[mirror_iproute2.git] / include / uapi / linux / pkt_cls.h

/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
#ifndef __LINUX_PKT_CLS_H
#define __LINUX_PKT_CLS_H

#include <linux/types.h>
#include <linux/pkt_sched.h>

#define TC_COOKIE_MAX_SIZE 16

/* Action attributes */
enum {
	TCA_ACT_UNSPEC,
	TCA_ACT_KIND,
	TCA_ACT_OPTIONS,
	TCA_ACT_INDEX,
	TCA_ACT_STATS,
	TCA_ACT_PAD,
	TCA_ACT_COOKIE,
	TCA_ACT_FLAGS,
	TCA_ACT_HW_STATS,
	__TCA_ACT_MAX
};

#define TCA_ACT_FLAGS_NO_PERCPU_STATS 1 /* Don't use percpu allocator for
					 * actions stats.
					 */

/* tca HW stats type
 * When user does not pass the attribute, he does not care.
 * It is the same as if he would pass the attribute with
 * all supported bits set.
 * In case no bits are set, user is not interested in getting any HW statistics.
 */
#define TCA_ACT_HW_STATS_IMMEDIATE (1 << 0) /* Means that in dump, user
					     * gets the current HW stats
					     * state from the device
					     * queried at the dump time.
					     */
#define TCA_ACT_HW_STATS_DELAYED (1 << 1) /* Means that in dump, user gets
					   * HW stats that might be out of date
					   * for some time, maybe couple of
					   * seconds. This is the case when
					   * driver polls stats updates
					   * periodically or when it gets async
					   * stats update from the device.
					   */

#define TCA_ACT_MAX __TCA_ACT_MAX
#define TCA_OLD_COMPAT (TCA_ACT_MAX+1)
#define TCA_ACT_MAX_PRIO 32
#define TCA_ACT_BIND	1
#define TCA_ACT_NOBIND	0
#define TCA_ACT_UNBIND	1
#define TCA_ACT_NOUNBIND	0
#define TCA_ACT_REPLACE		1
#define TCA_ACT_NOREPLACE	0

#define TC_ACT_UNSPEC	(-1)
#define TC_ACT_OK		0
#define TC_ACT_RECLASSIFY	1
#define TC_ACT_SHOT		2
#define TC_ACT_PIPE		3
#define TC_ACT_STOLEN		4
#define TC_ACT_QUEUED		5
#define TC_ACT_REPEAT		6
#define TC_ACT_REDIRECT		7
#define TC_ACT_TRAP		8 /* For hw path, this means "trap to cpu"
				   * and don't further process the frame
				   * in hardware. For sw path, this is
				   * equivalent of TC_ACT_STOLEN - drop
				   * the skb and act like everything
				   * is alright.
				   */
#define TC_ACT_VALUE_MAX	TC_ACT_TRAP

/* There is a special kind of actions called "extended actions",
 * which need a value parameter. These have a local opcode located in
 * the highest nibble, starting from 1. The rest of the bits
 * are used to carry the value. These two parts together make
 * a combined opcode.
 */
#define __TC_ACT_EXT_SHIFT 28
#define __TC_ACT_EXT(local) ((local) << __TC_ACT_EXT_SHIFT)
#define TC_ACT_EXT_VAL_MASK ((1 << __TC_ACT_EXT_SHIFT) - 1)
#define TC_ACT_EXT_OPCODE(combined) ((combined) & (~TC_ACT_EXT_VAL_MASK))
#define TC_ACT_EXT_CMP(combined, opcode) (TC_ACT_EXT_OPCODE(combined) == opcode)

#define TC_ACT_JUMP __TC_ACT_EXT(1)
#define TC_ACT_GOTO_CHAIN __TC_ACT_EXT(2)
#define TC_ACT_EXT_OPCODE_MAX	TC_ACT_GOTO_CHAIN

/* These macros are put here for binary compatibility with userspace apps that
 * make use of them. For kernel code and new userspace apps, use the TCA_ID_*
 * versions.
 */
#define TCA_ACT_GACT 5
#define TCA_ACT_IPT 6
#define TCA_ACT_PEDIT 7
#define TCA_ACT_MIRRED 8
#define TCA_ACT_NAT 9
#define TCA_ACT_XT 10
#define TCA_ACT_SKBEDIT 11
#define TCA_ACT_VLAN 12
#define TCA_ACT_BPF 13
#define TCA_ACT_CONNMARK 14
#define TCA_ACT_SKBMOD 15
#define TCA_ACT_CSUM 16
#define TCA_ACT_TUNNEL_KEY 17
#define TCA_ACT_SIMP 22
#define TCA_ACT_IFE 25
#define TCA_ACT_SAMPLE 26

/* Action type identifiers*/
enum tca_id {
	TCA_ID_UNSPEC = 0,
	TCA_ID_POLICE = 1,
	TCA_ID_GACT = TCA_ACT_GACT,
	TCA_ID_IPT = TCA_ACT_IPT,
	TCA_ID_PEDIT = TCA_ACT_PEDIT,
	TCA_ID_MIRRED = TCA_ACT_MIRRED,
	TCA_ID_NAT = TCA_ACT_NAT,
	TCA_ID_XT = TCA_ACT_XT,
	TCA_ID_SKBEDIT = TCA_ACT_SKBEDIT,
	TCA_ID_VLAN = TCA_ACT_VLAN,
	TCA_ID_BPF = TCA_ACT_BPF,
	TCA_ID_CONNMARK = TCA_ACT_CONNMARK,
	TCA_ID_SKBMOD = TCA_ACT_SKBMOD,
	TCA_ID_CSUM = TCA_ACT_CSUM,
	TCA_ID_TUNNEL_KEY = TCA_ACT_TUNNEL_KEY,
	TCA_ID_SIMP = TCA_ACT_SIMP,
	TCA_ID_IFE = TCA_ACT_IFE,
	TCA_ID_SAMPLE = TCA_ACT_SAMPLE,
	TCA_ID_CTINFO,
	TCA_ID_MPLS,
	TCA_ID_CT,
	/* other actions go here */
	__TCA_ID_MAX = 255
};

#define TCA_ID_MAX __TCA_ID_MAX

struct tc_police {
	__u32			index;
	int			action;
#define TC_POLICE_UNSPEC	TC_ACT_UNSPEC
#define TC_POLICE_OK		TC_ACT_OK
#define TC_POLICE_RECLASSIFY	TC_ACT_RECLASSIFY
#define TC_POLICE_SHOT		TC_ACT_SHOT
#define TC_POLICE_PIPE		TC_ACT_PIPE

	__u32			limit;
	__u32			burst;
	__u32			mtu;
	struct tc_ratespec	rate;
	struct tc_ratespec	peakrate;
	int			refcnt;
	int			bindcnt;
	__u32			capab;
};

struct tcf_t {
	__u64   install;
	__u64   lastuse;
	__u64   expires;
	__u64   firstuse;
};

struct tc_cnt {
	int                   refcnt;
	int                   bindcnt;
};

#define tc_gen \
	__u32                 index; \
	__u32                 capab; \
	int                   action; \
	int                   refcnt; \
	int                   bindcnt

enum {
	TCA_POLICE_UNSPEC,
	TCA_POLICE_TBF,
	TCA_POLICE_RATE,
	TCA_POLICE_PEAKRATE,
	TCA_POLICE_AVRATE,
	TCA_POLICE_RESULT,
	TCA_POLICE_TM,
	TCA_POLICE_PAD,
	TCA_POLICE_RATE64,
	TCA_POLICE_PEAKRATE64,
	__TCA_POLICE_MAX
#define TCA_POLICE_RESULT TCA_POLICE_RESULT
};

#define TCA_POLICE_MAX (__TCA_POLICE_MAX - 1)

/* tca flags definitions */
#define TCA_CLS_FLAGS_SKIP_HW	(1 << 0) /* don't offload filter to HW */
#define TCA_CLS_FLAGS_SKIP_SW	(1 << 1) /* don't use filter in SW */
#define TCA_CLS_FLAGS_IN_HW	(1 << 2) /* filter is offloaded to HW */
#define TCA_CLS_FLAGS_NOT_IN_HW (1 << 3) /* filter isn't offloaded to HW */
#define TCA_CLS_FLAGS_VERBOSE	(1 << 4) /* verbose logging */

/* U32 filters */

#define TC_U32_HTID(h) ((h)&0xFFF00000)
#define TC_U32_USERHTID(h) (TC_U32_HTID(h)>>20)
#define TC_U32_HASH(h) (((h)>>12)&0xFF)
#define TC_U32_NODE(h) ((h)&0xFFF)
#define TC_U32_KEY(h) ((h)&0xFFFFF)
#define TC_U32_UNSPEC	0
#define TC_U32_ROOT	(0xFFF00000)

enum {
	TCA_U32_UNSPEC,
	TCA_U32_CLASSID,
	TCA_U32_HASH,
	TCA_U32_LINK,
	TCA_U32_DIVISOR,
	TCA_U32_SEL,
	TCA_U32_POLICE,
	TCA_U32_ACT,
	TCA_U32_INDEV,
	TCA_U32_PCNT,
	TCA_U32_MARK,
	TCA_U32_FLAGS,
	TCA_U32_PAD,
	__TCA_U32_MAX
};

#define TCA_U32_MAX (__TCA_U32_MAX - 1)

struct tc_u32_key {
	__be32		mask;
	__be32		val;
	int		off;
	int		offmask;
};

struct tc_u32_sel {
	unsigned char		flags;
	unsigned char		offshift;
	unsigned char		nkeys;

	__be16			offmask;
	__u16			off;
	short			offoff;

	short			hoff;
	__be32			hmask;
	struct tc_u32_key	keys[0];
};

struct tc_u32_mark {
	__u32		val;
	__u32		mask;
	__u32		success;
};

struct tc_u32_pcnt {
	__u64 rcnt;
	__u64 rhit;
	__u64 kcnts[0];
};

/* Flags */

#define TC_U32_TERMINAL		1
#define TC_U32_OFFSET		2
#define TC_U32_VAROFFSET	4
#define TC_U32_EAT		8

#define TC_U32_MAXDEPTH 8


/* RSVP filter */

enum {
	TCA_RSVP_UNSPEC,
	TCA_RSVP_CLASSID,
	TCA_RSVP_DST,
	TCA_RSVP_SRC,
	TCA_RSVP_PINFO,
	TCA_RSVP_POLICE,
	TCA_RSVP_ACT,
	__TCA_RSVP_MAX
};

#define TCA_RSVP_MAX (__TCA_RSVP_MAX - 1 )

struct tc_rsvp_gpi {
	__u32	key;
	__u32	mask;
	int	offset;
};

struct tc_rsvp_pinfo {
	struct tc_rsvp_gpi dpi;
	struct tc_rsvp_gpi spi;
	__u8	protocol;
	__u8	tunnelid;
	__u8	tunnelhdr;
	__u8	pad;
};

/* ROUTE filter */

enum {
	TCA_ROUTE4_UNSPEC,
	TCA_ROUTE4_CLASSID,
	TCA_ROUTE4_TO,
	TCA_ROUTE4_FROM,
	TCA_ROUTE4_IIF,
	TCA_ROUTE4_POLICE,
	TCA_ROUTE4_ACT,
	__TCA_ROUTE4_MAX
};

#define TCA_ROUTE4_MAX (__TCA_ROUTE4_MAX - 1)


/* FW filter */

enum {
	TCA_FW_UNSPEC,
	TCA_FW_CLASSID,
	TCA_FW_POLICE,
	TCA_FW_INDEV,
	TCA_FW_ACT, /* used by CONFIG_NET_CLS_ACT */
	TCA_FW_MASK,
	__TCA_FW_MAX
};

#define TCA_FW_MAX (__TCA_FW_MAX - 1)

/* TC index filter */

enum {
	TCA_TCINDEX_UNSPEC,
	TCA_TCINDEX_HASH,
	TCA_TCINDEX_MASK,
	TCA_TCINDEX_SHIFT,
	TCA_TCINDEX_FALL_THROUGH,
	TCA_TCINDEX_CLASSID,
	TCA_TCINDEX_POLICE,
	TCA_TCINDEX_ACT,
	__TCA_TCINDEX_MAX
};

#define TCA_TCINDEX_MAX     (__TCA_TCINDEX_MAX - 1)

/* Flow filter */

enum {
	FLOW_KEY_SRC,
	FLOW_KEY_DST,
	FLOW_KEY_PROTO,
	FLOW_KEY_PROTO_SRC,
	FLOW_KEY_PROTO_DST,
	FLOW_KEY_IIF,
	FLOW_KEY_PRIORITY,
	FLOW_KEY_MARK,
	FLOW_KEY_NFCT,
	FLOW_KEY_NFCT_SRC,
	FLOW_KEY_NFCT_DST,
	FLOW_KEY_NFCT_PROTO_SRC,
	FLOW_KEY_NFCT_PROTO_DST,
	FLOW_KEY_RTCLASSID,
	FLOW_KEY_SKUID,
	FLOW_KEY_SKGID,
	FLOW_KEY_VLAN_TAG,
	FLOW_KEY_RXHASH,
	__FLOW_KEY_MAX,
};

#define FLOW_KEY_MAX	(__FLOW_KEY_MAX - 1)

enum {
	FLOW_MODE_MAP,
	FLOW_MODE_HASH,
};

enum {
	TCA_FLOW_UNSPEC,
	TCA_FLOW_KEYS,
	TCA_FLOW_MODE,
	TCA_FLOW_BASECLASS,
	TCA_FLOW_RSHIFT,
	TCA_FLOW_ADDEND,
	TCA_FLOW_MASK,
	TCA_FLOW_XOR,
	TCA_FLOW_DIVISOR,
	TCA_FLOW_ACT,
	TCA_FLOW_POLICE,
	TCA_FLOW_EMATCHES,
	TCA_FLOW_PERTURB,
	__TCA_FLOW_MAX
};

#define TCA_FLOW_MAX	(__TCA_FLOW_MAX - 1)

/* Basic filter */

struct tc_basic_pcnt {
	__u64 rcnt;
	__u64 rhit;
};

enum {
	TCA_BASIC_UNSPEC,
	TCA_BASIC_CLASSID,
	TCA_BASIC_EMATCHES,
	TCA_BASIC_ACT,
	TCA_BASIC_POLICE,
	TCA_BASIC_PCNT,
	TCA_BASIC_PAD,
	__TCA_BASIC_MAX
};

#define TCA_BASIC_MAX (__TCA_BASIC_MAX - 1)


/* Cgroup classifier */

enum {
	TCA_CGROUP_UNSPEC,
	TCA_CGROUP_ACT,
	TCA_CGROUP_POLICE,
	TCA_CGROUP_EMATCHES,
	__TCA_CGROUP_MAX,
};

#define TCA_CGROUP_MAX (__TCA_CGROUP_MAX - 1)

/* BPF classifier */

#define TCA_BPF_FLAG_ACT_DIRECT		(1 << 0)

enum {
	TCA_BPF_UNSPEC,
	TCA_BPF_ACT,
	TCA_BPF_POLICE,
	TCA_BPF_CLASSID,
	TCA_BPF_OPS_LEN,
	TCA_BPF_OPS,
	TCA_BPF_FD,
	TCA_BPF_NAME,
	TCA_BPF_FLAGS,
	TCA_BPF_FLAGS_GEN,
	TCA_BPF_TAG,
	TCA_BPF_ID,
	__TCA_BPF_MAX,
};

#define TCA_BPF_MAX (__TCA_BPF_MAX - 1)

/* Flower classifier */

enum {
	TCA_FLOWER_UNSPEC,
	TCA_FLOWER_CLASSID,
	TCA_FLOWER_INDEV,
	TCA_FLOWER_ACT,
	TCA_FLOWER_KEY_ETH_DST,		/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_DST_MASK,	/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_SRC,		/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_SRC_MASK,	/* ETH_ALEN */
	TCA_FLOWER_KEY_ETH_TYPE,	/* be16 */
	TCA_FLOWER_KEY_IP_PROTO,	/* u8 */
	TCA_FLOWER_KEY_IPV4_SRC,	/* be32 */
	TCA_FLOWER_KEY_IPV4_SRC_MASK,	/* be32 */
	TCA_FLOWER_KEY_IPV4_DST,	/* be32 */
	TCA_FLOWER_KEY_IPV4_DST_MASK,	/* be32 */
	TCA_FLOWER_KEY_IPV6_SRC,	/* struct in6_addr */
	TCA_FLOWER_KEY_IPV6_SRC_MASK,	/* struct in6_addr */
	TCA_FLOWER_KEY_IPV6_DST,	/* struct in6_addr */
	TCA_FLOWER_KEY_IPV6_DST_MASK,	/* struct in6_addr */
	TCA_FLOWER_KEY_TCP_SRC,		/* be16 */
	TCA_FLOWER_KEY_TCP_DST,		/* be16 */
	TCA_FLOWER_KEY_UDP_SRC,		/* be16 */
	TCA_FLOWER_KEY_UDP_DST,		/* be16 */

	TCA_FLOWER_FLAGS,
	TCA_FLOWER_KEY_VLAN_ID,		/* be16 */
	TCA_FLOWER_KEY_VLAN_PRIO,	/* u8   */
	TCA_FLOWER_KEY_VLAN_ETH_TYPE,	/* be16 */

	TCA_FLOWER_KEY_ENC_KEY_ID,	/* be32 */
	TCA_FLOWER_KEY_ENC_IPV4_SRC,	/* be32 */
	TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK,/* be32 */
	TCA_FLOWER_KEY_ENC_IPV4_DST,	/* be32 */
	TCA_FLOWER_KEY_ENC_IPV4_DST_MASK,/* be32 */
	TCA_FLOWER_KEY_ENC_IPV6_SRC,	/* struct in6_addr */
	TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK,/* struct in6_addr */
	TCA_FLOWER_KEY_ENC_IPV6_DST,	/* struct in6_addr */
	TCA_FLOWER_KEY_ENC_IPV6_DST_MASK,/* struct in6_addr */

	TCA_FLOWER_KEY_TCP_SRC_MASK,	/* be16 */
	TCA_FLOWER_KEY_TCP_DST_MASK,	/* be16 */
	TCA_FLOWER_KEY_UDP_SRC_MASK,	/* be16 */
	TCA_FLOWER_KEY_UDP_DST_MASK,	/* be16 */
	TCA_FLOWER_KEY_SCTP_SRC_MASK,	/* be16 */
	TCA_FLOWER_KEY_SCTP_DST_MASK,	/* be16 */

	TCA_FLOWER_KEY_SCTP_SRC,	/* be16 */
	TCA_FLOWER_KEY_SCTP_DST,	/* be16 */

	TCA_FLOWER_KEY_ENC_UDP_SRC_PORT,	/* be16 */
	TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK,	/* be16 */
	TCA_FLOWER_KEY_ENC_UDP_DST_PORT,	/* be16 */
	TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK,	/* be16 */

	TCA_FLOWER_KEY_FLAGS,		/* be32 */
	TCA_FLOWER_KEY_FLAGS_MASK,	/* be32 */

	TCA_FLOWER_KEY_ICMPV4_CODE,	/* u8 */
	TCA_FLOWER_KEY_ICMPV4_CODE_MASK,/* u8 */
	TCA_FLOWER_KEY_ICMPV4_TYPE,	/* u8 */
	TCA_FLOWER_KEY_ICMPV4_TYPE_MASK,/* u8 */
	TCA_FLOWER_KEY_ICMPV6_CODE,	/* u8 */
	TCA_FLOWER_KEY_ICMPV6_CODE_MASK,/* u8 */
	TCA_FLOWER_KEY_ICMPV6_TYPE,	/* u8 */
	TCA_FLOWER_KEY_ICMPV6_TYPE_MASK,/* u8 */

	TCA_FLOWER_KEY_ARP_SIP,		/* be32 */
	TCA_FLOWER_KEY_ARP_SIP_MASK,	/* be32 */
	TCA_FLOWER_KEY_ARP_TIP,		/* be32 */
	TCA_FLOWER_KEY_ARP_TIP_MASK,	/* be32 */
	TCA_FLOWER_KEY_ARP_OP,		/* u8 */
	TCA_FLOWER_KEY_ARP_OP_MASK,	/* u8 */
	TCA_FLOWER_KEY_ARP_SHA,		/* ETH_ALEN */
	TCA_FLOWER_KEY_ARP_SHA_MASK,	/* ETH_ALEN */
	TCA_FLOWER_KEY_ARP_THA,		/* ETH_ALEN */
	TCA_FLOWER_KEY_ARP_THA_MASK,	/* ETH_ALEN */

	TCA_FLOWER_KEY_MPLS_TTL,	/* u8 - 8 bits */
	TCA_FLOWER_KEY_MPLS_BOS,	/* u8 - 1 bit */
	TCA_FLOWER_KEY_MPLS_TC,		/* u8 - 3 bits */
	TCA_FLOWER_KEY_MPLS_LABEL,	/* be32 - 20 bits */

	TCA_FLOWER_KEY_TCP_FLAGS,	/* be16 */
	TCA_FLOWER_KEY_TCP_FLAGS_MASK,	/* be16 */

	TCA_FLOWER_KEY_IP_TOS,		/* u8 */
	TCA_FLOWER_KEY_IP_TOS_MASK,	/* u8 */
	TCA_FLOWER_KEY_IP_TTL,		/* u8 */
	TCA_FLOWER_KEY_IP_TTL_MASK,	/* u8 */

	TCA_FLOWER_KEY_CVLAN_ID,	/* be16 */
	TCA_FLOWER_KEY_CVLAN_PRIO,	/* u8   */
	TCA_FLOWER_KEY_CVLAN_ETH_TYPE,	/* be16 */

	TCA_FLOWER_KEY_ENC_IP_TOS,	/* u8 */
	TCA_FLOWER_KEY_ENC_IP_TOS_MASK,	/* u8 */
	TCA_FLOWER_KEY_ENC_IP_TTL,	/* u8 */
	TCA_FLOWER_KEY_ENC_IP_TTL_MASK,	/* u8 */

	TCA_FLOWER_KEY_ENC_OPTS,
	TCA_FLOWER_KEY_ENC_OPTS_MASK,

	TCA_FLOWER_IN_HW_COUNT,

	TCA_FLOWER_KEY_PORT_SRC_MIN,	/* be16 */
	TCA_FLOWER_KEY_PORT_SRC_MAX,	/* be16 */
	TCA_FLOWER_KEY_PORT_DST_MIN,	/* be16 */
	TCA_FLOWER_KEY_PORT_DST_MAX,	/* be16 */

	TCA_FLOWER_KEY_CT_STATE,	/* u16 */
	TCA_FLOWER_KEY_CT_STATE_MASK,	/* u16 */
	TCA_FLOWER_KEY_CT_ZONE,		/* u16 */
	TCA_FLOWER_KEY_CT_ZONE_MASK,	/* u16 */
	TCA_FLOWER_KEY_CT_MARK,		/* u32 */
	TCA_FLOWER_KEY_CT_MARK_MASK,	/* u32 */
	TCA_FLOWER_KEY_CT_LABELS,	/* u128 */
	TCA_FLOWER_KEY_CT_LABELS_MASK,	/* u128 */

	__TCA_FLOWER_MAX,
};

#define TCA_FLOWER_MAX (__TCA_FLOWER_MAX - 1)

enum {
	TCA_FLOWER_KEY_CT_FLAGS_NEW = 1 << 0, /* Beginning of a new connection. */
	TCA_FLOWER_KEY_CT_FLAGS_ESTABLISHED = 1 << 1, /* Part of an existing connection. */
	TCA_FLOWER_KEY_CT_FLAGS_RELATED = 1 << 2, /* Related to an established connection. */
	TCA_FLOWER_KEY_CT_FLAGS_TRACKED = 1 << 3, /* Conntrack has occurred. */
};

enum {
	TCA_FLOWER_KEY_ENC_OPTS_UNSPEC,
	TCA_FLOWER_KEY_ENC_OPTS_GENEVE, /* Nested
					 * TCA_FLOWER_KEY_ENC_OPT_GENEVE_
					 * attributes
					 */
	TCA_FLOWER_KEY_ENC_OPTS_VXLAN,	/* Nested
					 * TCA_FLOWER_KEY_ENC_OPT_VXLAN_
					 * attributes
					 */
	TCA_FLOWER_KEY_ENC_OPTS_ERSPAN,	/* Nested
					 * TCA_FLOWER_KEY_ENC_OPT_ERSPAN_
					 * attributes
					 */
	__TCA_FLOWER_KEY_ENC_OPTS_MAX,
};

#define TCA_FLOWER_KEY_ENC_OPTS_MAX (__TCA_FLOWER_KEY_ENC_OPTS_MAX - 1)

enum {
	TCA_FLOWER_KEY_ENC_OPT_GENEVE_UNSPEC,
	TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS,            /* u16 */
	TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE,             /* u8 */
	TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA,             /* 4 to 128 bytes */

	__TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX,
};

#define TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX \
		(__TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX - 1)

enum {
	TCA_FLOWER_KEY_ENC_OPT_VXLAN_UNSPEC,
	TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP,		/* u32 */
	__TCA_FLOWER_KEY_ENC_OPT_VXLAN_MAX,
};

#define TCA_FLOWER_KEY_ENC_OPT_VXLAN_MAX \
		(__TCA_FLOWER_KEY_ENC_OPT_VXLAN_MAX - 1)

enum {
	TCA_FLOWER_KEY_ENC_OPT_ERSPAN_UNSPEC,
	TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER,              /* u8 */
	TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX,            /* be32 */
	TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR,              /* u8 */
	TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID,             /* u8 */
	__TCA_FLOWER_KEY_ENC_OPT_ERSPAN_MAX,
};

#define TCA_FLOWER_KEY_ENC_OPT_ERSPAN_MAX \
		(__TCA_FLOWER_KEY_ENC_OPT_ERSPAN_MAX - 1)

enum {
	TCA_FLOWER_KEY_FLAGS_IS_FRAGMENT = (1 << 0),
	TCA_FLOWER_KEY_FLAGS_FRAG_IS_FIRST = (1 << 1),
};

#define TCA_FLOWER_MASK_FLAGS_RANGE	(1 << 0) /* Range-based match */

/* Match-all classifier */

struct tc_matchall_pcnt {
	__u64 rhit;
};

enum {
	TCA_MATCHALL_UNSPEC,
	TCA_MATCHALL_CLASSID,
	TCA_MATCHALL_ACT,
	TCA_MATCHALL_FLAGS,
	TCA_MATCHALL_PCNT,
	TCA_MATCHALL_PAD,
	__TCA_MATCHALL_MAX,
};

#define TCA_MATCHALL_MAX (__TCA_MATCHALL_MAX - 1)

/* Extended Matches */

struct tcf_ematch_tree_hdr {
	__u16		nmatches;
	__u16		progid;
};

enum {
	TCA_EMATCH_TREE_UNSPEC,
	TCA_EMATCH_TREE_HDR,
	TCA_EMATCH_TREE_LIST,
	__TCA_EMATCH_TREE_MAX
};
#define TCA_EMATCH_TREE_MAX (__TCA_EMATCH_TREE_MAX - 1)

struct tcf_ematch_hdr {
	__u16		matchid;
	__u16		kind;
	__u16		flags;
	__u16		pad; /* currently unused */
};

/*  0                   1
 *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 
 * +-----------------------+-+-+---+
 * |         Unused        |S|I| R |
 * +-----------------------+-+-+---+
 *
 * R(2) ::= relation to next ematch
 *          where: 0 0 END (last ematch)
 *                 0 1 AND
 *                 1 0 OR
 *                 1 1 Unused (invalid)
 * I(1) ::= invert result
 * S(1) ::= simple payload
 */
#define TCF_EM_REL_END	0
#define TCF_EM_REL_AND	(1<<0)
#define TCF_EM_REL_OR	(1<<1)
#define TCF_EM_INVERT	(1<<2)
#define TCF_EM_SIMPLE	(1<<3)

#define TCF_EM_REL_MASK	3
#define TCF_EM_REL_VALID(v) (((v) & TCF_EM_REL_MASK) != TCF_EM_REL_MASK)

enum {
	TCF_LAYER_LINK,
	TCF_LAYER_NETWORK,
	TCF_LAYER_TRANSPORT,
	__TCF_LAYER_MAX
};
#define TCF_LAYER_MAX (__TCF_LAYER_MAX - 1)

/* Ematch type assignments
 *   1..32767		Reserved for ematches inside kernel tree
 *   32768..65535	Free to use, not reliable
 */
#define	TCF_EM_CONTAINER	0
#define	TCF_EM_CMP		1
#define	TCF_EM_NBYTE		2
#define	TCF_EM_U32		3
#define	TCF_EM_META		4
#define	TCF_EM_TEXT		5
#define	TCF_EM_VLAN		6
#define	TCF_EM_CANID		7
#define	TCF_EM_IPSET		8
#define	TCF_EM_IPT		9
#define	TCF_EM_MAX		9

enum {
	TCF_EM_PROG_TC
};

enum {
	TCF_EM_OPND_EQ,
	TCF_EM_OPND_GT,
	TCF_EM_OPND_LT
};

#endif
Commit	Line	Data
ba914908	1	/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
68d5ba54 SH	2	#ifndef __LINUX_PKT_CLS_H
	3	#define __LINUX_PKT_CLS_H
	4
67881151	5	#include <linux/types.h>
d639d9d1 SH	6	#include <linux/pkt_sched.h>
d639d9d1 SH	7
b479a7d7 SH	8	#define TC_COOKIE_MAX_SIZE 16
b479a7d7 SH	9
68d5ba54	10	/* Action attributes */
ab322673	11	enum {
68d5ba54 SH	12	TCA_ACT_UNSPEC,
	13	TCA_ACT_KIND,
	14	TCA_ACT_OPTIONS,
	15	TCA_ACT_INDEX,
451d3b81	16	TCA_ACT_STATS,
31ce6e01	17	TCA_ACT_PAD,
b479a7d7	18	TCA_ACT_COOKIE,
17a948c8	19	TCA_ACT_FLAGS,
1ff1edb6	20	TCA_ACT_HW_STATS,
68d5ba54 SH	21	__TCA_ACT_MAX
	22	};
	23
17a948c8 DA	24	#define TCA_ACT_FLAGS_NO_PERCPU_STATS 1 /* Don't use percpu allocator for
	25	* actions stats.
	26	*/
	27
25091a76 DA	28	/* tca HW stats type
	29	* When user does not pass the attribute, he does not care.
	30	* It is the same as if he would pass the attribute with
	31	* all supported bits set.
	32	* In case no bits are set, user is not interested in getting any HW statistics.
	33	*/
1ff1edb6 DA	34	#define TCA_ACT_HW_STATS_IMMEDIATE (1 << 0) /* Means that in dump, user
	35	* gets the current HW stats
	36	* state from the device
	37	* queried at the dump time.
	38	*/
	39	#define TCA_ACT_HW_STATS_DELAYED (1 << 1) /* Means that in dump, user gets
	40	* HW stats that might be out of date
	41	* for some time, maybe couple of
	42	* seconds. This is the case when
	43	* driver polls stats updates
	44	* periodically or when it gets async
	45	* stats update from the device.
	46	*/
25091a76	47
68d5ba54 SH	48	#define TCA_ACT_MAX __TCA_ACT_MAX
	49	#define TCA_OLD_COMPAT (TCA_ACT_MAX+1)
	50	#define TCA_ACT_MAX_PRIO 32
	51	#define TCA_ACT_BIND 1
	52	#define TCA_ACT_NOBIND 0
	53	#define TCA_ACT_UNBIND 1
	54	#define TCA_ACT_NOUNBIND 0
	55	#define TCA_ACT_REPLACE 1
	56	#define TCA_ACT_NOREPLACE 0
68d5ba54 SH	57
	58	#define TC_ACT_UNSPEC (-1)
	59	#define TC_ACT_OK 0
	60	#define TC_ACT_RECLASSIFY 1
	61	#define TC_ACT_SHOT 2
	62	#define TC_ACT_PIPE 3
	63	#define TC_ACT_STOLEN 4
	64	#define TC_ACT_QUEUED 5
	65	#define TC_ACT_REPEAT 6
4e39bfb9	66	#define TC_ACT_REDIRECT 7
410556ad SH	67	#define TC_ACT_TRAP 8 /* For hw path, this means "trap to cpu"
	68	* and don't further process the frame
	69	* in hardware. For sw path, this is
	70	* equivalent of TC_ACT_STOLEN - drop
	71	* the skb and act like everything
	72	* is alright.
	73	*/
74eb09ad	74	#define TC_ACT_VALUE_MAX TC_ACT_TRAP
76557951 SH	75
	76	/* There is a special kind of actions called "extended actions",
	77	* which need a value parameter. These have a local opcode located in
	78	* the highest nibble, starting from 1. The rest of the bits
	79	* are used to carry the value. These two parts together make
	80	* a combined opcode.
	81	*/
	82	#define __TC_ACT_EXT_SHIFT 28
	83	#define __TC_ACT_EXT(local) ((local) << __TC_ACT_EXT_SHIFT)
	84	#define TC_ACT_EXT_VAL_MASK ((1 << __TC_ACT_EXT_SHIFT) - 1)
74eb09ad DA	85	#define TC_ACT_EXT_OPCODE(combined) ((combined) & (~TC_ACT_EXT_VAL_MASK))
74eb09ad DA	86	#define TC_ACT_EXT_CMP(combined, opcode) (TC_ACT_EXT_OPCODE(combined) == opcode)
76557951 SH	87
76557951 SH	88	#define TC_ACT_JUMP __TC_ACT_EXT(1)
d4473c02	89	#define TC_ACT_GOTO_CHAIN __TC_ACT_EXT(2)
74eb09ad	90	#define TC_ACT_EXT_OPCODE_MAX TC_ACT_GOTO_CHAIN
68d5ba54	91
41fda879 DA	92	/* These macros are put here for binary compatibility with userspace apps that
	93	* make use of them. For kernel code and new userspace apps, use the TCA_ID_*
	94	* versions.
	95	*/
	96	#define TCA_ACT_GACT 5
	97	#define TCA_ACT_IPT 6
	98	#define TCA_ACT_PEDIT 7
	99	#define TCA_ACT_MIRRED 8
	100	#define TCA_ACT_NAT 9
	101	#define TCA_ACT_XT 10
	102	#define TCA_ACT_SKBEDIT 11
	103	#define TCA_ACT_VLAN 12
	104	#define TCA_ACT_BPF 13
	105	#define TCA_ACT_CONNMARK 14
	106	#define TCA_ACT_SKBMOD 15
	107	#define TCA_ACT_CSUM 16
	108	#define TCA_ACT_TUNNEL_KEY 17
	109	#define TCA_ACT_SIMP 22
	110	#define TCA_ACT_IFE 25
	111	#define TCA_ACT_SAMPLE 26
	112
68d5ba54	113	/* Action type identifiers*/
41fda879 DA	114	enum tca_id {
	115	TCA_ID_UNSPEC = 0,
	116	TCA_ID_POLICE = 1,
	117	TCA_ID_GACT = TCA_ACT_GACT,
	118	TCA_ID_IPT = TCA_ACT_IPT,
	119	TCA_ID_PEDIT = TCA_ACT_PEDIT,
	120	TCA_ID_MIRRED = TCA_ACT_MIRRED,
	121	TCA_ID_NAT = TCA_ACT_NAT,
	122	TCA_ID_XT = TCA_ACT_XT,
	123	TCA_ID_SKBEDIT = TCA_ACT_SKBEDIT,
	124	TCA_ID_VLAN = TCA_ACT_VLAN,
	125	TCA_ID_BPF = TCA_ACT_BPF,
	126	TCA_ID_CONNMARK = TCA_ACT_CONNMARK,
	127	TCA_ID_SKBMOD = TCA_ACT_SKBMOD,
	128	TCA_ID_CSUM = TCA_ACT_CSUM,
	129	TCA_ID_TUNNEL_KEY = TCA_ACT_TUNNEL_KEY,
	130	TCA_ID_SIMP = TCA_ACT_SIMP,
	131	TCA_ID_IFE = TCA_ACT_IFE,
	132	TCA_ID_SAMPLE = TCA_ACT_SAMPLE,
b2f8eb7f	133	TCA_ID_CTINFO,
01db6c41 DA	134	TCA_ID_MPLS,
	135	TCA_ID_CT,
	136	/* other actions go here */
41fda879	137	__TCA_ID_MAX = 255
68d5ba54 SH	138	};
	139
	140	#define TCA_ID_MAX __TCA_ID_MAX
	141
ab322673	142	struct tc_police {
68d5ba54 SH	143	__u32 index;
	144	int action;
	145	#define TC_POLICE_UNSPEC TC_ACT_UNSPEC
	146	#define TC_POLICE_OK TC_ACT_OK
	147	#define TC_POLICE_RECLASSIFY TC_ACT_RECLASSIFY
	148	#define TC_POLICE_SHOT TC_ACT_SHOT
	149	#define TC_POLICE_PIPE TC_ACT_PIPE
	150
	151	__u32 limit;
	152	__u32 burst;
	153	__u32 mtu;
	154	struct tc_ratespec rate;
	155	struct tc_ratespec peakrate;
c6878082 SH	156	int refcnt;
c6878082 SH	157	int bindcnt;
68d5ba54 SH	158	__u32 capab;
	159	};
	160
ab322673	161	struct tcf_t {
d639d9d1 SH	162	__u64 install;
	163	__u64 lastuse;
	164	__u64 expires;
c6878082	165	__u64 firstuse;
68d5ba54 SH	166	};
68d5ba54 SH	167
ab322673	168	struct tc_cnt {
c6878082	169	int refcnt;
68d5ba54 SH	170	int bindcnt;
	171	};
	172
	173	#define tc_gen \
	174	__u32 index; \
	175	__u32 capab; \
	176	int action; \
	177	int refcnt; \
	178	int bindcnt
	179
ab322673	180	enum {
68d5ba54 SH	181	TCA_POLICE_UNSPEC,
	182	TCA_POLICE_TBF,
	183	TCA_POLICE_RATE,
	184	TCA_POLICE_PEAKRATE,
	185	TCA_POLICE_AVRATE,
	186	TCA_POLICE_RESULT,
de70bd2f SH	187	TCA_POLICE_TM,
de70bd2f SH	188	TCA_POLICE_PAD,
3d72f125 DA	189	TCA_POLICE_RATE64,
3d72f125 DA	190	TCA_POLICE_PEAKRATE64,
68d5ba54 SH	191	__TCA_POLICE_MAX
	192	#define TCA_POLICE_RESULT TCA_POLICE_RESULT
	193	};
	194
	195	#define TCA_POLICE_MAX (__TCA_POLICE_MAX - 1)
	196
0a99e7ba	197	/* tca flags definitions */
cad54934 SH	198	#define TCA_CLS_FLAGS_SKIP_HW (1 << 0) /* don't offload filter to HW */
	199	#define TCA_CLS_FLAGS_SKIP_SW (1 << 1) /* don't use filter in SW */
	200	#define TCA_CLS_FLAGS_IN_HW (1 << 2) /* filter is offloaded to HW */
	201	#define TCA_CLS_FLAGS_NOT_IN_HW (1 << 3) /* filter isn't offloaded to HW */
4276e652	202	#define TCA_CLS_FLAGS_VERBOSE (1 << 4) /* verbose logging */
0a99e7ba	203
68d5ba54 SH	204	/* U32 filters */
	205
	206	#define TC_U32_HTID(h) ((h)&0xFFF00000)
	207	#define TC_U32_USERHTID(h) (TC_U32_HTID(h)>>20)
	208	#define TC_U32_HASH(h) (((h)>>12)&0xFF)
	209	#define TC_U32_NODE(h) ((h)&0xFFF)
	210	#define TC_U32_KEY(h) ((h)&0xFFFFF)
	211	#define TC_U32_UNSPEC 0
	212	#define TC_U32_ROOT (0xFFF00000)
	213
ab322673	214	enum {
68d5ba54 SH	215	TCA_U32_UNSPEC,
	216	TCA_U32_CLASSID,
	217	TCA_U32_HASH,
	218	TCA_U32_LINK,
	219	TCA_U32_DIVISOR,
	220	TCA_U32_SEL,
	221	TCA_U32_POLICE,
de70bd2f	222	TCA_U32_ACT,
68d5ba54 SH	223	TCA_U32_INDEV,
68d5ba54 SH	224	TCA_U32_PCNT,
6f0ba88b	225	TCA_U32_MARK,
2421ab75	226	TCA_U32_FLAGS,
31ce6e01	227	TCA_U32_PAD,
68d5ba54 SH	228	__TCA_U32_MAX
	229	};
	230
	231	#define TCA_U32_MAX (__TCA_U32_MAX - 1)
	232
ab322673	233	struct tc_u32_key {
5344bb28 SH	234	__be32 mask;
5344bb28 SH	235	__be32 val;
68d5ba54 SH	236	int off;
	237	int offmask;
	238	};
	239
ab322673	240	struct tc_u32_sel {
68d5ba54 SH	241	unsigned char flags;
	242	unsigned char offshift;
	243	unsigned char nkeys;
	244
5344bb28	245	__be16 offmask;
68d5ba54 SH	246	__u16 off;
	247	short offoff;
	248
	249	short hoff;
5344bb28	250	__be32 hmask;
68d5ba54 SH	251	struct tc_u32_key keys[0];
	252	};
	253
ab322673	254	struct tc_u32_mark {
d639d9d1 SH	255	__u32 val;
	256	__u32 mask;
	257	__u32 success;
	258	};
	259
ab322673	260	struct tc_u32_pcnt {
68d5ba54 SH	261	__u64 rcnt;
	262	__u64 rhit;
	263	__u64 kcnts[0];
	264	};
6f0ba88b	265
68d5ba54 SH	266	/* Flags */
	267
	268	#define TC_U32_TERMINAL 1
	269	#define TC_U32_OFFSET 2
	270	#define TC_U32_VAROFFSET 4
	271	#define TC_U32_EAT 8
	272
	273	#define TC_U32_MAXDEPTH 8
	274
	275
	276	/* RSVP filter */
	277
ab322673	278	enum {
68d5ba54 SH	279	TCA_RSVP_UNSPEC,
	280	TCA_RSVP_CLASSID,
	281	TCA_RSVP_DST,
	282	TCA_RSVP_SRC,
	283	TCA_RSVP_PINFO,
	284	TCA_RSVP_POLICE,
d639d9d1	285	TCA_RSVP_ACT,
68d5ba54 SH	286	__TCA_RSVP_MAX
	287	};
	288
	289	#define TCA_RSVP_MAX (__TCA_RSVP_MAX - 1 )
	290
ab322673	291	struct tc_rsvp_gpi {
68d5ba54 SH	292	__u32 key;
	293	__u32 mask;
	294	int offset;
	295	};
	296
ab322673	297	struct tc_rsvp_pinfo {
68d5ba54 SH	298	struct tc_rsvp_gpi dpi;
	299	struct tc_rsvp_gpi spi;
	300	__u8 protocol;
	301	__u8 tunnelid;
	302	__u8 tunnelhdr;
6864c1e7	303	__u8 pad;
68d5ba54 SH	304	};
	305
	306	/* ROUTE filter */
	307
ab322673	308	enum {
68d5ba54 SH	309	TCA_ROUTE4_UNSPEC,
	310	TCA_ROUTE4_CLASSID,
	311	TCA_ROUTE4_TO,
	312	TCA_ROUTE4_FROM,
	313	TCA_ROUTE4_IIF,
	314	TCA_ROUTE4_POLICE,
d639d9d1	315	TCA_ROUTE4_ACT,
68d5ba54 SH	316	__TCA_ROUTE4_MAX
	317	};
	318
	319	#define TCA_ROUTE4_MAX (__TCA_ROUTE4_MAX - 1)
	320
	321
	322	/* FW filter */
	323
ab322673	324	enum {
68d5ba54 SH	325	TCA_FW_UNSPEC,
	326	TCA_FW_CLASSID,
	327	TCA_FW_POLICE,
ea985eb4	328	TCA_FW_INDEV,
68d5ba54	329	TCA_FW_ACT, /* used by CONFIG_NET_CLS_ACT */
ead2ba70	330	TCA_FW_MASK,
68d5ba54 SH	331	__TCA_FW_MAX
	332	};
	333
	334	#define TCA_FW_MAX (__TCA_FW_MAX - 1)
	335
	336	/* TC index filter */
	337
ab322673	338	enum {
68d5ba54 SH	339	TCA_TCINDEX_UNSPEC,
	340	TCA_TCINDEX_HASH,
	341	TCA_TCINDEX_MASK,
	342	TCA_TCINDEX_SHIFT,
	343	TCA_TCINDEX_FALL_THROUGH,
	344	TCA_TCINDEX_CLASSID,
	345	TCA_TCINDEX_POLICE,
d639d9d1	346	TCA_TCINDEX_ACT,
68d5ba54 SH	347	__TCA_TCINDEX_MAX
	348	};
	349
	350	#define TCA_TCINDEX_MAX (__TCA_TCINDEX_MAX - 1)
	351
9932abb4 PM	352	/* Flow filter */
9932abb4 PM	353
ab322673	354	enum {
9932abb4 PM	355	FLOW_KEY_SRC,
	356	FLOW_KEY_DST,
	357	FLOW_KEY_PROTO,
	358	FLOW_KEY_PROTO_SRC,
	359	FLOW_KEY_PROTO_DST,
	360	FLOW_KEY_IIF,
	361	FLOW_KEY_PRIORITY,
	362	FLOW_KEY_MARK,
	363	FLOW_KEY_NFCT,
	364	FLOW_KEY_NFCT_SRC,
	365	FLOW_KEY_NFCT_DST,
	366	FLOW_KEY_NFCT_PROTO_SRC,
	367	FLOW_KEY_NFCT_PROTO_DST,
	368	FLOW_KEY_RTCLASSID,
	369	FLOW_KEY_SKUID,
	370	FLOW_KEY_SKGID,
66862d3c	371	FLOW_KEY_VLAN_TAG,
7162c921	372	FLOW_KEY_RXHASH,
9932abb4 PM	373	__FLOW_KEY_MAX,
	374	};
	375
	376	#define FLOW_KEY_MAX (__FLOW_KEY_MAX - 1)
	377
ab322673	378	enum {
9932abb4 PM	379	FLOW_MODE_MAP,
	380	FLOW_MODE_HASH,
	381	};
	382
ab322673	383	enum {
9932abb4 PM	384	TCA_FLOW_UNSPEC,
	385	TCA_FLOW_KEYS,
	386	TCA_FLOW_MODE,
	387	TCA_FLOW_BASECLASS,
	388	TCA_FLOW_RSHIFT,
	389	TCA_FLOW_ADDEND,
	390	TCA_FLOW_MASK,
	391	TCA_FLOW_XOR,
	392	TCA_FLOW_DIVISOR,
	393	TCA_FLOW_ACT,
	394	TCA_FLOW_POLICE,
	395	TCA_FLOW_EMATCHES,
19ecc16d	396	TCA_FLOW_PERTURB,
9932abb4 PM	397	__TCA_FLOW_MAX
	398	};
	399
	400	#define TCA_FLOW_MAX (__TCA_FLOW_MAX - 1)
	401
d639d9d1 SH	402	/* Basic filter */
d639d9d1 SH	403
dad02ef4 DA	404	struct tc_basic_pcnt {
	405	__u64 rcnt;
	406	__u64 rhit;
	407	};
	408
ab322673	409	enum {
d639d9d1 SH	410	TCA_BASIC_UNSPEC,
	411	TCA_BASIC_CLASSID,
	412	TCA_BASIC_EMATCHES,
	413	TCA_BASIC_ACT,
	414	TCA_BASIC_POLICE,
dad02ef4 DA	415	TCA_BASIC_PCNT,
dad02ef4 DA	416	TCA_BASIC_PAD,
d639d9d1 SH	417	__TCA_BASIC_MAX
	418	};
	419
	420	#define TCA_BASIC_MAX (__TCA_BASIC_MAX - 1)
	421
67881151 SH	422
	423	/* Cgroup classifier */
	424
ab322673	425	enum {
67881151 SH	426	TCA_CGROUP_UNSPEC,
	427	TCA_CGROUP_ACT,
	428	TCA_CGROUP_POLICE,
	429	TCA_CGROUP_EMATCHES,
	430	__TCA_CGROUP_MAX,
	431	};
	432
	433	#define TCA_CGROUP_MAX (__TCA_CGROUP_MAX - 1)
	434
793da0e7 SH	435	/* BPF classifier */
793da0e7 SH	436
4e39bfb9 SH	437	#define TCA_BPF_FLAG_ACT_DIRECT (1 << 0)
4e39bfb9 SH	438
793da0e7 SH	439	enum {
	440	TCA_BPF_UNSPEC,
	441	TCA_BPF_ACT,
	442	TCA_BPF_POLICE,
	443	TCA_BPF_CLASSID,
	444	TCA_BPF_OPS_LEN,
	445	TCA_BPF_OPS,
61333d24 SH	446	TCA_BPF_FD,
61333d24 SH	447	TCA_BPF_NAME,
4e39bfb9	448	TCA_BPF_FLAGS,
d9927247	449	TCA_BPF_FLAGS_GEN,
6166cc35	450	TCA_BPF_TAG,
35a004dc	451	TCA_BPF_ID,
793da0e7 SH	452	__TCA_BPF_MAX,
	453	};
	454
	455	#define TCA_BPF_MAX (__TCA_BPF_MAX - 1)
	456
8f42ceaf SH	457	/* Flower classifier */
	458
	459	enum {
	460	TCA_FLOWER_UNSPEC,
	461	TCA_FLOWER_CLASSID,
	462	TCA_FLOWER_INDEV,
	463	TCA_FLOWER_ACT,
	464	TCA_FLOWER_KEY_ETH_DST, /* ETH_ALEN */
	465	TCA_FLOWER_KEY_ETH_DST_MASK, /* ETH_ALEN */
	466	TCA_FLOWER_KEY_ETH_SRC, /* ETH_ALEN */
	467	TCA_FLOWER_KEY_ETH_SRC_MASK, /* ETH_ALEN */
	468	TCA_FLOWER_KEY_ETH_TYPE, /* be16 */
	469	TCA_FLOWER_KEY_IP_PROTO, /* u8 */
	470	TCA_FLOWER_KEY_IPV4_SRC, /* be32 */
	471	TCA_FLOWER_KEY_IPV4_SRC_MASK, /* be32 */
	472	TCA_FLOWER_KEY_IPV4_DST, /* be32 */
	473	TCA_FLOWER_KEY_IPV4_DST_MASK, /* be32 */
	474	TCA_FLOWER_KEY_IPV6_SRC, /* struct in6_addr */
	475	TCA_FLOWER_KEY_IPV6_SRC_MASK, /* struct in6_addr */
	476	TCA_FLOWER_KEY_IPV6_DST, /* struct in6_addr */
	477	TCA_FLOWER_KEY_IPV6_DST_MASK, /* struct in6_addr */
	478	TCA_FLOWER_KEY_TCP_SRC, /* be16 */
	479	TCA_FLOWER_KEY_TCP_DST, /* be16 */
	480	TCA_FLOWER_KEY_UDP_SRC, /* be16 */
	481	TCA_FLOWER_KEY_UDP_DST, /* be16 */
b7e0091a SH	482
b7e0091a SH	483	TCA_FLOWER_FLAGS,
e8a67bc4 SH	484	TCA_FLOWER_KEY_VLAN_ID, /* be16 */
	485	TCA_FLOWER_KEY_VLAN_PRIO, /* u8 */
	486	TCA_FLOWER_KEY_VLAN_ETH_TYPE, /* be16 */
	487
	488	TCA_FLOWER_KEY_ENC_KEY_ID, /* be32 */
	489	TCA_FLOWER_KEY_ENC_IPV4_SRC, /* be32 */
	490	TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK,/* be32 */
	491	TCA_FLOWER_KEY_ENC_IPV4_DST, /* be32 */
	492	TCA_FLOWER_KEY_ENC_IPV4_DST_MASK,/* be32 */
	493	TCA_FLOWER_KEY_ENC_IPV6_SRC, /* struct in6_addr */
	494	TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK,/* struct in6_addr */
	495	TCA_FLOWER_KEY_ENC_IPV6_DST, /* struct in6_addr */
	496	TCA_FLOWER_KEY_ENC_IPV6_DST_MASK,/* struct in6_addr */
	497
	498	TCA_FLOWER_KEY_TCP_SRC_MASK, /* be16 */
	499	TCA_FLOWER_KEY_TCP_DST_MASK, /* be16 */
	500	TCA_FLOWER_KEY_UDP_SRC_MASK, /* be16 */
	501	TCA_FLOWER_KEY_UDP_DST_MASK, /* be16 */
1a97748b SH	502	TCA_FLOWER_KEY_SCTP_SRC_MASK, /* be16 */
	503	TCA_FLOWER_KEY_SCTP_DST_MASK, /* be16 */
	504
	505	TCA_FLOWER_KEY_SCTP_SRC, /* be16 */
	506	TCA_FLOWER_KEY_SCTP_DST, /* be16 */
	507
	508	TCA_FLOWER_KEY_ENC_UDP_SRC_PORT, /* be16 */
	509	TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK, /* be16 */
	510	TCA_FLOWER_KEY_ENC_UDP_DST_PORT, /* be16 */
	511	TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK, /* be16 */
3dd0bb51 SH	512
	513	TCA_FLOWER_KEY_FLAGS, /* be32 */
	514	TCA_FLOWER_KEY_FLAGS_MASK, /* be32 */
	515
	516	TCA_FLOWER_KEY_ICMPV4_CODE, /* u8 */
	517	TCA_FLOWER_KEY_ICMPV4_CODE_MASK,/* u8 */
	518	TCA_FLOWER_KEY_ICMPV4_TYPE, /* u8 */
	519	TCA_FLOWER_KEY_ICMPV4_TYPE_MASK,/* u8 */
	520	TCA_FLOWER_KEY_ICMPV6_CODE, /* u8 */
	521	TCA_FLOWER_KEY_ICMPV6_CODE_MASK,/* u8 */
	522	TCA_FLOWER_KEY_ICMPV6_TYPE, /* u8 */
	523	TCA_FLOWER_KEY_ICMPV6_TYPE_MASK,/* u8 */
	524
e2ade8ce SH	525	TCA_FLOWER_KEY_ARP_SIP, /* be32 */
	526	TCA_FLOWER_KEY_ARP_SIP_MASK, /* be32 */
	527	TCA_FLOWER_KEY_ARP_TIP, /* be32 */
	528	TCA_FLOWER_KEY_ARP_TIP_MASK, /* be32 */
	529	TCA_FLOWER_KEY_ARP_OP, /* u8 */
	530	TCA_FLOWER_KEY_ARP_OP_MASK, /* u8 */
	531	TCA_FLOWER_KEY_ARP_SHA, /* ETH_ALEN */
	532	TCA_FLOWER_KEY_ARP_SHA_MASK, /* ETH_ALEN */
	533	TCA_FLOWER_KEY_ARP_THA, /* ETH_ALEN */
	534	TCA_FLOWER_KEY_ARP_THA_MASK, /* ETH_ALEN */
	535
7ff1fce5 SH	536	TCA_FLOWER_KEY_MPLS_TTL, /* u8 - 8 bits */
	537	TCA_FLOWER_KEY_MPLS_BOS, /* u8 - 1 bit */
	538	TCA_FLOWER_KEY_MPLS_TC, /* u8 - 3 bits */
	539	TCA_FLOWER_KEY_MPLS_LABEL, /* be32 - 20 bits */
	540
0071f3d0 SH	541	TCA_FLOWER_KEY_TCP_FLAGS, /* be16 */
	542	TCA_FLOWER_KEY_TCP_FLAGS_MASK, /* be16 */
	543
d9bcafb4 SH	544	TCA_FLOWER_KEY_IP_TOS, /* u8 */
	545	TCA_FLOWER_KEY_IP_TOS_MASK, /* u8 */
	546	TCA_FLOWER_KEY_IP_TTL, /* u8 */
	547	TCA_FLOWER_KEY_IP_TTL_MASK, /* u8 */
	548
3eebc1d4 DA	549	TCA_FLOWER_KEY_CVLAN_ID, /* be16 */
	550	TCA_FLOWER_KEY_CVLAN_PRIO, /* u8 */
	551	TCA_FLOWER_KEY_CVLAN_ETH_TYPE, /* be16 */
	552
204db84e DA	553	TCA_FLOWER_KEY_ENC_IP_TOS, /* u8 */
	554	TCA_FLOWER_KEY_ENC_IP_TOS_MASK, /* u8 */
	555	TCA_FLOWER_KEY_ENC_IP_TTL, /* u8 */
	556	TCA_FLOWER_KEY_ENC_IP_TTL_MASK, /* u8 */
	557
74eb09ad DA	558	TCA_FLOWER_KEY_ENC_OPTS,
	559	TCA_FLOWER_KEY_ENC_OPTS_MASK,
	560
d9c0be4e DA	561	TCA_FLOWER_IN_HW_COUNT,
d9c0be4e DA	562
8d42678d DA	563	TCA_FLOWER_KEY_PORT_SRC_MIN, /* be16 */
	564	TCA_FLOWER_KEY_PORT_SRC_MAX, /* be16 */
	565	TCA_FLOWER_KEY_PORT_DST_MIN, /* be16 */
	566	TCA_FLOWER_KEY_PORT_DST_MAX, /* be16 */
	567
01db6c41 DA	568	TCA_FLOWER_KEY_CT_STATE, /* u16 */
	569	TCA_FLOWER_KEY_CT_STATE_MASK, /* u16 */
	570	TCA_FLOWER_KEY_CT_ZONE, /* u16 */
	571	TCA_FLOWER_KEY_CT_ZONE_MASK, /* u16 */
	572	TCA_FLOWER_KEY_CT_MARK, /* u32 */
	573	TCA_FLOWER_KEY_CT_MARK_MASK, /* u32 */
	574	TCA_FLOWER_KEY_CT_LABELS, /* u128 */
	575	TCA_FLOWER_KEY_CT_LABELS_MASK, /* u128 */
	576
8f42ceaf SH	577	__TCA_FLOWER_MAX,
	578	};
	579
	580	#define TCA_FLOWER_MAX (__TCA_FLOWER_MAX - 1)
	581
01db6c41 DA	582	enum {
	583	TCA_FLOWER_KEY_CT_FLAGS_NEW = 1 << 0, /* Beginning of a new connection. */
	584	TCA_FLOWER_KEY_CT_FLAGS_ESTABLISHED = 1 << 1, /* Part of an existing connection. */
	585	TCA_FLOWER_KEY_CT_FLAGS_RELATED = 1 << 2, /* Related to an established connection. */
	586	TCA_FLOWER_KEY_CT_FLAGS_TRACKED = 1 << 3, /* Conntrack has occurred. */
	587	};
	588
74eb09ad DA	589	enum {
	590	TCA_FLOWER_KEY_ENC_OPTS_UNSPEC,
	591	TCA_FLOWER_KEY_ENC_OPTS_GENEVE, /* Nested
	592	* TCA_FLOWER_KEY_ENC_OPT_GENEVE_
	593	* attributes
	594	*/
7438afd2 DA	595	TCA_FLOWER_KEY_ENC_OPTS_VXLAN, /* Nested
	596	* TCA_FLOWER_KEY_ENC_OPT_VXLAN_
	597	* attributes
	598	*/
	599	TCA_FLOWER_KEY_ENC_OPTS_ERSPAN, /* Nested
	600	* TCA_FLOWER_KEY_ENC_OPT_ERSPAN_
	601	* attributes
	602	*/
74eb09ad DA	603	__TCA_FLOWER_KEY_ENC_OPTS_MAX,
	604	};
	605
	606	#define TCA_FLOWER_KEY_ENC_OPTS_MAX (__TCA_FLOWER_KEY_ENC_OPTS_MAX - 1)
	607
	608	enum {
	609	TCA_FLOWER_KEY_ENC_OPT_GENEVE_UNSPEC,
	610	TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS, /* u16 */
	611	TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE, /* u8 */
	612	TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA, /* 4 to 128 bytes */
	613
	614	__TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX,
	615	};
	616
	617	#define TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX \
	618	(__TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX - 1)
	619
7438afd2 DA	620	enum {
	621	TCA_FLOWER_KEY_ENC_OPT_VXLAN_UNSPEC,
	622	TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP, /* u32 */
	623	__TCA_FLOWER_KEY_ENC_OPT_VXLAN_MAX,
	624	};
	625
	626	#define TCA_FLOWER_KEY_ENC_OPT_VXLAN_MAX \
	627	(__TCA_FLOWER_KEY_ENC_OPT_VXLAN_MAX - 1)
	628
	629	enum {
	630	TCA_FLOWER_KEY_ENC_OPT_ERSPAN_UNSPEC,
	631	TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER, /* u8 */
	632	TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX, /* be32 */
	633	TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR, /* u8 */
	634	TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID, /* u8 */
	635	__TCA_FLOWER_KEY_ENC_OPT_ERSPAN_MAX,
	636	};
	637
	638	#define TCA_FLOWER_KEY_ENC_OPT_ERSPAN_MAX \
	639	(__TCA_FLOWER_KEY_ENC_OPT_ERSPAN_MAX - 1)
	640
3dd0bb51 SH	641	enum {
3dd0bb51 SH	642	TCA_FLOWER_KEY_FLAGS_IS_FRAGMENT = (1 << 0),
4de0a06b	643	TCA_FLOWER_KEY_FLAGS_FRAG_IS_FIRST = (1 << 1),
3dd0bb51 SH	644	};
3dd0bb51 SH	645
8d42678d DA	646	#define TCA_FLOWER_MASK_FLAGS_RANGE (1 << 0) /* Range-based match */
8d42678d DA	647
dc00db9e SH	648	/* Match-all classifier */
dc00db9e SH	649
dad02ef4 DA	650	struct tc_matchall_pcnt {
	651	__u64 rhit;
	652	};
	653
dc00db9e SH	654	enum {
	655	TCA_MATCHALL_UNSPEC,
	656	TCA_MATCHALL_CLASSID,
	657	TCA_MATCHALL_ACT,
	658	TCA_MATCHALL_FLAGS,
dad02ef4 DA	659	TCA_MATCHALL_PCNT,
dad02ef4 DA	660	TCA_MATCHALL_PAD,
dc00db9e SH	661	__TCA_MATCHALL_MAX,
	662	};
	663
	664	#define TCA_MATCHALL_MAX (__TCA_MATCHALL_MAX - 1)
	665
d639d9d1 SH	666	/* Extended Matches */
d639d9d1 SH	667
ab322673	668	struct tcf_ematch_tree_hdr {
d639d9d1 SH	669	__u16 nmatches;
	670	__u16 progid;
	671	};
	672
ab322673	673	enum {
d639d9d1 SH	674	TCA_EMATCH_TREE_UNSPEC,
	675	TCA_EMATCH_TREE_HDR,
	676	TCA_EMATCH_TREE_LIST,
	677	__TCA_EMATCH_TREE_MAX
	678	};
	679	#define TCA_EMATCH_TREE_MAX (__TCA_EMATCH_TREE_MAX - 1)
	680
ab322673	681	struct tcf_ematch_hdr {
d639d9d1 SH	682	__u16 matchid;
	683	__u16 kind;
	684	__u16 flags;
	685	__u16 pad; /* currently unused */
	686	};
	687
	688	/* 0 1
	689	* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
	690	* +-----------------------+-+-+---+
	691	* \| Unused \|S\|I\| R \|
	692	* +-----------------------+-+-+---+
	693	*
	694	* R(2) ::= relation to next ematch
	695	* where: 0 0 END (last ematch)
	696	* 0 1 AND
	697	* 1 0 OR
	698	* 1 1 Unused (invalid)
	699	* I(1) ::= invert result
	700	* S(1) ::= simple payload
	701	*/
	702	#define TCF_EM_REL_END 0
	703	#define TCF_EM_REL_AND (1<<0)
	704	#define TCF_EM_REL_OR (1<<1)
	705	#define TCF_EM_INVERT (1<<2)
	706	#define TCF_EM_SIMPLE (1<<3)
	707
	708	#define TCF_EM_REL_MASK 3
	709	#define TCF_EM_REL_VALID(v) (((v) & TCF_EM_REL_MASK) != TCF_EM_REL_MASK)
	710
ab322673	711	enum {
d639d9d1 SH	712	TCF_LAYER_LINK,
	713	TCF_LAYER_NETWORK,
	714	TCF_LAYER_TRANSPORT,
	715	__TCF_LAYER_MAX
	716	};
	717	#define TCF_LAYER_MAX (__TCF_LAYER_MAX - 1)
	718
	719	/* Ematch type assignments
	720	* 1..32767 Reserved for ematches inside kernel tree
	721	* 32768..65535 Free to use, not reliable
	722	*/
a6ffa8b0 SH	723	#define TCF_EM_CONTAINER 0
	724	#define TCF_EM_CMP 1
	725	#define TCF_EM_NBYTE 2
	726	#define TCF_EM_U32 3
	727	#define TCF_EM_META 4
	728	#define TCF_EM_TEXT 5
a564b709 SH	729	#define TCF_EM_VLAN 6
	730	#define TCF_EM_CANID 7
	731	#define TCF_EM_IPSET 8
02ffee14 DA	732	#define TCF_EM_IPT 9
02ffee14 DA	733	#define TCF_EM_MAX 9
d639d9d1	734
ab322673	735	enum {
d639d9d1 SH	736	TCF_EM_PROG_TC
	737	};
	738
ab322673	739	enum {
d639d9d1 SH	740	TCF_EM_OPND_EQ,
	741	TCF_EM_OPND_GT,
	742	TCF_EM_OPND_LT
	743	};
	744
68d5ba54	745	#endif