[mirror_ubuntu-jammy-kernel.git] / include / net / netfilter / nf_flow_table.h

#ifndef _NF_FLOW_TABLE_H
#define _NF_FLOW_TABLE_H

#include <linux/in.h>
#include <linux/in6.h>
#include <linux/netdevice.h>
#include <linux/rhashtable.h>
#include <linux/rcupdate.h>
#include <net/dst.h>

struct nf_flowtable;

struct nf_flowtable_type {
	struct list_head		list;
	int				family;
	void				(*gc)(struct work_struct *work);
	const struct rhashtable_params	*params;
	nf_hookfn			*hook;
	struct module			*owner;
};

struct nf_flowtable {
	struct rhashtable		rhashtable;
	const struct nf_flowtable_type	*type;
	struct delayed_work		gc_work;
};

enum flow_offload_tuple_dir {
	FLOW_OFFLOAD_DIR_ORIGINAL,
	FLOW_OFFLOAD_DIR_REPLY,
	__FLOW_OFFLOAD_DIR_MAX		= FLOW_OFFLOAD_DIR_REPLY,
};
#define FLOW_OFFLOAD_DIR_MAX	(__FLOW_OFFLOAD_DIR_MAX + 1)

struct flow_offload_tuple {
	union {
		struct in_addr		src_v4;
		struct in6_addr		src_v6;
	};
	union {
		struct in_addr		dst_v4;
		struct in6_addr		dst_v6;
	};
	struct {
		__be16			src_port;
		__be16			dst_port;
	};

	int				iifidx;

	u8				l3proto;
	u8				l4proto;
	u8				dir;

	int				oifidx;

	struct dst_entry		*dst_cache;
};

struct flow_offload_tuple_rhash {
	struct rhash_head		node;
	struct flow_offload_tuple	tuple;
};

#define FLOW_OFFLOAD_SNAT	0x1
#define FLOW_OFFLOAD_DNAT	0x2
#define FLOW_OFFLOAD_DYING	0x4

struct flow_offload {
	struct flow_offload_tuple_rhash		tuplehash[FLOW_OFFLOAD_DIR_MAX];
	u32					flags;
	union {
		/* Your private driver data here. */
		u32		timeout;
	};
};

#define NF_FLOW_TIMEOUT (30 * HZ)

struct nf_flow_route {
	struct {
		struct dst_entry	*dst;
		int			ifindex;
	} tuple[FLOW_OFFLOAD_DIR_MAX];
};

struct flow_offload *flow_offload_alloc(struct nf_conn *ct,
					struct nf_flow_route *route);
void flow_offload_free(struct flow_offload *flow);

int flow_offload_add(struct nf_flowtable *flow_table, struct flow_offload *flow);
void flow_offload_del(struct nf_flowtable *flow_table, struct flow_offload *flow);
struct flow_offload_tuple_rhash *flow_offload_lookup(struct nf_flowtable *flow_table,
						     struct flow_offload_tuple *tuple);
int nf_flow_table_iterate(struct nf_flowtable *flow_table,
			  void (*iter)(struct flow_offload *flow, void *data),
			  void *data);
void nf_flow_offload_work_gc(struct work_struct *work);
extern const struct rhashtable_params nf_flow_offload_rhash_params;

void flow_offload_dead(struct flow_offload *flow);

int nf_flow_snat_port(const struct flow_offload *flow,
		      struct sk_buff *skb, unsigned int thoff,
		      u8 protocol, enum flow_offload_tuple_dir dir);
int nf_flow_dnat_port(const struct flow_offload *flow,
		      struct sk_buff *skb, unsigned int thoff,
		      u8 protocol, enum flow_offload_tuple_dir dir);

struct flow_ports {
	__be16 source, dest;
};

unsigned int nf_flow_offload_ip_hook(void *priv, struct sk_buff *skb,
				     const struct nf_hook_state *state);
unsigned int nf_flow_offload_ipv6_hook(void *priv, struct sk_buff *skb,
				       const struct nf_hook_state *state);

#define MODULE_ALIAS_NF_FLOWTABLE(family)	\
	MODULE_ALIAS("nf-flowtable-" __stringify(family))

#endif /* _FLOW_OFFLOAD_H */
Commit	Line	Data
3b49e2e9 PNA	1	#ifndef _NF_FLOW_TABLE_H
	2	#define _NF_FLOW_TABLE_H
	3
ac2a6666 PNA	4	#include <linux/in.h>
	5	#include <linux/in6.h>
	6	#include <linux/netdevice.h>
3b49e2e9	7	#include <linux/rhashtable.h>
ac2a6666 PNA	8	#include <linux/rcupdate.h>
ac2a6666 PNA	9	#include <net/dst.h>
3b49e2e9 PNA	10
	11	struct nf_flowtable;
	12
	13	struct nf_flowtable_type {
	14	struct list_head list;
	15	int family;
	16	void (gc)(struct work_struct work);
	17	const struct rhashtable_params *params;
	18	nf_hookfn *hook;
	19	struct module *owner;
	20	};
	21
	22	struct nf_flowtable {
	23	struct rhashtable rhashtable;
	24	const struct nf_flowtable_type *type;
	25	struct delayed_work gc_work;
	26	};
	27
ac2a6666 PNA	28	enum flow_offload_tuple_dir {
	29	FLOW_OFFLOAD_DIR_ORIGINAL,
	30	FLOW_OFFLOAD_DIR_REPLY,
	31	__FLOW_OFFLOAD_DIR_MAX = FLOW_OFFLOAD_DIR_REPLY,
	32	};
	33	#define FLOW_OFFLOAD_DIR_MAX (__FLOW_OFFLOAD_DIR_MAX + 1)
	34
	35	struct flow_offload_tuple {
	36	union {
	37	struct in_addr src_v4;
	38	struct in6_addr src_v6;
	39	};
	40	union {
	41	struct in_addr dst_v4;
	42	struct in6_addr dst_v6;
	43	};
	44	struct {
	45	__be16 src_port;
	46	__be16 dst_port;
	47	};
	48
	49	int iifidx;
	50
	51	u8 l3proto;
	52	u8 l4proto;
	53	u8 dir;
	54
	55	int oifidx;
	56
	57	struct dst_entry *dst_cache;
	58	};
	59
	60	struct flow_offload_tuple_rhash {
	61	struct rhash_head node;
	62	struct flow_offload_tuple tuple;
	63	};
	64
	65	#define FLOW_OFFLOAD_SNAT 0x1
	66	#define FLOW_OFFLOAD_DNAT 0x2
	67	#define FLOW_OFFLOAD_DYING 0x4
	68
	69	struct flow_offload {
	70	struct flow_offload_tuple_rhash tuplehash[FLOW_OFFLOAD_DIR_MAX];
	71	u32 flags;
	72	union {
	73	/* Your private driver data here. */
	74	u32 timeout;
	75	};
	76	};
	77
	78	#define NF_FLOW_TIMEOUT (30 * HZ)
	79
	80	struct nf_flow_route {
	81	struct {
	82	struct dst_entry *dst;
	83	int ifindex;
	84	} tuple[FLOW_OFFLOAD_DIR_MAX];
	85	};
	86
	87	struct flow_offload flow_offload_alloc(struct nf_conn ct,
	88	struct nf_flow_route *route);
	89	void flow_offload_free(struct flow_offload *flow);
	90
	91	int flow_offload_add(struct nf_flowtable flow_table, struct flow_offload flow);
92	void flow_offload_del(struct nf_flowtable flow_table, struct flow_offload flow);
93	struct flow_offload_tuple_rhash flow_offload_lookup(struct nf_flowtable flow_table,
94	struct flow_offload_tuple *tuple);
95	int nf_flow_table_iterate(struct nf_flowtable *flow_table,
96	void (iter)(struct flow_offload flow, void *data),
97	void *data);
98	void nf_flow_offload_work_gc(struct work_struct *work);
99	extern const struct rhashtable_params nf_flow_offload_rhash_params;
100
101	void flow_offload_dead(struct flow_offload *flow);
102
103	int nf_flow_snat_port(const struct flow_offload *flow,
104	struct sk_buff *skb, unsigned int thoff,
105	u8 protocol, enum flow_offload_tuple_dir dir);
106	int nf_flow_dnat_port(const struct flow_offload *flow,
107	struct sk_buff *skb, unsigned int thoff,
108	u8 protocol, enum flow_offload_tuple_dir dir);
109
110	struct flow_ports {
111	__be16 source, dest;
112	};
113
7c23b629 PNA	114	unsigned int nf_flow_offload_ip_hook(void priv, struct sk_buff skb,
	115	const struct nf_hook_state *state);
	116	unsigned int nf_flow_offload_ipv6_hook(void priv, struct sk_buff skb,
	117	const struct nf_hook_state *state);
	118
ac2a6666 PNA	119	#define MODULE_ALIAS_NF_FLOWTABLE(family) \
	120	MODULE_ALIAS("nf-flowtable-" __stringify(family))
	121
3b49e2e9	122	#endif /* _FLOW_OFFLOAD_H */