cls_route.c 12.3 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12
/*
 * net/sched/cls_route.c	ROUTE4 classifier.
 *
 *		This program is free software; you can redistribute it and/or
 *		modify it under the terms of the GNU General Public License
 *		as published by the Free Software Foundation; either version
 *		2 of the License, or (at your option) any later version.
 *
 * Authors:	Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
 */

#include <linux/module.h>
13
#include <linux/slab.h>
L
Linus Torvalds 已提交
14 15 16 17 18
#include <linux/types.h>
#include <linux/kernel.h>
#include <linux/string.h>
#include <linux/errno.h>
#include <linux/skbuff.h>
19 20 21
#include <net/dst.h>
#include <net/route.h>
#include <net/netlink.h>
L
Linus Torvalds 已提交
22 23 24 25
#include <net/act_api.h>
#include <net/pkt_cls.h>

/*
E
Eric Dumazet 已提交
26 27 28 29 30
 * 1. For now we assume that route tags < 256.
 *    It allows to use direct table lookups, instead of hash tables.
 * 2. For now we assume that "from TAG" and "fromdev DEV" statements
 *    are mutually  exclusive.
 * 3. "to TAG from ANY" has higher priority, than "to ANY from XXX"
L
Linus Torvalds 已提交
31 32
 */

E
Eric Dumazet 已提交
33
struct route4_fastmap {
L
Linus Torvalds 已提交
34 35 36 37 38
	struct route4_filter	*filter;
	u32			id;
	int			iif;
};

E
Eric Dumazet 已提交
39
struct route4_head {
L
Linus Torvalds 已提交
40
	struct route4_fastmap	fastmap[16];
E
Eric Dumazet 已提交
41
	struct route4_bucket	*table[256 + 1];
L
Linus Torvalds 已提交
42 43
};

E
Eric Dumazet 已提交
44
struct route4_bucket {
L
Linus Torvalds 已提交
45
	/* 16 FROM buckets + 16 IIF buckets + 1 wildcard bucket */
E
Eric Dumazet 已提交
46
	struct route4_filter	*ht[16 + 16 + 1];
L
Linus Torvalds 已提交
47 48
};

E
Eric Dumazet 已提交
49
struct route4_filter {
L
Linus Torvalds 已提交
50 51 52 53 54 55 56 57 58 59
	struct route4_filter	*next;
	u32			id;
	int			iif;

	struct tcf_result	res;
	struct tcf_exts		exts;
	u32			handle;
	struct route4_bucket	*bkt;
};

E
Eric Dumazet 已提交
60
#define ROUTE4_FAILURE ((struct route4_filter *)(-1L))
L
Linus Torvalds 已提交
61

62
static const struct tcf_ext_map route_ext_map = {
L
Linus Torvalds 已提交
63 64 65 66
	.police = TCA_ROUTE4_POLICE,
	.action = TCA_ROUTE4_ACT
};

E
Eric Dumazet 已提交
67
static inline int route4_fastmap_hash(u32 id, int iif)
L
Linus Torvalds 已提交
68
{
E
Eric Dumazet 已提交
69
	return id & 0xF;
L
Linus Torvalds 已提交
70 71
}

E
Eric Dumazet 已提交
72 73
static void
route4_reset_fastmap(struct Qdisc *q, struct route4_head *head, u32 id)
L
Linus Torvalds 已提交
74
{
75
	spinlock_t *root_lock = qdisc_root_sleeping_lock(q);
76 77

	spin_lock_bh(root_lock);
L
Linus Torvalds 已提交
78
	memset(head->fastmap, 0, sizeof(head->fastmap));
79
	spin_unlock_bh(root_lock);
L
Linus Torvalds 已提交
80 81
}

E
Eric Dumazet 已提交
82
static void
L
Linus Torvalds 已提交
83 84 85 86
route4_set_fastmap(struct route4_head *head, u32 id, int iif,
		   struct route4_filter *f)
{
	int h = route4_fastmap_hash(id, iif);
E
Eric Dumazet 已提交
87

L
Linus Torvalds 已提交
88 89 90 91 92
	head->fastmap[h].id = id;
	head->fastmap[h].iif = iif;
	head->fastmap[h].filter = f;
}

E
Eric Dumazet 已提交
93
static inline int route4_hash_to(u32 id)
L
Linus Torvalds 已提交
94
{
E
Eric Dumazet 已提交
95
	return id & 0xFF;
L
Linus Torvalds 已提交
96 97
}

E
Eric Dumazet 已提交
98
static inline int route4_hash_from(u32 id)
L
Linus Torvalds 已提交
99
{
E
Eric Dumazet 已提交
100
	return (id >> 16) & 0xF;
L
Linus Torvalds 已提交
101 102
}

E
Eric Dumazet 已提交
103
static inline int route4_hash_iif(int iif)
L
Linus Torvalds 已提交
104
{
E
Eric Dumazet 已提交
105
	return 16 + ((iif >> 16) & 0xF);
L
Linus Torvalds 已提交
106 107
}

E
Eric Dumazet 已提交
108
static inline int route4_hash_wild(void)
L
Linus Torvalds 已提交
109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127
{
	return 32;
}

#define ROUTE4_APPLY_RESULT()					\
{								\
	*res = f->res;						\
	if (tcf_exts_is_available(&f->exts)) {			\
		int r = tcf_exts_exec(skb, &f->exts, res);	\
		if (r < 0) {					\
			dont_cache = 1;				\
			continue;				\
		}						\
		return r;					\
	} else if (!dont_cache)					\
		route4_set_fastmap(head, id, iif, f);		\
	return 0;						\
}

128
static int route4_classify(struct sk_buff *skb, const struct tcf_proto *tp,
L
Linus Torvalds 已提交
129 130
			   struct tcf_result *res)
{
E
Eric Dumazet 已提交
131
	struct route4_head *head = (struct route4_head *)tp->root;
L
Linus Torvalds 已提交
132 133 134 135 136 137
	struct dst_entry *dst;
	struct route4_bucket *b;
	struct route4_filter *f;
	u32 id, h;
	int iif, dont_cache = 0;

E
Eric Dumazet 已提交
138 139
	dst = skb_dst(skb);
	if (!dst)
L
Linus Torvalds 已提交
140 141 142 143 144 145
		goto failure;

	id = dst->tclassid;
	if (head == NULL)
		goto old_method;

146
	iif = inet_iif(skb);
L
Linus Torvalds 已提交
147 148 149 150 151 152 153 154 155 156 157 158 159 160 161

	h = route4_fastmap_hash(id, iif);
	if (id == head->fastmap[h].id &&
	    iif == head->fastmap[h].iif &&
	    (f = head->fastmap[h].filter) != NULL) {
		if (f == ROUTE4_FAILURE)
			goto failure;

		*res = f->res;
		return 0;
	}

	h = route4_hash_to(id);

restart:
E
Eric Dumazet 已提交
162 163
	b = head->table[h];
	if (b) {
L
Linus Torvalds 已提交
164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198
		for (f = b->ht[route4_hash_from(id)]; f; f = f->next)
			if (f->id == id)
				ROUTE4_APPLY_RESULT();

		for (f = b->ht[route4_hash_iif(iif)]; f; f = f->next)
			if (f->iif == iif)
				ROUTE4_APPLY_RESULT();

		for (f = b->ht[route4_hash_wild()]; f; f = f->next)
			ROUTE4_APPLY_RESULT();

	}
	if (h < 256) {
		h = 256;
		id &= ~0xFFFF;
		goto restart;
	}

	if (!dont_cache)
		route4_set_fastmap(head, id, iif, ROUTE4_FAILURE);
failure:
	return -1;

old_method:
	if (id && (TC_H_MAJ(id) == 0 ||
		   !(TC_H_MAJ(id^tp->q->handle)))) {
		res->classid = id;
		res->class = 0;
		return 0;
	}
	return -1;
}

static inline u32 to_hash(u32 id)
{
E
Eric Dumazet 已提交
199 200 201
	u32 h = id & 0xFF;

	if (id & 0x8000)
L
Linus Torvalds 已提交
202 203 204 205 206 207 208 209 210 211 212 213
		h += 256;
	return h;
}

static inline u32 from_hash(u32 id)
{
	id &= 0xFFFF;
	if (id == 0xFFFF)
		return 32;
	if (!(id & 0x8000)) {
		if (id > 255)
			return 256;
E
Eric Dumazet 已提交
214
		return id & 0xF;
L
Linus Torvalds 已提交
215
	}
E
Eric Dumazet 已提交
216
	return 16 + (id & 0xF);
L
Linus Torvalds 已提交
217 218 219 220
}

static unsigned long route4_get(struct tcf_proto *tp, u32 handle)
{
E
Eric Dumazet 已提交
221
	struct route4_head *head = (struct route4_head *)tp->root;
L
Linus Torvalds 已提交
222 223
	struct route4_bucket *b;
	struct route4_filter *f;
E
Eric Dumazet 已提交
224
	unsigned int h1, h2;
L
Linus Torvalds 已提交
225 226 227 228 229 230 231 232

	if (!head)
		return 0;

	h1 = to_hash(handle);
	if (h1 > 256)
		return 0;

E
Eric Dumazet 已提交
233
	h2 = from_hash(handle >> 16);
L
Linus Torvalds 已提交
234 235 236
	if (h2 > 32)
		return 0;

E
Eric Dumazet 已提交
237 238
	b = head->table[h1];
	if (b) {
L
Linus Torvalds 已提交
239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254
		for (f = b->ht[h2]; f; f = f->next)
			if (f->handle == handle)
				return (unsigned long)f;
	}
	return 0;
}

static void route4_put(struct tcf_proto *tp, unsigned long f)
{
}

static int route4_init(struct tcf_proto *tp)
{
	return 0;
}

E
Eric Dumazet 已提交
255
static void
L
Linus Torvalds 已提交
256 257 258 259 260 261 262 263 264
route4_delete_filter(struct tcf_proto *tp, struct route4_filter *f)
{
	tcf_unbind_filter(tp, &f->res);
	tcf_exts_destroy(tp, &f->exts);
	kfree(f);
}

static void route4_destroy(struct tcf_proto *tp)
{
265
	struct route4_head *head = tp->root;
L
Linus Torvalds 已提交
266 267 268 269 270
	int h1, h2;

	if (head == NULL)
		return;

E
Eric Dumazet 已提交
271
	for (h1 = 0; h1 <= 256; h1++) {
L
Linus Torvalds 已提交
272 273
		struct route4_bucket *b;

E
Eric Dumazet 已提交
274 275 276
		b = head->table[h1];
		if (b) {
			for (h2 = 0; h2 <= 32; h2++) {
L
Linus Torvalds 已提交
277 278 279 280 281 282 283 284 285 286 287 288 289 290 291
				struct route4_filter *f;

				while ((f = b->ht[h2]) != NULL) {
					b->ht[h2] = f->next;
					route4_delete_filter(tp, f);
				}
			}
			kfree(b);
		}
	}
	kfree(head);
}

static int route4_delete(struct tcf_proto *tp, unsigned long arg)
{
E
Eric Dumazet 已提交
292 293 294
	struct route4_head *head = (struct route4_head *)tp->root;
	struct route4_filter **fp, *f = (struct route4_filter *)arg;
	unsigned int h = 0;
L
Linus Torvalds 已提交
295 296 297 298 299 300 301 302 303
	struct route4_bucket *b;
	int i;

	if (!head || !f)
		return -EINVAL;

	h = f->handle;
	b = f->bkt;

E
Eric Dumazet 已提交
304
	for (fp = &b->ht[from_hash(h >> 16)]; *fp; fp = &(*fp)->next) {
L
Linus Torvalds 已提交
305 306 307 308 309
		if (*fp == f) {
			tcf_tree_lock(tp);
			*fp = f->next;
			tcf_tree_unlock(tp);

310
			route4_reset_fastmap(tp->q, head, f->id);
L
Linus Torvalds 已提交
311 312 313 314
			route4_delete_filter(tp, f);

			/* Strip tree */

E
Eric Dumazet 已提交
315
			for (i = 0; i <= 32; i++)
L
Linus Torvalds 已提交
316 317 318 319 320 321 322 323 324 325 326 327 328 329 330
				if (b->ht[i])
					return 0;

			/* OK, session has no flows */
			tcf_tree_lock(tp);
			head->table[to_hash(h)] = NULL;
			tcf_tree_unlock(tp);

			kfree(b);
			return 0;
		}
	}
	return 0;
}

331 332 333 334 335 336 337
static const struct nla_policy route4_policy[TCA_ROUTE4_MAX + 1] = {
	[TCA_ROUTE4_CLASSID]	= { .type = NLA_U32 },
	[TCA_ROUTE4_TO]		= { .type = NLA_U32 },
	[TCA_ROUTE4_FROM]	= { .type = NLA_U32 },
	[TCA_ROUTE4_IIF]	= { .type = NLA_U32 },
};

L
Linus Torvalds 已提交
338 339
static int route4_set_parms(struct tcf_proto *tp, unsigned long base,
	struct route4_filter *f, u32 handle, struct route4_head *head,
340
	struct nlattr **tb, struct nlattr *est, int new)
L
Linus Torvalds 已提交
341 342 343 344 345 346 347 348 349 350 351 352 353
{
	int err;
	u32 id = 0, to = 0, nhandle = 0x8000;
	struct route4_filter *fp;
	unsigned int h1;
	struct route4_bucket *b;
	struct tcf_exts e;

	err = tcf_exts_validate(tp, tb, est, &e, &route_ext_map);
	if (err < 0)
		return err;

	err = -EINVAL;
354
	if (tb[TCA_ROUTE4_TO]) {
L
Linus Torvalds 已提交
355 356
		if (new && handle & 0x8000)
			goto errout;
357
		to = nla_get_u32(tb[TCA_ROUTE4_TO]);
L
Linus Torvalds 已提交
358 359 360 361 362
		if (to > 0xFF)
			goto errout;
		nhandle = to;
	}

363 364
	if (tb[TCA_ROUTE4_FROM]) {
		if (tb[TCA_ROUTE4_IIF])
L
Linus Torvalds 已提交
365
			goto errout;
366
		id = nla_get_u32(tb[TCA_ROUTE4_FROM]);
L
Linus Torvalds 已提交
367 368 369
		if (id > 0xFF)
			goto errout;
		nhandle |= id << 16;
370
	} else if (tb[TCA_ROUTE4_IIF]) {
371
		id = nla_get_u32(tb[TCA_ROUTE4_IIF]);
L
Linus Torvalds 已提交
372 373 374 375 376 377 378 379 380 381 382 383 384
		if (id > 0x7FFF)
			goto errout;
		nhandle |= (id | 0x8000) << 16;
	} else
		nhandle |= 0xFFFF << 16;

	if (handle && new) {
		nhandle |= handle & 0x7F00;
		if (nhandle != handle)
			goto errout;
	}

	h1 = to_hash(nhandle);
E
Eric Dumazet 已提交
385 386
	b = head->table[h1];
	if (!b) {
L
Linus Torvalds 已提交
387
		err = -ENOBUFS;
388
		b = kzalloc(sizeof(struct route4_bucket), GFP_KERNEL);
L
Linus Torvalds 已提交
389 390 391 392 393 394 395 396
		if (b == NULL)
			goto errout;

		tcf_tree_lock(tp);
		head->table[h1] = b;
		tcf_tree_unlock(tp);
	} else {
		unsigned int h2 = from_hash(nhandle >> 16);
E
Eric Dumazet 已提交
397

L
Linus Torvalds 已提交
398 399 400 401 402 403 404
		err = -EEXIST;
		for (fp = b->ht[h2]; fp; fp = fp->next)
			if (fp->handle == f->handle)
				goto errout;
	}

	tcf_tree_lock(tp);
405
	if (tb[TCA_ROUTE4_TO])
L
Linus Torvalds 已提交
406 407
		f->id = to;

408
	if (tb[TCA_ROUTE4_FROM])
L
Linus Torvalds 已提交
409
		f->id = to | id<<16;
410
	else if (tb[TCA_ROUTE4_IIF])
L
Linus Torvalds 已提交
411 412 413 414 415 416
		f->iif = id;

	f->handle = nhandle;
	f->bkt = b;
	tcf_tree_unlock(tp);

417
	if (tb[TCA_ROUTE4_CLASSID]) {
418
		f->res.classid = nla_get_u32(tb[TCA_ROUTE4_CLASSID]);
L
Linus Torvalds 已提交
419 420 421 422 423 424 425 426 427 428 429
		tcf_bind_filter(tp, &f->res, base);
	}

	tcf_exts_change(tp, &f->exts, &e);

	return 0;
errout:
	tcf_exts_destroy(tp, &e);
	return err;
}

430 431
static int route4_change(struct sk_buff *in_skb,
		       struct tcf_proto *tp, unsigned long base,
L
Linus Torvalds 已提交
432
		       u32 handle,
433
		       struct nlattr **tca,
L
Linus Torvalds 已提交
434 435 436 437 438
		       unsigned long *arg)
{
	struct route4_head *head = tp->root;
	struct route4_filter *f, *f1, **fp;
	struct route4_bucket *b;
439 440
	struct nlattr *opt = tca[TCA_OPTIONS];
	struct nlattr *tb[TCA_ROUTE4_MAX + 1];
L
Linus Torvalds 已提交
441 442 443 444 445 446 447
	unsigned int h, th;
	u32 old_handle = 0;
	int err;

	if (opt == NULL)
		return handle ? -EINVAL : 0;

448
	err = nla_parse_nested(tb, TCA_ROUTE4_MAX, opt, route4_policy);
449 450
	if (err < 0)
		return err;
L
Linus Torvalds 已提交
451

E
Eric Dumazet 已提交
452 453
	f = (struct route4_filter *)*arg;
	if (f) {
L
Linus Torvalds 已提交
454 455 456 457 458 459 460
		if (f->handle != handle && handle)
			return -EINVAL;

		if (f->bkt)
			old_handle = f->handle;

		err = route4_set_parms(tp, base, f, handle, head, tb,
461
			tca[TCA_RATE], 0);
L
Linus Torvalds 已提交
462 463 464 465 466 467 468 469
		if (err < 0)
			return err;

		goto reinsert;
	}

	err = -ENOBUFS;
	if (head == NULL) {
470
		head = kzalloc(sizeof(struct route4_head), GFP_KERNEL);
L
Linus Torvalds 已提交
471 472 473 474 475 476 477 478
		if (head == NULL)
			goto errout;

		tcf_tree_lock(tp);
		tp->root = head;
		tcf_tree_unlock(tp);
	}

479
	f = kzalloc(sizeof(struct route4_filter), GFP_KERNEL);
L
Linus Torvalds 已提交
480 481 482 483
	if (f == NULL)
		goto errout;

	err = route4_set_parms(tp, base, f, handle, head, tb,
484
		tca[TCA_RATE], 1);
L
Linus Torvalds 已提交
485 486 487 488 489
	if (err < 0)
		goto errout;

reinsert:
	h = from_hash(f->handle >> 16);
E
Eric Dumazet 已提交
490
	for (fp = &f->bkt->ht[h]; (f1 = *fp) != NULL; fp = &f1->next)
L
Linus Torvalds 已提交
491 492 493 494 495 496 497 498 499 500
		if (f->handle < f1->handle)
			break;

	f->next = f1;
	tcf_tree_lock(tp);
	*fp = f;

	if (old_handle && f->handle != old_handle) {
		th = to_hash(old_handle);
		h = from_hash(old_handle >> 16);
E
Eric Dumazet 已提交
501 502
		b = head->table[th];
		if (b) {
L
Linus Torvalds 已提交
503 504 505 506 507 508 509 510 511 512
			for (fp = &b->ht[h]; *fp; fp = &(*fp)->next) {
				if (*fp == f) {
					*fp = f->next;
					break;
				}
			}
		}
	}
	tcf_tree_unlock(tp);

513
	route4_reset_fastmap(tp->q, head, f->id);
L
Linus Torvalds 已提交
514 515 516 517
	*arg = (unsigned long)f;
	return 0;

errout:
J
Jesper Juhl 已提交
518
	kfree(f);
L
Linus Torvalds 已提交
519 520 521 522 523 524
	return err;
}

static void route4_walk(struct tcf_proto *tp, struct tcf_walker *arg)
{
	struct route4_head *head = tp->root;
E
Eric Dumazet 已提交
525
	unsigned int h, h1;
L
Linus Torvalds 已提交
526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558

	if (head == NULL)
		arg->stop = 1;

	if (arg->stop)
		return;

	for (h = 0; h <= 256; h++) {
		struct route4_bucket *b = head->table[h];

		if (b) {
			for (h1 = 0; h1 <= 32; h1++) {
				struct route4_filter *f;

				for (f = b->ht[h1]; f; f = f->next) {
					if (arg->count < arg->skip) {
						arg->count++;
						continue;
					}
					if (arg->fn(tp, (unsigned long)f, arg) < 0) {
						arg->stop = 1;
						return;
					}
					arg->count++;
				}
			}
		}
	}
}

static int route4_dump(struct tcf_proto *tp, unsigned long fh,
		       struct sk_buff *skb, struct tcmsg *t)
{
E
Eric Dumazet 已提交
559
	struct route4_filter *f = (struct route4_filter *)fh;
560
	unsigned char *b = skb_tail_pointer(skb);
561
	struct nlattr *nest;
L
Linus Torvalds 已提交
562 563 564 565 566 567 568
	u32 id;

	if (f == NULL)
		return skb->len;

	t->tcm_handle = f->handle;

569 570 571
	nest = nla_nest_start(skb, TCA_OPTIONS);
	if (nest == NULL)
		goto nla_put_failure;
L
Linus Torvalds 已提交
572

E
Eric Dumazet 已提交
573 574
	if (!(f->handle & 0x8000)) {
		id = f->id & 0xFF;
575 576
		if (nla_put_u32(skb, TCA_ROUTE4_TO, id))
			goto nla_put_failure;
L
Linus Torvalds 已提交
577
	}
E
Eric Dumazet 已提交
578
	if (f->handle & 0x80000000) {
579 580 581
		if ((f->handle >> 16) != 0xFFFF &&
		    nla_put_u32(skb, TCA_ROUTE4_IIF, f->iif))
			goto nla_put_failure;
L
Linus Torvalds 已提交
582
	} else {
E
Eric Dumazet 已提交
583
		id = f->id >> 16;
584 585
		if (nla_put_u32(skb, TCA_ROUTE4_FROM, id))
			goto nla_put_failure;
L
Linus Torvalds 已提交
586
	}
587 588 589
	if (f->res.classid &&
	    nla_put_u32(skb, TCA_ROUTE4_CLASSID, f->res.classid))
		goto nla_put_failure;
L
Linus Torvalds 已提交
590 591

	if (tcf_exts_dump(skb, &f->exts, &route_ext_map) < 0)
592
		goto nla_put_failure;
L
Linus Torvalds 已提交
593

594
	nla_nest_end(skb, nest);
L
Linus Torvalds 已提交
595 596

	if (tcf_exts_dump_stats(skb, &f->exts, &route_ext_map) < 0)
597
		goto nla_put_failure;
L
Linus Torvalds 已提交
598 599 600

	return skb->len;

601
nla_put_failure:
602
	nlmsg_trim(skb, b);
L
Linus Torvalds 已提交
603 604 605
	return -1;
}

606
static struct tcf_proto_ops cls_route4_ops __read_mostly = {
L
Linus Torvalds 已提交
607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632
	.kind		=	"route",
	.classify	=	route4_classify,
	.init		=	route4_init,
	.destroy	=	route4_destroy,
	.get		=	route4_get,
	.put		=	route4_put,
	.change		=	route4_change,
	.delete		=	route4_delete,
	.walk		=	route4_walk,
	.dump		=	route4_dump,
	.owner		=	THIS_MODULE,
};

static int __init init_route4(void)
{
	return register_tcf_proto_ops(&cls_route4_ops);
}

static void __exit exit_route4(void)
{
	unregister_tcf_proto_ops(&cls_route4_ops);
}

module_init(init_route4)
module_exit(exit_route4)
MODULE_LICENSE("GPL");