]>
Commit | Line | Data |
---|---|---|
b2441318 | 1 | /* SPDX-License-Identifier: GPL-2.0 */ |
5d0aa2cc PM |
2 | #ifndef _NF_CONNTRACK_ZONES_H |
3 | #define _NF_CONNTRACK_ZONES_H | |
4 | ||
62da9865 | 5 | #include <linux/netfilter/nf_conntrack_zones_common.h> |
308ac914 DB |
6 | |
7 | #if IS_ENABLED(CONFIG_NF_CONNTRACK) | |
8 | #include <net/netfilter/nf_conntrack_extend.h> | |
9 | ||
10 | static inline const struct nf_conntrack_zone * | |
11 | nf_ct_zone(const struct nf_conn *ct) | |
5d0aa2cc PM |
12 | { |
13 | #ifdef CONFIG_NF_CONNTRACK_ZONES | |
6c8dee98 FW |
14 | return &ct->zone; |
15 | #else | |
16 | return &nf_ct_zone_dflt; | |
5d0aa2cc | 17 | #endif |
5d0aa2cc PM |
18 | } |
19 | ||
308ac914 | 20 | static inline const struct nf_conntrack_zone * |
5e8018fc DB |
21 | nf_ct_zone_init(struct nf_conntrack_zone *zone, u16 id, u8 dir, u8 flags) |
22 | { | |
23 | zone->id = id; | |
24 | zone->flags = flags; | |
25 | zone->dir = dir; | |
26 | ||
27 | return zone; | |
28 | } | |
29 | ||
30 | static inline const struct nf_conntrack_zone * | |
31 | nf_ct_zone_tmpl(const struct nf_conn *tmpl, const struct sk_buff *skb, | |
32 | struct nf_conntrack_zone *tmp) | |
33 | { | |
6c8dee98 | 34 | #ifdef CONFIG_NF_CONNTRACK_ZONES |
5e8018fc DB |
35 | if (!tmpl) |
36 | return &nf_ct_zone_dflt; | |
37 | ||
6c8dee98 FW |
38 | if (tmpl->zone.flags & NF_CT_FLAG_MARK) |
39 | return nf_ct_zone_init(tmp, skb->mark, tmpl->zone.dir, 0); | |
40 | #endif | |
41 | return nf_ct_zone(tmpl); | |
5e8018fc DB |
42 | } |
43 | ||
6c8dee98 FW |
44 | static inline void nf_ct_zone_add(struct nf_conn *ct, |
45 | const struct nf_conntrack_zone *zone) | |
308ac914 | 46 | { |
5e8018fc | 47 | #ifdef CONFIG_NF_CONNTRACK_ZONES |
6c8dee98 | 48 | ct->zone = *zone; |
5e8018fc | 49 | #endif |
308ac914 DB |
50 | } |
51 | ||
deedb590 DB |
52 | static inline bool nf_ct_zone_matches_dir(const struct nf_conntrack_zone *zone, |
53 | enum ip_conntrack_dir dir) | |
54 | { | |
55 | return zone->dir & (1 << dir); | |
56 | } | |
57 | ||
58 | static inline u16 nf_ct_zone_id(const struct nf_conntrack_zone *zone, | |
59 | enum ip_conntrack_dir dir) | |
60 | { | |
506e65df | 61 | #ifdef CONFIG_NF_CONNTRACK_ZONES |
deedb590 DB |
62 | return nf_ct_zone_matches_dir(zone, dir) ? |
63 | zone->id : NF_CT_DEFAULT_ZONE_ID; | |
506e65df FW |
64 | #else |
65 | return NF_CT_DEFAULT_ZONE_ID; | |
66 | #endif | |
deedb590 DB |
67 | } |
68 | ||
308ac914 | 69 | static inline bool nf_ct_zone_equal(const struct nf_conn *a, |
deedb590 DB |
70 | const struct nf_conntrack_zone *b, |
71 | enum ip_conntrack_dir dir) | |
72 | { | |
506e65df | 73 | #ifdef CONFIG_NF_CONNTRACK_ZONES |
deedb590 DB |
74 | return nf_ct_zone_id(nf_ct_zone(a), dir) == |
75 | nf_ct_zone_id(b, dir); | |
506e65df FW |
76 | #else |
77 | return true; | |
78 | #endif | |
deedb590 DB |
79 | } |
80 | ||
81 | static inline bool nf_ct_zone_equal_any(const struct nf_conn *a, | |
82 | const struct nf_conntrack_zone *b) | |
308ac914 | 83 | { |
506e65df | 84 | #ifdef CONFIG_NF_CONNTRACK_ZONES |
308ac914 | 85 | return nf_ct_zone(a)->id == b->id; |
506e65df FW |
86 | #else |
87 | return true; | |
88 | #endif | |
308ac914 DB |
89 | } |
90 | #endif /* IS_ENABLED(CONFIG_NF_CONNTRACK) */ | |
5d0aa2cc | 91 | #endif /* _NF_CONNTRACK_ZONES_H */ |