flow.h 7.0 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9
/*
 *
 *	Generic internet FLOW.
 *
 */

#ifndef _NET_FLOW_H
#define _NET_FLOW_H

10
#include <linux/socket.h>
L
Linus Torvalds 已提交
11
#include <linux/in6.h>
A
Arun Sharma 已提交
12
#include <linux/atomic.h>
13
#include <net/flow_dissector.h>
14
#include <linux/uidgid.h>
L
Linus Torvalds 已提交
15

16 17 18 19 20 21 22 23
/*
 * ifindex generation is per-net namespace, and loopback is
 * always the 1st device in ns (see net_dev_init), thus any
 * loopback device should get ifindex 1
 */

#define LOOPBACK_IFINDEX	1

24 25 26 27
struct flowi_tunnel {
	__be64			tun_id;
};

28 29 30 31 32 33 34 35
struct flowi_common {
	int	flowic_oif;
	int	flowic_iif;
	__u32	flowic_mark;
	__u8	flowic_tos;
	__u8	flowic_scope;
	__u8	flowic_proto;
	__u8	flowic_flags;
36
#define FLOWI_FLAG_ANYSRC		0x01
37
#define FLOWI_FLAG_KNOWN_NH		0x02
38
#define FLOWI_FLAG_SKIP_NH_OIF		0x04
39
	__u32	flowic_secid;
40
	struct flowi_tunnel flowic_tun_key;
41
	kuid_t  flowic_uid;
42 43
};

D
David S. Miller 已提交
44 45 46
union flowi_uli {
	struct {
		__be16	dport;
47
		__be16	sport;
D
David S. Miller 已提交
48 49 50 51 52 53 54 55 56
	} ports;

	struct {
		__u8	type;
		__u8	code;
	} icmpt;

	struct {
		__le16	dport;
57
		__le16	sport;
D
David S. Miller 已提交
58 59 60 61 62 63 64 65 66 67
	} dnports;

	__be32		spi;
	__be32		gre_key;

	struct {
		__u8	type;
	} mht;
};

68 69
struct flowi4 {
	struct flowi_common	__fl_common;
70 71 72 73 74 75 76 77
#define flowi4_oif		__fl_common.flowic_oif
#define flowi4_iif		__fl_common.flowic_iif
#define flowi4_mark		__fl_common.flowic_mark
#define flowi4_tos		__fl_common.flowic_tos
#define flowi4_scope		__fl_common.flowic_scope
#define flowi4_proto		__fl_common.flowic_proto
#define flowi4_flags		__fl_common.flowic_flags
#define flowi4_secid		__fl_common.flowic_secid
78
#define flowi4_tun_key		__fl_common.flowic_tun_key
79
#define flowi4_uid		__fl_common.flowic_uid
80 81

	/* (saddr,daddr) must be grouped, same order as in IP header */
82
	__be32			saddr;
83 84
	__be32			daddr;

85
	union flowi_uli		uli;
86 87 88 89 90 91 92
#define fl4_sport		uli.ports.sport
#define fl4_dport		uli.ports.dport
#define fl4_icmp_type		uli.icmpt.type
#define fl4_icmp_code		uli.icmpt.code
#define fl4_ipsec_spi		uli.spi
#define fl4_mh_type		uli.mht.type
#define fl4_gre_key		uli.gre_key
93
} __attribute__((__aligned__(BITS_PER_LONG/8)));
94

95 96 97 98
static inline void flowi4_init_output(struct flowi4 *fl4, int oif,
				      __u32 mark, __u8 tos, __u8 scope,
				      __u8 proto, __u8 flags,
				      __be32 daddr, __be32 saddr,
99 100
				      __be16 dport, __be16 sport,
				      kuid_t uid)
101 102
{
	fl4->flowi4_oif = oif;
103
	fl4->flowi4_iif = LOOPBACK_IFINDEX;
104 105 106 107 108 109
	fl4->flowi4_mark = mark;
	fl4->flowi4_tos = tos;
	fl4->flowi4_scope = scope;
	fl4->flowi4_proto = proto;
	fl4->flowi4_flags = flags;
	fl4->flowi4_secid = 0;
110
	fl4->flowi4_tun_key.tun_id = 0;
111
	fl4->flowi4_uid = uid;
112 113 114
	fl4->daddr = daddr;
	fl4->saddr = saddr;
	fl4->fl4_dport = dport;
115
	fl4->fl4_sport = sport;
116
}
117 118 119 120 121 122 123 124 125 126

/* Reset some input parameters after previous lookup */
static inline void flowi4_update_output(struct flowi4 *fl4, int oif, __u8 tos,
					__be32 daddr, __be32 saddr)
{
	fl4->flowi4_oif = oif;
	fl4->flowi4_tos = tos;
	fl4->daddr = daddr;
	fl4->saddr = saddr;
}
127 128
				      

129
struct flowi6 {
130
	struct flowi_common	__fl_common;
131 132 133 134 135 136 137
#define flowi6_oif		__fl_common.flowic_oif
#define flowi6_iif		__fl_common.flowic_iif
#define flowi6_mark		__fl_common.flowic_mark
#define flowi6_scope		__fl_common.flowic_scope
#define flowi6_proto		__fl_common.flowic_proto
#define flowi6_flags		__fl_common.flowic_flags
#define flowi6_secid		__fl_common.flowic_secid
138
#define flowi6_tun_key		__fl_common.flowic_tun_key
139
#define flowi6_uid		__fl_common.flowic_uid
140 141
	struct in6_addr		daddr;
	struct in6_addr		saddr;
142
	/* Note: flowi6_tos is encoded in flowlabel, too. */
143 144
	__be32			flowlabel;
	union flowi_uli		uli;
145 146 147 148 149 150 151
#define fl6_sport		uli.ports.sport
#define fl6_dport		uli.ports.dport
#define fl6_icmp_type		uli.icmpt.type
#define fl6_icmp_code		uli.icmpt.code
#define fl6_ipsec_spi		uli.spi
#define fl6_mh_type		uli.mht.type
#define fl6_gre_key		uli.gre_key
152
} __attribute__((__aligned__(BITS_PER_LONG/8)));
L
Linus Torvalds 已提交
153

154 155
struct flowidn {
	struct flowi_common	__fl_common;
156 157 158 159 160 161
#define flowidn_oif		__fl_common.flowic_oif
#define flowidn_iif		__fl_common.flowic_iif
#define flowidn_mark		__fl_common.flowic_mark
#define flowidn_scope		__fl_common.flowic_scope
#define flowidn_proto		__fl_common.flowic_proto
#define flowidn_flags		__fl_common.flowic_flags
162 163 164
	__le16			daddr;
	__le16			saddr;
	union flowi_uli		uli;
165 166
#define fld_sport		uli.ports.sport
#define fld_dport		uli.ports.dport
167
} __attribute__((__aligned__(BITS_PER_LONG/8)));
168 169

struct flowi {
L
Linus Torvalds 已提交
170
	union {
171 172 173 174 175 176 177 178 179 180 181 182 183
		struct flowi_common	__fl_common;
		struct flowi4		ip4;
		struct flowi6		ip6;
		struct flowidn		dn;
	} u;
#define flowi_oif	u.__fl_common.flowic_oif
#define flowi_iif	u.__fl_common.flowic_iif
#define flowi_mark	u.__fl_common.flowic_mark
#define flowi_tos	u.__fl_common.flowic_tos
#define flowi_scope	u.__fl_common.flowic_scope
#define flowi_proto	u.__fl_common.flowic_proto
#define flowi_flags	u.__fl_common.flowic_flags
#define flowi_secid	u.__fl_common.flowic_secid
184
#define flowi_tun_key	u.__fl_common.flowic_tun_key
185
#define flowi_uid	u.__fl_common.flowic_uid
L
Linus Torvalds 已提交
186 187
} __attribute__((__aligned__(BITS_PER_LONG/8)));

188 189 190 191 192 193 194 195 196 197 198 199 200 201 202
static inline struct flowi *flowi4_to_flowi(struct flowi4 *fl4)
{
	return container_of(fl4, struct flowi, u.ip4);
}

static inline struct flowi *flowi6_to_flowi(struct flowi6 *fl6)
{
	return container_of(fl6, struct flowi, u.ip6);
}

static inline struct flowi *flowidn_to_flowi(struct flowidn *fldn)
{
	return container_of(fldn, struct flowi, u.dn);
}

203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220
typedef unsigned long flow_compare_t;

static inline size_t flow_key_size(u16 family)
{
	switch (family) {
	case AF_INET:
		BUILD_BUG_ON(sizeof(struct flowi4) % sizeof(flow_compare_t));
		return sizeof(struct flowi4) / sizeof(flow_compare_t);
	case AF_INET6:
		BUILD_BUG_ON(sizeof(struct flowi6) % sizeof(flow_compare_t));
		return sizeof(struct flowi6) / sizeof(flow_compare_t);
	case AF_DECnet:
		BUILD_BUG_ON(sizeof(struct flowidn) % sizeof(flow_compare_t));
		return sizeof(struct flowidn) / sizeof(flow_compare_t);
	}
	return 0;
}

L
Linus Torvalds 已提交
221 222 223 224
#define FLOW_DIR_IN	0
#define FLOW_DIR_OUT	1
#define FLOW_DIR_FWD	2

A
Alexey Dobriyan 已提交
225
struct net;
226
struct sock;
227 228 229 230 231 232 233 234 235 236 237 238 239
struct flow_cache_ops;

struct flow_cache_object {
	const struct flow_cache_ops *ops;
};

struct flow_cache_ops {
	struct flow_cache_object *(*get)(struct flow_cache_object *);
	int (*check)(struct flow_cache_object *);
	void (*delete)(struct flow_cache_object *);
};

typedef struct flow_cache_object *(*flow_resolve_t)(
240
		struct net *net, const struct flowi *key, u16 family,
241 242
		u8 dir, struct flow_cache_object *oldobj, void *ctx);

243 244 245 246
struct flow_cache_object *flow_cache_lookup(struct net *net,
					    const struct flowi *key, u16 family,
					    u8 dir, flow_resolve_t resolver,
					    void *ctx);
247
int flow_cache_init(struct net *net);
248
void flow_cache_fini(struct net *net);
249
void flow_cache_hp_init(void);
L
Linus Torvalds 已提交
250

251 252
void flow_cache_flush(struct net *net);
void flow_cache_flush_deferred(struct net *net);
L
Linus Torvalds 已提交
253 254
extern atomic_t flow_cache_genid;

255
__u32 __get_hash_from_flowi6(const struct flowi6 *fl6, struct flow_keys *keys);
256

257
static inline __u32 get_hash_from_flowi6(const struct flowi6 *fl6)
258 259 260 261 262 263
{
	struct flow_keys keys;

	return __get_hash_from_flowi6(fl6, &keys);
}

264
__u32 __get_hash_from_flowi4(const struct flowi4 *fl4, struct flow_keys *keys);
265

266
static inline __u32 get_hash_from_flowi4(const struct flowi4 *fl4)
267 268 269 270 271 272
{
	struct flow_keys keys;

	return __get_hash_from_flowi4(fl4, &keys);
}

L
Linus Torvalds 已提交
273
#endif