| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 1 | /* | 
|  | 2 | * Operations on the network namespace | 
|  | 3 | */ | 
|  | 4 | #ifndef __NET_NET_NAMESPACE_H | 
|  | 5 | #define __NET_NET_NAMESPACE_H | 
|  | 6 |  | 
|  | 7 | #include <asm/atomic.h> | 
|  | 8 | #include <linux/workqueue.h> | 
|  | 9 | #include <linux/list.h> | 
|  | 10 |  | 
| Pavel Emelyanov | 8efa6e9 | 2008-03-31 19:41:14 -0700 | [diff] [blame] | 11 | #include <net/netns/core.h> | 
| Pavel Emelyanov | 852566f | 2008-07-18 04:01:24 -0700 | [diff] [blame] | 12 | #include <net/netns/mib.h> | 
| Denis V. Lunev | a0a53c8 | 2007-12-11 04:19:17 -0800 | [diff] [blame] | 13 | #include <net/netns/unix.h> | 
| Denis V. Lunev | 2aaef4e | 2007-12-11 04:19:54 -0800 | [diff] [blame] | 14 | #include <net/netns/packet.h> | 
| Pavel Emelyanov | 8afd351 | 2007-12-16 13:29:36 -0800 | [diff] [blame] | 15 | #include <net/netns/ipv4.h> | 
| Daniel Lezcano | b0f159d | 2008-01-10 02:49:06 -0800 | [diff] [blame] | 16 | #include <net/netns/ipv6.h> | 
| Pavel Emelyanov | 67019cc | 2008-04-13 22:28:42 -0700 | [diff] [blame] | 17 | #include <net/netns/dccp.h> | 
| Alexey Dobriyan | 8d87005 | 2008-01-31 04:02:13 -0800 | [diff] [blame] | 18 | #include <net/netns/x_tables.h> | 
| Alexey Dobriyan | dfdb8d7 | 2008-10-08 11:35:02 +0200 | [diff] [blame] | 19 | #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE) | 
|  | 20 | #include <net/netns/conntrack.h> | 
|  | 21 | #endif | 
| Alexey Dobriyan | d62ddc2 | 2008-11-25 17:14:31 -0800 | [diff] [blame] | 22 | #include <net/netns/xfrm.h> | 
| Denis V. Lunev | a0a53c8 | 2007-12-11 04:19:17 -0800 | [diff] [blame] | 23 |  | 
| Eric W. Biederman | 457c4cb | 2007-09-12 12:01:34 +0200 | [diff] [blame] | 24 | struct proc_dir_entry; | 
| Eric W. Biederman | 2774c7a | 2007-09-26 22:10:56 -0700 | [diff] [blame] | 25 | struct net_device; | 
| Denis V. Lunev | 97c53ca | 2007-11-19 22:26:51 -0800 | [diff] [blame] | 26 | struct sock; | 
| Pavel Emelyanov | 1597fbc | 2007-12-01 23:51:01 +1100 | [diff] [blame] | 27 | struct ctl_table_header; | 
| Pavel Emelyanov | dec827d | 2008-04-15 00:36:08 -0700 | [diff] [blame] | 28 | struct net_generic; | 
| Pavel Emelyanov | 1597fbc | 2007-12-01 23:51:01 +1100 | [diff] [blame] | 29 |  | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 30 | struct net { | 
|  | 31 | atomic_t		count;		/* To decided when the network | 
|  | 32 | *  namespace should be freed. | 
|  | 33 | */ | 
| Denis V. Lunev | 5d1e446 | 2008-04-16 01:58:04 -0700 | [diff] [blame] | 34 | #ifdef NETNS_REFCNT_DEBUG | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 35 | atomic_t		use_count;	/* To track references we | 
|  | 36 | * destroy on demand | 
|  | 37 | */ | 
| Denis V. Lunev | 5d1e446 | 2008-04-16 01:58:04 -0700 | [diff] [blame] | 38 | #endif | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 39 | struct list_head	list;		/* list of network namespaces */ | 
|  | 40 | struct work_struct	work;		/* work struct for freeing */ | 
| Eric W. Biederman | 457c4cb | 2007-09-12 12:01:34 +0200 | [diff] [blame] | 41 |  | 
|  | 42 | struct proc_dir_entry 	*proc_net; | 
|  | 43 | struct proc_dir_entry 	*proc_net_stat; | 
| Eric W. Biederman | 881d966 | 2007-09-17 11:56:21 -0700 | [diff] [blame] | 44 |  | 
| Al Viro | 7345509 | 2008-07-14 21:22:20 -0400 | [diff] [blame] | 45 | #ifdef CONFIG_SYSCTL | 
|  | 46 | struct ctl_table_set	sysctls; | 
|  | 47 | #endif | 
| Eric W. Biederman | 95bdfcc | 2007-11-30 23:55:42 +1100 | [diff] [blame] | 48 |  | 
| Eric W. Biederman | 2774c7a | 2007-09-26 22:10:56 -0700 | [diff] [blame] | 49 | struct net_device       *loopback_dev;          /* The loopback */ | 
|  | 50 |  | 
| Eric W. Biederman | 881d966 | 2007-09-17 11:56:21 -0700 | [diff] [blame] | 51 | struct list_head 	dev_base_head; | 
|  | 52 | struct hlist_head 	*dev_name_head; | 
|  | 53 | struct hlist_head	*dev_index_head; | 
| Denis V. Lunev | 97c53ca | 2007-11-19 22:26:51 -0800 | [diff] [blame] | 54 |  | 
| Denis V. Lunev | 5fd30ee | 2008-01-10 03:20:28 -0800 | [diff] [blame] | 55 | /* core fib_rules */ | 
|  | 56 | struct list_head	rules_ops; | 
|  | 57 | spinlock_t		rules_mod_lock; | 
|  | 58 |  | 
| Denis V. Lunev | 97c53ca | 2007-11-19 22:26:51 -0800 | [diff] [blame] | 59 | struct sock 		*rtnl;			/* rtnetlink socket */ | 
| Denis V. Lunev | d12d01d | 2007-11-19 22:28:35 -0800 | [diff] [blame] | 60 |  | 
| Pavel Emelyanov | 8efa6e9 | 2008-03-31 19:41:14 -0700 | [diff] [blame] | 61 | struct netns_core	core; | 
| Pavel Emelyanov | 852566f | 2008-07-18 04:01:24 -0700 | [diff] [blame] | 62 | struct netns_mib	mib; | 
| Denis V. Lunev | 2aaef4e | 2007-12-11 04:19:54 -0800 | [diff] [blame] | 63 | struct netns_packet	packet; | 
| Denis V. Lunev | a0a53c8 | 2007-12-11 04:19:17 -0800 | [diff] [blame] | 64 | struct netns_unix	unx; | 
| Pavel Emelyanov | 8afd351 | 2007-12-16 13:29:36 -0800 | [diff] [blame] | 65 | struct netns_ipv4	ipv4; | 
| Daniel Lezcano | b0f159d | 2008-01-10 02:49:06 -0800 | [diff] [blame] | 66 | #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE) | 
|  | 67 | struct netns_ipv6	ipv6; | 
|  | 68 | #endif | 
| Pavel Emelyanov | 67019cc | 2008-04-13 22:28:42 -0700 | [diff] [blame] | 69 | #if defined(CONFIG_IP_DCCP) || defined(CONFIG_IP_DCCP_MODULE) | 
|  | 70 | struct netns_dccp	dccp; | 
|  | 71 | #endif | 
| Alexey Dobriyan | 8d87005 | 2008-01-31 04:02:13 -0800 | [diff] [blame] | 72 | #ifdef CONFIG_NETFILTER | 
|  | 73 | struct netns_xt		xt; | 
| Alexey Dobriyan | dfdb8d7 | 2008-10-08 11:35:02 +0200 | [diff] [blame] | 74 | #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE) | 
|  | 75 | struct netns_ct		ct; | 
|  | 76 | #endif | 
| Alexey Dobriyan | 8d87005 | 2008-01-31 04:02:13 -0800 | [diff] [blame] | 77 | #endif | 
| Alexey Dobriyan | d62ddc2 | 2008-11-25 17:14:31 -0800 | [diff] [blame] | 78 | #ifdef CONFIG_XFRM | 
|  | 79 | struct netns_xfrm	xfrm; | 
|  | 80 | #endif | 
| Pavel Emelyanov | dec827d | 2008-04-15 00:36:08 -0700 | [diff] [blame] | 81 | struct net_generic	*gen; | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 82 | }; | 
|  | 83 |  | 
| Denis V. Lunev | 225c0a0 | 2008-04-02 00:09:29 -0700 | [diff] [blame] | 84 |  | 
| Denis V. Lunev | c0f3932 | 2008-04-02 00:10:28 -0700 | [diff] [blame] | 85 | #include <linux/seq_file_net.h> | 
|  | 86 |  | 
| Daniel Lezcano | 4fabcd7 | 2007-09-13 09:16:29 +0200 | [diff] [blame] | 87 | /* Init's network namespace */ | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 88 | extern struct net init_net; | 
| Denis V. Lunev | a4aa834 | 2008-04-03 13:04:33 -0700 | [diff] [blame] | 89 |  | 
|  | 90 | #ifdef CONFIG_NET | 
| Daniel Lezcano | 4fabcd7 | 2007-09-13 09:16:29 +0200 | [diff] [blame] | 91 | #define INIT_NET_NS(net_ns) .net_ns = &init_net, | 
| Daniel Lezcano | 4fabcd7 | 2007-09-13 09:16:29 +0200 | [diff] [blame] | 92 |  | 
| Eric W. Biederman | 9dd776b | 2007-09-26 22:04:26 -0700 | [diff] [blame] | 93 | extern struct net *copy_net_ns(unsigned long flags, struct net *net_ns); | 
| Denis V. Lunev | 225c0a0 | 2008-04-02 00:09:29 -0700 | [diff] [blame] | 94 |  | 
|  | 95 | #else /* CONFIG_NET */ | 
|  | 96 |  | 
|  | 97 | #define INIT_NET_NS(net_ns) | 
|  | 98 |  | 
| Eric W. Biederman | 9dd776b | 2007-09-26 22:04:26 -0700 | [diff] [blame] | 99 | static inline struct net *copy_net_ns(unsigned long flags, struct net *net_ns) | 
|  | 100 | { | 
|  | 101 | /* There is nothing to copy so this is a noop */ | 
|  | 102 | return net_ns; | 
|  | 103 | } | 
| Denis V. Lunev | 225c0a0 | 2008-04-02 00:09:29 -0700 | [diff] [blame] | 104 | #endif /* CONFIG_NET */ | 
|  | 105 |  | 
|  | 106 |  | 
|  | 107 | extern struct list_head net_namespace_list; | 
| Eric W. Biederman | 9dd776b | 2007-09-26 22:04:26 -0700 | [diff] [blame] | 108 |  | 
| Pavel Emelyanov | d465579 | 2007-11-01 00:43:49 -0700 | [diff] [blame] | 109 | #ifdef CONFIG_NET_NS | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 110 | extern void __put_net(struct net *net); | 
|  | 111 |  | 
|  | 112 | static inline struct net *get_net(struct net *net) | 
|  | 113 | { | 
|  | 114 | atomic_inc(&net->count); | 
|  | 115 | return net; | 
|  | 116 | } | 
|  | 117 |  | 
| Eric W. Biederman | 077130c | 2007-09-13 09:18:57 +0200 | [diff] [blame] | 118 | static inline struct net *maybe_get_net(struct net *net) | 
|  | 119 | { | 
|  | 120 | /* Used when we know struct net exists but we | 
|  | 121 | * aren't guaranteed a previous reference count | 
|  | 122 | * exists.  If the reference count is zero this | 
|  | 123 | * function fails and returns NULL. | 
|  | 124 | */ | 
|  | 125 | if (!atomic_inc_not_zero(&net->count)) | 
|  | 126 | net = NULL; | 
|  | 127 | return net; | 
|  | 128 | } | 
|  | 129 |  | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 130 | static inline void put_net(struct net *net) | 
|  | 131 | { | 
|  | 132 | if (atomic_dec_and_test(&net->count)) | 
|  | 133 | __put_net(net); | 
|  | 134 | } | 
|  | 135 |  | 
| YOSHIFUJI Hideaki | 878628f | 2008-03-26 03:57:35 +0900 | [diff] [blame] | 136 | static inline | 
|  | 137 | int net_eq(const struct net *net1, const struct net *net2) | 
|  | 138 | { | 
|  | 139 | return net1 == net2; | 
|  | 140 | } | 
| Pavel Emelyanov | d465579 | 2007-11-01 00:43:49 -0700 | [diff] [blame] | 141 | #else | 
| Eric W. Biederman | b9f75f4 | 2008-06-20 22:16:51 -0700 | [diff] [blame] | 142 |  | 
| Pavel Emelyanov | d465579 | 2007-11-01 00:43:49 -0700 | [diff] [blame] | 143 | static inline struct net *get_net(struct net *net) | 
|  | 144 | { | 
|  | 145 | return net; | 
|  | 146 | } | 
|  | 147 |  | 
|  | 148 | static inline void put_net(struct net *net) | 
|  | 149 | { | 
|  | 150 | } | 
|  | 151 |  | 
| Pavel Emelyanov | d465579 | 2007-11-01 00:43:49 -0700 | [diff] [blame] | 152 | static inline struct net *maybe_get_net(struct net *net) | 
|  | 153 | { | 
|  | 154 | return net; | 
|  | 155 | } | 
| YOSHIFUJI Hideaki | 878628f | 2008-03-26 03:57:35 +0900 | [diff] [blame] | 156 |  | 
|  | 157 | static inline | 
|  | 158 | int net_eq(const struct net *net1, const struct net *net2) | 
|  | 159 | { | 
|  | 160 | return 1; | 
|  | 161 | } | 
| Pavel Emelyanov | d465579 | 2007-11-01 00:43:49 -0700 | [diff] [blame] | 162 | #endif | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 163 |  | 
| Denis V. Lunev | 5d1e446 | 2008-04-16 01:58:04 -0700 | [diff] [blame] | 164 |  | 
|  | 165 | #ifdef NETNS_REFCNT_DEBUG | 
|  | 166 | static inline struct net *hold_net(struct net *net) | 
|  | 167 | { | 
|  | 168 | if (net) | 
|  | 169 | atomic_inc(&net->use_count); | 
|  | 170 | return net; | 
|  | 171 | } | 
|  | 172 |  | 
|  | 173 | static inline void release_net(struct net *net) | 
|  | 174 | { | 
|  | 175 | if (net) | 
|  | 176 | atomic_dec(&net->use_count); | 
|  | 177 | } | 
|  | 178 | #else | 
|  | 179 | static inline struct net *hold_net(struct net *net) | 
|  | 180 | { | 
|  | 181 | return net; | 
|  | 182 | } | 
|  | 183 |  | 
|  | 184 | static inline void release_net(struct net *net) | 
|  | 185 | { | 
|  | 186 | } | 
|  | 187 | #endif | 
|  | 188 |  | 
| Eric Dumazet | 8f424b5 | 2008-11-12 00:53:30 -0800 | [diff] [blame] | 189 | #ifdef CONFIG_NET_NS | 
|  | 190 |  | 
|  | 191 | static inline void write_pnet(struct net **pnet, struct net *net) | 
|  | 192 | { | 
|  | 193 | *pnet = net; | 
|  | 194 | } | 
|  | 195 |  | 
|  | 196 | static inline struct net *read_pnet(struct net * const *pnet) | 
|  | 197 | { | 
|  | 198 | return *pnet; | 
|  | 199 | } | 
|  | 200 |  | 
|  | 201 | #else | 
|  | 202 |  | 
|  | 203 | #define write_pnet(pnet, net)	do { (void)(net);} while (0) | 
|  | 204 | #define read_pnet(pnet)		(&init_net) | 
|  | 205 |  | 
|  | 206 | #endif | 
| Denis V. Lunev | 5d1e446 | 2008-04-16 01:58:04 -0700 | [diff] [blame] | 207 |  | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 208 | #define for_each_net(VAR)				\ | 
|  | 209 | list_for_each_entry(VAR, &net_namespace_list, list) | 
|  | 210 |  | 
| Pavel Emelyanov | 4665079 | 2007-10-08 20:38:39 -0700 | [diff] [blame] | 211 | #ifdef CONFIG_NET_NS | 
|  | 212 | #define __net_init | 
|  | 213 | #define __net_exit | 
| Denis V. Lunev | 022cbae | 2007-11-13 03:23:50 -0800 | [diff] [blame] | 214 | #define __net_initdata | 
| Pavel Emelyanov | 4665079 | 2007-10-08 20:38:39 -0700 | [diff] [blame] | 215 | #else | 
|  | 216 | #define __net_init	__init | 
|  | 217 | #define __net_exit	__exit_refok | 
| Denis V. Lunev | 022cbae | 2007-11-13 03:23:50 -0800 | [diff] [blame] | 218 | #define __net_initdata	__initdata | 
| Pavel Emelyanov | 4665079 | 2007-10-08 20:38:39 -0700 | [diff] [blame] | 219 | #endif | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 220 |  | 
|  | 221 | struct pernet_operations { | 
|  | 222 | struct list_head list; | 
|  | 223 | int (*init)(struct net *net); | 
|  | 224 | void (*exit)(struct net *net); | 
|  | 225 | }; | 
|  | 226 |  | 
| Eric W. Biederman | 17edde5 | 2009-02-22 00:11:09 -0800 | [diff] [blame] | 227 | /* | 
|  | 228 | * Use these carefully.  If you implement a network device and it | 
|  | 229 | * needs per network namespace operations use device pernet operations, | 
|  | 230 | * otherwise use pernet subsys operations. | 
|  | 231 | * | 
|  | 232 | * This is critically important.  Most of the network code cleanup | 
|  | 233 | * runs with the assumption that dev_remove_pack has been called so no | 
|  | 234 | * new packets will arrive during and after the cleanup functions have | 
|  | 235 | * been called.  dev_remove_pack is not per namespace so instead the | 
|  | 236 | * guarantee of no more packets arriving in a network namespace is | 
|  | 237 | * provided by ensuring that all network devices and all sockets have | 
|  | 238 | * left the network namespace before the cleanup methods are called. | 
|  | 239 | * | 
|  | 240 | * For the longest time the ipv4 icmp code was registered as a pernet | 
|  | 241 | * device which caused kernel oops, and panics during network | 
|  | 242 | * namespace cleanup.   So please don't get this wrong. | 
|  | 243 | */ | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 244 | extern int register_pernet_subsys(struct pernet_operations *); | 
|  | 245 | extern void unregister_pernet_subsys(struct pernet_operations *); | 
| Alexey Dobriyan | 485ac57 | 2008-10-30 23:55:16 -0700 | [diff] [blame] | 246 | extern int register_pernet_gen_subsys(int *id, struct pernet_operations *); | 
|  | 247 | extern void unregister_pernet_gen_subsys(int id, struct pernet_operations *); | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 248 | extern int register_pernet_device(struct pernet_operations *); | 
|  | 249 | extern void unregister_pernet_device(struct pernet_operations *); | 
| Pavel Emelyanov | c93cf61 | 2008-04-15 00:35:23 -0700 | [diff] [blame] | 250 | extern int register_pernet_gen_device(int *id, struct pernet_operations *); | 
|  | 251 | extern void unregister_pernet_gen_device(int id, struct pernet_operations *); | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 252 |  | 
| Eric W. Biederman | 95bdfcc | 2007-11-30 23:55:42 +1100 | [diff] [blame] | 253 | struct ctl_path; | 
|  | 254 | struct ctl_table; | 
|  | 255 | struct ctl_table_header; | 
| Pavel Emelyanov | d62c612 | 2008-05-19 13:45:33 -0700 | [diff] [blame] | 256 |  | 
| Eric W. Biederman | 95bdfcc | 2007-11-30 23:55:42 +1100 | [diff] [blame] | 257 | extern struct ctl_table_header *register_net_sysctl_table(struct net *net, | 
|  | 258 | const struct ctl_path *path, struct ctl_table *table); | 
| Pavel Emelyanov | d62c612 | 2008-05-19 13:45:33 -0700 | [diff] [blame] | 259 | extern struct ctl_table_header *register_net_sysctl_rotable( | 
|  | 260 | const struct ctl_path *path, struct ctl_table *table); | 
| Eric W. Biederman | 95bdfcc | 2007-11-30 23:55:42 +1100 | [diff] [blame] | 261 | extern void unregister_net_sysctl_table(struct ctl_table_header *header); | 
|  | 262 |  | 
| Eric W. Biederman | 5f256be | 2007-09-12 11:50:50 +0200 | [diff] [blame] | 263 | #endif /* __NET_NET_NAMESPACE_H */ |