[linux-2.6-block.git] / net / core / flow_offload.c

/* SPDX-License-Identifier: GPL-2.0 */
#include <linux/kernel.h>
#include <linux/slab.h>
#include <net/flow_offload.h>
#include <linux/rtnetlink.h>
#include <linux/mutex.h>

struct flow_rule *flow_rule_alloc(unsigned int num_actions)
{
	struct flow_rule *rule;

	rule = kzalloc(struct_size(rule, action.entries, num_actions),
		       GFP_KERNEL);
	if (!rule)
		return NULL;

	rule->action.num_entries = num_actions;

	return rule;
}
EXPORT_SYMBOL(flow_rule_alloc);

#define FLOW_DISSECTOR_MATCH(__rule, __type, __out)				\
	const struct flow_match *__m = &(__rule)->match;			\
	struct flow_dissector *__d = (__m)->dissector;				\
										\
	(__out)->key = skb_flow_dissector_target(__d, __type, (__m)->key);	\
	(__out)->mask = skb_flow_dissector_target(__d, __type, (__m)->mask);	\

void flow_rule_match_meta(const struct flow_rule *rule,
			  struct flow_match_meta *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_META, out);
}
EXPORT_SYMBOL(flow_rule_match_meta);

void flow_rule_match_basic(const struct flow_rule *rule,
			   struct flow_match_basic *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_BASIC, out);
}
EXPORT_SYMBOL(flow_rule_match_basic);

void flow_rule_match_control(const struct flow_rule *rule,
			     struct flow_match_control *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_CONTROL, out);
}
EXPORT_SYMBOL(flow_rule_match_control);

void flow_rule_match_eth_addrs(const struct flow_rule *rule,
			       struct flow_match_eth_addrs *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ETH_ADDRS, out);
}
EXPORT_SYMBOL(flow_rule_match_eth_addrs);

void flow_rule_match_vlan(const struct flow_rule *rule,
			  struct flow_match_vlan *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_VLAN, out);
}
EXPORT_SYMBOL(flow_rule_match_vlan);

void flow_rule_match_cvlan(const struct flow_rule *rule,
			   struct flow_match_vlan *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_CVLAN, out);
}
EXPORT_SYMBOL(flow_rule_match_cvlan);

void flow_rule_match_ipv4_addrs(const struct flow_rule *rule,
				struct flow_match_ipv4_addrs *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_IPV4_ADDRS, out);
}
EXPORT_SYMBOL(flow_rule_match_ipv4_addrs);

void flow_rule_match_ipv6_addrs(const struct flow_rule *rule,
				struct flow_match_ipv6_addrs *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_IPV6_ADDRS, out);
}
EXPORT_SYMBOL(flow_rule_match_ipv6_addrs);

void flow_rule_match_ip(const struct flow_rule *rule,
			struct flow_match_ip *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_IP, out);
}
EXPORT_SYMBOL(flow_rule_match_ip);

void flow_rule_match_ports(const struct flow_rule *rule,
			   struct flow_match_ports *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_PORTS, out);
}
EXPORT_SYMBOL(flow_rule_match_ports);

void flow_rule_match_tcp(const struct flow_rule *rule,
			 struct flow_match_tcp *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_TCP, out);
}
EXPORT_SYMBOL(flow_rule_match_tcp);

void flow_rule_match_icmp(const struct flow_rule *rule,
			  struct flow_match_icmp *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ICMP, out);
}
EXPORT_SYMBOL(flow_rule_match_icmp);

void flow_rule_match_mpls(const struct flow_rule *rule,
			  struct flow_match_mpls *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_MPLS, out);
}
EXPORT_SYMBOL(flow_rule_match_mpls);

void flow_rule_match_enc_control(const struct flow_rule *rule,
				 struct flow_match_control *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_CONTROL, out);
}
EXPORT_SYMBOL(flow_rule_match_enc_control);

void flow_rule_match_enc_ipv4_addrs(const struct flow_rule *rule,
				    struct flow_match_ipv4_addrs *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_IPV4_ADDRS, out);
}
EXPORT_SYMBOL(flow_rule_match_enc_ipv4_addrs);

void flow_rule_match_enc_ipv6_addrs(const struct flow_rule *rule,
				    struct flow_match_ipv6_addrs *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_IPV6_ADDRS, out);
}
EXPORT_SYMBOL(flow_rule_match_enc_ipv6_addrs);

void flow_rule_match_enc_ip(const struct flow_rule *rule,
			    struct flow_match_ip *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_IP, out);
}
EXPORT_SYMBOL(flow_rule_match_enc_ip);

void flow_rule_match_enc_ports(const struct flow_rule *rule,
			       struct flow_match_ports *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_PORTS, out);
}
EXPORT_SYMBOL(flow_rule_match_enc_ports);

void flow_rule_match_enc_keyid(const struct flow_rule *rule,
			       struct flow_match_enc_keyid *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_KEYID, out);
}
EXPORT_SYMBOL(flow_rule_match_enc_keyid);

void flow_rule_match_enc_opts(const struct flow_rule *rule,
			      struct flow_match_enc_opts *out)
{
	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_OPTS, out);
}
EXPORT_SYMBOL(flow_rule_match_enc_opts);

struct flow_block_cb *flow_block_cb_alloc(flow_setup_cb_t *cb,
					  void *cb_ident, void *cb_priv,
					  void (*release)(void *cb_priv))
{
	struct flow_block_cb *block_cb;

	block_cb = kzalloc(sizeof(*block_cb), GFP_KERNEL);
	if (!block_cb)
		return ERR_PTR(-ENOMEM);

	block_cb->cb = cb;
	block_cb->cb_ident = cb_ident;
	block_cb->cb_priv = cb_priv;
	block_cb->release = release;

	return block_cb;
}
EXPORT_SYMBOL(flow_block_cb_alloc);

void flow_block_cb_free(struct flow_block_cb *block_cb)
{
	if (block_cb->release)
		block_cb->release(block_cb->cb_priv);

	kfree(block_cb);
}
EXPORT_SYMBOL(flow_block_cb_free);

struct flow_block_cb *flow_block_cb_lookup(struct flow_block *block,
					   flow_setup_cb_t *cb, void *cb_ident)
{
	struct flow_block_cb *block_cb;

	list_for_each_entry(block_cb, &block->cb_list, list) {
		if (block_cb->cb == cb &&
		    block_cb->cb_ident == cb_ident)
			return block_cb;
	}

	return NULL;
}
EXPORT_SYMBOL(flow_block_cb_lookup);

void *flow_block_cb_priv(struct flow_block_cb *block_cb)
{
	return block_cb->cb_priv;
}
EXPORT_SYMBOL(flow_block_cb_priv);

void flow_block_cb_incref(struct flow_block_cb *block_cb)
{
	block_cb->refcnt++;
}
EXPORT_SYMBOL(flow_block_cb_incref);

unsigned int flow_block_cb_decref(struct flow_block_cb *block_cb)
{
	return --block_cb->refcnt;
}
EXPORT_SYMBOL(flow_block_cb_decref);

bool flow_block_cb_is_busy(flow_setup_cb_t *cb, void *cb_ident,
			   struct list_head *driver_block_list)
{
	struct flow_block_cb *block_cb;

	list_for_each_entry(block_cb, driver_block_list, driver_list) {
		if (block_cb->cb == cb &&
		    block_cb->cb_ident == cb_ident)
			return true;
	}

	return false;
}
EXPORT_SYMBOL(flow_block_cb_is_busy);

int flow_block_cb_setup_simple(struct flow_block_offload *f,
			       struct list_head *driver_block_list,
			       flow_setup_cb_t *cb,
			       void *cb_ident, void *cb_priv,
			       bool ingress_only)
{
	struct flow_block_cb *block_cb;

	if (ingress_only &&
	    f->binder_type != FLOW_BLOCK_BINDER_TYPE_CLSACT_INGRESS)
		return -EOPNOTSUPP;

	f->driver_block_list = driver_block_list;

	switch (f->command) {
	case FLOW_BLOCK_BIND:
		if (flow_block_cb_is_busy(cb, cb_ident, driver_block_list))
			return -EBUSY;

		block_cb = flow_block_cb_alloc(cb, cb_ident, cb_priv, NULL);
		if (IS_ERR(block_cb))
			return PTR_ERR(block_cb);

		flow_block_cb_add(block_cb, f);
		list_add_tail(&block_cb->driver_list, driver_block_list);
		return 0;
	case FLOW_BLOCK_UNBIND:
		block_cb = flow_block_cb_lookup(f->block, cb, cb_ident);
		if (!block_cb)
			return -ENOENT;

		flow_block_cb_remove(block_cb, f);
		list_del(&block_cb->driver_list);
		return 0;
	default:
		return -EOPNOTSUPP;
	}
}
EXPORT_SYMBOL(flow_block_cb_setup_simple);

static LIST_HEAD(block_ing_cb_list);

static struct rhashtable indr_setup_block_ht;

struct flow_indr_block_cb {
	struct list_head list;
	void *cb_priv;
	flow_indr_block_bind_cb_t *cb;
	void *cb_ident;
};

struct flow_indr_block_dev {
	struct rhash_head ht_node;
	struct net_device *dev;
	unsigned int refcnt;
	struct list_head cb_list;
};

static const struct rhashtable_params flow_indr_setup_block_ht_params = {
	.key_offset	= offsetof(struct flow_indr_block_dev, dev),
	.head_offset	= offsetof(struct flow_indr_block_dev, ht_node),
	.key_len	= sizeof(struct net_device *),
};

static struct flow_indr_block_dev *
flow_indr_block_dev_lookup(struct net_device *dev)
{
	return rhashtable_lookup_fast(&indr_setup_block_ht, &dev,
				      flow_indr_setup_block_ht_params);
}

static struct flow_indr_block_dev *
flow_indr_block_dev_get(struct net_device *dev)
{
	struct flow_indr_block_dev *indr_dev;

	indr_dev = flow_indr_block_dev_lookup(dev);
	if (indr_dev)
		goto inc_ref;

	indr_dev = kzalloc(sizeof(*indr_dev), GFP_KERNEL);
	if (!indr_dev)
		return NULL;

	INIT_LIST_HEAD(&indr_dev->cb_list);
	indr_dev->dev = dev;
	if (rhashtable_insert_fast(&indr_setup_block_ht, &indr_dev->ht_node,
				   flow_indr_setup_block_ht_params)) {
		kfree(indr_dev);
		return NULL;
	}

inc_ref:
	indr_dev->refcnt++;
	return indr_dev;
}

static void flow_indr_block_dev_put(struct flow_indr_block_dev *indr_dev)
{
	if (--indr_dev->refcnt)
		return;

	rhashtable_remove_fast(&indr_setup_block_ht, &indr_dev->ht_node,
			       flow_indr_setup_block_ht_params);
	kfree(indr_dev);
}

static struct flow_indr_block_cb *
flow_indr_block_cb_lookup(struct flow_indr_block_dev *indr_dev,
			  flow_indr_block_bind_cb_t *cb, void *cb_ident)
{
	struct flow_indr_block_cb *indr_block_cb;

	list_for_each_entry(indr_block_cb, &indr_dev->cb_list, list)
		if (indr_block_cb->cb == cb &&
		    indr_block_cb->cb_ident == cb_ident)
			return indr_block_cb;
	return NULL;
}

static struct flow_indr_block_cb *
flow_indr_block_cb_add(struct flow_indr_block_dev *indr_dev, void *cb_priv,
		       flow_indr_block_bind_cb_t *cb, void *cb_ident)
{
	struct flow_indr_block_cb *indr_block_cb;

	indr_block_cb = flow_indr_block_cb_lookup(indr_dev, cb, cb_ident);
	if (indr_block_cb)
		return ERR_PTR(-EEXIST);

	indr_block_cb = kzalloc(sizeof(*indr_block_cb), GFP_KERNEL);
	if (!indr_block_cb)
		return ERR_PTR(-ENOMEM);

	indr_block_cb->cb_priv = cb_priv;
	indr_block_cb->cb = cb;
	indr_block_cb->cb_ident = cb_ident;
	list_add(&indr_block_cb->list, &indr_dev->cb_list);

	return indr_block_cb;
}

static void flow_indr_block_cb_del(struct flow_indr_block_cb *indr_block_cb)
{
	list_del(&indr_block_cb->list);
	kfree(indr_block_cb);
}

static DEFINE_MUTEX(flow_indr_block_ing_cb_lock);

static void flow_block_ing_cmd(struct net_device *dev,
			       flow_indr_block_bind_cb_t *cb,
			       void *cb_priv,
			       enum flow_block_command command)
{
	struct flow_indr_block_ing_entry *entry;

	mutex_lock(&flow_indr_block_ing_cb_lock);
	list_for_each_entry(entry, &block_ing_cb_list, list) {
		entry->cb(dev, cb, cb_priv, command);
	}
	mutex_unlock(&flow_indr_block_ing_cb_lock);
}

int __flow_indr_block_cb_register(struct net_device *dev, void *cb_priv,
				  flow_indr_block_bind_cb_t *cb,
				  void *cb_ident)
{
	struct flow_indr_block_cb *indr_block_cb;
	struct flow_indr_block_dev *indr_dev;
	int err;

	indr_dev = flow_indr_block_dev_get(dev);
	if (!indr_dev)
		return -ENOMEM;

	indr_block_cb = flow_indr_block_cb_add(indr_dev, cb_priv, cb, cb_ident);
	err = PTR_ERR_OR_ZERO(indr_block_cb);
	if (err)
		goto err_dev_put;

	flow_block_ing_cmd(dev, indr_block_cb->cb, indr_block_cb->cb_priv,
			   FLOW_BLOCK_BIND);

	return 0;

err_dev_put:
	flow_indr_block_dev_put(indr_dev);
	return err;
}
EXPORT_SYMBOL_GPL(__flow_indr_block_cb_register);

int flow_indr_block_cb_register(struct net_device *dev, void *cb_priv,
				flow_indr_block_bind_cb_t *cb,
				void *cb_ident)
{
	int err;

	rtnl_lock();
	err = __flow_indr_block_cb_register(dev, cb_priv, cb, cb_ident);
	rtnl_unlock();

	return err;
}
EXPORT_SYMBOL_GPL(flow_indr_block_cb_register);

void __flow_indr_block_cb_unregister(struct net_device *dev,
				     flow_indr_block_bind_cb_t *cb,
				     void *cb_ident)
{
	struct flow_indr_block_cb *indr_block_cb;
	struct flow_indr_block_dev *indr_dev;

	indr_dev = flow_indr_block_dev_lookup(dev);
	if (!indr_dev)
		return;

	indr_block_cb = flow_indr_block_cb_lookup(indr_dev, cb, cb_ident);
	if (!indr_block_cb)
		return;

	flow_block_ing_cmd(dev, indr_block_cb->cb, indr_block_cb->cb_priv,
			   FLOW_BLOCK_UNBIND);

	flow_indr_block_cb_del(indr_block_cb);
	flow_indr_block_dev_put(indr_dev);
}
EXPORT_SYMBOL_GPL(__flow_indr_block_cb_unregister);

void flow_indr_block_cb_unregister(struct net_device *dev,
				   flow_indr_block_bind_cb_t *cb,
				   void *cb_ident)
{
	rtnl_lock();
	__flow_indr_block_cb_unregister(dev, cb, cb_ident);
	rtnl_unlock();
}
EXPORT_SYMBOL_GPL(flow_indr_block_cb_unregister);

void flow_indr_block_call(struct net_device *dev,
			  struct flow_block_offload *bo,
			  enum flow_block_command command)
{
	struct flow_indr_block_cb *indr_block_cb;
	struct flow_indr_block_dev *indr_dev;

	indr_dev = flow_indr_block_dev_lookup(dev);
	if (!indr_dev)
		return;

	list_for_each_entry(indr_block_cb, &indr_dev->cb_list, list)
		indr_block_cb->cb(dev, indr_block_cb->cb_priv, TC_SETUP_BLOCK,
				  bo);
}
EXPORT_SYMBOL_GPL(flow_indr_block_call);

void flow_indr_add_block_ing_cb(struct flow_indr_block_ing_entry *entry)
{
	mutex_lock(&flow_indr_block_ing_cb_lock);
	list_add_tail(&entry->list, &block_ing_cb_list);
	mutex_unlock(&flow_indr_block_ing_cb_lock);
}
EXPORT_SYMBOL_GPL(flow_indr_add_block_ing_cb);

void flow_indr_del_block_ing_cb(struct flow_indr_block_ing_entry *entry)
{
	mutex_lock(&flow_indr_block_ing_cb_lock);
	list_del(&entry->list);
	mutex_unlock(&flow_indr_block_ing_cb_lock);
}
EXPORT_SYMBOL_GPL(flow_indr_del_block_ing_cb);

static int __init init_flow_indr_rhashtable(void)
{
	return rhashtable_init(&indr_setup_block_ht,
			       &flow_indr_setup_block_ht_params);
}
subsys_initcall(init_flow_indr_rhashtable);
Commit	Line	Data
8f256622 PNA	1	/* SPDX-License-Identifier: GPL-2.0 */
	2	#include <linux/kernel.h>
	3	#include <linux/slab.h>
	4	#include <net/flow_offload.h>
4e481908	5	#include <linux/rtnetlink.h>
1150ab0f	6	#include <linux/mutex.h>
8f256622	7
e3ab786b	8	struct flow_rule *flow_rule_alloc(unsigned int num_actions)
8f256622	9	{
e3ab786b PNA	10	struct flow_rule *rule;
e3ab786b PNA	11
6dca9360	12	rule = kzalloc(struct_size(rule, action.entries, num_actions),
e3ab786b PNA	13	GFP_KERNEL);
	14	if (!rule)
	15	return NULL;
	16
	17	rule->action.num_entries = num_actions;
	18
	19	return rule;
8f256622 PNA	20	}
	21	EXPORT_SYMBOL(flow_rule_alloc);
	22
	23	#define FLOW_DISSECTOR_MATCH(__rule, __type, __out) \
	24	const struct flow_match *__m = &(__rule)->match; \
	25	struct flow_dissector *__d = (__m)->dissector; \
	26	\
	27	(__out)->key = skb_flow_dissector_target(__d, __type, (__m)->key); \
	28	(__out)->mask = skb_flow_dissector_target(__d, __type, (__m)->mask); \
	29
9558a83a JP	30	void flow_rule_match_meta(const struct flow_rule *rule,
	31	struct flow_match_meta *out)
	32	{
	33	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_META, out);
	34	}
	35	EXPORT_SYMBOL(flow_rule_match_meta);
	36
8f256622 PNA	37	void flow_rule_match_basic(const struct flow_rule *rule,
	38	struct flow_match_basic *out)
	39	{
	40	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_BASIC, out);
	41	}
	42	EXPORT_SYMBOL(flow_rule_match_basic);
	43
	44	void flow_rule_match_control(const struct flow_rule *rule,
	45	struct flow_match_control *out)
	46	{
	47	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_CONTROL, out);
	48	}
	49	EXPORT_SYMBOL(flow_rule_match_control);
	50
	51	void flow_rule_match_eth_addrs(const struct flow_rule *rule,
	52	struct flow_match_eth_addrs *out)
	53	{
	54	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ETH_ADDRS, out);
	55	}
	56	EXPORT_SYMBOL(flow_rule_match_eth_addrs);
	57
	58	void flow_rule_match_vlan(const struct flow_rule *rule,
	59	struct flow_match_vlan *out)
	60	{
	61	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_VLAN, out);
	62	}
	63	EXPORT_SYMBOL(flow_rule_match_vlan);
	64
bae9ed69 EC	65	void flow_rule_match_cvlan(const struct flow_rule *rule,
	66	struct flow_match_vlan *out)
	67	{
	68	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_CVLAN, out);
	69	}
	70	EXPORT_SYMBOL(flow_rule_match_cvlan);
	71
8f256622 PNA	72	void flow_rule_match_ipv4_addrs(const struct flow_rule *rule,
	73	struct flow_match_ipv4_addrs *out)
	74	{
	75	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_IPV4_ADDRS, out);
	76	}
	77	EXPORT_SYMBOL(flow_rule_match_ipv4_addrs);
	78
	79	void flow_rule_match_ipv6_addrs(const struct flow_rule *rule,
	80	struct flow_match_ipv6_addrs *out)
	81	{
	82	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_IPV6_ADDRS, out);
	83	}
	84	EXPORT_SYMBOL(flow_rule_match_ipv6_addrs);
	85
	86	void flow_rule_match_ip(const struct flow_rule *rule,
	87	struct flow_match_ip *out)
	88	{
	89	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_IP, out);
	90	}
	91	EXPORT_SYMBOL(flow_rule_match_ip);
	92
	93	void flow_rule_match_ports(const struct flow_rule *rule,
	94	struct flow_match_ports *out)
	95	{
	96	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_PORTS, out);
	97	}
	98	EXPORT_SYMBOL(flow_rule_match_ports);
	99
	100	void flow_rule_match_tcp(const struct flow_rule *rule,
	101	struct flow_match_tcp *out)
	102	{
	103	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_TCP, out);
	104	}
	105	EXPORT_SYMBOL(flow_rule_match_tcp);
	106
	107	void flow_rule_match_icmp(const struct flow_rule *rule,
	108	struct flow_match_icmp *out)
	109	{
	110	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ICMP, out);
	111	}
	112	EXPORT_SYMBOL(flow_rule_match_icmp);
	113
	114	void flow_rule_match_mpls(const struct flow_rule *rule,
	115	struct flow_match_mpls *out)
	116	{
	117	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_MPLS, out);
	118	}
	119	EXPORT_SYMBOL(flow_rule_match_mpls);
	120
	121	void flow_rule_match_enc_control(const struct flow_rule *rule,
	122	struct flow_match_control *out)
	123	{
	124	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_CONTROL, out);
	125	}
	126	EXPORT_SYMBOL(flow_rule_match_enc_control);
	127
	128	void flow_rule_match_enc_ipv4_addrs(const struct flow_rule *rule,
	129	struct flow_match_ipv4_addrs *out)
	130	{
	131	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_IPV4_ADDRS, out);
	132	}
	133	EXPORT_SYMBOL(flow_rule_match_enc_ipv4_addrs);
	134
	135	void flow_rule_match_enc_ipv6_addrs(const struct flow_rule *rule,
136	struct flow_match_ipv6_addrs *out)
137	{
138	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_IPV6_ADDRS, out);
139	}
140	EXPORT_SYMBOL(flow_rule_match_enc_ipv6_addrs);
141
142	void flow_rule_match_enc_ip(const struct flow_rule *rule,
143	struct flow_match_ip *out)
144	{
145	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_IP, out);
146	}
147	EXPORT_SYMBOL(flow_rule_match_enc_ip);
148
149	void flow_rule_match_enc_ports(const struct flow_rule *rule,
150	struct flow_match_ports *out)
151	{
152	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_PORTS, out);
153	}
154	EXPORT_SYMBOL(flow_rule_match_enc_ports);
155
156	void flow_rule_match_enc_keyid(const struct flow_rule *rule,
157	struct flow_match_enc_keyid *out)
158	{
159	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_KEYID, out);
160	}
161	EXPORT_SYMBOL(flow_rule_match_enc_keyid);
162
163	void flow_rule_match_enc_opts(const struct flow_rule *rule,
164	struct flow_match_enc_opts *out)
165	{
166	FLOW_DISSECTOR_MATCH(rule, FLOW_DISSECTOR_KEY_ENC_OPTS, out);
167	}
168	EXPORT_SYMBOL(flow_rule_match_enc_opts);
4e95bc26	169
a7323311	170	struct flow_block_cb flow_block_cb_alloc(flow_setup_cb_t cb,
d63db30c PNA	171	void cb_ident, void cb_priv,
	172	void (release)(void cb_priv))
	173	{
	174	struct flow_block_cb *block_cb;
	175
	176	block_cb = kzalloc(sizeof(*block_cb), GFP_KERNEL);
	177	if (!block_cb)
	178	return ERR_PTR(-ENOMEM);
	179
	180	block_cb->cb = cb;
	181	block_cb->cb_ident = cb_ident;
	182	block_cb->cb_priv = cb_priv;
	183	block_cb->release = release;
	184
	185	return block_cb;
	186	}
	187	EXPORT_SYMBOL(flow_block_cb_alloc);
	188
	189	void flow_block_cb_free(struct flow_block_cb *block_cb)
	190	{
	191	if (block_cb->release)
	192	block_cb->release(block_cb->cb_priv);
	193
	194	kfree(block_cb);
	195	}
	196	EXPORT_SYMBOL(flow_block_cb_free);
	197
14bfb13f	198	struct flow_block_cb flow_block_cb_lookup(struct flow_block block,
a7323311	199	flow_setup_cb_t cb, void cb_ident)
da3eeb90 PNA	200	{
	201	struct flow_block_cb *block_cb;
	202
14bfb13f	203	list_for_each_entry(block_cb, &block->cb_list, list) {
0c7294dd	204	if (block_cb->cb == cb &&
da3eeb90 PNA	205	block_cb->cb_ident == cb_ident)
	206	return block_cb;
	207	}
	208
	209	return NULL;
	210	}
	211	EXPORT_SYMBOL(flow_block_cb_lookup);
	212
67bd0d5e PNA	213	void flow_block_cb_priv(struct flow_block_cb block_cb)
	214	{
	215	return block_cb->cb_priv;
	216	}
	217	EXPORT_SYMBOL(flow_block_cb_priv);
	218
	219	void flow_block_cb_incref(struct flow_block_cb *block_cb)
	220	{
	221	block_cb->refcnt++;
	222	}
	223	EXPORT_SYMBOL(flow_block_cb_incref);
	224
	225	unsigned int flow_block_cb_decref(struct flow_block_cb *block_cb)
	226	{
	227	return --block_cb->refcnt;
	228	}
	229	EXPORT_SYMBOL(flow_block_cb_decref);
	230
a7323311	231	bool flow_block_cb_is_busy(flow_setup_cb_t cb, void cb_ident,
0d4fd02e PNA	232	struct list_head *driver_block_list)
	233	{
	234	struct flow_block_cb *block_cb;
	235
	236	list_for_each_entry(block_cb, driver_block_list, driver_list) {
	237	if (block_cb->cb == cb &&
	238	block_cb->cb_ident == cb_ident)
	239	return true;
	240	}
	241
	242	return false;
	243	}
	244	EXPORT_SYMBOL(flow_block_cb_is_busy);
	245
4e95bc26 PNA	246	int flow_block_cb_setup_simple(struct flow_block_offload *f,
4e95bc26 PNA	247	struct list_head *driver_block_list,
a7323311 PNA	248	flow_setup_cb_t *cb,
a7323311 PNA	249	void cb_ident, void cb_priv,
4e95bc26 PNA	250	bool ingress_only)
4e95bc26 PNA	251	{
955bcb6e PNA	252	struct flow_block_cb *block_cb;
955bcb6e PNA	253
4e95bc26	254	if (ingress_only &&
32f8c409	255	f->binder_type != FLOW_BLOCK_BINDER_TYPE_CLSACT_INGRESS)
4e95bc26 PNA	256	return -EOPNOTSUPP;
	257
	258	f->driver_block_list = driver_block_list;
	259
	260	switch (f->command) {
9c0e189e	261	case FLOW_BLOCK_BIND:
0d4fd02e PNA	262	if (flow_block_cb_is_busy(cb, cb_ident, driver_block_list))
	263	return -EBUSY;
	264
0c7294dd	265	block_cb = flow_block_cb_alloc(cb, cb_ident, cb_priv, NULL);
955bcb6e PNA	266	if (IS_ERR(block_cb))
	267	return PTR_ERR(block_cb);
	268
	269	flow_block_cb_add(block_cb, f);
	270	list_add_tail(&block_cb->driver_list, driver_block_list);
	271	return 0;
9c0e189e	272	case FLOW_BLOCK_UNBIND:
14bfb13f	273	block_cb = flow_block_cb_lookup(f->block, cb, cb_ident);
955bcb6e PNA	274	if (!block_cb)
	275	return -ENOENT;
	276
	277	flow_block_cb_remove(block_cb, f);
	278	list_del(&block_cb->driver_list);
4e95bc26 PNA	279	return 0;
	280	default:
	281	return -EOPNOTSUPP;
	282	}
	283	}
	284	EXPORT_SYMBOL(flow_block_cb_setup_simple);
4e481908	285
1150ab0f	286	static LIST_HEAD(block_ing_cb_list);
1150ab0f	287
4e481908	288	static struct rhashtable indr_setup_block_ht;
	289
	290	struct flow_indr_block_cb {
	291	struct list_head list;
	292	void *cb_priv;
	293	flow_indr_block_bind_cb_t *cb;
	294	void *cb_ident;
	295	};
	296
	297	struct flow_indr_block_dev {
	298	struct rhash_head ht_node;
	299	struct net_device *dev;
	300	unsigned int refcnt;
4e481908	301	struct list_head cb_list;
	302	};
	303
	304	static const struct rhashtable_params flow_indr_setup_block_ht_params = {
	305	.key_offset = offsetof(struct flow_indr_block_dev, dev),
	306	.head_offset = offsetof(struct flow_indr_block_dev, ht_node),
	307	.key_len = sizeof(struct net_device *),
	308	};
	309
	310	static struct flow_indr_block_dev *
	311	flow_indr_block_dev_lookup(struct net_device *dev)
	312	{
	313	return rhashtable_lookup_fast(&indr_setup_block_ht, &dev,
	314	flow_indr_setup_block_ht_params);
	315	}
	316
	317	static struct flow_indr_block_dev *
	318	flow_indr_block_dev_get(struct net_device *dev)
	319	{
	320	struct flow_indr_block_dev *indr_dev;
	321
	322	indr_dev = flow_indr_block_dev_lookup(dev);
	323	if (indr_dev)
	324	goto inc_ref;
	325
	326	indr_dev = kzalloc(sizeof(*indr_dev), GFP_KERNEL);
	327	if (!indr_dev)
	328	return NULL;
	329
	330	INIT_LIST_HEAD(&indr_dev->cb_list);
	331	indr_dev->dev = dev;
	332	if (rhashtable_insert_fast(&indr_setup_block_ht, &indr_dev->ht_node,
	333	flow_indr_setup_block_ht_params)) {
	334	kfree(indr_dev);
	335	return NULL;
	336	}
	337
	338	inc_ref:
	339	indr_dev->refcnt++;
	340	return indr_dev;
	341	}
	342
	343	static void flow_indr_block_dev_put(struct flow_indr_block_dev *indr_dev)
	344	{
	345	if (--indr_dev->refcnt)
	346	return;
	347
	348	rhashtable_remove_fast(&indr_setup_block_ht, &indr_dev->ht_node,
	349	flow_indr_setup_block_ht_params);
	350	kfree(indr_dev);
	351	}
	352
	353	static struct flow_indr_block_cb *
	354	flow_indr_block_cb_lookup(struct flow_indr_block_dev *indr_dev,
	355	flow_indr_block_bind_cb_t cb, void cb_ident)
	356	{
	357	struct flow_indr_block_cb *indr_block_cb;
	358
	359	list_for_each_entry(indr_block_cb, &indr_dev->cb_list, list)
	360	if (indr_block_cb->cb == cb &&
	361	indr_block_cb->cb_ident == cb_ident)
	362	return indr_block_cb;
	363	return NULL;
	364	}
365
366	static struct flow_indr_block_cb *
367	flow_indr_block_cb_add(struct flow_indr_block_dev indr_dev, void cb_priv,
368	flow_indr_block_bind_cb_t cb, void cb_ident)
369	{
370	struct flow_indr_block_cb *indr_block_cb;
371
372	indr_block_cb = flow_indr_block_cb_lookup(indr_dev, cb, cb_ident);
373	if (indr_block_cb)
374	return ERR_PTR(-EEXIST);
375
376	indr_block_cb = kzalloc(sizeof(*indr_block_cb), GFP_KERNEL);
377	if (!indr_block_cb)
378	return ERR_PTR(-ENOMEM);
379
380	indr_block_cb->cb_priv = cb_priv;
381	indr_block_cb->cb = cb;
382	indr_block_cb->cb_ident = cb_ident;
383	list_add(&indr_block_cb->list, &indr_dev->cb_list);
384
385	return indr_block_cb;
386	}
387
388	static void flow_indr_block_cb_del(struct flow_indr_block_cb *indr_block_cb)
389	{
390	list_del(&indr_block_cb->list);
391	kfree(indr_block_cb);
392	}
393
607f625b VB	394	static DEFINE_MUTEX(flow_indr_block_ing_cb_lock);
607f625b VB	395
1150ab0f	396	static void flow_block_ing_cmd(struct net_device *dev,
	397	flow_indr_block_bind_cb_t *cb,
	398	void *cb_priv,
	399	enum flow_block_command command)
	400	{
	401	struct flow_indr_block_ing_entry *entry;
	402
607f625b VB	403	mutex_lock(&flow_indr_block_ing_cb_lock);
607f625b VB	404	list_for_each_entry(entry, &block_ing_cb_list, list) {
1150ab0f	405	entry->cb(dev, cb, cb_priv, command);
1150ab0f	406	}
607f625b	407	mutex_unlock(&flow_indr_block_ing_cb_lock);
1150ab0f	408	}
1150ab0f	409
4e481908	410	int __flow_indr_block_cb_register(struct net_device dev, void cb_priv,
	411	flow_indr_block_bind_cb_t *cb,
	412	void *cb_ident)
	413	{
	414	struct flow_indr_block_cb *indr_block_cb;
	415	struct flow_indr_block_dev *indr_dev;
	416	int err;
	417
	418	indr_dev = flow_indr_block_dev_get(dev);
	419	if (!indr_dev)
	420	return -ENOMEM;
	421
	422	indr_block_cb = flow_indr_block_cb_add(indr_dev, cb_priv, cb, cb_ident);
	423	err = PTR_ERR_OR_ZERO(indr_block_cb);
	424	if (err)
	425	goto err_dev_put;
	426
1150ab0f	427	flow_block_ing_cmd(dev, indr_block_cb->cb, indr_block_cb->cb_priv,
1150ab0f	428	FLOW_BLOCK_BIND);
4e481908	429
	430	return 0;
	431
	432	err_dev_put:
	433	flow_indr_block_dev_put(indr_dev);
	434	return err;
	435	}
	436	EXPORT_SYMBOL_GPL(__flow_indr_block_cb_register);
	437
	438	int flow_indr_block_cb_register(struct net_device dev, void cb_priv,
	439	flow_indr_block_bind_cb_t *cb,
	440	void *cb_ident)
	441	{
	442	int err;
	443
	444	rtnl_lock();
	445	err = __flow_indr_block_cb_register(dev, cb_priv, cb, cb_ident);
	446	rtnl_unlock();
	447
	448	return err;
	449	}
	450	EXPORT_SYMBOL_GPL(flow_indr_block_cb_register);
	451
	452	void __flow_indr_block_cb_unregister(struct net_device *dev,
	453	flow_indr_block_bind_cb_t *cb,
	454	void *cb_ident)
	455	{
	456	struct flow_indr_block_cb *indr_block_cb;
	457	struct flow_indr_block_dev *indr_dev;
	458
	459	indr_dev = flow_indr_block_dev_lookup(dev);
	460	if (!indr_dev)
	461	return;
	462
	463	indr_block_cb = flow_indr_block_cb_lookup(indr_dev, cb, cb_ident);
	464	if (!indr_block_cb)
	465	return;
	466
1150ab0f	467	flow_block_ing_cmd(dev, indr_block_cb->cb, indr_block_cb->cb_priv,
1150ab0f	468	FLOW_BLOCK_UNBIND);
4e481908	469
	470	flow_indr_block_cb_del(indr_block_cb);
	471	flow_indr_block_dev_put(indr_dev);
	472	}
	473	EXPORT_SYMBOL_GPL(__flow_indr_block_cb_unregister);
	474
	475	void flow_indr_block_cb_unregister(struct net_device *dev,
	476	flow_indr_block_bind_cb_t *cb,
	477	void *cb_ident)
	478	{
	479	rtnl_lock();
	480	__flow_indr_block_cb_unregister(dev, cb, cb_ident);
	481	rtnl_unlock();
	482	}
	483	EXPORT_SYMBOL_GPL(flow_indr_block_cb_unregister);
	484
	485	void flow_indr_block_call(struct net_device *dev,
4e481908	486	struct flow_block_offload *bo,
	487	enum flow_block_command command)
	488	{
	489	struct flow_indr_block_cb *indr_block_cb;
	490	struct flow_indr_block_dev *indr_dev;
	491
	492	indr_dev = flow_indr_block_dev_lookup(dev);
	493	if (!indr_dev)
	494	return;
	495
4e481908	496	list_for_each_entry(indr_block_cb, &indr_dev->cb_list, list)
	497	indr_block_cb->cb(dev, indr_block_cb->cb_priv, TC_SETUP_BLOCK,
	498	bo);
	499	}
	500	EXPORT_SYMBOL_GPL(flow_indr_block_call);
	501
1150ab0f	502	void flow_indr_add_block_ing_cb(struct flow_indr_block_ing_entry *entry)
	503	{
	504	mutex_lock(&flow_indr_block_ing_cb_lock);
607f625b	505	list_add_tail(&entry->list, &block_ing_cb_list);
1150ab0f	506	mutex_unlock(&flow_indr_block_ing_cb_lock);
	507	}
	508	EXPORT_SYMBOL_GPL(flow_indr_add_block_ing_cb);
	509
	510	void flow_indr_del_block_ing_cb(struct flow_indr_block_ing_entry *entry)
	511	{
	512	mutex_lock(&flow_indr_block_ing_cb_lock);
607f625b	513	list_del(&entry->list);
1150ab0f	514	mutex_unlock(&flow_indr_block_ing_cb_lock);
	515	}
	516	EXPORT_SYMBOL_GPL(flow_indr_del_block_ing_cb);
	517
4e481908	518	static int __init init_flow_indr_rhashtable(void)
	519	{
	520	return rhashtable_init(&indr_setup_block_ht,
	521	&flow_indr_setup_block_ht_params);
	522	}
	523	subsys_initcall(init_flow_indr_rhashtable);