]>
Commit | Line | Data |
---|---|---|
b2441318 | 1 | /* SPDX-License-Identifier: GPL-2.0 */ |
d62ddc21 AD |
2 | #ifndef __NETNS_XFRM_H |
3 | #define __NETNS_XFRM_H | |
4 | ||
9d4139c7 | 5 | #include <linux/list.h> |
50a30657 | 6 | #include <linux/wait.h> |
63082733 | 7 | #include <linux/workqueue.h> |
8b18f8ea | 8 | #include <linux/xfrm.h> |
d7c7544c | 9 | #include <net/dst_ops.h> |
9d4139c7 | 10 | |
b27aeadb AD |
11 | struct ctl_table_header; |
12 | ||
a35f6c5d | 13 | struct xfrm_policy_hash { |
a7c44247 | 14 | struct hlist_head __rcu *table; |
a35f6c5d | 15 | unsigned int hmask; |
b58555f1 CG |
16 | u8 dbits4; |
17 | u8 sbits4; | |
18 | u8 dbits6; | |
19 | u8 sbits6; | |
a35f6c5d AD |
20 | }; |
21 | ||
880a6fab CG |
22 | struct xfrm_policy_hthresh { |
23 | struct work_struct work; | |
24 | seqlock_t lock; | |
25 | u8 lbits4; | |
26 | u8 rbits4; | |
27 | u8 lbits6; | |
28 | u8 rbits6; | |
29 | }; | |
30 | ||
d62ddc21 | 31 | struct netns_xfrm { |
9d4139c7 | 32 | struct list_head state_all; |
73d189dc AD |
33 | /* |
34 | * Hash table to find appropriate SA towards given target (endpoint of | |
35 | * tunnel or destination of transport mode) allowed by selector. | |
36 | * | |
37 | * Main use is finding SA after policy selected tunnel or transport | |
38 | * mode. Also, it can be used by ah/esp icmp error handler to find | |
39 | * offending SA. | |
40 | */ | |
d737a580 FW |
41 | struct hlist_head __rcu *state_bydst; |
42 | struct hlist_head __rcu *state_bysrc; | |
43 | struct hlist_head __rcu *state_byspi; | |
529983ec | 44 | unsigned int state_hmask; |
0bf7c5b0 | 45 | unsigned int state_num; |
63082733 | 46 | struct work_struct state_hash_work; |
50a30657 | 47 | |
adfcf0b2 | 48 | struct list_head policy_all; |
93b851c1 | 49 | struct hlist_head *policy_byidx; |
8100bea7 | 50 | unsigned int policy_idx_hmask; |
53c2e285 HX |
51 | struct hlist_head policy_inexact[XFRM_POLICY_MAX]; |
52 | struct xfrm_policy_hash policy_bydst[XFRM_POLICY_MAX]; | |
dc2caba7 | 53 | unsigned int policy_count[XFRM_POLICY_MAX * 2]; |
66caf628 | 54 | struct work_struct policy_hash_work; |
880a6fab | 55 | struct xfrm_policy_hthresh policy_hthresh; |
a6483b79 | 56 | |
d7c7544c | 57 | |
a6483b79 | 58 | struct sock *nlsk; |
d79d792e | 59 | struct sock *nlsk_stash; |
b27aeadb AD |
60 | |
61 | u32 sysctl_aevent_etime; | |
62 | u32 sysctl_aevent_rseqth; | |
63 | int sysctl_larval_drop; | |
64 | u32 sysctl_acq_expires; | |
65 | #ifdef CONFIG_SYSCTL | |
66 | struct ctl_table_header *sysctl_hdr; | |
67 | #endif | |
8e602ce2 ED |
68 | |
69 | struct dst_ops xfrm4_dst_ops; | |
dfd56b8b | 70 | #if IS_ENABLED(CONFIG_IPV6) |
8e602ce2 ED |
71 | struct dst_ops xfrm6_dst_ops; |
72 | #endif | |
283bc9f3 | 73 | spinlock_t xfrm_state_lock; |
9d0380df | 74 | spinlock_t xfrm_policy_lock; |
283bc9f3 | 75 | struct mutex xfrm_cfg_mutex; |
d62ddc21 AD |
76 | }; |
77 | ||
78 | #endif |