1 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
2 #ifndef __LINUX_PKT_CLS_H
3 #define __LINUX_PKT_CLS_H
5 #include <linux/types.h>
6 #include <linux/pkt_sched.h>
8 #define TC_COOKIE_MAX_SIZE 16
10 /* Action attributes */
21 TCA_ACT_USED_HW_STATS,
25 #define TCA_ACT_FLAGS_NO_PERCPU_STATS 1 /* Don't use percpu allocator for
30 * When user does not pass the attribute, he does not care.
31 * It is the same as if he would pass the attribute with
32 * all supported bits set.
33 * In case no bits are set, user is not interested in getting any HW statistics.
35 #define TCA_ACT_HW_STATS_IMMEDIATE (1 << 0) /* Means that in dump, user
36 * gets the current HW stats
37 * state from the device
38 * queried at the dump time.
40 #define TCA_ACT_HW_STATS_DELAYED (1 << 1) /* Means that in dump, user gets
41 * HW stats that might be out of date
42 * for some time, maybe couple of
43 * seconds. This is the case when
44 * driver polls stats updates
45 * periodically or when it gets async
46 * stats update from the device.
49 #define TCA_ACT_MAX __TCA_ACT_MAX
50 #define TCA_OLD_COMPAT (TCA_ACT_MAX+1)
51 #define TCA_ACT_MAX_PRIO 32
52 #define TCA_ACT_BIND 1
53 #define TCA_ACT_NOBIND 0
54 #define TCA_ACT_UNBIND 1
55 #define TCA_ACT_NOUNBIND 0
56 #define TCA_ACT_REPLACE 1
57 #define TCA_ACT_NOREPLACE 0
59 #define TC_ACT_UNSPEC (-1)
61 #define TC_ACT_RECLASSIFY 1
64 #define TC_ACT_STOLEN 4
65 #define TC_ACT_QUEUED 5
66 #define TC_ACT_REPEAT 6
67 #define TC_ACT_REDIRECT 7
68 #define TC_ACT_TRAP 8 /* For hw path, this means "trap to cpu"
69 * and don't further process the frame
70 * in hardware. For sw path, this is
71 * equivalent of TC_ACT_STOLEN - drop
72 * the skb and act like everything
75 #define TC_ACT_VALUE_MAX TC_ACT_TRAP
77 /* There is a special kind of actions called "extended actions",
78 * which need a value parameter. These have a local opcode located in
79 * the highest nibble, starting from 1. The rest of the bits
80 * are used to carry the value. These two parts together make
83 #define __TC_ACT_EXT_SHIFT 28
84 #define __TC_ACT_EXT(local) ((local) << __TC_ACT_EXT_SHIFT)
85 #define TC_ACT_EXT_VAL_MASK ((1 << __TC_ACT_EXT_SHIFT) - 1)
86 #define TC_ACT_EXT_OPCODE(combined) ((combined) & (~TC_ACT_EXT_VAL_MASK))
87 #define TC_ACT_EXT_CMP(combined, opcode) (TC_ACT_EXT_OPCODE(combined) == opcode)
89 #define TC_ACT_JUMP __TC_ACT_EXT(1)
90 #define TC_ACT_GOTO_CHAIN __TC_ACT_EXT(2)
91 #define TC_ACT_EXT_OPCODE_MAX TC_ACT_GOTO_CHAIN
93 /* These macros are put here for binary compatibility with userspace apps that
94 * make use of them. For kernel code and new userspace apps, use the TCA_ID_*
97 #define TCA_ACT_GACT 5
99 #define TCA_ACT_PEDIT 7
100 #define TCA_ACT_MIRRED 8
101 #define TCA_ACT_NAT 9
102 #define TCA_ACT_XT 10
103 #define TCA_ACT_SKBEDIT 11
104 #define TCA_ACT_VLAN 12
105 #define TCA_ACT_BPF 13
106 #define TCA_ACT_CONNMARK 14
107 #define TCA_ACT_SKBMOD 15
108 #define TCA_ACT_CSUM 16
109 #define TCA_ACT_TUNNEL_KEY 17
110 #define TCA_ACT_SIMP 22
111 #define TCA_ACT_IFE 25
112 #define TCA_ACT_SAMPLE 26
114 /* Action type identifiers*/
118 TCA_ID_GACT = TCA_ACT_GACT,
119 TCA_ID_IPT = TCA_ACT_IPT,
120 TCA_ID_PEDIT = TCA_ACT_PEDIT,
121 TCA_ID_MIRRED = TCA_ACT_MIRRED,
122 TCA_ID_NAT = TCA_ACT_NAT,
123 TCA_ID_XT = TCA_ACT_XT,
124 TCA_ID_SKBEDIT = TCA_ACT_SKBEDIT,
125 TCA_ID_VLAN = TCA_ACT_VLAN,
126 TCA_ID_BPF = TCA_ACT_BPF,
127 TCA_ID_CONNMARK = TCA_ACT_CONNMARK,
128 TCA_ID_SKBMOD = TCA_ACT_SKBMOD,
129 TCA_ID_CSUM = TCA_ACT_CSUM,
130 TCA_ID_TUNNEL_KEY = TCA_ACT_TUNNEL_KEY,
131 TCA_ID_SIMP = TCA_ACT_SIMP,
132 TCA_ID_IFE = TCA_ACT_IFE,
133 TCA_ID_SAMPLE = TCA_ACT_SAMPLE,
138 /* other actions go here */
142 #define TCA_ID_MAX __TCA_ID_MAX
147 #define TC_POLICE_UNSPEC TC_ACT_UNSPEC
148 #define TC_POLICE_OK TC_ACT_OK
149 #define TC_POLICE_RECLASSIFY TC_ACT_RECLASSIFY
150 #define TC_POLICE_SHOT TC_ACT_SHOT
151 #define TC_POLICE_PIPE TC_ACT_PIPE
156 struct tc_ratespec rate;
157 struct tc_ratespec peakrate;
192 TCA_POLICE_PEAKRATE64,
194 #define TCA_POLICE_RESULT TCA_POLICE_RESULT
197 #define TCA_POLICE_MAX (__TCA_POLICE_MAX - 1)
199 /* tca flags definitions */
200 #define TCA_CLS_FLAGS_SKIP_HW (1 << 0) /* don't offload filter to HW */
201 #define TCA_CLS_FLAGS_SKIP_SW (1 << 1) /* don't use filter in SW */
202 #define TCA_CLS_FLAGS_IN_HW (1 << 2) /* filter is offloaded to HW */
203 #define TCA_CLS_FLAGS_NOT_IN_HW (1 << 3) /* filter isn't offloaded to HW */
204 #define TCA_CLS_FLAGS_VERBOSE (1 << 4) /* verbose logging */
208 #define TC_U32_HTID(h) ((h)&0xFFF00000)
209 #define TC_U32_USERHTID(h) (TC_U32_HTID(h)>>20)
210 #define TC_U32_HASH(h) (((h)>>12)&0xFF)
211 #define TC_U32_NODE(h) ((h)&0xFFF)
212 #define TC_U32_KEY(h) ((h)&0xFFFFF)
213 #define TC_U32_UNSPEC 0
214 #define TC_U32_ROOT (0xFFF00000)
233 #define TCA_U32_MAX (__TCA_U32_MAX - 1)
244 unsigned char offshift;
253 struct tc_u32_key keys[0];
270 #define TC_U32_TERMINAL 1
271 #define TC_U32_OFFSET 2
272 #define TC_U32_VAROFFSET 4
275 #define TC_U32_MAXDEPTH 8
291 #define TCA_RSVP_MAX (__TCA_RSVP_MAX - 1 )
299 struct tc_rsvp_pinfo {
300 struct tc_rsvp_gpi dpi;
301 struct tc_rsvp_gpi spi;
321 #define TCA_ROUTE4_MAX (__TCA_ROUTE4_MAX - 1)
331 TCA_FW_ACT, /* used by CONFIG_NET_CLS_ACT */
336 #define TCA_FW_MAX (__TCA_FW_MAX - 1)
338 /* TC index filter */
345 TCA_TCINDEX_FALL_THROUGH,
352 #define TCA_TCINDEX_MAX (__TCA_TCINDEX_MAX - 1)
368 FLOW_KEY_NFCT_PROTO_SRC,
369 FLOW_KEY_NFCT_PROTO_DST,
378 #define FLOW_KEY_MAX (__FLOW_KEY_MAX - 1)
402 #define TCA_FLOW_MAX (__TCA_FLOW_MAX - 1)
406 struct tc_basic_pcnt {
422 #define TCA_BASIC_MAX (__TCA_BASIC_MAX - 1)
425 /* Cgroup classifier */
435 #define TCA_CGROUP_MAX (__TCA_CGROUP_MAX - 1)
439 #define TCA_BPF_FLAG_ACT_DIRECT (1 << 0)
457 #define TCA_BPF_MAX (__TCA_BPF_MAX - 1)
459 /* Flower classifier */
466 TCA_FLOWER_KEY_ETH_DST, /* ETH_ALEN */
467 TCA_FLOWER_KEY_ETH_DST_MASK, /* ETH_ALEN */
468 TCA_FLOWER_KEY_ETH_SRC, /* ETH_ALEN */
469 TCA_FLOWER_KEY_ETH_SRC_MASK, /* ETH_ALEN */
470 TCA_FLOWER_KEY_ETH_TYPE, /* be16 */
471 TCA_FLOWER_KEY_IP_PROTO, /* u8 */
472 TCA_FLOWER_KEY_IPV4_SRC, /* be32 */
473 TCA_FLOWER_KEY_IPV4_SRC_MASK, /* be32 */
474 TCA_FLOWER_KEY_IPV4_DST, /* be32 */
475 TCA_FLOWER_KEY_IPV4_DST_MASK, /* be32 */
476 TCA_FLOWER_KEY_IPV6_SRC, /* struct in6_addr */
477 TCA_FLOWER_KEY_IPV6_SRC_MASK, /* struct in6_addr */
478 TCA_FLOWER_KEY_IPV6_DST, /* struct in6_addr */
479 TCA_FLOWER_KEY_IPV6_DST_MASK, /* struct in6_addr */
480 TCA_FLOWER_KEY_TCP_SRC, /* be16 */
481 TCA_FLOWER_KEY_TCP_DST, /* be16 */
482 TCA_FLOWER_KEY_UDP_SRC, /* be16 */
483 TCA_FLOWER_KEY_UDP_DST, /* be16 */
486 TCA_FLOWER_KEY_VLAN_ID, /* be16 */
487 TCA_FLOWER_KEY_VLAN_PRIO, /* u8 */
488 TCA_FLOWER_KEY_VLAN_ETH_TYPE, /* be16 */
490 TCA_FLOWER_KEY_ENC_KEY_ID, /* be32 */
491 TCA_FLOWER_KEY_ENC_IPV4_SRC, /* be32 */
492 TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK,/* be32 */
493 TCA_FLOWER_KEY_ENC_IPV4_DST, /* be32 */
494 TCA_FLOWER_KEY_ENC_IPV4_DST_MASK,/* be32 */
495 TCA_FLOWER_KEY_ENC_IPV6_SRC, /* struct in6_addr */
496 TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK,/* struct in6_addr */
497 TCA_FLOWER_KEY_ENC_IPV6_DST, /* struct in6_addr */
498 TCA_FLOWER_KEY_ENC_IPV6_DST_MASK,/* struct in6_addr */
500 TCA_FLOWER_KEY_TCP_SRC_MASK, /* be16 */
501 TCA_FLOWER_KEY_TCP_DST_MASK, /* be16 */
502 TCA_FLOWER_KEY_UDP_SRC_MASK, /* be16 */
503 TCA_FLOWER_KEY_UDP_DST_MASK, /* be16 */
504 TCA_FLOWER_KEY_SCTP_SRC_MASK, /* be16 */
505 TCA_FLOWER_KEY_SCTP_DST_MASK, /* be16 */
507 TCA_FLOWER_KEY_SCTP_SRC, /* be16 */
508 TCA_FLOWER_KEY_SCTP_DST, /* be16 */
510 TCA_FLOWER_KEY_ENC_UDP_SRC_PORT, /* be16 */
511 TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK, /* be16 */
512 TCA_FLOWER_KEY_ENC_UDP_DST_PORT, /* be16 */
513 TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK, /* be16 */
515 TCA_FLOWER_KEY_FLAGS, /* be32 */
516 TCA_FLOWER_KEY_FLAGS_MASK, /* be32 */
518 TCA_FLOWER_KEY_ICMPV4_CODE, /* u8 */
519 TCA_FLOWER_KEY_ICMPV4_CODE_MASK,/* u8 */
520 TCA_FLOWER_KEY_ICMPV4_TYPE, /* u8 */
521 TCA_FLOWER_KEY_ICMPV4_TYPE_MASK,/* u8 */
522 TCA_FLOWER_KEY_ICMPV6_CODE, /* u8 */
523 TCA_FLOWER_KEY_ICMPV6_CODE_MASK,/* u8 */
524 TCA_FLOWER_KEY_ICMPV6_TYPE, /* u8 */
525 TCA_FLOWER_KEY_ICMPV6_TYPE_MASK,/* u8 */
527 TCA_FLOWER_KEY_ARP_SIP, /* be32 */
528 TCA_FLOWER_KEY_ARP_SIP_MASK, /* be32 */
529 TCA_FLOWER_KEY_ARP_TIP, /* be32 */
530 TCA_FLOWER_KEY_ARP_TIP_MASK, /* be32 */
531 TCA_FLOWER_KEY_ARP_OP, /* u8 */
532 TCA_FLOWER_KEY_ARP_OP_MASK, /* u8 */
533 TCA_FLOWER_KEY_ARP_SHA, /* ETH_ALEN */
534 TCA_FLOWER_KEY_ARP_SHA_MASK, /* ETH_ALEN */
535 TCA_FLOWER_KEY_ARP_THA, /* ETH_ALEN */
536 TCA_FLOWER_KEY_ARP_THA_MASK, /* ETH_ALEN */
538 TCA_FLOWER_KEY_MPLS_TTL, /* u8 - 8 bits */
539 TCA_FLOWER_KEY_MPLS_BOS, /* u8 - 1 bit */
540 TCA_FLOWER_KEY_MPLS_TC, /* u8 - 3 bits */
541 TCA_FLOWER_KEY_MPLS_LABEL, /* be32 - 20 bits */
543 TCA_FLOWER_KEY_TCP_FLAGS, /* be16 */
544 TCA_FLOWER_KEY_TCP_FLAGS_MASK, /* be16 */
546 TCA_FLOWER_KEY_IP_TOS, /* u8 */
547 TCA_FLOWER_KEY_IP_TOS_MASK, /* u8 */
548 TCA_FLOWER_KEY_IP_TTL, /* u8 */
549 TCA_FLOWER_KEY_IP_TTL_MASK, /* u8 */
551 TCA_FLOWER_KEY_CVLAN_ID, /* be16 */
552 TCA_FLOWER_KEY_CVLAN_PRIO, /* u8 */
553 TCA_FLOWER_KEY_CVLAN_ETH_TYPE, /* be16 */
555 TCA_FLOWER_KEY_ENC_IP_TOS, /* u8 */
556 TCA_FLOWER_KEY_ENC_IP_TOS_MASK, /* u8 */
557 TCA_FLOWER_KEY_ENC_IP_TTL, /* u8 */
558 TCA_FLOWER_KEY_ENC_IP_TTL_MASK, /* u8 */
560 TCA_FLOWER_KEY_ENC_OPTS,
561 TCA_FLOWER_KEY_ENC_OPTS_MASK,
563 TCA_FLOWER_IN_HW_COUNT,
565 TCA_FLOWER_KEY_PORT_SRC_MIN, /* be16 */
566 TCA_FLOWER_KEY_PORT_SRC_MAX, /* be16 */
567 TCA_FLOWER_KEY_PORT_DST_MIN, /* be16 */
568 TCA_FLOWER_KEY_PORT_DST_MAX, /* be16 */
570 TCA_FLOWER_KEY_CT_STATE, /* u16 */
571 TCA_FLOWER_KEY_CT_STATE_MASK, /* u16 */
572 TCA_FLOWER_KEY_CT_ZONE, /* u16 */
573 TCA_FLOWER_KEY_CT_ZONE_MASK, /* u16 */
574 TCA_FLOWER_KEY_CT_MARK, /* u32 */
575 TCA_FLOWER_KEY_CT_MARK_MASK, /* u32 */
576 TCA_FLOWER_KEY_CT_LABELS, /* u128 */
577 TCA_FLOWER_KEY_CT_LABELS_MASK, /* u128 */
579 TCA_FLOWER_KEY_MPLS_OPTS,
581 TCA_FLOWER_KEY_HASH, /* u32 */
582 TCA_FLOWER_KEY_HASH_MASK, /* u32 */
587 #define TCA_FLOWER_MAX (__TCA_FLOWER_MAX - 1)
590 TCA_FLOWER_KEY_CT_FLAGS_NEW = 1 << 0, /* Beginning of a new connection. */
591 TCA_FLOWER_KEY_CT_FLAGS_ESTABLISHED = 1 << 1, /* Part of an existing connection. */
592 TCA_FLOWER_KEY_CT_FLAGS_RELATED = 1 << 2, /* Related to an established connection. */
593 TCA_FLOWER_KEY_CT_FLAGS_TRACKED = 1 << 3, /* Conntrack has occurred. */
597 TCA_FLOWER_KEY_ENC_OPTS_UNSPEC,
598 TCA_FLOWER_KEY_ENC_OPTS_GENEVE, /* Nested
599 * TCA_FLOWER_KEY_ENC_OPT_GENEVE_
602 TCA_FLOWER_KEY_ENC_OPTS_VXLAN, /* Nested
603 * TCA_FLOWER_KEY_ENC_OPT_VXLAN_
606 TCA_FLOWER_KEY_ENC_OPTS_ERSPAN, /* Nested
607 * TCA_FLOWER_KEY_ENC_OPT_ERSPAN_
610 __TCA_FLOWER_KEY_ENC_OPTS_MAX,
613 #define TCA_FLOWER_KEY_ENC_OPTS_MAX (__TCA_FLOWER_KEY_ENC_OPTS_MAX - 1)
616 TCA_FLOWER_KEY_ENC_OPT_GENEVE_UNSPEC,
617 TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS, /* u16 */
618 TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE, /* u8 */
619 TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA, /* 4 to 128 bytes */
621 __TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX,
624 #define TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX \
625 (__TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX - 1)
628 TCA_FLOWER_KEY_ENC_OPT_VXLAN_UNSPEC,
629 TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP, /* u32 */
630 __TCA_FLOWER_KEY_ENC_OPT_VXLAN_MAX,
633 #define TCA_FLOWER_KEY_ENC_OPT_VXLAN_MAX \
634 (__TCA_FLOWER_KEY_ENC_OPT_VXLAN_MAX - 1)
637 TCA_FLOWER_KEY_ENC_OPT_ERSPAN_UNSPEC,
638 TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER, /* u8 */
639 TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX, /* be32 */
640 TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR, /* u8 */
641 TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID, /* u8 */
642 __TCA_FLOWER_KEY_ENC_OPT_ERSPAN_MAX,
645 #define TCA_FLOWER_KEY_ENC_OPT_ERSPAN_MAX \
646 (__TCA_FLOWER_KEY_ENC_OPT_ERSPAN_MAX - 1)
649 TCA_FLOWER_KEY_MPLS_OPTS_UNSPEC,
650 TCA_FLOWER_KEY_MPLS_OPTS_LSE,
651 __TCA_FLOWER_KEY_MPLS_OPTS_MAX,
654 #define TCA_FLOWER_KEY_MPLS_OPTS_MAX (__TCA_FLOWER_KEY_MPLS_OPTS_MAX - 1)
657 TCA_FLOWER_KEY_MPLS_OPT_LSE_UNSPEC,
658 TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH,
659 TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL,
660 TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS,
661 TCA_FLOWER_KEY_MPLS_OPT_LSE_TC,
662 TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL,
663 __TCA_FLOWER_KEY_MPLS_OPT_LSE_MAX,
666 #define TCA_FLOWER_KEY_MPLS_OPT_LSE_MAX \
667 (__TCA_FLOWER_KEY_MPLS_OPT_LSE_MAX - 1)
670 TCA_FLOWER_KEY_FLAGS_IS_FRAGMENT = (1 << 0),
671 TCA_FLOWER_KEY_FLAGS_FRAG_IS_FIRST = (1 << 1),
674 #define TCA_FLOWER_MASK_FLAGS_RANGE (1 << 0) /* Range-based match */
676 /* Match-all classifier */
678 struct tc_matchall_pcnt {
684 TCA_MATCHALL_CLASSID,
692 #define TCA_MATCHALL_MAX (__TCA_MATCHALL_MAX - 1)
694 /* Extended Matches */
696 struct tcf_ematch_tree_hdr {
702 TCA_EMATCH_TREE_UNSPEC,
704 TCA_EMATCH_TREE_LIST,
705 __TCA_EMATCH_TREE_MAX
707 #define TCA_EMATCH_TREE_MAX (__TCA_EMATCH_TREE_MAX - 1)
709 struct tcf_ematch_hdr {
713 __u16 pad; /* currently unused */
717 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
718 * +-----------------------+-+-+---+
720 * +-----------------------+-+-+---+
722 * R(2) ::= relation to next ematch
723 * where: 0 0 END (last ematch)
726 * 1 1 Unused (invalid)
727 * I(1) ::= invert result
728 * S(1) ::= simple payload
730 #define TCF_EM_REL_END 0
731 #define TCF_EM_REL_AND (1<<0)
732 #define TCF_EM_REL_OR (1<<1)
733 #define TCF_EM_INVERT (1<<2)
734 #define TCF_EM_SIMPLE (1<<3)
736 #define TCF_EM_REL_MASK 3
737 #define TCF_EM_REL_VALID(v) (((v) & TCF_EM_REL_MASK) != TCF_EM_REL_MASK)
745 #define TCF_LAYER_MAX (__TCF_LAYER_MAX - 1)
747 /* Ematch type assignments
748 * 1..32767 Reserved for ematches inside kernel tree
749 * 32768..65535 Free to use, not reliable
751 #define TCF_EM_CONTAINER 0
753 #define TCF_EM_NBYTE 2
755 #define TCF_EM_META 4
756 #define TCF_EM_TEXT 5
757 #define TCF_EM_VLAN 6
758 #define TCF_EM_CANID 7
759 #define TCF_EM_IPSET 8