Commit | Line | Data |
---|---|---|
d2912cb1 | 1 | // SPDX-License-Identifier: GPL-2.0-only |
2d07dc79 JL |
2 | /* |
3 | * GENEVE: Generic Network Virtualization Encapsulation | |
4 | * | |
5 | * Copyright (c) 2015 Red Hat, Inc. | |
2d07dc79 JL |
6 | */ |
7 | ||
8 | #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt | |
9 | ||
cc69837f | 10 | #include <linux/ethtool.h> |
2d07dc79 JL |
11 | #include <linux/kernel.h> |
12 | #include <linux/module.h> | |
2d07dc79 JL |
13 | #include <linux/etherdevice.h> |
14 | #include <linux/hash.h> | |
3616d08b | 15 | #include <net/ipv6_stubs.h> |
e305ac6c | 16 | #include <net/dst_metadata.h> |
8e816df8 | 17 | #include <net/gro_cells.h> |
2d07dc79 JL |
18 | #include <net/rtnetlink.h> |
19 | #include <net/geneve.h> | |
4721031c | 20 | #include <net/gro.h> |
371bd106 | 21 | #include <net/protocol.h> |
2d07dc79 JL |
22 | |
23 | #define GENEVE_NETDEV_VER "0.6" | |
24 | ||
2d07dc79 JL |
25 | #define GENEVE_N_VID (1u << 24) |
26 | #define GENEVE_VID_MASK (GENEVE_N_VID - 1) | |
27 | ||
28 | #define VNI_HASH_BITS 10 | |
29 | #define VNI_HASH_SIZE (1<<VNI_HASH_BITS) | |
30 | ||
31 | static bool log_ecn_error = true; | |
32 | module_param(log_ecn_error, bool, 0644); | |
33 | MODULE_PARM_DESC(log_ecn_error, "Log packets received with corrupted ECN"); | |
34 | ||
371bd106 PS |
35 | #define GENEVE_VER 0 |
36 | #define GENEVE_BASE_HLEN (sizeof(struct udphdr) + sizeof(struct genevehdr)) | |
5edbea69 AK |
37 | #define GENEVE_IPV4_HLEN (ETH_HLEN + sizeof(struct iphdr) + GENEVE_BASE_HLEN) |
38 | #define GENEVE_IPV6_HLEN (ETH_HLEN + sizeof(struct ipv6hdr) + GENEVE_BASE_HLEN) | |
371bd106 | 39 | |
2d07dc79 JL |
40 | /* per-network namespace private data for this module */ |
41 | struct geneve_net { | |
371bd106 | 42 | struct list_head geneve_list; |
371bd106 | 43 | struct list_head sock_list; |
2d07dc79 JL |
44 | }; |
45 | ||
c7d03a00 | 46 | static unsigned int geneve_net_id; |
371bd106 | 47 | |
4b4c21fa JB |
48 | struct geneve_dev_node { |
49 | struct hlist_node hlist; | |
50 | struct geneve_dev *geneve; | |
51 | }; | |
52 | ||
9e06e859 SD |
53 | struct geneve_config { |
54 | struct ip_tunnel_info info; | |
55 | bool collect_md; | |
56 | bool use_udp6_rx_checksums; | |
57 | bool ttl_inherit; | |
58 | enum ifla_geneve_df df; | |
435fe1c0 | 59 | bool inner_proto_inherit; |
9e06e859 SD |
60 | }; |
61 | ||
2d07dc79 JL |
62 | /* Pseudo network device */ |
63 | struct geneve_dev { | |
4b4c21fa JB |
64 | struct geneve_dev_node hlist4; /* vni hash table for IPv4 socket */ |
65 | #if IS_ENABLED(CONFIG_IPV6) | |
66 | struct geneve_dev_node hlist6; /* vni hash table for IPv6 socket */ | |
67 | #endif | |
2d07dc79 JL |
68 | struct net *net; /* netns for packet i/o */ |
69 | struct net_device *dev; /* netdev for geneve tunnel */ | |
fceb9c3e | 70 | struct geneve_sock __rcu *sock4; /* IPv4 socket used for geneve tunnel */ |
8ed66f0e | 71 | #if IS_ENABLED(CONFIG_IPV6) |
fceb9c3e | 72 | struct geneve_sock __rcu *sock6; /* IPv6 socket used for geneve tunnel */ |
8ed66f0e | 73 | #endif |
2d07dc79 | 74 | struct list_head next; /* geneve's per namespace list */ |
8e816df8 | 75 | struct gro_cells gro_cells; |
9e06e859 | 76 | struct geneve_config cfg; |
2d07dc79 JL |
77 | }; |
78 | ||
371bd106 PS |
79 | struct geneve_sock { |
80 | bool collect_md; | |
371bd106 PS |
81 | struct list_head list; |
82 | struct socket *sock; | |
83 | struct rcu_head rcu; | |
84 | int refcnt; | |
66d47003 | 85 | struct hlist_head vni_list[VNI_HASH_SIZE]; |
371bd106 | 86 | }; |
2d07dc79 JL |
87 | |
88 | static inline __u32 geneve_net_vni_hash(u8 vni[3]) | |
89 | { | |
90 | __u32 vnid; | |
91 | ||
92 | vnid = (vni[0] << 16) | (vni[1] << 8) | vni[2]; | |
93 | return hash_32(vnid, VNI_HASH_BITS); | |
94 | } | |
95 | ||
e305ac6c PS |
96 | static __be64 vni_to_tunnel_id(const __u8 *vni) |
97 | { | |
98 | #ifdef __BIG_ENDIAN | |
99 | return (vni[0] << 16) | (vni[1] << 8) | vni[2]; | |
100 | #else | |
101 | return (__force __be64)(((__force u64)vni[0] << 40) | | |
102 | ((__force u64)vni[1] << 48) | | |
103 | ((__force u64)vni[2] << 56)); | |
104 | #endif | |
105 | } | |
106 | ||
9b4437a5 | 107 | /* Convert 64 bit tunnel ID to 24 bit VNI. */ |
108 | static void tunnel_id_to_vni(__be64 tun_id, __u8 *vni) | |
109 | { | |
110 | #ifdef __BIG_ENDIAN | |
111 | vni[0] = (__force __u8)(tun_id >> 16); | |
112 | vni[1] = (__force __u8)(tun_id >> 8); | |
113 | vni[2] = (__force __u8)tun_id; | |
114 | #else | |
115 | vni[0] = (__force __u8)((__force u64)tun_id >> 40); | |
116 | vni[1] = (__force __u8)((__force u64)tun_id >> 48); | |
117 | vni[2] = (__force __u8)((__force u64)tun_id >> 56); | |
118 | #endif | |
119 | } | |
120 | ||
2e0b26e1 | 121 | static bool eq_tun_id_and_vni(u8 *tun_id, u8 *vni) |
122 | { | |
2e0b26e1 | 123 | return !memcmp(vni, &tun_id[5], 3); |
2e0b26e1 | 124 | } |
125 | ||
1e9f12ec JB |
126 | static sa_family_t geneve_get_sk_family(struct geneve_sock *gs) |
127 | { | |
128 | return gs->sock->sk->sk_family; | |
129 | } | |
130 | ||
66d47003 | 131 | static struct geneve_dev *geneve_lookup(struct geneve_sock *gs, |
371bd106 | 132 | __be32 addr, u8 vni[]) |
2d07dc79 | 133 | { |
2d07dc79 | 134 | struct hlist_head *vni_list_head; |
4b4c21fa | 135 | struct geneve_dev_node *node; |
2d07dc79 JL |
136 | __u32 hash; |
137 | ||
2d07dc79 | 138 | /* Find the device for this VNI */ |
371bd106 | 139 | hash = geneve_net_vni_hash(vni); |
66d47003 | 140 | vni_list_head = &gs->vni_list[hash]; |
4b4c21fa | 141 | hlist_for_each_entry_rcu(node, vni_list_head, hlist) { |
9e06e859 SD |
142 | if (eq_tun_id_and_vni((u8 *)&node->geneve->cfg.info.key.tun_id, vni) && |
143 | addr == node->geneve->cfg.info.key.u.ipv4.dst) | |
4b4c21fa | 144 | return node->geneve; |
8ed66f0e JL |
145 | } |
146 | return NULL; | |
147 | } | |
148 | ||
149 | #if IS_ENABLED(CONFIG_IPV6) | |
150 | static struct geneve_dev *geneve6_lookup(struct geneve_sock *gs, | |
151 | struct in6_addr addr6, u8 vni[]) | |
152 | { | |
153 | struct hlist_head *vni_list_head; | |
4b4c21fa | 154 | struct geneve_dev_node *node; |
8ed66f0e JL |
155 | __u32 hash; |
156 | ||
157 | /* Find the device for this VNI */ | |
158 | hash = geneve_net_vni_hash(vni); | |
159 | vni_list_head = &gs->vni_list[hash]; | |
4b4c21fa | 160 | hlist_for_each_entry_rcu(node, vni_list_head, hlist) { |
9e06e859 SD |
161 | if (eq_tun_id_and_vni((u8 *)&node->geneve->cfg.info.key.tun_id, vni) && |
162 | ipv6_addr_equal(&addr6, &node->geneve->cfg.info.key.u.ipv6.dst)) | |
4b4c21fa | 163 | return node->geneve; |
2d07dc79 | 164 | } |
e305ac6c PS |
165 | return NULL; |
166 | } | |
8ed66f0e | 167 | #endif |
e305ac6c | 168 | |
371bd106 PS |
169 | static inline struct genevehdr *geneve_hdr(const struct sk_buff *skb) |
170 | { | |
171 | return (struct genevehdr *)(udp_hdr(skb) + 1); | |
172 | } | |
173 | ||
9fc47545 JB |
174 | static struct geneve_dev *geneve_lookup_skb(struct geneve_sock *gs, |
175 | struct sk_buff *skb) | |
e305ac6c | 176 | { |
8ed66f0e | 177 | static u8 zero_vni[3]; |
9b4437a5 | 178 | u8 *vni; |
e305ac6c | 179 | |
1e9f12ec | 180 | if (geneve_get_sk_family(gs) == AF_INET) { |
9fc47545 | 181 | struct iphdr *iph; |
9b4437a5 | 182 | __be32 addr; |
9fc47545 | 183 | |
8ed66f0e | 184 | iph = ip_hdr(skb); /* outer IP header... */ |
371bd106 | 185 | |
8ed66f0e JL |
186 | if (gs->collect_md) { |
187 | vni = zero_vni; | |
188 | addr = 0; | |
189 | } else { | |
9fc47545 | 190 | vni = geneve_hdr(skb)->vni; |
8ed66f0e JL |
191 | addr = iph->saddr; |
192 | } | |
193 | ||
9fc47545 | 194 | return geneve_lookup(gs, addr, vni); |
8ed66f0e | 195 | #if IS_ENABLED(CONFIG_IPV6) |
1e9f12ec | 196 | } else if (geneve_get_sk_family(gs) == AF_INET6) { |
9b4437a5 | 197 | static struct in6_addr zero_addr6; |
9fc47545 JB |
198 | struct ipv6hdr *ip6h; |
199 | struct in6_addr addr6; | |
200 | ||
8ed66f0e | 201 | ip6h = ipv6_hdr(skb); /* outer IPv6 header... */ |
371bd106 | 202 | |
8ed66f0e JL |
203 | if (gs->collect_md) { |
204 | vni = zero_vni; | |
205 | addr6 = zero_addr6; | |
206 | } else { | |
9fc47545 | 207 | vni = geneve_hdr(skb)->vni; |
8ed66f0e JL |
208 | addr6 = ip6h->saddr; |
209 | } | |
210 | ||
9fc47545 | 211 | return geneve6_lookup(gs, addr6, vni); |
8ed66f0e JL |
212 | #endif |
213 | } | |
9fc47545 JB |
214 | return NULL; |
215 | } | |
216 | ||
217 | /* geneve receive/decap routine */ | |
218 | static void geneve_rx(struct geneve_dev *geneve, struct geneve_sock *gs, | |
219 | struct sk_buff *skb) | |
220 | { | |
221 | struct genevehdr *gnvh = geneve_hdr(skb); | |
222 | struct metadata_dst *tun_dst = NULL; | |
fe741e23 | 223 | unsigned int len; |
9fc47545 JB |
224 | int err = 0; |
225 | void *oiph; | |
2d07dc79 | 226 | |
371bd106 | 227 | if (ip_tunnel_collect_metadata() || gs->collect_md) { |
e305ac6c | 228 | __be16 flags; |
e305ac6c | 229 | |
9c2e14b4 | 230 | flags = TUNNEL_KEY | (gnvh->oam ? TUNNEL_OAM : 0) | |
e305ac6c PS |
231 | (gnvh->critical ? TUNNEL_CRIT_OPT : 0); |
232 | ||
1e9f12ec | 233 | tun_dst = udp_tun_rx_dst(skb, geneve_get_sk_family(gs), flags, |
e305ac6c PS |
234 | vni_to_tunnel_id(gnvh->vni), |
235 | gnvh->opt_len * 4); | |
fe741e23 GM |
236 | if (!tun_dst) { |
237 | geneve->dev->stats.rx_dropped++; | |
e305ac6c | 238 | goto drop; |
fe741e23 | 239 | } |
e305ac6c | 240 | /* Update tunnel dst according to Geneve options. */ |
4c222798 | 241 | ip_tunnel_info_opts_set(&tun_dst->u.tun_info, |
256c87c1 PJV |
242 | gnvh->options, gnvh->opt_len * 4, |
243 | TUNNEL_GENEVE_OPT); | |
e305ac6c PS |
244 | } else { |
245 | /* Drop packets w/ critical options, | |
246 | * since we don't support any... | |
247 | */ | |
fe741e23 GM |
248 | if (gnvh->critical) { |
249 | geneve->dev->stats.rx_frame_errors++; | |
250 | geneve->dev->stats.rx_errors++; | |
e305ac6c | 251 | goto drop; |
fe741e23 | 252 | } |
e305ac6c | 253 | } |
2d07dc79 | 254 | |
e305ac6c PS |
255 | if (tun_dst) |
256 | skb_dst_set(skb, &tun_dst->dst); | |
257 | ||
435fe1c0 EB |
258 | if (gnvh->proto_type == htons(ETH_P_TEB)) { |
259 | skb_reset_mac_header(skb); | |
260 | skb->protocol = eth_type_trans(skb, geneve->dev); | |
261 | skb_postpull_rcsum(skb, eth_hdr(skb), ETH_HLEN); | |
262 | ||
263 | /* Ignore packet loops (and multicast echo) */ | |
264 | if (ether_addr_equal(eth_hdr(skb)->h_source, | |
265 | geneve->dev->dev_addr)) { | |
266 | geneve->dev->stats.rx_errors++; | |
267 | goto drop; | |
268 | } | |
269 | } else { | |
270 | skb_reset_mac_header(skb); | |
271 | skb->dev = geneve->dev; | |
272 | skb->pkt_type = PACKET_HOST; | |
fe741e23 | 273 | } |
c02bd115 | 274 | |
9fc47545 | 275 | oiph = skb_network_header(skb); |
2d07dc79 JL |
276 | skb_reset_network_header(skb); |
277 | ||
9fc47545 JB |
278 | if (geneve_get_sk_family(gs) == AF_INET) |
279 | err = IP_ECN_decapsulate(oiph, skb); | |
8ed66f0e | 280 | #if IS_ENABLED(CONFIG_IPV6) |
9fc47545 JB |
281 | else |
282 | err = IP6_ECN_decapsulate(oiph, skb); | |
8ed66f0e | 283 | #endif |
2d07dc79 JL |
284 | |
285 | if (unlikely(err)) { | |
8ed66f0e | 286 | if (log_ecn_error) { |
9fc47545 | 287 | if (geneve_get_sk_family(gs) == AF_INET) |
8ed66f0e JL |
288 | net_info_ratelimited("non-ECT from %pI4 " |
289 | "with TOS=%#x\n", | |
9fc47545 JB |
290 | &((struct iphdr *)oiph)->saddr, |
291 | ((struct iphdr *)oiph)->tos); | |
8ed66f0e | 292 | #if IS_ENABLED(CONFIG_IPV6) |
9fc47545 | 293 | else |
8ed66f0e | 294 | net_info_ratelimited("non-ECT from %pI6\n", |
9fc47545 | 295 | &((struct ipv6hdr *)oiph)->saddr); |
8ed66f0e JL |
296 | #endif |
297 | } | |
2d07dc79 JL |
298 | if (err > 1) { |
299 | ++geneve->dev->stats.rx_frame_errors; | |
300 | ++geneve->dev->stats.rx_errors; | |
301 | goto drop; | |
302 | } | |
303 | } | |
304 | ||
fe741e23 GM |
305 | len = skb->len; |
306 | err = gro_cells_receive(&geneve->gro_cells, skb); | |
1e84527b FF |
307 | if (likely(err == NET_RX_SUCCESS)) |
308 | dev_sw_netstats_rx_add(geneve->dev, len); | |
309 | ||
2d07dc79 JL |
310 | return; |
311 | drop: | |
312 | /* Consume bad packet */ | |
313 | kfree_skb(skb); | |
314 | } | |
315 | ||
316 | /* Setup stats when device is created */ | |
317 | static int geneve_init(struct net_device *dev) | |
318 | { | |
8e816df8 JG |
319 | struct geneve_dev *geneve = netdev_priv(dev); |
320 | int err; | |
321 | ||
2d07dc79 JL |
322 | dev->tstats = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats); |
323 | if (!dev->tstats) | |
324 | return -ENOMEM; | |
8e816df8 JG |
325 | |
326 | err = gro_cells_init(&geneve->gro_cells, dev); | |
327 | if (err) { | |
328 | free_percpu(dev->tstats); | |
329 | return err; | |
330 | } | |
331 | ||
9e06e859 | 332 | err = dst_cache_init(&geneve->cfg.info.dst_cache, GFP_KERNEL); |
468dfffc PA |
333 | if (err) { |
334 | free_percpu(dev->tstats); | |
335 | gro_cells_destroy(&geneve->gro_cells); | |
336 | return err; | |
337 | } | |
2d07dc79 JL |
338 | return 0; |
339 | } | |
340 | ||
341 | static void geneve_uninit(struct net_device *dev) | |
342 | { | |
8e816df8 JG |
343 | struct geneve_dev *geneve = netdev_priv(dev); |
344 | ||
9e06e859 | 345 | dst_cache_destroy(&geneve->cfg.info.dst_cache); |
8e816df8 | 346 | gro_cells_destroy(&geneve->gro_cells); |
2d07dc79 JL |
347 | free_percpu(dev->tstats); |
348 | } | |
349 | ||
371bd106 PS |
350 | /* Callback from net/ipv4/udp.c to receive packets */ |
351 | static int geneve_udp_encap_recv(struct sock *sk, struct sk_buff *skb) | |
352 | { | |
353 | struct genevehdr *geneveh; | |
9fc47545 | 354 | struct geneve_dev *geneve; |
371bd106 | 355 | struct geneve_sock *gs; |
435fe1c0 | 356 | __be16 inner_proto; |
371bd106 PS |
357 | int opts_len; |
358 | ||
fe741e23 | 359 | /* Need UDP and Geneve header to be present */ |
371bd106 | 360 | if (unlikely(!pskb_may_pull(skb, GENEVE_BASE_HLEN))) |
e5aed006 | 361 | goto drop; |
371bd106 PS |
362 | |
363 | /* Return packets with reserved bits set */ | |
364 | geneveh = geneve_hdr(skb); | |
365 | if (unlikely(geneveh->ver != GENEVE_VER)) | |
e5aed006 | 366 | goto drop; |
371bd106 | 367 | |
435fe1c0 EB |
368 | inner_proto = geneveh->proto_type; |
369 | ||
370 | if (unlikely((inner_proto != htons(ETH_P_TEB) && | |
371 | inner_proto != htons(ETH_P_IP) && | |
372 | inner_proto != htons(ETH_P_IPV6)))) | |
e5aed006 | 373 | goto drop; |
371bd106 | 374 | |
9fc47545 JB |
375 | gs = rcu_dereference_sk_user_data(sk); |
376 | if (!gs) | |
377 | goto drop; | |
378 | ||
379 | geneve = geneve_lookup_skb(gs, skb); | |
380 | if (!geneve) | |
381 | goto drop; | |
382 | ||
435fe1c0 EB |
383 | if (unlikely((!geneve->cfg.inner_proto_inherit && |
384 | inner_proto != htons(ETH_P_TEB)))) { | |
385 | geneve->dev->stats.rx_dropped++; | |
386 | goto drop; | |
387 | } | |
388 | ||
371bd106 | 389 | opts_len = geneveh->opt_len * 4; |
435fe1c0 | 390 | if (iptunnel_pull_header(skb, GENEVE_BASE_HLEN + opts_len, inner_proto, |
fe741e23 GM |
391 | !net_eq(geneve->net, dev_net(geneve->dev)))) { |
392 | geneve->dev->stats.rx_dropped++; | |
371bd106 | 393 | goto drop; |
fe741e23 | 394 | } |
371bd106 | 395 | |
9fc47545 | 396 | geneve_rx(geneve, gs, skb); |
371bd106 PS |
397 | return 0; |
398 | ||
399 | drop: | |
400 | /* Consume bad packet */ | |
401 | kfree_skb(skb); | |
402 | return 0; | |
371bd106 PS |
403 | } |
404 | ||
a0796644 SB |
405 | /* Callback from net/ipv{4,6}/udp.c to check that we have a tunnel for errors */ |
406 | static int geneve_udp_encap_err_lookup(struct sock *sk, struct sk_buff *skb) | |
407 | { | |
408 | struct genevehdr *geneveh; | |
409 | struct geneve_sock *gs; | |
410 | u8 zero_vni[3] = { 0 }; | |
411 | u8 *vni = zero_vni; | |
412 | ||
eccc73a6 | 413 | if (!pskb_may_pull(skb, skb_transport_offset(skb) + GENEVE_BASE_HLEN)) |
a0796644 SB |
414 | return -EINVAL; |
415 | ||
416 | geneveh = geneve_hdr(skb); | |
417 | if (geneveh->ver != GENEVE_VER) | |
418 | return -EINVAL; | |
419 | ||
420 | if (geneveh->proto_type != htons(ETH_P_TEB)) | |
421 | return -EINVAL; | |
422 | ||
423 | gs = rcu_dereference_sk_user_data(sk); | |
424 | if (!gs) | |
425 | return -ENOENT; | |
426 | ||
427 | if (geneve_get_sk_family(gs) == AF_INET) { | |
428 | struct iphdr *iph = ip_hdr(skb); | |
429 | __be32 addr4 = 0; | |
430 | ||
431 | if (!gs->collect_md) { | |
432 | vni = geneve_hdr(skb)->vni; | |
433 | addr4 = iph->daddr; | |
434 | } | |
435 | ||
436 | return geneve_lookup(gs, addr4, vni) ? 0 : -ENOENT; | |
437 | } | |
438 | ||
439 | #if IS_ENABLED(CONFIG_IPV6) | |
440 | if (geneve_get_sk_family(gs) == AF_INET6) { | |
441 | struct ipv6hdr *ip6h = ipv6_hdr(skb); | |
8a962c4a NC |
442 | struct in6_addr addr6; |
443 | ||
444 | memset(&addr6, 0, sizeof(struct in6_addr)); | |
a0796644 SB |
445 | |
446 | if (!gs->collect_md) { | |
447 | vni = geneve_hdr(skb)->vni; | |
448 | addr6 = ip6h->daddr; | |
449 | } | |
450 | ||
451 | return geneve6_lookup(gs, addr6, vni) ? 0 : -ENOENT; | |
452 | } | |
453 | #endif | |
454 | ||
455 | return -EPFNOSUPPORT; | |
456 | } | |
457 | ||
371bd106 | 458 | static struct socket *geneve_create_sock(struct net *net, bool ipv6, |
9b4437a5 | 459 | __be16 port, bool ipv6_rx_csum) |
371bd106 PS |
460 | { |
461 | struct socket *sock; | |
462 | struct udp_port_cfg udp_conf; | |
463 | int err; | |
464 | ||
465 | memset(&udp_conf, 0, sizeof(udp_conf)); | |
466 | ||
467 | if (ipv6) { | |
468 | udp_conf.family = AF_INET6; | |
8ed66f0e | 469 | udp_conf.ipv6_v6only = 1; |
9b4437a5 | 470 | udp_conf.use_udp6_rx_checksums = ipv6_rx_csum; |
371bd106 PS |
471 | } else { |
472 | udp_conf.family = AF_INET; | |
473 | udp_conf.local_ip.s_addr = htonl(INADDR_ANY); | |
474 | } | |
475 | ||
476 | udp_conf.local_udp_port = port; | |
477 | ||
478 | /* Open UDP socket */ | |
479 | err = udp_sock_create(net, &udp_conf, &sock); | |
480 | if (err < 0) | |
481 | return ERR_PTR(err); | |
482 | ||
61630c4f | 483 | udp_allow_gso(sock->sk); |
371bd106 PS |
484 | return sock; |
485 | } | |
486 | ||
371bd106 PS |
487 | static int geneve_hlen(struct genevehdr *gh) |
488 | { | |
489 | return sizeof(*gh) + gh->opt_len * 4; | |
490 | } | |
491 | ||
d4546c25 DM |
492 | static struct sk_buff *geneve_gro_receive(struct sock *sk, |
493 | struct list_head *head, | |
494 | struct sk_buff *skb) | |
371bd106 | 495 | { |
d4546c25 DM |
496 | struct sk_buff *pp = NULL; |
497 | struct sk_buff *p; | |
371bd106 PS |
498 | struct genevehdr *gh, *gh2; |
499 | unsigned int hlen, gh_len, off_gnv; | |
500 | const struct packet_offload *ptype; | |
501 | __be16 type; | |
502 | int flush = 1; | |
503 | ||
504 | off_gnv = skb_gro_offset(skb); | |
505 | hlen = off_gnv + sizeof(*gh); | |
506 | gh = skb_gro_header_fast(skb, off_gnv); | |
507 | if (skb_gro_header_hard(skb, hlen)) { | |
508 | gh = skb_gro_header_slow(skb, hlen, off_gnv); | |
509 | if (unlikely(!gh)) | |
510 | goto out; | |
511 | } | |
512 | ||
513 | if (gh->ver != GENEVE_VER || gh->oam) | |
514 | goto out; | |
515 | gh_len = geneve_hlen(gh); | |
516 | ||
517 | hlen = off_gnv + gh_len; | |
518 | if (skb_gro_header_hard(skb, hlen)) { | |
519 | gh = skb_gro_header_slow(skb, hlen, off_gnv); | |
520 | if (unlikely(!gh)) | |
521 | goto out; | |
522 | } | |
523 | ||
d4546c25 | 524 | list_for_each_entry(p, head, list) { |
371bd106 PS |
525 | if (!NAPI_GRO_CB(p)->same_flow) |
526 | continue; | |
527 | ||
528 | gh2 = (struct genevehdr *)(p->data + off_gnv); | |
529 | if (gh->opt_len != gh2->opt_len || | |
530 | memcmp(gh, gh2, gh_len)) { | |
531 | NAPI_GRO_CB(p)->same_flow = 0; | |
532 | continue; | |
533 | } | |
534 | } | |
535 | ||
f623f83a PA |
536 | skb_gro_pull(skb, gh_len); |
537 | skb_gro_postpull_rcsum(skb, gh, gh_len); | |
371bd106 | 538 | type = gh->proto_type; |
f623f83a PA |
539 | if (likely(type == htons(ETH_P_TEB))) |
540 | return call_gro_receive(eth_gro_receive, head, skb); | |
371bd106 | 541 | |
371bd106 | 542 | ptype = gro_find_receive_by_type(type); |
c194cf93 | 543 | if (!ptype) |
fc1ca334 | 544 | goto out; |
371bd106 | 545 | |
fcd91dd4 | 546 | pp = call_gro_receive(ptype->callbacks.gro_receive, head, skb); |
c194cf93 | 547 | flush = 0; |
371bd106 | 548 | |
371bd106 | 549 | out: |
603d4cf8 | 550 | skb_gro_flush_final(skb, pp, flush); |
371bd106 PS |
551 | |
552 | return pp; | |
553 | } | |
554 | ||
4a0090a9 TH |
555 | static int geneve_gro_complete(struct sock *sk, struct sk_buff *skb, |
556 | int nhoff) | |
371bd106 PS |
557 | { |
558 | struct genevehdr *gh; | |
559 | struct packet_offload *ptype; | |
560 | __be16 type; | |
561 | int gh_len; | |
562 | int err = -ENOSYS; | |
563 | ||
371bd106 PS |
564 | gh = (struct genevehdr *)(skb->data + nhoff); |
565 | gh_len = geneve_hlen(gh); | |
566 | type = gh->proto_type; | |
567 | ||
f623f83a PA |
568 | /* since skb->encapsulation is set, eth_gro_complete() sets the inner mac header */ |
569 | if (likely(type == htons(ETH_P_TEB))) | |
570 | return eth_gro_complete(skb, nhoff + gh_len); | |
571 | ||
371bd106 PS |
572 | ptype = gro_find_complete_by_type(type); |
573 | if (ptype) | |
574 | err = ptype->callbacks.gro_complete(skb, nhoff + gh_len); | |
575 | ||
229740c6 JR |
576 | skb_set_inner_mac_header(skb, nhoff + gh_len); |
577 | ||
371bd106 PS |
578 | return err; |
579 | } | |
580 | ||
581 | /* Create new listen socket if needed */ | |
582 | static struct geneve_sock *geneve_socket_create(struct net *net, __be16 port, | |
9b4437a5 | 583 | bool ipv6, bool ipv6_rx_csum) |
371bd106 PS |
584 | { |
585 | struct geneve_net *gn = net_generic(net, geneve_net_id); | |
586 | struct geneve_sock *gs; | |
587 | struct socket *sock; | |
588 | struct udp_tunnel_sock_cfg tunnel_cfg; | |
66d47003 | 589 | int h; |
371bd106 PS |
590 | |
591 | gs = kzalloc(sizeof(*gs), GFP_KERNEL); | |
592 | if (!gs) | |
593 | return ERR_PTR(-ENOMEM); | |
594 | ||
9b4437a5 | 595 | sock = geneve_create_sock(net, ipv6, port, ipv6_rx_csum); |
371bd106 PS |
596 | if (IS_ERR(sock)) { |
597 | kfree(gs); | |
598 | return ERR_CAST(sock); | |
599 | } | |
600 | ||
601 | gs->sock = sock; | |
602 | gs->refcnt = 1; | |
66d47003 PS |
603 | for (h = 0; h < VNI_HASH_SIZE; ++h) |
604 | INIT_HLIST_HEAD(&gs->vni_list[h]); | |
371bd106 PS |
605 | |
606 | /* Initialize the geneve udp offloads structure */ | |
e7b3db5e | 607 | udp_tunnel_notify_add_rx_port(gs->sock, UDP_TUNNEL_TYPE_GENEVE); |
371bd106 PS |
608 | |
609 | /* Mark socket as an encapsulation socket */ | |
4a0090a9 | 610 | memset(&tunnel_cfg, 0, sizeof(tunnel_cfg)); |
371bd106 PS |
611 | tunnel_cfg.sk_user_data = gs; |
612 | tunnel_cfg.encap_type = 1; | |
4a0090a9 TH |
613 | tunnel_cfg.gro_receive = geneve_gro_receive; |
614 | tunnel_cfg.gro_complete = geneve_gro_complete; | |
371bd106 | 615 | tunnel_cfg.encap_rcv = geneve_udp_encap_recv; |
a0796644 | 616 | tunnel_cfg.encap_err_lookup = geneve_udp_encap_err_lookup; |
371bd106 PS |
617 | tunnel_cfg.encap_destroy = NULL; |
618 | setup_udp_tunnel_sock(net, sock, &tunnel_cfg); | |
371bd106 PS |
619 | list_add(&gs->list, &gn->sock_list); |
620 | return gs; | |
621 | } | |
622 | ||
8ed66f0e | 623 | static void __geneve_sock_release(struct geneve_sock *gs) |
371bd106 | 624 | { |
8ed66f0e | 625 | if (!gs || --gs->refcnt) |
371bd106 PS |
626 | return; |
627 | ||
628 | list_del(&gs->list); | |
e7b3db5e | 629 | udp_tunnel_notify_del_rx_port(gs->sock, UDP_TUNNEL_TYPE_GENEVE); |
371bd106 PS |
630 | udp_tunnel_sock_release(gs->sock); |
631 | kfree_rcu(gs, rcu); | |
632 | } | |
633 | ||
8ed66f0e JL |
634 | static void geneve_sock_release(struct geneve_dev *geneve) |
635 | { | |
fceb9c3e | 636 | struct geneve_sock *gs4 = rtnl_dereference(geneve->sock4); |
8ed66f0e | 637 | #if IS_ENABLED(CONFIG_IPV6) |
fceb9c3e | 638 | struct geneve_sock *gs6 = rtnl_dereference(geneve->sock6); |
639 | ||
640 | rcu_assign_pointer(geneve->sock6, NULL); | |
641 | #endif | |
642 | ||
643 | rcu_assign_pointer(geneve->sock4, NULL); | |
644 | synchronize_net(); | |
645 | ||
646 | __geneve_sock_release(gs4); | |
647 | #if IS_ENABLED(CONFIG_IPV6) | |
648 | __geneve_sock_release(gs6); | |
8ed66f0e JL |
649 | #endif |
650 | } | |
651 | ||
371bd106 | 652 | static struct geneve_sock *geneve_find_sock(struct geneve_net *gn, |
8ed66f0e | 653 | sa_family_t family, |
371bd106 PS |
654 | __be16 dst_port) |
655 | { | |
656 | struct geneve_sock *gs; | |
657 | ||
658 | list_for_each_entry(gs, &gn->sock_list, list) { | |
659 | if (inet_sk(gs->sock->sk)->inet_sport == dst_port && | |
1e9f12ec | 660 | geneve_get_sk_family(gs) == family) { |
371bd106 PS |
661 | return gs; |
662 | } | |
663 | } | |
664 | return NULL; | |
665 | } | |
666 | ||
8ed66f0e | 667 | static int geneve_sock_add(struct geneve_dev *geneve, bool ipv6) |
2d07dc79 | 668 | { |
2d07dc79 | 669 | struct net *net = geneve->net; |
371bd106 | 670 | struct geneve_net *gn = net_generic(net, geneve_net_id); |
4b4c21fa | 671 | struct geneve_dev_node *node; |
2d07dc79 | 672 | struct geneve_sock *gs; |
9b4437a5 | 673 | __u8 vni[3]; |
66d47003 | 674 | __u32 hash; |
2d07dc79 | 675 | |
9e06e859 | 676 | gs = geneve_find_sock(gn, ipv6 ? AF_INET6 : AF_INET, geneve->cfg.info.key.tp_dst); |
371bd106 PS |
677 | if (gs) { |
678 | gs->refcnt++; | |
679 | goto out; | |
680 | } | |
681 | ||
9e06e859 SD |
682 | gs = geneve_socket_create(net, geneve->cfg.info.key.tp_dst, ipv6, |
683 | geneve->cfg.use_udp6_rx_checksums); | |
2d07dc79 JL |
684 | if (IS_ERR(gs)) |
685 | return PTR_ERR(gs); | |
686 | ||
371bd106 | 687 | out: |
9e06e859 | 688 | gs->collect_md = geneve->cfg.collect_md; |
8ed66f0e | 689 | #if IS_ENABLED(CONFIG_IPV6) |
4b4c21fa | 690 | if (ipv6) { |
fceb9c3e | 691 | rcu_assign_pointer(geneve->sock6, gs); |
4b4c21fa JB |
692 | node = &geneve->hlist6; |
693 | } else | |
8ed66f0e | 694 | #endif |
4b4c21fa | 695 | { |
fceb9c3e | 696 | rcu_assign_pointer(geneve->sock4, gs); |
4b4c21fa JB |
697 | node = &geneve->hlist4; |
698 | } | |
699 | node->geneve = geneve; | |
66d47003 | 700 | |
9e06e859 | 701 | tunnel_id_to_vni(geneve->cfg.info.key.tun_id, vni); |
9b4437a5 | 702 | hash = geneve_net_vni_hash(vni); |
4b4c21fa | 703 | hlist_add_head_rcu(&node->hlist, &gs->vni_list[hash]); |
2d07dc79 JL |
704 | return 0; |
705 | } | |
706 | ||
8ed66f0e JL |
707 | static int geneve_open(struct net_device *dev) |
708 | { | |
709 | struct geneve_dev *geneve = netdev_priv(dev); | |
9e06e859 | 710 | bool metadata = geneve->cfg.collect_md; |
cf1c9ccb | 711 | bool ipv4, ipv6; |
8ed66f0e JL |
712 | int ret = 0; |
713 | ||
9e06e859 | 714 | ipv6 = geneve->cfg.info.mode & IP_TUNNEL_INFO_IPV6 || metadata; |
cf1c9ccb | 715 | ipv4 = !ipv6 || metadata; |
8ed66f0e | 716 | #if IS_ENABLED(CONFIG_IPV6) |
cf1c9ccb | 717 | if (ipv6) { |
8ed66f0e | 718 | ret = geneve_sock_add(geneve, true); |
cf1c9ccb JB |
719 | if (ret < 0 && ret != -EAFNOSUPPORT) |
720 | ipv4 = false; | |
721 | } | |
8ed66f0e | 722 | #endif |
cf1c9ccb | 723 | if (ipv4) |
8ed66f0e JL |
724 | ret = geneve_sock_add(geneve, false); |
725 | if (ret < 0) | |
726 | geneve_sock_release(geneve); | |
727 | ||
728 | return ret; | |
729 | } | |
730 | ||
2d07dc79 JL |
731 | static int geneve_stop(struct net_device *dev) |
732 | { | |
733 | struct geneve_dev *geneve = netdev_priv(dev); | |
2d07dc79 | 734 | |
4b4c21fa JB |
735 | hlist_del_init_rcu(&geneve->hlist4.hlist); |
736 | #if IS_ENABLED(CONFIG_IPV6) | |
737 | hlist_del_init_rcu(&geneve->hlist6.hlist); | |
738 | #endif | |
8ed66f0e | 739 | geneve_sock_release(geneve); |
371bd106 PS |
740 | return 0; |
741 | } | |
742 | ||
8ed66f0e | 743 | static void geneve_build_header(struct genevehdr *geneveh, |
435fe1c0 EB |
744 | const struct ip_tunnel_info *info, |
745 | __be16 inner_proto) | |
8ed66f0e JL |
746 | { |
747 | geneveh->ver = GENEVE_VER; | |
c3ef5aa5 | 748 | geneveh->opt_len = info->options_len / 4; |
749 | geneveh->oam = !!(info->key.tun_flags & TUNNEL_OAM); | |
750 | geneveh->critical = !!(info->key.tun_flags & TUNNEL_CRIT_OPT); | |
8ed66f0e | 751 | geneveh->rsvd1 = 0; |
c3ef5aa5 | 752 | tunnel_id_to_vni(info->key.tun_id, geneveh->vni); |
435fe1c0 | 753 | geneveh->proto_type = inner_proto; |
8ed66f0e JL |
754 | geneveh->rsvd2 = 0; |
755 | ||
256c87c1 PJV |
756 | if (info->key.tun_flags & TUNNEL_GENEVE_OPT) |
757 | ip_tunnel_info_opts_get(geneveh->options, info); | |
8ed66f0e JL |
758 | } |
759 | ||
c3ef5aa5 | 760 | static int geneve_build_skb(struct dst_entry *dst, struct sk_buff *skb, |
761 | const struct ip_tunnel_info *info, | |
435fe1c0 EB |
762 | bool xnet, int ip_hdr_len, |
763 | bool inner_proto_inherit) | |
371bd106 | 764 | { |
c3ef5aa5 | 765 | bool udp_sum = !!(info->key.tun_flags & TUNNEL_CSUM); |
8ed66f0e | 766 | struct genevehdr *gnvh; |
435fe1c0 | 767 | __be16 inner_proto; |
8ed66f0e JL |
768 | int min_headroom; |
769 | int err; | |
770 | ||
c3ef5aa5 | 771 | skb_reset_mac_header(skb); |
8ed66f0e JL |
772 | skb_scrub_packet(skb, xnet); |
773 | ||
c3ef5aa5 | 774 | min_headroom = LL_RESERVED_SPACE(dst->dev) + dst->header_len + |
775 | GENEVE_BASE_HLEN + info->options_len + ip_hdr_len; | |
8ed66f0e | 776 | err = skb_cow_head(skb, min_headroom); |
aed069df | 777 | if (unlikely(err)) |
8ed66f0e | 778 | goto free_dst; |
8ed66f0e | 779 | |
aed069df | 780 | err = udp_tunnel_handle_offloads(skb, udp_sum); |
1ba64fac | 781 | if (err) |
8ed66f0e | 782 | goto free_dst; |
8ed66f0e | 783 | |
d58ff351 | 784 | gnvh = __skb_push(skb, sizeof(*gnvh) + info->options_len); |
435fe1c0 EB |
785 | inner_proto = inner_proto_inherit ? skb->protocol : htons(ETH_P_TEB); |
786 | geneve_build_header(gnvh, info, inner_proto); | |
787 | skb_set_inner_protocol(skb, inner_proto); | |
8ed66f0e JL |
788 | return 0; |
789 | ||
790 | free_dst: | |
791 | dst_release(dst); | |
792 | return err; | |
793 | } | |
8ed66f0e JL |
794 | |
795 | static struct rtable *geneve_get_v4_rt(struct sk_buff *skb, | |
796 | struct net_device *dev, | |
5b861f6b | 797 | struct geneve_sock *gs4, |
8ed66f0e | 798 | struct flowi4 *fl4, |
34beb215 | 799 | const struct ip_tunnel_info *info, |
b4ab94d6 MM |
800 | __be16 dport, __be16 sport, |
801 | __u8 *full_tos) | |
e305ac6c | 802 | { |
db3c6139 | 803 | bool use_cache = ip_tunnel_dst_cache_usable(skb, info); |
e305ac6c | 804 | struct geneve_dev *geneve = netdev_priv(dev); |
468dfffc | 805 | struct dst_cache *dst_cache; |
e305ac6c PS |
806 | struct rtable *rt = NULL; |
807 | __u8 tos; | |
808 | ||
5b861f6b | 809 | if (!gs4) |
fceb9c3e | 810 | return ERR_PTR(-EIO); |
811 | ||
e305ac6c PS |
812 | memset(fl4, 0, sizeof(*fl4)); |
813 | fl4->flowi4_mark = skb->mark; | |
814 | fl4->flowi4_proto = IPPROTO_UDP; | |
9b4437a5 | 815 | fl4->daddr = info->key.u.ipv4.dst; |
816 | fl4->saddr = info->key.u.ipv4.src; | |
34beb215 MG |
817 | fl4->fl4_dport = dport; |
818 | fl4->fl4_sport = sport; | |
861396ac | 819 | fl4->flowi4_flags = info->key.flow_flags; |
e305ac6c | 820 | |
9b4437a5 | 821 | tos = info->key.tos; |
9e06e859 | 822 | if ((tos == 1) && !geneve->cfg.collect_md) { |
9b4437a5 | 823 | tos = ip_tunnel_get_dsfield(ip_hdr(skb), skb); |
824 | use_cache = false; | |
468dfffc | 825 | } |
9b4437a5 | 826 | fl4->flowi4_tos = RT_TOS(tos); |
b4ab94d6 MM |
827 | if (full_tos) |
828 | *full_tos = tos; | |
468dfffc | 829 | |
c3ef5aa5 | 830 | dst_cache = (struct dst_cache *)&info->dst_cache; |
468dfffc PA |
831 | if (use_cache) { |
832 | rt = dst_cache_get_ip4(dst_cache, &fl4->saddr); | |
833 | if (rt) | |
834 | return rt; | |
e305ac6c | 835 | } |
e305ac6c PS |
836 | rt = ip_route_output_key(geneve->net, fl4); |
837 | if (IS_ERR(rt)) { | |
838 | netdev_dbg(dev, "no route to %pI4\n", &fl4->daddr); | |
fc4099f1 | 839 | return ERR_PTR(-ENETUNREACH); |
e305ac6c PS |
840 | } |
841 | if (rt->dst.dev == dev) { /* is this necessary? */ | |
842 | netdev_dbg(dev, "circular route to %pI4\n", &fl4->daddr); | |
e305ac6c | 843 | ip_rt_put(rt); |
fc4099f1 | 844 | return ERR_PTR(-ELOOP); |
e305ac6c | 845 | } |
468dfffc PA |
846 | if (use_cache) |
847 | dst_cache_set_ip4(dst_cache, &rt->dst, fl4->saddr); | |
e305ac6c PS |
848 | return rt; |
849 | } | |
850 | ||
8ed66f0e JL |
851 | #if IS_ENABLED(CONFIG_IPV6) |
852 | static struct dst_entry *geneve_get_v6_dst(struct sk_buff *skb, | |
853 | struct net_device *dev, | |
5b861f6b | 854 | struct geneve_sock *gs6, |
8ed66f0e | 855 | struct flowi6 *fl6, |
34beb215 MG |
856 | const struct ip_tunnel_info *info, |
857 | __be16 dport, __be16 sport) | |
8ed66f0e | 858 | { |
db3c6139 | 859 | bool use_cache = ip_tunnel_dst_cache_usable(skb, info); |
8ed66f0e | 860 | struct geneve_dev *geneve = netdev_priv(dev); |
8ed66f0e | 861 | struct dst_entry *dst = NULL; |
468dfffc | 862 | struct dst_cache *dst_cache; |
3a56f86f | 863 | __u8 prio; |
8ed66f0e | 864 | |
fceb9c3e | 865 | if (!gs6) |
866 | return ERR_PTR(-EIO); | |
867 | ||
8ed66f0e JL |
868 | memset(fl6, 0, sizeof(*fl6)); |
869 | fl6->flowi6_mark = skb->mark; | |
870 | fl6->flowi6_proto = IPPROTO_UDP; | |
9b4437a5 | 871 | fl6->daddr = info->key.u.ipv6.dst; |
872 | fl6->saddr = info->key.u.ipv6.src; | |
34beb215 MG |
873 | fl6->fl6_dport = dport; |
874 | fl6->fl6_sport = sport; | |
875 | ||
9b4437a5 | 876 | prio = info->key.tos; |
9e06e859 | 877 | if ((prio == 1) && !geneve->cfg.collect_md) { |
9b4437a5 | 878 | prio = ip_tunnel_get_dsfield(ip_hdr(skb), skb); |
879 | use_cache = false; | |
468dfffc PA |
880 | } |
881 | ||
ca2bb695 | 882 | fl6->flowlabel = ip6_make_flowinfo(prio, info->key.label); |
c3ef5aa5 | 883 | dst_cache = (struct dst_cache *)&info->dst_cache; |
468dfffc PA |
884 | if (use_cache) { |
885 | dst = dst_cache_get_ip6(dst_cache, &fl6->saddr); | |
886 | if (dst) | |
887 | return dst; | |
8ed66f0e | 888 | } |
6c8991f4 SD |
889 | dst = ipv6_stub->ipv6_dst_lookup_flow(geneve->net, gs6->sock->sk, fl6, |
890 | NULL); | |
891 | if (IS_ERR(dst)) { | |
8ed66f0e JL |
892 | netdev_dbg(dev, "no route to %pI6\n", &fl6->daddr); |
893 | return ERR_PTR(-ENETUNREACH); | |
894 | } | |
895 | if (dst->dev == dev) { /* is this necessary? */ | |
896 | netdev_dbg(dev, "circular route to %pI6\n", &fl6->daddr); | |
897 | dst_release(dst); | |
898 | return ERR_PTR(-ELOOP); | |
899 | } | |
900 | ||
468dfffc PA |
901 | if (use_cache) |
902 | dst_cache_set_ip6(dst_cache, dst, &fl6->saddr); | |
8ed66f0e JL |
903 | return dst; |
904 | } | |
905 | #endif | |
906 | ||
9b4437a5 | 907 | static int geneve_xmit_skb(struct sk_buff *skb, struct net_device *dev, |
c3ef5aa5 | 908 | struct geneve_dev *geneve, |
909 | const struct ip_tunnel_info *info) | |
2d07dc79 | 910 | { |
9b4437a5 | 911 | bool xnet = !net_eq(geneve->net, dev_net(geneve->dev)); |
912 | struct geneve_sock *gs4 = rcu_dereference(geneve->sock4); | |
913 | const struct ip_tunnel_key *key = &info->key; | |
914 | struct rtable *rt; | |
2d07dc79 | 915 | struct flowi4 fl4; |
b4ab94d6 | 916 | __u8 full_tos; |
8760ce58 | 917 | __u8 tos, ttl; |
a025fb5f | 918 | __be16 df = 0; |
e305ac6c | 919 | __be16 sport; |
bcceeec3 | 920 | int err; |
980c394c | 921 | |
d13f048d | 922 | if (!pskb_inet_may_pull(skb)) |
6628ddfe PP |
923 | return -EINVAL; |
924 | ||
34beb215 MG |
925 | sport = udp_flow_src_port(geneve->net, skb, 1, USHRT_MAX, true); |
926 | rt = geneve_get_v4_rt(skb, dev, gs4, &fl4, info, | |
b4ab94d6 | 927 | geneve->cfg.info.key.tp_dst, sport, &full_tos); |
9b4437a5 | 928 | if (IS_ERR(rt)) |
929 | return PTR_ERR(rt); | |
371bd106 | 930 | |
c1a800e8 SB |
931 | err = skb_tunnel_check_pmtu(skb, &rt->dst, |
932 | GENEVE_IPV4_HLEN + info->options_len, | |
933 | netif_is_any_bridge_port(dev)); | |
934 | if (err < 0) { | |
935 | dst_release(&rt->dst); | |
936 | return err; | |
937 | } else if (err) { | |
938 | struct ip_tunnel_info *info; | |
939 | ||
940 | info = skb_tunnel_info(skb); | |
941 | if (info) { | |
68c1a943 AT |
942 | struct ip_tunnel_info *unclone; |
943 | ||
944 | unclone = skb_tunnel_info_unclone(skb); | |
945 | if (unlikely(!unclone)) { | |
946 | dst_release(&rt->dst); | |
947 | return -ENOMEM; | |
948 | } | |
949 | ||
950 | unclone->key.u.ipv4.dst = fl4.saddr; | |
951 | unclone->key.u.ipv4.src = fl4.daddr; | |
c1a800e8 SB |
952 | } |
953 | ||
954 | if (!pskb_may_pull(skb, ETH_HLEN)) { | |
955 | dst_release(&rt->dst); | |
956 | return -EINVAL; | |
957 | } | |
958 | ||
959 | skb->protocol = eth_type_trans(skb, geneve->dev); | |
baebdf48 | 960 | __netif_rx(skb); |
c1a800e8 SB |
961 | dst_release(&rt->dst); |
962 | return -EMSGSIZE; | |
963 | } | |
52a589d5 | 964 | |
9e06e859 | 965 | if (geneve->cfg.collect_md) { |
9b4437a5 | 966 | tos = ip_tunnel_ecn_encap(key->tos, ip_hdr(skb), skb); |
371bd106 | 967 | ttl = key->ttl; |
a025fb5f SB |
968 | |
969 | df = key->tun_flags & TUNNEL_DONT_FRAGMENT ? htons(IP_DF) : 0; | |
e305ac6c | 970 | } else { |
b4ab94d6 | 971 | tos = ip_tunnel_ecn_encap(full_tos, ip_hdr(skb), skb); |
9e06e859 | 972 | if (geneve->cfg.ttl_inherit) |
52d0d404 HL |
973 | ttl = ip_tunnel_get_ttl(ip_hdr(skb), skb); |
974 | else | |
975 | ttl = key->ttl; | |
976 | ttl = ttl ? : ip4_dst_hoplimit(&rt->dst); | |
a025fb5f | 977 | |
9e06e859 | 978 | if (geneve->cfg.df == GENEVE_DF_SET) { |
a025fb5f | 979 | df = htons(IP_DF); |
9e06e859 | 980 | } else if (geneve->cfg.df == GENEVE_DF_INHERIT) { |
a025fb5f SB |
981 | struct ethhdr *eth = eth_hdr(skb); |
982 | ||
983 | if (ntohs(eth->h_proto) == ETH_P_IPV6) { | |
984 | df = htons(IP_DF); | |
985 | } else if (ntohs(eth->h_proto) == ETH_P_IP) { | |
986 | struct iphdr *iph = ip_hdr(skb); | |
987 | ||
988 | if (iph->frag_off & htons(IP_DF)) | |
989 | df = htons(IP_DF); | |
990 | } | |
991 | } | |
2d07dc79 | 992 | } |
2d07dc79 | 993 | |
435fe1c0 EB |
994 | err = geneve_build_skb(&rt->dst, skb, info, xnet, sizeof(struct iphdr), |
995 | geneve->cfg.inner_proto_inherit); | |
9b4437a5 | 996 | if (unlikely(err)) |
997 | return err; | |
efeb2267 | 998 | |
9b4437a5 | 999 | udp_tunnel_xmit_skb(rt, gs4->sock->sk, skb, fl4.saddr, fl4.daddr, |
9e06e859 | 1000 | tos, ttl, df, sport, geneve->cfg.info.key.tp_dst, |
9b4437a5 | 1001 | !net_eq(geneve->net, dev_net(geneve->dev)), |
1002 | !(info->key.tun_flags & TUNNEL_CSUM)); | |
1003 | return 0; | |
2d07dc79 JL |
1004 | } |
1005 | ||
8ed66f0e | 1006 | #if IS_ENABLED(CONFIG_IPV6) |
9b4437a5 | 1007 | static int geneve6_xmit_skb(struct sk_buff *skb, struct net_device *dev, |
c3ef5aa5 | 1008 | struct geneve_dev *geneve, |
1009 | const struct ip_tunnel_info *info) | |
8ed66f0e | 1010 | { |
9b4437a5 | 1011 | bool xnet = !net_eq(geneve->net, dev_net(geneve->dev)); |
1012 | struct geneve_sock *gs6 = rcu_dereference(geneve->sock6); | |
1013 | const struct ip_tunnel_key *key = &info->key; | |
8ed66f0e | 1014 | struct dst_entry *dst = NULL; |
8ed66f0e | 1015 | struct flowi6 fl6; |
3a56f86f | 1016 | __u8 prio, ttl; |
8ed66f0e | 1017 | __be16 sport; |
bcceeec3 | 1018 | int err; |
8ed66f0e | 1019 | |
d13f048d | 1020 | if (!pskb_inet_may_pull(skb)) |
6628ddfe PP |
1021 | return -EINVAL; |
1022 | ||
34beb215 MG |
1023 | sport = udp_flow_src_port(geneve->net, skb, 1, USHRT_MAX, true); |
1024 | dst = geneve_get_v6_dst(skb, dev, gs6, &fl6, info, | |
1025 | geneve->cfg.info.key.tp_dst, sport); | |
9b4437a5 | 1026 | if (IS_ERR(dst)) |
1027 | return PTR_ERR(dst); | |
8ed66f0e | 1028 | |
c1a800e8 SB |
1029 | err = skb_tunnel_check_pmtu(skb, dst, |
1030 | GENEVE_IPV6_HLEN + info->options_len, | |
1031 | netif_is_any_bridge_port(dev)); | |
1032 | if (err < 0) { | |
1033 | dst_release(dst); | |
1034 | return err; | |
1035 | } else if (err) { | |
1036 | struct ip_tunnel_info *info = skb_tunnel_info(skb); | |
1037 | ||
1038 | if (info) { | |
68c1a943 AT |
1039 | struct ip_tunnel_info *unclone; |
1040 | ||
1041 | unclone = skb_tunnel_info_unclone(skb); | |
1042 | if (unlikely(!unclone)) { | |
1043 | dst_release(dst); | |
1044 | return -ENOMEM; | |
1045 | } | |
1046 | ||
1047 | unclone->key.u.ipv6.dst = fl6.saddr; | |
1048 | unclone->key.u.ipv6.src = fl6.daddr; | |
c1a800e8 SB |
1049 | } |
1050 | ||
1051 | if (!pskb_may_pull(skb, ETH_HLEN)) { | |
1052 | dst_release(dst); | |
1053 | return -EINVAL; | |
1054 | } | |
1055 | ||
1056 | skb->protocol = eth_type_trans(skb, geneve->dev); | |
baebdf48 | 1057 | __netif_rx(skb); |
c1a800e8 SB |
1058 | dst_release(dst); |
1059 | return -EMSGSIZE; | |
1060 | } | |
52a589d5 | 1061 | |
9e06e859 | 1062 | if (geneve->cfg.collect_md) { |
9b4437a5 | 1063 | prio = ip_tunnel_ecn_encap(key->tos, ip_hdr(skb), skb); |
1064 | ttl = key->ttl; | |
1065 | } else { | |
1066 | prio = ip_tunnel_ecn_encap(ip6_tclass(fl6.flowlabel), | |
1067 | ip_hdr(skb), skb); | |
9e06e859 | 1068 | if (geneve->cfg.ttl_inherit) |
52d0d404 HL |
1069 | ttl = ip_tunnel_get_ttl(ip_hdr(skb), skb); |
1070 | else | |
1071 | ttl = key->ttl; | |
1072 | ttl = ttl ? : ip6_dst_hoplimit(dst); | |
9b4437a5 | 1073 | } |
435fe1c0 EB |
1074 | err = geneve_build_skb(dst, skb, info, xnet, sizeof(struct ipv6hdr), |
1075 | geneve->cfg.inner_proto_inherit); | |
9b4437a5 | 1076 | if (unlikely(err)) |
1077 | return err; | |
8ed66f0e | 1078 | |
9b4437a5 | 1079 | udp_tunnel6_xmit_skb(dst, gs6->sock->sk, skb, dev, |
1080 | &fl6.saddr, &fl6.daddr, prio, ttl, | |
9e06e859 | 1081 | info->key.label, sport, geneve->cfg.info.key.tp_dst, |
9b4437a5 | 1082 | !(info->key.tun_flags & TUNNEL_CSUM)); |
1083 | return 0; | |
1084 | } | |
1085 | #endif | |
8ed66f0e | 1086 | |
9b4437a5 | 1087 | static netdev_tx_t geneve_xmit(struct sk_buff *skb, struct net_device *dev) |
1088 | { | |
1089 | struct geneve_dev *geneve = netdev_priv(dev); | |
1090 | struct ip_tunnel_info *info = NULL; | |
1091 | int err; | |
abe492b4 | 1092 | |
9e06e859 | 1093 | if (geneve->cfg.collect_md) { |
9b4437a5 | 1094 | info = skb_tunnel_info(skb); |
1095 | if (unlikely(!info || !(info->mode & IP_TUNNEL_INFO_TX))) { | |
9b4437a5 | 1096 | netdev_dbg(dev, "no tunnel metadata\n"); |
9d149045 JB |
1097 | dev_kfree_skb(skb); |
1098 | dev->stats.tx_dropped++; | |
1099 | return NETDEV_TX_OK; | |
9b4437a5 | 1100 | } |
8ed66f0e | 1101 | } else { |
9e06e859 | 1102 | info = &geneve->cfg.info; |
8ed66f0e | 1103 | } |
8eb3b995 | 1104 | |
a717e3f7 | 1105 | rcu_read_lock(); |
9b4437a5 | 1106 | #if IS_ENABLED(CONFIG_IPV6) |
1107 | if (info->mode & IP_TUNNEL_INFO_IPV6) | |
1108 | err = geneve6_xmit_skb(skb, dev, geneve, info); | |
1109 | else | |
1110 | #endif | |
1111 | err = geneve_xmit_skb(skb, dev, geneve, info); | |
a717e3f7 | 1112 | rcu_read_unlock(); |
8ed66f0e | 1113 | |
9b4437a5 | 1114 | if (likely(!err)) |
1115 | return NETDEV_TX_OK; | |
9d149045 | 1116 | |
c1a800e8 SB |
1117 | if (err != -EMSGSIZE) |
1118 | dev_kfree_skb(skb); | |
aed069df | 1119 | |
8ed66f0e JL |
1120 | if (err == -ELOOP) |
1121 | dev->stats.collisions++; | |
1122 | else if (err == -ENETUNREACH) | |
1123 | dev->stats.tx_carrier_errors++; | |
efeb2267 HY |
1124 | |
1125 | dev->stats.tx_errors++; | |
8ed66f0e JL |
1126 | return NETDEV_TX_OK; |
1127 | } | |
8ed66f0e | 1128 | |
91572088 | 1129 | static int geneve_change_mtu(struct net_device *dev, int new_mtu) |
55e5bfb5 | 1130 | { |
91572088 JW |
1131 | if (new_mtu > dev->max_mtu) |
1132 | new_mtu = dev->max_mtu; | |
321acc1c AK |
1133 | else if (new_mtu < dev->min_mtu) |
1134 | new_mtu = dev->min_mtu; | |
aeee0e66 | 1135 | |
55e5bfb5 DW |
1136 | dev->mtu = new_mtu; |
1137 | return 0; | |
1138 | } | |
1139 | ||
fc4099f1 PS |
1140 | static int geneve_fill_metadata_dst(struct net_device *dev, struct sk_buff *skb) |
1141 | { | |
1142 | struct ip_tunnel_info *info = skb_tunnel_info(skb); | |
1143 | struct geneve_dev *geneve = netdev_priv(dev); | |
34beb215 | 1144 | __be16 sport; |
fc4099f1 | 1145 | |
b8812fa8 | 1146 | if (ip_tunnel_info_af(info) == AF_INET) { |
9b4437a5 | 1147 | struct rtable *rt; |
1148 | struct flowi4 fl4; | |
34beb215 | 1149 | |
5b861f6b | 1150 | struct geneve_sock *gs4 = rcu_dereference(geneve->sock4); |
34beb215 MG |
1151 | sport = udp_flow_src_port(geneve->net, skb, |
1152 | 1, USHRT_MAX, true); | |
9b4437a5 | 1153 | |
34beb215 | 1154 | rt = geneve_get_v4_rt(skb, dev, gs4, &fl4, info, |
b4ab94d6 | 1155 | geneve->cfg.info.key.tp_dst, sport, NULL); |
b8812fa8 JL |
1156 | if (IS_ERR(rt)) |
1157 | return PTR_ERR(rt); | |
fc4099f1 | 1158 | |
b8812fa8 JL |
1159 | ip_rt_put(rt); |
1160 | info->key.u.ipv4.src = fl4.saddr; | |
1161 | #if IS_ENABLED(CONFIG_IPV6) | |
1162 | } else if (ip_tunnel_info_af(info) == AF_INET6) { | |
9b4437a5 | 1163 | struct dst_entry *dst; |
1164 | struct flowi6 fl6; | |
34beb215 | 1165 | |
5b861f6b | 1166 | struct geneve_sock *gs6 = rcu_dereference(geneve->sock6); |
34beb215 MG |
1167 | sport = udp_flow_src_port(geneve->net, skb, |
1168 | 1, USHRT_MAX, true); | |
9b4437a5 | 1169 | |
34beb215 MG |
1170 | dst = geneve_get_v6_dst(skb, dev, gs6, &fl6, info, |
1171 | geneve->cfg.info.key.tp_dst, sport); | |
b8812fa8 JL |
1172 | if (IS_ERR(dst)) |
1173 | return PTR_ERR(dst); | |
1174 | ||
1175 | dst_release(dst); | |
1176 | info->key.u.ipv6.src = fl6.saddr; | |
1177 | #endif | |
1178 | } else { | |
1179 | return -EINVAL; | |
1180 | } | |
fc4099f1 | 1181 | |
34beb215 | 1182 | info->key.tp_src = sport; |
9e06e859 | 1183 | info->key.tp_dst = geneve->cfg.info.key.tp_dst; |
fc4099f1 PS |
1184 | return 0; |
1185 | } | |
1186 | ||
2d07dc79 JL |
1187 | static const struct net_device_ops geneve_netdev_ops = { |
1188 | .ndo_init = geneve_init, | |
1189 | .ndo_uninit = geneve_uninit, | |
1190 | .ndo_open = geneve_open, | |
1191 | .ndo_stop = geneve_stop, | |
1192 | .ndo_start_xmit = geneve_xmit, | |
b220a4a7 | 1193 | .ndo_get_stats64 = dev_get_tstats64, |
55e5bfb5 | 1194 | .ndo_change_mtu = geneve_change_mtu, |
2d07dc79 JL |
1195 | .ndo_validate_addr = eth_validate_addr, |
1196 | .ndo_set_mac_address = eth_mac_addr, | |
fc4099f1 | 1197 | .ndo_fill_metadata_dst = geneve_fill_metadata_dst, |
2d07dc79 JL |
1198 | }; |
1199 | ||
1200 | static void geneve_get_drvinfo(struct net_device *dev, | |
1201 | struct ethtool_drvinfo *drvinfo) | |
1202 | { | |
1203 | strlcpy(drvinfo->version, GENEVE_NETDEV_VER, sizeof(drvinfo->version)); | |
1204 | strlcpy(drvinfo->driver, "geneve", sizeof(drvinfo->driver)); | |
1205 | } | |
1206 | ||
1207 | static const struct ethtool_ops geneve_ethtool_ops = { | |
1208 | .get_drvinfo = geneve_get_drvinfo, | |
1209 | .get_link = ethtool_op_get_link, | |
1210 | }; | |
1211 | ||
1212 | /* Info for udev, that this is a virtual tunnel endpoint */ | |
1213 | static struct device_type geneve_type = { | |
1214 | .name = "geneve", | |
1215 | }; | |
1216 | ||
e5de25dc | 1217 | /* Calls the ndo_udp_tunnel_add of the caller in order to |
05ca4029 | 1218 | * supply the listening GENEVE udp ports. Callers are expected |
e5de25dc | 1219 | * to implement the ndo_udp_tunnel_add. |
05ca4029 | 1220 | */ |
2d2b13fc | 1221 | static void geneve_offload_rx_ports(struct net_device *dev, bool push) |
05ca4029 SA |
1222 | { |
1223 | struct net *net = dev_net(dev); | |
1224 | struct geneve_net *gn = net_generic(net, geneve_net_id); | |
1225 | struct geneve_sock *gs; | |
681e683f | 1226 | |
05ca4029 | 1227 | rcu_read_lock(); |
2d2b13fc SD |
1228 | list_for_each_entry_rcu(gs, &gn->sock_list, list) { |
1229 | if (push) { | |
1230 | udp_tunnel_push_rx_port(dev, gs->sock, | |
1231 | UDP_TUNNEL_TYPE_GENEVE); | |
1232 | } else { | |
1233 | udp_tunnel_drop_rx_port(dev, gs->sock, | |
1234 | UDP_TUNNEL_TYPE_GENEVE); | |
1235 | } | |
1236 | } | |
05ca4029 SA |
1237 | rcu_read_unlock(); |
1238 | } | |
05ca4029 | 1239 | |
2d07dc79 JL |
1240 | /* Initialize the device structure. */ |
1241 | static void geneve_setup(struct net_device *dev) | |
1242 | { | |
1243 | ether_setup(dev); | |
1244 | ||
1245 | dev->netdev_ops = &geneve_netdev_ops; | |
1246 | dev->ethtool_ops = &geneve_ethtool_ops; | |
cf124db5 | 1247 | dev->needs_free_netdev = true; |
2d07dc79 JL |
1248 | |
1249 | SET_NETDEV_DEVTYPE(dev, &geneve_type); | |
1250 | ||
2d07dc79 | 1251 | dev->features |= NETIF_F_LLTX; |
18423e1a | 1252 | dev->features |= NETIF_F_SG | NETIF_F_HW_CSUM | NETIF_F_FRAGLIST; |
2d07dc79 JL |
1253 | dev->features |= NETIF_F_RXCSUM; |
1254 | dev->features |= NETIF_F_GSO_SOFTWARE; | |
1255 | ||
18423e1a XL |
1256 | dev->hw_features |= NETIF_F_SG | NETIF_F_HW_CSUM | NETIF_F_FRAGLIST; |
1257 | dev->hw_features |= NETIF_F_RXCSUM; | |
2d07dc79 | 1258 | dev->hw_features |= NETIF_F_GSO_SOFTWARE; |
2d07dc79 | 1259 | |
91572088 JW |
1260 | /* MTU range: 68 - (something less than 65535) */ |
1261 | dev->min_mtu = ETH_MIN_MTU; | |
1262 | /* The max_mtu calculation does not take account of GENEVE | |
1263 | * options, to avoid excluding potentially valid | |
1264 | * configurations. This will be further reduced by IPvX hdr size. | |
1265 | */ | |
1266 | dev->max_mtu = IP_MAX_MTU - GENEVE_BASE_HLEN - dev->hard_header_len; | |
1267 | ||
2d07dc79 | 1268 | netif_keep_dst(dev); |
fc41cdb3 | 1269 | dev->priv_flags &= ~IFF_TX_SKB_SHARING; |
ed961ac2 | 1270 | dev->priv_flags |= IFF_LIVE_ADDR_CHANGE | IFF_NO_QUEUE; |
87cd3dca | 1271 | eth_hw_addr_random(dev); |
2d07dc79 JL |
1272 | } |
1273 | ||
1274 | static const struct nla_policy geneve_policy[IFLA_GENEVE_MAX + 1] = { | |
36c2e31a | 1275 | [IFLA_GENEVE_UNSPEC] = { .strict_start_type = IFLA_GENEVE_INNER_PROTO_INHERIT }, |
2d07dc79 | 1276 | [IFLA_GENEVE_ID] = { .type = NLA_U32 }, |
c593642c | 1277 | [IFLA_GENEVE_REMOTE] = { .len = sizeof_field(struct iphdr, daddr) }, |
8ed66f0e | 1278 | [IFLA_GENEVE_REMOTE6] = { .len = sizeof(struct in6_addr) }, |
8760ce58 | 1279 | [IFLA_GENEVE_TTL] = { .type = NLA_U8 }, |
d8951125 | 1280 | [IFLA_GENEVE_TOS] = { .type = NLA_U8 }, |
8eb3b995 | 1281 | [IFLA_GENEVE_LABEL] = { .type = NLA_U32 }, |
cd7918b3 | 1282 | [IFLA_GENEVE_PORT] = { .type = NLA_U16 }, |
e305ac6c | 1283 | [IFLA_GENEVE_COLLECT_METADATA] = { .type = NLA_FLAG }, |
abe492b4 TH |
1284 | [IFLA_GENEVE_UDP_CSUM] = { .type = NLA_U8 }, |
1285 | [IFLA_GENEVE_UDP_ZERO_CSUM6_TX] = { .type = NLA_U8 }, | |
1286 | [IFLA_GENEVE_UDP_ZERO_CSUM6_RX] = { .type = NLA_U8 }, | |
52d0d404 | 1287 | [IFLA_GENEVE_TTL_INHERIT] = { .type = NLA_U8 }, |
a025fb5f | 1288 | [IFLA_GENEVE_DF] = { .type = NLA_U8 }, |
36c2e31a | 1289 | [IFLA_GENEVE_INNER_PROTO_INHERIT] = { .type = NLA_FLAG }, |
2d07dc79 JL |
1290 | }; |
1291 | ||
a8b8a889 MS |
1292 | static int geneve_validate(struct nlattr *tb[], struct nlattr *data[], |
1293 | struct netlink_ext_ack *extack) | |
2d07dc79 JL |
1294 | { |
1295 | if (tb[IFLA_ADDRESS]) { | |
c5ebc440 GM |
1296 | if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN) { |
1297 | NL_SET_ERR_MSG_ATTR(extack, tb[IFLA_ADDRESS], | |
1298 | "Provided link layer address is not Ethernet"); | |
2d07dc79 | 1299 | return -EINVAL; |
c5ebc440 | 1300 | } |
2d07dc79 | 1301 | |
c5ebc440 GM |
1302 | if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS]))) { |
1303 | NL_SET_ERR_MSG_ATTR(extack, tb[IFLA_ADDRESS], | |
1304 | "Provided Ethernet address is not unicast"); | |
2d07dc79 | 1305 | return -EADDRNOTAVAIL; |
c5ebc440 | 1306 | } |
2d07dc79 JL |
1307 | } |
1308 | ||
c5ebc440 GM |
1309 | if (!data) { |
1310 | NL_SET_ERR_MSG(extack, | |
1311 | "Not enough attributes provided to perform the operation"); | |
2d07dc79 | 1312 | return -EINVAL; |
c5ebc440 | 1313 | } |
2d07dc79 JL |
1314 | |
1315 | if (data[IFLA_GENEVE_ID]) { | |
1316 | __u32 vni = nla_get_u32(data[IFLA_GENEVE_ID]); | |
1317 | ||
c5ebc440 GM |
1318 | if (vni >= GENEVE_N_VID) { |
1319 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_ID], | |
1320 | "Geneve ID must be lower than 16777216"); | |
2d07dc79 | 1321 | return -ERANGE; |
c5ebc440 | 1322 | } |
2d07dc79 JL |
1323 | } |
1324 | ||
a025fb5f SB |
1325 | if (data[IFLA_GENEVE_DF]) { |
1326 | enum ifla_geneve_df df = nla_get_u8(data[IFLA_GENEVE_DF]); | |
1327 | ||
1328 | if (df < 0 || df > GENEVE_DF_MAX) { | |
9a7b5b50 | 1329 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_DF], |
a025fb5f SB |
1330 | "Invalid DF attribute"); |
1331 | return -EINVAL; | |
1332 | } | |
1333 | } | |
1334 | ||
2d07dc79 JL |
1335 | return 0; |
1336 | } | |
1337 | ||
371bd106 | 1338 | static struct geneve_dev *geneve_find_dev(struct geneve_net *gn, |
9b4437a5 | 1339 | const struct ip_tunnel_info *info, |
371bd106 PS |
1340 | bool *tun_on_same_port, |
1341 | bool *tun_collect_md) | |
1342 | { | |
9b4437a5 | 1343 | struct geneve_dev *geneve, *t = NULL; |
371bd106 PS |
1344 | |
1345 | *tun_on_same_port = false; | |
1346 | *tun_collect_md = false; | |
371bd106 | 1347 | list_for_each_entry(geneve, &gn->geneve_list, next) { |
9e06e859 SD |
1348 | if (info->key.tp_dst == geneve->cfg.info.key.tp_dst) { |
1349 | *tun_collect_md = geneve->cfg.collect_md; | |
371bd106 PS |
1350 | *tun_on_same_port = true; |
1351 | } | |
9e06e859 SD |
1352 | if (info->key.tun_id == geneve->cfg.info.key.tun_id && |
1353 | info->key.tp_dst == geneve->cfg.info.key.tp_dst && | |
1354 | !memcmp(&info->key.u, &geneve->cfg.info.key.u, sizeof(info->key.u))) | |
371bd106 PS |
1355 | t = geneve; |
1356 | } | |
1357 | return t; | |
1358 | } | |
1359 | ||
9b4437a5 | 1360 | static bool is_tnl_info_zero(const struct ip_tunnel_info *info) |
1361 | { | |
3fa5f11d SB |
1362 | return !(info->key.tun_id || info->key.tun_flags || info->key.tos || |
1363 | info->key.ttl || info->key.label || info->key.tp_src || | |
1364 | memchr_inv(&info->key.u, 0, sizeof(info->key.u))); | |
9b4437a5 | 1365 | } |
1366 | ||
5b861f6b GM |
1367 | static bool geneve_dst_addr_equal(struct ip_tunnel_info *a, |
1368 | struct ip_tunnel_info *b) | |
1369 | { | |
1370 | if (ip_tunnel_info_af(a) == AF_INET) | |
1371 | return a->key.u.ipv4.dst == b->key.u.ipv4.dst; | |
1372 | else | |
1373 | return ipv6_addr_equal(&a->key.u.ipv6.dst, &b->key.u.ipv6.dst); | |
1374 | } | |
1375 | ||
e305ac6c | 1376 | static int geneve_configure(struct net *net, struct net_device *dev, |
c5ebc440 | 1377 | struct netlink_ext_ack *extack, |
9e06e859 | 1378 | const struct geneve_config *cfg) |
2d07dc79 JL |
1379 | { |
1380 | struct geneve_net *gn = net_generic(net, geneve_net_id); | |
371bd106 | 1381 | struct geneve_dev *t, *geneve = netdev_priv(dev); |
9e06e859 | 1382 | const struct ip_tunnel_info *info = &cfg->info; |
371bd106 | 1383 | bool tun_collect_md, tun_on_same_port; |
184fc8b5 | 1384 | int err, encap_len; |
2d07dc79 | 1385 | |
9e06e859 | 1386 | if (cfg->collect_md && !is_tnl_info_zero(info)) { |
c5ebc440 GM |
1387 | NL_SET_ERR_MSG(extack, |
1388 | "Device is externally controlled, so attributes (VNI, Port, and so on) must not be specified"); | |
8ed66f0e | 1389 | return -EINVAL; |
c5ebc440 | 1390 | } |
2d07dc79 JL |
1391 | |
1392 | geneve->net = net; | |
1393 | geneve->dev = dev; | |
1394 | ||
9b4437a5 | 1395 | t = geneve_find_dev(gn, info, &tun_on_same_port, &tun_collect_md); |
371bd106 PS |
1396 | if (t) |
1397 | return -EBUSY; | |
1398 | ||
184fc8b5 PA |
1399 | /* make enough headroom for basic scenario */ |
1400 | encap_len = GENEVE_BASE_HLEN + ETH_HLEN; | |
9e06e859 | 1401 | if (!cfg->collect_md && ip_tunnel_info_af(info) == AF_INET) { |
184fc8b5 | 1402 | encap_len += sizeof(struct iphdr); |
91572088 JW |
1403 | dev->max_mtu -= sizeof(struct iphdr); |
1404 | } else { | |
184fc8b5 | 1405 | encap_len += sizeof(struct ipv6hdr); |
91572088 JW |
1406 | dev->max_mtu -= sizeof(struct ipv6hdr); |
1407 | } | |
184fc8b5 PA |
1408 | dev->needed_headroom = encap_len + ETH_HLEN; |
1409 | ||
9e06e859 | 1410 | if (cfg->collect_md) { |
c5ebc440 GM |
1411 | if (tun_on_same_port) { |
1412 | NL_SET_ERR_MSG(extack, | |
1413 | "There can be only one externally controlled device on a destination port"); | |
371bd106 | 1414 | return -EPERM; |
c5ebc440 | 1415 | } |
371bd106 | 1416 | } else { |
c5ebc440 GM |
1417 | if (tun_collect_md) { |
1418 | NL_SET_ERR_MSG(extack, | |
1419 | "There already exists an externally controlled device on this destination port"); | |
371bd106 | 1420 | return -EPERM; |
c5ebc440 | 1421 | } |
371bd106 PS |
1422 | } |
1423 | ||
9e06e859 SD |
1424 | dst_cache_reset(&geneve->cfg.info.dst_cache); |
1425 | memcpy(&geneve->cfg, cfg, sizeof(*cfg)); | |
468dfffc | 1426 | |
435fe1c0 EB |
1427 | if (geneve->cfg.inner_proto_inherit) { |
1428 | dev->header_ops = NULL; | |
1429 | dev->type = ARPHRD_NONE; | |
1430 | dev->hard_header_len = 0; | |
1431 | dev->addr_len = 0; | |
1432 | dev->flags = IFF_NOARP; | |
1433 | } | |
1434 | ||
2d07dc79 JL |
1435 | err = register_netdevice(dev); |
1436 | if (err) | |
1437 | return err; | |
1438 | ||
e305ac6c | 1439 | list_add(&geneve->next, &gn->geneve_list); |
e305ac6c PS |
1440 | return 0; |
1441 | } | |
1442 | ||
9b4437a5 | 1443 | static void init_tnl_info(struct ip_tunnel_info *info, __u16 dst_port) |
1444 | { | |
1445 | memset(info, 0, sizeof(*info)); | |
1446 | info->key.tp_dst = htons(dst_port); | |
1447 | } | |
1448 | ||
c5ebc440 GM |
1449 | static int geneve_nl2info(struct nlattr *tb[], struct nlattr *data[], |
1450 | struct netlink_ext_ack *extack, | |
9e06e859 | 1451 | struct geneve_config *cfg, bool changelink) |
e305ac6c | 1452 | { |
9e06e859 | 1453 | struct ip_tunnel_info *info = &cfg->info; |
c5ebc440 GM |
1454 | int attrtype; |
1455 | ||
1456 | if (data[IFLA_GENEVE_REMOTE] && data[IFLA_GENEVE_REMOTE6]) { | |
1457 | NL_SET_ERR_MSG(extack, | |
1458 | "Cannot specify both IPv4 and IPv6 Remote addresses"); | |
8ed66f0e | 1459 | return -EINVAL; |
c5ebc440 | 1460 | } |
8ed66f0e JL |
1461 | |
1462 | if (data[IFLA_GENEVE_REMOTE]) { | |
c5ebc440 GM |
1463 | if (changelink && (ip_tunnel_info_af(info) == AF_INET6)) { |
1464 | attrtype = IFLA_GENEVE_REMOTE; | |
1465 | goto change_notsup; | |
1466 | } | |
5b861f6b GM |
1467 | |
1468 | info->key.u.ipv4.dst = | |
8ed66f0e | 1469 | nla_get_in_addr(data[IFLA_GENEVE_REMOTE]); |
9b4437a5 | 1470 | |
842841ec | 1471 | if (ipv4_is_multicast(info->key.u.ipv4.dst)) { |
c5ebc440 GM |
1472 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_REMOTE], |
1473 | "Remote IPv4 address cannot be Multicast"); | |
9b4437a5 | 1474 | return -EINVAL; |
1475 | } | |
8ed66f0e JL |
1476 | } |
1477 | ||
1478 | if (data[IFLA_GENEVE_REMOTE6]) { | |
4c52a889 | 1479 | #if IS_ENABLED(CONFIG_IPV6) |
c5ebc440 GM |
1480 | if (changelink && (ip_tunnel_info_af(info) == AF_INET)) { |
1481 | attrtype = IFLA_GENEVE_REMOTE6; | |
1482 | goto change_notsup; | |
1483 | } | |
5b861f6b GM |
1484 | |
1485 | info->mode = IP_TUNNEL_INFO_IPV6; | |
1486 | info->key.u.ipv6.dst = | |
8ed66f0e JL |
1487 | nla_get_in6_addr(data[IFLA_GENEVE_REMOTE6]); |
1488 | ||
5b861f6b | 1489 | if (ipv6_addr_type(&info->key.u.ipv6.dst) & |
8ed66f0e | 1490 | IPV6_ADDR_LINKLOCAL) { |
c5ebc440 GM |
1491 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_REMOTE6], |
1492 | "Remote IPv6 address cannot be link-local"); | |
8ed66f0e JL |
1493 | return -EINVAL; |
1494 | } | |
5b861f6b | 1495 | if (ipv6_addr_is_multicast(&info->key.u.ipv6.dst)) { |
c5ebc440 GM |
1496 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_REMOTE6], |
1497 | "Remote IPv6 address cannot be Multicast"); | |
9b4437a5 | 1498 | return -EINVAL; |
1499 | } | |
5b861f6b | 1500 | info->key.tun_flags |= TUNNEL_CSUM; |
9e06e859 | 1501 | cfg->use_udp6_rx_checksums = true; |
9b4437a5 | 1502 | #else |
c5ebc440 GM |
1503 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_REMOTE6], |
1504 | "IPv6 support not enabled in the kernel"); | |
9b4437a5 | 1505 | return -EPFNOSUPPORT; |
1506 | #endif | |
8ed66f0e JL |
1507 | } |
1508 | ||
9b4437a5 | 1509 | if (data[IFLA_GENEVE_ID]) { |
1510 | __u32 vni; | |
1511 | __u8 tvni[3]; | |
5b861f6b | 1512 | __be64 tunid; |
9b4437a5 | 1513 | |
e277de5f | 1514 | vni = nla_get_u32(data[IFLA_GENEVE_ID]); |
9b4437a5 | 1515 | tvni[0] = (vni & 0x00ff0000) >> 16; |
1516 | tvni[1] = (vni & 0x0000ff00) >> 8; | |
1517 | tvni[2] = vni & 0x000000ff; | |
e305ac6c | 1518 | |
5b861f6b | 1519 | tunid = vni_to_tunnel_id(tvni); |
c5ebc440 GM |
1520 | if (changelink && (tunid != info->key.tun_id)) { |
1521 | attrtype = IFLA_GENEVE_ID; | |
1522 | goto change_notsup; | |
1523 | } | |
5b861f6b | 1524 | info->key.tun_id = tunid; |
9b4437a5 | 1525 | } |
5b861f6b | 1526 | |
a97d97ba HL |
1527 | if (data[IFLA_GENEVE_TTL_INHERIT]) { |
1528 | if (nla_get_u8(data[IFLA_GENEVE_TTL_INHERIT])) | |
9e06e859 | 1529 | cfg->ttl_inherit = true; |
a97d97ba | 1530 | else |
9e06e859 | 1531 | cfg->ttl_inherit = false; |
a97d97ba | 1532 | } else if (data[IFLA_GENEVE_TTL]) { |
5b861f6b | 1533 | info->key.ttl = nla_get_u8(data[IFLA_GENEVE_TTL]); |
9e06e859 | 1534 | cfg->ttl_inherit = false; |
a97d97ba | 1535 | } |
52d0d404 | 1536 | |
d8951125 | 1537 | if (data[IFLA_GENEVE_TOS]) |
5b861f6b | 1538 | info->key.tos = nla_get_u8(data[IFLA_GENEVE_TOS]); |
d8951125 | 1539 | |
a025fb5f | 1540 | if (data[IFLA_GENEVE_DF]) |
9e06e859 | 1541 | cfg->df = nla_get_u8(data[IFLA_GENEVE_DF]); |
a025fb5f | 1542 | |
9b4437a5 | 1543 | if (data[IFLA_GENEVE_LABEL]) { |
5b861f6b | 1544 | info->key.label = nla_get_be32(data[IFLA_GENEVE_LABEL]) & |
9b4437a5 | 1545 | IPV6_FLOWLABEL_MASK; |
c5ebc440 GM |
1546 | if (info->key.label && (!(info->mode & IP_TUNNEL_INFO_IPV6))) { |
1547 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_LABEL], | |
1548 | "Label attribute only applies for IPv6 Geneve devices"); | |
9b4437a5 | 1549 | return -EINVAL; |
c5ebc440 | 1550 | } |
9b4437a5 | 1551 | } |
8eb3b995 | 1552 | |
5b861f6b | 1553 | if (data[IFLA_GENEVE_PORT]) { |
c5ebc440 GM |
1554 | if (changelink) { |
1555 | attrtype = IFLA_GENEVE_PORT; | |
1556 | goto change_notsup; | |
1557 | } | |
5b861f6b GM |
1558 | info->key.tp_dst = nla_get_be16(data[IFLA_GENEVE_PORT]); |
1559 | } | |
2d07dc79 | 1560 | |
5b861f6b | 1561 | if (data[IFLA_GENEVE_COLLECT_METADATA]) { |
c5ebc440 GM |
1562 | if (changelink) { |
1563 | attrtype = IFLA_GENEVE_COLLECT_METADATA; | |
1564 | goto change_notsup; | |
1565 | } | |
9e06e859 | 1566 | cfg->collect_md = true; |
5b861f6b | 1567 | } |
2d07dc79 | 1568 | |
5b861f6b | 1569 | if (data[IFLA_GENEVE_UDP_CSUM]) { |
c5ebc440 GM |
1570 | if (changelink) { |
1571 | attrtype = IFLA_GENEVE_UDP_CSUM; | |
1572 | goto change_notsup; | |
1573 | } | |
5b861f6b GM |
1574 | if (nla_get_u8(data[IFLA_GENEVE_UDP_CSUM])) |
1575 | info->key.tun_flags |= TUNNEL_CSUM; | |
1576 | } | |
abe492b4 | 1577 | |
5b861f6b | 1578 | if (data[IFLA_GENEVE_UDP_ZERO_CSUM6_TX]) { |
f9094b76 | 1579 | #if IS_ENABLED(CONFIG_IPV6) |
c5ebc440 GM |
1580 | if (changelink) { |
1581 | attrtype = IFLA_GENEVE_UDP_ZERO_CSUM6_TX; | |
1582 | goto change_notsup; | |
1583 | } | |
5b861f6b GM |
1584 | if (nla_get_u8(data[IFLA_GENEVE_UDP_ZERO_CSUM6_TX])) |
1585 | info->key.tun_flags &= ~TUNNEL_CSUM; | |
f9094b76 HL |
1586 | #else |
1587 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_UDP_ZERO_CSUM6_TX], | |
1588 | "IPv6 support not enabled in the kernel"); | |
1589 | return -EPFNOSUPPORT; | |
1590 | #endif | |
5b861f6b | 1591 | } |
abe492b4 | 1592 | |
5b861f6b | 1593 | if (data[IFLA_GENEVE_UDP_ZERO_CSUM6_RX]) { |
f9094b76 | 1594 | #if IS_ENABLED(CONFIG_IPV6) |
c5ebc440 GM |
1595 | if (changelink) { |
1596 | attrtype = IFLA_GENEVE_UDP_ZERO_CSUM6_RX; | |
1597 | goto change_notsup; | |
1598 | } | |
5b861f6b | 1599 | if (nla_get_u8(data[IFLA_GENEVE_UDP_ZERO_CSUM6_RX])) |
9e06e859 | 1600 | cfg->use_udp6_rx_checksums = false; |
f9094b76 HL |
1601 | #else |
1602 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_UDP_ZERO_CSUM6_RX], | |
1603 | "IPv6 support not enabled in the kernel"); | |
1604 | return -EPFNOSUPPORT; | |
1605 | #endif | |
5b861f6b GM |
1606 | } |
1607 | ||
435fe1c0 EB |
1608 | if (data[IFLA_GENEVE_INNER_PROTO_INHERIT]) { |
1609 | if (changelink) { | |
1610 | attrtype = IFLA_GENEVE_INNER_PROTO_INHERIT; | |
1611 | goto change_notsup; | |
1612 | } | |
1613 | cfg->inner_proto_inherit = true; | |
1614 | } | |
1615 | ||
5b861f6b | 1616 | return 0; |
c5ebc440 GM |
1617 | change_notsup: |
1618 | NL_SET_ERR_MSG_ATTR(extack, data[attrtype], | |
435fe1c0 | 1619 | "Changing VNI, Port, endpoint IP address family, external, inner_proto_inherit, and UDP checksum attributes are not supported"); |
c5ebc440 | 1620 | return -EOPNOTSUPP; |
5b861f6b GM |
1621 | } |
1622 | ||
c40e89fd AK |
1623 | static void geneve_link_config(struct net_device *dev, |
1624 | struct ip_tunnel_info *info, struct nlattr *tb[]) | |
1625 | { | |
1626 | struct geneve_dev *geneve = netdev_priv(dev); | |
1627 | int ldev_mtu = 0; | |
1628 | ||
1629 | if (tb[IFLA_MTU]) { | |
1630 | geneve_change_mtu(dev, nla_get_u32(tb[IFLA_MTU])); | |
1631 | return; | |
1632 | } | |
1633 | ||
1634 | switch (ip_tunnel_info_af(info)) { | |
1635 | case AF_INET: { | |
1636 | struct flowi4 fl4 = { .daddr = info->key.u.ipv4.dst }; | |
1637 | struct rtable *rt = ip_route_output_key(geneve->net, &fl4); | |
1638 | ||
1639 | if (!IS_ERR(rt) && rt->dst.dev) { | |
1640 | ldev_mtu = rt->dst.dev->mtu - GENEVE_IPV4_HLEN; | |
1641 | ip_rt_put(rt); | |
1642 | } | |
1643 | break; | |
1644 | } | |
1645 | #if IS_ENABLED(CONFIG_IPV6) | |
1646 | case AF_INET6: { | |
c0a47e44 HL |
1647 | struct rt6_info *rt; |
1648 | ||
1649 | if (!__in6_dev_get(dev)) | |
1650 | break; | |
1651 | ||
1652 | rt = rt6_lookup(geneve->net, &info->key.u.ipv6.dst, NULL, 0, | |
1653 | NULL, 0); | |
c40e89fd AK |
1654 | |
1655 | if (rt && rt->dst.dev) | |
1656 | ldev_mtu = rt->dst.dev->mtu - GENEVE_IPV6_HLEN; | |
1657 | ip6_rt_put(rt); | |
1658 | break; | |
1659 | } | |
1660 | #endif | |
1661 | } | |
1662 | ||
1663 | if (ldev_mtu <= 0) | |
1664 | return; | |
1665 | ||
1666 | geneve_change_mtu(dev, ldev_mtu - info->options_len); | |
1667 | } | |
1668 | ||
5b861f6b GM |
1669 | static int geneve_newlink(struct net *net, struct net_device *dev, |
1670 | struct nlattr *tb[], struct nlattr *data[], | |
1671 | struct netlink_ext_ack *extack) | |
1672 | { | |
9e06e859 SD |
1673 | struct geneve_config cfg = { |
1674 | .df = GENEVE_DF_UNSET, | |
1675 | .use_udp6_rx_checksums = false, | |
1676 | .ttl_inherit = false, | |
1677 | .collect_md = false, | |
1678 | }; | |
5b861f6b GM |
1679 | int err; |
1680 | ||
9e06e859 SD |
1681 | init_tnl_info(&cfg.info, GENEVE_UDP_PORT); |
1682 | err = geneve_nl2info(tb, data, extack, &cfg, false); | |
5b861f6b GM |
1683 | if (err) |
1684 | return err; | |
abe492b4 | 1685 | |
9e06e859 | 1686 | err = geneve_configure(net, dev, extack, &cfg); |
c40e89fd AK |
1687 | if (err) |
1688 | return err; | |
1689 | ||
9e06e859 | 1690 | geneve_link_config(dev, &cfg.info, tb); |
c40e89fd AK |
1691 | |
1692 | return 0; | |
2d07dc79 JL |
1693 | } |
1694 | ||
5b861f6b GM |
1695 | /* Quiesces the geneve device data path for both TX and RX. |
1696 | * | |
1697 | * On transmit geneve checks for non-NULL geneve_sock before it proceeds. | |
1698 | * So, if we set that socket to NULL under RCU and wait for synchronize_net() | |
1699 | * to complete for the existing set of in-flight packets to be transmitted, | |
1700 | * then we would have quiesced the transmit data path. All the future packets | |
1701 | * will get dropped until we unquiesce the data path. | |
1702 | * | |
1703 | * On receive geneve dereference the geneve_sock stashed in the socket. So, | |
1704 | * if we set that to NULL under RCU and wait for synchronize_net() to | |
1705 | * complete, then we would have quiesced the receive data path. | |
1706 | */ | |
1707 | static void geneve_quiesce(struct geneve_dev *geneve, struct geneve_sock **gs4, | |
1708 | struct geneve_sock **gs6) | |
1709 | { | |
1710 | *gs4 = rtnl_dereference(geneve->sock4); | |
1711 | rcu_assign_pointer(geneve->sock4, NULL); | |
1712 | if (*gs4) | |
1713 | rcu_assign_sk_user_data((*gs4)->sock->sk, NULL); | |
1714 | #if IS_ENABLED(CONFIG_IPV6) | |
1715 | *gs6 = rtnl_dereference(geneve->sock6); | |
1716 | rcu_assign_pointer(geneve->sock6, NULL); | |
1717 | if (*gs6) | |
1718 | rcu_assign_sk_user_data((*gs6)->sock->sk, NULL); | |
1719 | #else | |
1720 | *gs6 = NULL; | |
1721 | #endif | |
1722 | synchronize_net(); | |
1723 | } | |
1724 | ||
1725 | /* Resumes the geneve device data path for both TX and RX. */ | |
1726 | static void geneve_unquiesce(struct geneve_dev *geneve, struct geneve_sock *gs4, | |
1727 | struct geneve_sock __maybe_unused *gs6) | |
1728 | { | |
1729 | rcu_assign_pointer(geneve->sock4, gs4); | |
1730 | if (gs4) | |
1731 | rcu_assign_sk_user_data(gs4->sock->sk, gs4); | |
1732 | #if IS_ENABLED(CONFIG_IPV6) | |
1733 | rcu_assign_pointer(geneve->sock6, gs6); | |
1734 | if (gs6) | |
1735 | rcu_assign_sk_user_data(gs6->sock->sk, gs6); | |
1736 | #endif | |
1737 | synchronize_net(); | |
1738 | } | |
1739 | ||
1740 | static int geneve_changelink(struct net_device *dev, struct nlattr *tb[], | |
1741 | struct nlattr *data[], | |
1742 | struct netlink_ext_ack *extack) | |
1743 | { | |
1744 | struct geneve_dev *geneve = netdev_priv(dev); | |
1745 | struct geneve_sock *gs4, *gs6; | |
9e06e859 | 1746 | struct geneve_config cfg; |
5b861f6b GM |
1747 | int err; |
1748 | ||
1749 | /* If the geneve device is configured for metadata (or externally | |
1750 | * controlled, for example, OVS), then nothing can be changed. | |
1751 | */ | |
9e06e859 | 1752 | if (geneve->cfg.collect_md) |
5b861f6b GM |
1753 | return -EOPNOTSUPP; |
1754 | ||
1755 | /* Start with the existing info. */ | |
9e06e859 SD |
1756 | memcpy(&cfg, &geneve->cfg, sizeof(cfg)); |
1757 | err = geneve_nl2info(tb, data, extack, &cfg, true); | |
5b861f6b GM |
1758 | if (err) |
1759 | return err; | |
1760 | ||
9e06e859 SD |
1761 | if (!geneve_dst_addr_equal(&geneve->cfg.info, &cfg.info)) { |
1762 | dst_cache_reset(&cfg.info.dst_cache); | |
1763 | geneve_link_config(dev, &cfg.info, tb); | |
c40e89fd | 1764 | } |
5b861f6b GM |
1765 | |
1766 | geneve_quiesce(geneve, &gs4, &gs6); | |
9e06e859 | 1767 | memcpy(&geneve->cfg, &cfg, sizeof(cfg)); |
5b861f6b GM |
1768 | geneve_unquiesce(geneve, gs4, gs6); |
1769 | ||
1770 | return 0; | |
1771 | } | |
1772 | ||
2d07dc79 JL |
1773 | static void geneve_dellink(struct net_device *dev, struct list_head *head) |
1774 | { | |
1775 | struct geneve_dev *geneve = netdev_priv(dev); | |
1776 | ||
2d07dc79 JL |
1777 | list_del(&geneve->next); |
1778 | unregister_netdevice_queue(dev, head); | |
1779 | } | |
1780 | ||
1781 | static size_t geneve_get_size(const struct net_device *dev) | |
1782 | { | |
1783 | return nla_total_size(sizeof(__u32)) + /* IFLA_GENEVE_ID */ | |
8ed66f0e | 1784 | nla_total_size(sizeof(struct in6_addr)) + /* IFLA_GENEVE_REMOTE{6} */ |
8760ce58 | 1785 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_TTL */ |
d8951125 | 1786 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_TOS */ |
a025fb5f | 1787 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_DF */ |
8eb3b995 | 1788 | nla_total_size(sizeof(__be32)) + /* IFLA_GENEVE_LABEL */ |
7bbe33ff | 1789 | nla_total_size(sizeof(__be16)) + /* IFLA_GENEVE_PORT */ |
e305ac6c | 1790 | nla_total_size(0) + /* IFLA_GENEVE_COLLECT_METADATA */ |
abe492b4 TH |
1791 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_UDP_CSUM */ |
1792 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_UDP_ZERO_CSUM6_TX */ | |
1793 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_UDP_ZERO_CSUM6_RX */ | |
52d0d404 | 1794 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_TTL_INHERIT */ |
36c2e31a | 1795 | nla_total_size(0) + /* IFLA_GENEVE_INNER_PROTO_INHERIT */ |
2d07dc79 JL |
1796 | 0; |
1797 | } | |
1798 | ||
1799 | static int geneve_fill_info(struct sk_buff *skb, const struct net_device *dev) | |
1800 | { | |
1801 | struct geneve_dev *geneve = netdev_priv(dev); | |
9e06e859 SD |
1802 | struct ip_tunnel_info *info = &geneve->cfg.info; |
1803 | bool ttl_inherit = geneve->cfg.ttl_inherit; | |
1804 | bool metadata = geneve->cfg.collect_md; | |
9b4437a5 | 1805 | __u8 tmp_vni[3]; |
2d07dc79 JL |
1806 | __u32 vni; |
1807 | ||
9b4437a5 | 1808 | tunnel_id_to_vni(info->key.tun_id, tmp_vni); |
1809 | vni = (tmp_vni[0] << 16) | (tmp_vni[1] << 8) | tmp_vni[2]; | |
2d07dc79 JL |
1810 | if (nla_put_u32(skb, IFLA_GENEVE_ID, vni)) |
1811 | goto nla_put_failure; | |
1812 | ||
fd7eafd0 | 1813 | if (!metadata && ip_tunnel_info_af(info) == AF_INET) { |
8ed66f0e | 1814 | if (nla_put_in_addr(skb, IFLA_GENEVE_REMOTE, |
9b4437a5 | 1815 | info->key.u.ipv4.dst)) |
1816 | goto nla_put_failure; | |
9b4437a5 | 1817 | if (nla_put_u8(skb, IFLA_GENEVE_UDP_CSUM, |
1818 | !!(info->key.tun_flags & TUNNEL_CSUM))) | |
8ed66f0e | 1819 | goto nla_put_failure; |
9b4437a5 | 1820 | |
8ed66f0e | 1821 | #if IS_ENABLED(CONFIG_IPV6) |
fd7eafd0 | 1822 | } else if (!metadata) { |
8ed66f0e | 1823 | if (nla_put_in6_addr(skb, IFLA_GENEVE_REMOTE6, |
9b4437a5 | 1824 | &info->key.u.ipv6.dst)) |
1825 | goto nla_put_failure; | |
9b4437a5 | 1826 | if (nla_put_u8(skb, IFLA_GENEVE_UDP_ZERO_CSUM6_TX, |
1827 | !(info->key.tun_flags & TUNNEL_CSUM))) | |
1828 | goto nla_put_failure; | |
11387fe4 | 1829 | #endif |
fd7eafd0 | 1830 | } |
2d07dc79 | 1831 | |
9b4437a5 | 1832 | if (nla_put_u8(skb, IFLA_GENEVE_TTL, info->key.ttl) || |
1833 | nla_put_u8(skb, IFLA_GENEVE_TOS, info->key.tos) || | |
1834 | nla_put_be32(skb, IFLA_GENEVE_LABEL, info->key.label)) | |
8760ce58 JL |
1835 | goto nla_put_failure; |
1836 | ||
9e06e859 | 1837 | if (nla_put_u8(skb, IFLA_GENEVE_DF, geneve->cfg.df)) |
a025fb5f SB |
1838 | goto nla_put_failure; |
1839 | ||
9b4437a5 | 1840 | if (nla_put_be16(skb, IFLA_GENEVE_PORT, info->key.tp_dst)) |
cd7918b3 PS |
1841 | goto nla_put_failure; |
1842 | ||
fd7eafd0 | 1843 | if (metadata && nla_put_flag(skb, IFLA_GENEVE_COLLECT_METADATA)) |
f9094b76 | 1844 | goto nla_put_failure; |
fd7eafd0 | 1845 | |
f9094b76 | 1846 | #if IS_ENABLED(CONFIG_IPV6) |
fd7eafd0 | 1847 | if (nla_put_u8(skb, IFLA_GENEVE_UDP_ZERO_CSUM6_RX, |
9e06e859 | 1848 | !geneve->cfg.use_udp6_rx_checksums)) |
fd7eafd0 | 1849 | goto nla_put_failure; |
f9094b76 | 1850 | #endif |
fd7eafd0 | 1851 | |
52d0d404 HL |
1852 | if (nla_put_u8(skb, IFLA_GENEVE_TTL_INHERIT, ttl_inherit)) |
1853 | goto nla_put_failure; | |
1854 | ||
435fe1c0 EB |
1855 | if (geneve->cfg.inner_proto_inherit && |
1856 | nla_put_flag(skb, IFLA_GENEVE_INNER_PROTO_INHERIT)) | |
1857 | goto nla_put_failure; | |
1858 | ||
2d07dc79 JL |
1859 | return 0; |
1860 | ||
1861 | nla_put_failure: | |
1862 | return -EMSGSIZE; | |
1863 | } | |
1864 | ||
1865 | static struct rtnl_link_ops geneve_link_ops __read_mostly = { | |
1866 | .kind = "geneve", | |
1867 | .maxtype = IFLA_GENEVE_MAX, | |
1868 | .policy = geneve_policy, | |
1869 | .priv_size = sizeof(struct geneve_dev), | |
1870 | .setup = geneve_setup, | |
1871 | .validate = geneve_validate, | |
1872 | .newlink = geneve_newlink, | |
5b861f6b | 1873 | .changelink = geneve_changelink, |
2d07dc79 JL |
1874 | .dellink = geneve_dellink, |
1875 | .get_size = geneve_get_size, | |
1876 | .fill_info = geneve_fill_info, | |
1877 | }; | |
1878 | ||
e305ac6c PS |
1879 | struct net_device *geneve_dev_create_fb(struct net *net, const char *name, |
1880 | u8 name_assign_type, u16 dst_port) | |
1881 | { | |
1882 | struct nlattr *tb[IFLA_MAX + 1]; | |
1883 | struct net_device *dev; | |
106da663 | 1884 | LIST_HEAD(list_kill); |
e305ac6c | 1885 | int err; |
9e06e859 SD |
1886 | struct geneve_config cfg = { |
1887 | .df = GENEVE_DF_UNSET, | |
1888 | .use_udp6_rx_checksums = true, | |
1889 | .ttl_inherit = false, | |
1890 | .collect_md = true, | |
1891 | }; | |
e305ac6c PS |
1892 | |
1893 | memset(tb, 0, sizeof(tb)); | |
1894 | dev = rtnl_create_link(net, name, name_assign_type, | |
d0522f1c | 1895 | &geneve_link_ops, tb, NULL); |
e305ac6c PS |
1896 | if (IS_ERR(dev)) |
1897 | return dev; | |
1898 | ||
9e06e859 SD |
1899 | init_tnl_info(&cfg.info, dst_port); |
1900 | err = geneve_configure(net, dev, NULL, &cfg); | |
106da663 ND |
1901 | if (err) { |
1902 | free_netdev(dev); | |
1903 | return ERR_PTR(err); | |
1904 | } | |
7e059158 DW |
1905 | |
1906 | /* openvswitch users expect packet sizes to be unrestricted, | |
1907 | * so set the largest MTU we can. | |
1908 | */ | |
91572088 | 1909 | err = geneve_change_mtu(dev, IP_MAX_MTU); |
7e059158 DW |
1910 | if (err) |
1911 | goto err; | |
1912 | ||
41009481 ND |
1913 | err = rtnl_configure_link(dev, NULL); |
1914 | if (err < 0) | |
1915 | goto err; | |
1916 | ||
e305ac6c | 1917 | return dev; |
9b4437a5 | 1918 | err: |
106da663 ND |
1919 | geneve_dellink(dev, &list_kill); |
1920 | unregister_netdevice_many(&list_kill); | |
7e059158 | 1921 | return ERR_PTR(err); |
e305ac6c PS |
1922 | } |
1923 | EXPORT_SYMBOL_GPL(geneve_dev_create_fb); | |
1924 | ||
681e683f HFS |
1925 | static int geneve_netdevice_event(struct notifier_block *unused, |
1926 | unsigned long event, void *ptr) | |
1927 | { | |
1928 | struct net_device *dev = netdev_notifier_info_to_dev(ptr); | |
1929 | ||
dedc33e7 JK |
1930 | if (event == NETDEV_UDP_TUNNEL_PUSH_INFO) |
1931 | geneve_offload_rx_ports(dev, true); | |
1932 | else if (event == NETDEV_UDP_TUNNEL_DROP_INFO) | |
1933 | geneve_offload_rx_ports(dev, false); | |
681e683f HFS |
1934 | |
1935 | return NOTIFY_DONE; | |
1936 | } | |
1937 | ||
1938 | static struct notifier_block geneve_notifier_block __read_mostly = { | |
1939 | .notifier_call = geneve_netdevice_event, | |
1940 | }; | |
1941 | ||
2d07dc79 JL |
1942 | static __net_init int geneve_init_net(struct net *net) |
1943 | { | |
1944 | struct geneve_net *gn = net_generic(net, geneve_net_id); | |
2d07dc79 JL |
1945 | |
1946 | INIT_LIST_HEAD(&gn->geneve_list); | |
371bd106 | 1947 | INIT_LIST_HEAD(&gn->sock_list); |
2d07dc79 JL |
1948 | return 0; |
1949 | } | |
1950 | ||
2843a253 | 1951 | static void geneve_destroy_tunnels(struct net *net, struct list_head *head) |
2d07dc79 JL |
1952 | { |
1953 | struct geneve_net *gn = net_generic(net, geneve_net_id); | |
1954 | struct geneve_dev *geneve, *next; | |
1955 | struct net_device *dev, *aux; | |
2d07dc79 JL |
1956 | |
1957 | /* gather any geneve devices that were moved into this ns */ | |
1958 | for_each_netdev_safe(net, dev, aux) | |
1959 | if (dev->rtnl_link_ops == &geneve_link_ops) | |
2843a253 | 1960 | unregister_netdevice_queue(dev, head); |
2d07dc79 JL |
1961 | |
1962 | /* now gather any other geneve devices that were created in this ns */ | |
1963 | list_for_each_entry_safe(geneve, next, &gn->geneve_list, next) { | |
1964 | /* If geneve->dev is in the same netns, it was already added | |
1965 | * to the list by the previous loop. | |
1966 | */ | |
1967 | if (!net_eq(dev_net(geneve->dev), net)) | |
2843a253 | 1968 | unregister_netdevice_queue(geneve->dev, head); |
2d07dc79 | 1969 | } |
2843a253 HY |
1970 | } |
1971 | ||
1972 | static void __net_exit geneve_exit_batch_net(struct list_head *net_list) | |
1973 | { | |
1974 | struct net *net; | |
1975 | LIST_HEAD(list); | |
1976 | ||
1977 | rtnl_lock(); | |
1978 | list_for_each_entry(net, net_list, exit_list) | |
1979 | geneve_destroy_tunnels(net, &list); | |
1980 | ||
2d07dc79 JL |
1981 | /* unregister the devices gathered above */ |
1982 | unregister_netdevice_many(&list); | |
1983 | rtnl_unlock(); | |
0fda7600 FW |
1984 | |
1985 | list_for_each_entry(net, net_list, exit_list) { | |
1986 | const struct geneve_net *gn = net_generic(net, geneve_net_id); | |
1987 | ||
1988 | WARN_ON_ONCE(!list_empty(&gn->sock_list)); | |
1989 | } | |
2d07dc79 JL |
1990 | } |
1991 | ||
1992 | static struct pernet_operations geneve_net_ops = { | |
1993 | .init = geneve_init_net, | |
2843a253 | 1994 | .exit_batch = geneve_exit_batch_net, |
2d07dc79 JL |
1995 | .id = &geneve_net_id, |
1996 | .size = sizeof(struct geneve_net), | |
1997 | }; | |
1998 | ||
1999 | static int __init geneve_init_module(void) | |
2000 | { | |
2001 | int rc; | |
2002 | ||
2003 | rc = register_pernet_subsys(&geneve_net_ops); | |
2004 | if (rc) | |
2005 | goto out1; | |
2006 | ||
681e683f | 2007 | rc = register_netdevice_notifier(&geneve_notifier_block); |
2d07dc79 JL |
2008 | if (rc) |
2009 | goto out2; | |
2010 | ||
681e683f HFS |
2011 | rc = rtnl_link_register(&geneve_link_ops); |
2012 | if (rc) | |
2013 | goto out3; | |
2014 | ||
2d07dc79 | 2015 | return 0; |
681e683f HFS |
2016 | out3: |
2017 | unregister_netdevice_notifier(&geneve_notifier_block); | |
2d07dc79 JL |
2018 | out2: |
2019 | unregister_pernet_subsys(&geneve_net_ops); | |
2020 | out1: | |
2021 | return rc; | |
2022 | } | |
2023 | late_initcall(geneve_init_module); | |
2024 | ||
2025 | static void __exit geneve_cleanup_module(void) | |
2026 | { | |
2027 | rtnl_link_unregister(&geneve_link_ops); | |
681e683f | 2028 | unregister_netdevice_notifier(&geneve_notifier_block); |
2d07dc79 JL |
2029 | unregister_pernet_subsys(&geneve_net_ops); |
2030 | } | |
2031 | module_exit(geneve_cleanup_module); | |
2032 | ||
2033 | MODULE_LICENSE("GPL"); | |
2034 | MODULE_VERSION(GENEVE_NETDEV_VER); | |
2035 | MODULE_AUTHOR("John W. Linville <linville@tuxdriver.com>"); | |
2036 | MODULE_DESCRIPTION("Interface driver for GENEVE encapsulated traffic"); | |
2037 | MODULE_ALIAS_RTNL_LINK("geneve"); |