[mirror_iproute2.git] / include / uapi / linux / pkt_cls.h

/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
#ifndef __LINUX_PKT_CLS_H
#define __LINUX_PKT_CLS_H

#include <linux/types.h>
#include <linux/pkt_sched.h>

#define TC_COOKIE_MAX_SIZE 16

/* Action attributes */
enum {
	TCA_ACT_UNSPEC,
	TCA_ACT_KIND,
	TCA_ACT_OPTIONS,
	TCA_ACT_INDEX,
	TCA_ACT_STATS,
	TCA_ACT_PAD,
	TCA_ACT_COOKIE,
	__TCA_ACT_MAX
};

#define TCA_ACT_MAX __TCA_ACT_MAX
#define TCA_OLD_COMPAT (TCA_ACT_MAX+1)
#define TCA_ACT_MAX_PRIO 32
#define TCA_ACT_BIND	1
#define TCA_ACT_NOBIND	0
#define TCA_ACT_UNBIND	1
#define TCA_ACT_NOUNBIND	0
#define TCA_ACT_REPLACE		1
#define TCA_ACT_NOREPLACE	0

#define TC_ACT_UNSPEC	(-1)
#define TC_ACT_OK		0
#define TC_ACT_RECLASSIFY	1
#define TC_ACT_SHOT		2
#define TC_ACT_PIPE		3
#define TC_ACT_STOLEN		4
#define TC_ACT_QUEUED		5
#define TC_ACT_REPEAT		6
#define TC_ACT_REDIRECT		7
#define TC_ACT_TRAP		8 /* For hw path, this means "trap to cpu"
				   * and don't further process the frame
				   * in hardware. For sw path, this is
				   * equivalent of TC_ACT_STOLEN - drop
				   * the skb and act like everything
				   * is alright.
				   */

/* There is a special kind of actions called "extended actions",
 * which need a value parameter. These have a local opcode located in
 * the highest nibble, starting from 1. The rest of the bits
 * are used to carry the value. These two parts together make
 * a combined opcode.
 */
#define __TC_ACT_EXT_SHIFT 28
#define __TC_ACT_EXT(local) ((local) << __TC_ACT_EXT_SHIFT)
#define TC_ACT_EXT_VAL_MASK ((1 << __TC_ACT_EXT_SHIFT) - 1)
#define TC_ACT_EXT_CMP(combined, opcode) \
	(((combined) & (~TC_ACT_EXT_VAL_MASK)) == opcode)

#define TC_ACT_JUMP __TC_ACT_EXT(1)
#define TC_ACT_GOTO_CHAIN __TC_ACT_EXT(2)

/* Action type identifiers*/
enum {
	TCA_ID_UNSPEC=0,
	TCA_ID_POLICE=1,
	/* other actions go here */
	__TCA_ID_MAX=255
};

#define TCA_ID_MAX __TCA_ID_MAX

struct tc_police {
	__u32			index;
	int			action;
#define TC_POLICE_UNSPEC	TC_ACT_UNSPEC
#define TC_POLICE_OK		TC_ACT_OK
#define TC_POLICE_RECLASSIFY	TC_ACT_RECLASSIFY
#define TC_POLICE_SHOT		TC_ACT_SHOT
#define TC_POLICE_PIPE		TC_ACT_PIPE

	__u32			limit;
	__u32			burst;
	__u32			mtu;
	struct tc_ratespec	rate;
	struct tc_ratespec	peakrate;
	int			refcnt;
	int			bindcnt;
	__u32			capab;
};

struct tcf_t {
	__u64   install;
	__u64   lastuse;
	__u64   expires;
	__u64   firstuse;
};

struct tc_cnt {
	int                   refcnt;
	int                   bindcnt;
};

#define tc_gen \
	__u32                 index; \
	__u32                 capab; \
	int                   action; \
	int                   refcnt; \
	int                   bindcnt

enum {
	TCA_POLICE_UNSPEC,
	TCA_POLICE_TBF,
	TCA_POLICE_RATE,
	TCA_POLICE_PEAKRATE,
	TCA_POLICE_AVRATE,
	TCA_POLICE_RESULT,
	TCA_POLICE_TM,
	TCA_POLICE_PAD,
	__TCA_POLICE_MAX
#define TCA_POLICE_RESULT TCA_POLICE_RESULT
};

#define TCA_POLICE_MAX (__TCA_POLICE_MAX - 1)

/* tca flags definitions */
#define TCA_CLS_FLAGS_SKIP_HW	(1 << 0) /* don't offload filter to HW */
#define TCA_CLS_FLAGS_SKIP_SW	(1 << 1) /* don't use filter in SW */
#define TCA_CLS_FLAGS_IN_HW	(1 << 2) /* filter is offloaded to HW */
#define TCA_CLS_FLAGS_NOT_IN_HW (1 << 3) /* filter isn't offloaded to HW */

/* U32 filters */

#define TC_U32_HTID(h) ((h)&0xFFF00000)
#define TC_U32_USERHTID(h) (TC_U32_HTID(h)>>20)
#define TC_U32_HASH(h) (((h)>>12)&0xFF)
#define TC_U32_NODE(h) ((h)&0xFFF)
#define TC_U32_KEY(h) ((h)&0xFFFFF)
#define TC_U32_UNSPEC	0
#define TC_U32_ROOT	(0xFFF00000)

enum {
	TCA_U32_UNSPEC,
	TCA_U32_CLASSID,
	TCA_U32_HASH,
	TCA_U32_LINK,
	TCA_U32_DIVISOR,
	TCA_U32_SEL,
	TCA_U32_POLICE,
	TCA_U32_ACT,
	TCA_U32_INDEV,
	TCA_U32_PCNT,
	TCA_U32_MARK,
	TCA_U32_FLAGS,
	TCA_U32_PAD,
	__TCA_U32_MAX
};

#define TCA_U32_MAX (__TCA_U32_MAX - 1)

struct tc_u32_key {
	__be32		mask;
	__be32		val;
	int		off;
	int		offmask;
};

struct tc_u32_sel {
	unsigned char		flags;
	unsigned char		offshift;
	unsigned char		nkeys;

	__be16			offmask;
	__u16			off;
	short			offoff;

	short			hoff;
	__be32			hmask;
	struct tc_u32_key	keys[0];
};

struct tc_u32_mark {
	__u32		val;
	__u32		mask;
	__u32		success;
};

struct tc_u32_pcnt {
	__u64 rcnt;
	__u64 rhit;
	__u64 kcnts[0];
};

/* Flags */

#define TC_U32_TERMINAL		1
#define TC_U32_OFFSET		2
#define TC_U32_VAROFFSET	4
#define TC_U32_EAT		8

#define TC_U32_MAXDEPTH 8


/* RSVP filter */

enum {
	TCA_RSVP_UNSPEC,
	TCA_RSVP_CLASSID,
	TCA_RSVP_DST,
	TCA_RSVP_SRC,
	TCA_RSVP_PINFO,
	TCA_RSVP_POLICE,
	TCA_RSVP_ACT,
	__TCA_RSVP_MAX
};

#define TCA_RSVP_MAX (__TCA_RSVP_MAX - 1 )

struct tc_rsvp_gpi {
	__u32	key;
	__u32	mask;
	int	offset;
};

struct tc_rsvp_pinfo {
	struct tc_rsvp_gpi dpi;
	struct tc_rsvp_gpi spi;
	__u8	protocol;
	__u8	tunnelid;
	__u8	tunnelhdr;
	__u8	pad;
};

/* ROUTE filter */

enum {
	TCA_ROUTE4_UNSPEC,
	TCA_ROUTE4_CLASSID,
	TCA_ROUTE4_TO,
	TCA_ROUTE4_FROM,
	TCA_ROUTE4_IIF,
	TCA_ROUTE4_POLICE,
	TCA_ROUTE4_ACT,
	__TCA_ROUTE4_MAX
};

#define TCA_ROUTE4_MAX (__TCA_ROUTE4_MAX - 1)


/* FW filter */

enum {
	TCA_FW_UNSPEC,
	TCA_FW_CLASSID,
	TCA_FW_POLICE,
	TCA_FW_INDEV, /*  used by CONFIG_NET_CLS_IND */
	TCA_FW_ACT, /* used by CONFIG_NET_CLS_ACT */
	TCA_FW_MASK,
	__TCA_FW_MAX
};

#define TCA_FW_MAX (__TCA_FW_MAX - 1)

/* TC index filter */

enum {
	TCA_TCINDEX_UNSPEC,
	TCA_TCINDEX_HASH,
	TCA_TCINDEX_MASK,
	TCA_TCINDEX_SHIFT,
	TCA_TCINDEX_FALL_THROUGH,
	TCA_TCINDEX_CLASSID,
	TCA_TCINDEX_POLICE,
	TCA_TCINDEX_ACT,
	__TCA_TCINDEX_MAX
};

#define TCA_TCINDEX_MAX     (__TCA_TCINDEX_MAX - 1)

/* Flow filter */

enum {
	FLOW_KEY_SRC,
	FLOW_KEY_DST,
	FLOW_KEY_PROTO,
	FLOW_KEY_PROTO_SRC,
	FLOW_KEY_PROTO_DST,
	FLOW_KEY_IIF,
	FLOW_KEY_PRIORITY,
	FLOW_KEY_MARK,
	FLOW_KEY_NFCT,
	FLOW_KEY_NFCT_SRC,
	FLOW_KEY_NFCT_DST,
	FLOW_KEY_NFCT_PROTO_SRC,
	FLOW_KEY_NFCT_PROTO_DST,
	FLOW_KEY_RTCLASSID,
	FLOW_KEY_SKUID,
	FLOW_KEY_SKGID,
	FLOW_KEY_VLAN_TAG,
	FLOW_KEY_RXHASH,
	__FLOW_KEY_MAX,
};

#define FLOW_KEY_MAX	(__FLOW_KEY_MAX - 1)

enum {
	FLOW_MODE_MAP,
	FLOW_MODE_HASH,
};

enum {
	TCA_FLOW_UNSPEC,
	TCA_FLOW_KEYS,
	TCA_FLOW_MODE,
	TCA_FLOW_BASECLASS,
	TCA_FLOW_RSHIFT,
	TCA_FLOW_ADDEND,
	TCA_FLOW_MASK,
	TCA_FLOW_XOR,
	TCA_FLOW_DIVISOR,
	TCA_FLOW_ACT,
	TCA_FLOW_POLICE,
	TCA_FLOW_EMATCHES,
	TCA_FLOW_PERTURB,
	__TCA_FLOW_MAX
};

#define TCA_FLOW_MAX	(__TCA_FLOW_MAX - 1)

/* Basic filter */

enum {
	TCA_BASIC_UNSPEC,
	TCA_BASIC_CLASSID,
	TCA_BASIC_EMATCHES,
	TCA_BASIC_ACT,
	TCA_BASIC_POLICE,
	__TCA_BASIC_MAX
};

#define TCA_BASIC_MAX (__TCA_BASIC_MAX - 1)


/* Cgroup classifier */

enum {
	TCA_CGROUP_UNSPEC,
	TCA_CGROUP_ACT,
	TCA_CGROUP_POLICE,
	TCA_CGROUP_EMATCHES,
	__TCA_CGROUP_MAX,
};

#define TCA_CGROUP_MAX (__TCA_CGROUP_MAX - 1)

/* BPF classifier */

#define TCA_BPF_FLAG_ACT_DIRECT		(1 << 0)

enum {
	TCA_BPF_UNSPEC,
	TCA_BPF_ACT,
	TCA_BPF_POLICE,
	TCA_BPF_CLASSID,
	TCA_BPF_OPS_LEN,
	TCA_BPF_OPS,
	TCA_BPF_FD,
	TCA_BPF_NAME,
	TCA_BPF_FLAGS,
	TCA_BPF_FLAGS_GEN,
	TCA_BPF_TAG,
	TCA_BPF_ID,
	__TCA_BPF_MAX,
};

#define TCA_BPF_MAX (__TCA_BPF_MAX - 1)

/* Flower classifier */

enum {
	TCA_FLOWER_UNSPEC,
	TCA_FLOWER_CLASSID,
	TCA_FLOWER_INDEV,
	TCA_FLOWER_ACT,
	TCA_FLOWER_KEY_ETH_DST,		/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_DST_MASK,	/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_SRC,		/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_SRC_MASK,	/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_TYPE,	/* be16 */
	TCA_FLOWER_KEY_IP_PROTO,	/* u8 */
	TCA_FLOWER_KEY_IPV4_SRC,	/* be32 */
	TCA_FLOWER_KEY_IPV4_SRC_MASK,	/* be32 */
	TCA_FLOWER_KEY_IPV4_DST,	/* be32 */
	TCA_FLOWER_KEY_IPV4_DST_MASK,	/* be32 */
	TCA_FLOWER_KEY_IPV6_SRC,	/* struct in6_addr */
	TCA_FLOWER_KEY_IPV6_SRC_MASK,	/* struct in6_addr */
	TCA_FLOWER_KEY_IPV6_DST,	/* struct in6_addr */
	TCA_FLOWER_KEY_IPV6_DST_MASK,	/* struct in6_addr */
	TCA_FLOWER_KEY_TCP_SRC,		/* be16 */
	TCA_FLOWER_KEY_TCP_DST,		/* be16 */
	TCA_FLOWER_KEY_UDP_SRC,		/* be16 */
	TCA_FLOWER_KEY_UDP_DST,		/* be16 */

	TCA_FLOWER_FLAGS,
	TCA_FLOWER_KEY_VLAN_ID,		/* be16 */
	TCA_FLOWER_KEY_VLAN_PRIO,	/* u8   */
	TCA_FLOWER_KEY_VLAN_ETH_TYPE,	/* be16 */

	TCA_FLOWER_KEY_ENC_KEY_ID,	/* be32 */
	TCA_FLOWER_KEY_ENC_IPV4_SRC,	/* be32 */
	TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK,/* be32 */
	TCA_FLOWER_KEY_ENC_IPV4_DST,	/* be32 */
	TCA_FLOWER_KEY_ENC_IPV4_DST_MASK,/* be32 */
	TCA_FLOWER_KEY_ENC_IPV6_SRC,	/* struct in6_addr */
	TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK,/* struct in6_addr */
	TCA_FLOWER_KEY_ENC_IPV6_DST,	/* struct in6_addr */
	TCA_FLOWER_KEY_ENC_IPV6_DST_MASK,/* struct in6_addr */

	TCA_FLOWER_KEY_TCP_SRC_MASK,	/* be16 */
	TCA_FLOWER_KEY_TCP_DST_MASK,	/* be16 */
	TCA_FLOWER_KEY_UDP_SRC_MASK,	/* be16 */
	TCA_FLOWER_KEY_UDP_DST_MASK,	/* be16 */
	TCA_FLOWER_KEY_SCTP_SRC_MASK,	/* be16 */
	TCA_FLOWER_KEY_SCTP_DST_MASK,	/* be16 */

	TCA_FLOWER_KEY_SCTP_SRC,	/* be16 */
	TCA_FLOWER_KEY_SCTP_DST,	/* be16 */

	TCA_FLOWER_KEY_ENC_UDP_SRC_PORT,	/* be16 */
	TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK,	/* be16 */
	TCA_FLOWER_KEY_ENC_UDP_DST_PORT,	/* be16 */
	TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK,	/* be16 */

	TCA_FLOWER_KEY_FLAGS,		/* be32 */
	TCA_FLOWER_KEY_FLAGS_MASK,	/* be32 */

	TCA_FLOWER_KEY_ICMPV4_CODE,	/* u8 */
	TCA_FLOWER_KEY_ICMPV4_CODE_MASK,/* u8 */
	TCA_FLOWER_KEY_ICMPV4_TYPE,	/* u8 */
	TCA_FLOWER_KEY_ICMPV4_TYPE_MASK,/* u8 */
	TCA_FLOWER_KEY_ICMPV6_CODE,	/* u8 */
	TCA_FLOWER_KEY_ICMPV6_CODE_MASK,/* u8 */
	TCA_FLOWER_KEY_ICMPV6_TYPE,	/* u8 */
	TCA_FLOWER_KEY_ICMPV6_TYPE_MASK,/* u8 */

	TCA_FLOWER_KEY_ARP_SIP,		/* be32 */
	TCA_FLOWER_KEY_ARP_SIP_MASK,	/* be32 */
	TCA_FLOWER_KEY_ARP_TIP,		/* be32 */
	TCA_FLOWER_KEY_ARP_TIP_MASK,	/* be32 */
	TCA_FLOWER_KEY_ARP_OP,		/* u8 */
	TCA_FLOWER_KEY_ARP_OP_MASK,	/* u8 */
	TCA_FLOWER_KEY_ARP_SHA,		/* ETH_ALEN */
	TCA_FLOWER_KEY_ARP_SHA_MASK,	/* ETH_ALEN */
	TCA_FLOWER_KEY_ARP_THA,		/* ETH_ALEN */
	TCA_FLOWER_KEY_ARP_THA_MASK,	/* ETH_ALEN */

	TCA_FLOWER_KEY_MPLS_TTL,	/* u8 - 8 bits */
	TCA_FLOWER_KEY_MPLS_BOS,	/* u8 - 1 bit */
	TCA_FLOWER_KEY_MPLS_TC,		/* u8 - 3 bits */
	TCA_FLOWER_KEY_MPLS_LABEL,	/* be32 - 20 bits */

	TCA_FLOWER_KEY_TCP_FLAGS,	/* be16 */
	TCA_FLOWER_KEY_TCP_FLAGS_MASK,	/* be16 */

	TCA_FLOWER_KEY_IP_TOS,		/* u8 */
	TCA_FLOWER_KEY_IP_TOS_MASK,	/* u8 */
	TCA_FLOWER_KEY_IP_TTL,		/* u8 */
	TCA_FLOWER_KEY_IP_TTL_MASK,	/* u8 */

	__TCA_FLOWER_MAX,
};

#define TCA_FLOWER_MAX (__TCA_FLOWER_MAX - 1)

enum {
	TCA_FLOWER_KEY_FLAGS_IS_FRAGMENT = (1 << 0),
};

/* Match-all classifier */

enum {
	TCA_MATCHALL_UNSPEC,
	TCA_MATCHALL_CLASSID,
	TCA_MATCHALL_ACT,
	TCA_MATCHALL_FLAGS,
	__TCA_MATCHALL_MAX,
};

#define TCA_MATCHALL_MAX (__TCA_MATCHALL_MAX - 1)

/* Extended Matches */

struct tcf_ematch_tree_hdr {
	__u16		nmatches;
	__u16		progid;
};

enum {
	TCA_EMATCH_TREE_UNSPEC,
	TCA_EMATCH_TREE_HDR,
	TCA_EMATCH_TREE_LIST,
	__TCA_EMATCH_TREE_MAX
};
#define TCA_EMATCH_TREE_MAX (__TCA_EMATCH_TREE_MAX - 1)

struct tcf_ematch_hdr {
	__u16		matchid;
	__u16		kind;
	__u16		flags;
	__u16		pad; /* currently unused */
};

/*  0                   1
 *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 
 * +-----------------------+-+-+---+
 * |         Unused        |S|I| R |
 * +-----------------------+-+-+---+
 *
 * R(2) ::= relation to next ematch
 *          where: 0 0 END (last ematch)
 *                 0 1 AND
 *                 1 0 OR
 *                 1 1 Unused (invalid)
 * I(1) ::= invert result
 * S(1) ::= simple payload
 */
#define TCF_EM_REL_END	0
#define TCF_EM_REL_AND	(1<<0)
#define TCF_EM_REL_OR	(1<<1)
#define TCF_EM_INVERT	(1<<2)
#define TCF_EM_SIMPLE	(1<<3)

#define TCF_EM_REL_MASK	3
#define TCF_EM_REL_VALID(v) (((v) & TCF_EM_REL_MASK) != TCF_EM_REL_MASK)

enum {
	TCF_LAYER_LINK,
	TCF_LAYER_NETWORK,
	TCF_LAYER_TRANSPORT,
	__TCF_LAYER_MAX
};
#define TCF_LAYER_MAX (__TCF_LAYER_MAX - 1)

/* Ematch type assignments
 *   1..32767		Reserved for ematches inside kernel tree
 *   32768..65535	Free to use, not reliable
 */
#define	TCF_EM_CONTAINER	0
#define	TCF_EM_CMP		1
#define	TCF_EM_NBYTE		2
#define	TCF_EM_U32		3
#define	TCF_EM_META		4
#define	TCF_EM_TEXT		5
#define	TCF_EM_VLAN		6
#define	TCF_EM_CANID		7
#define	TCF_EM_IPSET		8
#define	TCF_EM_MAX		8

enum {
	TCF_EM_PROG_TC
};

enum {
	TCF_EM_OPND_EQ,
	TCF_EM_OPND_GT,
	TCF_EM_OPND_LT
};

#endif
Commit	Line	Data
ba914908	1	/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
68d5ba54 SH	2	#ifndef __LINUX_PKT_CLS_H
	3	#define __LINUX_PKT_CLS_H
	4
67881151	5	#include <linux/types.h>
d639d9d1 SH	6	#include <linux/pkt_sched.h>
d639d9d1 SH	7
b479a7d7 SH	8	#define TC_COOKIE_MAX_SIZE 16
b479a7d7 SH	9
68d5ba54	10	/* Action attributes */
ab322673	11	enum {
68d5ba54 SH	12	TCA_ACT_UNSPEC,
	13	TCA_ACT_KIND,
	14	TCA_ACT_OPTIONS,
	15	TCA_ACT_INDEX,
451d3b81	16	TCA_ACT_STATS,
31ce6e01	17	TCA_ACT_PAD,
b479a7d7	18	TCA_ACT_COOKIE,
68d5ba54 SH	19	__TCA_ACT_MAX
	20	};
	21
	22	#define TCA_ACT_MAX __TCA_ACT_MAX
	23	#define TCA_OLD_COMPAT (TCA_ACT_MAX+1)
	24	#define TCA_ACT_MAX_PRIO 32
	25	#define TCA_ACT_BIND 1
	26	#define TCA_ACT_NOBIND 0
	27	#define TCA_ACT_UNBIND 1
	28	#define TCA_ACT_NOUNBIND 0
	29	#define TCA_ACT_REPLACE 1
	30	#define TCA_ACT_NOREPLACE 0
68d5ba54 SH	31
	32	#define TC_ACT_UNSPEC (-1)
	33	#define TC_ACT_OK 0
	34	#define TC_ACT_RECLASSIFY 1
	35	#define TC_ACT_SHOT 2
	36	#define TC_ACT_PIPE 3
	37	#define TC_ACT_STOLEN 4
	38	#define TC_ACT_QUEUED 5
	39	#define TC_ACT_REPEAT 6
4e39bfb9	40	#define TC_ACT_REDIRECT 7
410556ad SH	41	#define TC_ACT_TRAP 8 /* For hw path, this means "trap to cpu"
	42	* and don't further process the frame
	43	* in hardware. For sw path, this is
	44	* equivalent of TC_ACT_STOLEN - drop
	45	* the skb and act like everything
	46	* is alright.
	47	*/
76557951 SH	48
	49	/* There is a special kind of actions called "extended actions",
	50	* which need a value parameter. These have a local opcode located in
	51	* the highest nibble, starting from 1. The rest of the bits
	52	* are used to carry the value. These two parts together make
	53	* a combined opcode.
	54	*/
	55	#define __TC_ACT_EXT_SHIFT 28
	56	#define __TC_ACT_EXT(local) ((local) << __TC_ACT_EXT_SHIFT)
	57	#define TC_ACT_EXT_VAL_MASK ((1 << __TC_ACT_EXT_SHIFT) - 1)
	58	#define TC_ACT_EXT_CMP(combined, opcode) \
	59	(((combined) & (~TC_ACT_EXT_VAL_MASK)) == opcode)
	60
	61	#define TC_ACT_JUMP __TC_ACT_EXT(1)
d4473c02	62	#define TC_ACT_GOTO_CHAIN __TC_ACT_EXT(2)
68d5ba54 SH	63
68d5ba54 SH	64	/* Action type identifiers*/
ab322673	65	enum {
68d5ba54 SH	66	TCA_ID_UNSPEC=0,
	67	TCA_ID_POLICE=1,
	68	/* other actions go here */
	69	__TCA_ID_MAX=255
	70	};
	71
	72	#define TCA_ID_MAX __TCA_ID_MAX
	73
ab322673	74	struct tc_police {
68d5ba54 SH	75	__u32 index;
	76	int action;
	77	#define TC_POLICE_UNSPEC TC_ACT_UNSPEC
	78	#define TC_POLICE_OK TC_ACT_OK
	79	#define TC_POLICE_RECLASSIFY TC_ACT_RECLASSIFY
	80	#define TC_POLICE_SHOT TC_ACT_SHOT
	81	#define TC_POLICE_PIPE TC_ACT_PIPE
	82
	83	__u32 limit;
	84	__u32 burst;
	85	__u32 mtu;
	86	struct tc_ratespec rate;
	87	struct tc_ratespec peakrate;
c6878082 SH	88	int refcnt;
c6878082 SH	89	int bindcnt;
68d5ba54 SH	90	__u32 capab;
	91	};
	92
ab322673	93	struct tcf_t {
d639d9d1 SH	94	__u64 install;
	95	__u64 lastuse;
	96	__u64 expires;
c6878082	97	__u64 firstuse;
68d5ba54 SH	98	};
68d5ba54 SH	99
ab322673	100	struct tc_cnt {
c6878082	101	int refcnt;
68d5ba54 SH	102	int bindcnt;
	103	};
	104
	105	#define tc_gen \
	106	__u32 index; \
	107	__u32 capab; \
	108	int action; \
	109	int refcnt; \
	110	int bindcnt
	111
ab322673	112	enum {
68d5ba54 SH	113	TCA_POLICE_UNSPEC,
	114	TCA_POLICE_TBF,
	115	TCA_POLICE_RATE,
	116	TCA_POLICE_PEAKRATE,
	117	TCA_POLICE_AVRATE,
	118	TCA_POLICE_RESULT,
de70bd2f SH	119	TCA_POLICE_TM,
de70bd2f SH	120	TCA_POLICE_PAD,
68d5ba54 SH	121	__TCA_POLICE_MAX
	122	#define TCA_POLICE_RESULT TCA_POLICE_RESULT
	123	};
	124
	125	#define TCA_POLICE_MAX (__TCA_POLICE_MAX - 1)
	126
0a99e7ba	127	/* tca flags definitions */
cad54934 SH	128	#define TCA_CLS_FLAGS_SKIP_HW (1 << 0) /* don't offload filter to HW */
	129	#define TCA_CLS_FLAGS_SKIP_SW (1 << 1) /* don't use filter in SW */
	130	#define TCA_CLS_FLAGS_IN_HW (1 << 2) /* filter is offloaded to HW */
	131	#define TCA_CLS_FLAGS_NOT_IN_HW (1 << 3) /* filter isn't offloaded to HW */
0a99e7ba	132
68d5ba54 SH	133	/* U32 filters */
	134
	135	#define TC_U32_HTID(h) ((h)&0xFFF00000)
	136	#define TC_U32_USERHTID(h) (TC_U32_HTID(h)>>20)
	137	#define TC_U32_HASH(h) (((h)>>12)&0xFF)
	138	#define TC_U32_NODE(h) ((h)&0xFFF)
	139	#define TC_U32_KEY(h) ((h)&0xFFFFF)
	140	#define TC_U32_UNSPEC 0
	141	#define TC_U32_ROOT (0xFFF00000)
	142
ab322673	143	enum {
68d5ba54 SH	144	TCA_U32_UNSPEC,
	145	TCA_U32_CLASSID,
	146	TCA_U32_HASH,
	147	TCA_U32_LINK,
	148	TCA_U32_DIVISOR,
	149	TCA_U32_SEL,
	150	TCA_U32_POLICE,
de70bd2f	151	TCA_U32_ACT,
68d5ba54 SH	152	TCA_U32_INDEV,
68d5ba54 SH	153	TCA_U32_PCNT,
6f0ba88b	154	TCA_U32_MARK,
2421ab75	155	TCA_U32_FLAGS,
31ce6e01	156	TCA_U32_PAD,
68d5ba54 SH	157	__TCA_U32_MAX
	158	};
	159
	160	#define TCA_U32_MAX (__TCA_U32_MAX - 1)
	161
ab322673	162	struct tc_u32_key {
5344bb28 SH	163	__be32 mask;
5344bb28 SH	164	__be32 val;
68d5ba54 SH	165	int off;
	166	int offmask;
	167	};
	168
ab322673	169	struct tc_u32_sel {
68d5ba54 SH	170	unsigned char flags;
	171	unsigned char offshift;
	172	unsigned char nkeys;
	173
5344bb28	174	__be16 offmask;
68d5ba54 SH	175	__u16 off;
	176	short offoff;
	177
	178	short hoff;
5344bb28	179	__be32 hmask;
68d5ba54 SH	180	struct tc_u32_key keys[0];
	181	};
	182
ab322673	183	struct tc_u32_mark {
d639d9d1 SH	184	__u32 val;
	185	__u32 mask;
	186	__u32 success;
	187	};
	188
ab322673	189	struct tc_u32_pcnt {
68d5ba54 SH	190	__u64 rcnt;
	191	__u64 rhit;
	192	__u64 kcnts[0];
	193	};
6f0ba88b	194
68d5ba54 SH	195	/* Flags */
	196
	197	#define TC_U32_TERMINAL 1
	198	#define TC_U32_OFFSET 2
	199	#define TC_U32_VAROFFSET 4
	200	#define TC_U32_EAT 8
	201
	202	#define TC_U32_MAXDEPTH 8
	203
	204
	205	/* RSVP filter */
	206
ab322673	207	enum {
68d5ba54 SH	208	TCA_RSVP_UNSPEC,
	209	TCA_RSVP_CLASSID,
	210	TCA_RSVP_DST,
	211	TCA_RSVP_SRC,
	212	TCA_RSVP_PINFO,
	213	TCA_RSVP_POLICE,
d639d9d1	214	TCA_RSVP_ACT,
68d5ba54 SH	215	__TCA_RSVP_MAX
	216	};
	217
	218	#define TCA_RSVP_MAX (__TCA_RSVP_MAX - 1 )
	219
ab322673	220	struct tc_rsvp_gpi {
68d5ba54 SH	221	__u32 key;
	222	__u32 mask;
	223	int offset;
	224	};
	225
ab322673	226	struct tc_rsvp_pinfo {
68d5ba54 SH	227	struct tc_rsvp_gpi dpi;
	228	struct tc_rsvp_gpi spi;
	229	__u8 protocol;
	230	__u8 tunnelid;
	231	__u8 tunnelhdr;
6864c1e7	232	__u8 pad;
68d5ba54 SH	233	};
	234
	235	/* ROUTE filter */
	236
ab322673	237	enum {
68d5ba54 SH	238	TCA_ROUTE4_UNSPEC,
	239	TCA_ROUTE4_CLASSID,
	240	TCA_ROUTE4_TO,
	241	TCA_ROUTE4_FROM,
	242	TCA_ROUTE4_IIF,
	243	TCA_ROUTE4_POLICE,
d639d9d1	244	TCA_ROUTE4_ACT,
68d5ba54 SH	245	__TCA_ROUTE4_MAX
	246	};
	247
	248	#define TCA_ROUTE4_MAX (__TCA_ROUTE4_MAX - 1)
	249
	250
	251	/* FW filter */
	252
ab322673	253	enum {
68d5ba54 SH	254	TCA_FW_UNSPEC,
	255	TCA_FW_CLASSID,
	256	TCA_FW_POLICE,
	257	TCA_FW_INDEV, /* used by CONFIG_NET_CLS_IND */
	258	TCA_FW_ACT, /* used by CONFIG_NET_CLS_ACT */
ead2ba70	259	TCA_FW_MASK,
68d5ba54 SH	260	__TCA_FW_MAX
	261	};
	262
	263	#define TCA_FW_MAX (__TCA_FW_MAX - 1)
	264
	265	/* TC index filter */
	266
ab322673	267	enum {
68d5ba54 SH	268	TCA_TCINDEX_UNSPEC,
	269	TCA_TCINDEX_HASH,
	270	TCA_TCINDEX_MASK,
	271	TCA_TCINDEX_SHIFT,
	272	TCA_TCINDEX_FALL_THROUGH,
	273	TCA_TCINDEX_CLASSID,
	274	TCA_TCINDEX_POLICE,
d639d9d1	275	TCA_TCINDEX_ACT,
68d5ba54 SH	276	__TCA_TCINDEX_MAX
	277	};
	278
	279	#define TCA_TCINDEX_MAX (__TCA_TCINDEX_MAX - 1)
	280
9932abb4 PM	281	/* Flow filter */
9932abb4 PM	282
ab322673	283	enum {
9932abb4 PM	284	FLOW_KEY_SRC,
	285	FLOW_KEY_DST,
	286	FLOW_KEY_PROTO,
	287	FLOW_KEY_PROTO_SRC,
	288	FLOW_KEY_PROTO_DST,
	289	FLOW_KEY_IIF,
	290	FLOW_KEY_PRIORITY,
	291	FLOW_KEY_MARK,
	292	FLOW_KEY_NFCT,
	293	FLOW_KEY_NFCT_SRC,
	294	FLOW_KEY_NFCT_DST,
	295	FLOW_KEY_NFCT_PROTO_SRC,
	296	FLOW_KEY_NFCT_PROTO_DST,
	297	FLOW_KEY_RTCLASSID,
	298	FLOW_KEY_SKUID,
	299	FLOW_KEY_SKGID,
66862d3c	300	FLOW_KEY_VLAN_TAG,
7162c921	301	FLOW_KEY_RXHASH,
9932abb4 PM	302	__FLOW_KEY_MAX,
	303	};
	304
	305	#define FLOW_KEY_MAX (__FLOW_KEY_MAX - 1)
	306
ab322673	307	enum {
9932abb4 PM	308	FLOW_MODE_MAP,
	309	FLOW_MODE_HASH,
	310	};
	311
ab322673	312	enum {
9932abb4 PM	313	TCA_FLOW_UNSPEC,
	314	TCA_FLOW_KEYS,
	315	TCA_FLOW_MODE,
	316	TCA_FLOW_BASECLASS,
	317	TCA_FLOW_RSHIFT,
	318	TCA_FLOW_ADDEND,
	319	TCA_FLOW_MASK,
	320	TCA_FLOW_XOR,
	321	TCA_FLOW_DIVISOR,
	322	TCA_FLOW_ACT,
	323	TCA_FLOW_POLICE,
	324	TCA_FLOW_EMATCHES,
19ecc16d	325	TCA_FLOW_PERTURB,
9932abb4 PM	326	__TCA_FLOW_MAX
	327	};
	328
	329	#define TCA_FLOW_MAX (__TCA_FLOW_MAX - 1)
	330
d639d9d1 SH	331	/* Basic filter */
d639d9d1 SH	332
ab322673	333	enum {
d639d9d1 SH	334	TCA_BASIC_UNSPEC,
	335	TCA_BASIC_CLASSID,
	336	TCA_BASIC_EMATCHES,
	337	TCA_BASIC_ACT,
	338	TCA_BASIC_POLICE,
	339	__TCA_BASIC_MAX
	340	};
	341
	342	#define TCA_BASIC_MAX (__TCA_BASIC_MAX - 1)
	343
67881151 SH	344
	345	/* Cgroup classifier */
	346
ab322673	347	enum {
67881151 SH	348	TCA_CGROUP_UNSPEC,
	349	TCA_CGROUP_ACT,
	350	TCA_CGROUP_POLICE,
	351	TCA_CGROUP_EMATCHES,
	352	__TCA_CGROUP_MAX,
	353	};
	354
	355	#define TCA_CGROUP_MAX (__TCA_CGROUP_MAX - 1)
	356
793da0e7 SH	357	/* BPF classifier */
793da0e7 SH	358
4e39bfb9 SH	359	#define TCA_BPF_FLAG_ACT_DIRECT (1 << 0)
4e39bfb9 SH	360
793da0e7 SH	361	enum {
	362	TCA_BPF_UNSPEC,
	363	TCA_BPF_ACT,
	364	TCA_BPF_POLICE,
	365	TCA_BPF_CLASSID,
	366	TCA_BPF_OPS_LEN,
	367	TCA_BPF_OPS,
61333d24 SH	368	TCA_BPF_FD,
61333d24 SH	369	TCA_BPF_NAME,
4e39bfb9	370	TCA_BPF_FLAGS,
d9927247	371	TCA_BPF_FLAGS_GEN,
6166cc35	372	TCA_BPF_TAG,
35a004dc	373	TCA_BPF_ID,
793da0e7 SH	374	__TCA_BPF_MAX,
	375	};
	376
	377	#define TCA_BPF_MAX (__TCA_BPF_MAX - 1)
	378
8f42ceaf SH	379	/* Flower classifier */
	380
	381	enum {
	382	TCA_FLOWER_UNSPEC,
	383	TCA_FLOWER_CLASSID,
	384	TCA_FLOWER_INDEV,
	385	TCA_FLOWER_ACT,
	386	TCA_FLOWER_KEY_ETH_DST, /* ETH_ALEN */
	387	TCA_FLOWER_KEY_ETH_DST_MASK, /* ETH_ALEN */
	388	TCA_FLOWER_KEY_ETH_SRC, /* ETH_ALEN */
	389	TCA_FLOWER_KEY_ETH_SRC_MASK, /* ETH_ALEN */
	390	TCA_FLOWER_KEY_ETH_TYPE, /* be16 */
	391	TCA_FLOWER_KEY_IP_PROTO, /* u8 */
	392	TCA_FLOWER_KEY_IPV4_SRC, /* be32 */
	393	TCA_FLOWER_KEY_IPV4_SRC_MASK, /* be32 */
	394	TCA_FLOWER_KEY_IPV4_DST, /* be32 */
	395	TCA_FLOWER_KEY_IPV4_DST_MASK, /* be32 */
	396	TCA_FLOWER_KEY_IPV6_SRC, /* struct in6_addr */
	397	TCA_FLOWER_KEY_IPV6_SRC_MASK, /* struct in6_addr */
	398	TCA_FLOWER_KEY_IPV6_DST, /* struct in6_addr */
	399	TCA_FLOWER_KEY_IPV6_DST_MASK, /* struct in6_addr */
	400	TCA_FLOWER_KEY_TCP_SRC, /* be16 */
	401	TCA_FLOWER_KEY_TCP_DST, /* be16 */
	402	TCA_FLOWER_KEY_UDP_SRC, /* be16 */
	403	TCA_FLOWER_KEY_UDP_DST, /* be16 */
b7e0091a SH	404
b7e0091a SH	405	TCA_FLOWER_FLAGS,
e8a67bc4 SH	406	TCA_FLOWER_KEY_VLAN_ID, /* be16 */
	407	TCA_FLOWER_KEY_VLAN_PRIO, /* u8 */
	408	TCA_FLOWER_KEY_VLAN_ETH_TYPE, /* be16 */
	409
	410	TCA_FLOWER_KEY_ENC_KEY_ID, /* be32 */
	411	TCA_FLOWER_KEY_ENC_IPV4_SRC, /* be32 */
	412	TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK,/* be32 */
	413	TCA_FLOWER_KEY_ENC_IPV4_DST, /* be32 */
	414	TCA_FLOWER_KEY_ENC_IPV4_DST_MASK,/* be32 */
	415	TCA_FLOWER_KEY_ENC_IPV6_SRC, /* struct in6_addr */
	416	TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK,/* struct in6_addr */
	417	TCA_FLOWER_KEY_ENC_IPV6_DST, /* struct in6_addr */
	418	TCA_FLOWER_KEY_ENC_IPV6_DST_MASK,/* struct in6_addr */
	419
	420	TCA_FLOWER_KEY_TCP_SRC_MASK, /* be16 */
	421	TCA_FLOWER_KEY_TCP_DST_MASK, /* be16 */
	422	TCA_FLOWER_KEY_UDP_SRC_MASK, /* be16 */
	423	TCA_FLOWER_KEY_UDP_DST_MASK, /* be16 */
1a97748b SH	424	TCA_FLOWER_KEY_SCTP_SRC_MASK, /* be16 */
	425	TCA_FLOWER_KEY_SCTP_DST_MASK, /* be16 */
	426
	427	TCA_FLOWER_KEY_SCTP_SRC, /* be16 */
	428	TCA_FLOWER_KEY_SCTP_DST, /* be16 */
	429
	430	TCA_FLOWER_KEY_ENC_UDP_SRC_PORT, /* be16 */
	431	TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK, /* be16 */
	432	TCA_FLOWER_KEY_ENC_UDP_DST_PORT, /* be16 */
	433	TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK, /* be16 */
3dd0bb51 SH	434
	435	TCA_FLOWER_KEY_FLAGS, /* be32 */
	436	TCA_FLOWER_KEY_FLAGS_MASK, /* be32 */
	437
	438	TCA_FLOWER_KEY_ICMPV4_CODE, /* u8 */
	439	TCA_FLOWER_KEY_ICMPV4_CODE_MASK,/* u8 */
	440	TCA_FLOWER_KEY_ICMPV4_TYPE, /* u8 */
	441	TCA_FLOWER_KEY_ICMPV4_TYPE_MASK,/* u8 */
	442	TCA_FLOWER_KEY_ICMPV6_CODE, /* u8 */
	443	TCA_FLOWER_KEY_ICMPV6_CODE_MASK,/* u8 */
	444	TCA_FLOWER_KEY_ICMPV6_TYPE, /* u8 */
	445	TCA_FLOWER_KEY_ICMPV6_TYPE_MASK,/* u8 */
	446
e2ade8ce SH	447	TCA_FLOWER_KEY_ARP_SIP, /* be32 */
	448	TCA_FLOWER_KEY_ARP_SIP_MASK, /* be32 */
	449	TCA_FLOWER_KEY_ARP_TIP, /* be32 */
	450	TCA_FLOWER_KEY_ARP_TIP_MASK, /* be32 */
	451	TCA_FLOWER_KEY_ARP_OP, /* u8 */
	452	TCA_FLOWER_KEY_ARP_OP_MASK, /* u8 */
	453	TCA_FLOWER_KEY_ARP_SHA, /* ETH_ALEN */
	454	TCA_FLOWER_KEY_ARP_SHA_MASK, /* ETH_ALEN */
	455	TCA_FLOWER_KEY_ARP_THA, /* ETH_ALEN */
	456	TCA_FLOWER_KEY_ARP_THA_MASK, /* ETH_ALEN */
	457
7ff1fce5 SH	458	TCA_FLOWER_KEY_MPLS_TTL, /* u8 - 8 bits */
	459	TCA_FLOWER_KEY_MPLS_BOS, /* u8 - 1 bit */
	460	TCA_FLOWER_KEY_MPLS_TC, /* u8 - 3 bits */
	461	TCA_FLOWER_KEY_MPLS_LABEL, /* be32 - 20 bits */
	462
0071f3d0 SH	463	TCA_FLOWER_KEY_TCP_FLAGS, /* be16 */
	464	TCA_FLOWER_KEY_TCP_FLAGS_MASK, /* be16 */
	465
d9bcafb4 SH	466	TCA_FLOWER_KEY_IP_TOS, /* u8 */
	467	TCA_FLOWER_KEY_IP_TOS_MASK, /* u8 */
	468	TCA_FLOWER_KEY_IP_TTL, /* u8 */
	469	TCA_FLOWER_KEY_IP_TTL_MASK, /* u8 */
	470
8f42ceaf SH	471	__TCA_FLOWER_MAX,
	472	};
	473
	474	#define TCA_FLOWER_MAX (__TCA_FLOWER_MAX - 1)
	475
3dd0bb51 SH	476	enum {
	477	TCA_FLOWER_KEY_FLAGS_IS_FRAGMENT = (1 << 0),
	478	};
	479
dc00db9e SH	480	/* Match-all classifier */
	481
	482	enum {
	483	TCA_MATCHALL_UNSPEC,
	484	TCA_MATCHALL_CLASSID,
	485	TCA_MATCHALL_ACT,
	486	TCA_MATCHALL_FLAGS,
	487	__TCA_MATCHALL_MAX,
	488	};
	489
	490	#define TCA_MATCHALL_MAX (__TCA_MATCHALL_MAX - 1)
	491
d639d9d1 SH	492	/* Extended Matches */
d639d9d1 SH	493
ab322673	494	struct tcf_ematch_tree_hdr {
d639d9d1 SH	495	__u16 nmatches;
	496	__u16 progid;
	497	};
	498
ab322673	499	enum {
d639d9d1 SH	500	TCA_EMATCH_TREE_UNSPEC,
	501	TCA_EMATCH_TREE_HDR,
	502	TCA_EMATCH_TREE_LIST,
	503	__TCA_EMATCH_TREE_MAX
	504	};
	505	#define TCA_EMATCH_TREE_MAX (__TCA_EMATCH_TREE_MAX - 1)
	506
ab322673	507	struct tcf_ematch_hdr {
d639d9d1 SH	508	__u16 matchid;
	509	__u16 kind;
	510	__u16 flags;
	511	__u16 pad; /* currently unused */
	512	};
	513
	514	/* 0 1
	515	* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
	516	* +-----------------------+-+-+---+
	517	* \| Unused \|S\|I\| R \|
	518	* +-----------------------+-+-+---+
	519	*
	520	* R(2) ::= relation to next ematch
	521	* where: 0 0 END (last ematch)
	522	* 0 1 AND
	523	* 1 0 OR
	524	* 1 1 Unused (invalid)
	525	* I(1) ::= invert result
	526	* S(1) ::= simple payload
	527	*/
	528	#define TCF_EM_REL_END 0
	529	#define TCF_EM_REL_AND (1<<0)
	530	#define TCF_EM_REL_OR (1<<1)
	531	#define TCF_EM_INVERT (1<<2)
	532	#define TCF_EM_SIMPLE (1<<3)
	533
	534	#define TCF_EM_REL_MASK 3
	535	#define TCF_EM_REL_VALID(v) (((v) & TCF_EM_REL_MASK) != TCF_EM_REL_MASK)
	536
ab322673	537	enum {
d639d9d1 SH	538	TCF_LAYER_LINK,
	539	TCF_LAYER_NETWORK,
	540	TCF_LAYER_TRANSPORT,
	541	__TCF_LAYER_MAX
	542	};
	543	#define TCF_LAYER_MAX (__TCF_LAYER_MAX - 1)
	544
	545	/* Ematch type assignments
	546	* 1..32767 Reserved for ematches inside kernel tree
	547	* 32768..65535 Free to use, not reliable
	548	*/
a6ffa8b0 SH	549	#define TCF_EM_CONTAINER 0
	550	#define TCF_EM_CMP 1
	551	#define TCF_EM_NBYTE 2
	552	#define TCF_EM_U32 3
	553	#define TCF_EM_META 4
	554	#define TCF_EM_TEXT 5
a564b709 SH	555	#define TCF_EM_VLAN 6
	556	#define TCF_EM_CANID 7
	557	#define TCF_EM_IPSET 8
	558	#define TCF_EM_MAX 8
d639d9d1	559
ab322673	560	enum {
d639d9d1 SH	561	TCF_EM_PROG_TC
	562	};
	563
ab322673	564	enum {
d639d9d1 SH	565	TCF_EM_OPND_EQ,
	566	TCF_EM_OPND_GT,
	567	TCF_EM_OPND_LT
	568	};
	569
68d5ba54	570	#endif