]>
Commit | Line | Data |
---|---|---|
1cb57039 AZ |
1 | /* |
2 | * Copyright (c) 2017 Nicira, Inc. | |
3 | * | |
4 | * This program is free software; you can redistribute it and/or | |
5 | * modify it under the terms of version 2 of the GNU General Public | |
6 | * License as published by the Free Software Foundation. | |
7 | */ | |
8 | ||
9 | #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt | |
10 | ||
11 | #include <linux/if.h> | |
12 | #include <linux/skbuff.h> | |
13 | #include <linux/ip.h> | |
14 | #include <linux/kernel.h> | |
15 | #include <linux/openvswitch.h> | |
8f6d230f | 16 | #include <linux/overflow.h> |
1cb57039 AZ |
17 | #include <linux/netlink.h> |
18 | #include <linux/rculist.h> | |
19 | ||
20 | #include <net/netlink.h> | |
21 | #include <net/genetlink.h> | |
f7246940 | 22 | #include <linux/mm.h> |
1cb57039 AZ |
23 | |
24 | #include "datapath.h" | |
25 | #include "meter.h" | |
26 | ||
27 | #define METER_HASH_BUCKETS 1024 | |
28 | ||
29 | static const struct nla_policy meter_policy[OVS_METER_ATTR_MAX + 1] = { | |
30 | [OVS_METER_ATTR_ID] = { .type = NLA_U32, }, | |
31 | [OVS_METER_ATTR_KBPS] = { .type = NLA_FLAG }, | |
32 | [OVS_METER_ATTR_STATS] = { .len = sizeof(struct ovs_flow_stats) }, | |
33 | [OVS_METER_ATTR_BANDS] = { .type = NLA_NESTED }, | |
34 | [OVS_METER_ATTR_USED] = { .type = NLA_U64 }, | |
35 | [OVS_METER_ATTR_CLEAR] = { .type = NLA_FLAG }, | |
36 | [OVS_METER_ATTR_MAX_METERS] = { .type = NLA_U32 }, | |
37 | [OVS_METER_ATTR_MAX_BANDS] = { .type = NLA_U32 }, | |
38 | }; | |
39 | ||
40 | static const struct nla_policy band_policy[OVS_BAND_ATTR_MAX + 1] = { | |
41 | [OVS_BAND_ATTR_TYPE] = { .type = NLA_U32, }, | |
42 | [OVS_BAND_ATTR_RATE] = { .type = NLA_U32, }, | |
43 | [OVS_BAND_ATTR_BURST] = { .type = NLA_U32, }, | |
44 | [OVS_BAND_ATTR_STATS] = { .len = sizeof(struct ovs_flow_stats) }, | |
45 | }; | |
46 | ||
1cb57039 AZ |
47 | static void ovs_meter_free(struct dp_meter *meter) |
48 | { | |
49 | if (!meter) | |
50 | return; | |
51 | ||
ab86f680 | 52 | kfree_rcu(meter, rcu); |
1cb57039 AZ |
53 | } |
54 | ||
55 | static struct hlist_head *meter_hash_bucket(const struct datapath *dp, | |
56 | u32 meter_id) | |
57 | { | |
58 | return &dp->meters[meter_id & (METER_HASH_BUCKETS - 1)]; | |
59 | } | |
60 | ||
61 | /* Call with ovs_mutex or RCU read lock. */ | |
62 | static struct dp_meter *lookup_meter(const struct datapath *dp, | |
63 | u32 meter_id) | |
64 | { | |
65 | struct dp_meter *meter; | |
66 | struct hlist_head *head; | |
67 | ||
68 | head = meter_hash_bucket(dp, meter_id); | |
69 | hlist_for_each_entry_rcu(meter, head, dp_hash_node) { | |
70 | if (meter->id == meter_id) | |
71 | return meter; | |
72 | } | |
73 | return NULL; | |
74 | } | |
75 | ||
76 | static void attach_meter(struct datapath *dp, struct dp_meter *meter) | |
77 | { | |
78 | struct hlist_head *head = meter_hash_bucket(dp, meter->id); | |
79 | ||
80 | hlist_add_head_rcu(&meter->dp_hash_node, head); | |
81 | } | |
82 | ||
83 | static void detach_meter(struct dp_meter *meter) | |
84 | { | |
85 | ASSERT_OVSL(); | |
86 | if (meter) | |
87 | hlist_del_rcu(&meter->dp_hash_node); | |
88 | } | |
89 | ||
90 | static struct sk_buff * | |
91 | ovs_meter_cmd_reply_start(struct genl_info *info, u8 cmd, | |
92 | struct ovs_header **ovs_reply_header) | |
93 | { | |
94 | struct sk_buff *skb; | |
95 | struct ovs_header *ovs_header = info->userhdr; | |
96 | ||
97 | skb = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC); | |
98 | if (!skb) | |
99 | return ERR_PTR(-ENOMEM); | |
100 | ||
101 | *ovs_reply_header = genlmsg_put(skb, info->snd_portid, | |
102 | info->snd_seq, | |
103 | &dp_meter_genl_family, 0, cmd); | |
b88ec467 | 104 | if (!*ovs_reply_header) { |
1cb57039 AZ |
105 | nlmsg_free(skb); |
106 | return ERR_PTR(-EMSGSIZE); | |
107 | } | |
108 | (*ovs_reply_header)->dp_ifindex = ovs_header->dp_ifindex; | |
109 | ||
110 | return skb; | |
111 | } | |
112 | ||
113 | static int ovs_meter_cmd_reply_stats(struct sk_buff *reply, u32 meter_id, | |
114 | struct dp_meter *meter) | |
115 | { | |
116 | struct nlattr *nla; | |
117 | struct dp_meter_band *band; | |
118 | u16 i; | |
119 | ||
120 | if (nla_put_u32(reply, OVS_METER_ATTR_ID, meter_id)) | |
121 | goto error; | |
122 | ||
123 | if (!meter) | |
124 | return 0; | |
125 | ||
126 | if (nla_put(reply, OVS_METER_ATTR_STATS, | |
127 | sizeof(struct ovs_flow_stats), &meter->stats) || | |
128 | nla_put_u64_64bit(reply, OVS_METER_ATTR_USED, meter->used, | |
129 | OVS_METER_ATTR_PAD)) | |
130 | goto error; | |
131 | ||
132 | nla = nla_nest_start(reply, OVS_METER_ATTR_BANDS); | |
133 | if (!nla) | |
134 | goto error; | |
135 | ||
136 | band = meter->bands; | |
137 | ||
138 | for (i = 0; i < meter->n_bands; ++i, ++band) { | |
139 | struct nlattr *band_nla; | |
140 | ||
141 | band_nla = nla_nest_start(reply, OVS_BAND_ATTR_UNSPEC); | |
142 | if (!band_nla || nla_put(reply, OVS_BAND_ATTR_STATS, | |
143 | sizeof(struct ovs_flow_stats), | |
144 | &band->stats)) | |
145 | goto error; | |
146 | nla_nest_end(reply, band_nla); | |
147 | } | |
148 | nla_nest_end(reply, nla); | |
149 | ||
150 | return 0; | |
151 | error: | |
152 | return -EMSGSIZE; | |
153 | } | |
154 | ||
155 | static int ovs_meter_cmd_features(struct sk_buff *skb, struct genl_info *info) | |
156 | { | |
157 | struct sk_buff *reply; | |
158 | struct ovs_header *ovs_reply_header; | |
159 | struct nlattr *nla, *band_nla; | |
160 | int err; | |
161 | ||
162 | reply = ovs_meter_cmd_reply_start(info, OVS_METER_CMD_FEATURES, | |
163 | &ovs_reply_header); | |
720c5514 | 164 | if (IS_ERR(reply)) |
1cb57039 AZ |
165 | return PTR_ERR(reply); |
166 | ||
167 | if (nla_put_u32(reply, OVS_METER_ATTR_MAX_METERS, U32_MAX) || | |
168 | nla_put_u32(reply, OVS_METER_ATTR_MAX_BANDS, DP_MAX_BANDS)) | |
169 | goto nla_put_failure; | |
170 | ||
171 | nla = nla_nest_start(reply, OVS_METER_ATTR_BANDS); | |
172 | if (!nla) | |
173 | goto nla_put_failure; | |
174 | ||
175 | band_nla = nla_nest_start(reply, OVS_BAND_ATTR_UNSPEC); | |
176 | if (!band_nla) | |
177 | goto nla_put_failure; | |
178 | /* Currently only DROP band type is supported. */ | |
179 | if (nla_put_u32(reply, OVS_BAND_ATTR_TYPE, OVS_METER_BAND_TYPE_DROP)) | |
180 | goto nla_put_failure; | |
181 | nla_nest_end(reply, band_nla); | |
182 | nla_nest_end(reply, nla); | |
183 | ||
184 | genlmsg_end(reply, ovs_reply_header); | |
185 | return genlmsg_reply(reply, info); | |
186 | ||
187 | nla_put_failure: | |
188 | nlmsg_free(reply); | |
189 | err = -EMSGSIZE; | |
190 | return err; | |
191 | } | |
192 | ||
193 | #ifndef HAVE_KTIME_GET_NS | |
194 | #ifndef ktime_to_ns | |
195 | #define ktime_to_ns(kt) ((kt).tv64) | |
196 | #endif | |
197 | static inline u64 ktime_get_ns(void) | |
198 | { | |
199 | return ktime_to_ns(ktime_get()); | |
200 | } | |
201 | #endif | |
202 | ||
203 | static struct dp_meter *dp_meter_create(struct nlattr **a) | |
204 | { | |
205 | struct nlattr *nla; | |
206 | int rem; | |
207 | u16 n_bands = 0; | |
208 | struct dp_meter *meter; | |
209 | struct dp_meter_band *band; | |
210 | int err; | |
211 | ||
212 | /* Validate attributes, count the bands. */ | |
213 | if (!a[OVS_METER_ATTR_BANDS]) | |
214 | return ERR_PTR(-EINVAL); | |
215 | ||
216 | nla_for_each_nested(nla, a[OVS_METER_ATTR_BANDS], rem) | |
217 | if (++n_bands > DP_MAX_BANDS) | |
218 | return ERR_PTR(-EINVAL); | |
219 | ||
220 | /* Allocate and set up the meter before locking anything. */ | |
f7246940 | 221 | meter = kzalloc(struct_size(meter, bands, n_bands), GFP_KERNEL); |
1cb57039 AZ |
222 | if (!meter) |
223 | return ERR_PTR(-ENOMEM); | |
224 | ||
52e20a3d | 225 | meter->id = nla_get_u32(a[OVS_METER_ATTR_ID]); |
1cb57039 AZ |
226 | meter->used = div_u64(ktime_get_ns(), 1000 * 1000); |
227 | meter->kbps = a[OVS_METER_ATTR_KBPS] ? 1 : 0; | |
228 | meter->keep_stats = !a[OVS_METER_ATTR_CLEAR]; | |
229 | spin_lock_init(&meter->lock); | |
230 | if (meter->keep_stats && a[OVS_METER_ATTR_STATS]) { | |
231 | meter->stats = *(struct ovs_flow_stats *) | |
232 | nla_data(a[OVS_METER_ATTR_STATS]); | |
233 | } | |
234 | meter->n_bands = n_bands; | |
235 | ||
236 | /* Set up meter bands. */ | |
237 | band = meter->bands; | |
238 | nla_for_each_nested(nla, a[OVS_METER_ATTR_BANDS], rem) { | |
239 | struct nlattr *attr[OVS_BAND_ATTR_MAX + 1]; | |
240 | u32 band_max_delta_t; | |
241 | ||
242 | err = nla_parse((struct nlattr **)&attr, OVS_BAND_ATTR_MAX, | |
243 | nla_data(nla), nla_len(nla), band_policy, | |
244 | NULL); | |
245 | if (err) | |
246 | goto exit_free_meter; | |
247 | ||
248 | if (!attr[OVS_BAND_ATTR_TYPE] || | |
249 | !attr[OVS_BAND_ATTR_RATE] || | |
250 | !attr[OVS_BAND_ATTR_BURST]) { | |
251 | err = -EINVAL; | |
252 | goto exit_free_meter; | |
253 | } | |
254 | ||
255 | band->type = nla_get_u32(attr[OVS_BAND_ATTR_TYPE]); | |
256 | band->rate = nla_get_u32(attr[OVS_BAND_ATTR_RATE]); | |
2db63edc | 257 | if (band->rate == 0) { |
258 | err = -EINVAL; | |
259 | goto exit_free_meter; | |
260 | } | |
261 | ||
1cb57039 AZ |
262 | band->burst_size = nla_get_u32(attr[OVS_BAND_ATTR_BURST]); |
263 | /* Figure out max delta_t that is enough to fill any bucket. | |
264 | * Keep max_delta_t size to the bucket units: | |
265 | * pkts => 1/1000 packets, kilobits => bits. | |
2db63edc | 266 | * |
267 | * Start with a full bucket. | |
1cb57039 | 268 | */ |
2db63edc | 269 | band->bucket = (band->burst_size + band->rate) * 1000; |
270 | band_max_delta_t = band->bucket / band->rate; | |
1cb57039 AZ |
271 | if (band_max_delta_t > meter->max_delta_t) |
272 | meter->max_delta_t = band_max_delta_t; | |
273 | band++; | |
274 | } | |
275 | ||
276 | return meter; | |
277 | ||
278 | exit_free_meter: | |
279 | kfree(meter); | |
280 | return ERR_PTR(err); | |
281 | } | |
282 | ||
283 | static int ovs_meter_cmd_set(struct sk_buff *skb, struct genl_info *info) | |
284 | { | |
285 | struct nlattr **a = info->attrs; | |
286 | struct dp_meter *meter, *old_meter; | |
287 | struct sk_buff *reply; | |
288 | struct ovs_header *ovs_reply_header; | |
289 | struct ovs_header *ovs_header = info->userhdr; | |
290 | struct datapath *dp; | |
291 | int err; | |
292 | u32 meter_id; | |
293 | bool failed; | |
294 | ||
52e20a3d JP |
295 | if (!a[OVS_METER_ATTR_ID]) { |
296 | return -ENODEV; | |
297 | } | |
298 | ||
1cb57039 AZ |
299 | meter = dp_meter_create(a); |
300 | if (IS_ERR_OR_NULL(meter)) | |
301 | return PTR_ERR(meter); | |
302 | ||
303 | reply = ovs_meter_cmd_reply_start(info, OVS_METER_CMD_SET, | |
304 | &ovs_reply_header); | |
305 | if (IS_ERR(reply)) { | |
306 | err = PTR_ERR(reply); | |
307 | goto exit_free_meter; | |
308 | } | |
309 | ||
310 | ovs_lock(); | |
311 | dp = get_dp(sock_net(skb->sk), ovs_header->dp_ifindex); | |
312 | if (!dp) { | |
313 | err = -ENODEV; | |
314 | goto exit_unlock; | |
315 | } | |
316 | ||
1cb57039 AZ |
317 | meter_id = nla_get_u32(a[OVS_METER_ATTR_ID]); |
318 | ||
319 | /* Cannot fail after this. */ | |
320 | old_meter = lookup_meter(dp, meter_id); | |
321 | detach_meter(old_meter); | |
322 | attach_meter(dp, meter); | |
323 | ovs_unlock(); | |
324 | ||
325 | /* Build response with the meter_id and stats from | |
326 | * the old meter, if any. | |
327 | */ | |
328 | failed = nla_put_u32(reply, OVS_METER_ATTR_ID, meter_id); | |
329 | WARN_ON(failed); | |
330 | if (old_meter) { | |
331 | spin_lock_bh(&old_meter->lock); | |
332 | if (old_meter->keep_stats) { | |
333 | err = ovs_meter_cmd_reply_stats(reply, meter_id, | |
334 | old_meter); | |
335 | WARN_ON(err); | |
336 | } | |
337 | spin_unlock_bh(&old_meter->lock); | |
338 | ovs_meter_free(old_meter); | |
339 | } | |
340 | ||
341 | genlmsg_end(reply, ovs_reply_header); | |
342 | return genlmsg_reply(reply, info); | |
343 | ||
344 | exit_unlock: | |
345 | ovs_unlock(); | |
346 | nlmsg_free(reply); | |
347 | exit_free_meter: | |
348 | kfree(meter); | |
349 | return err; | |
350 | } | |
351 | ||
352 | static int ovs_meter_cmd_get(struct sk_buff *skb, struct genl_info *info) | |
353 | { | |
354 | struct nlattr **a = info->attrs; | |
355 | u32 meter_id; | |
356 | struct ovs_header *ovs_header = info->userhdr; | |
357 | struct ovs_header *ovs_reply_header; | |
358 | struct datapath *dp; | |
359 | int err; | |
360 | struct sk_buff *reply; | |
361 | struct dp_meter *meter; | |
362 | ||
363 | if (!a[OVS_METER_ATTR_ID]) | |
364 | return -EINVAL; | |
365 | ||
366 | meter_id = nla_get_u32(a[OVS_METER_ATTR_ID]); | |
367 | ||
368 | reply = ovs_meter_cmd_reply_start(info, OVS_METER_CMD_GET, | |
369 | &ovs_reply_header); | |
370 | if (IS_ERR(reply)) | |
371 | return PTR_ERR(reply); | |
372 | ||
373 | ovs_lock(); | |
374 | ||
375 | dp = get_dp(sock_net(skb->sk), ovs_header->dp_ifindex); | |
376 | if (!dp) { | |
377 | err = -ENODEV; | |
378 | goto exit_unlock; | |
379 | } | |
380 | ||
381 | /* Locate meter, copy stats. */ | |
382 | meter = lookup_meter(dp, meter_id); | |
383 | if (!meter) { | |
384 | err = -ENOENT; | |
385 | goto exit_unlock; | |
386 | } | |
387 | ||
388 | spin_lock_bh(&meter->lock); | |
389 | err = ovs_meter_cmd_reply_stats(reply, meter_id, meter); | |
390 | spin_unlock_bh(&meter->lock); | |
391 | if (err) | |
392 | goto exit_unlock; | |
393 | ||
394 | ovs_unlock(); | |
395 | ||
396 | genlmsg_end(reply, ovs_reply_header); | |
397 | return genlmsg_reply(reply, info); | |
398 | ||
399 | exit_unlock: | |
400 | ovs_unlock(); | |
401 | nlmsg_free(reply); | |
402 | return err; | |
403 | } | |
404 | ||
405 | static int ovs_meter_cmd_del(struct sk_buff *skb, struct genl_info *info) | |
406 | { | |
407 | struct nlattr **a = info->attrs; | |
408 | u32 meter_id; | |
409 | struct ovs_header *ovs_header = info->userhdr; | |
410 | struct ovs_header *ovs_reply_header; | |
411 | struct datapath *dp; | |
412 | int err; | |
413 | struct sk_buff *reply; | |
414 | struct dp_meter *old_meter; | |
415 | ||
416 | if (!a[OVS_METER_ATTR_ID]) | |
417 | return -EINVAL; | |
418 | meter_id = nla_get_u32(a[OVS_METER_ATTR_ID]); | |
419 | ||
420 | reply = ovs_meter_cmd_reply_start(info, OVS_METER_CMD_DEL, | |
421 | &ovs_reply_header); | |
422 | if (IS_ERR(reply)) | |
423 | return PTR_ERR(reply); | |
424 | ||
425 | ovs_lock(); | |
426 | ||
427 | dp = get_dp(sock_net(skb->sk), ovs_header->dp_ifindex); | |
428 | if (!dp) { | |
429 | err = -ENODEV; | |
430 | goto exit_unlock; | |
431 | } | |
432 | ||
433 | old_meter = lookup_meter(dp, meter_id); | |
434 | if (old_meter) { | |
435 | spin_lock_bh(&old_meter->lock); | |
436 | err = ovs_meter_cmd_reply_stats(reply, meter_id, old_meter); | |
437 | WARN_ON(err); | |
438 | spin_unlock_bh(&old_meter->lock); | |
439 | detach_meter(old_meter); | |
440 | } | |
441 | ovs_unlock(); | |
442 | ovs_meter_free(old_meter); | |
443 | genlmsg_end(reply, ovs_reply_header); | |
444 | return genlmsg_reply(reply, info); | |
445 | ||
446 | exit_unlock: | |
447 | ovs_unlock(); | |
448 | nlmsg_free(reply); | |
449 | return err; | |
450 | } | |
451 | ||
452 | /* Meter action execution. | |
453 | * | |
454 | * Return true 'meter_id' drop band is triggered. The 'skb' should be | |
455 | * dropped by the caller'. | |
456 | */ | |
457 | bool ovs_meter_execute(struct datapath *dp, struct sk_buff *skb, | |
458 | struct sw_flow_key *key, u32 meter_id) | |
459 | { | |
460 | struct dp_meter *meter; | |
461 | struct dp_meter_band *band; | |
462 | long long int now_ms = div_u64(ktime_get_ns(), 1000 * 1000); | |
463 | long long int long_delta_ms; | |
464 | u32 delta_ms; | |
465 | u32 cost; | |
466 | int i, band_exceeded_max = -1; | |
467 | u32 band_exceeded_rate = 0; | |
468 | ||
469 | meter = lookup_meter(dp, meter_id); | |
470 | /* Do not drop the packet when there is no meter. */ | |
471 | if (!meter) | |
472 | return false; | |
473 | ||
474 | /* Lock the meter while using it. */ | |
475 | spin_lock(&meter->lock); | |
476 | ||
477 | long_delta_ms = (now_ms - meter->used); /* ms */ | |
478 | ||
479 | /* Make sure delta_ms will not be too large, so that bucket will not | |
480 | * wrap around below. | |
481 | */ | |
482 | delta_ms = (long_delta_ms > (long long int)meter->max_delta_t) | |
483 | ? meter->max_delta_t : (u32)long_delta_ms; | |
484 | ||
485 | /* Update meter statistics. | |
486 | */ | |
487 | meter->used = now_ms; | |
488 | meter->stats.n_packets += 1; | |
489 | meter->stats.n_bytes += skb->len; | |
490 | ||
491 | /* Bucket rate is either in kilobits per second, or in packets per | |
492 | * second. We maintain the bucket in the units of either bits or | |
493 | * 1/1000th of a packet, correspondingly. | |
494 | * Then, when rate is multiplied with milliseconds, we get the | |
495 | * bucket units: | |
496 | * msec * kbps = bits, and | |
497 | * msec * packets/sec = 1/1000 packets. | |
498 | * | |
499 | * 'cost' is the number of bucket units in this packet. | |
500 | */ | |
501 | cost = (meter->kbps) ? skb->len * 8 : 1000; | |
502 | ||
503 | /* Update all bands and find the one hit with the highest rate. */ | |
504 | for (i = 0; i < meter->n_bands; ++i) { | |
505 | long long int max_bucket_size; | |
506 | ||
507 | band = &meter->bands[i]; | |
65e64d20 | 508 | max_bucket_size = (band->burst_size + band->rate) * 1000LL; |
1cb57039 AZ |
509 | |
510 | band->bucket += delta_ms * band->rate; | |
511 | if (band->bucket > max_bucket_size) | |
512 | band->bucket = max_bucket_size; | |
513 | ||
514 | if (band->bucket >= cost) { | |
515 | band->bucket -= cost; | |
516 | } else if (band->rate > band_exceeded_rate) { | |
517 | band_exceeded_rate = band->rate; | |
518 | band_exceeded_max = i; | |
519 | } | |
520 | } | |
521 | ||
522 | if (band_exceeded_max >= 0) { | |
523 | /* Update band statistics. */ | |
524 | band = &meter->bands[band_exceeded_max]; | |
525 | band->stats.n_packets += 1; | |
526 | band->stats.n_bytes += skb->len; | |
527 | ||
528 | /* Drop band triggered, let the caller drop the 'skb'. */ | |
529 | if (band->type == OVS_METER_BAND_TYPE_DROP) { | |
530 | spin_unlock(&meter->lock); | |
531 | return true; | |
532 | } | |
533 | } | |
534 | ||
535 | spin_unlock(&meter->lock); | |
536 | return false; | |
537 | } | |
538 | ||
539 | static struct genl_ops dp_meter_genl_ops[] = { | |
540 | { .cmd = OVS_METER_CMD_FEATURES, | |
541 | .flags = 0, /* OK for unprivileged users. */ | |
542 | .policy = meter_policy, | |
543 | .doit = ovs_meter_cmd_features | |
544 | }, | |
545 | { .cmd = OVS_METER_CMD_SET, | |
546 | .flags = GENL_ADMIN_PERM, /* Requires CAP_NET_ADMIN | |
547 | * privilege. | |
548 | */ | |
549 | .policy = meter_policy, | |
550 | .doit = ovs_meter_cmd_set, | |
551 | }, | |
552 | { .cmd = OVS_METER_CMD_GET, | |
553 | .flags = 0, /* OK for unprivileged users. */ | |
554 | .policy = meter_policy, | |
555 | .doit = ovs_meter_cmd_get, | |
556 | }, | |
557 | { .cmd = OVS_METER_CMD_DEL, | |
558 | .flags = GENL_ADMIN_PERM, /* Requires CAP_NET_ADMIN | |
559 | * privilege. | |
560 | */ | |
561 | .policy = meter_policy, | |
562 | .doit = ovs_meter_cmd_del | |
563 | }, | |
564 | }; | |
565 | ||
566 | static const struct genl_multicast_group ovs_meter_multicast_group = { | |
567 | .name = OVS_METER_MCGROUP, | |
568 | }; | |
569 | ||
570 | struct genl_family dp_meter_genl_family __ro_after_init = { | |
571 | .hdrsize = sizeof(struct ovs_header), | |
572 | .name = OVS_METER_FAMILY, | |
573 | .version = OVS_METER_VERSION, | |
574 | .maxattr = OVS_METER_ATTR_MAX, | |
575 | .netnsok = true, | |
576 | .parallel_ops = true, | |
577 | .ops = dp_meter_genl_ops, | |
578 | .n_ops = ARRAY_SIZE(dp_meter_genl_ops), | |
579 | .mcgrps = &ovs_meter_multicast_group, | |
580 | .n_mcgrps = 1, | |
581 | .module = THIS_MODULE, | |
582 | }; | |
583 | ||
584 | int ovs_meters_init(struct datapath *dp) | |
585 | { | |
586 | int i; | |
587 | ||
588 | dp->meters = kmalloc_array(METER_HASH_BUCKETS, | |
589 | sizeof(struct hlist_head), GFP_KERNEL); | |
590 | ||
591 | if (!dp->meters) | |
592 | return -ENOMEM; | |
593 | ||
594 | for (i = 0; i < METER_HASH_BUCKETS; i++) | |
595 | INIT_HLIST_HEAD(&dp->meters[i]); | |
596 | ||
597 | return 0; | |
598 | } | |
599 | ||
600 | void ovs_meters_exit(struct datapath *dp) | |
601 | { | |
602 | int i; | |
603 | ||
604 | for (i = 0; i < METER_HASH_BUCKETS; i++) { | |
605 | struct hlist_head *head = &dp->meters[i]; | |
606 | struct dp_meter *meter; | |
607 | struct hlist_node *n; | |
608 | ||
609 | hlist_for_each_entry_safe(meter, n, head, dp_hash_node) | |
610 | kfree(meter); | |
611 | } | |
612 | ||
613 | kfree(dp->meters); | |
614 | } |