]>
Commit | Line | Data |
---|---|---|
2d07dc79 JL |
1 | /* |
2 | * GENEVE: Generic Network Virtualization Encapsulation | |
3 | * | |
4 | * Copyright (c) 2015 Red Hat, Inc. | |
5 | * | |
6 | * This program is free software; you can redistribute it and/or modify | |
7 | * it under the terms of the GNU General Public License version 2 as | |
8 | * published by the Free Software Foundation. | |
9 | */ | |
10 | ||
11 | #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt | |
12 | ||
13 | #include <linux/kernel.h> | |
14 | #include <linux/module.h> | |
2d07dc79 JL |
15 | #include <linux/etherdevice.h> |
16 | #include <linux/hash.h> | |
e305ac6c | 17 | #include <net/dst_metadata.h> |
8e816df8 | 18 | #include <net/gro_cells.h> |
2d07dc79 JL |
19 | #include <net/rtnetlink.h> |
20 | #include <net/geneve.h> | |
371bd106 | 21 | #include <net/protocol.h> |
2d07dc79 JL |
22 | |
23 | #define GENEVE_NETDEV_VER "0.6" | |
24 | ||
25 | #define GENEVE_UDP_PORT 6081 | |
26 | ||
27 | #define GENEVE_N_VID (1u << 24) | |
28 | #define GENEVE_VID_MASK (GENEVE_N_VID - 1) | |
29 | ||
30 | #define VNI_HASH_BITS 10 | |
31 | #define VNI_HASH_SIZE (1<<VNI_HASH_BITS) | |
32 | ||
33 | static bool log_ecn_error = true; | |
34 | module_param(log_ecn_error, bool, 0644); | |
35 | MODULE_PARM_DESC(log_ecn_error, "Log packets received with corrupted ECN"); | |
36 | ||
371bd106 PS |
37 | #define GENEVE_VER 0 |
38 | #define GENEVE_BASE_HLEN (sizeof(struct udphdr) + sizeof(struct genevehdr)) | |
39 | ||
2d07dc79 JL |
40 | /* per-network namespace private data for this module */ |
41 | struct geneve_net { | |
371bd106 | 42 | struct list_head geneve_list; |
371bd106 | 43 | struct list_head sock_list; |
2d07dc79 JL |
44 | }; |
45 | ||
c7d03a00 | 46 | static unsigned int geneve_net_id; |
371bd106 | 47 | |
4b4c21fa JB |
48 | struct geneve_dev_node { |
49 | struct hlist_node hlist; | |
50 | struct geneve_dev *geneve; | |
51 | }; | |
52 | ||
2d07dc79 JL |
53 | /* Pseudo network device */ |
54 | struct geneve_dev { | |
4b4c21fa JB |
55 | struct geneve_dev_node hlist4; /* vni hash table for IPv4 socket */ |
56 | #if IS_ENABLED(CONFIG_IPV6) | |
57 | struct geneve_dev_node hlist6; /* vni hash table for IPv6 socket */ | |
58 | #endif | |
2d07dc79 JL |
59 | struct net *net; /* netns for packet i/o */ |
60 | struct net_device *dev; /* netdev for geneve tunnel */ | |
9b4437a5 | 61 | struct ip_tunnel_info info; |
fceb9c3e | 62 | struct geneve_sock __rcu *sock4; /* IPv4 socket used for geneve tunnel */ |
8ed66f0e | 63 | #if IS_ENABLED(CONFIG_IPV6) |
fceb9c3e | 64 | struct geneve_sock __rcu *sock6; /* IPv6 socket used for geneve tunnel */ |
8ed66f0e | 65 | #endif |
2d07dc79 | 66 | struct list_head next; /* geneve's per namespace list */ |
8e816df8 | 67 | struct gro_cells gro_cells; |
9b4437a5 | 68 | bool collect_md; |
69 | bool use_udp6_rx_checksums; | |
2d07dc79 JL |
70 | }; |
71 | ||
371bd106 PS |
72 | struct geneve_sock { |
73 | bool collect_md; | |
371bd106 PS |
74 | struct list_head list; |
75 | struct socket *sock; | |
76 | struct rcu_head rcu; | |
77 | int refcnt; | |
66d47003 | 78 | struct hlist_head vni_list[VNI_HASH_SIZE]; |
371bd106 | 79 | }; |
2d07dc79 JL |
80 | |
81 | static inline __u32 geneve_net_vni_hash(u8 vni[3]) | |
82 | { | |
83 | __u32 vnid; | |
84 | ||
85 | vnid = (vni[0] << 16) | (vni[1] << 8) | vni[2]; | |
86 | return hash_32(vnid, VNI_HASH_BITS); | |
87 | } | |
88 | ||
e305ac6c PS |
89 | static __be64 vni_to_tunnel_id(const __u8 *vni) |
90 | { | |
91 | #ifdef __BIG_ENDIAN | |
92 | return (vni[0] << 16) | (vni[1] << 8) | vni[2]; | |
93 | #else | |
94 | return (__force __be64)(((__force u64)vni[0] << 40) | | |
95 | ((__force u64)vni[1] << 48) | | |
96 | ((__force u64)vni[2] << 56)); | |
97 | #endif | |
98 | } | |
99 | ||
9b4437a5 | 100 | /* Convert 64 bit tunnel ID to 24 bit VNI. */ |
101 | static void tunnel_id_to_vni(__be64 tun_id, __u8 *vni) | |
102 | { | |
103 | #ifdef __BIG_ENDIAN | |
104 | vni[0] = (__force __u8)(tun_id >> 16); | |
105 | vni[1] = (__force __u8)(tun_id >> 8); | |
106 | vni[2] = (__force __u8)tun_id; | |
107 | #else | |
108 | vni[0] = (__force __u8)((__force u64)tun_id >> 40); | |
109 | vni[1] = (__force __u8)((__force u64)tun_id >> 48); | |
110 | vni[2] = (__force __u8)((__force u64)tun_id >> 56); | |
111 | #endif | |
112 | } | |
113 | ||
2e0b26e1 | 114 | static bool eq_tun_id_and_vni(u8 *tun_id, u8 *vni) |
115 | { | |
2e0b26e1 | 116 | return !memcmp(vni, &tun_id[5], 3); |
2e0b26e1 | 117 | } |
118 | ||
1e9f12ec JB |
119 | static sa_family_t geneve_get_sk_family(struct geneve_sock *gs) |
120 | { | |
121 | return gs->sock->sk->sk_family; | |
122 | } | |
123 | ||
66d47003 | 124 | static struct geneve_dev *geneve_lookup(struct geneve_sock *gs, |
371bd106 | 125 | __be32 addr, u8 vni[]) |
2d07dc79 | 126 | { |
2d07dc79 | 127 | struct hlist_head *vni_list_head; |
4b4c21fa | 128 | struct geneve_dev_node *node; |
2d07dc79 JL |
129 | __u32 hash; |
130 | ||
2d07dc79 | 131 | /* Find the device for this VNI */ |
371bd106 | 132 | hash = geneve_net_vni_hash(vni); |
66d47003 | 133 | vni_list_head = &gs->vni_list[hash]; |
4b4c21fa JB |
134 | hlist_for_each_entry_rcu(node, vni_list_head, hlist) { |
135 | if (eq_tun_id_and_vni((u8 *)&node->geneve->info.key.tun_id, vni) && | |
136 | addr == node->geneve->info.key.u.ipv4.dst) | |
137 | return node->geneve; | |
8ed66f0e JL |
138 | } |
139 | return NULL; | |
140 | } | |
141 | ||
142 | #if IS_ENABLED(CONFIG_IPV6) | |
143 | static struct geneve_dev *geneve6_lookup(struct geneve_sock *gs, | |
144 | struct in6_addr addr6, u8 vni[]) | |
145 | { | |
146 | struct hlist_head *vni_list_head; | |
4b4c21fa | 147 | struct geneve_dev_node *node; |
8ed66f0e JL |
148 | __u32 hash; |
149 | ||
150 | /* Find the device for this VNI */ | |
151 | hash = geneve_net_vni_hash(vni); | |
152 | vni_list_head = &gs->vni_list[hash]; | |
4b4c21fa JB |
153 | hlist_for_each_entry_rcu(node, vni_list_head, hlist) { |
154 | if (eq_tun_id_and_vni((u8 *)&node->geneve->info.key.tun_id, vni) && | |
155 | ipv6_addr_equal(&addr6, &node->geneve->info.key.u.ipv6.dst)) | |
156 | return node->geneve; | |
2d07dc79 | 157 | } |
e305ac6c PS |
158 | return NULL; |
159 | } | |
8ed66f0e | 160 | #endif |
e305ac6c | 161 | |
371bd106 PS |
162 | static inline struct genevehdr *geneve_hdr(const struct sk_buff *skb) |
163 | { | |
164 | return (struct genevehdr *)(udp_hdr(skb) + 1); | |
165 | } | |
166 | ||
9fc47545 JB |
167 | static struct geneve_dev *geneve_lookup_skb(struct geneve_sock *gs, |
168 | struct sk_buff *skb) | |
e305ac6c | 169 | { |
8ed66f0e | 170 | static u8 zero_vni[3]; |
9b4437a5 | 171 | u8 *vni; |
e305ac6c | 172 | |
1e9f12ec | 173 | if (geneve_get_sk_family(gs) == AF_INET) { |
9fc47545 | 174 | struct iphdr *iph; |
9b4437a5 | 175 | __be32 addr; |
9fc47545 | 176 | |
8ed66f0e | 177 | iph = ip_hdr(skb); /* outer IP header... */ |
371bd106 | 178 | |
8ed66f0e JL |
179 | if (gs->collect_md) { |
180 | vni = zero_vni; | |
181 | addr = 0; | |
182 | } else { | |
9fc47545 | 183 | vni = geneve_hdr(skb)->vni; |
8ed66f0e JL |
184 | addr = iph->saddr; |
185 | } | |
186 | ||
9fc47545 | 187 | return geneve_lookup(gs, addr, vni); |
8ed66f0e | 188 | #if IS_ENABLED(CONFIG_IPV6) |
1e9f12ec | 189 | } else if (geneve_get_sk_family(gs) == AF_INET6) { |
9b4437a5 | 190 | static struct in6_addr zero_addr6; |
9fc47545 JB |
191 | struct ipv6hdr *ip6h; |
192 | struct in6_addr addr6; | |
193 | ||
8ed66f0e | 194 | ip6h = ipv6_hdr(skb); /* outer IPv6 header... */ |
371bd106 | 195 | |
8ed66f0e JL |
196 | if (gs->collect_md) { |
197 | vni = zero_vni; | |
198 | addr6 = zero_addr6; | |
199 | } else { | |
9fc47545 | 200 | vni = geneve_hdr(skb)->vni; |
8ed66f0e JL |
201 | addr6 = ip6h->saddr; |
202 | } | |
203 | ||
9fc47545 | 204 | return geneve6_lookup(gs, addr6, vni); |
8ed66f0e JL |
205 | #endif |
206 | } | |
9fc47545 JB |
207 | return NULL; |
208 | } | |
209 | ||
210 | /* geneve receive/decap routine */ | |
211 | static void geneve_rx(struct geneve_dev *geneve, struct geneve_sock *gs, | |
212 | struct sk_buff *skb) | |
213 | { | |
214 | struct genevehdr *gnvh = geneve_hdr(skb); | |
215 | struct metadata_dst *tun_dst = NULL; | |
216 | struct pcpu_sw_netstats *stats; | |
fe741e23 | 217 | unsigned int len; |
9fc47545 JB |
218 | int err = 0; |
219 | void *oiph; | |
2d07dc79 | 220 | |
371bd106 | 221 | if (ip_tunnel_collect_metadata() || gs->collect_md) { |
e305ac6c | 222 | __be16 flags; |
e305ac6c PS |
223 | |
224 | flags = TUNNEL_KEY | TUNNEL_GENEVE_OPT | | |
225 | (gnvh->oam ? TUNNEL_OAM : 0) | | |
226 | (gnvh->critical ? TUNNEL_CRIT_OPT : 0); | |
227 | ||
1e9f12ec | 228 | tun_dst = udp_tun_rx_dst(skb, geneve_get_sk_family(gs), flags, |
e305ac6c PS |
229 | vni_to_tunnel_id(gnvh->vni), |
230 | gnvh->opt_len * 4); | |
fe741e23 GM |
231 | if (!tun_dst) { |
232 | geneve->dev->stats.rx_dropped++; | |
e305ac6c | 233 | goto drop; |
fe741e23 | 234 | } |
e305ac6c | 235 | /* Update tunnel dst according to Geneve options. */ |
4c222798 PS |
236 | ip_tunnel_info_opts_set(&tun_dst->u.tun_info, |
237 | gnvh->options, gnvh->opt_len * 4); | |
e305ac6c PS |
238 | } else { |
239 | /* Drop packets w/ critical options, | |
240 | * since we don't support any... | |
241 | */ | |
fe741e23 GM |
242 | if (gnvh->critical) { |
243 | geneve->dev->stats.rx_frame_errors++; | |
244 | geneve->dev->stats.rx_errors++; | |
e305ac6c | 245 | goto drop; |
fe741e23 | 246 | } |
e305ac6c | 247 | } |
2d07dc79 JL |
248 | |
249 | skb_reset_mac_header(skb); | |
2d07dc79 JL |
250 | skb->protocol = eth_type_trans(skb, geneve->dev); |
251 | skb_postpull_rcsum(skb, eth_hdr(skb), ETH_HLEN); | |
252 | ||
e305ac6c PS |
253 | if (tun_dst) |
254 | skb_dst_set(skb, &tun_dst->dst); | |
255 | ||
2d07dc79 | 256 | /* Ignore packet loops (and multicast echo) */ |
fe741e23 GM |
257 | if (ether_addr_equal(eth_hdr(skb)->h_source, geneve->dev->dev_addr)) { |
258 | geneve->dev->stats.rx_errors++; | |
2d07dc79 | 259 | goto drop; |
fe741e23 | 260 | } |
2d07dc79 | 261 | |
9fc47545 | 262 | oiph = skb_network_header(skb); |
2d07dc79 JL |
263 | skb_reset_network_header(skb); |
264 | ||
9fc47545 JB |
265 | if (geneve_get_sk_family(gs) == AF_INET) |
266 | err = IP_ECN_decapsulate(oiph, skb); | |
8ed66f0e | 267 | #if IS_ENABLED(CONFIG_IPV6) |
9fc47545 JB |
268 | else |
269 | err = IP6_ECN_decapsulate(oiph, skb); | |
8ed66f0e | 270 | #endif |
2d07dc79 JL |
271 | |
272 | if (unlikely(err)) { | |
8ed66f0e | 273 | if (log_ecn_error) { |
9fc47545 | 274 | if (geneve_get_sk_family(gs) == AF_INET) |
8ed66f0e JL |
275 | net_info_ratelimited("non-ECT from %pI4 " |
276 | "with TOS=%#x\n", | |
9fc47545 JB |
277 | &((struct iphdr *)oiph)->saddr, |
278 | ((struct iphdr *)oiph)->tos); | |
8ed66f0e | 279 | #if IS_ENABLED(CONFIG_IPV6) |
9fc47545 | 280 | else |
8ed66f0e | 281 | net_info_ratelimited("non-ECT from %pI6\n", |
9fc47545 | 282 | &((struct ipv6hdr *)oiph)->saddr); |
8ed66f0e JL |
283 | #endif |
284 | } | |
2d07dc79 JL |
285 | if (err > 1) { |
286 | ++geneve->dev->stats.rx_frame_errors; | |
287 | ++geneve->dev->stats.rx_errors; | |
288 | goto drop; | |
289 | } | |
290 | } | |
291 | ||
fe741e23 GM |
292 | len = skb->len; |
293 | err = gro_cells_receive(&geneve->gro_cells, skb); | |
294 | if (likely(err == NET_RX_SUCCESS)) { | |
295 | stats = this_cpu_ptr(geneve->dev->tstats); | |
296 | u64_stats_update_begin(&stats->syncp); | |
297 | stats->rx_packets++; | |
298 | stats->rx_bytes += len; | |
299 | u64_stats_update_end(&stats->syncp); | |
300 | } | |
2d07dc79 JL |
301 | return; |
302 | drop: | |
303 | /* Consume bad packet */ | |
304 | kfree_skb(skb); | |
305 | } | |
306 | ||
307 | /* Setup stats when device is created */ | |
308 | static int geneve_init(struct net_device *dev) | |
309 | { | |
8e816df8 JG |
310 | struct geneve_dev *geneve = netdev_priv(dev); |
311 | int err; | |
312 | ||
2d07dc79 JL |
313 | dev->tstats = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats); |
314 | if (!dev->tstats) | |
315 | return -ENOMEM; | |
8e816df8 JG |
316 | |
317 | err = gro_cells_init(&geneve->gro_cells, dev); | |
318 | if (err) { | |
319 | free_percpu(dev->tstats); | |
320 | return err; | |
321 | } | |
322 | ||
9b4437a5 | 323 | err = dst_cache_init(&geneve->info.dst_cache, GFP_KERNEL); |
468dfffc PA |
324 | if (err) { |
325 | free_percpu(dev->tstats); | |
326 | gro_cells_destroy(&geneve->gro_cells); | |
327 | return err; | |
328 | } | |
2d07dc79 JL |
329 | return 0; |
330 | } | |
331 | ||
332 | static void geneve_uninit(struct net_device *dev) | |
333 | { | |
8e816df8 JG |
334 | struct geneve_dev *geneve = netdev_priv(dev); |
335 | ||
9b4437a5 | 336 | dst_cache_destroy(&geneve->info.dst_cache); |
8e816df8 | 337 | gro_cells_destroy(&geneve->gro_cells); |
2d07dc79 JL |
338 | free_percpu(dev->tstats); |
339 | } | |
340 | ||
371bd106 PS |
341 | /* Callback from net/ipv4/udp.c to receive packets */ |
342 | static int geneve_udp_encap_recv(struct sock *sk, struct sk_buff *skb) | |
343 | { | |
344 | struct genevehdr *geneveh; | |
9fc47545 | 345 | struct geneve_dev *geneve; |
371bd106 PS |
346 | struct geneve_sock *gs; |
347 | int opts_len; | |
348 | ||
fe741e23 | 349 | /* Need UDP and Geneve header to be present */ |
371bd106 | 350 | if (unlikely(!pskb_may_pull(skb, GENEVE_BASE_HLEN))) |
e5aed006 | 351 | goto drop; |
371bd106 PS |
352 | |
353 | /* Return packets with reserved bits set */ | |
354 | geneveh = geneve_hdr(skb); | |
355 | if (unlikely(geneveh->ver != GENEVE_VER)) | |
e5aed006 | 356 | goto drop; |
371bd106 PS |
357 | |
358 | if (unlikely(geneveh->proto_type != htons(ETH_P_TEB))) | |
e5aed006 | 359 | goto drop; |
371bd106 | 360 | |
9fc47545 JB |
361 | gs = rcu_dereference_sk_user_data(sk); |
362 | if (!gs) | |
363 | goto drop; | |
364 | ||
365 | geneve = geneve_lookup_skb(gs, skb); | |
366 | if (!geneve) | |
367 | goto drop; | |
368 | ||
371bd106 PS |
369 | opts_len = geneveh->opt_len * 4; |
370 | if (iptunnel_pull_header(skb, GENEVE_BASE_HLEN + opts_len, | |
7f290c94 | 371 | htons(ETH_P_TEB), |
fe741e23 GM |
372 | !net_eq(geneve->net, dev_net(geneve->dev)))) { |
373 | geneve->dev->stats.rx_dropped++; | |
371bd106 | 374 | goto drop; |
fe741e23 | 375 | } |
371bd106 | 376 | |
9fc47545 | 377 | geneve_rx(geneve, gs, skb); |
371bd106 PS |
378 | return 0; |
379 | ||
380 | drop: | |
381 | /* Consume bad packet */ | |
382 | kfree_skb(skb); | |
383 | return 0; | |
371bd106 PS |
384 | } |
385 | ||
386 | static struct socket *geneve_create_sock(struct net *net, bool ipv6, | |
9b4437a5 | 387 | __be16 port, bool ipv6_rx_csum) |
371bd106 PS |
388 | { |
389 | struct socket *sock; | |
390 | struct udp_port_cfg udp_conf; | |
391 | int err; | |
392 | ||
393 | memset(&udp_conf, 0, sizeof(udp_conf)); | |
394 | ||
395 | if (ipv6) { | |
396 | udp_conf.family = AF_INET6; | |
8ed66f0e | 397 | udp_conf.ipv6_v6only = 1; |
9b4437a5 | 398 | udp_conf.use_udp6_rx_checksums = ipv6_rx_csum; |
371bd106 PS |
399 | } else { |
400 | udp_conf.family = AF_INET; | |
401 | udp_conf.local_ip.s_addr = htonl(INADDR_ANY); | |
402 | } | |
403 | ||
404 | udp_conf.local_udp_port = port; | |
405 | ||
406 | /* Open UDP socket */ | |
407 | err = udp_sock_create(net, &udp_conf, &sock); | |
408 | if (err < 0) | |
409 | return ERR_PTR(err); | |
410 | ||
411 | return sock; | |
412 | } | |
413 | ||
371bd106 PS |
414 | static int geneve_hlen(struct genevehdr *gh) |
415 | { | |
416 | return sizeof(*gh) + gh->opt_len * 4; | |
417 | } | |
418 | ||
4a0090a9 TH |
419 | static struct sk_buff **geneve_gro_receive(struct sock *sk, |
420 | struct sk_buff **head, | |
421 | struct sk_buff *skb) | |
371bd106 PS |
422 | { |
423 | struct sk_buff *p, **pp = NULL; | |
424 | struct genevehdr *gh, *gh2; | |
425 | unsigned int hlen, gh_len, off_gnv; | |
426 | const struct packet_offload *ptype; | |
427 | __be16 type; | |
428 | int flush = 1; | |
429 | ||
430 | off_gnv = skb_gro_offset(skb); | |
431 | hlen = off_gnv + sizeof(*gh); | |
432 | gh = skb_gro_header_fast(skb, off_gnv); | |
433 | if (skb_gro_header_hard(skb, hlen)) { | |
434 | gh = skb_gro_header_slow(skb, hlen, off_gnv); | |
435 | if (unlikely(!gh)) | |
436 | goto out; | |
437 | } | |
438 | ||
439 | if (gh->ver != GENEVE_VER || gh->oam) | |
440 | goto out; | |
441 | gh_len = geneve_hlen(gh); | |
442 | ||
443 | hlen = off_gnv + gh_len; | |
444 | if (skb_gro_header_hard(skb, hlen)) { | |
445 | gh = skb_gro_header_slow(skb, hlen, off_gnv); | |
446 | if (unlikely(!gh)) | |
447 | goto out; | |
448 | } | |
449 | ||
371bd106 PS |
450 | for (p = *head; p; p = p->next) { |
451 | if (!NAPI_GRO_CB(p)->same_flow) | |
452 | continue; | |
453 | ||
454 | gh2 = (struct genevehdr *)(p->data + off_gnv); | |
455 | if (gh->opt_len != gh2->opt_len || | |
456 | memcmp(gh, gh2, gh_len)) { | |
457 | NAPI_GRO_CB(p)->same_flow = 0; | |
458 | continue; | |
459 | } | |
460 | } | |
461 | ||
462 | type = gh->proto_type; | |
463 | ||
464 | rcu_read_lock(); | |
465 | ptype = gro_find_receive_by_type(type); | |
c194cf93 | 466 | if (!ptype) |
371bd106 | 467 | goto out_unlock; |
371bd106 PS |
468 | |
469 | skb_gro_pull(skb, gh_len); | |
470 | skb_gro_postpull_rcsum(skb, gh, gh_len); | |
fcd91dd4 | 471 | pp = call_gro_receive(ptype->callbacks.gro_receive, head, skb); |
c194cf93 | 472 | flush = 0; |
371bd106 PS |
473 | |
474 | out_unlock: | |
475 | rcu_read_unlock(); | |
476 | out: | |
477 | NAPI_GRO_CB(skb)->flush |= flush; | |
478 | ||
479 | return pp; | |
480 | } | |
481 | ||
4a0090a9 TH |
482 | static int geneve_gro_complete(struct sock *sk, struct sk_buff *skb, |
483 | int nhoff) | |
371bd106 PS |
484 | { |
485 | struct genevehdr *gh; | |
486 | struct packet_offload *ptype; | |
487 | __be16 type; | |
488 | int gh_len; | |
489 | int err = -ENOSYS; | |
490 | ||
371bd106 PS |
491 | gh = (struct genevehdr *)(skb->data + nhoff); |
492 | gh_len = geneve_hlen(gh); | |
493 | type = gh->proto_type; | |
494 | ||
495 | rcu_read_lock(); | |
496 | ptype = gro_find_complete_by_type(type); | |
497 | if (ptype) | |
498 | err = ptype->callbacks.gro_complete(skb, nhoff + gh_len); | |
499 | ||
500 | rcu_read_unlock(); | |
229740c6 JR |
501 | |
502 | skb_set_inner_mac_header(skb, nhoff + gh_len); | |
503 | ||
371bd106 PS |
504 | return err; |
505 | } | |
506 | ||
507 | /* Create new listen socket if needed */ | |
508 | static struct geneve_sock *geneve_socket_create(struct net *net, __be16 port, | |
9b4437a5 | 509 | bool ipv6, bool ipv6_rx_csum) |
371bd106 PS |
510 | { |
511 | struct geneve_net *gn = net_generic(net, geneve_net_id); | |
512 | struct geneve_sock *gs; | |
513 | struct socket *sock; | |
514 | struct udp_tunnel_sock_cfg tunnel_cfg; | |
66d47003 | 515 | int h; |
371bd106 PS |
516 | |
517 | gs = kzalloc(sizeof(*gs), GFP_KERNEL); | |
518 | if (!gs) | |
519 | return ERR_PTR(-ENOMEM); | |
520 | ||
9b4437a5 | 521 | sock = geneve_create_sock(net, ipv6, port, ipv6_rx_csum); |
371bd106 PS |
522 | if (IS_ERR(sock)) { |
523 | kfree(gs); | |
524 | return ERR_CAST(sock); | |
525 | } | |
526 | ||
527 | gs->sock = sock; | |
528 | gs->refcnt = 1; | |
66d47003 PS |
529 | for (h = 0; h < VNI_HASH_SIZE; ++h) |
530 | INIT_HLIST_HEAD(&gs->vni_list[h]); | |
371bd106 PS |
531 | |
532 | /* Initialize the geneve udp offloads structure */ | |
e7b3db5e | 533 | udp_tunnel_notify_add_rx_port(gs->sock, UDP_TUNNEL_TYPE_GENEVE); |
371bd106 PS |
534 | |
535 | /* Mark socket as an encapsulation socket */ | |
4a0090a9 | 536 | memset(&tunnel_cfg, 0, sizeof(tunnel_cfg)); |
371bd106 PS |
537 | tunnel_cfg.sk_user_data = gs; |
538 | tunnel_cfg.encap_type = 1; | |
4a0090a9 TH |
539 | tunnel_cfg.gro_receive = geneve_gro_receive; |
540 | tunnel_cfg.gro_complete = geneve_gro_complete; | |
371bd106 PS |
541 | tunnel_cfg.encap_rcv = geneve_udp_encap_recv; |
542 | tunnel_cfg.encap_destroy = NULL; | |
543 | setup_udp_tunnel_sock(net, sock, &tunnel_cfg); | |
371bd106 PS |
544 | list_add(&gs->list, &gn->sock_list); |
545 | return gs; | |
546 | } | |
547 | ||
8ed66f0e | 548 | static void __geneve_sock_release(struct geneve_sock *gs) |
371bd106 | 549 | { |
8ed66f0e | 550 | if (!gs || --gs->refcnt) |
371bd106 PS |
551 | return; |
552 | ||
553 | list_del(&gs->list); | |
e7b3db5e | 554 | udp_tunnel_notify_del_rx_port(gs->sock, UDP_TUNNEL_TYPE_GENEVE); |
371bd106 PS |
555 | udp_tunnel_sock_release(gs->sock); |
556 | kfree_rcu(gs, rcu); | |
557 | } | |
558 | ||
8ed66f0e JL |
559 | static void geneve_sock_release(struct geneve_dev *geneve) |
560 | { | |
fceb9c3e | 561 | struct geneve_sock *gs4 = rtnl_dereference(geneve->sock4); |
8ed66f0e | 562 | #if IS_ENABLED(CONFIG_IPV6) |
fceb9c3e | 563 | struct geneve_sock *gs6 = rtnl_dereference(geneve->sock6); |
564 | ||
565 | rcu_assign_pointer(geneve->sock6, NULL); | |
566 | #endif | |
567 | ||
568 | rcu_assign_pointer(geneve->sock4, NULL); | |
569 | synchronize_net(); | |
570 | ||
571 | __geneve_sock_release(gs4); | |
572 | #if IS_ENABLED(CONFIG_IPV6) | |
573 | __geneve_sock_release(gs6); | |
8ed66f0e JL |
574 | #endif |
575 | } | |
576 | ||
371bd106 | 577 | static struct geneve_sock *geneve_find_sock(struct geneve_net *gn, |
8ed66f0e | 578 | sa_family_t family, |
371bd106 PS |
579 | __be16 dst_port) |
580 | { | |
581 | struct geneve_sock *gs; | |
582 | ||
583 | list_for_each_entry(gs, &gn->sock_list, list) { | |
584 | if (inet_sk(gs->sock->sk)->inet_sport == dst_port && | |
1e9f12ec | 585 | geneve_get_sk_family(gs) == family) { |
371bd106 PS |
586 | return gs; |
587 | } | |
588 | } | |
589 | return NULL; | |
590 | } | |
591 | ||
8ed66f0e | 592 | static int geneve_sock_add(struct geneve_dev *geneve, bool ipv6) |
2d07dc79 | 593 | { |
2d07dc79 | 594 | struct net *net = geneve->net; |
371bd106 | 595 | struct geneve_net *gn = net_generic(net, geneve_net_id); |
4b4c21fa | 596 | struct geneve_dev_node *node; |
2d07dc79 | 597 | struct geneve_sock *gs; |
9b4437a5 | 598 | __u8 vni[3]; |
66d47003 | 599 | __u32 hash; |
2d07dc79 | 600 | |
9b4437a5 | 601 | gs = geneve_find_sock(gn, ipv6 ? AF_INET6 : AF_INET, geneve->info.key.tp_dst); |
371bd106 PS |
602 | if (gs) { |
603 | gs->refcnt++; | |
604 | goto out; | |
605 | } | |
606 | ||
9b4437a5 | 607 | gs = geneve_socket_create(net, geneve->info.key.tp_dst, ipv6, |
608 | geneve->use_udp6_rx_checksums); | |
2d07dc79 JL |
609 | if (IS_ERR(gs)) |
610 | return PTR_ERR(gs); | |
611 | ||
371bd106 PS |
612 | out: |
613 | gs->collect_md = geneve->collect_md; | |
8ed66f0e | 614 | #if IS_ENABLED(CONFIG_IPV6) |
4b4c21fa | 615 | if (ipv6) { |
fceb9c3e | 616 | rcu_assign_pointer(geneve->sock6, gs); |
4b4c21fa JB |
617 | node = &geneve->hlist6; |
618 | } else | |
8ed66f0e | 619 | #endif |
4b4c21fa | 620 | { |
fceb9c3e | 621 | rcu_assign_pointer(geneve->sock4, gs); |
4b4c21fa JB |
622 | node = &geneve->hlist4; |
623 | } | |
624 | node->geneve = geneve; | |
66d47003 | 625 | |
9b4437a5 | 626 | tunnel_id_to_vni(geneve->info.key.tun_id, vni); |
627 | hash = geneve_net_vni_hash(vni); | |
4b4c21fa | 628 | hlist_add_head_rcu(&node->hlist, &gs->vni_list[hash]); |
2d07dc79 JL |
629 | return 0; |
630 | } | |
631 | ||
8ed66f0e JL |
632 | static int geneve_open(struct net_device *dev) |
633 | { | |
634 | struct geneve_dev *geneve = netdev_priv(dev); | |
9b4437a5 | 635 | bool ipv6 = !!(geneve->info.mode & IP_TUNNEL_INFO_IPV6); |
8ed66f0e JL |
636 | bool metadata = geneve->collect_md; |
637 | int ret = 0; | |
638 | ||
8ed66f0e | 639 | #if IS_ENABLED(CONFIG_IPV6) |
8ed66f0e JL |
640 | if (ipv6 || metadata) |
641 | ret = geneve_sock_add(geneve, true); | |
642 | #endif | |
643 | if (!ret && (!ipv6 || metadata)) | |
644 | ret = geneve_sock_add(geneve, false); | |
645 | if (ret < 0) | |
646 | geneve_sock_release(geneve); | |
647 | ||
648 | return ret; | |
649 | } | |
650 | ||
2d07dc79 JL |
651 | static int geneve_stop(struct net_device *dev) |
652 | { | |
653 | struct geneve_dev *geneve = netdev_priv(dev); | |
2d07dc79 | 654 | |
4b4c21fa JB |
655 | hlist_del_init_rcu(&geneve->hlist4.hlist); |
656 | #if IS_ENABLED(CONFIG_IPV6) | |
657 | hlist_del_init_rcu(&geneve->hlist6.hlist); | |
658 | #endif | |
8ed66f0e | 659 | geneve_sock_release(geneve); |
371bd106 PS |
660 | return 0; |
661 | } | |
662 | ||
8ed66f0e | 663 | static void geneve_build_header(struct genevehdr *geneveh, |
c3ef5aa5 | 664 | const struct ip_tunnel_info *info) |
8ed66f0e JL |
665 | { |
666 | geneveh->ver = GENEVE_VER; | |
c3ef5aa5 | 667 | geneveh->opt_len = info->options_len / 4; |
668 | geneveh->oam = !!(info->key.tun_flags & TUNNEL_OAM); | |
669 | geneveh->critical = !!(info->key.tun_flags & TUNNEL_CRIT_OPT); | |
8ed66f0e | 670 | geneveh->rsvd1 = 0; |
c3ef5aa5 | 671 | tunnel_id_to_vni(info->key.tun_id, geneveh->vni); |
8ed66f0e JL |
672 | geneveh->proto_type = htons(ETH_P_TEB); |
673 | geneveh->rsvd2 = 0; | |
674 | ||
c3ef5aa5 | 675 | ip_tunnel_info_opts_get(geneveh->options, info); |
8ed66f0e JL |
676 | } |
677 | ||
c3ef5aa5 | 678 | static int geneve_build_skb(struct dst_entry *dst, struct sk_buff *skb, |
679 | const struct ip_tunnel_info *info, | |
680 | bool xnet, int ip_hdr_len) | |
371bd106 | 681 | { |
c3ef5aa5 | 682 | bool udp_sum = !!(info->key.tun_flags & TUNNEL_CSUM); |
8ed66f0e JL |
683 | struct genevehdr *gnvh; |
684 | int min_headroom; | |
685 | int err; | |
686 | ||
c3ef5aa5 | 687 | skb_reset_mac_header(skb); |
8ed66f0e JL |
688 | skb_scrub_packet(skb, xnet); |
689 | ||
c3ef5aa5 | 690 | min_headroom = LL_RESERVED_SPACE(dst->dev) + dst->header_len + |
691 | GENEVE_BASE_HLEN + info->options_len + ip_hdr_len; | |
8ed66f0e | 692 | err = skb_cow_head(skb, min_headroom); |
aed069df | 693 | if (unlikely(err)) |
8ed66f0e | 694 | goto free_dst; |
8ed66f0e | 695 | |
aed069df | 696 | err = udp_tunnel_handle_offloads(skb, udp_sum); |
1ba64fac | 697 | if (err) |
8ed66f0e | 698 | goto free_dst; |
8ed66f0e | 699 | |
d58ff351 | 700 | gnvh = __skb_push(skb, sizeof(*gnvh) + info->options_len); |
c3ef5aa5 | 701 | geneve_build_header(gnvh, info); |
8ed66f0e JL |
702 | skb_set_inner_protocol(skb, htons(ETH_P_TEB)); |
703 | return 0; | |
704 | ||
705 | free_dst: | |
706 | dst_release(dst); | |
707 | return err; | |
708 | } | |
8ed66f0e JL |
709 | |
710 | static struct rtable *geneve_get_v4_rt(struct sk_buff *skb, | |
711 | struct net_device *dev, | |
5b861f6b | 712 | struct geneve_sock *gs4, |
8ed66f0e | 713 | struct flowi4 *fl4, |
c3ef5aa5 | 714 | const struct ip_tunnel_info *info) |
e305ac6c | 715 | { |
db3c6139 | 716 | bool use_cache = ip_tunnel_dst_cache_usable(skb, info); |
e305ac6c | 717 | struct geneve_dev *geneve = netdev_priv(dev); |
468dfffc | 718 | struct dst_cache *dst_cache; |
e305ac6c PS |
719 | struct rtable *rt = NULL; |
720 | __u8 tos; | |
721 | ||
5b861f6b | 722 | if (!gs4) |
fceb9c3e | 723 | return ERR_PTR(-EIO); |
724 | ||
e305ac6c PS |
725 | memset(fl4, 0, sizeof(*fl4)); |
726 | fl4->flowi4_mark = skb->mark; | |
727 | fl4->flowi4_proto = IPPROTO_UDP; | |
9b4437a5 | 728 | fl4->daddr = info->key.u.ipv4.dst; |
729 | fl4->saddr = info->key.u.ipv4.src; | |
e305ac6c | 730 | |
9b4437a5 | 731 | tos = info->key.tos; |
732 | if ((tos == 1) && !geneve->collect_md) { | |
733 | tos = ip_tunnel_get_dsfield(ip_hdr(skb), skb); | |
734 | use_cache = false; | |
468dfffc | 735 | } |
9b4437a5 | 736 | fl4->flowi4_tos = RT_TOS(tos); |
468dfffc | 737 | |
c3ef5aa5 | 738 | dst_cache = (struct dst_cache *)&info->dst_cache; |
468dfffc PA |
739 | if (use_cache) { |
740 | rt = dst_cache_get_ip4(dst_cache, &fl4->saddr); | |
741 | if (rt) | |
742 | return rt; | |
e305ac6c | 743 | } |
e305ac6c PS |
744 | rt = ip_route_output_key(geneve->net, fl4); |
745 | if (IS_ERR(rt)) { | |
746 | netdev_dbg(dev, "no route to %pI4\n", &fl4->daddr); | |
fc4099f1 | 747 | return ERR_PTR(-ENETUNREACH); |
e305ac6c PS |
748 | } |
749 | if (rt->dst.dev == dev) { /* is this necessary? */ | |
750 | netdev_dbg(dev, "circular route to %pI4\n", &fl4->daddr); | |
e305ac6c | 751 | ip_rt_put(rt); |
fc4099f1 | 752 | return ERR_PTR(-ELOOP); |
e305ac6c | 753 | } |
468dfffc PA |
754 | if (use_cache) |
755 | dst_cache_set_ip4(dst_cache, &rt->dst, fl4->saddr); | |
e305ac6c PS |
756 | return rt; |
757 | } | |
758 | ||
8ed66f0e JL |
759 | #if IS_ENABLED(CONFIG_IPV6) |
760 | static struct dst_entry *geneve_get_v6_dst(struct sk_buff *skb, | |
761 | struct net_device *dev, | |
5b861f6b | 762 | struct geneve_sock *gs6, |
8ed66f0e | 763 | struct flowi6 *fl6, |
c3ef5aa5 | 764 | const struct ip_tunnel_info *info) |
8ed66f0e | 765 | { |
db3c6139 | 766 | bool use_cache = ip_tunnel_dst_cache_usable(skb, info); |
8ed66f0e | 767 | struct geneve_dev *geneve = netdev_priv(dev); |
8ed66f0e | 768 | struct dst_entry *dst = NULL; |
468dfffc | 769 | struct dst_cache *dst_cache; |
3a56f86f | 770 | __u8 prio; |
8ed66f0e | 771 | |
fceb9c3e | 772 | if (!gs6) |
773 | return ERR_PTR(-EIO); | |
774 | ||
8ed66f0e JL |
775 | memset(fl6, 0, sizeof(*fl6)); |
776 | fl6->flowi6_mark = skb->mark; | |
777 | fl6->flowi6_proto = IPPROTO_UDP; | |
9b4437a5 | 778 | fl6->daddr = info->key.u.ipv6.dst; |
779 | fl6->saddr = info->key.u.ipv6.src; | |
780 | prio = info->key.tos; | |
781 | if ((prio == 1) && !geneve->collect_md) { | |
782 | prio = ip_tunnel_get_dsfield(ip_hdr(skb), skb); | |
783 | use_cache = false; | |
468dfffc PA |
784 | } |
785 | ||
9b4437a5 | 786 | fl6->flowlabel = ip6_make_flowinfo(RT_TOS(prio), |
787 | info->key.label); | |
c3ef5aa5 | 788 | dst_cache = (struct dst_cache *)&info->dst_cache; |
468dfffc PA |
789 | if (use_cache) { |
790 | dst = dst_cache_get_ip6(dst_cache, &fl6->saddr); | |
791 | if (dst) | |
792 | return dst; | |
8ed66f0e | 793 | } |
8ed66f0e JL |
794 | if (ipv6_stub->ipv6_dst_lookup(geneve->net, gs6->sock->sk, &dst, fl6)) { |
795 | netdev_dbg(dev, "no route to %pI6\n", &fl6->daddr); | |
796 | return ERR_PTR(-ENETUNREACH); | |
797 | } | |
798 | if (dst->dev == dev) { /* is this necessary? */ | |
799 | netdev_dbg(dev, "circular route to %pI6\n", &fl6->daddr); | |
800 | dst_release(dst); | |
801 | return ERR_PTR(-ELOOP); | |
802 | } | |
803 | ||
468dfffc PA |
804 | if (use_cache) |
805 | dst_cache_set_ip6(dst_cache, dst, &fl6->saddr); | |
8ed66f0e JL |
806 | return dst; |
807 | } | |
808 | #endif | |
809 | ||
9b4437a5 | 810 | static int geneve_xmit_skb(struct sk_buff *skb, struct net_device *dev, |
c3ef5aa5 | 811 | struct geneve_dev *geneve, |
812 | const struct ip_tunnel_info *info) | |
2d07dc79 | 813 | { |
9b4437a5 | 814 | bool xnet = !net_eq(geneve->net, dev_net(geneve->dev)); |
815 | struct geneve_sock *gs4 = rcu_dereference(geneve->sock4); | |
816 | const struct ip_tunnel_key *key = &info->key; | |
817 | struct rtable *rt; | |
2d07dc79 | 818 | struct flowi4 fl4; |
8760ce58 | 819 | __u8 tos, ttl; |
e305ac6c | 820 | __be16 sport; |
371bd106 | 821 | __be16 df; |
bcceeec3 | 822 | int err; |
980c394c | 823 | |
5b861f6b | 824 | rt = geneve_get_v4_rt(skb, dev, gs4, &fl4, info); |
9b4437a5 | 825 | if (IS_ERR(rt)) |
826 | return PTR_ERR(rt); | |
371bd106 | 827 | |
52a589d5 XL |
828 | if (skb_dst(skb)) { |
829 | int mtu = dst_mtu(&rt->dst) - sizeof(struct iphdr) - | |
830 | GENEVE_BASE_HLEN - info->options_len - 14; | |
831 | ||
832 | skb_dst(skb)->ops->update_pmtu(skb_dst(skb), NULL, skb, mtu); | |
833 | } | |
834 | ||
371bd106 | 835 | sport = udp_flow_src_port(geneve->net, skb, 1, USHRT_MAX, true); |
9b4437a5 | 836 | if (geneve->collect_md) { |
837 | tos = ip_tunnel_ecn_encap(key->tos, ip_hdr(skb), skb); | |
371bd106 | 838 | ttl = key->ttl; |
e305ac6c | 839 | } else { |
9b4437a5 | 840 | tos = ip_tunnel_ecn_encap(fl4.flowi4_tos, ip_hdr(skb), skb); |
841 | ttl = key->ttl ? : ip4_dst_hoplimit(&rt->dst); | |
2d07dc79 | 842 | } |
9b4437a5 | 843 | df = key->tun_flags & TUNNEL_DONT_FRAGMENT ? htons(IP_DF) : 0; |
2d07dc79 | 844 | |
c3ef5aa5 | 845 | err = geneve_build_skb(&rt->dst, skb, info, xnet, sizeof(struct iphdr)); |
9b4437a5 | 846 | if (unlikely(err)) |
847 | return err; | |
efeb2267 | 848 | |
9b4437a5 | 849 | udp_tunnel_xmit_skb(rt, gs4->sock->sk, skb, fl4.saddr, fl4.daddr, |
850 | tos, ttl, df, sport, geneve->info.key.tp_dst, | |
851 | !net_eq(geneve->net, dev_net(geneve->dev)), | |
852 | !(info->key.tun_flags & TUNNEL_CSUM)); | |
853 | return 0; | |
2d07dc79 JL |
854 | } |
855 | ||
8ed66f0e | 856 | #if IS_ENABLED(CONFIG_IPV6) |
9b4437a5 | 857 | static int geneve6_xmit_skb(struct sk_buff *skb, struct net_device *dev, |
c3ef5aa5 | 858 | struct geneve_dev *geneve, |
859 | const struct ip_tunnel_info *info) | |
8ed66f0e | 860 | { |
9b4437a5 | 861 | bool xnet = !net_eq(geneve->net, dev_net(geneve->dev)); |
862 | struct geneve_sock *gs6 = rcu_dereference(geneve->sock6); | |
863 | const struct ip_tunnel_key *key = &info->key; | |
8ed66f0e | 864 | struct dst_entry *dst = NULL; |
8ed66f0e | 865 | struct flowi6 fl6; |
3a56f86f | 866 | __u8 prio, ttl; |
8ed66f0e | 867 | __be16 sport; |
bcceeec3 | 868 | int err; |
8ed66f0e | 869 | |
5b861f6b | 870 | dst = geneve_get_v6_dst(skb, dev, gs6, &fl6, info); |
9b4437a5 | 871 | if (IS_ERR(dst)) |
872 | return PTR_ERR(dst); | |
8ed66f0e | 873 | |
52a589d5 XL |
874 | if (skb_dst(skb)) { |
875 | int mtu = dst_mtu(dst) - sizeof(struct ipv6hdr) - | |
876 | GENEVE_BASE_HLEN - info->options_len - 14; | |
877 | ||
878 | skb_dst(skb)->ops->update_pmtu(skb_dst(skb), NULL, skb, mtu); | |
879 | } | |
880 | ||
8ed66f0e | 881 | sport = udp_flow_src_port(geneve->net, skb, 1, USHRT_MAX, true); |
9b4437a5 | 882 | if (geneve->collect_md) { |
883 | prio = ip_tunnel_ecn_encap(key->tos, ip_hdr(skb), skb); | |
884 | ttl = key->ttl; | |
885 | } else { | |
886 | prio = ip_tunnel_ecn_encap(ip6_tclass(fl6.flowlabel), | |
887 | ip_hdr(skb), skb); | |
888 | ttl = key->ttl ? : ip6_dst_hoplimit(dst); | |
889 | } | |
31ac1c19 | 890 | err = geneve_build_skb(dst, skb, info, xnet, sizeof(struct ipv6hdr)); |
9b4437a5 | 891 | if (unlikely(err)) |
892 | return err; | |
8ed66f0e | 893 | |
9b4437a5 | 894 | udp_tunnel6_xmit_skb(dst, gs6->sock->sk, skb, dev, |
895 | &fl6.saddr, &fl6.daddr, prio, ttl, | |
896 | info->key.label, sport, geneve->info.key.tp_dst, | |
897 | !(info->key.tun_flags & TUNNEL_CSUM)); | |
898 | return 0; | |
899 | } | |
900 | #endif | |
8ed66f0e | 901 | |
9b4437a5 | 902 | static netdev_tx_t geneve_xmit(struct sk_buff *skb, struct net_device *dev) |
903 | { | |
904 | struct geneve_dev *geneve = netdev_priv(dev); | |
905 | struct ip_tunnel_info *info = NULL; | |
906 | int err; | |
abe492b4 | 907 | |
9b4437a5 | 908 | if (geneve->collect_md) { |
909 | info = skb_tunnel_info(skb); | |
910 | if (unlikely(!info || !(info->mode & IP_TUNNEL_INFO_TX))) { | |
911 | err = -EINVAL; | |
912 | netdev_dbg(dev, "no tunnel metadata\n"); | |
aed069df | 913 | goto tx_error; |
9b4437a5 | 914 | } |
8ed66f0e | 915 | } else { |
9b4437a5 | 916 | info = &geneve->info; |
8ed66f0e | 917 | } |
8eb3b995 | 918 | |
a717e3f7 | 919 | rcu_read_lock(); |
9b4437a5 | 920 | #if IS_ENABLED(CONFIG_IPV6) |
921 | if (info->mode & IP_TUNNEL_INFO_IPV6) | |
922 | err = geneve6_xmit_skb(skb, dev, geneve, info); | |
923 | else | |
924 | #endif | |
925 | err = geneve_xmit_skb(skb, dev, geneve, info); | |
a717e3f7 | 926 | rcu_read_unlock(); |
8ed66f0e | 927 | |
9b4437a5 | 928 | if (likely(!err)) |
929 | return NETDEV_TX_OK; | |
8ed66f0e JL |
930 | tx_error: |
931 | dev_kfree_skb(skb); | |
aed069df | 932 | |
8ed66f0e JL |
933 | if (err == -ELOOP) |
934 | dev->stats.collisions++; | |
935 | else if (err == -ENETUNREACH) | |
936 | dev->stats.tx_carrier_errors++; | |
efeb2267 HY |
937 | |
938 | dev->stats.tx_errors++; | |
8ed66f0e JL |
939 | return NETDEV_TX_OK; |
940 | } | |
8ed66f0e | 941 | |
91572088 | 942 | static int geneve_change_mtu(struct net_device *dev, int new_mtu) |
55e5bfb5 | 943 | { |
91572088 JW |
944 | /* Only possible if called internally, ndo_change_mtu path's new_mtu |
945 | * is guaranteed to be between dev->min_mtu and dev->max_mtu. | |
55e5bfb5 | 946 | */ |
91572088 JW |
947 | if (new_mtu > dev->max_mtu) |
948 | new_mtu = dev->max_mtu; | |
aeee0e66 | 949 | |
55e5bfb5 DW |
950 | dev->mtu = new_mtu; |
951 | return 0; | |
952 | } | |
953 | ||
fc4099f1 PS |
954 | static int geneve_fill_metadata_dst(struct net_device *dev, struct sk_buff *skb) |
955 | { | |
956 | struct ip_tunnel_info *info = skb_tunnel_info(skb); | |
957 | struct geneve_dev *geneve = netdev_priv(dev); | |
fc4099f1 | 958 | |
b8812fa8 | 959 | if (ip_tunnel_info_af(info) == AF_INET) { |
9b4437a5 | 960 | struct rtable *rt; |
961 | struct flowi4 fl4; | |
5b861f6b | 962 | struct geneve_sock *gs4 = rcu_dereference(geneve->sock4); |
9b4437a5 | 963 | |
5b861f6b | 964 | rt = geneve_get_v4_rt(skb, dev, gs4, &fl4, info); |
b8812fa8 JL |
965 | if (IS_ERR(rt)) |
966 | return PTR_ERR(rt); | |
fc4099f1 | 967 | |
b8812fa8 JL |
968 | ip_rt_put(rt); |
969 | info->key.u.ipv4.src = fl4.saddr; | |
970 | #if IS_ENABLED(CONFIG_IPV6) | |
971 | } else if (ip_tunnel_info_af(info) == AF_INET6) { | |
9b4437a5 | 972 | struct dst_entry *dst; |
973 | struct flowi6 fl6; | |
5b861f6b | 974 | struct geneve_sock *gs6 = rcu_dereference(geneve->sock6); |
9b4437a5 | 975 | |
5b861f6b | 976 | dst = geneve_get_v6_dst(skb, dev, gs6, &fl6, info); |
b8812fa8 JL |
977 | if (IS_ERR(dst)) |
978 | return PTR_ERR(dst); | |
979 | ||
980 | dst_release(dst); | |
981 | info->key.u.ipv6.src = fl6.saddr; | |
982 | #endif | |
983 | } else { | |
984 | return -EINVAL; | |
985 | } | |
fc4099f1 | 986 | |
fc4099f1 PS |
987 | info->key.tp_src = udp_flow_src_port(geneve->net, skb, |
988 | 1, USHRT_MAX, true); | |
9b4437a5 | 989 | info->key.tp_dst = geneve->info.key.tp_dst; |
fc4099f1 PS |
990 | return 0; |
991 | } | |
992 | ||
2d07dc79 JL |
993 | static const struct net_device_ops geneve_netdev_ops = { |
994 | .ndo_init = geneve_init, | |
995 | .ndo_uninit = geneve_uninit, | |
996 | .ndo_open = geneve_open, | |
997 | .ndo_stop = geneve_stop, | |
998 | .ndo_start_xmit = geneve_xmit, | |
999 | .ndo_get_stats64 = ip_tunnel_get_stats64, | |
55e5bfb5 | 1000 | .ndo_change_mtu = geneve_change_mtu, |
2d07dc79 JL |
1001 | .ndo_validate_addr = eth_validate_addr, |
1002 | .ndo_set_mac_address = eth_mac_addr, | |
fc4099f1 | 1003 | .ndo_fill_metadata_dst = geneve_fill_metadata_dst, |
2d07dc79 JL |
1004 | }; |
1005 | ||
1006 | static void geneve_get_drvinfo(struct net_device *dev, | |
1007 | struct ethtool_drvinfo *drvinfo) | |
1008 | { | |
1009 | strlcpy(drvinfo->version, GENEVE_NETDEV_VER, sizeof(drvinfo->version)); | |
1010 | strlcpy(drvinfo->driver, "geneve", sizeof(drvinfo->driver)); | |
1011 | } | |
1012 | ||
1013 | static const struct ethtool_ops geneve_ethtool_ops = { | |
1014 | .get_drvinfo = geneve_get_drvinfo, | |
1015 | .get_link = ethtool_op_get_link, | |
1016 | }; | |
1017 | ||
1018 | /* Info for udev, that this is a virtual tunnel endpoint */ | |
1019 | static struct device_type geneve_type = { | |
1020 | .name = "geneve", | |
1021 | }; | |
1022 | ||
e5de25dc | 1023 | /* Calls the ndo_udp_tunnel_add of the caller in order to |
05ca4029 | 1024 | * supply the listening GENEVE udp ports. Callers are expected |
e5de25dc | 1025 | * to implement the ndo_udp_tunnel_add. |
05ca4029 | 1026 | */ |
2d2b13fc | 1027 | static void geneve_offload_rx_ports(struct net_device *dev, bool push) |
05ca4029 SA |
1028 | { |
1029 | struct net *net = dev_net(dev); | |
1030 | struct geneve_net *gn = net_generic(net, geneve_net_id); | |
1031 | struct geneve_sock *gs; | |
681e683f | 1032 | |
05ca4029 | 1033 | rcu_read_lock(); |
2d2b13fc SD |
1034 | list_for_each_entry_rcu(gs, &gn->sock_list, list) { |
1035 | if (push) { | |
1036 | udp_tunnel_push_rx_port(dev, gs->sock, | |
1037 | UDP_TUNNEL_TYPE_GENEVE); | |
1038 | } else { | |
1039 | udp_tunnel_drop_rx_port(dev, gs->sock, | |
1040 | UDP_TUNNEL_TYPE_GENEVE); | |
1041 | } | |
1042 | } | |
05ca4029 SA |
1043 | rcu_read_unlock(); |
1044 | } | |
05ca4029 | 1045 | |
2d07dc79 JL |
1046 | /* Initialize the device structure. */ |
1047 | static void geneve_setup(struct net_device *dev) | |
1048 | { | |
1049 | ether_setup(dev); | |
1050 | ||
1051 | dev->netdev_ops = &geneve_netdev_ops; | |
1052 | dev->ethtool_ops = &geneve_ethtool_ops; | |
cf124db5 | 1053 | dev->needs_free_netdev = true; |
2d07dc79 JL |
1054 | |
1055 | SET_NETDEV_DEVTYPE(dev, &geneve_type); | |
1056 | ||
2d07dc79 JL |
1057 | dev->features |= NETIF_F_LLTX; |
1058 | dev->features |= NETIF_F_SG | NETIF_F_HW_CSUM; | |
1059 | dev->features |= NETIF_F_RXCSUM; | |
1060 | dev->features |= NETIF_F_GSO_SOFTWARE; | |
1061 | ||
2d07dc79 JL |
1062 | dev->hw_features |= NETIF_F_SG | NETIF_F_HW_CSUM | NETIF_F_RXCSUM; |
1063 | dev->hw_features |= NETIF_F_GSO_SOFTWARE; | |
2d07dc79 | 1064 | |
91572088 JW |
1065 | /* MTU range: 68 - (something less than 65535) */ |
1066 | dev->min_mtu = ETH_MIN_MTU; | |
1067 | /* The max_mtu calculation does not take account of GENEVE | |
1068 | * options, to avoid excluding potentially valid | |
1069 | * configurations. This will be further reduced by IPvX hdr size. | |
1070 | */ | |
1071 | dev->max_mtu = IP_MAX_MTU - GENEVE_BASE_HLEN - dev->hard_header_len; | |
1072 | ||
2d07dc79 | 1073 | netif_keep_dst(dev); |
fc41cdb3 | 1074 | dev->priv_flags &= ~IFF_TX_SKB_SHARING; |
ed961ac2 | 1075 | dev->priv_flags |= IFF_LIVE_ADDR_CHANGE | IFF_NO_QUEUE; |
87cd3dca | 1076 | eth_hw_addr_random(dev); |
2d07dc79 JL |
1077 | } |
1078 | ||
1079 | static const struct nla_policy geneve_policy[IFLA_GENEVE_MAX + 1] = { | |
1080 | [IFLA_GENEVE_ID] = { .type = NLA_U32 }, | |
1081 | [IFLA_GENEVE_REMOTE] = { .len = FIELD_SIZEOF(struct iphdr, daddr) }, | |
8ed66f0e | 1082 | [IFLA_GENEVE_REMOTE6] = { .len = sizeof(struct in6_addr) }, |
8760ce58 | 1083 | [IFLA_GENEVE_TTL] = { .type = NLA_U8 }, |
d8951125 | 1084 | [IFLA_GENEVE_TOS] = { .type = NLA_U8 }, |
8eb3b995 | 1085 | [IFLA_GENEVE_LABEL] = { .type = NLA_U32 }, |
cd7918b3 | 1086 | [IFLA_GENEVE_PORT] = { .type = NLA_U16 }, |
e305ac6c | 1087 | [IFLA_GENEVE_COLLECT_METADATA] = { .type = NLA_FLAG }, |
abe492b4 TH |
1088 | [IFLA_GENEVE_UDP_CSUM] = { .type = NLA_U8 }, |
1089 | [IFLA_GENEVE_UDP_ZERO_CSUM6_TX] = { .type = NLA_U8 }, | |
1090 | [IFLA_GENEVE_UDP_ZERO_CSUM6_RX] = { .type = NLA_U8 }, | |
2d07dc79 JL |
1091 | }; |
1092 | ||
a8b8a889 MS |
1093 | static int geneve_validate(struct nlattr *tb[], struct nlattr *data[], |
1094 | struct netlink_ext_ack *extack) | |
2d07dc79 JL |
1095 | { |
1096 | if (tb[IFLA_ADDRESS]) { | |
c5ebc440 GM |
1097 | if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN) { |
1098 | NL_SET_ERR_MSG_ATTR(extack, tb[IFLA_ADDRESS], | |
1099 | "Provided link layer address is not Ethernet"); | |
2d07dc79 | 1100 | return -EINVAL; |
c5ebc440 | 1101 | } |
2d07dc79 | 1102 | |
c5ebc440 GM |
1103 | if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS]))) { |
1104 | NL_SET_ERR_MSG_ATTR(extack, tb[IFLA_ADDRESS], | |
1105 | "Provided Ethernet address is not unicast"); | |
2d07dc79 | 1106 | return -EADDRNOTAVAIL; |
c5ebc440 | 1107 | } |
2d07dc79 JL |
1108 | } |
1109 | ||
c5ebc440 GM |
1110 | if (!data) { |
1111 | NL_SET_ERR_MSG(extack, | |
1112 | "Not enough attributes provided to perform the operation"); | |
2d07dc79 | 1113 | return -EINVAL; |
c5ebc440 | 1114 | } |
2d07dc79 JL |
1115 | |
1116 | if (data[IFLA_GENEVE_ID]) { | |
1117 | __u32 vni = nla_get_u32(data[IFLA_GENEVE_ID]); | |
1118 | ||
c5ebc440 GM |
1119 | if (vni >= GENEVE_N_VID) { |
1120 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_ID], | |
1121 | "Geneve ID must be lower than 16777216"); | |
2d07dc79 | 1122 | return -ERANGE; |
c5ebc440 | 1123 | } |
2d07dc79 JL |
1124 | } |
1125 | ||
1126 | return 0; | |
1127 | } | |
1128 | ||
371bd106 | 1129 | static struct geneve_dev *geneve_find_dev(struct geneve_net *gn, |
9b4437a5 | 1130 | const struct ip_tunnel_info *info, |
371bd106 PS |
1131 | bool *tun_on_same_port, |
1132 | bool *tun_collect_md) | |
1133 | { | |
9b4437a5 | 1134 | struct geneve_dev *geneve, *t = NULL; |
371bd106 PS |
1135 | |
1136 | *tun_on_same_port = false; | |
1137 | *tun_collect_md = false; | |
371bd106 | 1138 | list_for_each_entry(geneve, &gn->geneve_list, next) { |
9b4437a5 | 1139 | if (info->key.tp_dst == geneve->info.key.tp_dst) { |
371bd106 PS |
1140 | *tun_collect_md = geneve->collect_md; |
1141 | *tun_on_same_port = true; | |
1142 | } | |
9b4437a5 | 1143 | if (info->key.tun_id == geneve->info.key.tun_id && |
1144 | info->key.tp_dst == geneve->info.key.tp_dst && | |
1145 | !memcmp(&info->key.u, &geneve->info.key.u, sizeof(info->key.u))) | |
371bd106 PS |
1146 | t = geneve; |
1147 | } | |
1148 | return t; | |
1149 | } | |
1150 | ||
9b4437a5 | 1151 | static bool is_tnl_info_zero(const struct ip_tunnel_info *info) |
1152 | { | |
3fa5f11d SB |
1153 | return !(info->key.tun_id || info->key.tun_flags || info->key.tos || |
1154 | info->key.ttl || info->key.label || info->key.tp_src || | |
1155 | memchr_inv(&info->key.u, 0, sizeof(info->key.u))); | |
9b4437a5 | 1156 | } |
1157 | ||
5b861f6b GM |
1158 | static bool geneve_dst_addr_equal(struct ip_tunnel_info *a, |
1159 | struct ip_tunnel_info *b) | |
1160 | { | |
1161 | if (ip_tunnel_info_af(a) == AF_INET) | |
1162 | return a->key.u.ipv4.dst == b->key.u.ipv4.dst; | |
1163 | else | |
1164 | return ipv6_addr_equal(&a->key.u.ipv6.dst, &b->key.u.ipv6.dst); | |
1165 | } | |
1166 | ||
e305ac6c | 1167 | static int geneve_configure(struct net *net, struct net_device *dev, |
c5ebc440 | 1168 | struct netlink_ext_ack *extack, |
9b4437a5 | 1169 | const struct ip_tunnel_info *info, |
1170 | bool metadata, bool ipv6_rx_csum) | |
2d07dc79 JL |
1171 | { |
1172 | struct geneve_net *gn = net_generic(net, geneve_net_id); | |
371bd106 PS |
1173 | struct geneve_dev *t, *geneve = netdev_priv(dev); |
1174 | bool tun_collect_md, tun_on_same_port; | |
184fc8b5 | 1175 | int err, encap_len; |
2d07dc79 | 1176 | |
c5ebc440 GM |
1177 | if (metadata && !is_tnl_info_zero(info)) { |
1178 | NL_SET_ERR_MSG(extack, | |
1179 | "Device is externally controlled, so attributes (VNI, Port, and so on) must not be specified"); | |
8ed66f0e | 1180 | return -EINVAL; |
c5ebc440 | 1181 | } |
2d07dc79 JL |
1182 | |
1183 | geneve->net = net; | |
1184 | geneve->dev = dev; | |
1185 | ||
9b4437a5 | 1186 | t = geneve_find_dev(gn, info, &tun_on_same_port, &tun_collect_md); |
371bd106 PS |
1187 | if (t) |
1188 | return -EBUSY; | |
1189 | ||
184fc8b5 PA |
1190 | /* make enough headroom for basic scenario */ |
1191 | encap_len = GENEVE_BASE_HLEN + ETH_HLEN; | |
9a1c44d9 | 1192 | if (!metadata && ip_tunnel_info_af(info) == AF_INET) { |
184fc8b5 | 1193 | encap_len += sizeof(struct iphdr); |
91572088 JW |
1194 | dev->max_mtu -= sizeof(struct iphdr); |
1195 | } else { | |
184fc8b5 | 1196 | encap_len += sizeof(struct ipv6hdr); |
91572088 JW |
1197 | dev->max_mtu -= sizeof(struct ipv6hdr); |
1198 | } | |
184fc8b5 PA |
1199 | dev->needed_headroom = encap_len + ETH_HLEN; |
1200 | ||
371bd106 | 1201 | if (metadata) { |
c5ebc440 GM |
1202 | if (tun_on_same_port) { |
1203 | NL_SET_ERR_MSG(extack, | |
1204 | "There can be only one externally controlled device on a destination port"); | |
371bd106 | 1205 | return -EPERM; |
c5ebc440 | 1206 | } |
371bd106 | 1207 | } else { |
c5ebc440 GM |
1208 | if (tun_collect_md) { |
1209 | NL_SET_ERR_MSG(extack, | |
1210 | "There already exists an externally controlled device on this destination port"); | |
371bd106 | 1211 | return -EPERM; |
c5ebc440 | 1212 | } |
371bd106 PS |
1213 | } |
1214 | ||
9b4437a5 | 1215 | dst_cache_reset(&geneve->info.dst_cache); |
1216 | geneve->info = *info; | |
1217 | geneve->collect_md = metadata; | |
1218 | geneve->use_udp6_rx_checksums = ipv6_rx_csum; | |
468dfffc | 1219 | |
2d07dc79 JL |
1220 | err = register_netdevice(dev); |
1221 | if (err) | |
1222 | return err; | |
1223 | ||
e305ac6c | 1224 | list_add(&geneve->next, &gn->geneve_list); |
e305ac6c PS |
1225 | return 0; |
1226 | } | |
1227 | ||
9b4437a5 | 1228 | static void init_tnl_info(struct ip_tunnel_info *info, __u16 dst_port) |
1229 | { | |
1230 | memset(info, 0, sizeof(*info)); | |
1231 | info->key.tp_dst = htons(dst_port); | |
1232 | } | |
1233 | ||
c5ebc440 GM |
1234 | static int geneve_nl2info(struct nlattr *tb[], struct nlattr *data[], |
1235 | struct netlink_ext_ack *extack, | |
1236 | struct ip_tunnel_info *info, bool *metadata, | |
1237 | bool *use_udp6_rx_checksums, bool changelink) | |
e305ac6c | 1238 | { |
c5ebc440 GM |
1239 | int attrtype; |
1240 | ||
1241 | if (data[IFLA_GENEVE_REMOTE] && data[IFLA_GENEVE_REMOTE6]) { | |
1242 | NL_SET_ERR_MSG(extack, | |
1243 | "Cannot specify both IPv4 and IPv6 Remote addresses"); | |
8ed66f0e | 1244 | return -EINVAL; |
c5ebc440 | 1245 | } |
8ed66f0e JL |
1246 | |
1247 | if (data[IFLA_GENEVE_REMOTE]) { | |
c5ebc440 GM |
1248 | if (changelink && (ip_tunnel_info_af(info) == AF_INET6)) { |
1249 | attrtype = IFLA_GENEVE_REMOTE; | |
1250 | goto change_notsup; | |
1251 | } | |
5b861f6b GM |
1252 | |
1253 | info->key.u.ipv4.dst = | |
8ed66f0e | 1254 | nla_get_in_addr(data[IFLA_GENEVE_REMOTE]); |
9b4437a5 | 1255 | |
5b861f6b | 1256 | if (IN_MULTICAST(ntohl(info->key.u.ipv4.dst))) { |
c5ebc440 GM |
1257 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_REMOTE], |
1258 | "Remote IPv4 address cannot be Multicast"); | |
9b4437a5 | 1259 | return -EINVAL; |
1260 | } | |
8ed66f0e JL |
1261 | } |
1262 | ||
1263 | if (data[IFLA_GENEVE_REMOTE6]) { | |
9b4437a5 | 1264 | #if IS_ENABLED(CONFIG_IPV6) |
c5ebc440 GM |
1265 | if (changelink && (ip_tunnel_info_af(info) == AF_INET)) { |
1266 | attrtype = IFLA_GENEVE_REMOTE6; | |
1267 | goto change_notsup; | |
1268 | } | |
5b861f6b GM |
1269 | |
1270 | info->mode = IP_TUNNEL_INFO_IPV6; | |
1271 | info->key.u.ipv6.dst = | |
8ed66f0e JL |
1272 | nla_get_in6_addr(data[IFLA_GENEVE_REMOTE6]); |
1273 | ||
5b861f6b | 1274 | if (ipv6_addr_type(&info->key.u.ipv6.dst) & |
8ed66f0e | 1275 | IPV6_ADDR_LINKLOCAL) { |
c5ebc440 GM |
1276 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_REMOTE6], |
1277 | "Remote IPv6 address cannot be link-local"); | |
8ed66f0e JL |
1278 | return -EINVAL; |
1279 | } | |
5b861f6b | 1280 | if (ipv6_addr_is_multicast(&info->key.u.ipv6.dst)) { |
c5ebc440 GM |
1281 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_REMOTE6], |
1282 | "Remote IPv6 address cannot be Multicast"); | |
9b4437a5 | 1283 | return -EINVAL; |
1284 | } | |
5b861f6b GM |
1285 | info->key.tun_flags |= TUNNEL_CSUM; |
1286 | *use_udp6_rx_checksums = true; | |
9b4437a5 | 1287 | #else |
c5ebc440 GM |
1288 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_REMOTE6], |
1289 | "IPv6 support not enabled in the kernel"); | |
9b4437a5 | 1290 | return -EPFNOSUPPORT; |
1291 | #endif | |
8ed66f0e JL |
1292 | } |
1293 | ||
9b4437a5 | 1294 | if (data[IFLA_GENEVE_ID]) { |
1295 | __u32 vni; | |
1296 | __u8 tvni[3]; | |
5b861f6b | 1297 | __be64 tunid; |
9b4437a5 | 1298 | |
e277de5f | 1299 | vni = nla_get_u32(data[IFLA_GENEVE_ID]); |
9b4437a5 | 1300 | tvni[0] = (vni & 0x00ff0000) >> 16; |
1301 | tvni[1] = (vni & 0x0000ff00) >> 8; | |
1302 | tvni[2] = vni & 0x000000ff; | |
e305ac6c | 1303 | |
5b861f6b | 1304 | tunid = vni_to_tunnel_id(tvni); |
c5ebc440 GM |
1305 | if (changelink && (tunid != info->key.tun_id)) { |
1306 | attrtype = IFLA_GENEVE_ID; | |
1307 | goto change_notsup; | |
1308 | } | |
5b861f6b | 1309 | info->key.tun_id = tunid; |
9b4437a5 | 1310 | } |
5b861f6b | 1311 | |
8760ce58 | 1312 | if (data[IFLA_GENEVE_TTL]) |
5b861f6b | 1313 | info->key.ttl = nla_get_u8(data[IFLA_GENEVE_TTL]); |
8760ce58 | 1314 | |
d8951125 | 1315 | if (data[IFLA_GENEVE_TOS]) |
5b861f6b | 1316 | info->key.tos = nla_get_u8(data[IFLA_GENEVE_TOS]); |
d8951125 | 1317 | |
9b4437a5 | 1318 | if (data[IFLA_GENEVE_LABEL]) { |
5b861f6b | 1319 | info->key.label = nla_get_be32(data[IFLA_GENEVE_LABEL]) & |
9b4437a5 | 1320 | IPV6_FLOWLABEL_MASK; |
c5ebc440 GM |
1321 | if (info->key.label && (!(info->mode & IP_TUNNEL_INFO_IPV6))) { |
1322 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_LABEL], | |
1323 | "Label attribute only applies for IPv6 Geneve devices"); | |
9b4437a5 | 1324 | return -EINVAL; |
c5ebc440 | 1325 | } |
9b4437a5 | 1326 | } |
8eb3b995 | 1327 | |
5b861f6b | 1328 | if (data[IFLA_GENEVE_PORT]) { |
c5ebc440 GM |
1329 | if (changelink) { |
1330 | attrtype = IFLA_GENEVE_PORT; | |
1331 | goto change_notsup; | |
1332 | } | |
5b861f6b GM |
1333 | info->key.tp_dst = nla_get_be16(data[IFLA_GENEVE_PORT]); |
1334 | } | |
2d07dc79 | 1335 | |
5b861f6b | 1336 | if (data[IFLA_GENEVE_COLLECT_METADATA]) { |
c5ebc440 GM |
1337 | if (changelink) { |
1338 | attrtype = IFLA_GENEVE_COLLECT_METADATA; | |
1339 | goto change_notsup; | |
1340 | } | |
5b861f6b GM |
1341 | *metadata = true; |
1342 | } | |
2d07dc79 | 1343 | |
5b861f6b | 1344 | if (data[IFLA_GENEVE_UDP_CSUM]) { |
c5ebc440 GM |
1345 | if (changelink) { |
1346 | attrtype = IFLA_GENEVE_UDP_CSUM; | |
1347 | goto change_notsup; | |
1348 | } | |
5b861f6b GM |
1349 | if (nla_get_u8(data[IFLA_GENEVE_UDP_CSUM])) |
1350 | info->key.tun_flags |= TUNNEL_CSUM; | |
1351 | } | |
abe492b4 | 1352 | |
5b861f6b | 1353 | if (data[IFLA_GENEVE_UDP_ZERO_CSUM6_TX]) { |
f9094b76 | 1354 | #if IS_ENABLED(CONFIG_IPV6) |
c5ebc440 GM |
1355 | if (changelink) { |
1356 | attrtype = IFLA_GENEVE_UDP_ZERO_CSUM6_TX; | |
1357 | goto change_notsup; | |
1358 | } | |
5b861f6b GM |
1359 | if (nla_get_u8(data[IFLA_GENEVE_UDP_ZERO_CSUM6_TX])) |
1360 | info->key.tun_flags &= ~TUNNEL_CSUM; | |
f9094b76 HL |
1361 | #else |
1362 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_UDP_ZERO_CSUM6_TX], | |
1363 | "IPv6 support not enabled in the kernel"); | |
1364 | return -EPFNOSUPPORT; | |
1365 | #endif | |
5b861f6b | 1366 | } |
abe492b4 | 1367 | |
5b861f6b | 1368 | if (data[IFLA_GENEVE_UDP_ZERO_CSUM6_RX]) { |
f9094b76 | 1369 | #if IS_ENABLED(CONFIG_IPV6) |
c5ebc440 GM |
1370 | if (changelink) { |
1371 | attrtype = IFLA_GENEVE_UDP_ZERO_CSUM6_RX; | |
1372 | goto change_notsup; | |
1373 | } | |
5b861f6b GM |
1374 | if (nla_get_u8(data[IFLA_GENEVE_UDP_ZERO_CSUM6_RX])) |
1375 | *use_udp6_rx_checksums = false; | |
f9094b76 HL |
1376 | #else |
1377 | NL_SET_ERR_MSG_ATTR(extack, data[IFLA_GENEVE_UDP_ZERO_CSUM6_RX], | |
1378 | "IPv6 support not enabled in the kernel"); | |
1379 | return -EPFNOSUPPORT; | |
1380 | #endif | |
5b861f6b GM |
1381 | } |
1382 | ||
1383 | return 0; | |
c5ebc440 GM |
1384 | change_notsup: |
1385 | NL_SET_ERR_MSG_ATTR(extack, data[attrtype], | |
1386 | "Changing VNI, Port, endpoint IP address family, external, and UDP checksum attributes are not supported"); | |
1387 | return -EOPNOTSUPP; | |
5b861f6b GM |
1388 | } |
1389 | ||
1390 | static int geneve_newlink(struct net *net, struct net_device *dev, | |
1391 | struct nlattr *tb[], struct nlattr *data[], | |
1392 | struct netlink_ext_ack *extack) | |
1393 | { | |
1394 | bool use_udp6_rx_checksums = false; | |
1395 | struct ip_tunnel_info info; | |
1396 | bool metadata = false; | |
1397 | int err; | |
1398 | ||
1399 | init_tnl_info(&info, GENEVE_UDP_PORT); | |
c5ebc440 | 1400 | err = geneve_nl2info(tb, data, extack, &info, &metadata, |
5b861f6b GM |
1401 | &use_udp6_rx_checksums, false); |
1402 | if (err) | |
1403 | return err; | |
abe492b4 | 1404 | |
c5ebc440 GM |
1405 | return geneve_configure(net, dev, extack, &info, metadata, |
1406 | use_udp6_rx_checksums); | |
2d07dc79 JL |
1407 | } |
1408 | ||
5b861f6b GM |
1409 | /* Quiesces the geneve device data path for both TX and RX. |
1410 | * | |
1411 | * On transmit geneve checks for non-NULL geneve_sock before it proceeds. | |
1412 | * So, if we set that socket to NULL under RCU and wait for synchronize_net() | |
1413 | * to complete for the existing set of in-flight packets to be transmitted, | |
1414 | * then we would have quiesced the transmit data path. All the future packets | |
1415 | * will get dropped until we unquiesce the data path. | |
1416 | * | |
1417 | * On receive geneve dereference the geneve_sock stashed in the socket. So, | |
1418 | * if we set that to NULL under RCU and wait for synchronize_net() to | |
1419 | * complete, then we would have quiesced the receive data path. | |
1420 | */ | |
1421 | static void geneve_quiesce(struct geneve_dev *geneve, struct geneve_sock **gs4, | |
1422 | struct geneve_sock **gs6) | |
1423 | { | |
1424 | *gs4 = rtnl_dereference(geneve->sock4); | |
1425 | rcu_assign_pointer(geneve->sock4, NULL); | |
1426 | if (*gs4) | |
1427 | rcu_assign_sk_user_data((*gs4)->sock->sk, NULL); | |
1428 | #if IS_ENABLED(CONFIG_IPV6) | |
1429 | *gs6 = rtnl_dereference(geneve->sock6); | |
1430 | rcu_assign_pointer(geneve->sock6, NULL); | |
1431 | if (*gs6) | |
1432 | rcu_assign_sk_user_data((*gs6)->sock->sk, NULL); | |
1433 | #else | |
1434 | *gs6 = NULL; | |
1435 | #endif | |
1436 | synchronize_net(); | |
1437 | } | |
1438 | ||
1439 | /* Resumes the geneve device data path for both TX and RX. */ | |
1440 | static void geneve_unquiesce(struct geneve_dev *geneve, struct geneve_sock *gs4, | |
1441 | struct geneve_sock __maybe_unused *gs6) | |
1442 | { | |
1443 | rcu_assign_pointer(geneve->sock4, gs4); | |
1444 | if (gs4) | |
1445 | rcu_assign_sk_user_data(gs4->sock->sk, gs4); | |
1446 | #if IS_ENABLED(CONFIG_IPV6) | |
1447 | rcu_assign_pointer(geneve->sock6, gs6); | |
1448 | if (gs6) | |
1449 | rcu_assign_sk_user_data(gs6->sock->sk, gs6); | |
1450 | #endif | |
1451 | synchronize_net(); | |
1452 | } | |
1453 | ||
1454 | static int geneve_changelink(struct net_device *dev, struct nlattr *tb[], | |
1455 | struct nlattr *data[], | |
1456 | struct netlink_ext_ack *extack) | |
1457 | { | |
1458 | struct geneve_dev *geneve = netdev_priv(dev); | |
1459 | struct geneve_sock *gs4, *gs6; | |
1460 | struct ip_tunnel_info info; | |
1461 | bool metadata; | |
1462 | bool use_udp6_rx_checksums; | |
1463 | int err; | |
1464 | ||
1465 | /* If the geneve device is configured for metadata (or externally | |
1466 | * controlled, for example, OVS), then nothing can be changed. | |
1467 | */ | |
1468 | if (geneve->collect_md) | |
1469 | return -EOPNOTSUPP; | |
1470 | ||
1471 | /* Start with the existing info. */ | |
1472 | memcpy(&info, &geneve->info, sizeof(info)); | |
1473 | metadata = geneve->collect_md; | |
1474 | use_udp6_rx_checksums = geneve->use_udp6_rx_checksums; | |
c5ebc440 | 1475 | err = geneve_nl2info(tb, data, extack, &info, &metadata, |
5b861f6b GM |
1476 | &use_udp6_rx_checksums, true); |
1477 | if (err) | |
1478 | return err; | |
1479 | ||
1480 | if (!geneve_dst_addr_equal(&geneve->info, &info)) | |
1481 | dst_cache_reset(&info.dst_cache); | |
1482 | ||
1483 | geneve_quiesce(geneve, &gs4, &gs6); | |
1484 | geneve->info = info; | |
1485 | geneve->collect_md = metadata; | |
1486 | geneve->use_udp6_rx_checksums = use_udp6_rx_checksums; | |
1487 | geneve_unquiesce(geneve, gs4, gs6); | |
1488 | ||
1489 | return 0; | |
1490 | } | |
1491 | ||
2d07dc79 JL |
1492 | static void geneve_dellink(struct net_device *dev, struct list_head *head) |
1493 | { | |
1494 | struct geneve_dev *geneve = netdev_priv(dev); | |
1495 | ||
2d07dc79 JL |
1496 | list_del(&geneve->next); |
1497 | unregister_netdevice_queue(dev, head); | |
1498 | } | |
1499 | ||
1500 | static size_t geneve_get_size(const struct net_device *dev) | |
1501 | { | |
1502 | return nla_total_size(sizeof(__u32)) + /* IFLA_GENEVE_ID */ | |
8ed66f0e | 1503 | nla_total_size(sizeof(struct in6_addr)) + /* IFLA_GENEVE_REMOTE{6} */ |
8760ce58 | 1504 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_TTL */ |
d8951125 | 1505 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_TOS */ |
8eb3b995 | 1506 | nla_total_size(sizeof(__be32)) + /* IFLA_GENEVE_LABEL */ |
7bbe33ff | 1507 | nla_total_size(sizeof(__be16)) + /* IFLA_GENEVE_PORT */ |
e305ac6c | 1508 | nla_total_size(0) + /* IFLA_GENEVE_COLLECT_METADATA */ |
abe492b4 TH |
1509 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_UDP_CSUM */ |
1510 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_UDP_ZERO_CSUM6_TX */ | |
1511 | nla_total_size(sizeof(__u8)) + /* IFLA_GENEVE_UDP_ZERO_CSUM6_RX */ | |
2d07dc79 JL |
1512 | 0; |
1513 | } | |
1514 | ||
1515 | static int geneve_fill_info(struct sk_buff *skb, const struct net_device *dev) | |
1516 | { | |
1517 | struct geneve_dev *geneve = netdev_priv(dev); | |
9b4437a5 | 1518 | struct ip_tunnel_info *info = &geneve->info; |
fd7eafd0 | 1519 | bool metadata = geneve->collect_md; |
9b4437a5 | 1520 | __u8 tmp_vni[3]; |
2d07dc79 JL |
1521 | __u32 vni; |
1522 | ||
9b4437a5 | 1523 | tunnel_id_to_vni(info->key.tun_id, tmp_vni); |
1524 | vni = (tmp_vni[0] << 16) | (tmp_vni[1] << 8) | tmp_vni[2]; | |
2d07dc79 JL |
1525 | if (nla_put_u32(skb, IFLA_GENEVE_ID, vni)) |
1526 | goto nla_put_failure; | |
1527 | ||
fd7eafd0 | 1528 | if (!metadata && ip_tunnel_info_af(info) == AF_INET) { |
8ed66f0e | 1529 | if (nla_put_in_addr(skb, IFLA_GENEVE_REMOTE, |
9b4437a5 | 1530 | info->key.u.ipv4.dst)) |
1531 | goto nla_put_failure; | |
9b4437a5 | 1532 | if (nla_put_u8(skb, IFLA_GENEVE_UDP_CSUM, |
1533 | !!(info->key.tun_flags & TUNNEL_CSUM))) | |
8ed66f0e | 1534 | goto nla_put_failure; |
9b4437a5 | 1535 | |
8ed66f0e | 1536 | #if IS_ENABLED(CONFIG_IPV6) |
fd7eafd0 | 1537 | } else if (!metadata) { |
8ed66f0e | 1538 | if (nla_put_in6_addr(skb, IFLA_GENEVE_REMOTE6, |
9b4437a5 | 1539 | &info->key.u.ipv6.dst)) |
1540 | goto nla_put_failure; | |
9b4437a5 | 1541 | if (nla_put_u8(skb, IFLA_GENEVE_UDP_ZERO_CSUM6_TX, |
1542 | !(info->key.tun_flags & TUNNEL_CSUM))) | |
1543 | goto nla_put_failure; | |
11387fe4 | 1544 | #endif |
fd7eafd0 | 1545 | } |
2d07dc79 | 1546 | |
9b4437a5 | 1547 | if (nla_put_u8(skb, IFLA_GENEVE_TTL, info->key.ttl) || |
1548 | nla_put_u8(skb, IFLA_GENEVE_TOS, info->key.tos) || | |
1549 | nla_put_be32(skb, IFLA_GENEVE_LABEL, info->key.label)) | |
8760ce58 JL |
1550 | goto nla_put_failure; |
1551 | ||
9b4437a5 | 1552 | if (nla_put_be16(skb, IFLA_GENEVE_PORT, info->key.tp_dst)) |
cd7918b3 PS |
1553 | goto nla_put_failure; |
1554 | ||
fd7eafd0 | 1555 | if (metadata && nla_put_flag(skb, IFLA_GENEVE_COLLECT_METADATA)) |
f9094b76 | 1556 | goto nla_put_failure; |
fd7eafd0 | 1557 | |
f9094b76 | 1558 | #if IS_ENABLED(CONFIG_IPV6) |
fd7eafd0 HL |
1559 | if (nla_put_u8(skb, IFLA_GENEVE_UDP_ZERO_CSUM6_RX, |
1560 | !geneve->use_udp6_rx_checksums)) | |
1561 | goto nla_put_failure; | |
f9094b76 | 1562 | #endif |
fd7eafd0 | 1563 | |
2d07dc79 JL |
1564 | return 0; |
1565 | ||
1566 | nla_put_failure: | |
1567 | return -EMSGSIZE; | |
1568 | } | |
1569 | ||
1570 | static struct rtnl_link_ops geneve_link_ops __read_mostly = { | |
1571 | .kind = "geneve", | |
1572 | .maxtype = IFLA_GENEVE_MAX, | |
1573 | .policy = geneve_policy, | |
1574 | .priv_size = sizeof(struct geneve_dev), | |
1575 | .setup = geneve_setup, | |
1576 | .validate = geneve_validate, | |
1577 | .newlink = geneve_newlink, | |
5b861f6b | 1578 | .changelink = geneve_changelink, |
2d07dc79 JL |
1579 | .dellink = geneve_dellink, |
1580 | .get_size = geneve_get_size, | |
1581 | .fill_info = geneve_fill_info, | |
1582 | }; | |
1583 | ||
e305ac6c PS |
1584 | struct net_device *geneve_dev_create_fb(struct net *net, const char *name, |
1585 | u8 name_assign_type, u16 dst_port) | |
1586 | { | |
1587 | struct nlattr *tb[IFLA_MAX + 1]; | |
9b4437a5 | 1588 | struct ip_tunnel_info info; |
e305ac6c | 1589 | struct net_device *dev; |
106da663 | 1590 | LIST_HEAD(list_kill); |
e305ac6c PS |
1591 | int err; |
1592 | ||
1593 | memset(tb, 0, sizeof(tb)); | |
1594 | dev = rtnl_create_link(net, name, name_assign_type, | |
1595 | &geneve_link_ops, tb); | |
1596 | if (IS_ERR(dev)) | |
1597 | return dev; | |
1598 | ||
9b4437a5 | 1599 | init_tnl_info(&info, dst_port); |
c5ebc440 | 1600 | err = geneve_configure(net, dev, NULL, &info, true, true); |
106da663 ND |
1601 | if (err) { |
1602 | free_netdev(dev); | |
1603 | return ERR_PTR(err); | |
1604 | } | |
7e059158 DW |
1605 | |
1606 | /* openvswitch users expect packet sizes to be unrestricted, | |
1607 | * so set the largest MTU we can. | |
1608 | */ | |
91572088 | 1609 | err = geneve_change_mtu(dev, IP_MAX_MTU); |
7e059158 DW |
1610 | if (err) |
1611 | goto err; | |
1612 | ||
41009481 ND |
1613 | err = rtnl_configure_link(dev, NULL); |
1614 | if (err < 0) | |
1615 | goto err; | |
1616 | ||
e305ac6c | 1617 | return dev; |
9b4437a5 | 1618 | err: |
106da663 ND |
1619 | geneve_dellink(dev, &list_kill); |
1620 | unregister_netdevice_many(&list_kill); | |
7e059158 | 1621 | return ERR_PTR(err); |
e305ac6c PS |
1622 | } |
1623 | EXPORT_SYMBOL_GPL(geneve_dev_create_fb); | |
1624 | ||
681e683f HFS |
1625 | static int geneve_netdevice_event(struct notifier_block *unused, |
1626 | unsigned long event, void *ptr) | |
1627 | { | |
1628 | struct net_device *dev = netdev_notifier_info_to_dev(ptr); | |
1629 | ||
2d2b13fc | 1630 | if (event == NETDEV_UDP_TUNNEL_PUSH_INFO || |
04584957 | 1631 | event == NETDEV_UDP_TUNNEL_DROP_INFO) { |
2d2b13fc | 1632 | geneve_offload_rx_ports(dev, event == NETDEV_UDP_TUNNEL_PUSH_INFO); |
04584957 SD |
1633 | } else if (event == NETDEV_UNREGISTER) { |
1634 | geneve_offload_rx_ports(dev, false); | |
1635 | } else if (event == NETDEV_REGISTER) { | |
1636 | geneve_offload_rx_ports(dev, true); | |
1637 | } | |
681e683f HFS |
1638 | |
1639 | return NOTIFY_DONE; | |
1640 | } | |
1641 | ||
1642 | static struct notifier_block geneve_notifier_block __read_mostly = { | |
1643 | .notifier_call = geneve_netdevice_event, | |
1644 | }; | |
1645 | ||
2d07dc79 JL |
1646 | static __net_init int geneve_init_net(struct net *net) |
1647 | { | |
1648 | struct geneve_net *gn = net_generic(net, geneve_net_id); | |
2d07dc79 JL |
1649 | |
1650 | INIT_LIST_HEAD(&gn->geneve_list); | |
371bd106 | 1651 | INIT_LIST_HEAD(&gn->sock_list); |
2d07dc79 JL |
1652 | return 0; |
1653 | } | |
1654 | ||
1655 | static void __net_exit geneve_exit_net(struct net *net) | |
1656 | { | |
1657 | struct geneve_net *gn = net_generic(net, geneve_net_id); | |
1658 | struct geneve_dev *geneve, *next; | |
1659 | struct net_device *dev, *aux; | |
1660 | LIST_HEAD(list); | |
1661 | ||
1662 | rtnl_lock(); | |
1663 | ||
1664 | /* gather any geneve devices that were moved into this ns */ | |
1665 | for_each_netdev_safe(net, dev, aux) | |
1666 | if (dev->rtnl_link_ops == &geneve_link_ops) | |
1667 | unregister_netdevice_queue(dev, &list); | |
1668 | ||
1669 | /* now gather any other geneve devices that were created in this ns */ | |
1670 | list_for_each_entry_safe(geneve, next, &gn->geneve_list, next) { | |
1671 | /* If geneve->dev is in the same netns, it was already added | |
1672 | * to the list by the previous loop. | |
1673 | */ | |
1674 | if (!net_eq(dev_net(geneve->dev), net)) | |
1675 | unregister_netdevice_queue(geneve->dev, &list); | |
1676 | } | |
1677 | ||
1678 | /* unregister the devices gathered above */ | |
1679 | unregister_netdevice_many(&list); | |
1680 | rtnl_unlock(); | |
ab384b63 | 1681 | WARN_ON_ONCE(!list_empty(&gn->sock_list)); |
2d07dc79 JL |
1682 | } |
1683 | ||
1684 | static struct pernet_operations geneve_net_ops = { | |
1685 | .init = geneve_init_net, | |
1686 | .exit = geneve_exit_net, | |
1687 | .id = &geneve_net_id, | |
1688 | .size = sizeof(struct geneve_net), | |
1689 | }; | |
1690 | ||
1691 | static int __init geneve_init_module(void) | |
1692 | { | |
1693 | int rc; | |
1694 | ||
1695 | rc = register_pernet_subsys(&geneve_net_ops); | |
1696 | if (rc) | |
1697 | goto out1; | |
1698 | ||
681e683f | 1699 | rc = register_netdevice_notifier(&geneve_notifier_block); |
2d07dc79 JL |
1700 | if (rc) |
1701 | goto out2; | |
1702 | ||
681e683f HFS |
1703 | rc = rtnl_link_register(&geneve_link_ops); |
1704 | if (rc) | |
1705 | goto out3; | |
1706 | ||
2d07dc79 | 1707 | return 0; |
681e683f HFS |
1708 | out3: |
1709 | unregister_netdevice_notifier(&geneve_notifier_block); | |
2d07dc79 JL |
1710 | out2: |
1711 | unregister_pernet_subsys(&geneve_net_ops); | |
1712 | out1: | |
1713 | return rc; | |
1714 | } | |
1715 | late_initcall(geneve_init_module); | |
1716 | ||
1717 | static void __exit geneve_cleanup_module(void) | |
1718 | { | |
1719 | rtnl_link_unregister(&geneve_link_ops); | |
681e683f | 1720 | unregister_netdevice_notifier(&geneve_notifier_block); |
2d07dc79 JL |
1721 | unregister_pernet_subsys(&geneve_net_ops); |
1722 | } | |
1723 | module_exit(geneve_cleanup_module); | |
1724 | ||
1725 | MODULE_LICENSE("GPL"); | |
1726 | MODULE_VERSION(GENEVE_NETDEV_VER); | |
1727 | MODULE_AUTHOR("John W. Linville <linville@tuxdriver.com>"); | |
1728 | MODULE_DESCRIPTION("Interface driver for GENEVE encapsulated traffic"); | |
1729 | MODULE_ALIAS_RTNL_LINK("geneve"); |