9,10,11: redirect counter -  redirect TTL. Loop avoidance

 *
 * */

#define S_TC_FROM          _TC_MAKE32(6)
#define M_TC_FROM          _TC_MAKEMASK(2,S_TC_FROM)
#define G_TC_FROM(x)       _TC_GETVALUE(x,S_TC_FROM,M_TC_FROM)
#define V_TC_FROM(x)       _TC_MAKEVALUE(x,S_TC_FROM)
#define SET_TC_FROM(v,n)   ((V_TC_FROM(n)) | (v & ~M_TC_FROM))
#define AT_STACK	0x0
#define AT_INGRESS	0x1
#define AT_EGRESS	0x2

#define TC_NCLS          _TC_MAKEMASK1(8)
#define SET_TC_NCLS(v)   ( TC_NCLS | (v & ~TC_NCLS))
#define CLR_TC_NCLS(v)   ( v & ~TC_NCLS)

#define S_TC_AT          _TC_MAKE32(12)
#define M_TC_AT          _TC_MAKEMASK(2,S_TC_AT)
#define G_TC_AT(x)       _TC_GETVALUE(x,S_TC_AT,M_TC_AT)
#define V_TC_AT(x)       _TC_MAKEVALUE(x,S_TC_AT)
#define SET_TC_AT(v,n)   ((V_TC_AT(n)) | (v & ~M_TC_AT))

58 59 60 61
#define MAX_REC_LOOP 4
#define MAX_RED_LOOP 4
#endif

L
Linus Torvalds 已提交
62
/* Action attributes */
E
Eric Dumazet 已提交
63
enum {
L
Linus Torvalds 已提交
64 65 66 67 68
	TCA_ACT_UNSPEC,
	TCA_ACT_KIND,
	TCA_ACT_OPTIONS,
	TCA_ACT_INDEX,
	TCA_ACT_STATS,
69
	TCA_ACT_PAD,
L
Linus Torvalds 已提交
70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90
	__TCA_ACT_MAX
};

#define TCA_ACT_MAX __TCA_ACT_MAX
#define TCA_OLD_COMPAT (TCA_ACT_MAX+1)
#define TCA_ACT_MAX_PRIO 32
#define TCA_ACT_BIND	1
#define TCA_ACT_NOBIND	0
#define TCA_ACT_UNBIND	1
#define TCA_ACT_NOUNBIND	0
#define TCA_ACT_REPLACE		1
#define TCA_ACT_NOREPLACE	0

#define TC_ACT_UNSPEC	(-1)
#define TC_ACT_OK		0
#define TC_ACT_RECLASSIFY	1
#define TC_ACT_SHOT		2
#define TC_ACT_PIPE		3
#define TC_ACT_STOLEN		4
#define TC_ACT_QUEUED		5
#define TC_ACT_REPEAT		6
91
#define TC_ACT_REDIRECT		7
L
Linus Torvalds 已提交
92 93 94
#define TC_ACT_JUMP		0x10000000

/* Action type identifiers*/
E
Eric Dumazet 已提交
95
enum {
L
Linus Torvalds 已提交
96 97 98 99 100 101 102 103
	TCA_ID_UNSPEC=0,
	TCA_ID_POLICE=1,
	/* other actions go here */
	__TCA_ID_MAX=255
};

#define TCA_ID_MAX __TCA_ID_MAX

E
Eric Dumazet 已提交
104
struct tc_police {
L
Linus Torvalds 已提交
105 106 107 108 109 110 111 112 113 114 115 116 117
	__u32			index;
	int			action;
#define TC_POLICE_UNSPEC	TC_ACT_UNSPEC
#define TC_POLICE_OK		TC_ACT_OK
#define TC_POLICE_RECLASSIFY	TC_ACT_RECLASSIFY
#define TC_POLICE_SHOT		TC_ACT_SHOT
#define TC_POLICE_PIPE		TC_ACT_PIPE

	__u32			limit;
	__u32			burst;
	__u32			mtu;
	struct tc_ratespec	rate;
	struct tc_ratespec	peakrate;
118 119
	int			refcnt;
	int			bindcnt;
L
Linus Torvalds 已提交
120 121 122
	__u32			capab;
};

E
Eric Dumazet 已提交
123
struct tcf_t {
L
Linus Torvalds 已提交
124 125 126
	__u64   install;
	__u64   lastuse;
	__u64   expires;
127
	__u64   firstuse;
L
Linus Torvalds 已提交
128 129
};

E
Eric Dumazet 已提交
130
struct tc_cnt {
131
	int                   refcnt;
L
Linus Torvalds 已提交
132 133 134 135 136 137 138 139 140 141
	int                   bindcnt;
};

#define tc_gen \
	__u32                 index; \
	__u32                 capab; \
	int                   action; \
	int                   refcnt; \
	int                   bindcnt

E
Eric Dumazet 已提交
142
enum {
L
Linus Torvalds 已提交
143 144 145 146 147 148
	TCA_POLICE_UNSPEC,
	TCA_POLICE_TBF,
	TCA_POLICE_RATE,
	TCA_POLICE_PEAKRATE,
	TCA_POLICE_AVRATE,
	TCA_POLICE_RESULT,
149 150
	TCA_POLICE_TM,
	TCA_POLICE_PAD,
L
Linus Torvalds 已提交
151 152 153 154 155 156
	__TCA_POLICE_MAX
#define TCA_POLICE_RESULT TCA_POLICE_RESULT
};

#define TCA_POLICE_MAX (__TCA_POLICE_MAX - 1)

157 158
/* tca flags definitions */
#define TCA_CLS_FLAGS_SKIP_HW	(1 << 0)
159
#define TCA_CLS_FLAGS_SKIP_SW	(1 << 1)
160

L
Linus Torvalds 已提交
161 162 163 164 165 166 167 168 169 170
/* U32 filters */

#define TC_U32_HTID(h) ((h)&0xFFF00000)
#define TC_U32_USERHTID(h) (TC_U32_HTID(h)>>20)
#define TC_U32_HASH(h) (((h)>>12)&0xFF)
#define TC_U32_NODE(h) ((h)&0xFFF)
#define TC_U32_KEY(h) ((h)&0xFFFFF)
#define TC_U32_UNSPEC	0
#define TC_U32_ROOT	(0xFFF00000)

E
Eric Dumazet 已提交
171
enum {
L
Linus Torvalds 已提交
172 173 174 175 176 177 178
	TCA_U32_UNSPEC,
	TCA_U32_CLASSID,
	TCA_U32_HASH,
	TCA_U32_LINK,
	TCA_U32_DIVISOR,
	TCA_U32_SEL,
	TCA_U32_POLICE,
179
	TCA_U32_ACT,
L
Linus Torvalds 已提交
180 181 182
	TCA_U32_INDEV,
	TCA_U32_PCNT,
	TCA_U32_MARK,
183
	TCA_U32_FLAGS,
184
	TCA_U32_PAD,
L
Linus Torvalds 已提交
185 186 187 188 189
	__TCA_U32_MAX
};

#define TCA_U32_MAX (__TCA_U32_MAX - 1)

E
Eric Dumazet 已提交
190
struct tc_u32_key {
A
Al Viro 已提交
191 192
	__be32		mask;
	__be32		val;
L
Linus Torvalds 已提交
193 194 195 196
	int		off;
	int		offmask;
};

E
Eric Dumazet 已提交
197
struct tc_u32_sel {
L
Linus Torvalds 已提交
198 199 200 201
	unsigned char		flags;
	unsigned char		offshift;
	unsigned char		nkeys;

A
Al Viro 已提交
202
	__be16			offmask;
L
Linus Torvalds 已提交
203 204 205 206
	__u16			off;
	short			offoff;

	short			hoff;
A
Al Viro 已提交
207
	__be32			hmask;
L
Linus Torvalds 已提交
208 209 210
	struct tc_u32_key	keys[0];
};

E
Eric Dumazet 已提交
211
struct tc_u32_mark {
L
Linus Torvalds 已提交
212 213 214 215 216
	__u32		val;
	__u32		mask;
	__u32		success;
};

E
Eric Dumazet 已提交
217
struct tc_u32_pcnt {
L
Linus Torvalds 已提交
218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234
	__u64 rcnt;
	__u64 rhit;
	__u64 kcnts[0];
};

/* Flags */

#define TC_U32_TERMINAL		1
#define TC_U32_OFFSET		2
#define TC_U32_VAROFFSET	4
#define TC_U32_EAT		8

#define TC_U32_MAXDEPTH 8


/* RSVP filter */

E
Eric Dumazet 已提交
235
enum {
L
Linus Torvalds 已提交
236 237 238 239 240 241 242 243 244 245 246 247
	TCA_RSVP_UNSPEC,
	TCA_RSVP_CLASSID,
	TCA_RSVP_DST,
	TCA_RSVP_SRC,
	TCA_RSVP_PINFO,
	TCA_RSVP_POLICE,
	TCA_RSVP_ACT,
	__TCA_RSVP_MAX
};

#define TCA_RSVP_MAX (__TCA_RSVP_MAX - 1 )

E
Eric Dumazet 已提交
248
struct tc_rsvp_gpi {
L
Linus Torvalds 已提交
249 250 251 252 253
	__u32	key;
	__u32	mask;
	int	offset;
};

E
Eric Dumazet 已提交
254
struct tc_rsvp_pinfo {
L
Linus Torvalds 已提交
255 256 257 258 259
	struct tc_rsvp_gpi dpi;
	struct tc_rsvp_gpi spi;
	__u8	protocol;
	__u8	tunnelid;
	__u8	tunnelhdr;
260
	__u8	pad;
L
Linus Torvalds 已提交
261 262 263 264
};

/* ROUTE filter */

E
Eric Dumazet 已提交
265
enum {
L
Linus Torvalds 已提交
266 267 268 269 270 271 272 273 274 275 276 277 278 279 280
	TCA_ROUTE4_UNSPEC,
	TCA_ROUTE4_CLASSID,
	TCA_ROUTE4_TO,
	TCA_ROUTE4_FROM,
	TCA_ROUTE4_IIF,
	TCA_ROUTE4_POLICE,
	TCA_ROUTE4_ACT,
	__TCA_ROUTE4_MAX
};

#define TCA_ROUTE4_MAX (__TCA_ROUTE4_MAX - 1)


/* FW filter */

E
Eric Dumazet 已提交
281
enum {
L
Linus Torvalds 已提交
282 283 284 285 286
	TCA_FW_UNSPEC,
	TCA_FW_CLASSID,
	TCA_FW_POLICE,
	TCA_FW_INDEV, /*  used by CONFIG_NET_CLS_IND */
	TCA_FW_ACT, /* used by CONFIG_NET_CLS_ACT */
287
	TCA_FW_MASK,
L
Linus Torvalds 已提交
288 289 290 291 292 293 294
	__TCA_FW_MAX
};

#define TCA_FW_MAX (__TCA_FW_MAX - 1)

/* TC index filter */

E
Eric Dumazet 已提交
295
enum {
L
Linus Torvalds 已提交
296 297 298 299 300 301 302 303 304 305 306 307 308
	TCA_TCINDEX_UNSPEC,
	TCA_TCINDEX_HASH,
	TCA_TCINDEX_MASK,
	TCA_TCINDEX_SHIFT,
	TCA_TCINDEX_FALL_THROUGH,
	TCA_TCINDEX_CLASSID,
	TCA_TCINDEX_POLICE,
	TCA_TCINDEX_ACT,
	__TCA_TCINDEX_MAX
};

#define TCA_TCINDEX_MAX     (__TCA_TCINDEX_MAX - 1)

309 310
/* Flow filter */

E
Eric Dumazet 已提交
311
enum {
312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327
	FLOW_KEY_SRC,
	FLOW_KEY_DST,
	FLOW_KEY_PROTO,
	FLOW_KEY_PROTO_SRC,
	FLOW_KEY_PROTO_DST,
	FLOW_KEY_IIF,
	FLOW_KEY_PRIORITY,
	FLOW_KEY_MARK,
	FLOW_KEY_NFCT,
	FLOW_KEY_NFCT_SRC,
	FLOW_KEY_NFCT_DST,
	FLOW_KEY_NFCT_PROTO_SRC,
	FLOW_KEY_NFCT_PROTO_DST,
	FLOW_KEY_RTCLASSID,
	FLOW_KEY_SKUID,
	FLOW_KEY_SKGID,
328
	FLOW_KEY_VLAN_TAG,
329
	FLOW_KEY_RXHASH,
330 331 332 333 334
	__FLOW_KEY_MAX,
};

#define FLOW_KEY_MAX	(__FLOW_KEY_MAX - 1)

E
Eric Dumazet 已提交
335
enum {
336 337 338 339
	FLOW_MODE_MAP,
	FLOW_MODE_HASH,
};

E
Eric Dumazet 已提交
340
enum {
341 342 343 344 345 346 347 348 349 350 351 352
	TCA_FLOW_UNSPEC,
	TCA_FLOW_KEYS,
	TCA_FLOW_MODE,
	TCA_FLOW_BASECLASS,
	TCA_FLOW_RSHIFT,
	TCA_FLOW_ADDEND,
	TCA_FLOW_MASK,
	TCA_FLOW_XOR,
	TCA_FLOW_DIVISOR,
	TCA_FLOW_ACT,
	TCA_FLOW_POLICE,
	TCA_FLOW_EMATCHES,
353
	TCA_FLOW_PERTURB,
354 355 356 357 358
	__TCA_FLOW_MAX
};

#define TCA_FLOW_MAX	(__TCA_FLOW_MAX - 1)

L
Linus Torvalds 已提交
359 360
/* Basic filter */

E
Eric Dumazet 已提交
361
enum {
L
Linus Torvalds 已提交
362 363 364 365 366 367 368 369 370 371
	TCA_BASIC_UNSPEC,
	TCA_BASIC_CLASSID,
	TCA_BASIC_EMATCHES,
	TCA_BASIC_ACT,
	TCA_BASIC_POLICE,
	__TCA_BASIC_MAX
};

#define TCA_BASIC_MAX (__TCA_BASIC_MAX - 1)

T
Thomas Graf 已提交
372 373 374

/* Cgroup classifier */

E
Eric Dumazet 已提交
375
enum {
T
Thomas Graf 已提交
376 377 378 379 380 381 382 383 384
	TCA_CGROUP_UNSPEC,
	TCA_CGROUP_ACT,
	TCA_CGROUP_POLICE,
	TCA_CGROUP_EMATCHES,
	__TCA_CGROUP_MAX,
};

#define TCA_CGROUP_MAX (__TCA_CGROUP_MAX - 1)

385 386
/* BPF classifier */

387 388
#define TCA_BPF_FLAG_ACT_DIRECT		(1 << 0)

389 390 391 392 393 394 395
enum {
	TCA_BPF_UNSPEC,
	TCA_BPF_ACT,
	TCA_BPF_POLICE,
	TCA_BPF_CLASSID,
	TCA_BPF_OPS_LEN,
	TCA_BPF_OPS,
396 397
	TCA_BPF_FD,
	TCA_BPF_NAME,
398
	TCA_BPF_FLAGS,
399 400 401 402 403
	__TCA_BPF_MAX,
};

#define TCA_BPF_MAX (__TCA_BPF_MAX - 1)

J
Jiri Pirko 已提交
404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428
/* Flower classifier */

enum {
	TCA_FLOWER_UNSPEC,
	TCA_FLOWER_CLASSID,
	TCA_FLOWER_INDEV,
	TCA_FLOWER_ACT,
	TCA_FLOWER_KEY_ETH_DST,		/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_DST_MASK,	/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_SRC,		/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_SRC_MASK,	/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_TYPE,	/* be16 */
	TCA_FLOWER_KEY_IP_PROTO,	/* u8 */
	TCA_FLOWER_KEY_IPV4_SRC,	/* be32 */
	TCA_FLOWER_KEY_IPV4_SRC_MASK,	/* be32 */
	TCA_FLOWER_KEY_IPV4_DST,	/* be32 */
	TCA_FLOWER_KEY_IPV4_DST_MASK,	/* be32 */
	TCA_FLOWER_KEY_IPV6_SRC,	/* struct in6_addr */
	TCA_FLOWER_KEY_IPV6_SRC_MASK,	/* struct in6_addr */
	TCA_FLOWER_KEY_IPV6_DST,	/* struct in6_addr */
	TCA_FLOWER_KEY_IPV6_DST_MASK,	/* struct in6_addr */
	TCA_FLOWER_KEY_TCP_SRC,		/* be16 */
	TCA_FLOWER_KEY_TCP_DST,		/* be16 */
	TCA_FLOWER_KEY_UDP_SRC,		/* be16 */
	TCA_FLOWER_KEY_UDP_DST,		/* be16 */
429 430

	TCA_FLOWER_FLAGS,
J
Jiri Pirko 已提交
431 432 433 434 435
	__TCA_FLOWER_MAX,
};

#define TCA_FLOWER_MAX (__TCA_FLOWER_MAX - 1)

436 437 438 439 440 441 442 443 444 445 446
/* Match-all classifier */

enum {
	TCA_MATCHALL_UNSPEC,
	TCA_MATCHALL_CLASSID,
	TCA_MATCHALL_ACT,
	__TCA_MATCHALL_MAX,
};

#define TCA_MATCHALL_MAX (__TCA_MATCHALL_MAX - 1)

L
Linus Torvalds 已提交
447 448
/* Extended Matches */

E
Eric Dumazet 已提交
449
struct tcf_ematch_tree_hdr {
L
Linus Torvalds 已提交
450 451 452 453
	__u16		nmatches;
	__u16		progid;
};

E
Eric Dumazet 已提交
454
enum {
L
Linus Torvalds 已提交
455 456 457 458 459 460 461
	TCA_EMATCH_TREE_UNSPEC,
	TCA_EMATCH_TREE_HDR,
	TCA_EMATCH_TREE_LIST,
	__TCA_EMATCH_TREE_MAX
};
#define TCA_EMATCH_TREE_MAX (__TCA_EMATCH_TREE_MAX - 1)

E
Eric Dumazet 已提交
462
struct tcf_ematch_hdr {
L
Linus Torvalds 已提交
463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491
	__u16		matchid;
	__u16		kind;
	__u16		flags;
	__u16		pad; /* currently unused */
};

/*  0                   1
 *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 
 * +-----------------------+-+-+---+
 * |         Unused        |S|I| R |
 * +-----------------------+-+-+---+
 *
 * R(2) ::= relation to next ematch
 *          where: 0 0 END (last ematch)
 *                 0 1 AND
 *                 1 0 OR
 *                 1 1 Unused (invalid)
 * I(1) ::= invert result
 * S(1) ::= simple payload
 */
#define TCF_EM_REL_END	0
#define TCF_EM_REL_AND	(1<<0)
#define TCF_EM_REL_OR	(1<<1)
#define TCF_EM_INVERT	(1<<2)
#define TCF_EM_SIMPLE	(1<<3)

#define TCF_EM_REL_MASK	3
#define TCF_EM_REL_VALID(v) (((v) & TCF_EM_REL_MASK) != TCF_EM_REL_MASK)

E
Eric Dumazet 已提交
492
enum {
L
Linus Torvalds 已提交
493 494 495 496 497 498 499 500 501 502 503
	TCF_LAYER_LINK,
	TCF_LAYER_NETWORK,
	TCF_LAYER_TRANSPORT,
	__TCF_LAYER_MAX
};
#define TCF_LAYER_MAX (__TCF_LAYER_MAX - 1)

/* Ematch type assignments
 *   1..32767		Reserved for ematches inside kernel tree
 *   32768..65535	Free to use, not reliable
 */
504 505 506 507 508 509
#define	TCF_EM_CONTAINER	0
#define	TCF_EM_CMP		1
#define	TCF_EM_NBYTE		2
#define	TCF_EM_U32		3
#define	TCF_EM_META		4
#define	TCF_EM_TEXT		5
510 511
#define	TCF_EM_VLAN		6
#define	TCF_EM_CANID		7
F
Florian Westphal 已提交
512 513
#define	TCF_EM_IPSET		8
#define	TCF_EM_MAX		8
L
Linus Torvalds 已提交
514

E
Eric Dumazet 已提交
515
enum {
L
Linus Torvalds 已提交
516 517 518
	TCF_EM_PROG_TC
};

E
Eric Dumazet 已提交
519
enum {
L
Linus Torvalds 已提交
520 521 522 523 524 525
	TCF_EM_OPND_EQ,
	TCF_EM_OPND_GT,
	TCF_EM_OPND_LT
};

#endif