|  | /* | 
|  | * net/sched/mirred.c	packet mirroring and redirect actions | 
|  | * | 
|  | *		This program is free software; you can redistribute it and/or | 
|  | *		modify it under the terms of the GNU General Public License | 
|  | *		as published by the Free Software Foundation; either version | 
|  | *		2 of the License, or (at your option) any later version. | 
|  | * | 
|  | * Authors:	Jamal Hadi Salim (2002-4) | 
|  | * | 
|  | * TODO: Add ingress support (and socket redirect support) | 
|  | * | 
|  | */ | 
|  |  | 
|  | #include <asm/uaccess.h> | 
|  | #include <asm/system.h> | 
|  | #include <asm/bitops.h> | 
|  | #include <linux/config.h> | 
|  | #include <linux/types.h> | 
|  | #include <linux/kernel.h> | 
|  | #include <linux/sched.h> | 
|  | #include <linux/string.h> | 
|  | #include <linux/mm.h> | 
|  | #include <linux/socket.h> | 
|  | #include <linux/sockios.h> | 
|  | #include <linux/in.h> | 
|  | #include <linux/errno.h> | 
|  | #include <linux/interrupt.h> | 
|  | #include <linux/netdevice.h> | 
|  | #include <linux/skbuff.h> | 
|  | #include <linux/rtnetlink.h> | 
|  | #include <linux/module.h> | 
|  | #include <linux/init.h> | 
|  | #include <linux/proc_fs.h> | 
|  | #include <net/sock.h> | 
|  | #include <net/pkt_sched.h> | 
|  | #include <linux/tc_act/tc_mirred.h> | 
|  | #include <net/tc_act/tc_mirred.h> | 
|  |  | 
|  | #include <linux/etherdevice.h> | 
|  | #include <linux/if_arp.h> | 
|  |  | 
|  |  | 
|  | /* use generic hash table */ | 
|  | #define MY_TAB_SIZE     8 | 
|  | #define MY_TAB_MASK     (MY_TAB_SIZE - 1) | 
|  | static u32 idx_gen; | 
|  | static struct tcf_mirred *tcf_mirred_ht[MY_TAB_SIZE]; | 
|  | static DEFINE_RWLOCK(mirred_lock); | 
|  |  | 
|  | /* ovewrride the defaults */ | 
|  | #define tcf_st		tcf_mirred | 
|  | #define tc_st		tc_mirred | 
|  | #define tcf_t_lock	mirred_lock | 
|  | #define tcf_ht		tcf_mirred_ht | 
|  |  | 
|  | #define CONFIG_NET_ACT_INIT 1 | 
|  | #include <net/pkt_act.h> | 
|  |  | 
|  | static inline int | 
|  | tcf_mirred_release(struct tcf_mirred *p, int bind) | 
|  | { | 
|  | if (p) { | 
|  | if (bind) | 
|  | p->bindcnt--; | 
|  | p->refcnt--; | 
|  | if(!p->bindcnt && p->refcnt <= 0) { | 
|  | dev_put(p->dev); | 
|  | tcf_hash_destroy(p); | 
|  | return 1; | 
|  | } | 
|  | } | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | static int | 
|  | tcf_mirred_init(struct rtattr *rta, struct rtattr *est, struct tc_action *a, | 
|  | int ovr, int bind) | 
|  | { | 
|  | struct rtattr *tb[TCA_MIRRED_MAX]; | 
|  | struct tc_mirred *parm; | 
|  | struct tcf_mirred *p; | 
|  | struct net_device *dev = NULL; | 
|  | int ret = 0; | 
|  | int ok_push = 0; | 
|  |  | 
|  | if (rta == NULL || rtattr_parse_nested(tb, TCA_MIRRED_MAX, rta) < 0) | 
|  | return -EINVAL; | 
|  |  | 
|  | if (tb[TCA_MIRRED_PARMS-1] == NULL || | 
|  | RTA_PAYLOAD(tb[TCA_MIRRED_PARMS-1]) < sizeof(*parm)) | 
|  | return -EINVAL; | 
|  | parm = RTA_DATA(tb[TCA_MIRRED_PARMS-1]); | 
|  |  | 
|  | if (parm->ifindex) { | 
|  | dev = __dev_get_by_index(parm->ifindex); | 
|  | if (dev == NULL) | 
|  | return -ENODEV; | 
|  | switch (dev->type) { | 
|  | case ARPHRD_TUNNEL: | 
|  | case ARPHRD_TUNNEL6: | 
|  | case ARPHRD_SIT: | 
|  | case ARPHRD_IPGRE: | 
|  | case ARPHRD_VOID: | 
|  | case ARPHRD_NONE: | 
|  | ok_push = 0; | 
|  | break; | 
|  | default: | 
|  | ok_push = 1; | 
|  | break; | 
|  | } | 
|  | } | 
|  |  | 
|  | p = tcf_hash_check(parm->index, a, ovr, bind); | 
|  | if (p == NULL) { | 
|  | if (!parm->ifindex) | 
|  | return -EINVAL; | 
|  | p = tcf_hash_create(parm->index, est, a, sizeof(*p), ovr, bind); | 
|  | if (p == NULL) | 
|  | return -ENOMEM; | 
|  | ret = ACT_P_CREATED; | 
|  | } else { | 
|  | if (!ovr) { | 
|  | tcf_mirred_release(p, bind); | 
|  | return -EEXIST; | 
|  | } | 
|  | } | 
|  |  | 
|  | spin_lock_bh(&p->lock); | 
|  | p->action = parm->action; | 
|  | p->eaction = parm->eaction; | 
|  | if (parm->ifindex) { | 
|  | p->ifindex = parm->ifindex; | 
|  | if (ret != ACT_P_CREATED) | 
|  | dev_put(p->dev); | 
|  | p->dev = dev; | 
|  | dev_hold(dev); | 
|  | p->ok_push = ok_push; | 
|  | } | 
|  | spin_unlock_bh(&p->lock); | 
|  | if (ret == ACT_P_CREATED) | 
|  | tcf_hash_insert(p); | 
|  |  | 
|  | DPRINTK("tcf_mirred_init index %d action %d eaction %d device %s " | 
|  | "ifindex %d\n", parm->index, parm->action, parm->eaction, | 
|  | dev->name, parm->ifindex); | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | static int | 
|  | tcf_mirred_cleanup(struct tc_action *a, int bind) | 
|  | { | 
|  | struct tcf_mirred *p = PRIV(a, mirred); | 
|  |  | 
|  | if (p != NULL) | 
|  | return tcf_mirred_release(p, bind); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | static int | 
|  | tcf_mirred(struct sk_buff **pskb, struct tc_action *a) | 
|  | { | 
|  | struct tcf_mirred *p = PRIV(a, mirred); | 
|  | struct net_device *dev; | 
|  | struct sk_buff *skb2 = NULL; | 
|  | struct sk_buff *skb = *pskb; | 
|  | u32 at = G_TC_AT(skb->tc_verd); | 
|  |  | 
|  | spin_lock(&p->lock); | 
|  |  | 
|  | dev = p->dev; | 
|  | p->tm.lastuse = jiffies; | 
|  |  | 
|  | if (!(dev->flags&IFF_UP) ) { | 
|  | if (net_ratelimit()) | 
|  | printk("mirred to Houston: device %s is gone!\n", | 
|  | dev->name); | 
|  | bad_mirred: | 
|  | if (skb2 != NULL) | 
|  | kfree_skb(skb2); | 
|  | p->qstats.overlimits++; | 
|  | p->bstats.bytes += skb->len; | 
|  | p->bstats.packets++; | 
|  | spin_unlock(&p->lock); | 
|  | /* should we be asking for packet to be dropped? | 
|  | * may make sense for redirect case only | 
|  | */ | 
|  | return TC_ACT_SHOT; | 
|  | } | 
|  |  | 
|  | skb2 = skb_clone(skb, GFP_ATOMIC); | 
|  | if (skb2 == NULL) | 
|  | goto bad_mirred; | 
|  | if (p->eaction != TCA_EGRESS_MIRROR && p->eaction != TCA_EGRESS_REDIR) { | 
|  | if (net_ratelimit()) | 
|  | printk("tcf_mirred unknown action %d\n", p->eaction); | 
|  | goto bad_mirred; | 
|  | } | 
|  |  | 
|  | p->bstats.bytes += skb2->len; | 
|  | p->bstats.packets++; | 
|  | if (!(at & AT_EGRESS)) | 
|  | if (p->ok_push) | 
|  | skb_push(skb2, skb2->dev->hard_header_len); | 
|  |  | 
|  | /* mirror is always swallowed */ | 
|  | if (p->eaction != TCA_EGRESS_MIRROR) | 
|  | skb2->tc_verd = SET_TC_FROM(skb2->tc_verd, at); | 
|  |  | 
|  | skb2->dev = dev; | 
|  | skb2->input_dev = skb->dev; | 
|  | dev_queue_xmit(skb2); | 
|  | spin_unlock(&p->lock); | 
|  | return p->action; | 
|  | } | 
|  |  | 
|  | static int | 
|  | tcf_mirred_dump(struct sk_buff *skb, struct tc_action *a, int bind, int ref) | 
|  | { | 
|  | unsigned char *b = skb->tail; | 
|  | struct tc_mirred opt; | 
|  | struct tcf_mirred *p = PRIV(a, mirred); | 
|  | struct tcf_t t; | 
|  |  | 
|  | opt.index = p->index; | 
|  | opt.action = p->action; | 
|  | opt.refcnt = p->refcnt - ref; | 
|  | opt.bindcnt = p->bindcnt - bind; | 
|  | opt.eaction = p->eaction; | 
|  | opt.ifindex = p->ifindex; | 
|  | DPRINTK("tcf_mirred_dump index %d action %d eaction %d ifindex %d\n", | 
|  | p->index, p->action, p->eaction, p->ifindex); | 
|  | RTA_PUT(skb, TCA_MIRRED_PARMS, sizeof(opt), &opt); | 
|  | t.install = jiffies_to_clock_t(jiffies - p->tm.install); | 
|  | t.lastuse = jiffies_to_clock_t(jiffies - p->tm.lastuse); | 
|  | t.expires = jiffies_to_clock_t(p->tm.expires); | 
|  | RTA_PUT(skb, TCA_MIRRED_TM, sizeof(t), &t); | 
|  | return skb->len; | 
|  |  | 
|  | rtattr_failure: | 
|  | skb_trim(skb, b - skb->data); | 
|  | return -1; | 
|  | } | 
|  |  | 
|  | static struct tc_action_ops act_mirred_ops = { | 
|  | .kind		=	"mirred", | 
|  | .type		=	TCA_ACT_MIRRED, | 
|  | .capab		=	TCA_CAP_NONE, | 
|  | .owner		=	THIS_MODULE, | 
|  | .act		=	tcf_mirred, | 
|  | .dump		=	tcf_mirred_dump, | 
|  | .cleanup	=	tcf_mirred_cleanup, | 
|  | .lookup		=	tcf_hash_search, | 
|  | .init		=	tcf_mirred_init, | 
|  | .walk		=	tcf_generic_walker | 
|  | }; | 
|  |  | 
|  | MODULE_AUTHOR("Jamal Hadi Salim(2002)"); | 
|  | MODULE_DESCRIPTION("Device Mirror/redirect actions"); | 
|  | MODULE_LICENSE("GPL"); | 
|  |  | 
|  | static int __init | 
|  | mirred_init_module(void) | 
|  | { | 
|  | printk("Mirror/redirect action on\n"); | 
|  | return tcf_register_action(&act_mirred_ops); | 
|  | } | 
|  |  | 
|  | static void __exit | 
|  | mirred_cleanup_module(void) | 
|  | { | 
|  | tcf_unregister_action(&act_mirred_ops); | 
|  | } | 
|  |  | 
|  | module_init(mirred_init_module); | 
|  | module_exit(mirred_cleanup_module); |