]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - include/net/net_namespace.h
net: Kill hold_net release_net
[mirror_ubuntu-bionic-kernel.git] / include / net / net_namespace.h
CommitLineData
5f256bec
EB
1/*
2 * Operations on the network namespace
3 */
4#ifndef __NET_NET_NAMESPACE_H
5#define __NET_NET_NAMESPACE_H
6
60063497 7#include <linux/atomic.h>
5f256bec
EB
8#include <linux/workqueue.h>
9#include <linux/list.h>
bee95250 10#include <linux/sysctl.h>
5f256bec 11
6a662719 12#include <net/flow.h>
8efa6e93 13#include <net/netns/core.h>
852566f5 14#include <net/netns/mib.h>
a0a53c8b 15#include <net/netns/unix.h>
2aaef4e4 16#include <net/netns/packet.h>
8afd351c 17#include <net/netns/ipv4.h>
b0f159db 18#include <net/netns/ipv6.h>
633fc86f 19#include <net/netns/ieee802154_6lowpan.h>
4db67e80 20#include <net/netns/sctp.h>
67019cc9 21#include <net/netns/dccp.h>
f3c1a44a 22#include <net/netns/netfilter.h>
8d870052 23#include <net/netns/x_tables.h>
dfdb8d79
AD
24#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
25#include <net/netns/conntrack.h>
26#endif
99633ab2 27#include <net/netns/nftables.h>
d62ddc21 28#include <net/netns/xfrm.h>
0189197f 29#include <net/netns/mpls.h>
435d5f4b 30#include <linux/ns_common.h>
a0a53c8b 31
038e7332 32struct user_namespace;
457c4cbc 33struct proc_dir_entry;
2774c7ab 34struct net_device;
97c53cac 35struct sock;
1597fbc0 36struct ctl_table_header;
dec827d1 37struct net_generic;
134e6375 38struct sock;
2553d064 39struct netns_ipvs;
1597fbc0 40
7c28bd0b
ED
41
42#define NETDEV_HASHBITS 8
43#define NETDEV_HASHENTRIES (1 << NETDEV_HASHBITS)
44
5f256bec 45struct net {
a685e089
AV
46 atomic_t passive; /* To decided when the network
47 * namespace should be freed.
48 */
5f256bec 49 atomic_t count; /* To decided when the network
a685e089 50 * namespace should be shut down.
5f256bec 51 */
8e602ce2
ED
52 spinlock_t rules_mod_lock;
53
33cf7c90
ED
54 atomic64_t cookie_gen;
55
5f256bec 56 struct list_head list; /* list of network namespaces */
2b035b39 57 struct list_head cleanup_list; /* namespaces on death row */
72ad937a 58 struct list_head exit_list; /* Use only net_mutex */
457c4cbc 59
038e7332 60 struct user_namespace *user_ns; /* Owning user namespace */
0c7aecd4 61 struct idr netns_ids;
038e7332 62
435d5f4b 63 struct ns_common ns;
98f842e6 64
457c4cbc
EB
65 struct proc_dir_entry *proc_net;
66 struct proc_dir_entry *proc_net_stat;
881d966b 67
73455092
AV
68#ifdef CONFIG_SYSCTL
69 struct ctl_table_set sysctls;
70#endif
95bdfccb 71
8e602ce2
ED
72 struct sock *rtnl; /* rtnetlink socket */
73 struct sock *genl_sock;
2774c7ab 74
881d966b
EB
75 struct list_head dev_base_head;
76 struct hlist_head *dev_name_head;
77 struct hlist_head *dev_index_head;
4e985ada 78 unsigned int dev_base_seq; /* protected by rtnl_mutex */
aa79e66e 79 int ifindex;
50624c93 80 unsigned int dev_unreg_count;
97c53cac 81
5fd30ee7
DL
82 /* core fib_rules */
83 struct list_head rules_ops;
5fd30ee7 84
d12d01d6 85
8e602ce2 86 struct net_device *loopback_dev; /* The loopback */
8efa6e93 87 struct netns_core core;
852566f5 88 struct netns_mib mib;
2aaef4e4 89 struct netns_packet packet;
a0a53c8b 90 struct netns_unix unx;
8afd351c 91 struct netns_ipv4 ipv4;
dfd56b8b 92#if IS_ENABLED(CONFIG_IPV6)
b0f159db
DL
93 struct netns_ipv6 ipv6;
94#endif
633fc86f
AA
95#if IS_ENABLED(CONFIG_IEEE802154_6LOWPAN)
96 struct netns_ieee802154_lowpan ieee802154_lowpan;
97#endif
4db67e80
EB
98#if defined(CONFIG_IP_SCTP) || defined(CONFIG_IP_SCTP_MODULE)
99 struct netns_sctp sctp;
100#endif
67019cc9
PE
101#if defined(CONFIG_IP_DCCP) || defined(CONFIG_IP_DCCP_MODULE)
102 struct netns_dccp dccp;
103#endif
8d870052 104#ifdef CONFIG_NETFILTER
f3c1a44a 105 struct netns_nf nf;
8d870052 106 struct netns_xt xt;
dfdb8d79
AD
107#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
108 struct netns_ct ct;
c038a767 109#endif
99633ab2
PNA
110#if defined(CONFIG_NF_TABLES) || defined(CONFIG_NF_TABLES_MODULE)
111 struct netns_nftables nft;
112#endif
c038a767
AW
113#if IS_ENABLED(CONFIG_NF_DEFRAG_IPV6)
114 struct netns_nf_frag nf_frag;
dfdb8d79 115#endif
cd8c20b6
AD
116 struct sock *nfnl;
117 struct sock *nfnl_stash;
d62ddc21 118#endif
3d23e349 119#ifdef CONFIG_WEXT_CORE
b333b3d2 120 struct sk_buff_head wext_nlevents;
8d870052 121#endif
1c87733d 122 struct net_generic __rcu *gen;
8e602ce2
ED
123
124 /* Note : following structs are cache line aligned */
125#ifdef CONFIG_XFRM
126 struct netns_xfrm xfrm;
127#endif
8b4d14d8 128#if IS_ENABLED(CONFIG_IP_VS)
61b1ab45 129 struct netns_ipvs *ipvs;
0189197f
EB
130#endif
131#if IS_ENABLED(CONFIG_MPLS)
132 struct netns_mpls mpls;
8b4d14d8 133#endif
51d7cccf 134 struct sock *diag_nlsk;
5aad1de5 135 atomic_t fnhe_genid;
5f256bec
EB
136};
137
c0f39322
DL
138#include <linux/seq_file_net.h>
139
4fabcd71 140/* Init's network namespace */
5f256bec 141extern struct net init_net;
a4aa834a 142
d727abcb 143#ifdef CONFIG_NET_NS
e67e16ea
JP
144struct net *copy_net_ns(unsigned long flags, struct user_namespace *user_ns,
145 struct net *old_net);
225c0a01 146
d727abcb
EB
147#else /* CONFIG_NET_NS */
148#include <linux/sched.h>
149#include <linux/nsproxy.h>
038e7332
EB
150static inline struct net *copy_net_ns(unsigned long flags,
151 struct user_namespace *user_ns, struct net *old_net)
9dd776b6 152{
d727abcb
EB
153 if (flags & CLONE_NEWNET)
154 return ERR_PTR(-EINVAL);
155 return old_net;
9dd776b6 156}
d727abcb 157#endif /* CONFIG_NET_NS */
225c0a01
DL
158
159
160extern struct list_head net_namespace_list;
9dd776b6 161
e67e16ea
JP
162struct net *get_net_ns_by_pid(pid_t pid);
163struct net *get_net_ns_by_fd(int pid);
30ffee84 164
535d3ae9
RK
165#ifdef CONFIG_SYSCTL
166void ipx_register_sysctl(void);
167void ipx_unregister_sysctl(void);
168#else
169#define ipx_register_sysctl()
170#define ipx_unregister_sysctl()
171#endif
172
d4655795 173#ifdef CONFIG_NET_NS
e67e16ea 174void __put_net(struct net *net);
5f256bec
EB
175
176static inline struct net *get_net(struct net *net)
177{
178 atomic_inc(&net->count);
179 return net;
180}
181
077130c0
EB
182static inline struct net *maybe_get_net(struct net *net)
183{
184 /* Used when we know struct net exists but we
185 * aren't guaranteed a previous reference count
186 * exists. If the reference count is zero this
187 * function fails and returns NULL.
188 */
189 if (!atomic_inc_not_zero(&net->count))
190 net = NULL;
191 return net;
192}
193
5f256bec
EB
194static inline void put_net(struct net *net)
195{
196 if (atomic_dec_and_test(&net->count))
197 __put_net(net);
198}
199
878628fb
YH
200static inline
201int net_eq(const struct net *net1, const struct net *net2)
202{
203 return net1 == net2;
204}
a685e089 205
e67e16ea 206void net_drop_ns(void *);
a685e089 207
d4655795 208#else
b9f75f45 209
d4655795
PE
210static inline struct net *get_net(struct net *net)
211{
212 return net;
213}
214
215static inline void put_net(struct net *net)
216{
217}
218
5d1e4468
DL
219static inline struct net *maybe_get_net(struct net *net)
220{
221 return net;
222}
223
224static inline
225int net_eq(const struct net *net1, const struct net *net2)
226{
227 return 1;
228}
a685e089
AV
229
230#define net_drop_ns NULL
5d1e4468
DL
231#endif
232
233
8f424b5f
ED
234#ifdef CONFIG_NET_NS
235
236static inline void write_pnet(struct net **pnet, struct net *net)
237{
238 *pnet = net;
239}
240
241static inline struct net *read_pnet(struct net * const *pnet)
242{
243 return *pnet;
244}
245
246#else
247
248#define write_pnet(pnet, net) do { (void)(net);} while (0)
249#define read_pnet(pnet) (&init_net)
250
251#endif
5d1e4468 252
5f256bec
EB
253#define for_each_net(VAR) \
254 list_for_each_entry(VAR, &net_namespace_list, list)
255
11a28d37
JB
256#define for_each_net_rcu(VAR) \
257 list_for_each_entry_rcu(VAR, &net_namespace_list, list)
258
4665079c
PE
259#ifdef CONFIG_NET_NS
260#define __net_init
261#define __net_exit
022cbae6 262#define __net_initdata
04a6f82c 263#define __net_initconst
4665079c
PE
264#else
265#define __net_init __init
266#define __net_exit __exit_refok
022cbae6 267#define __net_initdata __initdata
04a6f82c 268#define __net_initconst __initconst
4665079c 269#endif
5f256bec 270
0c7aecd4
ND
271int peernet2id(struct net *net, struct net *peer);
272struct net *get_net_ns_by_id(struct net *net, int id);
273
5f256bec
EB
274struct pernet_operations {
275 struct list_head list;
276 int (*init)(struct net *net);
277 void (*exit)(struct net *net);
72ad937a 278 void (*exit_batch)(struct list_head *net_exit_list);
f875bae0
EB
279 int *id;
280 size_t size;
5f256bec
EB
281};
282
17edde52
EB
283/*
284 * Use these carefully. If you implement a network device and it
285 * needs per network namespace operations use device pernet operations,
286 * otherwise use pernet subsys operations.
287 *
4edf547b
JB
288 * Network interfaces need to be removed from a dying netns _before_
289 * subsys notifiers can be called, as most of the network code cleanup
290 * (which is done from subsys notifiers) runs with the assumption that
291 * dev_remove_pack has been called so no new packets will arrive during
292 * and after the cleanup functions have been called. dev_remove_pack
293 * is not per namespace so instead the guarantee of no more packets
294 * arriving in a network namespace is provided by ensuring that all
295 * network devices and all sockets have left the network namespace
296 * before the cleanup methods are called.
17edde52
EB
297 *
298 * For the longest time the ipv4 icmp code was registered as a pernet
299 * device which caused kernel oops, and panics during network
300 * namespace cleanup. So please don't get this wrong.
301 */
e67e16ea
JP
302int register_pernet_subsys(struct pernet_operations *);
303void unregister_pernet_subsys(struct pernet_operations *);
304int register_pernet_device(struct pernet_operations *);
305void unregister_pernet_device(struct pernet_operations *);
f875bae0 306
95bdfccb
EB
307struct ctl_table;
308struct ctl_table_header;
d62c612e 309
2ca794e5 310#ifdef CONFIG_SYSCTL
e67e16ea
JP
311int net_sysctl_init(void);
312struct ctl_table_header *register_net_sysctl(struct net *net, const char *path,
313 struct ctl_table *table);
314void unregister_net_sysctl_table(struct ctl_table_header *header);
48c74958
EB
315#else
316static inline int net_sysctl_init(void) { return 0; }
317static inline struct ctl_table_header *register_net_sysctl(struct net *net,
318 const char *path, struct ctl_table *table)
319{
320 return NULL;
321}
322static inline void unregister_net_sysctl_table(struct ctl_table_header *header)
323{
324}
325#endif
326
ca4c3fc2 327static inline int rt_genid_ipv4(struct net *net)
b42664f8 328{
ca4c3fc2 329 return atomic_read(&net->ipv4.rt_genid);
b42664f8
ND
330}
331
ca4c3fc2 332static inline void rt_genid_bump_ipv4(struct net *net)
b42664f8 333{
ca4c3fc2 334 atomic_inc(&net->ipv4.rt_genid);
335}
336
705f1c86 337extern void (*__fib6_flush_trees)(struct net *net);
ca4c3fc2 338static inline void rt_genid_bump_ipv6(struct net *net)
339{
705f1c86
HFS
340 if (__fib6_flush_trees)
341 __fib6_flush_trees(net);
ca4c3fc2 342}
ca4c3fc2 343
599018a7
LR
344#if IS_ENABLED(CONFIG_IEEE802154_6LOWPAN)
345static inline struct netns_ieee802154_lowpan *
346net_ieee802154_lowpan(struct net *net)
347{
348 return &net->ieee802154_lowpan;
349}
599018a7
LR
350#endif
351
ca4c3fc2 352/* For callers who don't really care about whether it's IPv4 or IPv6 */
353static inline void rt_genid_bump_all(struct net *net)
354{
355 rt_genid_bump_ipv4(net);
356 rt_genid_bump_ipv6(net);
b42664f8 357}
95bdfccb 358
5aad1de5
TT
359static inline int fnhe_genid(struct net *net)
360{
361 return atomic_read(&net->fnhe_genid);
362}
363
364static inline void fnhe_genid_bump(struct net *net)
365{
366 atomic_inc(&net->fnhe_genid);
367}
368
5f256bec 369#endif /* __NET_NET_NAMESPACE_H */