Commit | Line | Data |
---|---|---|
b2441318 | 1 | /* SPDX-License-Identifier: GPL-2.0 */ |
14c0b97d TG |
2 | #ifndef __NET_FIB_RULES_H |
3 | #define __NET_FIB_RULES_H | |
4 | ||
5 | #include <linux/types.h> | |
5a0e3ad6 | 6 | #include <linux/slab.h> |
14c0b97d TG |
7 | #include <linux/netdevice.h> |
8 | #include <linux/fib_rules.h> | |
717d1e99 | 9 | #include <linux/refcount.h> |
14c0b97d | 10 | #include <net/flow.h> |
9d9e6a58 | 11 | #include <net/rtnetlink.h> |
1b2a4440 | 12 | #include <net/fib_notifier.h> |
b9aaec8f | 13 | #include <linux/indirect_call_wrapper.h> |
14c0b97d | 14 | |
622ec2c9 LC |
15 | struct fib_kuid_range { |
16 | kuid_t start; | |
17 | kuid_t end; | |
18 | }; | |
19 | ||
fd2c3ef7 | 20 | struct fib_rule { |
14c0b97d | 21 | struct list_head list; |
491deb24 | 22 | int iifindex; |
1b038a5e | 23 | int oifindex; |
b8964ed9 TG |
24 | u32 mark; |
25 | u32 mark_mask; | |
14c0b97d TG |
26 | u32 flags; |
27 | u32 table; | |
28 | u8 action; | |
96c63fa7 | 29 | u8 l3mdev; |
cac56209 | 30 | u8 proto; |
bfff4862 | 31 | u8 ip_proto; |
0947c9fe | 32 | u32 target; |
e7030878 | 33 | __be64 tun_id; |
7a2b03c5 | 34 | struct fib_rule __rcu *ctarget; |
fba3679d ED |
35 | struct net *fr_net; |
36 | ||
717d1e99 | 37 | refcount_t refcnt; |
fba3679d ED |
38 | u32 pref; |
39 | int suppress_ifgroup; | |
40 | int suppress_prefixlen; | |
491deb24 | 41 | char iifname[IFNAMSIZ]; |
1b038a5e | 42 | char oifname[IFNAMSIZ]; |
622ec2c9 | 43 | struct fib_kuid_range uid_range; |
bfff4862 RP |
44 | struct fib_rule_port_range sport_range; |
45 | struct fib_rule_port_range dport_range; | |
14c0b97d TG |
46 | struct rcu_head rcu; |
47 | }; | |
48 | ||
fd2c3ef7 | 49 | struct fib_lookup_arg { |
14c0b97d | 50 | void *lookup_ptr; |
b75cc8f9 | 51 | const void *lookup_data; |
14c0b97d TG |
52 | void *result; |
53 | struct fib_rule *rule; | |
96c63fa7 | 54 | u32 table; |
ebc0ffae | 55 | int flags; |
0eeb075f AG |
56 | #define FIB_LOOKUP_NOREF 1 |
57 | #define FIB_LOOKUP_IGNORE_LINKSTATE 2 | |
14c0b97d TG |
58 | }; |
59 | ||
fd2c3ef7 | 60 | struct fib_rules_ops { |
14c0b97d TG |
61 | int family; |
62 | struct list_head list; | |
63 | int rule_size; | |
e1701c68 | 64 | int addr_size; |
0947c9fe TG |
65 | int unresolved_rules; |
66 | int nr_goto_rules; | |
1b2a4440 | 67 | unsigned int fib_rules_seq; |
14c0b97d TG |
68 | |
69 | int (*action)(struct fib_rule *, | |
70 | struct flowi *, int, | |
71 | struct fib_lookup_arg *); | |
cdef4852 | 72 | bool (*suppress)(struct fib_rule *, int, |
7764a45a | 73 | struct fib_lookup_arg *); |
14c0b97d TG |
74 | int (*match)(struct fib_rule *, |
75 | struct flowi *, int); | |
76 | int (*configure)(struct fib_rule *, | |
77 | struct sk_buff *, | |
14c0b97d | 78 | struct fib_rule_hdr *, |
b16fb418 RP |
79 | struct nlattr **, |
80 | struct netlink_ext_ack *); | |
0ddcf43d | 81 | int (*delete)(struct fib_rule *); |
14c0b97d TG |
82 | int (*compare)(struct fib_rule *, |
83 | struct fib_rule_hdr *, | |
84 | struct nlattr **); | |
85 | int (*fill)(struct fib_rule *, struct sk_buff *, | |
14c0b97d | 86 | struct fib_rule_hdr *); |
339bf98f | 87 | size_t (*nlmsg_payload)(struct fib_rule *); |
14c0b97d | 88 | |
73417f61 TG |
89 | /* Called after modifications to the rules set, must flush |
90 | * the route cache if one exists. */ | |
ae299fc0 | 91 | void (*flush_cache)(struct fib_rules_ops *ops); |
73417f61 | 92 | |
14c0b97d | 93 | int nlgroup; |
76c72d4f | 94 | struct list_head rules_list; |
14c0b97d | 95 | struct module *owner; |
03592383 | 96 | struct net *fro_net; |
e9c5158a | 97 | struct rcu_head rcu; |
14c0b97d TG |
98 | }; |
99 | ||
1b2a4440 IS |
100 | struct fib_rule_notifier_info { |
101 | struct fib_notifier_info info; /* must be first */ | |
102 | struct fib_rule *rule; | |
103 | }; | |
104 | ||
14c0b97d TG |
105 | static inline void fib_rule_get(struct fib_rule *rule) |
106 | { | |
717d1e99 | 107 | refcount_inc(&rule->refcnt); |
14c0b97d TG |
108 | } |
109 | ||
14c0b97d TG |
110 | static inline void fib_rule_put(struct fib_rule *rule) |
111 | { | |
717d1e99 | 112 | if (refcount_dec_and_test(&rule->refcnt)) |
efd7ef1c | 113 | kfree_rcu(rule, rcu); |
14c0b97d TG |
114 | } |
115 | ||
96c63fa7 DA |
116 | #ifdef CONFIG_NET_L3_MASTER_DEV |
117 | static inline u32 fib_rule_get_table(struct fib_rule *rule, | |
118 | struct fib_lookup_arg *arg) | |
119 | { | |
120 | return rule->l3mdev ? arg->table : rule->table; | |
121 | } | |
122 | #else | |
123 | static inline u32 fib_rule_get_table(struct fib_rule *rule, | |
124 | struct fib_lookup_arg *arg) | |
125 | { | |
126 | return rule->table; | |
127 | } | |
128 | #endif | |
129 | ||
9e762a4a PM |
130 | static inline u32 frh_get_table(struct fib_rule_hdr *frh, struct nlattr **nla) |
131 | { | |
132 | if (nla[FRA_TABLE]) | |
133 | return nla_get_u32(nla[FRA_TABLE]); | |
134 | return frh->table; | |
135 | } | |
136 | ||
bfff4862 RP |
137 | static inline bool fib_rule_port_range_set(const struct fib_rule_port_range *range) |
138 | { | |
139 | return range->start != 0 && range->end != 0; | |
140 | } | |
141 | ||
142 | static inline bool fib_rule_port_inrange(const struct fib_rule_port_range *a, | |
143 | __be16 port) | |
144 | { | |
145 | return ntohs(port) >= a->start && | |
146 | ntohs(port) <= a->end; | |
147 | } | |
148 | ||
149 | static inline bool fib_rule_port_range_valid(const struct fib_rule_port_range *a) | |
150 | { | |
151 | return a->start != 0 && a->end != 0 && a->end < 0xffff && | |
152 | a->start <= a->end; | |
153 | } | |
154 | ||
155 | static inline bool fib_rule_port_range_compare(struct fib_rule_port_range *a, | |
156 | struct fib_rule_port_range *b) | |
157 | { | |
158 | return a->start == b->start && | |
159 | a->end == b->end; | |
160 | } | |
161 | ||
162 | static inline bool fib_rule_requires_fldissect(struct fib_rule *rule) | |
163 | { | |
63f9ba1b | 164 | return rule->iifindex != LOOPBACK_IFINDEX && (rule->ip_proto || |
bfff4862 | 165 | fib_rule_port_range_set(&rule->sport_range) || |
63f9ba1b | 166 | fib_rule_port_range_set(&rule->dport_range)); |
bfff4862 RP |
167 | } |
168 | ||
8de6879f JP |
169 | struct fib_rules_ops *fib_rules_register(const struct fib_rules_ops *, |
170 | struct net *); | |
171 | void fib_rules_unregister(struct fib_rules_ops *); | |
14c0b97d | 172 | |
8de6879f JP |
173 | int fib_rules_lookup(struct fib_rules_ops *, struct flowi *, int flags, |
174 | struct fib_lookup_arg *); | |
175 | int fib_default_rule_add(struct fib_rules_ops *, u32 pref, u32 table, | |
176 | u32 flags); | |
3c71006d | 177 | bool fib_rule_matchall(const struct fib_rule *rule); |
b7a59557 JP |
178 | int fib_rules_dump(struct net *net, struct notifier_block *nb, int family, |
179 | struct netlink_ext_ack *extack); | |
1b2a4440 | 180 | unsigned int fib_rules_seq_read(struct net *net, int family); |
96c63fa7 | 181 | |
c21ef3e3 DA |
182 | int fib_nl_newrule(struct sk_buff *skb, struct nlmsghdr *nlh, |
183 | struct netlink_ext_ack *extack); | |
184 | int fib_nl_delrule(struct sk_buff *skb, struct nlmsghdr *nlh, | |
185 | struct netlink_ext_ack *extack); | |
b9aaec8f BV |
186 | |
187 | INDIRECT_CALLABLE_DECLARE(int fib6_rule_match(struct fib_rule *rule, | |
188 | struct flowi *fl, int flags)); | |
189 | INDIRECT_CALLABLE_DECLARE(int fib4_rule_match(struct fib_rule *rule, | |
190 | struct flowi *fl, int flags)); | |
191 | ||
192 | INDIRECT_CALLABLE_DECLARE(int fib6_rule_action(struct fib_rule *rule, | |
193 | struct flowi *flp, int flags, | |
194 | struct fib_lookup_arg *arg)); | |
195 | INDIRECT_CALLABLE_DECLARE(int fib4_rule_action(struct fib_rule *rule, | |
196 | struct flowi *flp, int flags, | |
197 | struct fib_lookup_arg *arg)); | |
198 | ||
199 | INDIRECT_CALLABLE_DECLARE(bool fib6_rule_suppress(struct fib_rule *rule, | |
cdef4852 | 200 | int flags, |
b9aaec8f BV |
201 | struct fib_lookup_arg *arg)); |
202 | INDIRECT_CALLABLE_DECLARE(bool fib4_rule_suppress(struct fib_rule *rule, | |
cdef4852 | 203 | int flags, |
b9aaec8f | 204 | struct fib_lookup_arg *arg)); |
14c0b97d | 205 | #endif |