| /* | 
 |  * net/sched/mirred.c	packet mirroring and redirect actions | 
 |  * | 
 |  *		This program is free software; you can redistribute it and/or | 
 |  *		modify it under the terms of the GNU General Public License | 
 |  *		as published by the Free Software Foundation; either version | 
 |  *		2 of the License, or (at your option) any later version. | 
 |  * | 
 |  * Authors:	Jamal Hadi Salim (2002-4) | 
 |  * | 
 |  * TODO: Add ingress support (and socket redirect support) | 
 |  * | 
 |  */ | 
 |  | 
 | #include <asm/uaccess.h> | 
 | #include <asm/system.h> | 
 | #include <asm/bitops.h> | 
 | #include <linux/config.h> | 
 | #include <linux/types.h> | 
 | #include <linux/kernel.h> | 
 | #include <linux/sched.h> | 
 | #include <linux/string.h> | 
 | #include <linux/mm.h> | 
 | #include <linux/socket.h> | 
 | #include <linux/sockios.h> | 
 | #include <linux/in.h> | 
 | #include <linux/errno.h> | 
 | #include <linux/interrupt.h> | 
 | #include <linux/netdevice.h> | 
 | #include <linux/skbuff.h> | 
 | #include <linux/rtnetlink.h> | 
 | #include <linux/module.h> | 
 | #include <linux/init.h> | 
 | #include <linux/proc_fs.h> | 
 | #include <net/sock.h> | 
 | #include <net/pkt_sched.h> | 
 | #include <linux/tc_act/tc_mirred.h> | 
 | #include <net/tc_act/tc_mirred.h> | 
 |  | 
 | #include <linux/etherdevice.h> | 
 | #include <linux/if_arp.h> | 
 |  | 
 |  | 
 | /* use generic hash table */ | 
 | #define MY_TAB_SIZE     8 | 
 | #define MY_TAB_MASK     (MY_TAB_SIZE - 1) | 
 | static u32 idx_gen; | 
 | static struct tcf_mirred *tcf_mirred_ht[MY_TAB_SIZE]; | 
 | static DEFINE_RWLOCK(mirred_lock); | 
 |  | 
 | /* ovewrride the defaults */ | 
 | #define tcf_st		tcf_mirred | 
 | #define tc_st		tc_mirred | 
 | #define tcf_t_lock	mirred_lock | 
 | #define tcf_ht		tcf_mirred_ht | 
 |  | 
 | #define CONFIG_NET_ACT_INIT 1 | 
 | #include <net/pkt_act.h> | 
 |  | 
 | static inline int | 
 | tcf_mirred_release(struct tcf_mirred *p, int bind) | 
 | { | 
 | 	if (p) { | 
 | 		if (bind) | 
 | 			p->bindcnt--; | 
 | 		p->refcnt--; | 
 | 		if(!p->bindcnt && p->refcnt <= 0) { | 
 | 			dev_put(p->dev); | 
 | 			tcf_hash_destroy(p); | 
 | 			return 1; | 
 | 		} | 
 | 	} | 
 | 	return 0; | 
 | } | 
 |  | 
 | static int | 
 | tcf_mirred_init(struct rtattr *rta, struct rtattr *est, struct tc_action *a, | 
 |                 int ovr, int bind) | 
 | { | 
 | 	struct rtattr *tb[TCA_MIRRED_MAX]; | 
 | 	struct tc_mirred *parm; | 
 | 	struct tcf_mirred *p; | 
 | 	struct net_device *dev = NULL; | 
 | 	int ret = 0; | 
 | 	int ok_push = 0; | 
 |  | 
 | 	if (rta == NULL || rtattr_parse_nested(tb, TCA_MIRRED_MAX, rta) < 0) | 
 | 		return -EINVAL; | 
 |  | 
 | 	if (tb[TCA_MIRRED_PARMS-1] == NULL || | 
 | 	    RTA_PAYLOAD(tb[TCA_MIRRED_PARMS-1]) < sizeof(*parm)) | 
 | 		return -EINVAL; | 
 | 	parm = RTA_DATA(tb[TCA_MIRRED_PARMS-1]); | 
 |  | 
 | 	if (parm->ifindex) { | 
 | 		dev = __dev_get_by_index(parm->ifindex); | 
 | 		if (dev == NULL) | 
 | 			return -ENODEV; | 
 | 		switch (dev->type) { | 
 | 			case ARPHRD_TUNNEL: | 
 | 			case ARPHRD_TUNNEL6: | 
 | 			case ARPHRD_SIT: | 
 | 			case ARPHRD_IPGRE: | 
 | 			case ARPHRD_VOID: | 
 | 			case ARPHRD_NONE: | 
 | 				ok_push = 0; | 
 | 				break; | 
 | 			default: | 
 | 				ok_push = 1; | 
 | 				break; | 
 | 		} | 
 | 	} | 
 |  | 
 | 	p = tcf_hash_check(parm->index, a, ovr, bind); | 
 | 	if (p == NULL) { | 
 | 		if (!parm->ifindex) | 
 | 			return -EINVAL; | 
 | 		p = tcf_hash_create(parm->index, est, a, sizeof(*p), ovr, bind); | 
 | 		if (p == NULL) | 
 | 			return -ENOMEM; | 
 | 		ret = ACT_P_CREATED; | 
 | 	} else { | 
 | 		if (!ovr) { | 
 | 			tcf_mirred_release(p, bind); | 
 | 			return -EEXIST; | 
 | 		} | 
 | 	} | 
 |  | 
 | 	spin_lock_bh(&p->lock); | 
 | 	p->action = parm->action; | 
 | 	p->eaction = parm->eaction; | 
 | 	if (parm->ifindex) { | 
 | 		p->ifindex = parm->ifindex; | 
 | 		if (ret != ACT_P_CREATED) | 
 | 			dev_put(p->dev); | 
 | 		p->dev = dev; | 
 | 		dev_hold(dev); | 
 | 		p->ok_push = ok_push; | 
 | 	} | 
 | 	spin_unlock_bh(&p->lock); | 
 | 	if (ret == ACT_P_CREATED) | 
 | 		tcf_hash_insert(p); | 
 |  | 
 | 	DPRINTK("tcf_mirred_init index %d action %d eaction %d device %s " | 
 | 	        "ifindex %d\n", parm->index, parm->action, parm->eaction, | 
 | 	        dev->name, parm->ifindex); | 
 | 	return ret; | 
 | } | 
 |  | 
 | static int | 
 | tcf_mirred_cleanup(struct tc_action *a, int bind) | 
 | { | 
 | 	struct tcf_mirred *p = PRIV(a, mirred); | 
 |  | 
 | 	if (p != NULL) | 
 | 		return tcf_mirred_release(p, bind); | 
 | 	return 0; | 
 | } | 
 |  | 
 | static int | 
 | tcf_mirred(struct sk_buff **pskb, struct tc_action *a, struct tcf_result *res) | 
 | { | 
 | 	struct tcf_mirred *p = PRIV(a, mirred); | 
 | 	struct net_device *dev; | 
 | 	struct sk_buff *skb2 = NULL; | 
 | 	struct sk_buff *skb = *pskb; | 
 | 	u32 at = G_TC_AT(skb->tc_verd); | 
 |  | 
 | 	spin_lock(&p->lock); | 
 |  | 
 | 	dev = p->dev; | 
 | 	p->tm.lastuse = jiffies; | 
 |  | 
 | 	if (!(dev->flags&IFF_UP) ) { | 
 | 		if (net_ratelimit()) | 
 | 			printk("mirred to Houston: device %s is gone!\n", | 
 | 			       dev->name); | 
 | bad_mirred: | 
 | 		if (skb2 != NULL) | 
 | 			kfree_skb(skb2); | 
 | 		p->qstats.overlimits++; | 
 | 		p->bstats.bytes += skb->len; | 
 | 		p->bstats.packets++; | 
 | 		spin_unlock(&p->lock); | 
 | 		/* should we be asking for packet to be dropped? | 
 | 		 * may make sense for redirect case only | 
 | 		*/ | 
 | 		return TC_ACT_SHOT; | 
 | 	} | 
 |  | 
 | 	skb2 = skb_clone(skb, GFP_ATOMIC); | 
 | 	if (skb2 == NULL) | 
 | 		goto bad_mirred; | 
 | 	if (p->eaction != TCA_EGRESS_MIRROR && p->eaction != TCA_EGRESS_REDIR) { | 
 | 		if (net_ratelimit()) | 
 | 			printk("tcf_mirred unknown action %d\n", p->eaction); | 
 | 		goto bad_mirred; | 
 | 	} | 
 |  | 
 | 	p->bstats.bytes += skb2->len; | 
 | 	p->bstats.packets++; | 
 | 	if (!(at & AT_EGRESS)) | 
 | 		if (p->ok_push) | 
 | 			skb_push(skb2, skb2->dev->hard_header_len); | 
 |  | 
 | 	/* mirror is always swallowed */ | 
 | 	if (p->eaction != TCA_EGRESS_MIRROR) | 
 | 		skb2->tc_verd = SET_TC_FROM(skb2->tc_verd, at); | 
 |  | 
 | 	skb2->dev = dev; | 
 | 	skb2->input_dev = skb->dev; | 
 | 	dev_queue_xmit(skb2); | 
 | 	spin_unlock(&p->lock); | 
 | 	return p->action; | 
 | } | 
 |  | 
 | static int | 
 | tcf_mirred_dump(struct sk_buff *skb, struct tc_action *a, int bind, int ref) | 
 | { | 
 | 	unsigned char *b = skb->tail; | 
 | 	struct tc_mirred opt; | 
 | 	struct tcf_mirred *p = PRIV(a, mirred); | 
 | 	struct tcf_t t; | 
 |  | 
 | 	opt.index = p->index; | 
 | 	opt.action = p->action; | 
 | 	opt.refcnt = p->refcnt - ref; | 
 | 	opt.bindcnt = p->bindcnt - bind; | 
 | 	opt.eaction = p->eaction; | 
 | 	opt.ifindex = p->ifindex; | 
 | 	DPRINTK("tcf_mirred_dump index %d action %d eaction %d ifindex %d\n", | 
 | 	         p->index, p->action, p->eaction, p->ifindex); | 
 | 	RTA_PUT(skb, TCA_MIRRED_PARMS, sizeof(opt), &opt); | 
 | 	t.install = jiffies_to_clock_t(jiffies - p->tm.install); | 
 | 	t.lastuse = jiffies_to_clock_t(jiffies - p->tm.lastuse); | 
 | 	t.expires = jiffies_to_clock_t(p->tm.expires); | 
 | 	RTA_PUT(skb, TCA_MIRRED_TM, sizeof(t), &t); | 
 | 	return skb->len; | 
 |  | 
 |       rtattr_failure: | 
 | 	skb_trim(skb, b - skb->data); | 
 | 	return -1; | 
 | } | 
 |  | 
 | static struct tc_action_ops act_mirred_ops = { | 
 | 	.kind		=	"mirred", | 
 | 	.type		=	TCA_ACT_MIRRED, | 
 | 	.capab		=	TCA_CAP_NONE, | 
 | 	.owner		=	THIS_MODULE, | 
 | 	.act		=	tcf_mirred, | 
 | 	.dump		=	tcf_mirred_dump, | 
 | 	.cleanup	=	tcf_mirred_cleanup, | 
 | 	.lookup		=	tcf_hash_search, | 
 | 	.init		=	tcf_mirred_init, | 
 | 	.walk		=	tcf_generic_walker | 
 | }; | 
 |  | 
 | MODULE_AUTHOR("Jamal Hadi Salim(2002)"); | 
 | MODULE_DESCRIPTION("Device Mirror/redirect actions"); | 
 | MODULE_LICENSE("GPL"); | 
 |  | 
 | static int __init | 
 | mirred_init_module(void) | 
 | { | 
 | 	printk("Mirror/redirect action on\n"); | 
 | 	return tcf_register_action(&act_mirred_ops); | 
 | } | 
 |  | 
 | static void __exit | 
 | mirred_cleanup_module(void) | 
 | { | 
 | 	tcf_unregister_action(&act_mirred_ops); | 
 | } | 
 |  | 
 | module_init(mirred_init_module); | 
 | module_exit(mirred_cleanup_module); |